[PATCH pve-network 10/16] test: evpn: add test for ibgp + ebgp evpn controller

Stefan Hanreich
2026-04-14T16:34:38Z

A test for an EVPN-only setup that utilizes iBGP for cluster-local
EVPN BGP, but eBGP for connecting to the outside world via eBGP.

Signed-off-by: Stefan Hanreich <s.hanreich@proxmox.com>
---
.../expected_controller_config | 66 +++++++++++++++++++
.../expected_sdn_interfaces | 41 ++++++++++++
.../evpn_cluster_ibgp_uplink_ebgp/interfaces | 7 ++
.../evpn_cluster_ibgp_uplink_ebgp/sdn_config | 51 ++++++++++++++
4 files changed, 165 insertions(+)
create mode 100644 src/test/zones/evpn/evpn_cluster_ibgp_uplink_ebgp/expected_controller_config
create mode 100644 src/test/zones/evpn/evpn_cluster_ibgp_uplink_ebgp/expected_sdn_interfaces
create mode 100644 src/test/zones/evpn/evpn_cluster_ibgp_uplink_ebgp/interfaces
create mode 100644 src/test/zones/evpn/evpn_cluster_ibgp_uplink_ebgp/sdn_config

diff --git a/src/test/zones/evpn/evpn_cluster_ibgp_uplink_ebgp/expected_controller_config b/src/test/zones/evpn/evpn_cluster_ibgp_uplink_ebgp/expected_controller_config
new file mode 100644
index 0000000..0199425
--- /dev/null
+++ b/src/test/zones/evpn/evpn_cluster_ibgp_uplink_ebgp/expected_controller_config
@@ -0,0 +1,66 @@
+frr version 10.4.1
+frr defaults datacenter
+hostname localhost
+log syslog informational
+service integrated-vtysh-config
+!
+vrf vrf_myzone
+ vni 1000
+exit-vrf
+!
+router bgp 65000
+ bgp router-id 192.168.0.1
+ no bgp hard-administrative-reset
+ no bgp default ipv4-unicast
+ coalesce-time 1000
+ no bgp graceful-restart notification
+ neighbor VTEP peer-group
+ neighbor VTEP remote-as 65000
+ neighbor VTEP bfd
+ neighbor 192.168.0.2 peer-group VTEP
+ neighbor 192.168.0.3 peer-group VTEP
+ neighbor uplink peer-group
+ neighbor uplink remote-as external
+ neighbor uplink bfd
+ neighbor 198.51.100.1 peer-group uplink
+ neighbor 198.51.100.2 peer-group uplink
+ !
+ address-family l2vpn evpn
+ neighbor VTEP activate
+ neighbor VTEP route-map MAP_VTEP_IN in
+ neighbor VTEP route-map MAP_VTEP_OUT out
+ neighbor uplink activate
+ neighbor uplink route-map MAP_VTEP_IN_uplink in
+ neighbor uplink route-map MAP_VTEP_OUT_uplink out
+ advertise-all-vni
+ exit-address-family
+exit
+!
+router bgp 65000 vrf vrf_myzone
+ bgp router-id 192.168.0.1
+ no bgp hard-administrative-reset
+ no bgp graceful-restart notification
+exit
+!
+bgp extcommunity-list standard pve_controller_cluster permit rt 65000:1000
+bgp extcommunity-list standard pve_controller_cluster permit rt 65000:100
+!
+bgp extcommunity-list standard pve_controller_uplink permit rt 65000:1000
+bgp extcommunity-list standard pve_controller_uplink permit rt 65000:100
+!
+route-map MAP_VTEP_IN permit 1
+exit
+!
+route-map MAP_VTEP_IN_uplink permit 1
+exit
