Kea DHCP Server

Kea DHCP 服务配置。

搜索

3 / 3

安装

命令

apt install gnupg dirmngr apt-transport-https ca-certificates curl sudo

命令

apt search mariadb-server

命令

apt install mariadb-server

命令

mysql_secure_installation

命令

systemctl status mariadb

命令

mysql -u root

命令

curl -1sLf   'https://dl.cloudsmith.io/public/isc/kea-2-6/setup.deb.sh'   | sudo -E bash

命令

apt search isc-kea

命令

apt install isc-kea-admin isc-kea-ctrl-agent isc-kea-dhcp4

命令

kea-admin db-init mysql -u kea -p 123456 -n kea

命令

nano /etc/kea/kea-dhcp4.conf

配置文件

配置块

{
  "Dhcp4": {
    "interfaces-config": {
      "interfaces": ["enp6s19"]
    },
    "lease-database": {
      "type": "mysql",
      "name": "kea",
      "user": "kea",
      "password": "123456",
      "host": "127.0.0.1",
      "port": 3306
    },
    "multi-threading": {
       "enable-multi-threading": true,
       "thread-pool-size": 12,
       "packet-queue-size": 66
    },
    "control-socket": {
      "socket-type": "unix",
      "socket-name": "/tmp/kea4-ctrl-socket"
    },
        "hooks-libraries": [
            {
                "library": "/usr/lib/x86_64-linux-gnu/kea/hooks/libdhcp_lease_cmds.so"
            },
#/usr/local/lib/kea/hooks/sequential_ip.so
#/            {
  #/              "library": "/usr/local/lib/kea/hooks/ignore_option50.so"
    #/        },
            {
                "library": "/usr/lib/x86_64-linux-gnu/kea/hooks/libdhcp_stat_cmds.so"
            }
        ],
    "expired-leases-processing": {
      "reclaim-timer-wait-time": 10,
      "flush-reclaimed-timer-wait-time": 25,
      "hold-reclaimed-time": 172800,
      "max-reclaim-leases": 100,
      "max-reclaim-time": 250,
      "unwarned-reclaim-cycles": 5
    },
    "subnet4": [
      {
        "id": 1,
        "subnet": "10.255.252.0/22",
        "pools": [
          { "pool": "10.255.252.100 - 10.255.255.254" }
        ],
        "reservations-global": true,
        "option-data": [
          { "name": "routers", "data": "10.255.252.10" },
          { "name": "subnet-mask", "data": "255.255.252.0" },
          { "name": "domain-name-servers", "data": "8.8.8.8" },
          { "name": "domain-name", "data": "local.lan" }
        ]
      }
    ],
    "valid-lifetime": 43200,
    "renew-timer": 14400,
    "rebind-timer": 28800,
    "loggers": [
      {
        "name": "kea-dhcp4",
        "output-options": [
          {
            "output": "stdout",
            "pattern": "%-5p %m\n",
            "flush": false,
            "maxsize": 5242880,
            "maxver": 10
          }
        ],
        "severity": "INFO"
      }
    ]
  }
}

命令

systemctl restart isc-kea-dhcp4-server.service

命令

systemctl status isc-kea-dhcp4-server.service

命令

systemctl status isc-kea-ctrl-agent.service

命令

systemctl restart isc-kea-ctrl-agent.service

DHCP租约信息webui

python脚本

配置块

import requests
import time

# Kea DHCP Control Agent API 地址
KEA_API_URL = "http://127.0.0.1:8000/"

def get_dhcp_leases():
    """从 Kea API 获取 DHCP 租约信息，并格式化输出"""
    try:
        # 发送 API 请求
        response = requests.post(KEA_API_URL, json={
            "command": "lease4-get-all",
            "service": ["dhcp4"]
        }, timeout=5)

        data = response.json()

        # 确保 API 返回的是一个列表，并获取第一个元素
        if not isinstance(data, list) or len(data) == 0:
            print("❌ API 返回数据格式错误: 不是列表")
            return

        data = data[0]  # 取列表中的第一个 JSON 对象

        # 检查 API 响应是否正确
        if "result" in data and data["result"] != 0:
            print(f"❌ API 失败: {data.get('text', '未知错误')}")
            return

        if "arguments" not in data or "leases" not in data["arguments"]:
            print("❌ 获取租约信息失败: API 返回数据格式错误")
            return

        leases = data["arguments"]["leases"]

        if not leases:
            print("✅ 没有当前 DHCP 租约")
            return

        current_time = int(time.time())

        # 打印表头
        print(f"{'主机名':<20} {'IP 地址':<15} {'MAC 地址':<18} {'剩余租约时间'}")
        print("=" * 75)

        # 遍历租约
        for lease in leases:
            ip = lease.get("ip-address", "N/A")
            mac = lease.get("hw-address", "N/A")
            hostname = lease.get("hostname", "N/A")
            expire = lease.get("cltt", 0) + lease.get("valid-lft", 0)  # 计算到期时间
            remaining_time = max(expire - current_time, 0)

            # 计算小时、分钟、秒
            hours = remaining_time // 3600
            minutes = (remaining_time % 3600) // 60
            seconds = remaining_time % 60
            remaining_str = f"{hours}小时{minutes}分钟{seconds}秒"

            print(f"{hostname:<20} {ip:<15} {mac:<18} {remaining_str}")

    except requests.exceptions.RequestException as e:
        print(f"❌ 连接 Kea DHCP API 失败: {e}")
    except Exception as e:
        print(f"❌ 发生错误: {e}")

if __name__ == "__main__":
    get_dhcp_leases()

