blob: 65d6fa458e01dd3cf9ec3d6801b59d005c6dd938 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
|
- name: empty
start:
- ":"
stop:
- ":"
- name: simple_stats
start:
- rm -f /var/lock/conntrack.lock
- |
cat << EOF > /tmp/conntrackd_test_simple_stats
General {
HashSize 8192
LockFile /var/lock/conntrack.lock
UNIX { Path /var/run/conntrackd.ctl }
}
Stats {
LogFile on
}
EOF
- $CONNTRACKD -C /tmp/conntrackd_test_simple_stats -d
stop:
- $CONNTRACKD -C /tmp/conntrackd_test_simple_stats -k
- rm -f /var/lock/conntrack.lock
- rm -f /tmp/conntrackd_test_simple_stats
- name: basic_2_peer_network_tcp_notrack
start:
- scenarios/basic/./network-setup.sh start
- |
cat << EOF > /tmp/ruleset.nft
table ip filter {
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
oif veth0 masquerade
}
}
EOF
- ip netns exec nsr1 nft -f /tmp/ruleset.nft
- |
cat << EOF > /tmp/nsr1.conf
Sync {
Mode NOTRACK {
DisableExternalCache on
DisableInternalCache on
}
TCP {
IPv4_address 192.168.100.2
IPv4_Destination_Address 192.168.100.3
Interface veth2
Port 3780
}
}
General {
LogFile on
LockFile /var/lock/conntrack-nsr1.lock
UNIX { Path /var/run/conntrackd-nsr1.ctl }
}
EOF
- |
cat << EOF > /tmp/nsr2.conf
Sync {
Mode NOTRACK {
DisableExternalCache on
DisableInternalCache on
}
TCP {
IPv4_address 192.168.100.3
IPv4_Destination_Address 192.168.100.2
Interface veth0
Port 3780
}
}
General {
LogFile on
LockFile /var/lock/conntrack-nsr2.lock
UNIX { Path /var/run/conntrackd-nsr2.ctl }
}
EOF
# finally run the daemons
- ip netns exec nsr1 $CONNTRACKD -C /tmp/nsr1.conf -d
- ip netns exec nsr2 $CONNTRACKD -C /tmp/nsr2.conf -d
# make sure they are alive and connected before considering the scenario started
- timeout 5 bash -c -- '
while ! ip netns exec nsr1 $CONNTRACKD -C /tmp/nsr1.conf -s | grep -q "server=connected"
; do sleep 0.5 ; done'
- timeout 5 bash -c -- '
while ! ip netns exec nsr1 $CONNTRACKD -C /tmp/nsr1.conf -s | grep -q "client=connected"
; do sleep 0.5 ; done'
- timeout 5 bash -c -- '
while ! ip netns exec nsr2 $CONNTRACKD -C /tmp/nsr2.conf -s | grep -q "server=connected"
; do sleep 0.5 ; done'
- timeout 5 bash -c -- '
while ! ip netns exec nsr2 $CONNTRACKD -C /tmp/nsr2.conf -s | grep -q "client=connected"
; do sleep 0.5 ; done'
stop:
- $CONNTRACKD -C /tmp/nsr1.conf -k 2>/dev/null
- $CONNTRACKD -C /tmp/nsr2.conf -k 2>/dev/null
- rm -f /tmp/ruleset.nft /tmp/nsr2.conf /tmp/nsr1.conf
- rm -f /var/lock/conntrack-nsr1.lock /var/lock/conntrack-nsr2.lock
- scenarios/basic/./network-setup.sh stop
|
