2 """ 6RD RFC5969 functional tests """
5 from scapy.layers.inet import IP, UDP, Ether
6 from scapy.layers.inet6 import IPv6
7 from scapy.packet import Raw
8 from framework import VppTestCase, VppTestRunner
9 from vpp_ip import DpoProto
10 from vpp_ip_route import VppIpRoute, VppRoutePath, VppIpTable, FibPathProto
11 from socket import AF_INET, AF_INET6, inet_pton
13 """ Test6rd is a subclass of VPPTestCase classes.
20 class Test6RD(VppTestCase):
25 super(Test6RD, cls).setUpClass()
26 cls.create_pg_interfaces(range(4))
27 cls.interfaces = list(cls.pg_interfaces)
30 def tearDownClass(cls):
31 super(Test6RD, cls).tearDownClass()
34 super(Test6RD, self).setUp()
35 t4 = VppIpTable(self, 10)
36 t6 = VppIpTable(self, 20, True)
42 i = self.pg_interfaces[n]
54 for i in self.pg_interfaces:
60 super(Test6RD, self).tearDown()
62 def validate_6in4(self, rx, expected):
68 self.assertEqual(rx[IP].src, expected[IP].src)
69 self.assertEqual(rx[IP].dst, expected[IP].dst)
70 self.assertEqual(rx[IP].proto, expected[IP].proto)
71 self.assertEqual(rx[IPv6].src, expected[IPv6].src)
72 self.assertEqual(rx[IPv6].dst, expected[IPv6].dst)
74 def validate_4in6(self, rx, expected):
80 self.assertEqual(rx[IPv6].src, expected[IPv6].src)
81 self.assertEqual(rx[IPv6].dst, expected[IPv6].dst)
82 self.assertEqual(rx[IPv6].nh, expected[IPv6].nh)
84 def payload(self, len):
87 def test_6rd_ip6_to_ip4(self):
88 """ip6 -> ip4 (encap) 6rd test"""
89 p_ether = Ether(src=self.pg0.remote_mac, dst=self.pg0.local_mac)
90 p_ip6 = IPv6(src="1::1", dst="2002:AC10:0202::1", nh="UDP")
92 rv = self.vapi.ipip_6rd_add_tunnel(
95 ip6_prefix="2002::/16",
96 ip4_prefix="0.0.0.0/0",
97 ip4_src=self.pg0.local_ip4,
101 self.tunnel_index = rv.sw_if_index
103 self.vapi.cli("show ip6 fib")
104 p_payload = UDP(sport=1234, dport=1234)
105 p = p_ether / p_ip6 / p_payload
108 IP(src=self.pg0.local_ip4, dst=self.pg1.remote_ip4, proto="ipv6") / p_ip6
111 rx = self.send_and_expect(self.pg0, p * 10, self.pg1)
113 self.validate_6in4(p, p_reply)
115 # MTU tests (default is 1480)
117 p_ip6 = IPv6(src="1::1", dst="2002:AC10:0202::1")
118 p_payload = UDP(sport=1234, dport=1234) / Raw(self.payload(plen))
119 p = p_ether / p_ip6 / p_payload
122 IP(src=self.pg0.local_ip4, dst=self.pg1.remote_ip4, proto="ipv6") / p_ip6
125 rx = self.send_and_assert_no_replies(self.pg0, p * 10)
126 self.vapi.ipip_6rd_del_tunnel(self.tunnel_index)
128 def test_6rd_ip6_to_ip4_vrf(self):
129 """ip6 -> ip4 (encap) 6rd VRF test"""
130 p_ether = Ether(src=self.pg2.remote_mac, dst=self.pg2.local_mac)
131 p_ip6 = IPv6(src="1::1", dst="2002:AC10:0402::1", nh="UDP")
133 rv = self.vapi.ipip_6rd_add_tunnel(
136 ip6_prefix="2002::/16",
137 ip4_prefix="0.0.0.0/0",
138 ip4_src=self.pg2.local_ip4,
141 self.tunnel_index = rv.sw_if_index
143 self.vapi.cli("show ip6 fib")
144 p_payload = UDP(sport=1234, dport=1234)
145 p = p_ether / p_ip6 / p_payload
148 IP(src=self.pg2.local_ip4, dst=self.pg3.remote_ip4, proto="ipv6") / p_ip6
151 rx = self.send_and_expect(self.pg2, p * 10, self.pg3)
153 self.validate_6in4(p, p_reply)
155 # MTU tests (default is 1480)
157 p_ip6 = IPv6(src="1::1", dst="2002:AC10:0402::1")
