diff options
author | 2023-09-14 22:14:38 +0500 | |
---|---|---|
committer | 2023-10-16 13:13:00 +0000 | |
commit | da34f4add5f141d58670d81d53553986e9a472b4 (patch) | |
tree | da22aadb4d979440daf735ec8640f87a204fef55 /test/test_det44.py | |
parent | ff344a98afd2057cd0df312a9d7277a95853fd0a (diff) |
nat: add ipfix rate-limiter for nat44-ed, nat44-ei and nat64
This prevents ipfix flood with the repeating events and allows
to enable nat64 max_session and max_bibs events. Also fix wrong
endian for det44 and nat64 ipfix tests, now should be fine with
extended tests enabled.
Max session per user event @ nat44-ei requires more precise rate
limiter per user address, probably with sparse vec, not handled.
Type: improvement
Signed-off-by: Vladislav Grishenko <themiron@yandex-team.ru>
Change-Id: Ib20cc1ee3f81e7acc88a415fe83b4e2deae2a836
Diffstat (limited to 'test/test_det44.py')
-rw-r--r-- | test/test_det44.py | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/test/test_det44.py b/test/test_det44.py index ecd57a65b05..ede80981349 100644 --- a/test/test_det44.py +++ b/test/test_det44.py @@ -98,9 +98,9 @@ class TestDET44(VppTestCase): # natEvent self.assertEqual(scapy.compat.orb(record[230]), 13) # natQuotaExceededEvent - self.assertEqual(struct.pack("I", 3), record[466]) + self.assertEqual(struct.pack("!I", 3), record[466]) # maxEntriesPerUser - self.assertEqual(struct.pack("I", limit), record[473]) + self.assertEqual(struct.pack("!I", limit), record[473]) # sourceIPv4Address self.assertEqual(socket.inet_pton(socket.AF_INET, src_addr), record[8]) @@ -724,7 +724,7 @@ class TestDET44(VppTestCase): # verify IPFIX logging self.vapi.ipfix_flush() - capture = self.pg2.get_capture(2) + capture = self.pg2.get_capture(7) ipfix = IPFIXDecoder() # first load template for p in capture: |