mirror of https://github.com/hashicorp/consul
1904 lines
46 KiB
Go
1904 lines
46 KiB
Go
// Copyright (c) HashiCorp, Inc.
|
|
// SPDX-License-Identifier: BUSL-1.1
|
|
|
|
package dns
|
|
|
|
import (
|
|
"errors"
|
|
"net"
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/miekg/dns"
|
|
"github.com/stretchr/testify/mock"
|
|
"github.com/stretchr/testify/require"
|
|
|
|
"github.com/hashicorp/go-hclog"
|
|
|
|
"github.com/hashicorp/consul/acl"
|
|
"github.com/hashicorp/consul/agent/config"
|
|
"github.com/hashicorp/consul/agent/discovery"
|
|
"github.com/hashicorp/consul/agent/structs"
|
|
)
|
|
|
|
// TBD Test Cases
|
|
// 1. Reload the configuration (e.g. SOA)
|
|
// 2. Something to check the token makes it through to the data fetcher
|
|
// 3. Something case-insensitive
|
|
// 4. Test the edns settings.
|
|
|
|
type HandleTestCase struct {
|
|
name string
|
|
agentConfig *config.RuntimeConfig // This will override the default test Router Config
|
|
configureDataFetcher func(fetcher discovery.CatalogDataFetcher)
|
|
validateAndNormalizeExpected bool
|
|
configureRecursor func(recursor dnsRecursor)
|
|
mockProcessorError error
|
|
request *dns.Msg
|
|
requestContext *Context
|
|
remoteAddress net.Addr
|
|
response *dns.Msg
|
|
}
|
|
|
|
func Test_HandleRequest(t *testing.T) {
|
|
|
|
testCases := []HandleTestCase{
|
|
// recursor queries
|
|
{
|
|
name: "recursors not configured, non-matching domain",
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "google.com",
|
|
Qtype: dns.TypeA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
// configureRecursor: call not expected.
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Rcode: dns.RcodeRefused,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "google.com.",
|
|
Qtype: dns.TypeA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "recursors configured, matching domain",
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "google.com",
|
|
Qtype: dns.TypeA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
agentConfig: &config.RuntimeConfig{
|
|
DNSRecursors: []string{"8.8.8.8"},
|
|
DNSUDPAnswerLimit: maxUDPAnswerLimit,
|
|
},
|
|
configureRecursor: func(recursor dnsRecursor) {
|
|
resp := &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: true,
|
|
Rcode: dns.RcodeSuccess,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "google.com.",
|
|
Qtype: dns.TypeA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
Answer: []dns.RR{
|
|
&dns.A{
|
|
Hdr: dns.RR_Header{
|
|
Name: "google.com.",
|
|
Rrtype: dns.TypeA,
|
|
Class: dns.ClassINET,
|
|
},
|
|
A: net.ParseIP("1.2.3.4"),
|
|
},
|
|
},
|
|
}
|
|
recursor.(*mockDnsRecursor).On("handle",
|
|
mock.Anything, mock.Anything, mock.Anything).Return(resp, nil)
|
|
},
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: true,
|
|
Rcode: dns.RcodeSuccess,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "google.com.",
|
|
Qtype: dns.TypeA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
Answer: []dns.RR{
|
|
&dns.A{
|
|
Hdr: dns.RR_Header{
|
|
Name: "google.com.",
|
|
Rrtype: dns.TypeA,
|
|
Class: dns.ClassINET,
|
|
},
|
|
A: net.ParseIP("1.2.3.4"),
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "recursors configured, no matching domain",
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "google.com",
|
|
Qtype: dns.TypeA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
agentConfig: &config.RuntimeConfig{
|
|
DNSRecursors: []string{"8.8.8.8"},
|
|
DNSUDPAnswerLimit: maxUDPAnswerLimit,
|
|
},
|
|
configureRecursor: func(recursor dnsRecursor) {
|
|
recursor.(*mockDnsRecursor).On("handle", mock.Anything, mock.Anything, mock.Anything).
|
|
Return(nil, errRecursionFailed)
|
|
},
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: false,
|
|
Rcode: dns.RcodeServerFailure,
|
|
RecursionAvailable: true,
|
|
},
|
|
Compress: true,
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "google.com.",
|
|
Qtype: dns.TypeA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "recursors configured, unhandled error calling recursors",
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "google.com",
|
|
Qtype: dns.TypeA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
agentConfig: &config.RuntimeConfig{
|
|
DNSRecursors: []string{"8.8.8.8"},
|
|
DNSUDPAnswerLimit: maxUDPAnswerLimit,
|
|
},
|
|
configureRecursor: func(recursor dnsRecursor) {
|
|
err := errors.New("ahhhhh!!!!")
|
|
recursor.(*mockDnsRecursor).On("handle", mock.Anything, mock.Anything, mock.Anything).
