Test forward query/response counts

This commit is contained in:
Mark Andrews 2026-01-30 13:50:11 +11:00
parent 38b626d58d
commit 591096f131
2 changed files with 299 additions and 2 deletions

View file

@ -0,0 +1,44 @@
/*
* Copyright (C) Internet Systems Consortium, Inc. ("ISC")
*
* SPDX-License-Identifier: MPL-2.0
*
* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this
* file, you can obtain one at https://mozilla.org/MPL/2.0/.
*
* See the COPYRIGHT file distributed with this work for additional
* information regarding copyright ownership.
*/
options {
query-source address 10.53.0.5;
notify-source 10.53.0.5;
transfer-source 10.53.0.5;
port @PORT@;
directory ".";
pid-file "named.pid";
listen-on { 10.53.0.5; };
listen-on-v6 { none; };
recursion yes;
notify yes;
dnstap-identity "ns5";
dnstap-version "xxx";
dnstap-output file "dnstap.out";
dnstap { all; };
send-cookie no;
require-server-cookie no;
dnssec-validation no;
qname-minimization disabled;
forwarders { 10.53.0.3; };
forward only;
};
key rndc_key {
secret "1234abcd8765";
algorithm @DEFAULT_HMAC@;
};
controls {
inet 10.53.0.5 port @CONTROLPORT@ allow { any; } keys { rndc_key; };
};

View file

@ -15,7 +15,7 @@ set -e
. ../conf.sh
DIGOPTS="+short -p ${PORT}"
DIGOPTS="-p ${PORT}"
RNDCCMD="$RNDC -p ${CONTROLPORT} -c ../_common/rndc.conf"
status=0
@ -37,6 +37,13 @@ dnstap_data_ready() {
fi
}
check_count() {
[ $2 -eq $3 ] || {
echo_i "$1 $2 expected $3"
ret=1
}
}
for bad in bad-*.conf; do
ret=0
echo_i "checking that named-checkconf detects error in $bad"
@ -71,6 +78,7 @@ wait_for_log 20 "all zones loaded" ns1/named.run || ret=1
wait_for_log 20 "all zones loaded" ns2/named.run || ret=1
wait_for_log 20 "all zones loaded" ns3/named.run || ret=1
wait_for_log 20 "all zones loaded" ns4/named.run || ret=1
wait_for_log 20 "all zones loaded" ns5/named.run || ret=1
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
@ -89,6 +97,7 @@ status=$((status + ret))
# ns1: dnstap-reopen; ns2: dnstap -reopen; ns3: dnstap -roll
mv ns1/dnstap.out ns1/dnstap.out.save
mv ns2/dnstap.out ns2/dnstap.out.save
mv ns5/dnstap.out ns5/dnstap.out.save
if [ -n "$FSTRM_CAPTURE" ]; then
ret=0
@ -107,10 +116,11 @@ $RNDCCMD -s 10.53.0.1 dnstap-reopen | sed 's/^/ns1 /' | cat_i
$RNDCCMD -s 10.53.0.2 dnstap -reopen | sed 's/^/ns2 /' | cat_i
$RNDCCMD -s 10.53.0.3 dnstap -roll | sed 's/^/ns3 /' | cat_i
$RNDCCMD -s 10.53.0.4 dnstap -reopen | sed 's/^/ns4 /' | cat_i
$RNDCCMD -s 10.53.0.5 dnstap -reopen | sed 's/^/ns5 /' | cat_i
echo_i "send test traffic"
ret=0
$DIG $DIGOPTS @10.53.0.3 a.example >dig.out || ret=1
$DIG $DIGOPTS @10.53.0.5 a.example >dig.out || ret=1
# send an UPDATE to ns2
$NSUPDATE <<-EOF
@ -128,6 +138,7 @@ EOF
$RNDCCMD -s 10.53.0.1 stop | sed 's/^/ns1 /' | cat_i
$RNDCCMD -s 10.53.0.2 stop | sed 's/^/ns2 /' | cat_i
$RNDCCMD -s 10.53.0.3 stop | sed 's/^/ns3 /' | cat_i
