Skip to content

flushed out network security group sample :) #891

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
martinsawicki merged 4 commits into from
Jun 24, 2016
Merged

flushed out network security group sample :) #891

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
8ebff93
first version of network security group sample
selvasingh Jun 23, 2016
1486b56
Merge branch 'master' of https://github.com/selvasingh/azure-sdk-for-…
selvasingh Jun 23, 2016
9683779
flushed out network security group sample :)
selvasingh Jun 23, 2016
0a31ab7
Rolling back ManageNetworkInterface
selvasingh Jun 23, 2016
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
303 changes: 294 additions & 9 deletions .../main/java/com/microsoft/azure/management/network/samples/ManageNetworkSecurityGroup.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,13 +7,31 @@

package com.microsoft.azure.management.network.samples;

import com.microsoft.azure.Azure;
import com.microsoft.azure.management.compute.KnownLinuxVirtualMachineImage;
import com.microsoft.azure.management.compute.VirtualMachine;
import com.microsoft.azure.management.compute.implementation.api.VirtualMachineSizeTypes;
import com.microsoft.azure.management.network.Network;
import com.microsoft.azure.management.network.NetworkSecurityGroup;
import com.microsoft.azure.management.network.NetworkInterface;
import com.microsoft.azure.management.network.NetworkSecurityRule;
import com.microsoft.azure.management.resources.fluentcore.arm.Region;
import com.microsoft.azure.management.resources.fluentcore.utils.ResourceNamer;
import com.microsoft.azure.management.samples.Utils;
import okhttp3.logging.HttpLoggingInterceptor;

import java.io.File;
import java.util.Date;
import java.util.List;

/**
* Azure Network sample for managing network security groups -
* - Create a network security group for the front end of a subnet
* - Create a network security group fro the back end of a subnet
* - Create a network security group for the back end of a subnet
* - Create Linux virtual machines for the front end and back end
* -- Apply network security groups
* - List network security groups
* - Update a network security group
* - Delete a network security group.
* - Update a network security group.
*/

public final class ManageNetworkSecurityGroup {
Expand All @@ -24,20 +42,287 @@ public final class ManageNetworkSecurityGroup {
*/
public static void main(String[] args) {

final String frontEndNSGName = ResourceNamer.randomResourceName("fensg", 24);
final String backEndNSGName = ResourceNamer.randomResourceName("bensg", 24);
final String rgName = ResourceNamer.randomResourceName("rgNEMS", 24);
final String vnetName = ResourceNamer.randomResourceName("vnet", 24);
final String networkInterfaceName1 = ResourceNamer.randomResourceName("nic1", 24);
final String networkInterfaceName2 = ResourceNamer.randomResourceName("nic2", 24);
final String publicIpAddressLeafDNS1 = ResourceNamer.randomResourceName("pip1", 24);
final String frontEndVMName = ResourceNamer.randomResourceName("fevm", 24);
final String backEndVMName = ResourceNamer.randomResourceName("bevm", 24);
final String userName = "tirekicker";
final String password = "12NewPA$$w0rd!";
final String sshKey = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfSPC2K7LZcFKEO+/t3dzmQYtrJFZNxOsbVgOVKietqHyvmYGHEC0J2wPdAqQ/63g/hhAEFRoyehM+rbeDri4txB3YFfnOK58jqdkyXzupWqXzOrlKY4Wz9SKjjN765+dqUITjKRIaAip1Ri137szRg71WnrmdP3SphTRlCx1Bk2nXqWPsclbRDCiZeF8QOTi4JqbmJyK5+0UqhqYRduun8ylAwKKQJ1NJt85sYIHn9f1Rfr6Tq2zS0wZ7DHbZL+zB5rSlAr8QyUdg/GQD+cmSs6LvPJKL78d6hMGk84ARtFo4A79ovwX/Fj01znDQkU6nJildfkaolH2rWFG/qttD azjava@javalib.com";


try {

// Create a network security group for the front end of a subnet
//=============================================================
// Authenticate

final File credFile = new File("my.azureauth");

Azure azure = Azure
.configure()
.withLogLevel(HttpLoggingInterceptor.Level.BASIC)
.authenticate(credFile)
.withDefaultSubscription();