|
|
Return(nil, err)
|
|
},
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: false,
|
|
Rcode: dns.RcodeServerFailure,
|
|
RecursionAvailable: true,
|
|
},
|
|
Compress: true,
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "google.com.",
|
|
Qtype: dns.TypeA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "recursors configured, the root domain is handled by the recursor",
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: ".",
|
|
Qtype: dns.TypeA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
agentConfig: &config.RuntimeConfig{
|
|
DNSRecursors: []string{"8.8.8.8"},
|
|
DNSUDPAnswerLimit: maxUDPAnswerLimit,
|
|
},
|
|
configureRecursor: func(recursor dnsRecursor) {
|
|
// this response is modeled after `dig .`
|
|
resp := &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: true,
|
|
Rcode: dns.RcodeSuccess,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: ".",
|
|
Qtype: dns.TypeA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
Answer: []dns.RR{
|
|
&dns.SOA{
|
|
Hdr: dns.RR_Header{
|
|
Name: ".",
|
|
Rrtype: dns.TypeSOA,
|
|
Class: dns.ClassINET,
|
|
Ttl: 86391,
|
|
},
|
|
Ns: "a.root-servers.net.",
|
|
Serial: 2024012200,
|
|
Mbox: "nstld.verisign-grs.com.",
|
|
Refresh: 1800,
|
|
Retry: 900,
|
|
Expire: 604800,
|
|
Minttl: 86400,
|
|
},
|
|
},
|
|
}
|
|
recursor.(*mockDnsRecursor).On("handle",
|
|
mock.Anything, mock.Anything, mock.Anything).Return(resp, nil)
|
|
},
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: true,
|
|
Rcode: dns.RcodeSuccess,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: ".",
|
|
Qtype: dns.TypeA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
Answer: []dns.RR{
|
|
&dns.SOA{
|
|
Hdr: dns.RR_Header{
|
|
Name: ".",
|
|
Rrtype: dns.TypeSOA,
|
|
Class: dns.ClassINET,
|
|
Ttl: 86391,
|
|
},
|
|
Ns: "a.root-servers.net.",
|
|
Serial: 2024012200,
|
|
Mbox: "nstld.verisign-grs.com.",
|
|
Refresh: 1800,
|
|
Retry: 900,
|
|
Expire: 604800,
|
|
Minttl: 86400,
|
|
},
|
|
},
|
|
},
|
|
},
|
|
// addr queries
|
|
{
|
|
name: "test A 'addr.' query, ipv4 response",
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "c000020a.addr.dc1.consul", // "intentionally missing the trailing dot"
|
|
Qtype: dns.TypeA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: true,
|
|
},
|
|
Compress: true,
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "c000020a.addr.dc1.consul.",
|
|
Qtype: dns.TypeA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
Answer: []dns.RR{
|
|
&dns.A{
|
|
Hdr: dns.RR_Header{
|
|
Name: "c000020a.addr.dc1.consul.",
|
|
Rrtype: dns.TypeA,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
A: net.ParseIP("192.0.2.10"),
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "test AAAA 'addr.' query, ipv4 response",
|
|
// Since we asked for an AAAA record, the A record that resolves from the address is attached as an extra
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "c000020a.addr.dc1.consul",
|
|
Qtype: dns.TypeAAAA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: true,
|
|
},
|
|
Compress: true,
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "c000020a.addr.dc1.consul.",
|
|
Qtype: dns.TypeAAAA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
Extra: []dns.RR{
|
|
&dns.A{
|
|
Hdr: dns.RR_Header{
|
|
Name: "c000020a.addr.dc1.consul.",
|
|
Rrtype: dns.TypeA,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
A: net.ParseIP("192.0.2.10"),
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "test SRV 'addr.' query, ipv4 response",
|
|
// Since we asked for a SRV record, the A record that resolves from the address is attached as an extra
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "c000020a.addr.dc1.consul",
|
|
Qtype: dns.TypeSRV,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: true,
|
|
},
|
|
Compress: true,
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "c000020a.addr.dc1.consul.",
|
|
Qtype: dns.TypeSRV,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
Extra: []dns.RR{
|
|
&dns.A{
|
|
Hdr: dns.RR_Header{
|
|
Name: "c000020a.addr.dc1.consul.",
|
|
Rrtype: dns.TypeA,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
A: net.ParseIP("192.0.2.10"),
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "test ANY 'addr.' query, ipv4 response",
|
|
// The response to ANY should look the same as the A response
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "c000020a.addr.dc1.consul",
|
|
Qtype: dns.TypeANY,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: true,
|
|
},
|
|
Compress: true,
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "c000020a.addr.dc1.consul.",
|
|
Qtype: dns.TypeANY,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
Answer: []dns.RR{
|
|
&dns.A{
|
|
Hdr: dns.RR_Header{
|
|
Name: "c000020a.addr.dc1.consul.",
|
|
Rrtype: dns.TypeA,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
A: net.ParseIP("192.0.2.10"),
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "test AAAA 'addr.' query, ipv6 response",
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "20010db800010002cafe000000001337.addr.dc1.consul",
|
|
Qtype: dns.TypeAAAA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: true,
|
|
},
|
|
Compress: true,
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "20010db800010002cafe000000001337.addr.dc1.consul.",
|
|
Qtype: dns.TypeAAAA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
Answer: []dns.RR{
|
|
&dns.AAAA{
|
|
Hdr: dns.RR_Header{
|
|
Name: "20010db800010002cafe000000001337.addr.dc1.consul.",
|
|
Rrtype: dns.TypeAAAA,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
AAAA: net.ParseIP("2001:db8:1:2:cafe::1337"),
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "test A 'addr.' query, ipv6 response",
|
|
// Since we asked for an A record, the AAAA record that resolves from the address is attached as an extra
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "20010db800010002cafe000000001337.addr.dc1.consul",
|
|
Qtype: dns.TypeA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: true,
|
|
},
|
|
Compress: true,
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "20010db800010002cafe000000001337.addr.dc1.consul.",
|
|