158 p_payload = UDP(sport=1234, dport=1234) / Raw(self.payload(plen))
159 p = p_ether / p_ip6 / p_payload
162 IP(src=self.pg2.local_ip4, dst=self.pg3.remote_ip4, proto="ipv6") / p_ip6
165 rx = self.send_and_assert_no_replies(self.pg0, p * 10)
166 self.vapi.ipip_6rd_del_tunnel(self.tunnel_index)
168 def test_6rd_ip4_to_ip6(self):
169 """ip4 -> ip6 (decap) 6rd test"""
171 rv = self.vapi.ipip_6rd_add_tunnel(
174 ip6_prefix="2002::/16",
175 ip4_prefix="0.0.0.0/0",
176 ip4_src=self.pg0.local_ip4,
179 self.tunnel_index = rv.sw_if_index
180 rv = self.vapi.ipip_6rd_del_tunnel(rv.sw_if_index)
181 rv = self.vapi.ipip_6rd_add_tunnel(
184 ip6_prefix="2002::/16",
185 ip4_prefix="0.0.0.0/0",
186 ip4_src=self.pg0.local_ip4,
189 self.tunnel_index = rv.sw_if_index
191 p_ip6 = IPv6(src="2002:AC10:0202::1", dst=self.pg1.remote_ip6) / UDP(
192 sport=1234, dport=1234
196 Ether(src=self.pg0.remote_mac, dst=self.pg0.local_mac)
197 / IP(src=self.pg1.remote_ip4, dst=self.pg0.local_ip4)
203 rx = self.send_and_expect(self.pg0, p * 10, self.pg1)
205 self.validate_4in6(p, p_reply)
206 self.vapi.ipip_6rd_del_tunnel(self.tunnel_index)
208 def test_6rd_ip4_to_ip6_vrf(self):
209 """ip4 -> ip6 (decap) 6rd VRF test"""
211 rv = self.vapi.ipip_6rd_add_tunnel(
214 ip6_prefix="2002::/16",
215 ip4_prefix="0.0.0.0/0",
216 ip4_src=self.pg2.local_ip4,
219 self.tunnel_index = rv.sw_if_index
220 rv = self.vapi.ipip_6rd_del_tunnel(rv.sw_if_index)
221 rv = self.vapi.ipip_6rd_add_tunnel(
224 ip6_prefix="2002::/16",
225 ip4_prefix="0.0.0.0/0",
226 ip4_src=self.pg2.local_ip4,
229 self.tunnel_index = rv.sw_if_index
230 self.vapi.sw_interface_set_table(self.tunnel_index, 1, 20)
232 p_ip6 = IPv6(src="2002:AC10:0402::1", dst=self.pg3.remote_ip6) / UDP(
233 sport=1234, dport=1234
237 Ether(src=self.pg2.remote_mac, dst=self.pg2.local_mac)
238 / IP(src=self.pg3.remote_ip4, dst=self.pg2.local_ip4)
244 rx = self.send_and_expect(self.pg2, p * 10, self.pg3)
246 self.validate_4in6(p, p_reply)
247 self.vapi.sw_interface_set_table(self.tunnel_index, 1, 0)
248 self.vapi.ipip_6rd_del_tunnel(self.tunnel_index)
250 def test_6rd_ip4_to_ip6_multiple(self):
251 """ip4 -> ip6 (decap) 6rd test"""
253 self.tunnel_index = []
254 rv = self.vapi.ipip_6rd_add_tunnel(
257 ip6_prefix="2002::/16",
258 ip4_prefix="0.0.0.0/0",
259 ip4_src=self.pg0.local_ip4,
262 self.tunnel_index.append(rv.sw_if_index)
263 rv = self.vapi.ipip_6rd_add_tunnel(
266 ip6_prefix="2003::/16",
267 ip4_prefix="0.0.0.0/0",
268 ip4_src=self.pg1.local_ip4,
272 self.tunnel_index.append(rv.sw_if_index)
274 self.vapi.cli("show ip6 fib")
275 p_ether = Ether(src=self.pg0.remote_mac, dst=self.pg0.local_mac)
276 p_ip4 = IP(src=self.pg1.remote_ip4, dst=self.pg0.local_ip4)
277 p_ip6_1 = IPv6(src="2002:AC10:0202::1", dst=self.pg1.remote_ip6) / UDP(
278 sport=1234, dport=1234
280 p_ip6_2 = IPv6(src="2003:AC10:0202::1", dst=self.pg1.remote_ip6) / UDP(
281 sport=1234, dport=1234
284 p = p_ether / p_ip4 / p_ip6_1
285 rx = self.send_and_expect(self.pg0, p * 10, self.pg1)
287 self.validate_4in6(p, p_ip6_1)
289 p = p_ether / p_ip4 / p_ip6_2
290 rx = self.send_and_expect(self.pg0, p * 10, self.pg1)
292 self.validate_4in6(p, p_ip6_2)
