Gitiles
Code Review Sign In
gerrit.opencord.org / fabric-oftest / 4bda39f91f37124706e443392aa058a4d58bd241 / . / accton / nat.py
blob: 5557d60f21a3dd8f9e0fcf4ff4dfa017eee21903 [file] [log] [blame]
Matteo Scandoloa229eca2017-08-08 13:05:28 -0700[diff] [blame]1
2# Copyright 2017-present Open Networking Foundation
3#
4# Licensed under the Apache License, Version 2.0 (the "License");
5# you may not use this file except in compliance with the License.
6# You may obtain a copy of the License at
7#
8# http://www.apache.org/licenses/LICENSE-2.0
9#
10# Unless required by applicable law or agreed to in writing, software
11# distributed under the License is distributed on an "AS IS" BASIS,
12# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13# See the License for the specific language governing permissions and
14# limitations under the License.
15
16
macauley_chengb75de692015-11-09 13:50:32 +0800[diff] [blame]17"""
18Nat Test
19
20Test each flow table can set entry, and packet rx correctly.
21"""
22
23import logging
24
25from oftest import config
26import oftest.base_tests as base_tests
27import ofp
28from oftest.testutils import *
29from accton_util import *
30
31class dnat(base_tests.SimpleDataPlane):
32 """
33 [DNAT]
34 DNAT (inbound)
35
36 Inject eth 1/3 DA000000000200, SA000000000201, Tag 200, SIP 200.0.0.1, DIP 100.0.0.01, Sport 2828, Dport 5000
37 Output eth 1/1 DA000000000101, SA000000000100, Tag 100, SIP 200.0.0.1, DIP 10.0.0.01, Sport 2828, Dport 2000
38
39 ./dpctl tcp:192.168.1.1:6633 flow-mod table=10,cmd=add,prio=101 in_port=3,vlan_vid=0x10c8/0x1fff goto:20
40 ./dpctl tcp:192.168.1.1:6633 group-mod cmd=add,type=ind,group=0x640001 group=any,port=any,weight=0 output=1
41 ./dpctl tcp:192.168.1.1:6633 group-mod cmd=add,type=ind,group=0x23000001 group=any,port=any,weight=0 set_field=eth_src=00:00:00:00:01:00,set_field=eth_dst=00:00:00:00:01:01,set_field=vlan_vid=100,group=0x640001
42 ./dpctl tcp:192.168.1.1:6633 flow-mod table=20,cmd=add,prio=201 vlan_vid=200/0xfff,eth_dst=00:00:00:00:02:00,eth_type=0x0800 goto:28
43 ./dpctl tcp:192.168.1.1:6633 flow-mod table=28,cmd=add,prio=281 eth_type=0x800,ip_dst=100.0.0.1,ip_proto=6,tcp_dst=5000 write:set_field=ip_dst:10.0.0.1,set_field=tcp_dst:2000,group=0x23000001 goto:60
44 """
45 def runTest(self):
46 delete_all_flows(self.controller)
47 delete_all_groups(self.controller)
48
49 test_ports = sorted(config["port_map"].keys())
50
51 input_port = test_ports[0]
52 output_port = test_ports[1]
53
54 add_one_vlan_table_flow(self.controller, input_port, vlan_id=200, vrf=0, flag=VLAN_TABLE_FLAG_ONLY_BOTH, send_barrier=False)
55 add_termination_flow(self.controller, input_port, 0x0800, [0x00,0x00,0x00,0x00,0x02,0x00], 200, goto_table=28, send_barrier=False)
56
castroflaviodd171472015-12-08 13:55:58 -0500[diff] [blame]57 add_one_l2_interface_group(self.controller, port=output_port, vlan_id=100, is_tagged=True, send_barrier=False)
macauley_chengb75de692015-11-09 13:50:32 +0800[diff] [blame]58 msg1=add_l3_unicast_group(self.controller, port=output_port, vlanid=100, id=0x3000001, src_mac=[0x00,0x00,0x00,0x00,0x01,0x00], dst_mac=[0x00,0x00,0x00,0x00,0x01,0x01])
