104 lines
3.6 KiB
Python
104 lines
3.6 KiB
Python
|
#!/usr/bin/env python3
|
||
|
|
|
||
|
|
import unittest
|
||
|
|
|
||
|
|
from framework import VppTestCase, VppTestRunner, running_gcov_tests
|
||
|
|
from vpp_ip_route import VppIpTable, VppIpRoute, VppRoutePath
|
||
|
|
|
||
|
|
|
||
|
|
class TestAdl(VppTestCase):
|
||
|
|
""" Allow/Deny Plugin Unit Test Cases """
|
||
|
|
|
||
|
|
@classmethod
|
||
|
|
def setUpClass(cls):
|
||
|
|
super(TestAdl, cls).setUpClass()
|
||
|
|
|
||
|
|
@classmethod
|
||
|
|
def tearDownClass(cls):
|
||
|
|
super(TestAdl, cls).tearDownClass()
|
||
|
|
|
||
|
|
def setUp(self):
|
||
|
|
super(TestAdl, self).setUp()
|
||
|
|
|
||
|
|
def tearDown(self):
|
||
|
|
super(TestAdl, self).tearDown()
|
||
|
|
|
||
|
|
def test_adl1_unittest(self):
|
||
|
|
""" Plugin API Test """
|
||
|
|
cmds = ["loop create\n",
|
||
|
|
"set int ip address loop0 192.168.1.1/24\n",
|
||
|
|
"set int ip6 table loop0 0\n",
|
||
|
|
"set int ip address loop0 2001:db01::1/64\n",
|
||
|
|
"set int state loop0 up\n",
|
||
|
|
"packet-generator new {\n"
|
||
|
|
" name ip4\n"
|
||
|
|
" limit 100\n"
|
||
|
|
" rate 0\n"
|
||
|
|
" size 128-128\n"
|
||
|
|
" interface loop0\n"
|
||
|
|
" node adl-input\n"
|
||
|
|
" data { IP4: 1.2.40 -> 3cfd.fed0.b6c8\n"
|
||
|
|
" UDP: 192.168.1.2-192.168.1.10 -> 192.168.2.1\n"
|
||
|
|
" UDP: 1234 -> 2345\n"
|
||
|
|
" incrementing 114\n"
|
||
|
|
" }\n"
|
||
|
|
" }\n",
|
||
|
|
"packet-generator new {\n"
|
||
|
|
" name ip6-allow\n"
|
||
|
|
" limit 50\n"
|
||
|
|
" rate 0\n"
|
||
|
|
" size 128-128\n"
|
||
|
|
" interface loop0\n"
|
||
|
|
" node adl-input\n"
|
||
|
|
" data { IP6: 1.2.40 -> 3cfd.fed0.b6c8\n"
|
||
|
|
" UDP: 2001:db01::2 -> 2001:db01::1\n"
|
||
|
|
" UDP: 1234 -> 2345\n"
|
||
|
|
" incrementing 80\n"
|
||
|
|
" }\n"
|
||
|
|
" }\n",
|
||
|
|
"packet-generator new {\n"
|
||
|
|
" name ip6-drop\n"
|
||
|
|
" limit 50\n"
|
||
|
|
" rate 0\n"
|
||
|
|
" size 128-128\n"
|
||
|
|
" interface loop0\n"
|
||
|
|
" node adl-input\n"
|
||
|
|
" data { IP6: 1.2.40 -> 3cfd.fed0.b6c8\n"
|
||
|
|
" UDP: 2001:db01::3 -> 2001:db01::1\n"
|
||
|
|
" UDP: 1234 -> 2345\n"
|
||
|
|
" incrementing 80\n"
|
||
|
|
" }\n"
|
||
|
|
" }\n",
|
||
|
|
"ip table 1\n",
|
||
|
|
"ip route add 192.168.2.1/32 via drop\n",
|
||
|
|
"ip route add table 1 192.168.1.2/32 via local\n",
|
||
|
|
"ip6 table 1\n",
|
||
|
|
"ip route add 2001:db01::1/128 via drop\n",
|
||
|
|
"ip route add table 1 2001:db01::2/128 via local\n",
|
||
|
|
"bin adl_interface_enable_disable loop0\n",
|
||
|
|
"bin adl_allowlist_enable_disable loop0 fib-id 1 ip4 ip6\n",
|
||
|
|
"pa en\n"]
|
||
|
|
|
||
|
|
for cmd in cmds:
|
||
|
|
r = self.vapi.cli_return_response(cmd)
|
||
|
|
if r.retval != 0:
|
||
|
|
if hasattr(r, 'reply'):
|
||
|
|
self.logger.info(cmd + " FAIL reply " + r.reply)
|
||
|
|
else:
|
||
|
|
self.logger.info(cmd + " FAIL retval " + str(r.retval))
|
||
|
|
|
||
|
|
total_pkts = self.statistics.get_err_counter(
|
||
|
|
"/err/adl-input/Allow/Deny packets processed")
|
||
|
|
|
||
|
|
self.assertEqual(total_pkts, 200)
|
||
|
|
|
||
|
|
ip4_allow = self.statistics.get_err_counter(
|
||
|
|
"/err/ip4-adl-allowlist/ip4 allowlist allowed")
|
||
|
|
self.assertEqual(ip4_allow, 12)
|
||
|
|
ip6_allow = self.statistics.get_err_counter(
|
||
|
|
"/err/ip6-adl-allowlist/ip6 allowlist allowed")
|
||
|
|
self.assertEqual(ip6_allow, 50)
|
||
|
|
|
||
|
|
if __name__ == '__main__':
|
||
|
|
unittest.main(testRunner=VppTestRunner)
|