diff --git a/pom.xml b/pom.xml index ab6ba551..bd6a0be8 100644 --- a/pom.xml +++ b/pom.xml @@ -34,6 +34,10 @@ + + org.springframework.boot + spring-boot-starter-undertow + org.apache.tomcat.embed tomcat-embed-core @@ -85,6 +89,7 @@ mysql mysql-connector-java + 8.0.21 @@ -216,20 +221,6 @@ ipaddress 5.2.1 - - org.springframework.boot - spring-boot-starter-web - - - org.springframework.boot - spring-boot-starter-tomcat - - - - - org.springframework.boot - spring-boot-starter-undertow - diff --git a/src/main/java/com/dispose/ability/DisposeAbility.java b/src/main/java/com/dispose/ability/DisposeAbility.java new file mode 100644 index 00000000..4964d101 --- /dev/null +++ b/src/main/java/com/dispose/ability/DisposeAbility.java @@ -0,0 +1,53 @@ +package com.dispose.ability; + +import com.dispose.common.DDoSAttackType; +import com.dispose.common.DisposeCapacityType; +import com.dispose.common.ErrorCode; +import com.dispose.common.NetflowDirection; +import com.dispose.pojo.po.MulReturnType; + +import javax.annotation.Nullable; + +/** + * The interface Dispose ability. + * + * @author + */ +public interface DisposeAbility { + + /** + * Init device env error code. + * + * @param urlPath the url path + * @param username the username + * @param password the password + * @return the error code + */ + ErrorCode initDeviceEnv(String urlPath, String username, String password); + + /** + * Run dispose mul return type. + * + * @param ip the ip + * @param capType the cap type + * @param nfDirection the nf direction + * @param attackType the attack type + * @param duration the duration + * @return the mul return type + */ + MulReturnType runDispose(String ip, DisposeCapacityType capType, + @Nullable NetflowDirection[] nfDirection, + @Nullable DDoSAttackType[] attackType, + @Nullable Long duration); + + /** + * Stop dispose mul return type. + * + * @param ip the ip + * @param capType the cap type + * @return the mul return type + */ + MulReturnType stopDispose(String ip, DisposeCapacityType capType); + + +} diff --git a/src/main/java/com/dispose/ability/impl/DpTechAbilityImpl.java b/src/main/java/com/dispose/ability/impl/DpTechAbilityImpl.java new file mode 100644 index 00000000..947f8c5a --- /dev/null +++ b/src/main/java/com/dispose/ability/impl/DpTechAbilityImpl.java @@ -0,0 +1,144 @@ +package com.dispose.ability.impl; + +import com.dispose.ability.DisposeAbility; +import com.dispose.common.CommonEnumHandler; +import com.dispose.common.DDoSAttackType; +import com.dispose.common.DisposeCapacityType; +import com.dispose.common.DpTechAttackType; +import com.dispose.common.DpTechConfigValue; +import com.dispose.common.ErrorCode; +import com.dispose.common.NetflowDirection; +import com.dispose.pojo.po.MulReturnType; +import com.dptech.dispose.AbnormalFlowCleaningServicePortType; +import lombok.extern.slf4j.Slf4j; +import org.apache.cxf.endpoint.Client; +import org.apache.cxf.frontend.ClientProxy; +import org.apache.cxf.jaxws.JaxWsProxyFactoryBean; +import org.apache.cxf.transport.http.HTTPConduit; +import org.apache.cxf.transports.http.configuration.HTTPClientPolicy; +import org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor; +import org.apache.wss4j.dom.WSConstants; +import org.apache.wss4j.dom.handler.WSHandlerConstants; +import org.springframework.stereotype.Component; + +import javax.annotation.Nullable; +import javax.xml.ws.BindingProvider; +import java.util.Arrays; +import