test/vpp_ipsec_tun_interface.py

   1 from vpp_tunnel_interface import VppTunnelInterface
   2
   3
   4 class VppIpsecTunInterface(VppTunnelInterface):
   5     """
   6     VPP IPsec Tunnel interface
   7     """
   8
   9     def __init__(self, test, parent_if, local_spi,
  10                  remote_spi, crypto_alg, local_crypto_key, remote_crypto_key,
  11                  integ_alg, local_integ_key, remote_integ_key, salt=0,
  12                  udp_encap=False,
  13                  is_ip6=False):
  14         super(VppIpsecTunInterface, self).__init__(test, parent_if)
  15         self.local_spi = local_spi
  16         self.remote_spi = remote_spi
  17         self.crypto_alg = crypto_alg
  18         self.local_crypto_key = local_crypto_key
  19         self.remote_crypto_key = remote_crypto_key
  20         self.integ_alg = integ_alg
  21         self.local_integ_key = local_integ_key
  22         self.remote_integ_key = remote_integ_key
  23         self.salt = salt
  24         if is_ip6:
  25             self.local_ip = self.parent_if.local_ip6
  26             self.remote_ip = self.parent_if.remote_ip6
  27         else:
  28             self.local_ip = self.parent_if.local_ip4
  29             self.remote_ip = self.parent_if.remote_ip4
  30         self.udp_encap = False
  31
  32     def add_vpp_config(self):
  33         r = self.test.vapi.ipsec_tunnel_if_add_del(
  34             self.local_ip, self.remote_ip,
  35             self.remote_spi, self.local_spi,
  36             self.crypto_alg, self.local_crypto_key, self.remote_crypto_key,
  37             self.integ_alg, self.local_integ_key, self.remote_integ_key,
  38             salt=self.salt,
  39             udp_encap=self.udp_encap)
  40         self.set_sw_if_index(r.sw_if_index)
  41         self.generate_remote_hosts()
  42         self.test.registry.register(self, self.test.logger)
  43
  44     def remove_vpp_config(self):
  45         self.test.vapi.ipsec_tunnel_if_add_del(
  46             self.local_ip, self.remote_ip,
  47             self.remote_spi, self.local_spi,
  48             self.crypto_alg, self.local_crypto_key, self.remote_crypto_key,
  49             self.integ_alg, self.local_integ_key, self.remote_integ_key,
  50             is_add=0)
  51
  52     def object_id(self):
  53         return "ipsec-tun-if-%d" % self._sw_if_index
  54
  55
  56 class VppIpsecGRETunInterface(VppTunnelInterface):
  57     """
  58     VPP IPsec GRE Tunnel interface
  59      this creates headers
  60        IP / ESP / IP / GRE / payload
  61      i.e. it's GRE over IPSEC, rather than IPSEC over GRE.
  62     """
  63
  64     def __init__(self, test, parent_if, sa_out, sa_in):
  65         super(VppIpsecGRETunInterface, self).__init__(test, parent_if)
  66         self.sa_in = sa_in
  67         self.sa_out = sa_out
  68
  69     def add_vpp_config(self):
  70         r = self.test.vapi.ipsec_gre_tunnel_add_del(
  71             self.parent_if.local_ip4n,
  72             self.parent_if.remote_ip4n,
  73             self.sa_out,
  74             self.sa_in)
  75         self.set_sw_if_index(r.sw_if_index)
  76         self.generate_remote_hosts()
  77         self.test.registry.register(self, self.test.logger)
  78
  79     def remove_vpp_config(self):
  80         self.test.vapi.ipsec_gre_tunnel_add_del(
  81             self.parent_if.local_ip4n,
  82             self.parent_if.remote_ip4n,
  83             self.sa_out,
  84             self.sa_in,
  85             is_add=0)
  86
  87     def query_vpp_config(self):
  88         ts = self.test.vapi.ipsec_gre_tunnel_dump(sw_if_index=0xffffffff)
  89         for t in ts:
  90             if t.tunnel.sw_if_index == self._sw_if_index:
  91                 return True
  92         return False
  93
  94     def __str__(self):
  95         return self.object_id()
  96
  97     def object_id(self):
  98         return "ipsec-gre-tun-if-%d" % self._sw_if_index