From 58833aa2df97ba93a9512f3b0c428cf558fa2235 Mon Sep 17 00:00:00 2001 From: danrl Date: Thu, 16 Feb 2017 19:40:26 +0100 Subject: [PATCH] luci-app-wireguard: initial commit This application allows for monitoring of WireGuard interfaces via the Status menu. Signed-off-by: Dan Luedtke --- applications/luci-app-wireguard/Makefile | 17 ++ .../luasrc/controller/wireguard.lua | 8 + .../luasrc/view/wireguard.htm | 280 ++++++++++++++++++ 3 files changed, 305 insertions(+) create mode 100644 applications/luci-app-wireguard/Makefile create mode 100644 applications/luci-app-wireguard/luasrc/controller/wireguard.lua create mode 100644 applications/luci-app-wireguard/luasrc/view/wireguard.htm diff --git a/applications/luci-app-wireguard/Makefile b/applications/luci-app-wireguard/Makefile new file mode 100644 index 000000000..2ca3e7e58 --- /dev/null +++ b/applications/luci-app-wireguard/Makefile @@ -0,0 +1,17 @@ +# +# Copyright (C) 2016-2017 Dan Luedtke +# +# This is free software, licensed under the Apache License, Version 2.0 . +# + +include $(TOPDIR)/rules.mk + +LUCI_TITLE:=WireGuard Status +LUCI_DEPENDS:=+wireguard +LUCI_PKGARCH:=all + +PKG_MAINTAINER:=Dan Luedtke + +include ../../luci.mk + +# call BuildPackage - OpenWrt buildroot signature diff --git a/applications/luci-app-wireguard/luasrc/controller/wireguard.lua b/applications/luci-app-wireguard/luasrc/controller/wireguard.lua new file mode 100644 index 000000000..68a82fe5c --- /dev/null +++ b/applications/luci-app-wireguard/luasrc/controller/wireguard.lua @@ -0,0 +1,8 @@ +-- Copyright 2016-2017 Dan Luedtke +-- Licensed to the public under the Apache License 2.0. + +module("luci.controller.wireguard", package.seeall) + +function index() + entry({"admin", "status", "wireguard"}, template("wireguard"), _("WireGuard Status"), 92) +end diff --git a/applications/luci-app-wireguard/luasrc/view/wireguard.htm b/applications/luci-app-wireguard/luasrc/view/wireguard.htm new file mode 100644 index 000000000..5a7798587 --- /dev/null +++ b/applications/luci-app-wireguard/luasrc/view/wireguard.htm @@ -0,0 +1,280 @@ +<%# + Copyright 2016-2017 Dan Luedtke + Licensed to the public under the Apache License 2.0. +-%> + +<% + function strip(s) + return (s:gsub("^%s*(.-)%s*$", "%1")) + end + + function is_valid(s) + return (string.len(strip(s)) > 0) + end + + function peer_add(peers, public_key) + table.insert(peers, { + public_key = public_key, + endpoint = "", + transfer_rx = 0, + transfer_tx = 0, + latest_handshake = -1, + persistent_keepalive = "", + allowed_ips = { } + }) + end + + function peer_set_transfer(peers, public_key, rx, tx) + for key, peer in pairs(peers) do + if peer.public_key == public_key then + peers[key].transfer_rx = rx + peers[key].transfer_tx = tx + break + end + end + end + + function peer_set_latest_handshake(peers, public_key, latest_handshake) + for key, peer in pairs(peers) do + if peer.public_key == public_key then + peers[key].latest_handshake = latest_handshake + break + end + end + end + + function peer_set_endpoint(peers, public_key, endpoint) + for key, peer in pairs(peers) do + if peer.public_key == public_key then + peers[key].endpoint = endpoint + break + end + end + end + + function peer_set_persistent_keepalive(peers, public_key, persistent_keepalive) + for key, peer in pairs(peers) do + if peer.public_key == public_key then + peers[key].persistent_keepalive = persistent_keepalive + break + end + end + end + + function peer_set_allowed_ips(peers, public_key, allowed_ips) + for key, peer in pairs(peers) do + if peer.public_key == public_key then + for ipkey, ipvalue in pairs(string.split(allowed_ips, " ")) do + if is_valid(ipvalue) then + table.insert(peers[key].allowed_ips, strip(ipvalue)) + end + end + break + end + end + end + + local data = { } + + local wg_ifaces = luci.sys.exec("wg show interfaces") + for key, name in pairs(string.split(wg_ifaces, "\n")) do + if not is_valid(name) then break end + name = strip(name) + local public_key = luci.sys.exec("wg show \"" .. name .. "\" public-key") + local listening_port = luci.sys.exec("wg show \"" .. name .. "\" listen-port") + + local peers = { } + local wg_peers = luci.sys.exec("wg show \"" .. name .. "\" peers") + for key, public_key in pairs(string.split(wg_peers, "\n")) do + if not is_valid(public_key) then break end + peer_add(peers, public_key) + end + + local wg_endpoints = luci.sys.exec("wg show \"" .. name .. "\" endpoints") + for key, endpoint in pairs(string.split(wg_endpoints, "\n")) do + if not is_valid(endpoint) then break end + local ln = string.split(strip(endpoint), "\t") + peer_set_endpoint(peers, ln[1], strip(ln[2])) + end + + local wg_allowed_ips = luci.sys.exec("wg show \"" .. name .. "\" allowed-ips") + for key, allowed_ips in pairs(string.split(wg_allowed_ips, "\n")) do + if not is_valid(allowed_ips) then break end + local ln = string.split(strip(allowed_ips), "\t", 2) + peer_set_allowed_ips(peers, ln[1], strip(ln[2])) + end + + local wg_persistent_keepalives = luci.sys.exec("wg show \"" .. name .. "\" persistent-keepalive") + for key, persistent_keepalive in pairs(string.split(wg_persistent_keepalives, "\n")) do + if not is_valid(persistent_keepalive) then break end + local ln = string.split(strip(persistent_keepalive), "\t") + peer_set_persistent_keepalive(peers, strip(ln[1]), strip(ln[2])) + end + + local wg_latest_handshakes = luci.sys.exec("wg show \"" .. name .. "\" latest-handshakes") + for key, latest_handshake in pairs(string.split(wg_latest_handshakes, "\n")) do + if not is_valid(latest_handshake) then break end + local ln = string.split(strip(latest_handshake), "\t") + peer_set_latest_handshake(peers, strip(ln[1]), tonumber(ln[2])) + end + + local wg_transfers = luci.sys.exec("wg show \"" .. name .. "\" transfer") + for key, transfer in pairs(string.split(wg_transfers, "\n")) do + if not is_valid(transfer) then break end + local ln = string.split(strip(transfer), "\t") + peer_set_transfer(peers, ln[1], strip(ln[2]), strip(ln[3])) + end + + table.insert(data, { + name = name, + public_key = strip(public_key), + listening_port = tonumber(strip(listening_port)), + peers = peers + }) + end + + if luci.http.formvalue("status") == "1" then + luci.http.prepare_content("application/json") + luci.http.write_json(data) + return + end +-%> + +<%+header%> + + + + +

WireGuard Status

+ + +
+<%- +for key, iface in pairs(data) do + local ifid = iface.public_key .. "_" + -%> + <%:Interface%> <%=iface.name%> + + + + + + <%- + for key, peer in pairs(iface.peers) do + local pid = ifid .. peer.public_key .. "_" + -%> + + + + + <%- + end + -%> +
<%:Configuration%> + + + + +
+   + + <%:Collecting data...%> +
+
<%:Peer%> + + + + +
+
+ ? + 		+ <%:Collecting data...%> +
+
+ <%- +end +-%> +
+ +<%+footer%> -- 2.25.1