2.68. test_ipsec_esp module

class test_ipsec_esp.ConfigIpsecESP(methodName='runTest')

Bases: template_ipsec.TemplateIpsec

config_esp_tra(params)
config_esp_tun(params)
config_network(params)
encryption_type
setUp()

Clear trace before running each test

classmethod setUpClass()

Perform class setup before running the testcase Remove shared memory files, start vpp and connect the vpp-api

tearDown()

Show various debug prints after each test

classmethod tearDownClass()

Perform final cleanup after running all tests in this test-case

tra4_decrypt_node_name = ['esp4-decrypt', 'esp4-decrypt-post']
tra4_encrypt_node_name = 'esp4-encrypt'
tra6_decrypt_node_name = ['esp6-decrypt', 'esp6-decrypt-post']
tra6_encrypt_node_name = 'esp6-encrypt'
tun4_decrypt_node_name = ['esp4-decrypt', 'esp4-decrypt-post']
tun4_encrypt_node_name = 'esp4-encrypt'
tun6_decrypt_node_name = ['esp6-decrypt', 'esp6-decrypt-post']
tun6_encrypt_node_name = 'esp6-encrypt'
unconfig_network()
class test_ipsec_esp.MyParameters

Bases: object

class test_ipsec_esp.RunTestIpsecEspAll(methodName='runTest')

Bases: test_ipsec_esp.ConfigIpsecESP, template_ipsec.IpsecTra4, template_ipsec.IpsecTra6, template_ipsec.IpsecTun4, template_ipsec.IpsecTun6

Ipsec ESP all Algos

run_a_test(engine, flag, algo, payload_size=None)
run_test()
setUp()

Clear trace before running each test

classmethod setUpConstants()

Set-up the test case class based on environment variables

tearDown()

Show various debug prints after each test

class test_ipsec_esp.TemplateIpsecEsp(methodName='runTest')

Bases: test_ipsec_esp.ConfigIpsecESP

Basic test for ipsec esp sanity - tunnel and transport modes.

Below 4 cases are covered as part of this test 1) ipsec esp v4 transport basic test - IPv4 Transport mode

scenario using HMAC-SHA1-96 integrity algo

  1. ipsec esp v4 transport burst test

    Above test for 257 pkts

  2. ipsec esp 4o4 tunnel basic test - IPv4 Tunnel mode

    scenario using HMAC-SHA1-96 integrity algo

  3. ipsec esp 4o4 tunnel burst test

    Above test for 257 pkts

TRANSPORT MODE:

— encrypt —

|pg2| <——-> |VPP|

— decrypt —

TUNNEL MODE:

— encrypt — plain —

|pg0| <——- |VPP| <—— |pg1|

— — —

— decrypt — plain —

|pg0| ——-> |VPP| ——> |pg1|

— — —

setUp()

Clear trace before running each test

classmethod setUpClass()

Perform class setup before running the testcase Remove shared memory files, start vpp and connect the vpp-api

tearDown()

Show various debug prints after each test

classmethod tearDownClass()

Perform final cleanup after running all tests in this test-case

class test_ipsec_esp.TemplateIpsecEspUdp(methodName='runTest')

Bases: test_ipsec_esp.ConfigIpsecESP

UDP encapped ESP

setUp()

Clear trace before running each test

classmethod setUpClass()

Perform class setup before running the testcase Remove shared memory files, start vpp and connect the vpp-api

show_commands_at_teardown()

Allow subclass specific teardown logging additions.

tearDown()

Show various debug prints after each test

classmethod tearDownClass()

Perform final cleanup after running all tests in this test-case

class test_ipsec_esp.TestIpsecEsp1(methodName='runTest')

Bases: test_ipsec_esp.TemplateIpsecEsp, template_ipsec.IpsecTra46Tests, template_ipsec.IpsecTun46Tests, template_ipsec.IpsecTra6ExtTests

Ipsec ESP - TUN & TRA tests

setUp()

Clear trace before running each test

classmethod setUpClass()

Perform class setup before running the testcase Remove shared memory files, start vpp and connect the vpp-api

tearDown()

Show various debug prints after each test

classmethod tearDownClass()

Perform final cleanup after running all tests in this test-case

test_tun_46()

ipsec 4o6 tunnel

test_tun_64()

ipsec 6o4 tunnel

class test_ipsec_esp.TestIpsecEsp2(methodName='runTest')

Bases: test_ipsec_esp.TemplateIpsecEsp, template_ipsec.IpsecTcpTests

Ipsec ESP - TCP tests

class test_ipsec_esp.TestIpsecEspAsync(methodName='runTest')