Qtype: dns.TypeA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
Extra: []dns.RR{
|
|
&dns.AAAA{
|
|
Hdr: dns.RR_Header{
|
|
Name: "20010db800010002cafe000000001337.addr.dc1.consul.",
|
|
Rrtype: dns.TypeAAAA,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
AAAA: net.ParseIP("2001:db8:1:2:cafe::1337"),
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "test SRV 'addr.' query, ipv6 response",
|
|
// Since we asked for an SRV record, the AAAA record that resolves from the address is attached as an extra
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "20010db800010002cafe000000001337.addr.dc1.consul",
|
|
Qtype: dns.TypeSRV,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: true,
|
|
},
|
|
Compress: true,
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "20010db800010002cafe000000001337.addr.dc1.consul.",
|
|
Qtype: dns.TypeSRV,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
Extra: []dns.RR{
|
|
&dns.AAAA{
|
|
Hdr: dns.RR_Header{
|
|
Name: "20010db800010002cafe000000001337.addr.dc1.consul.",
|
|
Rrtype: dns.TypeAAAA,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
AAAA: net.ParseIP("2001:db8:1:2:cafe::1337"),
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "test ANY 'addr.' query, ipv6 response",
|
|
// The response to ANY should look the same as the AAAA response
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "20010db800010002cafe000000001337.addr.dc1.consul",
|
|
Qtype: dns.TypeANY,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: true,
|
|
},
|
|
Compress: true,
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "20010db800010002cafe000000001337.addr.dc1.consul.",
|
|
Qtype: dns.TypeANY,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
Answer: []dns.RR{
|
|
&dns.AAAA{
|
|
Hdr: dns.RR_Header{
|
|
Name: "20010db800010002cafe000000001337.addr.dc1.consul.",
|
|
Rrtype: dns.TypeAAAA,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
AAAA: net.ParseIP("2001:db8:1:2:cafe::1337"),
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "test malformed 'addr.' query",
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "c000.addr.dc1.consul", // too short
|
|
Qtype: dns.TypeA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Rcode: dns.RcodeNameError, // NXDOMAIN
|
|
Authoritative: true,
|
|
},
|
|
Compress: true,
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "c000.addr.dc1.consul.",
|
|
Qtype: dns.TypeA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
Ns: []dns.RR{
|
|
&dns.SOA{
|
|
Hdr: dns.RR_Header{
|
|
Name: "consul.",
|
|
Rrtype: dns.TypeSOA,
|
|
Class: dns.ClassINET,
|
|
Ttl: 4,
|
|
},
|
|
Ns: "ns.consul.",
|
|
Serial: uint32(time.Now().Unix()),
|
|
Mbox: "hostmaster.consul.",
|
|
Refresh: 1,
|
|
Expire: 3,
|
|
Retry: 2,
|
|
Minttl: 4,
|
|
},
|
|
},
|
|
},
|
|
},
|
|
// virtual ip queries - we will test just the A record, since the
|
|
// AAAA and SRV records are handled the same way and the complete
|
|
// set of addr tests above cover the rest of the cases.
|
|
{
|
|
name: "test A 'virtual.' query, ipv4 response",
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "c000020a.virtual.dc1.consul", // "intentionally missing the trailing dot"
|
|
Qtype: dns.TypeA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
configureDataFetcher: func(fetcher discovery.CatalogDataFetcher) {
|
|
fetcher.(*discovery.MockCatalogDataFetcher).On("FetchVirtualIP",
|
|
mock.Anything, mock.Anything).Return(&discovery.Result{
|
|
Node: &discovery.Location{Address: "240.0.0.2"},
|
|
Type: discovery.ResultTypeVirtual,
|
|
}, nil)
|
|
},
|
|
validateAndNormalizeExpected: true,
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: true,
|
|
},
|
|
Compress: true,
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "c000020a.virtual.dc1.consul.",
|
|
Qtype: dns.TypeA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
Answer: []dns.RR{
|
|
&dns.A{
|
|
Hdr: dns.RR_Header{
|
|
Name: "c000020a.virtual.dc1.consul.",
|
|
Rrtype: dns.TypeA,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
A: net.ParseIP("240.0.0.2"),
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "test A 'virtual.' query, ipv6 response",
|
|
// Since we asked for an A record, the AAAA record that resolves from the address is attached as an extra
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "20010db800010002cafe000000001337.virtual.dc1.consul",
|
|
Qtype: dns.TypeA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
configureDataFetcher: func(fetcher discovery.CatalogDataFetcher) {
|
|
fetcher.(*discovery.MockCatalogDataFetcher).On("FetchVirtualIP",
|
|
mock.Anything, mock.Anything).Return(&discovery.Result{
|
|
Node: &discovery.Location{Address: "2001:db8:1:2:cafe::1337"},
|
|
Type: discovery.ResultTypeVirtual,
|
|
}, nil)
|
|
},
|
|
validateAndNormalizeExpected: true,
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: true,
|
|
},
|
|
Compress: true,
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "20010db800010002cafe000000001337.virtual.dc1.consul.",
|
|
Qtype: dns.TypeA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
Extra: []dns.RR{
|
|
&dns.AAAA{
|
|
Hdr: dns.RR_Header{
|
|
Name: "20010db800010002cafe000000001337.virtual.dc1.consul.",
|
|
Rrtype: dns.TypeAAAA,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
AAAA: net.ParseIP("2001:db8:1:2:cafe::1337"),
|
|
},
|
|
},
|
|
},
|
|
},
|
|
// SOA Queries
|
|
{
|
|
name: "vanilla SOA query",
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "consul.",
|
|
Qtype: dns.TypeSOA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
configureDataFetcher: func(fetcher discovery.CatalogDataFetcher) {
|
|
fetcher.(*discovery.MockCatalogDataFetcher).
|
|
On("FetchEndpoints", mock.Anything, mock.Anything, mock.Anything).
|
|
Return([]*discovery.Result{
|
|
{
|
|
Node: &discovery.Location{Name: "server-one", Address: "1.2.3.4"},
|
|
Service: &discovery.Location{Name: "service-one", Address: "server-one"},
|
|
Type: discovery.ResultTypeWorkload,
|
|
},
|
|
{
|
|
Node: &discovery.Location{Name: "server-two", Address: "4.5.6.7"},
|
|
Service: &discovery.Location{Name: "service-one", Address: "server-two"},
|
|
Type: discovery.ResultTypeWorkload,
|
|
},
|
|
}, nil).
