+++ /dev/null
-/*
- * Copyright (c) 2014 Cisco Systems, Inc. and others. All rights reserved.
- *
- * This program and the accompanying materials are made available under the
- * terms of the Eclipse Public License v1.0 which accompanies this distribution,
- * and is available at http://www.eclipse.org/legal/epl-v10.html
- */
-
-package org.opendaylight.controller.netconf.ssh;
-
-import com.google.common.collect.Lists;
-import io.netty.channel.EventLoopGroup;
-import java.io.IOException;
-import java.nio.channels.AsynchronousChannelGroup;
-import java.util.HashMap;
-import java.util.Iterator;
-import java.util.List;
-import java.util.Map;
-import java.util.concurrent.ExecutorService;
-import java.util.concurrent.ScheduledExecutorService;
-import java.util.concurrent.TimeUnit;
-import org.apache.sshd.SshServer;
-import org.apache.sshd.common.Cipher;
-import org.apache.sshd.common.FactoryManager;
-import org.apache.sshd.common.NamedFactory;
-import org.apache.sshd.common.RuntimeSshException;
-import org.apache.sshd.common.cipher.ARCFOUR128;
-import org.apache.sshd.common.cipher.ARCFOUR256;
-import org.apache.sshd.common.io.IoAcceptor;
-import org.apache.sshd.common.io.IoConnector;
-import org.apache.sshd.common.io.IoHandler;
-import org.apache.sshd.common.io.IoServiceFactory;
-import org.apache.sshd.common.io.IoServiceFactoryFactory;
-import org.apache.sshd.common.io.nio2.Nio2Acceptor;
-import org.apache.sshd.common.io.nio2.Nio2Connector;
-import org.apache.sshd.common.io.nio2.Nio2ServiceFactoryFactory;
-import org.apache.sshd.common.util.CloseableUtils;
-import org.apache.sshd.server.Command;
-import org.apache.sshd.server.ServerFactoryManager;
-
-/**
- * Proxy SSH server that just delegates decrypted content to a delegate server within same VM.
- * Implemented using Apache Mina SSH lib.
- */
-public class SshProxyServer implements AutoCloseable {
-
- private static final ARCFOUR128.Factory DEFAULT_ARCFOUR128_FACTORY = new ARCFOUR128.Factory();
- private static final ARCFOUR256.Factory DEFAULT_ARCFOUR256_FACTORY = new ARCFOUR256.Factory();
- private final SshServer sshServer;
- private final ScheduledExecutorService minaTimerExecutor;
- private final EventLoopGroup clientGroup;
- private final IoServiceFactoryFactory nioServiceWithPoolFactoryFactory;
-
- public SshProxyServer(final ScheduledExecutorService minaTimerExecutor, final EventLoopGroup clientGroup, final ExecutorService nioExecutor) {
- this.minaTimerExecutor = minaTimerExecutor;
- this.clientGroup = clientGroup;
- this.nioServiceWithPoolFactoryFactory = new NioServiceWithPoolFactory.NioServiceWithPoolFactoryFactory(nioExecutor);
- this.sshServer = SshServer.setUpDefaultServer();
- }
-
- public void bind(final SshProxyServerConfiguration sshProxyServerConfiguration) throws IOException {
- sshServer.setHost(sshProxyServerConfiguration.getBindingAddress().getHostString());
- sshServer.setPort(sshProxyServerConfiguration.getBindingAddress().getPort());
-
- //remove rc4 ciphers
- final List<NamedFactory<Cipher>> cipherFactories = sshServer.getCipherFactories();
- for (Iterator<NamedFactory<Cipher>> i = cipherFactories.iterator(); i.hasNext(); ) {
- final NamedFactory<Cipher> factory = i.next();
- if (factory.getName().contains(DEFAULT_ARCFOUR128_FACTORY.getName())
- || factory.getName().contains(DEFAULT_ARCFOUR256_FACTORY.getName())) {
- i.remove();
- }
- }
- sshServer.setPasswordAuthenticator(sshProxyServerConfiguration.getAuthenticator());
- sshServer.setKeyPairProvider(sshProxyServerConfiguration.getKeyPairProvider());
-
- sshServer.setIoServiceFactoryFactory(nioServiceWithPoolFactoryFactory);
- sshServer.setScheduledExecutorService(minaTimerExecutor);
- sshServer.setProperties(getProperties(sshProxyServerConfiguration));
-
- final RemoteNetconfCommand.NetconfCommandFactory netconfCommandFactory =
- new RemoteNetconfCommand.NetconfCommandFactory(clientGroup, sshProxyServerConfiguration.getLocalAddress());
- sshServer.setSubsystemFactories(Lists.<NamedFactory<Command>>newArrayList(netconfCommandFactory));
- sshServer.start();
- }
-
- private static Map<String, String> getProperties(final SshProxyServerConfiguration sshProxyServerConfiguration) {
- return new HashMap<String, String>()
- {
- {
- put(ServerFactoryManager.IDLE_TIMEOUT, String.valueOf(sshProxyServerConfiguration.getIdleTimeout()));
- // TODO make auth timeout configurable on its own
- put(ServerFactoryManager.AUTH_TIMEOUT, String.valueOf(sshProxyServerConfiguration.getIdleTimeout()));
- }
- };
- }
-
- @Override
- public void close() {
- try {
- sshServer.stop(true);
- } catch (final InterruptedException e) {
- throw new RuntimeException("Interrupted while stopping sshServer", e);
- } finally {
- sshServer.close(true);
- }
- }
-
- /**
- * Based on Nio2ServiceFactory with one addition: injectable executor
- */
- private static final class NioServiceWithPoolFactory extends CloseableUtils.AbstractCloseable implements IoServiceFactory {
-
- private final FactoryManager manager;
- private final AsynchronousChannelGroup group;
-
- public NioServiceWithPoolFactory(final FactoryManager manager, final ExecutorService executor) {
- this.manager = manager;
- try {
- group = AsynchronousChannelGroup.withThreadPool(executor);
- } catch (final IOException e) {
- throw new RuntimeSshException(e);
- }
- }
-
- public IoConnector createConnector(final IoHandler handler) {
- return new Nio2Connector(manager, handler, group);
- }
-
- public IoAcceptor createAcceptor(final IoHandler handler) {
- return new Nio2Acceptor(manager, handler, group);
- }
-
- @Override
- protected void doCloseImmediately() {
- try {
- group.shutdownNow();
- group.awaitTermination(5, TimeUnit.SECONDS);
- } catch (final Exception e) {
- log.debug("Exception caught while closing channel group", e);
- } finally {
- super.doCloseImmediately();
- }
- }
-
- private static final class NioServiceWithPoolFactoryFactory extends Nio2ServiceFactoryFactory {
-
- private final ExecutorService nioExecutor;
-
- private NioServiceWithPoolFactoryFactory(final ExecutorService nioExecutor) {
- this.nioExecutor = nioExecutor;
- }
-
- @Override
- public IoServiceFactory create(final FactoryManager manager) {
- return new NioServiceWithPoolFactory(manager, nioExecutor);
- }
- }
- }
-
-}
Code Review / controller.git / blobdiff