mirror of
https://github.com/jmcorgan/fips.git
synced 2026-08-09 16:24:45 +00:00
Add network impairment script, fix iperf loopback bug
Add netem.sh for simulating adverse network conditions (delay, loss, jitter, duplication, reordering, corruption) on Docker test containers using tc/netem. Includes three presets (lossy, congested, terrible) and apply/remove/status actions. Fix iperf-test.sh bug where all tests connected the client to its own FIPS npub (loopback) instead of the remote server's npub, meaning previous iperf results measured loopback performance rather than cross-node throughput. Document netem.sh in README.md.
This commit is contained in:
Johnathan Corgan
Executable
+245
@@ -0,0 +1,245 @@
|
||||
#!/bin/bash
|
||||
# Network impairment simulation using tc/netem on FIPS Docker containers.
|
||||
#
|
||||
# Usage: ./netem.sh <mesh|chain> <apply|remove|status> [options]
|
||||
#
|
||||
# Actions:
|
||||
# apply - Apply netem rules to all containers in the profile
|
||||
# remove - Remove netem rules from all containers
|
||||
# status - Show current tc qdisc state on each container
|
||||
#
|
||||
# Options (for apply):
|
||||
# --delay <ms> Fixed delay in milliseconds
|
||||
# --jitter <ms> Delay variation (requires --delay)
|
||||
# --loss <percent> Packet loss percentage
|
||||
# --loss-corr <percent> Loss correlation for bursty loss
|
||||
# --duplicate <percent> Packet duplication percentage
|
||||
# --reorder <percent> Packet reordering probability
|
||||
# --corrupt <percent> Bit-level corruption percentage
|
||||
#
|
||||
# Presets (shorthand for common combinations):
|
||||
# --preset lossy 5% loss, 25% correlation
|
||||
# --preset congested 50ms delay, 20ms jitter, 2% loss
|
||||
# --preset terrible 100ms delay, 40ms jitter, 10% loss, 1% dup, 5% reorder
|
||||
#
|
||||
# Examples:
|
||||
# ./netem.sh mesh apply --delay 50 --loss 5
|
||||
# ./netem.sh chain apply --preset congested
|
||||
# ./netem.sh mesh status
|
||||
# ./netem.sh mesh remove
|
||||
set -e
|
||||
|
||||
trap 'echo ""; echo "Interrupted"; exit 130' INT
|
||||
|
||||
NODES="a b c d e"
|
||||
IFACE="eth0"
|
||||
|
||||
# Defaults
|
||||
DELAY=0
|
||||
JITTER=0
|
||||
LOSS=0
|
||||
LOSS_CORR=0
|
||||
DUPLICATE=0
|
||||
REORDER=0
|
||||
CORRUPT=0
|
||||
|
||||
usage() {
|
||||
echo "Usage: $0 <mesh|chain> <apply|remove|status> [options]"
|
||||
echo ""
|
||||
echo "Actions:"
|
||||
echo " apply - Apply netem rules to all containers"
|
||||
echo " remove - Remove netem rules from all containers"
|
||||
echo " status - Show current tc qdisc on each container"
|
||||
echo ""
|
||||
echo "Options (for apply):"
|
||||
echo " --delay <ms> Fixed delay"
|
||||
echo " --jitter <ms> Delay variation (requires --delay)"
|
||||
echo " --loss <percent> Packet loss"
|
||||
echo " --loss-corr <percent> Loss correlation"
|
||||
echo " --duplicate <percent> Packet duplication"
|
||||
echo " --reorder <percent> Packet reordering"
|
||||
echo " --corrupt <percent> Bit-level corruption"
|
||||
echo " --preset <name> Use a named preset (lossy, congested, terrible)"
|
||||
exit 1
|
||||
}
|
||||
|
||||
apply_preset() {
|
||||
case "$1" in
|
||||
lossy)
|
||||
LOSS=5
|
||||
LOSS_CORR=25
|
||||
;;
|
||||
congested)
|
||||
DELAY=50
|
||||
JITTER=20
|
||||
LOSS=2
|
||||
;;
|
||||
terrible)
|
||||
DELAY=100
|
||||
JITTER=40
|
||||
LOSS=10
|
||||
DUPLICATE=1
|
||||
REORDER=5
|
||||
;;
|
||||
*)
|
||||
echo "Error: Unknown preset '$1'" >&2
|
||||
echo "Available presets: lossy, congested, terrible" >&2
|
||||
exit 1
|
||||
;;
|
||||
esac
|
||||
}
|
||||
|
||||
# Parse arguments
|
||||
[ $# -lt 2 ] && usage
|
||||
|
||||
PROFILE="$1"
|
||||
ACTION="$2"
|
||||
shift 2
|
||||
|
||||
case "$PROFILE" in
|
||||
mesh|chain) ;;
|
||||
*) echo "Error: Profile must be 'mesh' or 'chain'" >&2; exit 1 ;;
|
||||
esac
