functest/opnfv_tests/features/sfc/sfc.py

   1 import argparse
   2 import os
   3 import subprocess
   4 import sys
   5 import time
   6 import functest.utils.functest_logger as ft_logger
   7 import functest.utils.functest_utils as ft_utils
   8 import functest.utils.openstack_utils as os_utils
   9 import re
  10 import json
  11 import SSHUtils as ssh_utils
  12 import ovs_utils
  13
  14 parser = argparse.ArgumentParser()
  15
  16 parser.add_argument("-r", "--report",
  17                     help="Create json result file",
  18                     action="store_true")
  19
  20 args = parser.parse_args()
  21
  22 """ logging configuration """
  23 logger = ft_logger.Logger("ODL_SFC").getLogger()
  24
  25 FUNCTEST_RESULTS_DIR = '/home/opnfv/functest/results/odl-sfc'
  26 FUNCTEST_REPO = ft_utils.FUNCTEST_REPO
  27 REPO_PATH = os.environ['repos_dir'] + '/functest/'
  28 HOME = os.environ['HOME'] + "/"
  29 CLIENT = "client"
  30 SERVER = "server"
  31 FLAVOR = "custom"
  32 IMAGE_NAME = "sf_nsh_colorado"
  33 IMAGE_FILENAME = "sf_nsh_colorado.qcow2"
  34 IMAGE_FORMAT = "qcow2"
  35 IMAGE_DIR = "/home/opnfv/functest/data"
  36 IMAGE_PATH = IMAGE_DIR + "/" + IMAGE_FILENAME
  37 IMAGE_URL = "http://artifacts.opnfv.org/sfc/demo/" + IMAGE_FILENAME
  38
  39 # NEUTRON Private Network parameters
  40 NET_NAME = "example-net"
  41 SUBNET_NAME = "example-subnet"
  42 SUBNET_CIDR = "11.0.0.0/24"
  43 ROUTER_NAME = "example-router"
  44 SECGROUP_NAME = "example-sg"
  45 SECGROUP_DESCR = "Example Security group"
  46 SFC_TEST_DIR = REPO_PATH + "/opnfv_tests/features/sfc/"
  47 TACKER_SCRIPT = SFC_TEST_DIR + "sfc_tacker.bash"
  48 TACKER_CHANGECLASSI = SFC_TEST_DIR + "sfc_change_classi.bash"
  49 ssh_options = '-q -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no'
  50 json_results = {"tests": 4, "failures": 0}
  51
  52 PROXY = {
  53     'ip': '10.20.0.2',
  54     'username': 'root',
  55     'password': 'r00tme'
  56 }
  57
  58 # run given command locally and return commands output if success
  59
  60
  61 def run_cmd(cmd, wdir=None, ignore_stderr=False, ignore_no_output=True):
  62     pipe = subprocess.Popen(cmd, shell=True,
  63                             stdin=subprocess.PIPE,
  64                             stdout=subprocess.PIPE,
  65                             stderr=subprocess.PIPE, cwd=wdir)
  66
  67     (output, errors) = pipe.communicate()
  68     if output:
  69         output = output.strip()
  70     if pipe.returncode < 0:
  71         logger.error(errors)
  72         return False
  73     if errors:
  74         logger.error(errors)
  75         if ignore_stderr:
  76             return True
  77         else:
  78             return False
  79
  80     if ignore_no_output:
  81         if not output:
  82             return True
  83
  84     return output
  85
  86 # run given command on OpenStack controller
  87
  88
  89 def run_cmd_on_cntlr(cmd):
  90     ip_cntlrs = get_openstack_node_ips("controller")
  91     if not ip_cntlrs:
  92         return None
  93
  94     ssh_cmd = "ssh %s %s %s" % (ssh_options, ip_cntlrs[0], cmd)
  95     return run_cmd_on_fm(ssh_cmd)
  96
  97 # run given command on OpenStack Compute node
  98
  99
 100 def run_cmd_on_compute(cmd):
 101     ip_computes = get_openstack_node_ips("compute")
 102     if not ip_computes:
 103         return None
 104
 105     ssh_cmd = "ssh %s %s %s" % (ssh_options, ip_computes[0], cmd)
 106     return run_cmd_on_fm(ssh_cmd)
 107
 108 # run given command on Fuel Master
 109
 110
 111 def run_cmd_on_fm(cmd, username="root", passwd="r00tme"):
 112     ip = os.environ.get("INSTALLER_IP")
 113     ssh_cmd = "sshpass -p %s ssh %s %s@%s %s" % (
 114         passwd, ssh_options, username, ip, cmd)
 115     return run_cmd(ssh_cmd)
 116
 117 # run given command on Remote Machine, Can be VM
 118
 119
 120 def run_cmd_remote(ip, cmd, username="root", passwd="opnfv"):
 121     ssh_opt_append = "%s -o ConnectTimeout=50 " % ssh_options
 122     ssh_cmd = "sshpass -p %s ssh %s %s@%s %s" % (
 123         passwd, ssh_opt_append, username, ip, cmd)
 124     return run_cmd(ssh_cmd)
 125
 126 # Get OpenStack Nodes IP Address
 127
 128
