mirror of https://github.com/outbackdingo/firezone.git synced 2026-01-28 02:18:50 +00:00

Files

Thomas Eizinger ce929e1204 test(connlib): resolve DNS resources in tunnel_test (#5083 )

Currently, `tunnel_test` only sends ICMPs to CIDR resources. We also
want to test certain properties in regards to DNS resources. In
particular, we want to test:

- Given a DNS resource, can we query it for an IP?
- Can we send an ICMP packet to the resolved IP?
- Is the mapping of proxy IP to upstream IP stable?

To achieve this, we sample a list of `IpAddr` whenever we add a DNS
resource to the state. We also add the transition
`SendQueryToDnsResource`. As the name suggests, this one simulates a DNS
query coming from the system for one of our resources. We simulate A and
AAAA queries and take note of the addresses that connlib returns to us
for the queries.

Lastly, as part of `SendICMPPacketToResource`, we now may also sample
from a list of IPs that connlib gave us for a domain and send an ICMP
packet to that one.

There is one caveat in this test that I'd like to point out: At the
moment, the exact mapping of proxy IP to real IP is an implementation
detail of connlib. As a result, I don't know which proxy IP I need to
use in order to ping a particular "real" IP. This presents an issue in
the assertions: Upon the first ICMP packet, I cannot assert what the
expected destination is. Instead, I need to "remember" it. In case we
send another ICMP packet to the same resource and happen to sample the
same proxy IP, we can then assert that the mapping did not change.

2024-05-31 04:44:30 +00:00

clients

test(connlib): ensure effective DNS servers match (#5107 )

2024-05-24 03:54:19 +00:00

shared

test(connlib): resolve DNS resources in tunnel_test (#5083 )

2024-05-31 04:44:30 +00:00

snownet

chore(ip-packet): model ICMP packets (#5147 )

2024-05-29 01:08:13 +00:00

tunnel

test(connlib): resolve DNS resources in tunnel_test (#5083 )

2024-05-31 04:44:30 +00:00

.gitignore

android: update connlib dependency and integration (#1752 )

2023-07-17 18:50:39 +00:00

README.md

chore(docs): Remove outdated rust/connlib/README.md info (#3099 )

2024-01-03 18:10:52 +00:00

README.md

Connlib

Firezone's connectivity library shared by all clients.

Building Connlib

You shouldn't need to build connlib directly; it's typically built as a dependency of one of the other Firezone components. See READMEs in those directories for relevant instructions.