alice.pds.demo.boltless.dev
This repository has no description
1//go:build linux
2
3package microvm
4
5import (
6 "net"
7 "testing"
8
9 "github.com/miekg/dns"
10)
11
12func TestFilterDNSResponseDropsBlockedAddressRecords(t *testing.T) {
13 msg := new(dns.Msg)
14 msg.Answer = []dns.RR{
15 &dns.CNAME{Hdr: dns.RR_Header{Name: "cache.example.", Rrtype: dns.TypeCNAME, Class: dns.ClassINET}, Target: "edge.example."},
16 &dns.A{Hdr: dns.RR_Header{Name: "edge.example.", Rrtype: dns.TypeA, Class: dns.ClassINET}, A: net.ParseIP("1.1.1.1")},
17 &dns.A{Hdr: dns.RR_Header{Name: "edge.example.", Rrtype: dns.TypeA, Class: dns.ClassINET}, A: net.ParseIP("10.0.0.1")},
18 &dns.AAAA{Hdr: dns.RR_Header{Name: "edge.example.", Rrtype: dns.TypeAAAA, Class: dns.ClassINET}, AAAA: net.ParseIP("2606:4700:4700::1111")},
19 &dns.AAAA{Hdr: dns.RR_Header{Name: "edge.example.", Rrtype: dns.TypeAAAA, Class: dns.ClassINET}, AAAA: net.ParseIP("fd7a:115c:a1e0::53")},
20 }
21 msg.Extra = []dns.RR{
22 &dns.A{Hdr: dns.RR_Header{Name: "private.example.", Rrtype: dns.TypeA, Class: dns.ClassINET}, A: net.ParseIP("192.168.1.2")},
23 &dns.A{Hdr: dns.RR_Header{Name: "public.example.", Rrtype: dns.TypeA, Class: dns.ClassINET}, A: net.ParseIP("8.8.8.8")},
24 }
25
26 filterDNSResponse(msg)
27
28 if len(msg.Answer) != 3 {
29 t.Fatalf("filtered answer len = %d, want 3: %#v", len(msg.Answer), msg.Answer)
30 }
31 if _, ok := msg.Answer[0].(*dns.CNAME); !ok {
32 t.Fatalf("answer[0] = %T, want CNAME", msg.Answer[0])
33 }
34 if a, ok := msg.Answer[1].(*dns.A); !ok || !a.A.Equal(net.ParseIP("1.1.1.1")) {
35 t.Fatalf("answer[1] = %#v, want public A", msg.Answer[1])
36 }
37 if aaaa, ok := msg.Answer[2].(*dns.AAAA); !ok || !aaaa.AAAA.Equal(net.ParseIP("2606:4700:4700::1111")) {
38 t.Fatalf("answer[2] = %#v, want public AAAA", msg.Answer[2])
39 }
40 if len(msg.Extra) != 1 {
41 t.Fatalf("filtered extra len = %d, want 1: %#v", len(msg.Extra), msg.Extra)
42 }
43}
44
45func TestFilterDNSResponseFiltersSVCBAddressHints(t *testing.T) {
46 msg := new(dns.Msg)
47 msg.Answer = []dns.RR{
48 &dns.HTTPS{
49 SVCB: dns.SVCB{
50 Hdr: dns.RR_Header{Name: "svc.example.", Rrtype: dns.TypeHTTPS, Class: dns.ClassINET},
51 Priority: 1,
52 Target: ".",
53 Value: []dns.SVCBKeyValue{
54 &dns.SVCBIPv4Hint{Hint: []net.IP{net.ParseIP("10.0.0.1"), net.ParseIP("8.8.8.8")}},
55 &dns.SVCBIPv6Hint{Hint: []net.IP{net.ParseIP("fd7a:115c:a1e0::53"), net.ParseIP("2001:4860:4860::8888")}},
56 },
57 },
58 },
59 }
60
61 filterDNSResponse(msg)
62
63 https := msg.Answer[0].(*dns.HTTPS)
64 if len(https.Value) != 2 {
65 t.Fatalf("https values len = %d, want 2", len(https.Value))
66 }
67 ipv4 := https.Value[0].(*dns.SVCBIPv4Hint)
68 if len(ipv4.Hint) != 1 || !ipv4.Hint[0].Equal(net.ParseIP("8.8.8.8")) {
69 t.Fatalf("ipv4 hints = %v, want [8.8.8.8]", ipv4.Hint)
70 }
71 ipv6 := https.Value[1].(*dns.SVCBIPv6Hint)
72 if len(ipv6.Hint) != 1 || !ipv6.Hint[0].Equal(net.ParseIP("2001:4860:4860::8888")) {
73 t.Fatalf("ipv6 hints = %v, want [2001:4860:4860::8888]", ipv6.Hint)
74 }
75}