1b534f5a4a
A number of VppGbpContractRules were missing the hash_mode_t and were being replaced by an optional kwarg. Type: fix Change-Id: I6ca03c93b69e4355c237a6c9402e1e178b701b21 Signed-off-by: Paul Vinciguerra <pvinci@vinciconsulting.com>
292 lines
10 KiB
Python
292 lines
10 KiB
Python
#!/usr/bin/env python
|
|
|
|
import socket
|
|
from util import ip4_range, reassemble4_ether
|
|
import unittest
|
|
from framework import VppTestCase, VppTestRunner
|
|
from template_bd import BridgeDomain
|
|
from vpp_ip import VppIpAddress
|
|
|
|
from scapy.layers.l2 import Ether, Raw
|
|
from scapy.layers.inet import IP, UDP
|
|
from scapy.layers.vxlan import VXLAN
|
|
from scapy.utils import atol
|
|
from vpp_ip_route import VppIpRoute, VppRoutePath
|
|
from vpp_ip import INVALID_INDEX
|
|
|
|
|
|
class TestVxlanGbp(VppTestCase):
|
|
""" VXLAN GBP Test Case """
|
|
|
|
@property
|
|
def frame_request(self):
|
|
""" Ethernet frame modeling a generic request """
|
|
return (Ether(src='00:00:00:00:00:01', dst='00:00:00:00:00:02') /
|
|
IP(src='1.2.3.4', dst='4.3.2.1') /
|
|
UDP(sport=10000, dport=20000) /
|
|
Raw('\xa5' * 100))
|
|
|
|
@property
|
|
def frame_reply(self):
|
|
""" Ethernet frame modeling a generic reply """
|
|
return (Ether(src='00:00:00:00:00:02', dst='00:00:00:00:00:01') /
|
|
IP(src='4.3.2.1', dst='1.2.3.4') /
|
|
UDP(sport=20000, dport=10000) /
|
|
Raw('\xa5' * 100))
|
|
|
|
def encapsulate(self, pkt, vni):
|
|
"""
|
|
Encapsulate the original payload frame by adding VXLAN GBP header with
|
|
its UDP, IP and Ethernet fields
|
|
"""
|
|
return (Ether(src=self.pg0.remote_mac, dst=self.pg0.local_mac) /
|
|
IP(src=self.pg0.remote_ip4, dst=self.pg0.local_ip4) /
|
|
UDP(sport=self.dport, dport=self.dport, chksum=0) /
|
|
VXLAN(vni=vni, flags=self.flags, gpflags=self.gpflags,
|
|
gpid=self.sclass) / pkt)
|
|
|
|
def ip_range(self, start, end):
|
|
""" range of remote ip's """
|
|
return ip4_range(self.pg0.remote_ip4, start, end)
|
|
|
|
def decapsulate(self, pkt):
|
|
"""
|
|
Decapsulate the original payload frame by removing VXLAN header
|
|
"""
|
|
# check if is set G and I flag
|
|
self.assertEqual(pkt[VXLAN].flags, int('0x88', 16))
|
|
return pkt[VXLAN].payload
|
|
|
|
# Method for checking VXLAN GBP encapsulation.
|
|
#
|
|
def check_encapsulation(self, pkt, vni, local_only=False, mcast_pkt=False):
|
|
# TODO: add error messages
|
|
# Verify source MAC is VPP_MAC and destination MAC is MY_MAC resolved
|
|
# by VPP using ARP.
|
|
self.assertEqual(pkt[Ether].src, self.pg0.local_mac)
|
|
if not local_only:
|
|
if not mcast_pkt:
|
|
self.assertEqual(pkt[Ether].dst, self.pg0.remote_mac)
|
|
else:
|
|
self.assertEqual(pkt[Ether].dst, type(self).mcast_mac)
|
|
# Verify VXLAN GBP tunnel source IP is VPP_IP and destination IP is
|
|
# MY_IP.
|
|
self.assertEqual(pkt[IP].src, self.pg0.local_ip4)
|
|
if not local_only:
|
|
if not mcast_pkt:
|
|
self.assertEqual(pkt[IP].dst, self.pg0.remote_ip4)
|
|
else:
|
|
self.assertEqual(pkt[IP].dst, type(self).mcast_ip4)
