hs-test: add tls proxy test

[vpp.git] / extras / hs-test / proxy_test.go

diff --git a/extras/hs-test/proxy_test.go b/extras/hs-test/proxy_test.go
old mode 100755 (executable)
new mode 100644 (file)
index d426b61..7b7321e
--- a/extras/hs-test/proxy_test.go
+++ b/extras/hs-test/proxy_test.go
@@ -1,50 +1,26 @@
 package main
 
 import (
-       "context"
        "fmt"
        "os"
-       "testing"
 
        "github.com/edwarnicke/exechelper"
 )
 
-func testProxyHttpTcp(t *testing.T, dockerInstance, action string, proxySetup func() error) error {
+func testProxyHttpTcp(s *NsSuite, proto string) error {
        const outputFile = "test.data"
        const srcFile = "10M"
        stopServer := make(chan struct{}, 1)
        serverRunning := make(chan struct{}, 1)
 
-       volumeArgs := fmt.Sprintf("-v shared-vol:/tmp/%s", dockerInstance)
-       err := dockerRun(dockerInstance, volumeArgs)
-       if err != nil {
-               return fmt.Errorf("failed to start container: %v", err)
-       }
-       defer func() { exechelper.Run("docker stop " + dockerInstance) }()
-
-       // start & configure vpp in the container
-       _, err = hstExec(action, dockerInstance)
-       if err != nil {
-               return fmt.Errorf("error starting vpp in container: %v", err)
-       }
-
-       fmt.Println("VPP running and configured...")
-
-       if err := proxySetup(); err != nil {
-               return fmt.Errorf("failed to setup proxy: %v", err)
-       }
-       fmt.Println("Proxy configured...")
-
        // create test file
-       err = exechelper.Run(fmt.Sprintf("ip netns exec server truncate -s %s %s", srcFile, srcFile))
-       if err != nil {
-               return fmt.Errorf("failed to run truncate command")
-       }
+       err := exechelper.Run(fmt.Sprintf("ip netns exec server truncate -s %s %s", srcFile, srcFile))
+       s.assertNil(err, "failed to run truncate command")
        defer func() { os.Remove(srcFile) }()
 
-       fmt.Println("Test file created...")
+       s.log("test file created...")
 
-       go startHttpServer(serverRunning, stopServer, ":666", "server")
+       go s.startHttpServer(serverRunning, stopServer, ":666", "server")
        // TODO better error handling and recovery
        <-serverRunning
 
@@ -52,47 +28,74 @@ func testProxyHttpTcp(t *testing.T, dockerInstance, action string, proxySetup fu
                stopServer <- struct{}{}
        }(stopServer)
 
-       fmt.Println("http server started...")
+       s.log("http server started...")
 
-       c := fmt.Sprintf("ip netns exec client wget --retry-connrefused --retry-on-http-error=503 --tries=10 -O %s 10.0.0.2:555/%s", outputFile, srcFile)
-       _, err = exechelper.CombinedOutput(c)
-       if err != nil {
-               return fmt.Errorf("failed to run wget: %v", err)
+       clientVeth := s.netInterfaces[clientInterface]
+       c := fmt.Sprintf("ip netns exec client wget --no-proxy --retry-connrefused"+
+               " --retry-on-http-error=503 --tries=10 -O %s ", outputFile)
+       if proto == "tls" {
+               c += " --secure-protocol=TLSv1_3 --no-check-certificate https://"
        }
+       c += fmt.Sprintf("%s:555/%s", clientVeth.ip4AddressString(), srcFile)
+       s.log(c)
+       _, err = exechelper.CombinedOutput(c)
+       s.assertNil(err, "failed to run wget")
        stopServer <- struct{}{}
 
        defer func() { os.Remove(outputFile) }()
 
-       if err = assertFileSize(outputFile, srcFile); err != nil {
-               return err
-       }
+       s.assertNil(assertFileSize(outputFile, srcFile))
        return nil
 }
 
+func configureVppProxy(s *NsSuite, proto string) {
+       serverVeth := s.netInterfaces[serverInterface]
+       clientVeth := s.netInterfaces[clientInterface]
+
+       testVppProxy := s.getContainerByName("vpp").vppInstance
+       output := testVppProxy.vppctl(
+               "test proxy server server-uri %s://%s/555 client-uri tcp://%s/666",
+               proto,
+               clientVeth.ip4AddressString(),
+               serverVeth.peer.ip4AddressString(),
+       )
+       s.log("proxy configured...", output)
+}
+
 func (s *NsSuite) TestVppProxyHttpTcp() {
-       t := s.T()
-       dockerInstance := "vpp-proxy"
-       err := testProxyHttpTcp(t, dockerInstance, "ConfigureVppProxy", configureVppProxy)
-       if err != nil {
-               t.Errorf("%v", err)
+       proto := "tcp"
+       configureVppProxy(s, proto)
+       err := testProxyHttpTcp(s, proto)
+       s.assertNil(err)
+}
+
+func (s *NsSuite) TestVppProxyHttpTls() {
+       proto := "tls"
+       configureVppProxy(s, proto)
+       err := testProxyHttpTcp(s, proto)
+       s.assertNil(err)
+}
+
+func configureEnvoyProxy(s *NsSuite) {
+       envoyContainer := s.getContainerByName("envoy")
+       envoyContainer.create()
+
+       serverVeth := s.netInterfaces[serverInterface]
+       address := struct {
+               Server string
+       }{
+               Server: serverVeth.peer.ip4AddressString(),
        }
+       envoyContainer.createConfig(
+               "/etc/envoy/envoy.yaml",
+               "resources/envoy/proxy.yaml",
+               address,
+       )
+       s.assertNil(envoyContainer.start())
 }
 
 func (s *NsSuite) TestEnvoyProxyHttpTcp() {
-       t := s.T()
-       exechelper.Run("docker volume create --name=shared-vol")
-       defer func() {
-               exechelper.Run("docker stop envoy")
-       }()
-
-       ctx, cancel := context.WithCancel(context.Background())
-
-       dockerInstance := "vpp-envoy"
-       err := testProxyHttpTcp(t, dockerInstance, "ConfigureEnvoyProxy", func() error {
-               return setupEnvoy(t, ctx, dockerInstance)
-       })
-       if err != nil {
-               t.Errorf("%v", err)
-       }
-       cancel()
+       configureEnvoyProxy(s)
+       err := testProxyHttpTcp(s, "tcp")
+       s.assertNil(err)
 }