-
Notifications
You must be signed in to change notification settings - Fork 17
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- firewall keepstate and fwsync - firewall with 'via' in ruleset - fib with ignore some rib tables - routing with mpls-over-udp tunnel - ecmp with weight - decap + nat64 + mpls-over-udp tunnel - large communities with explicit best - balancer. reload, tcp, udp - balancer real ipv4 - balancer with scheduler 'wrr' - metabalancer - logical port without vlan
- Loading branch information
Timur Aitov
committed
Oct 19, 2023
1 parent
9f48633
commit 6c6de7b
Showing
208 changed files
with
5,006 additions
and
78 deletions.
There are no files selected for viewing
78 changes: 0 additions & 78 deletions
78
autotest/units/001_one_port/015_nat64stateless_firewall/firewall.conf
This file was deleted.
Oops, something went wrong.
Binary file added
BIN
+964 Bytes
autotest/units/001_one_port/040_firewall_keepstate_with_sync_mixed/001-expect.pcap
Binary file not shown.
Binary file added
BIN
+412 Bytes
autotest/units/001_one_port/040_firewall_keepstate_with_sync_mixed/001-send.pcap
Binary file not shown.
Binary file added
BIN
+24 Bytes
autotest/units/001_one_port/040_firewall_keepstate_with_sync_mixed/002-expect.pcap
Binary file not shown.
Binary file added
BIN
+412 Bytes
autotest/units/001_one_port/040_firewall_keepstate_with_sync_mixed/002-send.pcap
Binary file not shown.
Binary file added
BIN
+24 Bytes
autotest/units/001_one_port/040_firewall_keepstate_with_sync_mixed/003-expect.pcap
Binary file not shown.
Binary file added
BIN
+576 Bytes
autotest/units/001_one_port/040_firewall_keepstate_with_sync_mixed/003-send.pcap
Binary file not shown.
Binary file added
BIN
+412 Bytes
autotest/units/001_one_port/040_firewall_keepstate_with_sync_mixed/004-expect.pcap
Binary file not shown.
Binary file added
BIN
+412 Bytes
autotest/units/001_one_port/040_firewall_keepstate_with_sync_mixed/004-send.pcap
Binary file not shown.
Binary file added
BIN
+884 Bytes
autotest/units/001_one_port/040_firewall_keepstate_with_sync_mixed/005-expect.pcap
Binary file not shown.
Binary file added
BIN
+332 Bytes
autotest/units/001_one_port/040_firewall_keepstate_with_sync_mixed/005-send.pcap
Binary file not shown.
Binary file added
BIN
+24 Bytes
autotest/units/001_one_port/040_firewall_keepstate_with_sync_mixed/006-expect.pcap
Binary file not shown.
Binary file added
BIN
+576 Bytes
autotest/units/001_one_port/040_firewall_keepstate_with_sync_mixed/006-send.pcap
Binary file not shown.
Binary file added
BIN
+332 Bytes
autotest/units/001_one_port/040_firewall_keepstate_with_sync_mixed/007-expect.pcap
Binary file not shown.
Binary file added
BIN
+332 Bytes
autotest/units/001_one_port/040_firewall_keepstate_with_sync_mixed/007-send.pcap
Binary file not shown.
