lib for network - calculation

lazy.dogtown · 2014-11-12T23:34:05+00:00

Hello! On Tue, Nov 11, 2014 at 10:06 AM, Dragos Dascalita Haut wrote: > I'm wondering if there's a significant difference in performance between the >...

lib for network - calculation

lazy.dogtown

Hi list,


i'm looking for a lua-lib for network-calculation. namely i'm looking
for a function
to check if a given ip is part of a given cidr, without iterating through all
possibe ips.

if check_ip_in_cidr(ip, cidr) then
  ...
end


i found this so far,
http://luci.subsignal.org/trac/browser/luci/trunk/libs/core/luasrc/ip.lua?rev=6880
but am not quite happy; using nmaps nselib is not a solution either.

up to now i'm using

geo $cwl {
    default 0;
    include conf.d/my_cidrs.txt;

}

and then i evaluate the VAR from within lua:

if ngx.var.cwl == "1" then
  log("whitelisted")
  return
end




thanx in advance,

mex

hamish.forbes

I have some code that just uses the LuaJIT bit op functions (http://bitop.luajit.org/) to do some of this stuff.

It's been running in production for a while so its reasonably stable, I could try and split it out into a lua-resty-iputils module or something if theres interest?

Hamish

On Wednesday, 12 November 2014 15:34:06 UTC, mex wrote:

Hi list,

i'm looking for a lua-lib for network-calculation. namely i'm looking
for a function
to check if a given ip is part of a given cidr, without iterating through all
possibe ips.

if check_ip_in_cidr(ip, cidr) then
...
end

i found this so far,
http://luci.subsignal.org/trac/browser/luci/trunk/libs/core/luasrc/ip.lua?rev=6880
but am not quite happy; using nmaps nselib is not a solution either.

up to now i'm using

geo $cwl {
default 0;
include conf.d/my_cidrs.txt;

}

and then i evaluate the VAR from within lua:

if ngx.var.cwl == "1" then
log("whitelisted")
return
end

thanx in advance,

mex

lordnynex

I would definately be interested in this library. Currently I re-implement some of nselib's functionality to do this, but I am not happy with it. I look forward to checking it out.

On Thu, Nov 13, 2014 at 2:34 AM, Hamish Forbes <hamish...@gmail.com> wrote:

I have some code that just uses the LuaJIT bit op functions (http://bitop.luajit.org/) to do some of this stuff.
It's been running in production for a while so its reasonably stable, I could try and split it out into a lua-resty-iputils module or something if theres interest?

Hamish

On Wednesday, 12 November 2014 15:34:06 UTC, mex wrote:
Hi list,

i'm looking for a lua-lib for network-calculation. namely i'm looking
for a function
to check if a given ip is part of a given cidr, without iterating through all
possibe ips.

if check_ip_in_cidr(ip, cidr) then
...
end

i found this so far,
http://luci.subsignal.org/trac/browser/luci/trunk/libs/core/luasrc/ip.lua?rev=6880
but am not quite happy; using nmaps nselib is not a solution either.

up to now i'm using

geo $cwl {
default 0;
include conf.d/my_cidrs.txt;

}

and then i evaluate the VAR from within lua:

if ngx.var.cwl == "1" then
log("whitelisted")
return
end

thanx in advance,

mex

.

lazy.dogtown

Hi Hamish,

> I could try and split it out into a lua-resty-iputils module or something if
> theres interest?
>
> Hamish
>

that would be great!.


cheers,

mex

akunz


Hello Hamish,

i am also intrested in your iputil lua-resty module.

Thanks in advance.

Alexander


Am 13.11.2014 11:34, schrieb Hamish Forbes:

I have some code that just uses the LuaJIT bit op functions
(http://bitop.luajit.org/) to do some of this stuff.
It's been running in production for a while so its reasonably stable, I
could try and split it out into a lua-resty-iputils module or something
if theres interest?

