1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
|
// Copyright (C) 2014-2015 Internet Systems Consortium, Inc. ("ISC")
//
// Permission to use, copy, modify, and/or distribute this software for any
// purpose with or without fee is hereby granted, provided that the above
// copyright notice and this permission notice appear in all copies.
//
// THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
// AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
// OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
// PERFORMANCE OF THIS SOFTWARE.
#include <config.h>
#include <dhcp/tests/iface_mgr_test_config.h>
#include <dhcp/option6_client_fqdn.h>
#include <dhcp6/tests/dhcp6_test_utils.h>
#include <dhcp6/tests/dhcp6_client.h>
#include <dhcpsrv/cfgmgr.h>
#include <dhcpsrv/d2_client_mgr.h>
#include <asiolink/io_address.h>
#include <stats/stats_mgr.h>
using namespace isc;
using namespace isc::dhcp;
using namespace isc::dhcp::test;
namespace {
/// @brief Set of JSON configurations used by the SARR unit tests.
///
/// - Configuration 0:
/// - one subnet 3000::/32 used on eth0 interface
/// - prefixes of length 64, delegated from the pool: 2001:db8:3::/48
/// - the delegated prefix was intentionally selected to not match the
/// subnet prefix, to test that the delegated prefix doesn't need to
/// match the subnet prefix
///
/// - Configuration 1:
/// - two subnets 2001:db8:1::/48 and 2001:db8:2::/48
/// - first subnet assigned to interface eth0, another one assigned to eth1
/// - one pool for subnet in a range of 2001:db8:X::1 - 2001:db8:X::10,
/// where X is 1 or 2
/// - enables Rapid Commit for the first subnet and disables for the second
/// one
/// - DNS updates enabled
///
const char* CONFIGS[] = {
// Configuration 0
"{ \"interfaces-config\": {"
" \"interfaces\": [ \"*\" ]"
"},"
"\"preferred-lifetime\": 3000,"
"\"rebind-timer\": 2000, "
"\"renew-timer\": 1000, "
"\"subnet6\": [ { "
" \"pd-pools\": ["
" { \"prefix\": \"2001:db8:3::\", "
" \"prefix-len\": 48, "
" \"delegated-len\": 64"
" } ],"
" \"subnet\": \"3000::/32\", "
" \"interface-id\": \"\","
" \"interface\": \"eth0\""
" } ],"
"\"valid-lifetime\": 4000 }",
// Configuration 1
"{ \"interfaces-config\": {"
" \"interfaces\": [ \"*\" ]"
"},"
"\"preferred-lifetime\": 3000,"
"\"rebind-timer\": 2000, "
"\"renew-timer\": 1000, "
"\"subnet6\": [ { "
" \"pools\": [ { \"pool\": \"2001:db8:1::1 - 2001:db8:1::10\" } ],"
" \"subnet\": \"2001:db8:1::/48\", "
" \"interface\": \"eth0\","
" \"rapid-commit\": True"
" },"
" {"
" \"pools\": [ { \"pool\": \"2001:db8:2::1 - 2001:db8:2::10\" } ],"
" \"subnet\": \"2001:db8:2::/48\", "
" \"interface\": \"eth1\","
" \"rapid-commit\": False"
" } ],"
"\"valid-lifetime\": 4000,"
" \"dhcp-ddns\" : {"
" \"enable-updates\" : True, "
" \"qualifying-suffix\" : \"example.com\" }"
"}"
};
/// @brief Test fixture class for testing 4-way exchange: Solicit-Advertise,
/// Request-Reply and 2-way exchange: Solicit-Reply.
class SARRTest : public Dhcpv6SrvTest {
public:
/// @brief Constructor.
///
/// Sets up fake interfaces.
SARRTest()
: Dhcpv6SrvTest(),
iface_mgr_test_config_(true) {
// Let's wipe all existing statistics.
isc::stats::StatsMgr::instance().removeAll();
}
/// @brief Destructor.
///
/// Clear the DHCP-DDNS configuration.
virtual ~SARRTest() {
D2ClientConfigPtr cfg(new D2ClientConfig());
CfgMgr::instance().setD2ClientConfig(cfg);
// Let's wipe all existing statistics.
isc::stats::StatsMgr::instance().removeAll();
}
/// @brief Interface Manager's fake configuration control.
IfaceMgrTestConfig iface_mgr_test_config_;
};
/// Check that server processes correctly a prefix hint sent by the client.
/// This test checks that the server doesn't allocate colliding prefixes
/// as a result of receiving hints from two clients which set the
/// non-significant bytes of the prefix in their hints. The server should zero
/// the non-significant bytes of the hint and allocate the prefix of the
/// correct (configured) length.