 129 def get_openstack_node_ips(role):
 130     fuel_env = os.environ.get("FUEL_ENV")
 131     if fuel_env is not None:
 132         cmd = "fuel2 node list -f json -e %s" % fuel_env
 133     else:
 134         cmd = "fuel2 node list -f json"
 135
 136     nodes = run_cmd_on_fm(cmd)
 137     ips = []
 138     nodes = json.loads(nodes)
 139     for node in nodes:
 140         if role in node["roles"]:
 141             ips.append(node["ip"])
 142
 143     return ips
 144
 145 # Configures IPTABLES on OpenStack Controller
 146
 147
 148 def configure_iptables():
 149     iptable_cmds = ["iptables -P INPUT ACCEPT",
 150                     "iptables -t nat -P INPUT ACCEPT",
 151                     "iptables -A INPUT -m state \
 152                     --state NEW,ESTABLISHED,RELATED -j ACCEPT"]
 153
 154     for cmd in iptable_cmds:
 155         logger.info("Configuring %s on contoller" % cmd)
 156         run_cmd_on_cntlr(cmd)
 157
 158     return
 159
 160
 161 def download_image():
 162     if not os.path.isfile(IMAGE_PATH):
 163         logger.info("Downloading image")
 164         ft_utils.download_url(IMAGE_URL, IMAGE_DIR)
 165
 166     logger.info("Using old image")
 167     return
 168
 169
 170 def setup_glance(glance_client):
 171     image_id = os_utils.create_glance_image(glance_client,
 172                                             IMAGE_NAME,
 173                                             IMAGE_PATH,
 174                                             disk=IMAGE_FORMAT,
 175                                             container="bare",
 176                                             public=True)
 177
 178     return image_id
 179
 180
 181 def setup_neutron(neutron_client):
 182     n_dict = os_utils.create_network_full(neutron_client,
 183                                           NET_NAME,
 184                                           SUBNET_NAME,
 185                                           ROUTER_NAME,
 186                                           SUBNET_CIDR)
 187     if not n_dict:
 188         logger.error("failed to create neutron network")
 189         sys.exit(-1)
 190
 191     network_id = n_dict["net_id"]
 192     return network_id
 193
 194
 195 def setup_ingress_egress_secgroup(neutron_client, protocol,
 196                                   min_port=None, max_port=None):
 197     secgroups = os_utils.get_security_groups(neutron_client)
 198     for sg in secgroups:
 199         os_utils.create_secgroup_rule(neutron_client, sg['id'],
 200                                       'ingress', protocol,
 201                                       port_range_min=min_port,
 202                                       port_range_max=max_port)
 203         os_utils.create_secgroup_rule(neutron_client, sg['id'],
 204                                       'egress', protocol,
 205                                       port_range_min=min_port,
 206                                       port_range_max=max_port)
 207     return
 208
 209
 210 def setup_security_groups(neutron_client):
 211     sg_id = os_utils.create_security_group_full(neutron_client,
 212                                                 SECGROUP_NAME, SECGROUP_DESCR)
 213     setup_ingress_egress_secgroup(neutron_client, "icmp")
 214     setup_ingress_egress_secgroup(neutron_client, "udp", 67, 68)
 215     setup_ingress_egress_secgroup(neutron_client, "tcp", 22, 22)
 216     setup_ingress_egress_secgroup(neutron_client, "tcp", 80, 80)
 217     return sg_id
 218
 219
 220 def boot_instance(nova_client, name, flavor, image_id, network_id, sg_id):
 221     logger.info("Creating instance '%s'..." % name)
 222     logger.debug(
 223         "Configuration:\n name=%s \n flavor=%s \n image=%s \n "
 224         "network=%s \n" % (name, flavor, image_id, network_id))
 225
 226     instance = os_utils.create_instance_and_wait_for_active(flavor,
 227                                                             image_id,
 228                                                             network_id,
 229                                                             name)
 230
 231     if instance is None:
 232         logger.error("Error while booting instance.")