Bases: test_ipsec_esp.TemplateIpsecEsp

Ipsec ESP - Aysnc tests

setUp()

Clear trace before running each test

test_dual_stream()

Alternating SAs

test_sync_async_noop_stream()

Alternating SAs sync/async/noop

vpp_worker_count = 2
class test_ipsec_esp.TestIpsecEspHandoff(methodName='runTest')

Bases: test_ipsec_esp.TemplateIpsecEsp, template_ipsec.IpsecTun6HandoffTests, template_ipsec.IpsecTun4HandoffTests

Ipsec ESP - handoff tests

class test_ipsec_esp.TestIpsecEspTun(methodName='runTest')

Bases: test_ipsec_esp.TemplateIpsecEsp, template_ipsec.IpsecTun46Tests

Ipsec ESP - TUN encap tests

gen_pkts(sw_intf, src, dst, count=1, payload_size=54)
gen_pkts6(p, sw_intf, src, dst, count=1, payload_size=54)
setUp()

Clear trace before running each test

verify_encrypted(p, sa, rxs)
verify_encrypted6(p, sa, rxs)
class test_ipsec_esp.TestIpsecEspTun2(methodName='runTest')

Bases: test_ipsec_esp.TemplateIpsecEsp, template_ipsec.IpsecTun46Tests

Ipsec ESP - TUN DSCP tests

gen_pkts(sw_intf, src, dst, count=1, payload_size=54)
gen_pkts6(p, sw_intf, src, dst, count=1, payload_size=54)
setUp()

Clear trace before running each test

verify_encrypted(p, sa, rxs)
verify_encrypted6(p, sa, rxs)
class test_ipsec_esp.TestIpsecEspUdp(methodName='runTest')

Bases: test_ipsec_esp.TemplateIpsecEspUdp, template_ipsec.IpsecTra4Tests

Ipsec NAT-T ESP UDP tests

class test_ipsec_esp.Test_async_ESN_AES_CBC_192_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

async ESN AES-CBC-192/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_async_ESN_AES_CBC_256_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

async ESN AES-CBC-256/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_async_noESN_AES_CBC_192_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

async noESN AES-CBC-192/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_async_noESN_AES_CBC_256_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

async noESN AES-CBC-256/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_async_noESN_AES_GCM_128_NONE(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

async noESN AES-GCM-128/NONE IPSec test

test_ipsec()
class test_ipsec_esp.Test_async_noESN_AES_GCM_192_NONE(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

async noESN AES-GCM-192/NONE IPSec test

test_ipsec()
class test_ipsec_esp.Test_async_noESN_AES_GCM_256_NONE(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

async noESN AES-GCM-256/NONE IPSec test

test_ipsec()
class test_ipsec_esp.Test_ipsecmb_ESN_3DES_CBC_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

ipsecmb ESN 3DES-CBC/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_ipsecmb_ESN_AES_CBC_128_MD5_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

ipsecmb ESN AES-CBC-128/MD5-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_ipsecmb_ESN_AES_CBC_192_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

ipsecmb ESN AES-CBC-192/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_ipsecmb_ESN_AES_CBC_256_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

ipsecmb ESN AES-CBC-256/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_ipsecmb_ESN_AES_CTR_128_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

ipsecmb ESN AES-CTR-128/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_ipsecmb_ESN_AES_CTR_192_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

ipsecmb ESN AES-CTR-192/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_ipsecmb_ESN_AES_CTR_256_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

ipsecmb ESN AES-CTR-256/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_ipsecmb_ESN_NONE_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

ipsecmb ESN NONE/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_ipsecmb_noESN_3DES_CBC_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

ipsecmb noESN 3DES-CBC/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_ipsecmb_noESN_AES_CBC_128_MD5_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

ipsecmb noESN AES-CBC-128/MD5-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_ipsecmb_noESN_AES_CBC_192_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

ipsecmb noESN AES-CBC-192/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_ipsecmb_noESN_AES_CBC_256_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

ipsecmb noESN AES-CBC-256/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_ipsecmb_noESN_AES_CTR_128_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

ipsecmb noESN AES-CTR-128/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_ipsecmb_noESN_AES_CTR_192_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

ipsecmb noESN AES-CTR-192/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_ipsecmb_noESN_AES_CTR_256_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

ipsecmb noESN AES-CTR-256/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_ipsecmb_noESN_AES_GCM_128_NONE(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