TEST_F(SARRTest, directClientPrefixHint) {
Dhcp6Client client;
// Configure client to request IA_PD.
client.usePD();
configure(CONFIGS[0], *client.getServer());
// Make sure we ended-up having expected number of subnets configured.
const Subnet6Collection* subnets = CfgMgr::instance().getCurrentCfg()->
getCfgSubnets6()->getAll();
ASSERT_EQ(1, subnets->size());
// Append IAPREFIX option to the client's message.
ASSERT_NO_THROW(client.useHint(100, 200, 64, "2001:db8:3:33::33"));
// Perform 4-way exchange.
ASSERT_NO_THROW(client.doSARR());
// Server should have assigned a prefix.
ASSERT_EQ(1, client.getLeaseNum());
Lease6 lease_client = client.getLease(0);
// The server should correctly deal with the least significant bytes
// of the hint being set. It should set them to zero and use the
// valid portion of the hint.
EXPECT_EQ("2001:db8:3:33::", lease_client.addr_.toText());
// Server ignores other parts of the IAPREFIX option.
EXPECT_EQ(64, lease_client.prefixlen_);
EXPECT_EQ(3000, lease_client.preferred_lft_);
EXPECT_EQ(4000, lease_client.valid_lft_);
Lease6Ptr lease_server = checkLease(lease_client);
// Check that the server recorded the lease.
ASSERT_TRUE(lease_server);
// Remove existing lease and modify the DUID of the client to simulate
// the case that different client is trying to get the prefix.
client.clearConfig();
client.modifyDUID();
// Use the hint with some least significant bytes set.
ASSERT_NO_THROW(client.useHint(100, 200, 64, "2001:db8:3:33::34"));
ASSERT_NO_THROW(client.doSARR());
// Server should assign a lease.
ASSERT_EQ(1, client.getLeaseNum());
lease_client = client.getLease(0);
// The hint collides with the existing lease, so the server should not
// assign for the second client.
EXPECT_NE("2001:db8:3:33::", lease_client.addr_.toText());
EXPECT_NE("2001:db8:3:33::34", lease_client.addr_.toText());
// Check that the assigned prefix belongs to the pool.
(*subnets)[0]->inPool(Lease::TYPE_PD, lease_client.addr_);
EXPECT_EQ(64, lease_client.prefixlen_);
EXPECT_EQ(3000, lease_client.preferred_lft_);
EXPECT_EQ(4000, lease_client.valid_lft_);
lease_server = checkLease(lease_client);
ASSERT_TRUE(lease_server);
}
// Check that when the client includes the Rapid Commit option in its
// Solicit, the server responds with Reply and commits the lease.
TEST_F(SARRTest, rapidCommitEnable) {
Dhcp6Client client;
// Configure client to request IA_NA
client.useNA();
configure(CONFIGS[1], *client.getServer());
ASSERT_NO_THROW(client.getServer()->startD2());
// Make sure we ended-up having expected number of subnets configured.
const Subnet6Collection* subnets = CfgMgr::instance().getCurrentCfg()->
getCfgSubnets6()->getAll();
ASSERT_EQ(2, subnets->size());
// Perform 2-way exchange.
client.useRapidCommit(true);
// Include FQDN to trigger generation of name change requests.
ASSERT_NO_THROW(client.useFQDN(Option6ClientFqdn::FLAG_S,
"client-name.example.org",
Option6ClientFqdn::FULL));
ASSERT_NO_THROW(client.doSolicit());
// Server should have committed a lease.
ASSERT_EQ(1, client.getLeaseNum());
Lease6 lease_client = client.getLease(0);
// Make sure that the address belongs to the subnet configured.
ASSERT_TRUE(CfgMgr::instance().getCurrentCfg()->getCfgSubnets6()->
selectSubnet(lease_client.addr_, ClientClasses()));
// Make sure that the server responded with Reply.
ASSERT_TRUE(client.getContext().response_);
EXPECT_EQ(DHCPV6_REPLY, client.getContext().response_->getType());
// Rapid Commit option should be included.
EXPECT_TRUE(client.getContext().response_->getOption(D6O_RAPID_COMMIT));
// Check that the lease has been committed.
Lease6Ptr lease_server = checkLease(lease_client);
EXPECT_TRUE(lease_server);
// There should be one name change request generated.
EXPECT_EQ(1, CfgMgr::instance().getD2ClientMgr().getQueueSize());
}
// Check that the server responds with Advertise if the client hasn't
// included the Rapid Commit option in the Solicit.