|
|
Run(func(args mock.Arguments) {
|
|
req := args.Get(1).(*discovery.QueryPayload)
|
|
reqType := args.Get(2).(discovery.LookupType)
|
|
|
|
require.Equal(t, discovery.LookupTypeService, reqType)
|
|
require.Equal(t, structs.ConsulServiceName, req.Name)
|
|
require.Equal(t, 3, req.Limit)
|
|
})
|
|
},
|
|
validateAndNormalizeExpected: true,
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: true,
|
|
},
|
|
Compress: true,
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "consul.",
|
|
Qtype: dns.TypeSOA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
Answer: []dns.RR{
|
|
&dns.SOA{
|
|
Hdr: dns.RR_Header{
|
|
Name: "consul.",
|
|
Rrtype: dns.TypeSOA,
|
|
Class: dns.ClassINET,
|
|
Ttl: 4,
|
|
},
|
|
Ns: "ns.consul.",
|
|
Serial: uint32(time.Now().Unix()),
|
|
Mbox: "hostmaster.consul.",
|
|
Refresh: 1,
|
|
Expire: 3,
|
|
Retry: 2,
|
|
Minttl: 4,
|
|
},
|
|
},
|
|
Ns: []dns.RR{
|
|
&dns.NS{
|
|
Hdr: dns.RR_Header{
|
|
Name: "consul.",
|
|
Rrtype: dns.TypeNS,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
Ns: "server-one.workload.consul.",
|
|
},
|
|
&dns.NS{
|
|
Hdr: dns.RR_Header{
|
|
Name: "consul.",
|
|
Rrtype: dns.TypeNS,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
Ns: "server-two.workload.consul.",
|
|
},
|
|
},
|
|
Extra: []dns.RR{
|
|
&dns.A{
|
|
Hdr: dns.RR_Header{
|
|
Name: "server-one.workload.consul.",
|
|
Rrtype: dns.TypeA,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
A: net.ParseIP("1.2.3.4"),
|
|
},
|
|
&dns.A{
|
|
Hdr: dns.RR_Header{
|
|
Name: "server-two.workload.consul.",
|
|
Rrtype: dns.TypeA,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
A: net.ParseIP("4.5.6.7"),
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "SOA query against alternate domain",
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "testdomain.",
|
|
Qtype: dns.TypeSOA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
agentConfig: &config.RuntimeConfig{
|
|
DNSDomain: "consul",
|
|
DNSAltDomain: "testdomain",
|
|
DNSNodeTTL: 123 * time.Second,
|
|
DNSSOA: config.RuntimeSOAConfig{
|
|
Refresh: 1,
|
|
Retry: 2,
|
|
Expire: 3,
|
|
Minttl: 4,
|
|
},
|
|
DNSUDPAnswerLimit: maxUDPAnswerLimit,
|
|
},
|
|
configureDataFetcher: func(fetcher discovery.CatalogDataFetcher) {
|
|
fetcher.(*discovery.MockCatalogDataFetcher).
|
|
On("FetchEndpoints", mock.Anything, mock.Anything, mock.Anything).
|
|
Return([]*discovery.Result{
|
|
{
|
|
Node: &discovery.Location{Name: "server-one", Address: "1.2.3.4"},
|
|
Service: &discovery.Location{Name: "service-one", Address: "server-one"},
|
|
Type: discovery.ResultTypeWorkload,
|
|
},
|
|
{
|
|
Node: &discovery.Location{Name: "server-two", Address: "4.5.6.7"},
|
|
Service: &discovery.Location{Name: "service-two", Address: "server-two"},
|
|
Type: discovery.ResultTypeWorkload,
|
|
},
|
|
}, nil).
|
|
Run(func(args mock.Arguments) {
|
|
req := args.Get(1).(*discovery.QueryPayload)
|
|
reqType := args.Get(2).(discovery.LookupType)
|
|
|
|
require.Equal(t, discovery.LookupTypeService, reqType)
|
|
require.Equal(t, structs.ConsulServiceName, req.Name)
|
|
require.Equal(t, 3, req.Limit)
|
|
})
|
|
},
|
|
validateAndNormalizeExpected: true,
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: true,
|
|
},
|
|
Compress: true,
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "testdomain.",
|
|
Qtype: dns.TypeSOA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
Answer: []dns.RR{
|
|
&dns.SOA{
|
|
Hdr: dns.RR_Header{
|
|
Name: "testdomain.",
|
|
Rrtype: dns.TypeSOA,
|
|
Class: dns.ClassINET,
|
|
Ttl: 4,
|
|
},
|
|
Ns: "ns.testdomain.",
|
|
Serial: uint32(time.Now().Unix()),
|
|
Mbox: "hostmaster.testdomain.",
|
|
Refresh: 1,
|
|
Expire: 3,
|
|
Retry: 2,
|
|
Minttl: 4,
|
|
},
|
|
},
|
|
Ns: []dns.RR{
|
|
&dns.NS{
|
|
Hdr: dns.RR_Header{
|
|
Name: "testdomain.",
|
|
Rrtype: dns.TypeNS,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
Ns: "server-one.workload.testdomain.",
|
|
},
|
|
&dns.NS{
|
|
Hdr: dns.RR_Header{
|
|
Name: "testdomain.",
|
|
Rrtype: dns.TypeNS,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
Ns: "server-two.workload.testdomain.",
|
|
},
|
|
},
|
|
Extra: []dns.RR{
|
|
&dns.A{
|
|
Hdr: dns.RR_Header{
|
|
Name: "server-one.workload.testdomain.",
|
|
Rrtype: dns.TypeA,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
A: net.ParseIP("1.2.3.4"),
|
|
},
|
|
&dns.A{
|
|
Hdr: dns.RR_Header{
|
|
Name: "server-two.workload.testdomain.",
|
|
Rrtype: dns.TypeA,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
A: net.ParseIP("4.5.6.7"),
|
|
},
|
|
},
|
|
},
|
|
},
|
|
// NS Queries
|
|
{
|
|
name: "vanilla NS query",
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "consul.",
|
|
Qtype: dns.TypeNS,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
configureDataFetcher: func(fetcher discovery.CatalogDataFetcher) {
|
|
fetcher.(*discovery.MockCatalogDataFetcher).
|
|
On("FetchEndpoints", mock.Anything, mock.Anything, mock.Anything).
|
|
Return([]*discovery.Result{
|
|
{
|
|
Node: &discovery.Location{Name: "server-one", Address: "1.2.3.4"},
|
|
Type: discovery.ResultTypeWorkload,
|
|
},
|
|
{
|
|
Node: &discovery.Location{Name: "server-two", Address: "4.5.6.7"},
|
|
Type: discovery.ResultTypeWorkload,
|
|
},
|
|
}, nil).
