[go: up one dir, main page]

Skip to content

Vegvisir is an automated testing framework for orchestrating prototypical QUIC-HTTP/3 client-server communications using simulated network conditions.

License

Notifications You must be signed in to change notification settings

JorisHerbots/vegvisir

Repository files navigation

Vegvisir Python License Linux X86-64

Welcome to Vegvisir, an open-source testing framework for QUIC developers and researchers.

Vegvisir's primary goal is to orchestrate client and server communication over various simulated network conditions to collect logs about your experiments and, subsequentially, help you get insights into your applications' behavior. Simulating allows you to identify and resolve issues that may only occur under specific network conditions, improving the reliability and performance of your application. The codebase uses existing network simulation tools; it was tested with tc-netem and NS3 but should also work with other similar simulation tools. While initially intended only to be used for QUIC-based network applications, the experiments you define for Vegvisir can also use other transport-layer protocols.

Vegvisir can capture any logs/output produced from experiments. By default, compatible QUIC-based applications/implementations will create qlogs, and the network simulations will create pcaps. With visualization tools such as qvis and wireshark, you can quickly analyze these logs and gain a deeper understanding of what's happening under the hood of your application. Whether you're a developer looking to improve the performance of your software or a researcher studying network behavior, Vegvisir is a powerful addition to your toolkit.

Preview

Installation

git clone https://github.com/JorisHerbots/vegvisir
cd ./vegvisir

You can opt to install required python packages globally

pip3 install -r requirements.txt

Or you can create a virtual environment (recommended)

python -m venv .venv
source .venv/bin/activate
pip install -r requirements.txt

Vegvisir requires you to have at least Python version >3.10 installed and only works on Linux x86_64.

The following dependencies need to be installed system-wide for Vegvisir to work correctly.

docker, docker compose, ethtool, sudo, which

We support docker compose v2. Vegvisir requires Docker to be accessible without root privileges.

Usage

You can run Vegvisir from its root folder using the following command:

python -m vegvisir

For help on flags use python -m vegvisir -h

To start experiments, use

python -m vegvisir run -i implementations.json experiment.json

Output will automatically be logged in the logs folder unless specified otherwise in the provided experiment configuration.

Setting up experiments

Vegvisir is steered through two configurations: the implementation configuration and the experiment configuration.

The configuration structures below are described using the Concise Data Definition Language.

Implementations

Contains a list of all implementations and their configurations.

Implementations = {
  clients: {
    + ImplementationName: ClientImplementation
  },
  servers: {
    + ImplementationName: ServerImplementation
  },
  shapers: {
    + ImplementationName: ShaperImplementation
  },
}
ImplementationName = text .regex "^[a-zA-Z0-9_-]+$"
ClientImplementation = {
  ClientType,
  ? parameters: Parameter,
  ? construct : [* CDCommand], ; Commands executed before "command" if the implementation represents a host command
  ? destruct : [* CDCommand], ; Commands executed before "command" if the implementation represents a host command
}
ClientType = (
  image: text, ; repo/name:tag
  command: text, ; host command
)
ServerImplementation = {
  ? image: text, ; repo/name:tag
  ? parameters: Parameter,
}
ShaperImplementation = {
  ? image: text, ; repo/name:tag
  ? parameters: Parameter,
}
Parameter = {
  * ParameterKey => bool, ; True represents root privileges are required
}
ParameterKey = text .regex "\!(?:(?:\{(?P<parameter>(?:[A-Z0-9_-]+))\})"
CDCommand = {
  ? root_required: bool .default false,
  command: text,
}

Experiments

Contains a single (repeatable) experiment

Experiment = {
  clients: [ClientExperiment],
  servers: [ServerExperiment],
  shapers: [ShaperExperiment],
  environment : Environment,
  settings: Settings,
}
ClientExperiment = {
  name: text .regex "^[a-zA-Z0-9_-]+$", ; must match one of the names from implementations
  ? log_name : text .regex "^[a-zA-Z0-9_-]+$", ; Name used for logging, if the same client is used for multiple experiment permutation (e.g., other arguments), a unique log_name must be provided for all entries
  ? arguments : Arguments,
}
Arguments = {
  * (text .regex "\!(?:(?:\{(?P<parameter>(?:[A-Z0-9_-]+))\})") => text, ; Matches a parameter of the respective implementation configuration
}
Environment = {
  name: DefaultEnvironments,
  ? sensors : [SensorConfiguration],
}
DefaultEnvironments = "webserver-basic", ; Currently only 1 available
SensorConfiguration = {
  name: AvailableSensors,
  * SensorKey => any,
}
SensorKey = text, ; Parameter as defined in the sensor python code
AvailableSensors = "timeout" / "browser-file-watchdog"
Timeout = {
  timeout: int,
}
BrowserFileWatchdog = {
  expected_filename: [+	Filename],
}
Filename = text ; Must be an exact match
Settings = {
  label: text .regex "^[a-zA-Z0-9_-]+$", ; label in the logging output folder
  ? description : text, ; Currently unused, but optional to describe the setup in the configuration file
  ? playground : bool .default false, ; Currently unused, coming soon
  ? www_dir : text .default "./www", ; Web root path
  ? iterations: int .default 1, ; The number of times the complete permutation needs to be repeated
}