|
||||
|
||||
case "$ACTION" in
|
||||
apply|remove|status) ;;
|
||||
*) echo "Error: Action must be 'apply', 'remove', or 'status'" >&2; exit 1 ;;
|
||||
esac
|
||||
|
||||
# Parse options
|
||||
while [ $# -gt 0 ]; do
|
||||
case "$1" in
|
||||
--delay) DELAY="$2"; shift 2 ;;
|
||||
--jitter) JITTER="$2"; shift 2 ;;
|
||||
--loss) LOSS="$2"; shift 2 ;;
|
||||
--loss-corr) LOSS_CORR="$2"; shift 2 ;;
|
||||
--duplicate) DUPLICATE="$2"; shift 2 ;;
|
||||
--reorder) REORDER="$2"; shift 2 ;;
|
||||
--corrupt) CORRUPT="$2"; shift 2 ;;
|
||||
--preset) apply_preset "$2"; shift 2 ;;
|
||||
*)
|
||||
echo "Error: Unknown option '$1'" >&2
|
||||
usage
|
||||
;;
|
||||
esac
|
||||
done
|
||||
|
||||
# Build netem parameter string from non-zero values
|
||||
build_netem_params() {
|
||||
local params=""
|
||||
|
||||
if [ "$DELAY" != "0" ]; then
|
||||
params="delay ${DELAY}ms"
|
||||
if [ "$JITTER" != "0" ]; then
|
||||
params="$params ${JITTER}ms"
|
||||
fi
|
||||
fi
|
||||
|
||||
if [ "$LOSS" != "0" ]; then
|
||||
params="$params loss ${LOSS}%"
|
||||
if [ "$LOSS_CORR" != "0" ]; then
|
||||
params="$params ${LOSS_CORR}%"
|
||||
fi
|
||||
fi
|
||||
|
||||
if [ "$DUPLICATE" != "0" ]; then
|
||||
params="$params duplicate ${DUPLICATE}%"
|
||||
fi
|
||||
|
||||
if [ "$REORDER" != "0" ]; then
|
||||
if [ "$DELAY" = "0" ]; then
|
||||
echo "Error: --reorder requires --delay (reordering needs a delay queue)" >&2
|
||||
exit 1
|
||||
fi
|
||||
params="$params reorder ${REORDER}%"
|
||||
fi
|
||||
|
||||
if [ "$CORRUPT" != "0" ]; then
|
||||
params="$params corrupt ${CORRUPT}%"
|
||||
fi
|
||||
|
||||
echo "$params"
|
||||
}
|
||||
|
||||
# Check if a container is running
|
||||
container_running() {
|
||||
docker inspect -f '{{.State.Running}}' "$1" 2>/dev/null | grep -q true
|
||||
}
|
||||
|
||||
do_apply() {
|
||||
local params
|
||||
params=$(build_netem_params)
|
||||
|
||||
if [ -z "$params" ]; then
|
||||
echo "Error: No impairment parameters specified" >&2
|
||||
echo "Use --delay, --loss, --duplicate, --reorder, --corrupt, or --preset" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
echo "=== Applying netem: $params ==="
|
||||
echo ""
|
||||
|
||||
for node in $NODES; do
|
||||
local container="fips-node-$node"
|
||||
echo -n " $container ... "
|
||||
if ! container_running "$container"; then
|
||||
echo "SKIP (not running)"
|
||||
continue
|
||||
fi
|
||||
if docker exec "$container" tc qdisc replace dev "$IFACE" root netem $params 2>&1; then
|
||||
echo "OK"
|
||||
else
|
||||
echo "FAIL"
|
||||
fi
|
||||
done
|
||||
}
|
||||
|
||||
do_remove() {
|
||||
echo "=== Removing netem rules ==="
|
||||
echo ""
|
||||
|
||||
for node in $NODES; do
|
||||
local container="fips-node-$node"
|
||||
echo -n " $container ... "
|
||||
if ! container_running "$container"; then
|
||||
echo "SKIP (not running)"
|
||||
continue
|
||||
fi
|
||||
# Suppress error if no qdisc exists
|
||||
if docker exec "$container" tc qdisc del dev "$IFACE" root 2>/dev/null; then
|
||||
echo "OK"
|
||||
else
|
||||
echo "OK (no rules)"
|
||||
fi
|
||||
done
|
||||
}
|
||||
|
||||
do_status() {
|
||||
echo "=== netem status ==="
|
||||
echo ""
|
||||
|
||||
for node in $NODES; do
|
||||
local container="fips-node-$node"
|
||||
echo " $container:"
|
||||
if ! container_running "$container"; then
|
||||
echo " (not running)"
|
||||
continue
|
||||
fi
|
||||
local output
|
||||
output=$(docker exec "$container" tc qdisc show dev "$IFACE" 2>&1)
|
||||
if echo "$output" | grep -q "netem"; then
|
||||
echo " $output"
|
||||
else
|
||||
echo " (no netem rules)"
|
||||
fi
|
||||
done
|
||||
}
|
||||
|
||||
case "$ACTION" in
|
||||
apply) do_apply ;;
|
||||
remove) do_remove ;;
|
||||
status) do_status ;;
|
||||
esac
|
||||
|
||||
echo ""
|
||||
echo "Done."
|
||||
Reference in New Issue
Block a user