macauley_chengddcd9342015-11-10 11:49:35 +0800[diff] [blame]59 add_dnat_flow(self.controller, eth_type=0x0800, ip_dst=0x64000001, ip_proto=6, tcp_dst=5000, set_ip_dst=0x0a000001, set_tcp_dst=2000, action_group_id=msg1.group_id)
macauley_chengb75de692015-11-09 13:50:32 +0800[diff] [blame]60
61 input_pkt = simple_tcp_packet(pktlen=100,
62 eth_dst="00:00:00:00:02:00",
63 eth_src="00:00:00:00:02:01",
64 dl_vlan_enable = True,
65 vlan_vid = 200,
66 ip_ttl=64,
67 ip_src="200.0.0.1",
68 ip_dst='100.0.0.1',
69 tcp_dport=5000)
70 output_pkt = simple_tcp_packet(pktlen=100,
71 eth_dst="00:00:00:00:01:01",
72 eth_src="00:00:00:00:01:00",
73 dl_vlan_enable = True,
74 vlan_vid = 100,
75 ip_ttl=63,
76 ip_src="200.0.0.1",
77 ip_dst='10.0.0.1',
78 tcp_dport=2000)
79
80 self.dataplane.send(input_port, str(input_pkt))
81 verify_packet(self, str(output_pkt), output_port)
82
83
84
85class dnatEcmp(base_tests.SimpleDataPlane):
86 """
87 [DNAT ECMP]
88 DNAT (inbound) with ECMP
89
90 Inject eth 1/3 DA000000000200, SA000000000201, Tag 200, SIP 200.0.0.1, DIP 100.0.0.01, Sport 2828, Dport 5000 [increase SIP]
91 Output eth 1/1 DA000000000101, SA000000000100, Tag 100, SIP 200.0.0.X, DIP 10.0.0.01, Sport 2828, Dport 2000
92 Output eth 1/5 DA000005224466, SA000005223355, Tag 2, SIP 200.0.0.X, DIP 10.0.0.01, Sport 2828, Dport 2000
93
94 ./dpctl tcp:192.168.1.1:6633 flow-mod table=10,cmd=add,prio=101 in_port=3,vlan_vid=0x10c8/0x1fff goto:20
95 ./dpctl tcp:192.168.1.1:6633 group-mod cmd=add,type=ind,group=0x640001 group=any,port=any,weight=0 output=1
96 ./dpctl tcp:192.168.1.1:6633 group-mod cmd=add,type=ind,group=0x23000001 group=any,port=any,weight=0 set_field=eth_src=00:00:00:00:01:00,set_field=eth_dst=00:00:00:00:01:01,set_field=vlan_vid=100,group=0x640001
97 ./dpctl tcp:192.168.1.1:6633 group-mod cmd=add,type=ind,group=0x20005 group=any,port=any,weight=0 output=5
98 ./dpctl tcp:192.168.1.1:6633 group-mod cmd=add,type=ind,group=0x23000005 group=any,port=any,weight=0 set_field=eth_src=00:00:05:22:33:55,set_field=eth_dst=00:00:05:22:44:66,set_field=vlan_vid=2,group=0x20005
99 ./dpctl tcp:192.168.1.1:6633 group-mod cmd=add,type=sel,group=0x71000001 group=any,port=any,weight=0 group=0x23000001 group=any,port=any,weight=0 group=0x23000005
100 ./dpctl tcp:192.168.1.1:6633 flow-mod table=20,cmd=add,prio=201 vlan_vid=200/0xfff,eth_dst=00:00:00:00:02:00,eth_type=0x0800 goto:28
101
102 ./dpctl tcp:192.168.1.1:6633 flow-mod table=28,cmd=add,prio=281 eth_type=0x800,ip_dst=100.0.0.1,ip_proto=6,tcp_dst=5000 write:set_field=ip_dst:10.0.0.1,set_field=tcp_dst:2000,group=0x71000001 goto:60
103 """
104 def runTest(self):
105 delete_all_flows(self.controller)
106 delete_all_groups(self.controller)
107
108 test_ports = config["port_map"].keys()
109 input_port = test_ports[0]
110 output_port = test_ports[1]
111 output_port2 = test_ports[2]
112
113 add_one_vlan_table_flow(self.controller, input_port, vlan_id=200, vrf=0, flag=VLAN_TABLE_FLAG_ONLY_TAG, send_barrier=False)
castroflaviodd171472015-12-08 13:55:58 -0500[diff] [blame]114 add_one_l2_interface_group(self.controller, port=output_port, vlan_id=100, is_tagged=True, send_barrier=False)
macauley_chengb75de692015-11-09 13:50:32 +0800[diff] [blame]115 #Bits 27:24 is for realm id, so unicast group id give 0x3000001
