k18-ntcs-web-ntc/src/main/java/com/nis/web/service/configuration/IpCfgService.java

package com.nis.web.service.configuration;

import java.util.ArrayList;
import java.util.Date;
import java.util.List;
import java.util.Map;

import org.apache.commons.lang3.StringUtils;
import org.springframework.beans.BeanUtils;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Service;
import org.springframework.transaction.annotation.Transactional;

import com.nis.domain.callback.InlineIp;
import com.nis.domain.configuration.AreaIpCfg;
import com.nis.domain.configuration.BaseIpCfg;
import com.nis.domain.configuration.IpPortCfg;
import com.nis.domain.maat.MaatCfg;
import com.nis.domain.maat.MaatCfg.DigestCfg;
import com.nis.domain.maat.MaatCfg.GroupCfg;
import com.nis.domain.maat.MaatCfg.IpCfg;
import com.nis.domain.maat.MaatCfg.NumBoundaryCfg;
import com.nis.domain.maat.MaatCfg.StringCfg;
import com.nis.domain.maat.ToMaatBean;
import com.nis.domain.maat.ToMaatResult;
import com.nis.exceptions.MaatConvertException;
import com.nis.util.ConfigServiceUtil;
import com.nis.util.Constants;
import com.nis.util.StringUtil;
import com.nis.web.dao.configuration.AreaIpCfgDao;
import com.nis.web.dao.configuration.IpCfgDao;
import com.nis.web.service.CrudService;

/**
 * IP相关配置事务类
 * @author dell
 *
 */
@Service
public class IpCfgService extends CrudService<IpCfgDao,BaseIpCfg> {
	@Autowired
	protected IpCfgDao ipCfgDao;
	@Autowired
	protected AreaIpCfgDao areaIpCfgDao;
	/**
	 * 
	 * addIpCfg(新增IP类配置)
	 * (继承BaseIpCfg这个类方可使用)
	 * @param baseIpCfg
	 * @return 
	 *int
	 * @exception 
	 * @since  1.0.0
	 */
	@Transactional(readOnly=false,rollbackFor=RuntimeException.class)
	public void addIpCfg(BaseIpCfg cfg){
		//调用服务接口获取compileId
		Integer compileId = 0;
		try {
			List<Integer> compileIds = ConfigServiceUtil.getId(1,1);
			if(!StringUtil.isEmpty(compileIds)){
				compileId = compileIds.get(0);
			}
		} catch (Exception e) {
			e.printStackTrace();
			logger.info("获取编译ID出错");
			throw new MaatConvertException("<spring:message code=\"request_service_failed\"/>:"+e.getMessage());
		}
		if(compileId!=0){
			cfg.setCompileId(compileId);
			setAreaEffectiveIds(cfg);
			if(cfg.getAreaCfg()!=null&&cfg.getAreaCfg().size()>0){
				for(AreaIpCfg c:cfg.getAreaCfg()){
					c.initDefaultValue();
					BeanUtils.copyProperties(cfg, c,new String[]{"cfgId","ipType","direction",
							"protocol","protocolId","areaEffectiveIds","cfgRegionCode",
							"cfgType","ipPattern","srcIpAddress","portPattern","srcPort","destIpAddress","destPort"});	
					c.setTableName(AreaIpCfg.getTablename());
				}
				this.saveIpBatch(cfg.getAreaCfg());
			}
			ipCfgDao.insert(cfg);
		}else{
			throw new MaatConvertException("<spring:message code=\"request_service_failed\"/>");
		}
		
