ptf/saiisolationgroup.py

# Copyright 2021-present Intel Corporation.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#    http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
'''
Thrift SAI interface Port Isolation tests
'''

from sai_thrift.sai_headers import *

from sai_base_test import *


@group("draft")
class PortIsolationTest(SaiHelper):
    '''
    Port isolation test class
    '''

    def setUp(self):
        super(PortIsolationTest, self).setUp()
        self.mac11 = '00:11:11:11:11:11:11'
        self.mac22 = '00:22:22:22:22:22:22'
        self.mac33 = '00:33:33:33:33:33:33'

        # Create ingress RIFs, use port10_rif and port24_rif as ingress
        self.port24_rif = sai_thrift_create_router_interface(
            self.client,
            type=SAI_ROUTER_INTERFACE_TYPE_PORT,
            virtual_router_id=self.default_vrf,
            port_id=self.port24)

        # Create nhop for port11_rif
        self.nhop1 = sai_thrift_create_next_hop(
            self.client,
            ip=sai_ipaddress('10.10.0.2'),
            router_interface_id=self.port11_rif,
            type=SAI_NEXT_HOP_TYPE_IP)
        self.neighbor_entry1 = sai_thrift_neighbor_entry_t(
            rif_id=self.port11_rif, ip_address=sai_ipaddress('10.10.0.2'))
        sai_thrift_create_neighbor_entry(self.client,
                                         self.neighbor_entry1,
                                         dst_mac_address=self.mac11)

        self.nhop2 = sai_thrift_create_next_hop(
            self.client,
            ip=sai_ipaddress('20.20.0.2'),
            router_interface_id=self.port12_rif,
            type=SAI_NEXT_HOP_TYPE_IP)
        self.neighbor_entry2 = sai_thrift_neighbor_entry_t(
            rif_id=self.port12_rif, ip_address=sai_ipaddress('20.20.0.2'))
        sai_thrift_create_neighbor_entry(self.client,
                                         self.neighbor_entry2,
                                         dst_mac_address=self.mac22)

        self.nhop3 = sai_thrift_create_next_hop(
            self.client,
            ip=sai_ipaddress('30.30.0.3'),
            router_interface_id=self.port13_rif,
            type=SAI_NEXT_HOP_TYPE_IP)
        self.neighbor_entry3 = sai_thrift_neighbor_entry_t(
            rif_id=self.port13_rif, ip_address=sai_ipaddress('30.30.0.3'))
        sai_thrift_create_neighbor_entry(self.client,
                                         self.neighbor_entry3,
                                         dst_mac_address=self.mac33)

        self.route_entry1 = sai_thrift_route_entry_t(
            vr_id=self.default_vrf, destination=sai_ipprefix('10.10.10.1/32'))
        sai_thrift_create_route_entry(self.client,
                                      self.route_entry1,
                                      next_hop_id=self.nhop1)

        self.route_entry2 = sai_thrift_route_entry_t(
            vr_id=self.default_vrf, destination=sai_ipprefix('20.20.20.1/32'))
        sai_thrift_create_route_entry(self.client,
                                      self.route_entry2,
                                      next_hop_id=self.nhop2)

        self.route_entry3 = sai_thrift_route_entry_t(
            vr_id=self.default_vrf, destination=sai_ipprefix('30.30.30.1/32'))
        sai_thrift_create_route_entry(self.client,
                                      self.route_entry3,
                                      next_hop_id=self.nhop3)

        self.isolation_group1 = sai_thrift_create_isolation_group(
            self.client, type=SAI_ISOLATION_GROUP_TYPE_PORT)
        self.isolation_group_mbr1 = sai_thrift_create_isolation_group_member(
            self.client,
            isolation_group_id=self.isolation_group1,
            isolation_object=self.port11)
        self.isolation_group_mbr2 = sai_thrift_create_isolation_group_member(
            self.client,
            isolation_group_id=self.isolation_group1,
            isolation_object=self.port12)

        self.isolation_group2 = sai_thrift_create_isolation_group(
            self.client, type=SAI_ISOLATION_GROUP_TYPE_PORT)
        self.isolation_group_mbr3 = sai_thrift_create_isolation_group_member(
            self.client,
            isolation_group_id=self.isolation_group2,
            isolation_object=self.port12)
        self.isolation_group_mbr4 = sai_thrift_create_isolation_group_member(
            self.client,
            isolation_group_id=self.isolation_group2,
            isolation_object=self.port13)

    def runTest(self):
        self.attributeTest()
        self.forwardingTest()

    def tearDown(self):
        sai_thrift_remove_isolation_group_member(self.client,
                                                 self.isolation_group_mbr4)
        sai_thrift_remove_isolation_group_member(self.client,
                                                 self.isolation_group_mbr3)
        sai_thrift_remove_isolation_group(self.client, self.isolation_group2)
        sai_thrift_remove_isolation_group_member(self.client,
                                                 self.isolation_group_mbr2)
        sai_thrift_remove_isolation_group_member(self.client,
                                                 self.isolation_group_mbr1)
        sai_thrift_remove_isolation_group(self.client, self.isolation_group1)

        sai_thrift_remove_route_entry(self.client, self.route_entry3)
        sai_thrift_remove_route_entry(self.client, self.route_entry2)
        sai_thrift_remove_route_entry(self.client, self.route_entry1)

        sai_thrift_remove_next_hop(self.client, self.nhop3)
        sai_thrift_remove_neighbor_entry(self.client, self.neighbor_entry3)
        sai_thrift_remove_next_hop(self.client, self.nhop2)
        sai_thrift_remove_neighbor_entry(self.client, self.neighbor_entry2)
        sai_thrift_remove_next_hop(self.client, self.nhop1)
        sai_thrift_remove_neighbor_entry(self.client, self.neighbor_entry1)

