// pfSense gateway monitoring script
$script_version = "0.14a (2019-06-11)";
// based on status_gateway.php from pfSense 2.0
// Written by: Tomas Lajbl
// 
// If you want to run this script, use the following syntax (without quotes) 
// on pfSense command line:
// "pfSsh.php playback <script file name>"
// 
// For the first run, create file test.error in /etc/phpshellsessions directory.
//

// Set the correct gateway name here. :)

$gw0 = TUN1_VPNV4;  // main gateway
$gw1 = TUN3_VPNV4;  // backup gateway

// Set the subnets routed via the main/backup gateway below.
// Don't enable routing to your own LAN network!!!

$routed_network_001 = "192.168.1.0/24";
$routed_network_002 = "192.168.2.0/24";
$routed_network_003 = "192.168.3.0/24";
$routed_network_004 = "192.168.4.0/24";  // Our own LAN network - DO NOT ENABLE in code below!!!
$routed_network_005 = "192.168.5.0/24";
$routed_network_006 = "192.168.6.0/24";
$routed_network_007 = "192.168.7.0/24";
$routed_network_008 = "192.168.8.0/24";
$routed_network_009 = "192.168.9.0/24";
$routed_network_010 = "192.168.10.0/24";
$routed_network_011 = "192.168.11.0/24";
$routed_network_012 = "192.168.12.0/24";
$routed_network_013 = "192.168.13.0/24";
$routed_network_014 = "192.168.14.0/24";
$routed_network_101 = "10.1.0.0/23";
$routed_network_102 = "10.1.2.0/23";


// Gateways monitoring start

$date = date('Y-m-d H:i:s');
$a_gateways = return_gateways_array();
$gateways_status = return_gateways_status(true);

echo "=============================================\n";
echo "Gateway monitoring script ".$script_version."\n";
echo " ".$date."\n";
echo "=============================================\n";

foreach ($a_gateways as $i => $gateway) {

      // Main gateway
      
      if ($gateways_status[$i]['name'] == $gw0) {
            
         // IP address detection
         $gw0_ip = lookup_gateway_ip_by_name($i);  // 
                  
         // Main gateway status
            
         if ($gateways_status[$i]['status'] == "down") {
         
            $gw0_status = "down";
            $gw0_status_echo = "DOWN";
         
            }
         
         elseif ($gateways_status[$i]['status'] == "force_down") {
         
            $gw0_status = "down";
            $gw0_status_echo = "FORCED DOWN";

            }
         
         elseif ($gateways_status[$i]['status'] == "none")  {
         
            $gw0_status = "up";
            $gw0_status_echo = "UP";
         
            }
         
         else {
         
            // You can define another gateway status action here (packet loss, high latency etc.)
         
            } 
       }         


      // Backup gateway
               
      if ($gateways_status[$i]['name'] == $gw1) {
      
         // IP address detection
         $gw1_ip = lookup_gateway_ip_by_name($i);
         
         // Backup gateway status
           
         if ($gateways_status[$i]['status'] == "down") {
         
            $gw1_status = "down";
            $gw1_status_echo = "DOWN";
         
         }
         
         elseif ($gateways_status[$i]['status'] == "force_down") {
         
            $gw1_status = "down";
            $gw1_status_echo = "FORCED DOWN";

         }
         
         elseif ($gateways_status[$i]['status'] == "none")  {
         
            $gw1_status = "up";
            $gw1_status_echo = "UP";
         
         }
         
         else {
         
         // You can define another gateway status action here (packet loss, high latency etc.)
         
