vpp - Vector Packet Processing

Age	Commit message (Collapse)	Author	Files	Lines
2018-12-19	session: add cli option to dump session elog	Florin Coras	2	-2/+3
	Change-Id: I1f42644f143bb65ee764c0f869b402595126adac Signed-off-by: Florin Coras <fcoras@cisco.com>
2018-10-23	c11 safe string handling support	Dave Barach	1	-3/+3
	Change-Id: Ied34720ca5a6e6e717eea4e86003e854031b6eab Signed-off-by: Dave Barach <dave@barachs.net>
2018-09-26	perftool: fix c2cpel	Florin Coras	1	-0/+2
	Change-Id: I0f39477bbf88d490409fdcd5f58df55cfe2ec531 Signed-off-by: Florin Coras <fcoras@cisco.com>
2018-08-28	cmake: Add perftool to cmake build	Mohsin Kazmi	1	-0/+35
	Change-Id: I921e92473a9dedde5952172d19676d47ffc4b53d Signed-off-by: Mohsin Kazmi <sykazmi@cisco.com>
2017-04-03	g2: add multi-track time-slew controls	Dave Barach	1	-0/+181
	Create an elog_merge utility, extracted from test_elog. Change-Id: Ide137b4858c88b3a2885583b7fbb15ddc4963af9 Signed-off-by: Dave Barach <dave@barachs.net>
2017-03-25	g2, c2cpel, and cpeldump: scale to 8M event log files	Dave Barach	2	-0/+6
	Change-Id: I7d7748c9c44132d033a9aff1687112ffcb44c460 Signed-off-by: Dave Barach <dbarach@cisco.com>
2017-01-01	Move java,lua api and remaining plugins to src/	Damjan Marion	1	-12/+0
	Change-Id: I1c3b87e886603678368428ae56a6bd3327cbc90d Signed-off-by: Damjan Marion <damarion@cisco.com>
2016-12-28	Reorganize source tree to use single autotools instance	Damjan Marion	14	-0/+4819
	Change-Id: I7b51f88292e057c6443b12224486f2d0c9f8ae23 Signed-off-by: Damjan Marion <damarion@cisco.com>

import socket import unittest from scapy.layers.ipsec import AH from framework import VppTestRunner from template_ipsec import TemplateIpsec, IpsecTraTests, IpsecTunTests from template_ipsec import IpsecTcpTests class TemplateIpsecAh(TemplateIpsec): """ Basic test for IPSEC using AH transport and Tunnel mode Below 4 cases are covered as part of this test 1) ipsec ah v4 transport basic test - IPv4 Transport mode scenario using HMAC-SHA1-96 intergrity algo 2) ipsec ah v4 transport burst test Above test for 257 pkts 3) ipsec ah 4o4 tunnel basic test - IPv4 Tunnel mode scenario using HMAC-SHA1-96 intergrity algo 4) ipsec ah 4o4 tunnel burst test Above test for 257 pkts TRANSPORT MODE: --- encrypt --- |pg2| <-------> |VPP| --- decrypt --- TUNNEL MODE: --- encrypt --- plain --- |pg0| <------- |VPP| <------ |pg1| --- --- --- --- decrypt --- plain --- |pg0| -------> |VPP| ------> |pg1| --- --- --- """ encryption_type = AH @classmethod def setUpClass(cls): super(TemplateIpsecAh, cls).setUpClass() cls.tun_if = cls.pg0 cls.tra_if = cls.pg2 cls.logger.info(cls.vapi.ppcli("show int addr")) cls.vapi.ipsec_spd_add_del(cls.tun_spd_id) cls.vapi.ipsec_interface_add_del_spd(cls.tun_spd_id, cls.tun_if.sw_if_index) cls.vapi.ipsec_spd_add_del(cls.tra_spd_id) cls.vapi.ipsec_interface_add_del_spd(cls.tra_spd_id, cls.tra_if.sw_if_index) for _, p in cls.params.items(): cls.config_ah_tra(p) cls.logger.info(cls.vapi.ppcli("show ipsec")) for _, p in cls.params.items(): cls.config_ah_tun(p) cls.logger.info(cls.vapi.ppcli("show ipsec")) for _, p in cls.params.items(): src = socket.inet_pton(p.addr_type, p.remote_tun_if_host) cls.vapi.ip_add_del_route(src, p.addr_len, cls.tun_if.remote_addr_n[p.addr_type], is_ipv6=p.is_ipv6) @classmethod def config_ah_tun(cls, params): addr_type = params.addr_type is_ipv6 = params.is_ipv6 scapy_tun_sa_id = params.scapy_tun_sa_id scapy_tun_spi = params.scapy_tun_spi vpp_tun_sa_id = params.vpp_tun_sa_id vpp_tun_spi = params.vpp_tun_spi auth_algo_vpp_id = params.auth_algo_vpp_id auth_key = params.auth_key crypt_algo_vpp_id = params.crypt_algo_vpp_id crypt_key = params.crypt_key remote_tun_if_host = params.remote_tun_if_host addr_any = params.addr_any addr_bcast = params.addr_bcast