116 msg1=add_l3_unicast_group(self.controller, port=output_port, vlanid=100, id=0x3000001, src_mac=[0x00,0x00,0x00,0x00,0x01,0x00], dst_mac=[0x00,0x00,0x00,0x00,0x01,0x01])
castroflaviodd171472015-12-08 13:55:58 -0500[diff] [blame]117 add_one_l2_interface_group(self.controller, port=output_port2, vlan_id=2, is_tagged=True, send_barrier=False)
macauley_chengb75de692015-11-09 13:50:32 +0800[diff] [blame]118 #Bits 27:24 is for realm id, so unicast group id give 0x3000005
119 msg2=add_l3_unicast_group(self.controller, port=output_port2, vlanid=2, id=0x3000005, src_mac=[0x00,0x00,0x05,0x22,0x33,0x55], dst_mac=[0x00,0x00,0x05,0x22,0x44,0x66])
120 ecmp=add_l3_ecmp_group(self.controller, id=0x1000001, l3_ucast_groups=[msg1.group_id, msg2.group_id])
121 add_termination_flow(self.controller, 0, 0x0800, [0x00,0x00,0x00,0x00,0x02,0x00], 200, goto_table=28, send_barrier=False)
macauley_chengeffc20a2015-11-09 16:14:56 +0800[diff] [blame]122 add_dnat_flow(self.controller, eth_type=0x0800, ip_dst=0x64000001, ip_proto=6, tcp_dst=5000, set_ip_dst=0x0a000001, set_tcp_dst=2000, action_group_id=ecmp.group_id)
macauley_chengb75de692015-11-09 13:50:32 +0800[diff] [blame]123
124
125 input_pkt = simple_tcp_packet(pktlen=100,
126 eth_dst="00:00:00:00:02:00",
127 eth_src="00:00:00:00:02:01",
128 dl_vlan_enable = True,
129 vlan_vid = 200,
130 ip_ttl=64,
131 ip_src="200.0.0.1",
132 ip_dst='100.0.0.1',
133 tcp_dport=5000)
134 output_pkt = simple_tcp_packet(pktlen=100,
135 eth_dst="00:00:00:00:01:01",
136 eth_src="00:00:00:00:01:00",
137 dl_vlan_enable = True,
138 vlan_vid = 100,
139 ip_ttl=63,
140 ip_src="200.0.0.1",
141 ip_dst='10.0.0.1',
142 tcp_dport=2000)
143 output_pkt2 = simple_tcp_packet(pktlen=100,
144 eth_dst="00:00:05:22:44:66",
145 eth_src="00:00:05:22:33:55",
146 dl_vlan_enable = True,
147 vlan_vid = 2,
148 ip_ttl=63,
149 ip_src="200.0.0.1",
150 ip_dst='10.0.0.1',
151 tcp_dport=2000)
152
153 self.dataplane.send(input_port, str(input_pkt))
154 verify_packet(self, str(output_pkt2), output_port2)
155 #self.dataplane.send(input_port, str(input_pkt))
156 #verify_packet(self, str(output_pkt2), output_port2)
157
macauley_chengeffc20a2015-11-09 16:14:56 +0800[diff] [blame]158class snat_ecmp(base_tests.SimpleDataPlane):
159 """
160 [SNAT ECMP]
161 SNAT (outbound) with ECMP
162
163 Inject eth 1/1 DA000000000100, SA000000000101, Tag 100, SIP 10.0.0.1, DIP 200.0.0.01, Sport 2000, Dport 2828 [increase DIP]
164 Output eth 1/3 DA000000000200, SA000000000201, Tag 200, SIP 100.0.0.1, DIP 200.0.0.X, Sport 5000, Dport 2828
165 Output eth 1/5 DA000000000500, SA000000000501, Tag 5, SIP 100.0.0.1, DIP 200.0.0.X, Sport 5000, Dport 2828
166
167 ./dpctl tcp:192.168.1.1:6633 flow-mod table=10,cmd=add,prio=101 in_port=1,vlan_vid=0x1064/0x1fff goto:20
168 ./dpctl tcp:192.168.1.1:6633 flow-mod table=20,cmd=add,prio=201 vlan_vid=100/0xfff,eth_dst=00:00:00:00:01:00,eth_type=0x0800 goto:29
169 ./dpctl tcp:192.168.1.1:6633 group-mod cmd=add,type=ind,group=0xC80003 group=any,port=any,weight=0 output=3
170 ./dpctl tcp:192.168.1.1:6633 group-mod cmd=add,type=ind,group=0x22000002 group=any,port=any,weight=0 set_field=eth_src=00:00:00:00:02:00,set_field=eth_dst=00:00:00:00:02:01,set_field=vlan_vid=200,group=0xC80003
171 ./dpctl tcp:192.168.1.1:6633 group-mod cmd=add,type=ind,group=0x50005 group=any,port=any,weight=0 output=5
