[ { "path": ".github/CODEOWNERS", "content": "* @ak1ra24 @slankdev\n" }, { "path": ".github/auto_assign.yml", "content": "# Set to true to add reviewers to pull requests\naddReviewers: true\n\n# Set to true to add assignees to pull requests\naddAssignees: false\n\n# A list of reviewers to be added to pull requests (GitHub user name)\nreviewers:\n - slankdev\n - ak1ra24\n\n# A number of reviewers added to the pull request\n# Set 0 to add all the reviewers (default: 0)\nnumberOfReviewers: 1\n\n# A list of assignees, overrides reviewers if set\n# assignees:\n# - assigneeA\n\n# A number of assignees to add to the pull request\n# Set to 0 to add all of the assignees.\n# Uses numberOfReviewers if unset.\n# numberOfAssignees: 2\n\n# A list of keywords to be skipped the process that add reviewers if pull requests include it\nskipKeywords:\n - wip\n" }, { "path": ".github/workflows/pr-auto-assign.yaml", "content": "name: 'Auto Assign'\non: pull_request\n\njobs:\n add-reviews:\n runs-on: ubuntu-latest\n steps:\n - uses: kentaro-m/auto-assign-action@v1.1.0\n with:\n repo-token: \"${{ secrets.GITHUB_TOKEN }}\"\n configuration-path: \".github/auto_assign.yml\"\n" }, { "path": ".github/workflows/release-master.yaml", "content": "name: release-master\non:\n push:\n branches:\n - master\n\njobs:\n release:\n runs-on: ubuntu-latest\n steps:\n - name: Set up Go 1.13\n uses: actions/setup-go@v2\n with:\n go-version: 1.13\n id: go\n\n - name: Check out code into the Go module directory\n uses: actions/checkout@v2\n\n - name: Build\n env:\n GO111MODULE: on\n GOPATH: /home/runner/work/\n GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}\n run: |\n go get -u github.com/tcnksm/ghr\n go get -u github.com/Songmu/ghch/cmd/ghch\n export TAGNAME=latest\n go build -ldflags=\"-s -w -X main.Version=$TAGNAME\"\n mkdir -p dist/latest\n tar -zcvf dist/latest/tinet_latest_linux64_amd64.tar.gz tinet\n $GOPATH/bin/ghr -n=$TAGNAME -b=\"$($GOPATH/bin/ghch -F markdown --latest)\" -replace $TAGNAME ./dist/$TAGNAME\n" }, { "path": ".github/workflows/release-tag.yaml", "content": "name: release tag\non:\n push:\n tags:\n - \"v[0-9]+.[0-9]+.[0-9]+\"\npermissions:\n contents: write\njobs:\n release:\n runs-on: ubuntu-latest\n steps:\n - name: Checkout\n uses: actions/checkout@v4\n with:\n fetch-depth: 0\n - name: Set up Go\n uses: actions/setup-go@v4\n with:\n go-version: stable\n - name: Run GoReleaser\n uses: goreleaser/goreleaser-action@v5\n with:\n distribution: goreleaser\n version: v1.23.0\n args: release --clean\n env:\n GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}\n" }, { "path": ".github/workflows/test.yaml", "content": "name: test\n\non: \n push:\n branches:\n - \"**\"\n pull_request: {}\n\njobs:\n lint:\n name: lint\n runs-on: ubuntu-latest\n strategy:\n matrix:\n go-version: [1.12.x, 1.13.x, 1.14.x, 1.15.x, 1.16.x, 1.17.x]\n steps:\n - uses: actions/setup-go@v3\n with:\n go-version: ${{ matrix.go-version }}\n - name: checkout\n uses: actions/checkout@v3\n - name: golangci-lint\n uses: golangci/golangci-lint-action@v3\n with:\n version: v1.45.2\n\n test:\n name: go test\n runs-on: ubuntu-latest\n strategy:\n matrix:\n go-version: [1.12.x, 1.13.x, 1.14.x, 1.15.x, 1.16.x, 1.17.x]\n steps:\n - name: Set up Go\n uses: actions/setup-go@v3\n with:\n version: ${{ matrix.go-version }}\n - name: checkout\n uses: actions/checkout@v3\n - name: Run go tests\n env:\n GO111MODULE: on\n run: |\n go test ./... -v\n" }, { "path": ".gitignore", "content": "# Binaries for programs and plugins\n/tinet\n*.exe\n*.exe~\n*.dll\n*.so\n*.dylib\n\n# Test binary, built with `go test -c`\n*.test\n\n# Output of the go coverage tool, specifically when used with LiteIDE\n*.out\n\n# Dependency directories (remove the comment below to include it)\n# vendor/\n*.swp\n*~\n" }, { "path": ".goreleaser.yml", "content": "version: 1\nbefore:\n hooks:\n - go mod tidy\nbuilds:\n - env:\n - CGO_ENABLED=0\n ldflags:\n - -s -w\n - -X main.Version={{.Version}}\n goos:\n - linux\n goarch:\n - amd64\n - arm64\narchives:\n - format: binary\n name_template: \"{{ .Binary }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}\"\nchangelog:\n sort: asc\n use: github-native\n" }, { "path": "Dockerfiles/centos7/Dockerfile", "content": "FROM centos:centos7\n\nRUN yum -y install git autoconf automake libtool make \\\n readline-devel texinfo net-snmp-devel groff pkgconfig \\\n json-c-devel pam-devel bison flex pytest c-ares-devel \\\n python-devel systemd-devel python-sphinx libcap-devel \\\n\tsudo iproute traceroute iputils bash-completion tcpdump \\\n\twireshark gdb wget vim libunwind libunwind-devel \\\n\tiptables-services\n" }, { "path": "Dockerfiles/centos7/build.sh", "content": "#!/bin/sh -xe\nIMG=tinet/centos:centos7\ndocker build -t $IMG .\n" }, { "path": "Dockerfiles/cloudvpn/Dockerfile", "content": "FROM tinet/centos:centos7\n\nRUN yum -y install https://rpm.frrouting.org/repo/frr-stable-repo-1-0.el7.noarch.rpm \\\n && yum -y install frr-7.3.1-01.el7.x86_64 frr-pythontools \\\n && yum -y install https://download.libreswan.org/binaries/rhel/7/x86_64/libreswan-3.32-1.el7.x86_64.rpm\n" }, { "path": "Dockerfiles/cloudvpn/build.sh", "content": "#!/bin/sh -xe\nIMG=tinet/cloudvpn\ndocker build -t $IMG .\n" }, { "path": "Dockerfiles/ebpf/Dockerfile", "content": "FROM ubuntu:rolling\n\nARG LIBBPF_VERSION=\"0.8.0\"\nARG IPROUTE2_VERSION=\"5.18.0\"\nARG BPFTOOL_VERSION=\"6.8.0\"\n\nRUN apt-get update\nRUN DEBIAN_FRONTEND=noninteractive apt-get install -y \\\n\tvim curl git gcc make flex bison clang-12 libbsd-dev libbfd-dev libcap-dev \\\n libelf-dev gcc-multilib pkg-config linux-tools-`uname -r`\n\nRUN ln -s /usr/bin/clang-12 /usr/bin/clang\n\nWORKDIR /opt\n\nADD https://github.com/libbpf/libbpf/archive/refs/tags/v${LIBBPF_VERSION}.tar.gz .\nRUN tar xvf v${LIBBPF_VERSION}.tar.gz\nRUN cd libbpf-${LIBBPF_VERSION}/src && make install BUILD_STATIC_ONLY=1 && make install_pkgconfig\nRUN rm -rf libbpf-${LIBBPF_VERSION} v${LIBBPF_VERSION}.tar.gz\n\nADD https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/snapshot/iproute2-${IPROUTE2_VERSION}.tar.gz .\nRUN tar xvf iproute2-${IPROUTE2_VERSION}.tar.gz\nRUN cd iproute2-${IPROUTE2_VERSION} && ./configure --libbpf_force=on --libbpf_dir=/ && make install\nRUN rm -rf iproute2-${IPROUTE2_VERSION} iproute2-${IPROUTE2_VERSION}.tar.gz\n\nADD filter.c .\nADD build_and_attach.sh .\nADD detach.sh .\n" }, { "path": "Dockerfiles/ebpf/Makefile", "content": "IMG=tinynetwork/ebpf:develop\nbuild:\n\tdocker build -t $(IMG) .\npush:\n\tdocker push $(IMG)\nall: build push\nrun:\n\tdocker run --rm -it $(IMG) bash\n" }, { "path": "Dockerfiles/ebpf/README.md", "content": "# Usage\n\n```\ndocker build -t demo:latest .\ndocker run -it --rm --privileged demo:latest bash\n./build_and_attach.sh\nbpftool map dump name pkt_counter_egr\nbpftool map dump name pkt_counter_ing\nbpftool map event_pipe name pkt_counter_eve\n# make some traffic on eth0\n```\n" }, { "path": "Dockerfiles/ebpf/build_and_attach.sh", "content": "#!/bin/bash -xe\n\nclang -target bpf -O3 -g -c filter.c\ntc qdisc del dev eth0 clsact || true\ntc qdisc add dev eth0 clsact\ntc filter add dev eth0 ingress bpf obj filter.o section tc-ingress\ntc filter add dev eth0 egress bpf obj filter.o section tc-egress\n" }, { "path": "Dockerfiles/ebpf/detach.sh", "content": "#!/bin/bash -xe\ntc qdisc del dev eth0 clsact\n" }, { "path": "Dockerfiles/ebpf/filter.c", "content": "#include \n#include \n#include \n\nstruct {\n __uint(type, BPF_MAP_TYPE_PERCPU_ARRAY);\n __uint(max_entries, 1);\n __type(key, int);\n __type(value, int);\n} pkt_counter_ingress SEC(\".maps\");\n\nstruct {\n __uint(type, BPF_MAP_TYPE_PERCPU_ARRAY);\n __uint(max_entries, 1);\n __type(key, int);\n __type(value, int);\n} pkt_counter_egress SEC(\".maps\");\n\nstruct {\n __uint(type, BPF_MAP_TYPE_PERF_EVENT_ARRAY);\n __uint(key_size, sizeof(int));\n __uint(value_size, sizeof(int));\n} pkt_counter_events SEC(\".maps\");\n\nstatic __inline int\ncount_packets(struct __sk_buff *skb, void *map)\n{\n int key = 0;\n int *val = bpf_map_lookup_elem(map, &key);\n if (val == NULL) {\n return TC_ACT_SHOT;\n }\n *val = *val + 1;\n\n int msg = 0xefbeadde;\n bpf_perf_event_output(skb, &pkt_counter_events, BPF_F_CURRENT_CPU, &msg, sizeof(msg));\n\n return TC_ACT_OK;\n}\n\nSEC(\"tc-ingress\") int\ncount_packets_ingress(struct __sk_buff *skb)\n{\n return count_packets(skb, &pkt_counter_ingress);\n}\n\nSEC(\"tc-egress\") int\ncount_packets_egress(struct __sk_buff *skb)\n{\n return count_packets(skb, &pkt_counter_egress);\n}\n\nchar __license[] SEC(\"license\") = \"GPL\";\n" }, { "path": "Dockerfiles/frr/Dockerfile", "content": "FROM frr-ubuntu20:latest\nUSER root\nRUN mkdir -p /etc/frr\nCOPY daemons /etc/frr/daemons\nRUN apt install -y vim tcpdump\n" }, { "path": "Dockerfiles/frr/Makefile", "content": "IMG=tinynetwork/frr:develop\nbuild:\n\tdocker build -t $(IMG) .\npush:\n\tdocker push $(IMG)\nall: build push\nrun:\n\tdocker run --rm -it --privileged $(IMG) bash\n" }, { "path": "Dockerfiles/frr/daemons", "content": "zebra=yes\nbgpd=yes\nospfd=no\nospf6d=no\nripd=no\nripngd=no\nisisd=no\npimd=no\nldpd=no\nnhrpd=no\neigrpd=no\nbabeld=no\nsharpd=yes\npbrd=no\nbfdd=no\n" }, { "path": "Dockerfiles/nginx/Dockerfile", "content": "FROM nginx\nRUN apt -y update -y && apt -y install iproute2\nRUN apt update -y && apt install -y tcpdump netcat iperf3 watch file xxd psutils vim\nENTRYPOINT bash\n" }, { "path": "Dockerfiles/nginx/Makefile", "content": "IMG=tinynetwork/nginx:develop\nbuild:\n\tdocker build -t $(IMG) .\npush:\n\tdocker push $(IMG)\nall: build push\nrun:\n\tdocker run --rm -it $(IMG) bash\n" }, { "path": "Dockerfiles/pmacctd/Dockerfile", "content": "FROM peterevans/vegeta as vegeta\nFROM pmacct/pmacctd:v1.7.6\nRUN apt update -y && apt install -y tcpdump netcat iperf3 watch file xxd psutils vim\nRUN apt install -y nfdump jq\nRUN apt install -y curl\nCOPY --from=vegeta /bin/vegeta /bin/vegeta\nENTRYPOINT bash\n" }, { "path": "Dockerfiles/pmacctd/Makefile", "content": "IMG=tinynetwork/pmacctd:develop\nbuild:\n\tdocker build -t $(IMG) .\npush:\n\tdocker push $(IMG)\nall: build push\nrun:\n\tdocker run --rm -it $(IMG) bash\n" }, { "path": "Dockerfiles/trex/Dockerfile", "content": "FROM quay.io/centos/centos:stream8\nARG TREX_VERSION=3.04\nENV TREX_VERSION ${TREX_VERSION}\n\nRUN dnf install -y --nodocs \\\n git wget procps python3 vim python3-pip pciutils gettext \\\n https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm \\\n && dnf clean all \\\n && dnf install -y --nodocs \\\n hostname iproute net-tools ethtool nmap iputils perf numactl \\\n sysstat htop rdma-core-devel libibverbs libibverbs-devel net-tools \\\n && dnf clean all\n\nWORKDIR /opt/\nRUN wget --no-check-certificate https://trex-tgn.cisco.com/trex/release/v${TREX_VERSION}.tar.gz && \\\n tar -xzf v${TREX_VERSION}.tar.gz && \\\n mv v${TREX_VERSION} trex && \\\n rm v${TREX_VERSION}.tar.gz\nWORKDIR /opt/trex\n" }, { "path": "Dockerfiles/trex/Makefile", "content": "IMG=tinynetwork/trex:develop\nbuild:\n\tdocker build -t $(IMG) .\npush:\n\tdocker push $(IMG)\nall: build push\n" }, { "path": "LICENSE", "content": "\n Apache License\n Version 2.0, January 2004\n http://www.apache.org/licenses/\n\n TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n 1. Definitions.\n\n \"License\" shall mean the terms and conditions for use, reproduction,\n and distribution as defined by Sections 1 through 9 of this document.\n\n \"Licensor\" shall mean the copyright owner or entity authorized by\n the copyright owner that is granting the License.\n\n \"Legal Entity\" shall mean the union of the acting entity and all\n other entities that control, are controlled by, or are under common\n control with that entity. For the purposes of this definition,\n \"control\" means (i) the power, direct or indirect, to cause the\n direction or management of such entity, whether by contract or\n otherwise, or (ii) ownership of fifty percent (50%) or more of the\n outstanding shares, or (iii) beneficial ownership of such entity.\n\n \"You\" (or \"Your\") shall mean an individual or Legal Entity\n exercising permissions granted by this License.\n\n \"Source\" form shall mean the preferred form for making modifications,\n including but not limited to software source code, documentation\n source, and configuration files.\n\n \"Object\" form shall mean any form resulting from mechanical\n transformation or translation of a Source form, including but\n not limited to compiled object code, generated documentation,\n and conversions to other media types.\n\n \"Work\" shall mean the work of authorship, whether in Source or\n Object form, made available under the License, as indicated by a\n copyright notice that is included in or attached to the work\n (an example is provided in the Appendix below).\n\n \"Derivative Works\" shall mean any work, whether in Source or Object\n form, that is based on (or derived from) the Work and for which the\n editorial revisions, annotations, elaborations, or other modifications\n represent, as a whole, an original work of authorship. For the purposes\n of this License, Derivative Works shall not include works that remain\n separable from, or merely link (or bind by name) to the interfaces of,\n the Work and Derivative Works thereof.\n\n \"Contribution\" shall mean any work of authorship, including\n the original version of the Work and any modifications or additions\n to that Work or Derivative Works thereof, that is intentionally\n submitted to Licensor for inclusion in the Work by the copyright owner\n or by an individual or Legal Entity authorized to submit on behalf of\n the copyright owner. For the purposes of this definition, \"submitted\"\n means any form of electronic, verbal, or written communication sent\n to the Licensor or its representatives, including but not limited to\n communication on electronic mailing lists, source code control systems,\n and issue tracking systems that are managed by, or on behalf of, the\n Licensor for the purpose of discussing and improving the Work, but\n excluding communication that is conspicuously marked or otherwise\n designated in writing by the copyright owner as \"Not a Contribution.\"\n\n \"Contributor\" shall mean Licensor and any individual or Legal Entity\n on behalf of whom a Contribution has been received by Licensor and\n subsequently incorporated within the Work.\n\n 2. Grant of Copyright License. Subject to the terms and conditions of\n this License, each Contributor hereby grants to You a perpetual,\n worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n copyright license to reproduce, prepare Derivative Works of,\n publicly display, publicly perform, sublicense, and distribute the\n Work and such Derivative Works in Source or Object form.\n\n 3. Grant of Patent License. Subject to the terms and conditions of\n this License, each Contributor hereby grants to You a perpetual,\n worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n (except as stated in this section) patent license to make, have made,\n use, offer to sell, sell, import, and otherwise transfer the Work,\n where such license applies only to those patent claims licensable\n by such Contributor that are necessarily infringed by their\n Contribution(s) alone or by combination of their Contribution(s)\n with the Work to which such Contribution(s) was submitted. If You\n institute patent litigation against any entity (including a\n cross-claim or counterclaim in a lawsuit) alleging that the Work\n or a Contribution incorporated within the Work constitutes direct\n or contributory patent infringement, then any patent licenses\n granted to You under this License for that Work shall terminate\n as of the date such litigation is filed.\n\n 4. Redistribution. You may reproduce and distribute copies of the\n Work or Derivative Works thereof in any medium, with or without\n modifications, and in Source or Object form, provided that You\n meet the following conditions:\n\n (a) You must give any other recipients of the Work or\n Derivative Works a copy of this License; and\n\n (b) You must cause any modified files to carry prominent notices\n stating that You changed the files; and\n\n (c) You must retain, in the Source form of any Derivative Works\n that You distribute, all copyright, patent, trademark, and\n attribution notices from the Source form of the Work,\n excluding those notices that do not pertain to any part of\n the Derivative Works; and\n\n (d) If the Work includes a \"NOTICE\" text file as part of its\n distribution, then any Derivative Works that You distribute must\n include a readable copy of the attribution notices contained\n within such NOTICE file, excluding those notices that do not\n pertain to any part of the Derivative Works, in at least one\n of the following places: within a NOTICE text file distributed\n as part of the Derivative Works; within the Source form or\n documentation, if provided along with the Derivative Works; or,\n within a display generated by the Derivative Works, if and\n wherever such third-party notices normally appear. The contents\n of the NOTICE file are for informational purposes only and\n do not modify the License. You may add Your own attribution\n notices within Derivative Works that You distribute, alongside\n or as an addendum to the NOTICE text from the Work, provided\n that such additional attribution notices cannot be construed\n as modifying the License.\n\n You may add Your own copyright statement to Your modifications and\n may provide additional or different license terms and conditions\n for use, reproduction, or distribution of Your modifications, or\n for any such Derivative Works as a whole, provided Your use,\n reproduction, and distribution of the Work otherwise complies with\n the conditions stated in this License.\n\n 5. Submission of Contributions. Unless You explicitly state otherwise,\n any Contribution intentionally submitted for inclusion in the Work\n by You to the Licensor shall be under the terms and conditions of\n this License, without any additional terms or conditions.\n Notwithstanding the above, nothing herein shall supersede or modify\n the terms of any separate license agreement you may have executed\n with Licensor regarding such Contributions.\n\n 6. Trademarks. This License does not grant permission to use the trade\n names, trademarks, service marks, or product names of the Licensor,\n except as required for reasonable and customary use in describing the\n origin of the Work and reproducing the content of the NOTICE file.\n\n 7. Disclaimer of Warranty. Unless required by applicable law or\n agreed to in writing, Licensor provides the Work (and each\n Contributor provides its Contributions) on an \"AS IS\" BASIS,\n WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n implied, including, without limitation, any warranties or conditions\n of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n PARTICULAR PURPOSE. You are solely responsible for determining the\n appropriateness of using or redistributing the Work and assume any\n risks associated with Your exercise of permissions under this License.\n\n 8. Limitation of Liability. In no event and under no legal theory,\n whether in tort (including negligence), contract, or otherwise,\n unless required by applicable law (such as deliberate and grossly\n negligent acts) or agreed to in writing, shall any Contributor be\n liable to You for damages, including any direct, indirect, special,\n incidental, or consequential damages of any character arising as a\n result of this License or out of the use or inability to use the\n Work (including but not limited to damages for loss of goodwill,\n work stoppage, computer failure or malfunction, or any and all\n other commercial damages or losses), even if such Contributor\n has been advised of the possibility of such damages.\n\n 9. Accepting Warranty or Additional Liability. While redistributing\n the Work or Derivative Works thereof, You may choose to offer,\n and charge a fee for, acceptance of support, warranty, indemnity,\n or other liability obligations and/or rights consistent with this\n License. However, in accepting such obligations, You may act only\n on Your own behalf and on Your sole responsibility, not on behalf\n of any other Contributor, and only if You agree to indemnify,\n defend, and hold each Contributor harmless for any liability\n incurred by, or claims asserted against, such Contributor by reason\n of your accepting any such warranty or additional liability.\n\n END OF TERMS AND CONDITIONS\n\n APPENDIX: How to apply the Apache License to your work.\n\n To apply the Apache License to your work, attach the following\n boilerplate notice, with the fields enclosed by brackets \"[]\"\n replaced with your own identifying information. (Don't include\n the brackets!) The text should be enclosed in the appropriate\n comment syntax for the file format. We also recommend that a\n file or class name and description of purpose be included on the\n same \"printed page\" as the copyright notice for easier\n identification within third-party archives.\n\n Copyright [2020] [ak1ra24]\n\n Licensed under the Apache License, Version 2.0 (the \"License\");\n you may not use this file except in compliance with the License.\n You may obtain a copy of the License at\n\n http://www.apache.org/licenses/LICENSE-2.0\n\n Unless required by applicable law or agreed to in writing, software\n distributed under the License is distributed on an \"AS IS\" BASIS,\n WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n See the License for the specific language governing permissions and\n limitations under the License.\n" }, { "path": "Makefile", "content": "VERSION = $$(gobump show -r cmd)\n\nexport GO111MODULE=on\n\n.PHONY: deps\ndeps:\n\tgo get -u -d\n\tgo mod tidy\n\n.PHONY: devel-deps\ndevel-deps:\n\tgo get -v \\\n\tgithub.com/x-motemen/gobump/cmd/gobump \\\n\tgithub.com/Songmu/ghch/cmd/ghch \\\n\tgithub.com/Songmu/goxz/cmd/goxz \\\n\tgithub.com/tcnksm/ghr \\\n\tgithub.com/golangci/golangci-lint/cmd/golangci-lint\n\n.PHONY: test\ntest:\n\tgo test -v ./...\n\n.PHONY: lint\nlint: devel-deps\n\tgolangci-lint run\n\n.PHONY: build\nbuild: deps\n\tgo build -o tn\n\n.PHONY: install\ninstall: deps\n\tgo install \n\n.PHONY: release\nrelease: devel-deps\n\techo ghr -n=v$(VERSION) -b=\"$($GOPATH/bin/ghch -F markdown --latest)\" -draft v$(VERSION) ./dist/v$(VERSION)\n\n.PHONY: crossbuild\ncrossbuild: devel-deps\n\tgoxz -pv=$(VERSION) -os=linux -arch=amd64 -d=./dist/v$(VERSION)\n" }, { "path": "README.md", "content": "# tinet\n\n![test](https://github.com/tinynetwork/tinet/workflows/test/badge.svg) ![release](https://github.com/tinynetwork/tinet/workflows/release/badge.svg) [![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](LICENSE) [![Go Report Card](https://goreportcard.com/badge/github.com/tinynetwork/tinet)](https://goreportcard.com/report/github.com/tinynetwork/tinet)\n\nAn instant virtual network on your laptop with\nlight-weight virtualization. Here we introduce the\nContainer Network Simulation tools. Users can generate,\nfrom the YAML configuration file, the script to build\nthe L2 container network. Quickstart guide is provided\nin QUICKSTART.md. It is tested on Ubuntu 16.04 LTS and\nlater.\n\n## Requirements\n- Docker\n- OpenvSwitch (optional)\n- graphviz (optional)\n\n## Quick Install\n\nThere is only linux_amd64 pre-built binary\n```\ncurl -Lo /usr/bin/tinet https://github.com/tinynetwork/tinet/releases/download/v0.0.3/tinet.linux_amd64\nchmod +x /usr/bin/tinet\ntinet --version\n```\n\nfor ubuntu user\n```\nsudo apt update\nsudo apt install -y linux-image-extra-virtual\nsudo reboot\n```\n\nupgrading the kernel\n```\n$ sudo apt list \"linux-image-5.15.*-generic\"\nlinux-image-5.15.0-33-generic/focal-updates,focal-security 5.15.0-33.34~20.04.1 amd64\n$ sudo apt install linux-image-5.15.0-33-generic linux-modules-5.15.0-33-generic linux-modules-extra-5.15.0-33-generic\n$ sudo reboot\n```\n```\n$ sudo grep 'menuentry ' $(sudo find /boot -name \"grub.cfg\") | cut -f 2 -d \"'\" | nl -v 0\n 0 Ubuntu\n 1 Ubuntu, with Linux 5.15.0-33-generic\n 2 Ubuntu, with Linux 5.15.0-33-generic (recovery mode)\n 3 Ubuntu, with Linux 5.4.0-113-generic\n 4 Ubuntu, with Linux 5.4.0-113-generic (recovery mode)\n$ sudo grub-set-default 3\n$ sudo reboot\n```\n\n## Build\n```\ngit clone https://github.com/tinynetwork/tinet tinet && cd $_\ndocker run --rm -i -t -v $PWD:/v -w /v golang:1.12 go build\nmv tinet /usr/local/bin\n```\n\n## Usage\n\n```\ntinet up -c spec.yaml | sudo sh -x\ntinet conf -c spec.yaml | sudo sh -x\ntinet test -c spec.yaml | sudo sh -x\ntinet down -c spec.yaml | sudo sh -x\ndocker run -it --rm --privileged --net=container:R1 nicolaka/netshoot bash\n```\n\n## Command Options\n\n```\n# tinet\nNAME:\n tinet - tinet: Tiny Network\n\nUSAGE:\n tinet [global options] command [command options] [arguments...]\n\nVERSION:\n 0.0.1 (rev:)\n\nAUTHOR:\n ak1ra24 \n\nCOMMANDS:\n check check config\n conf configure Node from tinet config file\n down Down Node from tinet config file\n exec Execute Command on Node from tinet config file.\n img visualize network topology by graphviz from tinet config file\n init Generate tinet config template file\n ps docker and netns process\n pull Pull Node docker image from tinet config file\n reconf Stop, remove, create, start and config\n reup Stop, remove, create, start\n test Execute test commands from tinet config file.\n up create Node from tinet config file\n upconf Create, start and config\n help, h Shows a list of commands or help for one command\n\nGLOBAL OPTIONS:\n --help, -h show help (default: false)\n --version, -v print the version (default: false)\n```\n\n## Contribute\n\nSimply fork and create a pull-request. We'll try to respond in a timely fashion.\n\n## Links\n\n- [Command Line Usage Example](docs/command-line-usage-example.md)\n- [YAML Format](docs/specification_yml.md)\n" }, { "path": "cheatsheet.md", "content": "# Cheatsheet\n## Linux Networking\n\n```\n# ip route add 10.0.0.0/24 encap seg6 mode encap segs a::,b::,c::,d:: via 2001:db8::1\n# ip route add 10.0.0.0/24 encap seg6 mode l2encap segs a::,b::,c::,d:: via 2001:db8::1\n# ip route add 10.0.0.0/24 encap seg6 mode inline segs a::,b::,c::,d:: via 2001:db8::1\n\n# ip -6 route add fc00::1/128 encap seg6local \\\n action End via 2001:db8::1\n action End.X nh6 fc00::1:1 via 2001:db8::1\n action End.T table 100 via 2001:db8::1\n action End.DX2 oif lxcbr0 via 2001:db8::1\n action End.DX4 nh4 10.0.3.254 via 2001:db8::1\n action End.DT4 vrftable 100 via 2001:db8::1\n action End.DX6 nh6 fc00::1:1 via 2001:db8::1\n action End.DT6 table 100 via 2001:db8::1\n```\n\n## VPP Networking\n```\nvpp> sr policy add bsid cafe::10 next fc00:2::10 fib-table 0\nvpp> sr steer l3 192.168.1.0/24 via bsid cafe::10 fib-table 10\nvpp> sr steer l2 host-net2 via bsid cafe::10\n\nvpp> set sr encaps source addr fc00:1::\nvpp> sr localsid address fc00:1:: behavior end\nvpp> sr localsid address fc00:1::10 behavior end.dt4 10\nvpp> sr localsid address fc00:1::10 behavior end.dx2 host-net2\n```\n" }, { "path": "command_func.go", "content": "package main\n\nimport (\n\t\"fmt\"\n\t\"log\"\n\t\"os\"\n\t\"strings\"\n\n\t\"github.com/emicklei/dot\"\n\t\"github.com/spf13/viper\"\n\t\"github.com/tinynetwork/tinet/internal/pkg/shell\"\n\t\"github.com/tinynetwork/tinet/internal/pkg/utils\"\n\t\"github.com/urfave/cli/v2\"\n)\n\ntype linkstatus struct {\n\tleftNodeName string\n\tleftInfName string\n\tleftIsSet bool\n\tleftNodeType string\n\trightNodeName string\n\trightInfName string\n\trightIsSet bool\n\trightNodeType string\n}\n\nfunc LoadCfg(c *cli.Context) (tnconfig shell.Tn, verbose bool, err error) {\n\tcfgFile := c.String(\"config\")\n\tverbose = c.Bool(\"verbose\")\n\tif cfgFile != \"\" {\n\t\tviper.SetConfigFile(cfgFile)\n\t\tviper.SetConfigType(\"yaml\")\n\n\t\tif err = viper.ReadInConfig(); err != nil {\n\t\t\treturn tnconfig, verbose, err\n\t\t}\n\n\t\tif err = viper.Unmarshal(&tnconfig); err != nil {\n\t\t\treturn tnconfig, verbose, err\n\t\t}\n\t} else {\n\t\terr = fmt.Errorf(\"not set config file.\")\n\t\treturn tnconfig, verbose, err\n\t}\n\n\treturn tnconfig, verbose, nil\n\n}\n\nfunc CmdBuild(c *cli.Context) error {\n\n\ttnconfig, _, err := LoadCfg(c)\n\tif err != nil {\n\t\treturn err\n\t}\n\tnodes := tnconfig.Nodes\n\n\tfor _, node := range nodes {\n\t\tbuildCmd := node.BuildCmd()\n\t\tfmt.Fprint(os.Stdout, buildCmd)\n\t}\n\n\treturn nil\n}\n\nfunc CmdCheck(c *cli.Context) error {\n\n\ttnconfig, _, err := LoadCfg(c)\n\tif err != nil {\n\t\treturn err\n\t}\n\n\tnodes := tnconfig.Nodes\n\tbridges := tnconfig.Switches\n\tconfmap := map[string]string{}\n\n\tfor _, node := range nodes {\n\t\tfor _, inf := range node.Interfaces {\n\t\t\tif inf.Type == \"direct\" {\n\t\t\t\thost := node.Name + \":\" + inf.Name\n\t\t\t\tpeer := strings.Split(inf.Args, \"#\")\n\t\t\t\ttarget := peer[0] + \":\" + peer[1]\n\t\t\t\tconfmap[host] = target\n\t\t\t} else if inf.Type == \"bridge\" {\n\t\t\t\thost := node.Name + \":\" + inf.Name\n\t\t\t\ttarget := inf.Args + \":\" + node.Name\n\t\t\t\tconfmap[host] = target\n\t\t\t}\n\t\t}\n\t}\n\n\tfor _, bridge := range bridges {\n\t\tfor _, inf := range bridge.Interfaces {\n\t\t\thost := bridge.Name + \":\" + inf.Args\n\t\t\ttarget := inf.Args + \":\" + inf.Name\n\t\t\tconfmap[host] = target\n\t\t}\n\t}\n\n\tvar matchNum int\n\tfalseConfigMap := map[string]string{}\n\n\tfor key, value := range confmap {\n\t\tif confmap[key] == value && confmap[value] == key {\n\t\t\tmatchNum++\n\t\t} else {\n\t\t\tfalseConfigMap[key] = value\n\t\t}\n\t}\n\n\tif len(confmap) == matchNum {\n\t\treturn nil\n\t} else {\n\t\tvar errMsg string\n\t\tfor key, value := range falseConfigMap {\n\t\t\terrMsg += fmt.Sprintf(\"%s<->%s\\n\", key, value)\n\t\t}\n\t\treturn fmt.Errorf(errMsg)\n\t}\n}\n\nfunc CmdUp(c *cli.Context) error {\n\n\ttnconfig, verbose, err := LoadCfg(c)\n\tif err != nil {\n\t\treturn err\n\t}\n\n\tif len(tnconfig.PreCmd) != 0 {\n\t\tfor _, preCmds := range tnconfig.PreCmd {\n\t\t\tpreExecCmds := shell.ExecCmd(preCmds.Cmds)\n\t\t\tutils.PrintCmds(os.Stdout, preExecCmds, verbose)\n\t\t}\n\t}\n\tif len(tnconfig.PreInit) != 0 {\n\t\tfor _, preInitCmds := range tnconfig.PreInit {\n\t\t\tpreExecInitCmds := shell.ExecCmd(preInitCmds.Cmds)\n\t\t\tutils.PrintCmds(os.Stdout, preExecInitCmds, verbose)\n\t\t}\n\t}\n\tfor _, node := range tnconfig.Nodes {\n\t\tcreateNodeCmds := node.CreateNode()\n\t\tutils.PrintCmds(os.Stdout, createNodeCmds, verbose)\n\n\t\tif node.Type != \"netns\" {\n\t\t\tmountDockerNetnsCmds := node.Mount_docker_netns()\n\t\t\tutils.PrintCmds(os.Stdout, mountDockerNetnsCmds, verbose)\n\t\t}\n\t}\n\n\tif len(tnconfig.Switches) != 0 {\n\t\tfor _, bridge := range tnconfig.Switches {\n\t\t\tcreateSwitchCmds := bridge.CreateSwitch()\n\t\t\tutils.PrintCmds(os.Stdout, createSwitchCmds, verbose)\n\t\t}\n\t}\n\n\tvar links []linkstatus\n\n\tfor _, node := range tnconfig.Nodes {\n\t\tfor _, inf := range node.Interfaces {\n\t\t\tif inf.Type == \"direct\" {\n\t\t\t\trNodeArgs := strings.Split(inf.Args, \"#\")\n\t\t\t\trNodeName := rNodeArgs[0]\n\t\t\t\trInfName := rNodeArgs[1]\n\t\t\t\tpeerFound := false\n\t\t\t\tfor _, link := range links {\n\t\t\t\t\tif !link.rightIsSet {\n\t\t\t\t\t\tnodecheck := link.leftNodeName == rNodeName\n\t\t\t\t\t\tinfcheck := link.leftInfName == rInfName\n\t\t\t\t\t\tif nodecheck && infcheck {\n\t\t\t\t\t\t\tlink.rightNodeName = node.Name\n\t\t\t\t\t\t\tlink.rightInfName = inf.Name\n\t\t\t\t\t\t\tlink.rightNodeType = node.Type\n\t\t\t\t\t\t\tlink.rightIsSet = true\n\t\t\t\t\t\t\tpeerFound = true\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tif !peerFound {\n\t\t\t\t\tlink := linkstatus{leftNodeName: node.Name, leftInfName: inf.Name, rightNodeName: rNodeName, rightInfName: rInfName}\n\t\t\t\t\tlink.leftNodeType = node.Type\n\t\t\t\t\tlink.leftIsSet = true\n\t\t\t\t\tlinks = append(links, link)\n\t\t\t\t\tn2nLinkCmds := inf.N2nLink(node.Name)\n\t\t\t\t\tutils.PrintCmds(os.Stdout, n2nLinkCmds, verbose)\n\t\t\t\t}\n\t\t\t\tif len(inf.Addr) != 0 {\n\t\t\t\t\taddrSetCmd := inf.AddrSet(node.Name)\n\t\t\t\t\tutils.PrintCmd(os.Stdout, addrSetCmd, verbose)\n\t\t\t\t}\n\t\t\t} else if inf.Type == \"bridge\" {\n\t\t\t\ts2nLinkCmds := inf.S2nLink(node.Name)\n\t\t\t\tutils.PrintCmds(os.Stdout, s2nLinkCmds, verbose)\n\t\t\t} else if inf.Type == \"veth\" {\n\t\t\t\tv2cLinkCmds := inf.V2cLink(node.Name)\n\t\t\t\tutils.PrintCmds(os.Stdout, v2cLinkCmds, verbose)\n\t\t\t} else if inf.Type == \"phys\" {\n\t\t\t\tp2cLinkCmds := inf.P2cLink(node.Name)\n\t\t\t\tutils.PrintCmds(os.Stdout, p2cLinkCmds, verbose)\n\t\t\t} else {\n\t\t\t\terr := fmt.Errorf(\"not supported interface type: %s\", inf.Type)\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\t\t}\n\t}\n\n\t// check\n\terr = CmdCheck(c)\n\tif err != nil {\n\t\treturn err\n\t}\n\n\tfor _, node := range tnconfig.Nodes {\n\t\tif node.Type == \"docker\" || node.Type == \"\" {\n\t\t\tdelNsCmd := node.DelNsCmd()\n\t\t\tutils.PrintCmd(os.Stdout, delNsCmd, verbose)\n\t\t\tmountTmplCmd, err := node.MountTmpl()\n\t\t\tutils.PrintCmds(os.Stdout, mountTmplCmd, verbose)\n\t\t\tif err != nil {\n\t\t\t\treturn err\n\t\t\t}\n\t\t}\n\t}\n\n\tif len(tnconfig.PostInit) != 0 {\n\t\tfor _, postInitCmds := range tnconfig.PostInit {\n\t\t\tpostExecInitCmds := shell.ExecCmd(postInitCmds.Cmds)\n\t\t\tutils.PrintCmds(os.Stdout, postExecInitCmds, verbose)\n\t\t}\n\t}\n\n\treturn nil\n}\n\nfunc CmdConf(c *cli.Context) error {\n\ttnconfig, verbose, err := LoadCfg(c)\n\tif err != nil {\n\t\treturn err\n\t}\n\n\tnodeinfo := map[string]string{}\n\tfor _, node := range tnconfig.Nodes {\n\t\tnodeinfo[node.Name] = node.Type\n\t}\n\n\tif len(tnconfig.PreConf) != 0 {\n\t\tfor _, preConf := range tnconfig.PreConf {\n\t\t\tpreConfCmds := shell.ExecCmd(preConf.Cmds)\n\t\t\tutils.PrintCmds(os.Stdout, preConfCmds, verbose)\n\t\t}\n\t}\n\n\tfor _, nodeConfig := range tnconfig.NodeConfigs {\n\t\texecConfCmds := nodeConfig.ExecConf(nodeinfo[nodeConfig.Name])\n\t\tfor _, execConfCmd := range execConfCmds {\n\t\t\tutils.PrintCmd(os.Stdout, execConfCmd, verbose)\n\t\t}\n\t}\n\n\treturn nil\n}\n\nfunc CmdUpConf(c *cli.Context) error {\n\t// create and start\n\tif err := CmdUp(c); err != nil {\n\t\treturn err\n\t}\n\n\t// config\n\tif err := CmdConf(c); err != nil {\n\t\treturn err\n\t}\n\n\treturn nil\n}\n\nfunc CmdDown(c *cli.Context) error {\n\n\ttnconfig, verbose, err := LoadCfg(c)\n\tif err != nil {\n\t\treturn err\n\t}\n\n\tfor _, node := range tnconfig.Nodes {\n\t\tdeleteNode := node.DeleteNode()\n\t\tutils.PrintCmds(os.Stdout, deleteNode, verbose)\n\t}\n\tfor _, br := range tnconfig.Switches {\n\t\tdelBrCmd := br.DeleteSwitch()\n\t\tutils.PrintCmd(os.Stdout, delBrCmd, verbose)\n\t}\n\n\tif len(tnconfig.PostFini) != 0 {\n\t\tfor _, postFiniCmds := range tnconfig.PostFini {\n\t\t\tpostExecFiniCmds := shell.ExecCmd(postFiniCmds.Cmds)\n\t\t\tutils.PrintCmds(os.Stdout, postExecFiniCmds, verbose)\n\t\t}\n\t}\n\n\treturn nil\n}\n\nfunc CmdExec(c *cli.Context) error {\n\n\ttnconfig, verbose, err := LoadCfg(c)\n\tif err != nil {\n\t\treturn err\n\t}\n\n\texecCmdArgs := c.Args().Slice()\n\texecCommand := tnconfig.Exec(execCmdArgs[0], execCmdArgs[1:])\n\tutils.PrintCmd(os.Stdout, execCommand, verbose)\n\n\treturn nil\n\n}\n\nfunc CmdImg(c *cli.Context) error {\n\tformat := c.String(\"format\")\n\ttnconfig, _, err := LoadCfg(c)\n\tif err != nil {\n\t\treturn err\n\t}\n\n\tg := dot.NewGraph(dot.Directed)\n\tfor _, tnnode := range tnconfig.Nodes {\n\t\tnodeName := tnnode.Name\n\t\tfromNode := g.Node(nodeName)\n\t\tfromNode.Label(nodeName)\n\t\tifaceInfos := tnnode.Interfaces\n\t\tfor _, ifaceInfo := range ifaceInfos {\n\t\t\tvar argsName string\n\t\t\tif ifaceInfo.Type == \"direct\" {\n\t\t\t\targsName = strings.Split(ifaceInfo.Args, \"#\")[0]\n\t\t\t\ttoNode := g.Node(argsName)\n\t\t\t\tfindEdges := g.FindEdges(toNode, fromNode)\n\t\t\t\tif len(findEdges) == 0 {\n\t\t\t\t\tnewEdge := g.Edge(fromNode, toNode)\n\t\t\t\t\tnewEdge.Attr(\"arrowhead\", \"none\")\n\t\t\t\t\tnewEdge.Attr(\"labelfloat\", \"true\")\n\t\t\t\t\ttaillabel := \"\"\n\t\t\t\t\tif ifaceInfo.Label != \"\" {\n\t\t\t\t\t\ttaillabel = fmt.Sprintf(\"%s(%s)\", ifaceInfo.Name, ifaceInfo.Label)\n\t\t\t\t\t} else {\n\t\t\t\t\t\ttaillabel = ifaceInfo.Name\n\t\t\t\t\t}\n\t\t\t\t\tnewEdge.Attr(\"headlabel\", strings.Split(ifaceInfo.Args, \"#\")[1])\n\t\t\t\t\tnewEdge.Attr(\"taillabel\", taillabel)\n\t\t\t\t\tnewEdge.Attr(\"fontsize\", \"8\")\n\t\t\t\t} else {\n\t\t\t\t\tedge := findEdges[0]\n\t\t\t\t\tif ifaceInfo.Label != \"\" {\n\t\t\t\t\t\theadlabel := fmt.Sprintf(\"%s(%s)\", edge.GetAttr(\"headlabel\"), ifaceInfo.Label)\n\t\t\t\t\t\tedge.Attr(\"headlabel\", headlabel)\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t} else if ifaceInfo.Type == \"bridge\" {\n\t\t\t\targsName = ifaceInfo.Args\n\t\t\t\ttoNode := g.Node(argsName)\n\t\t\t\tfindEdges := g.FindEdges(toNode, fromNode)\n\t\t\t\tif len(findEdges) == 0 {\n\t\t\t\t\tnewEdge := g.Edge(fromNode, toNode)\n\t\t\t\t\tnewEdge.Attr(\"arrowhead\", \"none\")\n\t\t\t\t\tnewEdge.Attr(\"labelfloat\", \"true\")\n\t\t\t\t\tnewEdge.Attr(\"headlabel\", argsName)\n\t\t\t\t\ttaillabel := \"\"\n\t\t\t\t\tif ifaceInfo.Label != \"\" {\n\t\t\t\t\t\ttaillabel = fmt.Sprintf(\"%s(%s)\", ifaceInfo.Name, ifaceInfo.Label)\n\t\t\t\t\t} else {\n\t\t\t\t\t\ttaillabel = ifaceInfo.Name\n\t\t\t\t\t}\n\t\t\t\t\tnewEdge.Attr(\"taillabel\", taillabel)\n\t\t\t\t\tnewEdge.Attr(\"fontsize\", \"8\")\n\t\t\t\t} else {\n\t\t\t\t\tedge := findEdges[0]\n\t\t\t\t\tif ifaceInfo.Label != \"\" {\n\t\t\t\t\t\theadlabel := fmt.Sprintf(\"%s(%s)\", edge.GetAttr(\"headlabel\"), ifaceInfo.Label)\n\t\t\t\t\t\tedge.Attr(\"headlabel\", headlabel)\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\n\tif format == \"mermaid\" {\n\t\tfmt.Println(dot.MermaidGraph(g, dot.MermaidTopToBottom))\n\t} else {\n\t\tfmt.Fprintln(os.Stdout, g.String())\n\t}\n\n\treturn nil\n}\n\nfunc CmdInit(c *cli.Context) error {\n\ttnConf, err := shell.GenerateFile()\n\tif err != nil {\n\t\tlog.Fatal(err)\n\t}\n\n\tfmt.Fprintln(os.Stdout, tnConf)\n\n\treturn nil\n\n}\n\nfunc CmdPs(c *cli.Context) error {\n\n\tall := c.Bool(\"all\")\n\tfmt.Println(\"echo '---------------------------------------------------------------------------------'\")\n\tfmt.Println(\"echo ' Docker Status '\")\n\tfmt.Println(\"echo '---------------------------------------------------------------------------------'\")\n\tdockerPsCmd := shell.DockerPs(all)\n\tfmt.Println(dockerPsCmd)\n\tfmt.Println(\"echo '---------------------------------------------------------------------------------'\")\n\tfmt.Println(\"echo ' IP NETNS LIST '\")\n\tfmt.Println(\"echo '---------------------------------------------------------------------------------'\")\n\tnetnsPsCmd := shell.NetnsPs()\n\tfmt.Println(netnsPsCmd)\n\n\treturn nil\n}\n\nfunc CmdPull(c *cli.Context) error {\n\ttnconfig, verbose, err := LoadCfg(c)\n\tif err != nil {\n\t\treturn err\n\t}\n\tpullCmds := shell.Pull(tnconfig.Nodes)\n\n\tutils.PrintCmds(os.Stdout, pullCmds, verbose)\n\n\treturn nil\n}\n\nfunc CmdReConf(c *cli.Context) error {\n\t// stop, remove\n\tif err := CmdDown(c); err != nil {\n\t\treturn err\n\t}\n\n\t// create and start\n\tif err := CmdUp(c); err != nil {\n\t\treturn err\n\t}\n\n\t// config\n\tif err := CmdConf(c); err != nil {\n\t\treturn err\n\t}\n\n\treturn nil\n}\n\nfunc CmdReUp(c *cli.Context) error {\n\t// stop, remove\n\tif err := CmdDown(c); err != nil {\n\t\treturn err\n\t}\n\n\t// create and start\n\tif err := CmdUp(c); err != nil {\n\t\treturn err\n\t}\n\n\treturn nil\n}\n\nfunc CmdTest(c *cli.Context) error {\n\ttnconfig, _, err := LoadCfg(c)\n\tif err != nil {\n\t\treturn err\n\t}\n\n\ttestName := c.Args().Get(0)\n\n\tvar tnTestCmds []string\n\n\tif testName == \"all\" || testName == \"\" {\n\t\tfor _, test := range tnconfig.Test {\n\t\t\ttnTestCmds = test.TnTestCmdExec()\n\t\t}\n\t} else {\n\t\tfor _, test := range tnconfig.Test {\n\t\t\tif testName == test.Name {\n\t\t\t\ttnTestCmds = test.TnTestCmdExec()\n\t\t\t}\n\t\t}\n\t}\n\n\tif len(tnTestCmds) == 0 {\n\t\treturn fmt.Errorf(\"not found test name\\n\")\n\t}\n\n\tfmt.Fprintln(os.Stdout, strings.Join(tnTestCmds, \"\\n\"))\n\n\treturn nil\n}\n" }, { "path": "commands.go", "content": "package main\n\nimport \"github.com/urfave/cli/v2\"\n\nvar commands = []*cli.Command{\n\tcommandBuild,\n\tcommandCheck,\n\tcommandConf,\n\tcommandDown,\n\tcommandExec,\n\tcommandImg,\n\tcommandInit,\n\tcommandPs,\n\tcommandPull,\n\tcommandReConf,\n\tcommandReUp,\n\tcommandTest,\n\tcommandUp,\n\tcommandUpConf,\n}\n\nvar commandBuild = &cli.Command{\n\tName: \"build\",\n\tUsage: \"Build docker Image from tinet config file\",\n\tAction: CmdBuild,\n\tFlags: []cli.Flag{\n\t\t&cli.StringFlag{\n\t\t\tName: \"config\",\n\t\t\tAliases: []string{\"c\"},\n\t\t\tUsage: \"Specify the Config file.\",\n\t\t\tValue: \"spec.yaml\",\n\t\t},\n\t\t&cli.BoolFlag{\n\t\t\tName: \"verbose\",\n\t\t\tAliases: []string{\"v\"},\n\t\t\tUsage: \"Verbose\",\n\t\t},\n\t},\n}\n\nvar commandUp = &cli.Command{\n\tName: \"up\",\n\tUsage: \"create Node from tinet config file\",\n\tAction: CmdUp,\n\tFlags: []cli.Flag{\n\t\t&cli.StringFlag{\n\t\t\tName: \"config\",\n\t\t\tAliases: []string{\"c\"},\n\t\t\tUsage: \"Specify the Config file.\",\n\t\t\tValue: \"spec.yaml\",\n\t\t},\n\t\t&cli.BoolFlag{\n\t\t\tName: \"verbose\",\n\t\t\tAliases: []string{\"v\"},\n\t\t\tUsage: \"Verbose\",\n\t\t},\n\t},\n}\n\nvar commandConf = &cli.Command{\n\tName: \"conf\",\n\tUsage: \"configure Node from tinet config file\",\n\tAction: CmdConf,\n\tFlags: []cli.Flag{\n\t\t&cli.StringFlag{\n\t\t\tName: \"config\",\n\t\t\tAliases: []string{\"c\"},\n\t\t\tUsage: \"Specify the Config file.\",\n\t\t\tValue: \"spec.yaml\",\n\t\t},\n\t\t&cli.BoolFlag{\n\t\t\tName: \"verbose\",\n\t\t\tAliases: []string{\"v\"},\n\t\t\tUsage: \"Verbose\",\n\t\t},\n\t},\n}\n\nvar commandUpConf = &cli.Command{\n\tName: \"upconf\",\n\tUsage: \"Create, start and config\",\n\tAction: CmdUpConf,\n\tFlags: []cli.Flag{\n\t\t&cli.StringFlag{\n\t\t\tName: \"config\",\n\t\t\tAliases: []string{\"c\"},\n\t\t\tUsage: \"Specify the Config file.\",\n\t\t\tValue: \"spec.yaml\",\n\t\t},\n\t\t&cli.BoolFlag{\n\t\t\tName: \"verbose\",\n\t\t\tAliases: []string{\"v\"},\n\t\t\tUsage: \"Verbose\",\n\t\t},\n\t},\n}\n\nvar commandDown = &cli.Command{\n\tName: \"down\",\n\tUsage: \"Down Node from tinet config file\",\n\tAction: CmdDown,\n\tFlags: []cli.Flag{\n\t\t&cli.StringFlag{\n\t\t\tName: \"config\",\n\t\t\tAliases: []string{\"c\"},\n\t\t\tUsage: \"Specify the Config file.\",\n\t\t\tValue: \"spec.yaml\",\n\t\t},\n\t\t&cli.BoolFlag{\n\t\t\tName: \"verbose\",\n\t\t\tAliases: []string{\"v\"},\n\t\t\tUsage: \"Verbose\",\n\t\t},\n\t},\n}\n\nvar commandExec = &cli.Command{\n\tName: \"exec\",\n\tUsage: \"Execute Command on Node from tinet config file.\",\n\tAction: CmdExec,\n\tFlags: []cli.Flag{\n\t\t&cli.StringFlag{\n\t\t\tName: \"config\",\n\t\t\tAliases: []string{\"c\"},\n\t\t\tUsage: \"Specify the Config file.\",\n\t\t\tValue: \"spec.yaml\",\n\t\t},\n\t\t&cli.BoolFlag{\n\t\t\tName: \"verbose\",\n\t\t\tAliases: []string{\"v\"},\n\t\t\tUsage: \"Verbose\",\n\t\t},\n\t},\n}\n\nvar commandImg = &cli.Command{\n\tName: \"img\",\n\tUsage: \"visualize network topology by graphviz from tinet config file\",\n\tAction: CmdImg,\n\tFlags: []cli.Flag{\n\t\t&cli.StringFlag{\n\t\t\tName: \"config\",\n\t\t\tAliases: []string{\"c\"},\n\t\t\tUsage: \"Specify the Config file.\",\n\t\t\tValue: \"spec.yaml\",\n\t\t},\n\t\t&cli.StringFlag{\n\t\t\tName: \"format\",\n\t\t\tAliases: []string{\"f\"},\n\t\t\tUsage: \"Image output format\",\n\t\t\tValue: \"graphviz\",\n\t\t},\n\t},\n}\n\nvar commandInit = &cli.Command{\n\tName: \"init\",\n\tUsage: \"Generate tinet config template file\",\n\tAction: CmdInit,\n}\n\nvar commandPs = &cli.Command{\n\tName: \"ps\",\n\tUsage: \"docker and netns process\",\n\tAction: CmdPs,\n\tFlags: []cli.Flag{\n\t\t&cli.BoolFlag{\n\t\t\tName: \"all\",\n\t\t\tAliases: []string{\"a\"},\n\t\t\tUsage: \"all docker and netns\",\n\t\t},\n\t},\n}\n\nvar commandPull = &cli.Command{\n\tName: \"pull\",\n\tUsage: \"Pull Node docker image from tinet config file\",\n\tAction: CmdPull,\n\tFlags: []cli.Flag{\n\t\t&cli.StringFlag{\n\t\t\tName: \"config\",\n\t\t\tAliases: []string{\"c\"},\n\t\t\tUsage: \"Specify the Config file.\",\n\t\t\tValue: \"spec.yaml\",\n\t\t},\n\t},\n}\n\nvar commandReConf = &cli.Command{\n\tName: \"reconf\",\n\tUsage: \"Stop, remove, create, start and config\",\n\tAction: CmdReConf,\n\tFlags: []cli.Flag{\n\t\t&cli.StringFlag{\n\t\t\tName: \"config\",\n\t\t\tAliases: []string{\"c\"},\n\t\t\tUsage: \"Specify the Config file.\",\n\t\t\tValue: \"spec.yaml\",\n\t\t},\n\t\t&cli.BoolFlag{\n\t\t\tName: \"verbose\",\n\t\t\tAliases: []string{\"v\"},\n\t\t\tUsage: \"Verbose\",\n\t\t},\n\t},\n}\n\nvar commandReUp = &cli.Command{\n\tName: \"reup\",\n\tUsage: \"Stop, remove, create, start\",\n\tAction: CmdReUp,\n\tFlags: []cli.Flag{\n\t\t&cli.StringFlag{\n\t\t\tName: \"config\",\n\t\t\tAliases: []string{\"c\"},\n\t\t\tUsage: \"Specify the Config file.\",\n\t\t\tValue: \"spec.yaml\",\n\t\t},\n\t\t&cli.BoolFlag{\n\t\t\tName: \"verbose\",\n\t\t\tAliases: []string{\"v\"},\n\t\t\tUsage: \"Verbose\",\n\t\t},\n\t},\n}\n\nvar commandTest = &cli.Command{\n\tName: \"test\",\n\tUsage: \"Execute test commands from tinet config file.\",\n\tAction: CmdTest,\n\tFlags: []cli.Flag{\n\t\t&cli.StringFlag{\n\t\t\tName: \"config\",\n\t\t\tAliases: []string{\"c\"},\n\t\t\tUsage: \"Specify the Config file.\",\n\t\t\tValue: \"spec.yaml\",\n\t\t},\n\t},\n}\n\nvar commandCheck = &cli.Command{\n\tName: \"check\",\n\tUsage: \"check config\",\n\tAction: CmdCheck,\n\tFlags: []cli.Flag{\n\t\t&cli.StringFlag{\n\t\t\tName: \"config\",\n\t\t\tAliases: []string{\"c\"},\n\t\t\tUsage: \"Specify the Config file.\",\n\t\t\tValue: \"spec.yaml\",\n\t\t},\n\t},\n}\n" }, { "path": "configs/spec_template.yaml", "content": "precmd:\n- cmds:\n - cmd: \"\"\npreinit:\n- cmds:\n - cmd: \"\"\npreconf:\n- cmds:\n - cmd: \"\"\npostinit:\n- cmds:\n - cmd: \"\"\npostfini:\n- cmds:\n - cmd: \"\"\nnodes:\n- name: \"\"\n type: \"\"\n net_base: \"\"\n image: \"\"\n interfaces:\n - name: \"\"\n type: \"\"\n args: \"\"\n addr: \"\"\n label: \"\"\n sysctls: []\nswitches:\n- name: \"\"\n interfaces:\n - name: \"\"\n type: \"\"\n args: \"\"\n addr: \"\"\nnode_configs:\n- name: \"\"\n cmds:\n - cmd: \"\"\ntest:\n- name: \"\"\n cmds:\n - cmd: \"\"\n" }, { "path": "docs/command-line-usage-example.md", "content": "# Command Line Usage Example\n\n## tn build\nThat hasn't been implemented yet.\n\n## tn check\n```\n## Check link node to node\ntn check -c spec.yaml\n```\n\n## tn conf\n```\ntn conf -c spec.yaml\n\n## docker and netns exec config\ntn conf -c spec.yaml | sudo sh -x\n```\n\n## tn down\n```\ntn down -c spec.yaml\n\n## Remove docker container and netns\ntn conf -c spec.yaml | sudo sh -x\n```\n\n## tn exec\nThat hasn't been implemented yet.\n\n## tn help\n```\ntn help\ntn -h\n```\n\n## tn img\n```\n## Output dot\ntn img -c spec.yaml\n\n## Generate img file\ntn img -c spec.yaml | dot -Tpng > spec.png\n```\n\n## tn init\n```\n## Output tinet config template\ntn init\n\n## Generate Tinet config file\ntn init > spec.yaml\n```\n\n## tn print\n```\ntn print -c spec.yaml\n```\n\n## tn ps\n```\n## Output docker and netns info cmd\ntn ps -c spec.yaml\n\n## Output docker and netns info\ntn ps -c spec.yaml | sudo sh -x\n```\n\n## tn pull\n```\ntn pull -c spec.yaml\n\n## Execute docker pull\ntn pull -c spec.yaml | sudo sh -x\n```\n\n## tn reconf\n```\ntn reconf -c spec.yaml\n\n## down, up, conf\ntn reconf -c spec.yaml | sudo sh -x\n```\n\n## tn reup\n```\ntn reup -c spec.yaml\n\n## down, up\ntn reup -c spec.yaml | sudo sh -x\n```\n\n## tn up\n```\ntn up -c spec.yaml\n\n## up\ntn up -c spec.yaml | sudo sh -x\n```\n\n## tn upconf\n```\ntn upconf -c spec.yaml\n\n## up, conf\ntn upconf -c spec.yaml | sudo sh -x\n```\n\n## tn version\n```\ntn version\n```\n" }, { "path": "docs/specification_yml.md", "content": "# Yaml Format\n\n## Node Definition\n\n### Node type\n\n- name: node name. It will be container-name or netns-name.\n- type: node type (default: docker)\n\t- docker: node is docker container\n\t- netns: node is just network namespace\n- image: specify docker-image\n- sysctls: set sysctls\n- mounts: mounts file/directory on the container\n- dns: set DNS resolver\n- dns_search: set DNS search domain\n\n\n```\nnodes:\n - name: Node0\n image: ubuntu:18.04\n - name: Node1\n type: netns\n\t- name: Node2\n\t build: .\n```\n\n### Interface Definition\n\n- type\n\t- direct: p2p connect to other container\n\t- bridge: bridge connection\n\t- phys : host's network interface\n- addr: specify mac address\n\n```\nnodes:\n - name: Node0\n image: ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R0#net1 }\n - { name: net0, type: bridge, args: B0 }\n - { name: eth0, type: phys }\n - { name: net0, type: direct, args: R1#net1, addr: 11:11:11:11:11:11 }\n```\n\n### Bridge Definition\n\nIf you use the bridge interface type, you need to\ndefine the Bridge-Instance. It'll be created as a\nlinux bridge instance.\n\n- name: interface name\n- type: interface type, you must choose following.