 233         sys.exit(-1)
 234
 235     instance_ip = instance.networks.get(NET_NAME)[0]
 236     logger.debug("Instance '%s' got private ip '%s'." %
 237                  (name, instance_ip))
 238
 239     logger.info("Adding '%s' to security group %s" % (name, SECGROUP_NAME))
 240     os_utils.add_secgroup_to_instance(nova_client, instance.id, sg_id)
 241
 242     return instance_ip
 243
 244
 245 def ping(remote, pkt_cnt=1, iface=None, retries=100, timeout=None):
 246     ping_cmd = 'ping'
 247
 248     if timeout:
 249         ping_cmd = ping_cmd + ' -w %s' % timeout
 250
 251     grep_cmd = "grep -e 'packet loss' -e rtt"
 252
 253     if iface is not None:
 254         ping_cmd = ping_cmd + ' -I %s' % iface
 255
 256     ping_cmd = ping_cmd + ' -i 0 -c %d %s' % (pkt_cnt, remote)
 257     cmd = ping_cmd + '|' + grep_cmd
 258
 259     while retries > 0:
 260         output = run_cmd(cmd)
 261         if not output:
 262             return False
 263
 264         match = re.search('(\d*)% packet loss', output)
 265         if not match:
 266             return False
 267
 268         packet_loss = int(match.group(1))
 269         if packet_loss == 0:
 270             return True
 271
 272         retries = retries - 1
 273
 274     return False
 275
 276
 277 def get_floating_ips(nova_client, neutron_client):
 278     ips = []
 279     instances = nova_client.servers.list(search_opts={'all_tenants': 1})
 280     for instance in instances:
 281         floatip_dic = os_utils.create_floating_ip(neutron_client)
 282         floatip = floatip_dic['fip_addr']
 283         instance.add_floating_ip(floatip)
 284         logger.info("Instance name and ip %s:%s " % (instance.name, floatip))
 285         logger.info("Waiting for instance %s:%s to come up" %
 286                     (instance.name, floatip))
 287         if not ping(floatip):
 288             logger.info("Instance %s:%s didn't come up" %
 289                         (instance.name, floatip))
 290             sys.exit(1)
 291
 292         if instance.name == "server":
 293             logger.info("Server:%s is reachable" % floatip)
 294             server_ip = floatip
 295         elif instance.name == "client":
 296             logger.info("Client:%s is reachable" % floatip)
 297             client_ip = floatip
 298         else:
 299             logger.info("SF:%s is reachable" % floatip)
 300             ips.append(floatip)
 301
 302     return server_ip, client_ip, ips[1], ips[0]
 303
 304 # Start http server on a give machine, Can be VM
 305
 306
 307 def start_http_server(ip):
 308     cmd = "\'python -m SimpleHTTPServer 80"
 309     cmd = cmd + " > /dev/null 2>&1 &\'"
 310     return run_cmd_remote(ip, cmd)
 311
 312 # Set firewall using vxlan_tool.py on a give machine, Can be VM
 313
 314
 315 def vxlan_firewall(sf, iface="eth0", port="22", block=True):
 316     cmd = "python vxlan_tool.py"
 317     cmd = cmd + " -i " + iface + " -d forward -v off"
 318     if block:
 319         cmd = "python vxlan_tool.py -i eth0 -d forward -v off -b " + port
 320
 321     cmd = "sh -c 'cd /root;nohup " + cmd + " > /dev/null 2>&1 &'"
 322     run_cmd_remote(sf, cmd)
 323
 324 # Run netcat on a give machine, Can be VM
 325
 326
 327 def netcat(s_ip, c_ip, port="80", timeout=5):
 328     cmd = "nc -zv "
 329     cmd = cmd + " -w %s %s %s" % (timeout, s_ip, port)
 330     cmd = cmd + " 2>&1"
 331     output = run_cmd_remote(c_ip, cmd)
 332     logger.info("%s" % output)
 333     return output
 334
 335
 336 def is_ssh_blocked(srv_prv_ip, client_ip):
 337     res = netcat(srv_prv_ip, client_ip, port="22")
 338     match = re.search("nc:.*timed out:.*", res, re.M)
 339     if match:
 340         return True
 341
 342     return False
 343
 344
 345 def is_http_blocked(srv_prv_ip, client_ip):
 346     res = netcat(srv_prv_ip, client_ip, port="80")
