load balancer in fix mode

Author: hyperknot

README.md

@@ -101,9 +101,7 @@ A very important part, probably needs the most work in the long term future.
 
 #### load balancer script - scripts/loadbalancer
 
-Round Robin DNS based load balancer, script for health checking and updating records. It pushes status messages to a Telegram bot.
-
-Currently it's running in read-only mode, DNS updates need manual confirmation.
+A Round Robin DNS based load balancer script for health checking and updating records. It pushes status messages to a Telegram bot.
 
 ## Self hosting
 
@@ -167,6 +165,10 @@ See [dev setup docs](docs/dev_setup.md).
 
 ## Changelog
 
+##### v0.2
+
+Load-balancing script is running in write mode, updating records when needed.
+
 ##### v0.1
 
 Everything works. 1 server for tile gen, 2 servers for HTTP host. Load-balancing script is running in a read-only mode.

scripts/loadbalancer/cron.d/ofm_loadbalancer

@@ -1,4 +1,4 @@
 # every minute
-* * * * * ofm     sudo /data/ofm/venv/bin/python -u /data/ofm/loadbalancer/loadbalancer.py check >> /data/ofm/loadbalancer/logs/check.log 2>&1
+* * * * * ofm     sudo /data/ofm/venv/bin/python -u /data/ofm/loadbalancer/loadbalancer.py fix >> /data/ofm/loadbalancer/logs/check.log 2>&1
 
 

scripts/loadbalancer/loadbalancer.py

@@ -76,7 +76,15 @@ def check_or_fix(fix=False):
         if not working_hosts:
             working_hosts = set(c['http_host_list'])
 
-        update_records(c, working_hosts)
+            message = 'OFM loadbalancer FIX found no working hosts, reverting to full list!'
+            print(message)
+            telegram_send_message(message, c['telegram_token'], c['telegram_chat_id'])
+
+        updated = update_records(c, working_hosts)
+        if updated:
+            message = f'OFM loadbalancer FIX modified records, new records: {working_hosts}'
+            print(message)
+            telegram_send_message(message, c['telegram_token'], c['telegram_chat_id'])
 
 
 def run_area(c, area):
@@ -117,14 +125,16 @@ def get_target_version(area):
     return response.text.strip()
 
 
-def update_records(c, working_hosts):
+def update_records(c, working_hosts) -> bool:
     config = dotenv_values('/data/ofm/config/cloudflare.ini')
     cloudflare_api_token = config['dns_cloudflare_api_token']
 
     domain = '.'.join(c['domain_ledns'].split('.')[-2:])
     zone_id = get_zone_id(domain, cloudflare_api_token=cloudflare_api_token)
 
-    set_records_round_robin(
+    updated = False
+
+    updated |= set_records_round_robin(
         zone_id=zone_id,
         name=c['domain_ledns'],
         host_ip_set=working_hosts,
@@ -134,7 +144,7 @@ def update_records(c, working_hosts):
         cloudflare_api_token=cloudflare_api_token,
     )
 
-    set_records_round_robin(
+    updated |= set_records_round_robin(
         zone_id=zone_id,
         name=c['domain_cf'],
         host_ip_set=working_hosts,
@@ -143,6 +153,8 @@ def update_records(c, working_hosts):
         cloudflare_api_token=cloudflare_api_token,
     )
 
+    return updated
+
 
 if __name__ == '__main__':
     cli()

scripts/loadbalancer/loadbalancer_lib/cloudflare.py

@@ -55,7 +55,7 @@ def set_records_round_robin(
     proxied: bool,
     comment: str = None,
     cloudflare_api_token: str,
-):
+) -> bool:
     headers = {'Authorization': f'Bearer {cloudflare_api_token}'}
 
     dns_records = get_dns_records_round_robin(zone_id, cloudflare_api_token=cloudflare_api_token)
@@ -64,7 +64,7 @@ def set_records_round_robin(
     current_ips = {r['content'] for r in current_records}
     if current_ips == host_ip_set:
         print(f'No need to update records: {name} currently set: {sorted(current_ips)}')
-        return
+        return False
 
     # changing records
 
@@ -92,6 +92,8 @@ def set_records_round_robin(
         data = res.json()
         assert data['success'] is True
 
+    return True
+
 
 def delete_record(zone_id, *, id_: str, cloudflare_api_token: str):
     headers = {'Authorization': f'Bearer {cloudflare_api_token}'}

scripts/loadbalancer/loadbalancer_lib/curl.py

@@ -14,6 +14,7 @@ def pycurl_status(url, domain, host_ip):
     c.setopt(c.CAINFO, '/etc/ssl/certs/ca-certificates.crt')
     c.setopt(c.RESOLVE, [f'{domain}:443:{host_ip}'])
     c.setopt(c.NOBODY, True)
+    c.setopt(c.TIMEOUT, 5)
     c.perform()
     status_code = c.getinfo(c.RESPONSE_CODE)
     c.close()
@@ -33,6 +34,7 @@ def pycurl_get(url, domain, host_ip):
     c.setopt(c.CAINFO, '/etc/ssl/certs/ca-certificates.crt')
     c.setopt(c.RESOLVE, [f'{domain}:443:{host_ip}'])
     c.setopt(c.WRITEDATA, buffer)
+    c.setopt(c.TIMEOUT, 5)
     c.perform()
     status_code = c.getinfo(c.RESPONSE_CODE)
     c.close()

website/src/pages/index.astro

@@ -23,7 +23,8 @@ import { Content as RestText } from '../content/index/rest.md'
       Have a look at the default styles and read more about how to integrate it to your website or
       app here:
     </p>
-    <p style="margin: 20px auto;"><a href="/quick_start">Quick Start Guide</a></p>
+
+    <a class="quick-start-button" href="/quick_start">Quick Start Guide</a>
 
     <Donate />
     <RestText />