openstack
/
deb-ryu
Code Issues Proposed changes

test_bgp: Add test cases for IPv6 Flow Spec 

Signed-off-by: Satoshi Fujimoto <satoshi.fujimoto7@gmail.com>
Signed-off-by: FUJITA Tomonori <fujita.tomonori@lab.ntt.co.jp>
This commit is contained in:
Satoshi Fujimoto 2017-05-09 16:09:44 +09:00 committed by FUJITA Tomonori
parent 607f4d8276
commit 64b9dfcdd6
3 changed files with 213 additions and 65 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
ryu/tests/packet_data/bgp4/flowspec_nlri_ipv6.pcap Normal file
View File

Binary file not shown.

BIN
ryu/tests/packet_data/bgp4/flowspec_nlri_vpn6.pcap Normal file
View File

Binary file not shown.

278
ryu/tests/unit/packet/test_bgp.py
View File

@ -44,6 +44,71 @@ PMSI_TYPE_INGRESS_REPLICATION = (
bgp.BGPPathAttributePmsiTunnel.TYPE_INGRESS_REPLICATION
)
RULES_BASE = [
# port='>=8000'
bgp.FlowSpecPort(
operator=(bgp.FlowSpecPort.GT | bgp.FlowSpecPort.EQ),
value=8000),
# port='&<=9000'
bgp.FlowSpecPort(
operator=(bgp.FlowSpecPort.AND | bgp.FlowSpecPort.LT |
bgp.FlowSpecPort.EQ),
value=9000),
# port='==80'
bgp.FlowSpecPort(operator=bgp.FlowSpecPort.EQ, value=80),
# dst_port=8080
bgp.FlowSpecDestPort(operator=bgp.FlowSpecDestPort.EQ, value=8080),
# dst_port='>9000'
bgp.FlowSpecDestPort(operator=bgp.FlowSpecDestPort.GT, value=9000),
# dst_port='&<9050'
bgp.FlowSpecDestPort(
operator=(bgp.FlowSpecDestPort.AND | bgp.FlowSpecDestPort.LT),
value=9050),
# dst_port='<=1000'
bgp.FlowSpecDestPort(
operator=(bgp.FlowSpecDestPort.LT | bgp.FlowSpecDestPort.EQ),
value=1000),
# src_port='<=9090'
bgp.FlowSpecSrcPort(
operator=(bgp.FlowSpecSrcPort.LT | bgp.FlowSpecSrcPort.EQ),
value=9090),
# src_port='& >=9080'
bgp.FlowSpecSrcPort(
operator=(bgp.FlowSpecSrcPort.AND | bgp.FlowSpecSrcPort.GT |
bgp.FlowSpecSrcPort.EQ),
value=9080),
# src_port='<10100'
bgp.FlowSpecSrcPort(
operator=bgp.FlowSpecSrcPort.LT, value=10100),
# src_port='>10000'
bgp.FlowSpecSrcPort(
operator=(bgp.FlowSpecSrcPort.AND | bgp.FlowSpecSrcPort.GT),
value=10000),
# icmp_type=0
bgp.FlowSpecIcmpType(operator=bgp.FlowSpecIcmpType.EQ, value=0),
# icmp_code=6
bgp.FlowSpecIcmpCode(operator=bgp.FlowSpecIcmpCode.EQ, value=6),
# tcp_flags='ACK+FIN'
bgp.FlowSpecTCPFlags(
operator=0, # Partial match
value=(bgp.FlowSpecTCPFlags.SYN | bgp.FlowSpecTCPFlags.ACK)),
# tcp_flags='&!=URGENT'
bgp.FlowSpecTCPFlags(
operator=(bgp.FlowSpecTCPFlags.AND | bgp.FlowSpecTCPFlags.NOT),
value=bgp.FlowSpecTCPFlags.URGENT),
# packet_len=1000
bgp.FlowSpecPacketLen(
operator=bgp.FlowSpecPacketLen.EQ, value=1000),