java.util.HashMap; +import java.util.List; +import java.util.Map; +import java.util.concurrent.CompletableFuture; +import java.util.stream.Collectors; + +/** + * The type Dp tech ability. + * + * @author + */ +@Component +@Slf4j +public class DpTechAbilityImpl implements DisposeAbility { + + private AbnormalFlowCleaningServicePortType cleanTypePort; + + @Override + public ErrorCode initDeviceEnv(String urlPath, String username, String password) { + JaxWsProxyFactoryBean jaxWsProxyFactoryBean = new JaxWsProxyFactoryBean(); + jaxWsProxyFactoryBean.setServiceClass(AbnormalFlowCleaningServicePortType.class); + jaxWsProxyFactoryBean.setAddress(urlPath); + + //WS-Security Head + Map outProps = new HashMap<>(); + outProps.put(WSHandlerConstants.ACTION, WSHandlerConstants.USERNAME_TOKEN); + + // 配置用户名，密码类型 + outProps.put(WSHandlerConstants.USER, username); + outProps.put(WSHandlerConstants.PASSWORD_TYPE, WSConstants.PW_TEXT); + + // 添加WSSecure头部验证信息 + jaxWsProxyFactoryBean.getOutInterceptors().add(new WSS4JOutInterceptor(outProps)); + + this.cleanTypePort = (AbnormalFlowCleaningServicePortType) jaxWsProxyFactoryBean.create(); + + Map ctx = ((BindingProvider) this.cleanTypePort).getRequestContext(); + ctx.put("password", username); + ctx.put("username", password); + + // 配置连接，访问超时时间 + Client proxy = ClientProxy.getClient(this.cleanTypePort); + HTTPConduit conduit = (HTTPConduit) proxy.getConduit(); + HTTPClientPolicy policy = new HTTPClientPolicy(); + // 请求超时 + policy.setConnectionTimeout(DpTechConfigValue.SOAP_CONNECT_TIMEOUT_SECOND); + //读取超时 + policy.setReceiveTimeout(DpTechConfigValue.SOAP_RECEIVE_TIMEOUT_SECOND); + conduit.setClient(policy); + + return ErrorCode.ERR_OK; + } + + /** + * Run dispose mul return type. + * + * @param ip the ip + * @param capType the cap type + * @return the mul return type + */ + @Override + public MulReturnType runDispose(String ip, DisposeCapacityType capType, + @Nullable NetflowDirection[] nfDirection, + @Nullable DDoSAttackType[] attackType, + @Nullable Long duration) { + ErrorCode err = ErrorCode.ERR_OK; + + try { + log.info("++++Begging DPTech Start Cleanup Task: {}", ip); + + // 查找需要处置的流量方向集合 + List dirList = Arrays.stream(NetflowDirection.values()) + .filter(d -> nfDirection == null || nfDirection.length == 0 || Arrays.asList(nfDirection).contains(d)) + .collect(Collectors.toList()); + + // 查找需要处理的攻击类型集合 + List typeList = Arrays.stream(DDoSAttackType.values()) + .filter(t -> attackType == null || attackType.length == 0 || Arrays.asList(attackType).contains(t)) + .map(t -> CommonEnumHandler.codeOf(DpTechAttackType.class, + DpTechAttackType.fromDdosAttackTypeValue(t))) + .collect(Collectors.toList()); + + dirList.forEach(d -> typeList.forEach(t -> CompletableFuture.supplyAsync(() -> + cleanTypePort.startAbnormalTaskForUMC(ip, t.getValue(), d.getCode())) + .whenComplete((v, ex) -> { + if (ex != null) { + log.error("DPTech run dispose: {}, {}, error:{}", ip, t.getValue(), + ex.getMessage()); + } else { + log.debug("Cleanup: {} --> {}:{}", d, t.getDescription(), t.getValue()); + if (v.getResultRetVal() != ErrorCode.ERR_OK.getCode()) { + log.error("DPTech run dispose {} error: {}", ip, v.getResultInfo()); + } + } + }))); + + log.info("----Finish DPTech Start Cleanup Task: {}", ip); + } catch (Exception ex) { + log.error(ex.getMessage()); + log.error("----Error DPTech Start Cleanup Task: {}", ip); + err = ErrorCode.ERR_SYSTEMEXCEPTION; + } + + return