\n\t- docker: net-if of docker container\n\t- netns: net-if of network namespace\n\t- phys: host's network interface\n\n```\nbridges:\n - name: Bridge0\n interfaces:\n - { name: net0, type: docker, args: R0 }\n - { name: net0, type: netns, args: NS0 }\n - { name: eth0, type: phys }\n```\n\n## Config Definition\n- name: node name\n- cmds: shell command\n\n```\nnode_configs:\n - name: Router1\n cmds:\n - cmd: ip addr add 10.255.0.10/32 dev lo\n - cmd: ip addr add 10.0.0.10/24 dev net0\n\t\t\t- copy: ./config.conf /usr/local/config.conf\n - name: Router0\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: /usr/lib/frr/frr start\n - cmd: ip addr add 10.255.0.1/32 dev lo\n - cmd: ip addr add 10.0.0.1/24 dev net0\n - cmd: ip addr add 10.1.0.1/24 dev net1\n - cmd: >-\n vtysh -c 'conf t'\n -c 'router bgp 100'\n -c ' bgp router-id 10.255.0.1'\n -c ' neighbor 10.0.0.10 remote-as 100'\n -c ' neighbor 10.0.0.20 remote-as 100'\n -c ' neighbor 10.0.0.30 remote-as 100'\n```\n\n## Test Definition\n\n- name: test name, you can specify when you run `tn conf -n `\n- cmds: same format of config definition\n\n```\ntest:\n - name: p2p\n\t cmds:\n - cmd: docker exec S0 ping -c2 10.1.0.1\n - cmd: docker exec S1 ping -c2 192.168.0.1\n - cmd: docker exec S2 ping -c2 192.168.0.1\n - cmd: docker exec S3 ping -c2 192.168.0.1\n - name: remote\n\t cmds:\n - cmd: docker exec S0 ping -c2 10.1.0.1\n - cmd: docker exec S1 ping -c2 192.168.0.1\n - cmd: docker exec S2 ping -c2 192.168.0.1\n - cmd: docker exec S3 ping -c2 192.168.0.1\n```\n\n## System Requirement Definition\n\n```\nrequire:\n\t- kernel_min: 4.11.0\n\t- kernel_max: 4.15.0\n\t- kmod: [ mpls_router, mpls_iptunnel, mpls_gso ]\n - kconfig: [ CONFIG_NET_L3_MASTER_DEV ]\n```\n" }, { "path": "examples/bandwidth_tc/spec.yaml", "content": "nodes:\n\n - name: C1\n image: ip6tables:test\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - name: C4\n image: ip6tables:test\n interfaces:\n - { name: net0, type: direct, args: R1#net3 } \n - name: C2\n image: ip6tables:test\n interfaces:\n - { name: net0, type: direct, args: R1#net1 }\n - name: C3\n image: ip6tables:test\n interfaces:\n - { name: net0, type: direct, args: R1#net2 } \n - name: R1\n image: ip6tables:test\n interfaces:\n - { name: net0, type: direct, args: C1#net0 }\n - { name: net1, type: direct, args: C2#net0 }\n - { name: net2, type: direct, args: C3#net0 }\n - { name: net3, type: direct, args: C4#net0 } \n \n\nnode_configs:\n\n - name: C1\n cmds:\n - cmd: ip addr add 10.0.0.2/24 dev net0\n - cmd: ip route replace default via 10.0.0.1\n - name: C4\n cmds:\n - cmd: ip addr add 10.0.0.12/24 dev net0\n - cmd: ip route replace default via 10.0.0.1 \n - name: C2\n cmds:\n - cmd: ip addr add 10.1.0.2/24 dev net0\n - cmd: ip route replace default via 10.1.0.1\n - name: C3\n cmds:\n - cmd: ip addr add 10.2.0.2/24 dev net0\n - cmd: ip route replace default via 10.2.0.1 \n - name: R1\n cmds:\n - cmd: ip link add br0 type bridge\n - cmd: ip link set br0 up \n - cmd: ip addr add 10.0.0.1/24 dev br0\n - cmd: ip addr add 10.1.0.1/24 dev net1\n - cmd: ip addr add 10.2.0.1/24 dev net2\n - cmd: ip link set net0 master br0\n - cmd: ip link set net3 master br0\n - cmd: tc qdisc add dev net0 root tbf limit 1Mb buffer 200Kb rate 1Mbps\n - cmd: tc qdisc add dev net2 root tbf limit 1Mb buffer 200Kb rate 1Mbps\n - cmd: ethtool -K net0 tso off gso off\n - cmd: ethtool -K net2 tso off gso off\n - cmd: tc qdisc replace dev net0 root netem delay 10ms\n - cmd: tc qdisc replace dev net1 root netem delay 10ms\n - cmd: tc qdisc replace dev net2 root netem delay 10ms\n - cmd: tc qdisc replace dev net3 root netem delay 10ms \n - cmd: sysctl -w net.ipv4.ip_forward=1\n" }, { "path": "examples/basic_bfd/spec.yaml", "content": "# http://www.asciiflow.com\n\nnodes:\n - name: R1\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - { name: net1, type: direct, args: R3#net0 }\n - name: R2\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - { name: net1, type: direct, args: R4#net0 }\n - name: R3\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R1#net1 }\n - { name: net1, type: direct, args: R4#net1 }\n - name: R4\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R2#net1 }\n - { name: net1, type: direct, args: R3#net1 }\n\nnode_configs:\n - name: R1\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'interface lo'\n -c ' ip address 10.255.0.1/32'\n -c 'exit'\n -c 'interface net0'\n -c ' ip address 10.0.0.1/30'\n -c ' ip ospf bfd'\n -c 'exit'\n -c 'interface net1'\n -c ' ip address 10.0.0.5/30'\n -c ' ip ospf bfd'\n -c 'exit'\n -c 'router ospf'\n -c ' network 10.0.0.0/30 area 0'\n -c ' network 10.0.0.4/30 area 0'\n -c 'exit'\n - name: R2\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'interface lo'\n -c ' ip address 10.255.0.2/32'\n -c 'exit'\n -c 'interface net0'\n -c ' ip address 10.0.0.2/30'\n -c ' ip ospf bfd'\n -c 'exit'\n -c 'interface net1'\n -c ' ip address 10.0.0.9/30'\n -c ' ip ospf bfd'\n -c 'exit'\n -c 'router ospf'\n -c ' network 10.0.0.0/30 area 0'\n -c ' network 10.0.0.8/30 area 0'\n -c 'exit'\n - name: R3\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'interface lo'\n -c ' ip address 10.255.0.3/32'\n -c 'exit'\n -c 'interface net0'\n -c ' ip address 10.0.0.6/30'\n -c ' ip ospf bfd'\n -c 'exit'\n -c 'interface net1'\n -c ' ip address 10.0.0.13/30'\n -c ' ip ospf bfd'\n -c 'exit'\n -c 'router ospf'\n -c ' network 10.0.0.4/30 area 0'\n -c ' network 10.0.0.12/30 area 0'\n - name: R4\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'interface lo'\n -c ' ip address 10.255.0.4/32'\n -c 'exit'\n -c 'interface net0'\n -c ' ip address 10.0.0.10/30'\n -c ' ip ospf bfd'\n -c 'exit'\n -c 'interface net1'\n -c ' ip address 10.0.0.14/30'\n -c ' ip ospf bfd'\n -c 'exit'\n -c 'router ospf'\n -c ' network 10.0.0.8/30 area 0'\n -c ' network 10.0.0.12/30 area 0'\n\ntest:\n - cmds:\n ## P2P Link test\n - cmd: docker exec R1 ping -c2 10.0.0.2\n - cmd: docker exec R1 ping -c2 10.0.0.6\n - cmd: docker exec R2 ping -c2 10.0.0.1\n - cmd: docker exec R2 ping -c2 10.0.0.10\n - cmd: docker exec R3 ping -c2 10.0.0.5\n - cmd: docker exec R3 ping -c2 10.0.0.14\n - cmd: docker exec R4 ping -c2 10.0.0.9\n - cmd: docker exec R4 ping -c2 10.0.0.13\n\n" }, { "path": "examples/basic_bgp/README.md", "content": "\n# BGP Playground\n\n\n" }, { "path": "examples/basic_bgp/bgp_clos_evpn_vxlan/spec.yaml", "content": "# ref: https://www.apresiatac.jp/blog/201903121016/\n\nnodes:\n - name: Spine1\n image: akiranet24/frr\n interfaces:\n - { name: swp49, type: direct, args: Leaf1#swp49 }\n - { name: swp50, type: direct, args: Leaf2#swp49 }\n sysctls:\n - sysctl: net.ipv4.ip_forward=1\n - sysctl: net.ipv4.conf.all.rp_filter=0\n - sysctl: net.ipv4.conf.lo.rp_filter=0\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.all.forwarding=1\n - sysctl: net.ipv6.conf.all.forwarding=1\n - sysctl: net.ipv6.conf.all.seg6_enabled=1\n - sysctl: net.ipv6.conf.default.seg6_enabled=1\n - sysctl: net.ipv4.fib_multipath_hash_policy=1\n - name: Spine2\n image: akiranet24/frr\n interfaces:\n - { name: swp49, type: direct, args: Leaf1#swp50 }\n - { name: swp50, type: direct, args: Leaf2#swp50 }\n sysctls:\n - sysctl: net.ipv4.ip_forward=1\n - sysctl: net.ipv4.conf.all.rp_filter=0\n - sysctl: net.ipv4.conf.lo.rp_filter=0\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.all.forwarding=1\n - sysctl: net.ipv6.conf.all.forwarding=1\n - sysctl: net.ipv6.conf.all.seg6_enabled=1\n - sysctl: net.ipv6.conf.default.seg6_enabled=1\n - sysctl: net.ipv4.fib_multipath_hash_policy=1\n - name: Leaf1\n image: akiranet24/frr\n interfaces:\n - { name: swp49, type: direct, args: Spine1#swp49 }\n - { name: swp50, type: direct, args: Spine2#swp49 }\n - { name: swp1, type: direct, args: Vm1#net1 }\n sysctls:\n - sysctl: net.ipv4.ip_forward=1\n - sysctl: net.ipv4.conf.all.rp_filter=0\n - sysctl: net.ipv4.conf.lo.rp_filter=0\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.all.forwarding=1\n - sysctl: net.ipv6.conf.all.forwarding=1\n - sysctl: net.ipv6.conf.all.seg6_enabled=1\n - sysctl: net.ipv6.conf.default.seg6_enabled=1\n - sysctl: net.ipv4.fib_multipath_hash_policy=1\n - name: Leaf2\n image: akiranet24/frr\n interfaces:\n - { name: swp49, type: direct, args: Spine1#swp50 }\n - { name: swp50, type: direct, args: Spine2#swp50 }\n - { name: swp1, type: direct, args: Vm2#net1 }\n sysctls:\n - sysctl: net.ipv4.ip_forward=1\n - sysctl: net.ipv4.conf.all.rp_filter=0\n - sysctl: net.ipv4.conf.lo.rp_filter=0\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.all.forwarding=1\n - sysctl: net.ipv6.conf.all.forwarding=1\n - sysctl: net.ipv6.conf.all.seg6_enabled=1\n - sysctl: net.ipv6.conf.default.seg6_enabled=1\n - sysctl: net.ipv4.fib_multipath_hash_policy=1\n\n - name: Vm1\n image: akiranet24/frr\n interfaces: [ { name: net1, type: direct, args: Leaf1#swp1 } ]\n sysctls:\n - sysctl: net.ipv4.ip_forward=1\n - sysctl: net.ipv4.conf.all.rp_filter=0\n - sysctl: net.ipv4.conf.lo.rp_filter=0\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.all.forwarding=1\n - sysctl: net.ipv6.conf.all.forwarding=1\n - sysctl: net.ipv6.conf.all.seg6_enabled=1\n - sysctl: net.ipv6.conf.default.seg6_enabled=1\n - sysctl: net.ipv4.fib_multipath_hash_policy=1\n - name: Vm2\n image: akiranet24/frr\n interfaces: [ { name: net1, type: direct, args: Leaf2#swp1 } ]\n sysctls:\n - sysctl: net.ipv4.ip_forward=1\n - sysctl: net.ipv4.conf.all.rp_filter=0\n - sysctl: net.ipv4.conf.lo.rp_filter=0\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.all.forwarding=1\n - sysctl: net.ipv6.conf.all.forwarding=1\n - sysctl: net.ipv6.conf.all.seg6_enabled=1\n - sysctl: net.ipv6.conf.default.seg6_enabled=1\n - sysctl: net.ipv4.fib_multipath_hash_policy=1\n\nnode_configs:\n - name: Spine1\n cmds:\n - cmd: sed -i s/'#frr_profile=\"datacenter\"'/'frr_profile=\"datacenter\"'/ /etc/frr/daemons\n - cmd: /etc/init.d/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.0.0.1/32\"\n -c \"int swp49\" -c \"ipv6 nd ra-interval 10\" -c \"no ipv6 nd suppress-ra\"\n -c \"int swp50\" -c \"ipv6 nd ra-interval 10\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65020\"\n -c \" bgp router-id 10.0.0.1\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor FABRIC bfd\"\n -c \" neighbor FABRIC capability extended-nexthop\"\n -c \" neighbor swp49 interface peer-group FABRIC\"\n -c \" neighbor swp50 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" network 10.0.0.1/32\"\n -c \" exit-address-family\"\n -c \" address-family l2vpn evpn\"\n -c \" neighbor FABRIC activate\"\n -c \" exit-address-family\"\n - name: Spine2\n cmds:\n - cmd: sed -i s/'#frr_profile=\"datacenter\"'/'frr_profile=\"datacenter\"'/ /etc/frr/daemons\n - cmd: /etc/init.d/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.0.0.2/32\"\n -c \"int swp49\" -c \"ipv6 nd ra-interval 10\" -c \"no ipv6 nd suppress-ra\"\n -c \"int swp50\" -c \"ipv6 nd ra-interval 10\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65020\"\n -c \" bgp router-id 10.0.0.2\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor FABRIC bfd\"\n -c \" neighbor FABRIC capability extended-nexthop\"\n -c \" neighbor swp49 interface peer-group FABRIC\"\n -c \" neighbor swp50 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" network 10.0.0.2/32\"\n -c \" exit-address-family\"\n -c \" address-family l2vpn evpn\"\n -c \" neighbor FABRIC activate\"\n -c \" exit-address-family\"\n - name: Leaf1\n cmds:\n - cmd: sed -i s/'#frr_profile=\"datacenter\"'/'frr_profile=\"datacenter\"'/ /etc/frr/daemons\n - cmd: /etc/init.d/frr start\n - cmd: ip link add br0 type bridge vlan_filtering 1\n - cmd: ip link add link swp1 name swp1.100 type vlan id 100\n - cmd: ip link add vni-10100 type vxlan id 10100 local 10.0.0.11 remote 10.0.0.12 dstport 4789 nolearning\n - cmd: ip link set vni-10100 master br0\n - cmd: ip link set swp1.100 master br0\n - cmd: ip link set br0 up\n - cmd: ip link set vni-10100 up\n - cmd: ip link set swp1.100 up\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.0.0.11/32\"\n -c \"int swp49\" -c \"ipv6 nd ra-interval 10\" -c \"no ipv6 nd suppress-ra\"\n -c \"int swp50\" -c \"ipv6 nd ra-interval 10\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65011\"\n -c \" bgp router-id 10.0.0.11\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor FABRIC bfd\"\n -c \" neighbor FABRIC capability extended-nexthop\"\n -c \" neighbor swp49 interface peer-group FABRIC\"\n -c \" neighbor swp50 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" network 10.0.0.11/32\"\n -c \" exit-address-family\"\n -c \" address-family l2vpn evpn\"\n -c \" neighbor FABRIC activate\"\n -c \" advertise-all-vni\"\n -c \" exit-address-family\"\n - name: Leaf2\n cmds:\n - cmd: sed -i s/'#frr_profile=\"datacenter\"'/'frr_profile=\"datacenter\"'/ /etc/frr/daemons\n - cmd: /etc/init.d/frr start\n - cmd: ip link add br0 type bridge vlan_filtering 1\n - cmd: ip link add link swp1 name swp1.100 type vlan id 100\n - cmd: ip link add vni-10100 type vxlan id 10100 local 10.0.0.12 remote 10.0.0.11 dstport 4789 nolearning\n - cmd: ip link set vni-10100 master br0\n - cmd: ip link set swp1.100 master br0\n - cmd: ip link set br0 up\n - cmd: ip link set vni-10100 up\n - cmd: ip link set swp1.100 up\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.0.0.12/32\"\n -c \"int swp49\" -c \"ipv6 nd ra-interval 10\" -c \"no ipv6 nd suppress-ra\"\n -c \"int swp50\" -c \"ipv6 nd ra-interval 10\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65012\"\n -c \" bgp router-id 10.0.0.12\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor FABRIC bfd\"\n -c \" neighbor FABRIC capability extended-nexthop\"\n -c \" neighbor swp49 interface peer-group FABRIC\"\n -c \" neighbor swp50 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" network 10.0.0.12/32\"\n -c \" exit-address-family\"\n -c \" address-family l2vpn evpn\"\n -c \" neighbor FABRIC activate\"\n -c \" advertise-all-vni\"\n -c \" exit-address-family\"\n - name: Vm1\n cmds:\n - cmd: /etc/init.d/frr start\n - cmd: ip link add link net1 name net1.100 type vlan id 100\n - cmd: ip addr add 172.16.100.10/24 dev net1.100\n - cmd: ip link set net1.100 up\n - name: Vm2\n cmds:\n - cmd: /etc/init.d/frr start\n - cmd: ip link add link net1 name net1.100 type vlan id 100\n - cmd: ip addr add 172.16.100.20/24 dev net1.100\n - cmd: ip link set net1.100 up\n\ntest:\n - cmds:\n - cmd: docker exec Vm1 ping -c2 172.16.100.20\n" }, { "path": "examples/basic_bgp/graceful_restart/simple_ipv4_unicast/README.md", "content": "# Simple IPv4 unicast BGP-GR\n\n```\n$ tinet up -c spec.yaml | sudo sh\n$ docker exec -it R2 bash\nR2# tcpdump -nnli net0 # another shell\n$ tinet conf -c spec.yaml | sudo sh \n$ docker exec R1 pkill -9 bgpd\n```\n\n" }, { "path": "examples/basic_bgp/graceful_restart/simple_ipv4_unicast/spec.yaml", "content": "nodes:\n- name: C1\n image: alpine:latest\n interfaces:\n - { name: net1, type: direct, args: R1#net1 }\n- name: R1\n image: frrouting/frr:v8.1.0\n docker_run_extra_args: --entrypoint bash\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - { name: net1, type: direct, args: C1#net1 }\n sysctls:\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.default.disable_ipv6=0\n - sysctl: net.ipv4.ip_forward=1\n- name: R2\n image: frrouting/frr:v8.1.0\n docker_run_extra_args: --entrypoint bash\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n sysctls:\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.default.disable_ipv6=0\n - sysctl: net.ipv4.ip_forward=1\nnode_configs:\n- name: R1\n cmds:\n - cmd: sed -i -e 's/bgpd=no/bgpd=yes/g' /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'interface net0'\n -c ' ip address 10.255.0.1/16'\n -c '!'\n -c 'interface net1'\n -c ' ip address 192.168.10.1/16'\n -c '!'\n -c 'ip prefix-list PL1 permit 192.168.0.0/16'\n -c '!'\n -c 'route-map RM1 permit 10'\n -c ' match ip address prefix-list PL1'\n -c '!'\n -c 'router bgp 65001'\n -c ' no bgp ebgp-requires-policy'\n -c ' bgp router-id 10.255.0.1'\n -c ' bgp graceful-restart'\n -c ' bgp graceful-restart preserve-fw-state'\n -c ' bgp graceful-restart restart-time 1800'\n -c ' bgp graceful-restart stalepath-time 1800'\n -c ' neighbor 10.255.0.2 remote-as 65002'\n -c ' neighbor 10.255.0.2 route-map RM1 out'\n -c ' address-family ipv4 unicast'\n -c ' redistribute connected' \n -c ' exit-address-family'\n - cmd: vtysh -c 'write mem'\n- name: R2\n cmds:\n - cmd: sed -i -e 's/bgpd=no/bgpd=yes/g' /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'interface net0'\n -c ' ip address 10.255.0.2/16'\n -c '!'\n -c 'ip prefix-list PL1 permit 192.168.0.0/16'\n -c '!'\n -c 'route-map RM1 permit 10'\n -c ' match ip address prefix-list PL1'\n -c '!'\n -c 'router bgp 65002'\n -c ' no bgp ebgp-requires-policy'\n -c ' bgp router-id 10.255.0.2'\n -c ' bgp graceful-restart'\n -c ' bgp graceful-restart preserve-fw-state'\n -c ' bgp graceful-restart restart-time 1800'\n -c ' bgp graceful-restart stalepath-time 1800'\n -c ' neighbor 10.255.0.1 remote-as 65001'\n -c ' neighbor 10.255.0.1 route-map RM1 in'\n - cmd: vtysh -c 'write mem'\n- name: C1\n cmds:\n - cmd: ip addr add 192.168.10.254/16 dev net1\n - cmd: route add default gw 192.168.10.1\ntest:\n- cmds:\n - cmd: docker exec R1 ping -c2 192.168.10.254\n - cmd: docker exec R2 ping -c2 192.168.10.254\n" }, { "path": "examples/basic_bgp/hv_bgp_dcn/README.md", "content": "\n# HV route advertisement study for BGP-DCN\n\n- [GOOD reference about routing-info manupulation by @ukinau](https://engineering.linecorp.com/ja/blog/openstack-summit-vancouver-2018-recap-2-2/)\n- [GOOD reference about proxy arp by @ukinau](https://qiita.com/ukinau/items/cb25588fb0c276a009dc)\n\n![](topo.png)\n\n```\ndocker exec TOR vtysh -c 'show bgp ipv4 unicast'\nBGP table version is 4, local router ID is 10.255.0.99, vrf id 0\nStatus codes: s suppressed, d damped, h history, * valid, > best, = multipath,\n i internal, r RIB-failure, S Stale, R Removed\nNexthop codes: @NNN nexthop's vrf id, < announce-nh-self\nOrigin codes: i - IGP, e - EGP, ? - incomplete\n\n Network Next Hop Metric LocPrf Weight Path\n*> 1.1.1.1/32 0.0.0.0 0 32768 ?\n*> 10.0.0.11/32 dn1 0 0 65001 ?\n*> 10.0.0.12/32 dn1 0 0 65001 ?\n*> 10.0.0.13/32 dn1 0 0 65001 ?\n\nDisplayed 4 routes and 4 total paths\n```\n\n" }, { "path": "examples/basic_bgp/hv_bgp_dcn/spec.yaml", "content": "\nnodes:\n - name: TOR\n image: slankdev/frr\n interfaces:\n - { name: dn1, type: direct, args: HV1#up1 }\n - name: HV1\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: TOR#dn1 }\n - { name: dn1, type: direct, args: VM1#net0 }\n - { name: dn2, type: direct, args: VM2#net0 }\n - { name: dn3, type: direct, args: VM3#net0 }\n - name: VM1\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: HV1#dn1 }\n - name: VM2\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: HV1#dn2 }\n - name: VM3\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: HV1#dn3 }\n\nnode_configs:\n - name: TOR\n cmds:\n - cmd: sh -c \"enable_seg6_router.py | sh\"\n - cmd: ip addr add 1.1.1.1/32 dev lo\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'interface dn1'\n -c ' ipv6 nd ra-interval 3'\n -c ' no ipv6 nd suppress-ra'\n -c '!'\n -c 'router bgp 65099'\n -c ' bgp router-id 10.255.0.99'\n -c ' bgp bestpath as-path multipath-relax'\n -c ' neighbor PEER peer-group'\n -c ' neighbor PEER remote-as external'\n -c ' neighbor dn1 interface peer-group PEER'\n -c '!'\n -c ' address-family ipv4 unicast'\n -c ' neighbor dn1 activate'\n -c ' redistribute connected'\n -c ' exit-address-family'\n\n - name: HV1\n cmds:\n - cmd: sh -c \"enable_seg6_router.py | sh\"\n - cmd: ip addr add 10.0.0.1/24 dev dn1\n - cmd: ip addr add 10.0.0.1/24 dev dn2\n - cmd: ip addr add 10.0.0.1/24 dev dn3\n - cmd: ip route add 10.0.0.11 dev dn1\n - cmd: ip route add 10.0.0.12 dev dn2\n - cmd: ip route add 10.0.0.13 dev dn3\n - cmd: sysctl -w net.ipv4.conf.dn1.proxy_arp=1\n - cmd: sysctl -w net.ipv4.conf.dn2.proxy_arp=1\n - cmd: sysctl -w net.ipv4.conf.dn3.proxy_arp=1\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'interface up1'\n -c ' ipv6 nd ra-interval 3'\n -c ' no ipv6 nd suppress-ra'\n -c '!'\n -c 'router bgp 65001'\n -c ' bgp router-id 10.255.0.1'\n -c ' bgp bestpath as-path multipath-relax'\n -c ' neighbor PEER peer-group'\n -c ' neighbor PEER remote-as external'\n -c ' neighbor up1 interface peer-group PEER'\n -c ' !'\n -c ' address-family ipv4 unicast'\n -c ' redistribute kernel route-map TO_TOR'\n -c ' neighbor up1 route-map TO_TOR out'\n -c ' exit-address-family'\n -c '!'\n -c 'route-map TO_TOR permit 1'\n -c 'match ip address prefix-len 32'\n -c 'exit'\n\n - name: VM1\n cmds:\n - cmd: ip addr add 10.0.0.11/24 dev net0\n - cmd: ip route add default via 10.0.0.1\n - name: VM2\n cmds:\n - cmd: ip addr add 10.0.0.12/24 dev net0\n - cmd: ip route add default via 10.0.0.1\n - name: VM3\n cmds:\n - cmd: ip addr add 10.0.0.13/24 dev net0\n - cmd: ip route add default via 10.0.0.1\n\n" }, { "path": "examples/basic_bgp/hv_bgp_dcn_isol/Makefile", "content": "\nsh:\n\tdocker exec TOR vtysh -c 'show bgp ipv4 vpn'\n" }, { "path": "examples/basic_bgp/hv_bgp_dcn_isol/README.md", "content": "\n# HV route advertisement study for BGP-DCN\n\n- [GOOD reference about routing-info manupulation by @ukinau](https://engineering.linecorp.com/ja/blog/openstack-summit-vancouver-2018-recap-2-2/)\n- [GOOD reference about proxy arp by @ukinau](https://qiita.com/ukinau/items/cb25588fb0c276a009dc)\n\n![](topo.png)\n\n```\ndocker exec TOR vtysh -c 'show bgp ipv4 unicast'\nBGP table version is 4, local router ID is 10.255.0.99, vrf id 0\nStatus codes: s suppressed, d damped, h history, * valid, > best, = multipath,\n i internal, r RIB-failure, S Stale, R Removed\nNexthop codes: @NNN nexthop's vrf id, < announce-nh-self\nOrigin codes: i - IGP, e - EGP, ? - incomplete\n\n Network Next Hop Metric LocPrf Weight Path\n*> 1.1.1.1/32 0.0.0.0 0 32768 ?\n*> 10.0.0.11/32 dn1 0 0 65001 ?\n*> 10.0.0.12/32 dn1 0 0 65001 ?\n*> 10.0.0.13/32 dn1 0 0 65001 ?\n\nDisplayed 4 routes and 4 total paths\n```\n\n" }, { "path": "examples/basic_bgp/hv_bgp_dcn_isol/spec.yaml", "content": "\nnodes:\n - name: TOR\n # image: slankdev/frr-dev:latest\n image: slankdev/frr-dev:draft-ietf-bess-srv6-services\n interfaces:\n - { name: dn1, type: direct, args: HV1#up1 }\n - name: HV1\n # image: slankdev/frr-dev:latest\n image: slankdev/frr-dev:draft-ietf-bess-srv6-services\n interfaces:\n - { name: up1, type: direct, args: TOR#dn1 }\n - { name: dn1, type: direct, args: VM1#net0 }\n - { name: dn2, type: direct, args: VM2#net0 }\n - { name: dn3, type: direct, args: VM3#net0 }\n - name: VM1\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: HV1#dn1 }\n - name: VM2\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: HV1#dn2 }\n - name: VM3\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: HV1#dn3 }\n\nnode_configs:\n - name: TOR\n cmds:\n - cmd: sh -c \"echo > /etc/frr/frr.conf\"\n - cmd: sh -c \"enable_seg6_router.py | sh\"\n - cmd: ip addr add 1.1.1.1/32 dev lo\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'interface dn1'\n -c ' ipv6 nd ra-interval 3'\n -c ' no ipv6 nd suppress-ra'\n -c '!'\n -c 'router bgp 65099'\n -c ' bgp router-id 10.255.0.99'\n -c ' no bgp default ipv4-unicast'\n -c ' bgp bestpath as-path multipath-relax'\n -c ' neighbor PEER peer-group'\n -c ' neighbor PEER remote-as external'\n -c ' neighbor dn1 interface peer-group PEER'\n -c '!'\n -c ' address-family ipv4 vpn'\n -c ' neighbor PEER activate'\n -c ' exit-address-family'\n\n - name: HV1\n cmds:\n - cmd: sh -c \"echo > /etc/frr/frr.conf\"\n - cmd: sh -c \"enable_seg6_router.py | sh\"\n - cmd: ip link add vrf1 type vrf table 10\n - cmd: ip link set vrf1 up\n - cmd: ip link set dn1 vrf vrf1\n - cmd: ip link set dn2 vrf vrf1\n - cmd: ip link set dn3 vrf vrf1\n - cmd: ip addr add 10.0.0.1/24 dev dn1 noprefixroute\n - cmd: ip addr add 10.0.0.1/24 dev dn2 noprefixroute\n - cmd: ip addr add 10.0.0.1/24 dev dn3 noprefixroute\n - cmd: ip route add 10.0.0.11 dev dn1 vrf vrf1\n - cmd: ip route add 10.0.0.12 dev dn2 vrf vrf1\n - cmd: ip route add 10.0.0.13 dev dn3 vrf vrf1\n - cmd: sysctl -w net.ipv4.conf.dn1.proxy_arp=1\n - cmd: sysctl -w net.ipv4.conf.dn2.proxy_arp=1\n - cmd: sysctl -w net.ipv4.conf.dn3.proxy_arp=1\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'interface up1'\n -c ' ipv6 nd ra-interval 3'\n -c ' no ipv6 nd suppress-ra'\n -c '!'\n -c 'router bgp 65001'\n -c ' bgp router-id 10.255.0.1'\n -c ' no bgp default ipv4-unicast'\n -c ' bgp bestpath as-path multipath-relax'\n -c ' neighbor PEER peer-group'\n -c ' neighbor PEER remote-as external'\n -c ' neighbor up1 interface peer-group PEER'\n -c ' !'\n -c ' address-family ipv4 vpn'\n -c ' neighbor PEER activate'\n -c ' segment-routing-ipv6'\n -c ' exit-address-family'\n -c '!'\n -c 'router bgp 65001 vrf vrf1'\n -c ' bgp router-id 10.255.0.1'\n -c ' bgp bestpath as-path multipath-relax'\n -c ' !'\n -c ' address-family ipv4 unicast'\n -c ' redistribute kernel'\n -c ' sid vpn export locator default'\n -c ' rd vpn export 65001:1'\n -c ' rt vpn both 100:1'\n -c ' export vpn'\n -c ' import vpn'\n -c ' exit-address-family'\n -c '!'\n -c 'segment-routing-ipv6'\n -c ' encapsulation source-address 2001:1::'\n -c ' locator prefix 2001:1::/64'\n -c ' exit'\n -c '!'\n -c 'route-map TO_TOR permit 1'\n -c ' match ip address prefix-len 32'\n -c ' exit'\n\n - name: VM1\n cmds:\n - cmd: ip addr add 10.0.0.11/24 dev net0\n - cmd: ip route add default via 10.0.0.1\n - name: VM2\n cmds:\n - cmd: ip addr add 10.0.0.12/24 dev net0\n - cmd: ip route add default via 10.0.0.1\n - name: VM3\n cmds:\n - cmd: ip addr add 10.0.0.13/24 dev net0\n - cmd: ip route add default via 10.0.0.1\n\n" }, { "path": "examples/basic_bgp/local_pref/README.md", "content": "![topology](topo.png \"bgp\")" }, { "path": "examples/basic_bgp/local_pref/spec.yaml", "content": "nodes:\n- name: R1\n image: frrouting/frr:latest\n docker_run_extra_args: --entrypoint bash\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - { name: net1, type: direct, args: R3#net0 }\n - { name: net2, type: direct, args: R4#net0 }\n sysctls:\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.default.disable_ipv6=0\n - sysctl: net.ipv4.ip_forward=1\n- name: R2\n image: frrouting/frr:latest\n docker_run_extra_args: --entrypoint bash\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n sysctls:\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.default.disable_ipv6=0\n - sysctl: net.ipv4.ip_forward=1\n- name: R3\n image: frrouting/frr:latest\n docker_run_extra_args: --entrypoint bash\n interfaces:\n - { name: net0, type: direct, args: R1#net1 }\n - { name: net1, type: direct, args: R5#net0 }\n sysctls:\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.default.disable_ipv6=0\n - sysctl: net.ipv4.ip_forward=1 \n- name: R4\n image: frrouting/frr:latest\n docker_run_extra_args: --entrypoint bash\n interfaces:\n - { name: net0, type: direct, args: R1#net2 }\n - { name: net1, type: direct, args: R5#net1 }\n sysctls:\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.default.disable_ipv6=0\n - sysctl: net.ipv4.ip_forward=1 \n- name: R5\n image: frrouting/frr:latest\n docker_run_extra_args: --entrypoint bash\n interfaces:\n - { name: net0, type: direct, args: R3#net1 }\n - { name: net1, type: direct, args: R4#net1 }\n sysctls:\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.default.disable_ipv6=0\n - sysctl: net.ipv4.ip_forward=1 \nnode_configs:\n - name: R1\n cmds:\n - cmd: sed -i -e 's/bgpd=no/bgpd=yes/g' /etc/frr/daemons\n - cmd: sed -i -e 's/bgpd=no/bgpd=yes/g' /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: ip addr add 10.0.0.1/24 dev net0\n - cmd: ip addr add 10.1.0.1/24 dev net1\n - cmd: ip addr add 10.2.0.1/24 dev net2\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 65001\"\n -c \"no bgp ebgp-requires-policy\"\n -c ' bgp router-id 1.1.1.1'\n -c \"neighbor 10.0.0.2 remote-as 65002\"\n -c \"neighbor 10.1.0.2 remote-as 65003\"\n -c \"neighbor 10.2.0.2 remote-as 65004\"\n -c ' address-family ipv4 unicast'\n -c ' redistribute connected'\n -c ' neighbor 10.2.0.2 route-map LOCAL_PREF200 in'\n -c ' exit-address-family'\n -c 'access-list 1 permit 10.11.0.0/24'\n -c 'route-map LOCAL_PREF200 permit 10'\n -c ' match ip address 1'\n -c ' set local-preference 200'\n -c ' exit'\n -c 'route-map LOCAL_PREF200 permit 20'\n -c '!'\n - name: R2\n cmds:\n - cmd: sed -i -e 's/bgpd=no/bgpd=yes/g' /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: ip addr add 10.0.0.2/24 dev net0\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 65002\"\n -c \"no bgp ebgp-requires-policy\"\n -c ' bgp router-id 1.1.1.2'\n -c \"neighbor 10.0.0.1 remote-as 65001\"\n -c ' address-family ipv4 unicast'\n -c ' redistribute connected'\n -c ' exit-address-family'\n -c '!'\n - name: R3\n cmds:\n - cmd: sed -i -e 's/bgpd=no/bgpd=yes/g' /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: ip addr add 10.1.0.2/24 dev net0\n - cmd: ip addr add 10.11.0.1/24 dev net1\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 65003\"\n -c \"no bgp ebgp-requires-policy\"\n -c ' bgp router-id 1.1.1.3'\n -c \"neighbor 10.1.0.1 remote-as 65001\"\n -c \"neighbor 10.11.0.2 remote-as 65005\"\n -c ' address-family ipv4 unicast'\n -c ' redistribute connected'\n -c ' exit-address-family'\n -c '!' \n - name: R4\n cmds:\n - cmd: sed -i -e 's/bgpd=no/bgpd=yes/g' /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: ip addr add 10.2.0.2/24 dev net0\n - cmd: ip addr add 10.12.0.1/24 dev net1\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 65004\"\n -c \"no bgp ebgp-requires-policy\"\n -c ' bgp router-id 1.1.1.4'\n -c \"neighbor 10.2.0.1 remote-as 65001\"\n -c \"neighbor 10.12.0.2 remote-as 65005\"\n -c ' address-family ipv4 unicast'\n -c ' redistribute connected'\n -c ' exit-address-family'\n -c '!' \n - name: R5\n cmds:\n - cmd: sed -i -e 's/bgpd=no/bgpd=yes/g' /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: ip addr add 10.11.0.2/24 dev net0\n - cmd: ip addr add 10.12.0.2/24 dev net1\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 65005\"\n -c \"no bgp ebgp-requires-policy\"\n -c ' bgp router-id 1.1.1.5'\n -c \"neighbor 10.11.0.1 remote-as 65003\"\n -c \"neighbor 10.12.0.1 remote-as 65004\"\n -c ' address-family ipv4 unicast'\n -c ' redistribute connected'\n -c ' exit-address-family'\n -c '!' " }, { "path": "examples/basic_bgp/mpbgp_ipv4_labeled_unicast/README.md", "content": "\n# MP-BGP labeled unicast example\n\n```\n bgp unnumbered\nipv4-labeld-unicast enabled\n\n [R0]-----------------[R1]\n AS1 AS2\n```\n\n" }, { "path": "examples/basic_bgp/mpbgp_ipv4_labeled_unicast/spec.yaml", "content": "\nprecmd:\n - cmds:\n - cmd: export IMAGE=slankdev/frr:centos-7-stable-7.0\n\nnodes:\n - name: R0\n image: $IMAGE\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - name: R1\n image: $IMAGE\n interfaces:\n - { name: net0, type: direct, args: R0#net0 }\n\nnode_configs:\n - name: R0\n cmds:\n - cmd: sh -c 'enable_seg6_router.py | sh'\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 1\"\n -c \" bgp router-id 1.1.1.1\"\n -c \" no bgp default ipv4-unicast\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor FABRIC capability extended-nexthop\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" redistribute kernel\"\n -c \" exit-address-family\"\n -c \" !\"\n -c \" address-family ipv4 labeled-unicast\"\n -c \" neighbor FABRIC activate\"\n -c \" exit-address-family\"\n -c \"!\"\n\n - name: R1\n cmds:\n - cmd: sh -c 'enable_seg6_router.py | sh'\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 2\"\n -c \" bgp router-id 2.2.2.2\"\n -c \" no bgp default ipv4-unicast\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor FABRIC capability extended-nexthop\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" redistribute kernel\"\n -c \" exit-address-family\"\n -c \" !\"\n -c \" address-family ipv4 labeled-unicast\"\n -c \" neighbor FABRIC activate\"\n -c \" exit-address-family\"\n -c \"!\"\n\n" }, { "path": "examples/basic_bgp/path_attr/README.md", "content": "\n# BGP route-map playground (import-prefix-filter)\n\n![](topo.png)\n\n```\ndocker exec R3 vtysh -c 'show bgp ipv4 unicast'\nBGP table version is 1, local router ID is 10.255.0.3, vrf id 0\nStatus codes: s suppressed, d damped, h history, * valid, > best, = multipath,\n i internal, r RIB-failure, S Stale, R Removed\nNexthop codes: @NNN nexthop's vrf id, < announce-nh-self\nOrigin codes: i - IGP, e - EGP, ? - incomplete\n\n Network Next Hop Metric LocPrf Weight Path\n*> 10.0.0.2/32 net0 0 65001 65002 i\n\nDisplayed 1 routes and 1 total paths\n```\n```\ndocker exec R4 vtysh -c 'show bgp ipv4 unicast'\nBGP table version is 3, local router ID is 10.255.0.4, vrf id 0\nStatus codes: s suppressed, d damped, h history, * valid, > best, = multipath,\n i internal, r RIB-failure, S Stale, R Removed\nNexthop codes: @NNN nexthop's vrf id, < announce-nh-self\nOrigin codes: i - IGP, e - EGP, ? - incomplete\n\n Network Next Hop Metric LocPrf Weight Path\n*> 10.0.0.1/32 net0 0 65001 65002 i\n*> 10.0.0.2/32 net0 0 65001 65002 i\n*> 10.0.0.3/32 net0 0 65001 65002 i\n\nDisplayed 3 routes and 3 total paths\n```\n\n" }, { "path": "examples/basic_bgp/path_attr/spec.yaml", "content": "\nnodes:\n - name: R1\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - { name: net1, type: direct, args: R3#net0 }\n - { name: net2, type: direct, args: R4#net0 }\n\n - name: R2\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - name: R3\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R1#net1 }\n - name: R4\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R1#net2 }\n\nnode_configs:\n - name: R1\n cmds:\n - cmd: sh -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'interface net0' -c 'ipv6 nd ra-interval 3' -c 'no ipv6 nd suppress-ra'\n -c 'interface net1' -c 'ipv6 nd ra-interval 3' -c 'no ipv6 nd suppress-ra'\n -c 'interface net2' -c 'ipv6 nd ra-interval 3' -c 'no ipv6 nd suppress-ra'\n -c '!'\n -c 'router bgp 65001'\n -c ' bgp router-id 10.255.0.1'\n -c ' bgp bestpath as-path multipath-relax'\n -c ' neighbor PEER peer-group'\n -c ' neighbor PEER remote-as external'\n -c ' neighbor net0 interface peer-group PEER'\n -c ' neighbor net1 interface peer-group PEER'\n -c ' neighbor net2 interface peer-group PEER'\n -c '!'\n -c ' address-family ipv4 unicast'\n -c ' neighbor net0 activate'\n -c ' exit-address-family'\n -c '!'\n -c 'ip prefix-list PREF1 seq 5 permit 10.0.0.1/32'\n -c 'ip prefix-list PREF2 seq 5 permit 10.0.0.2/32'\n -c 'ip prefix-list PREF3 seq 5 permit 10.0.0.3/32'\n\n - name: R2\n cmds:\n - cmd: sh -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'interface net0' -c 'ipv6 nd ra-interval 3' -c 'no ipv6 nd suppress-ra'\n -c '!'\n -c 'router bgp 65002'\n -c ' bgp router-id 10.255.0.2'\n -c ' bgp bestpath as-path multipath-relax'\n -c ' neighbor PEER peer-group'\n -c ' neighbor PEER remote-as external'\n -c ' neighbor net0 interface peer-group PEER'\n -c ' !'\n -c ' address-family ipv4 unicast'\n -c ' network 10.0.0.1/32 route-map COM1'\n -c ' network 10.0.0.2/32 route-map COM2'\n -c ' network 10.0.0.3/32 route-map COM3'\n -c ' exit-address-family'\n -c '!'\n -c 'ip prefix-list PREF1 seq 5 permit 10.0.0.1/32'\n -c 'ip prefix-list PREF2 seq 5 permit 10.0.0.2/32'\n -c 'ip prefix-list PREF3 seq 5 permit 10.0.0.3/32'\n -c '!'\n -c 'route-map COM1 permit 1' -c 'set community 65002:1' -c 'exit'\n -c 'route-map COM2 permit 1' -c 'set community 65002:2' -c 'exit'\n -c 'route-map COM3 permit 1' -c 'set community 65002:3' -c 'exit'\n\n - name: R3\n cmds:\n - cmd: sh -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'interface net0' -c 'ipv6 nd ra-interval 3' -c 'no ipv6 nd suppress-ra'\n -c '!'\n -c 'router bgp 65003'\n -c ' bgp router-id 10.255.0.3'\n -c ' bgp bestpath as-path multipath-relax'\n -c ' neighbor PEER peer-group'\n -c ' neighbor PEER remote-as external'\n -c ' neighbor net0 interface peer-group PEER'\n -c ' !'\n -c ' address-family ipv4 unicast'\n -c ' neighbor net0 route-map MAP1 in'\n -c ' exit-address-family'\n -c '!'\n -c 'route-map MAP1 permit 1'\n -c ' match ip address prefix-list PREF2'\n -c ' !match community 65002:2'\n -c ' exit'\n -c '!'\n -c 'ip prefix-list PREF1 seq 5 permit 10.0.0.1/32'\n -c 'ip prefix-list PREF2 seq 5 permit 10.0.0.2/32'\n -c 'ip prefix-list PREF3 seq 5 permit 10.0.0.3/32'\n\n - name: R4\n cmds:\n - cmd: sh -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'interface net0' -c 'ipv6 nd ra-interval 3' -c 'no ipv6 nd suppress-ra'\n -c '!'\n -c 'router bgp 65004'\n -c ' bgp router-id 10.255.0.4'\n -c ' bgp bestpath as-path multipath-relax'\n -c ' neighbor PEER peer-group'\n -c ' neighbor PEER remote-as external'\n -c ' neighbor net0 interface peer-group PEER'\n -c '!'\n -c 'ip prefix-list PREF1 seq 5 permit 10.0.0.1/32'\n -c 'ip prefix-list PREF2 seq 5 permit 10.0.0.2/32'\n -c 'ip prefix-list PREF3 seq 5 permit 10.0.0.3/32'\n\n" }, { "path": "examples/basic_bgp/route_reflector/spec.yaml", "content": "\n# DESCRIPTION:\n# Basic iBGP RR test using and FRR\n# create reachability with loopback with OSPF\n#\n# INIT:\n# cns spec.yaml init | sudo sh\n# cns spec.yaml conf | sudo sh\n# cns spec.yaml test | sudo sh\n# FINI:\n# cns spec.yaml fini | sudo sh\n# TOPO:\n# 10.0.0.0/24 .1(net0)\n# B0----+-----------------+-----------------+------RR0(255.1.0.1)\n# | | |\n# |.10(net0) |.11(net0) |.12(net0)\n# R0(255.10.0.1) R1(255.11.0.1) R2(255.12.0.1)\n# |.1(net1) |.1(net1) |.1(net1)\n# | | |\n# |192.168.10.0/24 |192.168.11.0/24 |192.168.12.0/24\n# | | |\n# |.2(net0) |.2(net0) |.2(net0)\n# C0 C1 C2\n#\n\nnodes:\n - name: RR0\n image: slankdev/frr\n interfaces:\n - { name: net0, type: bridge, args: B0 }\n\n - name: R0\n image: slankdev/frr\n interfaces:\n - { name: net0, type: bridge, args: B0 }\n - { name: net1, type: direct, args: C0#net0 }\n - name: C0\n image: slankdev/ubuntu:16.04\n interfaces:\n - { name: net0, type: direct, args: R0#net1 }\n\n - name: R1\n image: slankdev/frr\n interfaces:\n - { name: net0, type: bridge, args: B0 }\n - { name: net1, type: direct, args: C1#net0 }\n - name: C1\n image: slankdev/ubuntu:16.04\n interfaces:\n - { name: net0, type: direct, args: R1#net1 }\n\n - name: R2\n image: slankdev/frr\n interfaces:\n - { name: net0, type: bridge, args: B0 }\n - { name: net1, type: direct, args: C2#net0 }\n - name: C2\n image: slankdev/ubuntu:16.04\n interfaces:\n - { name: net0, type: direct, args: R2#net1 }\n\nswitches:\n - name: B0\n interfaces:\n - { name: net0, type: container, args: RR0 }\n - { name: net0, type: container, args: R0 }\n - { name: net0, type: container, args: R1 }\n - { name: net0, type: container, args: R2 }\n\nnode_configs:\n - name: RR0\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: sed -i -e 's/=no/=yes/g' /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh restart\n - cmd: sysctl -w net.ipv4.ip_forward=1\n\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"interface lo\" -c \"ip address 10.255.0.1/32\" -c \"exit\"\n -c \"interface net0\" -c \"ip address 10.0.0.1/24\" -c \"exit\"\n -c \"router ospf\"\n -c \" network 10.255.0.1/32 area 0\"\n -c \" network 10.0.0.0/24 area 0\"\n -c \"exit\"\n -c \"router bgp 100\"\n -c \" bgp router-id 10.255.0.1\"\n -c \" neighbor 10.255.0.10 remote-as 100\"\n -c \" neighbor 10.255.0.10 update-source lo\"\n -c \" neighbor 10.255.0.11 remote-as 100\"\n -c \" neighbor 10.255.0.11 update-source lo\"\n -c \" neighbor 10.255.0.12 remote-as 100\"\n -c \" neighbor 10.255.0.12 update-source lo\"\n -c \" address-family ipv4 unicast\"\n -c \" neighbor 10.255.0.10 route-reflector-client\"\n -c \" neighbor 10.255.0.11 route-reflector-client\"\n -c \" neighbor 10.255.0.12 route-reflector-client\"\n -c \" exit-address-family\"\n -c \"exit\"\n\n - name: R0\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: sed -i -e 's/=no/=yes/g' /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh restart\n - cmd: sysctl -w net.ipv4.ip_forward=1\n\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"interface lo\" -c \"ip address 10.255.0.10/32\" -c \"exit\"\n -c \"interface net0\" -c \"ip address 10.0.0.10/24\" -c \"exit\"\n -c \"interface net1\" -c \"ip address 192.168.10.1/24\" -c \"exit\"\n -c \"router ospf\"\n -c \" network 10.255.0.10/32 area 0\"\n -c \" network 10.0.0.0/24 area 0\"\n -c \"exit\"\n -c \"router bgp 100\"\n -c \" bgp router-id 10.255.0.10\"\n -c \" neighbor 10.255.0.1 remote-as 100\"\n -c \" neighbor 10.255.0.1 update-source lo\"\n -c \" network 192.168.10.0/24\"\n -c \"exit\"\n\n - name: R1\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: sed -i -e 's/=no/=yes/g' /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh restart\n - cmd: sysctl -w net.ipv4.ip_forward=1\n\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"interface lo\" -c \"ip address 10.255.0.11/32\" -c \"exit\"\n -c \"interface net0\" -c \"ip address 10.0.0.11/24\" -c \"exit\"\n -c \"interface net1\" -c \"ip address 192.168.11.1/24\" -c \"exit\"\n -c \"router ospf\"\n -c \" network 10.255.0.11/32 area 0\"\n -c \" network 10.0.0.0/24 area 0\"\n -c \"exit\"\n -c \"router bgp 100\"\n -c \" bgp router-id 10.255.0.11\"\n -c \" neighbor 10.255.0.1 remote-as 100\"\n -c \" neighbor 10.255.0.1 update-source lo\"\n -c \" network 192.168.11.0/24\"\n -c \"exit\"\n\n - name: R2\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: sed -i -e 's/=no/=yes/g' /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh restart\n - cmd: sysctl -w net.ipv4.ip_forward=1\n\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"interface lo\" -c \"ip address 10.255.0.12/32\" -c \"exit\"\n -c \"interface net0\" -c \"ip address 10.0.0.12/24\" -c \"exit\"\n -c \"interface net1\" -c \"ip address 192.168.12.1/24\" -c \"exit\"\n -c \"router ospf\"\n -c \" network 10.255.0.12/32 area 0\"\n -c \" network 10.0.0.0/24 area 0\"\n -c \"exit\"\n -c \"router bgp 100\"\n -c \" bgp router-id 10.255.0.12\"\n -c \" neighbor 10.255.0.1 remote-as 100\"\n -c \" neighbor 10.255.0.1 update-source lo\"\n -c \" network 192.168.12.0/24\"\n -c \"exit\"\n\n - name: C0\n cmds:\n - cmd: ip addr add 192.168.10.2/24 dev net0\n - cmd: ip route del default\n - cmd: ip route add default via 192.168.10.1\n - name: C1\n cmds:\n - cmd: ip addr add 192.168.11.2/24 dev net0\n - cmd: ip route del default\n - cmd: ip route add default via 192.168.11.1\n - name: C2\n cmds:\n - cmd: ip addr add 192.168.12.2/24 dev net0\n - cmd: ip route del default\n - cmd: ip route add default via 192.168.12.1\n\ntest:\n - cmds:\n - cmd: docker exec RR0 ping -c2 10.255.0.1\n - cmd: docker exec RR0 ping -c2 10.255.0.10\n - cmd: docker exec RR0 ping -c2 10.255.0.11\n - cmd: docker exec RR0 ping -c2 10.255.0.12\n - cmd: docker exec C0 ping -c2 192.168.10.1\n - cmd: docker exec C0 ping -c2 192.168.11.2\n - cmd: docker exec C0 ping -c2 192.168.12.2\n - cmd: docker exec C1 ping -c2 192.168.11.1\n - cmd: docker exec C1 ping -c2 192.168.10.2\n - cmd: docker exec C1 ping -c2 192.168.12.2\n - cmd: docker exec C2 ping -c2 192.168.12.1\n - cmd: docker exec C2 ping -c2 192.168.10.2\n - cmd: docker exec C2 ping -c2 192.168.11.2\n\n" }, { "path": "examples/basic_bgp/route_server/spec.yaml", "content": "# DESCRIPTION: eBGP RS test\n# TOPO:\n# 10.0.0.0/24 .1(net0)\n# B0----+-----------------+-----------------+------RS1(10.255.0.1)\n# | | |\n# |.10(net0) |.11(net0) |.12(net0)\n# R1 R2 R3\n# |.1(net1) |.1(net1) |.1(net1)\n# | | |\n# |192.168.1.0/24 |192.168.2.0/24 |192.168.3.0/24\n# | | |\n# |.2(net0) |.2(net0) |.2(net0)\n# C1 C2 C3\n\nnodes:\n- name: RS1\n image: slankdev/frr\n interfaces:\n - { name: net0, type: bridge, args: B0 }\n sysctls:\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.default.disable_ipv6=0\n - sysctl: net.ipv6.conf.all.forwarding=1\n\n- name: R1\n image: slankdev/frr\n interfaces:\n - { name: net0, type: bridge, args: B0 }\n - { name: net1, type: direct, args: C1#net0 }\n sysctls:\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.default.disable_ipv6=0\n - sysctl: net.ipv6.conf.all.forwarding=1\n- name: C1\n image: slankdev/ubuntu:16.04\n interfaces:\n - { name: net0, type: direct, args: R1#net1 }\n sysctls:\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.default.disable_ipv6=0\n - sysctl: net.ipv6.conf.all.forwarding=1\n\n- name: R2\n image: slankdev/frr\n interfaces:\n - { name: net0, type: bridge, args: B0 }\n - { name: net1, type: direct, args: C2#net0 }\n sysctls:\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.default.disable_ipv6=0\n - sysctl: net.ipv6.conf.all.forwarding=1\n- name: C2\n image: slankdev/ubuntu:16.04\n interfaces:\n - { name: net0, type: direct, args: R2#net1 }\n sysctls:\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.default.disable_ipv6=0\n - sysctl: net.ipv6.conf.all.forwarding=1\n\n- name: R3\n image: slankdev/frr\n interfaces:\n - { name: net0, type: bridge, args: B0 }\n - { name: net1, type: direct, args: C3#net0 }\n sysctls:\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.default.disable_ipv6=0\n - sysctl: net.ipv6.conf.all.forwarding=1\n- name: C3\n image: slankdev/ubuntu:16.04\n interfaces:\n - { name: net0, type: direct, args: R3#net1 }\n sysctls:\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.default.disable_ipv6=0\n - sysctl: net.ipv6.conf.all.forwarding=1\n\nswitches:\n- name: B0\n interfaces:\n - { name: net0, type: container, args: RS1 }\n - { name: net0, type: container, args: R1 }\n - { name: net0, type: container, args: R2 }\n - { name: net0, type: container, args: R3 }\n\nnode_configs:\n- name: RS1\n cmds:\n - cmd: ip addr add 10.255.0.1/24 dev net0\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 1\"\n -c \" bgp router-id 10.255.0.1\"\n -c \" neighbor 10.255.0.11 remote-as 11\"\n -c \" neighbor 10.255.0.12 remote-as 12\"\n -c \" neighbor 10.255.0.13 remote-as 13\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" neighbor 10.255.0.11 route-server-client\"\n -c \" neighbor 10.255.0.12 route-server-client\"\n -c \" neighbor 10.255.0.13 route-server-client\"\n -c \" !neighbor 10.255.0.11 next-hop-self\"\n -c \" !neighbor 10.255.0.12 next-hop-self\"\n -c \" !neighbor 10.255.0.13 next-hop-self\"\n -c \" exit-address-family\"\n -c \" !\"\n -c \" address-family ipv6 unicast\"\n -c \" neighbor 10.255.0.11 activate\"\n -c \" neighbor 10.255.0.12 activate\"\n -c \" neighbor 10.255.0.13 activate\"\n -c \" neighbor 10.255.0.11 route-server-client\"\n -c \" neighbor 10.255.0.12 route-server-client\"\n -c \" neighbor 10.255.0.13 route-server-client\"\n -c \" exit-address-family\"\n -c \"!\"\n\n- name: R1\n cmds:\n - cmd: ip addr add 10.255.0.11/24 dev net0\n - cmd: ip addr add 192.168.11.1/24 dev net1\n - cmd: ip -6 addr add 2001:11::1/64 dev net1\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 11\"\n -c \" bgp router-id 10.255.0.11\"\n -c \" neighbor 10.255.0.1 remote-as 1\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" neighbor 10.255.0.1 activate\"\n -c \" exit-address-family\"\n -c \" !\"\n -c \" address-family ipv6 unicast\"\n -c \" redistribute connected\"\n -c \" neighbor 10.255.0.1 activate\"\n -c \" exit-address-family\"\n -c \"!\"\n\n- name: R2\n cmds:\n - cmd: ip addr add 10.255.0.12/24 dev net0\n - cmd: ip addr add 192.168.12.1/24 dev net1\n - cmd: ip -6 addr add 2001:12::1/64 dev net1\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 12\"\n -c \" bgp router-id 10.255.0.12\"\n -c \" neighbor 10.255.0.1 remote-as 1\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" neighbor 10.255.0.1 activate\"\n -c \" exit-address-family\"\n -c \" !\"\n -c \" address-family ipv6 unicast\"\n -c \" redistribute connected\"\n -c \" neighbor 10.255.0.1 activate\"\n -c \" exit-address-family\"\n -c \"!\"\n\n- name: R3\n cmds:\n - cmd: ip addr add 10.255.0.13/24 dev net0\n - cmd: ip addr add 192.168.13.1/24 dev net1\n - cmd: ip -6 addr add 2001:13::1/64 dev net1\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 13\"\n -c \" bgp router-id 10.255.0.13\"\n -c \" neighbor 10.255.0.1 remote-as 1\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" neighbor 10.255.0.1 activate\"\n -c \" exit-address-family\"\n -c \" !\"\n -c \" address-family ipv6 unicast\"\n -c \" redistribute connected\"\n -c \" neighbor 10.255.0.1 activate\"\n -c \" exit-address-family\"\n -c \"!\"\n\n- name: C1\n cmds:\n - cmd: ip addr add 192.168.11.2/24 dev net0\n - cmd: ip route replace default via 192.168.11.1\n\n- name: C2\n cmds:\n - cmd: ip addr add 192.168.12.2/24 dev net0\n - cmd: ip route replace default via 192.168.12.1\n\n- name: C3\n cmds:\n - cmd: ip addr add 192.168.13.2/24 dev net0\n - cmd: ip route replace default via 192.168.13.1\n" }, { "path": "examples/basic_bgp/route_server_multihop/spec.yaml", "content": "nodes:\n- name: RS1\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: S1#net0 }\n\n- name: S1\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: RS1#net0 }\n - { name: net1, type: direct, args: R1#net0 }\n - { name: net2, type: direct, args: R2#net0 }\n - { name: net3, type: direct, args: R3#net0 }\n\n- name: R1\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: S1#net1 }\n - { name: net1, type: direct, args: C1#net0 }\n\n- name: R2\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: S1#net2 }\n - { name: net1, type: direct, args: C2#net0 }\n- name: R3\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: S1#net3 }\n - { name: net1, type: direct, args: C3#net0 }\n\n- name: C1\n image: slankdev/ubuntu:16.04\n interfaces:\n - { name: net0, type: direct, args: R1#net1 }\n- name: C2\n image: slankdev/ubuntu:16.04\n interfaces:\n - { name: net0, type: direct, args: R2#net1 }\n- name: C3\n image: slankdev/ubuntu:16.04\n interfaces:\n - { name: net0, type: direct, args: R3#net1 }\n\nnode_configs:\n- name: RS1\n cmds:\n - cmd: ip addr add 10.255.1.1/24 dev net0\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 1\"\n -c \" bgp router-id 1.1.1.1\"\n -c \" neighbor 10.255.1.2 remote-as 100\"\n -c \" neighbor 10.255.11.1 remote-as 11\"\n -c \" neighbor 10.255.11.1 ebgp-multihop 64\"\n -c \" neighbor 10.255.12.1 remote-as 12\"\n -c \" neighbor 10.255.12.1 ebgp-multihop 64\"\n -c \" neighbor 10.255.13.1 remote-as 13\"\n -c \" neighbor 10.255.13.1 ebgp-multihop 64\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n -c \"!\"\n\n- name: S1\n cmds:\n - cmd: ip addr add 10.255.1.2/24 dev net0\n - cmd: ip addr add 10.255.11.2/24 dev net1\n - cmd: ip addr add 10.255.12.2/24 dev net2\n - cmd: ip addr add 10.255.13.2/24 dev net3\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 100\"\n -c \" bgp router-id 100.100.100.100\"\n -c \" neighbor 10.255.1.1 remote-as 1\"\n -c \" neighbor 10.255.11.1 remote-as 11\"\n -c \" neighbor 10.255.12.1 remote-as 12\"\n -c \" neighbor 10.255.13.1 remote-as 13\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n -c \"!\"\n\n- name: R1\n cmds:\n - cmd: ip addr add 10.255.11.1/24 dev net0\n - cmd: ip addr add 192.168.11.1/24 dev net1\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 11\"\n -c \" bgp router-id 11.11.11.11\"\n -c \" neighbor 10.255.11.2 remote-as 100\"\n -c \" neighbor 10.255.1.1 remote-as 1\"\n -c \" neighbor 10.255.1.1 ebgp-multihop 64\"\n -c \" neighbor 10.255.1.1 timer connect 1\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" neighbor 10.255.11.2 prefix-list core-out out\"\n -c \" neighbor 10.255.11.2 prefix-list core-in in\"\n -c \" neighbor 10.255.1.1 prefix-list rs-out out\"\n -c \" neighbor 10.255.1.1 prefix-list rs-in in\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n -c \"!