# Copyright 2018 Red Hat, Inc. # All Rights Reserved. # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. import netaddr from neutron_lib import constants from tempest.common import compute from tempest.common import utils from tempest.lib.common.utils import data_utils from tempest.lib import decorators from neutron_tempest_plugin.common import ip as ip_utils from neutron_tempest_plugin.common import ssh from neutron_tempest_plugin import config from neutron_tempest_plugin.scenario import base CONF = config.CONF class NetworkConnectivityTest(base.BaseTempestTestCase): credentials = ['primary', 'admin'] @classmethod @utils.requires_ext(extension="router", service="network") def resource_setup(cls): super(NetworkConnectivityTest, cls).resource_setup() # Create keypair with admin privileges cls.keypair = cls.create_keypair() # Create security group with admin privileges cls.secgroup = cls.create_security_group( name=data_utils.rand_name('secgroup')) # Execute funcs to achieve ssh and ICMP capabilities cls.create_loginable_secgroup_rule(secgroup_id=cls.secgroup['id']) cls.create_pingable_secgroup_rule(secgroup_id=cls.secgroup['id']) def _create_servers(self, port_1, port_2): params = { 'flavor_ref': CONF.compute.flavor_ref, 'image_ref': CONF.compute.image_ref, 'key_name': self.keypair['name'] } vms = [] vms.append( self.create_server(networks=[{'port': port_1['id']}], **params)) if (CONF.compute.min_compute_nodes > 1 and compute.is_scheduler_filter_enabled("DifferentHostFilter")): params['scheduler_hints'] = { 'different_host': [vms[0]['server']['id']]} vms.append( self.create_server(networks=[{'port': port_2['id']}], **params)) for vm in vms: self.wait_for_server_active(vm['server']) self.wait_for_guest_os_ready(vm['server']) return vms @decorators.idempotent_id('8944b90d-1766-4669-bd8a-672b5d106bb7') def test_connectivity_through_2_routers(self): ap1_net = self.create_network() ap2_net = self.create_network() wan_net = self.create_network() ap1_subnet = self.create_subnet( ap1_net, cidr="10.10.210.0/24", gateway="10.10.210.254") ap2_subnet = self.create_subnet( ap2_net, cidr="10.10.220.0/24", gateway="10.10.220.254") self.create_subnet( wan_net, cidr="10.10.200.0/24", gateway="10.10.200.254") ap1_rt = self.create_router( router_name=data_utils.rand_name("ap1_rt"), admin_state_up=True, external_network_id=CONF.network.public_network_id) ap2_rt = self.create_router( router_name=data_utils.rand_name("ap2_rt"), admin_state_up=True) self._wait_for_router_ha_active(ap1_rt['id']) self._wait_for_router_ha_active(ap2_rt['id']) ap1_internal_port = self.create_port( ap1_net, security_groups=[self.secgroup['id']]) ap2_internal_port = self.create_port( ap2_net, security_groups=[self.secgroup['id']]) ap1_wan_port = self.create_port(wan_net) ap2_wan_port = self.create_port(wan_net) self.client.add_router_interface_with_port_id( ap1_rt['id'], ap1_wan_port['id']) self.client.add_router_interface_with_port_id( ap2_rt['id'], ap2_wan_port['id']) self.create_router_interface(ap1_rt['id'], ap1_subnet['id']) self.create_router_interface(ap2_rt['id'], ap2_subnet['id']) self.client.update_router( ap1_rt['id'], routes=[{"destination": ap2_subnet['cidr'], "nexthop": ap2_wan_port['fixed_ips'][0]['ip_address']}]) self.client.update_router( ap2_rt['id'], routes=[{"destination": ap1_subnet['cidr'], "nexthop": ap1_wan_port['fixed_ips'][0]['ip_address']}]) servers = self._create_servers(ap1_internal_port, ap2_internal_port) ap1_fip = self.create_and_associate_floatingip( ap1_internal_port['id']) ap1_sshclient = ssh.Client( ap1_fip['floating_ip_address'], CONF.validation.image_ssh_user, pkey=self.keypair['private_key']) self.check_remote_connectivity( ap1_sshclient, ap2_internal_port['fixed_ips'][0]['ip_address'], servers=servers) @decorators.idempotent_id('b72c3b77-3396-4144-b05d-9cd3c0099893') def test_connectivity_router_east_west_traffic(self): """This case is intended to test router east west taffic The case can be used in various