Skip to content

Commit

Permalink
005-rare-hello-fod: : containerlab-fod-freertr.sh updated
Browse files Browse the repository at this point in the history
  • Loading branch information
@dschmitz2017
dschmitz2017 committed Oct 11, 2023
1 parent c1c39d0 commit e3ed478
Showing 1 changed file with 42 additions and 35 deletions.
77 changes: 42 additions & 35 deletions lab/005-rare-hello-fod/containerlab-fod-freertr.sh
View file
Original file line number Diff line number Diff line change
Expand Up @@ -17,16 +17,22 @@ set -e
type -p containerlab || { echo "containerlab must be installed"; exit 1; }

echo "0.a." 1>&2
git clone https://github.com/rare-freertr/freeRtr-containerlab && cd ./freeRtr-containerlab/lab/005-rare-hello-fod
if [ ! -d ./freeRtr-containerlab/lab/005-rare-hello-fod ]; then
(set -x; git clone https://github.com/rare-freertr/freeRtr-containerlab && cd ./freeRtr-containerlab/lab/005-rare-hello-fod)
cd ./freeRtr-containerlab/lab/005-rare-hello-fod
else
(set -x; cd ./freeRtr-containerlab/lab/005-rare-hello-fod)
cd ./freeRtr-containerlab/lab/005-rare-hello-fod
fi

echo 1>&2
echo "0.b." 1>&2
containerlab destroy -t rtr005.clab.yml || true
containerlab deploy -t rtr005.clab.yml
(set -x; containerlab destroy -t rtr005.clab.yml || true)
(set -x; containerlab deploy --reconfigure -t rtr005.clab.yml)

echo 1>&2
echo "0.c." 1>&2
containerlab inspect -t rtr005.clab.yml # for later inspection, if needed
(set -x; containerlab inspect -t rtr005.clab.yml) # for later inspection, if needed

# really needed
set +x
Expand All @@ -44,11 +50,11 @@ echo "(freertr is already configured as needed by ./clab-rtr005/rtr1/run/conf/rt

echo 1>&2
echo "1.a. setup of hosts" 1>&2
docker exec -ti clab-rtr005-host1 ifconfig eth1 10.1.10.1 netmask 255.255.255.0
docker exec -ti clab-rtr005-host1 route add -net 10.2.10.0 netmask 255.255.255.0 gw 10.1.10.10
(set -x; docker exec -ti clab-rtr005-host1 ifconfig eth1 10.1.10.1 netmask 255.255.255.0)
(set -x; docker exec -ti clab-rtr005-host1 route add -net 10.2.10.0 netmask 255.255.255.0 gw 10.1.10.10)

docker exec -ti clab-rtr005-host2 ifconfig eth1 10.2.10.2 netmask 255.255.255.0
docker exec -ti clab-rtr005-host2 route add -net 10.1.10.0 netmask 255.255.255.0 gw 10.2.10.10
(set -x; docker exec -ti clab-rtr005-host2 ifconfig eth1 10.2.10.2 netmask 255.255.255.0)
(set -x; docker exec -ti clab-rtr005-host2 route add -net 10.1.10.0 netmask 255.255.255.0 gw 10.2.10.10)

##

Expand All @@ -59,16 +65,16 @@ echo 1>&2
echo "1.b.0. check freetrtr flowspec status/statistics (before unblocked ping):" 1>&2
#docker exec -ti clab-rtr005-rtr1 sh -c 'apt-get update && apt-get install netcat-traditional'
#docker exec -ti clab-rtr005-rtr1 sh -c '{ echo "show ipv4 bgp 1 flowspec database"; echo "show policy-map flowspec CORE ipv4"; echo exit; } | netcat 127.1 2323'
docker exec -ti clab-rtr005-rtr1 bash -c '{ echo "show ipv4 bgp 1 flowspec database"; echo "show policy-map flowspec CORE ipv4"; echo exit; } | (exec 3<>/dev/tcp/127.0.0.1/2323; cat >&3; cat <&3; exec 3<&-)'
(set -x; docker exec -ti clab-rtr005-rtr1 bash -c '{ echo "show ipv4 bgp 1 flowspec database"; echo "show policy-map flowspec CORE ipv4"; echo exit; } | (exec 3<>/dev/tcp/127.0.0.1/2323; cat >&3; cat <&3; exec 3<&-)')

