mirror of
https://github.com/tailscale/tailscale.git
synced 2024-12-04 23:45:34 +00:00
3a635db06e
connector-gen can initially generate connector ACL snippets and advertise-routes flags for Github and AWS based on their public IP / domain data. Updates ENG-2425 Signed-off-by: James Tucker <james@tailscale.com>
69 lines
1.5 KiB
Go
69 lines
1.5 KiB
Go
// Copyright (c) Tailscale Inc & AUTHORS
|
|
// SPDX-License-Identifier: BSD-3-Clause
|
|
|
|
package main
|
|
|
|
import (
|
|
"encoding/json"
|
|
"fmt"
|
|
"log"
|
|
"net/http"
|
|
"net/netip"
|
|
|
|
"go4.org/netipx"
|
|
)
|
|
|
|
// See https://docs.aws.amazon.com/vpc/latest/userguide/aws-ip-ranges.html
|
|
|
|
type AWSMeta struct {
|
|
SyncToken string `json:"syncToken"`
|
|
CreateDate string `json:"createDate"`
|
|
Prefixes []struct {
|
|
IPPrefix string `json:"ip_prefix"`
|
|
Region string `json:"region"`
|
|
Service string `json:"service"`
|
|
NetworkBorderGroup string `json:"network_border_group"`
|
|
} `json:"prefixes"`
|
|
Ipv6Prefixes []struct {
|
|
Ipv6Prefix string `json:"ipv6_prefix"`
|
|
Region string `json:"region"`
|
|
Service string `json:"service"`
|
|
NetworkBorderGroup string `json:"network_border_group"`
|
|
} `json:"ipv6_prefixes"`
|
|
}
|
|
|
|
func aws() {
|
|
r, err := http.Get("https://ip-ranges.amazonaws.com/ip-ranges.json")
|
|
if err != nil {
|
|
log.Fatal(err)
|
|
}
|
|
defer r.Body.Close()
|
|
|
|
var aws AWSMeta
|
|
if err := json.NewDecoder(r.Body).Decode(&aws); err != nil {
|
|
log.Fatal(err)
|
|
}
|
|
|
|
var ips netipx.IPSetBuilder
|
|
|
|
for _, prefix := range aws.Prefixes {
|
|
ips.AddPrefix(netip.MustParsePrefix(prefix.IPPrefix))
|
|
}
|
|
for _, prefix := range aws.Ipv6Prefixes {
|
|
ips.AddPrefix(netip.MustParsePrefix(prefix.Ipv6Prefix))
|
|
}
|
|
|
|
set, err := ips.IPSet()
|
|
if err != nil {
|
|
log.Fatal(err)
|
|
}
|
|
|
|
fmt.Println(`"routes": [`)
|
|
for _, pfx := range set.Prefixes() {
|
|
fmt.Printf(`"%s": ["tag:connector"],%s`, pfx.String(), "\n")
|
|
}
|
|
fmt.Println(`]`)
|
|
|
|
advertiseRoutes(set)
|
|
}
|