\"\n -c \"ip prefix-list core-out permit 10.255.0.0/16 le 32\"\n -c \"ip prefix-list core-in permit 10.255.0.0/16 le 32\"\n -c \"ip prefix-list rs-out permit 192.168.0.0/16 le 32\"\n -c \"ip prefix-list rs-in permit 192.168.0.0/16 le 32\"\n\n\n- name: R2\n cmds:\n - cmd: ip addr add 10.255.12.1/24 dev net0\n - cmd: ip addr add 192.168.12.1/24 dev net1\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 12\"\n -c \" bgp router-id 12.12.12.12\"\n -c \" neighbor 10.255.12.2 remote-as 100\"\n -c \" neighbor 10.255.1.1 remote-as 1\"\n -c \" neighbor 10.255.1.1 ebgp-multihop 64\"\n -c \" neighbor 10.255.1.1 timer connect 1\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" neighbor 10.255.12.2 prefix-list core-out out\"\n -c \" neighbor 10.255.12.2 prefix-list core-in in\"\n -c \" neighbor 10.255.1.1 prefix-list rs-out out\"\n -c \" neighbor 10.255.1.1 prefix-list rs-in in\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n -c \"!\"\n -c \"ip prefix-list core-out permit 10.255.0.0/16 le 32\"\n -c \"ip prefix-list core-in permit 10.255.0.0/16 le 32\"\n -c \"ip prefix-list rs-out permit 192.168.0.0/16 le 32\"\n -c \"ip prefix-list rs-in permit 192.168.0.0/16 le 32\"\n\n- name: R3\n cmds:\n - cmd: ip addr add 10.255.13.1/24 dev net0\n - cmd: ip addr add 192.168.13.1/24 dev net1\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 13\"\n -c \" bgp router-id 13.13.13.13\"\n -c \" neighbor 10.255.13.2 remote-as 100\"\n -c \" neighbor 10.255.1.1 remote-as 1\"\n -c \" neighbor 10.255.1.1 ebgp-multihop 64\"\n -c \" neighbor 10.255.1.1 timer connect 1\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" neighbor 10.255.13.2 prefix-list core-out out\"\n -c \" neighbor 10.255.13.2 prefix-list core-in in\"\n -c \" neighbor 10.255.1.1 prefix-list rs-out out\"\n -c \" neighbor 10.255.1.1 prefix-list rs-in in\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n -c \"!\"\n -c \"ip prefix-list core-out permit 10.255.0.0/16 le 32\"\n -c \"ip prefix-list core-in permit 10.255.0.0/16 le 32\"\n -c \"ip prefix-list rs-out permit 192.168.0.0/16 le 32\"\n -c \"ip prefix-list rs-in permit 192.168.0.0/16 le 32\"\n\n- name: C1\n cmds:\n - cmd: ip addr add 192.168.11.2/24 dev net0\n - cmd: ip route replace default via 192.168.11.1\n\n- name: C2\n cmds:\n - cmd: ip addr add 192.168.12.2/24 dev net0\n - cmd: ip route replace default via 192.168.12.1\n\n- name: C3\n cmds:\n - cmd: ip addr add 192.168.13.2/24 dev net0\n - cmd: ip route replace default via 192.168.13.1\n" }, { "path": "examples/basic_bgp/spec.yaml", "content": "\nnodes:\n - name: R1\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - name: R2\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n\nnode_configs:\n - name: R1\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: ip addr add 10.0.0.1/24 dev net0\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 65001\"\n -c \"bgp router-id 10.255.0.1\"\n -c \"neighbor 10.0.0.2 remote-as 65002\"\n - name: R2\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: ip addr add 10.0.0.2/24 dev net0\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 65002\"\n -c \"bgp router-id 10.255.0.2\"\n -c \"neighbor 10.0.0.1 remote-as 65001\"\n\n" }, { "path": "examples/basic_bgp/unnumbered/spec.yaml", "content": "nodes:\n- name: R1\n image: frrouting/frr:v8.1.0\n docker_run_extra_args: --entrypoint bash\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n sysctls:\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.default.disable_ipv6=0\n - sysctl: net.ipv4.ip_forward=1\n- name: R2\n image: frrouting/frr:v8.1.0\n docker_run_extra_args: --entrypoint bash\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n sysctls:\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.default.disable_ipv6=0\n - sysctl: net.ipv4.ip_forward=1\n\nnode_configs:\n- name: R1\n cmds:\n - cmd: sed -i -e 's/bgpd=no/bgpd=yes/g' /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'interface net0'\n -c ' ipv6 nd ra-interval 3'\n -c ' no ipv6 nd suppress-ra'\n -c '!'\n -c 'router bgp 65001'\n -c ' bgp router-id 10.255.0.1'\n -c ' bgp bestpath as-path multipath-relax'\n -c ' no bgp ebgp-requires-policy'\n -c ' neighbor PEER peer-group'\n -c ' neighbor PEER remote-as external'\n -c ' neighbor net0 interface peer-group PEER'\n -c ' !'\n -c ' address-family ipv4 unicast'\n -c ' redistribute connected'\n -c ' exit-address-family'\n\n- name: R2\n cmds:\n - cmd: sed -i -e 's/bgpd=no/bgpd=yes/g' /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'interface net0'\n -c ' ipv6 nd ra-interval 3'\n -c ' no ipv6 nd suppress-ra'\n -c '!'\n -c 'router bgp 65002'\n -c ' bgp router-id 10.255.0.2'\n -c ' bgp bestpath as-path multipath-relax'\n -c ' no bgp ebgp-requires-policy'\n -c ' neighbor PEER peer-group'\n -c ' neighbor PEER remote-as external'\n -c ' neighbor net0 interface peer-group PEER'\n -c ' !'\n -c ' address-family ipv4 unicast'\n -c ' redistribute connected'\n -c ' exit-address-family'\n" }, { "path": "examples/basic_bgp/vpnv4_mpls/README.md", "content": "\n# MP-BGP VPNv4 per-VRF w/ MPLS\n\n![](./topo.png)\n\nreferences: configure example of vpnv4 as small set.\nhttps://gist.github.com/hkwi/5c116f05667a3abf43c7456fae32a529\n\nsetup\n```\n$ tn upconf | sudo sh\n```\n\ncheck vpn routes on R1\n```\n$ docker exec R1 vtysh -c 'show bgp ipv4 vpn'\nBGP table version is 1, local router ID is 10.255.0.1, vrf id 0\nStatus codes: s suppressed, d damped, h history, * valid, > best, = multipath,\n i internal, r RIB-failure, S Stale, R Removed\nNexthop codes: @NNN nexthop's vrf id, < announce-nh-self\nOrigin codes: i - IGP, e - EGP, ? - incomplete\n\n Network Next Hop Metric LocPrf Weight Path\nRoute Distinguisher: 65001:1\n*> 20.1.0.0/24 0.0.0.0@6< 0 32768 ?\n UN=0.0.0.0 EC{100:1} label=80 type=bgp, subtype=5\nRoute Distinguisher: 65001:2\n*> 20.3.0.0/24 0.0.0.0@7< 0 32768 ?\n UN=0.0.0.0 EC{100:2} label=81 type=bgp, subtype=5\nRoute Distinguisher: 65001:3\n*> 20.5.0.0/24 0.0.0.0@8< 0 32768 ?\n UN=0.0.0.0 EC{100:1} label=82 type=bgp, subtype=5\nRoute Distinguisher: 65002:1\n*> 20.2.0.0/24 10.0.0.2 0 0 65002 ?\n UN=10.0.0.2 EC{100:1} label=80 type=bgp, subtype=0\nRoute Distinguisher: 65002:2\n*> 20.4.0.0/24 10.0.0.2 0 0 65002 ?\n UN=10.0.0.2 EC{100:2} label=81 type=bgp, subtype=0\nRoute Distinguisher: 65002:3\n*> 20.6.0.0/24 10.0.0.2 0 0 65002 ?\n UN=10.0.0.2 EC{100:2} label=82 type=bgp, subtype=0\n\nDisplayed 6 routes and 6 total paths\n```\n\ncheck vrf's route on VRF1 on R1 (VPNv4 rt100:1)\n```\ndocker exec R1 vtysh -c 'show ip route vrf vrf1'\nCodes: K - kernel route, C - connected, S - static, R - RIP,\n O - OSPF, I - IS-IS, B - BGP, E - EIGRP, N - NHRP,\n T - Table, v - VNC, V - VNC-Direct, A - Babel, D - SHARP,\n F - PBR,\n > - selected route, * - FIB route\n\n\nVRF vrf1:\nC>* 20.1.0.0/24 is directly connected, net1, 00:01:37\nB>* 20.2.0.0/24 [200/0] via 10.0.0.2, net0(vrf Default-IP-Routing-Table), label 80, 00:01:30\nB>* 20.5.0.0/24 [200/0] is directly connected, net3(vrf vrf3), 00:01:37\n```\n\n" }, { "path": "examples/basic_bgp/vpnv4_mpls/spec.yaml", "content": "\nnodes:\n - name: R1\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - { name: net1, type: direct, args: C1#net0 }\n - { name: net2, type: direct, args: C3#net0 }\n - { name: net3, type: direct, args: C5#net0 }\n - name: R2\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - { name: net1, type: direct, args: C2#net0 }\n - { name: net2, type: direct, args: C4#net0 }\n - { name: net3, type: direct, args: C6#net0 }\n - name: C1\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: R1#net1 } ]\n - name: C2\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: R2#net1 } ]\n - name: C3\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: R1#net2 } ]\n - name: C4\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: R2#net2 } ]\n - name: C5\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: R1#net3 } ]\n - name: C6\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: R2#net3 } ]\n\nnode_configs:\n - name: R1\n cmds:\n - cmd: sh -c 'echo 100000 > /proc/sys/net/mpls/platform_labels'\n - cmd: sh -c 'echo 1 > /proc/sys/net/mpls/conf/net0/input'\n - cmd: sh -c 'echo 1 > /proc/sys/net/mpls/conf/net1/input'\n - cmd: sh -c 'echo 1 > /proc/sys/net/mpls/conf/net2/input'\n - cmd: sh -c 'echo 1 > /proc/sys/net/mpls/conf/net3/input'\n - cmd: ip link add vrf1 type vrf table 10\n - cmd: ip link set vrf1 up\n - cmd: ip link add vrf2 type vrf table 20\n - cmd: ip link set vrf2 up\n - cmd: ip link add vrf3 type vrf table 30\n - cmd: ip link set vrf3 up\n - cmd: ip link set net1 vrf vrf1\n - cmd: ip link set net2 vrf vrf2\n - cmd: ip link set net3 vrf vrf3\n - cmd: tcpdump -ni net0 -w /tmp/R1.in.pcap &\n\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c 'conf te'\n -c 'int net0'\n -c ' ip address 10.0.0.1/24'\n -c '!'\n -c 'int net1 vrf vrf1'\n -c ' ip address 20.1.0.1/24'\n -c '!'\n -c 'int net2 vrf vrf2'\n -c ' ip address 20.3.0.1/24'\n -c '!'\n -c 'int net3 vrf vrf3'\n -c ' ip address 20.5.0.1/24'\n -c '!'\n -c 'router bgp 65001'\n -c ' bgp router-id 10.255.0.1'\n -c ' neighbor 10.0.0.2 remote-as 65002'\n -c ' !'\n -c ' address-family ipv4 unicast'\n -c ' neighbor 10.0.0.2 activate'\n -c ' redistribute connected'\n -c ' redistribute static'\n -c ' exit-address-family'\n -c ' !'\n -c ' address-family ipv4 vpn'\n -c ' neighbor 10.0.0.2 activate'\n -c ' exit-address-family'\n -c '!'\n -c 'router bgp 65001 vrf vrf1'\n -c ' address-family ipv4'\n -c ' export vpn'\n -c ' import vpn'\n -c ' rd vpn export 65001:1'\n -c ' rt vpn both 100:1'\n -c ' label vpn export auto'\n -c ' redistribute connected'\n -c ' exit-address-family'\n -c '!'\n -c 'router bgp 65001 vrf vrf2'\n -c ' address-family ipv4'\n -c ' export vpn'\n -c ' import vpn'\n -c ' rd vpn export 65001:2'\n -c ' rt vpn both 100:2'\n -c ' label vpn export auto'\n -c ' redistribute connected'\n -c ' exit-address-family'\n -c '!'\n -c 'router bgp 65001 vrf vrf3'\n -c ' address-family ipv4'\n -c ' export vpn'\n -c ' import vpn'\n -c ' rd vpn export 65001:3'\n -c ' rt vpn both 100:1'\n -c ' label vpn export auto'\n -c ' redistribute connected'\n -c ' exit-address-family'\n -c '!'\n\n - name: R2\n cmds:\n - cmd: sh -c 'echo 100000 > /proc/sys/net/mpls/platform_labels'\n - cmd: sh -c 'echo 1 > /proc/sys/net/mpls/conf/net0/input'\n - cmd: sh -c 'echo 1 > /proc/sys/net/mpls/conf/net1/input'\n - cmd: sh -c 'echo 1 > /proc/sys/net/mpls/conf/net2/input'\n - cmd: sh -c 'echo 1 > /proc/sys/net/mpls/conf/net3/input'\n - cmd: ip link add vrf1 type vrf table 10\n - cmd: ip link set vrf1 up\n - cmd: ip link add vrf2 type vrf table 20\n - cmd: ip link set vrf2 up\n - cmd: ip link add vrf3 type vrf table 30\n - cmd: ip link set vrf3 up\n - cmd: ip link set net1 vrf vrf1\n - cmd: ip link set net2 vrf vrf2\n - cmd: ip link set net3 vrf vrf3\n - cmd: tcpdump -ni net0 -w /tmp/R2.in.pcap &\n\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c 'conf te'\n -c 'int net0'\n -c ' ip address 10.0.0.2/24'\n -c '!'\n -c 'int net1 vrf vrf1'\n -c ' ip address 20.2.0.1/24'\n -c '!'\n -c 'int net2 vrf vrf2'\n -c ' ip address 20.4.0.1/24'\n -c '!'\n -c 'int net3 vrf vrf3'\n -c ' ip address 20.6.0.1/24'\n -c '!'\n -c 'router bgp 65002'\n -c ' bgp router-id 10.255.0.2'\n -c ' neighbor 10.0.0.1 remote-as 65001'\n -c ' !'\n -c ' address-family ipv4'\n -c ' neighbor 10.0.0.1 activate'\n -c ' redistribute connected'\n -c ' redistribute static'\n -c ' exit-address-family'\n -c ' !'\n -c ' address-family ipv4 vpn'\n -c ' neighbor 10.0.0.1 activate'\n -c ' exit-address-family'\n -c '!'\n -c 'router bgp 65002 vrf vrf1'\n -c ' address-family ipv4'\n -c ' export vpn'\n -c ' import vpn'\n -c ' rd vpn export 65002:1'\n -c ' rt vpn both 100:1'\n -c ' label vpn export auto'\n -c ' redistribute connected'\n -c ' exit-address-family'\n -c '!'\n -c 'router bgp 65002 vrf vrf2'\n -c ' address-family ipv4'\n -c ' export vpn'\n -c ' import vpn'\n -c ' rd vpn export 65002:2'\n -c ' rt vpn both 100:2'\n -c ' label vpn export auto'\n -c ' redistribute connected'\n -c ' exit-address-family'\n -c '!'\n -c 'router bgp 65002 vrf vrf3'\n -c ' address-family ipv4'\n -c ' export vpn'\n -c ' import vpn'\n -c ' rd vpn export 65002:3'\n -c ' rt vpn both 100:2'\n -c ' label vpn export auto'\n -c ' redistribute connected'\n -c ' exit-address-family'\n -c '!'\n\n - name: C1\n cmds:\n - cmd: ip addr replace 20.1.0.2/24 dev net0\n - cmd: ip route replace default via 20.1.0.1\n - name: C2\n cmds:\n - cmd: ip addr replace 20.2.0.2/24 dev net0\n - cmd: ip route replace default via 20.2.0.1\n - name: C3\n cmds:\n - cmd: ip addr replace 20.3.0.2/24 dev net0\n - cmd: ip route replace default via 20.3.0.1\n - name: C4\n cmds:\n - cmd: ip addr replace 20.4.0.2/24 dev net0\n - cmd: ip route replace default via 20.4.0.1\n - name: C5\n cmds:\n - cmd: ip addr replace 20.5.0.2/24 dev net0\n - cmd: ip route replace default via 20.5.0.1\n - name: C6\n cmds:\n - cmd: ip addr replace 20.6.0.2/24 dev net0\n - cmd: ip route replace default via 20.6.0.1\n\ntest:\n - name: p2p\n cmds:\n - cmd: echo slankdev slankdev\n - cmd: echo slankdev slankdev\n\n" }, { "path": "examples/basic_bgp/vpnv4_srmpls/README.md", "content": "# MP-BGP VPNv4 per-VRF w/ SR-MPLS\n\n![](./topo.png)\n\nsetup\n```\n$ tn upconf | sudo sh\n```\n" }, { "path": "examples/basic_bgp/vpnv4_srmpls/spec.yaml", "content": "preinit:\n - cmds:\n - cmd: modprobe mpls_router\n - cmd: modprobe mpls_gso\n - cmd: modprobe mpls_iptunnel\n\nnodes:\n - name: R1\n image: frrouting/frr:v7.5.1\n docker_run_extra_args: --entrypoint bash\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - { name: net1, type: direct, args: R4#net0 }\n - { name: net2, type: direct, args: HostA1#net0 }\n - { name: net3, type: direct, args: HostB1#net0 }\n - name: R2\n image: frrouting/frr:v7.5.1\n docker_run_extra_args: --entrypoint bash\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - { name: net1, type: direct, args: R3#net0 }\n - { name: net2, type: direct, args: R4#net1 }\n - name: R3\n image: frrouting/frr:v7.5.1\n docker_run_extra_args: --entrypoint bash\n interfaces:\n - { name: net0, type: direct, args: R2#net1 }\n - { name: net1, type: direct, args: R4#net2 }\n - { name: net2, type: direct, args: HostA2#net0 }\n - { name: net3, type: direct, args: HostB2#net0 }\n - name: R4\n image: frrouting/frr:v7.5.1\n docker_run_extra_args: --entrypoint bash\n interfaces:\n - { name: net0, type: direct, args: R1#net1 }\n - { name: net1, type: direct, args: R2#net2 }\n - { name: net2, type: direct, args: R3#net1 }\n - name: HostA1\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R1#net2 }\n - name: HostA2\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R3#net2 }\n - name: HostB1\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R1#net3 }\n - name: HostB2\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R3#net3 }\n\nnode_configs:\n - name: R1\n cmds:\n - cmd: sed -i -e 's/bgpd=no/bgpd=yes/g' /etc/frr/daemons\n - cmd: sed -i -e 's/ospfd=no/ospfd=yes/g' /etc/frr/daemons\n - cmd: sed -i -e 's/pimd=no/pimd=yes/g' /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: sysctl -w net.ipv4.ip_forward=1\n - cmd: sysctl -w net.ipv4.conf.all.rp_filter=0\n - cmd: sysctl -w net.mpls.conf.lo.input=1\n - cmd: sysctl -w net.mpls.conf.net0.input=1\n - cmd: sysctl -w net.mpls.conf.net1.input=1\n - cmd: sysctl -w net.mpls.platform_labels=1048575\n\n - cmd: ip link add CUST-A type vrf table 10\n - cmd: ip link add CUST-B type vrf table 20\n - cmd: ip link set CUST-A up\n - cmd: ip link set CUST-B up\n - cmd: ip link set net2 master CUST-A\n - cmd: ip link set net3 master CUST-B\n\n - cmd: >-\n vtysh -c 'conf t'\n -c 'interface lo'\n -c ' ip address 10.255.0.1/32'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'interface net0'\n -c ' ip address 10.0.0.1/30'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'interface net1'\n -c ' ip address 10.0.0.9/30'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'interface net2'\n -c ' ip address 192.168.0.1/24'\n -c 'exit'\n -c 'interface net3'\n -c ' ip address 192.168.0.1/24'\n -c 'exit'\n -c 'router ospf'\n -c ' ospf router-id 10.255.0.1'\n -c ' router-info area 0.0.0.0'\n -c ' passive-interface lo'\n -c ' capability opaque'\n -c ' mpls-te on'\n -c ' mpls-te router-address 10.255.0.1'\n -c ' segment-routing on'\n -c ' segment-routing global-block 16000 19999'\n -c ' segment-routing node-msd 8'\n -c ' segment-routing prefix 10.255.0.1/32 index 1001'\n -c 'exit'\n -c 'router bgp 65000'\n -c ' neighbor 10.255.0.3 remote-as 65000'\n -c ' neighbor 10.255.0.3 update-source 10.255.0.1'\n -c ' address-family ipv4 vpn'\n -c ' neighbor 10.255.0.3 activate'\n -c ' exit-address-family'\n -c 'exit'\n -c 'router bgp 65000 vrf CUST-A'\n -c ' address-family ipv4 unicast'\n -c ' redistribute connected'\n -c ' label vpn export auto'\n -c ' rd vpn export 65000:10'\n -c ' rt vpn both 65000:10'\n -c ' export vpn'\n -c ' import vpn'\n -c ' exit-address-family'\n -c 'exit'\n -c 'router bgp 65000 vrf CUST-B'\n -c ' address-family ipv4 unicast'\n -c ' redistribute connected'\n -c ' label vpn export auto'\n -c ' rd vpn export 65000:20'\n -c ' rt vpn both 65000:20'\n -c ' export vpn'\n -c ' import vpn'\n -c ' exit-address-family'\n -c 'exit'\n - name: R2\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: sed -i -e 's/=no/=yes/g' /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh restart\n - cmd: sysctl -w net.ipv4.ip_forward=1\n - cmd: sysctl -w net.ipv4.conf.all.rp_filter=0\n - cmd: sysctl -w net.mpls.conf.lo.input=1\n - cmd: sysctl -w net.mpls.conf.net0.input=1\n - cmd: sysctl -w net.mpls.conf.net1.input=1\n - cmd: sysctl -w net.mpls.conf.net2.input=1\n - cmd: sysctl -w net.mpls.platform_labels=1048575\n - cmd: >-\n vtysh -c 'conf t'\n -c 'interface lo'\n -c ' ip address 10.255.0.2/32'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'interface net0'\n -c ' ip address 10.0.0.2/30'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'interface net1'\n -c ' ip address 10.0.0.5/30'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'interface net2'\n -c ' ip address 10.0.0.13/30'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'router ospf'\n -c ' ospf router-id 10.255.0.2'\n -c ' router-info area 0.0.0.0'\n -c ' passive-interface lo'\n -c ' capability opaque'\n -c ' mpls-te on'\n -c ' mpls-te router-address 10.255.0.2'\n -c ' segment-routing on'\n -c ' segment-routing global-block 16000 19999'\n -c ' segment-routing node-msd 8'\n -c ' segment-routing prefix 10.255.0.2/32 index 1002'\n -c 'exit'\n - name: R3\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: sed -i -e 's/=no/=yes/g' /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh restart\n - cmd: sysctl -w net.ipv4.ip_forward=1\n - cmd: sysctl -w net.ipv4.conf.all.rp_filter=0\n - cmd: sysctl -w net.mpls.conf.lo.input=1\n - cmd: sysctl -w net.mpls.conf.net0.input=1\n - cmd: sysctl -w net.mpls.conf.net1.input=1\n - cmd: sysctl -w net.mpls.platform_labels=1048575\n\n - cmd: ip link add CUST-A type vrf table 10\n - cmd: ip link add CUST-B type vrf table 20\n - cmd: ip link set CUST-A up\n - cmd: ip link set CUST-B up\n - cmd: ip link set net2 master CUST-A\n - cmd: ip link set net3 master CUST-B\n\n - cmd: >-\n vtysh -c 'conf t'\n -c 'interface lo'\n -c ' ip address 10.255.0.3/32'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'interface net0'\n -c ' ip address 10.0.0.6/30'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'interface net1'\n -c ' ip address 10.0.0.17/30'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'interface net2'\n -c ' ip address 192.168.1.1/24'\n -c 'exit'\n -c 'interface net3'\n -c ' ip address 192.168.1.1/24'\n -c 'exit'\n -c 'router ospf'\n -c ' ospf router-id 10.255.0.3'\n -c ' router-info area 0.0.0.0'\n -c ' passive-interface lo'\n -c ' capability opaque'\n -c ' mpls-te on'\n -c ' mpls-te router-address 10.255.0.3'\n -c ' segment-routing on'\n -c ' segment-routing global-block 16000 19999'\n -c ' segment-routing node-msd 8'\n -c ' segment-routing prefix 10.255.0.3/32 index 1003'\n -c 'exit'\n -c 'router bgp 65000'\n -c ' neighbor 10.255.0.1 remote-as 65000'\n -c ' neighbor 10.255.0.1 update-source 10.255.0.3'\n -c ' address-family ipv4 vpn'\n -c ' neighbor 10.255.0.1 activate'\n -c ' exit-address-family'\n -c 'exit'\n -c 'router bgp 65000 vrf CUST-A'\n -c ' address-family ipv4 unicast'\n -c ' redistribute connected'\n -c ' label vpn export auto'\n -c ' rd vpn export 65000:10'\n -c ' rt vpn both 65000:10'\n -c ' export vpn'\n -c ' import vpn'\n -c ' exit-address-family'\n -c 'exit'\n -c 'router bgp 65000 vrf CUST-B'\n -c ' address-family ipv4 unicast'\n -c ' redistribute connected'\n -c ' label vpn export auto'\n -c ' rd vpn export 65000:20'\n -c ' rt vpn both 65000:20'\n -c ' export vpn'\n -c ' import vpn'\n -c ' exit-address-family'\n -c 'exit'\n - name: R4\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: sed -i -e 's/=no/=yes/g' /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh restart\n - cmd: sysctl -w net.ipv4.ip_forward=1\n - cmd: sysctl -w net.ipv4.conf.all.rp_filter=0\n - cmd: sysctl -w net.mpls.conf.lo.input=1\n - cmd: sysctl -w net.mpls.conf.net0.input=1\n - cmd: sysctl -w net.mpls.conf.net1.input=1\n - cmd: sysctl -w net.mpls.conf.net2.input=1\n - cmd: sysctl -w net.mpls.platform_labels=1048575\n - cmd: >-\n vtysh -c 'conf t'\n -c 'interface lo'\n -c ' ip address 10.255.0.4/32'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'interface net0'\n -c ' ip address 10.0.0.10/30'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'interface net1'\n -c ' ip address 10.0.0.14/30'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'interface net2'\n -c ' ip address 10.0.0.18/30'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'router ospf'\n -c ' ospf router-id 10.255.0.4'\n -c ' router-info area 0.0.0.0'\n -c ' passive-interface lo'\n -c ' capability opaque'\n -c ' mpls-te on'\n -c ' mpls-te router-address 10.255.0.4'\n -c ' segment-routing on'\n -c ' segment-routing global-block 16000 19999'\n -c ' segment-routing node-msd 8'\n -c ' segment-routing prefix 10.255.0.4/32 index 1004'\n -c 'exit'\n - name: HostA1\n cmds:\n - cmd: ip addr add 192.168.0.2/24 dev net0\n - cmd: ip route add default via 192.168.0.1\n - name: HostA2\n cmds:\n - cmd: ip addr add 192.168.1.2/24 dev net0\n - cmd: ip route add default via 192.168.1.1\n - name: HostB1\n cmds:\n - cmd: ip addr add 192.168.0.2/24 dev net0\n - cmd: ip route add default via 192.168.0.1\n - name: HostB2\n cmds:\n - cmd: ip addr add 192.168.1.2/24 dev net0\n - cmd: ip route add default via 192.168.1.1\n\ntest:\n - cmds:\n ## SR-MPLS Operation\n - cmd: docker exec R1 ip route add 10.255.0.3/32 encap mpls 17004/17003 via 10.0.0.2\n - cmd: docker exec R3 ip route add 10.255.0.1/32 encap mpls 17002/17001 via 10.0.0.18\n ## SR-MPLS Test\n - cmd: docker exec HostA1 ping -c2 192.168.1.2\n" }, { "path": "examples/basic_bgp/vpnv4_srmpls_interas_option-b/README.md", "content": "# MP-BGP VPNv4 per-VRF Inter-AS Option B w/ SR-MPLS\n\n![](./topo.png)\n\nsetup\n```\n$ tn upconf | sudo sh\n```\n" }, { "path": "examples/basic_bgp/vpnv4_srmpls_interas_option-b/spec.yaml", "content": "preinit:\n - cmds:\n - cmd: modprobe mpls_router\n - cmd: modprobe mpls_gso\n - cmd: modprobe mpls_iptunnel\n\nnodes:\n ## AS65000\n - name: ASBR1\n image: frrouting/frr:v7.5.1\n interfaces:\n - { name: net0, type: direct, args: ASBR2#net0 }\n - { name: net1, type: direct, args: P1#net0 }\n - name: P1\n image: frrouting/frr:v7.5.1\n interfaces:\n - { name: net0, type: direct, args: ASBR1#net1 }\n - { name: net1, type: direct, args: PE1#net0 }\n - name: PE1\n image: frrouting/frr:v7.5.1\n interfaces:\n - { name: net0, type: direct, args: P1#net1 }\n - { name: net1, type: direct, args: HostA1#net0 }\n - { name: net2, type: direct, args: HostB1#net0 }\n - name: HostA1\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: PE1#net1 }\n - name: HostB1\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: PE1#net2 }\n ## AS65001\n - name: ASBR2\n image: frrouting/frr:v7.5.1\n interfaces:\n - { name: net0, type: direct, args: ASBR1#net0 }\n - { name: net1, type: direct, args: P2#net0 }\n - name: P2\n image: frrouting/frr:v7.5.1\n interfaces:\n - { name: net0, type: direct, args: ASBR2#net1 }\n - { name: net1, type: direct, args: PE2#net0 }\n - name: PE2\n image: frrouting/frr:v7.5.1\n interfaces:\n - { name: net0, type: direct, args: P2#net1 }\n - { name: net1, type: direct, args: HostA2#net0 }\n - { name: net2, type: direct, args: HostB2#net0 }\n - name: HostA2\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: PE2#net1 }\n - name: HostB2\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: PE2#net2 }\n\nnode_configs:\n - name: ASBR1\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: sed -i -e 's/=no/=yes/g' /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh restart\n - cmd: sysctl -w net.ipv4.ip_forward=1\n - cmd: systcl -w net.ipv4.conf.all.rp_filter=0\n - cmd: sysctl -w net.mpls.conf.lo.input=1\n - cmd: sysctl -w net.mpls.conf.net0.input=1\n - cmd: sysctl -w net.mpls.conf.net1.input=1\n - cmd: sysctl -w net.mpls.platform_labels=1048575\n\n - cmd: ip link add CUST-A type vrf table 10\n - cmd: ip link add CUST-B type vrf table 20\n - cmd: ip link set CUST-A up\n - cmd: ip link set CUST-B up\n\n - cmd: >-\n vtysh -c 'conf t'\n -c 'interface lo'\n -c ' ip address 10.255.0.1/32'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'interface net0'\n -c ' ip address 172.16.0.1/30'\n -c 'exit'\n -c 'interface net1'\n -c ' ip address 10.0.0.1/30'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'router ospf'\n -c ' ospf router-id 10.255.0.1'\n -c ' router-info area 0.0.0.0'\n -c ' passive-interface lo'\n -c ' capability opaque'\n -c ' mpls-te on'\n -c ' mpls-te router-address 10.255.0.1'\n -c ' segment-routing on'\n -c ' segment-routing global-block 16000 19999'\n -c ' segment-routing node-msd 8'\n -c ' segment-routing prefix 10.255.0.1/32 index 1001'\n -c 'exit'\n -c 'router bgp 65000'\n -c ' neighbor 10.255.0.3 remote-as 65000'\n -c ' neighbor 10.255.0.3 update-source 10.255.0.1'\n -c ' neighbor 172.16.0.2 remote-as 65001'\n -c ' neighbor 172.16.0.2 update-source 172.16.0.1'\n -c ' address-family ipv4 vpn'\n -c ' neighbor 10.255.0.3 activate'\n -c ' neighbor 10.255.0.3 next-hop-self'\n -c ' neighbor 172.16.0.2 activate'\n -c ' neighbor 172.16.0.2 route-map AS65001-IN in'\n -c ' neighbor 172.16.0.2 route-map AS65001-OUT out'\n -c ' exit-address-family'\n -c 'exit'\n -c 'router bgp 65000 vrf CUST-A'\n -c ' address-family ipv4 unicast'\n -c ' redistribute connected'\n -c ' label vpn export auto'\n -c ' rd vpn export 65000:10'\n -c ' rt vpn both 65000:10'\n -c ' export vpn'\n -c ' import vpn'\n -c ' exit-address-family'\n -c 'exit'\n -c 'router bgp 65000 vrf CUST-B'\n -c ' address-family ipv4 unicast'\n -c ' redistribute connected'\n -c ' label vpn export auto'\n -c ' rd vpn export 65000:20'\n -c ' rt vpn both 65000:20'\n -c ' export vpn'\n -c ' import vpn'\n -c ' exit-address-family'\n -c 'exit'\n -c 'bgp extcommunity-list 1 seq 1 permit rt 65000:10'\n -c 'bgp extcommunity-list 2 seq 1 permit rt 65000:20'\n -c 'route-map AS65001-IN permit 1'\n -c 'route-map AS65001-OUT permit 1'\n -c ' match extcommunity 1'\n -c ' set extcommunity rt 65001:10'\n -c 'route-map AS65001-OUT permit 2'\n -c ' match extcommunity 2'\n -c ' set extcommunity rt 65001:20'\n\n - name: P1\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: sed -i -e 's/=no/=yes/g' /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh restart\n - cmd: sysctl -w net.ipv4.ip_forward=1\n - cmd: systcl -w net.ipv4.conf.all.rp_filter=0\n - cmd: sysctl -w net.mpls.conf.lo.input=1\n - cmd: sysctl -w net.mpls.conf.net0.input=1\n - cmd: sysctl -w net.mpls.conf.net1.input=1\n - cmd: sysctl -w net.mpls.platform_labels=1048575\n - cmd: >-\n vtysh -c 'conf t'\n -c 'interface lo'\n -c ' ip address 10.255.0.2/32'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'interface net0'\n -c ' ip address 10.0.0.2/30'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'interface net1'\n -c ' ip address 10.0.0.5/30'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'router ospf'\n -c ' ospf router-id 10.255.0.2'\n -c ' router-info area 0.0.0.0'\n -c ' passive-interface lo'\n -c ' capability opaque'\n -c ' mpls-te on'\n -c ' mpls-te router-address 10.255.0.2'\n -c ' segment-routing on'\n -c ' segment-routing global-block 16000 19999'\n -c ' segment-routing node-msd 8'\n -c ' segment-routing prefix 10.255.0.2/32 index 1002'\n -c 'exit'\n\n - name: PE1\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: sed -i -e 's/=no/=yes/g' /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh restart\n - cmd: sysctl -w net.ipv4.ip_forward=1\n - cmd: systcl -w net.ipv4.conf.all.rp_filter=0\n - cmd: sysctl -w net.mpls.conf.lo.input=1\n - cmd: sysctl -w net.mpls.conf.net0.input=1\n - cmd: sysctl -w net.mpls.platform_labels=1048575\n\n - cmd: ip link add CUST-A type vrf table 10\n - cmd: ip link add CUST-B type vrf table 20\n - cmd: ip link set CUST-A up\n - cmd: ip link set CUST-B up\n - cmd: ip link set net1 master CUST-A\n - cmd: ip link set net2 master CUST-B\n\n - cmd: >-\n vtysh -c 'conf t'\n -c 'interface lo'\n -c ' ip address 10.255.0.3/32'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'interface net0'\n -c ' ip address 10.0.0.6/30'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'interface net1'\n -c ' ip address 192.168.0.1/24'\n -c 'exit'\n -c 'interface net2'\n -c ' ip address 192.168.0.1/24'\n -c 'exit'\n -c 'router ospf'\n -c ' ospf router-id 10.255.0.3'\n -c ' router-info area 0.0.0.0'\n -c ' passive-interface lo'\n -c ' capability opaque'\n -c ' mpls-te on'\n -c ' mpls-te router-address 10.255.0.3'\n -c ' segment-routing on'\n -c ' segment-routing global-block 16000 19999'\n -c ' segment-routing node-msd 8'\n -c ' segment-routing prefix 10.255.0.3/32 index 1003'\n -c 'exit'\n -c 'router bgp 65000'\n -c ' neighbor 10.255.0.1 remote-as 65000'\n -c ' neighbor 10.255.0.1 update-source 10.255.0.3'\n -c ' address-family ipv4 vpn'\n -c ' neighbor 10.255.0.1 activate'\n -c ' exit-address-family'\n -c 'exit'\n -c 'router bgp 65000 vrf CUST-A'\n -c ' address-family ipv4 unicast'\n -c ' redistribute connected'\n -c ' label vpn export auto'\n -c ' rd vpn export 65000:10'\n -c ' rt vpn both 65000:10'\n -c ' export vpn'\n -c ' import vpn'\n -c ' exit-address-family'\n -c 'exit'\n -c 'router bgp 65000 vrf CUST-B'\n -c ' address-family ipv4 unicast'\n -c ' redistribute connected'\n -c ' label vpn export auto'\n -c ' rd vpn export 65000:20'\n -c ' rt vpn both 65000:20'\n -c ' export vpn'\n -c ' import vpn'\n -c ' exit-address-family'\n -c 'exit'\n\n - name: ASBR2\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: sed -i -e 's/=no/=yes/g' /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh restart\n - cmd: sysctl -w net.ipv4.ip_forward=1\n - cmd: systcl -w net.ipv4.conf.all.rp_filter=0\n - cmd: sysctl -w net.mpls.conf.lo.input=1\n - cmd: sysctl -w net.mpls.conf.net0.input=1\n - cmd: sysctl -w net.mpls.conf.net1.input=1\n - cmd: sysctl -w net.mpls.platform_labels=1048575\n\n - cmd: ip link add CUST-A type vrf table 10\n - cmd: ip link add CUST-B type vrf table 20\n - cmd: ip link set CUST-A up\n - cmd: ip link set CUST-B up\n\n - cmd: >-\n vtysh -c 'conf t'\n -c 'interface lo'\n -c ' ip address 10.255.0.1/32'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'interface net0'\n -c ' ip address 172.16.0.2/30'\n -c 'exit'\n -c 'interface net1'\n -c ' ip address 10.0.1.1/30'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'router ospf'\n -c ' ospf router-id 10.255.0.1'\n -c ' router-info area 0.0.0.0'\n -c ' passive-interface lo'\n -c ' capability opaque'\n -c ' mpls-te on'\n -c ' mpls-te router-address 10.255.0.1'\n -c ' segment-routing on'\n -c ' segment-routing global-block 16000 19999'\n -c ' segment-routing node-msd 8'\n -c ' segment-routing prefix 10.255.0.1/32 index 1001'\n -c 'exit'\n -c 'router bgp 65001'\n -c ' neighbor 10.255.0.3 remote-as 65001'\n -c ' neighbor 10.255.0.3 update-source 10.255.0.1'\n -c ' neighbor 172.16.0.1 remote-as 65000'\n -c ' neighbor 172.16.0.1 update-source 172.16.0.2'\n -c ' address-family ipv4 vpn'\n -c ' neighbor 10.255.0.3 activate'\n -c ' neighbor 10.255.0.3 next-hop-self'\n -c ' neighbor 172.16.0.1 activate'\n -c ' neighbor 172.16.0.1 route-map AS65000-IN in'\n -c ' neighbor 172.16.0.1 route-map AS65000-OUT out'\n -c ' exit-address-family'\n -c 'exit'\n -c 'router bgp 65001 vrf CUST-A'\n -c ' address-family ipv4 unicast'\n -c ' redistribute connected'\n -c ' label vpn export auto'\n -c ' rd vpn export 65001:10'\n -c ' rt vpn both 65001:10'\n -c ' export vpn'\n -c ' import vpn'\n -c ' exit-address-family'\n -c 'exit'\n -c 'router bgp 65001 vrf CUST-B'\n -c ' address-family ipv4 unicast'\n -c ' redistribute connected'\n -c ' label vpn export auto'\n -c ' rd vpn export 65001:20'\n -c ' rt vpn both 65001:20'\n -c ' export vpn'\n -c ' import vpn'\n -c ' exit-address-family'\n -c 'exit'\n -c 'bgp extcommunity-list 1 seq 1 permit rt 65001:10'\n -c 'bgp extcommunity-list 2 seq 1 permit rt 65001:20'\n -c 'route-map AS65000-IN permit 1'\n -c 'route-map AS65000-OUT permit 1'\n -c ' match extcommunity 1'\n -c ' set extcommunity rt 65000:10'\n -c 'route-map AS65000-OUT permit 2'\n -c ' match extcommunity 2'\n -c ' set extcommunity rt 65000:20'\n\n - name: P2\n cmds:\n - cmd: /usr/lib/fro/frr start\n - cmd: sed -i -e 's/=no/=yes/g' /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh restart\n - cmd: sysctl -w net.ipv4.ip_forward=1\n - cmd: systcl -w net.ipv4.conf.all.rp_filter=0\n - cmd: sysctl -w net.mpls.conf.lo.input=1\n - cmd: sysctl -w net.mpls.conf.net0.input=1\n - cmd: sysctl -w net.mpls.conf.net1.input=1\n - cmd: sysctl -w net.mpls.platform_labels=1048575\n - cmd: >-\n vtysh -c 'conf t'\n -c 'interface lo'\n -c ' ip address 10.255.0.2/32'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'interface net0'\n -c ' ip address 10.0.1.2/30'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'interface net1'\n -c ' ip address 10.0.1.5/30'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'router ospf'\n -c ' ospf router-id 10.255.0.2'\n -c ' router-info area 0.0.0.0'\n -c ' passive-interface lo'\n -c ' capability opaque'\n -c ' mpls-te on'\n -c ' mpls-te router-address 10.255.0.2'\n -c ' segment-routing on'\n -c ' segment-routing global-block 16000 19999'\n -c ' segment-routing node-msd 8'\n -c ' segment-routing prefix 10.255.0.2/32 index 1002'\n -c 'exit'\n\n - name: PE2\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: sed -i -e 's/=no/=yes/g' /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh restart\n - cmd: sysctl -w net.ipv4.ip_forward=1\n - cmd: systcl -w net.ipv4.conf.all.rp_filter=0\n - cmd: sysctl -w net.mpls.conf.lo.input=1\n - cmd: sysctl -w net.mpls.conf.net0.input=1\n - cmd: sysctl -w net.mpls.platform_labels=1048575\n\n - cmd: ip link add CUST-A type vrf table 10\n - cmd: ip link add CUST-B type vrf table 20\n - cmd: ip link set CUST-A up\n - cmd: ip link set CUST-B up\n - cmd: ip link set net1 master CUST-A\n - cmd: ip link set net2 master CUST-B\n\n - cmd: >-\n vtysh -c 'conf t'\n -c 'interface lo'\n -c ' ip address 10.255.0.3/32'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'interface net0'\n -c ' ip address 10.0.1.6/30'\n -c ' ip ospf area 0.0.0.0'\n -c 'exit'\n -c 'interface net1'\n -c ' ip address 192.168.1.1/24'\n -c 'exit'\n -c 'interface net2'\n -c ' ip address 192.168.1.1/24'\n -c 'exit'\n -c 'router ospf'\n -c ' ospf router-id 10.255.0.3'\n -c ' router-info area 0.0.0.0'\n -c ' passive-interface lo'\n -c ' capability opaque'\n -c ' mpls-te on'\n -c ' mpls-te router-address 10.255.0.3'\n -c ' segment-routing on'\n -c ' segment-routing global-block 16000 19999'\n -c ' segment-routing node-msd 8'\n -c ' segment-routing prefix 10.255.0.3/32 index 1003'\n -c 'exit'\n -c 'router bgp 65001'\n -c ' neighbor 10.255.0.1 remote-as 65001'\n -c ' neighbor 10.255.0.1 update-source 10.255.0.3'\n -c ' address-family ipv4 vpn'\n -c ' neighbor 10.255.0.1 activate'\n -c ' exit-address-family'\n -c 'exit'\n -c 'router bgp 65001 vrf CUST-A'\n -c ' address-family ipv4 unicast'\n -c ' redistribute connected'\n -c ' label vpn export auto'\n -c ' rd vpn export 65001:10'\n -c ' rt vpn both 65001:10'\n -c ' export vpn'\n -c ' import vpn'\n -c ' exit-address-family'\n -c 'exit'\n -c 'router bgp 65001 vrf CUST-B'\n -c ' address-family ipv4 unicast'\n -c ' redistribute connected'\n -c ' label vpn export auto'\n -c ' rd vpn export 65001:20'\n -c ' rt vpn both 65001:20'\n -c ' export vpn'\n -c ' import vpn'\n -c ' exit-address-family'\n -c 'exit'\n\n - name: HostA1\n cmds:\n - cmd: ip addr add 192.168.0.2/24 dev net0\n - cmd: ip route add default via 192.168.0.1\n - name: HostA2\n cmds:\n - cmd: ip addr add 192.168.1.2/24 dev net0\n - cmd: ip route add default via 192.168.1.1\n - name: HostB1\n cmds:\n - cmd: ip addr add 192.168.0.2/24 dev net0\n - cmd: ip route add default via 192.168.0.1\n - name: HostB2\n cmds:\n - cmd: ip addr add 192.168.1.2/24 dev net0\n - cmd: ip route add default via 192.168.1.1\n\ntest:\n - cmds:\n ## SR-MPLS Test\n - cmd: docker exec HostA1 ping -c2 192.168.1.2\n" }, { "path": "examples/basic_bgp/vpnv4_srv6/Makefile", "content": "\nhelp:\n\t@echo help\n\nbuild:\n\tmake -C /home/vagrant/git/frr.slankdev\n\tsudo make -C /home/vagrant/git/frr.slankdev install\n\ninstall:\n\tdocker exec R1 rm -rf /usr/lib/frr\n\tdocker cp /usr/lib/frr R1:/usr/lib/frr\n\tdocker cp /usr/bin/vtysh R1:/usr/bin/vtysh\n\t\\\n\tdocker exec R2 rm -rf /usr/lib/frr\n\tdocker cp /usr/lib/frr R2:/usr/lib/frr\n\tdocker cp /usr/bin/vtysh R2:/usr/bin/vtysh\n\nconfig_srv6_only:\n\tdocker cp frr.conf.srv6.R1 R1:/etc/frr/frr.conf\n\tdocker cp frr.conf.srv6.R2 R2:/etc/frr/frr.conf\n\nstop:\n\tdocker exec R1 /usr/lib/frr/frrinit.sh stop\n\tdocker exec R2 /usr/lib/frr/frrinit.sh stop\n\nstart:\n\tdocker exec R1 /usr/lib/frr/frrinit.sh start\n\tdocker exec R2 /usr/lib/frr/frrinit.sh start\n\nrestart:\n\tdocker exec R1 /usr/lib/frr/frrinit.sh restart\n\tdocker exec R2 /usr/lib/frr/frrinit.sh restart\n\ncapture:\n\tdocker exec R1 pkill tcpdump | true\n\tdocker exec R2 pkill tcpdump | true\n\tdocker exec -d R1 tcpdump -ni net0 -w /tmp/r1.pcap\n\tdocker exec -d R2 tcpdump -ni net0 -w /tmp/r2.pcap\n\nnocapture:\n\tdocker exec R1 pkill tcpdump | true\n\tdocker exec R2 pkill tcpdump | true\n\tdocker cp R1:/tmp/r1.pcap /vagrant/r1.pcap\n\tdocker cp R2:/tmp/r2.pcap /vagrant/r2.pcap\n\nrere:\n\tmake -C . build\n\tmake -C . install\n\tmake -C . reload\n\ntaillog_R1:\n\twhile :; do \\\n\t\tdocker exec -it R1 touch /tmp/frr.log; \\\n\t\tdocker exec -it R1 chown frr.frr /tmp/frr.log; \\\n\t\tdocker exec -it R1 tail -f /tmp/frr.log -n0; \\\n\t\tsleep 1 ; done\ntaillog_R2:\n\twhile :; do \\\n\t\tdocker exec -it R2 touch /tmp/frr.log; \\\n\t\tdocker exec -it R2 chown frr.frr /tmp/frr.log; \\\n\t\tdocker exec -it R2 tail -f /tmp/frr.log -n0; \\\n\t\tsleep 1 ; done\n\ntn_reconf:\n\ttn reconf | sudo sh\n\tmake -C . install\n\tmake -C . config_srv6_only\n\nsh_route_vrfs:\n\t@echo -e '\\n[[R1-glb]]'\n\t@docker exec R1 ip route list\n\t@docker exec R1 ip -6 route list\n\t@echo -e '\\n[[R1-vrf1]]'\n\t@docker exec R1 ip route list vrf vrf1\n\t@echo -e '\\n[[R1-vrf2]]'\n\t@docker exec R1 ip route list vrf vrf2\n\t@echo -e '\\n[[R1-vrf3]]'\n\t@docker exec R1 ip route list vrf vrf3\n\t@echo -e '\\n[[R2-glb]]'\n\t@docker exec R2 ip route list\n\t@docker exec R2 ip -6 route list\n\t@echo -e '\\n[[R2-vrf1]]'\n\t@docker exec R2 ip route list vrf vrf1\n\t@echo -e '\\n[[R2-vrf2]]'\n\t@docker exec R2 ip route list vrf vrf2\n\t@echo -e '\\n[[R2-vrf3]]'\n\t@docker exec R2 ip route list vrf vrf3\n\t@echo\n\n" }, { "path": "examples/basic_bgp/vpnv4_srv6/README.md", "content": "\n# FRR meets BGP-SRv6-VPNv4\n\nMP-BGP VPNv4 per-VRF w/ SRv6..?\n\n![](./topo.png)\n\n```\n$ make sh_route_vrfs\n\n[[R1-glb]]\n169.254.99.10 dev vrf1 scope link\n169.254.99.20 dev vrf2 scope link\n169.254.99.30 dev vrf3 scope link\n1:1:: encap seg6local action End.DX4 nh4 169.254.99.10 dev net0 metric 1024 pref medium\n1:2:: encap seg6local action End.DX4 nh4 169.254.99.20 dev net0 metric 1024 pref medium\n1:3:: encap seg6local action End.DX4 nh4 169.254.99.30 dev net0 metric 1024 pref medium\n2:1:: via 2001::2 dev net0 metric 1024 pref medium\n2:2:: via 2001::2 dev net0 metric 1024 pref medium\n2:3:: via 2001::2 dev net0 metric 1024 pref medium\n2001::/64 dev net0 proto kernel metric 256 pref medium\nfe80::/64 dev net0 proto kernel metric 256 pref medium\n\n[[R1-vrf1]]\n30.1.0.0/24 dev net1 proto kernel scope link src 30.1.0.1\n30.2.0.0/24 encap seg6 mode encap segs 1 [ 2:1:: ] dev net0 scope link\n\n[[R1-vrf2]]\n30.3.0.0/24 dev net2 proto kernel scope link src 30.3.0.1\n30.4.0.0/24 encap seg6 mode encap segs 1 [ 2:2:: ] dev net0 scope link\n\n[[R1-vrf3]]\n30.5.0.0/24 dev net3 proto kernel scope link src 30.5.0.1\n30.6.0.0/24 encap seg6 mode encap segs 1 [ 2:3:: ] dev net0 scope link\n\n[[R2-glb]]\n169.254.99.10 dev vrf1 scope link\n169.254.99.20 dev vrf2 scope link\n169.254.99.30 dev vrf3 scope link\n1:1:: via 2001::1 dev net0 metric 1024 pref medium\n1:2:: via 2001::1 dev net0 metric 1024 pref medium\n1:3:: via 2001::1 dev net0 metric 1024 pref medium\n2:1:: encap seg6local action End.DX4 nh4 169.254.99.10 dev net0 metric 1024 pref medium\n2:2:: encap seg6local action End.DX4 nh4 169.254.99.20 dev net0 metric 1024 pref medium\n2:3:: encap seg6local action End.DX4 nh4 169.254.99.30 dev net0 metric 1024 pref medium\n2001::/64 dev net0 proto kernel metric 256 pref medium\nfe80::/64 dev net0 proto kernel metric 256 pref medium\n\n[[R2-vrf1]]\n30.1.0.0/24 encap seg6 mode encap segs 1 [ 1:1:: ] dev net0 scope link\n30.2.0.0/24 dev net1 proto kernel scope link src 30.2.0.1\n\n[[R2-vrf2]]\n30.3.0.0/24 encap seg6 mode encap segs 1 [ 1:2:: ] dev net0 scope link\n30.4.0.0/24 dev net2 proto kernel scope link src 30.4.0.1\n\n[[R2-vrf3]]\n30.5.0.0/24 encap seg6 mode encap segs 1 [ 1:3:: ] dev net0 scope link\n30.6.0.0/24 dev net3 proto kernel scope link src 30.6.0.1\n```\n\n" }, { "path": "examples/basic_bgp/vpnv4_srv6/frr.conf.srv6.R1", "content": "hostname R1\nlog file /tmp/frr.log\n!\ndebug bgp vpn label\ndebug bgp vpn leak-from-vrf\ndebug bgp vpn leak-to-vrf\ndebug bgp vpn rmap-event\ndebug bgp vpn adv-prefix-sid\n!\nint net0\n ipv6 address 2001::1/64\n!\nint net1 vrf vrf1\n ip address 30.1.0.1/24\n!\nint net2 vrf vrf2\n ip address 30.3.0.1/24\n!\nint net3 vrf vrf3\n ip address 30.5.0.1/24\n!\nrouter bgp 65001\n bgp router-id 10.255.0.1\n neighbor 2001::2 remote-as 65002\n !\n address-family ipv4 unicast\n redistribute connected\n redistribute static\n exit-address-family\n !\n address-family ipv4 srv6-vpn\n neighbor 2001::2 activate\n exit-address-family\n!\nrouter bgp 65001 vrf vrf1\n bgp router-id 10.255.0.1\n !\n address-family ipv4 unicast\n redistribute connected\n sid srv6-vpn export 1:1::\n rd srv6-vpn export 65001:1\n rt srv6-vpn both 100:1\n export srv6-vpn\n import srv6-vpn\n exit-address-family\n!\nrouter bgp 65001 vrf vrf2\n bgp router-id 10.255.0.1\n !\n address-family ipv4 unicast\n redistribute connected\n sid srv6-vpn export 1:2::\n rd srv6-vpn export 65001:2\n rt srv6-vpn both 100:2\n export srv6-vpn\n import srv6-vpn\n exit-address-family\n!\nrouter bgp 65001 vrf vrf3\n bgp router-id 10.255.0.1\n !\n address-family ipv4 unicast\n redistribute connected\n sid srv6-vpn export 1:3::\n rd srv6-vpn export 65001:3\n rt srv6-vpn both 100:3\n export srv6-vpn\n import srv6-vpn\n exit-address-family\n!\nline vty\n!\n" }, { "path": "examples/basic_bgp/vpnv4_srv6/frr.conf.srv6.R2", "content": "hostname R2\nlog file /tmp/frr.log\n!\ndebug bgp vpn label\ndebug bgp vpn leak-from-vrf\ndebug bgp vpn leak-to-vrf\ndebug bgp vpn rmap-event\ndebug bgp vpn adv-prefix-sid\n!\nint net0\n ipv6 address 2001::2/64\n!\nint net1 vrf vrf1\n ip address 30.2.0.1/24\n!\nint net2 vrf vrf2\n ip address 30.4.0.1/24\n!\nint net3 vrf vrf3\n ip address 30.6.0.1/24\n!\nrouter bgp 65002\n bgp router-id 10.255.0.2\n neighbor 2001::1 remote-as 65001\n !\n address-family ipv4 unicast\n redistribute connected\n redistribute static\n exit-address-family\n !\n address-family ipv4 srv6-vpn\n neighbor 2001::1 activate\n exit-address-family\n!\nrouter bgp 65002 vrf vrf1\n bgp router-id 10.255.0.2\n !\n address-family ipv4 unicast\n redistribute connected\n sid srv6-vpn export 2:1::\n rd srv6-vpn export 65002:1\n rt srv6-vpn both 100:1\n export srv6-vpn\n import srv6-vpn\n exit-address-family\n!\nrouter bgp 65002 vrf vrf2\n bgp router-id 10.255.0.2\n !\n address-family ipv4 unicast\n redistribute connected\n sid srv6-vpn export 2:2::\n rd srv6-vpn export 65002:2\n rt srv6-vpn both 100:2\n export srv6-vpn\n import srv6-vpn\n exit-address-family\n!\nrouter bgp 65002 vrf vrf3\n bgp router-id 10.255.0.2\n !\n address-family ipv4 unicast\n redistribute connected\n sid srv6-vpn export 2:3::\n rd srv6-vpn export 65002:3\n rt srv6-vpn both 100:3\n export srv6-vpn\n import srv6-vpn\n exit-address-family\n!\nline vty\n!\n" }, { "path": "examples/basic_bgp/vpnv4_srv6/spec.yaml", "content": "\nnodes:\n\n - name: R1\n image: slankdev/frr-7.3:slankdev-support-mpbgp-vpnv4-srv6-cplane\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - { name: net1, type: direct, args: C1#net0 }\n - { name: net2, type: direct, args: C3#net0 }\n - { name: net3, type: direct, args: C5#net0 }\n\n - name: R2\n image: slankdev/frr-7.3:slankdev-support-mpbgp-vpnv4-srv6-cplane\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - { name: net1, type: direct, args: C2#net0 }\n - { name: net2, type: direct, args: C4#net0 }\n - { name: net3, type: direct, args: C6#net0 }\n\n - name: C1\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: R1#net1 } ]\n - name: C2\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: R2#net1 } ]\n - name: C3\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: R1#net2 } ]\n - name: C4\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: R2#net2 } ]\n - name: C5\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: R1#net3 } ]\n - name: C6\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: R2#net3 } ]\n\nnode_configs:\n - name: R1\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: touch /etc/frr/frr.conf\n\n - cmd: ip link add vrf1 type vrf table 10\n - cmd: ip link set vrf1 up\n - cmd: ip link set net1 vrf vrf1\n - cmd: ip route add 169.254.99.10 dev vrf1\n\n - cmd: ip link add vrf2 type vrf table 20\n - cmd: ip link set vrf2 up\n - cmd: ip link set net2 vrf vrf2\n - cmd: ip route add 169.254.99.20 dev vrf2\n\n - cmd: ip link add vrf3 type vrf table 30\n - cmd: ip link set vrf3 up\n - cmd: ip link set net3 vrf vrf3\n - cmd: ip route add 169.254.99.30 dev vrf3\n\n - name: R2\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: touch /etc/frr/frr.conf\n\n - cmd: ip link add vrf1 type vrf table 10\n - cmd: ip link set vrf1 up\n - cmd: ip link set net1 vrf vrf1\n - cmd: ip route add 169.254.99.10 dev vrf1\n\n - cmd: ip link add vrf2 type vrf table 20\n - cmd: ip link set vrf2 up\n - cmd: ip link set net2 vrf vrf2\n - cmd: ip route add 169.254.99.20 dev vrf2\n\n - cmd: ip link add vrf3 type vrf table 30\n - cmd: ip link set vrf3 up\n - cmd: ip link set net3 vrf vrf3\n - cmd: ip route add 169.254.99.30 dev vrf3\n\n - name: C1\n cmds:\n - cmd: ip addr replace 30.1.0.2/24 dev net0\n - cmd: ip route replace default via 30.1.0.1\n - name: C2\n cmds:\n - cmd: ip addr replace 30.2.0.2/24 dev net0\n - cmd: ip route replace default via 30.2.0.1\n - name: C3\n cmds:\n - cmd: ip addr replace 30.3.0.2/24 dev net0\n - cmd: ip route replace default via 30.3.0.1\n - name: C4\n cmds:\n - cmd: ip addr replace 30.4.0.2/24 dev net0\n - cmd: ip route replace default via 30.4.0.1\n - name: C5\n cmds:\n - cmd: ip addr replace 30.5.0.2/24 dev net0\n - cmd: ip route replace default via 30.5.0.1\n - name: C6\n cmds:\n - cmd: ip addr replace 30.6.0.2/24 dev net0\n - cmd: ip route replace default via 30.6.0.1\n\n" }, { "path": "examples/basic_bgp/vpnv6_srv6_rs/spec.yaml", "content": "nodes:\n- name: RS1\n image: tinynetwork/frr:develop\n interfaces:\n - { name: net0, type: direct, args: S1#net0 }\n sysctls:\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.default.disable_ipv6=0\n - sysctl: net.ipv6.conf.all.forwarding=1\n\n- name: S1\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: RS1#net0 }\n - { name: net1, type: direct, args: R1#net0 }\n - { name: net2, type: direct, args: R2#net0 }\n - { name: net3, type: direct, args: R3#net0 }\n sysctls:\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.default.disable_ipv6=0\n - sysctl: net.ipv6.conf.all.forwarding=1\n\n- name: R1\n image: tinynetwork/frr:develop\n interfaces:\n - { name: net0, type: direct, args: S1#net1 }\n - { name: net1, type: direct, args: C1#net0 }\n sysctls:\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.default.disable_ipv6=0\n - sysctl: net.ipv6.conf.all.forwarding=1\n- name: R2\n image: tinynetwork/frr:develop\n interfaces:\n - { name: net0, type: direct, args: S1#net2 }\n - { name: net1, type: direct, args: C2#net0 }\n sysctls:\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.default.disable_ipv6=0\n - sysctl: net.ipv6.conf.all.forwarding=1\n- name: R3\n image: tinynetwork/frr:develop\n interfaces:\n - { name: net0, type: direct, args: S1#net3 }\n - { name: net1, type: direct, args: C3#net0 }\n sysctls:\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.default.disable_ipv6=0\n - sysctl: net.ipv6.conf.all.forwarding=1\n\n- name: C1\n image: tinynetwork/frr:develop\n interfaces:\n - { name: net0, type: direct, args: R1#net1 }\n sysctls:\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.default.disable_ipv6=0\n - sysctl: net.ipv6.conf.all.forwarding=1\n- name: C2\n image: tinynetwork/frr:develop\n interfaces:\n - { name: net0, type: direct, args: R2#net1 }\n sysctls:\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.default.disable_ipv6=0\n - sysctl: net.ipv6.conf.all.forwarding=1\n- name: C3\n image: tinynetwork/frr:develop\n interfaces:\n - { name: net0, type: direct, args: R3#net1 }\n sysctls:\n - sysctl: net.ipv6.conf.all.disable_ipv6=0\n - sysctl: net.ipv6.conf.default.disable_ipv6=0\n - sysctl: net.ipv6.conf.all.forwarding=1\n\nnode_configs:\n- name: RS1\n cmds:\n - cmd: ip addr add 10.255.0.1/32 dev lo\n - cmd: ip addr add 2001:db8:e:1::0/128 dev lo\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 1\"\n -c \" bgp router-id 1.1.1.1\"\n -c \" no bgp ebgp-requires-policy\"\n -c \" !