# packet_len=1100
bgp.FlowSpecPacketLen(
operator=(bgp.FlowSpecTCPFlags.AND | bgp.FlowSpecPacketLen.EQ),
value=1100),
# dscp=22
bgp.FlowSpecDSCP(operator=bgp.FlowSpecDSCP.EQ, value=22),
# dscp=24
bgp.FlowSpecDSCP(operator=bgp.FlowSpecDSCP.EQ, value=24),
]
class Test_bgp(unittest.TestCase):
""" Test case for ryu.lib.packet.bgp
@ -285,6 +350,8 @@ class Test_bgp(unittest.TestCase):
'evpn_nlri_ip_prefix',
'flowspec_nlri_ipv4',
'flowspec_nlri_vpn4',
'flowspec_nlri_ipv6',
'flowspec_nlri_vpn6',
'flowspec_action_traffic_rate',
'flowspec_action_traffic_action',
'flowspec_action_redirect',
@ -449,8 +516,8 @@ class Test_bgp(unittest.TestCase):
msg2 = bgp.BGPUpdate.from_jsondict(jsondict['BGPUpdate'])
eq_(str(msg1), str(msg2))
def test_user_interface(self):
rules = [
def test_flowspec_user_interface_ipv4(self):
rules = RULES_BASE + [
# dst_prefix='10.0.0.0/24
bgp.FlowSpecDestPrefix(addr='10.0.0.0', length=24),
# src_prefix='20.0.0.1/24'
@ -458,68 +525,6 @@ class Test_bgp(unittest.TestCase):
# ip_proto='6'
bgp.FlowSpecIPProtocol(
operator=bgp.FlowSpecIPProtocol.EQ, value=6),
# port='>=8000'
bgp.FlowSpecPort(
operator=(bgp.FlowSpecPort.GT | bgp.FlowSpecPort.EQ),
value=8000),
# port='&<=9000'
bgp.FlowSpecPort(
operator=(bgp.FlowSpecPort.AND | bgp.FlowSpecPort.LT |
bgp.FlowSpecPort.EQ),
value=9000),
# port='==80'
bgp.FlowSpecPort(operator=bgp.FlowSpecPort.EQ, value=80),
# dst_port=8080
bgp.FlowSpecDestPort(operator=bgp.FlowSpecDestPort.EQ, value=8080),
# dst_port='>9000'
bgp.FlowSpecDestPort(operator=bgp.FlowSpecDestPort.GT, value=9000),
# dst_port='&<9050'
bgp.FlowSpecDestPort(
operator=(bgp.FlowSpecDestPort.AND | bgp.FlowSpecDestPort.LT),
value=9050),
# dst_port='<=1000'
bgp.FlowSpecDestPort(
operator=(bgp.FlowSpecDestPort.LT | bgp.FlowSpecDestPort.EQ),
value=1000),
# src_port='<=9090'
bgp.FlowSpecSrcPort(
operator=(bgp.FlowSpecSrcPort.LT | bgp.FlowSpecSrcPort.EQ),
value=9090),
# src_port='& >=9080'
bgp.FlowSpecSrcPort(
operator=(bgp.FlowSpecSrcPort.AND | bgp.FlowSpecSrcPort.GT |
bgp.FlowSpecSrcPort.EQ),
value=9080),
# src_port='<10100'
bgp.FlowSpecSrcPort(
operator=bgp.FlowSpecSrcPort.LT, value=10100),
# src_port='>10000'
bgp.FlowSpecSrcPort(
operator=(bgp.FlowSpecSrcPort.AND | bgp.FlowSpecSrcPort.GT),
value=10000),
# icmp_type=0
bgp.FlowSpecIcmpType(operator=bgp.FlowSpecIcmpType.EQ, value=0),
# icmp_code=6
bgp.FlowSpecIcmpCode(operator=bgp.FlowSpecIcmpCode.EQ, value=6),
# tcp_flags='ACK+FIN'
bgp.FlowSpecTCPFlags(
operator=0, # Partial match
value=(bgp.FlowSpecTCPFlags.SYN | bgp.FlowSpecTCPFlags.ACK)),
