aboutsummaryrefslogtreecommitdiffstats
path: root/test/template_ipsec.py
AgeCommit message (Expand)AuthorFilesLines
2022-02-17ipsec: Improve the handling of NAT-T keepalive messagesNeale Ranns1-1/+13
2022-01-26hsa: cleanup and rename http test serverFlorin Coras1-1/+2
2022-01-17ipsec: IPSec interface correct drop w/ no protectionNeale Ranns1-2/+17
2021-10-12ipsec: Performance improvement of ipsec4_output_node using flow cacheGovindarajan Mohandoss1-0/+211
2021-09-29ipsec: Record the number of packets lost from an SANeale Ranns1-0/+87
2021-08-13tests docs: upgrade python packagesDave Wallace1-11/+11
2021-06-29ipsec: Fix setting the hi-sequence number for decryptNeale Ranns1-9/+204
2021-03-25stats: python vpp_stats rewrite to access stat segment directlyOle Troan1-2/+3
2021-03-20tests: add support for worker awarenessKlement Sekera1-2/+2
2021-02-25tests: Add tests for IPSec async mode using the crypto SW schedulerNeale Ranns1-27/+46
2021-02-25ipsec: enable input features on tunnelsBrian Russell1-0/+6
2021-02-10ipsec: Use the new tunnel API types to add flow label and TTL copyNeale Ranns1-7/+25
2021-02-09Revert "ipsec: Use the new tunnel API types to add flow label and TTL copy"Matthew Smith1-25/+7
2021-02-08ipsec: Use the new tunnel API types to add flow label and TTL copyNeale Ranns1-7/+25
2021-02-05ipsec: add support for AES CTRBenoît Ganne1-1/+1
2021-01-07ipsec: Deprecated the old IPsec Tunnel interfaceNeale Ranns1-5/+5
2020-12-07tests: py2 cleanup - remove subclassing of objectPaul Vinciguerra1-2/+2
2020-11-02ipsec: Tunnel SA DSCP behaviourNeale Ranns1-2/+10
2020-09-07ipsec: fix padding/alignment for native IPsec encryptionChristian Hopps1-1/+13
2020-07-21ipsec: Dedicated IPSec interface typeNeale Ranns1-0/+2
2020-04-06misc: fix python sonarcloud BLOCKER level issuesPaul Vinciguerra1-1/+1
2020-02-21ipsec: IPSec protection for multi-point tunnel interfacesNeale Ranns1-21/+44
2020-02-11ipsec: add support for chained buffersFilip Tehlar1-47/+11
2020-01-16tests: fix typo in test doc stringPaul Vinciguerra1-1/+1
2020-01-04ipsec: AH copy destination and source address from templateNeale Ranns1-4/+14
2020-01-04ipsec: Targeted unit testingNeale Ranns1-3/+161
2019-12-23ipsec: Test and fix IPSec worker hand-offNeale Ranns1-9/+70
2019-12-14tests: changes for scapy 2.4.3 migrationsnaramre1-12/+13
2019-11-08ipsec: remove dedicated IPSec tunnelsNeale Ranns1-13/+4
2019-10-21ipsec: tests support python3Ole Troan1-4/+4
2019-10-18ipsec: make tests support python3Ole Troan1-4/+4
2019-08-27ipsec: Fix NULL encryption algorithmNeale Ranns1-1/+1
2019-08-01ipsec: Redo the anit-replay check post decryptNeale Ranns1-0/+15
2019-07-31ip: Ensure reassembly runs before IPSec decrypt.Neale Ranns1-1/+71
2019-07-24ipsec: GCM, Anti-replay and ESN fixessNeale Ranns1-55/+173
2019-07-16ipsec: handle UDP keepalivesNeale Ranns1-0/+19
2019-06-18ipsec: ipsec-tun protectNeale Ranns1-36/+62
2019-05-29make test: fix packet counter assertKlement Sekera1-7/+9
2019-05-22stats: support multiple works for error countersOle Troan1-6/+6
2019-05-17Tests: Raise exception if API cli_inband command fails.Paul Vinciguerra1-6/+6
2019-04-25ipsec: drop runts in esp-decryptDamjan Marion1-2/+22
2019-04-19IPSEC: IPv6 ESP transport mode incorrect packet length and checksum (VPP-1654)Neale Ranns1-0/+4
2019-04-19IPSEC: ESP IPv6 transport mode payload length incorrect (VPP-1653)Neale Ranns1-0/+4
2019-04-17IPSEC: Pass the algorithm salt (used in GCM) over the APINeale Ranns1-6/+17
2019-04-16IPSEC: support GCM in ESPNeale Ranns1-4/+6
2019-04-11Tests: Refactor tearDown show command logging, add lifecycle markers.Paul Vinciguerra1-2/+3
2019-04-10make test: fix redundant setUp() in template_ipsec.pyDave Wallace1-3/+0
2019-04-10IPSEC: for each engine and algorithm testsNeale Ranns1-33/+64
2019-04-10Tests Cleanup: Fix missing calls to setUpClass/tearDownClass.Paul Vinciguerra1-0/+11
2019-04-08IPSEC TEST: various hash alogrithmsNeale Ranns1-2/+2