\"\n -c \" neighbor PEER peer-group\"\n -c \" neighbor PEER remote-as external\"\n -c \" neighbor net0 interface peer-group PEER\"\n -c \" !\"\n -c \" neighbor PE peer-group\"\n -c \" neighbor PE remote-as external\"\n -c \" neighbor PE ebgp-multihop 255\"\n -c \" bgp listen range 2001:db8:e::/48 peer-group PE\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" neighbor PEER activate\"\n -c \" exit-address-family\"\n -c \" !\"\n -c \" address-family ipv6 unicast\"\n -c \" neighbor PEER activate\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n -c \" !\"\n -c \" address-family ipv6 vpn\"\n -c \" neighbor PE activate\"\n -c \" exit-address-family\"\n -c \"!\"\n\n- name: S1\n cmds:\n - cmd: ip addr add 10.255.0.100/32 dev lo\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 100\"\n -c \" bgp router-id 100.100.100.100\"\n -c \" !\"\n -c \" neighbor PEER peer-group\"\n -c \" neighbor PEER remote-as external\"\n -c \" neighbor net0 interface peer-group PEER\"\n -c \" neighbor net1 interface peer-group PEER\"\n -c \" neighbor net2 interface peer-group PEER\"\n -c \" neighbor net3 interface peer-group PEER\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" neighbor PEER activate\"\n -c \" exit-address-family\"\n -c \" !\"\n -c \" address-family ipv6 unicast\"\n -c \" neighbor PEER activate\"\n -c \" network 0::/0\"\n -c \" exit-address-family\"\n -c \"!\"\n\n- name: R1\n cmds:\n - cmd: ip addr add 10.255.0.11/32 dev lo\n - cmd: ip addr add 2001:db8:e:11::0/128 dev lo\n - cmd: ip link add vrf1 type vrf table 1001\n - cmd: ip link set vrf1 up\n - cmd: ip link set net1 master vrf1\n - cmd: ip -6 addr add 2001:11::1/64 dev net1\n - cmd: ip sr tunsrc set 2001:db8:f:1::0\n - cmd: ip -6 rule add to 2001:db8::/32 pref 1 table main\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"segment-routing\"\n -c \" srv6\"\n -c \" locators\"\n -c \" locator default\"\n -c \" prefix 2001:db8:f:1::/64\"\n -c \" !\"\n -c \" !\"\n -c \" !\"\n -c \"!\"\n -c \"ipv6 route 2001:db8:f:1::/64 Null0\"\n -c \"!\"\n -c \"router bgp 11\"\n -c \" bgp router-id 11.11.11.11\"\n -c \" no bgp ebgp-requires-policy\"\n -c \" !\"\n -c \" neighbor PEER peer-group\"\n -c \" neighbor PEER remote-as external\"\n -c \" neighbor net0 interface peer-group PEER\"\n -c \" !\"\n -c \" neighbor PE peer-group\"\n -c \" neighbor PE remote-as external\"\n -c \" neighbor PE ebgp-multihop 255\"\n -c \" neighbor 2001:db8:e:1:: peer-group PE\"\n -c \" !\"\n -c \" segment-routing srv6\"\n -c \" locator default\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" neighbor PEER activate\"\n -c \" exit-address-family\"\n -c \" !\"\n -c \" address-family ipv6 unicast\"\n -c \" redistribute connected\"\n -c \" network 2001:db8:f:1::/64\"\n -c \" neighbor PEER activate\"\n -c \" exit-address-family\"\n -c \" !\"\n -c \" address-family ipv6 vpn\"\n -c \" neighbor PE activate\"\n -c \" exit-address-family\"\n -c \"!\"\n -c \"router bgp 11 vrf vrf1\"\n -c \" bgp router-id 11.11.11.11\"\n -c \" no bgp ebgp-requires-policy\"\n -c \" neighbor 2001:11::2 remote-as external\"\n -c \" !\"\n -c \" address-family ipv6 unicast\"\n -c \" neighbor 2001:11::2 activate\"\n -c \" sid vpn export auto\"\n -c \" rd vpn export 11:1001\"\n -c \" rt vpn export 1:1001\"\n -c \" rt vpn import 1:1001\"\n -c \" import vpn\"\n -c \" export vpn\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n -c \"!\"\n\n- name: R2\n cmds:\n - cmd: ip addr add 10.255.0.12/32 dev lo\n - cmd: ip addr add 2001:db8:e:12::0/128 dev lo\n - cmd: ip link add vrf1 type vrf table 1001\n - cmd: ip link set vrf1 up\n - cmd: ip link set net1 master vrf1\n - cmd: ip -6 addr add 2001:12::1/64 dev net1\n - cmd: ip sr tunsrc set 2001:db8:f:2::0\n - cmd: ip -6 rule add to 2001:db8::/32 pref 1 table main\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"segment-routing\"\n -c \" srv6\"\n -c \" locators\"\n -c \" locator default\"\n -c \" prefix 2001:db8:f:2::/64\"\n -c \" !\"\n -c \" !\"\n -c \" !\"\n -c \"!\"\n -c \"ipv6 route 2001:db8:f:2::/64 Null0\"\n -c \"!\"\n -c \"router bgp 12\"\n -c \" bgp router-id 12.12.12.12\"\n -c \" no bgp ebgp-requires-policy\"\n -c \" !\"\n -c \" neighbor PEER peer-group\"\n -c \" neighbor PEER remote-as external\"\n -c \" neighbor net0 interface peer-group PEER\"\n -c \" !\"\n -c \" neighbor PE peer-group\"\n -c \" neighbor PE remote-as external\"\n -c \" neighbor PE ebgp-multihop 255\"\n -c \" neighbor 2001:db8:e:1:: peer-group PE\"\n -c \" !\"\n -c \" segment-routing srv6\"\n -c \" locator default\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" neighbor PEER activate\"\n -c \" exit-address-family\"\n -c \" !\"\n -c \" address-family ipv6 unicast\"\n -c \" redistribute connected\"\n -c \" network 2001:db8:f:2::/64\"\n -c \" neighbor PEER activate\"\n -c \" exit-address-family\"\n -c \" !\"\n -c \" address-family ipv6 vpn\"\n -c \" neighbor PE activate\"\n -c \" exit-address-family\"\n -c \"!\"\n -c \"router bgp 12 vrf vrf1\"\n -c \" bgp router-id 12.12.12.12\"\n -c \" no bgp ebgp-requires-policy\"\n -c \" neighbor 2001:12::2 remote-as external\"\n -c \" !\"\n -c \" address-family ipv6 unicast\"\n -c \" neighbor 2001:12::2 activate\"\n -c \" sid vpn export auto\"\n -c \" rd vpn export 12:1001\"\n -c \" rt vpn export 1:1001\"\n -c \" rt vpn import 1:1001\"\n -c \" import vpn\"\n -c \" export vpn\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n -c \"!\"\n\n- name: R3\n cmds:\n - cmd: ip addr add 10.255.0.13/32 dev lo\n - cmd: ip addr add 2001:db8:e:13::0/128 dev lo\n - cmd: ip link add vrf1 type vrf table 1001\n - cmd: ip link set vrf1 up\n - cmd: ip link set net1 master vrf1\n - cmd: ip -6 addr add 2001:13::1/64 dev net1\n - cmd: ip sr tunsrc set 2001:db8:f:3::0\n - cmd: ip -6 rule add to 2001:db8::/32 pref 1 table main\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"segment-routing\"\n -c \" srv6\"\n -c \" locators\"\n -c \" locator default\"\n -c \" prefix 2001:db8:f:3::/64\"\n -c \" !\"\n -c \" !\"\n -c \" !\"\n -c \"!\"\n -c \"ipv6 route 2001:db8:f:3::/64 Null0\"\n -c \"!\"\n -c \"router bgp 13\"\n -c \" bgp router-id 13.13.13.13\"\n -c \" no bgp ebgp-requires-policy\"\n -c \" !\"\n -c \" neighbor PEER peer-group\"\n -c \" neighbor PEER remote-as external\"\n -c \" neighbor net0 interface peer-group PEER\"\n -c \" !\"\n -c \" neighbor PE peer-group\"\n -c \" neighbor PE remote-as external\"\n -c \" neighbor PE ebgp-multihop 255\"\n -c \" neighbor 2001:db8:e:1:: peer-group PE\"\n -c \" !\"\n -c \" segment-routing srv6\"\n -c \" locator default\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" neighbor PEER activate\"\n -c \" exit-address-family\"\n -c \" !\"\n -c \" address-family ipv6 unicast\"\n -c \" redistribute connected\"\n -c \" network 2001:db8:f:3::/64\"\n -c \" neighbor PEER activate\"\n -c \" exit-address-family\"\n -c \" !\"\n -c \" address-family ipv6 vpn\"\n -c \" neighbor PE activate\"\n -c \" exit-address-family\"\n -c \"!\"\n -c \"router bgp 13 vrf vrf1\"\n -c \" bgp router-id 13.13.13.13\"\n -c \" no bgp ebgp-requires-policy\"\n -c \" !\"\n -c \" address-family ipv6 unicast\"\n -c \" sid vpn export auto\"\n -c \" rd vpn export 13:1001\"\n -c \" rt vpn export 1:1001\"\n -c \" rt vpn import 1:1001\"\n -c \" import vpn\"\n -c \" export vpn\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n -c \"!\"\n\n- name: C1\n cmds:\n - cmd: ip -6 addr add 2001:11::2/64 dev net0\n - cmd: ip -6 route replace default via 2001:11::1\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"ipv6 route 0::/0 Null0\"\n -c \"!\"\n -c \"router bgp 101\"\n -c \" bgp router-id 101.101.101.101\"\n -c \" no bgp ebgp-requires-policy\"\n -c \" neighbor 2001:11::1 remote-as external\"\n -c \" !\"\n -c \" address-family ipv6 unicast\"\n -c \" neighbor 2001:11::1 activate\"\n -c \" network 0::/0\"\n -c \" exit-address-family\"\n- name: C2\n cmds:\n - cmd: ip -6 addr add 2001:12::2/64 dev net0\n - cmd: ip -6 route replace default via 2001:12::1\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"ipv6 route 0::/0 Null0\"\n -c \"!\"\n -c \"router bgp 102\"\n -c \" bgp router-id 102.102.102.102\"\n -c \" no bgp ebgp-requires-policy\"\n -c \" neighbor 2001:12::1 remote-as external\"\n -c \" !\"\n -c \" address-family ipv6 unicast\"\n -c \" neighbor 2001:12::1 activate\"\n -c \" network 0::/0\"\n -c \" exit-address-family\"\n- name: C3\n cmds:\n - cmd: ip -6 addr add 2001:13::2/64 dev net0\n - cmd: ip -6 route replace default via 2001:13::1\n - cmd: /usr/lib/frr/frrinit.sh start\n" }, { "path": "examples/basic_bgp/vrf2vrf_rouet_leak/Makefile", "content": "\nsh:\n\tdocker exec R1 ip route list\n\t@echo\n\tdocker exec R1 ip route list vrf red\n\t@echo\n\tdocker exec R1 ip route list vrf blu\n\t@echo\n\tdocker exec R1 ip route list vrf grn\n" }, { "path": "examples/basic_bgp/vrf2vrf_rouet_leak/spec.yaml", "content": "\nnodes:\n - name: R1\n image: slankdev/frr-dev:latest\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - name: R2\n image: slankdev/frr-dev:latest\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n\n\nnode_configs:\n - name: R1\n cmds:\n - cmd: ip link add red type vrf table 10\n - cmd: ip link add blu type vrf table 20\n - cmd: ip link add grn type vrf table 30\n - cmd: ip link set red up\n - cmd: ip link set blu up\n - cmd: ip link set grn up\n - cmd: ip link set net0 vrf red\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'int net0' -c 'ip addr 10.0.0.1/24' -c 'exit'\n -c 'router bgp 1 vrf red'\n -c ' bgp router-id 1.1.1.1'\n -c ' address-family ipv4 unicast'\n -c ' redistribute connected'\n -c ' exit-address-family'\n -c 'router bgp 2 vrf blu'\n -c ' bgp router-id 2.2.2.2'\n -c ' address-family ipv4 unicast'\n -c ' import vrf red'\n -c ' exit-address-family'\n -c 'router bgp 3 vrf grn'\n -c ' bgp router-id 3.3.3.3'\n -c ' address-family ipv4 unicast'\n -c ' import vrf blu'\n -c ' exit-address-family'\n\n" }, { "path": "examples/basic_bond/spec.yaml", "content": "\nprecmd:\n - cmds:\n - cmd: export IMAGE=slankdev/frr\n - cmd: export IMAGE=slankdev/gobgp\n - cmd: export IMAGE=slankdev/ubuntu:18.04\n\nnodes:\n - name: R1\n image: $IMAGE\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - { name: net1, type: direct, args: R2#net1 }\n - name: R2\n image: $IMAGE\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - { name: net1, type: direct, args: R1#net1 }\n\nnode_configs:\n - name: R1\n cmds:\n - cmd: ip link add bond0 type bond miimon 100 mode active-backup\n - cmd: ip link set bond0 up\n - cmd: ip link set net0 down\n - cmd: ip link set net1 down\n - cmd: ip link set net0 master bond0\n - cmd: ip link set net1 master bond0\n - cmd: ip addr add 10.0.0.1/24 dev bond0\n - name: R2\n cmds:\n - cmd: ip link add bond0 type bond miimon 100 mode active-backup\n - cmd: ip link set bond0 up\n - cmd: ip link set net0 down\n - cmd: ip link set net1 down\n - cmd: ip link set net0 master bond0\n - cmd: ip link set net1 master bond0\n - cmd: ip addr add 10.0.0.2/24 dev bond0\n\ntest:\n - name: p2p\n cmds:\n - cmd: echo slankdev slankdev\n - cmd: echo slankdev slankdev\n\n" }, { "path": "examples/basic_bufferbloat/README.md", "content": "# Bufferbloat demonstration\n\nSimple demonstration of the [bufferbloat](https://www.bufferbloat.net/projects/) problem.\n\n![](./topo.png)\n" }, { "path": "examples/basic_bufferbloat/spec.yaml", "content": "nodes:\n- name: R1\n image: nicolaka/netshoot\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - { name: net1, type: direct, args: C1#net0 }\n - { name: net2, type: direct, args: C2#net0 }\n- name: R2\n image: nicolaka/netshoot\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - { name: net1, type: direct, args: C3#net0 }\n - { name: net2, type: direct, args: C4#net0 }\n- name: C1\n image: nicolaka/netshoot\n interfaces:\n - { name: net0, type: direct, args: R1#net1 }\n- name: C2\n image: nicolaka/netshoot\n interfaces:\n - { name: net0, type: direct, args: R1#net2 }\n- name: C3\n image: nicolaka/netshoot\n interfaces:\n - { name: net0, type: direct, args: R2#net1 }\n- name: C4\n image: nicolaka/netshoot\n interfaces:\n - { name: net0, type: direct, args: R2#net2 }\nnode_configs:\n- name: R1\n cmds:\n - cmd: ip addr add 10.0.0.1/24 dev net1\n - cmd: ip addr add 10.0.1.1/24 dev net2\n - cmd: ip addr add 10.0.2.1/24 dev net0\n - cmd: ip route add default via 10.0.2.2\n - cmd: tc qdisc add dev net0 root netem rate 500mbit\n- name: R2\n cmds:\n - cmd: ip addr add 10.0.2.2/24 dev net0\n - cmd: ip addr add 10.0.3.1/24 dev net1\n - cmd: ip addr add 10.0.4.1/24 dev net2\n - cmd: ip route add default via 10.0.2.1\n - cmd: tc qdisc add dev net0 root netem rate 500mbit\n- name: C1\n cmds:\n - cmd: ip addr add 10.0.0.2/24 dev net0\n - cmd: ip route add default via 10.0.0.1\n- name: C2\n cmds:\n - cmd: ip addr add 10.0.1.2/24 dev net0\n - cmd: ip route add default via 10.0.1.1\n- name: C3\n cmds:\n - cmd: ip addr add 10.0.3.2/24 dev net0\n - cmd: ip route add default via 10.0.3.1\n- name: C4\n cmds:\n - cmd: ip addr add 10.0.4.2/24 dev net0\n - cmd: ip route add default via 10.0.4.1\ntest:\n - cmds:\n - cmd: echo \"==========================================\"\n - cmd: echo \"iperf from C1 to C3\"\n - cmd: echo \"==========================================\"\n - cmd: docker exec C3 iperf -s -i 1 &\n - cmd: sleep 3\n - cmd: docker exec C1 iperf -c 10.0.3.2 2>&1 > /dev/null\n - cmd: docker exec C3 pkill iperf\n - cmd: echo \"==========================================\"\n - cmd: echo \"ping from C2 to C4\"\n - cmd: echo \"==========================================\"\n - cmd: docker exec C2 ping -c 10 10.0.4.2\n - cmd: echo \"==========================================\"\n - cmd: echo \"ping from C2 to C4 while iperf-ing from C1 to C3\"\n - cmd: echo \"==========================================\"\n - cmd: docker exec C3 iperf -s 2>&1 > /dev/null &\n - cmd: sleep 3\n - cmd: docker exec C1 iperf -c 10.0.3.2 -t 60 2>&1 > /dev/null &\n - cmd: sleep 3\n - cmd: docker exec C2 ping -c 10 10.0.4.2\n - cmd: docker exec C1 pkill iperf\n - cmd: sleep 3\n - cmd: docker exec C3 pkill iperf\n" }, { "path": "examples/basic_clos/README.md", "content": "\n# CLOS Topology\n\nPractice of designing DCN. Following are principle of Design.\n- using modernaized technology (such as BGP-unnumbered.)\n\nVersion\n- 0.0.0: basic CLOS-network ([yaml](./spec.v0.0.0.yaml))\n- 0.0.1: using BGP-unnumbered ([yaml](./spec.v0.0.1.yaml))\n- 0.0.2: using ECMP anycast ([yaml](./spec.v0.0.2.yaml))\n- 0.0.3: add VM and ToR nodes ([yaml](./spec.v0.0.3.yaml))\n- 0.0.4: support multi-tenancy ([yaml](./spec.v0.0.4.yaml)) (**currentry version**)\n- 0.0.5: support SRv6 network slicing ([yaml](./spec.v0.0.5.yaml))\n\n**version v0.0.3**\n![](./topo.v0.0.3.png)\n\n**version v0.0.2**\n![](./topo.v0.0.2.png)\n\n**version v0.0.1**\n![](./topo.v0.0.1.png)\n\n**version v0.0.0**\n![](./topo.v0.0.0.png)\n\nreferences\n- LINE-SRv6-DCN ENOG55 http://enog.jp/wp-content/uploads/2018/12/05_20190222_ENOG55_LINE.pdf\n- Large Scale DC Network Design https://www.slideshare.net/MasayukiKobayashi/dc-66865243\n- Good TiNET examples by MIYA-kun https://github.com/mi2428/netben\n- LINE DCN Overview by Kobayashi-san 2018.10 https://www.slideshare.net/linecorp/ss-116867631\n- About designing the LINE-NW from scrach by Kobayashi-san 2019.01 https://www.janog.gr.jp/meeting/janog43/application/files/7915/4823/1858/janog43-line-kobayashi.pdf\n- OpenStack Summit Vancouver 2018 Recap LINE-verda https://engineering.linecorp.com/ja/blog/openstack-summit-vancouver-2018-recap-2-2\n\noperation performance\n```\nv0.0.3 sh -c 'tn up | sudo sh'\nreal 0m29.151s\nuser 0m6.945s\nsys 0m4.472s\n\nv0.0.3 sh -c 'tn conf | sudo sh' frr-all\nreal 1m25.104s\nuser 0m6.110s\nsys 0m4.263s\n\nv0.0.3 sh -c 'tn conf | sudo sh' frr-zebra,bgpd\nreal 1m13.867s\nuser 0m6.239s\nsys 0m4.143s\n```\n" }, { "path": "examples/basic_clos/spec.v0.0.0.yaml", "content": "\nnodes:\n - name: Ext1\n image: slankdev/frr\n interfaces:\n # - { name: net0, type: direct, args: Internet#net0 }\n - { name: net1, type: direct, args: Spine1#up1 }\n - { name: net2, type: direct, args: Spine2#up1 }\n - name: Spine1\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Ext1#net1 }\n - { name: dn1, type: direct, args: Leaf1#up1 }\n - { name: dn2, type: direct, args: Leaf2#up1 }\n - { name: dn3, type: direct, args: Leaf3#up1 }\n - { name: dn4, type: direct, args: Leaf4#up1 }\n - name: Spine2\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Ext1#net2 }\n - { name: dn1, type: direct, args: Leaf1#up2 }\n - { name: dn2, type: direct, args: Leaf2#up2 }\n - { name: dn3, type: direct, args: Leaf3#up2 }\n - { name: dn4, type: direct, args: Leaf4#up2 }\n - name: Leaf1\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Spine1#dn1 }\n - { name: up2, type: direct, args: Spine2#dn1 }\n - { name: dn1, type: direct, args: Serv1#net0 }\n - { name: dn2, type: direct, args: Serv2#net0 }\n - name: Leaf2\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Spine1#dn2 }\n - { name: up2, type: direct, args: Spine2#dn2 }\n - { name: dn1, type: direct, args: Serv3#net0 }\n - { name: dn2, type: direct, args: Serv4#net0 }\n - name: Leaf3\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Spine1#dn3 }\n - { name: up2, type: direct, args: Spine2#dn3 }\n - { name: dn1, type: direct, args: Serv5#net0 }\n - { name: dn2, type: direct, args: Serv6#net0 }\n - name: Leaf4\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Spine1#dn4 }\n - { name: up2, type: direct, args: Spine2#dn4 }\n - { name: dn1, type: direct, args: Serv7#net0 }\n - { name: dn2, type: direct, args: Serv8#net0 }\n - name: Serv1\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Leaf1#dn1 } ]\n - name: Serv2\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Leaf1#dn2 } ]\n - name: Serv3\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Leaf2#dn1 } ]\n - name: Serv4\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Leaf2#dn2 } ]\n - name: Serv5\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Leaf3#dn1 } ]\n - name: Serv6\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Leaf3#dn2 } ]\n - name: Serv7\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Leaf4#dn1 } ]\n - name: Serv8\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Leaf4#dn2 } ]\n\nnode_configs:\n - name: Ext1\n cmds:\n - cmd: echo slankdev slankdev\n - name: Spine1\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.1/32\"\n -c \"int dn1\" -c \"ip addr 10.0.0.1/30\"\n -c \"int dn2\" -c \"ip addr 10.0.0.5/30\"\n -c \"int dn3\" -c \"ip addr 10.0.0.9/30\"\n -c \"int dn4\" -c \"ip addr 10.0.0.13/30\"\n -c \"router bgp 65001\"\n -c \" bgp router-id 10.255.0.1\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor 10.0.0.2 remote-as 65011\"\n -c \" neighbor 10.0.0.6 remote-as 65012\"\n -c \" neighbor 10.0.0.10 remote-as 65013\"\n -c \" neighbor 10.0.0.14 remote-as 65014\"\n - name: Spine2\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.2/32\"\n -c \"int dn1\" -c \"ip addr 10.0.0.17/30\"\n -c \"int dn2\" -c \"ip addr 10.0.0.21/30\"\n -c \"int dn3\" -c \"ip addr 10.0.0.25/30\"\n -c \"int dn4\" -c \"ip addr 10.0.0.29/30\"\n -c \"router bgp 65002\"\n -c \" bgp router-id 10.255.0.2\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor 10.0.0.18 remote-as 65011\"\n -c \" neighbor 10.0.0.22 remote-as 65012\"\n -c \" neighbor 10.0.0.26 remote-as 65013\"\n -c \" neighbor 10.0.0.30 remote-as 65014\"\n - name: Leaf1\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.11/32\"\n -c \"int up1\" -c \"ip addr 10.0.0.2/30\"\n -c \"int up2\" -c \"ip addr 10.0.0.18/30\"\n -c \"int dn1\" -c \"ip addr 20.0.0.1/30\"\n -c \"int dn2\" -c \"ip addr 20.0.0.5/30\"\n -c \"router bgp 65011\"\n -c \" bgp router-id 10.255.0.11\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor 10.0.0.1 remote-as 65001\"\n -c \" neighbor 10.0.0.17 remote-as 65002\"\n -c \" neighbor 20.0.0.2 remote-as 65021\"\n -c \" neighbor 20.0.0.6 remote-as 65022\"\n - name: Leaf2\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.12/32\"\n -c \"int up1\" -c \"ip addr 10.0.0.6/30\"\n -c \"int up2\" -c \"ip addr 10.0.0.22/30\"\n -c \"int dn1\" -c \"ip addr 20.0.0.9/30\"\n -c \"int dn2\" -c \"ip addr 20.0.0.13/30\"\n -c \"router bgp 65012\"\n -c \" bgp router-id 10.255.0.12\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor 10.0.0.5 remote-as 65001\"\n -c \" neighbor 10.0.0.21 remote-as 65002\"\n -c \" neighbor 20.0.0.10 remote-as 65023\"\n -c \" neighbor 20.0.0.14 remote-as 65024\"\n - name: Leaf3\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.13/32\"\n -c \"int up1\" -c \"ip addr 10.0.0.10/30\"\n -c \"int up2\" -c \"ip addr 10.0.0.26/30\"\n -c \"int dn1\" -c \"ip addr 20.0.0.17/30\"\n -c \"int dn2\" -c \"ip addr 20.0.0.21/30\"\n -c \"router bgp 65013\"\n -c \" bgp router-id 10.255.0.13\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor 10.0.0.9 remote-as 65001\"\n -c \" neighbor 10.0.0.25 remote-as 65002\"\n -c \" neighbor 20.0.0.18 remote-as 65025\"\n -c \" neighbor 20.0.0.22 remote-as 65026\"\n - name: Leaf4\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.14/32\"\n -c \"int up1\" -c \"ip addr 10.0.0.14/30\"\n -c \"int up2\" -c \"ip addr 10.0.0.30/30\"\n -c \"int dn1\" -c \"ip addr 20.0.0.25/30\"\n -c \"int dn2\" -c \"ip addr 20.0.0.29/30\"\n -c \"router bgp 65014\"\n -c \" bgp router-id 10.255.0.14\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor 10.0.0.13 remote-as 65001\"\n -c \" neighbor 10.0.0.29 remote-as 65002\"\n -c \" neighbor 20.0.0.26 remote-as 65027\"\n -c \" neighbor 20.0.0.30 remote-as 65028\"\n - name: Serv1\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.21/32\"\n -c \"int net0\" -c \"ip addr 20.0.0.2/30\"\n -c \"router bgp 65021\"\n -c \" bgp router-id 10.255.0.21\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor 20.0.0.1 remote-as external\"\n -c \" network 20.0.0.2/30\"\n - name: Serv2\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.22/32\"\n -c \"int net0\" -c \"ip addr 20.0.0.6/30\"\n -c \"router bgp 65022\"\n -c \" bgp router-id 10.255.0.22\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor 20.0.0.5 remote-as external\"\n -c \" network 20.0.0.6/30\"\n - name: Serv3\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.23/32\"\n -c \"int net0\" -c \"ip addr 20.0.0.10/30\"\n -c \"router bgp 65023\"\n -c \" bgp router-id 10.255.0.23\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor 20.0.0.9 remote-as external\"\n -c \" network 20.0.0.10/30\"\n - name: Serv4\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.24/32\"\n -c \"int net0\" -c \"ip addr 20.0.0.14/30\"\n -c \"router bgp 65024\"\n -c \" bgp router-id 10.255.0.24\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor 20.0.0.13 remote-as external\"\n -c \" network 20.0.0.14/30\"\n - name: Serv5\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.25/32\"\n -c \"int net0\" -c \"ip addr 20.0.0.18/30\"\n -c \"router bgp 65025\"\n -c \" bgp router-id 10.255.0.25\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor 20.0.0.17 remote-as external\"\n -c \" network 20.0.0.18/30\"\n - name: Serv6\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.26/32\"\n -c \"int net0\" -c \"ip addr 20.0.0.22/30\"\n -c \"router bgp 65026\"\n -c \" bgp router-id 10.255.0.26\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor 20.0.0.21 remote-as external\"\n -c \" network 20.0.0.22/30\"\n - name: Serv7\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.27/32\"\n -c \"int net0\" -c \"ip addr 20.0.0.26/30\"\n -c \"router bgp 65027\"\n -c \" bgp router-id 10.255.0.27\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor 20.0.0.25 remote-as external\"\n -c \" network 20.0.0.26/30\"\n - name: Serv8\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.28/32\"\n -c \"int net0\" -c \"ip addr 20.0.0.30/30\"\n -c \"router bgp 65028\"\n -c \" bgp router-id 10.255.0.28\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor 20.0.0.29 remote-as external\"\n -c \" network 20.0.0.30/30\"\n\ntest:\n - name: p2p\n cmds:\n - cmd: docker exec Ext1 echo slank\n - cmd: echo slankdev slankdev\n\n" }, { "path": "examples/basic_clos/spec.v0.0.1.yaml", "content": "\nnodes:\n - name: Ext1\n image: slankdev/frr\n interfaces:\n # - { name: net0, type: direct, args: Internet#net0 }\n - { name: net1, type: direct, args: Spine1#up1 }\n - { name: net2, type: direct, args: Spine2#up1 }\n - name: Spine1\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Ext1#net1 }\n - { name: dn1, type: direct, args: Leaf1#up1 }\n - { name: dn2, type: direct, args: Leaf2#up1 }\n - { name: dn3, type: direct, args: Leaf3#up1 }\n - { name: dn4, type: direct, args: Leaf4#up1 }\n - name: Spine2\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Ext1#net2 }\n - { name: dn1, type: direct, args: Leaf1#up2 }\n - { name: dn2, type: direct, args: Leaf2#up2 }\n - { name: dn3, type: direct, args: Leaf3#up2 }\n - { name: dn4, type: direct, args: Leaf4#up2 }\n - name: Leaf1\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Spine1#dn1 }\n - { name: up2, type: direct, args: Spine2#dn1 }\n - { name: dn1, type: direct, args: Serv1#net0 }\n - { name: dn2, type: direct, args: Serv2#net0 }\n - name: Leaf2\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Spine1#dn2 }\n - { name: up2, type: direct, args: Spine2#dn2 }\n - { name: dn1, type: direct, args: Serv3#net0 }\n - { name: dn2, type: direct, args: Serv4#net0 }\n - name: Leaf3\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Spine1#dn3 }\n - { name: up2, type: direct, args: Spine2#dn3 }\n - { name: dn1, type: direct, args: Serv5#net0 }\n - { name: dn2, type: direct, args: Serv6#net0 }\n - name: Leaf4\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Spine1#dn4 }\n - { name: up2, type: direct, args: Spine2#dn4 }\n - { name: dn1, type: direct, args: Serv7#net0 }\n - { name: dn2, type: direct, args: Serv8#net0 }\n - name: Serv1\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Leaf1#dn1 } ]\n - name: Serv2\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Leaf1#dn2 } ]\n - name: Serv3\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Leaf2#dn1 } ]\n - name: Serv4\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Leaf2#dn2 } ]\n - name: Serv5\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Leaf3#dn1 } ]\n - name: Serv6\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Leaf3#dn2 } ]\n - name: Serv7\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Leaf4#dn1 } ]\n - name: Serv8\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Leaf4#dn2 } ]\n\nnode_configs:\n - name: Ext1\n cmds:\n - cmd: echo slankdev slankdev\n - name: Spine1\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.1/32\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65001\"\n -c \" bgp router-id 10.255.0.1\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n - name: Spine2\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.2/32\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65002\"\n -c \" bgp router-id 10.255.0.2\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n - name: Leaf1\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.11/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65011\"\n -c \" bgp router-id 10.255.0.11\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n - name: Leaf2\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.12/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65012\"\n -c \" bgp router-id 10.255.0.12\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n - name: Leaf3\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.13/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65013\"\n -c \" bgp router-id 10.255.0.13\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n - name: Leaf4\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.14/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65014\"\n -c \" bgp router-id 10.255.0.14\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n - name: Serv1\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.21/32\"\n -c \"int net0\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65021\"\n -c \" bgp router-id 10.255.0.21\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n - name: Serv2\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.22/32\"\n -c \"int net0\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65022\"\n -c \" bgp router-id 10.255.0.22\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n - name: Serv3\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.23/32\"\n -c \"int net0\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65023\"\n -c \" bgp router-id 10.255.0.23\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" network 3.3.3.3/32\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n - name: Serv4\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.24/32\"\n -c \"int net0\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65024\"\n -c \" bgp router-id 10.255.0.24\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" network 4.4.4.4/32\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n - name: Serv5\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.25/32\"\n -c \"int net0\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65025\"\n -c \" bgp router-id 10.255.0.25\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" network 5.5.5.5/32\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n - name: Serv6\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.26/32\"\n -c \"int net0\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65026\"\n -c \" bgp router-id 10.255.0.26\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" network 6.6.6.6/32\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n - name: Serv7\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.27/32\"\n -c \"int net0\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65027\"\n -c \" bgp router-id 10.255.0.27\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" network 7.7.7.7/32\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n - name: Serv8\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.28/32\"\n -c \"int net0\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65028\"\n -c \" bgp router-id 10.255.0.28\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" network 8.8.8.8/32\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n\ntest:\n - name: p2p\n cmds:\n - cmd: docker exec Ext1 echo slank\n - cmd: echo slankdev slankdev\n\n" }, { "path": "examples/basic_clos/spec.v0.0.2.yaml", "content": "\nnodes:\n - name: Ext1\n image: slankdev/frr\n interfaces:\n # - { name: net0, type: direct, args: Internet#net0 }\n - { name: dn1, type: direct, args: Spine1#up1 }\n - { name: dn2, type: direct, args: Spine2#up1 }\n - name: Spine1\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Ext1#dn1 }\n - { name: dn1, type: direct, args: Leaf1#up1 }\n - { name: dn2, type: direct, args: Leaf2#up1 }\n - { name: dn3, type: direct, args: Leaf3#up1 }\n - { name: dn4, type: direct, args: Leaf4#up1 }\n - name: Spine2\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Ext1#dn2 }\n - { name: dn1, type: direct, args: Leaf1#up2 }\n - { name: dn2, type: direct, args: Leaf2#up2 }\n - { name: dn3, type: direct, args: Leaf3#up2 }\n - { name: dn4, type: direct, args: Leaf4#up2 }\n - name: Leaf1\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Spine1#dn1 }\n - { name: up2, type: direct, args: Spine2#dn1 }\n - { name: dn1, type: direct, args: Serv1a#net0 }\n - { name: dn2, type: direct, args: Serv2a#net0 }\n - name: Leaf2\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Spine1#dn2 }\n - { name: up2, type: direct, args: Spine2#dn2 }\n - { name: dn1, type: direct, args: Serv3a#net0 }\n - { name: dn2, type: direct, args: Serv4a#net0 }\n - name: Leaf3\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Spine1#dn3 }\n - { name: up2, type: direct, args: Spine2#dn3 }\n - { name: dn1, type: direct, args: Serv1b#net0 }\n - { name: dn2, type: direct, args: Serv2b#net0 }\n - name: Leaf4\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Spine1#dn4 }\n - { name: up2, type: direct, args: Spine2#dn4 }\n - { name: dn1, type: direct, args: Serv3b#net0 }\n - { name: dn2, type: direct, args: Serv4b#net0 }\n - name: Serv1a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Leaf1#dn1 } ]\n - name: Serv2a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Leaf1#dn2 } ]\n - name: Serv3a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Leaf2#dn1 } ]\n - name: Serv4a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Leaf2#dn2 } ]\n - name: Serv1b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Leaf3#dn1 } ]\n - name: Serv2b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Leaf3#dn2 } ]\n - name: Serv3b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Leaf4#dn1 } ]\n - name: Serv4b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Leaf4#dn2 } ]\n\nnode_configs:\n - name: Ext1\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.254/32\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65999\"\n -c \" bgp router-id 10.255.0.254\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n - name: Spine1\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.1/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65001\"\n -c \" bgp router-id 10.255.0.1\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n - name: Spine2\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.2/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65002\"\n -c \" bgp router-id 10.255.0.2\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n - name: Leaf1\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.11/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65011\"\n -c \" bgp router-id 10.255.0.11\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n - name: Leaf2\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.12/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65012\"\n -c \" bgp router-id 10.255.0.12\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n - name: Leaf3\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.13/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65013\"\n -c \" bgp router-id 10.255.0.13\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n - name: Leaf4\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.14/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65014\"\n -c \" bgp router-id 10.255.0.14\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n - name: Serv1a\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.21/32\"\n -c \"int net0\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65021\"\n -c \" bgp router-id 10.255.0.21\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n - name: Serv2a\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.22/32\"\n -c \"int net0\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65022\"\n -c \" bgp router-id 10.255.0.22\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n - name: Serv3a\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.23/32\"\n -c \"int net0\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65023\"\n -c \" bgp router-id 10.255.0.23\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n - name: Serv4a\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.24/32\"\n -c \"int net0\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65024\"\n -c \" bgp router-id 10.255.0.24\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n - name: Serv1b\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.21/32\"\n -c \"int net0\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65021\"\n -c \" bgp router-id 10.255.0.21\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n - name: Serv2b\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.22/32\"\n -c \"int net0\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65022\"\n -c \" bgp router-id 10.255.0.22\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n - name: Serv3b\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.23/32\"\n -c \"int net0\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65023\"\n -c \" bgp router-id 10.255.0.23\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n - name: Serv4b\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.24/32\"\n -c \"int net0\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65024\"\n -c \" bgp router-id 10.255.0.24\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n\ntest:\n - name: p2p\n cmds:\n - cmd: docker exec Ext1 echo slank\n - cmd: echo slankdev slankdev\n\n" }, { "path": "examples/basic_clos/spec.v0.0.3.yaml", "content": "\nnodes:\n - name: Ext1\n image: slankdev/frr\n interfaces:\n # - { name: net0, type: direct, args: Internet#net0 }\n - { name: dn1, type: direct, args: Spine1#up1 }\n - { name: dn2, type: direct, args: Spine2#up1 }\n - name: Spine1\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Ext1#dn1 }\n - { name: dn1, type: direct, args: Leaf1#up1 }\n - { name: dn2, type: direct, args: Leaf2#up1 }\n - { name: dn3, type: direct, args: Leaf3#up1 }\n - { name: dn4, type: direct, args: Leaf4#up1 }\n - name: Spine2\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Ext1#dn2 }\n - { name: dn1, type: direct, args: Leaf1#up2 }\n - { name: dn2, type: direct, args: Leaf2#up2 }\n - { name: dn3, type: direct, args: Leaf3#up2 }\n - { name: dn4, type: direct, args: Leaf4#up2 }\n - name: Leaf1\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Spine1#dn1 }\n - { name: up2, type: direct, args: Spine2#dn1 }\n - { name: dn1, type: direct, args: Tor1#up1 }\n - { name: dn2, type: direct, args: Tor2#up1 }\n - { name: dn3, type: direct, args: Tor3#up1 }\n - { name: dn4, type: direct, args: Tor4#up1 }\n - { name: dn5, type: direct, args: Tor5#up1 }\n - { name: dn6, type: direct, args: Tor6#up1 }\n - { name: dn7, type: direct, args: Tor7#up1 }\n - { name: dn8, type: direct, args: Tor8#up1 }\n - name: Leaf2\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Spine1#dn2 }\n - { name: up2, type: direct, args: Spine2#dn2 }\n - { name: dn1, type: direct, args: Tor1#up2 }\n - { name: dn2, type: direct, args: Tor2#up2 }\n - { name: dn3, type: direct, args: Tor3#up2 }\n - { name: dn4, type: direct, args: Tor4#up2 }\n - { name: dn5, type: direct, args: Tor5#up2 }\n - { name: dn6, type: direct, args: Tor6#up2 }\n - { name: dn7, type: direct, args: Tor7#up2 }\n - { name: dn8, type: direct, args: Tor8#up2 }\n - name: Leaf3\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Spine1#dn3 }\n - { name: up2, type: direct, args: Spine2#dn3 }\n - { name: dn1, type: direct, args: Tor1#up3 }\n - { name: dn2, type: direct, args: Tor2#up3 }\n - { name: dn3, type: direct, args: Tor3#up3 }\n - { name: dn4, type: direct, args: Tor4#up3 }\n - { name: dn5, type: direct, args: Tor5#up3 }\n - { name: dn6, type: direct, args: Tor6#up3 }\n - { name: dn7, type: direct, args: Tor7#up3 }\n - { name: dn8, type: direct, args: Tor8#up3 }\n - name: Leaf4\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Spine1#dn4 }\n - { name: up2, type: direct, args: Spine2#dn4 }\n - { name: dn1, type: direct, args: Tor1#up4 }\n - { name: dn2, type: direct, args: Tor2#up4 }\n - { name: dn3, type: direct, args: Tor3#up4 }\n - { name: dn4, type: direct, args: Tor4#up4 }\n - { name: dn5, type: direct, args: Tor5#up4 }\n - { name: dn6, type: direct, args: Tor6#up4 }\n - { name: dn7, type: direct, args: Tor7#up4 }\n - { name: dn8, type: direct, args: Tor8#up4 }\n\n - name: Tor1\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Leaf1#dn1 }\n - { name: up2, type: direct, args: Leaf2#dn1 }\n - { name: up3, type: direct, args: Leaf3#dn1 }\n - { name: up4, type: direct, args: Leaf4#dn1 }\n - { name: dn1, type: direct, args: Serv1#up1 }\n - { name: dn2, type: direct, args: Serv2#up1 }\n - { name: dn3, type: direct, args: Serv3#up1 }\n - { name: dn4, type: direct, args: Serv4#up1 }\n - name: Tor2\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Leaf1#dn2 }\n - { name: up2, type: direct, args: Leaf2#dn2 }\n - { name: up3, type: direct, args: Leaf3#dn2 }\n - { name: up4, type: direct, args: Leaf4#dn2 }\n - { name: dn1, type: direct, args: Serv1#up2 }\n - { name: dn2, type: direct, args: Serv2#up2 }\n - { name: dn3, type: direct, args: Serv3#up2 }\n - { name: dn4, type: direct, args: Serv4#up2 }\n - name: Tor3\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Leaf1#dn3 }\n - { name: up2, type: direct, args: Leaf2#dn3 }\n - { name: up3, type: direct, args: Leaf3#dn3 }\n - { name: up4, type: direct, args: Leaf4#dn3 }\n - { name: dn1, type: direct, args: Serv5#up1 }\n - { name: dn2, type: direct, args: Serv6#up1 }\n - { name: dn3, type: direct, args: Serv7#up1 }\n - { name: dn4, type: direct, args: Serv8#up1 }\n - name: Tor4\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Leaf1#dn4 }\n - { name: up2, type: direct, args: Leaf2#dn4 }\n - { name: up3, type: direct, args: Leaf3#dn4 }\n - { name: up4, type: direct, args: Leaf4#dn4 }\n - { name: dn1, type: direct, args: Serv5#up2 }\n - { name: dn2, type: direct, args: Serv6#up2 }\n - { name: dn3, type: direct, args: Serv7#up2 }\n - { name: dn4, type: direct, args: Serv8#up2 }\n - name: Tor5\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Leaf1#dn5 }\n - { name: up2, type: direct, args: Leaf2#dn5 }\n - { name: up3, type: direct, args: Leaf3#dn5 }\n - { name: up4, type: direct, args: Leaf4#dn5 }\n - { name: dn1, type: direct, args: Serv9#up1 }\n - { name: dn2, type: direct, args: Serv10#up1 }\n - { name: dn3, type: direct, args: Serv11#up1 }\n - { name: dn4, type: direct, args: Serv12#up1 }\n - name: Tor6\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Leaf1#dn6 }\n - { name: up2, type: direct, args: Leaf2#dn6 }\n - { name: up3, type: direct, args: Leaf3#dn6 }\n - { name: up4, type: direct, args: Leaf4#dn6 }\n - { name: dn1, type: direct, args: Serv9#up2 }\n - { name: dn2, type: direct, args: Serv10#up2 }\n - { name: dn3, type: direct, args: Serv11#up2 }\n - { name: dn4, type: direct, args: Serv12#up2 }\n - name: Tor7\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Leaf1#dn7 }\n - { name: up2, type: direct, args: Leaf2#dn7 }\n - { name: up3, type: direct, args: Leaf3#dn7 }\n - { name: up4, type: direct, args: Leaf4#dn7 }\n - { name: dn1, type: direct, args: Serv13#up1 }\n - { name: dn2, type: direct, args: Serv14#up1 }\n - { name: dn3, type: direct, args: Serv15#up1 }\n - { name: dn4, type: direct, args: Serv16#up1 }\n - name: Tor8\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Leaf1#dn8 }\n - { name: up2, type: direct, args: Leaf2#dn8 }\n - { name: up3, type: direct, args: Leaf3#dn8 }\n - { name: up4, type: direct, args: Leaf4#dn8 }\n - { name: dn1, type: direct, args: Serv13#up2 }\n - { name: dn2, type: direct, args: Serv14#up2 }\n - { name: dn3, type: direct, args: Serv15#up2 }\n - { name: dn4, type: direct, args: Serv16#up2 }\n\n - name: Serv1\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor1#dn1 }\n - { name: up2, type: direct, args: Tor2#dn1 }\n - { name: dn1, type: direct, args: Vm1a#net0 }\n - { name: dn2, type: direct, args: Vm1b#net0 }\n - name: Serv2\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor1#dn2 }\n - { name: up2, type: direct, args: Tor2#dn2 }\n - { name: dn1, type: direct, args: Vm2a#net0 }\n - { name: dn2, type: direct, args: Vm2b#net0 }\n - name: Serv3\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor1#dn3 }\n - { name: up2, type: direct, args: Tor2#dn3 }\n - { name: dn1, type: direct, args: Vm3a#net0 }\n - { name: dn2, type: direct, args: Vm3b#net0 }\n - name: Serv4\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor1#dn4 }\n - { name: up2, type: direct, args: Tor2#dn4 }\n - { name: dn1, type: direct, args: Vm4a#net0 }\n - { name: dn2, type: direct, args: Vm4b#net0 }\n - name: Serv5\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor3#dn1 }\n - { name: up2, type: direct, args: Tor4#dn1 }\n - { name: dn1, type: direct, args: Vm5a#net0 }\n - { name: dn2, type: direct, args: Vm5b#net0 }\n - name: Serv6\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor3#dn2 }\n - { name: up2, type: direct, args: Tor4#dn2 }\n - { name: dn1, type: direct, args: Vm6a#net0 }\n - { name: dn2, type: direct, args: Vm6b#net0 }\n - name: Serv7\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor3#dn3 }\n - { name: up2, type: direct, args: Tor4#dn3 }\n - { name: dn1, type: direct, args: Vm7a#net0 }\n - { name: dn2, type: direct, args: Vm7b#net0 }\n - name: Serv8\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor3#dn4 }\n - { name: up2, type: direct, args: Tor4#dn4 }\n - { name: dn1, type: direct, args: Vm8a#net0 }\n - { name: dn2, type: direct, args: Vm8b#net0 }\n - name: Serv9\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor5#dn1 }\n - { name: up2, type: direct, args: Tor6#dn1 }\n - { name: dn1, type: direct, args: Vm9a#net0 }\n - { name: dn2, type: direct, args: Vm9b#net0 }\n - name: Serv10\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor5#dn2 }\n - { name: up2, type: direct, args: Tor6#dn2 }\n - { name: dn1, type: direct, args: Vm10a#net0 }\n - { name: dn2, type: direct, args: Vm10b#net0 }\n - name: Serv11\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor5#dn3 }\n - { name: up2, type: direct, args: Tor6#dn3 }\n - { name: dn1, type: direct, args: Vm11a#net0 }\n - { name: dn2, type: direct, args: Vm11b#net0 }\n - name: Serv12\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor5#dn4 }\n - { name: up2, type: direct, args: Tor6#dn4 }\n - { name: dn1, type: direct, args: Vm12a#net0 }\n - { name: dn2, type: direct, args: Vm12b#net0 }\n - name: Serv13\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor7#dn1 }\n - { name: up2, type: direct, args: Tor8#dn1 }\n - { name: dn1, type: direct, args: Vm13a#net0 }\n - { name: dn2, type: direct, args: Vm13b#net0 }\n - name: Serv14\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor7#dn2 }\n - { name: up2, type: direct, args: Tor8#dn2 }\n - { name: dn1, type: direct, args: Vm14a#net0 }\n - { name: dn2, type: direct, args: Vm14b#net0 }\n - name: Serv15\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor7#dn3 }\n - { name: up2, type: direct, args: Tor8#dn3 }\n - { name: dn1, type: direct, args: Vm15a#net0 }\n - { name: dn2, type: direct, args: Vm15b#net0 }\n - name: Serv16\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor7#dn4 }\n - { name: up2, type: direct, args: Tor8#dn4 }\n - { name: dn1, type: direct, args: Vm16a#net0 }\n - { name: dn2, type: direct, args: Vm16b#net0 }\n\n - name: Vm1a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv1#dn1 } ]\n - name: Vm2a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv2#dn1 } ]\n - name: Vm3a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv3#dn1 } ]\n - name: Vm4a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv4#dn1 } ]\n - name: Vm5a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv5#dn1 } ]\n - name: Vm6a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv6#dn1 } ]\n - name: Vm7a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv7#dn1 } ]\n - name: Vm8a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv8#dn1 } ]\n - name: Vm9a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv9#dn1 } ]\n - name: Vm10a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv10#dn1 } ]\n - name: Vm11a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv11#dn1 } ]\n - name: Vm12a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv12#dn1 } ]\n - name: Vm13a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv13#dn1 } ]\n - name: Vm14a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv14#dn1 } ]\n - name: Vm15a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv15#dn1 } ]\n - name: Vm16a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv16#dn1 } ]\n - name: Vm1b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv1#dn2 } ]\n - name: Vm2b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv2#dn2 } ]\n - name: Vm3b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv3#dn2 } ]\n - name: Vm4b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv4#dn2 } ]\n - name: Vm5b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv5#dn2 } ]\n - name: Vm6b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv6#dn2 } ]\n - name: Vm7b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv7#dn2 } ]\n - name: Vm8b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv8#dn2 } ]\n - name: Vm9b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv9#dn2 } ]\n - name: Vm10b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv10#dn2 } ]\n - name: Vm11b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv11#dn2 } ]\n - name: Vm12b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv12#dn2 } ]\n - name: Vm13b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv13#dn2 } ]\n - name: Vm14b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv14#dn2 } ]\n - name: Vm15b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv15#dn2 } ]\n - name: Vm16b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv16#dn2 } ]\n\nnode_configs:\n - name: Ext1\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.254/32\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65999\"\n -c \" bgp router-id 10.255.0.254\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Spine1\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.1/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65001\"\n -c \" bgp router-id 10.255.0.1\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Spine2\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.2/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65002\"\n -c \" bgp router-id 10.255.0.2\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Leaf1\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.11/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn5\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn6\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn7\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn8\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65011\"\n -c \" bgp router-id 10.255.0.11\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" neighbor dn5 interface peer-group FABRIC\"\n -c \" neighbor dn6 interface peer-group FABRIC\"\n -c \" neighbor dn7 interface peer-group FABRIC\"\n -c \" neighbor dn8 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Leaf2\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.12/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn5\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn6\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn7\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn8\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65012\"\n -c \" bgp router-id 10.255.0.12\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" neighbor dn5 interface peer-group FABRIC\"\n -c \" neighbor dn6 interface peer-group FABRIC\"\n -c \" neighbor dn7 interface peer-group FABRIC\"\n -c \" neighbor dn8 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Leaf3\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.13/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn5\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn6\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn7\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn8\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65013\"\n -c \" bgp router-id 10.255.0.13\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" neighbor dn5 interface peer-group FABRIC\"\n -c \" neighbor dn6 interface peer-group FABRIC\"\n -c \" neighbor dn7 interface peer-group FABRIC\"\n -c \" neighbor dn8 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Leaf4\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.14/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn5\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn6\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn7\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn8\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65014\"\n -c \" bgp router-id 10.255.0.14\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" neighbor dn5 interface peer-group FABRIC\"\n -c \" neighbor dn6 interface peer-group FABRIC\"\n -c \" neighbor dn7 interface peer-group FABRIC\"\n -c \" neighbor dn8 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n\n - name: Tor1\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.31/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65031\"\n -c \" bgp router-id 10.255.0.31\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor up3 interface peer-group FABRIC\"\n -c \" neighbor up4 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Tor2\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.32/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65032\"\n -c \" bgp router-id 10.255.0.32\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor up3 interface peer-group FABRIC\"\n -c \" neighbor up4 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Tor3\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.33/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65033\"\n -c \" bgp router-id 10.255.0.33\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor up3 interface peer-group FABRIC\"\n -c \" neighbor up4 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Tor4\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.34/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65034\"\n -c \" bgp router-id 10.255.0.34\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor up3 interface peer-group FABRIC\"\n -c \" neighbor up4 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Tor5\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.35/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65035\"\n -c \" bgp router-id 10.255.0.35\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor up3 interface peer-group FABRIC\"\n -c \" neighbor up4 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Tor6\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.36/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65036\"\n -c \" bgp router-id 10.255.0.36\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor up3 interface peer-group FABRIC\"\n -c \" neighbor up4 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Tor7\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.37/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65037\"\n -c \" bgp router-id 10.255.0.37\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor up3 interface peer-group FABRIC\"\n -c \" neighbor up4 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Tor8\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.38/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65038\"\n -c \" bgp router-id 10.255.0.38\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor up3 interface peer-group FABRIC\"\n -c \" neighbor up4 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n\n - name: Serv1\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.201/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65201\"\n -c \" bgp router-id 10.255.0.201\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv2\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.202/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65202\"\n -c \" bgp router-id 10.255.0.202\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv3\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.203/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65203\"\n -c \" bgp router-id 10.255.0.203\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv4\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.204/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65204\"\n -c \" bgp router-id 10.255.0.204\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv5\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.205/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65205\"\n -c \" bgp router-id 10.255.0.205\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv6\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.206/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65206\"\n -c \" bgp router-id 10.255.0.206\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv7\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.207/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65207\"\n -c \" bgp router-id 10.255.0.207\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv8\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.208/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65208\"\n -c \" bgp router-id 10.255.0.208\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n\n - name: Serv9\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.209/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65209\"\n -c \" bgp router-id 10.255.0.209\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv10\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.210/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65210\"\n -c \" bgp router-id 10.255.0.210\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv11\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.211/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65211\"\n -c \" bgp router-id 10.255.0.211\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv12\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.212/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65212\"\n -c \" bgp router-id 10.255.0.212\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv13\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.213/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65213\"\n -c \" bgp router-id 10.255.0.213\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv14\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.214/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65214\"\n -c \" bgp router-id 10.255.0.214\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv15\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.215/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65215\"\n -c \" bgp router-id 10.255.0.215\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv16\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.216/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65216\"\n -c \" bgp router-id 10.255.0.216\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n\ntest:\n - name: p2p\n cmds:\n - cmd: docker exec Ext1 echo slank\n - cmd: echo slankdev slankdev\n\n" }, { "path": "examples/basic_clos/spec.yaml", "content": "\nnodes:\n - name: Ext1\n image: slankdev/frr\n interfaces:\n # - { name: net0, type: direct, args: Internet#net0 }\n - { name: dn1, type: direct, args: Spine1#up1 }\n - { name: dn2, type: direct, args: Spine2#up1 }\n - name: Spine1\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Ext1#dn1 }\n - { name: dn1, type: direct, args: Leaf1#up1 }\n - { name: dn2, type: direct, args: Leaf2#up1 }\n - { name: dn3, type: direct, args: Leaf3#up1 }\n - { name: dn4, type: direct, args: Leaf4#up1 }\n - name: Spine2\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Ext1#dn2 }\n - { name: dn1, type: direct, args: Leaf1#up2 }\n - { name: dn2, type: direct, args: Leaf2#up2 }\n - { name: dn3, type: direct, args: Leaf3#up2 }\n - { name: dn4, type: direct, args: Leaf4#up2 }\n - name: Leaf1\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Spine1#dn1 }\n - { name: up2, type: direct, args: Spine2#dn1 }\n - { name: dn1, type: direct, args: Tor1#up1 }\n - { name: dn2, type: direct, args: Tor2#up1 }\n - { name: dn3, type: direct, args: Tor3#up1 }\n - { name: dn4, type: direct, args: Tor4#up1 }\n - { name: dn5, type: direct, args: Tor5#up1 }\n - { name: dn6, type: direct, args: Tor6#up1 }\n - { name: dn7, type: direct, args: Tor7#up1 }\n - { name: dn8, type: direct, args: Tor8#up1 }\n - name: Leaf2\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Spine1#dn2 }\n - { name: up2, type: direct, args: Spine2#dn2 }\n - { name: dn1, type: direct, args: Tor1#up2 }\n - { name: dn2, type: direct, args: Tor2#up2 }\n - { name: dn3, type: direct, args: Tor3#up2 }\n - { name: dn4, type: direct, args: Tor4#up2 }\n - { name: dn5, type: direct, args: Tor5#up2 }\n - { name: dn6, type: direct, args: Tor6#up2 }\n - { name: dn7, type: direct, args: Tor7#up2 }\n - { name: dn8, type: direct, args: Tor8#up2 }\n - name: Leaf3\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Spine1#dn3 }\n - { name: up2, type: direct, args: Spine2#dn3 }\n - { name: dn1, type: direct, args: Tor1#up3 }\n - { name: dn2, type: direct, args: Tor2#up3 }\n - { name: dn3, type: direct, args: Tor3#up3 }\n - { name: dn4, type: direct, args: Tor4#up3 }\n - { name: dn5, type: direct, args: Tor5#up3 }\n - { name: dn6, type: direct, args: Tor6#up3 }\n - { name: dn7, type: direct, args: Tor7#up3 }\n - { name: dn8, type: direct, args: Tor8#up3 }\n - name: Leaf4\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Spine1#dn4 }\n - { name: up2, type: direct, args: Spine2#dn4 }\n - { name: dn1, type: direct, args: Tor1#up4 }\n - { name: dn2, type: direct, args: Tor2#up4 }\n - { name: dn3, type: direct, args: Tor3#up4 }\n - { name: dn4, type: direct, args: Tor4#up4 }\n - { name: dn5, type: direct, args: Tor5#up4 }\n - { name: dn6, type: direct, args: Tor6#up4 }\n - { name: dn7, type: direct, args: Tor7#up4 }\n - { name: dn8, type: direct, args: Tor8#up4 }\n\n - name: Tor1\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Leaf1#dn1 }\n - { name: up2, type: direct, args: Leaf2#dn1 }\n - { name: up3, type: direct, args: Leaf3#dn1 }\n - { name: up4, type: direct, args: Leaf4#dn1 }\n - { name: dn1, type: direct, args: Serv1#up1 }\n - { name: dn2, type: direct, args: Serv2#up1 }\n - { name: dn3, type: direct, args: Serv3#up1 }\n - { name: dn4, type: direct, args: Serv4#up1 }\n - name: Tor2\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Leaf1#dn2 }\n - { name: up2, type: direct, args: Leaf2#dn2 }\n - { name: up3, type: direct, args: Leaf3#dn2 }\n - { name: up4, type: direct, args: Leaf4#dn2 }\n - { name: dn1, type: direct, args: Serv1#up2 }\n - { name: dn2, type: direct, args: Serv2#up2 }\n - { name: dn3, type: direct, args: Serv3#up2 }\n - { name: dn4, type: direct, args: Serv4#up2 }\n - name: Tor3\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Leaf1#dn3 }\n - { name: up2, type: direct, args: Leaf2#dn3 }\n - { name: up3, type: direct, args: Leaf3#dn3 }\n - { name: up4, type: direct, args: Leaf4#dn3 }\n - { name: dn1, type: direct, args: Serv5#up1 }\n - { name: dn2, type: direct, args: Serv6#up1 }\n - { name: dn3, type: direct, args: Serv7#up1 }\n - { name: dn4, type: direct, args: Serv8#up1 }\n - name: Tor4\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Leaf1#dn4 }\n - { name: up2, type: direct, args: Leaf2#dn4 }\n - { name: up3, type: direct, args: Leaf3#dn4 }\n - { name: up4, type: direct, args: Leaf4#dn4 }\n - { name: dn1, type: direct, args: Serv5#up2 }\n - { name: dn2, type: direct, args: Serv6#up2 }\n - { name: dn3, type: direct, args: Serv7#up2 }\n - { name: dn4, type: direct, args: Serv8#up2 }\n - name: Tor5\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Leaf1#dn5 }\n - { name: up2, type: direct, args: Leaf2#dn5 }\n - { name: up3, type: direct, args: Leaf3#dn5 }\n - { name: up4, type: direct, args: Leaf4#dn5 }\n - { name: dn1, type: direct, args: Serv9#up1 }\n - { name: dn2, type: direct, args: Serv10#up1 }\n - { name: dn3, type: direct, args: Serv11#up1 }\n - { name: dn4, type: direct, args: Serv12#up1 }\n - name: Tor6\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Leaf1#dn6 }\n - { name: up2, type: direct, args: Leaf2#dn6 }\n - { name: up3, type: direct, args: Leaf3#dn6 }\n - { name: up4, type: direct, args: Leaf4#dn6 }\n - { name: dn1, type: direct, args: Serv9#up2 }\n - { name: dn2, type: direct, args: Serv10#up2 }\n - { name: dn3, type: direct, args: Serv11#up2 }\n - { name: dn4, type: direct, args: Serv12#up2 }\n - name: Tor7\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Leaf1#dn7 }\n - { name: up2, type: direct, args: Leaf2#dn7 }\n - { name: up3, type: direct, args: Leaf3#dn7 }\n - { name: up4, type: direct, args: Leaf4#dn7 }\n - { name: dn1, type: direct, args: Serv13#up1 }\n - { name: dn2, type: direct, args: Serv14#up1 }\n - { name: dn3, type: direct, args: Serv15#up1 }\n - { name: dn4, type: direct, args: Serv16#up1 }\n - name: Tor8\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Leaf1#dn8 }\n - { name: up2, type: direct, args: Leaf2#dn8 }\n - { name: up3, type: direct, args: Leaf3#dn8 }\n - { name: up4, type: direct, args: Leaf4#dn8 }\n - { name: dn1, type: direct, args: Serv13#up2 }\n - { name: dn2, type: direct, args: Serv14#up2 }\n - { name: dn3, type: direct, args: Serv15#up2 }\n - { name: dn4, type: direct, args: Serv16#up2 }\n\n - name: Serv1\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor1#dn1 }\n - { name: up2, type: direct, args: Tor2#dn1 }\n - { name: dn1, type: direct, args: Vm1a#net0 }\n - { name: dn2, type: direct, args: Vm1b#net0 }\n - name: Serv2\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor1#dn2 }\n - { name: up2, type: direct, args: Tor2#dn2 }\n - { name: dn1, type: direct, args: Vm2a#net0 }\n - { name: dn2, type: direct, args: Vm2b#net0 }\n - name: Serv3\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor1#dn3 }\n - { name: up2, type: direct, args: Tor2#dn3 }\n - { name: dn1, type: direct, args: Vm3a#net0 }\n - { name: dn2, type: direct, args: Vm3b#net0 }\n - name: Serv4\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor1#dn4 }\n - { name: up2, type: direct, args: Tor2#dn4 }\n - { name: dn1, type: direct, args: Vm4a#net0 }\n - { name: dn2, type: direct, args: Vm4b#net0 }\n - name: Serv5\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor3#dn1 }\n - { name: up2, type: direct, args: Tor4#dn1 }\n - { name: dn1, type: direct, args: Vm5a#net0 }\n - { name: dn2, type: direct, args: Vm5b#net0 }\n - name: Serv6\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor3#dn2 }\n - { name: up2, type: direct, args: Tor4#dn2 }\n - { name: dn1, type: direct, args: Vm6a#net0 }\n - { name: dn2, type: direct, args: Vm6b#net0 }\n - name: Serv7\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor3#dn3 }\n - { name: up2, type: direct, args: Tor4#dn3 }\n - { name: dn1, type: direct, args: Vm7a#net0 }\n - { name: dn2, type: direct, args: Vm7b#net0 }\n - name: Serv8\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor3#dn4 }\n - { name: up2, type: direct, args: Tor4#dn4 }\n - { name: dn1, type: direct, args: Vm8a#net0 }\n - { name: dn2, type: direct, args: Vm8b#net0 }\n - name: Serv9\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor5#dn1 }\n - { name: up2, type: direct, args: Tor6#dn1 }\n - { name: dn1, type: direct, args: Vm9a#net0 }\n - { name: dn2, type: direct, args: Vm9b#net0 }\n - name: Serv10\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor5#dn2 }\n - { name: up2, type: direct, args: Tor6#dn2 }\n - { name: dn1, type: direct, args: Vm10a#net0 }\n - { name: dn2, type: direct, args: Vm10b#net0 }\n - name: Serv11\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor5#dn3 }\n - { name: up2, type: direct, args: Tor6#dn3 }\n - { name: dn1, type: direct, args: Vm11a#net0 }\n - { name: dn2, type: direct, args: Vm11b#net0 }\n - name: Serv12\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor5#dn4 }\n - { name: up2, type: direct, args: Tor6#dn4 }\n - { name: dn1, type: direct, args: Vm12a#net0 }\n - { name: dn2, type: direct, args: Vm12b#net0 }\n - name: Serv13\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor7#dn1 }\n - { name: up2, type: direct, args: Tor8#dn1 }\n - { name: dn1, type: direct, args: Vm13a#net0 }\n - { name: dn2, type: direct, args: Vm13b#net0 }\n - name: Serv14\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor7#dn2 }\n - { name: up2, type: direct, args: Tor8#dn2 }\n - { name: dn1, type: direct, args: Vm14a#net0 }\n - { name: dn2, type: direct, args: Vm14b#net0 }\n - name: Serv15\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor7#dn3 }\n - { name: up2, type: direct, args: Tor8#dn3 }\n - { name: dn1, type: direct, args: Vm15b#net0 }\n - { name: dn2, type: direct, args: Vm15b#net0 }\n - name: Serv16\n image: slankdev/frr\n interfaces:\n - { name: up1, type: direct, args: Tor7#dn4 }\n - { name: up2, type: direct, args: Tor8#dn4 }\n - { name: dn1, type: direct, args: Vm16b#net0 }\n - { name: dn2, type: direct, args: Vm16b#net0 }\n\n - name: Vm1a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv1#dn1 } ]\n - name: Vm2a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv2#dn1 } ]\n - name: Vm3a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv3#dn1 } ]\n - name: Vm4a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv4#dn1 } ]\n - name: Vm5a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv5#dn1 } ]\n - name: Vm6a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv6#dn1 } ]\n - name: Vm7a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv7#dn1 } ]\n - name: Vm8a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv8#dn1 } ]\n - name: Vm9a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv9#dn1 } ]\n - name: Vm10a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv10#dn1 } ]\n - name: Vm11a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv11#dn1 } ]\n - name: Vm12a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv12#dn1 } ]\n - name: Vm13a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv13#dn1 } ]\n - name: Vm14a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv14#dn1 } ]\n - name: Vm15a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv15#dn1 } ]\n - name: Vm16a\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv16#dn1 } ]\n - name: Vm1b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv1#dn2 } ]\n - name: Vm2b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv2#dn2 } ]\n - name: Vm3b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv3#dn2 } ]\n - name: Vm4b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv4#dn2 } ]\n - name: Vm5b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv5#dn2 } ]\n - name: Vm6b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv6#dn2 } ]\n - name: Vm7b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv7#dn2 } ]\n - name: Vm8b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv8#dn2 } ]\n - name: Vm9b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv9#dn2 } ]\n - name: Vm10b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv10#dn2 } ]\n - name: Vm11b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv11#dn2 } ]\n - name: Vm12b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv12#dn2 } ]\n - name: Vm13b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv13#dn2 } ]\n - name: Vm14b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv14#dn2 } ]\n - name: Vm15b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv15#dn2 } ]\n - name: Vm16b\n image: slankdev/frr\n interfaces: [ { name: net0, type: direct, args: Serv16#dn2 } ]\n\nnode_configs:\n - name: Ext1\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.254/32\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65999\"\n -c \" bgp router-id 10.255.0.254\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Spine1\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.1/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65001\"\n -c \" bgp router-id 10.255.0.1\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Spine2\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.2/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65002\"\n -c \" bgp router-id 10.255.0.2\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Leaf1\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.11/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn5\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn6\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn7\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn8\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65011\"\n -c \" bgp router-id 10.255.0.11\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" neighbor dn5 interface peer-group FABRIC\"\n -c \" neighbor dn6 interface peer-group FABRIC\"\n -c \" neighbor dn7 interface peer-group FABRIC\"\n -c \" neighbor dn8 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Leaf2\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.12/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn5\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn6\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn7\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn8\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65012\"\n -c \" bgp router-id 10.255.0.12\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" neighbor dn5 interface peer-group FABRIC\"\n -c \" neighbor dn6 interface peer-group FABRIC\"\n -c \" neighbor dn7 interface peer-group FABRIC\"\n -c \" neighbor dn8 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Leaf3\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.13/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn5\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn6\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn7\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn8\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65013\"\n -c \" bgp router-id 10.255.0.13\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" neighbor dn5 interface peer-group FABRIC\"\n -c \" neighbor dn6 interface peer-group FABRIC\"\n -c \" neighbor dn7 interface peer-group FABRIC\"\n -c \" neighbor dn8 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Leaf4\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.14/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn5\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn6\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn7\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn8\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65014\"\n -c \" bgp router-id 10.255.0.14\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" neighbor dn5 interface peer-group FABRIC\"\n -c \" neighbor dn6 interface peer-group FABRIC\"\n -c \" neighbor dn7 interface peer-group FABRIC\"\n -c \" neighbor dn8 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n\n - name: Tor1\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.31/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65031\"\n -c \" bgp router-id 10.255.0.31\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor up3 interface peer-group FABRIC\"\n -c \" neighbor up4 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Tor2\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.32/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65032\"\n -c \" bgp router-id 10.255.0.32\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor up3 interface peer-group FABRIC\"\n -c \" neighbor up4 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Tor3\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.33/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65033\"\n -c \" bgp router-id 10.255.0.33\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor up3 interface peer-group FABRIC\"\n -c \" neighbor up4 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Tor4\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.34/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65034\"\n -c \" bgp router-id 10.255.0.34\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor up3 interface peer-group FABRIC\"\n -c \" neighbor up4 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Tor5\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.35/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65035\"\n -c \" bgp router-id 10.255.0.35\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor up3 interface peer-group FABRIC\"\n -c \" neighbor up4 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Tor6\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.36/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65036\"\n -c \" bgp router-id 10.255.0.36\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor up3 interface peer-group FABRIC\"\n -c \" neighbor up4 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Tor7\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.37/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65037\"\n -c \" bgp router-id 10.255.0.37\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor up3 interface peer-group FABRIC\"\n -c \" neighbor up4 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Tor8\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.38/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn3\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int dn4\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65038\"\n -c \" bgp router-id 10.255.0.38\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" neighbor up3 interface peer-group FABRIC\"\n -c \" neighbor up4 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" neighbor dn2 interface peer-group FABRIC\"\n -c \" neighbor dn3 interface peer-group FABRIC\"\n -c \" neighbor dn4 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n\n - name: Serv1\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.201/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65201\"\n -c \" bgp router-id 10.255.0.201\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv2\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.202/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65202\"\n -c \" bgp router-id 10.255.0.202\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv3\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.203/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65203\"\n -c \" bgp router-id 10.255.0.203\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv4\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.204/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65204\"\n -c \" bgp router-id 10.255.0.204\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv5\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.205/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65205\"\n -c \" bgp router-id 10.255.0.205\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv6\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.206/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65206\"\n -c \" bgp router-id 10.255.0.206\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv7\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.207/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65207\"\n -c \" bgp router-id 10.255.0.207\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv8\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.208/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65208\"\n -c \" bgp router-id 10.255.0.208\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n\n - name: Serv9\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.209/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65209\"\n -c \" bgp router-id 10.255.0.209\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv10\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.210/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65210\"\n -c \" bgp router-id 10.255.0.210\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv11\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.211/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65211\"\n -c \" bgp router-id 10.255.0.211\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv12\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.212/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65212\"\n -c \" bgp router-id 10.255.0.212\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv13\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.213/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65213\"\n -c \" bgp router-id 10.255.0.213\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv14\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.214/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65214\"\n -c \" bgp router-id 10.255.0.214\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv15\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.215/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65215\"\n -c \" bgp router-id 10.255.0.215\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n - name: Serv16\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\" -c \"ip addr 10.255.0.216/32\"\n -c \"int up1\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"int up2\" -c \"ipv6 nd ra-interval 1\" -c \"no ipv6 nd suppress-ra\"\n -c \"router bgp 65216\"\n -c \" bgp router-id 10.255.0.216\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor up2 interface peer-group FABRIC\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected route-map redis_lo\"\n -c \" exit-address-family\"\n -c \"route-map redis_lo permit 10\"\n -c \" match interface lo\"\n\ntest:\n - name: p2p\n cmds:\n - cmd: docker exec Ext1 echo slank\n - cmd: echo slankdev slankdev\n\n" }, { "path": "examples/basic_conntrack/connection_sync/Makefile", "content": "\nNAME=N1\nlog_N1:\n\twhile :; do \\\n\t\tdocker exec $(NAME) vtysh -c 'conf te' -c 'log file /tmp/frr.log'; \\\n\t\tdocker exec -it $(NAME) tail -f /tmp/frr.log; \\\n\t\tsleep 1 ; done\n\n" }, { "path": "examples/basic_conntrack/connection_sync/README.md", "content": "\n# Connection Sync with conntrackd and keepalived\n\n```\ntn upconf | sudo sh\n```\n\n\n\n\n\n\n" }, { "path": "examples/basic_conntrack/connection_sync/spec.yaml", "content": "\nnodes:\n\n - name: C1\n image: slankdev/conntrack:centos-7\n interfaces:\n - { name: net0, type: direct, args: S1#net0, }\n - name: C2\n image: slankdev/conntrack:centos-7\n interfaces:\n - { name: net0, type: direct, args: S2#net0, }\n\n - name: S1\n image: slankdev/conntrack:centos-7\n interfaces:\n - { name: net0, type: direct, args: C1#net0, }\n - { name: net1, type: direct, args: N1#net0, }\n - { name: net2, type: direct, args: N2#net0, }\n - name: S2\n image: slankdev/conntrack:centos-7\n interfaces:\n - { name: net0, type: direct, args: C2#net0, }\n - { name: net1, type: direct, args: N1#net1, }\n - { name: net2, type: direct, args: N2#net1, }\n\n - name: N1\n image: slankdev/conntrack:centos-7\n interfaces:\n - { name: net0, type: direct, args: S1#net1, }\n - { name: net1, type: direct, args: S2#net1, }\n - { name: fab0, type: direct, args: N2#fab0, }\n - name: N2\n image: slankdev/conntrack:centos-7\n interfaces:\n - { name: net0, type: direct, args: S1#net2, }\n - { name: net1, type: direct, args: S2#net2, }\n - { name: fab0, type: direct, args: N1#fab0, }\n\nnode_configs:\n\n - name: C1\n cmds:\n - cmd: ip addr add 8.8.8.8/32 dev lo\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 1\"\n -c \" bgp router-id 10.255.0.1\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n -c \"!\"\n -c \"do write\"\n - cmd: sh -c \"echo It works > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - name: C2\n cmds:\n - cmd: ip addr add 10.0.0.1/32 dev lo\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 2\"\n -c \" bgp router-id 10.255.0.2\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n -c \"!\"\n -c \"do write\"\n\n - name: S1\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 3\"\n -c \" bgp router-id 10.255.0.3\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" neighbor net1 interface peer-group FABRIC\"\n -c \" neighbor net2 interface peer-group FABRIC\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n -c \"!\"\n -c \"do write\"\n\n - name: S2\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 4\"\n -c \" bgp router-id 10.255.0.4\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" neighbor net1 interface peer-group FABRIC\"\n -c \" neighbor net2 interface peer-group FABRIC\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" exit-address-family\"\n -c \"!\"\n -c \"do write\"\n\n - name: N1\n cmds:\n - cmd: ip addr add 99.0.0.1/24 dev fab0\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 5\"\n -c \" bgp router-id 10.255.0.5\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" neighbor net0 interface remote-as external\"\n -c \" neighbor net1 interface remote-as external\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" network 0.0.0.0/0\"\n -c \" redistribute connected\"\n -c \" neighbor net0 route-map MAP1 out\"\n -c \" neighbor net1 route-map MAP2 out\"\n -c \" exit-address-family\"\n -c \"!\"\n -c \"route-map MAP1 permit 1\"\n -c \" match ip address prefix-list PLIST1\"\n -c \"!\"\n -c \"route-map MAP2 permit 1\"\n -c \" match ip address prefix-list PLIST2\"\n -c \"!\"\n -c \"ip prefix-list PLIST1 seq 5 permit 20.0.0.0/8 ge 24\"\n -c \"ip prefix-list PLIST2 seq 5 permit 0.0.0.0/0\"\n -c \"!\"\n -c \"do write\"\n\n - cmd: ip addr add 20.0.0.1/32 dev lo\n - cmd: ip addr add 20.0.0.2/32 dev lo\n - cmd: iptables -t nat -A POSTROUTING -s 10.0.0.0/24 -j SNAT -p tcp --to-source 20.0.0.1:10000-20008\n\n - name: N2\n cmds:\n - cmd: ip addr add 99.0.0.2/24 dev fab0\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: ip addr add 20.0.0.1/32 dev lo\n - cmd: ip addr add 20.0.0.2/32 dev lo\n - cmd: iptables -t nat -A POSTROUTING -s 10.0.0.0/24 -j SNAT -p tcp --to-source 20.0.0.1:10000-20008\n\n" }, { "path": "examples/basic_coredns/blacklist/Corefile.NS1", "content": ".:53 {\n errors\n log\n forward . 8.8.8.8\n}\n\nichihara.org {\n etcd ichihara.org {\n path /dns-server01\n endpoint http://10.0.0.100:2379\n }\n}\n\nemacs.org {\n}\nsublimetext.com {\n}\n" }, { "path": "examples/basic_coredns/blacklist/README.md", "content": "\n# CoreDNS example (very simple blacklist)\n\n![](topo.png)\n\n- Blacklisted\n\t-\temacs.org\n\t- sublimetext.com\n\n```\ndocker exec R1 nslookup slank.dev\ndocker exec R1 nslookup test1.ichihara.org\ndocker exec R1 nslookup test2.ichihara.org\n\ndocker exec R1 nslookup www.vim.org\ndocker exec R1 nslookup emacs.org\ndocker exec R1 nslookup sublimetext.com\n```\n" }, { "path": "examples/basic_coredns/blacklist/spec.yaml", "content": "\npostinit:\n - cmds:\n - cmd: docker cp Corefile.NS1 NS1:/Corefile\n # - cmd: docker cp Corefile.NS2 NS2:/Corefile\n # - cmd: docker cp Corefile.NS3 NS3:/Corefile\n\nnodes:\n - name: S1\n image: slankdev/coredns:centos-7\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - { name: net1, type: direct, args: NS1#net0 }\n - { name: net2, type: direct, args: NS2#net0 }\n - { name: net3, type: direct, args: NS3#net0 }\n - { name: net4, type: direct, args: KVS#net0 }\n\n - name: R1\n image: slankdev/coredns:centos-7\n interfaces:\n - { name: net0, type: direct, args: S1#net0 }\n\n - name: KVS\n image: slankdev/etcd:centos-7\n interfaces:\n - { name: net0, type: direct, args: S1#net4 }\n\n - name: NS1\n image: slankdev/coredns:centos-7\n net_base: bridge\n interfaces:\n - { name: net0, type: direct, args: S1#net1 }\n - name: NS2\n image: slankdev/coredns:centos-7\n net_base: bridge\n interfaces:\n - { name: net0, type: direct, args: S1#net2 }\n - name: NS3\n image: slankdev/coredns:centos-7\n net_base: bridge\n interfaces:\n - { name: net0, type: direct, args: S1#net3 }\n\nnode_configs:\n\n - name: S1\n cmds:\n - cmd: ip link add br0 type bridge\n - cmd: ip link set br0 up\n - cmd: ip link set net0 master br0\n - cmd: ip link set net1 master br0\n - cmd: ip link set net2 master br0\n - cmd: ip link set net3 master br0\n - cmd: ip link set net4 master br0\n\n - name: KVS\n cmds:\n - cmd: ip addr add 10.0.0.100/24 dev net0\n - cmd: >-\n nohup etcd --listen-peer-urls=\"http://10.0.0.100:2380\"\n --listen-client-urls=\"http://10.0.0.100:2379\"\n --advertise-client-urls=\"http://10.0.0.100:2379\" &\n - cmd: sleep 3\n - cmd: etcdctl --endpoints=\"http://10.0.0.100:2379\" put /dns-server01/org/ichihara/test1/server01 '{\"host\":\"99.1.0.1\",\"port\":80}'\n - cmd: etcdctl --endpoints=\"http://10.0.0.100:2379\" put /dns-server01/org/ichihara/test1/server02 '{\"host\":\"99.1.0.2\",\"port\":80}'\n - cmd: etcdctl --endpoints=\"http://10.0.0.100:2379\" put /dns-server01/org/ichihara/test2/server01 '{\"host\":\"99.2.0.2\",\"port\":80}'\n\n - name: NS1\n cmds:\n - cmd: ip addr add 10.0.0.254/24 dev net0\n - cmd: nohup coredns -conf /Corefile &\n\n - name: R1\n cmds:\n - cmd: ip addr add 10.0.0.1/24 dev net0\n - cmd: sh -c 'echo nameserver 10.0.0.254 > /etc/resolv.conf'\n\n" }, { "path": "examples/basic_ebgp/spec.yaml", "content": "\n# DESCRIPTION: BGP network using FRR\n#\n# INIT:\n# cns spec.yaml init | sudo sh\n# cns spec.yaml conf | sudo sh\n# cns spec.yaml test | sudo sh\n#\n# FINI:\n# cns spec.yaml fini | sudo sh\n#\n# TOPO:\n#\n# vlan1:10.0.0.0/24\n# .1(net0) .2(net0)\n# R0(AS100)------------------R1(AS200)\n# (net1).1| |.1(net1)\n# | |\n# vlan1:10.1.0.0/24 | | vlan1:10.2.0.0/24\n# | |\n# (net0).2| |.2(net0)\n# R2(AS300) R3(AS400)\n# (net1).1| |.1(net1)\n# | |\n# vlan1:10.3.0.0/24 | | vlan1:10.4.0.0/24\n# | |\n# (net0).2| |.2(net0)\n# C0 C1\n#\n\nnodes:\n - name: R0\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - { name: net1, type: direct, args: R2#net0 }\n - name: R1\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R0#net0 }\n - { name: net1, type: direct, args: R3#net0 }\n - name: R2\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R0#net1 }\n - { name: net1, type: direct, args: C0#net0 }\n - name: R3\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R1#net1 }\n - { name: net1, type: direct, args: C1#net0 }\n\n - name: C0\n image: slankdev/ubuntu:16.04\n interfaces:\n - { name: net0, type: direct, args: R2#net1 }\n - name: C1\n image: slankdev/ubuntu:16.04\n interfaces:\n - { name: net0, type: direct, args: R3#net1 }\n\nnode_configs:\n - name: R0\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: ip addr add 10.0.0.1/24 dev net0\n - cmd: ip addr add 10.1.0.1/24 dev net1\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 100\"\n -c \"bgp router-id 1.1.1.1\"\n -c \"neighbor 10.0.0.2 remote-as 200\"\n -c \"neighbor 10.1.0.2 remote-as 300\"\n -c \"network 10.1.0.0/24\"\n -c \"network 10.1.2.0/24\"\n - name: R1\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: ip addr add 10.0.0.2/24 dev net0\n - cmd: ip addr add 10.2.0.1/24 dev net1\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 200\"\n -c \"bgp router-id 2.2.2.2\"\n -c \"neighbor 10.0.0.1 remote-as 100\"\n -c \"neighbor 10.2.0.2 remote-as 400\"\n -c \"network 10.2.0.0/24\"\n -c \"network 10.2.4.0/24\"\n - name: R2\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: ip addr add 10.1.0.2/24 dev net0\n - cmd: ip addr add 10.3.0.1/24 dev net1\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 300\"\n -c \"bgp router-id 3.3.3.3\"\n -c \"neighbor 10.1.0.1 remote-as 100\"\n -c \"network 10.3.0.0/24\"\n - name: R3\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: ip addr add 10.2.0.2/24 dev net0\n - cmd: ip addr add 10.4.0.1/24 dev net1\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 400\"\n -c \"bgp router-id 4.4.4.4\"\n -c \"neighbor 10.2.0.1 remote-as 200\"\n -c \"network 10.4.0.0/24\"\n\n - name: C0\n cmds:\n - cmd: ip addr add 10.3.0.2/24 dev net0\n - cmd: ip route del default\n - cmd: ip route add default via 10.3.0.1\n - name: C1\n cmds:\n - cmd: ip addr add 10.4.0.2/24 dev net0\n - cmd: ip route del default\n - cmd: ip route add default via 10.4.0.1\n\ntest:\n - cmds:\n - cmd: docker exec C0 ping -c2 10.4.0.2\n\n" }, { "path": "examples/basic_ecmp/README.md", "content": "\n![](topo.jpeg)\n" }, { "path": "examples/basic_ecmp/scale.diff", "content": "diff --git a/examples/basic_ecmp/spec.yaml b/examples/basic_ecmp/spec.yaml\nindex c2c0bd2..79ab538 100644\n--- a/examples/basic_ecmp/spec.yaml\n+++ b/examples/basic_ecmp/spec.yaml\n@@ -38,6 +38,16 @@ nodes:\n interfaces:\n - { name: net0, type: direct, args: R3#net1 }\n \n+ - name: R4\n+ image: slankdev/frr\n+ interfaces:\n+ - { name: net0, type: bridge, args: B0 }\n+ - { name: net1, type: direct, args: S4#net0 }\n+ - name: S4\n+ image: tmp\n+ interfaces:\n+ - { name: net0, type: direct, args: R4#net1 }\n+\n switches:\n - name: B0\n interfaces:\n@@ -45,6 +55,7 @@ switches:\n - { name: net0, type: container, args: R1 }\n - { name: net0, type: container, args: R2 }\n - { name: net0, type: container, args: R3 }\n+ - { name: net0, type: container, args: R4 }\n \n node_configs:\n - name: S0\n@@ -123,6 +134,26 @@ node_configs:\n - cmd: sh -c \"echo S3 > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n \n+ - name: R4\n+ cmds:\n+ - cmd: /usr/lib/frr/frr start\n+ - cmd: ip addr add 10.255.0.40/32 dev lo\n+ - cmd: ip addr add 10.0.0.40/24 dev net0\n+ - cmd: ip addr add 192.168.0.1/24 dev net1\n+ - cmd: ip route replace default via 10.0.0.1\n+ - cmd: >-\n+ vtysh -c 'conf t'\n+ -c 'router bgp 100'\n+ -c ' bgp router-id 10.255.0.40'\n+ -c ' neighbor 10.0.0.1 remote-as 100'\n+ -c ' network 192.168.0.2/32'\n+ - name: S4\n+ cmds:\n+ - cmd: ip addr add 192.168.0.2/24 dev net0\n+ - cmd: ip route replace default via 192.168.0.1\n+ - cmd: sh -c \"echo S4 > index.html\"\n+ - cmd: nohup python3 -m http.server 80 &\n+\n test:\n - cmds:\n # local link\n" }, { "path": "examples/basic_ecmp/spec.yaml", "content": "# http://www.asciiflow.com\n\nnodes:\n - name: S0\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R0#net1 }\n - name: R0\n image: slankdev/frr\n interfaces:\n - { name: net1, type: direct, args: S0#net0 }\n - { name: net0, type: bridge, args: B0 }\n - name: R1\n image: slankdev/frr\n interfaces:\n - { name: net0, type: bridge, args: B0 }\n - { name: net1, type: direct, args: S1#net0 }\n - name: S1\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R1#net1 }\n - name: R2\n image: slankdev/frr\n interfaces:\n - { name: net0, type: bridge, args: B0 }\n - { name: net1, type: direct, args: S2#net0 }\n - name: S2\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R2#net1 }\n - name: R3\n image: slankdev/frr\n interfaces:\n - { name: net0, type: bridge, args: B0 }\n - { name: net1, type: direct, args: S3#net0 }\n - name: S3\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R3#net1 }\n\nswitches:\n - name: B0\n interfaces:\n - { name: net0, type: container, args: R0 }\n - { name: net0, type: container, args: R1 }\n - { name: net0, type: container, args: R2 }\n - { name: net0, type: container, args: R3 }\n\nnode_configs:\n - name: S0\n cmds:\n - cmd: ip addr add 10.1.0.2/24 dev net0\n - cmd: ip route replace default via 10.1.0.1\n - name: R0\n cmds:\n - cmd: sysctl -w 'net.ipv4.fib_multipath_hash_policy=1'\n - cmd: /usr/lib/frr/frr start\n - cmd: ip addr add 10.255.0.1/32 dev lo\n - cmd: ip addr add 10.0.0.1/24 dev net0\n - cmd: ip addr add 10.1.0.1/24 dev net1\n - cmd: >-\n vtysh -c 'conf t'\n -c 'router bgp 100'\n -c ' bgp router-id 10.255.0.1'\n -c ' neighbor 10.0.0.10 remote-as 100'\n -c ' neighbor 10.0.0.20 remote-as 100'\n -c ' neighbor 10.0.0.30 remote-as 100'\n - cmd: vtysh -c \"do write mem\"\n - name: R1\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: ip addr add 10.255.0.10/32 dev lo\n - cmd: ip addr add 10.0.0.10/24 dev net0\n - cmd: ip addr add 192.168.0.1/24 dev net1\n - cmd: ip route replace default via 10.0.0.1\n - cmd: >-\n vtysh -c 'conf t'\n -c 'router bgp 100'\n -c ' bgp router-id 10.255.0.10'\n -c ' neighbor 10.0.0.1 remote-as 100'\n -c ' network 192.168.0.2/32'\n - name: S1\n cmds:\n - cmd: ip addr add 192.168.0.2/24 dev net0\n - cmd: ip route replace default via 192.168.0.1\n - cmd: sh -c \"echo S1 > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - name: R2\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: ip addr add 10.255.0.20/32 dev lo\n - cmd: ip addr add 10.0.0.20/24 dev net0\n - cmd: ip addr add 192.168.0.1/24 dev net1\n - cmd: ip route replace default via 10.0.0.1\n - cmd: >-\n vtysh -c 'conf t'\n -c 'router bgp 100'\n -c ' bgp router-id 10.255.0.20'\n -c ' neighbor 10.0.0.1 remote-as 100'\n -c ' network 192.168.0.2/32'\n - name: S2\n cmds:\n - cmd: ip addr add 192.168.0.2/24 dev net0\n - cmd: ip route replace default via 192.168.0.1\n - cmd: sh -c \"echo S2 > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - name: R3\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: ip addr add 10.255.0.30/32 dev lo\n - cmd: ip addr add 10.0.0.30/24 dev net0\n - cmd: ip addr add 192.168.0.1/24 dev net1\n - cmd: ip route replace default via 10.0.0.1\n - cmd: >-\n vtysh -c 'conf t'\n -c 'router bgp 100'\n -c ' bgp router-id 10.255.0.30'\n -c ' neighbor 10.0.0.1 remote-as 100'\n -c ' network 192.168.0.2/32'\n - name: S3\n cmds:\n - cmd: ip addr add 192.168.0.2/24 dev net0\n - cmd: ip route replace default via 192.168.0.1\n - cmd: sh -c \"echo S3 > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n\ntest:\n - cmds:\n # local link\n - cmd: docker exec S0 ping -c2 10.1.0.1\n - cmd: docker exec S1 ping -c2 192.168.0.1\n - cmd: docker exec S2 ping -c2 192.168.0.1\n - cmd: docker exec S3 ping -c2 192.168.0.1\n - cmd: docker exec R0 ping -c2 10.1.0.2\n - cmd: docker exec R0 ping -c2 10.0.0.10\n - cmd: docker exec R0 ping -c2 10.0.0.20\n - cmd: docker exec R0 ping -c2 10.0.0.30\n - cmd: docker exec R1 ping -c2 192.168.0.2\n - cmd: docker exec R1 ping -c2 10.0.0.1\n - cmd: docker exec R1 ping -c2 10.0.0.10\n - cmd: docker exec R1 ping -c2 10.0.0.20\n - cmd: docker exec R1 ping -c2 10.0.0.30\n - cmd: docker exec R2 ping -c2 10.0.0.1\n - cmd: docker exec R2 ping -c2 10.0.0.10\n - cmd: docker exec R2 ping -c2 10.0.0.20\n - cmd: docker exec R2 ping -c2 10.0.0.30\n - cmd: docker exec R3 ping -c2 10.0.0.1\n - cmd: docker exec R3 ping -c2 10.0.0.10\n - cmd: docker exec R3 ping -c2 10.0.0.20\n - cmd: docker exec R3 ping -c2 10.0.0.30\n # remote link\n - cmd: docker exec S0 ping -c2 192.168.0.2\n\n" }, { "path": "examples/basic_evpn/README.md", "content": "\n# EVPN\n\n![](./topo.png)\n\n" }, { "path": "examples/basic_evpn/spec.yaml", "content": "\nnodes:\n - name: RR\n image: slankdev/frr\n interfaces:\n - { name: net0, type: bridge, args: BB_SW }\n\n - name: R1\n image: slankdev/frr\n interfaces:\n - { name: net0, type: bridge, args: BB_SW }\n - { name: net1, type: direct, args: C1#net0 }\n - { name: net2, type: direct, args: C2#net0 }\n - name: R2\n image: slankdev/frr\n interfaces:\n - { name: net0, type: bridge, args: BB_SW }\n - { name: net1, type: direct, args: C3#net0 }\n - { name: net2, type: direct, args: C4#net0 }\n - name: R3\n image: slankdev/frr\n interfaces:\n - { name: net0, type: bridge, args: BB_SW }\n - { name: net1, type: direct, args: C5#net0 }\n - { name: net2, type: direct, args: C6#net0 }\n\n - name: C1\n image: slankdev/ubuntu:18.04\n interfaces: [ { name: net0, type: direct, args: R1#net1 } ]\n - name: C2\n image: slankdev/ubuntu:18.04\n interfaces: [ { name: net0, type: direct, args: R1#net2 } ]\n - name: C3\n image: slankdev/ubuntu:18.04\n interfaces: [ { name: net0, type: direct, args: R2#net1 } ]\n - name: C4\n image: slankdev/ubuntu:18.04\n interfaces: [ { name: net0, type: direct, args: R2#net2 } ]\n - name: C5\n image: slankdev/ubuntu:18.04\n interfaces: [ { name: net0, type: direct, args: R3#net1 } ]\n - name: C6\n image: slankdev/ubuntu:18.04\n interfaces: [ { name: net0, type: direct, args: R3#net2 } ]\n\nswitches:\n - name: BB_SW\n interfaces:\n - { name: net0, type: container, args: R1 }\n - { name: net0, type: container, args: R2 }\n - { name: net0, type: container, args: R3 }\n - { name: net0, type: container, args: RR }\n\nnode_configs:\n - name: RR\n cmds:\n\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: ip link set net0 address 52:54:00:ff:00:00\n - cmd: /usr/lib/frr/frr start\n\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\"\n -c \" ip address 10.255.0.254/32\"\n -c \" exit\"\n -c \"int net0\"\n -c \" ip address 10.0.0.254/24\"\n -c \" exit\"\n -c \"ip route 10.255.0.1/32 10.0.0.1\"\n -c \"ip route 10.255.0.2/32 10.0.0.2\"\n -c \"ip route 10.255.0.3/32 10.0.0.3\"\n -c \"router bgp 65001\"\n -c \" bgp router-id 10.255.0.254\"\n -c \" neighbor 10.255.0.1 remote-as internal\"\n -c \" neighbor 10.255.0.1 update-source lo\"\n -c \" neighbor 10.255.0.2 remote-as internal\"\n -c \" neighbor 10.255.0.2 update-source lo\"\n -c \" neighbor 10.255.0.3 remote-as internal\"\n -c \" neighbor 10.255.0.3 update-source lo\"\n -c \" address-family ipv4 unicast\"\n -c \" neighbor 10.255.0.1 activate\"\n -c \" neighbor 10.255.0.1 route-reflector-client\"\n -c \" neighbor 10.255.0.2 activate\"\n -c \" neighbor 10.255.0.2 route-reflector-client\"\n -c \" neighbor 10.255.0.3 activate\"\n -c \" neighbor 10.255.0.3 route-reflector-client\"\n -c \" exit-address-family\"\n -c \" address-family l2vpn evpn\"\n -c \" neighbor 10.255.0.1 activate\"\n -c \" neighbor 10.255.0.1 route-reflector-client\"\n -c \" neighbor 10.255.0.2 activate\"\n -c \" neighbor 10.255.0.2 route-reflector-client\"\n -c \" neighbor 10.255.0.3 activate\"\n -c \" neighbor 10.255.0.3 route-reflector-client\"\n -c \" advertise-all-vni\"\n -c \" exit-address-family\"\n\n - name: R1\n cmds:\n\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: ip link set net0 address 52:54:00:aa:01:00\n - cmd: ip link set net1 address 52:54:00:aa:01:01\n - cmd: ip link set net2 address 52:54:00:aa:01:02\n - cmd: /usr/lib/frr/frr start\n\n - cmd: ip link add br100 type bridge\n - cmd: ip link set dev br100 up\n - cmd: ip addr add 10.100.0.1/16 dev br100\n - cmd: >-\n ip link add vxlan100 type vxlan id 100\n dstport 4789 local 10.255.0.1\n\n - cmd: ip link add br200 type bridge\n - cmd: ip link set dev br200 up\n - cmd: ip addr add 10.200.0.1/16 dev br200\n - cmd: >-\n ip link add vxlan200 type vxlan id 200\n dstport 4789 local 10.255.0.1\n\n - cmd: ip link set dev net1 master br100\n - cmd: ip link set dev net1 promisc on\n - cmd: ip link set dev net1 up\n - cmd: ip link set dev vxlan100 master br100\n - cmd: ip link set dev vxlan100 promisc on\n - cmd: ip link set dev vxlan100 up\n\n - cmd: ip link set dev net2 master br200\n - cmd: ip link set dev net2 promisc on\n - cmd: ip link set dev net2 up\n - cmd: ip link set dev vxlan200 master br200\n - cmd: ip link set dev vxlan200 promisc on\n - cmd: ip link set dev vxlan200 up\n\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\"\n -c \" ip address 10.255.0.1/32\"\n -c \" exit\"\n -c \"int net0\"\n -c \" ip address 10.0.0.1/24\"\n -c \" exit\"\n -c \"ip route 10.255.0.254/32 10.0.0.254\"\n -c \"ip route 10.255.0.2/32 10.0.0.2\"\n -c \"ip route 10.255.0.3/32 10.0.0.3\"\n -c \"router bgp 65001\"\n -c \" bgp router-id 10.255.0.1\"\n -c \" neighbor 10.255.0.254 remote-as internal\"\n -c \" neighbor 10.255.0.254 update-source lo\"\n -c \" address-family l2vpn evpn\"\n -c \" neighbor 10.255.0.254 activate\"\n -c \" advertise-all-vni\"\n -c \" exit-address-family\"\n\n - name: R2\n cmds:\n\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: ip link set net0 address 52:54:00:aa:02:00\n - cmd: ip link set net1 address 52:54:00:aa:02:01\n - cmd: ip link set net2 address 52:54:00:aa:02:02\n - cmd: /usr/lib/frr/frr start\n\n - cmd: ip link add br100 type bridge\n - cmd: ip link set dev br100 up\n - cmd: ip addr add 10.100.0.2/16 dev br100\n - cmd: >-\n ip link add vxlan100 type vxlan id 100\n dstport 4789 local 10.255.0.2\n\n - cmd: ip link add br200 type bridge\n - cmd: ip link set dev br200 up\n - cmd: ip addr add 10.200.0.2/16 dev br200\n - cmd: >-\n ip link add vxlan200 type vxlan id 200\n dstport 4789 local 10.255.0.2\n\n - cmd: ip link set dev net1 master br100\n - cmd: ip link set dev net1 promisc on\n - cmd: ip link set dev net1 up\n - cmd: ip link set dev vxlan100 master br100\n - cmd: ip link set dev vxlan100 promisc on\n - cmd: ip link set dev vxlan100 up\n\n - cmd: ip link set dev net2 master br200\n - cmd: ip link set dev net2 promisc on\n - cmd: ip link set dev net2 up\n - cmd: ip link set dev vxlan200 master br200\n - cmd: ip link set dev vxlan200 promisc on\n - cmd: ip link set dev vxlan200 up\n\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\"\n -c \" ip address 10.255.0.2/32\"\n -c \" exit\"\n -c \"int net0\"\n -c \" ip address 10.0.0.2/24\"\n -c \" exit\"\n -c \"ip route 10.255.0.254/32 10.0.0.254\"\n -c \"ip route 10.255.0.1/32 10.0.0.1\"\n -c \"ip route 10.255.0.3/32 10.0.0.3\"\n -c \"router bgp 65001\"\n -c \" bgp router-id 10.255.0.2\"\n -c \" neighbor 10.255.0.254 remote-as internal\"\n -c \" neighbor 10.255.0.254 update-source lo\"\n -c \" address-family l2vpn evpn\"\n -c \" neighbor 10.255.0.254 activate\"\n -c \" advertise-all-vni\"\n -c \" exit-address-family\"\n\n - name: R3\n cmds:\n\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: ip link set net0 address 52:54:00:aa:03:00\n - cmd: ip link set net1 address 52:54:00:aa:03:01\n - cmd: ip link set net2 address 52:54:00:aa:03:02\n - cmd: /usr/lib/frr/frr start\n\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"int lo\"\n -c \" ip address 10.255.0.3/32\"\n -c \" exit\"\n -c \"int net0\"\n -c \" ip address 10.0.0.3/24\"\n -c \" exit\"\n -c \"ip route 10.255.0.254/32 10.0.0.254\"\n -c \"ip route 10.255.0.1/32 10.0.0.1\"\n -c \"ip route 10.255.0.2/32 10.0.0.2\"\n -c \"router bgp 65001\"\n -c \" bgp router-id 10.255.0.3\"\n -c \" neighbor 10.255.0.254 remote-as internal\"\n -c \" neighbor 10.255.0.254 update-source lo\"\n -c \" address-family l2vpn evpn\"\n -c \" neighbor 10.255.0.254 activate\"\n -c \" advertise-all-vni\"\n -c \" exit-address-family\"\n\n - name: C1\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: ip link set net0 address 52:54:00:bb:01:00\n - cmd: ip addr add 10.100.1.1/16 dev net0\n - name: C2\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: ip link set net0 address 52:54:00:bb:02:00\n - cmd: ip addr add 10.200.1.2/16 dev net0\n - name: C3\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: ip link set net0 address 52:54:00:bb:03:00\n - cmd: ip addr add 10.100.2.3/16 dev net0\n - name: C4\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: ip link set net0 address 52:54:00:bb:04:00\n - cmd: ip addr add 10.200.2.4/16 dev net0\n\n# test:\n# - cmds:\n# - cmd: docker exec R0 ping -c2 10.0.0.2\n# - cmd: docker exec R0 ping -c2 2.2.2.2\n# - cmd: docker exec R1 ping -c2 1.1.1.1\n# - cmd: docker exec C0 ping -c2 192.168.0.20\n# - cmd: docker exec C1 ping -c2 192.168.0.2\n\n" }, { "path": "examples/basic_exabgp/Makefile", "content": "\nexabgp:\n\texabgp ./exabgp.conf\n\nPCAP_PATH=/vagrant\ngetcapture:\n\ttcpdump -ni net0 -w $(PCAP_PATH)/in.pcap &\n\texabgp ./exabgp.conf &\n\tsleep 2\n\tkillall tcpdump\n\tkillall python3\n\nshow:\n\tdocker exec R1 vtysh -c 'sh bgp ipv4 uni'\n\n" }, { "path": "examples/basic_exabgp/README.md", "content": "\n# ExaBGP test\n\n```\ntn upconf | sudo sh\ndocker_mount_netns R2 ns0\nip netns exec ns0 bash\nmake //execute exabgp\nmake getcapture //execute exabgp and pcap.