$RNDCCMD -s 10.53.0.5 stop | sed 's/^/ns5 /' | cat_i
sleep 1
@ -139,6 +150,8 @@ aq1=$($DNSTAPREAD ns1/dnstap.out.save | grep "AQ " | wc -l)
ar1=$($DNSTAPREAD ns1/dnstap.out.save | grep "AR " | wc -l)
cq1=$($DNSTAPREAD ns1/dnstap.out.save | grep "CQ " | wc -l)
cr1=$($DNSTAPREAD ns1/dnstap.out.save | grep "CR " | wc -l)
fq1=$($DNSTAPREAD ns1/dnstap.out.save | grep "FQ " | wc -l)
fr1=$($DNSTAPREAD ns1/dnstap.out.save | grep "FR " | wc -l)
rq1=$($DNSTAPREAD ns1/dnstap.out.save | grep "RQ " | wc -l)
rr1=$($DNSTAPREAD ns1/dnstap.out.save | grep "RR " | wc -l)
uq1=$($DNSTAPREAD ns1/dnstap.out.save | grep "UQ " | wc -l)
@ -150,6 +163,8 @@ aq2=$($DNSTAPREAD ns2/dnstap.out.save | grep "AQ " | wc -l)
ar2=$($DNSTAPREAD ns2/dnstap.out.save | grep "AR " | wc -l)
cq2=$($DNSTAPREAD ns2/dnstap.out.save | grep "CQ " | wc -l)
cr2=$($DNSTAPREAD ns2/dnstap.out.save | grep "CR " | wc -l)
fq2=$($DNSTAPREAD ns2/dnstap.out.save | grep "FQ " | wc -l)
fr2=$($DNSTAPREAD ns2/dnstap.out.save | grep "FR " | wc -l)
rq2=$($DNSTAPREAD ns2/dnstap.out.save | grep "RQ " | wc -l)
rr2=$($DNSTAPREAD ns2/dnstap.out.save | grep "RR " | wc -l)
uq2=$($DNSTAPREAD ns2/dnstap.out.save | grep "UQ " | wc -l)
@ -162,11 +177,26 @@ aq3=$($DNSTAPREAD ns3/dnstap.out.save | grep "AQ " | wc -l)
ar3=$($DNSTAPREAD ns3/dnstap.out.save | grep "AR " | wc -l)
cq3=$($DNSTAPREAD ns3/dnstap.out.save | grep "CQ " | wc -l)
cr3=$($DNSTAPREAD ns3/dnstap.out.save | grep "CR " | wc -l)
fq3=$($DNSTAPREAD ns3/dnstap.out.save | grep "FQ " | wc -l)
fr3=$($DNSTAPREAD ns3/dnstap.out.save | grep "FR " | wc -l)
rq3=$($DNSTAPREAD ns3/dnstap.out.save | grep "RQ " | wc -l)
rr3=$($DNSTAPREAD ns3/dnstap.out.save | grep "RR " | wc -l)
uq3=$($DNSTAPREAD ns3/dnstap.out.save | grep "UQ " | wc -l)
ur3=$($DNSTAPREAD ns3/dnstap.out.save | grep "UR " | wc -l)
udp5=$($DNSTAPREAD ns5/dnstap.out.save | grep "UDP " | wc -l)
tcp5=$($DNSTAPREAD ns5/dnstap.out.save | grep "TCP " | wc -l)
aq5=$($DNSTAPREAD ns5/dnstap.out.save | grep "AQ " | wc -l)
ar5=$($DNSTAPREAD ns5/dnstap.out.save | grep "AR " | wc -l)
cq5=$($DNSTAPREAD ns5/dnstap.out.save | grep "CQ " | wc -l)
cr5=$($DNSTAPREAD ns5/dnstap.out.save | grep "CR " | wc -l)
fq5=$($DNSTAPREAD ns5/dnstap.out.save | grep "FQ " | wc -l)
fr5=$($DNSTAPREAD ns5/dnstap.out.save | grep "FR " | wc -l)
rq5=$($DNSTAPREAD ns5/dnstap.out.save | grep "RQ " | wc -l)
rr5=$($DNSTAPREAD ns5/dnstap.out.save | grep "RR " | wc -l)
uq5=$($DNSTAPREAD ns5/dnstap.out.save | grep "UQ " | wc -l)
ur5=$($DNSTAPREAD ns5/dnstap.out.save | grep "UR " | wc -l)
echo_i "checking UDP message counts"
ret=0
[ $udp1 -eq 0 ] || {
@ -181,6 +211,10 @@ ret=0
echo_i "ns3 $udp3 expected 4"
ret=1
}
[ $udp5 -eq 0 ] || {
echo_i "ns5 $udp5 expected 0"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
@ -198,6 +232,10 @@ ret=0
echo_i "ns3 $tcp3 expected 6"
ret=1
}
