tests/topotests/bgp_auth/test_bgp_auth3.py

   1 #!/usr/bin/env python
   2 # SPDX-License-Identifier: ISC
   3
   4 #
   5 # test_bgp_auth.py
   6 # Part of NetDEF Topology Tests
   7 #
   8 # Copyright (c) 2020 by Volta Networks
   9 #
  10
  11 """
  12 test_bgp_auth.py: Test BGP Md5 Authentication
  13
  14                              +------+
  15                     +--------|      |--------+
  16                     | +------|  R1  |------+ |
  17                     | | -----|      |----+ | |
  18                     | | |    +------+    | | |
  19                     | | |                | | |
  20                    +------+            +------+
  21                    |      |------------|      |
  22                    |  R2  |------------|  R3  |
  23                    |      |------------|      |
  24                    +------+            +------+
  25
  26
  27 setup is 3 routers with 3 links between each each link in a different vrf
  28 Default, blue and red respectively
  29 Tests check various fiddling with passwords and checking that the peer
  30 establishment is as expected and passwords are not leaked across sockets
  31 for bgp instances
  32 """
  33 # pylint: disable=C0413
  34
  35 import json
  36 import os
  37 import platform
  38 import sys
  39 from time import sleep
  40
  41 import pytest
  42 from lib import common_config, topotest
  43 from lib.common_config import (
  44     save_initial_config_on_routers,
  45     reset_with_new_configs,
  46 )
  47 from bgp_auth_common import (
  48     check_vrf_peer_change_passwords,
  49     check_all_peers_established,
  50     check_vrf_peer_remove_passwords,
  51 )
  52 from lib.topogen import Topogen, TopoRouter, get_topogen
  53
  54 pytestmark = [pytest.mark.bgpd, pytest.mark.ospfd]
  55
  56 CWD = os.path.dirname(os.path.realpath(__file__))
  57
  58
  59 def build_topo(tgen):
  60     tgen.add_router("R1")
  61     tgen.add_router("R2")
  62     tgen.add_router("R3")
  63
  64     tgen.add_link(tgen.gears["R1"], tgen.gears["R2"])
  65     tgen.add_link(tgen.gears["R1"], tgen.gears["R3"])
  66     tgen.add_link(tgen.gears["R2"], tgen.gears["R3"])
  67     tgen.add_link(tgen.gears["R1"], tgen.gears["R2"])
  68     tgen.add_link(tgen.gears["R1"], tgen.gears["R3"])
  69     tgen.add_link(tgen.gears["R2"], tgen.gears["R3"])
  70     tgen.add_link(tgen.gears["R1"], tgen.gears["R2"])
  71     tgen.add_link(tgen.gears["R1"], tgen.gears["R3"])
  72     tgen.add_link(tgen.gears["R2"], tgen.gears["R3"])
  73
  74
  75 def setup_module(mod):
  76     "Sets up the pytest environment"
  77     # This function initiates the topology build with Topogen...
  78     tgen = Topogen(build_topo, mod.__name__)
  79     # ... and here it calls Mininet initialization functions.
  80     tgen.start_topology()
  81
  82     r1 = tgen.gears["R1"]
  83     r2 = tgen.gears["R2"]
  84     r3 = tgen.gears["R3"]
  85
  86     # blue vrf
  87     r1.cmd_raises("ip link add blue type vrf table 1001")
  88     r1.cmd_raises("ip link set up dev blue")
  89     r2.cmd_raises("ip link add blue type vrf table 1001")
  90     r2.cmd_raises("ip link set up dev blue")
  91     r3.cmd_raises("ip link add blue type vrf table 1001")
  92     r3.cmd_raises("ip link set up dev blue")
  93
  94     r1.cmd_raises("ip link add lo1 type dummy")
  95     r1.cmd_raises("ip link set lo1 master blue")
  96     r1.cmd_raises("ip link set up dev lo1")
  97     r2.cmd_raises("ip link add lo1 type dummy")
  98     r2.cmd_raises("ip link set up dev lo1")
  99     r2.cmd_raises("ip link set lo1 master blue")
 100     r3.cmd_raises("ip link add lo1 type dummy")
 101     r3.cmd_raises("ip link set up dev lo1")
 102     r3.cmd_raises("ip link set lo1 master blue")
 103
 104     r1.cmd_raises("ip link set R1-eth2 master blue")
 105     r1.cmd_raises("ip link set R1-eth3 master blue")
 106     r2.cmd_raises("ip link set R2-eth2 master blue")
 107     r2.cmd_raises("ip link set R2-eth3 master blue")
 108     r3.cmd_raises("ip link set R3-eth2 master blue")
 109     r3.cmd_raises("ip link set R3-eth3 master blue")
 110
 111     r1.cmd_raises("ip link set up dev  R1-eth2")
 112     r1.cmd_raises("ip link set up dev  R1-eth3")
 113     r2.cmd_raises("ip link set up dev  R2-eth2")