\n```\n\n\n" }, { "path": "examples/basic_exabgp/daemons.R1", "content": "# This file tells the frr package which daemons to start.\n#\n# Sample configurations for these daemons can be found in\n# /usr/share/doc/frr/examples/.\n#\n# ATTENTION:\n#\n# When activating a daemon for the first time, a config file, even if it is\n# empty, has to be present *and* be owned by the user and group \"frr\", else\n# the daemon will not be started by /etc/init.d/frr. The permissions should\n# be u=rw,g=r,o=.\n# When using \"vtysh\" such a config file is also needed. It should be owned by\n# group \"frrvty\" and set to ug=rw,o= though. Check /etc/pam.d/frr, too.\n#\n# The watchfrr and zebra daemons are always started.\n#\nbgpd=yes\nospfd=no\nospf6d=no\nripd=no\nripngd=no\nisisd=no\npimd=no\nldpd=no\nnhrpd=no\neigrpd=no\nbabeld=no\nsharpd=no\npbrd=no\nbfdd=no\nfabricd=no\nvrrpd=no\n\n#\n# If this option is set the /etc/init.d/frr script automatically loads\n# the config via \"vtysh -b\" when the servers are started.\n# Check /etc/pam.d/frr if you intend to use \"vtysh\"!\n#\nvtysh_enable=yes\nzebra_options=\" -A 127.0.0.1 -s 90000000\"\nbgpd_options=\" -A 127.0.0.1\"\nospfd_options=\" -A 127.0.0.1\"\nospf6d_options=\" -A ::1\"\nripd_options=\" -A 127.0.0.1\"\nripngd_options=\" -A ::1\"\nisisd_options=\" -A 127.0.0.1\"\npimd_options=\" -A 127.0.0.1\"\nldpd_options=\" -A 127.0.0.1\"\nnhrpd_options=\" -A 127.0.0.1\"\neigrpd_options=\" -A 127.0.0.1\"\nbabeld_options=\" -A 127.0.0.1\"\nsharpd_options=\" -A 127.0.0.1\"\npbrd_options=\" -A 127.0.0.1\"\nstaticd_options=\"-A 127.0.0.1\"\nbfdd_options=\" -A 127.0.0.1\"\nfabricd_options=\"-A 127.0.0.1\"\nvrrpd_options=\" -A 127.0.0.1\"\n\n# configuration profile\n#\n#frr_profile=\"traditional\"\n#frr_profile=\"datacenter\"\n\n#\n# This is the maximum number of FD's that will be available.\n# Upon startup this is read by the control files and ulimit\n# is called. Uncomment and use a reasonable value for your\n# setup if you are expecting a large number of peers in\n# say BGP.\n#MAX_FDS=1024\n\n# The list of daemons to watch is automatically generated by the init script.\n##watchfrr_options=\"\"\n\n# for debugging purposes, you can specify a \"wrap\" command to start instead\n# of starting the daemon directly, e.g. to use valgrind on ospfd:\n# ospfd_wrap=\"/usr/bin/valgrind\"\n# or you can use \"all_wrap\" for all daemons, e.g. to use perf record:\n# all_wrap=\"/usr/bin/perf record --call-graph -\"\n# the normal daemon command is added to this at the end.\n" }, { "path": "examples/basic_exabgp/exabgp.conf", "content": "neighbor 10.0.0.1 {\n\trouter-id 2.2.2.2;\n\tlocal-address 10.0.0.2;\n\tlocal-as 2;\n\tpeer-as 1;\n\n\t#capability {\n\t#\tnexthop true;\n\t#}\n\n\tfamily {\n\t\tipv4 unicast;\n\t\tipv4 mpls-vpn;\n\t}\n\n\tnexthop {\n\t\t#ipv4 unicast ipv6;\n\t\t#ipv4 mpls-vpn ipv6;\n\t}\n\n\tstatic {\n\t\t#route 1.1.1.1/32 next-hop 2.2.2.2;\n\t\t#route 1.1.1.3/32 next-hop 2.2.2.2 bgp-prefix-sid [ 888 ];\n\t\t#route 1.1.1.6/32 next-hop 3.3.3.3 bgp-prefix-sid-srv6 ( ipv6 A:: );\n\t\t#route 2.2.2.2/32 rd 1:1 nexthop 2.2.2.2 extended-community [0x ]\n\t\t#route 1.1.1.10/32 next-hop cafe::1;\n\t\t#route 10.0.0.0/24 rd 65000:1 next-hop 200.10.0.101 extended-community [ 0x0002fde800000001 ] label 3 bgp-prefix-sid-srv6 ( vpn A:: );\n\t\t#route 10.0.0.0/24 rd 65000:1 next-hop 200.10.0.101 extended-community [ 0x0002fde800000001 ] label 3 bgp-prefix-sid-srv6 ( l3vpn A:: );\n\t\troute 10.0.0.0/24 rd 1:1 next-hop cafe::1 extended-community [ 0x0002fde800000001 ] label 3 bgp-prefix-sid-srv6 ( l3vpn 2001:1::10 );\n\t}\n}\n" }, { "path": "examples/basic_exabgp/exabgp.conf.R2", "content": "neighbor 10.0.0.1 {\n router-id 2.2.2.2;\n local-address 10.0.0.2;\n local-as 2;\n peer-as 1;\n #graceful-restart;\n\n static {\n route 8.8.8.8/32 next-hop 10.0.0.2;\n }\n}\n" }, { "path": "examples/basic_exabgp/frr.conf.R1", "content": "hostname R1\nlog file /tmp/frr.log\n!\nint net0\n ip address 10.0.0.1/24\n no shutdown\n!\nrouter bgp 1\n bgp router-id 1.1.1.1\n neighbor 10.0.0.2 remote-as 2\n neighbor 10.0.0.2 capability extended-nexthop\n !\n address-family ipv4 unicast\n redistribute kernel\n exit-address-family\n !\n address-family ipv4 vpn\n neighbor 10.0.0.2 activate\n exit-address-family\n!\nline vty\n!\n" }, { "path": "examples/basic_exabgp/spec.yaml", "content": "\npostinit:\n - cmds:\n - cmd: docker cp daemons.R1 R1:/etc/frr/daemons\n - cmd: docker cp frr.conf.R1 R1:/etc/frr/frr.conf\n - cmd: docker cp exabgp.conf.R2 R2:/root/exabgp.conf\n\nnodes:\n - name: R1\n # image: slankdev/centos-frr-dev:7\n image: slankdev/frr:centos-7-latest\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - name: R2\n image: slankdev/exabgp\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n\nnode_configs:\n - name: R1\n cmds:\n - cmd: sysctl -w 'net.ipv6.conf.net0.disable_ipv6=0'\n - cmd: /usr/lib/frr/frrinit.sh start\n - name: R2\n cmds:\n - cmd: sysctl -w 'net.ipv6.conf.net0.disable_ipv6=0'\n - cmd: ip addr add 10.0.0.2/24 dev net0\n\n" }, { "path": "examples/basic_fq_codel/README.md", "content": "# FQ-Codel demonstration\n\nSimple demonstration of the [FQ-Codel](https://www.bufferbloat.net/projects/codel/wiki/) that solves bufferbloat problem.\n\nYou can try the [bufferbloat demonstration](https://github.com/tinynetwork/tinet/tree/master/examples/basic_bufferbloat) first and compare what happened after fq_codel is enabled.\n\n![](./topo.png)\n" }, { "path": "examples/basic_fq_codel/spec.yaml", "content": "nodes:\n- name: R1\n image: nicolaka/netshoot\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - { name: net1, type: direct, args: C1#net0 }\n - { name: net2, type: direct, args: C2#net0 }\n- name: R2\n image: nicolaka/netshoot\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - { name: net1, type: direct, args: C3#net0 }\n - { name: net2, type: direct, args: C4#net0 }\n- name: C1\n image: nicolaka/netshoot\n interfaces:\n - { name: net0, type: direct, args: R1#net1 }\n- name: C2\n image: nicolaka/netshoot\n interfaces:\n - { name: net0, type: direct, args: R1#net2 }\n- name: C3\n image: nicolaka/netshoot\n interfaces:\n - { name: net0, type: direct, args: R2#net1 }\n- name: C4\n image: nicolaka/netshoot\n interfaces:\n - { name: net0, type: direct, args: R2#net2 }\nnode_configs:\n- name: R1\n cmds:\n - cmd: ip addr add 10.0.0.1/24 dev net1\n - cmd: ip addr add 10.0.1.1/24 dev net2\n - cmd: ip addr add 10.0.2.1/24 dev net0\n - cmd: ip route add default via 10.0.2.2\n - cmd: \"tc qdisc add dev net0 root handle 1: htb default 1\"\n - cmd: \"tc class add dev net0 parent 1: classid 1:1 htb rate 500mbit quantum 1514\"\n - cmd: \"tc qdisc add dev net0 parent 1:1 fq_codel\"\n- name: R2\n cmds:\n - cmd: ip addr add 10.0.2.2/24 dev net0\n - cmd: ip addr add 10.0.3.1/24 dev net1\n - cmd: ip addr add 10.0.4.1/24 dev net2\n - cmd: ip route add default via 10.0.2.1\n - cmd: \"tc qdisc add dev net0 root handle 1: htb default 1\"\n - cmd: \"tc class add dev net0 parent 1: classid 1:1 htb rate 500mbit quantum 1514\"\n - cmd: \"tc qdisc add dev net0 parent 1:1 fq_codel\"\n- name: C1\n cmds:\n - cmd: ip addr add 10.0.0.2/24 dev net0\n - cmd: ip route add default via 10.0.0.1\n- name: C2\n cmds:\n - cmd: ip addr add 10.0.1.2/24 dev net0\n - cmd: ip route add default via 10.0.1.1\n- name: C3\n cmds:\n - cmd: ip addr add 10.0.3.2/24 dev net0\n - cmd: ip route add default via 10.0.3.1\n- name: C4\n cmds:\n - cmd: ip addr add 10.0.4.2/24 dev net0\n - cmd: ip route add default via 10.0.4.1\ntest:\n - cmds:\n - cmd: echo \"==========================================\"\n - cmd: echo \"iperf from C1 to C3\"\n - cmd: echo \"==========================================\"\n - cmd: docker exec C3 iperf -s -i 1 &\n - cmd: sleep 3\n - cmd: docker exec C1 iperf -c 10.0.3.2 2>&1 > /dev/null\n - cmd: docker exec C3 pkill iperf\n - cmd: echo \"==========================================\"\n - cmd: echo \"ping from C2 to C4\"\n - cmd: echo \"==========================================\"\n - cmd: docker exec C2 ping -c 10 10.0.4.2\n - cmd: echo \"==========================================\"\n - cmd: echo \"ping from C2 to C4 while iperf-ing from C1 to C3\"\n - cmd: echo \"==========================================\"\n - cmd: docker exec C3 iperf -s 2>&1 > /dev/null &\n - cmd: sleep 3\n - cmd: docker exec C1 iperf -c 10.0.3.2 -t 60 2>&1 > /dev/null &\n - cmd: sleep 3\n - cmd: docker exec C2 ping -c 10 10.0.4.2\n - cmd: docker exec C1 pkill iperf\n - cmd: sleep 3\n - cmd: docker exec C3 pkill iperf\n" }, { "path": "examples/basic_gcp_hv/spec.yaml", "content": "---\nnodes:\n- name: HV1\n image: slankdev/frr\n interfaces:\n - { name: tap1, type: direct, args: VM1#net0 }\n - { name: tap2, type: direct, args: VM2#net0 }\n- name: VM1\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: HV1#tap1 }\n- name: VM2\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: HV1#tap2 }\n\nnode_configs:\n\n- name: HV1\n cmds:\n - cmd: ip addr add 10.0.0.1/32 dev tap1\n - cmd: ip addr add 10.0.0.1/32 dev tap2\n - cmd: ip route add 10.0.0.11/32 dev tap1\n - cmd: ip route add 10.0.0.12/32 dev tap2\n\n- name: VM1\n cmds:\n - cmd: ip addr add 10.0.0.11/32 dev net0\n - cmd: ip route add 10.0.0.1 dev net0 proto static scope link src 10.0.0.11 metric 100\n - cmd: ip route add default via 10.0.0.1 dev net0 proto static src 10.0.0.11 metric 100\n\n- name: VM2\n cmds:\n - cmd: ip addr add 10.0.0.12/32 dev net0\n - cmd: ip route add 10.0.0.1 dev net0 proto static scope link src 10.0.0.12 metric 100\n - cmd: ip route add default via 10.0.0.1 dev net0 proto static src 10.0.0.12 metric 100\n" }, { "path": "examples/basic_geneve/spec.yaml", "content": "---\nnodes:\n- name: R1\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - { name: net1, type: direct, args: C1#net0 }\n- name: R2\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - { name: net1, type: direct, args: C2#net0 }\n- name: C1\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R1#net1 }\n- name: C2\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R2#net1 }\n\nnode_configs:\n- name: R1\n cmds:\n - cmd: ip addr add 10.0.0.1/24 dev net0\n - cmd: ip link add name geneve0 type geneve id 10 remote 10.0.0.2\n - cmd: ip link set geneve0 up\n - cmd: ip link add br0 type bridge\n - cmd: ip link set br0 up\n - cmd: ip link set geneve0 master br0\n - cmd: ip link set net1 master br0\n- name: R2\n cmds:\n - cmd: ip addr add 10.0.0.2/24 dev net0\n - cmd: ip link add name geneve0 type geneve id 10 remote 10.0.0.1\n - cmd: ip link set geneve0 up\n - cmd: ip link add br0 type bridge\n - cmd: ip link set br0 up\n - cmd: ip link set geneve0 master br0\n - cmd: ip link set net1 master br0\n- name: C1\n cmds:\n - cmd: ip addr add 10.99.0.1/24 dev net0\n- name: C2\n cmds:\n - cmd: ip addr add 10.99.0.2/24 dev net0\n" }, { "path": "examples/basic_gre/README.md", "content": "\n# GRE\n\n![](topo.jpeg)\n\n```\nmodprobe ip_gre\nip tunnel add mode gre remote local ttl \nip link set mtu up\nip addr add / dev \n```\n" }, { "path": "examples/basic_gre/spec.yaml", "content": "\nnodes:\n - name: R1\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - { name: net1, type: direct, args: R3#net0 }\n - name: R2\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - { name: net1, type: direct, args: R4#net0 }\n - name: R3\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R1#net1 }\n - { name: net1, type: direct, args: R5#net0 }\n - name: R4\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R2#net1 }\n - { name: net1, type: direct, args: R6#net0 }\n - name: R5\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R3#net1 }\n - name: R6\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R4#net1 }\n\nnode_configs:\n - name: R1\n cmds:\n - cmd: ip addr add 10.255.0.1/32 dev lo\n - cmd: ip addr add 10.0.0.1/30 dev net0\n - cmd: ip addr add 10.0.0.5/30 dev net1\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'router ospf'\n -c ' ospf router-id 10.255.0.1'\n -c ' network 10.255.0.1/32 area 0'\n -c ' network 10.0.0.0/30 area 0'\n -c ' network 10.0.0.4/30 area 0'\n - name: R2\n cmds:\n - cmd: ip addr add 10.255.0.2/32 dev lo\n - cmd: ip addr add 10.0.0.2/30 dev net0\n - cmd: ip addr add 10.0.0.9/30 dev net1\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'router ospf'\n -c ' ospf router-id 10.255.0.2'\n -c ' network 10.255.0.2/32 area 0'\n -c ' network 10.0.0.0/30 area 0'\n -c ' network 10.0.0.8/30 area 0'\n - name: R3\n cmds:\n - cmd: ip addr add 10.255.0.3/32 dev lo\n - cmd: ip addr add 10.0.0.6/30 dev net0\n - cmd: ip addr add 10.0.0.13/30 dev net1\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'ip route 10.0.0.8/30 10.0.0.5' ## This is IMPORTANT..?\n -c 'router ospf'\n -c ' ospf router-id 10.255.0.3'\n -c ' network 10.255.0.3/32 area 0'\n -c ' network 10.0.0.4/30 area 0'\n -c ' network 10.0.0.12/30 area 0'\n -c ' network 20.0.0.0/30 area 0'\n - cmd: ip tunnel add gre1 mode gre remote 10.255.0.4 local 10.255.0.3 ttl 10\n - cmd: ip link set gre1 up\n - cmd: ip addr add 20.0.0.1/30 dev gre1\n - name: R4\n cmds:\n - cmd: ip addr add 10.255.0.4/32 dev lo\n - cmd: ip addr add 10.0.0.10/30 dev net0\n - cmd: ip addr add 10.0.0.17/30 dev net1\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'ip route 10.0.0.4/30 10.0.0.9' ## This is IMPORTANT..?\n -c 'router ospf'\n -c ' ospf router-id 10.255.0.4'\n -c ' network 10.255.0.4/32 area 0'\n -c ' network 10.0.0.8/30 area 0'\n -c ' network 10.0.0.16/30 area 0'\n -c ' network 20.0.0.0/30 area 0'\n - cmd: ip tunnel add gre1 mode gre remote 10.255.0.3 local 10.255.0.4 ttl 10\n - cmd: ip link set gre1 up\n - cmd: ip addr add 20.0.0.2/30 dev gre1\n - name: R5\n cmds:\n - cmd: ip addr add 10.255.0.5/32 dev lo\n - cmd: ip addr add 10.0.0.14/30 dev net0\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'router ospf'\n -c ' ospf router-id 10.255.0.5'\n -c ' network 10.255.0.5/32 area 0'\n -c ' network 10.0.0.12/30 area 0'\n - name: R6\n cmds:\n - cmd: ip addr add 10.255.0.6/32 dev lo\n - cmd: ip addr add 10.0.0.18/30 dev net0\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'router ospf'\n -c ' ospf router-id 10.255.0.6'\n -c ' network 10.255.0.6/32 area 0'\n -c ' network 10.0.0.16/30 area 0'\n\ntest:\n - name: p2p\n cmds:\n - cmd: docker exec R1 ping -c2 10.0.0.1\n - cmd: docker exec R1 ping -c2 10.0.0.2\n - cmd: docker exec R1 ping -c2 10.0.0.5\n - cmd: docker exec R1 ping -c2 10.0.0.6\n - cmd: docker exec R2 ping -c2 10.0.0.1\n - cmd: docker exec R2 ping -c2 10.0.0.2\n - cmd: docker exec R2 ping -c2 10.0.0.9\n - cmd: docker exec R2 ping -c2 10.0.0.10\n - cmd: docker exec R3 ping -c2 10.0.0.5\n - cmd: docker exec R3 ping -c2 10.0.0.6\n - cmd: docker exec R3 ping -c2 10.0.0.13\n - cmd: docker exec R3 ping -c2 10.0.0.14\n - cmd: docker exec R4 ping -c2 10.0.0.9\n - cmd: docker exec R4 ping -c2 10.0.0.10\n - cmd: docker exec R4 ping -c2 10.0.0.17\n - cmd: docker exec R4 ping -c2 10.0.0.18\n - cmd: docker exec R5 ping -c2 10.0.0.13\n - cmd: docker exec R5 ping -c2 10.0.0.14\n - cmd: docker exec R6 ping -c2 10.0.0.17\n - cmd: docker exec R6 ping -c2 10.0.0.18\n - name: lo\n cmds:\n - cmd: docker exec R1 ping -c2 10.255.0.1\n - cmd: docker exec R1 ping -c2 10.255.0.2\n - cmd: docker exec R1 ping -c2 10.255.0.3\n - cmd: docker exec R1 ping -c2 10.255.0.4\n - cmd: docker exec R1 ping -c2 10.255.0.5\n - cmd: docker exec R1 ping -c2 10.255.0.6\n - cmd: docker exec R2 ping -c2 10.255.0.1\n - cmd: docker exec R2 ping -c2 10.255.0.2\n - cmd: docker exec R2 ping -c2 10.255.0.3\n - cmd: docker exec R2 ping -c2 10.255.0.4\n - cmd: docker exec R2 ping -c2 10.255.0.5\n - cmd: docker exec R2 ping -c2 10.255.0.6\n - cmd: docker exec R3 ping -c2 10.255.0.1\n - cmd: docker exec R3 ping -c2 10.255.0.2\n - cmd: docker exec R3 ping -c2 10.255.0.3\n - cmd: docker exec R3 ping -c2 10.255.0.4\n - cmd: docker exec R3 ping -c2 10.255.0.5\n - cmd: docker exec R3 ping -c2 10.255.0.6\n - cmd: docker exec R4 ping -c2 10.255.0.1\n - cmd: docker exec R4 ping -c2 10.255.0.2\n - cmd: docker exec R4 ping -c2 10.255.0.3\n - cmd: docker exec R4 ping -c2 10.255.0.4\n - cmd: docker exec R4 ping -c2 10.255.0.5\n - cmd: docker exec R4 ping -c2 10.255.0.6\n - cmd: docker exec R5 ping -c2 10.255.0.1\n - cmd: docker exec R5 ping -c2 10.255.0.2\n - cmd: docker exec R5 ping -c2 10.255.0.3\n - cmd: docker exec R5 ping -c2 10.255.0.4\n - cmd: docker exec R5 ping -c2 10.255.0.5\n - cmd: docker exec R5 ping -c2 10.255.0.6\n - cmd: docker exec R6 ping -c2 10.255.0.1\n - cmd: docker exec R6 ping -c2 10.255.0.2\n - cmd: docker exec R6 ping -c2 10.255.0.3\n - cmd: docker exec R6 ping -c2 10.255.0.4\n - cmd: docker exec R6 ping -c2 10.255.0.5\n - cmd: docker exec R6 ping -c2 10.255.0.6\n\n\n" }, { "path": "examples/basic_haproxy/README.md", "content": "# HAProxy demonstration\n\n![](./topo.png)\n\n**How to test**
\nP1 is configured HAProxy container as-a TCP proxy.\nYou can check the behabiour of proxy when you run\nthe curl command to access 10.0.0.1(P1's address) on C1.\n```\n$ cd /path/to/here\n$ tn upconf | sudo sh\n...\n$ docker exec C1 curl -s 10.0.0.1\nS1\n$ docker exec C1 curl -s 10.0.0.1\nS2\n$ docker exec C1 curl -s 10.0.0.1\nS3\n$ docker exec C1 curl -s 10.0.0.1\nS4\n$ docker exec C1 curl -s 10.0.0.1\nS1\n$ docker exec C1 curl -s 10.0.0.1\nS2\n```\n" }, { "path": "examples/basic_haproxy/spec.yaml", "content": "\nnodes:\n - name: C1\n image: slankdev/sandbox\n interfaces:\n - { name: net0, type: direct, args: P1#net0 }\n - name: P1\n image: slankdev/sandbox\n interfaces:\n - { name: net0, type: direct, args: C1#net0 }\n - { name: net1, type: bridge, args: SW }\n - name: S1\n image: slankdev/sandbox\n interfaces: [ { name: net0, type: bridge, args: SW } ]\n - name: S2\n image: slankdev/sandbox\n interfaces: [ { name: net0, type: bridge, args: SW } ]\n - name: S3\n image: slankdev/sandbox\n interfaces: [ { name: net0, type: bridge, args: SW } ]\n - name: S4\n image: slankdev/sandbox\n interfaces: [ { name: net0, type: bridge, args: SW } ]\n\nswitches:\n - name: SW\n interfaces:\n - { name: net1, type: docker, args: P1 }\n - { name: net0, type: docker, args: S1 }\n - { name: net0, type: docker, args: S2 }\n - { name: net0, type: docker, args: S3 }\n - { name: net0, type: docker, args: S4 }\n\nnode_configs:\n - name: C1\n cmds:\n - cmd: ip addr add 10.0.0.2/24 dev net0\n - name: P1\n cmds:\n - cmd: ip addr add 10.0.0.1/24 dev net0\n - cmd: ip addr add 10.1.0.254/24 dev net1\n - cmd: bash -c \"echo 'global ' >> /root/haproxy.conf\"\n - cmd: bash -c \"echo ' daemon ' >> /root/haproxy.conf\"\n - cmd: bash -c \"echo ' ' >> /root/haproxy.conf\"\n - cmd: bash -c \"echo 'defaults ' >> /root/haproxy.conf\"\n - cmd: bash -c \"echo ' log global ' >> /root/haproxy.conf\"\n - cmd: bash -c \"echo ' mode tcp ' >> /root/haproxy.conf\"\n - cmd: bash -c \"echo ' ' >> /root/haproxy.conf\"\n - cmd: bash -c \"echo 'frontend main ' >> /root/haproxy.conf\"\n - cmd: bash -c \"echo ' bind *:80 ' >> /root/haproxy.conf\"\n - cmd: bash -c \"echo ' default_backend static ' >> /root/haproxy.conf\"\n - cmd: bash -c \"echo ' ' >> /root/haproxy.conf\"\n - cmd: bash -c \"echo 'backend static ' >> /root/haproxy.conf\"\n - cmd: bash -c \"echo ' server S1 10.1.0.1:80 check' >> /root/haproxy.conf\"\n - cmd: bash -c \"echo ' server S2 10.1.0.2:80 check' >> /root/haproxy.conf\"\n - cmd: bash -c \"echo ' server S3 10.1.0.3:80 check' >> /root/haproxy.conf\"\n - cmd: bash -c \"echo ' server S4 10.1.0.4:80 check' >> /root/haproxy.conf\"\n - cmd: haproxy -f /root/haproxy.conf\n\n - name: S1\n cmds:\n - cmd: ip addr add 10.1.0.1/24 dev net0\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - name: S2\n cmds:\n - cmd: ip addr add 10.1.0.2/24 dev net0\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - name: S3\n cmds:\n - cmd: ip addr add 10.1.0.3/24 dev net0\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n - name: S4\n cmds:\n - cmd: ip addr add 10.1.0.4/24 dev net0\n - cmd: sh -c \"cat /etc/hostname > index.html\"\n - cmd: nohup python3 -m http.server 80 &\n\ntest:\n - name: p2p\n cmds:\n - cmd: docker exec C1 ping -c2 10.0.0.1\n - cmd: docker exec C1 ping -c2 10.0.0.2\n - cmd: docker exec P1 ping -c2 10.0.0.1\n - cmd: docker exec P1 ping -c2 10.0.0.2\n - cmd: docker exec P1 ping -c2 10.1.0.1\n - cmd: docker exec P1 ping -c2 10.1.0.2\n - cmd: docker exec P1 ping -c2 10.1.0.3\n - cmd: docker exec P1 ping -c2 10.1.0.4\n\n" }, { "path": "examples/basic_ipip/anycast_tunnel/spec.yaml", "content": "\npostinit:\n - cmds:\n - cmd: docker cp /root/dotfiles/bin/linkstat.py CLOS:/usr/bin/linkstat.py\n - cmd: docker cp /root/dotfiles/bin/http_server.py CS:/usr/bin/http_server.py\n - cmd: docker cp /root/dotfiles/bin/echo_server.py CS:/usr/bin/echo_server.py\n\nnodes:\n - name: CLOS\n image: slankdev/conntrack:centos-7\n interfaces:\n - { name: net1, type: direct, args: N1#net0 }\n - { name: net2, type: direct, args: N2#net0 }\n - { name: net3, type: direct, args: N2#net0 }\n - { name: up1, type: direct, args: CS#net0 }\n - { name: dn1, type: direct, args: HV1#net0 }\n\n - name: N1\n image: slankdev/conntrack:centos-7\n interfaces:\n - { name: net0, type: direct, args: CLOS#net1 }\n - name: N2\n image: slankdev/conntrack:centos-7\n interfaces:\n - { name: net0, type: direct, args: CLOS#net2 }\n - name: N3\n image: slankdev/conntrack:centos-7\n interfaces:\n - { name: net0, type: direct, args: CLOS#net3 }\n\n - name: HV1\n image: slankdev/conntrack:centos-7\n interfaces:\n - { name: net0, type: direct, args: CLOS#dn1 }\n - name: CS\n image: slankdev/conntrack:centos-7\n interfaces:\n - { name: net0, type: direct, args: CLOS#up1 }\n\nnode_configs:\n - name: CLOS\n cmds:\n - cmd: ip addr add 10.255.0.10/32 dev lo\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: sysctl -w net.ipv4.fib_multipath_hash_policy=1\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 10\"\n -c \" bgp router-id 10.255.0.10\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor FABRIC capability extended-nexthop\"\n -c \" neighbor net1 interface peer-group FABRIC\"\n -c \" neighbor net2 interface peer-group FABRIC\"\n -c \" neighbor net3 interface peer-group FABRIC\"\n -c \" neighbor up1 interface peer-group FABRIC\"\n -c \" neighbor dn1 interface peer-group FABRIC\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" network 10.255.0.10/32\"\n -c \" exit-address-family\"\n\n - name: N1\n cmds:\n - cmd: ip addr add 10.255.0.1/32 dev lo\n - cmd: ip addr add 10.255.0.254/32 dev lo\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 1\"\n -c \" bgp router-id 10.255.0.1\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor FABRIC capability extended-nexthop\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" network 10.255.0.1/32\"\n -c \" network 10.255.0.254/32\"\n -c \" exit-address-family\"\n - cmd: ip tunnel add tun-nat2 mode ipip local 10.255.0.1 remote 10.255.0.2 dev net0\n - cmd: ip addr add 10.254.0.1/32 peer 10.254.0.2/32 dev tun-nat2\n - cmd: ip link set tun-nat2 up\n - cmd: ip tunnel add tun-nat3 mode ipip local 10.255.0.1 remote 10.255.0.3 dev net0\n - cmd: ip addr add 10.254.0.1/32 peer 10.254.0.3/32 dev tun-nat3\n - cmd: ip link set tun-nat3 up\n\n - cmd: ip link set tunl0 up\n - cmd: iptables -t nat -A POSTROUTING -s 10.255.0.20/32 -j SNAT -p tcp --to-source 10.255.0.254:10000-10063\n\n - name: N2\n cmds:\n - cmd: ip addr add 10.255.0.2/32 dev lo\n - cmd: ip addr add 10.255.0.254/32 dev lo\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 2\"\n -c \" bgp router-id 10.255.0.2\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor FABRIC capability extended-nexthop\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" network 10.255.0.2/32\"\n -c \" !network 10.255.0.254/32\"\n -c \" exit-address-family\"\n - cmd: ip tunnel add tun-nat1 mode ipip local 10.255.0.2 remote 10.255.0.1 dev net0\n - cmd: ip addr add 10.254.0.2/32 peer 10.254.0.1/32 dev tun-nat1\n - cmd: ip link set tun-nat1 up\n - cmd: ip tunnel add tun-nat3 mode ipip local 10.255.0.2 remote 10.255.0.3 dev net0\n - cmd: ip addr add 10.254.0.2/32 peer 10.254.0.3/32 dev tun-nat3\n - cmd: ip link set tun-nat3 up\n\n - cmd: ip link set tunl0 up\n\n - name: N3\n cmds:\n - cmd: ip addr add 10.255.0.3/32 dev lo\n - cmd: ip addr add 10.255.0.254/32 dev lo\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 3\"\n -c \" bgp router-id 10.255.0.3\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor FABRIC capability extended-nexthop\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" network 10.255.0.3/32\"\n -c \" !network 10.255.0.254/32\"\n -c \" exit-address-family\"\n - cmd: ip tunnel add tun-nat1 mode ipip local 10.255.0.3 remote 10.255.0.1 dev net0\n - cmd: ip addr add 10.254.0.3/32 peer 10.254.0.1/32 dev tun-nat1\n - cmd: ip link set tun-nat1 up\n - cmd: ip tunnel add tun-nat2 mode ipip local 10.255.0.3 remote 10.255.0.2 dev net0\n - cmd: ip addr add 10.254.0.3/32 peer 10.254.0.2/32 dev tun-nat2\n - cmd: ip link set tun-nat2 up\n\n - cmd: ip link set tunl0 up\n\n - name: HV1\n cmds:\n - cmd: ip addr add 10.255.0.20/32 dev lo\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 20\"\n -c \" bgp router-id 10.255.0.20\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor FABRIC capability extended-nexthop\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" network 10.255.0.20/32\"\n -c \" exit-address-family\"\n\n - cmd: ip tunnel add tun-nat1 mode ipip remote 10.255.0.254 dev net0\n - cmd: ip link set tun-nat1 up\n - cmd: ip route add default dev tun-nat1\n\n - name: CS\n cmds:\n - cmd: ip addr add 10.255.0.30/32 dev lo\n - cmd: ip addr add 8.8.8.8/32 dev lo\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 30\"\n -c \" bgp router-id 10.255.0.30\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor FABRIC capability extended-nexthop\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" network 10.255.0.30/32\"\n -c \" network 0.0.0.0/0\"\n -c \" exit-address-family\"\n\n - cmd: nohup /usr/bin/http_server.py &\n - cmd: nohup /usr/bin/echo_server.py &\n" }, { "path": "examples/basic_ipip/simple/README.md", "content": "\n# IPIP tunnel\n\n![](topo.png)\n\n" }, { "path": "examples/basic_ipip/simple/spec.yaml", "content": "---\nnodes:\n- name: R1\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n- name: R2\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - { name: net1, type: direct, args: R3#net0 }\n- name: R3\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R2#net1 }\n\nnode_configs:\n- name: R1\n cmds:\n - cmd: ip addr add 10.0.0.1/24 dev net0\n - cmd: ip route add default via 10.0.0.2\n - cmd: ip tunnel add tun0 mode ipip remote 10.1.0.2 local 10.0.0.1 dev net0\n - cmd: ip addr add 1.1.1.1 peer 1.1.1.2 dev tun0\n - cmd: ip link set tun0 up\n- name: R2\n cmds:\n - cmd: ip addr add 10.0.0.2/24 dev net0\n - cmd: ip addr add 10.1.0.1/24 dev net1\n- name: R3\n cmds:\n - cmd: ip addr add 10.1.0.2/24 dev net0\n - cmd: ip route add default via 10.1.0.1\n - cmd: ip tunnel add tun0 mode ipip remote 10.0.0.1 local 10.1.0.2 dev net0\n - cmd: ip addr add 1.1.1.2 peer 1.1.1.1 dev tun0\n - cmd: ip link set tun0 up\n" }, { "path": "examples/basic_ipsec/bgp/README.md", "content": "## References\n\nhttps://gist.github.com/Manouchehri/de3adfb02c5b55f3edc2da9e8ee59fae\n" }, { "path": "examples/basic_ipsec/bgp/spec.yaml", "content": "---\npostinit:\n cmds:\n - cmd: |\n cat </tmp/vpn1.r1.secrets\n : PSK \"sekainoichihara\"\n EOF\n - cmd: |\n cat </tmp/vpn1.r2.secrets\n : PSK \"sekainoichihara\"\n EOF\n - cmd: |\n cat </tmp/vpn1.r1.conf\n conn vpn1\n authby=secret\n left=10.91.0.2\n right=10.92.0.2\n leftsubnet=0.0.0.0/0\n rightsubnet=0.0.0.0/0\n auto=start\n mark=100/0xffffffff\n vti-interface=vti0\n vti-routing=no\n dpddelay=10\n dpdtimeout=5\n dpdaction=restart\n EOF\n - cmd: |\n cat </tmp/vpn1.r2.conf\n conn vpn1\n authby=secret\n left=10.92.0.2\n right=10.91.0.2\n leftsubnet=0.0.0.0/0\n rightsubnet=0.0.0.0/0\n auto=start\n mark=100/0xffffffff\n vti-interface=vti0\n vti-routing=no\n dpddelay=10\n dpdtimeout=5\n dpdaction=restart\n EOF\n - cmd: docker cp /tmp/vpn1.r1.secrets R1:/etc/ipsec.d/vpn1.secrets\n - cmd: docker cp /tmp/vpn1.r2.secrets R2:/etc/ipsec.d/vpn1.secrets\n - cmd: docker cp /tmp/vpn1.r1.conf R1:/etc/ipsec.d/vpn1.conf\n - cmd: docker cp /tmp/vpn1.r2.conf R2:/etc/ipsec.d/vpn1.conf\n - cmd: docker exec R1 chmod 600 /etc/ipsec.d/vpn1.conf\n - cmd: docker exec R1 chmod 600 /etc/ipsec.d/vpn1.secrets\n - cmd: docker exec R2 chmod 600 /etc/ipsec.d/vpn1.conf\n - cmd: docker exec R2 chmod 600 /etc/ipsec.d/vpn1.secrets\n\nnodes:\n- name: R0\n image: tinet/cloudvpn\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - { name: net1, type: direct, args: R2#net0 }\n- name: R1\n image: tinet/cloudvpn\n interfaces:\n - { name: net0, type: direct, args: R0#net0 }\n - { name: net1, type: direct, args: C1#net0 }\n- name: R2\n image: tinet/cloudvpn\n interfaces:\n - { name: net0, type: direct, args: R0#net1 }\n - { name: net1, type: direct, args: C2#net0 }\n- name: C1\n image: tinet/centos:centos7\n interfaces:\n - { name: net0, type: direct, args: R1#net1 }\n- name: C2\n image: tinet/centos:centos7\n interfaces:\n - { name: net0, type: direct, args: R2#net1 }\n\nnode_configs:\n- name: R0\n cmds:\n - cmd: ip addr add 10.91.0.1/24 dev net0\n - cmd: ip addr add 10.92.0.1/24 dev net1\n\n- name: R1\n cmds:\n - cmd: ip addr add 10.91.0.2/24 dev net0\n - cmd: ip addr add 10.1.0.1/24 dev net1\n - cmd: ip route add 10.92.0.0/24 via 10.91.0.1\n\n - cmd: ip link add vti0 type vti key 100 remote 10.92.0.2 local 10.91.0.2\n - cmd: ip link set vti0 up\n - cmd: sysctl -w net.ipv4.conf.vti0.disable_policy=1\n - cmd: ip addr add 169.254.0.1/30 remote 169.254.0.2/30 dev vti0\n\n - cmd: /usr/libexec/ipsec/addconn --config /etc/ipsec.conf --checkconfig\n - cmd: /usr/libexec/ipsec/_stackmanager start\n - cmd: /usr/sbin/ipsec --checknss\n - cmd: /usr/sbin/ipsec --checknflog\n - cmd: /usr/libexec/ipsec/pluto --leak-detective --config /etc/ipsec.conf\n\n - cmd: sed -i -e \"s/bgpd=no/bgpd=yes/g\" /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'router bgp 65001'\n -c ' bgp router-id 169.254.0.1'\n -c ' neighbor 169.254.0.2 remote-as 65002'\n -c ' !'\n -c ' address-family ipv4 unicast'\n -c ' network 10.1.0.0/24'\n -c ' exit-address-family'\n -c '!'\n\n- name: R2\n cmds:\n - cmd: ip addr add 10.92.0.2/24 dev net0\n - cmd: ip addr add 10.2.0.1/24 dev net1\n - cmd: ip route add 10.91.0.0/24 via 10.92.0.1\n\n - cmd: ip link add vti0 type vti key 100 remote 10.91.0.2 local 10.92.0.2\n - cmd: ip link set vti0 up\n - cmd: sysctl -w net.ipv4.conf.vti0.disable_policy=1\n - cmd: ip addr add 169.254.0.2/30 remote 169.254.0.1/30 dev vti0\n\n - cmd: /usr/libexec/ipsec/addconn --config /etc/ipsec.conf --checkconfig\n - cmd: /usr/libexec/ipsec/_stackmanager start\n - cmd: /usr/sbin/ipsec --checknss\n - cmd: /usr/sbin/ipsec --checknflog\n - cmd: /usr/libexec/ipsec/pluto --leak-detective --config /etc/ipsec.conf\n\n - cmd: sed -i -e \"s/bgpd=no/bgpd=yes/g\" /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'router bgp 65002'\n -c ' bgp router-id 169.254.0.2'\n -c ' neighbor 169.254.0.1 remote-as 65001'\n -c ' !'\n -c ' address-family ipv4 unicast'\n -c ' network 10.2.0.0/24'\n -c ' exit-address-family'\n -c '!'\n\n- name: C1\n cmds:\n - cmd: ip addr add 10.1.0.2/24 dev net0\n - cmd: ip route add default via 10.1.0.1\n- name: C2\n cmds:\n - cmd: ip addr add 10.2.0.2/24 dev net0\n - cmd: ip route add default via 10.2.0.1\n" }, { "path": "examples/basic_ipsec/bgp_ha/spec.yaml", "content": "---\npostinit:\n cmds:\n - cmd: |\n cat </tmp/vpn1.r1.secrets\n : PSK \"sekainoichihara\"\n EOF\n - cmd: |\n cat </tmp/vpn2.r3.secrets\n : PSK \"sekainoichihara\"\n EOF\n - cmd: |\n cat </tmp/vpn1.r2.secrets\n : PSK \"sekainoichihara\"\n EOF\n - cmd: |\n cat </tmp/vpn2.r2.secrets\n : PSK \"sekainoichihara\"\n EOF\n - cmd: |\n cat </tmp/vpn1.r1.conf\n conn vpn1\n authby=secret\n left=10.91.0.2\n right=10.92.0.2\n leftsubnet=0.0.0.0/0\n rightsubnet=0.0.0.0/0\n auto=start\n mark=100/0xffffffff\n vti-interface=vti0\n vti-routing=no\n dpddelay=10\n dpdtimeout=5\n dpdaction=restart\n EOF\n - cmd: |\n cat </tmp/vpn2.r3.conf\n conn vpn1\n authby=secret\n left=10.93.0.2\n right=10.92.0.2\n leftsubnet=0.0.0.0/0\n rightsubnet=0.0.0.0/0\n auto=start\n mark=100/0xffffffff\n vti-interface=vti0\n vti-routing=no\n dpddelay=10\n dpdtimeout=5\n dpdaction=restart\n EOF\n - cmd: |\n cat </tmp/vpn1.r2.conf\n conn vpn1\n authby=secret\n left=10.92.0.2\n right=10.91.0.2\n leftsubnet=0.0.0.0/0\n rightsubnet=0.0.0.0/0\n auto=start\n mark=100/0xffffffff\n vti-interface=vti0\n vti-routing=no\n dpddelay=10\n dpdtimeout=5\n dpdaction=restart\n EOF\n - cmd: |\n cat </tmp/vpn2.r2.conf\n conn vpn2\n authby=secret\n left=10.92.0.2\n right=10.93.0.2\n leftsubnet=0.0.0.0/0\n rightsubnet=0.0.0.0/0\n auto=start\n mark=101/0xffffffff\n vti-interface=vti1\n vti-routing=no\n dpddelay=10\n dpdtimeout=5\n dpdaction=restart\n EOF\n - cmd: docker cp /tmp/vpn1.r1.secrets R1:/etc/ipsec.d/vpn1.secrets\n - cmd: docker cp /tmp/vpn1.r2.secrets R2:/etc/ipsec.d/vpn1.secrets\n - cmd: docker cp /tmp/vpn1.r1.conf R1:/etc/ipsec.d/vpn1.conf\n - cmd: docker cp /tmp/vpn1.r2.conf R2:/etc/ipsec.d/vpn1.conf\n\n - cmd: docker cp /tmp/vpn2.r3.secrets R3:/etc/ipsec.d/vpn2.secrets\n - cmd: docker cp /tmp/vpn2.r2.secrets R2:/etc/ipsec.d/vpn2.secrets\n - cmd: docker cp /tmp/vpn2.r3.conf R3:/etc/ipsec.d/vpn2.conf\n - cmd: docker cp /tmp/vpn2.r2.conf R2:/etc/ipsec.d/vpn2.conf\n\n - cmd: docker exec R1 chmod 600 /etc/ipsec.d/vpn1.conf\n - cmd: docker exec R1 chmod 600 /etc/ipsec.d/vpn1.secrets\n - cmd: docker exec R2 chmod 600 /etc/ipsec.d/vpn1.conf\n - cmd: docker exec R2 chmod 600 /etc/ipsec.d/vpn1.secrets\n\n - cmd: docker exec R3 chmod 600 /etc/ipsec.d/vpn2.conf\n - cmd: docker exec R3 chmod 600 /etc/ipsec.d/vpn2.secrets\n - cmd: docker exec R2 chmod 600 /etc/ipsec.d/vpn2.conf\n - cmd: docker exec R2 chmod 600 /etc/ipsec.d/vpn2.secrets\n\nnodes:\n- name: R0\n image: tinet/cloudvpn\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - { name: net1, type: direct, args: R2#net0 }\n - { name: net2, type: direct, args: R3#net0 }\n- name: R1\n image: tinet/cloudvpn\n interfaces:\n - { name: net0, type: direct, args: R0#net0 }\n - { name: net1, type: direct, args: N1#net0 }\n sysctls:\n - { sysctl: net.ipv4.fib_multipath_hash_policy=1 }\n- name: R2\n image: tinet/cloudvpn\n interfaces:\n - { name: net0, type: direct, args: R0#net1 }\n - { name: net1, type: direct, args: C2#net0 }\n sysctls:\n - { sysctl: net.ipv4.fib_multipath_hash_policy=1 }\n- name: R3\n image: tinet/cloudvpn\n interfaces:\n - { name: net0, type: direct, args: R0#net2 }\n - { name: net1, type: direct, args: N1#net1 }\n sysctls:\n - { sysctl: net.ipv4.fib_multipath_hash_policy=1 }\n- name: N1\n image: tinet/cloudvpn\n interfaces:\n - { name: net0, type: direct, args: R1#net1 }\n - { name: net1, type: direct, args: R3#net1 }\n - { name: net2, type: direct, args: C1#net0 }\n sysctls:\n - { sysctl: net.ipv4.fib_multipath_hash_policy=1 }\n- name: C1\n image: slankdev/tmp\n interfaces:\n - { name: net0, type: direct, args: N1#net2 }\n- name: C2\n image: slankdev/tmp\n interfaces:\n - { name: net0, type: direct, args: R2#net1 }\n\nnode_configs:\n- name: R0\n cmds:\n - cmd: ip addr add 10.91.0.1/24 dev net0\n - cmd: ip addr add 10.92.0.1/24 dev net1\n - cmd: ip addr add 10.93.0.1/24 dev net2\n\n- name: R1\n cmds:\n - cmd: ip addr add 10.91.0.2/24 dev net0\n - cmd: ip addr add 10.1.0.101/24 dev net1\n - cmd: ip route add 10.92.0.0/24 via 10.91.0.1\n\n - cmd: ip link add vti0 type vti key 100 remote 10.92.0.2 local 10.91.0.2\n - cmd: ip link set vti0 up\n - cmd: sysctl -w net.ipv4.conf.vti0.disable_policy=1\n - cmd: ip addr add 169.254.0.1/30 remote 169.254.0.2/30 dev vti0\n\n - cmd: /usr/libexec/ipsec/addconn --config /etc/ipsec.conf --checkconfig\n - cmd: /usr/libexec/ipsec/_stackmanager start\n - cmd: /usr/sbin/ipsec --checknss\n - cmd: /usr/sbin/ipsec --checknflog\n - cmd: /usr/libexec/ipsec/pluto --leak-detective --config /etc/ipsec.conf\n\n - cmd: sed -i -e \"s/bgpd=no/bgpd=yes/g\" /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'router bgp 65001'\n -c ' bgp router-id 169.254.0.1'\n -c ' neighbor 169.254.0.2 remote-as 65002'\n -c ' neighbor 10.1.0.10 remote-as 65000'\n -c ' !'\n -c ' address-family ipv4 unicast'\n -c ' network 10.1.0.0/24'\n -c ' exit-address-family'\n -c '!'\n\n- name: R3\n cmds:\n - cmd: ip addr add 10.93.0.2/24 dev net0\n - cmd: ip addr add 10.1.0.103/24 dev net1\n - cmd: ip route add 10.92.0.0/24 via 10.93.0.1\n\n - cmd: ip link add vti0 type vti key 100 remote 10.92.0.2 local 10.93.0.2\n - cmd: ip link set vti0 up\n - cmd: sysctl -w net.ipv4.conf.vti0.disable_policy=1\n - cmd: ip addr add 169.254.1.1/30 remote 169.254.1.2/30 dev vti0\n\n - cmd: /usr/libexec/ipsec/addconn --config /etc/ipsec.conf --checkconfig\n - cmd: /usr/libexec/ipsec/_stackmanager start\n - cmd: /usr/sbin/ipsec --checknss\n - cmd: /usr/sbin/ipsec --checknflog\n - cmd: /usr/libexec/ipsec/pluto --leak-detective --config /etc/ipsec.conf\n\n - cmd: sed -i -e \"s/bgpd=no/bgpd=yes/g\" /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'router bgp 65001'\n -c ' bgp router-id 169.254.1.1'\n -c ' neighbor 169.254.1.2 remote-as 65002'\n -c ' neighbor 10.1.0.11 remote-as 65000'\n -c ' !'\n -c ' address-family ipv4 unicast'\n -c ' network 10.1.0.0/24'\n -c ' exit-address-family'\n -c '!'\n\n- name: R2\n cmds:\n - cmd: ip addr add 10.92.0.2/24 dev net0\n - cmd: ip addr add 10.2.0.1/24 dev net1\n - cmd: ip route add 10.91.0.0/24 via 10.92.0.1\n - cmd: ip route add 10.93.0.0/24 via 10.92.0.1\n\n - cmd: ip link add vti0 type vti key 100 remote 10.91.0.2 local 10.92.0.2\n - cmd: ip link set vti0 up\n - cmd: sysctl -w net.ipv4.conf.vti0.disable_policy=1\n - cmd: ip addr add 169.254.0.2/30 remote 169.254.0.1/30 dev vti0\n\n - cmd: ip link add vti1 type vti key 101 remote 10.93.0.2 local 10.92.0.2\n - cmd: ip link set vti1 up\n - cmd: sysctl -w net.ipv4.conf.vti1.disable_policy=1\n - cmd: ip addr add 169.254.1.2/30 remote 169.254.1.1/30 dev vti1\n\n - cmd: /usr/libexec/ipsec/addconn --config /etc/ipsec.conf --checkconfig\n - cmd: /usr/libexec/ipsec/_stackmanager start\n - cmd: /usr/sbin/ipsec --checknss\n - cmd: /usr/sbin/ipsec --checknflog\n - cmd: /usr/libexec/ipsec/pluto --leak-detective --config /etc/ipsec.conf\n\n - cmd: sed -i -e \"s/bgpd=no/bgpd=yes/g\" /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'router bgp 65002'\n -c ' bgp router-id 169.254.0.2'\n -c ' neighbor 169.254.0.1 remote-as 65001'\n -c ' neighbor 169.254.1.1 remote-as 65001'\n -c ' !'\n -c ' address-family ipv4 unicast'\n -c ' network 10.2.0.0/24'\n -c ' exit-address-family'\n -c '!'\n\n- name: N1\n cmds:\n - cmd: ip addr add 10.1.0.10/24 dev net0\n - cmd: ip addr add 10.1.0.11/24 dev net1\n - cmd: ip addr add 10.1.0.1/24 dev net2\n - cmd: ip route add 10.1.0.101/32 dev net0\n - cmd: ip route add 10.1.0.103/32 dev net1\n - cmd: ip route add 10.1.0.2/32 dev net2\n\n - cmd: sysctl -w net.ipv4.conf.net0.proxy_arp=1\n - cmd: sysctl -w net.ipv4.conf.net1.proxy_arp=1\n - cmd: sysctl -w net.ipv4.conf.net2.proxy_arp=1\n\n - cmd: sed -i -e \"s/bgpd=no/bgpd=yes/g\" /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'router bgp 65000'\n -c ' bgp router-id 1.1.1.1'\n -c ' neighbor 10.1.0.101 remote-as 65001'\n -c ' neighbor 10.1.0.101 disable-connected-check'\n -c ' neighbor 10.1.0.103 remote-as 65001'\n -c ' neighbor 10.1.0.103 disable-connected-check'\n -c ' !'\n -c ' address-family ipv4 unicast'\n -c ' exit-address-family'\n -c '!'