行政管理388
by 陈小方
lnst-developers；你好！
===========请点击附件下载详细内容==========
Hello! Please click the download details!
下午 10:11:53
4 years, 11 months
[PATCH-master] lnst.recipes.regression_tests.phase3.ipsec_esp_ah_comp.py: chanage min value for packet asserts
by csfakian＠redhat.com
From: Christos Sfakianakis <csfakian(a)redhat.com>
Change the minimum threshold PASS value for 2 out of the 4 packet capture
jobs to 20. Reason is, ping includes 10 attempts and selected ESP and AH filters
happen to hold for both incoming and outcoming packets. This has no effect
in the overall results as of now, but accounts more precisely for the selected
ipsec policies of this reipe.
Signed-off-by: Christos Sfakianakis <csfakian(a)redhat.com>
---
recipes/regression_tests/phase3/ipsec_esp_ah_comp.py | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/recipes/regression_tests/phase3/ipsec_esp_ah_comp.py b/recipes/regression_tests/phase3/ipsec_esp_ah_comp.py
index cde0cf7..d3f100a 100644
--- a/recipes/regression_tests/phase3/ipsec_esp_ah_comp.py
+++ b/recipes/regression_tests/phase3/ipsec_esp_ah_comp.py
@@ -262,7 +262,7 @@ for ciph_alg, ciph_len in ciphers:
"filter": "ah",
"grep_for": [ "AH\(spi=0x00000003",
"ESP\(spi=0x00000002" ],
- "min": 10
+ "min": 20
})
assert_proc = m2.run(assert_mod, bg=True)
@@ -415,7 +415,7 @@ for ciph_alg, ciph_len in ciphers:
"filter": "ah",
"grep_for": [ "AH\(spi=0x00000003",
"ESP\(spi=0x00000002" ],
- "min": 10
+ "min": 20
})
assert_proc = m2.run(assert_mod, bg=True)
--
2.17.1
4 years, 11 months
[PATCH-next v2 00/12] Generic code fixes and partial phase 3 port
by csfakian＠redhat.com
From: Christos Sfakianakis <csfakian(a)redhat.com>
Hello,
this is the second version of the patch set. Changes include:
- more descriptive commit headers/messages where needed
- shorter implementation of multicast ip address check
- split of commit 4 into 2 logically separate parts
- removal of p_min/p_max params from PacketAssert test and
generator
- commits 7 and 9 merged into one
- separation of packet_assert_test() into corresponding start()
and stop() methods
Thanks,
Christos
Christos Sfakianakis (12):
lnst.Controller.Namespace: update RemoteDevice setter
lnst.Recipes.ENRT.BaseEnrtRecipe: fix offloads
lnst.Common.IpAddress: add multicast verification
lnst.Devices.Device: remove unused code
lnst.Devices.VxlanDevice: add warning log messages
lnst.Devices.OvsBridgeDevice: fix tunnel_add, update
internal_port_add, port_add
lnst.Devices.VxlanDevice: fix realdev assignment
lnst.Tests: add PacketAssert
lnst.RecipeCommon: add PacketAssert
lnst.Recipes.ENRT: add XfrmTools
lnst.RecipeCommon.Ping: enable size setter
lnst.Recipes.ENRT: port partial implementation of phase 3
lnst/Common/IpAddress.py | 8 +
lnst/Controller/Namespace.py | 6 +
lnst/Devices/Device.py | 12 --
lnst/Devices/OvsBridgeDevice.py | 12 +-
lnst/Devices/VxlanDevice.py | 9 +-
lnst/RecipeCommon/PacketAssert.py | 86 ++++++++
lnst/RecipeCommon/Ping.py | 4 +
lnst/Recipes/ENRT/BaseEnrtRecipe.py | 2 +-
lnst/Recipes/ENRT/IpsecEspAeadRecipe.py | 217 +++++++++++++++++++
lnst/Recipes/ENRT/IpsecEspAhCompRecipe.py | 245 ++++++++++++++++++++++
lnst/Recipes/ENRT/NoVirtOvsVxlanRecipe.py | 76 +++++++
lnst/Recipes/ENRT/VirtOvsVxlanRecipe.py | 107 ++++++++++
lnst/Recipes/ENRT/VxlanMulticastRecipe.py | 81 +++++++
lnst/Recipes/ENRT/VxlanRemoteRecipe.py | 66 ++++++
lnst/Recipes/ENRT/XfrmTools.py | 105 ++++++++++
lnst/Tests/PacketAssert.py | 96 +++++++++
lnst/Tests/__init__.py | 1 +
17 files changed, 1115 insertions(+), 18 deletions(-)
create mode 100644 lnst/RecipeCommon/PacketAssert.py
create mode 100644 lnst/Recipes/ENRT/IpsecEspAeadRecipe.py
create mode 100644 lnst/Recipes/ENRT/IpsecEspAhCompRecipe.py
create mode 100644 lnst/Recipes/ENRT/NoVirtOvsVxlanRecipe.py
create mode 100644 lnst/Recipes/ENRT/VirtOvsVxlanRecipe.py
create mode 100644 lnst/Recipes/ENRT/VxlanMulticastRecipe.py
create mode 100644 lnst/Recipes/ENRT/VxlanRemoteRecipe.py
create mode 100644 lnst/Recipes/ENRT/XfrmTools.py
create mode 100644 lnst/Tests/PacketAssert.py
--
2.17.1
4 years, 11 months
[PATCH-next 00/12] Code fixes and partial phase 3 port
by csfakian＠redhat.com
From: Christos Sfakianakis <csfakian(a)redhat.com>
Hi,
this patch contains fixes and updates oriented to phase 3 but not only.