cls.vapi.ipsec_sad_add_del_entry(scapy_tun_sa_id, scapy_tun_spi, auth_algo_vpp_id, auth_key, crypt_algo_vpp_id, crypt_key, cls.vpp_ah_protocol, cls.tun_if.local_addr_n[addr_type], cls.tun_if.remote_addr_n[addr_type], is_tunnel=1, is_tunnel_ipv6=is_ipv6) cls.vapi.ipsec_sad_add_del_entry(vpp_tun_sa_id, vpp_tun_spi, auth_algo_vpp_id, auth_key, crypt_algo_vpp_id, crypt_key, cls.vpp_ah_protocol, cls.tun_if.remote_addr_n[addr_type], cls.tun_if.local_addr_n[addr_type], is_tunnel=1, is_tunnel_ipv6=is_ipv6) l_startaddr = r_startaddr = socket.inet_pton(addr_type, addr_any) l_stopaddr = r_stopaddr = socket.inet_pton(addr_type, addr_bcast) cls.vapi.ipsec_spd_add_del_entry(cls.tun_spd_id, vpp_tun_sa_id, l_startaddr, l_stopaddr, r_startaddr, r_stopaddr, is_ipv6=is_ipv6, protocol=socket.IPPROTO_AH) cls.vapi.ipsec_spd_add_del_entry(cls.tun_spd_id, vpp_tun_sa_id, l_startaddr, l_stopaddr, r_startaddr, r_stopaddr, is_outbound=0, is_ipv6=is_ipv6, protocol=socket.IPPROTO_AH) l_startaddr = l_stopaddr = socket.inet_pton(addr_type, remote_tun_if_host) r_startaddr = r_stopaddr = cls.pg1.remote_addr_n[addr_type] cls.vapi.ipsec_spd_add_del_entry(cls.tun_spd_id, vpp_tun_sa_id, l_startaddr, l_stopaddr, r_startaddr, r_stopaddr, priority=10, policy=3, is_outbound=0, is_ipv6=is_ipv6) cls.vapi.ipsec_spd_add_del_entry(cls.tun_spd_id, scapy_tun_sa_id, r_startaddr, r_stopaddr, l_startaddr, l_stopaddr, priority=10, policy=3, is_ipv6=is_ipv6) r_startaddr = r_stopaddr = cls.pg0.local_addr_n[addr_type] cls.vapi.ipsec_spd_add_del_entry(cls.tun_spd_id, vpp_tun_sa_id, l_startaddr, l_stopaddr, r_startaddr, r_stopaddr, priority=20, policy=3, is_outbound=0, is_ipv6=is_ipv6) cls.vapi.ipsec_spd_add_del_entry(cls.tun_spd_id, scapy_tun_sa_id, r_startaddr, r_stopaddr, l_startaddr, l_stopaddr, priority=20, policy=3, is_ipv6=is_ipv6) @classmethod def config_ah_tra(cls, params): addr_type = params.addr_type is_ipv6 = params.is_ipv6 scapy_tra_sa_id = params.scapy_tra_sa_id scapy_tra_spi = params.scapy_tra_spi vpp_tra_sa_id = params.vpp_tra_sa_id vpp_tra_spi = params.vpp_tra_spi auth_algo_vpp_id = params.auth_algo_vpp_id auth_key = params.auth_key crypt_algo_vpp_id = params.crypt_algo_vpp_id crypt_key = params.crypt_key addr_any = params.addr_any addr_bcast = params.addr_bcast cls.vapi.ipsec_sad_add_del_entry(scapy_tra_sa_id, scapy_tra_spi, auth_algo_vpp_id, auth_key, crypt_algo_vpp_id, crypt_key, cls.vpp_ah_protocol, is_tunnel=0, is_tunnel_ipv6=0) cls.vapi.ipsec_sad_add_del_entry(vpp_tra_sa_id, vpp_tra_spi, auth_algo_vpp_id, auth_key, crypt_algo_vpp_id, crypt_key, cls.vpp_ah_protocol, is_tunnel=0, is_tunnel_ipv6=0) l_startaddr = r_startaddr = socket.inet_pton(addr_type, addr_any) l_stopaddr = r_stopaddr = socket.inet_pton(addr_type, addr_bcast) cls.vapi.ipsec_spd_add_del_entry(cls.tra_spd_id, vpp_tra_sa_id, l_startaddr, l_stopaddr, r_startaddr, r_stopaddr, is_ipv6=is_ipv6, protocol=socket.IPPROTO_AH) cls.vapi.ipsec_spd_add_del_entry(cls.tra_spd_id, scapy_tra_sa_id, l_startaddr, l_stopaddr, r_startaddr, r_stopaddr, is_outbound=0, is_ipv6=is_ipv6, protocol=socket.IPPROTO_AH) l_startaddr = l_stopaddr = cls.tra_if.local_addr_n[addr_type] r_startaddr = r_stopaddr = cls.tra_if.remote_addr_n[addr_type] cls.vapi.ipsec_spd_add_del_entry(cls.tra_spd_id, vpp_tra_sa_id, l_startaddr, l_stopaddr, r_startaddr, r_stopaddr, priority=10, policy=3, is_outbound=0, is_ipv6=is_ipv6) cls.vapi.ipsec_spd_add_del_entry(cls.tra_spd_id, scapy_tra_sa_id, l_startaddr, l_stopaddr, r_startaddr, r_stopaddr, priority=10, policy=3, is_ipv6=is_ipv6) def tearDown(self): super(TemplateIpsecAh, self).tearDown() if not self.vpp_dead: self.vapi.cli("show hardware") class TestIpsecAh1(TemplateIpsecAh, IpsecTraTests, IpsecTunTests): """ Ipsec AH - TUN & TRA tests """ pass class TestIpsecAh2(TemplateIpsecAh, IpsecTcpTests): """ Ipsec AH - TCP tests """ pass if __name__ == '__main__': unittest.main(testRunner=VppTestRunner)