mirror of
https://github.com/GNS3/gns3-server.git
synced 2026-10-13 14:05:36 +03:00
c7ffe919dc
A VPCS node's single adapter anchors on a persistent TAP the server
creates (tap create + set_owner via uBridge) and the vpcs process
attaches to by name: -e -d <gp{id8}e0p0> -n, the same
server-creates/guest-attaches shape as QEMU's netdev. -n (a vpcs fork
feature) keeps the guest's ip command from ifconfig'ing the anchor on
the host; the vpcs build is probed once per binary identity
(vpcs_tap capability, usage scan) and gates kernel links together
with ubridge_tap — anything else keeps the node on the relay (the
legacy local UDP tunnel on a stock binary, an AF_PACKET endpoint on
the anchor with a capable one).
VPCSVM takes KernelDatapathMixin: _connect_nio dispatches kernel
(enslave into the per-link bridge) / relay-on-anchor / legacy,
captures pick capture start_kernel vs the bridge engine, stop runs
under an execute lock and terminates the process before deleting the
anchor TAPs (a held device refuses deletion), and the duplicate-port
guard backstops the controller's. The NIO routes accept nio_bridge
and write suspend back on update.
_delete_anchor_taps verifies each tap is gone from sysfs and retries
a bounded three times: a holder can release its fd a moment after its
process was reaped (vpcs's daemon parent kills its console child and
exits first), so the unconditional delete raced EBUSY and leaked the
anchor intermittently.
The vpcs side needs IFNAMSIZ (16) instead of its own IFNAMESIZ (12)
for the -d name buffer — anchor names are 14 chars and truncated to a
nonexistent device, which TUNSETIFF then tries to create without
CAP_NET_ADMIN (fixed in the vpcs fork).
e2e (tests/e2e/test_vpcs_kernel_datapath.py): kernel and relay
scenarios green against the real binary — real ICMP both ways, §E.1/§
E.2 on the anchors, delay/suspend/capture, link delete/re-create,
node stop/restart self-heal, zero leftovers; the relay control passes
with both the fork binary and a stock one.
205 lines
9.3 KiB
Python
205 lines
9.3 KiB
Python
#
|
|
# Copyright (C) 2020 GNS3 Technologies Inc.
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
|
|
import sys
|
|
|
|
import psutil
|
|
import pytest
|
|
from fastapi import FastAPI, status
|
|
from httpx import AsyncClient
|
|
|
|
from gns3server.utils.path import get_default_project_directory
|
|
from gns3server.version import __version__
|
|
|
|
pytestmark = pytest.mark.asyncio
|
|
|
|
|
|
async def _no_tap_probe():
|
|
"""The probes spawn uBridge — stub them out for payload assertions."""
|
|
|
|
return None
|
|
|
|
|
|
class TestCapabilitiesRoutes:
|
|
async def test_get(self, app: FastAPI, compute_client: AsyncClient, windows_platform, monkeypatch) -> None:
|
|
|
|
async def no_probe():
|
|
return None
|
|
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_tc_capabilities", no_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_iol_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_bridge_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_vpcs_tap", _no_tap_probe)
|
|
response = await compute_client.get(app.url_path_for("compute:get_capabilities"))
|
|
assert response.status_code == status.HTTP_200_OK
|
|
assert response.json() == {
|
|
"node_types": [
|
|
"cloud",
|
|
"ethernet_hub",
|
|
"ethernet_switch",
|
|
"nat",
|
|
"vpcs",
|
|
"virtualbox",
|
|
"dynamips",
|
|
"frame_relay_switch",
|
|
"atm_switch",
|
|
"qemu",
|
|
"vmware",
|
|
"docker",
|
|
"iou",
|
|
],
|
|
"version": __version__,
|
|
"platform": sys.platform,
|
|
"cpus": psutil.cpu_count(logical=True),
|
|
"memory": psutil.virtual_memory().total,
|
|
"disk_size": psutil.disk_usage(get_default_project_directory()).total,
|
|
"ubridge_tc": None,
|
|
"ubridge_tap": None,
|
|
"ubridge_iol_tap": None,
|
|
"ubridge_bridge_tap": None,
|
|
"vpcs_tap": None,
|
|
}
|
|
|
|
async def test_get_on_gns3vm(self, app: FastAPI, compute_client: AsyncClient, on_gns3vm, monkeypatch) -> None:
|
|
|
|
async def no_probe():
|
|
return None
|
|
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_tc_capabilities", no_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_iol_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_bridge_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_vpcs_tap", _no_tap_probe)
|
|
response = await compute_client.get(app.url_path_for("compute:get_capabilities"))
|
|
assert response.status_code == status.HTTP_200_OK
|
|
assert response.json() == {
|
|
"node_types": [
|
|
"cloud",