echo 1>&2
echo "1.b.1 unblocked ping (FoD's exabgp not yet connected to freertr)" 1>&2
docker exec -ti clab-rtr005-host1 ping -c 5 10.2.10.2
#docker exec -ti clab-rtr005-host2 ping -c 5 10.1.10.1
(set -x; docker exec -ti clab-rtr005-host1 ping -c 5 10.2.10.2)
#(set -x; docker exec -ti clab-rtr005-host2 ping -c 5 10.1.10.1)

echo 1>&2
echo "1.b.2. check freetrtr flowspec status/statistics (after blocked ping):" 1>&2
docker exec -ti clab-rtr005-rtr1 bash -c '{ echo "show ipv4 bgp 1 flowspec database"; echo "show policy-map flowspec CORE ipv4"; echo exit; } | (exec 3<>/dev/tcp/127.0.0.1/2323; cat >&3; cat <&3; exec 3<&-)'
(set -x; docker exec -ti clab-rtr005-rtr1 bash -c '{ echo "show ipv4 bgp 1 flowspec database"; echo "show policy-map flowspec CORE ipv4"; echo exit; } | (exec 3<>/dev/tcp/127.0.0.1/2323; cat >&3; cat <&3; exec 3<&-)')

#

Expand All @@ -84,10 +90,11 @@ fi

echo 1>&2
echo "2. add peering of fod's exabg to freertr:" 1>&2
docker exec -ti clab-rtr005-fod1 ifconfig eth1 10.3.10.3/24
docker exec -ti clab-rtr005-fod1 ./exabgp/run-exabgp-generic --init-conf 10.3.10.3 10.3.10.3 1001 10.3.10.10 10.3.10.10 2001 -- --supervisord --restart

(set -x; docker exec -ti clab-rtr005-fod1 ifconfig eth1 10.3.10.3/24)
(set -x; docker exec -ti clab-rtr005-fod1 ./exabgp/run-exabgp-generic --init-conf 10.3.10.3 10.3.10.3 1001 10.3.10.10 10.3.10.10 2001 -- --supervisord --restart)
#to check the exabgp stdout:
docker exec -ti clab-rtr005-fod1 tail log/exabgp-stdout.log
sleep 1 && (set -x; docker exec -ti clab-rtr005-fod1 tail log/exabgp-stdout.log)

#

Expand All @@ -109,23 +116,23 @@ echo "3.a. test1.a: add blocking rule via BGP" 1>&2

echo 1>&2
echo "3.a.1.a. show exabgp current exported rules/routes (before adding the blocking rule):" 1>&2
docker exec -ti clab-rtr005-fod1 sh -c '. ./venv/bin/activate && exabgpcli show adj-rib out extensive'
(set -x; docker exec -ti clab-rtr005-fod1 sh -c '. ./venv/bin/activate && exabgpcli show adj-rib out extensive')

echo 1>&2
echo "3.a.1.b. show freertr flowspec status/statistics (before adding the blocking rule):" 1>&2
docker exec -ti clab-rtr005-rtr1 bash -c '{ echo "show ipv4 bgp 1 flowspec database"; echo "show policy-map flowspec CORE ipv4"; echo exit; } | (exec 3<>/dev/tcp/127.0.0.1/2323; cat >&3; cat <&3; exec 3<&-)'
(set -x; docker exec -ti clab-rtr005-rtr1 bash -c '{ echo "show ipv4 bgp 1 flowspec database"; echo "show policy-map flowspec CORE ipv4"; echo exit; } | (exec 3<>/dev/tcp/127.0.0.1/2323; cat >&3; cat <&3; exec 3<&-)')

echo 1>&2
echo "3.a.2. proper adding of blocking rule:" 1>&2
docker exec -ti clab-rtr005-fod1 ./inst/helpers/enable_rule.sh 10.1.10.1/32 10.2.10.2/32 1 1 # first parameter: src IP prefix; second parameter: dst IP prefix; last but one parameter: 1=icmp ; last parameter: 1=enable rule on router, i.e., push it now
(set -x; docker exec -ti clab-rtr005-fod1 ./inst/helpers/enable_rule.sh 10.1.10.1/32 10.2.10.2/32 1 1) # first parameter: src IP prefix; second parameter: dst IP prefix; last but one parameter: 1=icmp ; last parameter: 1=enable rule on router, i.e., push it now

echo 1>&2
echo "3.a.3.a. show exabgp current exported rules/routes (after adding the blocking rule):" 1>&2
docker exec -ti clab-rtr005-fod1 sh -c '. ./venv/bin/activate && exabgpcli show adj-rib out extensive'
(set -x; docker exec -ti clab-rtr005-fod1 sh -c '. ./venv/bin/activate && exabgpcli show adj-rib out extensive')

