111 lines
8.3 KiB
Plaintext
111 lines
8.3 KiB
Plaintext
*** Settings ***
|
||
Force Tags tsg_adc_wp security_policy adc_verify
|
||
Library OperatingSystem
|
||
Resource ../../../02-Keyword/tsg_adc/SystemCommand.robot
|
||
Resource ../../../02-Keyword/tsg_bfapi/PolicyObject.robot
|
||
Resource ../../../02-Keyword/tsg_bfapi/LogVariable.robot
|
||
Resource ../../../02-Keyword/tsg_adc/FileOperation.robot
|
||
Resource ../../../02-Keyword/tsg_bfapi/policy_object/Policy.robot
|
||
# Resource ../../../03-Variable/ApplicationID.txt
|
||
Resource ../../../05-Other/AllFlowCaseVariable.txt
|
||
|
||
*** Test Cases ***
|
||
SecurityPolicy-Deny-Dns-00001
|
||
Comment 功能端验证HTTP验证
|
||
${commandstr} run keyword if '${systemType}'=='Windows' set variable nslookup -d www.facebook.com
|
||
... ELSE set variable nslookup www.facebook.com
|
||
${stringlist} run keyword if '${systemType}'=='Windows' Create List 超时
|
||
... ELSE Create List timed out
|
||
${rescode} SystemCommands ${commandstr} ${stringlist}
|
||
Comment 功能端验证HTTP验证
|
||
${commandstr} run keyword if '${systemType}'=='Windows' set variable nslookup -d rutube.ru
|
||
... ELSE set variable nslookup -d rutube.ru
|
||
${stringlist} run keyword if '${systemType}'=='Windows' Create List 超时
|
||
... ELSE Create List timed out
|
||
${rescode} SystemCommands ${commandstr} ${stringlist}
|
||
Comment 改变阻断策略
|
||
${policyDict} Create Dictionary policyId=${deny_dns_policyId} policyName=SecurityPolicy-Deny-Dns-00001_1 policyType=tsg_security policyDesc=autotest action=deny userRegion={"protocol":"DNS","method":"drop"} source=${deny_dns_objectId4}|TSG_SECURITY_SOURCE_LOCATION filterList=${deny_dns_objectId}|TSG_FIELD_DNS_QNAME isValid=${1} appIdObjects=${DNS_ID}
|
||
log ${policyDict}
|
||
${rescode} UpdatePolicies 1 ${policyDict} v2 update
|
||
Comment 功能端验证HTTP验证
|
||
${commandstr} run keyword if '${systemType}'=='Windows' set variable nslookup -d www.facebook.com
|
||
... ELSE set variable nslookup www.facebook.com
|
||
${stringlist} run keyword if '${systemType}'=='Windows' Create List 超时
|
||
... ELSE Create List timed out
|
||
${rescode} SystemCommands ${commandstr} ${stringlist}
|
||
Comment 功能端验证HTTP验证
|
||
${commandstr} run keyword if '${systemType}'=='Windows' set variable nslookup -d rutube.ru
|
||
... ELSE set variable nslookup -d rutube.ru
|
||
${stringlist} run keyword if '${systemType}'=='Windows' Create List 超时
|
||
... ELSE Create List timed out
|
||
${rescode} SystemCommands ${commandstr} ${stringlist}
|
||
|
||
SecurityPolicy-Deny-Dns-00002
|
||
Comment 功能端验证HTTP验证
|
||
${commandstr} run keyword if '${systemType}'=='Windows' set variable nslookup -d www.arctictrucks.ru 8.8.8.8
|
||
... ELSE set variable nslookup -debug -query=A \ www.arctictrucks.ru
|
||
${stringlist} run keyword if '${systemType}'=='Windows' Create List www.arctictrucks.ru
|
||
... ELSE Create List www.arctictrucks.ru
|
||
${rescode} SystemCommands ${commandstr} ${stringlist}
|
||
Comment 功能端验证HTTP验证
|
||
${commandstr} run keyword if '${systemType}'=='Windows' set variable nslookup -d wifika.ru 8.8.8.8
|
||
... ELSE set variable nslookup -debug -query=A \ wifika.ru
|
||
${stringlist} run keyword if '${systemType}'=='Windows' Create List wifika.ru
|
||
... ELSE Create List wifika.ru
|
||
${rescode} SystemCommands ${commandstr} ${stringlist}
|
||
|
||
SecurityPolicy-Deny-Dns-00003
|
||
Comment 功能端验证HTTP验证
|
||
${commandstr} run keyword if '${systemType}'=='Windows' set variable nslookup -d aec188.com 8.8.8.8
|
||
... ELSE set variable nslookup -debug -query=AAAA \ aec188.com
|
||
${stringlist} run keyword if '${systemType}'=='Windows' Create List aec188.com
|
||
... ELSE Create List aec188.com
|
||
${rescode} SystemCommands ${commandstr} ${stringlist}
|
||
Comment 功能端验证HTTP验证
|
||
