#!/usr/bin/env python # # Copyright (c) 2022 by # Donatas Abraitis # # Permission to use, copy, modify, and/or distribute this software # for any purpose with or without fee is hereby granted, provided # that the above copyright notice and this permission notice appear # in all copies. # # THE SOFTWARE IS PROVIDED "AS IS" AND NETDEF DISCLAIMS ALL WARRANTIES # WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF # MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL NETDEF BE LIABLE FOR # ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY # DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, # WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS # ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE # OF THIS SOFTWARE. # """ Test if BGP SoO per neighbor works correctly. Routes having SoO extended community MUST be rejected if the neighbor is configured with soo (neighbor soo). """ import os import sys import json import pytest import functools CWD = os.path.dirname(os.path.realpath(__file__)) sys.path.append(os.path.join(CWD, "../")) # pylint: disable=C0413 from lib import topotest from lib.topogen import Topogen, TopoRouter, get_topogen from lib.common_config import step pytestmark = [pytest.mark.bgpd] def build_topo(tgen): tgen.add_router("cpe1") tgen.add_router("cpe2") tgen.add_router("pe1") tgen.add_router("pe2") switch = tgen.add_switch("s1") switch.add_link(tgen.gears["cpe1"]) switch.add_link(tgen.gears["pe1"]) switch = tgen.add_switch("s2") switch.add_link(tgen.gears["pe1"]) switch.add_link(tgen.gears["pe2"]) switch = tgen.add_switch("s3") switch.add_link(tgen.gears["pe2"]) switch.add_link(tgen.gears["cpe2"]) switch = tgen.add_switch("s4") switch.add_link(tgen.gears["cpe2"]) switch.add_link(tgen.gears["cpe1"]) def setup_module(mod): tgen = Topogen(build_topo, mod.__name__) tgen.start_topology() pe1 = tgen.gears["pe1"] pe2 = tgen.gears["pe2"] pe1.run("ip link add RED type vrf table 1001") pe1.run("ip link set up dev RED") pe2.run("ip link add RED type vrf table 1001") pe2.run("ip link set up dev RED") pe1.run("ip link set pe1-eth0 master RED") pe2.run("ip link set pe2-eth1 master RED") pe1.run("sysctl -w net.ipv4.ip_forward=1") pe2.run("sysctl -w net.ipv4.ip_forward=1") pe1.run("sysctl -w net.mpls.conf.pe1-eth0.input=1") pe2.run("sysctl -w net.mpls.conf.pe2-eth1.input=1") router_list = tgen.routers() for i, (rname, router) in enumerate(router_list.items(), 1): router.load_config( TopoRouter.RD_ZEBRA, os.path.join(CWD, "{}/zebra.conf".format(rname)) ) router.load_config( TopoRouter.RD_BGP, os.path.join(CWD, "{}/bgpd.conf".format(rname)) ) router.load_config( TopoRouter.RD_OSPF, os.path.join(CWD, "{}/ospfd.conf".format(rname)) ) router.load_config( TopoRouter.RD_LDP, os.path.join(CWD, "{}/ldpd.conf".format(rname)) ) tgen.start_router() def teardown_module(mod): tgen = get_topogen() tgen.stop_topology() def test_bgp_soo(): tgen = get_topogen() pe2 = tgen.gears["pe2"] if tgen.routers_have_failure(): pytest.skip(tgen.errors) def _bgp_soo_unconfigured(): output = json.loads( pe2.vtysh_cmd( "show bgp vrf RED ipv4 unicast neighbors 192.168.2.1 advertised-routes json" ) ) expected = {"advertisedRoutes": {"172.16.255.1/32": {"path": "65001"}}} return topotest.json_cmp(output, expected) test_func = functools.partial(_bgp_soo_unconfigured) _, result = topotest.run_and_expect(test_func, None, count=30, wait=0.5) assert result is None, "Failed to see BGP convergence in pe2" step("Configure SoO (65000:1) for PE2 -- CPE2 session") pe2.vtysh_cmd( """ configure terminal router bgp 65001 vrf RED address-family ipv4 unicast neighbor 192.168.2.1 soo 65000:1 """ ) def _bgp_soo_configured(): output = json.loads( pe2.vtysh_cmd( "show bgp vrf RED ipv4 unicast neighbors 192.168.2.1 advertised-routes json" ) ) expected = {"advertisedRoutes": {"172.16.255.1/32": None}} return topotest.json_cmp(output, expected) test_func = functools.partial(_bgp_soo_configured) _, result = topotest.run_and_expect(test_func, None, count=30, wait=0.5) assert result is None, "SoO filtering does not work from pe2" step("Configure SoO (65000:2) for PE2 -- CPE2 session") pe2.vtysh_cmd( """ configure terminal router bgp 65001 vrf RED address-family ipv4 unicast neighbor 192.168.2.1 soo 65000:2 """ ) test_func = functools.partial(_bgp_soo_unconfigured) _, result = topotest.run_and_expect(test_func, None, count=30, wait=0.5) assert result is None, "SoO filtering does not work from pe2" step("Unconfigure SoO for PE2 -- CPE2 session") pe2.vtysh_cmd( """ configure terminal router bgp 65001 vrf RED address-family ipv4 unicast no neighbor 192.168.2.1 soo """ ) test_func = functools.partial(_bgp_soo_unconfigured) _, result = topotest.run_and_expect(test_func, None, count=30, wait=0.5) assert result is None, "SoO filtering does not work from pe2" if __name__ == "__main__": args = ["-s"] + sys.argv[1:] sys.exit(pytest.main(args))