Merge pull request #1480 from sangramaltur/development

Add Device DOS support

Author: f5-rahm

f5/bigip/tm/security/dos.py

@@ -32,6 +32,8 @@
 from f5.bigip.resource import OrganizingCollection
 from f5.bigip.resource import Resource
 from f5.sdk_exception import NonExtantApplication
+from f5.sdk_exception import UnsupportedOperation
+
 
 from distutils.version import LooseVersion
 
@@ -41,7 +43,9 @@ class Dos(OrganizingCollection):
 
     def __init__(self, security):
         super(Dos, self).__init__(security)
-        self._meta_data['allowed_lazy_attributes'] = [Profiles]
+        self._meta_data['allowed_lazy_attributes'] = [
+            Profiles,
+            Device_Configs]
 
 
 class Profiles(Collection):
@@ -297,3 +301,38 @@ def _exists_11_6(self, **kwargs):
 
         return self._check_existence_by_collection(
             self._meta_data['container'], kwargs['name'])
+
+
+class Device_Configs(Collection):
+    """BIG-IP® Dos Device collection"""
+    def __init__(self, dos):
+        super(Device_Configs, self).__init__(dos)
+        self._meta_data['allowed_lazy_attributes'] = [Device_Config]
+        self._meta_data['attribute_registry'] = \
+            {'tm:security:dos:device-config:device-configstate': Device_Config}
+
+
+class Device_Config(Resource):
+    """BIG-IP® Dos Device resource"""
+    def __init__(self, device_configs):
+        super(Device_Config, self).__init__(device_configs)
+        self._meta_data['required_json_kind'] = \
+            'tm:security:dos:device-config:device-configstate'
+
+    def create(self, **kwargs):
+        """Create is not supported for Device_Config
+
+        :raises: UnsupportedOperation
+        """
+        raise UnsupportedOperation(
+            "%s does not support the update method" % self.__class__.__name__
+        )
+
+    def delete(self, **kwargs):
+        """Delete is not supported for Device_Config
+
+        :raises: UnsupportedOperation
+        """
+        raise UnsupportedOperation(
+            "%s does not support the delete method" % self.__class__.__name__
+        )

f5/bigip/tm/security/test/functional/test_dos.py

@@ -27,6 +27,7 @@
 
 DESC = 'TESTCHANGEDIT'
 ATCK = [{'name': 'tcp-rst-flood', 'rateLimit': 100, 'rateThreshold': 50}]
+DIV_ATCK = [{'name': 'tcp-syn-flood', 'defaultInternalRateLimit': 100, 'detectionThresholdPps': 10}]
 
 
 @pytest.fixture(scope='function')
@@ -37,6 +38,13 @@ def dos_profile(mgmt_root):
     profile.delete()
 
 
+@pytest.fixture(scope='function')
+def dos_device_config(mgmt_root):
+    device_config = mgmt_root.tm.security.dos.device_configs.device_config.load(
+        name='dos-device-config', partition='Common')
+    yield device_config
+
+
 class TestDosProfiles(object):
     def test_create_req_arg(self, dos_profile):
         r1 = dos_profile
@@ -602,3 +610,28 @@ def test_sip_subcollection(self, dos_profile):
         assert isinstance(rc, list)
         assert len(rc)
         assert isinstance(rc[0], Protocol_Sip)
+
+
+class TestDeviceConfig(object):
+    """Dos device config functional tests, cant create or delete"""
+    def test_load_req_arg(self, dos_device_config):
+        r1 = dos_device_config
+        URI = 'https://localhost/mgmt/tm/security/dos/device-config/~Common' \
+              '~dos-device-config'
+        assert r1.name == 'dos-device-config'
+        assert r1.partition == 'Common'
+        assert r1.selfLink.startswith(URI)
+
+    def test_load_and_update(self, dos_device_config, mgmt_root):
+        r1 = dos_device_config
+        r2 = mgmt_root.tm.security.dos.device_configs.device_config.load(name='dos-device-config', partition='Common')
+        assert r1.name == r2.name
+        assert r1.selfLink == r2.selfLink
+        assert r1.dosDeviceVector == r2.dosDeviceVector
+        r2.dosDeviceVector = DIV_ATCK
+        r2.update()
+        assert r1.selfLink == r2.selfLink
+        assert r1.name == r2.name
+        assert r1.dosDeviceVector != r2.dosDeviceVector
+        r1.refresh()
+        assert r1.dosDeviceVector == r2.dosDeviceVector

f5/bigip/tm/security/test/unit/test_dos.py

@@ -19,6 +19,7 @@
 from f5.bigip import ManagementRoot
 from f5.bigip.tm.security.dos import Application
 from f5.bigip.tm.security.dos import Applications
+from f5.bigip.tm.security.dos import Device_Config
 from f5.bigip.tm.security.dos import Dos_Network
 from f5.bigip.tm.security.dos import Dos_Networks
 from f5.bigip.tm.security.dos import Profile
@@ -27,7 +28,10 @@
 from f5.bigip.tm.security.dos import Protocol_Sip
 from f5.bigip.tm.security.dos import Protocol_Sips
 
+
 from f5.sdk_exception import MissingRequiredCreationParameter
+from f5.sdk_exception import MissingRequiredReadParameter
+from f5.sdk_exception import UnsupportedOperation
 
 from six import iterkeys
 
@@ -39,6 +43,13 @@ def FakeProfile():
     return fake_profile
 
 
+@pytest.fixture
+def FakeDeviceConfig():
+    fake_device_configs = mock.MagicMock()
+    fake_device_config = Device_Config(fake_device_configs)
+    return fake_device_config
+
+
 def Makeprofile(fakeicontrolsession):
     b = ManagementRoot('192.168.1.1', 'admin', 'admin')
     p = b.tm.security.dos.profiles.profile
@@ -150,3 +161,19 @@ def test_sip_create_no_args_v11(self, fakeicontrolsession):
         pc = Protocol_Sips(Makeprofile(fakeicontrolsession))
         with pytest.raises(MissingRequiredCreationParameter):
             pc.protocol_sip.create()
+
+
+class TestDosDeviceConfig(object):
+    def test_create_raises(self, fakeicontrolsession):
+        b = ManagementRoot('192.168.1.1', 'admin', 'admin')
+        with pytest.raises(UnsupportedOperation):
+            b.tm.security.dos.device_configs.device_config.create()
+
+    def test_delete_raises(self, fakeicontrolsession):
+        b = ManagementRoot('192.168.1.1', 'admin', 'admin')
+        with pytest.raises(UnsupportedOperation):
+            b.tm.security.dos.device_configs.device_config.delete()
+
+    def test_load_no_args(self, FakeDeviceConfig):
+        with pytest.raises(MissingRequiredReadParameter):
+            FakeDeviceConfig.load()