mirror of
https://github.com/GNS3/gns3-server.git
synced 2026-10-19 01:12:22 +03:00
21b866aeed
Cross-compute links can ride kernel VXLAN tunnels instead of the uBridge
UDP relay: each endpoint creates one VXLAN device (uBridge's rtnetlink
vxlan module) enslaved into the same per-link Linux bridge the same-host
datapath uses, so filters, markers, capture and suspend keep running on
the anchor unchanged. Opt-in (Server.enable_vxlan_cross_compute, default
off) because the tunnel caps the usable MTU at the underlay minus the
outer headers; the relay stays the default and the fallback.
The controller derives what the pair must agree on: one VNI per link
(upper VNI space, per-link random salt) and deterministic device names
(gvl{link}{node}) that make crashed-run leftovers claimable
(show -> delete -> create). Same-host compute pairs, switch endpoints
and serial/unix-socket containers stay on the relay.
A VNI the kernel refuses self-heals on every path it can surface:
interactive create retries a fresh salt then degrades to the relay;
project open re-dispatches refused batch entries the same way; node
start recognises the refused device, stops the half-started node,
re-wires both ends on a fresh VNI (or degrades the link) and retries
the start. The device MTU is derived from the lower device (dev=) and
the per-link bridge inherits it - no configuration. The capability
probe (ubridge_vxlan in /capabilities) runs one scratch create/delete
on a scratch port that never equals the configured dstport.
The e2e scenario runs two computes on one machine (a network namespace
joined by a veth pair as the fabric) and needs root.
228 lines
11 KiB
Python
228 lines
11 KiB
Python
#
|
|
# Copyright (C) 2020 GNS3 Technologies Inc.
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
|
|
import sys
|
|
|
|
import psutil
|
|
import pytest
|
|
from fastapi import FastAPI, status
|
|
from httpx import AsyncClient
|
|
|
|
from gns3server.utils.path import get_default_project_directory
|
|
from gns3server.version import __version__
|
|
|
|
pytestmark = pytest.mark.asyncio
|
|
|
|
|
|
async def _no_tap_probe():
|
|
"""The probes spawn uBridge — stub them out for payload assertions."""
|
|
|
|
return None
|
|
|
|
|
|
class TestCapabilitiesRoutes:
|
|
async def test_get(self, app: FastAPI, compute_client: AsyncClient, windows_platform, monkeypatch) -> None:
|
|
|
|
async def no_probe():
|
|
return None
|
|
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_tc_capabilities", no_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_iol_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_bridge_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_vpcs_tap", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_vxlan_support", _no_tap_probe)
|
|
response = await compute_client.get(app.url_path_for("compute:get_capabilities"))
|
|
assert response.status_code == status.HTTP_200_OK
|
|
assert response.json() == {
|
|
"node_types": [
|
|
"cloud",
|
|
"ethernet_hub",
|
|
"ethernet_switch",
|
|
"nat",
|
|
"vpcs",
|
|
"virtualbox",
|
|
"dynamips",
|
|
"frame_relay_switch",
|
|
"atm_switch",
|
|
"qemu",
|
|
"vmware",
|
|
"docker",
|
|
"iou",
|
|
],
|
|
"version": __version__,
|
|
"platform": sys.platform,
|
|
"cpus": psutil.cpu_count(logical=True),
|
|
"memory": psutil.virtual_memory().total,
|
|
"disk_size": psutil.disk_usage(get_default_project_directory()).total,
|
|
"ubridge_tc": None,
|
|
"ubridge_tap": None,
|
|
"ubridge_iol_tap": None,
|
|
"ubridge_bridge_tap": None,
|
|
"vpcs_tap": None,
|
|
"ubridge_vxlan": None,
|
|
}
|
|
|
|
async def test_get_on_gns3vm(self, app: FastAPI, compute_client: AsyncClient, on_gns3vm, monkeypatch) -> None:
|
|
|
|
async def no_probe():
|
|
return None
|
|
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_tc_capabilities", no_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_iol_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_bridge_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_vpcs_tap", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_vxlan_support", _no_tap_probe)
|
|
response = await compute_client.get(app.url_path_for("compute:get_capabilities"))
|
|
assert response.status_code == status.HTTP_200_OK
|
|
assert response.json() == {
|
|
"node_types": [
|
|
"cloud",
|
|
"ethernet_hub",
|
|
"ethernet_switch",
|
|
"nat",
|
|
"vpcs",
|
|
"virtualbox",
|
|
"dynamips",
|
|
"frame_relay_switch",
|
|
"atm_switch",
|
|
"qemu",
|
|
"vmware",
|
|
"docker",
|
|
"iou",
|
|
],
|
|
"version": __version__,
|
|
"platform": sys.platform,
|
|
"cpus": psutil.cpu_count(logical=True),
|
|
"memory": psutil.virtual_memory().total,
|
|
"disk_size": psutil.disk_usage(get_default_project_directory()).total,
|
|
"ubridge_tc": None,
|
|
"ubridge_tap": None,
|
|
"ubridge_iol_tap": None,
|
|
"ubridge_bridge_tap": None,
|
|
"vpcs_tap": None,
|
|
"ubridge_vxlan": None,
|
|
}
|
|
|
|
async def test_get_reports_ubridge_tc(self, app: FastAPI, compute_client: AsyncClient, monkeypatch) -> None:
|
|
|
|
async def fake_probe():
|
|
return {"netem": "delay,rate", "ebpf": "1", "cbpf": "0", "ebpf_modes": "nth,quota,window,flow"}
|
|
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_tc_capabilities", fake_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_iol_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_bridge_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_vpcs_tap", _no_tap_probe)
|
|
response = await compute_client.get(app.url_path_for("compute:get_capabilities"))
|
|
assert response.status_code == status.HTTP_200_OK
|
|
assert response.json()["ubridge_tc"] == {
|
|
"netem": ["delay", "rate"],
|
|
"ebpf": True,
|
|
"ebpf_modes": ["nth", "quota", "window", "flow"],
|
|
"cbpf": False,
|
|
}
|
|
|
|
async def test_get_reports_ubridge_tap(self, app: FastAPI, compute_client: AsyncClient, monkeypatch) -> None:
|
|
"""
|
|
The tap capability is what makes a QEMU node kernel-eligible, so it
|
|
travels with the other compute capabilities.