         } 
         
      }
    
}


// Display status of gateways

echo "  Main gateway name set:   ".$gw0." (".$gw0_status.")\n";
echo "  Main gateway IP address: ".$gw0_ip."\n";
echo "\n";
echo "Backup gateway name set:   ".$gw1." (".$gw1_status.")\n";
echo "Backup gateway IP address: ".$gw1_ip."\n";
echo "\n";


// Set action

if (($gw0_status == "up") AND ($gw1_status == "up")) {

   $active_gateway = "both";
   echo "On ".$active_gateway."\n";

   }
   
elseif (($gw0_status == "up") AND ($gw1_status == "down")) {   

   $active_gateway = "main";
   echo "On ".$active_gateway."\n";

   }

elseif (($gw0_status == "down") AND ($gw1_status == "up")) {   

   $active_gateway = "backup";
   echo "On ".$active_gateway."\n";

   }

elseif (($gw0_status == "down") AND ($gw1_status == "down")) {   

   $active_gateway = "none";
   echo "Both gateways down.\n";

   }

else {
}


// Check the previous gateway state

// Both gateways were active.

$last_status_file = '/etc/phpshellsessions/test.onboth';

if (file_exists($last_status_file)) {

    // echo "The file $last_status_file exists.\n";
    $gw_status_last = "both";
    
} else {

}

// Main gateway ONLY was active.

$last_status_file = '/etc/phpshellsessions/test.onmain';

if (file_exists($last_status_file)) {

    // echo "The file $last_status_file exists.\n";
    $gw_status_last = "main";
    
} else {

}

// Backup gateway ONLY was active.

$last_status_file = '/etc/phpshellsessions/test.onbackup';

if (file_exists($last_status_file)) {

    // echo "The file $last_status_file exists.\n";
    $gw_status_last = "backup";
    
} else {

}

// Both gateways were down.

$last_status_file = '/etc/phpshellsessions/test.error';

if (file_exists($last_status_file)) {

    // echo "The file $last_status_file exists.\n";
    $gw_status_last = "error";
    
} else {

}



// Change routes to another gateway if needed.
// We have to test many possible combinations.   

// 1) Main gateway was UP, now is UP. Backup gateway was UP, now is UP. Nothing to do.

if (($gw_status_last == "both") AND ($active_gateway == "both")) {

   echo "Main gateway was UP, now is ".$gw0_status_echo.". Backup gateway was UP, now is ".$gw1_status_echo.". Nothing to do.\n";
   echo "\n";
   
   // rename("/etc/phpshellsessions/test.onboth", "/etc/phpshellsessions/test.onboth");
  
}


// 2) Main gateway was UP, now is UP. Backup gateway was UP, now is DOWN. Display warning.

elseif (($gw_status_last == "both") AND ($active_gateway == "main")) {

   echo "Main gateway was UP, now is ".$gw0_status_echo.".\n";
   echo "WARNING!!! Backup gateway is ".$gw1_status_echo.". We have no backup gateway!\n";
   echo "\n";
   
   rename("/etc/phpshellsessions/test.onboth", "/etc/phpshellsessions/test.onmain");
   
}


// 3) Main gateway was UP, now is UP. Backup gateway was DOWN, now is UP. Nothing to do.

elseif (($gw_status_last == "main") AND ($active_gateway == "both")) {

   echo "Main gateway was UP, now is ".$gw0_status_echo.". Backup gateway was DOWN, now is ".$gw1_status_echo.". Nothing to do.\n";
   echo "\n";
   
   rename("/etc/phpshellsessions/test.onmain", "/etc/phpshellsessions/test.onboth");
   
}


// 4) Main gateway was UP, now is UP. Backup gateway was DOWN, is still DOWN.

elseif (($gw_status_last == "main") AND ($active_gateway == "main")) {

   echo "Main gateway was UP, now is ".$gw0_status_echo.".\n";
   echo "WARNING!!! Backup gateway is still ".$gw1_status_echo.". We have no backup gateway!\n";
   echo "\n";

   // rename("/etc/phpshellsessions/test.onmain", "/etc/phpshellsessions/test.onmain");
   
}


// 4) Main gateway is DOWN, so check the backup gateway status.

elseif ($active_gateway == "backup") {

   // Main gateway is DOWN, backup gateway is UP. Switch to backup.