[ $tcp5 -eq 2 ] || {
echo_i "ns5 $tcp5 expected 2"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
@ -215,6 +253,10 @@ ret=0
echo_i "ns3 $aq3 expected 1"
ret=1
}
[ $aq5 -eq 1 ] || {
echo_i "ns5 $aq5 expected 1"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
@ -232,6 +274,10 @@ ret=0
echo_i "ns3 $ar3 expected 0"
ret=1
}
[ $ar5 -eq 0 ] || {
echo_i "ns5 $ar5 expected 0"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
@ -249,6 +295,10 @@ ret=0
echo_i "ns3 $cq3 expected 1"
ret=1
}
[ $cq5 -eq 0 ] || {
echo_i "ns5 $cq5 expected 0"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
@ -266,6 +316,10 @@ ret=0
echo_i "ns3 $cr3 expected 2"
ret=1
}
[ $cr5 -eq 1 ] || {
echo_i "ns5 $cr5 expected 1"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
@ -283,6 +337,10 @@ ret=0
echo_i "ns3 $rq3 expected 3"
ret=1
}
[ $rq5 -eq 0 ] || {
echo_i "ns5 $rq5 expected 0"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
@ -300,6 +358,52 @@ ret=0
echo_i "ns3 $rr3 expected 3"
ret=1
}
[ $rr5 -eq 0 ] || {
echo_i "ns5 $rr5 expected 0"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
echo_i "checking FORWARD_QUERY message counts"
ret=0
[ $fq1 -eq 0 ] || {
echo_i "ns1 $fq1 expected 0"
ret=1
}
[ $fq2 -eq 0 ] || {
echo_i "ns2 $fq2 expected 0"
ret=1
}
[ $fq3 -eq 0 ] || {
echo_i "ns3 $fq3 expected 0"
ret=1
}
[ $fq5 -eq 0 ] || {
echo_i "ns5 $fq5 expected 0"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
echo_i "checking FORWARD_RESPONSE message counts"
ret=0
[ $fr1 -eq 0 ] || {
echo_i "ns1 $fr1 expected 0"
ret=1
}
[ $fr2 -eq 0 ] || {
echo_i "ns2 $fr2 expected 0"
ret=1
}
[ $fr3 -eq 0 ] || {
echo_i "ns3 $fr3 expected 0"
ret=1
}
[ $fr5 -eq 0 ] || {
echo_i "ns5 $fr5 expected 0"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
@ -317,6 +421,10 @@ ret=0
echo_i "ns3 $uq3 expected 0"
ret=1
}
[ $uq5 -eq 0 ] || {
echo_i "ns5 $uq5 expected 0"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
@ -334,6 +442,10 @@ ret=0
echo_i "ns3 $ur3 expected 0"
ret=1
}
[ $ur5 -eq 0 ] || {
echo_i "ns5 $ur5 expected 0"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
@ -345,6 +457,8 @@ aq1=$($DNSTAPREAD ns1/dnstap.out | grep "AQ " | wc -l)
ar1=$($DNSTAPREAD ns1/dnstap.out | grep "AR " | wc -l)
cq1=$($DNSTAPREAD ns1/dnstap.out | grep "CQ " | wc -l)
cr1=$($DNSTAPREAD ns1/dnstap.out | grep "CR " | wc -l)
fq1=$($DNSTAPREAD ns1/dnstap.out | grep "FQ " | wc -l)
fr1=$($DNSTAPREAD ns1/dnstap.out | grep "FR " | wc -l)
rq1=$($DNSTAPREAD ns1/dnstap.out | grep "RQ " | wc -l)
rr1=$($DNSTAPREAD ns1/dnstap.out | grep "RR " | wc -l)
uq1=$($DNSTAPREAD ns1/dnstap.out | grep "UQ " | wc -l)
@ -356,6 +470,8 @@ aq2=$($DNSTAPREAD ns2/dnstap.out | grep "AQ " | wc -l)
ar2=$($DNSTAPREAD ns2/dnstap.out | grep "AR " | wc -l)
cq2=$($DNSTAPREAD ns2/dnstap.out | grep "CQ " | wc -l)
cr2=$($DNSTAPREAD ns2/dnstap.out | grep "CR " | wc -l)
