[PATCH pve-network 12/16] tests: evpn: force ibgp over ebgp bgp controller with ebgp wan session

[Stefan Hanreich <s.hanreich@proxmox.com>]

The new bgp-mode setting allows explicitly overriding the previous
behavior of re-using the existing BGP session from the BGP controller.
Test this by explicitly running an iBGP session over the eBGP mode BGP
controller. Add another EVPN controller that utilizes eBGP for
communicating with an external AS to test the combination of all 3
controllers on a single node.

Signed-off-by: Stefan Hanreich <s.hanreich@proxmox.com>
---
 .../expected_controller_config                | 87 +++++++++++++++++++
 .../expected_sdn_interfaces                   | 41 +++++++++
 .../ebgp_evpn_ibgp_wan_evpn_ebgp/interfaces   | 11 +++
 .../ebgp_evpn_ibgp_wan_evpn_ebgp/sdn_config   | 59 +++++++++++++
 4 files changed, 198 insertions(+)
 create mode 100644 src/test/zones/evpn/ebgp_evpn_ibgp_wan_evpn_ebgp/expected_controller_config
 create mode 100644 src/test/zones/evpn/ebgp_evpn_ibgp_wan_evpn_ebgp/expected_sdn_interfaces
 create mode 100644 src/test/zones/evpn/ebgp_evpn_ibgp_wan_evpn_ebgp/interfaces
 create mode 100644 src/test/zones/evpn/ebgp_evpn_ibgp_wan_evpn_ebgp/sdn_config

