cebb477339
Type: feature Change-Id: I91f72f5802db195d1a15424d67c1b6e518168f9f Signed-off-by: Mohsin Kazmi <sykazmi@cisco.com>
189 lines
7.6 KiB
Python
189 lines
7.6 KiB
Python
#!/usr/bin/env python3
|
|
|
|
import unittest
|
|
import os
|
|
from socket import AF_INET6, inet_pton, inet_ntop
|
|
|
|
from framework import tag_fixme_vpp_workers
|
|
from framework import VppTestCase, VppTestRunner
|
|
from vpp_neighbor import VppNeighbor, find_nbr
|
|
from vpp_ip_route import VppIpRoute, VppRoutePath, find_route, \
|
|
VppIpTable, DpoProto, FibPathType, VppIpInterfaceAddress
|
|
from vpp_papi import VppEnum
|
|
from vpp_ip import VppIpPuntRedirect
|
|
|
|
import scapy.compat
|
|
from scapy.packet import Raw
|
|
from scapy.layers.l2 import Ether, ARP, Dot1Q
|
|
from scapy.layers.inet import IP, UDP, TCP
|
|
from scapy.layers.inet6 import IPv6, ipv6nh, ICMPv6ND_NS, ICMPv6ND_NA, \
|
|
ICMPv6NDOptSrcLLAddr, ICMPv6NDOptDstLLAddr, ICMPv6EchoRequest, \
|
|
ICMPv6EchoReply
|
|
from scapy.utils6 import in6_ptop, in6_getnsma, in6_getnsmac, in6_ismaddr
|
|
|
|
|
|
class TestNDPROXY(VppTestCase):
|
|
""" IP6 ND (mirror) Proxy Test Case """
|
|
|
|
@classmethod
|
|
def setUpClass(self):
|
|
super(TestNDPROXY, self).setUpClass()
|
|
self.create_pg_interfaces(range(2))
|
|
|
|
@classmethod
|
|
def tearDownClass(self):
|
|
super(TestNDPROXY, self).tearDownClass()
|
|
|
|
def setUp(self):
|
|
super(TestNDPROXY, self).setUp()
|
|
for i in self.pg_interfaces:
|
|
i.admin_up()
|
|
i.config_ip6()
|
|
i.disable_ipv6_ra()
|
|
|
|
def tearDown(self):
|
|
super(TestNDPROXY, self).tearDown()
|
|
if not self.vpp_dead:
|
|
for i in self.pg_interfaces:
|
|
i.unconfig_ip6()
|
|
i.admin_down()
|
|
|
|
def test_nd_mirror_proxy(self):
|
|
""" Interface (Mirror) Proxy ND """
|
|
|
|
#
|
|
# When VPP has an interface whose address is also applied to a TAP
|
|
# interface on the host, then VPP's TAP interface will be unnumbered
|
|
# to the 'real' interface and do proxy ND from the host.
|
|
# the curious aspect of this setup is that ND requests from the host
|
|
# will come from the VPP's own address.
|
|
#
|
|
addr = self.pg0.remote_ip6
|
|
nsma = in6_getnsma(inet_pton(socket.AF_INET6, addr))
|
|
d = inet_ntop(socket.AF_INET6, nsma)
|
|
|
|
# Make pg1 un-numbered to pg0
|
|
#
|
|
self.pg1.unconfig_ip6()
|
|
self.pg1.set_unnumbered(self.pg0.sw_if_index)
|
|
|
|
#
|
|
# Enable ND proxy on pg1
|
|
#
|
|
self.vapi.ip6nd_proxy_enable_disable(sw_if_index=self.pg1.sw_if_index,
|
|
is_enable=1)
|
|
#
|
|
# Send the ND request with an originating address that
|
|
# is VPP's own address
|
|
#
|
|
nd_req_from_host = (Ether(src=self.pg1.remote_mac,
|
|
dst=in6_getnsmac(nsma)) /
|
|
IPv6(dst=d, src=self.pg0.local_ip6) /
|
|
ICMPv6ND_NS(tgt=addr) /
|
|
ICMPv6NDOptSrcLLAddr(lladdr=self.pg1.remote_mac))
|
|
|
|
rx = self.send_and_expect(self.pg1, [nd_req_from_host], self.pg1)
|
|
self.assertEqual(rx[0][Ether].src, self.pg1.local_mac)
|
|
self.assertEqual(rx[0][Ether].dst, self.pg1.remote_mac)
|
|
self.assertEqual(rx[0][IPv6].src, self.pg0.remote_ip6)
|
|
self.assertEqual(rx[0][IPv6].dst, self.pg0.local_ip6)
|
|
self.assertEqual(ipv6nh[rx[0][IPv6].nh], "ICMPv6")
|
|
self.assertEqual(rx[0][ICMPv6ND_NA].tgt, self.pg0.remote_ip6)
|
|
self.assertTrue(rx[0].haslayer(ICMPv6NDOptDstLLAddr))
|
|
self.assertEqual(rx[0][ICMPv6NDOptDstLLAddr].lladdr,
|
|
self.pg1.local_mac)
|
|
|
|
#
|
|
# Send the unicast ND request
|
|
#
|
|
unicast_nd_req_from_host = (Ether(src=self.pg1.remote_mac,
|
|
dst=self.pg1.local_mac) /