fq2=$($DNSTAPREAD ns2/dnstap.out | grep "FQ " | wc -l)
fr2=$($DNSTAPREAD ns2/dnstap.out | grep "FR " | wc -l)
rq2=$($DNSTAPREAD ns2/dnstap.out | grep "RQ " | wc -l)
rr2=$($DNSTAPREAD ns2/dnstap.out | grep "RR " | wc -l)
uq2=$($DNSTAPREAD ns2/dnstap.out | grep "UQ " | wc -l)
@ -367,11 +483,26 @@ aq3=$($DNSTAPREAD ns3/dnstap.out | grep "AQ " | wc -l)
ar3=$($DNSTAPREAD ns3/dnstap.out | grep "AR " | wc -l)
cq3=$($DNSTAPREAD ns3/dnstap.out | grep "CQ " | wc -l)
cr3=$($DNSTAPREAD ns3/dnstap.out | grep "CR " | wc -l)
fq3=$($DNSTAPREAD ns3/dnstap.out | grep "FQ " | wc -l)
fr3=$($DNSTAPREAD ns3/dnstap.out | grep "FR " | wc -l)
rq3=$($DNSTAPREAD ns3/dnstap.out | grep "RQ " | wc -l)
rr3=$($DNSTAPREAD ns3/dnstap.out | grep "RR " | wc -l)
uq3=$($DNSTAPREAD ns3/dnstap.out | grep "UQ " | wc -l)
ur3=$($DNSTAPREAD ns3/dnstap.out | grep "UR " | wc -l)
udp5=$($DNSTAPREAD ns5/dnstap.out | grep "UDP " | wc -l)
tcp5=$($DNSTAPREAD ns5/dnstap.out | grep "TCP " | wc -l)
aq5=$($DNSTAPREAD ns5/dnstap.out | grep "AQ " | wc -l)
ar5=$($DNSTAPREAD ns5/dnstap.out | grep "AR " | wc -l)
cq5=$($DNSTAPREAD ns5/dnstap.out | grep "CQ " | wc -l)
cr5=$($DNSTAPREAD ns5/dnstap.out | grep "CR " | wc -l)
fq5=$($DNSTAPREAD ns5/dnstap.out | grep "FQ " | wc -l)
fr5=$($DNSTAPREAD ns5/dnstap.out | grep "FR " | wc -l)
rq5=$($DNSTAPREAD ns5/dnstap.out | grep "RQ " | wc -l)
rr5=$($DNSTAPREAD ns5/dnstap.out | grep "RR " | wc -l)
uq5=$($DNSTAPREAD ns5/dnstap.out | grep "UQ " | wc -l)
ur5=$($DNSTAPREAD ns5/dnstap.out | grep "UR " | wc -l)
echo_i "checking UDP message counts"
ret=0
[ $udp1 -eq 0 ] || {
@ -386,6 +517,10 @@ ret=0
echo_i "ns3 $udp3 expected 2"
ret=1
}
[ $udp5 -eq 4 ] || {
echo_i "ns5 $udp5 expected 4"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
@ -403,6 +538,10 @@ ret=0
echo_i "ns3 $tcp3 expected 0"
ret=1
}
[ $tcp5 -eq 0 ] || {
echo_i "ns5 $tcp5 expected 0"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
@ -420,6 +559,10 @@ ret=0
echo_i "ns3 $aq3 expected 0"
ret=1
}
[ $aq5 -eq 0 ] || {
echo_i "ns5 $aq5 expected 0"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
@ -437,6 +580,10 @@ ret=0
echo_i "ns3 $ar3 expected 0"
ret=1
}
[ $ar5 -eq 0 ] || {
echo_i "ns5 $ar5 expected 0"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
@ -454,6 +601,10 @@ ret=0
echo_i "ns3 $cq3 expected 1"
ret=1
}
[ $cq5 -eq 1 ] || {
echo_i "ns5 $cq5 expected 1"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
@ -471,6 +622,10 @@ ret=0
echo_i "ns3 $cr3 expected 1"
ret=1
}
[ $cr5 -eq 1 ] || {
echo_i "ns5 $cr5 expected 1"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
@ -488,6 +643,10 @@ ret=0
echo_i "ns3 $rq3 expected 0"
ret=1
}
[ $rq5 -eq 0 ] || {
echo_i "ns5 $rq5 expected 0"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
@ -505,6 +664,52 @@ ret=0
echo_i "ns3 $rr3 expected 0"
ret=1
}
[ $rr5 -eq 0 ] || {