	} 
	/**
	 * 
	 * updateIpCfg(更新IP类配置)
	 * (继承BaseIpCfg这个类方可使用)
	 * @param baseIpCfg
	 * @return 
	 *int
	 * @exception 
	 * @since  1.0.0
	 */
	@Transactional(readOnly=false,rollbackFor=RuntimeException.class)
	public void updateIpCfg(BaseIpCfg cfg){
		AreaIpCfg area=new AreaIpCfg();
		area.setCompileId(cfg.getCompileId());
		area.setFunctionId(cfg.getFunctionId());
		areaIpCfgDao.deleteAreaIpCfg(area);
		//区域IPsetAreaEffectiveIds设置
		setAreaEffectiveIds(cfg);
		Date date=new Date();
		if(cfg.getAreaCfg()!=null&&cfg.getAreaCfg().size()>0){
			for(AreaIpCfg c:cfg.getAreaCfg()){
				c.initDefaultValue();
				BeanUtils.copyProperties(cfg, c,new String[]{"cfgId","ipType","direction",
						"protocol","protocolId","areaEffectiveIds","cfgRegionCode",
						"cfgType","ipPattern","srcIpAddress","portPattern","srcPort","destIpAddress","destPort"});	
				c.setTableName(AreaIpCfg.getTablename());
				c.setCreatorId(cfg.getCurrentUser().getId());
				c.setCreateTime(date);
			}
			this.saveIpBatch(cfg.getAreaCfg());
		}
		ipCfgDao.update(cfg);
	} 
	public void audit(BaseIpCfg cfg) throws Exception{
		//更新IP配置与区域IP的状态
		List<BaseIpCfg> beans=new ArrayList<>();
		beans.add(cfg);
		this.auditBatch(beans, IpCfgDao.class);
		List<BaseIpCfg> beans1=new ArrayList<>();
		List<AreaIpCfg> areaIpCfgList=areaIpCfgDao.getByCompileId(cfg.getCompileId());
		for(AreaIpCfg area:areaIpCfgList){
			BeanUtils.copyProperties(cfg,area ,new String[]{"cfgRegionCode"
					,"cfgType"
					,"cfgId"
					,"ipType"
					,"ipPattern"
					,"srcIpAddress"
					,"portPattern"
					,"srcPort"
					,"destPort"
					,"protocol"
					,"direction"
					,"protocolId"
					});
			beans1.add(area);
		}
		this.auditIpBatch(beans1);
		List<MaatCfg> configCompileList = new ArrayList<>();
		List<GroupCfg> groupRelationList = new ArrayList<>();
		List<IpCfg> ipRegionList = new ArrayList<>();
		List<StringCfg> strRegionList = new ArrayList<>();
		List<NumBoundaryCfg> numRegionList = new ArrayList<>();
		List<DigestCfg> digestRegionList = new ArrayList<>();
		List<IpCfg> areaIpRegionList = new ArrayList<>();
		ToMaatBean maatBean = new ToMaatBean();	
		MaatCfg maatCfg = new MaatCfg();
		maatCfg.initDefaultValue();
		BeanUtils.copyProperties(cfg, maatCfg);
		String json="";
		if(cfg.getIsAudit()==1){
			if(Constants.DROP_ACTION==cfg.getAction()||Constants.LOOP_ACTION==cfg.getAction()){
				List<InlineIp> ipList=new ArrayList<>();
				InlineIp ip=convertCallBackIp(cfg);
				ipList.add(ip);
				//调用服务接口下发配置数据
				json=gsonToJson(ipList);
				logger.info("IP管控下发配置参数："+json);
				//调用服务接口下发配置
				try {
					ToMaatResult result = ConfigServiceUtil.postCallbackCfg(json);
					if(result!=null){
						logger.info("IP管控配置下发响应信息："+result.getMsg());
					}
				} catch (Exception e) {
					logger.error("IP管控配置下发失败",e);
					throw e;
				}
			}else{
				Map<String,List> map = cfgConvert(ipRegionList,beans,1,cfg,groupRelationList);
				ipRegionList=map.get("dstList");
				groupRelationList=map.get("groupList");
				numRegionList=map.get("numRegionList")==null?new ArrayList<>():map.get("numRegionList");
				Map<String,List> areaMap = cfgConvert(areaIpRegionList,beans1,1,cfg,groupRelationList);
				groupRelationList=areaMap.get("groupList");
				areaIpRegionList=areaMap.get("dstList");
				maatCfg.setAreaEffectiveIds(StringUtils.isBlank(cfg.getAreaEffectiveIds())?"0":cfg.getAreaEffectiveIds());
				maatCfg.setUserRegion(cfg.getCompileId()+"");
				maatCfg.setAction(cfg.getAction());
				maatCfg.setAuditTime(cfg.getAuditTime());
				maatCfg.setIpRegionList(ipRegionList);
				maatCfg.setStrRegionList(strRegionList);
				maatCfg.setNumRegionList(numRegionList);
				maatCfg.setAreaIpRegionList(areaIpRegionList);
				maatCfg.setDigestRegionList(digestRegionList);
				maatCfg.setGroupRelationList(groupRelationList);
				maatCfg.setGroupNum(groupRelationList.size());
				maatCfg.setAreaIpRegionList(areaIpRegionList);
				configCompileList.add(maatCfg);
				maatBean.setOpAction(Constants.INSERT_ACTION);
				maatBean.setConfigCompileList(configCompileList);
				maatBean.setAuditTime(cfg.getAuditTime());
				maatBean.setCreatorName(cfg.getCurrentUser().getName());
				maatBean.setVersion(Constants.MAAT_VERSION);
				//调用服务接口下发配置数据
				json=gsonToJson(maatBean);
				logger.info("IP管控下发配置参数："+json);
				//调用服务接口下发配置
				try {
					ToMaatResult result = ConfigServiceUtil.postMaatCfg(json);
					if(result!=null){
						logger.info("IP管控配置下发响应信息："+result.getMsg());
					}
				} catch (Exception e) {
					logger.error("IP管控配置下发失败",e);
					throw e;
				}
			}
		}else if(cfg.getIsAudit()==3){
			if(Constants.DROP_ACTION==cfg.getAction()||Constants.LOOP_ACTION==cfg.getAction()){
				List<InlineIp> ipList=new ArrayList<>();
				InlineIp ip=convertCallBackIp(cfg);
				ipList.add(ip);
				//调用服务接口取消配置
				json=gsonToJson(ipList);
				logger.info("IP管控配置参数："+json);
				//调用服务接口取消配置
				try {
					ToMaatResult result = ConfigServiceUtil.put(json, 2);
					logger.info("IP管控取消配置响应信息："+result.getMsg());
				} catch (Exception e) {
					e.printStackTrace();
					logger.info("IP管控取消配置失败");
					throw e;
				}
			}else{
				maatCfg.setCompileId(cfg.getCompileId());
				maatCfg.setServiceId(cfg.getServiceId());
				maatCfg.setIsValid(0);//无效
				configCompileList.add(maatCfg);
				maatBean.setConfigCompileList(configCompileList);
				maatBean.setAuditTime(cfg.getAuditTime());
				maatBean.setCreatorName(cfg.getCurrentUser().getName());
				maatBean.setVersion(Constants.MAAT_VERSION);
				maatBean.setOpAction(Constants.UPDATE_ACTION);
				//调用服务接口取消配置
				json=gsonToJson(maatBean);
				logger.info("IP管控配置参数："+json);
				//调用服务接口取消配置
				try {
					ToMaatResult result = ConfigServiceUtil.put(json, 1);
					logger.info("IP管控取消配置响应信息："+result.getMsg());
				} catch (Exception e) {
					e.printStackTrace();
					logger.info("IP管控取消配置失败");
					throw e;
				}
			}
		}
	}
	public void auditWhiteIp(BaseIpCfg cfg) throws Exception{
		List<BaseIpCfg> beans=new ArrayList<>();
		beans.add(cfg);
		this.auditBatch(beans, IpCfgDao.class);
		List<MaatCfg> configCompileList = new ArrayList<>();
		List<GroupCfg> groupRelationList = new ArrayList<>();
		List<IpCfg> ipRegionList = new ArrayList<>();
		List<StringCfg> strRegionList = new ArrayList<>();
		List<NumBoundaryCfg> numRegionList = new ArrayList<>();
		List<DigestCfg> digestRegionList = new ArrayList<>();
		List<IpCfg> areaIpRegionList = new ArrayList<>();
		ToMaatBean maatBean = new ToMaatBean();	
		MaatCfg maatCfg = new MaatCfg();
		maatCfg.initDefaultValue();
		BeanUtils.copyProperties(cfg, maatCfg);
		
