nixpkgs/nixos/tests/fastnetmon-advanced.nix

{ pkgs, lib, ... }:

{
  name = "fastnetmon-advanced";
  meta.maintainers = lib.teams.wdz.members;

  nodes = {
    bird =
      { ... }:
      {
        networking.firewall.allowedTCPPorts = [ 179 ];
        services.bird = {
          enable = true;
          config = ''
            router id 192.168.1.1;

            protocol bgp fnm {
              local 192.168.1.1 as 64513;
              neighbor 192.168.1.2 as 64514;
              multihop;
              ipv4 {
                import all;
                export none;
              };
            }
          '';
        };
      };
    fnm =
      { ... }:
      {
        networking.firewall.allowedTCPPorts = [ 179 ];
        services.fastnetmon-advanced = {
          enable = true;
          settings = {
            networks_list = [ "172.23.42.0/24" ];
            gobgp = true;
            gobgp_flow_spec_announces = true;
          };
          bgpPeers = {
            bird = {
              local_asn = 64514;
              remote_asn = 64513;
              local_address = "192.168.1.2";
              remote_address = "192.168.1.1";

              description = "Bird";
              ipv4_unicast = true;
              multihop = true;
              active = true;
            };
          };
        };
      };
  };

  testScript =
    { nodes, ... }:
    ''
      start_all()
      fnm.wait_for_unit("fastnetmon.service")
      bird.wait_for_unit("bird.service")

      fnm.wait_until_succeeds('journalctl -eu fastnetmon.service | grep "BGP daemon restarted correctly"')
      fnm.wait_until_succeeds("journalctl -eu gobgp.service | grep BGP_FSM_OPENCONFIRM")
      bird.wait_until_succeeds("birdc show protocol fnm | grep Estab")
      fnm.wait_until_succeeds('journalctl -eu fastnetmon.service | grep "API server listening"')
      fnm.succeed("fcli set blackhole 172.23.42.123")
      bird.succeed("birdc show route | grep 172.23.42.123")
    '';
}