华为云的API调用实践（python版本）

 

一、结论：

1、华为云是符合openstack 社区的API，所以，以社区的API为准。社区API见下面的链接。

     https://developer.openstack.org/api-ref/network/v2/index.html

 

二、调用前准备

1、python的API调用前，需要准备好python的运行环境，以及在华为云上已经注册用户。

      python的运行环境具体是指（1）python安装包（2）openstack社区的API库，下面有介绍。

     华为云注册用户，正常在官网上注册即可。

2、python的安装包

      略（到python官网下载 python2.7版本，安装即可）

3、openstack社区的API库（python版本）

　　（1）下载openstack 客户端开发包，地址如下，下载其中的.gz压缩包

　　　　https://pypi.python.org/pypi/python-openstackclient

　　（2）安装客户端开发包

　　　　在windows系统中，解压缩上述压缩包，然后进入到解压缩后的文件夹中，输入 python setup.py install

4、获取username，project_name, project_domain_id, user_domain_id

　　方法：

        第一步，在华为云登录后，在页面右上角点击 “我的凭证”

　　

 

   第二步、在我的凭证中，分别获得 username, project_name, project_domain_id, user_domain_id

 

 

 

　　

5、获得所在区域的IAM认证的地址

　　方法:

       第一步：华为云首页，“支持与服务” ，选择"OpenAPI"

　　

 

 

     第二步：点击“地区和终端节点”

 

    第三步：在搜索栏中输入“IAM”，得到所在区域的IAM认证地址。

　　

 

      上面得到的终端节点，就是 auth_url 的内容主体。

 

三、API调用思路：

　　1、调用思路：

　　认证  ---> 建会话  ---> 建客户端实例  ---> API调用。

 

　　2、程序示例：

              说明，下面代码中的  username, project_name, project_domain_id, user_domain_id, auth_url 的内容获取方法，见“二、调用前准备”中的对应内容。

　　　　

                

四、调用步骤

根据API文档，以及 client.Client的代码，可以看到有哪些API可以调用。

1、示例代码

import json
import time
from keystoneauth1 import identity
from keystoneauth1 import session
from neutronclient.v2_0 import client


username='xxx'
password='xxx'
project_name='xxx'
project_domain_id='xxx'
user_domain_id='xxx'
auth_url='https://iam.cn-north-1.myhuaweicloud.com/v3'
auth = identity.Password(auth_url=auth_url,
                         username=username,
                         password=password,
                         project_name=project_name,
                         project_domain_id=project_domain_id,
                         user_domain_id=user_domain_id)
sess = session.Session(auth=auth)
neutron = client.Client(session=sess)



def createvpn(vpcid, local_cidr, peer_ip, peer_cidr):
    print "######## create vpn  ######"
    print "################### step 1 vpn service ############"
    
    vpnservice = {
        "vpnservice": {        
            "router_id": vpcid,
            "name": "myservice",
            "admin_state_up": "true"
        }
    }
    
    ret = neutron.create_vpnservice(vpnservice)
    
    vpnserviceid = ret['vpnservice']['id']
    print "vpnserviceid = "+vpnserviceid
    
    print "public_ip = "+ret['vpnservice']['external_v4_ip']
    
    
    
    print "################### step 2 ike policy ############"
    
    ikepolicy = {
        "ikepolicy": {
            "phase1_negotiation_mode": "main",
            "auth_algorithm": "sha1",
            "encryption_algorithm": "aes-128",
            "pfs": "group5",
            "lifetime": {
                "units": "seconds",
                "value": 86400
            },
            "ike_version": "v1",
            "name": "ikepolicy1"
        }
    }
    
    ret = neutron.create_ikepolicy(ikepolicy)
    
    ikepolicyid = ret['ikepolicy']['id']
    print "ikepolicyid = "+ikepolicyid
    
    
    
    print "################### step 3 ipsec policy ############"
    
    ipsecpolicy = {
        "ipsecpolicy": {
            "name": "ipsecpolicy1",
            "transform_protocol": "esp",
            "auth_algorithm": "sha1",
            "encapsulation_mode": "tunnel",
            "encryption_algorithm": "aes-128",
            "pfs": "group5",
            "lifetime": {
                "units": "seconds",
                "value": 3600
            }
        }
    }
    
    ret = neutron.create_ipsecpolicy(ipsecpolicy)
    
    ipsecpolicyid = ret['ipsecpolicy']['id']
    print "ipsecpolicyid = "+ipsecpolicyid
    
    
    print "################### step 4 local and remote endpoints ############"
    
    localendpointgroup = {
        "endpoint_group": {
            "endpoints": local_cidr,
            "type": "cidr",
            "name": "my-localendpoints"
        }
    }
    
    ret = neutron.create_endpoint_group(localendpointgroup)
    
    localepgroupid = ret['endpoint_group']['id']
    print "localepgroupid = "+localepgroupid
    
    #### remote endpoint group 
    remoteendpointgroup = {
        "endpoint_group": {
            "endpoints": peer_cidr,
            "type": "cidr",
            "name": "remote-localendpoints"
        }
    }
    
    ret = neutron.create_endpoint_group(remoteendpointgroup)
    
    remoteepgroupid = ret['endpoint_group']['id']
    print "remoteepgroupid = "+remoteepgroupid
    
    
    
    print "################### step 5 ipsec connection ############"
    
    ipsecconnection = {
        "ipsec_site_connection": {
            "psk": "secret",
            "initiator": "bi-directional",
            "ipsecpolicy_id": ipsecpolicyid,
            "admin_state_up": "true",
            "mtu": "1500",
            "peer_ep_group_id": remoteepgroupid,
            "ikepolicy_id": ikepolicyid,
            "vpnservice_id": vpnserviceid,
            "local_ep_group_id": localepgroupid,
            "peer_address": peer_ip,
            "peer_id": peer_ip,
            "name": "vpnconnection1"
        }
    }
    
    ret = neutron.create_ipsec_site_connection(ipsecconnection)
    
    ipsec_connection_id = ret['ipsec_site_connection']['id']
    print "ipsec_connection_id = "+ipsec_connection_id


    
def update_peer_ip(masterip, backupip):
    print "######## update peer ip ######"
    newcontent = {
        "ipsec_site_connection": {
            "peer_address": backupip,
            "peer_id":backupip
        }
    }
    
    connections = neutron.list_ipsec_site_connections()
  
    entrys = connections['ipsec_site_connections']
    for entry in entrys:
        if (masterip == entry["peer_address"]):
            id = entry["id"]
            neutron.update_ipsec_site_connection(id, newcontent)
            time.sleep(3)           

def show_all_connections():
    print "######## show all ipsec connections "
    connections = neutron.list_ipsec_site_connections()
    entrys = connections['ipsec_site_connections']
    for entry in entrys:
        print entry  

def main():
    
    createvpn(vpcid="xxx", 
              local_cidr=["10.2.0.0/24","10.3.0.0/24"], 
              peer_ip="172.24.4.233", 
              peer_cidr=["20.2.0.0/24"])
              
    show_all_connections()
    #update_peer_ip(masterip="172.24.4.233", backupip="101.0.0.1")
    
  
if __name__ == '__main__':
    main()

 

 2、查看有哪些函数可以调用。