		if(cfg.getIsAudit()==1){
			maatBean.setOpAction(Constants.INSERT_ACTION);
			Map<String,List> map = cfgConvert(ipRegionList,beans,1,cfg,groupRelationList);
			groupRelationList=map.get("groupList");
			ipRegionList=map.get("dstList");
			maatCfg.setAreaEffectiveIds("0");
			maatCfg.setUserRegion(cfg.getCompileId()+"");
			maatCfg.setAction(cfg.getAction());
			maatCfg.setAuditTime(cfg.getAuditTime());
			maatCfg.setIpRegionList(ipRegionList);
			maatCfg.setStrRegionList(strRegionList);
			maatCfg.setNumRegionList(numRegionList);
			maatCfg.setDigestRegionList(digestRegionList);
			maatCfg.setGroupRelationList(groupRelationList);
			maatCfg.setGroupNum(groupRelationList.size());
			maatCfg.setAreaIpRegionList(areaIpRegionList);
			configCompileList.add(maatCfg);
			maatBean.setConfigCompileList(configCompileList);
			maatBean.setAuditTime(cfg.getAuditTime());
			maatBean.setCreatorName(cfg.getCurrentUser().getName());
			maatBean.setVersion(Constants.MAAT_VERSION);
			//调用服务接口下发配置数据
			String json=gsonToJson(maatBean);
			logger.info("IP白名单下发配置参数："+json);
			//调用服务接口下发配置
			try {
				ToMaatResult result = ConfigServiceUtil.postMaatCfg(json);
				if(result!=null){
					logger.info("IP白名单配置下发响应信息："+result.getMsg());
				}
			} catch (Exception e) {
				logger.error("IP白名单配置下发失败",e);
				throw e;
			}
		}else if(cfg.getIsAudit()==3){
			maatCfg.setCompileId(cfg.getCompileId());
			maatCfg.setServiceId(cfg.getServiceId());
			maatCfg.setIsValid(0);//无效
			configCompileList.add(maatCfg);
			maatBean.setConfigCompileList(configCompileList);
			maatBean.setAuditTime(cfg.getAuditTime());
			maatBean.setCreatorName(cfg.getCurrentUser().getName());
			maatBean.setVersion(Constants.MAAT_VERSION);
			maatBean.setOpAction(Constants.UPDATE_ACTION);
			//调用服务接口取消配置
			String json=gsonToJson(maatBean);
			logger.info("IP白名单配置参数："+json);
			//调用服务接口取消配置
			try {
				ToMaatResult result = ConfigServiceUtil.put(json, 1);
				logger.info("IP白名单取消配置响应信息："+result.getMsg());
			} catch (Exception e) {
				e.printStackTrace();
				logger.info("IP白名单取消配置失败");
				throw e;
			}
		}
	}
	