Examples

implementation configuration for all available QIR images

The tc-netem shaper in this example is available in the docker-images/tc-netem folder. You can build it by navigating to it and performing the following Docker command docker build -t tc-netem .

{
    "clients": {
    "aioquic": {
      "image": "aiortc/aioquic-qns",
            "parameters": {"REQUESTS": true}
    },
    "quic-go": {
      "image": "martenseemann/quic-go-interop:latest",
            "parameters": {"REQUESTS": true}
    },
    "quicly": {
      "image": "h2oserver/quicly-interop-runner:latest",
            "parameters": {"REQUESTS": true}
    },
    "ngtcp2": {
      "image": "ghcr.io/ngtcp2/ngtcp2-interop:latest",
            "parameters": {"REQUESTS": true}
    },
    "quant": {
      "image": "ntap/quant:interop",
            "parameters": {"REQUESTS": true}
    },
    "mvfst": {
      "image": "lnicco/mvfst-qns:latest",
            "parameters": {"REQUESTS": true}
    },
    "quiche": {
      "image": "cloudflare/quiche-qns:latest",
            "parameters": {"REQUESTS": true}
    },
    "kwik": {
      "image": "peterdoornbosch/kwik_n_flupke-interop",
            "parameters": {"REQUESTS": true}
    },
    "picoquic": {
      "image": "privateoctopus/picoquic:latest",
            "parameters": {"REQUESTS": true}
    },
    "neqo": {
      "image": "neqoquic/neqo-qns:latest",
            "parameters": {"REQUESTS": true}
    },
    "nginx": {
      "image": "nginx/nginx-quic-qns:latest",
            "parameters": {"REQUESTS": true}
    },
    "msquic": {
      "image": "mcr.microsoft.com/msquic/qns:latest",
            "parameters": {"REQUESTS": true}
    },
    "xquic": {
      "image": "kulsk/xquic:latest",
            "parameters": {"REQUESTS": true}
    },
    "lsquic": {
      "image": "litespeedtech/lsquic-qir:latest",
            "parameters": {"REQUESTS": true}
    }
  },

  "shapers": {
    "ns3-quic": {
      "image": "martenseemann/quic-network-simulator",
      "scenarios": {
        "simple-p2p": {
                    "command": "\"simple-p2p --delay=!{LATENCY}ms --bandwidth=!{THROUGHPUT}Mbps --queue=25\"",
                    "parameters": ["THROUGHPUT", "LATENCY"]
        }
      }
    },
    "tc-netem": {
      "image": "tc-netem",
      "scenarios": {
        "simple": {
          "command": "\"simple !{LATENCY} !{THROUGHPUT}\"",
          "parameters": ["THROUGHPUT", "LATENCY"]
        },
        "cellular-loss-good": "\"akamai_cellular_emulation.sh loss_based good\"",
        "cellular-loss-median": "\"akamai_cellular_emulation.sh loss_based median\"",
        "cellular-loss-poor": "\"akamai_cellular_emulation.sh loss_based poor\"",
        "cellular-experience-noloss": "\"akamai_cellular_emulation.sh experience_based noloss\"",
        "cellular-experience-good": "\"akamai_cellular_emulation.sh experience_based good\"",
        "cellular-experience-fair": "\"akamai_cellular_emulation.sh experience_based fair\"",
        "cellular-experience-passable": "\"akamai_cellular_emulation.sh experience_based passable\"",
        "cellular-experience-poor": "\"akamai_cellular_emulation.sh experience_based poor\"",
        "cellular-experience-verypoor": "\"akamai_cellular_emulation.sh experience_based verypoor\""
      }
    }
  },