echo 1>&2
echo "3.a.3.b. show freertr flowspec status/statistics (after adding the blocking rule):" 1>&2
docker exec -ti clab-rtr005-rtr1 bash -c '{ echo "show ipv4 bgp 1 flowspec database"; echo "show policy-map flowspec CORE ipv4"; echo exit; } | (exec 3<>/dev/tcp/127.0.0.1/2323; cat >&3; cat <&3; exec 3<&-)'
(set -x; docker exec -ti clab-rtr005-rtr1 bash -c '{ echo "show ipv4 bgp 1 flowspec database"; echo "show policy-map flowspec CORE ipv4"; echo exit; } | (exec 3<>/dev/tcp/127.0.0.1/2323; cat >&3; cat <&3; exec 3<&-)')

#

Expand All @@ -144,20 +151,20 @@ echo "3.b. test1.b: perform ping to be blocked with status/statistics before and

echo 1>&2
echo "3.b.1. show exabgp current exported rules/routes:" 1>&2
docker exec -ti clab-rtr005-fod1 sh -c '. ./venv/bin/activate && exabgpcli show adj-rib out extensive'
(set -x; docker exec -ti clab-rtr005-fod1 sh -c '. ./venv/bin/activate && exabgpcli show adj-rib out extensive')

echo 1>&2
echo "3.b.2. show freertr flowspec status/statistics (before ping to be blocked):" 1>&2
docker exec -ti clab-rtr005-rtr1 bash -c '{ echo "show ipv4 bgp 1 flowspec database"; echo "show policy-map flowspec CORE ipv4"; echo exit; } | (exec 3<>/dev/tcp/127.0.0.1/2323; cat >&3; cat <&3; exec 3<&-)'
(set -x; docker exec -ti clab-rtr005-rtr1 bash -c '{ echo "show ipv4 bgp 1 flowspec database"; echo "show policy-map flowspec CORE ipv4"; echo exit; } | (exec 3<>/dev/tcp/127.0.0.1/2323; cat >&3; cat <&3; exec 3<&-)')

echo 1>&2
echo "3.b.3. perform proper ping to be blocked:" 1>&2
! docker exec -ti clab-rtr005-host1 ping -c 10 10.2.10.2
#! docker exec -ti clab-rtr005-host2 ping -c 10 10.1.10.1
(set -x; ! docker exec -ti clab-rtr005-host1 ping -c 10 10.2.10.2)
#(set -x; ! docker exec -ti clab-rtr005-host2 ping -c 10 10.1.10.1)

echo 1>&2
echo "3.b.4. show freertr flowspec status/statistics (after ping to be blocked):" 1>&2
docker exec -ti clab-rtr005-rtr1 bash -c '{ echo "show ipv4 bgp 1 flowspec database"; echo "show policy-map flowspec CORE ipv4"; echo exit; } | (exec 3<>/dev/tcp/127.0.0.1/2323; cat >&3; cat <&3; exec 3<&-)'
(set -x; docker exec -ti clab-rtr005-rtr1 bash -c '{ echo "show ipv4 bgp 1 flowspec database"; echo "show policy-map flowspec CORE ipv4"; echo exit; } | (exec 3<>/dev/tcp/127.0.0.1/2323; cat >&3; cat <&3; exec 3<&-)')

#

Expand All @@ -179,23 +186,23 @@ echo "4.a. test2.a: remove blocking rule via BGP" 1>&2

echo 1>&2
echo "4.a.1.a. show exabgp current exported rules/routes (before removing the blocking rule):" 1>&2
docker exec -ti clab-rtr005-fod1 sh -c '. ./venv/bin/activate && exabgpcli show adj-rib out extensive'
(set -x; docker exec -ti clab-rtr005-fod1 sh -c '. ./venv/bin/activate && exabgpcli show adj-rib out extensive')

echo 1>&2
echo "4.a.1.b. show freertr flowspec status/statistics (before removing the blocking rule):" 1>&2
docker exec -ti clab-rtr005-rtr1 bash -c '{ echo "show ipv4 bgp 1 flowspec database"; echo "show policy-map flowspec CORE ipv4"; echo exit; } | (exec 3<>/dev/tcp/127.0.0.1/2323; cat >&3; cat <&3; exec 3<&-)'
(set -x; docker exec -ti clab-rtr005-rtr1 bash -c '{ echo "show ipv4 bgp 1 flowspec database"; echo "show policy-map flowspec CORE ipv4"; echo exit; } | (exec 3<>/dev/tcp/127.0.0.1/2323; cat >&3; cat <&3; exec 3<&-)')