${commandstr} run keyword if '${systemType}'=='Windows' set variable nslookup -d huitu.com 8.8.8.8
|
||
... ELSE set variable nslookup -debug -query=AAAA \ huitu.com
|
||
${stringlist} run keyword if '${systemType}'=='Windows' Create List huitu.com
|
||
... ELSE Create List fc00::2:11 www.taobao.com ttl = 400
|
||
${rescode} SystemCommands ${commandstr} ${stringlist}
|
||
# Comment 用后失效，与insert12互相影响
|
||
# ${policyDict} Create Dictionary policyId=${deny_dns_policyId2} policyName=SecurityPolicy-Deny-Dns-00003_1 policyType=tsg_security policyDesc=autotest action=deny userRegion={"protocol":"DNS","method":"redirect","resolution":[{"qtype":"AAAA","answer":[{"atype":"AAAA","value":"fc00::2:11","ttl":{"min":400,"max":400}},{"atype":"CNAME","value":"www.taobao.com","ttl":{"min":600,"max":600}}]}]} filterList=129|TSG_FIELD_DNS_QNAME isValid=${0} appIdObjects=${DNS_ID}
|
||
# log ${policyDict}
|
||
# ${rescode} UpdatePolicies 1 ${policyDict} v2 update
|
||
|
||
SecurityPolicy-Deny-Dns-00004
|
||
Comment 功能端验证HTTP验证
|
||
${commandstr} run keyword if '${systemType}'=='Windows' set variable nslookup -d www.twitch.tv 8.8.8.8
|
||
... ELSE set variable nslookup -debug -query=A \ www.twitch.tv
|
||
${stringlist} run keyword if '${systemType}'=='Windows' Create List www.ok.ru
|
||
... ELSE Create List 192.168.40.110 www.ok.ru ttl = 400
|
||
${rescode} SystemCommands ${commandstr} ${stringlist}
|
||
Comment 改变阻断策略
|
||
${policyDict} Create Dictionary policyId=${deny_dns_policyId3} policyName=SecurityPolicy-Deny-Dns-00004_1 policyType=tsg_security policyDesc=autotest action=deny userRegion={"protocol":"DNS","method":"redirect","resolution":[{"answer":[{"atype":"AAAA","value":"fc00::2:22","ttl":{"min":400,"max":400}},{"atype":"CNAME","value":"www.facebook.com","ttl":{"min":400,"max":400}}],"qtype":"AAAA"},{"qtype":"A","answer":[{"atype":"CNAME","value":"www.ok.ru","ttl":{"min":400,"max":400}},{"atype":"A","value":"192.168.40.110","ttl":{"min":400,"max":400}}]}]} filterList=${deny_dns_objectId5}|TSG_FIELD_DNS_QNAME isValid=${1} appIdObjects=${DNS_ID}
|
||
log ${policyDict}
|
||
${rescode} UpdatePolicies 1 ${policyDict} v2 update
|
||
sleep ${policyModifySleepSeconds}
|
||
Comment 功能端验证HTTP验证
|
||
${commandstr} run keyword if '${systemType}'=='Windows' set variable nslookup -d www.twitch.tv 8.8.8.8
|
||
... ELSE set variable nslookup -debug -query=AAAA \ www.twitch.tv
|
||
${stringlist} run keyword if '${systemType}'=='Windows' Create List www.ok.ru
|
||
... ELSE Create List ttl = 400 www.facebook.com fc00::2:22
|
||
${rescode} SystemCommands ${commandstr} ${stringlist}
|
||
|
||
SecurityPolicy-Deny-Dns-00005
|
||
Comment 打开安全策略
|
||
${policyDict} Create Dictionary policyId=${deny_dns_policyId4} policyName=SecurityPolicy-Deny-Dns-00005-1 policyType=tsg_security policyDesc=autotest action=deny userRegion={"protocol":"DNS","method":"drop"} isValid=${1} appIdObjects=${DNS_ID}
|
||
log ${policyDict}
|
||
${rescode} UpdatePolicies 1 ${policyDict} v2 update
|
||
sleep ${policyModifySleepSeconds}
|
||
Comment 功能端验证HTTP验证
|
||
${commandstr} run keyword if '${systemType}'=='Windows' set variable nslookup -d www.facebook.com
|
||
... ELSE set variable nslookup www.facebook.com
|
||
${stringlist} run keyword if '${systemType}'=='Windows' Create List 超时
|
||
... ELSE Create List timed out
|
||
${rescode} SystemCommands ${commandstr} ${stringlist}
|
||
Comment 关闭安全策略
|
||
${policyDict} Create Dictionary policyId=${deny_dns_policyId4} policyName=SecurityPolicy-Deny-Dns-00005-2 policyType=tsg_security policyDesc=autotest action=deny userRegion={"protocol":"DNS","method":"drop"} isValid=${0} appIdObjects=${DNS_ID}
|
||
log ${policyDict}
|
||
${rescode} UpdatePolicies 1 ${policyDict} v2 update
|
||
sleep ${policyModifySleepSeconds}
|