![$ curl -s -X GET http://192.0.2.100:8000/nodes/ | jq .
[
{
"name": "CiscoNexus001",
"addr": "192.0.2.201:22"
},
{
"name": "CiscoNexus002",
"addr": "192.0.2.202:22"
}
]](https://image.slidesharecdn.com/netopscoding4yjuba-161025004005/85/SSH-Telnet-7-320.jpg)
![$ curl -s -X POST -d '{"commands": ["sh run int mgmt0"]}'
http://192.0.2.100:8000/nodes/CiscoNexus001 | jq .
[
{
"target": "CiscoNexus001",
"command": "sh run int mgmt0",
"result": [
"sh run int mgmt0¥r",
"",
"!Command: show running-config interface mgmt0",
"!Time: Wed Oct 19 11:58:09 2016",
"",
"version 7.0(3)I2(2)",
"",
"interface mgmt0",
" vrf member management",
" ip address 192.0.2.201/24"
]
}
]](https://image.slidesharecdn.com/netopscoding4yjuba-161025004005/85/SSH-Telnet-8-320.jpg)
![$ cat config.toml
[global]
timeout = "3000ms"
user = “user"
password = “passwd"
enable = “enpasswd“
[nodes]
[nodes.CiscoNexus001]
addr = "192.0.2.201:22"
suffix = "CiscoNexus001# $"
pager = "terminal length 0"
[nodes.CiscoNexus002]
addr = “192.0.2.202:22"
suffix = "CiscoNexus002# $"
pager = "terminal length 0"
cmd_white_list = [
“show version”
]](https://image.slidesharecdn.com/netopscoding4yjuba-161025004005/85/SSH-Telnet-9-320.jpg)
そろそろSSH/Telnetを離れて自動化したい
- 1. そろそろSSH/Telnetを離れて 自動化したい NetOpsCoding#4 株式会社サイバーエージェント 技術本部 サービスファシリティグループ DCソリューション 十場 裕 CyberAgent, Inc. All Rights Reserved
- 2. 自己紹介 氏名: 十場 裕 仕事: NWエンジニア +α 実質的には何でも屋 Slack: yjuba
- 3. 以下のコマンドは好きですか? - SSH - Telnet - Clogin (RANCID) - Expect 手動で作業する時 自動化する時
- 4. 手動で作業する時 SSH/Telnet 対話型のコマンドで構わない 自動化する時 SSH/Telnet + Expect / Clogin 対話型である必要はない 寧ろ対話したくない
- 6. 実装したもの Mgmt Server Router Switch Firewall Load Balancer User Tool HTTP SSH 類似事例: kooshin氏 ネットワークAPIを試作してみた with Ruby/Rails/Redis/expect http://qiita.com/kooshin/items/21f96c5c32c20a1968a0
- 7. $ curl -s -X GET http://192.0.2.100:8000/nodes/ | jq . [ { "name": "CiscoNexus001", "addr": "192.0.2.201:22" }, { "name": "CiscoNexus002", "addr": "192.0.2.202:22" } ]
- 8. $ curl -s -X POST -d '{"commands": ["sh run int mgmt0"]}' http://192.0.2.100:8000/nodes/CiscoNexus001 | jq . [ { "target": "CiscoNexus001", "command": "sh run int mgmt0", "result": [ "sh run int mgmt0¥r", "", "!Command: show running-config interface mgmt0", "!Time: Wed Oct 19 11:58:09 2016", "", "version 7.0(3)I2(2)", "", "interface mgmt0", " vrf member management", " ip address 192.0.2.201/24" ] } ]
- 9. $ cat config.toml [global] timeout = "3000ms" user = “user" password = “passwd" enable = “enpasswd“ [nodes] [nodes.CiscoNexus001] addr = "192.0.2.201:22" suffix = "CiscoNexus001# $" pager = "terminal length 0" [nodes.CiscoNexus002] addr = “192.0.2.202:22" suffix = "CiscoNexus002# $" pager = "terminal length 0" cmd_white_list = [ “show version” ]
- 10. Mgmt Server (仮称) 実装済みの機能 - コマンド実行順序の保証 - 実行可能なコマンドの制限 (ホワイトリスト) - SSHセッションの使い回し - コマンド実行履歴の保存 実装予定の機能 - 実行可能なコマンドの制限 (ブラックリスト) - コマンド制限の正規表現対応