tests: Check if community-list works as expected

AND/OR cases.

Signed-off-by: Donatas Abraitis <donatas@opensourcerouting.org>
This commit is contained in:
Donatas Abraitis 2022-12-04 21:52:05 +02:00
parent c7e804c900
commit 1b484abc7d
6 changed files with 180 additions and 0 deletions

View File

@ -0,0 +1,23 @@
!
router bgp 65001
no bgp ebgp-requires-policy
neighbor 192.168.0.2 remote-as external
neighbor 192.168.0.2 timers 1 3
neighbor 192.168.0.2 timers connect 1
address-family ipv4
redistribute connected
neighbor 192.168.0.2 route-map r2 out
exit-address-family
!
ip prefix-list p1 seq 5 permit 172.16.255.1/32
ip prefix-list p3 seq 5 permit 172.16.255.3/32
!
route-map r2 permit 10
match ip address prefix-list p1
set community 65001:1 65001:2
route-map r2 permit 20
match ip address prefix-list p3
set community 65001:3
route-map r2 permit 30
exit
!

View File

@ -0,0 +1,11 @@
!
interface lo
ip address 172.16.255.1/32
ip address 172.16.255.2/32
ip address 172.16.255.3/32
!
interface r1-eth0
ip address 192.168.0.1/24
!
ip forwarding
!

View File

@ -0,0 +1,21 @@
!
debug bgp updates
!
router bgp 65002
no bgp ebgp-requires-policy
neighbor 192.168.0.1 remote-as external
neighbor 192.168.0.1 timers 1 3
neighbor 192.168.0.1 timers connect 1
address-family ipv4
neighbor 192.168.0.1 route-map r1 in
neighbor 192.168.0.1 soft-reconfiguration inbound
exit-address-family
!
bgp community-list 1 seq 5 permit 65001:1 65001:2
bgp community-list 1 seq 10 permit 65001:3
!
route-map r1 deny 10
match community 1
route-map r1 permit 20
exit
!

View File

@ -0,0 +1,6 @@
!
interface r2-eth0
ip address 192.168.0.2/24
!
ip forwarding
!

View File

@ -0,0 +1,119 @@
#!/usr/bin/env python
#
# Copyright (c) 2022 by
# Donatas Abraitis <donatas@opensourcerouting.org>
#
# Permission to use, copy, modify, and/or distribute this software
# for any purpose with or without fee is hereby granted, provided
# that the above copyright notice and this permission notice appear
# in all copies.
#
# THE SOFTWARE IS PROVIDED "AS IS" AND NETDEF DISCLAIMS ALL WARRANTIES
# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL NETDEF BE LIABLE FOR
# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY
# DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
# WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS
# ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE
# OF THIS SOFTWARE.
#
"""
Check if BGP community-list works as OR if multiple community entries specified,
like:
bgp community-list 1 seq 5 permit 65001:1 65002:2
bgp community-list 1 seq 10 permit 65001:3
!
route-map test deny 10
match community 1
route-map test permit 20
Here, we should deny routes in/out if the path has:
(65001:1 AND 65001:2) OR 65001:3.
"""
import os
import sys
import json
import pytest
import functools
CWD = os.path.dirname(os.path.realpath(__file__))
sys.path.append(os.path.join(CWD, "../"))
# pylint: disable=C0413
from lib import topotest
from lib.topogen import Topogen, TopoRouter, get_topogen
from lib.common_config import step
pytestmark = [pytest.mark.bgpd]
def build_topo(tgen):
for routern in range(1, 3):
tgen.add_router("r{}".format(routern))
switch = tgen.add_switch("s1")
switch.add_link(tgen.gears["r1"])
switch.add_link(tgen.gears["r2"])
def setup_module(mod):
tgen = Topogen(build_topo, mod.__name__)
tgen.start_topology()
router_list = tgen.routers()
for i, (rname, router) in enumerate(router_list.items(), 1):
router.load_config(
TopoRouter.RD_ZEBRA, os.path.join(CWD, "{}/zebra.conf".format(rname))
)
router.load_config(
TopoRouter.RD_BGP, os.path.join(CWD, "{}/bgpd.conf".format(rname))
)
tgen.start_router()
def teardown_module(mod):
tgen = get_topogen()
tgen.stop_topology()
def test_bgp_comm_list_match():
tgen = get_topogen()
if tgen.routers_have_failure():
pytest.skip(tgen.errors)
router = tgen.gears["r2"]
def _bgp_converge():
output = json.loads(
router.vtysh_cmd(
"show bgp ipv4 unicast neighbors 192.168.0.1 filtered-routes json"
)
)
expected = {
"receivedRoutes": {
"172.16.255.1/32": {
"path": "65001",
},
"172.16.255.3/32": {
"path": "65001",
},
}
}
return topotest.json_cmp(output, expected)
step("Initial BGP converge")
test_func = functools.partial(_bgp_converge)
_, result = topotest.run_and_expect(test_func, None, count=60, wait=0.5)
assert result is None, "Failed to filter BGP UPDATES with community-list on R2"
if __name__ == "__main__":
args = ["-s"] + sys.argv[1:]
sys.exit(pytest.main(args))