|
|
Run(func(args mock.Arguments) {
|
|
req := args.Get(1).(*discovery.QueryPayload)
|
|
reqType := args.Get(2).(discovery.LookupType)
|
|
|
|
require.Equal(t, discovery.LookupTypeService, reqType)
|
|
require.Equal(t, structs.ConsulServiceName, req.Name)
|
|
require.Equal(t, 3, req.Limit)
|
|
})
|
|
},
|
|
validateAndNormalizeExpected: true,
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: true,
|
|
},
|
|
Compress: true,
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "consul.",
|
|
Qtype: dns.TypeNS,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
Answer: []dns.RR{
|
|
&dns.NS{
|
|
Hdr: dns.RR_Header{
|
|
Name: "consul.",
|
|
Rrtype: dns.TypeNS,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
Ns: "server-one.workload.consul.", // TODO (v2-dns): this format needs to be consistent with other workloads
|
|
},
|
|
&dns.NS{
|
|
Hdr: dns.RR_Header{
|
|
Name: "consul.",
|
|
Rrtype: dns.TypeNS,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
Ns: "server-two.workload.consul.",
|
|
},
|
|
},
|
|
Extra: []dns.RR{
|
|
&dns.A{
|
|
Hdr: dns.RR_Header{
|
|
Name: "server-one.workload.consul.",
|
|
Rrtype: dns.TypeA,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
A: net.ParseIP("1.2.3.4"),
|
|
},
|
|
&dns.A{
|
|
Hdr: dns.RR_Header{
|
|
Name: "server-two.workload.consul.",
|
|
Rrtype: dns.TypeA,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
A: net.ParseIP("4.5.6.7"),
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "NS query against alternate domain",
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "testdomain.",
|
|
Qtype: dns.TypeNS,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
agentConfig: &config.RuntimeConfig{
|
|
DNSDomain: "consul",
|
|
DNSAltDomain: "testdomain",
|
|
DNSNodeTTL: 123 * time.Second,
|
|
DNSSOA: config.RuntimeSOAConfig{
|
|
Refresh: 1,
|
|
Retry: 2,
|
|
Expire: 3,
|
|
Minttl: 4,
|
|
},
|
|
DNSUDPAnswerLimit: maxUDPAnswerLimit,
|
|
},
|
|
configureDataFetcher: func(fetcher discovery.CatalogDataFetcher) {
|
|
fetcher.(*discovery.MockCatalogDataFetcher).
|
|
On("FetchEndpoints", mock.Anything, mock.Anything, mock.Anything).
|
|
Return([]*discovery.Result{
|
|
{
|
|
Node: &discovery.Location{Name: "server-one", Address: "1.2.3.4"},
|
|
Type: discovery.ResultTypeWorkload,
|
|
},
|
|
{
|
|
Node: &discovery.Location{Name: "server-two", Address: "4.5.6.7"},
|
|
Type: discovery.ResultTypeWorkload,
|
|
},
|
|
}, nil).
|
|
Run(func(args mock.Arguments) {
|
|
req := args.Get(1).(*discovery.QueryPayload)
|
|
reqType := args.Get(2).(discovery.LookupType)
|
|
|
|
require.Equal(t, discovery.LookupTypeService, reqType)
|
|
require.Equal(t, structs.ConsulServiceName, req.Name)
|
|
require.Equal(t, 3, req.Limit)
|
|
})
|
|
},
|
|
validateAndNormalizeExpected: true,
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: true,
|
|
},
|
|
Compress: true,
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "testdomain.",
|
|
Qtype: dns.TypeNS,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
Answer: []dns.RR{
|
|
&dns.NS{
|
|
Hdr: dns.RR_Header{
|
|
Name: "testdomain.",
|
|
Rrtype: dns.TypeNS,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
Ns: "server-one.workload.testdomain.",
|
|
},
|
|
&dns.NS{
|
|
Hdr: dns.RR_Header{
|
|
Name: "testdomain.",
|
|
Rrtype: dns.TypeNS,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
Ns: "server-two.workload.testdomain.",
|
|
},
|
|
},
|
|
Extra: []dns.RR{
|
|
&dns.A{
|
|
Hdr: dns.RR_Header{
|
|
Name: "server-one.workload.testdomain.",
|
|
Rrtype: dns.TypeA,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
A: net.ParseIP("1.2.3.4"),
|
|
},
|
|
&dns.A{
|
|
Hdr: dns.RR_Header{
|
|
Name: "server-two.workload.testdomain.",
|
|
Rrtype: dns.TypeA,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
A: net.ParseIP("4.5.6.7"),
|
|
},
|
|
},
|
|
},
|
|
},
|
|
// PTR Lookups
|
|
{
|
|
name: "PTR lookup for node, query type is ANY",
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "4.3.2.1.in-addr.arpa",
|
|
Qtype: dns.TypeANY,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
configureDataFetcher: func(fetcher discovery.CatalogDataFetcher) {
|
|
results := []*discovery.Result{
|
|
{
|
|
Node: &discovery.Location{Name: "foo", Address: "1.2.3.4"},
|
|
Service: &discovery.Location{Name: "bar", Address: "foo"},
|
|
Type: discovery.ResultTypeNode,
|
|
Tenancy: discovery.ResultTenancy{
|
|
Datacenter: "dc2",
|
|
},
|
|
},
|
|
}
|
|
|
|
fetcher.(*discovery.MockCatalogDataFetcher).
|
|
On("FetchRecordsByIp", mock.Anything, mock.Anything).
|
|
Return(results, nil).