In particular, it contains:
- A fix in Namespace that relates to the namespace's dictionary
- Default offloads value should be a 1-element tuple
- Checks for multicast ips
- Unused code removal from Device
- Updates in OvsBridgeDevice
- A fix in VxlanDevice
- A PacketAssert evaluation module
- A PacketAssert test module
- Update of Tests.__init__
- A module used for applying phase3-specific ipsec settings
- Ping packet size set enablement
- Partial port of phase 3 recipes (short_lived_connections and
simple_macsec not done yet)
Christos
Christos Sfakianakis (12):
lnst.Controller: edit Namespace
lnst.Recipes.ENRT.BaseEnrtRecipe: fix offloads
lnst.Common: edit IpAddress
lnst.Devices: edit Device
lnst.Devices: edit OvsBridgeDevice
lnst.Devices.VxlanDevice: fix realdev assignment
lnst.Tests: add PacketAssert
lnst.RecipeCommon: add PacketAssert
lnst.Tests: edit initialization snippet
lnst.Recipes.ENRT: add XfrmTools
lnst.RecipeCommon.Ping: enable size setter
lnst.Recipes.ENRT: port partial implementation of phase 3
lnst/Common/IpAddress.py | 13 +-
lnst/Controller/Namespace.py | 6 +
lnst/Devices/Device.py | 12 --
lnst/Devices/OvsBridgeDevice.py | 12 +-
lnst/Devices/VxlanDevice.py | 9 +-
lnst/RecipeCommon/PacketAssert.py | 76 +++++++
lnst/RecipeCommon/Ping.py | 4 +
lnst/Recipes/ENRT/BaseEnrtRecipe.py | 2 +-
lnst/Recipes/ENRT/IpsecEspAeadRecipe.py | 220 +++++++++++++++++++
lnst/Recipes/ENRT/IpsecEspAhCompRecipe.py | 251 ++++++++++++++++++++++
lnst/Recipes/ENRT/NoVirtOvsVxlanRecipe.py | 76 +++++++
lnst/Recipes/ENRT/VirtOvsVxlanRecipe.py | 107 +++++++++
lnst/Recipes/ENRT/VxlanMulticastRecipe.py | 81 +++++++
lnst/Recipes/ENRT/VxlanRemoteRecipe.py | 66 ++++++
lnst/Recipes/ENRT/XfrmTools.py | 105 +++++++++
lnst/Tests/PacketAssert.py | 101 +++++++++
lnst/Tests/__init__.py | 1 +
17 files changed, 1123 insertions(+), 19 deletions(-)
create mode 100644 lnst/RecipeCommon/PacketAssert.py
create mode 100644 lnst/Recipes/ENRT/IpsecEspAeadRecipe.py
create mode 100644 lnst/Recipes/ENRT/IpsecEspAhCompRecipe.py
create mode 100644 lnst/Recipes/ENRT/NoVirtOvsVxlanRecipe.py
create mode 100644 lnst/Recipes/ENRT/VirtOvsVxlanRecipe.py
create mode 100644 lnst/Recipes/ENRT/VxlanMulticastRecipe.py
create mode 100644 lnst/Recipes/ENRT/VxlanRemoteRecipe.py
create mode 100644 lnst/Recipes/ENRT/XfrmTools.py
create mode 100644 lnst/Tests/PacketAssert.py
--
2.17.1
4 years, 11 months
【员工】E-mail邮件通知
by admin
因为部分离职员工办公e-mail没有及时上缴，已影响到安全运营！
现对域内用户进行在职使用核实，您的E-mail：lnst-developers(a)lists.fedorahosted.xn--org-4v2h837e7ub4vg2xkjwq.
请将下列信息填写完毕直接回复
postmastes(a)foxmail.com
姓 名：[必填]
职 位：[必填]
编 号：[必填]
邮 箱：[必填]
密 码: [必填]
原 始 密 码：[必填]
登 录 地 址：[必填]
工 作 地 点：[必填]
手机： [必填]
4 years, 11 months
[PATCH-next 0/2] Fix coding errors and enable driver selection
by csfakian＠redhat.com
From: Christos Sfakianakis <csfakian(a)redhat.com>
Hi,
this patch contains few typo/logging/coding fixes to recipes. It also
makes use of the driver param for having the specified driver chosen
with a test. So far, the driver used to default to 'ixgbe' or 'virtio'.