# tcp_flags='&!=URGENT'
bgp.FlowSpecTCPFlags(
operator=(bgp.FlowSpecTCPFlags.AND | bgp.FlowSpecTCPFlags.NOT),
value=bgp.FlowSpecTCPFlags.URGENT),
# packet_len=1000
bgp.FlowSpecPacketLen(
operator=bgp.FlowSpecPacketLen.EQ, value=1000),
# packet_len=1100
bgp.FlowSpecPacketLen(
operator=(bgp.FlowSpecTCPFlags.AND | bgp.FlowSpecPacketLen.EQ),
value=1100),
# dscp=22
bgp.FlowSpecDSCP(operator=bgp.FlowSpecDSCP.EQ, value=22),
# dscp=24
bgp.FlowSpecDSCP(operator=bgp.FlowSpecDSCP.EQ, value=24),
# fragment='LF'
bgp.FlowSpecFragment(
operator=0, # Partial match
@ -536,7 +541,8 @@ class Test_bgp(unittest.TestCase):
# fragment='!=DF'
bgp.FlowSpecFragment(
operator=bgp.FlowSpecFragment.NOT,
value=bgp.FlowSpecFragment.DF)]
value=bgp.FlowSpecFragment.DF)
]
msg = bgp.FlowSpecIPv4NLRI.from_user(
dst_prefix='10.0.0.0/24',
@ -560,6 +566,33 @@ class Test_bgp(unittest.TestCase):
eq_(str(msg), str(msg3))
eq_(rest, b'')
def test_flowspec_user_interface_vpv4(self):
rules = RULES_BASE + [
# dst_prefix='10.0.0.0/24
bgp.FlowSpecDestPrefix(addr='10.0.0.0', length=24),
# src_prefix='20.0.0.1/24'
bgp.FlowSpecSrcPrefix(addr='20.0.0.0', length=24),
# ip_proto='6'
bgp.FlowSpecIPProtocol(
operator=bgp.FlowSpecIPProtocol.EQ, value=6),
# fragment='LF'
bgp.FlowSpecFragment(
operator=0, # Partial match
value=bgp.FlowSpecFragment.LF),
# fragment='==FF'
bgp.FlowSpecFragment(
operator=bgp.FlowSpecFragment.MATCH,
value=bgp.FlowSpecFragment.FF),
# fragment='&==ISF'
bgp.FlowSpecFragment(
operator=(bgp.FlowSpecFragment.AND |
bgp.FlowSpecFragment.MATCH),
value=bgp.FlowSpecFragment.ISF),
# fragment='!=DF'
bgp.FlowSpecFragment(
operator=bgp.FlowSpecFragment.NOT,
value=bgp.FlowSpecFragment.DF)
]
msg = bgp.FlowSpecVPNv4NLRI.from_user(
route_dist='65001:250',
dst_prefix='10.0.0.0/24',
@ -582,3 +615,118 @@ class Test_bgp(unittest.TestCase):
msg3, rest = bgp.FlowSpecVPNv4NLRI.parser(binmsg)
eq_(str(msg), str(msg3))
eq_(rest, b'')
def test_flowspec_user_interface_ipv6(self):
rules = RULES_BASE + [
# dst_prefix='2001:2/128/32'
bgp.FlowSpecIPv6DestPrefix(
addr='2001::2', offset=32, length=128),
# src_prefix='3002::3/128'
bgp.FlowSpecIPv6SrcPrefix(
addr='3002::3', length=128),
# ip_proto='6'
bgp.FlowSpecNextHeader(
operator=bgp.FlowSpecNextHeader.EQ, value=6),
# fragment='LF'
bgp.FlowSpecIPv6Fragment(
operator=0, # Partial match
value=bgp.FlowSpecFragment.LF),
# fragment='==FF'
bgp.FlowSpecIPv6Fragment(
operator=bgp.FlowSpecFragment.MATCH,
value=bgp.FlowSpecFragment.FF),
# fragment='&==ISF'
bgp.FlowSpecIPv6Fragment(