|
|
Run(func(args mock.Arguments) {
|
|
req := args.Get(1).(net.IP)
|
|
|
|
require.NotNil(t, req)
|
|
require.Equal(t, "1.2.3.4", req.String())
|
|
})
|
|
},
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: true,
|
|
},
|
|
Compress: true,
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "4.3.2.1.in-addr.arpa.",
|
|
Qtype: dns.TypeANY,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
Answer: []dns.RR{
|
|
&dns.PTR{
|
|
Hdr: dns.RR_Header{
|
|
Name: "4.3.2.1.in-addr.arpa.",
|
|
Rrtype: dns.TypePTR,
|
|
Class: dns.ClassINET,
|
|
},
|
|
Ptr: "foo.node.dc2.consul.",
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "PTR lookup for IPV6 node",
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "b.a.9.8.7.6.5.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa",
|
|
Qtype: dns.TypePTR,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
configureDataFetcher: func(fetcher discovery.CatalogDataFetcher) {
|
|
results := []*discovery.Result{
|
|
{
|
|
Node: &discovery.Location{Name: "foo", Address: "2001:db8::567:89ab"},
|
|
Service: &discovery.Location{Name: "web", Address: "foo"},
|
|
Type: discovery.ResultTypeNode,
|
|
Tenancy: discovery.ResultTenancy{
|
|
Datacenter: "dc2",
|
|
},
|
|
},
|
|
}
|
|
|
|
fetcher.(*discovery.MockCatalogDataFetcher).
|
|
On("FetchRecordsByIp", mock.Anything, mock.Anything).
|
|
Return(results, nil).
|
|
Run(func(args mock.Arguments) {
|
|
req := args.Get(1).(net.IP)
|
|
|
|
require.NotNil(t, req)
|
|
require.Equal(t, "2001:db8::567:89ab", req.String())
|
|
})
|
|
},
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: true,
|
|
},
|
|
Compress: true,
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "b.a.9.8.7.6.5.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.",
|
|
Qtype: dns.TypePTR,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
Answer: []dns.RR{
|
|
&dns.PTR{
|
|
Hdr: dns.RR_Header{
|
|
Name: "b.a.9.8.7.6.5.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.",
|
|
Rrtype: dns.TypePTR,
|
|
Class: dns.ClassINET,
|
|
},
|
|
Ptr: "foo.node.dc2.consul.",
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "PTR lookup for invalid IP address",
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "257.3.2.1.in-addr.arpa",
|
|
Qtype: dns.TypeANY,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: true,
|
|
Rcode: dns.RcodeNameError,
|
|
},
|
|
Compress: true,
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "257.3.2.1.in-addr.arpa.",
|
|
Qtype: dns.TypeANY,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
Ns: []dns.RR{
|
|
&dns.SOA{
|
|
Hdr: dns.RR_Header{
|
|
Name: "consul.",
|
|
Rrtype: dns.TypeSOA,
|
|
Class: dns.ClassINET,
|
|
Ttl: 4,
|
|
},
|
|
Ns: "ns.consul.",
|
|
Serial: uint32(time.Now().Unix()),
|
|
Mbox: "hostmaster.consul.",
|
|
Refresh: 1,
|
|
Expire: 3,
|
|
Retry: 2,
|
|
Minttl: 4,
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "PTR lookup for invalid subdomain",
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "4.3.2.1.blah.arpa",
|
|
Qtype: dns.TypeANY,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: true,
|
|
Rcode: dns.RcodeNameError,
|
|
},
|
|
Compress: true,
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "4.3.2.1.blah.arpa.",
|
|
Qtype: dns.TypeANY,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
Ns: []dns.RR{
|
|
&dns.SOA{
|
|
Hdr: dns.RR_Header{
|
|
Name: "consul.",
|
|
Rrtype: dns.TypeSOA,
|
|
Class: dns.ClassINET,
|
|
Ttl: 4,
|
|
},
|
|
Ns: "ns.consul.",
|
|
Serial: uint32(time.Now().Unix()),
|
|
Mbox: "hostmaster.consul.",
|
|
Refresh: 1,
|
|
Expire: 3,
|
|
Retry: 2,
|
|
Minttl: 4,
|
|
},
|
|
},
|
|
},
|
|
},
|
|
// Service Lookup
|
|
{
|
|
name: "When no data is return from a query, send SOA",
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "foo.service.consul.",
|
|
Qtype: dns.TypeA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
configureDataFetcher: func(fetcher discovery.CatalogDataFetcher) {
|
|
fetcher.(*discovery.MockCatalogDataFetcher).
|
|
On("FetchEndpoints", mock.Anything, mock.Anything, mock.Anything).
|
|
Return(nil, discovery.ErrNoData).
|
|
Run(func(args mock.Arguments) {
|
|
req := args.Get(1).(*discovery.QueryPayload)
|
|
reqType := args.Get(2).(discovery.LookupType)
|
|
|
|
require.Equal(t, discovery.LookupTypeService, reqType)
|
|
require.Equal(t, "foo", req.Name)
|
|
})
|
|
},
|
|
validateAndNormalizeExpected: true,
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: true,
|
|
},
|
|
Compress: true,
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "foo.service.consul.",
|
|
Qtype: dns.TypeA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
Ns: []dns.RR{
|
|
&dns.SOA{
|
|
Hdr: dns.RR_Header{
|
|
Name: "consul.",
|
|
Rrtype: dns.TypeSOA,
|
|
Class: dns.ClassINET,
|
|
Ttl: 4,
|
|
},
|
|
Ns: "ns.consul.",
|
|
Serial: uint32(time.Now().Unix()),
|
|
Mbox: "hostmaster.consul.",
|
|
Refresh: 1,
|
|
Expire: 3,
|
|
Retry: 2,
|
|
Minttl: 4,
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
// TestDNS_ExternalServiceToConsulCNAMELookup
|
|
name: "req type: service / question type: SRV / CNAME required: no",
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "alias.service.consul.",
|
|
Qtype: dns.TypeSRV,
|
|
},
|
|
},
|
|
},
|
|
configureDataFetcher: func(fetcher discovery.CatalogDataFetcher) {
|
|
fetcher.(*discovery.MockCatalogDataFetcher).