 347     match = re.search(".* 80 port.* succeeded!", res, re.M)
 348     if match:
 349         return False
 350
 351     return True
 352
 353
 354 def capture_err_logs(controller_clients, compute_clients, error):
 355     ovs_logger = ovs_utils.OVSLogger(
 356         os.path.join(os.getcwd(), 'ovs-logs'),
 357         FUNCTEST_RESULTS_DIR)
 358
 359     timestamp = time.strftime("%Y%m%d-%H%M%S")
 360     ovs_logger.dump_ovs_logs(controller_clients,
 361                              compute_clients,
 362                              related_error=error,
 363                              timestamp=timestamp)
 364     return
 365
 366
 367 def update_json_results(name, result):
 368     json_results.update({name: result})
 369     if result is not "Passed":
 370         json_results["failures"] += 1
 371
 372     return
 373
 374
 375 def get_ssh_clients(role):
 376     clients = []
 377     for ip in get_openstack_node_ips(role):
 378         s_client = ssh_utils.get_ssh_client(ip,
 379                                             'root',
 380                                             proxy=PROXY)
 381         clients.append(s_client)
 382
 383     return clients
 384
 385 # Check SSH connectivity to VNFs
 386
 387
 388 def check_ssh(ips, retries=100):
 389     check = [False, False]
 390     logger.info("Checking SSH connectivity to the SFs with ips %s" % str(ips))
 391     while retries and not all(check):
 392         for index, ip in enumerate(ips):
 393             check[index] = run_cmd_remote(ip, "exit")
 394
 395         if all(check):
 396             logger.info("SSH connectivity to the SFs established")
 397             return True
 398
 399         time.sleep(3)
 400         retries -= 1
 401
 402     return False
 403
 404
 405 def main():
 406     installer_type = os.environ.get("INSTALLER_TYPE")
 407     if installer_type != "fuel":
 408         logger.error(
 409             '\033[91mCurrently supported only Fuel Installer type\033[0m')
 410         sys.exit(1)
 411
 412     installer_ip = os.environ.get("INSTALLER_IP")
 413     if not installer_ip:
 414         logger.error(
 415             '\033[91minstaller ip is not set\033[0m')
 416         logger.error(
 417             '\033[91mexport INSTALLER_IP=<ip>\033[0m')
 418         sys.exit(1)
 419
 420     env_list = run_cmd_on_fm("fuel2 env list -f json")
 421     fuel_env = os.environ.get("FUEL_ENV")
 422     if len(eval(env_list)) > 1 and fuel_env is None:
 423         out = run_cmd_on_fm("fuel env")
 424         logger.error(
 425             '\033[91mMore than one fuel env found\033[0m\n %s' % out)
 426         logger.error(
 427             '\033[91mexport FUEL_ENV=<env-id> to set ENV\033[0m')
 428         sys.exit(1)
 429
 430     start_time = time.time()
 431     status = "PASS"
 432     configure_iptables()
 433     download_image()
 434     _, custom_flv_id = os_utils.get_or_create_flavor(
 435         FLAVOR, 1500, 10, 1, public=True)
 436     if not custom_flv_id:
 437         logger.error("Failed to create custom flavor")
 438         sys.exit(1)
 439
 440     glance_client = os_utils.get_glance_client()
 441     neutron_client = os_utils.get_neutron_client()
 442     nova_client = os_utils.get_nova_client()
 443
 444     controller_clients = get_ssh_clients("controller")
 445     compute_clients = get_ssh_clients("compute")
 446
 447     image_id = setup_glance(glance_client)
 448     network_id = setup_neutron(neutron_client)
 449     sg_id = setup_security_groups(neutron_client)
 450
 451     boot_instance(
 452         nova_client, CLIENT, FLAVOR, image_id, network_id, sg_id)
 453     srv_prv_ip = boot_instance(
 454         nova_client, SERVER, FLAVOR, image_id, network_id, sg_id)
 455
 456     subprocess.call(TACKER_SCRIPT, shell=True)