293 for i in self.tunnel_index:
294 self.vapi.ipip_6rd_del_tunnel(i)
296 def test_6rd_ip4_to_ip6_suffix(self):
297 """ip4 -> ip6 (decap) 6rd test"""
299 rv = self.vapi.ipip_6rd_add_tunnel(
302 ip6_prefix="2002::/16",
303 ip4_prefix="172.0.0.0/8",
304 ip4_src=self.pg0.local_ip4,
307 self.tunnel_index = rv.sw_if_index
309 self.vapi.cli("show ip6 fib")
310 p_ether = Ether(src=self.pg0.remote_mac, dst=self.pg0.local_mac)
311 p_ip4 = IP(src=self.pg1.remote_ip4, dst=self.pg0.local_ip4)
312 p_ip6 = IPv6(src="2002:1002:0200::1", dst=self.pg1.remote_ip6) / UDP(
313 sport=1234, dport=1234
316 p = p_ether / p_ip4 / p_ip6
317 rx = self.send_and_expect(self.pg0, p * 10, self.pg1)
319 self.validate_4in6(p, p_ip6)
320 self.vapi.ipip_6rd_del_tunnel(self.tunnel_index)
322 def test_6rd_ip4_to_ip6_sec_check(self):
323 """ip4 -> ip6 (decap) security check 6rd test"""
325 rv = self.vapi.ipip_6rd_add_tunnel(
328 ip6_prefix="2002::/16",
329 ip4_prefix="0.0.0.0/0",
330 ip4_src=self.pg0.local_ip4,
333 self.tunnel_index = rv.sw_if_index
335 self.vapi.cli("show ip6 fib")
336 p_ip6 = IPv6(src="2002:AC10:0202::1", dst=self.pg1.remote_ip6) / UDP(
337 sport=1234, dport=1234
339 p_ip6_fail = IPv6(src="2002:DEAD:0202::1", dst=self.pg1.remote_ip6) / UDP(
340 sport=1234, dport=1234
344 Ether(src=self.pg0.remote_mac, dst=self.pg0.local_mac)
345 / IP(src=self.pg1.remote_ip4, dst=self.pg0.local_ip4)
351 rx = self.send_and_expect(self.pg0, p * 10, self.pg1)
353 self.validate_4in6(p, p_reply)
356 Ether(src=self.pg0.remote_mac, dst=self.pg0.local_mac)
357 / IP(src=self.pg1.remote_ip4, dst=self.pg0.local_ip4)
360 rx = self.send_and_assert_no_replies(self.pg0, p * 10)
361 self.vapi.ipip_6rd_del_tunnel(self.tunnel_index)
363 def test_6rd_bgp_tunnel(self):
366 rv = self.vapi.ipip_6rd_add_tunnel(
369 ip6_prefix="2002::/16",
370 ip4_prefix="0.0.0.0/0",
371 ip4_src=self.pg0.local_ip4,
372 security_check=False,
375 self.tunnel_index = rv.sw_if_index
377 default_route = VppIpRoute(
378 self, "DEAD::", 16, [VppRoutePath("2002:0808:0808::", self.tunnel_index)]
380 default_route.add_vpp_config()
382 ip4_route = VppIpRoute(
383 self, "8.0.0.0", 8, [VppRoutePath(self.pg1.remote_ip4, 0xFFFFFFFF)]
385 ip4_route.add_vpp_config()
387 # Via recursive route 6 -> 4
389 Ether(src=self.pg0.remote_mac, dst=self.pg0.local_mac)
390 / IPv6(src="1::1", dst="DEAD:BEEF::1")
391 / UDP(sport=1234, dport=1234)
394 p_reply = IP(src=self.pg0.local_ip4, dst="8.8.8.8", proto="ipv6") / IPv6(
395 src="1::1", dst="DEAD:BEEF::1", nh="UDP"
398 rx = self.send_and_expect(self.pg0, p * 10, self.pg1)
400 self.validate_6in4(p, p_reply)
402 # Via recursive route 4 -> 6 (Security check must be disabled)
403 p_ip6 = IPv6(src="DEAD:BEEF::1", dst=self.pg1.remote_ip6) / UDP(
404 sport=1234, dport=1234
407 Ether(src=self.pg0.remote_mac, dst=self.pg0.local_mac)
408 / IP(src="8.8.8.8", dst=self.pg0.local_ip4)
414 rx = self.send_and_expect(self.pg0, p * 10, self.pg1)
416 self.validate_4in6(p, p_reply)
417 ip4_route.remove_vpp_config()
418 default_route.remove_vpp_config()
419 self.vapi.ipip_6rd_del_tunnel(self.tunnel_index)
422 if __name__ == "__main__":
423 unittest.main(testRunner=VppTestRunner)