|
|
"""
|
|
|
|
async def fake_tap_probe():
|
|
return True
|
|
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_tap_support", fake_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_iol_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_bridge_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_vpcs_tap", _no_tap_probe)
|
|
response = await compute_client.get(app.url_path_for("compute:get_capabilities"))
|
|
assert response.status_code == status.HTTP_200_OK
|
|
assert response.json()["ubridge_tap"] is True
|
|
|
|
async def test_get_reports_ubridge_iol_tap(self, app: FastAPI, compute_client: AsyncClient, monkeypatch) -> None:
|
|
"""
|
|
The IOL-port TAP capability is what makes an IOU node kernel-eligible,
|
|
so it travels with the other compute capabilities.
|
|
"""
|
|
|
|
async def fake_iol_tap_probe():
|
|
return True
|
|
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_iol_tap_support", fake_iol_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_tap_support", _no_tap_probe)
|
|
response = await compute_client.get(app.url_path_for("compute:get_capabilities"))
|
|
assert response.status_code == status.HTTP_200_OK
|
|
assert response.json()["ubridge_iol_tap"] is True
|
|
|
|
async def test_get_reports_ubridge_bridge_tap(self, app: FastAPI, compute_client: AsyncClient, monkeypatch) -> None:
|
|
"""
|
|
The swappable-bridge-TAP-leg capability is what makes an IOL runner
|
|
container kernel-eligible, so it travels with the other compute
|
|
capabilities.
|
|
"""
|
|
|
|
async def fake_bridge_tap_probe():
|
|
return True
|
|
|
|
monkeypatch.setattr(
|
|
"gns3server.api.routes.compute.capabilities.probe_bridge_tap_support", fake_bridge_tap_probe
|
|
)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_iol_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_vpcs_tap", _no_tap_probe)
|
|
response = await compute_client.get(app.url_path_for("compute:get_capabilities"))
|
|
assert response.status_code == status.HTTP_200_OK
|
|
assert response.json()["ubridge_bridge_tap"] is True
|
|
|
|
async def test_get_reports_vpcs_tap(self, app: FastAPI, compute_client: AsyncClient, monkeypatch) -> None:
|
|
"""
|
|
The VPCS tap-mode capability is what makes a VPCS node
|
|
kernel-eligible, so it travels with the other compute capabilities.
|
|
"""
|
|
|
|
async def fake_vpcs_tap_probe():
|
|
return True
|
|
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_vpcs_tap", fake_vpcs_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_iol_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_bridge_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_vxlan_support", _no_tap_probe)
|
|
response = await compute_client.get(app.url_path_for("compute:get_capabilities"))
|
|
assert response.status_code == status.HTTP_200_OK
|
|
assert response.json()["vpcs_tap"] is True
|
|
|
|
async def test_get_reports_ubridge_vxlan(self, app: FastAPI, compute_client: AsyncClient, monkeypatch) -> None:
|
|
"""
|
|
The vxlan capability is what makes a cross-compute link tunnel-
|
|
eligible, so it travels with the other compute capabilities.
|
|
"""
|
|
|
|
async def fake_vxlan_probe():
|
|
return True
|
|
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_vxlan_support", fake_vxlan_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_iol_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_bridge_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_vpcs_tap", _no_tap_probe)
|
|
response = await compute_client.get(app.url_path_for("compute:get_capabilities"))
|
|
assert response.status_code == status.HTTP_200_OK
|
|
assert response.json()["ubridge_vxlan"] is True
|