*** Settings ***
Force Tags        tsg_adc_wp    security_policy    adc_verify
Library           OperatingSystem
Resource          ../../../02-Keyword/tsg_adc/SystemCommand.robot
Resource          ../../../02-Keyword/tsg_bfapi/PolicyObject.robot
Resource          ../../../02-Keyword/tsg_bfapi/LogVariable.robot
Resource          ../../../02-Keyword/tsg_adc/FileOperation.robot
Resource          ../../../02-Keyword/tsg_bfapi/policy_object/Policy.robot
Resource          ../../../03-Variable/ApplicationID.txt
Resource          ../../../05-Other/AllFlowCaseVariable.txt

*** Test Cases ***
SecurityPolicy-Deny-Dns-00001
    Comment    功能端验证HTTP验证
    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    nslookup -d www.facebook.com
    ...    ELSE    set variable    nslookup www.facebook.com
    ${stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    超时
    ...    ELSE    Create List    canonical name = www.facebook.com
    ${rescode}    SystemCommands    ${commandstr}    ${stringlist}
    Comment    功能端验证HTTP验证
    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    nslookup -d rutube.ru
    ...    ELSE    set variable    nslookup -d rutube.ru
    ${stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    超时
    ...    ELSE    Create List    canonical name = rutube.ru
    ${rescode}    SystemCommands    ${commandstr}    ${stringlist}
    Comment    改变阻断策略
    ${policyDict}    Create Dictionary    policyId=${deny_dns_policyId}    policyName=SecurityPolicy-Deny-Dns-00001_1    policyType=tsg_security    policyDesc=autotest    action=deny    userRegion={"protocol":"DNS","method":"drop"}    source=${deny_dns_objectId4}|TSG_SECURITY_SOURCE_LOCATION    filterList=${deny_dns_objectId}|TSG_FIELD_DNS_QNAME    isValid=${1}    appIdObjects=${DNS_ID}
    log    ${policyDict}
    ${rescode}    UpdatePolicies    1    ${policyDict}    v2    update
    Comment    功能端验证HTTP验证
    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    nslookup -d www.facebook.com
    ...    ELSE    set variable    nslookup www.facebook.com
    ${stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    超时
    ...    ELSE    Create List    canonical name = www.facebook.com
    ${rescode}    SystemCommands    ${commandstr}    ${stringlist}
    Comment    功能端验证HTTP验证
    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    nslookup -d rutube.ru
    ...    ELSE    set variable    nslookup -d rutube.ru
    ${stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    超时
    ...    ELSE    Create List    canonical name = rutube.ru
    ${rescode}    SystemCommands    ${commandstr}    ${stringlist}

SecurityPolicy-Deny-Dns-00002
    Comment    功能端验证HTTP验证
    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    nslookup -d www.plymouthbaywinery.com 8.8.8.8
    ...    ELSE    set variable    nslookup -debug -query=A \ www.plymouthbaywinery.com
    ${stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    192.168.41.186    www.jd.com    ttl = 500
    ...    ELSE    Create List    192.168.41.186    www.jd.com    ttl = 500
    ${rescode}    SystemCommands    ${commandstr}    ${stringlist}
    Comment    功能端验证HTTP验证
    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    nslookup -d sunnybrooktroutclub.com 8.8.8.8
    ...    ELSE    set variable    nslookup -debug -query=A \ sunnybrooktroutclub.com
    ${stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    192.168.41.186    www.jd.com    ttl = 500
    ...    ELSE    Create List    192.168.41.186    www.jd.com    ttl = 500
    ${rescode}    SystemCommands    ${commandstr}    ${stringlist}

SecurityPolicy-Deny-Dns-00003
    Comment    功能端验证HTTP验证
    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    nslookup -d ace188.com 8.8.8.8
    ...    ELSE    set variable    nslookup -debug -query=AAAA harfordemcomm.org
    ${stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    fc00::2:11    www.taobao.com    ttl = 400
    ...    ELSE    Create List    fc00::2:11    www.taobao.com    ttl = 400
    ${rescode}    SystemCommands    ${commandstr}    ${stringlist}
    Comment    功能端验证HTTP验证
    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    nslookup -d huitu.com 8.8.8.8
    ...    ELSE    set variable    nslookup -debug -query=AAAA harfordemcomm.org
    ${stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    fc00::2:11    www.taobao.com    ttl = 400
    ...    ELSE    Create List    fc00::2:11    www.taobao.com    ttl = 400
    ${rescode}    SystemCommands    ${commandstr}    ${stringlist}

SecurityPolicy-Deny-Dns-00004
    Comment    功能端验证HTTP验证
    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    nslookup -d www.twitch.tv
    ...    ELSE    set variable    nslookup -debug -query=A www.twitch.tv
    ${stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    192.168.40.110    www.facebook.com    ttl = 400    www.ok.ru    fc00::2:22
    ...    ELSE    Create List    192.168.40.110    www.ok.ru    ttl = 400
    ${rescode}    SystemCommands    ${commandstr}    ${stringlist}
    Comment    改变阻断策略
    ${policyDict}    Create Dictionary    policyId=${deny_dns_policyId3}    policyName=SecurityPolicy-Deny-Dns-00004_1   destination=164745|TSG_SECURITY_DESTINATION_ADDR    policyType=tsg_security    policyDesc=autotest    action=deny    userRegion={"protocol":"DNS","method":"redirect","resolution":[{"answer":[{"atype":"AAAA","value":"fc00::2:22","ttl":{"min":400,"max":400}},{"atype":"CNAME","value":"www.facebook.com","ttl":{"min":400,"max":400}}],"qtype":"AAAA"},{"qtype":"A","answer":[{"atype":"CNAME","value":"www.ok.ru","ttl":{"min":400,"max":400}},{"atype":"A","value":"192.168.40.110","ttl":{"min":400,"max":400}}]}]}    filterList=${deny_dns_objectId5}|TSG_FIELD_DNS_QNAME    isValid=${1}    appIdObjects=${DNS_ID}
    log    ${policyDict}
    ${rescode}    UpdatePolicies    1    ${policyDict}    v2    update
    Comment    功能端验证HTTP验证
    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    nslookup -d www.twitch.tv
    ...    ELSE    set variable    nslookup -debug -query=AAAA www.twitch.tv
    ${stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    fc00::2:22    www.facebook.com    ttl = 400    www.ok.ru    192.168.40.110
    ...    ELSE    Create List    ttl = 400    www.facebook.com    fc00::2:22
    ${rescode}    SystemCommands    ${commandstr}    ${stringlist}