#!/bin/env bash
#os_iptables_9090.sh
#iptables屏蔽9090端口的访问
#0为正常,1为异常

board_ip="1.2.3.4"
TidbHome=$(awk -F: -v un="tidb" '{if($1==un){print $6;exit}}' /etc/passwd 2>/dev/null)
[ -f ${TidbHome}/scripts/normalcheck/config/tidb_vars.config ] && source ${TidbHome}/scripts/normalcheck/config/tidb_vars.config

iptables_drop=$(sudo iptables -nL|awk '{if($1=="DROP" && $4~"0.0.0.0" && $5~"0.0.0.0" && $7=="dpt:9090"){printf "%s",$4}}')
iptables_accept=$(sudo iptables -nL|awk '{if($1=="ACCEPT" && $7=="dpt:9090"){gsub("/.*","",$4);printf "%s ",$4}}')

if [ -z "${iptables_drop}" -o -z "${iptables_accept}" ]
then
    echo "kv:iptables限制9090端口"
    echo "kv:1"
    exit 0
fi

for _ip in ${iptables_accept}
do
    echo "${CLUSTERNODES} ${board_ip}" | grep -w ${_ip}
    if [ $? -ne 0 ]
    then
        echo "kv:iptables限制9090端口"
        echo "kv:1"
        exit 0
    fi
done

echo "kv:iptables限制9090端口"
echo "kv:0"