172 ./dpctl tcp:192.168.1.1:6633 group-mod cmd=add,type=ind,group=0x22000005 group=any,port=any,weight=0 set_field=eth_src=00:00:00:00:05:00,set_field=eth_dst=00:00:00:00:05:01,set_field=vlan_vid=5,group=0x50005
173
174 ./dpctl tcp:192.168.1.1:6633 group-mod cmd=add,type=sel,group=0x71000001 group=any,port=any,weight=0 group=0x22000002 group=any,port=any,weight=0 group=0x22000005
175 ./dpctl tcp:192.168.1.1:6633 flow-mod table=29,cmd=add,prio=291 eth_type=0x800,ip_src=10.0.0.1,ip_proto=6,tcp_src=2000 write:set_field=ip_src:100.0.0.1,set_field=tcp_src:5000 goto:30
176 ./dpctl tcp:192.168.1.1:6633 flow-mod table=30,cmd=add,prio=301 eth_type=0x0800,ip_dst=200.0.0.1/255.255.255.0 write:group=0x71000001 goto:60
177 """
178 def runTest(self):
179 delete_all_flows(self.controller)
180 delete_all_groups(self.controller)
181
182 test_ports = sorted(config["port_map"].keys())
183
184 input_port = test_ports[0]
185 output_port = test_ports[1]
186 output_port2 = test_ports[2]
macauley_chengb75de692015-11-09 13:50:32 +0800[diff] [blame]187
macauley_chengeffc20a2015-11-09 16:14:56 +0800[diff] [blame]188 add_one_vlan_table_flow(self.controller, input_port, vlan_id=100, vrf=0, flag=VLAN_TABLE_FLAG_ONLY_TAG, send_barrier=False)
189 add_termination_flow(self.controller, 0, 0x0800, [0x00,0x00,0x00,0x00,0x01,0x00], 100, goto_table=29, send_barrier=False)
castroflaviodd171472015-12-08 13:55:58 -0500[diff] [blame]190 add_one_l2_interface_group(self.controller, port=output_port, vlan_id=200, is_tagged=True, send_barrier=False)
macauley_chengeffc20a2015-11-09 16:14:56 +0800[diff] [blame]191 #Bits 27:24 is for realm id, so unicast group id give 0x2000002
192 msg1=add_l3_unicast_group(self.controller, port=output_port, vlanid=200, id=0x2000002, src_mac=[0x00,0x00,0x00,0x00,0x02,0x00], dst_mac=[0x00,0x00,0x00,0x00,0x02,0x01])
193
castroflaviodd171472015-12-08 13:55:58 -0500[diff] [blame]194 add_one_l2_interface_group(self.controller, port=output_port2, vlan_id=5, is_tagged=True, send_barrier=False)
macauley_chengeffc20a2015-11-09 16:14:56 +0800[diff] [blame]195 #Bits 27:24 is for realm id, so unicast group id give 0x2000002
196 msg2=add_l3_unicast_group(self.controller, port=output_port2, vlanid=5, id=0x2000005, src_mac=[0x00,0x00,0x00,0x00,0x05,0x00], dst_mac=[0x00,0x00,0x00,0x00,0x05,0x01])
197
198 ecmp=add_l3_ecmp_group(self.controller, id=0x1000001, l3_ucast_groups=[msg1.group_id, msg2.group_id])
199 add_snat_flow(self.controller, 0x0800, 0x0a000001, 6, 2000, 0x64000001, 5000)
200 add_unicast_routing_flow(self.controller, 0x0800, 0xc8000001, 0xffffff00, ecmp.group_id, vrf=0, send_barrier=False)
201
202 input_pkt = simple_tcp_packet(pktlen=100,
203 eth_dst="00:00:00:00:01:00",
204 eth_src="00:00:00:00:01:01",
205 dl_vlan_enable = True,
206 vlan_vid = 100,
207 ip_ttl=64,
208 ip_src='10.0.0.1',
209 ip_dst="200.0.0.1",
210 tcp_sport=2000)
211 output_pkt = simple_tcp_packet(pktlen=100,
212 eth_dst="00:00:00:00:02:01",
213 eth_src="00:00:00:00:02:00",
214 dl_vlan_enable = True,
215 vlan_vid = 200,
216 ip_ttl=63,
217 ip_src="100.0.0.1",
218 ip_dst='200.0.0.1',
219 tcp_sport=5000)
220 output_pkt2 = simple_tcp_packet(pktlen=100,
221 eth_dst="00:00:00:00:05:01",
