.. _unittest: https://docs.python.org/2/library/unittest.html .. _TestCase: https://docs.python.org/2/library/unittest.html#unittest.TestCase .. _AssertionError: https://docs.python.org/2/library/exceptions.html#exceptions.AssertionError .. _SkipTest: https://docs.python.org/2/library/unittest.html#unittest.SkipTest .. _virtualenv: http://docs.python-guide.org/en/latest/dev/virtualenvs/ .. _scapy: http://www.secdev.org/projects/scapy/ .. _logging: https://docs.python.org/2/library/logging.html .. _process: https://docs.python.org/2/library/multiprocessing.html#the-process-class .. _pipes: https://docs.python.org/2/library/multiprocessing.html#multiprocessing.Pipe .. _managed: https://docs.python.org/2/library/multiprocessing.html#managers .. |vtf| replace:: VPP Test Framework |vtf| ===== .. contents:: :local: :depth: 1 Overview ######## The goal of the |vtf| is to ease writing, running and debugging unit tests for the VPP. For this, python was chosen as a high level language allowing rapid development with scapy_ providing the necessary tool for creating and dissecting packets. Anatomy of a test case ###################### Python's unittest_ is used as the base framework upon which the VPP test framework is built. A test suite in the |vtf| consists of multiple classes derived from `VppTestCase`, which is itself derived from TestCase_. The test class defines one or more test functions, which act as test cases. Function flow when running a test case is: 1. `setUpClass <VppTestCase.setUpClass>`: This function is called once for each test class, allowing a one-time test setup to be executed. If this functions throws an exception, none of the test functions are executed. 2. `setUp <VppTestCase.setUp>`: The setUp function runs before each of the test functions. If this function throws an exception other than AssertionError_ or SkipTest_, then this is considered an error, not a test failure. 3. *test_<name>*: This is the guts of the test case. It should execute the test scenario and use the various assert functions from the unittest framework to check necessary. Multiple test_<name> methods can exist in a test case. 4. `tearDown <VppTestCase.tearDown>`: The tearDown function is called after each test function with the purpose of doing partial cleanup. 5. `tearDownClass <VppTestCase.tearDownClass>`: Method called once after running all of the test functions to perform the final cleanup. Logging ####### Each test case has a logger automatically created for it, stored in 'logger' property, based on logging_. Use the logger's standard methods debug(), info(), error(), ... to emit log messages to the logger. All the log messages go always into a log file in temporary directory (see below). To control the messages printed to console, specify the V= parameter. .. code-block:: shell make test # minimum verbosity make test V=1 # moderate verbosity make test V=2 # maximum verbosity Parallel test execution ####################### |vtf| test suites can be run in parallel. Each test suite is executed in a separate process spawned by Python multiprocessing process_. The results from child test suites are sent to parent through pipes_, which are aggregated and summarized at the end of the run. Stdout, stderr and logs logged in child processes are redirected to individual parent managed_ queues. The data from these queues are then emitted to stdout of the parent process in the order the test suites have finished. In case there are no finished test suites (such as at the beginning of the run), the data from last started test suite are emitted in real time. To enable parallel test run, specify the number of parallel processes: .. code-block:: shell make test TEST_JOBS=n # at most n processes will be spawned make test TEST_JOBS=auto # chosen based on the number of cores # and the size of shared memory Test temporary directory and VPP life cycle ########################################### Test separation is achieved by separating the test files and vpp instances. Each test creates a temporary directory and it's name is used to create a shared memory prefix which is used to run a VPP instance. The temporary directory name contains the testcase class name for easy reference, so for testcase named 'TestVxlan' the directory could be named e.g. vpp-unittest-TestVxlan-UNUP3j. This way, there is no conflict between any other VPP instances running on the box and the test VPP. Any temporary files created by the test case are stored in this temporary test directory. The test temporary directory holds the following interesting files: * log.txt - this contains the logger output on max verbosity * pg*_in.pcap - last injected packet stream into VPP, named after the interface, so for pg0, the file will be named pg0_in.pcap * pg*_out.pcap - last capture file created by VPP for interface, similarly, named after the interface, so for e.g. pg1, the file will be named pg1_out.pcap * history files - whenever the capture is restarted or a new stream is added, the existing files are rotated and renamed, soo all the pcap files are always saved for later debugging if needed * core - if vpp dumps a core, it'll be stored in the temporary directory * vpp_stdout.txt - file containing output which vpp printed to stdout * vpp_stderr.txt - file containing output which vpp printed to stderr *NOTE*: existing temporary directories named vpp-unittest-* are automatically removed when invoking 'make test*' or 'make retest*' to keep the temporary directory clean. Virtual environment ################### Virtualenv_ is a python module which provides a means to create an environment containing the dependencies required by the |vtf|, allowing a separation from any existing system-wide packages. |vtf|'s Makefile automatically creates a virtualenv_ inside build-root and installs the required packages in that environment. The environment is entered whenever executing a test via one of the make test targets. Naming conventions ################## Most unit tests do some kind of packet manipulation - sending and receiving packets between VPP and virtual hosts connected to the VPP. Referring to the sides, addresses, etc. is always done as if looking from the VPP side, thus: * *local_* prefix is used for the VPP side. So e.g. `local_ip4 <VppInterface.local_ip4>` address is the IPv4 address assigned to the VPP interface. * *remote_* prefix is used for the virtual host side. So e.g. `remote_mac <VppInterface.remote_mac>` address is the MAC address assigned to the virtual host connected to the VPP. Automatically generated addresses ################################# To send packets, one needs to typically provide some addresses, otherwise the packets will be dropped. The interface objects in |vtf| automatically provide addresses based on (typically) their indexes, which ensures there are no conflicts and eases debugging by making the addressing scheme consistent. The developer of a test case typically doesn't need to work with the actual numbers, rather using the properties of the objects. The addresses typically come in two flavors: '<address>' and '<address>n' - note the 'n' suffix. The former address is a Python string, while the latter is translated using socket.inet_pton to raw format in network byte order - this format is suitable for passing as an argument to VPP APIs. e.g. for the IPv4 address assigned to the VPP interface: * local_ip4 - Local IPv4 address on VPP interface (string) * local_ip4n - Local IPv4 address - raw, suitable as API parameter. These addresses need to be configured in VPP to be usable using e.g. `config_ip4` API. Please see the documentation to `VppInterface` for more details. By default, there is one remote address of each kind created for L3: remote_ip4 and remote_ip6. If the test needs more addresses, because it's simulating more remote hosts, they can be generated using `generate_remote_hosts` API and the entries for them inserted into the ARP table using `configure_ipv4_neighbors` API. Packet flow in the |vtf| ######################## Test framework -> VPP ~~~~~~~~~~~~~~~~~~~~~ |vtf| doesn't send any packets to VPP directly. Traffic is instead injected using packet-generator interfaces, represented by the `VppPGInterface` class. Packets are written into a temporary .pcap file, which is then read by the VPP and the packets are injected into the VPP world. To add a list of packets to an interface, call the `add_stream` method on that interface. Once everything is prepared, call `pg_start` method to start the packet generator on the VPP side. VPP -> test framework ~~~~~~~~~~~~~~~~~~~~~ Similarly, VPP doesn't send any packets to |vtf| directly. Instead, packet capture feature is used to capture and write traffic to a temporary .pcap file, which is then read and analyzed by the |vtf|. The following APIs are available to the test case for reading pcap files. * `get_capture`: this API is suitable for bulk & batch style of test, where a list of packets is prepared & sent, then the received packets are read and verified. The API needs the number of packets which are expected to be captured (ignoring filtered packets - see below) to know when the pcap file is completely written by the VPP. If using packet infos for verifying packets, then the counts of the packet infos can be automatically used by `get_capture` to get the proper count (in this case the default value None can be supplied as expected_count or ommitted altogether). * `wait_for_packet`: this API is suitable for interactive style of test, e.g. when doing session management, three-way handsakes, etc. This API waits for and returns a single packet, keeping the capture file in place and remembering context. Repeated invocations return following packets (or raise Exception if timeout is reached) from the same capture file (= packets arriving on the same interface). *NOTE*: it is not recommended to mix these APIs unless you understand how they work internally. None of these APIs rotate the pcap capture file, so calling e.g. `get_capture` after `wait_for_packet` will return already read packets. It is safe to switch from one API to another after calling `enable_capture` as that API rotates the capture file. Automatic filtering of packets: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Both APIs (`get_capture` and `wait_for_packet`) by default filter the packet capture, removing known uninteresting packets from it - these are IPv6 Router Advertisments and IPv6 Router Alerts. These packets are unsolicitated and from the point of |vtf| are random. If a test wants to receive these packets, it should specify either None or a custom filtering function as the value to the 'filter_out_fn' argument. Common API flow for sending/receiving packets: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ We will describe a simple scenario, where packets are sent from pg0 to pg1 interface, assuming that the interfaces were created using `create_pg_interfaces` API. 1. Create a list of packets for pg0:: packet_count = 10 packets = create_packets(src=self.pg0, dst=self.pg1, count=packet_count) 2. Add that list of packets to the source interface:: self.pg0.add_stream(packets) 3. Enable capture on the destination interface:: self.pg1.enable_capture() 4. Start the packet generator:: self.pg_start() 5. Wait for capture file to appear and read it:: capture = self.pg1.get_capture(expected_count=packet_count) 6. Verify packets match sent packets:: self.verify_capture(send=packets, captured=capture) Test framework objects ###################### The following objects provide