scenarios: legacy/distributed router, same/different host. """ net_1 = self.create_network() net_2 = self.create_network() subnet_1 = self.create_subnet(net_1, cidr="10.10.1.0/24") subnet_2 = self.create_subnet(net_2, cidr="10.10.2.0/24") router = self.create_router( router_name=data_utils.rand_name("east_west_traffic_router"), admin_state_up=True, external_network_id=CONF.network.public_network_id) self._wait_for_router_ha_active(router['id']) internal_port_1 = self.create_port( net_1, security_groups=[self.secgroup['id']]) internal_port_2 = self.create_port( net_2, security_groups=[self.secgroup['id']]) self.create_router_interface(router['id'], subnet_1['id']) self.create_router_interface(router['id'], subnet_2['id']) servers = self._create_servers(internal_port_1, internal_port_2) fip = self.create_and_associate_floatingip( internal_port_1['id']) sshclient = ssh.Client( fip['floating_ip_address'], CONF.validation.image_ssh_user, pkey=self.keypair['private_key']) self.check_remote_connectivity( sshclient, internal_port_2['fixed_ips'][0]['ip_address'], ping_count=10, servers=servers) @utils.requires_ext(extension="dvr", service="network") @decorators.idempotent_id('69d3650a-5c32-40bc-ae56-5c4c849ddd37') def test_connectivity_dvr_and_no_dvr_routers_in_same_subnet(self): """This test case tests connectivity between vm and 2 routers. Subnet is connected to dvr and non-dvr routers in the same time, test ensures that connectivity from VM to both routers is working. Test scenario: (NOTE: 10.1.0.0/24 private CIDR is used as an example) .. code-block:: HTML +----------------+ +------------+ | Non-dvr router | | DVR router | | | | | | 10.1.0.1 | | 10.1.0.x | +-------+--------+ +-----+------+ | | | 10.1.0.0/24 | +----------------+----------------+ | +-+-+ |VM | +---+ where: 10.1.0.1 - is subnet's gateway IP address, 10.1.0.x - is any other IP address taken from subnet's range Test ensures that both 10.1.0.1 and 10.1.0.x IP addresses are reachable from VM. """ ext_network = self.client.show_network(self.external_network_id) for ext_subnetid in ext_network['network']['subnets']: ext_subnet = self.os_admin.network_client.show_subnet(ext_subnetid) ext_cidr = ext_subnet['subnet']['cidr'] if ext_subnet['subnet']['ip_version'] == constants.IP_VERSION_4: break else: self.fail('No IPv4 subnet was found in external network %s' % ext_network['network']['id']) subnet_cidr = ip_utils.find_valid_cidr(used_cidr=ext_cidr) gw_ip = netaddr.IPAddress(subnet_cidr.first + 1) network = self.create_network() subnet = self.create_subnet( network, cidr=str(subnet_cidr), gateway=str(gw_ip)) non_dvr_router = self.create_router_by_client( tenant_id=self.client.project_id, is_admin=True, router_name=data_utils.rand_name("nondvr-2-routers-same-network"), admin_state_up=True, distributed=False) self.create_router_interface(non_dvr_router['id'], subnet['id']) dvr_router = self.create_router_by_client( tenant_id=self.client.project_id, is_admin=True, router_name=data_utils.rand_name("dvr-2-rotuers-same-network"), admin_state_up=True, distributed=True) dvr_router_port = self.create_port(network) self.client.add_router_interface_with_port_id( dvr_router['id'], dvr_router_port['id']) vm = self.create_server( flavor_ref=CONF.compute.flavor_ref, image_ref=CONF.compute.image_ref, key_name=self.keypair['name'], networks=[{'uuid': network['id']}], security_groups=[{'name': self.secgroup['name']}]) self.wait_for_server_active(vm['server']) self.wait_for_guest_os_ready(vm['server']) vm_port = self.client.list_ports( network_id=network['id'], device_id=vm['server']['id'])['ports'][0] fip = self.create_and_associate_floatingip(vm_port['id']) sshclient = ssh.Client( fip['floating_ip_address'], CONF.validation.image_ssh_user, pkey=self.keypair['private_key']) self.check_remote_connectivity( sshclient, str(gw_ip), ping_count=10, servers=[vm]) self.check_remote_connectivity( sshclient, dvr_router_port['fixed_ips'][0]['ip_address'], ping_count=10, servers=[vm])