>[@]} if [ $num_hosts == 0 ] then echo "No more VIRL candidate hosts available, failing." exit 127 fi element=$[ $RANDOM % $num_hosts ] virl_server_candidate=${VIRL_SERVERS[$element]} virl_server_status=$(ssh ${SSH_OPTIONS} ${VIRL_USERNAME}@${virl_server_candidate} cat $VIRL_SERVER_STATUS_FILE 2>&1) echo VIRL HOST $virl_server_candidate status is \"$virl_server_status\" if [ "$virl_server_status" == "$VIRL_SERVER_EXPECTED_STATUS" ] then # Candidate is in good status. Select this server. VIRL_SERVER="$virl_server_candidate" else # Candidate is in bad status. Remove from array. VIRL_SERVERS=("${VIRL_SERVERS[@]:0:$element}" "${VIRL_SERVERS[@]:$[$element+1]}") fi done SCRIPT_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )" # Download VPP and HC packages from the current branch echo Downloading packages... bash ${SCRIPT_DIR}/resources/tools/scripts/download_hc_pkgs.sh ${STREAM} ${OS} if [ "${OS}" == "centos7" ]; then VPP_PKGS=(*.rpm) else VPP_PKGS=(*.deb) fi echo ${VPP_PKGS[@]} VIRL_DIR_LOC="/tmp" VPP_PKGS_FULL=(${VPP_PKGS[@]}) # Prepend directory location at remote host to package file list for index in "${!VPP_PKGS_FULL[@]}"; do VPP_PKGS_FULL[${index}]=${VIRL_DIR_LOC}/${VPP_PKGS_FULL[${index}]} done echo "Updated file names: " ${VPP_PKGS_FULL[@]} cat ${VIRL_PKEY} # Copy the files to VIRL hosts DONE="" for index in "${!VIRL_SERVER[@]}"; do # Do not copy files in case they have already been copied to the VIRL host [[ "${DONE[@]}" =~ "${VIRL_SERVER[${index}]}" ]] && copy=0 || copy=1 if [ "${copy}" -eq "0" ]; then echo "files have already been copied to the VIRL host ${VIRL_SERVER[${index}]}" else if [ "${OS}" == "centos7" ]; then scp ${SSH_OPTIONS} *.rpm \ ${VIRL_USERNAME}@${VIRL_SERVER[${index}]}:${VIRL_DIR_LOC}/ else scp ${SSH_OPTIONS} *.deb \ ${VIRL_USERNAME}@${VIRL_SERVER[${index}]}:${VIRL_DIR_LOC}/ fi result=$? if [ "${result}" -ne "0" ]; then echo "Failed to copy files to VIRL host ${VIRL_SERVER[${index}]}" echo ${result} exit ${result} else echo "files successfully copied to the VIRL host ${VIRL_SERVER[${index}]}" fi DONE+=(${VIRL_SERVER[${index}]}) fi done # Start a simulation on VIRL server echo "Starting simulation on VIRL server" function stop_virl_simulation { ssh ${SSH_OPTIONS} ${VIRL_USERNAME}@${VIRL_SERVER}\ "stop-testcase ${VIRL_SID}" } VIRL_SID=$(ssh ${SSH_OPTIONS} \ ${VIRL_USERNAME}@${VIRL_SERVER} \ "start-testcase -c ${VIRL_TOPOLOGY} -r ${VIRL_RELEASE} ${VPP_PKGS_FULL[@]}") retval=$? if [ "${retval}" -ne "0" ]; then echo "VIRL simulation start failed" exit ${retval} fi if [[ ! "${VIRL_SID}" =~ session-[a-zA-Z0-9_]{6} ]]; then echo "No VIRL session ID reported." exit 127 fi # Upon script exit, cleanup the simulation execution trap stop_virl_simulation EXIT echo ${VIRL_SID} ssh_do ${VIRL_USERNAME}@${VIRL_SERVER} cat /scratch/${VIRL_SID}/topology.yaml # Download the topology file from virl session scp ${SSH_OPTIONS} \ ${VIRL_USERNAME}@${VIRL_SERVER}:/scratch/${VIRL_SID}/topology.yaml \ topologies/enabled/topology.yaml retval=$? if [ "${retval}" -ne "0" ]; then echo "Failed to copy topology file from VIRL simulation" exit ${retval} fi virtualenv --system-site-packages env . env/bin/activate echo pip install pip install -r ${SCRIPT_DIR}/requirements.txt pykwalify -s ${SCRIPT_DIR}/resources/topology_schemas/3_node_topology.sch.yaml \ -s ${SCRIPT_DIR}/resources/topology_schemas/topology.sch.yaml \ -d ${SCRIPT_DIR}/topologies/enabled/topology.yaml \ -vvv if [ "$?" -ne "0" ]; then echo "Topology schema validation failed." echo "However, the tests will start." fi # TODO(CSIT-994): reenable NSH PYTHONPATH=`pwd` pybot -L TRACE -W 136\ -v TOPOLOGY_PATH:${SCRIPT_DIR}/topologies/enabled/topology.yaml \ --suite "tests.honeycomb.func" \ --include HC_FUNC \ --exclude HC_NSH \ --noncritical EXPECTED_FAILING \ tests/ RETURN_STATUS=$? # Get Honeycomb log file from virl host scp ${SSH_OPTIONS} \ ${VIRL_USERNAME}@${VIRL_SERVER}:/scratch/${VIRL_SID}/honeycomb.log . || true # Archive JOB artifacts in jenkins for i in ${JOB_ARCHIVE_ARTIFACTS[@]}; do cp $( readlink -f ${i} | tr '\n' ' ' ) ${JOB_ARCHIVE_DIR}/ done # Archive JOB artifacts to logs.fd.io for i in ${LOG_ARCHIVE_ARTIFACTS[@]}; do cp $( readlink -f ${i} | tr '\n' ' ' ) ${LOG_ARCHIVE_DIR}/ done exit ${RETURN_STATUS}