VPP abstraction and provide a means to do common tasks easily in the test cases. * `VppInterface`: abstract class representing generic VPP interface and contains some common functionality, which is then used by derived classes * `VppPGInterface`: class representing VPP packet-generator interface. The interface is created/destroyed when the object is created/destroyed. * `VppSubInterface`: VPP sub-interface abstract class, containing common functionality for e.g. `VppDot1QSubint` and `VppDot1ADSubint` classes How VPP APIs/CLIs are called ############################ Vpp provides python bindings in a python module called vpp-papi, which the test framework installs in the virtual environment. A shim layer represented by the `VppPapiProvider` class is built on top of the vpp-papi, serving these purposes: 1. Automatic return value checks: After each API is called, the return value is checked against the expected return value (by default 0, but can be overridden) and an exception is raised if the check fails. 2. Automatic call of hooks: a. `before_cli <Hook.before_cli>` and `before_api <Hook.before_api>` hooks are used for debug logging and stepping through the test b. `after_cli <Hook.after_cli>` and `after_api <Hook.after_api>` hooks are used for monitoring the vpp process for crashes 3. Simplification of API calls: Many of the VPP APIs take a lot of parameters and by providing sane defaults for these, the API is much easier to use in the common case and the code is more readable. E.g. ip_add_del_route API takes ~25 parameters, of which in the common case, only 3 are needed. Utility methods ############### Some interesting utility methods are: * `ppp`: 'Pretty Print Packet' - returns a string containing the same output as Scapy's packet.show() would print * `ppc`: 'Pretty Print Capture' - returns a string containing printout of a capture (with configurable limit on the number of packets printed from it) using `ppp` *NOTE*: Do not use Scapy's packet.show() in the tests, because it prints the output to stdout. All output should go to the logger associated with the test case. Example: how to add a new test ############################## In this example, we will describe how to add a new test case which tests basic IPv4 forwarding. 1. Add a new file called test_ip4_fwd.py in the test directory, starting with a few imports:: from framework import VppTestCase from scapy.layers.l2 import Ether from scapy.packet import Raw from scapy.layers.inet import IP, UDP from random import randint 2. Create a class inherited from the VppTestCase:: class IP4FwdTestCase(VppTestCase): """ IPv4 simple forwarding test case """ 2. Add a setUpClass function containing the setup needed for our test to run:: @classmethod def setUpClass(self): super(IP4FwdTestCase, self).setUpClass() self.create_pg_interfaces(range(2)) # create pg0 and pg1 for i in self.pg_interfaces: i.admin_up() # put the interface up i.config_ip4() # configure IPv4 address on the interface i.resolve_arp() # resolve ARP, so that we know VPP MAC 3. Create a helper method to create the packets to send:: def create_stream(self, src_if, dst_if, count): packets = [] for i in range(count): # create packet info stored in the test case instance info = self.create_packet_info(src_if, dst_if) # convert the info into packet payload payload = self.info_to_payload(info) # create the packet itself p = (Ether(dst=src_if.local_mac, src=src_if.remote_mac) / IP(src=src_if.remote_ip4, dst=dst_if.remote_ip4) / UDP(sport=randint(1000, 2000), dport=5678) / Raw(payload)) # store a copy of the packet in the packet info info.data = p.copy() # append the packet to the list packets.append(p) # return the created packet list return packets 4. Create a helper method to verify the capture:: def verify_capture(self, src_if, dst_if, capture): packet_info = None for packet in capture: try: ip = packet[IP] udp = packet[UDP] # convert the payload to packet info object payload_info = self.payload_to_info(packet[Raw]) # make sure the indexes match self.assert_equal(payload_info.src, src_if.sw_if_index, "source sw_if_index") self.assert_equal(payload_info.dst, dst_if.sw_if_index, "destination sw_if_index") packet_info = self.get_next_packet_info_for_interface2( src_if.sw_if_index, dst_if.sw_if_index, packet_info) # make sure we didn't run out of saved packets self.assertIsNotNone(packet_info) self.assert_equal(payload_info.index, packet_info.index, "packet info index") saved_packet = packet_info.data # fetch the saved packet # assert the values match self.assert_equal(ip.src, saved_packet[IP].src, "IP source address") # ... more assertions here self.assert_equal(udp.sport, saved_packet[UDP].sport, "UDP source port") except: self.logger.error(ppp("Unexpected or invalid packet:", packet)) raise remaining_packet = self.get_next_packet_info_for_interface2( src_if.sw_if_index, dst_if.sw_if_index, packet_info) self.assertIsNone(remaining_packet, "Interface %s: Packet expected from interface " "%s didn't arrive" % (dst_if.name, src_if.name)) 5. Add the test code to test_basic function:: def test_basic(self): count = 10 # create the packet stream packets = self.create_stream(self.pg0, self.pg1, count) # add the stream to the source interface self.pg0.add_stream(packets) # enable capture on both interfaces self.pg0.enable_capture() self.pg1.enable_capture() # start the packet generator self.pg_start() # get capture - the proper count of packets was saved by # create_packet_info() based on dst_if parameter capture = self.pg1.get_capture() # assert nothing captured on pg0 (always do this last, so that # some time has already passed since pg_start()) self.pg0.assert_nothing_captured() # verify capture self.verify_capture(self.pg0, self.pg1, capture) 6. Run the test by issuing 'make test'.