Hamish

On Wednesday, 12 November 2014 15:34:06 UTC, mex wrote:

    Hi list,


    i'm looking for a lua-lib for network-calculation. namely i'm looking
    for a function
    to check if a given ip is part of a given cidr, without iterating
    through all
    possibe ips.

    if check_ip_in_cidr(ip, cidr) then
       ...
    end


    i found this so far,
    http://luci.subsignal.org/trac/browser/luci/trunk/libs/core/luasrc/ip.lua?rev=6880
    <http://luci.subsignal.org/trac/browser/luci/trunk/libs/core/luasrc/ip.lua?rev=6880>

    but am not quite happy; using nmaps nselib is not a solution either.

    up to now i'm using

    geo $cwl {
         default 0;
         include conf.d/my_cidrs.txt;

    }

    and then i evaluate the VAR from within lua:

    if ngx.var.cwl == "1" then
       log("whitelisted")
       return
    end




    thanx in advance,

    mex.




--

Mit freundlichen Grüßen
Alexander Kunz

WISHMEDIA GmbH
Kopernikusstr. 4
D-65232 Taunusstein

http://www.wishmedia.de

Tel: +49-6128-973797
Fax: +49-6128-973798

E-Mail: ak...@wishmedia.de

Geschäftsführer: Alexander Kunz
Handelsregister: Amtsgericht Wiesbaden, HRB 24125
USt-IdNr.: DE265062989

hamish.forbes

Hi All,

I've pulled most of our code out into a separate module: https://github.com/hamishforbes/lua-resty-iputils

Pretty basic but it should be enough to implement IPv4 ACLs.

There's probably some optimisation that can be done and theres no support for IPv6 ($DAYJOB isn't IPv6 enabled yet so this isn't a priority for us either).

Pull requests more than welcome!

Hamish

On Wednesday, 12 November 2014 15:34:06 UTC, mex wrote:

Hi list,

i'm looking for a lua-lib for network-calculation. namely i'm looking
for a function
to check if a given ip is part of a given cidr, without iterating through all
possibe ips.

if check_ip_in_cidr(ip, cidr) then
...
end

i found this so far,
http://luci.subsignal.org/trac/browser/luci/trunk/libs/core/luasrc/ip.lua?rev=6880
but am not quite happy; using nmaps nselib is not a solution either.

up to now i'm using

geo $cwl {
default 0;
include conf.d/my_cidrs.txt;

}

and then i evaluate the VAR from within lua:

if ngx.var.cwl == "1" then
log("whitelisted")
return
end

thanx in advance,

mex

lazy.dogtown

you, sir won 1000 kudos und internets, great work!

i will put this into a production later next week and report back, if
i find  issues.


cheers,

mex

2014-11-15 17:27 GMT+01:00 Hamish Forbes <hamish...@gmail.com>:
> Hi All,
>
> I've pulled most of our code out into a separate module:
> https://github.com/hamishforbes/lua-resty-iputils
>
> Pretty basic but it should be enough to implement IPv4 ACLs.
>
> There's probably some optimisation that can be done and theres no support
> for IPv6 ($DAYJOB isn't IPv6 enabled yet so this isn't a priority for us
> either).
> Pull requests more than welcome!
>
> Hamish
>
> On Wednesday, 12 November 2014 15:34:06 UTC, mex wrote:
>>
>> Hi list,
>>
>>
>> i'm looking for a lua-lib for network-calculation. namely i'm looking
>> for a function
>> to check if a given ip is part of a given cidr, without iterating through
>> all
>> possibe ips.
>>
>> if check_ip_in_cidr(ip, cidr) then
>>   ...
>> end
>>
>>
>> i found this so far,
>>
>> http://luci.subsignal.org/trac/browser/luci/trunk/libs/core/luasrc/ip.lua?rev=6880
>> but am not quite happy; using nmaps nselib is not a solution either.
>>
>> up to now i'm using
>>
>> geo $cwl {
>>     default 0;
>>     include conf.d/my_cidrs.txt;
>>
>> }
>>
>> and then i evaluate the VAR from within lua:
>>
>> if ngx.var.cwl == "1" then
>>   log("whitelisted")
>>   return
>> end
>>
>>
>>
>>
>> thanx in advance,
>>
>> mex.