35 changes: 35 additions & 0 deletions
35
autotest/units/001_one_port/040_firewall_keepstate_with_sync_mixed/autotest.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,35 @@ | ||
steps: | ||
- ipv4Update: "0.0.0.0/0 -> 200.0.0.1" | ||
- ipv6Update: "::/0 -> fe80::1" | ||
- sendPackets: | ||
- port: kni0 | ||
send: 001-send.pcap | ||
expect: 001-expect.pcap | ||
- sendPackets: | ||
- port: kni0 | ||
send: 002-send.pcap | ||
expect: 002-expect.pcap | ||
- sendPackets: | ||
- port: kni0 | ||
send: 003-send.pcap | ||
expect: 003-expect.pcap | ||
- sleep: 1 | ||
- sendPackets: | ||
- port: kni0 | ||
send: 004-send.pcap | ||
expect: 004-expect.pcap | ||
- clearFWState: 1 | ||
- sendPackets: | ||
- port: kni0 | ||
send: 005-send.pcap | ||
expect: 005-expect.pcap | ||
- sleep: 1 | ||
- sendPackets: | ||
- port: kni0 | ||
send: 006-send.pcap | ||
expect: 006-expect.pcap | ||
- sendPackets: | ||
- port: kni0 | ||
send: 007-send.pcap | ||
expect: 007-expect.pcap | ||
- clearFWState: 1 |
64 changes: 64 additions & 0 deletions
64
autotest/units/001_one_port/040_firewall_keepstate_with_sync_mixed/controlplane.conf
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,64 @@ | ||
{ | ||
"modules": { | ||
"lp0.100": { | ||
"type": "logicalPort", | ||
"physicalPort": "kni0", | ||
"vlanId": "100", | ||
"macAddress": "00:11:22:33:44:55", | ||
"nextModule": "acl0" | ||
}, | ||
"lp0.200": { | ||
"type": "logicalPort", | ||
"physicalPort": "kni0", | ||
"vlanId": "200", | ||
"macAddress": "00:11:22:33:44:55", | ||
"nextModule": "acl0" | ||
}, | ||
"lp0.2000": { | ||
"type": "logicalPort", | ||
"physicalPort": "kni0", | ||
"vlanId": "2000", | ||
"macAddress": "00:11:22:33:44:55", | ||
"nextModule": "acl0" | ||
}, | ||
"acl0": { | ||
"type": "acl", | ||
"firewall": "firewall.txt", | ||
"synchronization": { | ||
"ipv6SourceAddress": "fe80::f1", | ||
"multicastIpv6Address": "ff02::1", | ||
"multicastDestinationPort": 11995, | ||
"logicalPorts": [ | ||
"lp0.2000" | ||
], | ||
"ingressNextModule": "vrf0" | ||
}, | ||
"nextModules": [ | ||
"vrf0" | ||
] | ||
}, | ||
"vrf0": { | ||
"type": "route", | ||
"interfaces": { | ||
"kni0.100": { | ||
"ipv6Prefix": "fe80::2/64", | ||
"neighborIPv6Address": "fe80::1", | ||
"neighborMacAddress": "00:00:00:11:11:11", | ||
"nextModule": "lp0.100" | ||
}, | ||
"kni0.200": { | ||
"ipv4Prefix": "200.0.0.2/24", | ||
"neighborIPv4Address": "200.0.0.1", | ||
"neighborMacAddress": "00:00:00:22:22:22", | ||
"nextModule": "lp0.200" | ||
}, | ||
"kni0.2000": { | ||
"ipAddresses": ["ff02::2000"], | ||
"neighborIPv6Address": "fe80::2000", | ||
"neighborMacAddress": "00:00:00:33:33:33", | ||
"nextModule": "lp0.2000" | ||
} | ||
} | ||
} | ||
} | ||
} |
8 changes: 8 additions & 0 deletions
8
autotest/units/001_one_port/040_firewall_keepstate_with_sync_mixed/firewall.txt
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,8 @@ | ||
:BEGIN | ||
add skipto :IN ip from any to any in | ||
|
||
:IN | ||
add allow ip from 13.0.0.0/24 to any keep-state | ||
add allow ip from any to 2332:898:ff1c:2030::/64 keep-state | ||
add allow tcp from 2332:898:ffee:0:0:5678::/ffff:ffff:ffff:0000:ffff:ffff:: to 2332:898:ffee:0:0:5678::/ffff:ffff:ffff:0000:ffff:ffff:: 10053 keep-state | ||
add deny ip from any to any |
Oops, something went wrong.