ipsecmb noESN AES-GCM-128/NONE IPSec test

test_ipsec()
class test_ipsec_esp.Test_ipsecmb_noESN_AES_GCM_192_NONE(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

ipsecmb noESN AES-GCM-192/NONE IPSec test

test_ipsec()
class test_ipsec_esp.Test_ipsecmb_noESN_AES_GCM_256_NONE(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

ipsecmb noESN AES-GCM-256/NONE IPSec test

test_ipsec()
class test_ipsec_esp.Test_ipsecmb_noESN_NONE_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

ipsecmb noESN NONE/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_native_ESN_3DES_CBC_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

native ESN 3DES-CBC/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_native_ESN_AES_CBC_128_MD5_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

native ESN AES-CBC-128/MD5-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_native_ESN_AES_CBC_192_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

native ESN AES-CBC-192/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_native_ESN_AES_CBC_256_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

native ESN AES-CBC-256/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_native_ESN_AES_CTR_128_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

native ESN AES-CTR-128/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_native_ESN_AES_CTR_192_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

native ESN AES-CTR-192/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_native_ESN_AES_CTR_256_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

native ESN AES-CTR-256/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_native_ESN_NONE_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

native ESN NONE/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_native_noESN_3DES_CBC_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

native noESN 3DES-CBC/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_native_noESN_AES_CBC_128_MD5_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

native noESN AES-CBC-128/MD5-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_native_noESN_AES_CBC_192_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

native noESN AES-CBC-192/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_native_noESN_AES_CBC_256_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

native noESN AES-CBC-256/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_native_noESN_AES_CTR_128_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

native noESN AES-CTR-128/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_native_noESN_AES_CTR_192_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

native noESN AES-CTR-192/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_native_noESN_AES_CTR_256_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

native noESN AES-CTR-256/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_native_noESN_AES_GCM_128_NONE(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

native noESN AES-GCM-128/NONE IPSec test

test_ipsec()
class test_ipsec_esp.Test_native_noESN_AES_GCM_192_NONE(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

native noESN AES-GCM-192/NONE IPSec test

test_ipsec()
class test_ipsec_esp.Test_native_noESN_AES_GCM_256_NONE(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

native noESN AES-GCM-256/NONE IPSec test

test_ipsec()
class test_ipsec_esp.Test_native_noESN_NONE_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

native noESN NONE/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_openssl_ESN_3DES_CBC_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

openssl ESN 3DES-CBC/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_openssl_ESN_AES_CBC_128_MD5_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

openssl ESN AES-CBC-128/MD5-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_openssl_ESN_AES_CBC_192_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

openssl ESN AES-CBC-192/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_openssl_ESN_AES_CBC_256_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

openssl ESN AES-CBC-256/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_openssl_ESN_AES_CTR_128_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

openssl ESN AES-CTR-128/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_openssl_ESN_AES_CTR_192_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

openssl ESN AES-CTR-192/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_openssl_ESN_AES_CTR_256_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

openssl ESN AES-CTR-256/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_openssl_ESN_NONE_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

openssl ESN NONE/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_openssl_noESN_3DES_CBC_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

openssl noESN 3DES-CBC/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_openssl_noESN_AES_CBC_128_MD5_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

openssl noESN AES-CBC-128/MD5-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_openssl_noESN_AES_CBC_192_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

openssl noESN AES-CBC-192/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_openssl_noESN_AES_CBC_256_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

openssl noESN AES-CBC-256/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_openssl_noESN_AES_CTR_128_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

openssl noESN AES-CTR-128/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_openssl_noESN_AES_CTR_192_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

openssl noESN AES-CTR-192/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_openssl_noESN_AES_CTR_256_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

openssl noESN AES-CTR-256/SHA1-96 IPSec test

test_ipsec()
class test_ipsec_esp.Test_openssl_noESN_AES_GCM_128_NONE(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

openssl noESN AES-GCM-128/NONE IPSec test

test_ipsec()
class test_ipsec_esp.Test_openssl_noESN_AES_GCM_192_NONE(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

openssl noESN AES-GCM-192/NONE IPSec test

test_ipsec()
class test_ipsec_esp.Test_openssl_noESN_AES_GCM_256_NONE(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

openssl noESN AES-GCM-256/NONE IPSec test

test_ipsec()
class test_ipsec_esp.Test_openssl_noESN_NONE_SHA1_96(methodName='runTest')

Bases: test_ipsec_esp.RunTestIpsecEspAll

openssl noESN NONE/SHA1-96 IPSec test

test_ipsec()