        sai_thrift_remove_router_interface(self.client, self.port24_rif)
        super(PortIsolationTest, self).tearDown()

    def attributeTest(self):
        '''
        Verify isolation group CRUD operations
        '''
        print("attributeTest")
        attrs = sai_thrift_get_isolation_group_attribute(self.client,
                                                         self.isolation_group1,
                                                         type=True)
        self.assertEqual(attrs["type"], SAI_ISOLATION_GROUP_TYPE_PORT)

        attrs = sai_thrift_get_isolation_group_member_attribute(
            self.client,
            self.isolation_group_mbr1,
            isolation_group_id=True,
            isolation_object=True)
        self.assertEqual(attrs["isolation_group_id"], self.isolation_group1)
        self.assertEqual(attrs["isolation_object"], self.port11)

    def forwardingTest(self):
        '''
        Test forwarding between ports with isolation groups attached
        Ingress ports: port10 and port24
        Isolation groups:
          grp1: port 11 and port12
          grp2: port 12 and port13
        '''
        print("forwardingTest")
        try:
            pkt1 = simple_tcp_packet(eth_dst=ROUTER_MAC,
                                     ip_dst='10.10.10.1',
                                     ip_ttl=64)
            exp_pkt1 = simple_tcp_packet(eth_dst=self.mac11,
                                         eth_src=ROUTER_MAC,
                                         ip_dst='10.10.10.1',
                                         ip_ttl=63)
            pkt2 = simple_tcp_packet(eth_dst=ROUTER_MAC,
                                     ip_dst='20.20.20.1',
                                     ip_ttl=64)
            exp_pkt2 = simple_tcp_packet(eth_dst=self.mac22,
                                         eth_src=ROUTER_MAC,
                                         ip_dst='20.20.20.1',
                                         ip_ttl=63)
            pkt3 = simple_tcp_packet(eth_dst=ROUTER_MAC,
                                     ip_dst='30.30.30.1',
                                     ip_ttl=64)
            exp_pkt3 = simple_tcp_packet(eth_dst=self.mac33,
                                         eth_src=ROUTER_MAC,
                                         ip_dst='30.30.30.1',
                                         ip_ttl=63)

            print("Sending packet from port %d" % self.dev_port10)
            send_packet(self, self.dev_port10, pkt1)
            verify_packet(self, exp_pkt1, self.dev_port11)
            send_packet(self, self.dev_port10, pkt2)
            verify_packet(self, exp_pkt2, self.dev_port12)
            send_packet(self, self.dev_port10, pkt3)
            verify_packet(self, exp_pkt3, self.dev_port13)

            print("Sending packet from port %d" % self.dev_port24)
            send_packet(self, self.dev_port24, pkt1)
            verify_packet(self, exp_pkt1, self.dev_port11)
            send_packet(self, self.dev_port24, pkt2)
            verify_packet(self, exp_pkt2, self.dev_port12)
            send_packet(self, self.dev_port24, pkt3)
            verify_packet(self, exp_pkt3, self.dev_port13)

            # Attach isolation groups
            print("Attach isolation groups to ingress ports")
            sai_thrift_set_port_attribute(
                self.client,
                self.port10,
                isolation_group=self.isolation_group1)
            sai_thrift_set_port_attribute(
                self.client,
                self.port24,
                isolation_group=self.isolation_group2)
            print("Sending packet from port %d" % self.dev_port10)
            send_packet(self, self.dev_port10, pkt1)
            verify_no_other_packets(self, timeout=1)
            send_packet(self, self.dev_port10, pkt2)
            verify_no_other_packets(self, timeout=1)
            send_packet(self, self.dev_port10, pkt3)
            verify_packet(self, exp_pkt3, self.dev_port13)

            print("Sending packet from port %d" % self.dev_port24)
            send_packet(self, self.dev_port24, pkt1)
            verify_packet(self, exp_pkt1, self.dev_port11)
            send_packet(self, self.dev_port24, pkt2)
            verify_no_other_packets(self, timeout=1)
            send_packet(self, self.dev_port24, pkt3)
            verify_no_other_packets(self, timeout=1)

            # Detach isolation groups
            print("Detach isolation groups from ingress ports")
            sai_thrift_set_port_attribute(self.client,
                                          self.port10,
                                          isolation_group=SAI_NULL_OBJECT_ID)
            sai_thrift_set_port_attribute(self.client,
                                          self.port24,
                                          isolation_group=SAI_NULL_OBJECT_ID)
            print("Sending packet from port %d" % self.dev_port10)
            send_packet(self, self.dev_port10, pkt1)
            verify_packet(self, exp_pkt1, self.dev_port11)
            send_packet(self, self.dev_port10, pkt2)
            verify_packet(self, exp_pkt2, self.dev_port12)
            send_packet(self, self.dev_port10, pkt3)
            verify_packet(self, exp_pkt3, self.dev_port13)

            print("Sending packet from port %d" % self.dev_port24)
            send_packet(self, self.dev_port24, pkt1)
            verify_packet(self, exp_pkt1, self.dev_port11)
            send_packet(self, self.dev_port24, pkt2)
            verify_packet(self, exp_pkt2, self.dev_port12)
            send_packet(self, self.dev_port24, pkt3)
            verify_packet(self, exp_pkt3, self.dev_port13)

        finally:
            sai_thrift_set_port_attribute(self.client,
                                          self.port10,
                                          isolation_group=SAI_NULL_OBJECT_ID)
            sai_thrift_set_port_attribute(self.client,
                                          self.port24,
                                          isolation_group=SAI_NULL_OBJECT_ID)