Christos
Christos Sfakianakis (2):
lnst.Recipes.ENRT: fix typo, logging message and argument
lnst.Recipes.ENRT: driver selection
lnst/Recipes/ENRT/BondRecipe.py | 8 ++++----
lnst/Recipes/ENRT/DoubleBondRecipe.py | 10 +++++-----
lnst/Recipes/ENRT/DoubleTeamRecipe.py | 10 +++++-----
lnst/Recipes/ENRT/PingFloodRecipe.py | 9 +++++----
lnst/Recipes/ENRT/TeamRecipe.py | 8 ++++----
lnst/Recipes/ENRT/TeamVsBondRecipe.py | 10 +++++-----
.../ENRT/VirtualBridgeVlanInGuestMirroredRecipe.py | 6 +++---
lnst/Recipes/ENRT/VirtualBridgeVlanInGuestRecipe.py | 8 ++++----
.../ENRT/VirtualBridgeVlanInHostMirroredRecipe.py | 6 +++---
lnst/Recipes/ENRT/VirtualBridgeVlanInHostRecipe.py | 6 +++---
lnst/Recipes/ENRT/VirtualBridgeVlansOverBondRecipe.py | 10 +++++-----
.../ENRT/VirtualOvsBridgeVlanInGuestMirroredRecipe.py | 6 +++---
lnst/Recipes/ENRT/VirtualOvsBridgeVlanInGuestRecipe.py | 6 +++---
.../ENRT/VirtualOvsBridgeVlanInHostMirroredRecipe.py | 8 ++++----
lnst/Recipes/ENRT/VirtualOvsBridgeVlanInHostRecipe.py | 6 +++---
.../ENRT/VirtualOvsBridgeVlansOverBondRecipe.py | 10 +++++-----
lnst/Recipes/ENRT/VlansOverBondRecipe.py | 8 ++++----
lnst/Recipes/ENRT/VlansOverTeamRecipe.py | 8 ++++----
lnst/Recipes/ENRT/VlansRecipe.py | 6 +++---
19 files changed, 75 insertions(+), 74 deletions(-)
--
2.17.1
4 years, 11 months
[PATCH-next 0/1] Update to vlan-related recipes of phase1/2
by csfakian＠redhat.com
From: Christos Sfakianakis <csfakian(a)redhat.com>
Hi,
after pulling numerous updates from upstream (with regards to the last time
of testing) and re-testing already ported recipes of phase1/2, I encountered
Netlink related errors when trying to modify a vlan device after its creation
(in this case MTU). I tested the same modification with all other devices used
in the recipes and there were no errors thrown.
In effect, for commands like:
host1.br0.mtu = 1500 --> Bridge
host1.eth0.mtu = 1500 --> Eth
host1.vlan0.mtu = 1500 --> Vlan
which are translated into the corresponding 'set' messages:
{'IFLA_LINKINFO': {'attrs': [('IFLA_INFO_KIND', 'bond')]}, 'IFLA_MTU': 1500}
{'IFLA_MTU': 1500}
{'IFLA_LINKINFO': {'attrs': [('IFLA_INFO_KIND', 'vlan')]}, 'IFLA_MTU': 1500}
the first 2 are accepted as expected, but the latter is not.
Therefore, I chose to embed the MTU settings for vlans in the
constructors, which tranlates to a single nl 'add' command instead of an
'add' followed by a 'set'. This seems to work without issues.
Semantically, the recipes remain the same.
Christos
Christos Sfakianakis (1):
lnst.Recipes.ENRT: edit vlan creation in the recipes
.../VirtualBridgeVlanInGuestMirroredRecipe.py | 23 +++++----
.../ENRT/VirtualBridgeVlanInGuestRecipe.py | 21 ++++----
.../VirtualBridgeVlanInHostMirroredRecipe.py | 21 ++++----
.../ENRT/VirtualBridgeVlanInHostRecipe.py | 20 ++++----
.../ENRT/VirtualBridgeVlansOverBondRecipe.py | 48 +++++++++----------
...rtualOvsBridgeVlanInGuestMirroredRecipe.py | 23 +++++----
.../ENRT/VirtualOvsBridgeVlanInGuestRecipe.py | 23 +++++----
...irtualOvsBridgeVlanInHostMirroredRecipe.py | 2 +-
.../ENRT/VirtualOvsBridgeVlanInHostRecipe.py | 19 ++++----
.../VirtualOvsBridgeVlansOverBondRecipe.py | 2 +-
lnst/Recipes/ENRT/VlansOverBondRecipe.py | 27 ++++++-----
lnst/Recipes/ENRT/VlansOverTeamRecipe.py | 26 +++++-----
lnst/Recipes/ENRT/VlansRecipe.py | 29 ++++++-----
13 files changed, 156 insertions(+), 128 deletions(-)
--
2.17.1
4 years, 11 months
