华为云的API调用实践（python版本）

一、结论：

1、华为云是符合openstack 社区的API，所以，以社区的API为准。社区API见下面的链接。

https://developer.openstack.org/api-ref/network/v2/index.html

二、调用前准备

1、python的API调用前，需要准备好python的运行环境，以及在华为云上已经注册用户。

python的运行环境具体是指（1）python安装包（2）openstack社区的API库，下面有介绍。

华为云注册用户，正常在官网上注册即可。

2、python的安装包

略（到python官网下载 python2.7版本，安装即可）

3、openstack社区的API库（python版本）

　　（1）下载openstack 客户端开发包，地址如下，下载其中的.gz压缩包

　　　　https://pypi.python.org/pypi/python-openstackclient

　　（2）安装客户端开发包

　　　　在windows系统中，解压缩上述压缩包，然后进入到解压缩后的文件夹中，输入 python setup.py install

4、获取username，project_name, project_domain_id, user_domain_id

　　方法：

第一步，在华为云登录后，在页面右上角点击 “我的凭证”

　　

第二步、在我的凭证中，分别获得 username, project_name, project_domain_id, user_domain_id

　　

5、获得所在区域的IAM认证的地址

　　方法:

第一步：华为云首页，“支持与服务” ，选择"OpenAPI"

　　

第二步：点击“地区和终端节点”

第三步：在搜索栏中输入“IAM”，得到所在区域的IAM认证地址。

　　

上面得到的终端节点，就是 auth_url 的内容主体。

三、API调用思路：

　　1、调用思路：

　　认证  ---> 建会话  ---> 建客户端实例  ---> API调用。

　　2、程序示例：

说明，下面代码中的  username, project_name, project_domain_id, user_domain_id, auth_url 的内容获取方法，见“二、调用前准备”中的对应内容。

　　　　

四、调用步骤

根据API文档，以及 client.Client的代码，可以看到有哪些API可以调用。

1、示例代码

 import json
 import time
 from keystoneauth1 import identity
 from keystoneauth1 import session
 from neutronclient.v2_0 import client

 username='xxx'
 password='xxx'
 project_name='xxx'
 project_domain_id='xxx'
 user_domain_id='xxx'
 auth_url='https://iam.cn-north-1.myhuaweicloud.com/v3'
 auth = identity.Password(auth_url=auth_url,
                          username=username,
                          password=password,
                          project_name=project_name,
                          project_domain_id=project_domain_id,
                          user_domain_id=user_domain_id)
 sess = session.Session(auth=auth)
 neutron = client.Client(session=sess)

 def createvpn(vpcid, local_cidr, peer_ip, peer_cidr):
     print "######## create vpn  ######"
     print "################### step 1 vpn service ############"

     vpnservice = {
         "vpnservice": {
             "router_id": vpcid,
             "name": "myservice",
             "admin_state_up": "true"
         }
     }

     ret = neutron.create_vpnservice(vpnservice)

     vpnserviceid = ret['vpnservice']['id']
     print "vpnserviceid = "+vpnserviceid

     print "public_ip = "+ret['vpnservice']['external_v4_ip']

     print "################### step 2 ike policy ############"

     ikepolicy = {
         "ikepolicy": {
             "phase1_negotiation_mode": "main",
             "auth_algorithm": "sha1",
             "encryption_algorithm": "aes-128",
             "pfs": "group5",
             "lifetime": {
                 "units": "seconds",
                 "value": 86400
             },
             "ike_version": "v1",
             "name": "ikepolicy1"
         }
     }

     ret = neutron.create_ikepolicy(ikepolicy)

     ikepolicyid = ret['ikepolicy']['id']
     print "ikepolicyid = "+ikepolicyid

     print "################### step 3 ipsec policy ############"

     ipsecpolicy = {
         "ipsecpolicy": {
             "name": "ipsecpolicy1",
             "transform_protocol": "esp",
             "auth_algorithm": "sha1",
             "encapsulation_mode": "tunnel",
             "encryption_algorithm": "aes-128",
             "pfs": "group5",
             "lifetime": {
                 "units": "seconds",
                 "value": 3600
             }
         }
     }

     ret = neutron.create_ipsecpolicy(ipsecpolicy)

     ipsecpolicyid = ret['ipsecpolicy']['id']
     print "ipsecpolicyid = "+ipsecpolicyid

     print "################### step 4 local and remote endpoints ############"

     localendpointgroup = {
         "endpoint_group": {
             "endpoints": local_cidr,
             "type": "cidr",
             "name": "my-localendpoints"
         }
     }

     ret = neutron.create_endpoint_group(localendpointgroup)

     localepgroupid = ret['endpoint_group']['id']
     print "localepgroupid = "+localepgroupid

     #### remote endpoint group
     remoteendpointgroup = {
         "endpoint_group": {
             "endpoints": peer_cidr,
             "type": "cidr",
             "name": "remote-localendpoints"
         }
     }

     ret = neutron.create_endpoint_group(remoteendpointgroup)

     remoteepgroupid = ret['endpoint_group']['id']
     print "remoteepgroupid = "+remoteepgroupid

     print "################### step 5 ipsec connection ############"

     ipsecconnection = {
         "ipsec_site_connection": {
             "psk": "secret",
             "initiator": "bi-directional",
             "ipsecpolicy_id": ipsecpolicyid,
             "admin_state_up": "true",
             "mtu": "",
             "peer_ep_group_id": remoteepgroupid,
             "ikepolicy_id": ikepolicyid,
             "vpnservice_id": vpnserviceid,
             "local_ep_group_id": localepgroupid,
             "peer_address": peer_ip,
             "peer_id": peer_ip,
             "name": "vpnconnection1"
         }
     }

     ret = neutron.create_ipsec_site_connection(ipsecconnection)

     ipsec_connection_id = ret['ipsec_site_connection']['id']
     print "ipsec_connection_id = "+ipsec_connection_id

 def update_peer_ip(masterip, backupip):
     print "######## update peer ip ######"
     newcontent = {
         "ipsec_site_connection": {
             "peer_address": backupip,
             "peer_id":backupip
         }
     }

     connections = neutron.list_ipsec_site_connections()

     entrys = connections['ipsec_site_connections']
     for entry in entrys:
         if (masterip == entry["peer_address"]):
             id = entry["id"]
             neutron.update_ipsec_site_connection(id, newcontent)
             time.sleep(3)           

 def show_all_connections():
     print "######## show all ipsec connections "
     connections = neutron.list_ipsec_site_connections()
     entrys = connections['ipsec_site_connections']
     for entry in entrys:
         print entry  

 def main():

     createvpn(vpcid="xxx",
               local_cidr=["10.2.0.0/24","10.3.0.0/24"],
               peer_ip="172.24.4.233",
               peer_cidr=["20.2.0.0/24"])

     show_all_connections()
     #update_peer_ip(masterip="172.24.4.233", backupip="101.0.0.1")

 if __name__ == '__main__':
     main()

2、查看有哪些函数可以调用。