ipset python 包装

ipset_wrapper.py

#!/bin/env python

import subprocess
import logging

fmt = "%(asctime)-15s %(levelname)s %(filename)s %(lineno)d %(process)d %(message)s"
datefmt = "%a %d %b %Y %H:%M:%S"
logging.basicConfig(format=fmt, datefmt=datefmt, level=logging.INFO)

def ipset_basic_struct(action, ipset_name, ip):
    cmd = ['ipset', action]
    if not ipset_name:
        logging.error('no ipset name')
    cmd.append(ipset_name)
    if not ip:
        logging.error('no ip address')
    cmd.append(ip)
    process = subprocess.Popen(cmd, universal_newlines=True, stderr=subprocess.PIPE, stdout=subprocess.PIPE, stdin=subprocess.PIPE)
    returncode = process.poll()
    if returncode == 0:
        method = 'to' if action == 'add' else 'from'
        logging.info('%s %s %s ipset %s success' % (action, ip, method, ipset_name))
        return 0
    else:
        logging.error(process.stderr.read())
        return 1

def ipset_add_ip(ipset_name, ip):
    return ipset_basic_struct('add', ipset_name, ip)

def ipset_del_ip(ipset_name, ip):
    return ipset_basic_struct('del', ipset_name, ip)

if __name__ == '__main__':
    ipset_add_ip('gfw', '8.8.8.8')
    ipset_del_ip('gfw', '8.8.8.8')