\n\n- name: C1\n cmds:\n - cmd: ip addr add 10.1.0.2/24 dev net0\n - cmd: ip route add default via 10.1.0.1\n\n- name: C2\n cmds:\n - cmd: ip addr add 10.2.0.2/24 dev net0\n - cmd: ip route add default via 10.2.0.1\n" }, { "path": "examples/basic_ipsec/mesh/spec.yaml", "content": "---\nnodes:\n- name: R1\n image: tinet/cloudvpn\n interfaces:\n - { name: net0, type: bridge, args: B0 }\n - { name: net1, type: direct, args: N1#net0 }\n- name: R2\n image: tinet/cloudvpn\n interfaces:\n - { name: net0, type: bridge, args: B0 }\n - { name: net1, type: direct, args: N1#net1 }\n- name: R3\n image: tinet/cloudvpn\n interfaces:\n - { name: net0, type: bridge, args: B0 }\n - { name: net1, type: direct, args: N2#net0 }\n- name: R4\n image: tinet/cloudvpn\n interfaces:\n - { name: net0, type: bridge, args: B0 }\n - { name: net1, type: direct, args: N2#net1 }\n- name: N1\n image: tinet/cloudvpn\n interfaces:\n - { name: net0, type: direct, args: R1#net1 }\n - { name: net1, type: direct, args: R2#net1 }\n - { name: net2, type: direct, args: C1#net0 }\n sysctls:\n - { sysctl: net.ipv4.fib_multipath_hash_policy=1 }\n- name: N2\n image: tinet/cloudvpn\n interfaces:\n - { name: net0, type: direct, args: R3#net1 }\n - { name: net1, type: direct, args: R4#net1 }\n - { name: net2, type: direct, args: C2#net0 }\n sysctls:\n - { sysctl: net.ipv4.fib_multipath_hash_policy=1 }\n- name: C1\n image: slankdev/tmp\n interfaces:\n - { name: net0, type: direct, args: N1#net2 }\n- name: C2\n image: slankdev/tmp\n interfaces:\n - { name: net0, type: direct, args: N2#net2 }\n\nswitches:\n- name: B0\n interfaces:\n - { name: net0, type: container, args: R1 }\n - { name: net0, type: container, args: R2 }\n - { name: net0, type: container, args: R3 }\n - { name: net0, type: container, args: R4 }\n\nnode_configs:\n\n- name: R1\n cmds:\n - cmd: ip addr add 20.0.0.1/24 dev net0\n - cmd: ip addr add 10.1.0.100/24 dev net1\n\n - cmd: ip link add vti0 type vti key 100 remote 20.0.0.3 local 20.0.0.1\n - cmd: ip link set vti0 up\n - cmd: sysctl -w net.ipv4.conf.vti0.disable_policy=1\n - cmd: ip addr add 169.254.0.1/32 remote 169.254.0.3/32 dev vti0\n\n - cmd: ip link add vti1 type vti key 101 remote 20.0.0.4 local 20.0.0.1\n - cmd: ip link set vti1 up\n - cmd: sysctl -w net.ipv4.conf.vti1.disable_policy=1\n - cmd: ip addr add 169.254.0.1/32 remote 169.254.0.4/32 dev vti1\n\n - cmd: /usr/libexec/ipsec/addconn --config /etc/ipsec.conf --checkconfig\n - cmd: /usr/libexec/ipsec/_stackmanager start\n - cmd: /usr/sbin/ipsec --checknss\n - cmd: /usr/sbin/ipsec --checknflog\n - cmd: /usr/libexec/ipsec/pluto --leak-detective --config /etc/ipsec.conf\n\n- name: R2\n cmds:\n - cmd: ip addr add 20.0.0.2/24 dev net0\n - cmd: ip addr add 10.1.0.101/24 dev net1\n\n - cmd: ip link add vti0 type vti key 100 remote 20.0.0.3 local 20.0.0.2\n - cmd: ip link set vti0 up\n - cmd: sysctl -w net.ipv4.conf.vti0.disable_policy=1\n - cmd: ip addr add 169.254.0.2/32 remote 169.254.0.3/32 dev vti0\n\n - cmd: ip link add vti1 type vti key 101 remote 20.0.0.4 local 20.0.0.2\n - cmd: ip link set vti1 up\n - cmd: sysctl -w net.ipv4.conf.vti1.disable_policy=1\n - cmd: ip addr add 169.254.0.2/32 remote 169.254.0.4/32 dev vti1\n\n - cmd: /usr/libexec/ipsec/addconn --config /etc/ipsec.conf --checkconfig\n - cmd: /usr/libexec/ipsec/_stackmanager start\n - cmd: /usr/sbin/ipsec --checknss\n - cmd: /usr/sbin/ipsec --checknflog\n - cmd: /usr/libexec/ipsec/pluto --leak-detective --config /etc/ipsec.conf\n\n- name: R3\n cmds:\n - cmd: ip addr add 20.0.0.3/24 dev net0\n - cmd: ip addr add 10.2.0.100/24 dev net1\n\n - cmd: ip link add vti0 type vti key 100 remote 20.0.0.1 local 20.0.0.3\n - cmd: ip link set vti0 up\n - cmd: sysctl -w net.ipv4.conf.vti0.disable_policy=1\n - cmd: ip addr add 169.254.0.3/32 remote 169.254.0.1/32 dev vti0\n\n - cmd: ip link add vti1 type vti key 101 remote 20.0.0.2 local 20.0.0.3\n - cmd: ip link set vti1 up\n - cmd: sysctl -w net.ipv4.conf.vti1.disable_policy=1\n - cmd: ip addr add 169.254.0.3/32 remote 169.254.0.2/32 dev vti1\n\n - cmd: /usr/libexec/ipsec/addconn --config /etc/ipsec.conf --checkconfig\n - cmd: /usr/libexec/ipsec/_stackmanager start\n - cmd: /usr/sbin/ipsec --checknss\n - cmd: /usr/sbin/ipsec --checknflog\n - cmd: /usr/libexec/ipsec/pluto --leak-detective --config /etc/ipsec.conf\n\n- name: R4\n cmds:\n - cmd: ip addr add 20.0.0.4/24 dev net0\n - cmd: ip addr add 10.2.0.101/24 dev net1\n\n - cmd: ip link add vti0 type vti key 100 remote 20.0.0.1 local 20.0.0.4\n - cmd: ip link set vti0 up\n - cmd: sysctl -w net.ipv4.conf.vti0.disable_policy=1\n - cmd: ip addr add 169.254.0.4/32 remote 169.254.0.1/32 dev vti0\n\n - cmd: ip link add vti1 type vti key 101 remote 20.0.0.2 local 20.0.0.4\n - cmd: ip link set vti1 up\n - cmd: sysctl -w net.ipv4.conf.vti1.disable_policy=1\n - cmd: ip addr add 169.254.0.4/32 remote 169.254.0.2/32 dev vti1\n\n - cmd: /usr/libexec/ipsec/addconn --config /etc/ipsec.conf --checkconfig\n - cmd: /usr/libexec/ipsec/_stackmanager start\n - cmd: /usr/sbin/ipsec --checknss\n - cmd: /usr/sbin/ipsec --checknflog\n - cmd: /usr/libexec/ipsec/pluto --leak-detective --config /etc/ipsec.conf\n\n- name: N1\n cmds:\n - cmd: ip addr add 10.1.0.1/24 dev net0\n - cmd: ip addr add 10.1.0.1/24 dev net1\n - cmd: ip addr add 10.1.0.1/24 dev net2\n - cmd: ip route add 10.1.0.100/32 dev net0\n - cmd: ip route add 10.1.0.101/32 dev net1\n - cmd: ip route add 10.1.0.10/32 dev net2\n - cmd: sysctl -w net.ipv4.conf.net0.proxy_arp=1\n - cmd: sysctl -w net.ipv4.conf.net1.proxy_arp=1\n - cmd: sysctl -w net.ipv4.conf.net2.proxy_arp=1\n\n- name: N1\n cmds:\n - cmd: ip addr add 10.2.0.1/24 dev net0\n - cmd: ip addr add 10.2.0.1/24 dev net1\n - cmd: ip addr add 10.2.0.1/24 dev net2\n - cmd: ip route add 10.2.0.100/32 dev net0\n - cmd: ip route add 10.2.0.101/32 dev net1\n - cmd: ip route add 10.2.0.10/32 dev net2\n - cmd: sysctl -w net.ipv4.conf.net0.proxy_arp=1\n - cmd: sysctl -w net.ipv4.conf.net1.proxy_arp=1\n - cmd: sysctl -w net.ipv4.conf.net2.proxy_arp=1\n\n- name: C1\n cmds:\n - cmd: ip addr add 10.1.0.10/24 dev net0\n - cmd: ip route add default via 10.1.0.1\n\n- name: C2\n cmds:\n - cmd: ip addr add 10.2.0.10/24 dev net0\n - cmd: ip route add default via 10.2.0.1\n\npostinit:\n cmds:\n - cmd: |\n cat </tmp/r1_vpn1.secrets\n : PSK \"sekainoichihara\"\n EOF\n - cmd: |\n cat </tmp/r1_vpn2.secrets\n : PSK \"sekainoichihara\"\n EOF\n - cmd: |\n cat </tmp/r1_vpn1.conf\n conn vpn1\n authby=secret\n left=20.0.0.1\n right=20.0.0.3\n leftsubnet=0.0.0.0/0\n rightsubnet=0.0.0.0/0\n auto=start\n mark=100/0xffffffff\n vti-interface=vti0\n vti-routing=no\n dpddelay=10\n dpdtimeout=5\n dpdaction=restart\n EOF\n - cmd: |\n cat </tmp/r1_vpn2.conf\n conn vpn2\n authby=secret\n left=20.0.0.1\n right=20.0.0.4\n leftsubnet=0.0.0.0/0\n rightsubnet=0.0.0.0/0\n auto=start\n mark=101/0xffffffff\n vti-interface=vti1\n vti-routing=no\n dpddelay=10\n dpdtimeout=5\n dpdaction=restart\n EOF\n - cmd: docker cp /tmp/r1_vpn1.secrets R1:/etc/ipsec.d/vpn1.secrets\n - cmd: docker cp /tmp/r1_vpn2.secrets R1:/etc/ipsec.d/vpn2.secrets\n - cmd: docker cp /tmp/r1_vpn1.conf R1:/etc/ipsec.d/vpn1.conf\n - cmd: docker cp /tmp/r1_vpn2.conf R1:/etc/ipsec.d/vpn2.conf\n\n - cmd: |\n cat </tmp/r2_vpn1.secrets\n : PSK \"sekainoichihara\"\n EOF\n - cmd: |\n cat </tmp/r2_vpn2.secrets\n : PSK \"sekainoichihara\"\n EOF\n - cmd: |\n cat </tmp/r2_vpn1.conf\n conn vpn1\n authby=secret\n left=20.0.0.2\n right=20.0.0.3\n leftsubnet=0.0.0.0/0\n rightsubnet=0.0.0.0/0\n auto=start\n mark=100/0xffffffff\n vti-interface=vti0\n vti-routing=no\n dpddelay=10\n dpdtimeout=5\n dpdaction=restart\n EOF\n - cmd: |\n cat </tmp/r2_vpn2.conf\n conn vpn2\n authby=secret\n left=20.0.0.2\n right=20.0.0.4\n leftsubnet=0.0.0.0/0\n rightsubnet=0.0.0.0/0\n auto=start\n mark=101/0xffffffff\n vti-interface=vti1\n vti-routing=no\n dpddelay=10\n dpdtimeout=5\n dpdaction=restart\n EOF\n - cmd: docker cp /tmp/r2_vpn1.secrets R2:/etc/ipsec.d/vpn1.secrets\n - cmd: docker cp /tmp/r2_vpn2.secrets R2:/etc/ipsec.d/vpn2.secrets\n - cmd: docker cp /tmp/r2_vpn1.conf R2:/etc/ipsec.d/vpn1.conf\n - cmd: docker cp /tmp/r2_vpn2.conf R2:/etc/ipsec.d/vpn2.conf\n\n - cmd: |\n cat </tmp/r3_vpn1.secrets\n : PSK \"sekainoichihara\"\n EOF\n - cmd: |\n cat </tmp/r3_vpn2.secrets\n : PSK \"sekainoichihara\"\n EOF\n - cmd: |\n cat </tmp/r3_vpn1.conf\n conn vpn1\n authby=secret\n left=20.0.0.3\n right=20.0.0.1\n leftsubnet=0.0.0.0/0\n rightsubnet=0.0.0.0/0\n auto=start\n mark=100/0xffffffff\n vti-interface=vti0\n vti-routing=no\n dpddelay=10\n dpdtimeout=5\n dpdaction=restart\n EOF\n - cmd: |\n cat </tmp/r3_vpn2.conf\n conn vpn2\n authby=secret\n left=20.0.0.3\n right=20.0.0.2\n leftsubnet=0.0.0.0/0\n rightsubnet=0.0.0.0/0\n auto=start\n mark=101/0xffffffff\n vti-interface=vti1\n vti-routing=no\n dpddelay=10\n dpdtimeout=5\n dpdaction=restart\n EOF\n - cmd: docker cp /tmp/r3_vpn1.secrets R3:/etc/ipsec.d/vpn1.secrets\n - cmd: docker cp /tmp/r3_vpn2.secrets R3:/etc/ipsec.d/vpn2.secrets\n - cmd: docker cp /tmp/r3_vpn1.conf R3:/etc/ipsec.d/vpn1.conf\n - cmd: docker cp /tmp/r3_vpn2.conf R3:/etc/ipsec.d/vpn2.conf\n\n - cmd: |\n cat </tmp/r4_vpn1.secrets\n : PSK \"sekainoichihara\"\n EOF\n - cmd: |\n cat </tmp/r4_vpn2.secrets\n : PSK \"sekainoichihara\"\n EOF\n - cmd: |\n cat </tmp/r4_vpn1.conf\n conn vpn1\n authby=secret\n left=20.0.0.4\n right=20.0.0.1\n leftsubnet=0.0.0.0/0\n rightsubnet=0.0.0.0/0\n auto=start\n mark=100/0xffffffff\n vti-interface=vti0\n vti-routing=no\n dpddelay=10\n dpdtimeout=5\n dpdaction=restart\n EOF\n - cmd: |\n cat </tmp/r4_vpn2.conf\n conn vpn2\n authby=secret\n left=20.0.0.4\n right=20.0.0.2\n leftsubnet=0.0.0.0/0\n rightsubnet=0.0.0.0/0\n auto=start\n mark=101/0xffffffff\n vti-interface=vti1\n vti-routing=no\n dpddelay=10\n dpdtimeout=5\n dpdaction=restart\n EOF\n - cmd: docker cp /tmp/r4_vpn1.secrets R4:/etc/ipsec.d/vpn1.secrets\n - cmd: docker cp /tmp/r4_vpn2.secrets R4:/etc/ipsec.d/vpn2.secrets\n - cmd: docker cp /tmp/r4_vpn1.conf R4:/etc/ipsec.d/vpn1.conf\n - cmd: docker cp /tmp/r4_vpn2.conf R4:/etc/ipsec.d/vpn2.conf\n" }, { "path": "examples/basic_ipsec/mesh_bgp/spec.yaml", "content": "---\nnodes:\n- name: R1\n image: tinet/cloudvpn\n interfaces:\n - { name: net0, type: bridge, args: B0 }\n - { name: net1, type: direct, args: N1#net0 }\n- name: R2\n image: tinet/cloudvpn\n interfaces:\n - { name: net0, type: bridge, args: B0 }\n - { name: net1, type: direct, args: N1#net1 }\n- name: R3\n image: tinet/cloudvpn\n interfaces:\n - { name: net0, type: bridge, args: B0 }\n - { name: net1, type: direct, args: N2#net0 }\n- name: R4\n image: tinet/cloudvpn\n interfaces:\n - { name: net0, type: bridge, args: B0 }\n - { name: net1, type: direct, args: N2#net1 }\n- name: N1\n image: tinet/cloudvpn\n interfaces:\n - { name: net0, type: direct, args: R1#net1 }\n - { name: net1, type: direct, args: R2#net1 }\n - { name: net2, type: direct, args: C1#net0 }\n sysctls:\n - { sysctl: net.ipv4.fib_multipath_hash_policy=1 }\n- name: N2\n image: tinet/cloudvpn\n interfaces:\n - { name: net0, type: direct, args: R3#net1 }\n - { name: net1, type: direct, args: R4#net1 }\n - { name: net2, type: direct, args: C2#net0 }\n sysctls:\n - { sysctl: net.ipv4.fib_multipath_hash_policy=1 }\n- name: C1\n image: slankdev/tmp\n interfaces:\n - { name: net0, type: direct, args: N1#net2 }\n- name: C2\n image: slankdev/tmp\n interfaces:\n - { name: net0, type: direct, args: N2#net2 }\n\nswitches:\n- name: B0\n interfaces:\n - { name: net0, type: container, args: R1 }\n - { name: net0, type: container, args: R2 }\n - { name: net0, type: container, args: R3 }\n - { name: net0, type: container, args: R4 }\n\nnode_configs:\n\n- name: R1\n cmds:\n - cmd: ip addr add 20.0.0.1/24 dev net0\n - cmd: ip addr add 10.1.0.100/24 dev net1\n\n - cmd: ip link add vti0 type vti key 100 remote 20.0.0.3 local 20.0.0.1\n - cmd: ip link set vti0 up\n - cmd: sysctl -w net.ipv4.conf.vti0.disable_policy=1\n - cmd: ip addr add 169.254.0.1/32 remote 169.254.0.3/32 dev vti0\n\n - cmd: ip link add vti1 type vti key 101 remote 20.0.0.4 local 20.0.0.1\n - cmd: ip link set vti1 up\n - cmd: sysctl -w net.ipv4.conf.vti1.disable_policy=1\n - cmd: ip addr add 169.254.0.1/32 remote 169.254.0.4/32 dev vti1\n\n - cmd: /usr/libexec/ipsec/addconn --config /etc/ipsec.conf --checkconfig\n - cmd: /usr/libexec/ipsec/_stackmanager start\n - cmd: /usr/sbin/ipsec --checknss\n - cmd: /usr/sbin/ipsec --checknflog\n - cmd: /usr/libexec/ipsec/pluto --leak-detective --config /etc/ipsec.conf\n\n - cmd: sed -i -e \"s/bgpd=no/bgpd=yes/g\" /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'router bgp 65001'\n -c ' bgp router-id 169.254.0.1'\n -c ' neighbor 169.254.0.3 remote-as 65002'\n -c ' neighbor 169.254.0.4 remote-as 65002'\n -c ' !'\n -c ' address-family ipv4 unicast'\n -c ' network 10.1.0.0/24'\n -c ' exit-address-family'\n -c '!'\n\n- name: R2\n cmds:\n - cmd: ip addr add 20.0.0.2/24 dev net0\n - cmd: ip addr add 10.1.0.101/24 dev net1\n\n - cmd: ip link add vti0 type vti key 100 remote 20.0.0.3 local 20.0.0.2\n - cmd: ip link set vti0 up\n - cmd: sysctl -w net.ipv4.conf.vti0.disable_policy=1\n - cmd: ip addr add 169.254.0.2/32 remote 169.254.0.3/32 dev vti0\n\n - cmd: ip link add vti1 type vti key 101 remote 20.0.0.4 local 20.0.0.2\n - cmd: ip link set vti1 up\n - cmd: sysctl -w net.ipv4.conf.vti1.disable_policy=1\n - cmd: ip addr add 169.254.0.2/32 remote 169.254.0.4/32 dev vti1\n\n - cmd: /usr/libexec/ipsec/addconn --config /etc/ipsec.conf --checkconfig\n - cmd: /usr/libexec/ipsec/_stackmanager start\n - cmd: /usr/sbin/ipsec --checknss\n - cmd: /usr/sbin/ipsec --checknflog\n - cmd: /usr/libexec/ipsec/pluto --leak-detective --config /etc/ipsec.conf\n\n - cmd: sed -i -e \"s/bgpd=no/bgpd=yes/g\" /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'router bgp 65001'\n -c ' bgp router-id 169.254.0.2'\n -c ' neighbor 169.254.0.3 remote-as 65002'\n -c ' neighbor 169.254.0.4 remote-as 65002'\n -c ' !'\n -c ' address-family ipv4 unicast'\n -c ' network 10.1.0.0/24'\n -c ' exit-address-family'\n -c '!'\n\n- name: R3\n cmds:\n - cmd: ip addr add 20.0.0.3/24 dev net0\n - cmd: ip addr add 10.2.0.100/24 dev net1\n\n - cmd: ip link add vti0 type vti key 100 remote 20.0.0.1 local 20.0.0.3\n - cmd: ip link set vti0 up\n - cmd: sysctl -w net.ipv4.conf.vti0.disable_policy=1\n - cmd: ip addr add 169.254.0.3/32 remote 169.254.0.1/32 dev vti0\n\n - cmd: ip link add vti1 type vti key 101 remote 20.0.0.2 local 20.0.0.3\n - cmd: ip link set vti1 up\n - cmd: sysctl -w net.ipv4.conf.vti1.disable_policy=1\n - cmd: ip addr add 169.254.0.3/32 remote 169.254.0.2/32 dev vti1\n\n - cmd: /usr/libexec/ipsec/addconn --config /etc/ipsec.conf --checkconfig\n - cmd: /usr/libexec/ipsec/_stackmanager start\n - cmd: /usr/sbin/ipsec --checknss\n - cmd: /usr/sbin/ipsec --checknflog\n - cmd: /usr/libexec/ipsec/pluto --leak-detective --config /etc/ipsec.conf\n\n - cmd: sed -i -e \"s/bgpd=no/bgpd=yes/g\" /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'router bgp 65002'\n -c ' bgp router-id 169.254.0.3'\n -c ' neighbor 169.254.0.1 remote-as 65001'\n -c ' neighbor 169.254.0.2 remote-as 65001'\n -c ' !'\n -c ' address-family ipv4 unicast'\n -c ' network 10.2.0.0/24'\n -c ' exit-address-family'\n -c '!'\n\n- name: R4\n cmds:\n - cmd: ip addr add 20.0.0.4/24 dev net0\n - cmd: ip addr add 10.2.0.101/24 dev net1\n\n - cmd: ip link add vti0 type vti key 100 remote 20.0.0.1 local 20.0.0.4\n - cmd: ip link set vti0 up\n - cmd: sysctl -w net.ipv4.conf.vti0.disable_policy=1\n - cmd: ip addr add 169.254.0.4/32 remote 169.254.0.1/32 dev vti0\n\n - cmd: ip link add vti1 type vti key 101 remote 20.0.0.2 local 20.0.0.4\n - cmd: ip link set vti1 up\n - cmd: sysctl -w net.ipv4.conf.vti1.disable_policy=1\n - cmd: ip addr add 169.254.0.4/32 remote 169.254.0.2/32 dev vti1\n\n - cmd: /usr/libexec/ipsec/addconn --config /etc/ipsec.conf --checkconfig\n - cmd: /usr/libexec/ipsec/_stackmanager start\n - cmd: /usr/sbin/ipsec --checknss\n - cmd: /usr/sbin/ipsec --checknflog\n - cmd: /usr/libexec/ipsec/pluto --leak-detective --config /etc/ipsec.conf\n\n - cmd: sed -i -e \"s/bgpd=no/bgpd=yes/g\" /etc/frr/daemons\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'router bgp 65002'\n -c ' bgp router-id 169.254.0.4'\n -c ' neighbor 169.254.0.1 remote-as 65001'\n -c ' neighbor 169.254.0.2 remote-as 65001'\n -c ' !'\n -c ' address-family ipv4 unicast'\n -c ' network 10.2.0.0/24'\n -c ' exit-address-family'\n -c '!'\n\n- name: N1\n cmds:\n - cmd: ip addr add 10.1.0.1/24 dev net0\n - cmd: ip addr add 10.1.0.1/24 dev net1\n - cmd: ip addr add 10.1.0.1/24 dev net2\n - cmd: ip route add 10.1.0.100/32 dev net0\n - cmd: ip route add 10.1.0.101/32 dev net1\n - cmd: ip route add 10.1.0.10/32 dev net2\n - cmd: sysctl -w net.ipv4.conf.net0.proxy_arp=1\n - cmd: sysctl -w net.ipv4.conf.net1.proxy_arp=1\n - cmd: sysctl -w net.ipv4.conf.net2.proxy_arp=1\n - cmd: >-\n ip route add default\n nexthop via 10.1.0.100 dev net0\n nexthop via 10.1.0.101 dev net1\n\n- name: N2\n cmds:\n - cmd: ip addr add 10.2.0.1/24 dev net0\n - cmd: ip addr add 10.2.0.1/24 dev net1\n - cmd: ip addr add 10.2.0.1/24 dev net2\n - cmd: ip route add 10.2.0.100/32 dev net0\n - cmd: ip route add 10.2.0.101/32 dev net1\n - cmd: ip route add 10.2.0.10/32 dev net2\n - cmd: sysctl -w net.ipv4.conf.net0.proxy_arp=1\n - cmd: sysctl -w net.ipv4.conf.net1.proxy_arp=1\n - cmd: sysctl -w net.ipv4.conf.net2.proxy_arp=1\n - cmd: >-\n ip route add default\n nexthop via 10.2.0.100 dev net0\n nexthop via 10.2.0.101 dev net1\n\n- name: C1\n cmds:\n - cmd: ip addr add 10.1.0.10/24 dev net0\n - cmd: ip route add default via 10.1.0.1\n\n- name: C2\n cmds:\n - cmd: ip addr add 10.2.0.10/24 dev net0\n - cmd: ip route add default via 10.2.0.1\n\npostinit:\n cmds:\n - cmd: |\n cat </tmp/r1_vpn1.secrets\n : PSK \"sekainoichihara\"\n EOF\n - cmd: |\n cat </tmp/r1_vpn2.secrets\n : PSK \"sekainoichihara\"\n EOF\n - cmd: |\n cat </tmp/r1_vpn1.conf\n conn vpn1\n authby=secret\n left=20.0.0.1\n right=20.0.0.3\n leftsubnet=0.0.0.0/0\n rightsubnet=0.0.0.0/0\n auto=start\n mark=100/0xffffffff\n vti-interface=vti0\n vti-routing=no\n dpddelay=10\n dpdtimeout=5\n dpdaction=restart\n ike=aes_cbc128-sha2_256;dh19\n phase2alg=aes_gcm128;dh19\n remote_peer_type=cisco\n EOF\n - cmd: |\n cat </tmp/r1_vpn2.conf\n conn vpn2\n authby=secret\n left=20.0.0.1\n right=20.0.0.4\n leftsubnet=0.0.0.0/0\n rightsubnet=0.0.0.0/0\n auto=start\n mark=101/0xffffffff\n vti-interface=vti1\n vti-routing=no\n dpddelay=10\n dpdtimeout=5\n dpdaction=restart\n ike=aes_cbc128-sha2_256;dh19\n phase2alg=aes_gcm128;dh19\n remote_peer_type=cisco\n EOF\n - cmd: docker cp /tmp/r1_vpn1.secrets R1:/etc/ipsec.d/vpn1.secrets\n - cmd: docker cp /tmp/r1_vpn2.secrets R1:/etc/ipsec.d/vpn2.secrets\n - cmd: docker cp /tmp/r1_vpn1.conf R1:/etc/ipsec.d/vpn1.conf\n - cmd: docker cp /tmp/r1_vpn2.conf R1:/etc/ipsec.d/vpn2.conf\n\n - cmd: |\n cat </tmp/r2_vpn1.secrets\n : PSK \"sekainoichihara\"\n EOF\n - cmd: |\n cat </tmp/r2_vpn2.secrets\n : PSK \"sekainoichihara\"\n EOF\n - cmd: |\n cat </tmp/r2_vpn1.conf\n conn vpn1\n authby=secret\n left=20.0.0.2\n right=20.0.0.3\n leftsubnet=0.0.0.0/0\n rightsubnet=0.0.0.0/0\n auto=start\n mark=100/0xffffffff\n vti-interface=vti0\n vti-routing=no\n dpddelay=10\n dpdtimeout=5\n dpdaction=restart\n ike=aes_cbc128-sha2_256;dh19\n phase2alg=aes_gcm128;dh19\n remote_peer_type=cisco\n EOF\n - cmd: |\n cat </tmp/r2_vpn2.conf\n conn vpn2\n authby=secret\n left=20.0.0.2\n right=20.0.0.4\n leftsubnet=0.0.0.0/0\n rightsubnet=0.0.0.0/0\n auto=start\n mark=101/0xffffffff\n vti-interface=vti1\n vti-routing=no\n dpddelay=10\n dpdtimeout=5\n dpdaction=restart\n ike=aes_cbc128-sha2_256;dh19\n phase2alg=aes_gcm128;dh19\n remote_peer_type=cisco\n EOF\n - cmd: docker cp /tmp/r2_vpn1.secrets R2:/etc/ipsec.d/vpn1.secrets\n - cmd: docker cp /tmp/r2_vpn2.secrets R2:/etc/ipsec.d/vpn2.secrets\n - cmd: docker cp /tmp/r2_vpn1.conf R2:/etc/ipsec.d/vpn1.conf\n - cmd: docker cp /tmp/r2_vpn2.conf R2:/etc/ipsec.d/vpn2.conf\n\n - cmd: |\n cat </tmp/r3_vpn1.secrets\n : PSK \"sekainoichihara\"\n EOF\n - cmd: |\n cat </tmp/r3_vpn2.secrets\n : PSK \"sekainoichihara\"\n EOF\n - cmd: |\n cat </tmp/r3_vpn1.conf\n conn vpn1\n authby=secret\n left=20.0.0.3\n right=20.0.0.1\n leftsubnet=0.0.0.0/0\n rightsubnet=0.0.0.0/0\n auto=start\n mark=100/0xffffffff\n vti-interface=vti0\n vti-routing=no\n dpddelay=10\n dpdtimeout=5\n dpdaction=restart\n ike=aes_cbc128-sha2_256;dh19\n phase2alg=aes_gcm128;dh19\n remote_peer_type=cisco\n EOF\n - cmd: |\n cat </tmp/r3_vpn2.conf\n conn vpn2\n authby=secret\n left=20.0.0.3\n right=20.0.0.2\n leftsubnet=0.0.0.0/0\n rightsubnet=0.0.0.0/0\n auto=start\n mark=101/0xffffffff\n vti-interface=vti1\n vti-routing=no\n dpddelay=10\n dpdtimeout=5\n dpdaction=restart\n ike=aes_cbc128-sha2_256;dh19\n phase2alg=aes_gcm128;dh19\n remote_peer_type=cisco\n EOF\n - cmd: docker cp /tmp/r3_vpn1.secrets R3:/etc/ipsec.d/vpn1.secrets\n - cmd: docker cp /tmp/r3_vpn2.secrets R3:/etc/ipsec.d/vpn2.secrets\n - cmd: docker cp /tmp/r3_vpn1.conf R3:/etc/ipsec.d/vpn1.conf\n - cmd: docker cp /tmp/r3_vpn2.conf R3:/etc/ipsec.d/vpn2.conf\n\n - cmd: |\n cat </tmp/r4_vpn1.secrets\n : PSK \"sekainoichihara\"\n EOF\n - cmd: |\n cat </tmp/r4_vpn2.secrets\n : PSK \"sekainoichihara\"\n EOF\n - cmd: |\n cat </tmp/r4_vpn1.conf\n conn vpn1\n authby=secret\n left=20.0.0.4\n right=20.0.0.1\n leftsubnet=0.0.0.0/0\n rightsubnet=0.0.0.0/0\n auto=start\n mark=100/0xffffffff\n vti-interface=vti0\n vti-routing=no\n dpddelay=10\n dpdtimeout=5\n dpdaction=restart\n ike=aes_cbc128-sha2_256;dh19\n phase2alg=aes_gcm128;dh19\n remote_peer_type=cisco\n EOF\n - cmd: |\n cat </tmp/r4_vpn2.conf\n conn vpn2\n authby=secret\n left=20.0.0.4\n right=20.0.0.2\n leftsubnet=0.0.0.0/0\n rightsubnet=0.0.0.0/0\n auto=start\n mark=101/0xffffffff\n vti-interface=vti1\n vti-routing=no\n dpddelay=10\n dpdtimeout=5\n dpdaction=restart\n ike=aes_cbc128-sha2_256;dh19\n phase2alg=aes_gcm128;dh19\n remote_peer_type=cisco\n EOF\n - cmd: docker cp /tmp/r4_vpn1.secrets R4:/etc/ipsec.d/vpn1.secrets\n - cmd: docker cp /tmp/r4_vpn2.secrets R4:/etc/ipsec.d/vpn2.secrets\n - cmd: docker cp /tmp/r4_vpn1.conf R4:/etc/ipsec.d/vpn1.conf\n - cmd: docker cp /tmp/r4_vpn2.conf R4:/etc/ipsec.d/vpn2.conf\n" }, { "path": "examples/basic_ipsec/simple/README.md", "content": "\n## IPsec Example\n\n- libreswan\n\n```bash\n> docker exec R1 ipsec status | grep \"Total IPsec connections\" -A5\n000 Total IPsec connections: loaded 1, active 1\n000\n000 State Information: DDoS cookies not required, Accepting new IKE connections\n000 IKE SAs: total(2), half-open(0), open(0), authenticated(2), anonymous(0)\n000 IPsec SAs: total(2), authenticated(2), anonymous(0)\n000\n```\n" }, { "path": "examples/basic_ipsec/simple/spec.yaml", "content": "---\npostinit:\n cmds:\n - cmd: |\n cat </tmp/vpn1.r1.secrets\n : PSK \"vpn1\"\n EOF\n - cmd: |\n cat </tmp/vpn1.r2.secrets\n : PSK \"vpn1\"\n EOF\n - cmd: |\n cat </tmp/vpn1.r1.conf\n conn vpn1\n left=10.0.0.1\n leftsubnet=10.1.0.0/24\n right=10.0.0.2\n rightsubnet=10.2.0.0/24\n auto=start\n authby=secret\n dpddelay=10\n dpdtimeout=5\n dpdaction=restart\n EOF\n - cmd: |\n cat </tmp/vpn1.r2.conf\n conn vpn1\n left=10.0.0.2\n leftsubnet=10.2.0.0/24\n right=10.0.0.1\n rightsubnet=10.1.0.0/24\n auto=start\n authby=secret\n dpddelay=10\n dpdtimeout=5\n dpdaction=restart\n EOF\n - cmd: docker cp /tmp/vpn1.r1.secrets R1:/etc/ipsec.d/vpn1.secrets\n - cmd: docker cp /tmp/vpn1.r2.secrets R2:/etc/ipsec.d/vpn1.secrets\n - cmd: docker cp /tmp/vpn1.r1.conf R1:/etc/ipsec.d/vpn1.conf\n - cmd: docker cp /tmp/vpn1.r2.conf R2:/etc/ipsec.d/vpn1.conf\n - cmd: docker exec R1 chmod 600 /etc/ipsec.d/vpn1.conf\n - cmd: docker exec R1 chmod 600 /etc/ipsec.d/vpn1.secrets\n - cmd: docker exec R2 chmod 600 /etc/ipsec.d/vpn1.conf\n - cmd: docker exec R2 chmod 600 /etc/ipsec.d/vpn1.secrets\n\nnodes:\n- name: R1\n image: tinet/centos:centos7\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - { name: net1, type: direct, args: C1#net0 }\n- name: R2\n image: tinet/centos:centos7\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - { name: net1, type: direct, args: C2#net0 }\n- name: C1\n image: tinet/centos:centos7\n interfaces:\n - { name: net0, type: direct, args: R1#net1 }\n- name: C2\n image: tinet/centos:centos7\n interfaces:\n - { name: net0, type: direct, args: R2#net1 }\n\nnode_configs:\n- name: R1\n cmds:\n - cmd: ip addr add 10.0.0.1/24 dev net0\n - cmd: ip addr add 10.1.0.1/24 dev net1\n - cmd: ip route add 10.2.0.0/24 via 10.0.0.2\n\n - cmd: /usr/libexec/ipsec/addconn --config /etc/ipsec.conf --checkconfig\n - cmd: /usr/libexec/ipsec/_stackmanager start\n - cmd: /usr/sbin/ipsec --checknss\n - cmd: /usr/sbin/ipsec --checknflog\n - cmd: /usr/libexec/ipsec/pluto --leak-detective --config /etc/ipsec.conf\n\n- name: R2\n cmds:\n - cmd: ip addr add 10.0.0.2/24 dev net0\n - cmd: ip addr add 10.2.0.1/24 dev net1\n - cmd: ip route add 10.1.0.0/24 via 10.0.0.1\n\n - cmd: /usr/libexec/ipsec/addconn --config /etc/ipsec.conf --checkconfig\n - cmd: /usr/libexec/ipsec/_stackmanager start\n - cmd: /usr/sbin/ipsec --checknss\n - cmd: /usr/sbin/ipsec --checknflog\n - cmd: /usr/libexec/ipsec/pluto --leak-detective --config /etc/ipsec.conf\n\n- name: C1\n cmds:\n - cmd: ip addr add 10.1.0.2/24 dev net0\n - cmd: ip route add default via 10.1.0.1\n- name: C2\n cmds:\n - cmd: ip addr add 10.2.0.2/24 dev net0\n - cmd: ip route add default via 10.2.0.1\n" }, { "path": "examples/basic_ipsec/static_esp_tunnel_simple/README.md", "content": "# Simple statically-configured ESP tunnel mode example just works\n\nEstablish SA bidirectionally between R0 and R1. Apply xfrm allow policy for the traffic between C0 and C1.\n\n![topo](topo.png)\n\n## Demo\n\nTry `tinet test`. Below is an example output. You can see the ICMP packets are correctly encapsulated with ESP header.\n\n```\n===================================================\nStarting packet capture on R0 (net1) and R1 (net1)\n===================================================\ntcpdump: listening on net1, link-type EN10MB (Ethernet), snapshot length 262144 bytes\ntcpdump: listening on net1, link-type EN10MB (Ethernet), snapshot length 262144 bytes\n===================================================\nping from C0 to C1\n===================================================\nPING 10.0.1.2 (10.0.1.2) 56(84) bytes of data.\n64 bytes from 10.0.1.2: icmp_seq=1 ttl=62 time=0.081 ms\n\n--- 10.0.1.2 ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 0.081/0.081/0.081/0.000 ms\n===================================================\nStopping packet capture on R0 (net1) and R1 (net1)\n===================================================\n5 packets captured\n5 packets received by filter\n0 packets dropped by kernel\n5 packets captured\n5 packets received by filter\n0 packets dropped by kernel\n===================================================\nPacket capture on R0 (net1)\n===================================================\n16:23:28.663259 ARP, Request who-has 192.168.0.2 tell 192.168.0.1, length 28\n16:23:28.663267 ARP, Reply 192.168.0.2 is-at c6:b7:02:a9:e9:6f, length 28\n16:23:28.663267 IP 192.168.0.1 > 192.168.0.2: ESP(spi=0x00000001,seq=0x1), length 120\n16:23:28.663294 IP 192.168.0.2 > 192.168.0.1: ESP(spi=0x00000001,seq=0x1), length 120\n16:23:28.663294 IP 10.0.1.2 > 10.0.0.2: ICMP echo reply, id 62643, seq 1, length 64\nreading from file /tmp/record.pcap, link-type EN10MB (Ethernet), snapshot length 262144\n===================================================\nPacket capture on R1 (net1)\n===================================================\n16:23:28.663261 ARP, Request who-has 192.168.0.2 tell 192.168.0.1, length 28\n16:23:28.663267 ARP, Reply 192.168.0.2 is-at c6:b7:02:a9:e9:6f, length 28\n16:23:28.663268 IP 192.168.0.1 > 192.168.0.2: ESP(spi=0x00000001,seq=0x1), length 120\n16:23:28.663268 IP 10.0.0.2 > 10.0.1.2: ICMP echo request, id 62643, seq 1, length 64\n16:23:28.663294 IP 192.168.0.2 > 192.168.0.1: ESP(spi=0x00000001,seq=0x1), length 120\nreading from file /tmp/record.pcap, link-type EN10MB (Ethernet), snapshot length 262144\n```\n" }, { "path": "examples/basic_ipsec/static_esp_tunnel_simple/spec.yaml", "content": "nodes:\n- name: C0\n image: nicolaka/netshoot:latest\n interfaces:\n - name: net0\n type: direct\n args: R0#net0\n- name: R0\n image: nicolaka/netshoot:latest\n interfaces:\n - name: net0\n type: direct\n args: C0#net0\n - name: net1\n type: direct\n args: R1#net1\n- name: R1\n image: nicolaka/netshoot:latest\n interfaces:\n - name: net0\n type: direct\n args: C1#net0\n - name: net1\n type: direct\n args: R0#net1\n- name: C1\n image: nicolaka/netshoot:latest\n interfaces:\n - name: net0\n type: direct\n args: R1#net0\nnode_configs:\n- name: C0\n cmds:\n - cmd: ip addr add 10.0.0.2/24 dev net0\n - cmd: ip route add default via 10.0.0.1\n- name: R0\n cmds:\n - cmd: ip addr add 10.0.0.1/24 dev net0\n - cmd: ip addr add 192.168.0.1/24 dev net1\n - cmd: ip route add 10.0.1.0/24 via 192.168.0.2\n - cmd: ip xfrm state add src 192.168.0.2 dst 192.168.0.1 proto esp spi 0x1 aead \"rfc4106(gcm(aes))\" 0x0000000000112233445566778899aabbccddeeff 128 mode tunnel\n - cmd: ip xfrm state add src 192.168.0.1 dst 192.168.0.2 proto esp spi 0x1 aead \"rfc4106(gcm(aes))\" 0x0000000000112233445566778899aabbccddeeff 128 mode tunnel\n - cmd: ip xfrm policy add src 10.0.0.2/32 dst 10.0.1.2/32 dir out tmpl src 192.168.0.1 dst 192.168.0.2 proto esp spi 1 mode tunnel\n - cmd: ip xfrm policy add src 10.0.1.2/32 dst 10.0.0.2/32 dir in tmpl src 192.168.0.2 dst 192.168.0.1 proto esp spi 1 mode tunnel\n - cmd: ip xfrm policy add src 10.0.1.2/32 dst 10.0.0.2/32 dir fwd tmpl src 192.168.0.2 dst 192.168.0.1 proto esp spi 1 mode tunnel\n- name: R1\n cmds:\n - cmd: ip addr add 10.0.1.1/24 dev net0\n - cmd: ip addr add 192.168.0.2/24 dev net1\n - cmd: ip route add 10.0.0.0/24 via 192.168.0.1\n - cmd: ip xfrm state add src 192.168.0.1 dst 192.168.0.2 proto esp spi 0x1 aead \"rfc4106(gcm(aes))\" 0x0000000000112233445566778899aabbccddeeff 128 mode tunnel\n - cmd: ip xfrm state add src 192.168.0.2 dst 192.168.0.1 proto esp spi 0x1 aead \"rfc4106(gcm(aes))\" 0x0000000000112233445566778899aabbccddeeff 128 mode tunnel\n - cmd: ip xfrm policy add src 10.0.1.2/32 dst 10.0.0.2/32 dir out tmpl src 192.168.0.2 dst 192.168.0.1 proto esp spi 1 mode tunnel\n - cmd: ip xfrm policy add src 10.0.0.2/32 dst 10.0.1.2/32 dir in tmpl src 192.168.0.1 dst 192.168.0.2 proto esp spi 1 mode tunnel\n - cmd: ip xfrm policy add src 10.0.0.2/32 dst 10.0.1.2/32 dir fwd tmpl src 192.168.0.1 dst 192.168.0.2 proto esp spi 1 mode tunnel\n- name: C1\n cmds:\n - cmd: ip addr add 10.0.1.2/24 dev net0\n - cmd: ip route add default via 10.0.1.1\ntest:\n - cmds:\n - cmd: echo \"===================================================\"\n - cmd: echo \"Starting packet capture on R0 (net1) and R1 (net1)\"\n - cmd: echo \"===================================================\"\n - cmd: docker exec R0 tcpdump -nni net1 -w /tmp/record.pcap 2>&1 > /dev/null &\n - cmd: docker exec R1 tcpdump -nni net1 -w /tmp/record.pcap 2>&1 > /dev/null &\n - cmd: sleep 3\n - cmd: echo \"===================================================\"\n - cmd: echo \"ping from C0 to C1\"\n - cmd: echo \"===================================================\"\n - cmd: docker exec C0 ping -c 1 10.0.1.2\n - cmd: sleep 3\n - cmd: echo \"===================================================\"\n - cmd: echo \"Stopping packet capture on R0 (net1) and R1 (net1)\"\n - cmd: echo \"===================================================\"\n - cmd: docker exec R0 pkill tcpdump\n - cmd: docker exec R1 pkill tcpdump\n - cmd: echo \"===================================================\"\n - cmd: echo \"Packet capture on R0 (net1)\"\n - cmd: echo \"===================================================\"\n - cmd: docker exec R0 tcpdump -nnr /tmp/record.pcap\n - cmd: echo \"===================================================\"\n - cmd: echo \"Packet capture on R1 (net1)\"\n - cmd: echo \"===================================================\"\n - cmd: docker exec R1 tcpdump -nnr /tmp/record.pcap\n" }, { "path": "examples/basic_ipsec/with_vti/README.md", "content": "\n## IPsec Example\n\n- libreswan\n\n```bash\n> docker exec R1 ipsec status | grep \"Total IPsec connections\" -A5\n000 Total IPsec connections: loaded 1, active 1\n000\n000 State Information: DDoS cookies not required, Accepting new IKE connections\n000 IKE SAs: total(2), half-open(0), open(0), authenticated(2), anonymous(0)\n000 IPsec SAs: total(2), authenticated(2), anonymous(0)\n000\n```\n" }, { "path": "examples/basic_ipsec/with_vti/spec.yaml", "content": "---\npostinit:\n cmds:\n - cmd: |\n cat </tmp/vpn1.r1.secrets\n : PSK \"vpn1\"\n EOF\n - cmd: |\n cat </tmp/vpn1.r2.secrets\n : PSK \"vpn1\"\n EOF\n - cmd: |\n cat </tmp/vpn1.r1.conf\n conn vpn1\n authby=secret\n left=10.0.0.1\n right=10.0.0.2\n leftsubnet=0.0.0.0/0\n rightsubnet=0.0.0.0/0\n auto=start\n mark=100/0xffffffff\n vti-interface=vti0\n vti-routing=no\n dpddelay=10\n dpdtimeout=5\n dpdaction=restart\n EOF\n - cmd: |\n cat </tmp/vpn1.r2.conf\n conn vpn1\n left=10.0.0.2\n right=10.0.0.1\n leftsubnet=0.0.0.0/0\n rightsubnet=0.0.0.0/0\n auto=start\n authby=secret\n mark=100/0xffffffff\n vti-interface=vti0\n vti-routing=no\n dpddelay=10\n dpdtimeout=5\n dpdaction=restart\n EOF\n - cmd: docker cp /tmp/vpn1.r1.secrets R1:/etc/ipsec.d/vpn1.secrets\n - cmd: docker cp /tmp/vpn1.r2.secrets R2:/etc/ipsec.d/vpn1.secrets\n - cmd: docker cp /tmp/vpn1.r1.conf R1:/etc/ipsec.d/vpn1.conf\n - cmd: docker cp /tmp/vpn1.r2.conf R2:/etc/ipsec.d/vpn1.conf\n - cmd: docker exec R1 chmod 600 /etc/ipsec.d/vpn1.conf\n - cmd: docker exec R1 chmod 600 /etc/ipsec.d/vpn1.secrets\n - cmd: docker exec R2 chmod 600 /etc/ipsec.d/vpn1.conf\n - cmd: docker exec R2 chmod 600 /etc/ipsec.d/vpn1.secrets\n\nnodes:\n- name: R1\n image: tinet/centos:centos7\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - { name: net1, type: direct, args: C1#net0 }\n- name: R2\n image: tinet/centos:centos7\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - { name: net1, type: direct, args: C2#net0 }\n- name: C1\n image: tinet/centos:centos7\n interfaces:\n - { name: net0, type: direct, args: R1#net1 }\n- name: C2\n image: tinet/centos:centos7\n interfaces:\n - { name: net0, type: direct, args: R2#net1 }\n\nnode_configs:\n- name: R1\n cmds:\n - cmd: ip addr add 10.0.0.1/24 dev net0\n - cmd: ip addr add 10.1.0.1/24 dev net1\n\n - cmd: ip link add vti0 type vti key 100 remote 10.0.0.2 local 10.0.0.1\n - cmd: ip link set vti0 up\n - cmd: sysctl -w net.ipv4.conf.vti0.disable_policy=1\n - cmd: ip route add 10.2.0.0/24 dev vti0\n - cmd: ip addr add 169.254.0.1/30 remote 169.254.0.2/30 dev vti0\n\n - cmd: /usr/libexec/ipsec/addconn --config /etc/ipsec.conf --checkconfig\n - cmd: /usr/libexec/ipsec/_stackmanager start\n - cmd: /usr/sbin/ipsec --checknss\n - cmd: /usr/sbin/ipsec --checknflog\n - cmd: /usr/libexec/ipsec/pluto --leak-detective --config /etc/ipsec.conf\n\n- name: R2\n cmds:\n - cmd: ip addr add 10.0.0.2/24 dev net0\n - cmd: ip addr add 10.2.0.1/24 dev net1\n\n - cmd: ip link add vti0 type vti key 100 remote 10.0.0.1 local 10.0.0.2\n - cmd: ip link set vti0 up\n - cmd: sysctl -w net.ipv4.conf.vti0.disable_policy=1\n - cmd: ip route add 10.1.0.0/24 dev vti0\n - cmd: ip addr add 169.254.0.2/30 remote 169.254.0.1/30 dev vti0\n\n - cmd: /usr/libexec/ipsec/addconn --config /etc/ipsec.conf --checkconfig\n - cmd: /usr/libexec/ipsec/_stackmanager start\n - cmd: /usr/sbin/ipsec --checknss\n - cmd: /usr/sbin/ipsec --checknflog\n - cmd: /usr/libexec/ipsec/pluto --leak-detective --config /etc/ipsec.conf\n\n- name: C1\n cmds:\n - cmd: ip addr add 10.1.0.2/24 dev net0\n - cmd: ip route add default via 10.1.0.1\n- name: C2\n cmds:\n - cmd: ip addr add 10.2.0.2/24 dev net0\n - cmd: ip route add default via 10.2.0.1\n" }, { "path": "examples/basic_ipsec/xfrm_interface/README.md", "content": "# Simple statically-configured ESP tunnel with XFRM Interface\n\nEstablish SA bidirectionally between R0 and R1. Apply xfrm allow policy for the traffic between C0 and C1 using [XFRM Interface](https://wiki.strongswan.org/projects/strongswan/wiki/RouteBasedVPN#XFRM-Interfaces-on-Linux).\n" }, { "path": "examples/basic_ipsec/xfrm_interface/spec.yaml", "content": "---\nnodes:\n- name: C0\n image: nicolaka/netshoot:latest\n interfaces:\n - { name: net0, type: direct, args: R0#net0 }\n- name: R0\n image: nicolaka/netshoot:latest\n interfaces:\n - { name: net0, type: direct, args: C0#net0 }\n - { name: net1, type: direct, args: R1#net1 }\n- name: R1\n image: nicolaka/netshoot:latest\n interfaces:\n - { name: net1, type: direct, args: R0#net1 }\n - { name: net0, type: direct, args: C1#net0 }\n- name: C1\n image: nicolaka/netshoot:latest\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n\nnode_configs:\n- name: C0\n cmds:\n - cmd: ip addr add 10.0.0.2/24 dev net0\n - cmd: ip route add default via 10.0.0.1\n- name: R0\n cmds:\n - cmd: ip addr add 10.0.0.1/24 dev net0\n - cmd: ip addr add 192.168.0.1/24 dev net1\n - cmd: ip link add type xfrm dev net1 if_id 1\n # if_id 1 are important in below. We need to match it to the if_id 1 passed in above. So that the policies/states\n # are not evaluated in the regular xfrm path (which lies in the middle of routing and device) and only evaluated\n # inside the XFRM device.\n - cmd: ip xfrm state add src 192.168.0.2 dst 192.168.0.1 proto esp spi 0x1 aead \"rfc4106(gcm(aes))\" 0x0000000000112233445566778899aabbccddeeff 128 mode tunnel if_id 1\n - cmd: ip xfrm state add src 192.168.0.1 dst 192.168.0.2 proto esp spi 0x1 aead \"rfc4106(gcm(aes))\" 0x0000000000112233445566778899aabbccddeeff 128 mode tunnel if_id 1\n - cmd: ip xfrm policy add src 10.0.0.0/24 dst 10.0.1.0/24 dir out if_id 1 tmpl src 192.168.0.1 dst 192.168.0.2 proto esp spi 1 mode tunnel\n - cmd: ip xfrm policy add src 10.0.1.0/24 dst 10.0.0.0/24 dir fwd if_id 1 tmpl src 192.168.0.2 dst 192.168.0.1 proto esp spi 1 mode tunnel\n - cmd: ip link set xfrm0 up\n - cmd: ip route add 10.0.1.0/24 dev xfrm0\n- name: R1\n cmds:\n - cmd: ip addr add 10.0.1.1/24 dev net0\n - cmd: ip addr add 192.168.0.2/24 dev net1\n - cmd: ip link add type xfrm dev net1 if_id 1\n - cmd: ip xfrm state add src 192.168.0.1 dst 192.168.0.2 proto esp spi 0x1 aead \"rfc4106(gcm(aes))\" 0x0000000000112233445566778899aabbccddeeff 128 mode tunnel if_id 1\n - cmd: ip xfrm state add src 192.168.0.2 dst 192.168.0.1 proto esp spi 0x1 aead \"rfc4106(gcm(aes))\" 0x0000000000112233445566778899aabbccddeeff 128 mode tunnel if_id 1\n - cmd: ip xfrm policy add src 10.0.1.0/24 dst 10.0.0.0/24 dir out if_id 1 tmpl src 192.168.0.2 dst 192.168.0.1 proto esp spi 1 mode tunnel\n - cmd: ip xfrm policy add src 10.0.0.0/24 dst 10.0.1.0/24 dir fwd if_id 1 tmpl src 192.168.0.1 dst 192.168.0.2 proto esp spi 1 mode tunnel\n - cmd: ip link set xfrm0 up\n - cmd: ip route add 10.0.0.0/24 dev xfrm0\n- name: C1\n cmds:\n - cmd: ip addr add 10.0.1.2/24 dev net0\n - cmd: ip route add default via 10.0.1.1\n" }, { "path": "examples/basic_iptables/napt/README.md", "content": "\n# Managed NAPT example\n\n```\ntn upconf | sudo sh\ndocker exec -it S1 tcpdump -ni net0 -Qin '(tcp[tcpflags] & tcp-syn)' != 0\ndocker exec C1 curl --interface 10.0.0.2 20.0.0.2\ndocker exec C1 curl --interface 10.0.0.3 20.0.0.2\ndocker exec C1 curl --interface 10.0.0.4 20.0.0.2\ndocker exec S1 conntrack -L\n```\n" }, { "path": "examples/basic_iptables/napt/spec.yaml", "content": "\n# DESCRIPTION: NAPT network using FRR\n#\n# TOPO:\n# S0\n# (net0).2|\n# |\n# WAN:20.0.0.0/24 |\n# |\n# (net0).1|\n# R1(NAPT)\n# (net1).1|\n# |\n# LAN:10.0.0.0/24 |\n# |\n# (net0).2|\n# C0\n#\n# INIT:\n# cns spec7.yaml init | sudo sh\n# ./setup7.sh\n# FINI:\n# cns spec7.yaml fini | sudo sh\n#\n\nnodes:\n - name: R1\n image: slankdev/conntrack\n interfaces:\n - { name: net0, type: direct, args: S1#net0, }\n - { name: net1, type: direct, args: C1#net0, }\n - name: S1\n image: slankdev/ubuntu:18.04\n interfaces: [ { name: net0, type: direct, args: R1#net0, } ]\n - name: C1\n image: slankdev/ubuntu:18.04\n interfaces: [ { name: net0, type: direct, args: R1#net1, } ]\n\nnode_configs:\n - name: R1\n cmds:\n - cmd: ip addr add 10.0.0.1/24 dev net1\n - cmd: ip addr add 20.0.0.1/24 dev net0\n\n #######################\n ## NAT CONFIGURATION ##\n #######################\n - cmd: ip addr add 20.0.0.100/24 dev net0\n - cmd: ip addr add 20.0.0.101/24 dev net0\n - cmd: >-\n iptables -t nat -A POSTROUTING -s 10.0.0.2/32\n -j SNAT -p tcp --to-source 20.0.0.100:10000-10008\n - cmd: >-\n iptables -t nat -A POSTROUTING -s 10.0.0.3/32\n -j SNAT -p tcp --to-source 20.0.0.100:20000-20008\n - cmd: >-\n iptables -t nat -A POSTROUTING -s 10.0.0.4/32\n -j SNAT -p tcp --to-source 20.0.0.101:30000-30008\n\n - name: S1\n cmds:\n - cmd: ip addr add 20.0.0.2/24 dev net0\n - cmd: ip route add default via 20.0.0.1\n - cmd: nohup python3 -m http.server 80 &\n - name: C1\n cmds:\n - cmd: ip addr add 10.0.0.2/24 dev net0\n - cmd: ip addr add 10.0.0.3/24 dev net0\n - cmd: ip addr add 10.0.0.4/24 dev net0\n - cmd: ip route add default via 10.0.0.1\n\n" }, { "path": "examples/basic_iptables/test/README.md", "content": "\n# iptables study\n\n```\nroot@R2:/# iptables -L\nChain INPUT (policy ACCEPT)\ntarget prot opt source destination\n\nChain FORWARD (policy ACCEPT)\ntarget prot opt source destination\nLOG all -- 10.0.0.2 anywhere LOG level warning\n\nChain OUTPUT (policy ACCEPT)\ntarget prot opt source destination\n```\n\n```\nroot@R2:/# iptables-save │\n# Generated by iptables-save v1.6.1 on Wed May 15 10:12:54 2019 │\n*filter │\n:INPUT ACCEPT [5:420] │\n:FORWARD ACCEPT [6:504] │\n:OUTPUT ACCEPT [5:420] │\n-A FORWARD -s 10.0.0.2/32 -j LOG │\nCOMMIT │\n# Completed on Wed May 15 10:12:54 2019\n```\n\n```\nroot@R2:/# iptables -A FORWARD -s 10.0.0.2 -j LOG\nroot@R2:/# iptables -D FORWARD -s 10.0.0.2 -j LOG\n```\n\nIf you want to check the LOG of iptables on network-namespace,\nfollowing kernel option helps you. this option enables us,\noutput netns's log to host's log.\n```\nsudo sh -c 'echo 0 > /proc/sys/net/netfilter/nf_log_all_netns'\ndmesg\n```\n" }, { "path": "examples/basic_iptables/test/spec.yaml", "content": "\nnodes:\n - name: R1\n image: slankdev/sandbox\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - name: R2\n image: slankdev/sandbox\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - { name: net1, type: direct, args: R3#net0 }\n - name: R3\n image: slankdev/sandbox\n interfaces:\n - { name: net0, type: direct, args: R2#net1 }\n\nnode_configs:\n - name: R1\n cmds:\n - cmd: ip addr add 10.0.0.2/24 dev net0\n - cmd: ip route add default via 10.0.0.1\n - name: R2\n cmds:\n - cmd: ip addr add 10.0.0.1/24 dev net0\n - cmd: ip addr add 20.0.0.1/24 dev net1\n - name: R3\n cmds:\n - cmd: ip addr add 20.0.0.2/24 dev net0\n - cmd: ip route add default via 20.0.0.1\n\n" }, { "path": "examples/basic_iptables/u32/spec.yaml", "content": "nodes:\n- name: C1_1\n image: nicolaka/netshoot:latest\n interfaces:\n - { name: net1_1, type: direct, args: C2#net1_1 }\n\n- name: C1_2\n image: nicolaka/netshoot:latest\n interfaces:\n - { name: net1_2, type: direct, args: C2#net1_2 }\n\n- name: C2\n image: nicolaka/netshoot:latest\n interfaces:\n - { name: net1_1, type: direct, args: C1_1#net1_1 }\n - { name: net1_2, type: direct, args: C1_2#net1_2 }\n - { name: net2, type: direct, args: C3#net2 }\n sysctls:\n - sysctl: net.ipv4.ip_forward=1\n\n- name: C3\n image: nicolaka/netshoot:latest\n interfaces:\n - { name: net2, type: direct, args: C2#net2 }\n\nnode_configs:\n- name: C1_1\n cmds:\n - cmd: ip addr add 10.1.0.1/24 dev net1_1\n - cmd: ip route add 10.3.0.1 via 10.1.0.2\n - cmd: ip tunnel add tun0 mode ipip local 10.1.0.1 remote 10.3.0.1 dev net1_1\n - cmd: ip addr add 1.1.1.1/24 dev tun0\n - cmd: ip link set tun0 up\n - cmd: ip route add 1.1.3.1 dev tun0\n\n- name: C1_2\n cmds:\n - cmd: ip addr add 10.2.0.1/24 dev net1_2\n - cmd: ip route add 10.3.0.1 via 10.2.0.2\n - cmd: ip tunnel add tun0 mode ipip local 10.2.0.1 remote 10.3.0.1 dev net1_2\n - cmd: ip addr add 1.1.2.1/24 dev tun0\n - cmd: ip link set tun0 up\n - cmd: ip route add 1.1.4.1 dev tun0\n\n- name: C2\n cmds:\n - cmd: ip addr add 10.1.0.2/24 dev net1_1\n - cmd: ip addr add 10.2.0.2/24 dev net1_2\n - cmd: ip addr add 10.3.0.2/24 dev net2\n # drop packet which has source IP 1.1.2.1/32 in IPIP inner IP header\n - cmd: iptables -m u32 --u32 \"6&0xFF=0x4 && 0>>22&0x3C@12=0x1010102\" -A FORWARD -j DROP\n # drop packet which has source IP 1.1.2.0/24 in IPIP inner IP header\n - cmd: iptables -m u32 --u32 \"6&0xFF=0x4 && 0>>22&0x3C@12=0x1010200:0x10102ff\" -A FORWARD -j DROP\n\n- name: C3\n cmds:\n - cmd: ip addr add 10.3.0.1/24 dev net2\n - cmd: ip route add 10.1.0.1 via 10.3.0.2\n - cmd: ip route add 10.2.0.1 via 10.3.0.2\n - cmd: ip tunnel add tun0 mode ipip local 10.3.0.1 remote 10.1.0.1 dev net2\n - cmd: ip addr add 1.1.3.1/24 dev tun0\n - cmd: ip link set tun0 up\n - cmd: ip route add 1.1.1.1 dev tun0\n - cmd: ip tunnel add tun1 mode ipip local 10.3.0.1 remote 10.2.0.1 dev net2\n - cmd: ip addr add 1.1.4.1/24 dev tun1\n - cmd: ip link set tun1 up\n - cmd: ip route add 1.1.2.1 dev tun1\n" }, { "path": "examples/basic_isis/README.md", "content": "\n# ISIS\n\n![](topo.png)\n\n```\ntn upconf | sudo sh\n```\n\n## Reference\n\n- http://docs.frrouting.org/en/latest/isisd.html\n" }, { "path": "examples/basic_isis/spec.yaml", "content": "\nnodes:\n - name: R1\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - { name: net1, type: direct, args: R3#net0 }\n - { name: net2, type: direct, args: R5#net0 }\n - name: R2\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - { name: net1, type: direct, args: R4#net0 }\n - { name: net2, type: direct, args: R6#net0 }\n - name: R3\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R1#net1 }\n - { name: net1, type: direct, args: R4#net1 }\n - { name: net2, type: direct, args: R7#net0 }\n - name: R4\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R2#net1 }\n - { name: net1, type: direct, args: R3#net1 }\n - { name: net2, type: direct, args: R8#net0 }\n - name: R5\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R1#net2 }\n - name: R6\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R2#net2 }\n - name: R7\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R3#net2 }\n - name: R8\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R4#net2 }\n\nnode_configs:\n - name: R1\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'int lo'\n -c ' ip address 10.255.0.1/32'\n -c ' exit'\n -c 'int net0'\n -c ' ip address 10.0.0.1/30'\n -c ' ip router isis FOO'\n -c ' exit'\n -c 'int net1'\n -c ' ip address 10.0.0.5/30'\n -c ' ip router isis FOO'\n -c ' exit'\n -c 'int net2'\n -c ' ip address 20.1.0.1/30'\n -c ' ip router isis FOO'\n -c ' exit'\n -c 'router isis FOO'\n -c ' net 47.0023.0000.0000.0001.00'\n -c ' mpls-te on'\n -c ' mpls-te router-address 10.255.0.1'\n -c ' exit'\n\n - name: R2\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'int lo'\n -c ' ip address 10.255.0.2/32'\n -c ' exit'\n -c 'int net0'\n -c ' ip address 10.0.0.2/30'\n -c ' ip router isis FOO'\n -c ' exit'\n -c 'int net1'\n -c ' ip address 10.0.0.9/30'\n -c ' ip router isis FOO'\n -c ' exit'\n -c 'int net2'\n -c ' ip address 20.2.0.1/30'\n -c ' ip router isis FOO'\n -c ' exit'\n -c 'router isis FOO'\n -c ' net 47.0023.0000.0000.0002.00'\n -c ' mpls-te on'\n -c ' mpls-te router-address 10.255.0.2'\n -c ' exit'\n - name: R3\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'int lo'\n -c ' ip address 10.255.0.3/32'\n -c ' exit'\n -c 'int net0'\n -c ' ip address 10.0.0.6/30'\n -c ' ip router isis FOO'\n -c ' exit'\n -c 'int net1'\n -c ' ip address 10.0.0.13/30'\n -c ' ip router isis FOO'\n -c ' exit'\n -c 'int net2'\n -c ' ip address 20.3.0.1/30'\n -c ' ip router isis FOO'\n -c ' exit'\n -c 'router isis FOO'\n -c ' net 47.0023.0000.0000.0003.00'\n -c ' mpls-te on'\n -c ' mpls-te router-address 10.255.0.3'\n -c ' exit'\n - name: R4\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'int lo'\n -c ' ip address 10.255.0.4/32'\n -c ' exit'\n -c 'int net0'\n -c ' ip address 10.0.0.10/30'\n -c ' ip router isis FOO'\n -c ' exit'\n -c 'int net1'\n -c ' ip address 10.0.0.14/30'\n -c ' ip router isis FOO'\n -c ' exit'\n -c 'int net2'\n -c ' ip address 20.4.0.1/30'\n -c ' ip router isis FOO'\n -c ' exit'\n -c 'router isis FOO'\n -c ' net 47.0023.0000.0000.0004.00'\n -c ' mpls-te on'\n -c ' mpls-te router-address 10.255.0.4'\n -c ' exit'\n\n - name: R5\n cmds:\n - cmd: ip addr add 20.1.0.2/24 dev net0\n - cmd: ip route replace default via 20.1.0.1\n - name: R6\n cmds:\n - cmd: ip addr add 20.2.0.2/24 dev net0\n - cmd: ip route replace default via 20.2.0.1\n - name: R7\n cmds:\n - cmd: ip addr add 20.3.0.2/24 dev net0\n - cmd: ip route replace default via 20.3.0.1\n - name: R8\n cmds:\n - cmd: ip addr add 20.4.0.2/24 dev net0\n - cmd: ip route replace default via 20.4.0.1\n\ntest:\n - name: p2p\n cmds:\n - cmd: docker exec R1 ping -c2 10.0.0.1\n - cmd: docker exec R1 ping -c2 10.0.0.2\n - cmd: docker exec R1 ping -c2 10.0.0.5\n - cmd: docker exec R1 ping -c2 10.0.0.6\n\n - cmd: docker exec R2 ping -c2 10.0.0.1\n - cmd: docker exec R2 ping -c2 10.0.0.2\n - cmd: docker exec R2 ping -c2 10.0.0.9\n - cmd: docker exec R2 ping -c2 10.0.0.10\n\n - cmd: docker exec R3 ping -c2 10.0.0.5\n - cmd: docker exec R3 ping -c2 10.0.0.6\n - cmd: docker exec R3 ping -c2 10.0.0.13\n - cmd: docker exec R3 ping -c2 10.0.0.14\n\n - cmd: docker exec R4 ping -c2 10.0.0.9\n - cmd: docker exec R4 ping -c2 10.0.0.10\n - cmd: docker exec R4 ping -c2 10.0.0.13\n - cmd: docker exec R4 ping -c2 10.0.0.14\n\n - cmd: docker exec R5 ping -c2 20.1.0.1\n - cmd: docker exec R5 ping -c2 20.1.0.2\n - cmd: docker exec R6 ping -c2 20.2.0.1\n - cmd: docker exec R6 ping -c2 20.2.0.2\n - cmd: docker exec R7 ping -c2 20.3.0.1\n - cmd: docker exec R7 ping -c2 20.3.0.2\n - cmd: docker exec R8 ping -c2 20.4.0.1\n - cmd: docker exec R8 ping -c2 20.4.0.2\n\n - name: remote\n cmds:\n - cmd: docker exec R5 ping -c2 20.1.0.2\n - cmd: docker exec R5 ping -c2 20.2.0.2\n - cmd: docker exec R5 ping -c2 20.3.0.2\n - cmd: docker exec R5 ping -c2 20.4.0.2\n\n - cmd: docker exec R6 ping -c2 20.1.0.2\n - cmd: docker exec R6 ping -c2 20.2.0.2\n - cmd: docker exec R6 ping -c2 20.3.0.2\n - cmd: docker exec R6 ping -c2 20.4.0.2\n\n - cmd: docker exec R7 ping -c2 20.1.0.2\n - cmd: docker exec R7 ping -c2 20.2.0.2\n - cmd: docker exec R7 ping -c2 20.3.0.2\n - cmd: docker exec R7 ping -c2 20.4.0.2\n\n - cmd: docker exec R8 ping -c2 20.1.0.2\n - cmd: docker exec R8 ping -c2 20.2.0.2\n - cmd: docker exec R8 ping -c2 20.3.0.2\n - cmd: docker exec R8 ping -c2 20.4.0.2\n\n" }, { "path": "examples/basic_l3dsr/dscp/Dockerfile", "content": "\nFROM ubuntu:22.04\n\nRUN apt update \\\n && apt install -y libc6-dev-i386 clang libbpf-dev iproute2\n" }, { "path": "examples/basic_l3dsr/dscp/spec.yaml", "content": "preinit:\n - cmds:\n - cmd: docker build -t xdptmp .\n\nnodes:\n - name: R1\n image: xdptmp\n interfaces:\n - { name: net1, type: direct, args: CLOS#net1 }\n sysctls:\n - sysctl: net.ipv4.ip_forward=1\n - sysctl: net.ipv4.conf.all.rp_filter=0\n - sysctl: net.ipv4.conf.default.rp_filter=0\n\n - name: C1\n image: slankdev/mikanectl\n docker_run_extra_args: --entrypoint bash\n interfaces:\n - { name: net0, type: direct, args: CLOS#net0 }\n sysctls:\n - sysctl: net.ipv4.ip_forward=1\n - sysctl: net.ipv4.conf.all.rp_filter=0\n - sysctl: net.ipv4.conf.default.rp_filter=0\n\n - name: C2\n image: slankdev/mikanectl\n docker_run_extra_args: --entrypoint bash\n interfaces:\n - { name: net2, type: direct, args: CLOS#net2 }\n sysctls:\n - sysctl: net.ipv4.ip_forward=1\n - sysctl: net.ipv4.conf.all.rp_filter=0\n - sysctl: net.ipv4.conf.default.rp_filter=0\n\n - name: CLOS\n image: nicolaka/netshoot\n interfaces:\n - { name: net0, type: direct, args: C1#net0 }\n - { name: net1, type: direct, args: R1#net1 }\n - { name: net2, type: direct, args: C2#net2 }\n sysctls:\n - sysctl: net.ipv4.ip_forward=1\n - sysctl: net.ipv4.conf.all.rp_filter=0\n - sysctl: net.ipv4.conf.default.rp_filter=0\n\npostinit:\n cmds:\n - cmd: docker cp xdp.c R1:/root/xdp.c\n - cmd: docker exec R1 clang -O2 -Wall -target bpf -c /root/xdp.c\n - cmd: docker exec R1 ip link set net1 xdpgeneric obj xdp.o sec xdp-lb\n\nnode_configs:\n - name: R1\n cmds:\n - cmd: ip addr add 142.0.0.1/32 dev lo\n - cmd: ip addr add 10.0.1.1/24 dev net1\n - cmd: ip route add default via 10.0.1.2\n - name: C1\n cmds:\n - cmd: ip addr add 10.0.0.1/24 dev net0\n - cmd: ip route add default via 10.0.0.2\n - name: C2\n cmds:\n - cmd: nohup mikanectl ifconfig-http -p 80 &\n - cmd: ip addr add 10.0.2.1/24 dev net2\n - cmd: ip route add default via 10.0.2.2\n - cmd: ip route add local 142.0.0.1/32 dev lo\n - cmd: tc qdisc add dev net2 clsact\n - cmd: tc filter add dev net2 ingress u32 match ip dsfield 0xa 0x1e action nat ingress 10.0.2.1 142.0.0.1\n\n - name: CLOS\n cmds:\n - cmd: ip addr add 10.0.0.2/24 dev net0\n - cmd: ip addr add 10.0.1.2/24 dev net1\n - cmd: ip addr add 10.0.2.2/24 dev net2\n - cmd: ip route add 142.0.0.1/32 dev net1\n" }, { "path": "examples/basic_l3dsr/dscp/xdp.c", "content": "#include \n#include \n#include \n#include \n#include \n#include \n#include \n\n#ifndef DSCP\n#define DSCP 10\n#endif\n\nstatic __always_inline __u16 csum_fold_helper(__u64 csum) {\n int i;\n#pragma unroll\n for (i = 0; i < 4; i ++) {\n if (csum >> 16)\n csum = (csum & 0xffff) + (csum >> 16);\n }\n return ~csum;\n}\n\nstatic __always_inline void ipv4_csum(void *data_start, int data_size, __u64 *csum) {\n *csum = bpf_csum_diff(0, 0, data_start, data_size, *csum);\n *csum = csum_fold_helper(*csum);\n}\n\nstatic __always_inline int process_ipv4(struct xdp_md* ctx,\n __u64 data, __u64 data_end) {\n __u8 src_mac[ETH_ALEN];\n struct ethhdr *eth;\n struct iphdr *iph;\n\n __u32 dst_addr = 0xa000201;\n __u64 csum = 0;\n\n eth = (struct ethhdr*)(data);\n\n if ((__u64)(eth + 1) > data_end)\n return XDP_DROP;\n\n iph = (struct iphdr*)(data + sizeof(struct ethhdr));\n\n if ((__u64)(iph + 1) > data_end)\n return XDP_DROP;\n\n if (iph->daddr == bpf_htonl(0x8e000001)) {\n iph->tos = DSCP;\n iph->daddr = bpf_htonl(dst_addr);\n iph->check = 0;\n ipv4_csum(iph, sizeof(struct iphdr), &csum);\n iph->check = csum;\n\n __builtin_memcpy(src_mac, eth->h_source, ETH_ALEN);\n __builtin_memcpy(eth->h_source, eth->h_dest, ETH_ALEN);\n __builtin_memcpy(eth->h_dest, src_mac, ETH_ALEN);\n \n return XDP_TX;\n }\n return XDP_PASS;\n}\n\nstatic __always_inline int process_eth(struct xdp_md* ctx) {\n __u64 data = ctx->data;\n __u64 data_end = ctx->data_end;\n struct ethhdr *eth;\n\n eth = (struct ethhdr*)data;\n\n if ((__u64)(eth + 1) > data_end)\n return XDP_DROP;\n\n if (eth->h_proto == bpf_htons(ETH_P_IP)) {\n return process_ipv4(ctx, data, data_end);\n }\n return XDP_PASS;\n}\n\nSEC(\"xdp-lb\")\nint entry(struct xdp_md *ctx) {\n int ret = process_eth(ctx);\n return ret;\n}\n\nchar __license[] SEC(\"license\") = \"GPL\";\n" }, { "path": "examples/basic_ldp/README.md", "content": "\n# LDP Example\n\ncreate basic mpls backbone-network\n![](./topo.png)\n\n```\nhost# modprobe mpls_router\nhost# modprobe mpls_iptunnel\n```\n\nreferences\n- https://github.com/FRRouting/frr/blob/master/doc/developer/ldpd-basic-test-setup.md\n- https://github.com/FRRouting/frr/issues/651\n- http://docs.frrouting.org/en/latest/ldpd.html\n" }, { "path": "examples/basic_ldp/spec.yaml", "content": "\nnodes:\n - name: R1\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - name: R2\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n\nnode_configs:\n - name: R1\n cmds:\n - cmd: sh -c 'enable_seg6_router.py | sh'\n - cmd: sh -c 'echo 100000 > /proc/sys/net/mpls/platform_labels'\n - cmd: sh -c 'echo 1 > /proc/sys/net/mpls/conf/net0/input'\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c 'conf te'\n -c 'int lo'\n -c ' ip address 10.255.0.1/32'\n -c '!'