diff options
Diffstat (limited to 'test/test_ip6_nd_mirror_proxy.py')
| -rw-r--r-- | test/test_ip6_nd_mirror_proxy.py | 188 |
1 files changed, 188 insertions, 0 deletions
diff --git a/test/test_ip6_nd_mirror_proxy.py b/test/test_ip6_nd_mirror_proxy.py new file mode 100644 index 00000000000..fa9880122fc --- /dev/null +++ b/test/test_ip6_nd_mirror_proxy.py @@ -0,0 +1,188 @@ +#!/usr/bin/env python3 + +import unittest +import os +from socket import AF_INET6, inet_pton, inet_ntop + +from framework import tag_fixme_vpp_workers +from framework import VppTestCase, VppTestRunner +from vpp_neighbor import VppNeighbor, find_nbr +from vpp_ip_route import VppIpRoute, VppRoutePath, find_route, \ + VppIpTable, DpoProto, FibPathType, VppIpInterfaceAddress +from vpp_papi import VppEnum +from vpp_ip import VppIpPuntRedirect + +import scapy.compat +from scapy.packet import Raw +from scapy.layers.l2 import Ether, ARP, Dot1Q +from scapy.layers.inet import IP, UDP, TCP +from scapy.layers.inet6 import IPv6, ipv6nh, ICMPv6ND_NS, ICMPv6ND_NA, \ + ICMPv6NDOptSrcLLAddr, ICMPv6NDOptDstLLAddr, ICMPv6EchoRequest, \ + ICMPv6EchoReply +from scapy.utils6 import in6_ptop, in6_getnsma, in6_getnsmac, in6_ismaddr + + +class TestNDPROXY(VppTestCase): + """ IP6 ND (mirror) Proxy Test Case """ + + @classmethod + def setUpClass(self): + super(TestNDPROXY, self).setUpClass() + self.create_pg_interfaces(range(2)) + + @classmethod + def tearDownClass(self): + super(TestNDPROXY, self).tearDownClass() + + def setUp(self): + super(TestNDPROXY, self).setUp() + for i in self.pg_interfaces: + i.admin_up() + i.config_ip6() + i.disable_ipv6_ra() + + def tearDown(self): + super(TestNDPROXY, self).tearDown() + if not self.vpp_dead: + for i in self.pg_interfaces: + i.unconfig_ip6() + i.admin_down() + + def test_nd_mirror_proxy(self): + """ Interface (Mirror) Proxy ND """ + + # + # When VPP has an interface whose address is also applied to a TAP + # interface on the host, then VPP's TAP interface will be unnumbered + # to the 'real' interface and do proxy ND from the host. + # the curious aspect of this setup is that ND requests from the host + # will come from the VPP's own address. + # + addr = self.pg0.remote_ip6 + nsma = in6_getnsma(inet_pton(socket.AF_INET6, addr)) + d = inet_ntop(socket.AF_INET6, nsma) + + # Make pg1 un-numbered to pg0 + # + self.pg1.unconfig_ip6() + self.pg1.set_unnumbered(self.pg0.sw_if_index) + + # + # Enable ND proxy on pg1 + # + self.vapi.ip6nd_proxy_enable_disable(sw_if_index=self.pg1.sw_if_index, + is_enable=1) + # + # Send the ND request with an originating address that + # is VPP's own address + # + nd_req_from_host = (Ether(src=self.pg1.remote_mac, + dst=in6_getnsmac(nsma)) / + IPv6(dst=d, src=self.pg0.local_ip6) / + ICMPv6ND_NS(tgt=addr) / + ICMPv6NDOptSrcLLAddr(lladdr=self.pg1.remote_mac)) + + rx = self.send_and_expect(self.pg1, [nd_req_from_host], self.pg1) + self.assertEqual(rx[0][Ether].src, self.pg1.local_mac) + self.assertEqual(rx[0][Ether].dst, self.pg1.remote_mac) + self.assertEqual(rx[0][IPv6].src, self.pg0.remote_ip6) + self.assertEqual(rx[0][IPv6].dst, self.pg0.local_ip6) + self.assertEqual(ipv6nh[rx[0][IPv6].nh], "ICMPv6") + self.assertEqual(rx[0][ICMPv6ND_NA].tgt, self.pg0.remote_ip6) + self.assertTrue(rx[0].haslayer(ICMPv6NDOptDstLLAddr)) + self.assertEqual(rx[0][ICMPv6NDOptDstLLAddr].lladdr, + self.pg1.local_mac) + + # + # Send the unicast ND request + # + unicast_nd_req_from_host = (Ether(src=self.pg1.remote_mac, + dst=self.pg1.local_mac) / + IPv6(dst=self.pg0.remote_ip6, + src=self.pg1.remote_ip6_ll) / + ICMPv6ND_NS(tgt=self.pg0.remote_ip6) / + ICMPv6NDOptSrcLLAddr( + lladdr=self.pg1.remote_mac)) + + rx = self.send_and_expect(self.pg1, [unicast_nd_req_from_host], + self.pg0) + self.assertEqual(rx[0][Ether].src, self.pg0.local_mac) + self.assertEqual(rx[0][Ether].dst, in6_getnsmac(nsma)) + self.assertEqual(rx[0][IPv6].src, self.pg0.local_ip6) + self.assertEqual(rx[0][IPv6].dst, d) + self.assertEqual(ipv6nh[rx[0][IPv6].nh], "ICMPv6") + self.assertEqual(rx[0][ICMPv6ND_NS].tgt, self.pg0.remote_ip6) + self.assertTrue(rx[0].haslayer(ICMPv6NDOptSrcLLAddr)) + self.assertEqual(rx[0][ICMPv6NDOptSrcLLAddr].lladdr, + self.pg0.local_mac) + + # Resolve the NDs on the uplink + self.pg0.resolve_ndp() + + # + # Again send the unicast ND request, this time dst address should be + # in local cache + # + rx = self.send_and_expect(self.pg1, [unicast_nd_req_from_host], + self.pg1) + self.assertEqual(rx[0][Ether].src, self.pg1.local_mac) + self.assertEqual(rx[0][Ether].dst, self.pg1.remote_mac) + self.assertEqual(rx[0][IPv6].src, self.pg0.remote_ip6) + self.assertEqual(in6_ptop(rx[0][IPv6].dst), + in6_ptop(self.pg1.remote_ip6_ll)) + self.assertEqual(ipv6nh[rx[0][IPv6].nh], "ICMPv6") + self.assertEqual(rx[0][ICMPv6ND_NA].tgt, self.pg0.remote_ip6) + self.assertTrue(rx[0].haslayer(ICMPv6NDOptDstLLAddr)) + self.assertEqual(rx[0][ICMPv6NDOptDstLLAddr].lladdr, + self.pg1.local_mac) + + # + # Send the Echo Request from host to remote (of uplink) + # + id = self.pg1.sw_if_index + seq = 0x1 + echo_request = (Ether(dst=self.pg1.local_mac, + src=self.pg1.remote_mac) / + IPv6(dst=self.pg0.remote_ip6, src=self.pg0.local_ip6) / + ICMPv6EchoRequest(seq=seq, id=id)) + + rx = self.send_and_expect(self.pg1, [echo_request], self.pg0) + self.assertEqual(rx[0][Ether].src, self.pg0.local_mac) + self.assertEqual(rx[0][Ether].dst, self.pg0.remote_mac) + self.assertEqual(rx[0][IPv6].src, self.pg0.local_ip6) + self.assertEqual(rx[0][IPv6].dst, self.pg0.remote_ip6) + self.assertEqual(ipv6nh[rx[0][IPv6].nh], "ICMPv6") + self.assertTrue(rx[0].haslayer(ICMPv6EchoRequest)) + self.assertEqual(rx[0][ICMPv6EchoRequest].id, id) + self.assertEqual(rx[0][ICMPv6EchoRequest].seq, seq) + + # + # setup a punt redirect so packets from the uplink go to the tap + # + redirect = VppIpPuntRedirect(self, self.pg0.sw_if_index, + self.pg1.sw_if_index, self.pg0.local_ip6) + redirect.add_vpp_config() + + echo_reply = (Ether(dst=self.pg0.remote_mac, src=self.pg0.local_mac) / + IPv6(dst=self.pg0.local_ip6, src=self.pg0.remote_ip6) / + ICMPv6EchoReply(seq=1, id=id)) + + rx = self.send_and_expect(self.pg0, [echo_reply], self.pg1) + self.assertEqual(rx[0][Ether].src, self.pg1.local_mac) + self.assertEqual(rx[0][Ether].dst, self.pg1.remote_mac) + self.assertEqual(rx[0][IPv6].src, self.pg0.remote_ip6) + self.assertEqual(rx[0][IPv6].dst, self.pg0.local_ip6) + self.assertEqual(ipv6nh[rx[0][IPv6].nh], "ICMPv6") + self.assertTrue(rx[0].haslayer(ICMPv6EchoReply)) + self.assertEqual(rx[0][ICMPv6EchoReply].id, id) + self.assertEqual(rx[0][ICMPv6EchoReply].seq, seq) + + # + # cleanup + # + self.vapi.ip6nd_proxy_enable_disable(sw_if_index=self.pg1.sw_if_index, + is_enable=0) + redirect.remove_vpp_config() + +if __name__ == '__main__': + unittest.main(testRunner=VppTestRunner) |