222 eth_src="00:00:00:00:05:00",
223 dl_vlan_enable = True,
224 vlan_vid = 5,
225 ip_ttl=63,
226 ip_src="100.0.0.1",
227 ip_dst='200.0.0.1',
228 tcp_sport=5000)
229
230 self.dataplane.send(input_port, str(input_pkt))
231 verify_packet(self, str(output_pkt), output_port)
232 #self.dataplane.send(input_port, str(input_pkt))
233 #verify_packet(self, str(output_pkt2), output_port2)
234
235"""just for verify it can work after nat ecmp"""
macauley_chengb75de692015-11-09 13:50:32 +0800[diff] [blame]236class l3Route(base_tests.SimpleDataPlane):
237 """
238 [L3 unicast route]
239 Do unicast route and output to specified port
240
241 Inject eth 1/3 Tag2, SA000000112233, DA7072cf7cf3a3, SIP 192.168.1.100, DIP 192.168.2.2
242 Output eth 1/1 Tag3, SA 000004223355, DA 000004224466
243
244 ./dpctl tcp:192.168.1.1:6633 flow-mod table=0,cmd=add,prio=1 in_port=0/0xffff0000 goto:10
245 ./dpctl tcp:192.168.1.1:6633 flow-mod table=10,cmd=add,prio=101 in_port=3,vlan_vid=0x1002/0x1fff goto:20
246 ./dpctl tcp:192.168.1.1:6633 flow-mod table=20,cmd=add,prio=201 in_port=3,vlan_vid=2/0xfff,eth_dst=70:72:cf:7c:f3:a3,eth_type=0x0800 goto:30
247 ./dpctl tcp:192.168.1.1:6633 group-mod cmd=add,type=ind,group=0x30001 group=any,port=any,weight=0 output=1
248 ./dpctl tcp:192.168.1.1:6633 group-mod cmd=add,type=ind,group=0x20000003 group=any,port=any,weight=0 set_field=eth_src=00:00:04:22:33:55,set_field=eth_dst=00:00:04:22:44:66,set_field=vlan_vid=3,group=0x30001
249 ./dpctl tcp:192.168.1.1:6633 flow-mod table=30,cmd=add,prio=301 eth_type=0x0800,ip_dst=192.168.2.2/255.255.255.0 write:group=0x20000003 goto:60
250 """
251 def runTest(self):
252 delete_all_flows(self.controller)
253 delete_all_groups(self.controller)
254
255 test_ports = sorted(config["port_map"].keys())
256
257 input_port = test_ports[0]
258 output_port = test_ports[1]
259
260 add_port_table_flow(self.controller, is_overlay=False)
261 add_one_vlan_table_flow(self.controller, input_port, vlan_id=2, vrf=0, flag=VLAN_TABLE_FLAG_ONLY_TAG, send_barrier=False)
262 add_termination_flow(self.controller, input_port, 0x0800, [0x70, 0x72, 0xcf, 0x7c, 0xf3, 0xa3], 2, send_barrier=False)
castroflaviodd171472015-12-08 13:55:58 -0500[diff] [blame]263 add_one_l2_interface_group(self.controller, port=output_port, vlan_id=3, is_tagged=True, send_barrier=False)
macauley_chengb75de692015-11-09 13:50:32 +0800[diff] [blame]264 msg=add_l3_unicast_group(self.controller, port=output_port, vlanid=3, id=3, src_mac=[0x00,0x00,0x04,0x22,0x33,0x55], dst_mac=[0x00,0x00,0x04,0x22,0x44,0x66])
265 add_unicast_routing_flow(self.controller, 0x0800, 0xc0a80202, 0xffffff00, msg.group_id)
266
267 #verify tx/rx packet
268 input_pkt = simple_tcp_packet(pktlen=100,
269 eth_dst="70:72:cf:7c:f3:a3",
270 eth_src="00:00:00:00:02:01",
271 dl_vlan_enable = True,
272 vlan_vid = 2,
273 ip_ttl=64,
274 ip_src="200.0.0.1",
275 ip_dst='192.168.2.2')
276 output_pkt = simple_tcp_packet(pktlen=100,
277 eth_dst="00:00:04:22:44:66",
278 eth_src="00:00:04:22:33:55",
279 dl_vlan_enable = True,
280 vlan_vid = 3,
281 ip_ttl=63,
282 ip_src="200.0.0.1",
283 ip_dst='192.168.2.2')
284
285 self.dataplane.send(input_port, str(input_pkt))
286 verify_packet(self, str(output_pkt), output_port)
287
288
289
290
291
292
293