Add vyos-vpp CLI and python3 modules

1 files changed, 914 insertions, 0 deletions

diff --git a/smoketest/scripts/cli/test_vpp.py b/smoketest/scripts/cli/test_vpp.py
new file mode 100755
index 000000000..ed9e4f942
--- /dev/null
+++ b/smoketest/scripts/cli/test_vpp.py
@@ -0,0 +1,914 @@
+#!/usr/bin/env python3
+#
+# Copyright (C) 2023-2024 VyOS Inc.
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License along
+# with this program; if not, write to the Free Software Foundation, Inc.,
+# 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
+
+
+import os
+import re
+import unittest
+
+from json import loads
+
+from base_vyostest_shim import VyOSUnitTestSHIM
+
+from vyos.configsession import ConfigSessionError
+from vyos.utils.process import process_named_running
+from vyos.utils.file import read_file
+from vyos.utils.process import rc_cmd
+
+PROCESS_NAME = 'vpp_main'
+VPP_CONF = '/run/vpp/vpp.conf'
+base_path = ['vpp']
+driver = 'dpdk'
+interface = 'eth1'
+
+
+def get_address(interface):
+    rc, data = rc_cmd(f'ip --json address show dev {interface}')
+    if rc == 0:
+        data = loads(data)
+        if isinstance(data, list) and len(data) > 0:
+            ip_address = data[0]['addr_info'][0]['local']
+            return ip_address
+
+
+class TestVPP(VyOSUnitTestSHIM.TestCase):
+    @classmethod
+    def setUpClass(cls):
+        super(TestVPP, cls).setUpClass()
+
+        # ensure we can also run this test on a live system - so lets clean
+        # out the current configuration :)
+        cls.cli_delete(cls, base_path)
+
+    def setUp(self):
+        self.cli_set(base_path + ['settings', 'interface', interface, 'driver', driver])
+        self.cli_set(base_path + ['settings', 'unix', 'poll-sleep-usec', '10'])
+
+    def tearDown(self):
+        # Check for running process
+        self.assertTrue(process_named_running(PROCESS_NAME))
+
+        # delete test config
+        self.cli_delete(base_path)
+        self.cli_commit()
+
+        self.assertFalse(os.path.exists(VPP_CONF))
+        self.assertFalse(process_named_running(PROCESS_NAME))
+
+    def test_01_vpp_basic(self):
+        main_core = '0'
+        poll_sleep = '0'
+
+        self.cli_set(base_path + ['settings', 'cpu', 'main-core', main_core])
+        self.cli_set(base_path + ['settings', 'lcp', 'route-no-paths'])
+        self.cli_set(base_path + ['settings', 'unix', 'poll-sleep-usec', poll_sleep])
+
+        # commit changes
+        self.cli_commit()
+
+        config_entries = (
+            f'poll-sleep-usec {poll_sleep}',
+            f'main-core {main_core}',
+            'plugin default { disable }',
+            'plugin dpdk_plugin.so { enable }',
+            'plugin linux_cp_plugin.so { enable }',
+            'dev 0000:00:00.0',
+            'uio-bind-force',
+        )
+
+        # Check configured options
+        config = read_file(VPP_CONF)
+        for config_entry in config_entries:
+            self.assertIn(config_entry, config)
+
+        # route-no-paths is not present in the output
+        # looks like vpp bug
+        _, out = rc_cmd('sudo vppctl show lcp')
+        required_str = 'route-no-paths'
+        self.assertIn(required_str, out)
+
+    def test_02_vpp_vxlan(self):
+        vni = '23'
+        interface_vxlan = f'vxlan{vni}'
+        interface_kernel = f'vpptap{vni}'
+        new_interface_kernel = f'vpptap1{vni}'
+        source_address = '192.0.2.1'
+        new_source_address = '192.0.2.3'
+        remote_address = '192.0.2.254'
+        kernel_address = '203.0.113.1'
+
+        self.cli_set(
+            base_path
+            + ['interfaces', 'vxlan', interface_vxlan, 'source-address', source_address]
+        )
+        self.cli_set(
+            base_path
+            + ['interfaces', 'vxlan', interface_vxlan, 'remote', remote_address]
+        )
+        self.cli_set(base_path + ['interfaces', 'vxlan', interface_vxlan, 'vni', vni])
+        self.cli_set(
+            base_path
+            + [
+                'interfaces',
+                'vxlan',
+                interface_vxlan,
+                'kernel-interface',
+                interface_kernel,
+            ]
+        )
+        self.cli_set(
+            base_path
+            + ['kernel-interfaces', interface_kernel, 'address', f'{kernel_address}/24']
+        )
+