|
|
On("FetchEndpoints", mock.Anything,
|
|
&discovery.QueryPayload{
|
|
Name: "alias",
|
|
Tenancy: discovery.QueryTenancy{},
|
|
}, discovery.LookupTypeService).
|
|
Return([]*discovery.Result{
|
|
{
|
|
Type: discovery.ResultTypeVirtual,
|
|
Service: &discovery.Location{Name: "alias", Address: "web.service.consul"},
|
|
Node: &discovery.Location{Name: "web", Address: "web.service.consul"},
|
|
},
|
|
},
|
|
nil).On("FetchEndpoints", mock.Anything,
|
|
&discovery.QueryPayload{
|
|
Name: "web",
|
|
Tenancy: discovery.QueryTenancy{},
|
|
}, discovery.LookupTypeService).
|
|
Return([]*discovery.Result{
|
|
{
|
|
Type: discovery.ResultTypeNode,
|
|
Service: &discovery.Location{Name: "web", Address: "webnode"},
|
|
Node: &discovery.Location{Name: "webnode", Address: "127.0.0.2"},
|
|
},
|
|
}, nil).On("ValidateRequest", mock.Anything,
|
|
mock.Anything).Return(nil).On("NormalizeRequest", mock.Anything)
|
|
},
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Response: true,
|
|
Authoritative: true,
|
|
},
|
|
Compress: true,
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "alias.service.consul.",
|
|
Qtype: dns.TypeSRV,
|
|
},
|
|
},
|
|
Answer: []dns.RR{
|
|
&dns.SRV{
|
|
Hdr: dns.RR_Header{
|
|
Name: "alias.service.consul.",
|
|
Rrtype: dns.TypeSRV,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
Target: "web.service.consul.",
|
|
Priority: 1,
|
|
},
|
|
},
|
|
Extra: []dns.RR{
|
|
&dns.A{
|
|
Hdr: dns.RR_Header{
|
|
Name: "web.service.consul.",
|
|
Rrtype: dns.TypeA,
|
|
Class: dns.ClassINET,
|
|
Ttl: 123,
|
|
},
|
|
A: net.ParseIP("127.0.0.2"),
|
|
},
|
|
},
|
|
},
|
|
},
|
|
// TODO (v2-dns): add a test to make sure only 3 records are returned
|
|
// V2 Workload Lookup
|
|
{
|
|
name: "workload A query w/ port, returns A record",
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "api.port.foo.workload.consul.",
|
|
Qtype: dns.TypeA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
configureDataFetcher: func(fetcher discovery.CatalogDataFetcher) {
|
|
result := &discovery.Result{
|
|
Node: &discovery.Location{Address: "1.2.3.4"},
|
|
Type: discovery.ResultTypeWorkload,
|
|
Tenancy: discovery.ResultTenancy{},
|
|
PortName: "api",
|
|
PortNumber: 5678,
|
|
Service: &discovery.Location{Name: "foo"},
|
|
}
|
|
|
|
fetcher.(*discovery.MockCatalogDataFetcher).
|
|
On("FetchWorkload", mock.Anything, mock.Anything).
|
|
Return(result, nil). //TODO
|
|
Run(func(args mock.Arguments) {
|
|
req := args.Get(1).(*discovery.QueryPayload)
|
|
|
|
require.Equal(t, "foo", req.Name)
|
|
require.Equal(t, "api", req.PortName)
|
|
})
|
|
},
|
|
validateAndNormalizeExpected: true,
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: true,
|
|
},
|
|
Compress: true,
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "api.port.foo.workload.consul.",
|
|
Qtype: dns.TypeA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
Answer: []dns.RR{
|
|
&dns.A{
|
|
Hdr: dns.RR_Header{
|
|
Name: "api.port.foo.workload.consul.",
|
|
Rrtype: dns.TypeA,
|
|
Class: dns.ClassINET,
|
|
},
|
|
A: net.ParseIP("1.2.3.4"),
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "workload ANY query w/o port, returns A record",
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "foo.workload.consul.",
|
|
Qtype: dns.TypeANY,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
configureDataFetcher: func(fetcher discovery.CatalogDataFetcher) {
|
|
result := &discovery.Result{
|
|
Node: &discovery.Location{Address: "1.2.3.4"},
|
|
Type: discovery.ResultTypeWorkload,
|
|
Tenancy: discovery.ResultTenancy{},
|
|
Service: &discovery.Location{Name: "foo"},
|
|
}
|
|
|
|
fetcher.(*discovery.MockCatalogDataFetcher).
|
|
On("FetchWorkload", mock.Anything, mock.Anything).
|
|
Return(result, nil). //TODO
|
|
Run(func(args mock.Arguments) {
|
|
req := args.Get(1).(*discovery.QueryPayload)
|
|
|
|
require.Equal(t, "foo", req.Name)
|
|
require.Empty(t, req.PortName)
|
|
})
|
|
},
|
|
validateAndNormalizeExpected: true,
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: true,
|
|
},
|
|
Compress: true,
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "foo.workload.consul.",
|
|
Qtype: dns.TypeANY,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
Answer: []dns.RR{
|
|
&dns.A{
|
|
Hdr: dns.RR_Header{
|
|
Name: "foo.workload.consul.",
|
|
Rrtype: dns.TypeA,
|
|
Class: dns.ClassINET,
|
|
},
|
|
A: net.ParseIP("1.2.3.4"),
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "workload AAAA query with namespace, partition, and cluster id; returns A record",
|
|
request: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
},
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "foo.workload.bar.ns.baz.ap.dc3.dc.consul.",
|
|
Qtype: dns.TypeAAAA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
},
|
|
configureDataFetcher: func(fetcher discovery.CatalogDataFetcher) {
|
|
result := &discovery.Result{
|
|
Node: &discovery.Location{Address: "1.2.3.4"},
|
|
Type: discovery.ResultTypeWorkload,
|
|
Tenancy: discovery.ResultTenancy{
|
|
Namespace: "bar",
|
|
Partition: "baz",
|
|
Datacenter: "dc3",
|
|
},
|
|
Service: &discovery.Location{Name: "foo"},
|
|
}
|
|
|
|
fetcher.(*discovery.MockCatalogDataFetcher).