命令

nano index.html

配置块

<!DOCTYPE html>
<html lang="zh">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>DHCP 租约监控</title>
    <style>
        body {
            font-family: Arial, sans-serif;
            text-align: center;
        }
        table {
            width: 80%;
            margin: auto;
            border-collapse: collapse;
        }
        th, td {
            border: 1px solid black;
            padding: 8px;
            text-align: center;
        }
        th {
            background-color: #f2f2f2;
        }
    </style>
    <script>
        function fetchDhcpLeases() {
            fetch("/api/dhcp-leases")
                .then(response => response.json())
                .then(data => {
                    let tableBody = document.getElementById("lease-table-body");
                    tableBody.innerHTML = "";

                    data.forEach(lease => {
                        let row = `<tr>
                            <td>${lease.ip}</td>
                            <td>${lease.mac}</td>
                            <td>${lease.hostname}</td>
                            <td>${lease.remaining_time} 秒</td>
                        </tr>`;
                        tableBody.innerHTML += row;
                    });
                })
                .catch(error => console.error("获取 DHCP 租约失败:", error));
        }

        // 页面加载时获取数据
        window.onload = function () {
            fetchDhcpLeases();
            setInterval(fetchDhcpLeases, 1000); // 每秒刷新
        };
    </script>
</head>
<body>
    <h2>DHCP 租约监控</h2>
    <table>
        <thead>
            <tr>
                <th>IP 地址</th>
                <th>MAC 地址</th>
                <th>主机名</th>
                <th>租约剩余时间</th>
            </tr>
        </thead>
        <tbody id="lease-table-body">
            <!-- 数据将在这里填充 -->
        </tbody>
    </table>
</body>
</html>

命令

nano app.py

配置块

from flask import Flask, jsonify, render_template
import requests
import time

app = Flask(__name__)

# Kea DHCP Control Agent API 地址
KEA_API_URL = "http://127.0.0.1:8000/"

def get_dhcp_leases():
    """从 Kea API 获取 DHCP 租约信息，并格式化输出"""
    try:
        # 向 Kea API 发送 POST 请求
        response = requests.post(KEA_API_URL, json={
            "command": "lease4-get-all",
            "service": ["dhcp4"]
        }, timeout=5)

        data = response.json()

        # 检查返回的数据格式
        if not isinstance(data, list) or len(data) == 0:
            return {"error": "API 返回数据格式错误: 不是列表"}

        data = data[0]  # 取列表中的第一个 JSON 对象

        # 检查 API 响应是否正确
        if "result" in data and data["result"] != 0:
            return {"error": f"API 失败: {data.get('text', '未知错误')}"}

        if "arguments" not in data or "leases" not in data["arguments"]:
            return {"error": "获取租约信息失败: API 返回数据格式错误"}

        leases = data["arguments"]["leases"]

        current_time = int(time.time())
        leases_info = []

        # 遍历每个租约
        for lease in leases:
            ip = lease.get("ip-address", "N/A")
            mac = lease.get("hw-address", "N/A")
            hostname = lease.get("hostname", "N/A")
            expire = lease.get("cltt", 0) + lease.get("valid-lft", 0)  # 计算到期时间戳
            remaining_time = max(expire - current_time, 0)

            # 格式化剩余时间为 “X小时Y分钟Z秒”
            hours = remaining_time // 3600
            minutes = (remaining_time % 3600) // 60
            seconds = remaining_time % 60
            remaining_str = f"{hours}小时{minutes}分钟{seconds}秒"

            leases_info.append({
                "hostname": hostname,
                "ip": ip,
                "mac": mac,
                "remaining": remaining_str
            })

        return {"leases": leases_info}

    except requests.exceptions.RequestException as e:
        return {"error": f"连接 Kea DHCP API 失败: {e}"}
    except Exception as e:
        return {"error": f"发生错误: {e}"}

@app.route("/leases")
def leases():
    """返回 DHCP 租约信息的 JSON 数据"""
    result = get_dhcp_leases()
    return jsonify(result)

@app.route("/")
def index():
    """返回前端页面"""
    return render_template("index.html")

if __name__ == "__main__":
    # 启动 Flask 服务（生产环境请使用 WSGI 服务器）
    app.run(host="0.0.0.0", port=5001, debug=True)

命令

nano /etc/systemd/system/flask-kea.service

配置块

[Unit]
Description=Flask Kea DHCP Monitor
After=network.target

[Service]
# 如果使用虚拟环境，需要指定 ExecStart 的完整路径
# 假设 app.py 位于 /opt/flask_kea/app.py
# 注意 Python 解释器改为 venv 内的解释器
ExecStart=/opt/flask_kea/venv/bin/python3 /opt/flask_kea/app.py

# 指定工作目录
WorkingDirectory=/opt/flask_kea

# 如果需要环境变量，可以在此添加:
# Environment=FLASK_ENV=production
# Environment=KeaApiUrl=http://127.0.0.1:8000/

# 建议以普通用户运行，减少安全风险（需提前创建并存在的用户）
User=www-data
Group=www-data

# 允许接受 Ctrl+C 等信号；KillMode=process 表示杀进程本身
KillMode=process
# 超时后强杀
TimeoutStopSec=5

# 自动重启策略（可选）
Restart=on-failure
RestartSec=2

[Install]
WantedBy=multi-user.target

mysql

命令

mysql_secure_installation

命令

mysql -u root

命令

CREATE DATABASE database_name;

命令

CREATE USER 'kea'@'localhost' IDENTIFIED BY '123456';

命令

GRANT ALL ON kea.* TO 'kea'@'localhost';

命令

kea-admin db-init mysql -u kea -p 123456 -n kea