operator=(bgp.FlowSpecFragment.AND |
bgp.FlowSpecFragment.MATCH),
value=bgp.FlowSpecFragment.ISF),
# fragment='!=LF'
bgp.FlowSpecIPv6Fragment(
operator=bgp.FlowSpecFragment.NOT,
value=bgp.FlowSpecFragment.LF),
# flowlabel='100'
bgp.FlowSpecIPv6FlowLabel(
operator=bgp.FlowSpecIPv6FlowLabel.EQ,
value=100),
]
msg = bgp.FlowSpecIPv6NLRI.from_user(
dst_prefix='2001::2/128/32',
src_prefix='3002::3/128',
next_header='6',
port='>=8000 & <=9000 | ==80',
dst_port='8080 >9000&<9050 | <=1000',
src_port='<=9090 & >=9080 <10100 & >10000',
icmp_type=0,
icmp_code=6,
tcp_flags='SYN+ACK & !=URGENT',
packet_len='1000 & 1100',
dscp='22 24',
fragment='LF ==FF&==ISF | !=LF',
flow_label=100,
)
msg2 = bgp.FlowSpecIPv6NLRI(rules=rules)
binmsg = msg.serialize()
binmsg2 = msg2.serialize()
eq_(str(msg), str(msg2))
eq_(binary_str(binmsg), binary_str(binmsg2))
msg3, rest = bgp.FlowSpecIPv6NLRI.parser(binmsg)
eq_(str(msg), str(msg3))
eq_(rest, b'')
def test_flowspec_user_interface_vpnv6(self):
rules = RULES_BASE + [
# dst_prefix='2001:2/128/32'
bgp.FlowSpecIPv6DestPrefix(
addr='2001::2', offset=32, length=128),
# src_prefix='3002::3/128'
bgp.FlowSpecIPv6SrcPrefix(
addr='3002::3', length=128),
# ip_proto='6'
bgp.FlowSpecNextHeader(
operator=bgp.FlowSpecNextHeader.EQ, value=6),
# fragment='LF'
bgp.FlowSpecIPv6Fragment(
operator=0, # Partial match
value=bgp.FlowSpecFragment.LF),
# fragment='==FF'
bgp.FlowSpecIPv6Fragment(
operator=bgp.FlowSpecFragment.MATCH,
value=bgp.FlowSpecFragment.FF),
# fragment='&==ISF'
bgp.FlowSpecIPv6Fragment(
operator=(bgp.FlowSpecFragment.AND |
bgp.FlowSpecFragment.MATCH),
value=bgp.FlowSpecFragment.ISF),
# fragment='!=LF'
bgp.FlowSpecIPv6Fragment(
operator=bgp.FlowSpecFragment.NOT,
value=bgp.FlowSpecFragment.LF),
# flowlabel='100'
bgp.FlowSpecIPv6FlowLabel(
operator=bgp.FlowSpecIPv6FlowLabel.EQ,
value=100),
]
msg = bgp.FlowSpecVPNv6NLRI.from_user(
route_dist='65001:250',
dst_prefix='2001::2/128/32',
src_prefix='3002::3/128',
next_header='6',
port='>=8000 & <=9000 | ==80',
dst_port='8080 >9000&<9050 | <=1000',
src_port='<=9090 & >=9080 <10100 & >10000',
icmp_type=0,
icmp_code=6,
tcp_flags='SYN+ACK & !=URGENT',
packet_len='1000 & 1100',
dscp='22 24',
fragment='LF ==FF&==ISF | !=LF',
flow_label=100,
)
msg2 = bgp.FlowSpecVPNv6NLRI(route_dist='65001:250', rules=rules)
binmsg = msg.serialize()
binmsg2 = msg2.serialize()
eq_(str(msg), str(msg2))
eq_(binary_str(binmsg), binary_str(binmsg2))
msg3, rest = bgp.FlowSpecVPNv6NLRI.parser(binmsg)
eq_(str(msg), str(msg3))
eq_(rest, b'')