 114     r2.cmd_raises("ip link set up dev  R2-eth3")
 115     r3.cmd_raises("ip link set up dev  R3-eth2")
 116     r3.cmd_raises("ip link set up dev  R3-eth3")
 117
 118     # red vrf
 119     r1.cmd_raises("ip link add red type vrf table 1002")
 120     r1.cmd_raises("ip link set up dev red")
 121     r2.cmd_raises("ip link add red type vrf table 1002")
 122     r2.cmd_raises("ip link set up dev red")
 123     r3.cmd_raises("ip link add red type vrf table 1002")
 124     r3.cmd_raises("ip link set up dev red")
 125
 126     r1.cmd_raises("ip link add lo2 type dummy")
 127     r1.cmd_raises("ip link set lo2 master red")
 128     r1.cmd_raises("ip link set up dev lo2")
 129     r2.cmd_raises("ip link add lo2 type dummy")
 130     r2.cmd_raises("ip link set up dev lo2")
 131     r2.cmd_raises("ip link set lo2 master red")
 132     r3.cmd_raises("ip link add lo2 type dummy")
 133     r3.cmd_raises("ip link set up dev lo2")
 134     r3.cmd_raises("ip link set lo2 master red")
 135
 136     r1.cmd_raises("ip link set R1-eth4 master red")
 137     r1.cmd_raises("ip link set R1-eth5 master red")
 138     r2.cmd_raises("ip link set R2-eth4 master red")
 139     r2.cmd_raises("ip link set R2-eth5 master red")
 140     r3.cmd_raises("ip link set R3-eth4 master red")
 141     r3.cmd_raises("ip link set R3-eth5 master red")
 142
 143     r1.cmd_raises("ip link set up dev  R1-eth4")
 144     r1.cmd_raises("ip link set up dev  R1-eth5")
 145     r2.cmd_raises("ip link set up dev  R2-eth4")
 146     r2.cmd_raises("ip link set up dev  R2-eth5")
 147     r3.cmd_raises("ip link set up dev  R3-eth4")
 148     r3.cmd_raises("ip link set up dev  R3-eth5")
 149
 150     r1.cmd_raises("sysctl -w net.ipv4.tcp_l3mdev_accept=1")
 151     r2.cmd_raises("sysctl -w net.ipv4.tcp_l3mdev_accept=1")
 152     r3.cmd_raises("sysctl -w net.ipv4.tcp_l3mdev_accept=1")
 153
 154     # This is a sample of configuration loading.
 155     router_list = tgen.routers()
 156
 157     # For all registered routers, load the zebra configuration file
 158     for rname, router in router_list.items():
 159         router.load_config(TopoRouter.RD_ZEBRA, "zebra.conf")
 160         router.load_config(TopoRouter.RD_OSPF)
 161         router.load_config(TopoRouter.RD_BGP)
 162
 163     # After copying the configurations, this function loads configured daemons.
 164     tgen.start_router()
 165
 166     # Save the initial router config. reset_config_on_routers will return to this config.
 167     save_initial_config_on_routers(tgen)
 168
 169
 170 def teardown_module(mod):
 171     "Teardown the pytest environment"
 172     tgen = get_topogen()
 173
 174     # This function tears down the whole topology.
 175     tgen.stop_topology()
 176
 177
 178 def test_prefix_peer_change_passwords(tgen):
 179     "selecively change passwords checkig state with prefix config"
 180
 181     # only supported in kernel > 5.3
 182     if topotest.version_cmp(platform.release(), "5.3") < 0:
 183         return
 184
 185     reset_with_new_configs(tgen, "bgpd_prefix.conf", "ospfd.conf")
 186     check_vrf_peer_change_passwords(prefix="yes")
 187
 188
 189 def test_vrf_peer_established(tgen):
 190     "default vrf 3 peers same password with VRF config"
 191
 192     # clean routers and load vrf config
 193     reset_with_new_configs(tgen, "bgpd_vrf.conf", "ospfd_vrf.conf")
 194     check_all_peers_established("blue")
 195
 196
 197 def test_vrf_peer_remove_passwords(tgen):
 198     "selectively remove passwords checking state with VRF config"
 199
 200     reset_with_new_configs(tgen, "bgpd_vrf.conf", "ospfd_vrf.conf")
 201     check_vrf_peer_remove_passwords(vrf="blue")
 202
 203
 204 def test_vrf_peer_change_passwords(tgen):
 205     "selectively change passwords checking state with VRF config"
 206
 207     reset_with_new_configs(tgen, "bgpd_vrf.conf", "ospfd_vrf.conf")
 208     check_vrf_peer_change_passwords(vrf="blue")
 209
 210
 211 def test_memory_leak(tgen):
 212     "Run the memory leak test and report results."
 213     if not tgen.is_memleak_enabled():
 214         pytest.skip("Memory leak test/report is disabled")
 215
 216     tgen.report_memory_leaks()
 217
 218
 219 if __name__ == "__main__":
 220     args = ["-s"] + sys.argv[1:]
 221     sys.exit(pytest.main(args))