new MulReturnType<>(err, null); + } + + /** + * Stop dispose mul return type. + * + * @param ip the ip + * @param capType the cap type + * @return the mul return type + */ + @Override + public MulReturnType stopDispose(String ip, DisposeCapacityType capType) { + return null; + } +} diff --git a/src/main/java/com/dispose/common/DDoSAttackType.java b/src/main/java/com/dispose/common/DDoSAttackType.java new file mode 100644 index 00000000..8af1c23f --- /dev/null +++ b/src/main/java/com/dispose/common/DDoSAttackType.java @@ -0,0 +1,97 @@ +package com.dispose.common; + +/** + * The enum D do s attack type. + * + * @author + */ +public enum DDoSAttackType implements BaseEnum { + /** + * The Tcp syn flood. + */ + TCP_SYN_FLOOD(0, "TCP SYN Flood"), + /** + * The Udp flood. + */ + UDP_FLOOD(1, "UDP Flood"), + /** + * The Icmp flood. + */ + ICMP_FLOOD(2, "ICMP Flood"), + /** + * The Tcp syn ack flood. + */ + TCP_SYN_ACK_FLOOD(3, "TCP SYN-ACK Flood"), + /** + * The Tcp fin flood. + */ + TCP_FIN_FLOOD(4, "TCP FIN Flood"), + /** + * The Ip fragment flood. + */ + IP_FRAGMENT_FLOOD(5, "IP Fragment Flood"), + /** + * The Tcp ack flood. + */ + TCP_ACK_FLOOD(6, "TCP ACK Flood"), + /** + * The Cc flood. + */ + CC_FLOOD(7, "CC Flood"), + /** + * The Http flood. + */ + HTTP_FLOOD(8, "HTTP Flood"), + /** + * The Dns query flood. + */ + DNS_QUERY_FLOOD(9, "DNS Query Flood"), + /** + * The Dns reply flood. + */ + DNS_REPLY_FLOOD(10, "DNS Reply Flood"), + /** + * The Host total traffic. + */ + HOST_TOTAL_TRAFFIC(11, "Host Total Traffic"); + + /** + * The Code. + */ + private final Integer code; + /** + * The Readme. + */ + private final String readme; + + /** + * Instantiates a new D do s attack type. + * + * @param code the code + * @param readme the readme + */ + DDoSAttackType(int code, String readme) { + this.code = code; + this.readme = readme; + } + + /** + * Gets value. + * + * @return the value + */ + @Override + public Integer getValue() { + return this.code; + } + + /** + * Gets description. + * + * @return the description + */ + @Override + public String getDescription() { + return this.readme; + } +} diff --git a/src/main/java/com/dispose/common/DpTechAttackType.java b/src/main/java/com/dispose/common/DpTechAttackType.java new file mode 100644 index 00000000..6deb31f2 --- /dev/null +++ b/src/main/java/com/dispose/common/DpTechAttackType.java @@ -0,0 +1,107 @@ +package com.dispose.common; + +/** + * The enum Dp tech attack type. + * + * @author + */ +public enum DpTechAttackType implements BaseEnum { + /** + * The Tcp syn flood. + */ + TCP_SYN_FLOOD(1, "TCP SYN Flood"), + /** + * The Udp flood. + */ + UDP_FLOOD(2, "UDP Flood"), + /** + * The Icmp flood. + */ + ICMP_FLOOD(3, "ICMP Flood"), + /** + * The Tcp syn ack flood. + */ + TCP_SYN_ACK_FLOOD(6, "TCP SYN-ACK Flood"), + /** + * The Tcp fin flood. + */ + TCP_FIN_FLOOD(7, "TCP FIN Flood"), + /** + * The Ip fragment flood. + */ + IP_FRAGMENT_FLOOD(8, "IP Fragment Flood"), + /** + * The Tcp ack flood. + */ + TCP_ACK_FLOOD(13, "TCP ACK Flood"), + /** + * The Cc flood. + */ + CC_FLOOD(15, "CC Flood"), + /** + * The Http flood. + */ + HTTP_FLOOD(14, "HTTP Flood"), + /** + * The Dns query flood. + */ + DNS_QUERY_FLOOD(16, "DNS Query Flood"), + /** + * The Dns reply flood. + */ + DNS_REPLY_FLOOD(33, "DNS Reply Flood"), + /** + * The Host total traffic. + */ + HOST_TOTAL_TRAFFIC(31, "Host Total Traffic"); + + /** + * The