 457     server_ip, client_ip, sf1, sf2 = get_floating_ips(
 458         nova_client, neutron_client)
 459
 460     if not check_ssh([sf1, sf2]):
 461         logger.error("Cannot establish SSH connection to the SFs")
 462         sys.exit(1)
 463
 464     logger.info("Starting HTTP server on %s" % server_ip)
 465     if not start_http_server(server_ip):
 466         logger.error(
 467             '\033[91mFailed to start HTTP server on %s\033[0m' % server_ip)
 468         sys.exit(1)
 469
 470     logger.info("Starting HTTP firewall on %s" % sf2)
 471     vxlan_firewall(sf2, port="80")
 472     logger.info("Starting SSH firewall on %s" % sf1)
 473     vxlan_firewall(sf1, port="22")
 474
 475     logger.info("Wait for ODL to update the classification rules in OVS")
 476     time.sleep(120)
 477
 478     logger.info("Test SSH")
 479     if is_ssh_blocked(srv_prv_ip, client_ip):
 480         logger.info('\033[92mTEST 1 [PASSED] ==> SSH BLOCKED\033[0m')
 481         update_json_results("Test 1: SSH Blocked", "Passed")
 482     else:
 483         error = ('\033[91mTEST 1 [FAILED] ==> SSH NOT BLOCKED\033[0m')
 484         logger.error(error)
 485         capture_err_logs(controller_clients, compute_clients, error)
 486         update_json_results("Test 1: SSH Blocked", "Failed")
 487
 488     logger.info("Test HTTP")
 489     if not is_http_blocked(srv_prv_ip, client_ip):
 490         logger.info('\033[92mTEST 2 [PASSED] ==> HTTP WORKS\033[0m')
 491         update_json_results("Test 2: HTTP works", "Passed")
 492     else:
 493         error = ('\033[91mTEST 2 [FAILED] ==> HTTP BLOCKED\033[0m')
 494         logger.error(error)
 495         capture_err_logs(controller_clients, compute_clients, error)
 496         update_json_results("Test 2: HTTP works", "Failed")
 497
 498     logger.info("Changing the classification")
 499     subprocess.call(TACKER_CHANGECLASSI, shell=True)
 500     logger.info("Wait for ODL to update the classification rules in OVS")
 501     time.sleep(100)
 502
 503     logger.info("Test HTTP")
 504     if is_http_blocked(srv_prv_ip, client_ip):
 505         logger.info('\033[92mTEST 3 [PASSED] ==> HTTP Blocked\033[0m')
 506         update_json_results("Test 3: HTTP Blocked", "Passed")
 507     else:
 508         error = ('\033[91mTEST 3 [FAILED] ==> HTTP WORKS\033[0m')
 509         logger.error(error)
 510         capture_err_logs(controller_clients, compute_clients, error)
 511         update_json_results("Test 3: HTTP Blocked", "Failed")
 512
 513     logger.info("Test SSH")
 514     if not is_ssh_blocked(srv_prv_ip, client_ip):
 515         logger.info('\033[92mTEST 4 [PASSED] ==> SSH Works\033[0m')
 516         update_json_results("Test 4: SSH Works", "Passed")
 517     else:
 518         error = ('\033[91mTEST 4 [FAILED] ==> SSH BLOCKED\033[0m')
 519         logger.error(error)
 520         capture_err_logs(controller_clients, compute_clients, error)
 521         update_json_results("Test 4: SSH Works", "Failed")
 522
 523     if json_results["failures"]:
 524         status = "FAIL"
 525         logger.error('\033[91mSFC TESTS: %s :( FOUND %s FAIL \033[0m' % (
 526             status, json_results["failures"]))
 527
 528     if args.report:
 529         stop_time = time.time()
 530         logger.debug("Promise Results json: " + str(json_results))
 531         ft_utils.push_results_to_db("sfc",
 532                                     "functest-odl-sfc",
 533                                     start_time,
 534                                     stop_time,
 535                                     status,
 536                                     json_results)
 537
 538     if status == "PASS":
 539         logger.info('\033[92mSFC ALL TESTS: %s :)\033[0m' % status)
 540         sys.exit(0)
 541
 542     sys.exit(1)
 543
 544 if __name__ == '__main__':
 545     main()