TEST_F(SARRTest, rapidCommitNoOption) {
Dhcp6Client client;
// Configure client to request IA_NA
client.useNA();
configure(CONFIGS[1], *client.getServer());
ASSERT_NO_THROW(client.getServer()->startD2());
// Make sure we ended-up having expected number of subnets configured.
const Subnet6Collection* subnets = CfgMgr::instance().getCurrentCfg()->
getCfgSubnets6()->getAll();
ASSERT_EQ(2, subnets->size());
// Include FQDN to test that the server will not create name change
// requests when it sends Advertise (Rapid Commit disabled).
ASSERT_NO_THROW(client.useFQDN(Option6ClientFqdn::FLAG_S,
"client-name.example.org",
Option6ClientFqdn::FULL));
ASSERT_NO_THROW(client.doSolicit());
// There should be no lease because the server should have responded
// with Advertise.
ASSERT_EQ(0, client.getLeaseNum());
// Make sure that the server responded.
ASSERT_TRUE(client.getContext().response_);
EXPECT_EQ(DHCPV6_ADVERTISE, client.getContext().response_->getType());
// Make sure that the Rapid Commit option is not included.
EXPECT_FALSE(client.getContext().response_->getOption(D6O_RAPID_COMMIT));
// There should be no name change request generated.
EXPECT_EQ(0, CfgMgr::instance().getD2ClientMgr().getQueueSize());
}
// Check that when the Rapid Commit support is disabled for the subnet
// the server replies with an Advertise and ignores the Rapid Commit
// option sent by the client.
TEST_F(SARRTest, rapidCommitDisable) {
Dhcp6Client client;
// The subnet assigned to eth1 has Rapid Commit disabled.
client.setInterface("eth1");
// Configure client to request IA_NA
client.useNA();
configure(CONFIGS[1], *client.getServer());
ASSERT_NO_THROW(client.getServer()->startD2());
// Make sure we ended-up having expected number of subnets configured.
const Subnet6Collection* subnets = CfgMgr::instance().getCurrentCfg()->
getCfgSubnets6()->getAll();
ASSERT_EQ(2, subnets->size());
// Send Rapid Commit option to the server.
client.useRapidCommit(true);
// Include FQDN to test that the server will not create name change
// requests when it sends Advertise (Rapid Commit disabled).
ASSERT_NO_THROW(client.useFQDN(Option6ClientFqdn::FLAG_S,
"client-name.example.org",
Option6ClientFqdn::FULL));
ASSERT_NO_THROW(client.doSolicit());
// There should be no lease because the server should have responded
// with Advertise.
ASSERT_EQ(0, client.getLeaseNum());
// Make sure that the server responded.
ASSERT_TRUE(client.getContext().response_);
EXPECT_EQ(DHCPV6_ADVERTISE, client.getContext().response_->getType());
// Make sure that the Rapid Commit option is not included.
EXPECT_FALSE(client.getContext().response_->getOption(D6O_RAPID_COMMIT));
// There should be no name change request generated.
EXPECT_EQ(0, CfgMgr::instance().getD2ClientMgr().getQueueSize());
}
// This test verifies that regular Solicit/Adv/Request/Reply exchange will
// result in appropriately set statistics.
TEST_F(SARRTest, sarrStats) {
// Let's use one of the existing configurations and tell the client to
// ask for an address.
Dhcp6Client client;
configure(CONFIGS[1], *client.getServer());
client.setInterface("eth1");
client.useNA();
// Make sure we ended-up having expected number of subnets configured.
const Subnet6Collection* subnets = CfgMgr::instance().getCurrentCfg()->
getCfgSubnets6()->getAll();
ASSERT_EQ(2, subnets->size());
// Ok, let's check the statistics. None should be present.
using namespace isc::stats;
StatsMgr& mgr = StatsMgr::instance();
ObservationPtr pkt6_rcvd = mgr.getObservation("pkt6-received");
ObservationPtr pkt6_solicit_rcvd = mgr.getObservation("pkt6-solicit-received");
ObservationPtr pkt6_adv_sent = mgr.getObservation("pkt6-advertise-sent");
ObservationPtr pkt6_request_rcvd = mgr.getObservation("pkt6-request-received");
ObservationPtr pkt6_reply_sent = mgr.getObservation("pkt6-reply-sent");
ObservationPtr pkt6_sent = mgr.getObservation("pkt6-sent");
EXPECT_FALSE(pkt6_rcvd);
EXPECT_FALSE(pkt6_solicit_rcvd);
EXPECT_FALSE(pkt6_adv_sent);
EXPECT_FALSE(pkt6_request_rcvd);
EXPECT_FALSE(pkt6_reply_sent);
EXPECT_FALSE(pkt6_sent);
// Perform 4-way exchange.
