1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495 |
- package nebula
- import (
- "net"
- "testing"
- "time"
- "github.com/slackhq/nebula/cert"
- "github.com/slackhq/nebula/header"
- "github.com/slackhq/nebula/iputil"
- "github.com/slackhq/nebula/test"
- "github.com/slackhq/nebula/udp"
- "github.com/stretchr/testify/assert"
- )
- func Test_NewHandshakeManagerVpnIp(t *testing.T) {
- l := test.NewLogger()
- _, vpncidr, _ := net.ParseCIDR("172.1.1.1/24")
- _, localrange, _ := net.ParseCIDR("10.1.1.1/24")
- ip := iputil.Ip2VpnIp(net.ParseIP("172.1.1.2"))
- preferredRanges := []*net.IPNet{localrange}
- mainHM := newHostMap(l, vpncidr)
- mainHM.preferredRanges.Store(&preferredRanges)
- lh := newTestLighthouse()
- cs := &CertState{
- RawCertificate: []byte{},
- PrivateKey: []byte{},
- Certificate: &cert.NebulaCertificate{},
- RawCertificateNoKey: []byte{},
- }
- blah := NewHandshakeManager(l, mainHM, lh, &udp.NoopConn{}, defaultHandshakeConfig)
- blah.f = &Interface{handshakeManager: blah, pki: &PKI{}, l: l}
- blah.f.pki.cs.Store(cs)
- now := time.Now()
- blah.NextOutboundHandshakeTimerTick(now)
- i := blah.StartHandshake(ip, nil)
- i2 := blah.StartHandshake(ip, nil)
- assert.Same(t, i, i2)
- i.remotes = NewRemoteList(nil)
- // Adding something to pending should not affect the main hostmap
- assert.Len(t, mainHM.Hosts, 0)
- // Confirm they are in the pending index list
- assert.Contains(t, blah.vpnIps, ip)
- // Jump ahead `HandshakeRetries` ticks, offset by one to get the sleep logic right
- for i := 1; i <= DefaultHandshakeRetries+1; i++ {
- now = now.Add(time.Duration(i) * DefaultHandshakeTryInterval)
- blah.NextOutboundHandshakeTimerTick(now)
- }
- // Confirm they are still in the pending index list
- assert.Contains(t, blah.vpnIps, ip)
- // Tick 1 more time, a minute will certainly flush it out
- blah.NextOutboundHandshakeTimerTick(now.Add(time.Minute))
- // Confirm they have been removed
- assert.NotContains(t, blah.vpnIps, ip)
- }
- func testCountTimerWheelEntries(tw *LockingTimerWheel[iputil.VpnIp]) (c int) {
- for _, i := range tw.t.wheel {
- n := i.Head
- for n != nil {
- c++
- n = n.Next
- }
- }
- return c
- }
- type mockEncWriter struct {
- }
- func (mw *mockEncWriter) SendMessageToVpnIp(t header.MessageType, st header.MessageSubType, vpnIp iputil.VpnIp, p, nb, out []byte) {
- return
- }
- func (mw *mockEncWriter) SendVia(via *HostInfo, relay *Relay, ad, nb, out []byte, nocopy bool) {
- return
- }
- func (mw *mockEncWriter) SendMessageToHostInfo(t header.MessageType, st header.MessageSubType, hostinfo *HostInfo, p, nb, out []byte) {
- return
- }
- func (mw *mockEncWriter) Handshake(vpnIP iputil.VpnIp) {}
|