+        # commit changes
+        self.cli_commit()
+
+        self.assertTrue(os.path.isdir(f'/sys/class/net/{interface_kernel}'))
+
+        current_address = get_address(interface_kernel)
+        self.assertEqual(kernel_address, current_address)
+
+        # check vxlan interface
+        _, out = rc_cmd('sudo vppctl show vxlan tunnel')
+        required_str = f'[0] instance 23 src {source_address} dst {remote_address} src_port 4789 dst_port 4789 vni {vni}'
+        self.assertIn(required_str, out)
+
+        # update vxlan interface
+        self.cli_set(
+            base_path
+            + [
+                'interfaces',
+                'vxlan',
+                interface_vxlan,
+                'source-address',
+                new_source_address,
+            ]
+        )
+        self.cli_commit()
+
+        # check gre interface after update
+        _, out = rc_cmd('sudo vppctl show vxlan tunnel')
+        required_str = (
+            f'[0] instance {vni} src {new_source_address} dst {remote_address}'
+        )
+        self.assertIn(required_str, out)
+        self.assertTrue(os.path.isdir(f'/sys/class/net/{interface_kernel}'))
+        self.assertEqual(kernel_address, current_address)
+
+        # change vpp settings
+        self.cli_set(base_path + ['settings', 'unix', 'poll-sleep-usec', '5'])
+        self.cli_commit()
+
+        config = read_file(VPP_CONF)
+        self.assertIn('poll-sleep-usec 5', config)
+
+        # delete vxlan kernel-interface but do not delete 'vpp kernel-interface'
+        # expect raise ConfigError
+        self.cli_delete(
+            base_path
+            + [
+                'interfaces',
+                'vxlan',
+                interface_vxlan,
+                'kernel-interface',
+                interface_kernel,
+            ]
+        )
+        with self.assertRaises(ConfigSessionError):
+            self.cli_commit()
+
+        # update vxlan kernel-interface but do not change 'vpp kernel-interface'
+        # expect raise ConfigError
+        self.cli_set(
+            base_path
+            + [
+                'interfaces',
+                'vxlan',
+                interface_vxlan,
+                'kernel-interface',
+                new_interface_kernel,
+            ]
+        )
+        with self.assertRaises(ConfigSessionError):
+            self.cli_commit()
+
+        # delete vpp kernel-interface
+        self.cli_delete(base_path + ['kernel-interfaces', interface_kernel])
+        self.cli_commit()
+
+        # delete vxlan kernel-interface
+        self.cli_delete(
+            base_path + ['interfaces', 'vxlan', interface_vxlan, 'kernel-interface']
+        )
+        self.cli_commit()
+        self.assertFalse(os.path.isdir(f'/sys/class/net/{interface_kernel}'))
+
+        # delete vxlan interface
+        self.cli_set(base_path + ['interfaces', 'vxlan', interface_vxlan])
+        self.cli_commit()
+
+    def test_03_vpp_gre(self):
+        interface_gre = 'gre12'
+        interface_kernel = 'vpptun12'
+        new_interface_kernel = 'vpptun123'
+        source_address = '192.0.2.1'
+        new_source_address = '192.0.2.2'
+        remote_address = '192.0.2.254'
+        kernel_address = '10.0.0.0'
+
+        self.cli_set(
+            base_path
+            + ['interfaces', 'gre', interface_gre, 'source-address', source_address]
+        )
+        self.cli_set(
+            base_path + ['interfaces', 'gre', interface_gre, 'remote', remote_address]
+        )
+        self.cli_set(
+            base_path
+            + ['interfaces', 'gre', interface_gre, 'kernel-interface', interface_kernel]
+        )
+        self.cli_set(
+            base_path
+            + ['kernel-interfaces', interface_kernel, 'address', f'{kernel_address}/31']
+        )
+
+        # commit changes
+        self.cli_commit()
+
+        self.assertTrue(os.path.isdir(f'/sys/class/net/{interface_kernel}'))
+        current_address = get_address(interface_kernel)
+        self.assertEqual(kernel_address, current_address)
+
+        # check gre interface
+        _, out = rc_cmd('sudo vppctl show gre tunnel')
+        required_str = f'[0] instance 12 src {source_address} dst {remote_address}'
+        self.assertIn(required_str, out)
+
+        # update gre interface
+        self.cli_set(
