100 lines
6.4 KiB
Plaintext
100 lines
6.4 KiB
Plaintext
|
*** Settings ***
|
|||
|
|
Test Teardown DeletePolicyAndObject ${policyIds} ${objectids}
|
|||
|
|
Force Tags zjj tsg_proxy replace
|
|||
|
|
Library OperatingSystem
|
|||
|
|
Resource ../../02-Keyword/tsg_adc/SystemCommand.robot
|
|||
|
|
Resource ../../02-Keyword/tsg_bfapi/PolicyObject.robot
|
|||
|
|
Resource ../../02-Keyword/tsg_bfapi/LogVariable.robot
|
|||
|
|
Resource ../../03-Variable/PolicyObjectDefault.txt
|
|||
|
|
Resource ../../02-Keyword/tsg_common/StmpHandle.robot
|
|||
|
|
Resource ../../03-Variable/BifangApiVariable.txt
|
|||
|
|
Library Custometest
|
|||
|
|
Library json
|
|||
|
|
|
|||
|
|
*** Variables ***
|
|||
|
|
${policyIds} ${EMPTY}
|
|||
|
|
${objectids} ${EMPTY}
|
|||
|
|
${url} /policy/profile/responsepages
|
|||
|
|
${profiledId} ${EMPTY}
|
|||
|
|
|
|||
|
|
*** Test Cases ***
|
|||
|
|
ZJJ_ProxyPolicy-Replace-Uri-00001
|
|||
|
|
[Tags] selfserver
|
|||
|
|
|
|||
|
|
${caseName} set variable ZJJ_ProxyPolicy-Replace-Uri-00001
|
|||
|
|
# 创建对象-IP
|
|||
|
|
# addItemList全参数：（为方便说明，将参数值拆分为几部分，其实际值为单条无空格/回车字符串，每部分内代表的各参数不可跳跃。）
|
|||
|
|
# [addrType]|[protocol]|[direction]|[isSession]# 第一部分（可省略）
|
|||
|
|
# [clientIpFormat]|[clientIp1]|[clientIp2]|[clientPort1/clientPort2]& 第二部分（不可省略）
|
|||
|
|
# [serverIpFormat]|[serverIp1]|[serverIp2]|[serverPort1/serverPort2]| 第三部分（可省略）
|
|||
|
|
# [isInitialize]|[itemName]|[itemDesc], 第四部分（可省略）
|
|||
|
|
# ...
|
|||
|
|
Comment 创建目标IP
|
|||
|
|
${objectDict} Create Dictionary
|
|||
|
|
... objectType=ip
|
|||
|
|
... isValid=1
|
|||
|
|
... objectSubType=${Default_ObjectSubType}
|
|||
|
|
... isInitialize=${Default_IsInitialize}
|
|||
|
|
... isExclusion=${Default_IsExclusion}
|
|||
|
|
... objectName=${caseName}_IPobject
|
|||
|
|
... objectDesc=${Default_ObjectDesc}
|
|||
|
|
... subObjectIds=${Default_SubObjectIds}
|
|||
|
|
... addItemList=CIDR|192.168.100.5|32|0/0&${Default_AddItem_ServerIpFormat}|${Default_AddItem_ServerIp1}|${Default_AddItem_ServerIp2}|${Default_AddItem_ServerPort}|${Default_AddItem_IsInitialize}|${Default_AddItem_ItemName}|${Default_AddItem_ItemDesc}
|
|||
|
|
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
|
|||
|
|
${objectids} set Variable ${objectId}
|
|||
|
|
|
|||
|
|
#创建url
|
|||
|
|
${objectDict} Create Dictionary
|
|||
|
|
... objectType=url
|
|||
|
|
... isValid=${1}
|
|||
|
|
... objectSubType=${Default_ObjectSubType}
|
|||
|
|
... isInitialize=${Default_IsInitialize}
|
|||
|
|
... isExclusion=${Default_IsExclusion}
|
|||
|
|
... objectName=${caseName}_URLobject
|
|||
|
|
... objectDesc=${Default_ObjectDesc}
|
|||
|
|
... subObjectIds=${Default_SubObjectIds}
|
|||
|
|
... addItemList=open.node.com/action
|
|||
|
|
${rescode} ${object_URL_Id} AddObject2 ${1} ${objectDict}
|
|||
|
|
${objectids} Catenate SEPARATOR=, ${objectids} ${object_URL_Id}
|
|||
|
|
|
|||
|
|
Comment 创建安全策略，针对所有协议，相当于BlackIP
|
|||
|
|
${policyDict} Create Dictionary
|
|||
|
|
... policyName=${caseName}_IPobject
|
|||
|
|
... policyType=pxy_manipulation
|
|||
|
|
... policyDesc=${Default_PolicyDesc}
|
|||
|
|
... action=manipulation