   if ($gw1_status == "up") {

     echo "WARNING!!! Main gateway is ".$gw0_status_echo.". Backup gateway is ".$gw1_status_echo.".\n";
     echo "\n";
   
     rename("/etc/phpshellsessions/test.onboth", "/etc/phpshellsessions/test.onbackup");
   
     echo "We change these routes:\n";
   
     gw_route_command($routed_network_001,$gw1_ip);
     gw_route_command($routed_network_002,$gw1_ip);
     gw_route_command($routed_network_003,$gw1_ip);
     // gw_route_command($routed_network_004,$gw1_ip); // LAN network, DO NOT ENABLE!!!
     gw_route_command($routed_network_005,$gw1_ip);
     gw_route_command($routed_network_006,$gw1_ip);
     gw_route_command($routed_network_007,$gw1_ip);
     gw_route_command($routed_network_008,$gw1_ip);
     gw_route_command($routed_network_009,$gw1_ip);
     gw_route_command($routed_network_010,$gw1_ip);
     gw_route_command($routed_network_011,$gw1_ip);
     gw_route_command($routed_network_012,$gw1_ip);
     gw_route_command($routed_network_013,$gw1_ip);
     gw_route_command($routed_network_014,$gw1_ip);
     gw_route_command($routed_network_101,$gw1_ip);
     gw_route_command($routed_network_102,$gw1_ip);

     }
     
   }


// 5) Main gateway is UP, before was DOWN. Backup gateway was/is UP. Change routes back to main.

elseif (($gw_status_last == "backup") AND ($active_gateway == "both")) {

   echo "Main gateway was DOWN, now is ".$gw0_status_echo." again. We changed routes back to main.\n";
   echo "\n";
   
   rename("/etc/phpshellsessions/test.onbackup", "/etc/phpshellsessions/test.onboth");
   
   echo "We change these routes:\n";
   
     gw_route_command($routed_network_001,$gw0_ip);
     gw_route_command($routed_network_002,$gw0_ip);
     gw_route_command($routed_network_003,$gw0_ip);
     // gw_route_command($routed_network_004,$gw0_ip); // LAN network, DO NOT ENABLE!!!
     gw_route_command($routed_network_005,$gw0_ip);
     gw_route_command($routed_network_006,$gw0_ip);
     gw_route_command($routed_network_007,$gw0_ip);
     gw_route_command($routed_network_008,$gw0_ip);
     gw_route_command($routed_network_009,$gw0_ip);
     gw_route_command($routed_network_010,$gw0_ip);
     gw_route_command($routed_network_011,$gw0_ip);
     gw_route_command($routed_network_012,$gw0_ip);
     gw_route_command($routed_network_013,$gw0_ip);
     gw_route_command($routed_network_014,$gw0_ip);
     gw_route_command($routed_network_101,$gw0_ip);
     gw_route_command($routed_network_102,$gw0_ip);

}


// 5) Both gateways were DOWN, both gateways is now UP.

elseif (($gw_status_last == "error") AND ($active_gateway == "both")) {

   echo "Both gateways were DOWN. Main gateway is ".$gw0_status_echo." now. Backup gateway is ".$gw1_status_echo." now. We changed routes back to main.\n";
   echo "\n";
   
   rename("/etc/phpshellsessions/test.error", "/etc/phpshellsessions/test.onboth");
   
   echo "We change these routes:\n";
   
     gw_route_command($routed_network_001,$gw0_ip);
     gw_route_command($routed_network_002,$gw0_ip);
     gw_route_command($routed_network_003,$gw0_ip);
     // gw_route_command($routed_network_004,$gw0_ip); // LAN network, DO NOT ENABLE!!!
     gw_route_command($routed_network_005,$gw0_ip);
     gw_route_command($routed_network_006,$gw0_ip);
     gw_route_command($routed_network_007,$gw0_ip);
     gw_route_command($routed_network_008,$gw0_ip);
     gw_route_command($routed_network_009,$gw0_ip);
     gw_route_command($routed_network_010,$gw0_ip);
     gw_route_command($routed_network_011,$gw0_ip);
     gw_route_command($routed_network_012,$gw0_ip);
     gw_route_command($routed_network_013,$gw0_ip);
     gw_route_command($routed_network_014,$gw0_ip);
     gw_route_command($routed_network_101,$gw0_ip);
     gw_route_command($routed_network_102,$gw0_ip);