+            base_path
+            + ['interfaces', 'gre', interface_gre, 'source-address', new_source_address]
+        )
+        self.cli_commit()
+
+        # check gre interface after update
+        _, out = rc_cmd('sudo vppctl show gre tunnel')
+        required_str = f'[0] instance 12 src {new_source_address} dst {remote_address}'
+        self.assertIn(required_str, out)
+        self.assertTrue(os.path.isdir(f'/sys/class/net/{interface_kernel}'))
+        self.assertEqual(kernel_address, current_address)
+
+        # delete gre kernel-interface but do not delete 'vpp kernel-interface'
+        # expect raise ConfigError
+        self.cli_delete(
+            base_path
+            + ['interfaces', 'gre', interface_gre, 'kernel-interface', interface_kernel]
+        )
+        with self.assertRaises(ConfigSessionError):
+            self.cli_commit()
+
+        # update gre kernel-interface but do not change 'vpp kernel-interface'
+        # expect raise ConfigError
+        self.cli_set(
+            base_path
+            + [
+                'interfaces',
+                'gre',
+                interface_gre,
+                'kernel-interface',
+                new_interface_kernel,
+            ]
+        )
+        with self.assertRaises(ConfigSessionError):
+            self.cli_commit()
+
+        # delete kernel interface
+        self.cli_delete(base_path + ['kernel-interfaces', interface_kernel])
+        self.cli_commit()
+
+        # delete gre kernel-interface
+        self.cli_delete(
+            base_path + ['interfaces', 'gre', interface_gre, 'kernel-interface']
+        )
+        self.cli_commit()
+        self.assertFalse(os.path.isdir(f'/sys/class/net/{interface_kernel}'))
+
+        # delete gre interface
+        self.cli_set(base_path + ['interfaces', 'gre', interface_gre])
+        self.cli_commit()
+
+    def test_04_vpp_geneve(self):
+        vni = '2'
+        # Must be 'geneve0' to pass smoketest
+        # As geneve interfaces cannot be named with "instance" suffix
+        interface_geneve = 'geneve0'
+        interface_kernel = f'vpptun{vni}'
+        new_interface_kernel = f'vpptun1{vni}'
+        source_address = '192.0.2.1'
+        new_source_address = '192.0.2.2'
+        remote_address = '203.0.113.10'
+        kernel_address = '10.0.0.1'
+
+        self.cli_set(
+            base_path
+            + [
+                'interfaces',
+                'geneve',
+                interface_geneve,
+                'source-address',
+                source_address,
+            ]
+        )
+        self.cli_set(
+            base_path
+            + ['interfaces', 'geneve', interface_geneve, 'remote', remote_address]
+        )
+        self.cli_set(base_path + ['interfaces', 'geneve', interface_geneve, 'vni', vni])
+        self.cli_set(
+            base_path
+            + [
+                'interfaces',
+                'geneve',
+                interface_geneve,
+                'kernel-interface',
+                interface_kernel,
+            ]
+        )
+        self.cli_set(
+            base_path
+            + ['kernel-interfaces', interface_kernel, 'address', f'{kernel_address}/31']
+        )
+
+        # commit changes
+        self.cli_commit()
+
+        self.assertTrue(os.path.isdir(f'/sys/class/net/{interface_kernel}'))
+        current_address = get_address(interface_kernel)
+        self.assertEqual(kernel_address, current_address)
+
+        # check geneve interface
+        _, out = rc_cmd('sudo vppctl show geneve tunnel')
+        required_str = f'[0] lcl {source_address} rmt {remote_address} vni {vni}'
+        self.assertIn(required_str, out)
+
+        # update geneve interface
+        self.cli_set(
+            base_path
+            + [
+                'interfaces',
+                'geneve',
+                interface_geneve,
+                'source-address',
+                new_source_address,
+            ]
+        )
+        self.cli_commit()
+
+        # check geneve interface after update
+        _, out = rc_cmd('sudo vppctl show geneve tunnel')
+        required_str = f'[0] lcl {new_source_address} rmt {remote_address} vni {vni}'
+        self.assertIn(required_str, out)
+        self.assertTrue(os.path.isdir(f'/sys/class/net/{interface_kernel}'))
