use a process-queue to avoid xtables errors

lib/child_utils.js

@@ -0,0 +1,61 @@
+var processQueue = require('process-queue');
+
+var default_queue = processQueue.createQueue({concurrency:1});
+
+exports.exec = function (line, opts, cb) {
+  var stdout, stdout_length, stderr, stderr_length;
+
+  // avoid allocation
+  if (cb) {
+    stdout = [];
+    stdout_length = 0;
+    stderr = [];
+    stderr_length = 0;
+  }
+
+  var child;
+  var queue = opts.queue || default_queue;
+  if (cb) {
+    queue = queue.wrap({
+      child: function (spawned_child, next) {
+        child = spawned_child;
+        if (cb) {
+          child.stdout.on('data', function (data) {
+            if (!Buffer.isBuffer(data)) data = new Buffer(data);
+            stdout_length += data.length;
+            stdout.push(data);
+          });
+          child.stderr.on('data', function (data) {
+            if (!Buffer.isBuffer(data)) data = new Buffer(data);
+            stderr_length += data.length;
+            stderr.push(data);
+          });
+        }
+        next(null, child);
+      }
+    });
+  }
+  var cmd = {
+    spawnOptions: ['sh', ['-c', 'exec ' + line]]
+  };
+  function onFinish(err) {
+    if (!cb) return;
+    if (!child) {
+      cb(new Error('there was a problem spawning the child process'));
+      return;
+    }
+    if (err) {
+      err.killed = child.killed;
+      err.code = child.exitCode;
+      err.signal = child.signalCode;
+    } 
+    cb(err,
+       stdout_length ? String(Buffer.concat(stdout, stdout_length)) : '',
+       stderr_length ? String(Buffer.concat(stderr, stderr_length)) : ''
+    );
+  }
+  queue.push(cmd, onFinish);
+
+  // cleanup for gc
+  cmd = null;
+}

lib/ipset/add.js

@@ -1,4 +1,4 @@
-var exec = require('child_process').exec;
+var exec = require('../child_utils').exec;
 
 /**
  * Add a given entry to the set.
@@ -46,7 +46,7 @@ module.exports = function (options, cb) {
   /*
    * Execute command.
    */
-  exec(cmd.concat(args).join(' '), function (error, stdout, stderror) {
+  exec(cmd.concat(args).join(' '), {queue: options.cmdQueue}, function (error, stdout, stderror) {
     if (error && cb) {
       var err = new Error(stderror.split('\n')[0]);
       err.cmd = cmd.concat(args).join(' ');
@@ -58,4 +58,4 @@ module.exports = function (options, cb) {
       cb(null);
     }
   });
-};
+};

lib/ipset/create.js

@@ -1,4 +1,4 @@
-var exec = require('child_process').exec;
+var exec = require('../child_utils').exec;
 
 /**
  * Create a set identified with setsetname and specified type.
@@ -46,7 +46,7 @@ module.exports = function (options, cb) {
   /*
    * Execute command.
    */
-  exec(cmd.concat(args).join(' '), function (error, stdout, stderror) {
+  exec(cmd.concat(args).join(' '), {queue: options.cmdQueue}, function (error, stdout, stderror) {
     if (error && cb) {
       var err = new Error(stderror.split('\n')[0]);
       err.cmd = cmd.concat(args).join(' ');
@@ -58,4 +58,4 @@ module.exports = function (options, cb) {
       cb(null);
     }
   });
-};
+};

lib/ipset/del.js

@@ -1,4 +1,4 @@
-var exec = require('child_process').exec;
+var exec = require('../child_utils').exec;
 
 /**
  * Delete an entry from a set.
@@ -46,7 +46,7 @@ module.exports = function (options, cb) {
   /*
    * Execute command.
    */
-  exec(cmd.concat(args).join(' '), function (error, stdout, stderror) {
+  exec(cmd.concat(args).join(' '), {queue: options.cmdQueue}, function (error, stdout, stderror) {
     if (error && cb) {
       var err = new Error(stderror.split('\n')[0]);
       err.cmd = cmd.concat(args).join(' ');
@@ -58,4 +58,4 @@ module.exports = function (options, cb) {
       cb(null);
     }
   });
-};
+};

lib/ipset/destroy.js

@@ -1,4 +1,4 @@
-var exec = require('child_process').exec;
+var exec = require('../child_utils').exec;
 
