華為雲的API調用實踐（python版本）

 

一、結論：

1、華為雲是符合openstack 社區的API，所以，以社區的API為准。社區API見下面的鏈接。

     https://developer.openstack.org/api-ref/network/v2/index.html

 

二、調用前准備

1、python的API調用前，需要准備好python的運行環境，以及在華為雲上已經注冊用戶。

      python的運行環境具體是指（1）python安裝包（2）openstack社區的API庫，下面有介紹。

     華為雲注冊用戶，正常在官網上注冊即可。

2、python的安裝包

      略（到python官網下載 python2.7版本，安裝即可）

3、openstack社區的API庫（python版本）

　　（1）下載openstack 客戶端開發包，地址如下，下載其中的.gz壓縮包

　　　　https://pypi.python.org/pypi/python-openstackclient

　　（2）安裝客戶端開發包

　　　　在windows系統中，解壓縮上述壓縮包，然后進入到解壓縮后的文件夾中，輸入 python setup.py install

4、獲取username，project_name, project_domain_id, user_domain_id

　　方法：

        第一步，在華為雲登錄后，在頁面右上角點擊 “我的憑證”

　　

 

   第二步、在我的憑證中，分別獲得 username, project_name, project_domain_id, user_domain_id

 

 

 

　　

5、獲得所在區域的IAM認證的地址

　　方法:

       第一步：華為雲首頁，“支持與服務” ，選擇"OpenAPI"

　　

 

 

     第二步：點擊“地區和終端節點”

 

    第三步：在搜索欄中輸入“IAM”，得到所在區域的IAM認證地址。

　　

 

      上面得到的終端節點，就是 auth_url 的內容主體。

 

三、API調用思路：

　　1、調用思路：

　　認證  ---> 建會話  ---> 建客戶端實例  ---> API調用。

 

　　2、程序示例：

              說明，下面代碼中的  username, project_name, project_domain_id, user_domain_id, auth_url 的內容獲取方法，見“二、調用前准備”中的對應內容。

　　　　

                

四、調用步驟

根據API文檔，以及 client.Client的代碼，可以看到有哪些API可以調用。

1、示例代碼

import json
import time
from keystoneauth1 import identity
from keystoneauth1 import session
from neutronclient.v2_0 import client


username='xxx'
password='xxx'
project_name='xxx'
project_domain_id='xxx'
user_domain_id='xxx'
auth_url='https://iam.cn-north-1.myhuaweicloud.com/v3'
auth = identity.Password(auth_url=auth_url,
                         username=username,
                         password=password,
                         project_name=project_name,
                         project_domain_id=project_domain_id,
                         user_domain_id=user_domain_id)
sess = session.Session(auth=auth)
neutron = client.Client(session=sess)



def createvpn(vpcid, local_cidr, peer_ip, peer_cidr):
    print "######## create vpn  ######"
    print "################### step 1 vpn service ############"
    
    vpnservice = {
        "vpnservice": {        
            "router_id": vpcid,
            "name": "myservice",
            "admin_state_up": "true"
        }
    }
    
    ret = neutron.create_vpnservice(vpnservice)
    
    vpnserviceid = ret['vpnservice']['id']
    print "vpnserviceid = "+vpnserviceid
    
    print "public_ip = "+ret['vpnservice']['external_v4_ip']
    
    
    
    print "################### step 2 ike policy ############"
    
    ikepolicy = {
        "ikepolicy": {
            "phase1_negotiation_mode": "main",
            "auth_algorithm": "sha1",
            "encryption_algorithm": "aes-128",
            "pfs": "group5",
            "lifetime": {
                "units": "seconds",
                "value": 86400
            },
            "ike_version": "v1",
            "name": "ikepolicy1"
        }
    }
    
    ret = neutron.create_ikepolicy(ikepolicy)
    
    ikepolicyid = ret['ikepolicy']['id']
    print "ikepolicyid = "+ikepolicyid
    
    
    
    print "################### step 3 ipsec policy ############"
    
    ipsecpolicy = {
        "ipsecpolicy": {
            "name": "ipsecpolicy1",
            "transform_protocol": "esp",
            "auth_algorithm": "sha1",
            "encapsulation_mode": "tunnel",
            "encryption_algorithm": "aes-128",
            "pfs": "group5",
            "lifetime": {
                "units": "seconds",
                "value": 3600
            }
        }
    }
    
    ret = neutron.create_ipsecpolicy(ipsecpolicy)
    
    ipsecpolicyid = ret['ipsecpolicy']['id']
    print "ipsecpolicyid = "+ipsecpolicyid
    
    
    print "################### step 4 local and remote endpoints ############"
    
    localendpointgroup = {
        "endpoint_group": {
            "endpoints": local_cidr,
            "type": "cidr",
            "name": "my-localendpoints"
        }
    }
    
    ret = neutron.create_endpoint_group(localendpointgroup)
    
    localepgroupid = ret['endpoint_group']['id']
    print "localepgroupid = "+localepgroupid
    
    #### remote endpoint group 
    remoteendpointgroup = {
        "endpoint_group": {
            "endpoints": peer_cidr,
            "type": "cidr",
            "name": "remote-localendpoints"
        }
    }
    
    ret = neutron.create_endpoint_group(remoteendpointgroup)
    
    remoteepgroupid = ret['endpoint_group']['id']
    print "remoteepgroupid = "+remoteepgroupid
    
    
    
    print "################### step 5 ipsec connection ############"
    
    ipsecconnection = {
        "ipsec_site_connection": {
            "psk": "secret",
            "initiator": "bi-directional",
            "ipsecpolicy_id": ipsecpolicyid,
            "admin_state_up": "true",
            "mtu": "1500",
            "peer_ep_group_id": remoteepgroupid,
            "ikepolicy_id": ikepolicyid,
            "vpnservice_id": vpnserviceid,
            "local_ep_group_id": localepgroupid,
            "peer_address": peer_ip,
            "peer_id": peer_ip,
            "name": "vpnconnection1"
        }
    }
    
    ret = neutron.create_ipsec_site_connection(ipsecconnection)
    
    ipsec_connection_id = ret['ipsec_site_connection']['id']
    print "ipsec_connection_id = "+ipsec_connection_id


    
def update_peer_ip(masterip, backupip):
    print "######## update peer ip ######"
    newcontent = {
        "ipsec_site_connection": {
            "peer_address": backupip,
            "peer_id":backupip
        }
    }
    
    connections = neutron.list_ipsec_site_connections()
  
    entrys = connections['ipsec_site_connections']
    for entry in entrys:
        if (masterip == entry["peer_address"]):
            id = entry["id"]
            neutron.update_ipsec_site_connection(id, newcontent)
            time.sleep(3)           

def show_all_connections():
    print "######## show all ipsec connections "
    connections = neutron.list_ipsec_site_connections()
    entrys = connections['ipsec_site_connections']
    for entry in entrys:
        print entry  

def main():
    
    createvpn(vpcid="xxx", 
              local_cidr=["10.2.0.0/24","10.3.0.0/24"], 
              peer_ip="172.24.4.233", 
              peer_cidr=["20.2.0.0/24"])
              
    show_all_connections()
    #update_peer_ip(masterip="172.24.4.233", backupip="101.0.0.1")
    
  
if __name__ == '__main__':
    main()

 

 2、查看有哪些函數可以調用。