|
|
"ethernet_hub",
|
|
"ethernet_switch",
|
|
"nat",
|
|
"vpcs",
|
|
"virtualbox",
|
|
"dynamips",
|
|
"frame_relay_switch",
|
|
"atm_switch",
|
|
"qemu",
|
|
"vmware",
|
|
"docker",
|
|
"iou",
|
|
],
|
|
"version": __version__,
|
|
"platform": sys.platform,
|
|
"cpus": psutil.cpu_count(logical=True),
|
|
"memory": psutil.virtual_memory().total,
|
|
"disk_size": psutil.disk_usage(get_default_project_directory()).total,
|
|
"ubridge_tc": None,
|
|
"ubridge_tap": None,
|
|
"ubridge_iol_tap": None,
|
|
"ubridge_bridge_tap": None,
|
|
"vpcs_tap": None,
|
|
}
|
|
|
|
async def test_get_reports_ubridge_tc(self, app: FastAPI, compute_client: AsyncClient, monkeypatch) -> None:
|
|
|
|
async def fake_probe():
|
|
return {"netem": "delay,rate", "ebpf": "1", "cbpf": "0", "ebpf_modes": "nth,quota,window,flow"}
|
|
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_tc_capabilities", fake_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_iol_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_bridge_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_vpcs_tap", _no_tap_probe)
|
|
response = await compute_client.get(app.url_path_for("compute:get_capabilities"))
|
|
assert response.status_code == status.HTTP_200_OK
|
|
assert response.json()["ubridge_tc"] == {
|
|
"netem": ["delay", "rate"],
|
|
"ebpf": True,
|
|
"ebpf_modes": ["nth", "quota", "window", "flow"],
|
|
"cbpf": False,
|
|
}
|
|
|
|
async def test_get_reports_ubridge_tap(self, app: FastAPI, compute_client: AsyncClient, monkeypatch) -> None:
|
|
"""
|
|
The tap capability is what makes a QEMU node kernel-eligible, so it
|
|
travels with the other compute capabilities.
|
|
"""
|
|
|
|
async def fake_tap_probe():
|
|
return True
|
|
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_tap_support", fake_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_iol_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_bridge_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_vpcs_tap", _no_tap_probe)
|
|
response = await compute_client.get(app.url_path_for("compute:get_capabilities"))
|
|
assert response.status_code == status.HTTP_200_OK
|
|
assert response.json()["ubridge_tap"] is True
|
|
|
|
async def test_get_reports_ubridge_iol_tap(self, app: FastAPI, compute_client: AsyncClient, monkeypatch) -> None:
|
|
"""
|
|
The IOL-port TAP capability is what makes an IOU node kernel-eligible,
|
|
so it travels with the other compute capabilities.
|
|
"""
|
|
|
|
async def fake_iol_tap_probe():
|
|
return True
|
|
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_iol_tap_support", fake_iol_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_tap_support", _no_tap_probe)
|
|
response = await compute_client.get(app.url_path_for("compute:get_capabilities"))
|
|
assert response.status_code == status.HTTP_200_OK
|
|
assert response.json()["ubridge_iol_tap"] is True
|
|
|
|
async def test_get_reports_ubridge_bridge_tap(self, app: FastAPI, compute_client: AsyncClient, monkeypatch) -> None:
|
|
"""
|
|
The swappable-bridge-TAP-leg capability is what makes an IOL runner
|
|
container kernel-eligible, so it travels with the other compute
|
|
capabilities.
|
|
"""
|
|
|
|
async def fake_bridge_tap_probe():
|
|
return True
|
|
|
|
monkeypatch.setattr(
|
|
"gns3server.api.routes.compute.capabilities.probe_bridge_tap_support", fake_bridge_tap_probe
|
|
)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_iol_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_vpcs_tap", _no_tap_probe)
|
|
response = await compute_client.get(app.url_path_for("compute:get_capabilities"))
|
|
assert response.status_code == status.HTTP_200_OK
|
|
assert response.json()["ubridge_bridge_tap"] is True
|
|
|
|
async def test_get_reports_vpcs_tap(self, app: FastAPI, compute_client: AsyncClient, monkeypatch) -> None:
|
|
"""
|
|
The VPCS tap-mode capability is what makes a VPCS node
|
|
kernel-eligible, so it travels with the other compute capabilities.
|
|
"""
|
|
|
|
async def fake_vpcs_tap_probe():
|
|
return True
|
|
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_vpcs_tap", fake_vpcs_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_iol_tap_support", _no_tap_probe)
|
|
monkeypatch.setattr("gns3server.api.routes.compute.capabilities.probe_bridge_tap_support", _no_tap_probe)
|
|
response = await compute_client.get(app.url_path_for("compute:get_capabilities"))
|
|
assert response.status_code == status.HTTP_200_OK
|
|
assert response.json()["vpcs_tap"] is True
|