Code. + */ + private final Integer code; + /** + * The Readme. + */ + private final String readme; + + /** + * Instantiates a new Dp tech attack type. + * + * @param code the code + * @param readme the readme + */ + DpTechAttackType(int code, String readme) { + this.code = code; + this.readme = readme; + } + + /** + * Gets value. + * + * @return the value + */ + @Override + public Integer getValue() { + return this.code; + } + + /** + * From ddos attack type value integer. + * + * @param type the type + * @return the integer + */ + public static Integer fromDdosAttackTypeValue(DDoSAttackType type) { + return type.getValue(); + } + + /** + * Gets description. + * + * @return the description + */ + @Override + public String getDescription() { + return this.readme; + } +} diff --git a/src/main/java/com/dispose/common/NetflowDirection.java b/src/main/java/com/dispose/common/NetflowDirection.java new file mode 100644 index 00000000..dee70fdb --- /dev/null +++ b/src/main/java/com/dispose/common/NetflowDirection.java @@ -0,0 +1,54 @@ +package com.dispose.common; + +/** + * The enum Netflow direction. + * + * @author + */ +public enum NetflowDirection { + /** + * Direction in netflow direction. + */ + DIRECTION_IN(0, "入方向"), + /** + * Direction out netflow direction. + */ + DIRECTION_OUT(1, "出方向"); + /** + * The Code. + */ + private final int code; + /** + * The Readme. + */ + private final String readme; + + /** + * Instantiates a new Netflow direction. + * + * @param code the code + * @param readme the readme + */ + NetflowDirection(int code, String readme) { + this.code = code; + this.readme = readme; + } + + /** + * Gets code. + * + * @return the code + */ + public int getCode() { + return this.code; + } + + /** + * Gets readme. + * + * @return the readme + */ + public String getReadme() { + return this.readme; + } +} diff --git a/src/main/java/com/dispose/controller/DisposeDeviceManagerController.java b/src/main/java/com/dispose/controller/DisposeDeviceManagerController.java index b969572a..fb6a44a1 100644 --- a/src/main/java/com/dispose/controller/DisposeDeviceManagerController.java +++ b/src/main/java/com/dispose/controller/DisposeDeviceManagerController.java @@ -247,13 +247,17 @@ public class DisposeDeviceManagerController { GetDeviceRsp rspInfo = new GetDeviceRsp(); + // 拼装返回数据 rspInfo.setStatus(ErrorCode.ERR_OK.getCode()); rspInfo.setMessage(new String[]{ErrorCode.ERR_OK.getMsg()}); + + // 分页信息 rspInfo.setCurPageNumber(ret.getFirstParam().getPageNum()); rspInfo.setPageSize(ret.getFirstParam().getPageSize()); rspInfo.setTotalItems((int)ret.getFirstParam().getTotal()); rspInfo.setTotalPages(ret.getFirstParam().getPages()); + // 设备信息 ret.getSecondParam().forEach(v -> { GetDeviceDetail devInfo = new GetDeviceDetail(); devInfo.setId(v.getId().toString()); diff --git a/src/main/java/com/dispose/manager/impl/DisposeDeviceManagerImpl.java b/src/main/java/com/dispose/manager/impl/DisposeDeviceManagerImpl.java index f85636cf..6f004965 100644 --- a/src/main/java/com/dispose/manager/impl/DisposeDeviceManagerImpl.java +++ b/src/main/java/com/dispose/manager/impl/DisposeDeviceManagerImpl.java @@ -16,6 +16,7 @@ import org.springframework.stereotype.Component; import javax.annotation.Resource; import java.lang.reflect.Field; import java.lang.reflect.Modifier; +import java.util.ArrayList; import java.util.List; import java.util.concurrent.ConcurrentHashMap; @@ -219,6 +220,10 @@ public class DisposeDeviceManagerImpl implements DisposeDeviceManager { // 获取分页数据 List devList = disposeDeviceMapper.selectAll(); + if(devList == null) { + devList = new ArrayList<>(); + } + // 获取分页信息 PageInfo pageInfo = new PageInfo<>(devList); diff --git a/src/main/java/com/dispose/pojo/dto/protocol/device/manager/GetDeviceReq.java b/src/main/java/com/dispose/pojo/dto/protocol/device/manager/GetDeviceReq.java index 5a51dc6e..68cab7cc 100644 --- a/src/main/java/com/dispose/pojo/dto/protocol/device/manager/GetDeviceReq.java +++ b/src/main/java/com/dispose/pojo/dto/protocol/device/manager/GetDeviceReq.java @@ -9,7 +9,7 @@ import lombok.NoArgsConstructor; import javax.validation.constraints.NotNull; import javax.validation.constraints.Pattern; -import javax.validation.constraints.PositiveOrZero; +import javax.validation.constraints.Positive; /** * The type Get device req. @@ -25,7 +25,7 @@ public class GetDeviceReq { /** * The Start page. */ - @PositiveOrZero(message = "startPage 字段值不能小于0", groups = ValidGroups.ProtocolCommonValid.class) + @Positive(message = "startPage 字段值必须大于0", groups = ValidGroups.ProtocolCommonValid.class) @NotNull(message = "startPage 字段不能为空", groups = ValidGroups.ProtocolCommonValid.class) private Integer startPage; diff --git a/src/test/java/com/dispose/test/manager/DisposeDeviceManagerTest.java b/src/test/java/com/dispose/test/manager/DisposeDeviceManagerTest.java index 8cbae645..d90d9274 100644 --- a/src/test/java/com/dispose/test/manager/DisposeDeviceManagerTest.java +++ b/src/test/java/com/dispose/test/manager/DisposeDeviceManagerTest.java @@ -24,7 +24,7 @@ import org.springframework.test.context.junit4.SpringRunner; import org.springframework.transaction.annotation.Transactional; import javax.annotation.Resource; -import java.lang.reflect.InvocationTargetException; +import java.util.ArrayList; import java.util.List; /** @@ -61,7 +61,7 @@ public class DisposeDeviceManagerTest { * A 1 add dispose device. */ @Test - public void a1_addDisposeDevice() throws IllegalAccessException, NoSuchMethodException, InvocationTargetException { + public void a1_addDisposeDevice() { for (int i = 1; i < 3; i++) { String ipAddr = "192.168.0." + i; @@ -107,11 +107,12 @@ public class DisposeDeviceManagerTest { public void g1_getDisposeDevice() { PageHelper.startPage(0, 20); - List devList = disposeDeviceMapper.selectAll(); + //List devList = disposeDeviceMapper.selectAll(); + + List devList = new ArrayList<>(); PageInfo pageInfo = new PageInfo<>(devList); - log.debug("Get {} device items", devList.size()); log.debug("Page Info: total {}, page {}", pageInfo.getTotal(), pageInfo.getPageNum()); } @@ -120,7 +121,7 @@ public class DisposeDeviceManagerTest { * A 2 upgrade dispose device. */ @Test - public void a2_upgradeDisposeDevice() throws IllegalAccessException, NoSuchMethodException, InvocationTargetException, JsonProcessingException { + public void a2_upgradeDisposeDevice() throws JsonProcessingException { for (int i = 1; i < 3; i++) { String ipAddr = "192.168.0." + i; @@ -169,7 +170,7 @@ public class DisposeDeviceManagerTest { * A 3 change dispose device status. */ @Test - public void a3_changeDisposeDeviceStatus() throws IllegalAccessException, NoSuchMethodException, InvocationTargetException, JsonProcessingException { + public void a3_changeDisposeDeviceStatus() { disposeDeviceMapper.selectAll().forEach(v -> { for (ObjectStatus obj : ObjectStatus.values()