// Print selected subscription
System.out.println("Selected subscription: " + azure.subscriptionId());

try {

// Define a virtual network for VMs in this availability set

System.out.println("Creating a virtual network ...");

Network network = azure.networks()
.define(vnetName)
.withRegion(Region.US_EAST)
.withNewGroup(rgName)
.withAddressSpace("172.16.0.0/16")
.defineSubnet("Front-end")
.withAddressPrefix("172.16.1.0/24")
.attach()
.defineSubnet("Back-end")
.withAddressPrefix("172.16.2.0/24")
.attach()
.create();

System.out.println("Created a virtual network: " + network.id());
Utils.print(network);

//============================================================
// Create a network security group for the front end of a subnet
// front end subnet contains two rules
// - ALLOW-SSH - allows SSH traffic into the front end subnet
// - ALLOW-WEB- allows HTTP traffic into the front end subnet

System.out.println("Creating a security group for the front end - allows SSH and HTTP");
NetworkSecurityGroup frontEndNSG = azure.networkSecurityGroups().define(frontEndNSGName)
.withRegion(Region.US_EAST)
.withNewGroup(rgName)
.defineRule("ALLOW-SSH")
.allowInbound()
.fromAnyAddress()
.fromAnyPort()
.toAnyAddress()
.toPort(22)
.withProtocol(NetworkSecurityRule.Protocol.TCP)
.withPriority(100)
.withDescription("Allow SSH")
.attach()
.defineRule("ALLOW-HTTP")
.allowInbound()
.fromAnyAddress()
.fromAnyPort()
.toAnyAddress()
.toPort(80)
.withProtocol(NetworkSecurityRule.Protocol.TCP)
.withPriority(101)
.withDescription("Allow HTTP")
.attach()
.create();

System.out.println("Created a security group for the front end: " + frontEndNSG.id());
Utils.print(frontEndNSG);


//============================================================
// Create a network security group for the back end of a subnet
// back end subnet contains two rules
// - ALLOW-SQL - allows SQL traffic only from the front end subnet
// - DENY-WEB - denies all outbound internet traffic from the back end subnet

System.out.println("Creating a security group for the front end - allows SSH and "
+ "denies all outbound internet traffic ");

NetworkSecurityGroup backEndNSG = azure.networkSecurityGroups().define(backEndNSGName)
.withRegion(Region.US_EAST)
.withExistingGroup(rgName)
.defineRule("ALLOW-SQL")
.allowInbound()
.fromAddress("172.16.1.0/24")
.fromAnyPort()
.toAnyAddress()
.toPort(1433)
.withProtocol(NetworkSecurityRule.Protocol.TCP)
.withPriority(100)
.withDescription("Allow SQL")
.attach()
.defineRule("DENY-WEB")
.denyOutbound()
.fromAnyAddress()
.fromAnyPort()
.toAnyAddress()
.toAnyPort()
.withAnyProtocol()
.withDescription("Deny Web")
.withPriority(200)
.attach()
.create();

System.out.println("Created a security group for the back end: " + backEndNSG.id());
Utils.print(backEndNSG);

System.out.println("Creating multiple network interfaces");
System.out.println("Creating network interface 1");


//========================================================
// Create a network interface and apply the
// front end network security group

System.out.println("Creating a network interface for the front end");

NetworkInterface networkInterface1 = azure.networkInterfaces().define(networkInterfaceName1)
.withRegion(Region.US_EAST)
.withExistingGroup(rgName)
.withExistingPrimaryNetwork(network)
.withSubnet("Front-end")
.withPrimaryPrivateIpAddressDynamic()
.withNewPrimaryPublicIpAddress(publicIpAddressLeafDNS1)
.withIpForwarding()
.create();

System.out.println("Created network interface for the front end");

System.out.println("Applying front end network security group to network interface 1");
networkInterface1.update()
.withExistingNetworkSecurityGroup(frontEndNSG)
.apply();
System.out.println("Applied front end network security group to network interface 1");
Utils.print(networkInterface1);


//========================================================
// Create a network interface and apply the
// back end network security group