}


// 6) Both gateways were DOWN, only main gateway is now UP.

elseif (($gw_status_last == "error") AND ($active_gateway == "main")) {

   echo "Both gateways was DOWN. Main gateway is ".$gw0_status_echo." now. We changed routes back to it.\n";
   echo "\n";
   
   rename("/etc/phpshellsessions/test.error", "/etc/phpshellsessions/test.onmain");
   
   echo "We change these routes:\n";
   
     gw_route_command($routed_network_001,$gw0_ip);
     gw_route_command($routed_network_002,$gw0_ip);
     gw_route_command($routed_network_003,$gw0_ip);
     // gw_route_command($routed_network_004,$gw0_ip); // LAN network, DO NOT ENABLE!!!
     gw_route_command($routed_network_005,$gw0_ip);
     gw_route_command($routed_network_006,$gw0_ip);
     gw_route_command($routed_network_007,$gw0_ip);
     gw_route_command($routed_network_008,$gw0_ip);
     gw_route_command($routed_network_009,$gw0_ip);
     gw_route_command($routed_network_010,$gw0_ip);
     gw_route_command($routed_network_011,$gw0_ip);
     gw_route_command($routed_network_012,$gw0_ip);
     gw_route_command($routed_network_013,$gw0_ip);
     gw_route_command($routed_network_014,$gw0_ip);
     gw_route_command($routed_network_101,$gw0_ip);
     gw_route_command($routed_network_102,$gw0_ip);

}


// 7) Both gateways were DOWN, only backup gateway is now UP.

elseif (($gw_status_last == "error") AND ($active_gateway == "backup")) {

   echo "Both gateways was DOWN. ONLY backup gateway is ".$gw0_status_echo." now. We changed routes to it.\n";
   echo "\n";
   
   rename("/etc/phpshellsessions/test.error", "/etc/phpshellsessions/test.onbackup");
   
   echo "We change these routes:\n";
   
     gw_route_command($routed_network_001,$gw1_ip);
     gw_route_command($routed_network_002,$gw1_ip);
     gw_route_command($routed_network_003,$gw1_ip);
     // gw_route_command($routed_network_004,$gw1_ip); // LAN network, DO NOT ENABLE!!!
     gw_route_command($routed_network_005,$gw1_ip);
     gw_route_command($routed_network_006,$gw1_ip);
     gw_route_command($routed_network_007,$gw1_ip);
     gw_route_command($routed_network_008,$gw1_ip);
     gw_route_command($routed_network_009,$gw1_ip);
     gw_route_command($routed_network_010,$gw1_ip);
     gw_route_command($routed_network_011,$gw1_ip);
     gw_route_command($routed_network_012,$gw1_ip);
     gw_route_command($routed_network_013,$gw1_ip);
     gw_route_command($routed_network_014,$gw1_ip);
     gw_route_command($routed_network_101,$gw1_ip);
     gw_route_command($routed_network_102,$gw1_ip);

}


// 8) Both gateways are DOWN. General failure. :(

elseif ($active_gateway == "none") {

   echo "WARNING!!! We have both gateways down! Check your hardware.\n";

   if (file_exists("/etc/phpshellsessions/test.onboth")) {   
      rename("/etc/phpshellsessions/test.onboth", "/etc/phpshellsessions/test.error");
      }
   elseif (file_exists("/etc/phpshellsessions/test.onmain")) {
      rename("/etc/phpshellsessions/test.onmain", "/etc/phpshellsessions/test.error");
      }   
   elseif (file_exists("/etc/phpshellsessions/test.onbackup")) {
      rename("/etc/phpshellsessions/test.onbackup", "/etc/phpshellsessions/test.error");
      }
   else {
      // File test.error already exists, so both gateways WERE DOWN previously; nothing to do.
      }
      

}


// Display output, write log
// I'am newbie in PHP. So if you are advanced PHP programmer, write some code here. :)


// Routes change routine

function gw_route_command($routed_network,$gw) {

   $route_command = "route change -net ".$routed_network." ".$gw;
   echo $route_command."\n";
   exec($route_command);
   
}


// End of script