  "servers": {
    "aioquic": {
      "image": "aiortc/aioquic-qns"
    },
    "quic-go": {
      "image": "martenseemann/quic-go-interop:latest"
    },
    "quicly": {
      "image": "h2oserver/quicly-interop-runner:latest"
    },
    "ngtcp2": {
      "image": "ghcr.io/ngtcp2/ngtcp2-interop:latest"
    },
    "quant": {
      "image": "ntap/quant:interop"
    },
    "mvfst": {
      "image": "lnicco/mvfst-qns:latest"
    },
    "quiche": {
      "image": "cloudflare/quiche-qns:latest"
    },
    "kwik": {
      "image": "peterdoornbosch/kwik_n_flupke-interop"
    },
    "picoquic": {
      "image": "privateoctopus/picoquic:latest"
    },
    "neqo": {
      "image": "neqoquic/neqo-qns:latest"
    },
    "nginx": {
      "image": "nginx/nginx-quic-qns:latest"
    },
    "msquic": {
      "image": "mcr.microsoft.com/msquic/qns:latest"
    },
    "xquic": {
      "image": "kulsk/xquic:latest"
    },
    "lsquic": {
      "image": "litespeedtech/lsquic-qir:latest"
    }
  }
}

experiment configuration example

This configuration defines 3 clients, 3 shapers and 3 servers based the implementation configuration above. The experiment execution engine will create 27 test combinations to be run. With the iterations value set to two, Vegvisir runs these combinations twice, resulting in a total of 54 test.

{
    "clients": [
        {
            "name": "aioquic",
            "arguments": {
                "REQUESTS": "https://!{ORIGIN}/1MB.bin"
            }
        },
        {
            "name": "quic-go",
            "arguments": {
                "REQUESTS": "https://!{ORIGIN}/1MB.bin"
            }
        },
        {
            "name": "ngtcp2",
            "arguments": {
                "REQUESTS": "https://!{ORIGIN}/1MB.bin"
            }
        }
    ],

    "shapers": [
        {
            "name": "tc-netem",
            "log_name": "tc-netem-cellular-loss-median",
            "scenario": "cellular-loss-median"
        },
        {
            "name": "tc-netem",
            "log_name": "tc-netem-cellular-experience-good",
            "scenario": "cellular-experience-good"
        },
        {
            "name": "ns3-quic",
            "scenario": "simple-p2p",
            "arguments": {
                "THROUGHPUT": "30",
                "LATENCY": "10"
            }
        }
    ],
    
    "servers": [
        {"name": "aioquic"},
        {"name": "quic-go"},
        {"name": "ngtcp2"}
    ],

    "environment": {
        "name": "webserver-basic",
        "sensors": [
            {
                "name": "timeout",
                "timeout": 30
            }
        ]
    },

    "settings": {
        "label": "implementation_combinations",
        "www_dir": "./www",
        "iterations": 2
    }
}

Minimal example using a browser

This example assumes google chrome is installed and available via google-chrome-stable.

implementation configuration

{
  "clients": {
    "chrome": {
      "parameters": {
        "REQUEST_URL": true
      },
      "command": "google-chrome-stable --origin-to-force-quic-on=!{ORIGIN}:!{ORIGIN_PORT} --enable-experimental-web-platform-features --log-net-log=!{LOG_PATH_CLIENT}/net-log.json --autoplay-policy=no-user-gesture-required --auto-open-devtools-for-tabs --ignore-certificate-errors-spki-list=!{CERT_FINGERPRINT} !{REQUEST_URL}",
      "construct": [
        {
          "root_required": false,
          "command": "python ./util/chrome-set-downloads-folder.py ~/.config/google-chrome/Default/Preferences \"!{DOWNLOAD_PATH_CLIENT}\""
        }
      ]
    }
  },

  "shapers": {
    "ns3-quic": {
      "image": "martenseemann/quic-network-simulator",
      "scenarios": {
        "simple-p2p": {
          "command": "\"simple-p2p --delay=!{LATENCY}ms --bandwidth=!{THROUGHPUT}Mbps --queue=25\"",
          "parameters": ["THROUGHPUT", "LATENCY"]
        }
      }
    }
  },

  "servers": {
    "aioquic": {
      "image": "aiortc/aioquic-qns"
    }
  }
}

experiment configuration

{
  "clients": [
    {
      "name": "chrome",
      "arguments": {
        "REQUEST_URL": "https://!{ORIGIN}/1MB.bin"
      }
    }
  ],

  "shapers": [
    {
      "name": "ns3-quic",
      "scenario": "simple-p2p",
      "arguments": {
        "THROUGHPUT": "30",
        "LATENCY": "10"
      }
    }
  ],
  
  "servers": [
    {"name": "aioquic"}
  ],

  "environment": {
    "name": "webserver-basic",
    "sensors": [
      {
        "name": "timeout",
        "timeout": 30
      },
      {
        "name": "browser-file-watchdog",
        "expected_filename": ["1MB.bin"]
      }
    ]
  },

  "settings": {
    "label": "browser_download_test",
    "www_dir": "./www",
    "iterations": 1
  }
}

Parameters

Both implementation and experiment configurations allow referencing parameters. To help with automating experiments, Vegvisir also provides some system-defined parameters that get populated during runtime. It is allowed to have arguments reference other parameters.