+        self.assertEqual(kernel_address, current_address)
+
+        # delete geneve kernel-interface but do not delete 'vpp kernel-interface'
+        # expect raise ConfigError
+        self.cli_delete(
+            base_path
+            + [
+                'interfaces',
+                'geneve',
+                interface_geneve,
+                'kernel-interface',
+                interface_kernel,
+            ]
+        )
+        with self.assertRaises(ConfigSessionError):
+            self.cli_commit()
+
+        # update gemeve kernel-interface but do not change 'vpp kernel-interface'
+        # expect raise ConfigError
+        self.cli_set(
+            base_path
+            + [
+                'interfaces',
+                'geneve',
+                interface_geneve,
+                'kernel-interface',
+                new_interface_kernel,
+            ]
+        )
+        with self.assertRaises(ConfigSessionError):
+            self.cli_commit()
+
+        # delete vpp kernel-interface
+        self.cli_delete(base_path + ['kernel-interfaces', interface_kernel])
+        self.cli_commit()
+
+        # delete geneve kernel-interface
+        self.cli_delete(
+            base_path + ['interfaces', 'geneve', interface_geneve, 'kernel-interface']
+        )
+        self.cli_commit()
+
+        self.assertFalse(os.path.isdir(f'/sys/class/net/{interface_kernel}'))
+
+        # delete geneve interface
+        self.cli_set(base_path + ['interfaces', 'geneve', interface_geneve])
+        self.cli_commit()
+
+    def test_05_vpp_loopback(self):
+        interface_loopback = 'lo11'
+        interface_kernel = 'vpptun11'
+        new_interface_kernel = 'vpptun12'
+        kernel_address = '192.0.2.54'
+
+        self.cli_set(base_path + ['interfaces', 'loopback', interface_loopback])
+        self.cli_set(
+            base_path
+            + [
+                'interfaces',
+                'loopback',
+                interface_loopback,
+                'kernel-interface',
+                interface_kernel,
+            ]
+        )
+        self.cli_set(
+            base_path
+            + ['kernel-interfaces', interface_kernel, 'address', f'{kernel_address}/25']
+        )
+
+        # commit changes
+        self.cli_commit()
+
+        self.assertTrue(os.path.isdir(f'/sys/class/net/{interface_kernel}'))
+
+        current_address = get_address(interface_kernel)
+        self.assertEqual(kernel_address, current_address)
+
+        # check loopback interface
+        _, out = rc_cmd('sudo vppctl show interface loop11')
+        required_str = 'loop11'
+        self.assertIn(required_str, out)
+
+        # delete loopback kernel-interface but do not delete 'vpp kernel-interface'
+        # expect raise ConfigError
+        self.cli_delete(
+            base_path
+            + [
+                'interfaces',
+                'loopback',
+                interface_loopback,
+                'kernel-interface',
+                interface_kernel,
+            ]
+        )
+        with self.assertRaises(ConfigSessionError):
+            self.cli_commit()
+
+        # update loopback kernel-interface but do not change 'vpp kernel-interface'
+        # expect raise ConfigError
+        self.cli_set(
+            base_path
+            + [
+                'interfaces',
+                'loopback',
+                interface_loopback,
+                'kernel-interface',
+                new_interface_kernel,
+            ]
+        )
+        with self.assertRaises(ConfigSessionError):
+            self.cli_commit()
+
+        # delete vpp kernel-interface
+        self.cli_delete(base_path + ['kernel-interfaces', interface_kernel])
+        self.cli_commit()
+
+        # delete loopback kernel-interface
+        self.cli_delete(
+            base_path
+            + ['interfaces', 'loopback', interface_loopback, 'kernel-interface']
+        )
+        self.cli_commit()
+        self.assertFalse(os.path.isdir(f'/sys/class/net/{interface_kernel}'))
+
+        # delete loopback interface
+        self.cli_set(base_path + ['interfaces', 'loopback', interface_loopback])
+        self.cli_commit()
+
+    def test_06_vpp_bonding(self):
+        interface_bond = 'bond23'
+        interface_kernel = 'vpptun23'
+        hash = 'layer3+4'
+        mode = '802.3ad'
