1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
|
#!/usr/bin/env python3
""" Container integration tests """
import unittest
from framework import VppTestCase, VppTestRunner, running_extended_tests
from scapy.layers.l2 import Ether
from scapy.packet import Raw
from scapy.layers.inet import IP, UDP, TCP
from scapy.packet import Packet
from socket import inet_pton, AF_INET, AF_INET6
from scapy.layers.inet6 import IPv6, ICMPv6Unknown, ICMPv6EchoRequest
from scapy.layers.inet6 import ICMPv6EchoReply, IPv6ExtHdrRouting
from scapy.layers.inet6 import IPv6ExtHdrFragment
from pprint import pprint
from random import randint
from util import L4_Conn
class Conn(L4_Conn):
# for now same as L4_Conn
pass
@unittest.skipUnless(running_extended_tests, "part of extended tests")
class ContainerIntegrationTestCase(VppTestCase):
""" Container integration extended testcases """
@classmethod
def setUpClass(cls):
super(ContainerIntegrationTestCase, cls).setUpClass()
# create pg0 and pg1
cls.create_pg_interfaces(range(2))
for i in cls.pg_interfaces:
i.admin_up()
i.config_ip4()
i.config_ip6()
i.resolve_arp()
i.resolve_ndp()
@classmethod
def tearDownClass(cls):
super(ContainerIntegrationTestCase, cls).tearDownClass()
def tearDown(self):
"""Run standard test teardown and log various show commands
"""
super(ContainerIntegrationTestCase, self).tearDown()
def show_commands_at_teardown(self):
self.logger.info(self.vapi.cli("show ip neighbors"))
def run_basic_conn_test(self, af, acl_side):
""" Basic connectivity test """
conn1 = Conn(self, self.pg0, self.pg1, af, UDP, 42001, 4242)
conn1.send_through(0)
# the return packets should pass
conn1.send_through(1)
def run_negative_conn_test(self, af, acl_side):
""" Packets with local spoofed address """
conn1 = Conn(self, self.pg0, self.pg1, af, UDP, 42001, 4242)
try:
p2 = conn1.send_through(0).command()
except:
# If we asserted while waiting, it's good.
# the conn should have timed out.
p2 = None
self.assert_equal(p2, None, ": packet should have been dropped")
def test_0010_basic_conn_test(self):
""" IPv4 basic connectivity test """
self.run_basic_conn_test(AF_INET, 0)
def test_0011_basic_conn_test(self):
""" IPv6 basic connectivity test """
self.run_basic_conn_test(AF_INET6, 0)
def test_0050_loopback_prepare_test(self):
""" Create loopbacks overlapping with remote addresses """
self.create_loopback_interfaces(2)
for i in range(2):
intf = self.lo_interfaces[i]
intf.admin_up()
intf.local_ip4 = self.pg_interfaces[i].remote_ip4
intf.local_ip4_prefix_len = 32
intf.config_ip4()
intf.local_ip6 = self.pg_interfaces[i].remote_ip6
intf.local_ip6_prefix_len = 128
intf.config_ip6()
def test_0110_basic_conn_test(self):
""" IPv4 local-spoof connectivity test """
self.run_negative_conn_test(AF_INET, 0)
def test_0111_basic_conn_test(self):
""" IPv6 local-spoof connectivity test """
self.run_negative_conn_test(AF_INET, 1)
def test_0200_basic_conn_test(self):
""" Configure container commands """
for i in range(2):
for addr in [self.pg_interfaces[i].remote_ip4,
self.pg_interfaces[i].remote_ip6]:
self.vapi.ppcli("ip container " + addr + " " +
self.pg_interfaces[i].name)
self.vapi.ppcli("stn rule address " + addr +
" interface " + self.pg_interfaces[i].name)
def test_0210_basic_conn_test(self):
""" IPv4 test after configuring container """
self.run_basic_conn_test(AF_INET, 0)
def test_0211_basic_conn_test(self):
""" IPv6 test after configuring container """
self.run_basic_conn_test(AF_INET, 1)
def test_0300_unconfigure_commands(self):
""" Unconfigure container commands """
for i in range(2):
for addr in [self.pg_interfaces[i].remote_ip4,
self.pg_interfaces[i].remote_ip6]:
self.vapi.ppcli("ip container " + addr + " " +
self.pg_interfaces[i].name +
" del")
self.vapi.ppcli("stn rule address " + addr +
" interface " + self.pg_interfaces[i].name +
" del")
def test_0410_spoof_test(self):
""" IPv4 local-spoof after unconfig test """
self.run_negative_conn_test(AF_INET, 0)
def test_0411_spoof_test(self):
""" IPv6 local-spoof after unconfig test """
self.run_negative_conn_test(AF_INET, 1)
|