diff --git a/src/test/zones/evpn/ebgp_evpn_ibgp_wan_evpn_ebgp/expected_controller_config b/src/test/zones/evpn/ebgp_evpn_ibgp_wan_evpn_ebgp/expected_controller_config
new file mode 100644
index 0000000..4328515
--- /dev/null
+++ b/src/test/zones/evpn/ebgp_evpn_ibgp_wan_evpn_ebgp/expected_controller_config
@@ -0,0 +1,87 @@
+frr version 10.4.1
+frr defaults datacenter
+hostname localhost
+log syslog informational
+service integrated-vtysh-config
+!
+vrf vrf_myzone
+ vni 1000
+exit-vrf
+!
+router bgp 65000
+ bgp router-id 203.0.113.1
+ no bgp default ipv4-unicast
+ coalesce-time 1000
+ bgp disable-ebgp-connected-route-check
+ neighbor BGP peer-group
+ neighbor BGP remote-as external
+ neighbor BGP local-as 65001 no-prepend replace-as
+ neighbor BGP bfd
+ neighbor 198.51.100.10 peer-group BGP
+ neighbor VTEP peer-group
+ neighbor VTEP remote-as 65000
+ neighbor VTEP bfd
+ neighbor VTEP update-source dummy1
+ neighbor 203.0.113.2 peer-group VTEP
+ neighbor 203.0.113.4 peer-group VTEP
+ neighbor wan peer-group
+ neighbor wan remote-as external
+ neighbor wan bfd
+ neighbor wan update-source dummy1
+ neighbor 203.0.113.100 peer-group wan
+ neighbor 203.0.113.101 peer-group wan
+ !
+ address-family ipv4 unicast
+  network 203.0.113.1/32
+  neighbor BGP activate
+  neighbor BGP soft-reconfiguration inbound
+ exit-address-family
+ !
+ address-family l2vpn evpn
+  neighbor VTEP activate
+  neighbor VTEP route-map MAP_VTEP_IN in
+  neighbor VTEP route-map MAP_VTEP_OUT out
+  neighbor wan activate
+  neighbor wan route-map MAP_VTEP_IN_wan in
+  neighbor wan route-map MAP_VTEP_OUT_wan out
+  advertise-all-vni
+ exit-address-family
+exit
+!
+router bgp 65000 vrf vrf_myzone
+ bgp router-id 203.0.113.1
+ no bgp hard-administrative-reset
+ no bgp graceful-restart notification
+exit
+!
+bgp extcommunity-list standard pve_controller_cluster permit rt 65000:1000
+bgp extcommunity-list standard pve_controller_cluster permit rt 65000:100
+!
+bgp extcommunity-list standard pve_controller_wan permit rt 65000:1000
+bgp extcommunity-list standard pve_controller_wan permit rt 65000:100
+!
+ip prefix-list loopbacks_ips seq 10 permit 0.0.0.0/0 le 32
+!
+route-map MAP_VTEP_IN permit 1
+exit
+!
+route-map MAP_VTEP_IN_wan permit 1
+exit
+!
+route-map MAP_VTEP_OUT permit 1
+ match extcommunity pve_controller_cluster any
+exit
+!
+route-map MAP_VTEP_OUT_wan permit 1
+ match extcommunity pve_controller_wan any
+exit
+!
+route-map correct_src permit 1
+ match ip address prefix-list loopbacks_ips
+ set src 203.0.113.1
+exit
+!
+ip protocol bgp route-map correct_src
+!
+line vty
+!
diff --git a/src/test/zones/evpn/ebgp_evpn_ibgp_wan_evpn_ebgp/expected_sdn_interfaces b/src/test/zones/evpn/ebgp_evpn_ibgp_wan_evpn_ebgp/expected_sdn_interfaces
new file mode 100644
index 0000000..7481d36
--- /dev/null
+++ b/src/test/zones/evpn/ebgp_evpn_ibgp_wan_evpn_ebgp/expected_sdn_interfaces
@@ -0,0 +1,41 @@
+#version:1
+
+auto myvnet
+iface myvnet
+	address 10.0.0.1/24
+	bridge_ports vxlan_myvnet
+	bridge_stp off
+	bridge_fd 0
+	mtu 1450
+	ip-forward on
+	arp-accept on
+	vrf vrf_myzone
+
+auto vrf_myzone
+iface vrf_myzone
+	vrf-table auto
+	post-up ip route add vrf vrf_myzone unreachable default metric 4278198272
+
+auto vrfbr_myzone
+iface vrfbr_myzone
+	bridge-ports vrfvx_myzone
+	bridge_stp off
+	bridge_fd 0
+	mtu 1450
+	vrf vrf_myzone
+
+auto vrfvx_myzone
+iface vrfvx_myzone
+	vxlan-id 1000
+	vxlan-local-tunnelip 203.0.113.1
+	bridge-learning off
+	bridge-arp-nd-suppress on
+	mtu 1450
+
+auto vxlan_myvnet
+iface vxlan_myvnet
+	vxlan-id 100
+	vxlan-local-tunnelip 203.0.113.1
+	bridge-learning off
+	bridge-arp-nd-suppress on
+	mtu 1450
diff --git a/src/test/zones/evpn/ebgp_evpn_ibgp_wan_evpn_ebgp/interfaces b/src/test/zones/evpn/ebgp_evpn_ibgp_wan_evpn_ebgp/interfaces
new file mode 100644
index 0000000..1736ffb
--- /dev/null
+++ b/src/test/zones/evpn/ebgp_evpn_ibgp_wan_evpn_ebgp/interfaces
@@ -0,0 +1,11 @@
+auto vmbr0
+iface vmbr0 inet static
+	address 198.51.100.1/24
+        bridge-ports eth0
+        bridge-stp off
+        bridge-fd 0
+
+auto dummy1
+iface dummy1 inet static
+        address 203.0.113.1/32
+        link-type dummy
diff --git a/src/test/zones/evpn/ebgp_evpn_ibgp_wan_evpn_ebgp/sdn_config b/src/test/zones/evpn/ebgp_evpn_ibgp_wan_evpn_ebgp/sdn_config
new file mode 100644
index 0000000..c78a434
--- /dev/null
+++ b/src/test/zones/evpn/ebgp_evpn_ibgp_wan_evpn_ebgp/sdn_config
@@ -0,0 +1,59 @@
+{
+    version => 1,
+    zones   => {
+        ids => {
+            myzone => {
+                ipam => "pve",
+                type => "evpn",
+                controller => "cluster",
+                'vrf-vxlan' => 1000,
+                'secondary-controllers' => ['wan'],
+            }
+        },
+    },
+    vnets   => {
+        ids => {
+            myvnet => {
+                tag => "100",
+                type => "vnet",
+                zone => "myzone"
+            },
+        },
+    },
+    subnets => {
+        ids => {
+            'myzone-10.0.0.0-24' => {
+                'type' => 'subnet',
+                'vnet' => 'myvnet',
+                'gateway' => '10.0.0.1',
+            }
+        }
+    },
+    controllers  => {
+        ids => {
+            cluster => {
+                type => "evpn",
+                peers => '203.0.113.1,203.0.113.2,203.0.113.4',
+                asn => "65000",
+                'bgp-mode' => 'internal',
+            },
+            bgp => {
+                type => "bgp",
+                'peers' => '198.51.100.10',
+                ebgp => "1",
+                asn => "65001",
+                loopback => 'dummy1',
+                node => "localhost",
+            },
+            wan => {
+                type => "evpn",
+                peers => '203.0.113.100,203.0.113.101',
+                asn => "65000",
+                nodes => 'localhost',
+                'bgp-mode' => 'external',
+                'peer-group-name' => 'wan',
+            }
+        },
+    }
+}
+
-- 
2.47.3