echo_i "ns5 $rr5 expected 0"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
echo_i "checking FORWARD_QUERY message counts"
ret=0
[ $fq1 -eq 0 ] || {
echo_i "ns1 $fq1 expected 0"
ret=1
}
[ $fq2 -eq 0 ] || {
echo_i "ns2 $fq2 expected 0"
ret=1
}
[ $fq3 -eq 0 ] || {
echo_i "ns3 $fq3 expected 0"
ret=1
}
[ $fq5 -eq 1 ] || {
echo_i "ns5 $fq5 expected 1"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
echo_i "checking FORWARD_RESPONSE message counts"
ret=0
[ $fr1 -eq 0 ] || {
echo_i "ns1 $fr1 expected 0"
ret=1
}
[ $fr2 -eq 0 ] || {
echo_i "ns2 $fr2 expected 0"
ret=1
}
[ $fr3 -eq 0 ] || {
echo_i "ns3 $fr3 expected 0"
ret=1
}
[ $fr5 -eq 1 ] || {
echo_i "ns5 $fr5 expected 1"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
@ -522,6 +727,10 @@ ret=0
echo_i "ns3 $uq3 expected 0"
ret=1
}
[ $uq5 -eq 0 ] || {
echo_i "ns5 $uq5 expected 0"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
@ -539,6 +748,10 @@ ret=0
echo_i "ns3 $ur3 expected 0"
ret=1
}
[ $ur5 -eq 0 ] || {
echo_i "ns5 $ur5 expected 0"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
@ -598,6 +811,8 @@ EOF
ar4=$($DNSTAPREAD dnstap.out | grep "AR " | wc -l)
cq4=$($DNSTAPREAD dnstap.out | grep "CQ " | wc -l)
cr4=$($DNSTAPREAD dnstap.out | grep "CR " | wc -l)
fq4=$($DNSTAPREAD dnstap.out | grep "FQ " | wc -l)
fr4=$($DNSTAPREAD dnstap.out | grep "FR " | wc -l)
rq4=$($DNSTAPREAD dnstap.out | grep "RQ " | wc -l)
rr4=$($DNSTAPREAD dnstap.out | grep "RR " | wc -l)
uq4=$($DNSTAPREAD dnstap.out | grep "UQ " | wc -l)
@ -675,6 +890,24 @@ EOF
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
echo_i "checking FORWARDER_QUERY message counts"
ret=0
[ $fq4 -eq 0 ] || {
echo_i "ns4 $fq4 expected 0"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
echo_i "checking FORWARDER_RESPONSE message counts"
ret=0
[ $fr4 -eq 0 ] || {
echo_i "ns4 $fr4 expected 0"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
echo_i "checking UPDATE_QUERY message counts"
ret=0
[ $uq4 -eq 1 ] || {
@ -722,6 +955,8 @@ EOF
ar4=$($DNSTAPREAD dnstap.out | grep "AR " | wc -l)
cq4=$($DNSTAPREAD dnstap.out | grep "CQ " | wc -l)
cr4=$($DNSTAPREAD dnstap.out | grep "CR " | wc -l)
fq4=$($DNSTAPREAD dnstap.out | grep "FQ " | wc -l)
fr4=$($DNSTAPREAD dnstap.out | grep "FR " | wc -l)
rq4=$($DNSTAPREAD dnstap.out | grep "RQ " | wc -l)
rr4=$($DNSTAPREAD dnstap.out | grep "RR " | wc -l)
uq4=$($DNSTAPREAD dnstap.out | grep "UQ " | wc -l)
@ -799,6 +1034,24 @@ EOF
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
echo_i "checking FORWARDER_QUERY message counts"
ret=0
[ $fq4 -eq 0 ] || {
echo_i "ns4 $fq4 expected 0"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
echo_i "checking FORWARDER_RESPONSE message counts"
ret=0
[ $fr4 -eq 0 ] || {
echo_i "ns4 $fr4 expected 0"
ret=1
}
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
echo_i "checking UPDATE_QUERY message counts"
ret=0
[ $uq4 -eq 0 ] || {