|
|
On("FetchWorkload", mock.Anything, mock.Anything).
|
|
Return(result, nil).
|
|
Run(func(args mock.Arguments) {
|
|
req := args.Get(1).(*discovery.QueryPayload)
|
|
|
|
require.Equal(t, "foo", req.Name)
|
|
require.Empty(t, req.PortName)
|
|
})
|
|
},
|
|
validateAndNormalizeExpected: true,
|
|
response: &dns.Msg{
|
|
MsgHdr: dns.MsgHdr{
|
|
Opcode: dns.OpcodeQuery,
|
|
Response: true,
|
|
Authoritative: true,
|
|
},
|
|
Compress: true,
|
|
Question: []dns.Question{
|
|
{
|
|
Name: "foo.workload.bar.ns.baz.ap.dc3.dc.consul.",
|
|
Qtype: dns.TypeAAAA,
|
|
Qclass: dns.ClassINET,
|
|
},
|
|
},
|
|
Extra: []dns.RR{
|
|
&dns.A{
|
|
Hdr: dns.RR_Header{
|
|
Name: "foo.workload.bar.ns.baz.ap.dc3.dc.consul.",
|
|
Rrtype: dns.TypeA,
|
|
Class: dns.ClassINET,
|
|
},
|
|
A: net.ParseIP("1.2.3.4"),
|
|
},
|
|
},
|
|
},
|
|
},
|
|
}
|
|
|
|
testCases = append(testCases, getAdditionalTestCases(t)...)
|
|
|
|
run := func(t *testing.T, tc HandleTestCase) {
|
|
cdf := discovery.NewMockCatalogDataFetcher(t)
|
|
if tc.validateAndNormalizeExpected {
|
|
cdf.On("ValidateRequest", mock.Anything, mock.Anything).Return(nil)
|
|
cdf.On("NormalizeRequest", mock.Anything).Return()
|
|
}
|
|
|
|
if tc.configureDataFetcher != nil {
|
|
tc.configureDataFetcher(cdf)
|
|
}
|
|
cfg := buildDNSConfig(tc.agentConfig, cdf, tc.mockProcessorError)
|
|
|
|
router, err := NewRouter(cfg)
|
|
require.NoError(t, err)
|
|
|
|
// Replace the recursor with a mock and configure
|
|
router.recursor = newMockDnsRecursor(t)
|
|
if tc.configureRecursor != nil {
|
|
tc.configureRecursor(router.recursor)
|
|
}
|
|
|
|
ctx := tc.requestContext
|
|
if ctx == nil {
|
|
ctx = &Context{}
|
|
}
|
|
actual := router.HandleRequest(tc.request, *ctx, tc.remoteAddress)
|
|
require.Equal(t, tc.response, actual)
|
|
}
|
|
|
|
for _, tc := range testCases {
|
|
t.Run(tc.name, func(t *testing.T) {
|
|
run(t, tc)
|
|
})
|
|
}
|
|
|
|
}
|
|
|
|
func TestRouterDynamicConfig_GetTTLForService(t *testing.T) {
|
|
type testCase struct {
|
|
name string
|
|
inputKey string
|
|
shouldMatch bool
|
|
expectedDuration time.Duration
|
|
}
|
|
|
|
testCases := []testCase{
|
|
{
|
|
name: "strict match",
|
|
inputKey: "foo",
|
|
shouldMatch: true,
|
|
expectedDuration: 1 * time.Second,
|
|
},
|
|
{
|
|
name: "wildcard match",
|
|
inputKey: "bar",
|
|
shouldMatch: true,
|
|
expectedDuration: 2 * time.Second,
|
|
},
|
|
{
|
|
name: "wildcard match 2",
|
|
inputKey: "bart",
|
|
shouldMatch: true,
|
|
expectedDuration: 2 * time.Second,
|
|
},
|
|
{
|
|
name: "no match",
|
|
inputKey: "homer",
|
|
shouldMatch: false,
|
|
expectedDuration: 0 * time.Second,
|
|
},
|
|
}
|
|
|
|
rtCfg := &config.RuntimeConfig{
|
|
DNSServiceTTL: map[string]time.Duration{
|
|
"foo": 1 * time.Second,
|
|
"bar*": 2 * time.Second,
|
|
},
|
|
}
|
|
cfg, err := getDynamicRouterConfig(rtCfg)
|
|
require.NoError(t, err)
|
|
|
|
for _, tc := range testCases {
|
|
t.Run(tc.name, func(t *testing.T) {
|
|
actual, ok := cfg.getTTLForService(tc.inputKey)
|
|
require.Equal(t, tc.shouldMatch, ok)
|
|
require.Equal(t, tc.expectedDuration, actual)
|
|
})
|
|
}
|
|
}
|
|
func buildDNSConfig(agentConfig *config.RuntimeConfig, cdf discovery.CatalogDataFetcher, _ error) Config {
|
|
cfg := Config{
|
|
AgentConfig: &config.RuntimeConfig{
|
|
DNSDomain: "consul",
|
|
DNSNodeTTL: 123 * time.Second,
|
|
DNSSOA: config.RuntimeSOAConfig{
|
|
Refresh: 1,
|
|
Retry: 2,
|
|
Expire: 3,
|
|
Minttl: 4,
|
|
},
|
|
DNSUDPAnswerLimit: maxUDPAnswerLimit,
|
|
},
|
|
EntMeta: acl.EnterpriseMeta{},
|
|
Logger: hclog.NewNullLogger(),
|
|
Processor: discovery.NewQueryProcessor(cdf),
|
|
TokenFunc: func() string { return "" },
|
|
}
|
|
|
|
if agentConfig != nil {
|
|
cfg.AgentConfig = agentConfig
|
|
}
|
|
|
|
return cfg
|
|
}
|