	@Transactional(readOnly=false,rollbackFor=RuntimeException.class)
	public void deleteIp(String ids,String compileIds,int functionId){
		if(StringUtils.isNotBlank(compileIds)){
			for(String compileId:compileIds.split(",")){//强转数字，防止注入
				Integer.parseInt(compileId);
			}
			ipCfgDao.deleteByCompileIds(new BaseIpCfg().getCurrentUser().getId(),AreaIpCfg.getTablename(),compileIds);
		}
		List<BaseIpCfg> ipCfgs=new ArrayList<BaseIpCfg>();
		Date date =new Date();
		if(StringUtils.isNotBlank(ids)){
			for(String idStr:ids.split(",")){
				if(StringUtils.isNotBlank(idStr)){
					BaseIpCfg cfg=new BaseIpCfg();
					cfg.setCfgId(Long.parseLong(idStr));
					cfg.setTableName(IpPortCfg.getTablename());
					cfg.setEditorId(cfg.getCurrentUser().getId());
					cfg.setEditTime(date);
					cfg.setIsValid(Constants.VALID_DEL);
					ipCfgs.add(cfg);
				}
			}
		}
		this.deleteBatch(ipCfgs, IpCfgDao.class);
	} 
	/**
	 * 
	 * deleteIpCfg(删除IP类配置)
	 * (继承BaseIpCfg这个类方可使用)
	 * @param baseIpCfg
	 * @return 
	 *int
	 * @exception 
	 * @since  1.0.0
	 */
	@Transactional(readOnly=false,rollbackFor=RuntimeException.class)
	public void deleteIpCfg(List<BaseIpCfg> baseIpCfg, List<AreaIpCfg> areaCfg){
		List<BaseIpCfg> cfgs=new ArrayList<>();
		if(areaCfg!=null&&areaCfg.size()>0){
			cfgs.addAll(areaCfg);
			this.deleteBatch(cfgs,IpCfgDao.class);
		}
		if(baseIpCfg!=null&&baseIpCfg.size()>0){
			this.deleteBatch(baseIpCfg, IpCfgDao.class);
		}
		
	} 
	/**
	 * 
	 * getIpCfg(根据IP与类名获取IP配置)
	 * (继承BaseIpCfg这个类方可使用)
	 * @param clazz
	 * @param id
	 * @return 
	 *BaseIpCfg
	 * @exception 
	 * @since  1.0.0
	 */
	public BaseIpCfg getIpCfgById(BaseIpCfg baseIpCfg){
		return ipCfgDao.getById(baseIpCfg.getTableName(), baseIpCfg.getCfgId());
	}
	public BaseIpCfg getIpCfgById(String tableName,long id){
		return ipCfgDao.getById(tableName, id);
	}
	public Integer getIsValid(BaseIpCfg baseIpCfg){
		return ipCfgDao.getIsValid(baseIpCfg);
	}
	public Integer getIsValid(String tableName, long id){
		return ipCfgDao.getIsValid(tableName,id);
	}
	public Integer getIsAudit(BaseIpCfg baseIpCfg){
		return ipCfgDao.getIsAudit(baseIpCfg);
	}
	public Integer getIsAudit(String tableName, long id){
		return ipCfgDao.getIsAudit(tableName,id);
	}
	public List<AreaIpCfg> getAreaCfgByCompileId(int compileId){
		return areaIpCfgDao.getByCompileId(compileId);
	}
	public List<BaseIpCfg> getListByComileId(String tableName,String ids){
		return ipCfgDao.getListByComileId(tableName,ids);
	}
	public List<BaseIpCfg> getListByCfgId(String tableName,String ids){
		return ipCfgDao.getListByCfgId(tableName,ids);
	}
}