+!
+route-map MAP_VTEP_OUT permit 1
+ match extcommunity pve_controller_cluster any
+exit
+!
+route-map MAP_VTEP_OUT_uplink permit 1
+ match extcommunity pve_controller_uplink any
+exit
+!
+line vty
+!
diff --git a/src/test/zones/evpn/evpn_cluster_ibgp_uplink_ebgp/expected_sdn_interfaces b/src/test/zones/evpn/evpn_cluster_ibgp_uplink_ebgp/expected_sdn_interfaces
new file mode 100644
index 0000000..4cf13e0
--- /dev/null
+++ b/src/test/zones/evpn/evpn_cluster_ibgp_uplink_ebgp/expected_sdn_interfaces
@@ -0,0 +1,41 @@
+#version:1
+
+auto myvnet
+iface myvnet
+ address 10.0.0.1/24
+ bridge_ports vxlan_myvnet
+ bridge_stp off
+ bridge_fd 0
+ mtu 1450
+ ip-forward on
+ arp-accept on
+ vrf vrf_myzone
+
+auto vrf_myzone
+iface vrf_myzone
+ vrf-table auto
+ post-up ip route add vrf vrf_myzone unreachable default metric 4278198272
+
+auto vrfbr_myzone
+iface vrfbr_myzone
+ bridge-ports vrfvx_myzone
+ bridge_stp off
+ bridge_fd 0
+ mtu 1450
+ vrf vrf_myzone
+
+auto vrfvx_myzone
+iface vrfvx_myzone
+ vxlan-id 1000
+ vxlan-local-tunnelip 192.168.0.1
+ bridge-learning off
+ bridge-arp-nd-suppress on
+ mtu 1450
+
+auto vxlan_myvnet
+iface vxlan_myvnet
+ vxlan-id 100
+ vxlan-local-tunnelip 192.168.0.1
+ bridge-learning off
+ bridge-arp-nd-suppress on
+ mtu 1450
diff --git a/src/test/zones/evpn/evpn_cluster_ibgp_uplink_ebgp/interfaces b/src/test/zones/evpn/evpn_cluster_ibgp_uplink_ebgp/interfaces
new file mode 100644
index 0000000..66bb826
--- /dev/null
+++ b/src/test/zones/evpn/evpn_cluster_ibgp_uplink_ebgp/interfaces
@@ -0,0 +1,7 @@
+auto vmbr0
+iface vmbr0 inet static
+ address 192.168.0.1/24
+ gateway 192.168.0.254
+ bridge-ports eth0
+ bridge-stp off
+ bridge-fd 0
diff --git a/src/test/zones/evpn/evpn_cluster_ibgp_uplink_ebgp/sdn_config b/src/test/zones/evpn/evpn_cluster_ibgp_uplink_ebgp/sdn_config
new file mode 100644
index 0000000..6f285ee
--- /dev/null
+++ b/src/test/zones/evpn/evpn_cluster_ibgp_uplink_ebgp/sdn_config
@@ -0,0 +1,51 @@
+{
+ version => 1,
+ zones => {
+ ids => {
+ myzone => {
+ ipam => "pve",
+ type => "evpn",
+ controller => "cluster",
+ 'vrf-vxlan' => 1000,
+ 'secondary-controllers' => ['uplink'],
+ }
+ },
+ },
+ vnets => {
+ ids => {
+ myvnet => {
+ tag => "100",
+ type => "vnet",
+ zone => "myzone"
+ },
+ },
+ },
+ subnets => {
+ ids => {
+ 'myzone-10.0.0.0-24' => {
+ 'type' => 'subnet',
+ 'vnet' => 'myvnet',
+ 'gateway' => '10.0.0.1',
+ }
+ }
+ },
+ controllers => {
+ ids => {
+ cluster => {
+ type => "evpn",
+ peers => '192.168.0.1,192.168.0.2,192.168.0.3',
+ asn => "65000",
+ 'bgp-mode' => 'internal',
+ },
+ uplink => {
+ type => "evpn",
+ peers => '198.51.100.1,198.51.100.2',
+ asn => "65000",
+ nodes => 'localhost',
+ 'bgp-mode' => 'external',
+ 'peer-group-name' => 'uplink',
+ }
+ },
+ }
+}
+
--
2.47.3