\n -c 'int net0'\n -c ' ip address 10.0.0.1/24'\n -c ' ipv6 address 2001::1/64'\n -c '!'\n -c 'mpls ldp'\n -c ' router-id 10.255.0.1'\n -c ' neighbor 10.255.0.2 password slank'\n -c ' !'\n -c ' address-family ipv4'\n -c ' discovery transport-address 10.255.0.1'\n -c ' label local advertise explicit-null'\n -c ' interface net0'\n -c '!'\n -c 'ip route 10.255.0.2 10.0.0.2 net0'\n\n - name: R2\n cmds:\n - cmd: sh -c 'enable_seg6_router.py | sh'\n - cmd: sh -c 'echo 100000 > /proc/sys/net/mpls/platform_labels'\n - cmd: sh -c 'echo 1 > /proc/sys/net/mpls/conf/net0/input'\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c 'conf te'\n -c 'int lo'\n -c ' ip address 10.255.0.2/32'\n -c '!'\n -c 'int net0'\n -c ' ip address 10.0.0.2/24'\n -c ' ipv6 address 2001::2/64'\n -c '!'\n -c 'mpls ldp'\n -c ' router-id 10.255.0.2'\n -c ' neighbor 10.255.0.1 password slank'\n -c ' !'\n -c ' address-family ipv4'\n -c ' discovery transport-address 10.255.0.2'\n -c ' label local advertise explicit-null'\n -c ' interface net0'\n -c '!'\n -c 'ip route 10.255.0.1 10.0.0.1 net0'\n\ntest:\n - name: p2p\n cmds:\n - cmd: echo slankdev slankdev\n - cmd: echo slankdev slankdev\n\n" }, { "path": "examples/basic_mirror/local/spec.yaml", "content": "---\nnodes:\n- name: R1\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n- name: R2\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - { name: net1, type: direct, args: R3#net0 }\n - { name: net2, type: direct, args: M1#net0 }\n- name: R3\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R2#net1 }\n- name: M1\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R2#net2 }\n\nnode_configs:\n- name: R1\n cmds:\n - cmd: ip addr add 10.1.0.1/24 dev net0\n - cmd: ip route add default via 10.1.0.2\n\n- name: R2\n cmds:\n - cmd: ip addr add 10.1.0.2/24 dev net0\n - cmd: ip addr add 10.2.0.1/24 dev net1\n\n - cmd: ip link add mon0 type dummy\n - cmd: ip link set mon0 up\n\n ## [EGRESS MIRROR]\n ## prio match action\n ## ---- ----- ------\n ## 100 any accept\n - cmd: tc qdisc add dev net0 root handle \"10:\" prio\n - cmd: >-\n tc filter add dev net0 parent \"10:\"\n prio 100\n protocol all u32 match u32 0 0\n flowid 10:1 action mirred egress mirror dev mon0\n\n ## [EGRESS MIRROR]\n ## prio match action\n ## ---- -------------- ------\n ## 100 tcp sport 2020 deny\n ## 101 any deny\n - cmd: tc qdisc add dev net0 root handle \"10:\" prio\n - cmd: >-\n tc filter add dev net0 parent \"10:\"\n prio 100\n protocol all u32 match ip sport 2020 0xffff\n flowid 10:1 action pass\n - cmd: >-\n tc filter add dev net0 parent \"10:\"\n prio 101\n protocol all u32 match u32 0 0\n flowid 10:1 action mirred egress mirror dev mon0\n\n ## [INGRESS MIRROR]\n ## prio match action\n ## ---- ----- ------\n ## 100 any accept\n - cmd: tc qdisc add dev net0 ingress\n - cmd: >-\n tc filter add dev net0 parent \"ffff:\"\n prio 100\n protocol all u32 match u32 0 0\n flowid ffff:1 action mirred egress mirror dev mon0\n\n ## [INGRESS MIRROR]\n ## prio match action\n ## ---- -------------- ------\n ## 100 tcp dport 2020 deny\n ## 101 any accept\n - cmd: tc qdisc add dev net0 ingress\n - cmd: >-\n tc filter add dev net0 parent \"ffff:\"\n prio 100\n protocol all u32 match ip dport 2020 0xffff\n flowid 10:1 action pass\n - cmd: >-\n tc filter add dev net0 parent \"ffff:\"\n prio 101\n protocol all u32 match u32 0 0\n flowid ffff:1 action mirred egress mirror dev mon0\n\n ## ANOTHER TIPS\n # [MATCH]\n # match ip protocol 6 0xff\n # match ip src 10.255.1.1/32\n # match ip dst 10.255.0.0/24\n # match ip sport 2020 0xffff\n # match ip dport 8080 0xffff\n #\n # [CHECK]\n # tc filter list dev net0 parent 10:\n # tc filter list dev net0 parent ffff:\n # tc filter del dev net0 parent 10:\n # tc filter del dev net0 parent ffff:\n\n- name: R3\n cmds:\n - cmd: ip addr add 10.2.0.2/24 dev net0\n - cmd: ip route add default via 10.2.0.1\n" }, { "path": "examples/basic_mirror/remote/spec.yaml", "content": "---\nnodes:\n- name: R1\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n- name: R2\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - { name: net1, type: direct, args: R3#net0 }\n - { name: net2, type: direct, args: R4#net0 }\n- name: R3\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R2#net1 }\n- name: R4\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R2#net2 }\n - { name: net1, type: direct, args: R5#net0 }\n- name: R5\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R4#net1 }\n\nnode_configs:\n- name: R1\n cmds:\n - cmd: ip addr add 10.1.0.1/24 dev net0\n - cmd: ip route add default via 10.1.0.2\n\n- name: R2\n cmds:\n - cmd: ip addr add 10.1.0.2/24 dev net0\n - cmd: ip addr add 10.2.0.1/24 dev net1\n - cmd: ip addr add 10.3.0.1/24 dev net2\n - cmd: ip route add 10.4.0.0/24 via 10.3.0.2\n\n # - cmd: ip link add mon0 type dummy\n # - cmd: ip link set mon0 up\n # - cmd: \"tc qdisc add dev net0 root handle 10: prio\"\n # - cmd: \"tc qdisc add dev net0 ingress\"\n # - cmd: \"tc filter add dev net0 parent 10: prio 10 protocol all u32 match u32 0 0 flowid 10:1 action mirred egress mirror dev mon0\"\n # - cmd: \"tc filter add dev net0 parent ffff: prio 10 protocol all u32 match u32 0 0 flowid ffff:1 action mirred egress mirror dev mon0\"\n\n - cmd: ip link add mon0 type gretap remote 10.4.0.2 local 10.3.0.1 ttl 10\n - cmd: ip link set mon0 up\n\n - cmd: \"tc qdisc add dev net0 root handle 10: prio\"\n - cmd: \"tc filter add dev net0 parent 10: prio 10 protocol all u32 match u32 0 0 flowid 10:1 action mirred egress mirror dev mon0\"\n - cmd: \"tc qdisc add dev net0 ingress\"\n - cmd: \"tc filter add dev net0 parent ffff: prio 10 protocol all u32 match u32 0 0 flowid ffff:1 action mirred egress mirror dev mon0\"\n\n- name: R3\n cmds:\n - cmd: ip addr add 10.2.0.2/24 dev net0\n - cmd: ip route add default via 10.2.0.1\n\n- name: R4\n cmds:\n - cmd: ip addr add 10.3.0.2/24 dev net0\n - cmd: ip addr add 10.4.0.1/24 dev net1\n\n- name: R5\n cmds:\n - cmd: ip addr add 10.4.0.2/24 dev net0\n - cmd: ip route add default via 10.4.0.1\n - cmd: ip link add mon0 type gretap remote 10.3.0.1 local 10.4.0.2 ttl 10\n - cmd: ip link set mon0 up\n" }, { "path": "examples/basic_mpls/spec.yaml", "content": "# DESCRIPTION: Basic MPLS Traffic Engneering\n# TEST:\n# docker exec C0 ping 192.168.1.2 -I 192.168.0.2 &\n# docker exec C0 ping 192.168.1.20 -I 192.168.0.20 &\n# docker exec R5 sysctl -w net.ipv4.ip_forward=0\n#\n# TOPO:\n# +------+ 10.1. +------+ 10.2. +------+\n# | | 0.0/24 .2| |.2 0.0/24 | |\n# | C0 | +--+net0| R4 |net1+-+ | C1 |\n# | | | | | | | |\n# +------+ | +------+ | +------+\n# net0 | | net0\n# +.2 .20 | | +.2 .20\n# | | | |\n# | | | |\n# 192.168 | | | | 192.168\n# .0.0/24 +.1 +.1 .1+ .1+ .1.0/24\n# net1 net2 net2 net1\n# +------+ +------+ +------+ +------+\n# | |.2 .1| | | |.1 .2| |\n# | R0 |net0+---+net1| R2 | | R3 |net1+---+net0| R1 |\n# | | 10.3. | | | | 10.4. | |\n# +------+ 0.0/24 +------+ +------+ 0.0/24 +------+\n# net0 net0\n# +.1 .1+\n# | |\n# | |\n# | |\n# 10.0. | +------+ |10.0.\n# 1.0/24| .2| |.2 |2.0/24\n# +--+net0| R5 |net1+-+\n# | |\n# +------+\n\n\npre_init:\n - cmds:\n - cmd: modprobe mpls_router\n - cmd: modprobe mpls_gso\n - cmd: modprobe mpls_iptunnel\n\nnodes:\n - name: R0\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R2#net1 }\n - { name: net1, type: direct, args: C0#net0 }\n - name: R1\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R3#net1 }\n - { name: net1, type: direct, args: C1#net0 }\n - name: R2\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R5#net0 }\n - { name: net1, type: direct, args: R0#net0 }\n - { name: net2, type: direct, args: R4#net0 }\n - name: R3\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R5#net1 }\n - { name: net1, type: direct, args: R1#net0 }\n - { name: net2, type: direct, args: R4#net1 }\n - name: R4\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R2#net2 }\n - { name: net1, type: direct, args: R3#net2 }\n - name: R5\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - { name: net1, type: direct, args: R3#net0 }\n - name: C0\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R0#net1 }\n - name: C1\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R1#net1 }\n\n\nnode_configs:\n - name: R0\n cmds:\n - cmd: sysctl -w net.ipv4.ip_forward=1 > /dev/null\n - cmd: sysctl -w net.mpls.conf.lo.input=1 > /dev/null\n - cmd: sysctl -w net.mpls.conf.net0.input=1 > /dev/null\n - cmd: sysctl -w net.mpls.conf.net1.input=1 > /dev/null\n - cmd: sysctl -w net.mpls.platform_labels=1024 > /dev/null\n - cmd: ip addr add 10.3.0.2/24 dev net0\n - cmd: ip addr add 192.168.0.1/24 dev net1\n - cmd: ip route add 192.168.1.0/24 via 10.3.0.1\n - cmd: ip route add 192.168.1.20/32 encap mpls 100 via inet 10.3.0.1\n - name: R1\n cmds:\n - cmd: sysctl -w net.ipv4.ip_forward=1 > /dev/null\n - cmd: sysctl -w net.mpls.conf.lo.input=1 > /dev/null\n - cmd: sysctl -w net.mpls.conf.net0.input=1 > /dev/null\n - cmd: sysctl -w net.mpls.conf.net1.input=1 > /dev/null\n - cmd: sysctl -w net.mpls.platform_labels=1024 > /dev/null\n - cmd: ip addr add 10.4.0.2/24 dev net0\n - cmd: ip addr add 192.168.1.1/24 dev net1\n - cmd: ip route add 192.168.0.0/24 via 10.4.0.1\n - cmd: ip route add 192.168.0.20/32 encap mpls 200 via inet 10.4.0.1\n - name: R2\n cmds:\n - cmd: sysctl -w net.ipv4.ip_forward=1 > /dev/null\n - cmd: sysctl -w net.mpls.conf.lo.input=1 > /dev/null\n - cmd: sysctl -w net.mpls.conf.net0.input=1 > /dev/null\n - cmd: sysctl -w net.mpls.conf.net1.input=1 > /dev/null\n - cmd: sysctl -w net.mpls.conf.net2.input=1 > /dev/null\n - cmd: sysctl -w net.mpls.platform_labels=1024 > /dev/null\n - cmd: ip addr add 10.0.1.1/24 dev net0\n - cmd: ip addr add 10.3.0.1/24 dev net1\n - cmd: ip addr add 10.1.0.1/24 dev net2\n - cmd: ip route add 192.168.0.0/24 via 10.3.0.2\n - cmd: ip route add 192.168.1.0/24 via 10.0.1.2\n - cmd: ip -f mpls route add 100 via inet 10.1.0.2\n - name: R3\n cmds:\n - cmd: sysctl -w net.ipv4.ip_forward=1 > /dev/null\n - cmd: sysctl -w net.mpls.conf.lo.input=1 > /dev/null\n - cmd: sysctl -w net.mpls.conf.net0.input=1 > /dev/null\n - cmd: sysctl -w net.mpls.conf.net1.input=1 > /dev/null\n - cmd: sysctl -w net.mpls.conf.net2.input=1 > /dev/null\n - cmd: sysctl -w net.mpls.platform_labels=1024 > /dev/null\n - cmd: ip addr add 10.0.2.1/24 dev net0\n - cmd: ip addr add 10.4.0.1/24 dev net1\n - cmd: ip addr add 10.2.0.1/24 dev net2\n - cmd: ip route add 192.168.0.0/24 via 10.0.2.2\n - cmd: ip route add 192.168.1.0/24 via 10.4.0.2\n - cmd: ip -f mpls route add 200 via inet 10.2.0.2\n - name: R4\n cmds:\n - cmd: sysctl -w net.ipv4.ip_forward=1 > /dev/null\n - cmd: sysctl -w net.mpls.conf.lo.input=1 > /dev/null\n - cmd: sysctl -w net.mpls.conf.net0.input=1 > /dev/null\n - cmd: sysctl -w net.mpls.conf.net1.input=1 > /dev/null\n - cmd: sysctl -w net.mpls.platform_labels=1024 > /dev/null\n - cmd: ip addr add 10.1.0.2/24 dev net0\n - cmd: ip addr add 10.2.0.2/24 dev net1\n - cmd: ip route add 192.168.0.0/24 via 10.1.0.1\n - cmd: ip route add 192.168.1.0/24 via 10.2.0.1\n - name: R5\n cmds:\n - cmd: sysctl -w net.ipv4.ip_forward=1 > /dev/null\n - cmd: sysctl -w net.mpls.conf.lo.input=1 > /dev/null\n - cmd: sysctl -w net.mpls.conf.net0.input=1 > /dev/null\n - cmd: sysctl -w net.mpls.conf.net1.input=1 > /dev/null\n - cmd: sysctl -w net.mpls.platform_labels=1024 > /dev/null\n - cmd: ip addr add 10.0.1.2/24 dev net0\n - cmd: ip addr add 10.0.2.2/24 dev net1\n - cmd: ip route add 192.168.0.0/24 via 10.0.1.1\n - cmd: ip route add 192.168.1.0/24 via 10.0.2.1\n - name: C0\n cmds:\n - cmd: ip addr add 192.168.0.2/24 dev net0\n - cmd: ip addr add 192.168.0.20/24 dev net0\n - cmd: ip route del default\n - cmd: ip route add default via 192.168.0.1\n - name: C1\n cmds:\n - cmd: ip addr add 192.168.1.2/24 dev net0\n - cmd: ip addr add 192.168.1.20/24 dev net0\n - cmd: ip route del default\n - cmd: ip route add default via 192.168.1.1\n\ntest:\n - cmds:\n - cmd: docker exec C0 ping 192.168.1.2 -I 192.168.0.2\n - cmd: docker exec C0 ping 192.168.1.20 -I 192.168.0.20\n - cmd: docker exec R5 sysctl -w net.ipv4.ip_forward=0\n\n\n" }, { "path": "examples/basic_multipath/README.md", "content": "# Multipath Configuration\n\ndiagram\n```\n+-----------+\n| R1 |\n+-----------+\n(net0) (net1)\n | |\n(net0) (net0)\n+----+ +----+\n| R2 | | R3 ||\n+----+ +----+\n(net1) (net1)\n | |\n(net0) (net1)\n+-----------+\n| R4 |\n+-----------+\n```\n\nother multipath config snippets\n```\nip route add 1.1.1.1/32 \\\n nexthop via 10.0.0.1 weight 1 \\\n nexthop via 10.0.0.2 weight 2\n\nip route add :: table 10 \\\n nexthop weight 10 encap seg6 mode encap segs A::,B:: via fe80::1 dev eth0 \\\n nexthop weight 20 encap seg6 mode encap segs C::,D:: via fe80::2 dev eth0\n\nip route add :: vrf vrf0 \\\n nexthop weight 10 encap seg6 mode encap segs A::,B:: via fe80::1 dev eth0 \\\n nexthop weight 20 encap seg6 mode encap segs C::,D:: via fe80::2 dev eth0\n```\n" }, { "path": "examples/basic_multipath/spec.yaml", "content": "---\nnodes:\n- name: R1\n image: tinynetwork/pmacctd:develop\n interfaces:\n - { name: net0, type: direct, args: R2 }\n - { name: net1, type: direct, args: R3 }\n sysctls: [{ sysctl: net.ipv4.fib_multipath_hash_policy=1 }]\n- name: R2\n image: tinynetwork/pmacctd:develop\n interfaces:\n - { name: net0, type: direct, args: R1 }\n - { name: net1, type: direct, args: R4 }\n sysctls: [{ sysctl: net.ipv4.fib_multipath_hash_policy=1 }]\n- name: R3\n image: tinynetwork/pmacctd:develop\n interfaces:\n - { name: net0, type: direct, args: R1 }\n - { name: net1, type: direct, args: R4 }\n sysctls: [{ sysctl: net.ipv4.fib_multipath_hash_policy=1 }]\n- name: R4\n image: tinynetwork/pmacctd:develop\n interfaces:\n - { name: net0, type: direct, args: R2 }\n - { name: net1, type: direct, args: R3 }\n sysctls: [{ sysctl: net.ipv4.fib_multipath_hash_policy=1 }]\n\nnode_configs:\n- name: R1\n cmds:\n - cmd: ip addr add 10.1.0.1/24 dev net0\n - cmd: ip addr add 10.2.0.1/24 dev net1\n - cmd: pmacctd -f /pmacctd.conf\n- name: R2\n cmds:\n - cmd: ip addr add 10.1.0.2/24 dev net0\n - cmd: ip addr add 10.2.0.2/24 dev net1\n - cmd: pmacctd -f /pmacctd.conf\n- name: R3\n cmds:\n - cmd: ip addr add 10.1.0.3/24 dev net0\n - cmd: ip addr add 10.2.0.3/24 dev net1\n - cmd: pmacctd -f /pmacctd.conf\n- name: R4\n cmds:\n - cmd: ip addr add 10.1.0.4/24 dev net0\n - cmd: ip addr add 10.2.0.4/24 dev net1\n - cmd: pmacctd -f /pmacctd.conf\n\n- name: C1\n cmds:\n - cmd: ip addr add 10.1.0.10/24 dev net0\n - cmd: >-\n ip route replace default\n nexthop via 10.1.0.1\n nexthop via 10.1.0.2\n nexthop via 10.1.0.3\n nexthop via 10.1.0.4\n - cmd: nginx\n - cmd: iperf3 -s -D\n- name: C2\n cmds:\n - cmd: ip addr add 10.2.0.10/24 dev net0\n - cmd: >-\n ip route replace default\n nexthop via 10.2.0.1\n nexthop via 10.2.0.2\n nexthop via 10.2.0.3\n nexthop via 10.2.0.4\n- name: C3\n cmds:\n - cmd: ip addr add 10.2.0.11/24 dev net0\n - cmd: >-\n ip route replace default\n nexthop via 10.2.0.1\n nexthop via 10.2.0.2\n nexthop via 10.2.0.3\n nexthop via 10.2.0.4\n\ntest:\n- name: test\n cmds:\n - cmd: docker exec R1 ping \n - cmd: docker exec R2 pmacct -e -p /tmp/collect.pipe\n" }, { "path": "examples/basic_namespace/README.md", "content": "\n# Namespace Isolation\n\n![](./topo.png)\n\n```\ncd path/to/here\ntn -f spec.blue.yaml upconf | sudo sh\ntn -f spec.green.yaml upconf | sudo sh\ndocker ps\nCONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES\n6d5f9e4d6c51 slankdev/ubuntu:18.04 \"/bin/bash\" 2 seconds ago Up 1 second green_R2\n92210c5eea85 slankdev/ubuntu:18.04 \"/bin/bash\" 3 seconds ago Up 2 seconds green_R1\n48a50568c9c1 slankdev/ubuntu:18.04 \"/bin/bash\" 7 seconds ago Up 6 seconds blue_R2\n86c2c4c9fc52 slankdev/ubuntu:18.04 \"/bin/bash\" 7 seconds ago Up 7 seconds blue_R1\n```\n\n" }, { "path": "examples/basic_namespace/spec.blue.yaml", "content": "\nmeta:\n namespace: blue_\n\nnodes:\n - name: R1\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - name: R2\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n\nnode_configs:\n - name: R1\n cmds:\n - cmd: ip addr add 10.0.0.1/24 dev net0\n - name: R2\n cmds:\n - cmd: ip addr add 10.0.0.2/24 dev net0\n\n" }, { "path": "examples/basic_namespace/spec.green.yaml", "content": "\nmeta:\n namespace: green_\n\nnodes:\n - name: R1\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - name: R2\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n\nnode_configs:\n - name: R1\n cmds:\n - cmd: ip addr add 10.0.0.1/24 dev net0\n - name: R2\n cmds:\n - cmd: ip addr add 10.0.0.2/24 dev net0\n\n" }, { "path": "examples/basic_napt/spec.yaml", "content": "\n# DESCRIPTION: NAPT network using FRR\n#\n# TOPO:\n# S0\n# (net0).2|\n# |\n# WAN:20.0.0.0/24 |\n# |\n# (net0).1|\n# R1(NAPT)\n# (net1).1|\n# |\n# LAN:10.0.0.0/24 |\n# |\n# (net0).2|\n# C0\n#\n# INIT:\n# cns spec7.yaml init | sudo sh\n# ./setup7.sh\n# FINI:\n# cns spec7.yaml fini | sudo sh\n#\n\nnodes:\n - name: R0\n image: slankdev/frr\n interfaces:\n - name: net0\n type: direct\n args: S0#net0\n - name: net1\n type: direct\n args: C0#net0\n - name: S0\n image: slankdev/ubuntu:16.04\n interfaces:\n - name: net0\n type: direct\n args: R0#net0\n - name: C0\n image: slankdev/ubuntu:16.04\n interfaces:\n - name: net0\n type: direct\n args: R0#net1\n\nnode_configs:\n - name: R0\n cmds:\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"interface net0\"\n -c \"ip address 20.0.0.1/24\"\n -c \"exit\"\n -c \"interface net1\"\n -c \"ip address 10.0.0.1/24\"\n -c \"exit\"\n - cmd: >-\n iptables -t nat -A POSTROUTING\n -s 10.0.0.0/24 -j MASQUERADE\n\n - name: S0\n cmds:\n - cmd: ip addr add 20.0.0.2/24 dev net0\n - cmd: ip route del default\n - cmd: ip route add default via 20.0.0.1\n\n - name: C0\n cmds:\n - cmd: ip addr add 10.0.0.2/24 dev net0\n - cmd: ip route del default\n - cmd: ip route add default via 10.0.0.1\n\ntest:\n - cmds:\n - cmd: docker exec C0 ping -c2 20.0.0.2\n - cmd: docker exec -d S0 iperf -s\n - cmd: docker exec C0 iperf -c 20.0.0.2\n" }, { "path": "examples/basic_netflow/README.md", "content": "# NetFlow/IPFIX using pmacctd\n\n## pmacct\nref: https://github.com/linsomniac/pmacct/blob/master/EXAMPLES\n\n```\npmacctd -P print -r 1 -i net0 -c src_host,dst_host\npmacctd -P memory -i net0 -c src_host,dst_host\npmacctd -P memory -c src_host,dst_host\npmacctd -P memory -c src_host,dst_host -D\npmacctd -P memory -c src_host,dst_host,proto,src_port,dst_port\npmacctd -f /conf.txt\n\npmacct -s -p /tmp/collect.pipe\npmacct -s -p /tmp/collect.pipe -O json\n```\n\n```\nplugins: memory\naggregate: src_host,dst_host,proto,src_port,dst_port\nplugin_buffer_size: 35200\nplugin_pipe_size: 409600000\n```\n\n## nfcapd/nfdump\n```\nnfcapd -w -l /tmp -p 2100\n```\n" }, { "path": "examples/basic_netflow/multipath/Makefile", "content": "linkstats:\n\t@echo -n \"R1:net0 \"\n\t@docker exec -it R1 sh -c \"ip -j -s link show dev net0 | jq '.[0] | [.stats64.rx.packets, .stats64.tx.packets] | @tsv' -r\"\n\t@echo -n \"R2:net0 \"\n\t@docker exec -it R1 sh -c \"ip -j -s link show dev net0 | jq '.[0] | [.stats64.rx.packets, .stats64.tx.packets] | @tsv' -r\"\n\t@echo -n \"R3:net0 \"\n\t@docker exec -it R3 sh -c \"ip -j -s link show dev net0 | jq '.[0] | [.stats64.rx.packets, .stats64.tx.packets] | @tsv' -r\"\n\t@echo -n \"R4:net0 \"\n\t@docker exec -it R4 sh -c \"ip -j -s link show dev net0 | jq '.[0] | [.stats64.rx.packets, .stats64.tx.packets] | @tsv' -r\"\nflowstats:\n\tdocker exec C3 pmacct -s -p /tmp/collect.pipe\nreset:\n\tdocker exec C3 pmacct -e -p /tmp/collect.pipe\n\tdocker exec R1 pmacct -e -p /tmp/collect.pipe\n\tdocker exec R2 pmacct -e -p /tmp/collect.pipe\n\tdocker exec R3 pmacct -e -p /tmp/collect.pipe\n\tdocker exec R4 pmacct -e -p /tmp/collect.pipe\ntest-iperf:\n\t#docker exec -it C2 iperf3 -c 10.1.0.10 -P5 -t 5\n\tdocker exec -it C2 iperf3 -c 10.1.0.10 -n 5G\ntest-vegeta:\n\tdocker exec -it C2 sh -c \"cat /vegeta.conf | vegeta attack -keepalive=false -duration=5s | tee results.bin | vegeta report\"\n\t#docker exec -it C2 sh -c \"cat /vegeta.conf | vegeta attack -duration=5s | tee results.bin | vegeta report\"\n" }, { "path": "examples/basic_netflow/multipath/spec.yaml", "content": "---\nnodes:\n- name: R1\n image: tinynetwork/pmacctd:develop\n interfaces:\n - { name: net0, type: bridge, args: B1 }\n - { name: net1, type: bridge, args: B2 }\n sysctls: [{ sysctl: net.ipv4.fib_multipath_hash_policy=1 }]\n- name: R2\n image: tinynetwork/pmacctd:develop\n interfaces:\n - { name: net0, type: bridge, args: B1 }\n - { name: net1, type: bridge, args: B2 }\n sysctls: [{ sysctl: net.ipv4.fib_multipath_hash_policy=1 }]\n- name: R3\n image: tinynetwork/pmacctd:develop\n interfaces:\n - { name: net0, type: bridge, args: B1 }\n - { name: net1, type: bridge, args: B2 }\n sysctls: [{ sysctl: net.ipv4.fib_multipath_hash_policy=1 }]\n- name: R4\n image: tinynetwork/pmacctd:develop\n interfaces:\n - { name: net0, type: bridge, args: B1 }\n - { name: net1, type: bridge, args: B2 }\n sysctls: [{ sysctl: net.ipv4.fib_multipath_hash_policy=1 }]\n\n- name: C1\n image: tinynetwork/nginx:develop\n interfaces: [{ name: net0, type: bridge, args: B1 }]\n sysctls: [{ sysctl: net.ipv4.fib_multipath_hash_policy=1 }]\n- name: C2\n image: tinynetwork/pmacctd:develop\n interfaces: [{ name: net0, type: bridge, args: B2 }]\n sysctls: [{ sysctl: net.ipv4.fib_multipath_hash_policy=1 }]\n- name: C3\n image: tinynetwork/pmacctd:develop\n interfaces: [{ name: net0, type: bridge, args: B2 }]\n sysctls: [{ sysctl: net.ipv4.fib_multipath_hash_policy=1 }]\n\nswitches:\n- name: B1\n interfaces:\n - { name: net0, type: container, args: R1 }\n - { name: net0, type: container, args: R2 }\n - { name: net0, type: container, args: R3 }\n - { name: net0, type: container, args: R4 }\n - { name: net0, type: container, args: C1 }\n- name: B2\n interfaces:\n - { name: net1, type: container, args: R1 }\n - { name: net1, type: container, args: R2 }\n - { name: net1, type: container, args: R3 }\n - { name: net1, type: container, args: R4 }\n - { name: net0, type: container, args: C2 }\n - { name: net0, type: container, args: C3 }\n\nnode_configs:\n- name: R1\n cmds:\n - cmd: ip addr add 10.1.0.1/24 dev net0\n - cmd: ip addr add 10.2.0.1/24 dev net1\n - cmd: pmacctd -f /pmacctd.conf\n- name: R2\n cmds:\n - cmd: ip addr add 10.1.0.2/24 dev net0\n - cmd: ip addr add 10.2.0.2/24 dev net1\n - cmd: pmacctd -f /pmacctd.conf\n- name: R3\n cmds:\n - cmd: ip addr add 10.1.0.3/24 dev net0\n - cmd: ip addr add 10.2.0.3/24 dev net1\n - cmd: pmacctd -f /pmacctd.conf\n- name: R4\n cmds:\n - cmd: ip addr add 10.1.0.4/24 dev net0\n - cmd: ip addr add 10.2.0.4/24 dev net1\n - cmd: pmacctd -f /pmacctd.conf\n\n- name: C1\n cmds:\n - cmd: ip addr add 10.1.0.10/24 dev net0\n - cmd: >-\n ip route replace default\n nexthop via 10.1.0.1\n nexthop via 10.1.0.2\n nexthop via 10.1.0.3\n nexthop via 10.1.0.4\n - cmd: nginx\n - cmd: iperf3 -s -D\n- name: C2\n cmds:\n - cmd: ip addr add 10.2.0.10/24 dev net0\n - cmd: >-\n ip route replace default\n nexthop via 10.2.0.1\n nexthop via 10.2.0.2\n nexthop via 10.2.0.3\n nexthop via 10.2.0.4\n- name: C3\n cmds:\n - cmd: ip addr add 10.2.0.11/24 dev net0\n - cmd: >-\n ip route replace default\n nexthop via 10.2.0.1\n nexthop via 10.2.0.2\n nexthop via 10.2.0.3\n nexthop via 10.2.0.4\n #- cmd: nfacctd -f /nfacctd.conf\n - cmd: nfcapd -l /tmp -p 2100 -t 10 -D\npostinit:\n cmds:\n - cmd: |\n cat </tmp/pmacctd.conf\n daemonize: true\n aggregate: src_host,dst_host,proto,src_port,dst_port\n logfile: /var/log/pmacctd.log\n interface: net0\n plugin_buffer_size: 3520000\n plugin_pipe_size: 409600000\n\n !plugins: memory\n\n plugins: nfprobe\n nfprobe_receiver: 10.2.0.11:2100\n nfprobe_version: 9\n nfprobe_timeouts: maxlife=1\n EOF\n - cmd: |\n cat </tmp/nfacctd.conf\n daemonize: true\n aggregate: src_host,dst_host,proto,src_port,dst_port\n nfacctd_port: 2100\n plugins: memory\n EOF\n - cmd: |\n cat </tmp/vegeta.conf\n GET http://10.1.0.10\n EOF\n - cmd: docker cp /tmp/pmacctd.conf R1:/pmacctd.conf\n - cmd: docker cp /tmp/pmacctd.conf R2:/pmacctd.conf\n - cmd: docker cp /tmp/pmacctd.conf R3:/pmacctd.conf\n - cmd: docker cp /tmp/pmacctd.conf R4:/pmacctd.conf\n - cmd: docker cp /tmp/nfacctd.conf C3:/nfacctd.conf\n - cmd: docker cp /tmp/vegeta.conf C2:/vegeta.conf\n\ntest:\n- name: clear\n cmds:\n - cmd: docker exec R1 pmacct -e -p /tmp/collect.pipe\n - cmd: docker exec R2 pmacct -e -p /tmp/collect.pipe\n" }, { "path": "examples/basic_netflow/simple/spec.yaml", "content": "---\nnodes:\n- name: R1\n image: tinynetwork/pmacctd:develop\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - { name: net1, type: direct, args: R3#net0 }\n - { name: net2, type: direct, args: R4#net0 }\n- name: R2\n image: tinynetwork/pmacctd:develop\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n- name: R3\n image: tinynetwork/pmacctd:develop\n interfaces:\n - { name: net0, type: direct, args: R1#net1 }\n- name: R4\n image: tinynetwork/pmacctd:develop\n interfaces:\n - { name: net0, type: direct, args: R1#net2 }\n\nnode_configs:\n- name: R1\n cmds:\n - cmd: ip addr add 10.2.0.1/24 dev net0\n - cmd: ip addr add 10.3.0.1/24 dev net1\n - cmd: ip addr add 10.4.0.1/24 dev net2\n- name: R2\n cmds:\n - cmd: ip addr add 10.2.0.2/24 dev net0\n - cmd: ip route add default via 10.2.0.1\n- name: R3\n cmds:\n - cmd: ip addr add 10.3.0.2/24 dev net0\n - cmd: ip route add default via 10.3.0.1\n- name: R4\n cmds:\n - cmd: ip addr add 10.4.0.2/24 dev net0\n - cmd: ip route add default via 10.4.0.1\n" }, { "path": "examples/basic_netns/spec.yaml", "content": "\nnodes:\n - name: H0\n type: netns\n interfaces:\n - { name: net0, type: direct, args: C0#net0 }\n - { name: net1, type: direct, args: C1#net0 }\n - name: C0\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: H0#net0 }\n - name: C1\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: H0#net1 }\n\nnode_configs:\n - name: H0\n cmds:\n - cmd: ip addr add 10.0.0.1/24 dev net0\n - cmd: ip addr add 10.1.0.1/24 dev net1\n - name: C0\n cmds:\n - cmd: ip addr add 10.0.0.2/24 dev net0\n - cmd: ip route replace default via 10.0.0.1\n - name: C1\n cmds:\n - cmd: ip addr add 10.1.0.2/24 dev net0\n - cmd: ip route replace default via 10.1.0.1\n\ntest:\n - cmds:\n - cmd: echo slankdev\n\n" }, { "path": "examples/basic_nftables/masquerade/README.md", "content": "\n# nftables study (MASQ)\n\ncheck nft is enabled (m is OK)\n```\n# cat /boot/config-`uname -r` | grep CONFIG_NF_TABLES\nCONFIG_NF_TABLES=m\nCONFIG_NF_TABLES_INET=m\nCONFIG_NF_TABLES_NETDEV=m\nCONFIG_NF_TABLES_IPV4=m\nCONFIG_NF_TABLES_ARP=m\nCONFIG_NF_TABLES_IPV6=m\nCONFIG_NF_TABLES_BRIDGE=m\n```\n\n- Good reference\n\t-\thttps://knowledge.sakura.ad.jp/22636/\n\t- https://www.slideshare.net/s1061123/nftables-the-next-generation-firewall-in-linux\n" }, { "path": "examples/basic_nftables/masquerade/spec.yaml", "content": "\npostinit:\n - cmds:\n - cmd: docker cp ../../../tools/http_server.py R3:/usr/bin\n - cmd: docker cp ../../../tools/echo_server.py R3:/usr/bin\n\nnodes:\n - name: R1\n image: slankdev/conntrack:centos-7\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - name: R2\n image: slankdev/conntrack:centos-7\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - { name: net1, type: direct, args: R3#net0 }\n - name: R3\n image: slankdev/conntrack:centos-7\n interfaces:\n - { name: net0, type: direct, args: R2#net1 }\n\nnode_configs:\n - name: R1\n cmds:\n - cmd: ip addr add 10.0.0.2/24 dev net0\n - cmd: ip route add default via 10.0.0.1\n\n - name: R2\n cmds:\n - cmd: ip addr add 10.0.0.1/24 dev net0\n - cmd: ip addr add 20.0.0.1/24 dev net1\n - cmd: nft create table ip nat\n - cmd: nft create chain ip nat prerouting { type nat hook prerouting priority 0 \\;}\n - cmd: nft create chain ip nat postrouting { type nat hook postrouting priority 0 \\;}\n - cmd: nft add rule nat postrouting ip saddr 10.0.0.0/24 oif net1 masquerade\n\n - name: R3\n cmds:\n - cmd: ip addr add 20.0.0.2/24 dev net0\n - cmd: nohup http_server.py &\n\n" }, { "path": "examples/basic_nftables/snat/README.md", "content": "\n# nftables study (SNAT)\n\ncheck nft is enabled (m is OK)\n```\n# cat /boot/config-`uname -r` | grep CONFIG_NF_TABLES\nCONFIG_NF_TABLES=m\nCONFIG_NF_TABLES_INET=m\nCONFIG_NF_TABLES_NETDEV=m\nCONFIG_NF_TABLES_IPV4=m\nCONFIG_NF_TABLES_ARP=m\nCONFIG_NF_TABLES_IPV6=m\nCONFIG_NF_TABLES_BRIDGE=m\n```\n\n- Good reference\n\t-\thttps://knowledge.sakura.ad.jp/22636/\n\t- https://www.slideshare.net/s1061123/nftables-the-next-generation-firewall-in-linux\n" }, { "path": "examples/basic_nftables/snat/spec.yaml", "content": "\npostinit:\n - cmds:\n - cmd: docker cp ../../../tools/http_server.py R3:/usr/bin\n - cmd: docker cp ../../../tools/echo_server.py R3:/usr/bin\n\nnodes:\n - name: R1\n image: slankdev/conntrack:centos-7\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - name: R2\n image: slankdev/conntrack:centos-7\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - { name: net1, type: direct, args: R3#net0 }\n - name: R3\n image: slankdev/conntrack:centos-7\n interfaces:\n - { name: net0, type: direct, args: R2#net1 }\n\nnode_configs:\n - name: R1\n cmds:\n - cmd: ip addr add 10.0.0.2/24 dev net0\n - cmd: ip route add default via 10.0.0.1\n\n - name: R2\n cmds:\n - cmd: ip addr add 10.0.0.1/24 dev net0\n - cmd: ip addr add 20.0.0.1/24 dev net1\n - cmd: nft create table ip nat\n - cmd: nft create chain ip nat prerouting { type nat hook prerouting priority 0 \\;}\n - cmd: nft create chain ip nat postrouting { type nat hook postrouting priority 0 \\;}\n - cmd: nft add rule nat postrouting ip protocol tcp snat to 20.0.0.1:100-200\n\n - name: R3\n cmds:\n - cmd: ip addr add 20.0.0.2/24 dev net0\n - cmd: nohup http_server.py &\n\n" }, { "path": "examples/basic_ospfv2_bird/README.md", "content": "\n# Multiple OSPFv3 Instance using Bird\n\n![](./topo.png)\n\n```\n```\n" }, { "path": "examples/basic_ospfv2_bird/bird/R1_bird.conf", "content": "router id 10.255.0.1;\n\nprotocol device {\n}\n\nprotocol kernel {\n\tlearn;\n\texport all;\n\timport all;\n}\n\nprotocol ospf instance_A {\n\trouter id 10.255.0.1;\n\texport all;\n\timport all;\n\tarea 0.0.0.0 {\n\t\tinterface \"net0\" {\n\t\t\thello 10;\n\t\t\twait 40;\n\t\t\ttype ptp;\n\t\t};\n\t\tinterface \"net1\" {\n\t\t\thello 10;\n\t\t\twait 40;\n\t\t\ttype ptp;\n\t\t};\n\t\tinterface \"net2\" {\n\t\t\thello 10;\n\t\t\twait 40;\n\t\t\ttype ptp;\n\t\t};\n\t};\n}\n" }, { "path": "examples/basic_ospfv2_bird/bird/R2_bird.conf", "content": "router id 10.255.0.2;\n\nprotocol device {\n}\n\nprotocol kernel {\n\tlearn;\n\texport all;\n\timport all;\n}\n\nprotocol ospf instance_A {\n\trouter id 10.255.0.2;\n\texport all;\n\timport all;\n\tarea 0.0.0.0 {\n\t\tinterface \"net0\" {\n\t\t\thello 10;\n\t\t\twait 40;\n\t\t\ttype ptp;\n\t\t};\n\t\tinterface \"net1\" {\n\t\t\thello 10;\n\t\t\twait 40;\n\t\t\ttype ptp;\n\t\t};\n\t};\n}\n\n" }, { "path": "examples/basic_ospfv2_bird/bird/R3_bird.conf", "content": "router id 10.255.0.3;\n\nprotocol device {\n}\n\nprotocol kernel {\n\tlearn;\n\texport all;\n\timport all;\n}\n\nprotocol ospf instance_A {\n\trouter id 10.255.0.3;\n\texport all;\n\timport all;\n\tarea 0.0.0.0 {\n\t\tinterface \"net0\" {\n\t\t\thello 10;\n\t\t\twait 40;\n\t\t\ttype ptp;\n\t\t};\n\t\tinterface \"net1\" {\n\t\t\thello 10;\n\t\t\twait 40;\n\t\t\ttype ptp;\n\t\t};\n\t\tinterface \"net2\" {\n\t\t\thello 10;\n\t\t\twait 40;\n\t\t\ttype ptp;\n\t\t};\n\t};\n}\n\n" }, { "path": "examples/basic_ospfv2_bird/bird/R4_bird.conf", "content": "router id 10.255.0.4;\n\nprotocol device {\n}\n\nprotocol kernel {\n\tlearn;\n\texport all;\n\timport all;\n}\n\nprotocol ospf instance_A {\n\trouter id 10.255.0.4;\n\texport all;\n\timport all;\n\tarea 0.0.0.0 {\n\t\tinterface \"net0\" {\n\t\t\thello 10;\n\t\t\twait 40;\n\t\t\ttype ptp;\n\t\t};\n\t\tinterface \"net1\" {\n\t\t\thello 10;\n\t\t\twait 40;\n\t\t\ttype ptp;\n\t\t};\n\t\tinterface \"net2\" {\n\t\t\thello 10;\n\t\t\twait 40;\n\t\t\ttype ptp;\n\t\t};\n\t};\n}\n\n" }, { "path": "examples/basic_ospfv2_bird/spec.yaml", "content": "\npostinit:\n - cmds:\n - cmd: docker cp bird/R1_bird.conf R1:/etc/bird/bird.conf\n - cmd: docker cp bird/R2_bird.conf R2:/etc/bird/bird.conf\n - cmd: docker cp bird/R3_bird.conf R3:/etc/bird/bird.conf\n - cmd: docker cp bird/R4_bird.conf R4:/etc/bird/bird.conf\n\nnodes:\n - name: R1\n image: tmp\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - { name: net1, type: direct, args: R3#net0 }\n - { name: net2, type: direct, args: S1#net0 }\n - name: R2\n image: tmp\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - { name: net1, type: direct, args: R4#net0 }\n - name: R3\n image: tmp\n interfaces:\n - { name: net0, type: direct, args: R1#net1 }\n - { name: net1, type: direct, args: R4#net1 }\n - { name: net2, type: direct, args: S3#net0 }\n - name: R4\n image: tmp\n interfaces:\n - { name: net0, type: direct, args: R2#net1 }\n - { name: net1, type: direct, args: R3#net1 }\n - { name: net2, type: direct, args: S4#net0 }\n - name: S1\n image: tmp\n interfaces:\n - { name: net0, type: direct, args: R1#net2 }\n - name: S3\n image: tmp\n interfaces:\n - { name: net0, type: direct, args: R3#net2 }\n - name: S4\n image: tmp\n interfaces:\n - { name: net0, type: direct, args: R4#net2 }\n\nnode_configs:\n - name: R1\n cmds:\n - cmd: ip addr add 10.0.0.1/30 dev net0\n - cmd: ip addr add 10.0.0.9/30 dev net1\n - cmd: ip addr add 10.0.0.17/30 dev net2\n - cmd: ip addr add 10.255.0.1/32 dev lo\n - cmd: mkdir -p /run/bird\n - cmd: bird -c /etc/bird/bird.conf\n - name: R2\n cmds:\n - cmd: ip addr add 10.0.0.2/30 dev net0\n - cmd: ip addr add 10.0.0.13/30 dev net1\n - cmd: ip addr add 10.255.0.2/32 dev lo\n - cmd: mkdir -p /run/bird\n - cmd: bird -c /etc/bird/bird.conf\n - name: R3\n cmds:\n - cmd: ip addr add 10.0.0.10/30 dev net0\n - cmd: ip addr add 10.0.0.5/30 dev net1\n - cmd: ip addr add 10.0.0.21/30 dev net2\n - cmd: ip addr add 10.255.0.3/32 dev lo\n - cmd: mkdir -p /run/bird\n - cmd: bird -c /etc/bird/bird.conf\n - name: R4\n cmds:\n - cmd: ip addr add 10.0.0.14/30 dev net0\n - cmd: ip addr add 10.0.0.6/30 dev net1\n - cmd: ip addr add 10.0.0.25/30 dev net2\n - cmd: ip addr add 10.255.0.4/32 dev lo\n - cmd: mkdir -p /run/bird\n - cmd: bird -c /etc/bird/bird.conf\n - name: S1\n cmds:\n - cmd: ip addr add 10.0.0.18/30 dev net0\n - cmd: ip route replace default via 10.0.0.17\n - name: S3\n cmds:\n - cmd: ip addr add 10.0.0.22/30 dev net0\n - cmd: ip route replace default via 10.0.0.21\n - name: S4\n cmds:\n - cmd: ip addr add 10.0.0.26/30 dev net0\n - cmd: ip route replace default via 10.0.0.25\n\ntest:\n - name: p2p\n cmds:\n - cmd: docker exec R1 ping -c2 10.0.0.1\n - cmd: docker exec R1 ping -c2 10.0.0.2\n - cmd: docker exec R1 ping -c2 10.0.0.9\n - cmd: docker exec R1 ping -c2 10.0.0.10\n - cmd: docker exec R1 ping -c2 10.0.0.17\n - cmd: docker exec R1 ping -c2 10.0.0.18\n\n - cmd: docker exec R2 ping -c2 10.0.0.1\n - cmd: docker exec R2 ping -c2 10.0.0.2\n - cmd: docker exec R2 ping -c2 10.0.0.13\n - cmd: docker exec R2 ping -c2 10.0.0.14\n\n - cmd: docker exec R3 ping -c2 10.0.0.9\n - cmd: docker exec R3 ping -c2 10.0.0.10\n - cmd: docker exec R3 ping -c2 10.0.0.5\n - cmd: docker exec R3 ping -c2 10.0.0.6\n - cmd: docker exec R3 ping -c2 10.0.0.21\n - cmd: docker exec R3 ping -c2 10.0.0.22\n\n - cmd: docker exec R4 ping -c2 10.0.0.13\n - cmd: docker exec R4 ping -c2 10.0.0.14\n - cmd: docker exec R4 ping -c2 10.0.0.5\n - cmd: docker exec R4 ping -c2 10.0.0.6\n - cmd: docker exec R4 ping -c2 10.0.0.25\n - cmd: docker exec R4 ping -c2 10.0.0.26\n\n" }, { "path": "examples/basic_ospfv2_frr/README.md", "content": "\n# OSPFv2 using FRR\n\n![](./topo.png)\n\n\n" }, { "path": "examples/basic_ospfv2_frr/spec.yaml", "content": "\n# DESCRIPTION: OSPF network using FRR\n# INIT:\n# cns spec.yaml init | sudo sh\n# cns spec.yaml conf | sudo sh\n# cns spec.yaml test | sudo sh\n# FINI:\n# cns spec.yaml fini | sudo sh\n# TOPO:\n#\n\nnodes:\n - name: R1\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - { name: net1, type: direct, args: R3#net0 }\n - { name: net2, type: direct, args: S1#net0 }\n - name: R2\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - { name: net1, type: direct, args: R4#net0 }\n - name: R3\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R1#net1 }\n - { name: net1, type: direct, args: R4#net1 }\n - { name: net2, type: direct, args: S3#net0 }\n - name: R4\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R2#net1 }\n - { name: net1, type: direct, args: R3#net1 }\n - { name: net2, type: direct, args: S4#net0 }\n - name: S1\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R1#net2 }\n - name: S3\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R3#net2 }\n - name: S4\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R4#net2 }\n\nnode_configs:\n - name: S1\n cmds:\n - cmd: ip addr add 10.0.0.18/30 dev net0\n - cmd: ip route replace default via 10.0.0.17\n - name: S3\n cmds:\n - cmd: ip addr add 10.0.0.22/30 dev net0\n - cmd: ip route replace default via 10.0.0.21\n - name: S4\n cmds:\n - cmd: ip addr add 10.0.0.26/30 dev net0\n - cmd: ip route replace default via 10.0.0.25\n - name: R1\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: ip addr add 10.0.0.1/30 dev net0\n - cmd: ip addr add 10.0.0.9/30 dev net1\n - cmd: ip addr add 10.0.0.17/30 dev net2\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router ospf\"\n -c \" network 10.0.0.0/30 area 0\"\n -c \" network 10.0.0.8/30 area 0\"\n -c \" network 10.0.0.16/30 area 0\"\n - name: R2\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: ip addr add 10.0.0.2/30 dev net0\n - cmd: ip addr add 10.0.0.13/30 dev net1\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router ospf\"\n -c \" network 10.0.0.0/30 area 0\"\n -c \" network 10.0.0.12/30 area 0\"\n - name: R3\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: ip addr add 10.0.0.10/30 dev net0\n - cmd: ip addr add 10.0.0.5/30 dev net1\n - cmd: ip addr add 10.0.0.21/30 dev net2\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router ospf\"\n -c \" network 10.0.0.8/30 area 0\"\n -c \" network 10.0.0.4/30 area 0\"\n -c \" network 10.0.0.20/30 area 0\"\n - name: R4\n cmds:\n - cmd: /usr/lib/frr/frr start\n - cmd: ip addr add 10.0.0.14/30 dev net0\n - cmd: ip addr add 10.0.0.6/30 dev net1\n - cmd: ip addr add 10.0.0.25/30 dev net2\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router ospf\"\n -c \" network 10.0.0.12/30 area 0\"\n -c \" network 10.0.0.4/30 area 0\"\n -c \" network 10.0.0.24/30 area 0\"\n\ntest:\n - cmds:\n # P2P Link test\n - cmd: docker exec S1 ping -c2 10.0.0.17\n - cmd: docker exec S3 ping -c2 10.0.0.21\n - cmd: docker exec S4 ping -c2 10.0.0.25\n - cmd: docker exec R1 ping -c2 10.0.0.2\n - cmd: docker exec R1 ping -c2 10.0.0.10\n - cmd: docker exec R1 ping -c2 10.0.0.18\n - cmd: docker exec R2 ping -c2 10.0.0.1\n - cmd: docker exec R2 ping -c2 10.0.0.14\n - cmd: docker exec R3 ping -c2 10.0.0.9\n - cmd: docker exec R3 ping -c2 10.0.0.6\n - cmd: docker exec R3 ping -c2 10.0.0.21\n - cmd: docker exec R4 ping -c2 10.0.0.13\n - cmd: docker exec R4 ping -c2 10.0.0.5\n - cmd: docker exec R4 ping -c2 10.0.0.26\n\n" }, { "path": "examples/basic_ospfv3_bird_multiple_instance/R3_bird6.conf", "content": "router id 10.255.0.3;\n\nprotocol device dev0 {\n}\n\nprotocol kernel ker0 {\n\tlearn;\n\texport all;\n\timport all;\n}\n\ntable red;\nprotocol kernel ker1 {\n\tlearn;\n\texport all;\n\timport all;\n\ttable red;\n\tkernel table 10;\n}\n\ntable blu;\nprotocol kernel ker2 {\n\tlearn;\n\texport all;\n\timport all;\n\ttable blu;\n\tkernel table 20;\n}\n\nprotocol direct dir1 {\n\ttable red;\n\tinterface \"net0\";\n\tinterface \"net2\";\n}\n\nprotocol direct dir2 {\n\ttable blu;\n\tinterface \"net1\";\n\tinterface \"net3\";\n}\n\nprotocol ospf ored {\n\tvrf \"red\";\n\ttable red;\n\trouter id 10.255.0.30;\n\texport all;\n\timport all;\n\tarea 0.0.0.0 {\n\t\tinterface \"net0\" {\n\t\t\thello 10;\n\t\t\twait 40;\n\t\t\ttype ptp;\n\t\t};\n\t\tinterface \"net2\" {\n\t\t\thello 10;\n\t\t\twait 40;\n\t\t\ttype ptp;\n\t\t};\n\t};\n}\n\nprotocol ospf oblu {\n\tvrf \"blu\";\n\ttable blu;\n\trouter id 10.255.0.31;\n\texport all;\n\timport all;\n\tarea 0.0.0.0 {\n\t\tinterface \"net1\" {\n\t\t\thello 10;\n\t\t\twait 40;\n\t\t\ttype ptp;\n\t\t};\n\t\tinterface \"net3\" {\n\t\t\thello 10;\n\t\t\twait 40;\n\t\t\ttype ptp;\n\t\t};\n\t};\n}\n\n" }, { "path": "examples/basic_ospfv3_bird_multiple_instance/README.md", "content": "\n# OSPFv3 Multiple Instance(VRF) using Bird\n\n![](./topo.png)\n\n- the tmp image should include **bird-1.6.6**\n- also kernel's version can be perform l3mdev\n" }, { "path": "examples/basic_ospfv3_bird_multiple_instance/spec.yaml", "content": "\npostinit:\n - cmds:\n - cmd: docker exec R3 mkdir -p /etc/bird\n - cmd: docker cp R3_bird6.conf R3:/etc/bird/bird6.conf\n\nnodes:\n - name: R1\n image: tmp\n interfaces:\n - { name: net0, type: direct, args: R3#net0 }\n - name: R2\n image: tmp\n interfaces:\n - { name: net0, type: direct, args: R3#net1 }\n - name: R3\n image: tmp\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - { name: net1, type: direct, args: R2#net0 }\n - { name: net2, type: direct, args: R4#net0 }\n - { name: net3, type: direct, args: R4#net1 }\n - name: R4\n image: tmp\n interfaces:\n - { name: net0, type: direct, args: R3#net2 }\n - { name: net1, type: direct, args: R3#net3 }\n\nnode_configs:\n - name: R1\n cmds:\n - cmd: sh -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'int net0'\n -c ' ipv6 address 2001:111::2/64'\n -c ' ipv6 ospf6 network point-to-point'\n -c ' exit'\n -c 'router ospf6'\n -c ' ospf6 router-id 10.255.0.1'\n -c ' interface net0 area 0.0.0.0'\n -c ' exit'\n\n - name: R2\n cmds:\n - cmd: sh -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'int net0'\n -c ' ipv6 address 2001:222::2/64'\n -c ' ipv6 ospf6 network point-to-point'\n -c ' exit'\n -c 'router ospf6'\n -c ' ospf6 router-id 10.255.0.2'\n -c ' interface net0 area 0.0.0.0'\n -c ' exit'\n\n - name: R3\n cmds:\n - cmd: sh -c \"enable_seg6_router.py | sh\"\n - cmd: ip link add red type vrf table 10\n - cmd: ip link add blu type vrf table 20\n - cmd: ip link set dev red up\n - cmd: ip link set dev blu up\n - cmd: ip link set net0 vrf red\n - cmd: ip link set net2 vrf red\n - cmd: ip link set net1 vrf blu\n - cmd: ip link set net3 vrf blu\n - cmd: ip -6 addr add 2001:111::1/64 dev net0\n - cmd: ip -6 addr add 2001:222::1/64 dev net1\n - cmd: ip -6 addr add 2001:f10::1/64 dev net2\n - cmd: ip -6 addr add 2001:f11::1/64 dev net3\n - cmd: mkdir -p /run/bird\n - cmd: bird6 -c /etc/bird/bird6.conf\n\n - name: R4\n cmds:\n - cmd: sh -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: >-\n vtysh -c 'conf t'\n -c 'int net0'\n -c ' ipv6 address 2001:f10::2/64'\n -c ' ipv6 ospf6 network point-to-point'\n -c ' exit'\n -c 'int net1'\n -c ' ipv6 address 2001:f11::2/64'\n -c ' ipv6 ospf6 network point-to-point'\n -c ' exit'\n -c 'router ospf6'\n -c ' ospf6 router-id 10.255.0.4'\n -c ' interface net0 area 0.0.0.0'\n -c ' interface net1 area 0.0.0.0'\n -c ' exit'\n\ntest:\n - name: p2p\n cmds:\n # - cmd: docker exec R1 ping -c2 10.0.0.1\n # - cmd: docker exec R1 ping -c2 10.0.0.2\n # - cmd: docker exec R2 ping -c2 10.0.0.1\n # - cmd: docker exec R2 ping -c2 10.0.0.2\n\n" }, { "path": "examples/basic_ospfv3_frr/README.md", "content": "\n# OSPFv3 using FRR\n\n![](./topo.png)\n\n\n" }, { "path": "examples/basic_ospfv3_frr/spec.yaml", "content": "\n# DESCRIPTION: OSPF network using FRR\n# INIT:\n# cns spec.yaml init | sudo sh\n# cns spec.yaml conf | sudo sh\n# cns spec.yaml test | sudo sh\n# FINI:\n# cns spec.yaml fini | sudo sh\n# TOPO:\n#\n\nnodes:\n - name: R1\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R2#net0 }\n - { name: net1, type: direct, args: R3#net0 }\n - { name: net2, type: direct, args: S1#net0 }\n - name: R2\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - { name: net1, type: direct, args: R4#net0 }\n - name: R3\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R1#net1 }\n - { name: net1, type: direct, args: R4#net1 }\n - { name: net2, type: direct, args: S3#net0 }\n - name: R4\n image: slankdev/frr\n interfaces:\n - { name: net0, type: direct, args: R2#net1 }\n - { name: net1, type: direct, args: R3#net1 }\n - { name: net2, type: direct, args: S4#net0 }\n - name: S1\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R1#net2 }\n - name: S3\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R3#net2 }\n - name: S4\n image: slankdev/ubuntu:18.04\n interfaces:\n - { name: net0, type: direct, args: R4#net2 }\n\nnode_configs:\n - name: S1\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: ip -6 addr add 2001:11::2/64 dev net0\n - cmd: ip -6 route replace default via 2001:11::1\n - name: S3\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: ip -6 addr add 2001:33::2/64 dev net0\n - cmd: ip -6 route replace default via 2001:33::1\n - name: S4\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: ip -6 addr add 2001:44::2/64 dev net0\n - cmd: ip -6 route replace default via 2001:44::1\n - name: R1\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: ip -6 addr add 2001:12::1/64 dev net0\n - cmd: ip -6 addr add 2001:13::1/64 dev net1\n - cmd: ip -6 addr add 2001:11::1/64 dev net2\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router ospf6\"\n -c ' ospf6 router-id 10.255.0.1'\n -c \" interface net0 area 0.0.0.0\"\n -c \" interface net1 area 0.0.0.0\"\n -c \" interface net2 area 0.0.0.0\"\n - name: R2\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: ip -6 addr add 2001:12::2/64 dev net0\n - cmd: ip -6 addr add 2001:24::1/64 dev net1\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router ospf6\"\n -c ' ospf6 router-id 10.255.0.2'\n -c \" interface net0 area 0.0.0.0\"\n -c \" interface net1 area 0.0.0.0\"\n - name: R3\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: ip -6 addr add 2001:13::2/64 dev net0\n - cmd: ip -6 addr add 2001:34::1/64 dev net1\n - cmd: ip -6 addr add 2001:33::1/64 dev net2\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router ospf6\"\n -c ' ospf6 router-id 10.255.0.3'\n -c \" interface net0 area 0.0.0.0\"\n -c \" interface net1 area 0.0.0.0\"\n -c \" interface net2 area 0.0.0.0\"\n - name: R4\n cmds:\n - cmd: bash -c \"enable_seg6_router.py | sh\"\n - cmd: /usr/lib/frr/frr start\n - cmd: ip -6 addr add 2001:24::2/64 dev net0\n - cmd: ip -6 addr add 2001:34::2/64 dev net1\n - cmd: ip -6 addr add 2001:44::1/64 dev net2\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router ospf6\"\n -c ' ospf6 router-id 10.255.0.4'\n -c \" interface net0 area 0.0.0.0\"\n -c \" interface net1 area 0.0.0.0\"\n -c \" interface net2 area 0.0.0.0\"\n\ntest:\n - name: p2p\n cmds:\n - cmd: docker exec S1 ping -c2 2001:11::1\n - cmd: docker exec S3 ping -c2 2001:33::1\n - cmd: docker exec S4 ping -c2 2001:44::1\n\n - cmd: docker exec R1 ping -c2 2001:12::1\n - cmd: docker exec R1 ping -c2 2001:12::2\n - cmd: docker exec R1 ping -c2 2001:13::1\n - cmd: docker exec R1 ping -c2 2001:13::2\n - cmd: docker exec R1 ping -c2 2001:11::1\n - cmd: docker exec R1 ping -c2 2001:11::2\n\n - cmd: docker exec R2 ping -c2 2001:12::1\n - cmd: docker exec R2 ping -c2 2001:12::2\n - cmd: docker exec R2 ping -c2 2001:24::1\n - cmd: docker exec R2 ping -c2 2001:24::2\n\n - cmd: docker exec R3 ping -c2 2001:13::1\n - cmd: docker exec R3 ping -c2 2001:13::2\n - cmd: docker exec R3 ping -c2 2001:34::1\n - cmd: docker exec R3 ping -c2 2001:34::2\n - cmd: docker exec R3 ping -c2 2001:33::1\n - cmd: docker exec R3 ping -c2 2001:33::2\n\n - cmd: docker exec R4 ping -c2 2001:24::1\n - cmd: docker exec R4 ping -c2 2001:24::2\n - cmd: docker exec R4 ping -c2 2001:34::1\n - cmd: docker exec R4 ping -c2 2001:34::2\n - cmd: docker exec R4 ping -c2 2001:44::1\n - cmd: docker exec R4 ping -c2 2001:44::2\n\n" }, { "path": "examples/basic_pbr/spec.yaml", "content": "postinit:\n- cmds:\n - cmd: |\n cat < /tmp/Corefile\n .:53 {\n forward . 8.8.8.8\n log\n errors\n cache\n }\n EOF\n - cmd: docker cp /tmp/Corefile S1:/Corefile\n\nnodes:\n- name: S1\n image: slankdev/coredns:centos-7\n net_base: bridge\n interfaces:\n - { name: net0, type: direct, args: HV1#net0 }\n - { name: net1, type: direct, args: HV1#net1 }\n- name: HV1\n image: slankdev/coredns:centos-7\n interfaces:\n - { name: net0, type: direct, args: S1#net0 }\n - { name: net1, type: direct, args: S1#net1 }\n\nnode_configs:\n- name: S1\n cmds:\n - cmd: ip addr add 10.0.0.10/24 dev net0\n - cmd: ip addr add 10.0.0.11/24 dev net1\n - cmd: ip rule add prio 100 from 10.0.0.11 table 300\n - cmd: ip route add default via 10.0.0.1 dev net1 table 300\n - cmd: nohup coredns -conf /Corefile &\n\n- name: HV1\n cmds:\n - cmd: ip addr add 10.0.0.1/24 dev net0\n - cmd: ip addr add 10.0.0.1/24 dev net1\n - cmd: ip route add 10.0.0.10/32 dev net0\n - cmd: ip route add 10.0.0.11/32 dev net1\n" }, { "path": "examples/basic_peer/spec.yaml", "content": "\nprecmd:\n - cmds:\n - cmd: export IMAGE=slankdev/frr:centos-7-stable-7.0\n\nnodes:\n - name: R0\n image: $IMAGE\n interfaces:\n - { name: net0, type: direct, args: R1#net0 }\n - name: R1\n image: $IMAGE\n interfaces:\n - { name: net0, type: direct, args: R0#net0 }\n\nnode_configs:\n - name: R0\n cmds:\n - cmd: sh -c 'enable_seg6_router.py | sh'\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 1\"\n -c \" bgp router-id 1.1.1.1\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor FABRIC capability extended-nexthop\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" redistribute kernel\"\n -c \" exit-address-family\"\n\n - name: R1\n cmds:\n - cmd: sh -c 'enable_seg6_router.py | sh'\n - cmd: /usr/lib/frr/frrinit.sh start\n - cmd: >-\n vtysh -c \"conf t\"\n -c \"router bgp 2\"\n -c \" bgp router-id 2.2.2.2\"\n -c \" bgp bestpath as-path multipath-relax\"\n -c \" bgp bestpath compare-routerid\"\n -c \" neighbor FABRIC peer-group\"\n -c \" neighbor FABRIC remote-as external\"\n -c \" neighbor FABRIC capability extended-nexthop\"\n -c \" neighbor net0 interface peer-group FABRIC\"\n -c \" !\"\n -c \" address-family ipv4 unicast\"\n -c \" redistribute connected\"\n -c \" redistribute kernel\"\n -c \" exit-address-family\"\n\n" }, { "path": "examples/basic_pim/README.md", "content": "\n# PIM Multicast Test\n\nmulticast test\n```\niperf -u -s -B 239.1.1.5 -i 1\niperf -u -c 239.1.1.5 -i -T -t