echo 1>&2
echo "4.a.2. proper removing of the blocking rule via BGP:" 1>&2
docker exec -ti clab-rtr005-fod1 ./inst/helpers/enable_rule.sh 10.1.10.1/32 10.2.10.2/32 1 0 # first parameter: src IP prefix; second parameter: dst IP prefix; last but one parameter: 1=icmp ; last parameter: 0=disable rule on router if it exists and is active or just create rule in INACTIVE state in FoD DB
(set -x; docker exec -ti clab-rtr005-fod1 ./inst/helpers/enable_rule.sh 10.1.10.1/32 10.2.10.2/32 1 0) # first parameter: src IP prefix; second parameter: dst IP prefix; last but one parameter: 1=icmp ; last parameter: 0=disable rule on router if it exists and is active or just create rule in INACTIVE state in FoD DB

echo 1>&2
echo "4.a.3.a. show exabgp current exported rules/routes (after removing the blocking rule):" 1>&2
docker exec -ti clab-rtr005-fod1 sh -c '. ./venv/bin/activate && exabgpcli show adj-rib out extensive'
(set -x; docker exec -ti clab-rtr005-fod1 sh -c '. ./venv/bin/activate && exabgpcli show adj-rib out extensive')

echo 1>&2
echo "4.a.3.b. show freertr flowspec status/statistics (after removing the blocking rule):" 1>&2
docker exec -ti clab-rtr005-rtr1 bash -c '{ echo "show ipv4 bgp 1 flowspec database"; echo "show policy-map flowspec CORE ipv4"; echo exit; } | (exec 3<>/dev/tcp/127.0.0.1/2323; cat >&3; cat <&3; exec 3<&-)'
(set -x; docker exec -ti clab-rtr005-rtr1 bash -c '{ echo "show ipv4 bgp 1 flowspec database"; echo "show policy-map flowspec CORE ipv4"; echo exit; } | (exec 3<>/dev/tcp/127.0.0.1/2323; cat >&3; cat <&3; exec 3<&-)')

#

Expand All @@ -214,20 +221,20 @@ echo "4.b. test2.b: perform ping NOT to be blocked with status/statistics before

echo 1>&2
echo "4.b.1. show exabgp current exported rules/routes:" 1>&2
docker exec -ti clab-rtr005-fod1 sh -c '. ./venv/bin/activate && exabgpcli show adj-rib out extensive'
(set -x; docker exec -ti clab-rtr005-fod1 sh -c '. ./venv/bin/activate && exabgpcli show adj-rib out extensive')

echo 1>&2
echo "4.b.2. show freertr flowspec status/statistics (before ping NOT to be blocked):" 1>&2
docker exec -ti clab-rtr005-rtr1 bash -c '{ echo "show ipv4 bgp 1 flowspec database"; echo "show policy-map flowspec CORE ipv4"; echo exit; } | (exec 3<>/dev/tcp/127.0.0.1/2323; cat >&3; cat <&3; exec 3<&-)'
(set -x; docker exec -ti clab-rtr005-rtr1 bash -c '{ echo "show ipv4 bgp 1 flowspec database"; echo "show policy-map flowspec CORE ipv4"; echo exit; } | (exec 3<>/dev/tcp/127.0.0.1/2323; cat >&3; cat <&3; exec 3<&-)')

echo 1>&2
echo "4.b.3. proper ping NOT to be blocked:" 1>&2
docker exec -ti clab-rtr005-host1 ping -c 10 10.2.10.2
#docker exec -ti clab-rtr005-host2 ping -c 10 10.1.10.1
(set -x; docker exec -ti clab-rtr005-host1 ping -c 10 10.2.10.2)
#(set -x; docker exec -ti clab-rtr005-host2 ping -c 10 10.1.10.1)

echo 1>&2
echo "4.b.4. show freertr flowspec status/statistics (after ping NOT to be blocked)" 1>&2
docker exec -ti clab-rtr005-rtr1 bash -c '{ echo "show ipv4 bgp 1 flowspec database"; echo "show policy-map flowspec CORE ipv4"; echo exit; } | (exec 3<>/dev/tcp/127.0.0.1/2323; cat >&3; cat <&3; exec 3<&-)'
(set -x; docker exec -ti clab-rtr005-rtr1 bash -c '{ echo "show ipv4 bgp 1 flowspec database"; echo "show policy-map flowspec CORE ipv4"; echo exit; } | (exec 3<>/dev/tcp/127.0.0.1/2323; cat >&3; cat <&3; exec 3<&-)')

##

0 comments on commit e3ed478

Please sign in to comment.