+        description = 'Interface-Bonding'
+        vlans = ['123', '456']
+        vlan_description = 'My-vlan-123'
+
+        self.cli_set(
+            base_path
+            + [
+                'interfaces',
+                'bonding',
+                interface_bond,
+                'member',
+                'interface',
+                interface,
+            ]
+        )
+        self.cli_set(
+            base_path + ['interfaces', 'bonding', interface_bond, 'hash-policy', hash]
+        )
+        self.cli_set(
+            base_path + ['interfaces', 'bonding', interface_bond, 'mode', mode]
+        )
+        self.cli_set(
+            base_path
+            + [
+                'interfaces',
+                'bonding',
+                interface_bond,
+                'kernel-interface',
+                interface_kernel,
+            ]
+        )
+        self.cli_set(
+            base_path
+            + ['kernel-interfaces', interface_kernel, 'description', description]
+        )
+        for vlan in vlans:
+            self.cli_set(
+                base_path
+                + [
+                    'kernel-interfaces',
+                    interface_kernel,
+                    'vif',
+                    vlan,
+                    'description',
+                    vlan_description,
+                ]
+            )
+
+        # commit changes
+        self.cli_commit()
+
+        self.assertTrue(os.path.isdir(f'/sys/class/net/{interface_kernel}'))
+        self.assertTrue(os.path.isdir(f'/sys/class/net/{interface_kernel}.{vlan}'))
+
+        current_alias = read_file(f'/sys/class/net/{interface_kernel}/ifalias')
+        vlan_alias = read_file(f'/sys/class/net/{interface_kernel}.{vlan}/ifalias')
+        self.assertEqual(current_alias, description)
+        self.assertEqual(vlan_alias, vlan_description)
+
+        # check bonding interface
+        _, out = rc_cmd('sudo vppctl show bond details')
+        required_enries = (
+            'BondEthernet23',
+            'mode: lacp',
+            'load balance: l34',
+            'number of active members: 0',
+            'number of members: 1',
+            f'{interface}',
+            'device instance: 0',
+            'interface id: 23',
+        )
+        for entry in required_enries:
+            self.assertIn(entry, out)
+
+        # delete vpp kernel-interface vlan
+        self.cli_delete(base_path + ['kernel-interfaces', interface_kernel, 'vif'])
+        self.cli_commit()
+        self.assertFalse(os.path.isdir(f'/sys/class/net/{interface_kernel}.{vlan}'))
+
+        # delete vpp kernel-interface
+        self.cli_delete(base_path + ['kernel-interfaces', interface_kernel])
+        self.cli_commit()
+
+        # delete bonding kernel-interface
+        self.cli_delete(
+            base_path + ['interfaces', 'bonding', interface_bond, 'kernel-interface']
+        )
+        self.cli_commit()
+        self.assertFalse(os.path.isdir(f'/sys/class/net/{interface_kernel}'))
+
+        # delete bonding interface
+        self.cli_set(base_path + ['interfaces', 'bonding', interface_bond])
+        self.cli_commit()
+
+    def test_07_vpp_bridge(self):
+        fake_member = 'eth2'
+        members = [interface]
+        interface_bridge = 'br10'
+        vni = '23'
+        interface_vxlan = f'vxlan{vni}'
+        source_address = '192.0.2.1'
+        remote_address = '192.0.2.254'
+
+        for member in members:
+            self.cli_set(
+                base_path
+                + [
+                    'interfaces',
+                    'bridge',
+                    interface_bridge,
+                    'member',
+                    'interface',
+                    member,
+                ]
+            )
+
+        # commit changes
+        self.cli_commit()
+
+        # check bridge interface
+        _, out = rc_cmd('sudo vppctl show bridge-domain 10 detail')
+
+        # Normalize the output for consistent whitespace
+        normalized_out = re.sub(r'\s+', ' ', out)
+
+        # Perform assertions based on the normalized output
+        self.assertIn('BD-ID Index BSN Age(min)', normalized_out)
+        self.assertIn('10 1 0 off', normalized_out)
+        self.assertIn('Learning U-Forwrd UU-Flood Flooding', normalized_out)
+        self.assertIn('on on flood on', normalized_out)
