dnsdist: Add regression tests for the new cache-miss rules chain

[thirdparty/pdns.git] / regression-tests.dnsdist / test_Console.py

diff --git a/regression-tests.dnsdist/test_Console.py b/regression-tests.dnsdist/test_Console.py
index 952cc2afa6a151a1b232512ee72a2764537cfc10..ff55c36f666f6a9e75425cc097ba4e1ad9a82995 100644 (file)
--- a/regression-tests.dnsdist/test_Console.py
+++ b/regression-tests.dnsdist/test_Console.py
@@ -1,7 +1,9 @@
 #!/usr/bin/env python
 import base64
 import dns
-from socket import error as SocketError
+import os
+import socket
+import time
 from dnsdisttests import DNSDistTest
 
 class TestConsoleAllowed(DNSDistTest):
@@ -23,6 +25,27 @@ class TestConsoleAllowed(DNSDistTest):
         version = self.sendConsoleCommand('showVersion()')
         self.assertTrue(version.startswith('dnsdist '))
 
+class TestConsoleAllowedV6(DNSDistTest):
+
+    _consoleKey = DNSDistTest.generateConsoleKey()
+    _consoleKeyB64 = base64.b64encode(_consoleKey).decode('ascii')
+
+    _config_params = ['_consoleKeyB64', '_consolePort', '_testServerPort']
+    _config_template = """
+    setKey("%s")
+    controlSocket("[::1]:%s")
+    newServer{address="127.0.0.1:%d"}
+    """
+
+    def testConsoleAllowed(self):
+        """
+        Console: Allowed IPv6
+        """
+        if 'SKIP_IPV6_TESTS' in os.environ:
+            raise unittest.SkipTest('IPv6 tests are disabled')
+        version = self.sendConsoleCommand('showVersion()', IPv6=True)
+        self.assertTrue(version.startswith('dnsdist '))
+
 class TestConsoleNotAllowed(DNSDistTest):
 
     _consoleKey = DNSDistTest.generateConsoleKey()
@@ -40,7 +63,7 @@ class TestConsoleNotAllowed(DNSDistTest):
         """
         Console: Not allowed by the ACL
         """
-        self.assertRaises(SocketError, self.sendConsoleCommand, 'showVersion()')
+        self.assertRaises(socket.error, self.sendConsoleCommand, 'showVersion()')
 
 class TestConsoleNoKey(DNSDistTest):
 
@@ -57,4 +80,41 @@ class TestConsoleNoKey(DNSDistTest):
         """
         Console: No key, the connection should not be allowed
         """
-        self.assertRaises(SocketError, self.sendConsoleCommand, 'showVersion()')
+        self.assertRaises(socket.error, self.sendConsoleCommand, 'showVersion()')
+
+class TestConsoleConcurrentConnections(DNSDistTest):
+
+    _consoleKey = DNSDistTest.generateConsoleKey()
+    _consoleKeyB64 = base64.b64encode(_consoleKey).decode('ascii')
+    _maxConns = 2
+
+    _config_params = ['_consoleKeyB64', '_consolePort', '_testServerPort', '_maxConns']
+    _config_template = """
+    setKey("%s")
+    controlSocket("127.0.0.1:%s")
+    newServer{address="127.0.0.1:%d"}
+    setConsoleMaximumConcurrentConnections(%d)
+    """
+
+    def testConsoleConnectionsLimit(self):
+        """
+        Console: Check the maximum number of connections
+        """
+        conns = []
+        # open the maximum number of connections
+        for _ in range(self._maxConns):
+            conn = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+            conn.connect(("127.0.0.1", self._consolePort))
+            conns.append(conn)
+
+        # we now hold all the slots, let's try to establish a new connection
+        self.assertRaises(socket.error, self.sendConsoleCommand, 'showVersion()')
+
+        # free one slot
+        conns[0].close()
+        conns[0] = None
+        time.sleep(1)
+
+        # this should work
+        version = self.sendConsoleCommand('showVersion()')
+        self.assertTrue(version.startswith('dnsdist '))