1 from vpp_object import VppObject
2 from ipaddress import ip_address
3 from vpp_papi import VppEnum
11 class VppIpsecSpd(VppObject):
16 def __init__(self, test, id):
20 def add_vpp_config(self):
21 self.test.vapi.ipsec_spd_add_del(self.id)
22 self.test.registry.register(self, self.test.logger)
24 def remove_vpp_config(self):
25 self.test.vapi.ipsec_spd_add_del(self.id, is_add=0)
28 return "ipsec-spd-%d" % self.id
30 def query_vpp_config(self):
31 spds = self.test.vapi.ipsec_spds_dump()
33 if spd.spd_id == self.id:
38 class VppIpsecSpdItfBinding(VppObject):
40 VPP SPD DB to interface binding
41 (i.e. this SPD is used on this interface)
44 def __init__(self, test, spd, itf):
49 def add_vpp_config(self):
50 self.test.vapi.ipsec_interface_add_del_spd(self.spd.id,
52 self.test.registry.register(self, self.test.logger)
54 def remove_vpp_config(self):
55 self.test.vapi.ipsec_interface_add_del_spd(self.spd.id,
60 return "bind-%s-to-%s" % (self.spd.id, self.itf)
62 def query_vpp_config(self):
63 bs = self.test.vapi.ipsec_spd_interface_dump()
65 if b.sw_if_index == self.itf.sw_if_index:
70 class VppIpsecSpdEntry(VppObject):
75 def __init__(self, test, spd, sa_id,
76 local_start, local_stop,
77 remote_start, remote_stop,
83 remote_port_stop=65535,
85 local_port_stop=65535):
89 self.local_start = ip_address(text_type(local_start))
90 self.local_stop = ip_address(text_type(local_stop))
91 self.remote_start = ip_address(text_type(remote_start))
92 self.remote_stop = ip_address(text_type(remote_stop))
94 self.is_outbound = is_outbound
95 self.priority = priority
97 self.policy = (VppEnum.vl_api_ipsec_spd_action_t.
98 IPSEC_API_SPD_ACTION_BYPASS)
101 self.is_ipv6 = (0 if self.local_start.version == 4 else 1)
102 self.local_port_start = local_port_start
103 self.local_port_stop = local_port_stop
104 self.remote_port_start = remote_port_start
105 self.remote_port_stop = remote_port_stop
107 def add_vpp_config(self):
108 rv = self.test.vapi.ipsec_spd_entry_add_del(
116 is_ipv6=self.is_ipv6,
117 is_outbound=self.is_outbound,
118 priority=self.priority,
120 local_port_start=self.local_port_start,
121 local_port_stop=self.local_port_stop,
122 remote_port_start=self.remote_port_start,
123 remote_port_stop=self.remote_port_stop)
124 self.stat_index = rv.stat_index
125 self.test.registry.register(self, self.test.logger)
127 def remove_vpp_config(self):
128 self.test.vapi.ipsec_spd_entry_add_del(
136 is_ipv6=self.is_ipv6,
137 is_outbound=self.is_outbound,
138 priority=self.priority,
140 local_port_start=self.local_port_start,
141 local_port_stop=self.local_port_stop,
142 remote_port_start=self.remote_port_start,
143 remote_port_stop=self.remote_port_stop,
147 return "spd-entry-%d-%d-%d-%d-%d-%d" % (self.spd.id,
152 self.remote_port_start)
154 def query_vpp_config(self):
155 ss = self.test.vapi.ipsec_spd_dump(self.spd.id)
157 if s.entry.sa_id == self.sa_id and \
158 s.entry.is_outbound == self.is_outbound and \
159 s.entry.priority == self.priority and \
160 s.entry.policy == self.policy and \
161 s.entry.remote_address_start == self.remote_start and \
162 s.entry.remote_port_start == self.remote_port_start:
167 c = self.test.statistics.get_counter("/net/ipsec/policy")
168 return c[0][self.stat_index]
171 class VppIpsecSA(VppObject):
176 def __init__(self, test, id, spi,
177 integ_alg, integ_key,
178 crypto_alg, crypto_key,
180 tun_src=None, tun_dst=None,
182 e = VppEnum.vl_api_ipsec_sad_flags_t
186 self.integ_alg = integ_alg
187 self.integ_key = integ_key
188 self.crypto_alg = crypto_alg
189 self.crypto_key = crypto_key
192 self.tun_src = tun_src
193 self.tun_dst = tun_dst
195 self.flags = e.IPSEC_API_SAD_FLAG_NONE
199 self.tun_src = ip_address(text_type(tun_src))
200 self.flags = self.flags | e.IPSEC_API_SAD_FLAG_IS_TUNNEL
201 if (self.tun_src.version == 6):
202 self.flags = self.flags | e.IPSEC_API_SAD_FLAG_IS_TUNNEL_V6
204 self.tun_dst = ip_address(text_type(tun_dst))
206 def add_vpp_config(self):
207 r = self.test.vapi.ipsec_sad_entry_add_del(
215 (self.tun_src if self.tun_src else []),
216 (self.tun_dst if self.tun_dst else []),
218 self.stat_index = r.stat_index
219 self.test.registry.register(self, self.test.logger)
221 def remove_vpp_config(self):
222 self.test.vapi.ipsec_sad_entry_add_del(
230 (self.tun_src if self.tun_src else []),
231 (self.tun_dst if self.tun_dst else []),
236 return "ipsec-sa-%d" % self.id
238 def query_vpp_config(self):
239 bs = self.test.vapi.ipsec_sa_dump()
241 if b.entry.sad_id == self.id:
246 c = self.test.statistics.get_counter("/net/ipsec/sa")
247 return c[0][self.stat_index]