mirror of
https://github.com/thefeli73/polemos.git
synced 2024-05-07 18:20:08 +02:00
138 lines
3.3 KiB
Go
138 lines
3.3 KiB
Go
package main
|
|
|
|
import (
|
|
"fmt"
|
|
"net/netip"
|
|
"time"
|
|
|
|
"github.com/google/uuid"
|
|
"github.com/thefeli73/polemos/mtdaws"
|
|
"github.com/thefeli73/polemos/pcsdk"
|
|
"github.com/thefeli73/polemos/state"
|
|
)
|
|
|
|
// ConfigPath is a string of the location for the configfile
|
|
var ConfigPath string
|
|
|
|
func main() {
|
|
fmt.Println("Starting Polemos")
|
|
|
|
ConfigPath = "config.yaml"
|
|
|
|
// Initialize the config.Services map
|
|
var config state.Config
|
|
config.MTD.Services = make(map[state.CustomUUID]state.Service)
|
|
|
|
config = state.LoadConf(ConfigPath)
|
|
state.SaveConf(ConfigPath, config)
|
|
|
|
|
|
config = indexAllInstances(config)
|
|
state.SaveConf(ConfigPath, config)
|
|
|
|
// CREATE TUNNELS
|
|
createTunnels(config)
|
|
|
|
// START DOING MTD
|
|
mtdLoop(config)
|
|
}
|
|
|
|
func mtdLoop(config state.Config) {
|
|
for true {
|
|
//TODO: figure out migration (MTD)
|
|
config = movingTargetDefense(config)
|
|
state.SaveConf(ConfigPath, config)
|
|
|
|
fmt.Println("Sleeping for 1 minute")
|
|
time.Sleep(1*time.Minute)
|
|
|
|
//TODO: proxy commands
|
|
}
|
|
}
|
|
|
|
func movingTargetDefense(config state.Config) state.Config{
|
|
|
|
mtdaws.AWSMoveInstance(config)
|
|
return config
|
|
}
|
|
|
|
func indexAllInstances(config state.Config) state.Config {
|
|
fmt.Println("Indexing instances")
|
|
t := time.Now()
|
|
|
|
for _, service := range config.MTD.Services {
|
|
service.Active = false
|
|
}
|
|
|
|
//index AWS instances
|
|
awsNewInstanceCounter := 0
|
|
awsInactiveInstanceCounter := len(config.MTD.Services)
|
|
awsInstanceCounter := 0
|
|
awsInstances := mtdaws.GetInstances(config)
|
|
for _, instance := range awsInstances {
|
|
cloudID := mtdaws.GetCloudID(instance)
|
|
ip, err := netip.ParseAddr(instance.PublicIP)
|
|
if err != nil {
|
|
fmt.Println("Error converting ip:\t", err)
|
|
continue
|
|
}
|
|
var found bool
|
|
config, found = indexInstance(config, cloudID, ip)
|
|
if !found {
|
|
awsNewInstanceCounter++
|
|
} else {
|
|
awsInactiveInstanceCounter--
|
|
}
|
|
awsInstanceCounter++
|
|
}
|
|
// TODO: Purge instances in config that are not found in the cloud
|
|
fmt.Printf("Found %d active AWS instances (%d newly added, %d inactive) (took %s)\n",
|
|
awsInstanceCounter, awsNewInstanceCounter, awsInactiveInstanceCounter, time.Since(t).Round(100*time.Millisecond).String())
|
|
|
|
|
|
return config
|
|
}
|
|
|
|
func createTunnels(config state.Config) {
|
|
for serviceUUID, service := range config.MTD.Services {
|
|
if service.AdminEnabled && service.Active {
|
|
proxy := pcsdk.BuildProxy(netip.AddrPortFrom(service.EntryIP, config.MTD.ManagementPort))
|
|
err := proxy.Status()
|
|
if err != nil {
|
|
continue
|
|
}
|
|
// Reconfigure Proxy to new instance
|
|
err = proxy.Create(service.EntryPort, service.ServicePort, service.ServiceIP, serviceUUID)
|
|
if err != nil {
|
|
continue
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
func indexInstance(config state.Config, cloudID string, serviceIP netip.Addr) (state.Config, bool) {
|
|
found := false
|
|
var foundUUID state.CustomUUID
|
|
for u, service := range config.MTD.Services {
|
|
if service.CloudID == cloudID {
|
|
found = true
|
|
foundUUID = u
|
|
break;
|
|
}
|
|
}
|
|
|
|
if !found {
|
|
fmt.Println("New instance found:\t", cloudID)
|
|
u := uuid.New()
|
|
config.MTD.Services[state.CustomUUID(u)] = state.Service{CloudID: cloudID, ServiceIP: serviceIP, Active: true, AdminEnabled: true}
|
|
state.SaveConf(ConfigPath, config)
|
|
|
|
} else {
|
|
s := config.MTD.Services[foundUUID]
|
|
s.Active = true
|
|
config.MTD.Services[foundUUID] = s
|
|
state.SaveConf(ConfigPath, config)
|
|
}
|
|
return config, found
|
|
}
|