ASSERT_NO_THROW(client.doSARR());
// Server should have assigned a prefix.
ASSERT_EQ(1, client.getLeaseNum());
// All expected statstics must be present now.
pkt6_rcvd = mgr.getObservation("pkt6-received");
pkt6_solicit_rcvd = mgr.getObservation("pkt6-solicit-received");
pkt6_adv_sent = mgr.getObservation("pkt6-advertise-sent");
pkt6_request_rcvd = mgr.getObservation("pkt6-request-received");
pkt6_reply_sent = mgr.getObservation("pkt6-reply-sent");
pkt6_sent = mgr.getObservation("pkt6-sent");
ASSERT_TRUE(pkt6_rcvd);
ASSERT_TRUE(pkt6_solicit_rcvd);
ASSERT_TRUE(pkt6_adv_sent);
ASSERT_TRUE(pkt6_request_rcvd);
ASSERT_TRUE(pkt6_reply_sent);
ASSERT_TRUE(pkt6_sent);
// They also must have expected values.
EXPECT_EQ(2, pkt6_rcvd->getInteger().first);
EXPECT_EQ(1, pkt6_solicit_rcvd->getInteger().first);
EXPECT_EQ(1, pkt6_adv_sent->getInteger().first);
EXPECT_EQ(1, pkt6_request_rcvd->getInteger().first);
EXPECT_EQ(1, pkt6_reply_sent->getInteger().first);
EXPECT_EQ(2, pkt6_sent->getInteger().first);
}
// This test verifies that pkt6-receive-drop is increased properly when the
// client's packet is rejected due to mismatched server-id value.
TEST_F(SARRTest, pkt6ReceiveDropStat1) {
// Dummy server-id (0xff repeated 10 times)
std::vector<uint8_t> data(10, 0xff);
OptionPtr bogus_srv_id(new Option(Option::V6, D6O_SERVERID, data));
// Let's use one of the existing configurations and tell the client to
// ask for an address.
Dhcp6Client client;
configure(CONFIGS[1], *client.getServer());
client.setInterface("eth1");
client.useNA();
client.doSolicit();
client.useServerId(bogus_srv_id);
client.doRequest();
// Ok, let's check the statistic. pkt6-receive-drop should be set to 1.
using namespace isc::stats;
StatsMgr& mgr = StatsMgr::instance();
ObservationPtr pkt6_recv_drop = mgr.getObservation("pkt6-receive-drop");
ASSERT_TRUE(pkt6_recv_drop);
EXPECT_EQ(1, pkt6_recv_drop->getInteger().first);
}
// This test verifies that pkt6-receive-drop is increased properly when the
// client's packet is rejected due to being unicast communication.
TEST_F(SARRTest, pkt6ReceiveDropStat2) {
// Let's use one of the existing configurations and tell the client to
// ask for an address.
Dhcp6Client client;
configure(CONFIGS[1], *client.getServer());
client.setInterface("eth1");
client.useNA();
client.setDestAddress(asiolink::IOAddress("2001:db8::1")); // Pretend it's unicast
client.doSolicit();
// Ok, let's check the statistic. pkt6-receive-drop should be set to 1.
using namespace isc::stats;
StatsMgr& mgr = StatsMgr::instance();
ObservationPtr pkt6_recv_drop = mgr.getObservation("pkt6-receive-drop");
ASSERT_TRUE(pkt6_recv_drop);
EXPECT_EQ(1, pkt6_recv_drop->getInteger().first);
}
// This test verifies that pkt6-receive-drop is increased properly when the
// client's packet is rejected due to having too many client-id options
// (exactly one is expected).
TEST_F(SARRTest, pkt6ReceiveDropStat3) {
// Let's use one of the existing configurations and tell the client to
// ask for an address.
Dhcp6Client client;
configure(CONFIGS[1], *client.getServer());
client.setInterface("eth1");
client.useNA();
// Let's send our client-id as server-id. That will result in the
// packet containing the client-id twice. That should cause RFCViolation
// exception.
client.useServerId(client.getClientId());
client.doSolicit();
// Ok, let's check the statistic. pkt6-receive-drop should be set to 1.
using namespace isc::stats;
StatsMgr& mgr = StatsMgr::instance();
ObservationPtr pkt6_recv_drop = mgr.getObservation("pkt6-receive-drop");
ASSERT_TRUE(pkt6_recv_drop);
EXPECT_EQ(1, pkt6_recv_drop->getInteger().first);
}
} // end of anonymous namespace
|