+        self.assertIn('Interface If-idx ISN', normalized_out)
+        # Check Interface, If-idx, ISN
+        self.assertRegex(out, r'\s*eth1\s+\d+\s+\d+')
+
+        # Set non exist member
+        # expect raise ConfigErro
+        self.cli_set(
+            base_path
+            + [
+                'interfaces',
+                'bridge',
+                interface_bridge,
+                'member',
+                'interface',
+                fake_member,
+            ]
+        )
+        with self.assertRaises(ConfigSessionError):
+            self.cli_commit()
+
+        self.cli_delete(
+            base_path
+            + [
+                'interfaces',
+                'bridge',
+                interface_bridge,
+                'member',
+                'interface',
+                fake_member,
+            ]
+        )
+
+        # Add VXLAN to the bridge
+        self.cli_set(
+            base_path
+            + ['interfaces', 'vxlan', interface_vxlan, 'source-address', source_address]
+        )
+        self.cli_set(
+            base_path
+            + ['interfaces', 'vxlan', interface_vxlan, 'remote', remote_address]
+        )
+        self.cli_set(base_path + ['interfaces', 'vxlan', interface_vxlan, 'vni', vni])
+        self.cli_set(
+            base_path
+            + [
+                'interfaces',
+                'bridge',
+                interface_bridge,
+                'member',
+                'interface',
+                interface_vxlan,
+            ]
+        )
+
+        # commit changes
+        self.cli_commit()
+
+        # check bridge interface
+        _, out = rc_cmd('sudo vppctl show bridge-domain 10 detail')
+        # Normalize the output for consistent whitespace
+        normalized_out = re.sub(r'\s+', ' ', out)
+
+        # Perform assertions based on the normalized output
+        self.assertIn('BD-ID Index BSN Age(min)', normalized_out)
+        self.assertIn('10 1 1 off', normalized_out)
+        self.assertIn('Learning U-Forwrd UU-Flood Flooding', normalized_out)
+        self.assertIn('on on flood on', normalized_out)
+        self.assertIn('Interface If-idx ISN', normalized_out)
+        # Check Interface, If-idx, ISN
+        self.assertRegex(out, r'\s*eth1\s+\d+\s+\d+')
+        self.assertRegex(out, r'\s*vxlan_tunnel23\s+\d+\s+\d+')
+
+        # Add check dependency ethernet => bridge
+        self.cli_set(
+            base_path + ['settings', 'interface', interface, 'dpdk-options', 'promisc']
+        )
+        self.cli_commit()
+        # check bridge interface
+        _, out = rc_cmd('sudo vppctl show bridge-domain 10 detail')
+        # Normalize the output for consistent whitespace
+        normalized_out = re.sub(r'\s+', ' ', out)
+        self.assertRegex(out, r'\s*eth1\s+\d+\s+\d+')
+        self.assertRegex(out, r'\s*vxlan_tunnel23\s+\d+\s+\d+')
+
+    def test_08_vpp_ipip(self):
+        interface_ipip = 'ipip12'
+        interface_kernel = 'vpptun12'
+        new_interface_kernel = 'vpptun123'
+        source_address = '192.0.2.1'
+        new_source_address = '192.0.2.2'
+        remote_address = '192.0.2.5'
+        kernel_address = '10.0.0.0'
+
+        self.cli_set(
+            base_path
+            + ['interfaces', 'ipip', interface_ipip, 'source-address', source_address]
+        )
+        self.cli_set(
+            base_path + ['interfaces', 'ipip', interface_ipip, 'remote', remote_address]
+        )
+        self.cli_set(
+            base_path
+            + [
+                'interfaces',
+                'ipip',
+                interface_ipip,
+                'kernel-interface',
+                interface_kernel,
+            ]
+        )
+        self.cli_set(
+            base_path
+            + ['kernel-interfaces', interface_kernel, 'address', f'{kernel_address}/31']
+        )
+
+        # commit changes
+        self.cli_commit()
+
+        self.assertTrue(os.path.isdir(f'/sys/class/net/{interface_kernel}'))
+        current_address = get_address(interface_kernel)
+        self.assertEqual(kernel_address, current_address)
+
+        # check ipip interface
+        _, out = rc_cmd('sudo vppctl show ipip tunnel')
+        required_str = f'[0] instance 12 src {source_address} dst {remote_address}'