 /**
  * Destroy the specified set or all the sets if none is given.
@@ -44,7 +44,7 @@ module.exports = function (/* options?, cb */) {
   /*
    * Execute command.
    */
-  exec(cmd.concat(args).join(' '), function (error, stdout, stderror) {
+  exec(cmd.concat(args).join(' '), {queue: options.cmdQueue}, function (error, stdout, stderror) {
     if (error && cb) {
       var err = new Error(stderror.split('\n')[0]);
       err.cmd = cmd.concat(args).join(' ');
@@ -56,4 +56,4 @@ module.exports = function (/* options?, cb */) {
       cb(null);
     }
   });
-};
+};

lib/ipset/flush.js

@@ -1,4 +1,4 @@
-var exec = require('child_process').exec;
+var exec = require('../child_utils').exec;
 
 /**
  * Flush all entries from the specified set or flush all sets if none is given.
@@ -44,7 +44,7 @@ module.exports = function (/* options?, cb */) {
   /*
    * Execute command.
    */
-  exec(cmd.concat(args).join(' '), function (error, stdout, stderror) {
+  exec(cmd.concat(args).join(' '), {queue: options.cmdQueue}, function (error, stdout, stderror) {
     if (error && cb) {
       var err = new Error(stderror.split('\n')[0]);
       err.cmd = cmd.concat(args).join(' ');
@@ -56,4 +56,4 @@ module.exports = function (/* options?, cb */) {
       cb(null);
     }
   });
-};
+};

lib/ipset/rename.js

@@ -1,4 +1,4 @@
-var exec = require('child_process').exec;
+var exec = require('../child_utils').exec;
 
 /**
  * Rename a set.
@@ -35,7 +35,7 @@ module.exports = function (options, cb) {
   /*
    * Execute command.
    */
-  exec(cmd.concat(args).join(' '), function (error, stdout, stderror) {
+  exec(cmd.concat(args).join(' '), {queue: options.cmdQueue}, function (error, stdout, stderror) {
     if (error && cb) {
       var err = new Error(stderror.split('\n')[0]);
       err.cmd = cmd.concat(args).join(' ');
@@ -47,4 +47,4 @@ module.exports = function (options, cb) {
       cb(null);
     }
   });
-};
+};

lib/ipset/swap.js

@@ -1,4 +1,4 @@
-var exec = require('child_process').exec;
+var exec = require('../child_utils').exec;
 
 /**
  * Swap the content of two sets.
@@ -35,7 +35,7 @@ module.exports = function (options, cb) {
   /*
    * Execute command.
    */
-  exec(cmd.concat(args).join(' '), function (error, stdout, stderror) {
+  exec(cmd.concat(args).join(' '), {queue: options.cmdQueue}, function (error, stdout, stderror) {
     if (error && cb) {
       var err = new Error(stderror.split('\n')[0]);
       err.cmd = cmd.concat(args).join(' ');
@@ -47,4 +47,4 @@ module.exports = function (options, cb) {
       cb(null);
     }
   });
-};
+};

lib/ipset/test.js

@@ -1,4 +1,4 @@
-var exec = require('child_process').exec;
+var exec = require('../child_utils').exec;
 
 /**
  * Test wether an entry is in a set or not.
@@ -46,7 +46,7 @@ module.exports = function (options, cb) {
   /*
    * Execute command.
    */
-  exec(cmd.concat(args).join(' '), function (error, stdout, stderror) {
+  exec(cmd.concat(args).join(' '), {queue: options.cmdQueue}, function (error, stdout, stderror) {
     if (error && cb) {
       var err = new Error(stderror.split('\n')[0]);
       err.cmd = cmd.concat(args).join(' ');
@@ -58,4 +58,4 @@ module.exports = function (options, cb) {
       cb(null, 0);
     }
   });
-};
+};

lib/ipset/version.js

@@ -1,12 +1,16 @@
-var exec = require('child_process').exec;
+var exec = require('../child_utils').exec;
 
 /**
  * Print program version.
  *
  * @param cb
  */
-module.exports = function (cb) {
-  if (typeof arguments[0] != 'function') {
+module.exports = function (options, cb) {
+  if (typeof options === 'function') {
+    cb = options;
+    options = {};
+  }
+  if (typeof cb != 'function') {
     throw new Error('Invalid arguments. Signature: (callback)');
   }
 