LOG_PATH_CLIENT ; Log path for client logs, only useful for command-based entries  
LOG_PATH_SERVER ; Log path for server logs, only useful for command-based entries
LOG_PATH_SHAPER ; Log path for shaper logs, only useful for command-based entities
DOWNLOAD_PATH_CLIENT ; Download path for clients, only useful for command-based entries
ORIGIN ; Server hostname (IPv4 by default)
ORIGIN_IPV4 ; Server hostname coupled to an IPv4 address
ORIGIN_IPV6 ; Server hostname coupled to an IPv6 address
ORIGIN_PORT ; Server port
SSLKEYLOGFILE ; Only to be used in image-based entities, contains predefined SSL key log path inside the container
QLOGDIR ; Only to be used in image-based entities, contains predefined qlog path inside the container
ENVIRONMENT ; Provided by the environment, can be used by entities to provide specialized behavior

Clients additionally have access to the following system parameters

ROLE ; Always set to client, useful if one image is used by both the server and client

TESTCASE ; QIR compatibility parameter, should not be used unless your image also provides functionality within the QIR project

Server additionally have access to the following system parameters

ROLE ; Always set to server, useful if one image is used by both the server and client

TESTCASE ; QIR compatibility parameter, should not be used unless your image also provides functionality within the QIR project

Shapers additionally have access to the following system parameters

ROLE ; Always set to server, useful if one image is used by both the server and client
SCENARIO ; Contains the scenario name chosen in the experiment configuration
WAITFORSERVER ; hostname:port combination used for checking the server status

Creating your own images

We use the same method of creating images as used in the QUIC Interop Runner project. On top of that, we provide our parametric system to dynamically steer your image. You can define parameters in the implementations configuration and access them as environment variables within your image scripts. We therefore do not support QIR's SERVER_PARAMS and CLIENT_PARAMS (unless you define these as parameters).

Take a look at our tc-netem shaper image if you want to create your own shaper image. It provides a good example of how to create a shaper by applying configurations on the eth0 and eth1 network interfaces provided to these containers.

Frequently Asked Questions

Why do I need to enter my sudo password?!

Vegvisir requires root privileges to change system specifics such as routes to assure the experiments run correctly. Additionally, you can use privileged calls in your experiment setups.

Then why don't you just use polkit?

We created a version of Vegvisir using Polkit. However, since experiments can span multiple days, Polkit would require re-authenticating every once in a while making it impossible to continue without human intervention.

How secure is Vegvisir?

Vegvisir is intended to be used for research and development. Its experiment execution engine has access to privileged calls. We do not advise making Vegvisir accessible in a public network. ⚠️ You are responsible for the software being used in Vegvisir, do not run untrusted software or experiments.

Vegvisir locked my user account?

Wrongly entering your sudo password too many times can trigger a lock, this is unrelated to Vegvisir and default behavior of Linux, use faillock --reset to resolve this issue if you still have access to the system.

Why the name Vegvisir?

We were playing Valheim at the time of creating this repository. Since we did not have a good name, we chose Vegvisir for its meaning and it stuck.

A vegvísir (Icelandic for 'sign post, wayfinder') is an Icelandic magical stave intended to help the bearer find their way through rough weather.

Source: Wikipedia

I read somewhere you also have a HTTP Adaptive Streaming event definitions for qlog?

Correct! Our prelimary work on that can be found on this repository. We also have a wrapper for dash.js that you can put in the www directory to be used in your experiments.

The snippet below contains a google chrome client implementation configuration that makes use of the wrapper above. You can find some MPEG-DASH datasets here, simply download them to the www folder and provide the correct relative URL to the manifest you want to use as argument for DASH_MANIFEST. This demo automatically downloads a dashjs.qlog file when video playback stops, you can use this in combination with the browser-file-watchdog sensor.

"chrome": {
  "parameters": {
    "DASH_MANIFEST": true
  },
  "command": "google-chrome-stable --origin-to-force-quic-on=!{ORIGIN}:!{ORIGIN_PORT} --enable-experimental-web-platform-features --log-net-log=!{LOG_PATH_CLIENT}/net-log.json --autoplay-policy=no-user-gesture-required --auto-open-devtools-for-tabs --ignore-certificate-errors-spki-list=!{CERT_FINGERPRINT} https://!{ORIGIN}/dashjs-qlog-has/demo/demo.html?autosave=true&video=!{DASH_MANIFEST}",
  "construct": [
    {
      "root_required": false,
      "command": "python ./util/chrome-set-downloads-folder.py ~/.config/google-chrome/Default/Preferences \"!{DOWNLOAD_PATH_CLIENT}\""
    }
  ],
}

About

Vegvisir is an automated testing framework for orchestrating prototypical QUIC-HTTP/3 client-server communications using simulated network conditions.

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published