|
|
# Verify UDP destination port is VXLAN GBP 48879, source UDP port could
|
|
# be arbitrary.
|
|
self.assertEqual(pkt[UDP].dport, type(self).dport)
|
|
# TODO: checksum check
|
|
# Verify VNI
|
|
# pkt.show()
|
|
self.assertEqual(pkt[VXLAN].vni, vni)
|
|
# Verify Source Class
|
|
self.assertEqual(pkt[VXLAN].gpid, 0)
|
|
|
|
@classmethod
|
|
def create_vxlan_gbp_flood_test_bd(cls, vni, n_ucast_tunnels):
|
|
# Create 2 ucast vxlan tunnels under bd
|
|
ip_range_start = 10
|
|
ip_range_end = ip_range_start + n_ucast_tunnels
|
|
next_hop_address = cls.pg0.remote_ip4
|
|
for dest_ip4 in ip4_range(cls.pg0.remote_ip4,
|
|
ip_range_start,
|
|
ip_range_end):
|
|
# add host route so dest_ip4n will not be resolved
|
|
rip = VppIpRoute(cls, dest_ip4, 32,
|
|
[VppRoutePath(next_hop_address,
|
|
INVALID_INDEX)],
|
|
register=False)
|
|
rip.add_vpp_config()
|
|
r = cls.vapi.vxlan_gbp_tunnel_add_del(
|
|
tunnel={
|
|
'src': VppIpAddress(cls.pg0.local_ip4).encode(),
|
|
'dst': VppIpAddress(dest_ip4).encode(),
|
|
'vni': vni,
|
|
'instance': INVALID_INDEX,
|
|
'mcast_sw_if_index': INVALID_INDEX,
|
|
'mode': 1,
|
|
},
|
|
is_add=1
|
|
)
|
|
cls.vapi.sw_interface_set_l2_bridge(rx_sw_if_index=r.sw_if_index,
|
|
bd_id=vni)
|
|
|
|
# Class method to start the VXLAN GBP test case.
|
|
# Overrides setUpClass method in VppTestCase class.
|
|
# Python try..except statement is used to ensure that the tear down of
|
|
# the class will be executed even if exception is raised.
|
|
# @param cls The class pointer.
|
|
@classmethod
|
|
def setUpClass(cls):
|
|
super(TestVxlanGbp, cls).setUpClass()
|
|
|
|
try:
|
|
cls.dport = 48879
|
|
cls.flags = 0x88
|
|
cls.gpflags = 0x0
|
|
cls.sclass = 0
|
|
|
|
# Create 2 pg interfaces.
|
|
cls.create_pg_interfaces(range(4))
|
|
for pg in cls.pg_interfaces:
|
|
pg.admin_up()
|
|
|
|
# Configure IPv4 addresses on VPP pg0.
|
|
cls.pg0.config_ip4()
|
|
|
|
# Resolve MAC address for VPP's IP address on pg0.
|
|
cls.pg0.resolve_arp()
|
|
|
|
# Create VXLAN GBP VTEP on VPP pg0, and put vxlan_gbp_tunnel0 and
|
|
# pg1 into BD.
|
|
cls.single_tunnel_bd = 1
|
|
r = cls.vapi.vxlan_gbp_tunnel_add_del(
|
|
tunnel={
|
|
'src': VppIpAddress(cls.pg0.local_ip4).encode(),
|
|
'dst': VppIpAddress(cls.pg0.remote_ip4).encode(),
|
|
'vni': cls.single_tunnel_bd,
|
|
'instance': INVALID_INDEX,
|
|
'mcast_sw_if_index': INVALID_INDEX,
|
|
'mode': 1,
|
|
},
|
|
is_add=1
|
|
)
|
|
cls.vapi.sw_interface_set_l2_bridge(rx_sw_if_index=r.sw_if_index,
|
|
bd_id=cls.single_tunnel_bd)
|
|
cls.vapi.sw_interface_set_l2_bridge(
|
|
rx_sw_if_index=cls.pg1.sw_if_index,
|
|
bd_id=cls.single_tunnel_bd)
|
|
|
|
# Setup vni 2 to test multicast flooding
|
|
cls.n_ucast_tunnels = 2
|
|
# Setup vni 3 to test unicast flooding
|
|
cls.ucast_flood_bd = 3
|
|
cls.create_vxlan_gbp_flood_test_bd(cls.ucast_flood_bd,
|
|
cls.n_ucast_tunnels)
|
|
cls.vapi.sw_interface_set_l2_bridge(
|
|
rx_sw_if_index=cls.pg3.sw_if_index,
|
|
bd_id=cls.ucast_flood_bd)
|
|
except Exception:
|
|
super(TestVxlanGbp, cls).tearDownClass()
|
|
raise
|
|
|
|
@classmethod
|
|
def tearDownClass(cls):
|
|
super(TestVxlanGbp, cls).tearDownClass()
|
|
|
|
def assert_eq_pkts(self, pkt1, pkt2):
|
|
""" Verify the Ether, IP, UDP, payload are equal in both
|
|
packets
|
|
"""
|
|
self.assertEqual(pkt1[Ether].src, pkt2[Ether].src)