@@ -22,7 +26,7 @@ module.exports = function (cb) {
   /*
    * Execute command.
    */
-  exec(cmd.join(' '), function (error, stdout, stderror) {
+  exec(cmd.join(' '), {queue: options.cmdQueue}, function (error, stdout, stderror) {
     if (error && cb) {
       var err = new Error(stderror.split('\n')[0]);
       err.cmd = cmd.concat(args).join(' ');
@@ -34,4 +38,4 @@ module.exports = function (cb) {
       cb(null, stdout.split('\n')[0]);
     }
   });
-};
+};

lib/iptables/append.js

@@ -1,4 +1,4 @@
-var exec = require('child_process').exec;
+var exec = require('../child_utils').exec;
 
 var tables = require('./utils').tables;
 var processCommonRuleSpecs = require('./utils').processCommonRuleSpecs;
@@ -46,7 +46,7 @@ module.exports = function (options, cb) {
   /*
    * Execute command.
    */
-  exec(cmd.concat(args).join(' '), function (error, stdout, stderror) {
+  exec(cmd.concat(args).join(' '), {queue: options.cmdQueue}, function (error, stdout, stderror) {
     if (error && cb) {
       var err = new Error(stderror.split('\n')[0]);
       err.cmd = cmd.concat(args).join(' ');
@@ -58,4 +58,4 @@ module.exports = function (options, cb) {
       cb(null);
     }
   });
-};
+};

lib/iptables/check.js

@@ -1,4 +1,4 @@
-var exec = require('child_process').exec;
+var exec = require('../child_utils').exec;
 
 var tables = require('./utils').tables;
 var processCommonRuleSpecs = require('./utils').processCommonRuleSpecs;
@@ -51,7 +51,7 @@ module.exports = function (options, cb) {
   /*
    * Execute command.
    */
-  exec(cmd.concat(args).join(' '), function (error, stdout, stderror) {
+  exec(cmd.concat(args).join(' '), {queue: options.cmdQueue}, function (error, stdout, stderror) {
     if (error && cb) {
       var err = new Error(stderror.split('\n')[0]);
       err.cmd = cmd.concat(args).join(' ');

lib/iptables/delete.js

@@ -1,4 +1,4 @@
-var exec = require('child_process').exec;
+var exec = require('../child_utils').exec;
 
 var tables = require('./utils').tables;
 var processCommonRuleSpecs = require('./utils').processCommonRuleSpecs;
@@ -51,7 +51,7 @@ module.exports = function (options, cb) {
   /*
    * Execute command.
    */
-  exec(cmd.concat(args).join(' '), function (error, stdout, stderror) {
+  exec(cmd.concat(args).join(' '), {queue: options.cmdQueue}, function (error, stdout, stderror) {
     if (error && cb) {
       var err = new Error(stderror.split('\n')[0]);
       err.cmd = cmd.concat(args).join(' ');
@@ -63,4 +63,4 @@ module.exports = function (options, cb) {
       cb(null);
     }
   });
-};
+};

lib/iptables/delete_chain.js

@@ -1,4 +1,4 @@
-var exec = require('child_process').exec;
+var exec = require('../child_utils').exec;
 
 var tables = require('./utils').tables;
 
@@ -54,7 +54,7 @@ module.exports = function (/* options?, cb */) {
   /*
    * Execute command.
    */
-  exec(cmd.concat(args).join(' '), function (error, stdout, stderror) {
+  exec(cmd.concat(args).join(' '), {queue: options.cmdQueue}, function (error, stdout, stderror) {
     if (error && cb) {
       var err = new Error(stderror.split('\n')[0]);
       err.cmd = cmd.concat(args).join(' ');
@@ -66,4 +66,4 @@ module.exports = function (/* options?, cb */) {
       cb(null);
     }
   });
-};
+};

lib/iptables/dump.js

@@ -1,4 +1,4 @@
-var exec = require('child_process').exec;
+var exec = require('../child_utils').exec;
 var shell_quote = require('shell-quote');
 
 var tables = require('./utils').tables;
@@ -117,7 +117,7 @@ module.exports = function (options, cb) {
   /*
    * Execute command.
    */
-  exec(cmd.concat(args).join(' '), function (error, stdout, stderror) {
+  exec(cmd.concat(args).join(' '), {queue: options.cmdQueue}, function (error, stdout, stderror) {
     if (error && cb) {
       var err = new Error(stderror.split('\n')[0]);
       err.cmd = cmd.concat(args).join(' ');

lib/iptables/flush.js

@@ -1,4 +1,4 @@
-var exec = require('child_process').exec;
+var exec = require('../child_utils').exec;
 
 var tables = require('./utils').tables;
 
@@ -54,7 +54,7 @@ module.exports = function (/* options?, cb */) {
   /*
    * Execute command.
    */
-  exec(cmd.concat(args).join(' '), function (error, stdout, stderror) {
+  exec(cmd.concat(args).join(' '), {queue: options.cmdQueue}, function (error, stdout, stderror) {
     if (error && cb) {
       var err = new Error(stderror.split('\n')[0]);
       err.cmd = cmd.concat(args).join(' ');
@@ -66,4 +66,4 @@ module.exports = function (/* options?, cb */) {
       cb(null);
     }
   });
-};
+};