|
|||
|
|
... effectiveRange=${Default_EffectiveRange}
|
|||
|
|
... userRegion={"method":"replace","rules":[{"search_in":"http_req_body","find":"find","replace_with":"replace"},{"search_in":"http_res_body","find":"replace","replace_with":"replacetest"}],"enforcement_ratio":0.1,"protocol":"HTTP"}
|
|||
|
|
... referenceObject=${objectId}|TSG_SECURITY_DESTINATION_ADDR,${object_URL_Id}|TSG_FIELD_HTTP_URL
|
|||
|
|
... isValid=1
|
|||
|
|
... appObjectIdArray=${2}
|
|||
|
|
... userTags=${Default_UserTags}
|
|||
|
|
... doLog=${Default_DoLog}
|
|||
|
|
... scheduleId=${Default_ScheduleId}
|
|||
|
|
#默认客户端条件类型：clientip or clientsubid ${Default_Client_Type}
|
|||
|
|
#... userRegion="'method':'replace','rules':[{'search_in':'http_req_uri','find':'find','replace_with':'replace'}],'enforcement_ratio':0.1,'protocol':'HTTP'"
|
|||
|
|
${rescode} ${policyId} AddPolicy2 ${1} ${policyDict}
|
|||
|
|
${s} Convert to String ${policyId}
|
|||
|
|
${policyIds} Create List {"policyType":"pxy_manipulation","policyIds":[${policyId}]}
|
|||
|
|
#{"objectId":5668,"protocolFields":["TSG_FIELD_HTTP_HOST"]},{"objectId":7732,"protocolFields":["TSG_FIELD_HTTP_URL"]}]}
|
|||
|
|
#
|
|||
|
|
${disablePolciy} set variable {"opAction":"enable","policyList":[{"policyType":"pxy_manipulation","policyId":[${policyId}]}]}
|
|||
|
|
EditPolicy ${disablePolciy}
|
|||
|
|
Comment 功能端验证SSL验证
|
|||
|
|
${commandstr} run keyword if '${systemType}'=='Windows' set variable ${curlbatpath}/zjj/ZJJ_ProxyPolicy-Replace-Uri-00001.bat
|
|||
|
|
... ELSE set variable curl -H "Content-Type:application/x-www-form-urlencoded" -X POST -d "reqBody=find&setCookie=set-cookie&contentType=content-type&resBody=Response Body" https://open.node.com/action
|
|||
|
|
|
|||
|
|
${stringlist} run keyword if '${systemType}'=='Windows' Create List Connection was reset
|
|||
|
|
#OpenSSL SSL_connect: Connection was reset in connection to
|
|||
|
|
#Send failure: Connection was reset
|
|||
|
|
... ELSE Create List OpenSSL SSL_connect: Connection reset by peer in connection to
|
|||
|
|
|
|||
|
|
${starttime} Get Time
|
|||
|
|
Sleep ${policyVerificationSleepSeconds}s
|
|||
|
|
${rescode} SystemCommands ${commandstr} ${stringlist}
|
|||
|
|
Sleep ${policyLogVerificationSleepSeconds}s
|
|||
|
|
${endtime} Get Time
|
|||
|
|
#日志验证
|
|||
|
|
GetLogList security_event_log ${starttime} ${endtime} ${testClentIP} ${s} ssl_sni open.node.com
|
|||
|
|
|
|||
|
|
#{"opAction":"add","policyList":{"policyId":"","policyName":"dxytest","policyType":"pxy_manipulation","action":"manipulation","userTags":"","doBlacklist":0,"doLog":1,"policyDesc":"阿斯蒂","effectiveRange":{"tag_sets":[[]]},"userRegion":{"method":"replace","rules":[{"search_in":"http_req_uri","find":"find","replace_with":"replace"}],"protocol":"HTTP"},"isValid":0,"scheduleId":[],"appObjectIdArray":[2],"referenceObject":[{"objectId":10103,"protocolFields":["TSG_SECURITY_SOURCE_ADDR"]},{"objectId":8337,"protocolFields":["TSG_SECURITY_DESTINATION_ADDR"]},{"objectId":5668,"protocolFields":["TSG_FIELD_HTTP_HOST"]},{"objectId":7732,"protocolFields":["TSG_FIELD_HTTP_URL"]}]}}
|