|
|
self.assertEqual(pkt1[Ether].dst, pkt2[Ether].dst)
|
|
self.assertEqual(pkt1[IP].src, pkt2[IP].src)
|
|
self.assertEqual(pkt1[IP].dst, pkt2[IP].dst)
|
|
self.assertEqual(pkt1[UDP].sport, pkt2[UDP].sport)
|
|
self.assertEqual(pkt1[UDP].dport, pkt2[UDP].dport)
|
|
self.assertEqual(pkt1[Raw], pkt2[Raw])
|
|
|
|
def test_decap(self):
|
|
""" Decapsulation test
|
|
Send encapsulated frames from pg0
|
|
Verify receipt of decapsulated frames on pg1
|
|
"""
|
|
encapsulated_pkt = self.encapsulate(self.frame_request,
|
|
self.single_tunnel_bd)
|
|
|
|
self.pg0.add_stream([encapsulated_pkt, ])
|
|
|
|
self.pg1.enable_capture()
|
|
|
|
self.pg_start()
|
|
|
|
# Pick first received frame and check if it's the non-encapsulated
|
|
# frame
|
|
out = self.pg1.get_capture(1)
|
|
pkt = out[0]
|
|
self.assert_eq_pkts(pkt, self.frame_request)
|
|
|
|
def test_encap(self):
|
|
""" Encapsulation test
|
|
Send frames from pg1
|
|
Verify receipt of encapsulated frames on pg0
|
|
"""
|
|
self.pg1.add_stream([self.frame_reply])
|
|
|
|
self.pg0.enable_capture()
|
|
|
|
self.pg_start()
|
|
|
|
# Pick first received frame and check if it's correctly encapsulated.
|
|
out = self.pg0.get_capture(1)
|
|
pkt = out[0]
|
|
self.check_encapsulation(pkt, self.single_tunnel_bd)
|
|
|
|
payload = self.decapsulate(pkt)
|
|
self.assert_eq_pkts(payload, self.frame_reply)
|
|
|
|
def test_ucast_flood(self):
|
|
""" Unicast flood test
|
|
Send frames from pg3
|
|
Verify receipt of encapsulated frames on pg0
|
|
"""
|
|
self.pg3.add_stream([self.frame_reply])
|
|
|
|
self.pg0.enable_capture()
|
|
|
|
self.pg_start()
|
|
|
|
# Get packet from each tunnel and assert it's correctly encapsulated.
|
|
out = self.pg0.get_capture(self.n_ucast_tunnels)
|
|
for pkt in out:
|
|
self.check_encapsulation(pkt, self.ucast_flood_bd, True)
|
|
payload = self.decapsulate(pkt)
|
|
self.assert_eq_pkts(payload, self.frame_reply)
|
|
|
|
def test_encap_big_packet(self):
|
|
""" Encapsulation test send big frame from pg1
|
|
Verify receipt of encapsulated frames on pg0
|
|
"""
|
|
|
|
self.vapi.sw_interface_set_mtu(self.pg0.sw_if_index, [1500, 0, 0, 0])
|
|
|
|
frame = (Ether(src='00:00:00:00:00:02', dst='00:00:00:00:00:01') /
|
|
IP(src='4.3.2.1', dst='1.2.3.4') /
|
|
UDP(sport=20000, dport=10000) /
|
|
Raw('\xa5' * 1450))
|
|
|
|
self.pg1.add_stream([frame])
|
|
|
|
self.pg0.enable_capture()
|
|
|
|
self.pg_start()
|
|
|
|
# Pick first received frame and check if it's correctly encapsulated.
|
|
out = self.pg0.get_capture(2)
|
|
pkt = reassemble4_ether(out)
|
|
self.check_encapsulation(pkt, self.single_tunnel_bd)
|
|
|
|
payload = self.decapsulate(pkt)
|
|
self.assert_eq_pkts(payload, frame)
|
|
|
|
# Method to define VPP actions before tear down of the test case.
|
|
# Overrides tearDown method in VppTestCase class.
|
|
# @param self The object pointer.
|
|
def tearDown(self):
|
|
super(TestVxlanGbp, self).tearDown()
|
|
|
|
def show_commands_at_teardown(self):
|
|
self.logger.info(self.vapi.cli("show bridge-domain 1 detail"))
|
|
self.logger.info(self.vapi.cli("show bridge-domain 3 detail"))
|
|
self.logger.info(self.vapi.cli("show vxlan-gbp tunnel"))
|
|
self.logger.info(self.vapi.cli("show error"))
|
|
|
|
|
|
if __name__ == '__main__':
|
|
unittest.main(testRunner=VppTestRunner)
|