+        self.assertIn(required_str, out)
+
+        # update ipip interface
+        self.cli_set(
+            base_path
+            + [
+                'interfaces',
+                'ipip',
+                interface_ipip,
+                'source-address',
+                new_source_address,
+            ]
+        )
+        self.cli_commit()
+
+        # check ipip interface after update
+        _, out = rc_cmd('sudo vppctl show ipip tunnel')
+        required_str = f'[0] instance 12 src {new_source_address} dst {remote_address}'
+        self.assertIn(required_str, out)
+        self.assertTrue(os.path.isdir(f'/sys/class/net/{interface_kernel}'))
+        self.assertEqual(kernel_address, current_address)
+
+        # delete ipip kernel-interface but do not delete 'vpp kernel-interface'
+        # expect raise ConfigError
+        self.cli_delete(
+            base_path
+            + [
+                'interfaces',
+                'ipip',
+                interface_ipip,
+                'kernel-interface',
+                interface_kernel,
+            ]
+        )
+        with self.assertRaises(ConfigSessionError):
+            self.cli_commit()
+
+        # update ipip kernel-interface but do not change 'vpp kernel-interface'
+        # expect raise ConfigError
+        self.cli_set(
+            base_path
+            + [
+                'interfaces',
+                'ipip',
+                interface_ipip,
+                'kernel-interface',
+                new_interface_kernel,
+            ]
+        )
+        with self.assertRaises(ConfigSessionError):
+            self.cli_commit()
+
+        # delete kernel interface
+        self.cli_delete(base_path + ['kernel-interfaces', interface_kernel])
+        self.cli_commit()
+
+        # delete ipip kernel-interface
+        self.cli_delete(
+            base_path + ['interfaces', 'ipip', interface_ipip, 'kernel-interface']
+        )
+        self.cli_commit()
+        self.assertFalse(os.path.isdir(f'/sys/class/net/{interface_kernel}'))
+
+        # delete ipip interface
+        self.cli_set(base_path + ['interfaces', 'ipip', interface_ipip])
+        self.cli_commit()
+
+    def test_09_vpp_xconnect(self):
+        vni = '23'
+        interface_vxlan = f'vxlan{vni}'
+        interface_xconnect = f'xcon{vni}'
+        source_address = '192.0.2.1'
+        remote_address = '192.0.2.254'
+
+        self.cli_set(
+            base_path
+            + ['interfaces', 'vxlan', interface_vxlan, 'source-address', source_address]
+        )
+        self.cli_set(
+            base_path
+            + ['interfaces', 'vxlan', interface_vxlan, 'remote', remote_address]
+        )
+        self.cli_set(base_path + ['interfaces', 'vxlan', interface_vxlan, 'vni', vni])
+
+        # Add xconneect
+        self.cli_set(
+            base_path
+            + [
+                'interfaces',
+                'xconnect',
+                interface_xconnect,
+                'member',
+                'interface',
+                interface,
+            ]
+        )
+
+        # Cross connect interfaces require 2 interfaces
+        # expect raise ConfigError
+        with self.assertRaises(ConfigSessionError):
+            self.cli_commit()
+
+        self.cli_set(
+            base_path
+            + [
+                'interfaces',
+                'xconnect',
+                interface_xconnect,
+                'member',
+                'interface',
+                interface_vxlan,
+            ]
+        )
+
+        # commit changes
+        self.cli_commit()
+
+        # check interface mode
+        _, out = rc_cmd('sudo vppctl show mode')
+        required_str_list = [
+            f'l2 xconnect {interface} vxlan_tunnel{vni}',
+            f'l2 xconnect vxlan_tunnel{vni} {interface}',
+        ]
+        for required_string in required_str_list:
+            self.assertIn(required_string, out)
+
+        # delete xconnect interface
+        self.cli_delete(base_path + ['interfaces', 'xconnect', interface_xconnect])
+        self.cli_commit()
+
+        # check delete xconnect interface
+        _, out = rc_cmd('sudo vppctl show mode')
+        for required_string in required_str_list:
+            self.assertNotIn(required_string, out)
+
+
+if __name__ == '__main__':
+    unittest.main(verbosity=2)