|
|
IPv6(dst=self.pg0.remote_ip6,
|
|
src=self.pg1.remote_ip6_ll) /
|
|
ICMPv6ND_NS(tgt=self.pg0.remote_ip6) /
|
|
ICMPv6NDOptSrcLLAddr(
|
|
lladdr=self.pg1.remote_mac))
|
|
|
|
rx = self.send_and_expect(self.pg1, [unicast_nd_req_from_host],
|
|
self.pg0)
|
|
self.assertEqual(rx[0][Ether].src, self.pg0.local_mac)
|
|
self.assertEqual(rx[0][Ether].dst, in6_getnsmac(nsma))
|
|
self.assertEqual(rx[0][IPv6].src, self.pg0.local_ip6)
|
|
self.assertEqual(rx[0][IPv6].dst, d)
|
|
self.assertEqual(ipv6nh[rx[0][IPv6].nh], "ICMPv6")
|
|
self.assertEqual(rx[0][ICMPv6ND_NS].tgt, self.pg0.remote_ip6)
|
|
self.assertTrue(rx[0].haslayer(ICMPv6NDOptSrcLLAddr))
|
|
self.assertEqual(rx[0][ICMPv6NDOptSrcLLAddr].lladdr,
|
|
self.pg0.local_mac)
|
|
|
|
# Resolve the NDs on the uplink
|
|
self.pg0.resolve_ndp()
|
|
|
|
#
|
|
# Again send the unicast ND request, this time dst address should be
|
|
# in local cache
|
|
#
|
|
rx = self.send_and_expect(self.pg1, [unicast_nd_req_from_host],
|
|
self.pg1)
|
|
self.assertEqual(rx[0][Ether].src, self.pg1.local_mac)
|
|
self.assertEqual(rx[0][Ether].dst, self.pg1.remote_mac)
|
|
self.assertEqual(rx[0][IPv6].src, self.pg0.remote_ip6)
|
|
self.assertEqual(in6_ptop(rx[0][IPv6].dst),
|
|
in6_ptop(self.pg1.remote_ip6_ll))
|
|
self.assertEqual(ipv6nh[rx[0][IPv6].nh], "ICMPv6")
|
|
self.assertEqual(rx[0][ICMPv6ND_NA].tgt, self.pg0.remote_ip6)
|
|
self.assertTrue(rx[0].haslayer(ICMPv6NDOptDstLLAddr))
|
|
self.assertEqual(rx[0][ICMPv6NDOptDstLLAddr].lladdr,
|
|
self.pg1.local_mac)
|
|
|
|
#
|
|
# Send the Echo Request from host to remote (of uplink)
|
|
#
|
|
id = self.pg1.sw_if_index
|
|
seq = 0x1
|
|
echo_request = (Ether(dst=self.pg1.local_mac,
|
|
src=self.pg1.remote_mac) /
|
|
IPv6(dst=self.pg0.remote_ip6, src=self.pg0.local_ip6) /
|
|
ICMPv6EchoRequest(seq=seq, id=id))
|
|
|
|
rx = self.send_and_expect(self.pg1, [echo_request], self.pg0)
|
|
self.assertEqual(rx[0][Ether].src, self.pg0.local_mac)
|
|
self.assertEqual(rx[0][Ether].dst, self.pg0.remote_mac)
|
|
self.assertEqual(rx[0][IPv6].src, self.pg0.local_ip6)
|
|
self.assertEqual(rx[0][IPv6].dst, self.pg0.remote_ip6)
|
|
self.assertEqual(ipv6nh[rx[0][IPv6].nh], "ICMPv6")
|
|
self.assertTrue(rx[0].haslayer(ICMPv6EchoRequest))
|
|
self.assertEqual(rx[0][ICMPv6EchoRequest].id, id)
|
|
self.assertEqual(rx[0][ICMPv6EchoRequest].seq, seq)
|
|
|
|
#
|
|
# setup a punt redirect so packets from the uplink go to the tap
|
|
#
|
|
redirect = VppIpPuntRedirect(self, self.pg0.sw_if_index,
|
|
self.pg1.sw_if_index, self.pg0.local_ip6)
|
|
redirect.add_vpp_config()
|
|
|
|
echo_reply = (Ether(dst=self.pg0.remote_mac, src=self.pg0.local_mac) /
|
|
IPv6(dst=self.pg0.local_ip6, src=self.pg0.remote_ip6) /
|
|
ICMPv6EchoReply(seq=1, id=id))
|
|
|
|
rx = self.send_and_expect(self.pg0, [echo_reply], self.pg1)
|
|
self.assertEqual(rx[0][Ether].src, self.pg1.local_mac)
|
|
self.assertEqual(rx[0][Ether].dst, self.pg1.remote_mac)
|
|
self.assertEqual(rx[0][IPv6].src, self.pg0.remote_ip6)
|
|
self.assertEqual(rx[0][IPv6].dst, self.pg0.local_ip6)
|
|
self.assertEqual(ipv6nh[rx[0][IPv6].nh], "ICMPv6")
|
|
self.assertTrue(rx[0].haslayer(ICMPv6EchoReply))
|
|
self.assertEqual(rx[0][ICMPv6EchoReply].id, id)
|
|
self.assertEqual(rx[0][ICMPv6EchoReply].seq, seq)
|
|
|
|
#
|
|
# cleanup
|
|
#
|
|
self.vapi.ip6nd_proxy_enable_disable(sw_if_index=self.pg1.sw_if_index,
|
|
is_enable=0)
|
|
redirect.remove_vpp_config()
|
|
|
|
if __name__ == '__main__':
|
|
unittest.main(testRunner=VppTestRunner)
|