System.out.println("Creating a network interface for the back end");

NetworkInterface networkInterface2 = azure.networkInterfaces().define(networkInterfaceName2)
.withRegion(Region.US_EAST)
.withExistingGroup(rgName)
.withExistingPrimaryNetwork(network)
.withSubnet("Back-end")
.withPrimaryPrivateIpAddressDynamic()
.create();

System.out.println("Created network interface for the back end");

System.out.println("Applying back end network security group to network interface 2");
networkInterface2.update()
.withExistingNetworkSecurityGroup(backEndNSG)
.apply();
System.out.println("Applied back end network security group to network interface 2");
Utils.print(networkInterface2);


//=============================================================
// Create a virtual machine (for the front end)
// with the network interface that has the network security group for the front end

System.out.println("Creating a Linux virtual machine (for the front end) - "
+ "with the network interface that has the network security group for the front end");

Date t1 = new Date();

VirtualMachine frontEndVM = azure.virtualMachines().define(frontEndVMName)
.withRegion(Region.US_EAST)
.withExistingGroup(rgName)
.withExistingPrimaryNetworkInterface(networkInterface1)
.withPopularLinuxImage(KnownLinuxVirtualMachineImage.UBUNTU_SERVER_16_04_LTS)
.withRootUserName(userName)
.withSsh(sshKey)
.withSize(VirtualMachineSizeTypes.STANDARD_D3_V2)
.create();

Date t2 = new Date();
System.out.println("Created Linux VM: (took "
+ ((t2.getTime() - t1.getTime()) / 1000) + " seconds) " + frontEndVM.id());
// Print virtual machine details
Utils.print(frontEndVM);


//=============================================================
// Create a virtual machine (for the back end)
// with the network interface that has the network security group for the back end

System.out.println("Creating a Linux virtual machine (for the back end) - "
+ "with the network interface that has the network security group for the back end");

t1 = new Date();

VirtualMachine backEndVM = azure.virtualMachines().define(backEndVMName)
.withRegion(Region.US_EAST)
.withExistingGroup(rgName)
.withExistingPrimaryNetworkInterface(networkInterface2)
.withPopularLinuxImage(KnownLinuxVirtualMachineImage.UBUNTU_SERVER_16_04_LTS)
.withRootUserName(userName)
.withSsh(sshKey)
.withSize(VirtualMachineSizeTypes.STANDARD_D3_V2)
.create();

t2 = new Date();
System.out.println("Created a Linux VM: (took "
+ ((t2.getTime() - t1.getTime()) / 1000) + " seconds) " + backEndVM.id());
Utils.print(backEndVM);


//========================================================
// List network security groups

System.out.println("Walking through network security groups");
List<NetworkSecurityGroup> networkSecurityGroups = azure.networkSecurityGroups().listByGroup(rgName);

for (NetworkSecurityGroup networkSecurityGroup: networkSecurityGroups) {
Utils.print(networkSecurityGroup);
}


//========================================================
// Update a network security group

System.out.println("Updating the front end network security group to allow FTP");

// Create a network security group fro the back end of a subnet
frontEndNSG.update()
.defineRule("ALLOW-FTP")
.allowInbound()
.fromAnyAddress()
.fromAnyPort()
.toAnyAddress()
.toPortRange(20, 21)
.withProtocol(NetworkSecurityRule.Protocol.TCP)
.withDescription("Allow FTP")
.withPriority(200)
.attach()
.apply();

// List network security groups
System.out.println("Updated the front end network security group");
Utils.print(frontEndNSG);
} catch (Exception f) {

// Update a network security group
System.out.println(f.getMessage());
f.printStackTrace();

// Delete a network security group
} finally {

try {
System.out.println("Deleting Resource Group: " + rgName);
azure.resourceGroups().delete(rgName);
System.out.println("Deleted Resource Group: " + rgName);
} catch (NullPointerException npe) {
System.out.println("Did not create any resources in Azure. No clean up is necessary");
} catch (Exception g) {
g.printStackTrace();
}
}
} catch (Exception e) {
System.err.println(e.getMessage());
System.out.println(e.getMessage());
e.printStackTrace();
}
}

Expand Down