Sample ACL VNF

Change-Id: I33de47ac6ca353d6c69f0d166809b4c95d3fd90f
Signed-off-by: Deepak S <deepak.s@linux.intel.com>
Signed-off-by: Edward MacGillivray <edward.s.macgillivray@intel.com>
Signed-off-by: Ross Brattain <ross.b.brattain@intel.com>

3 files changed, 553 insertions, 0 deletions

diff --git a/tests/unit/network_services/helpers/acl_vnf_topology_ixia.yaml b/tests/unit/network_services/helpers/acl_vnf_topology_ixia.yaml
new file mode 100644
index 000000000..606d557e9
--- /dev/null
+++ b/tests/unit/network_services/helpers/acl_vnf_topology_ixia.yaml
@@ -0,0 +1,50 @@
+# Copyright (c) 2016-2017 Intel Corporation
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+nsd:nsd-catalog:
+    nsd:
+    -   id: VACL
+        name: VACL
+        short-name: VACL
+        description: scenario with VACL,L3fwd and VNF
+        constituent-vnfd:
+        -   member-vnf-index: '1'
+            vnfd-id-ref: tg__1
+            VNF model: ../../vnf_descriptors/ixia_rfc2544_tpl.yaml
+        -   member-vnf-index: '2'
+            vnfd-id-ref: vnf__1
+            VNF model: ../../vnf_descriptors/acl_vnf.yaml
+
+        vld:
+        -   id: private_1
+            name: tg__1 to vnf__1 link 1
+            type: ELAN
+            vnfd-connection-point-ref:
+            -   member-vnf-index-ref: '1'
+                vnfd-connection-point-ref: xe0
+                vnfd-id-ref: tg__1                  #TREX
+            -   member-vnf-index-ref: '2'
+                vnfd-connection-point-ref: xe0
+                vnfd-id-ref: vnf__1                  #VNF
+
+        -   id: public_1
+            name: vnf__1 to tg__1 link 2
+            type: ELAN
+            vnfd-connection-point-ref:
+            -   member-vnf-index-ref: '2'
+                vnfd-connection-point-ref: xe1
+                vnfd-id-ref: vnf__1                  #L3fwd
+            -   member-vnf-index-ref: '1'
+                vnfd-connection-point-ref: xe1
+                vnfd-id-ref: tg__1                  #VACL VNF
diff --git a/tests/unit/network_services/vnf_generic/vnf/acl_1rule.yaml b/tests/unit/network_services/vnf_generic/vnf/acl_1rule.yaml
new file mode 100644
index 000000000..b184a29e2
--- /dev/null
+++ b/tests/unit/network_services/vnf_generic/vnf/acl_1rule.yaml
@@ -0,0 +1,47 @@
+# Copyright (c) 2016-2017 Intel Corporation
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+access-list1:
+  acl:
+    access-list-entries:
+    - ace:
+        ace-oper-data:
+          match-counter: 0
+        actions: drop,count
+        matches:
+          destination-ipv4-network: 152.16.40.20/24
+          destination-port-range:
+            lower-port: 0
+            upper-port: 65535
+          source-ipv4-network: 0.0.0.0/0
+          source-port-range:
+            lower-port: 0
+            upper-port: 65535
+        rule-name: rule1588
+    - ace:
+        ace-oper-data:
+          match-counter: 0
+        actions: drop,count
+        matches:
+          destination-ipv4-network: 0.0.0.0/0
+          destination-port-range:
+            lower-port: 0
+            upper-port: 65535
+          source-ipv4-network: 152.16.100.20/24
+          source-port-range:
+            lower-port: 0
+            upper-port: 65535
+        rule-name: rule1589
+    acl-name: sample-ipv4-acl
+    acl-type: ipv4-acl
diff --git a/tests/unit/network_services/vnf_generic/vnf/test_acl_vnf.py b/tests/unit/network_services/vnf_generic/vnf/test_acl_vnf.py
new file mode 100644
index 000000000..c079a2ad0
--- /dev/null
+++ b/tests/unit/network_services/vnf_generic/vnf/test_acl_vnf.py
@@ -0,0 +1,456 @@
+#!/usr/bin/env python
+
+# Copyright (c) 2016-2017 Intel Corporation
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+from __future__ import absolute_import
+import unittest
+import mock
+import os
+
+
+STL_MOCKS = {
+    'stl': mock.MagicMock(),
+    'stl.trex_stl_lib': mock.MagicMock(),
+    'stl.trex_stl_lib.base64': mock.MagicMock(),
+    'stl.trex_stl_lib.binascii': mock.MagicMock(),
+    'stl.trex_stl_lib.collections': mock.MagicMock(),
+    'stl.trex_stl_lib.copy': mock.MagicMock(),
+    'stl.trex_stl_lib.datetime': mock.MagicMock(),
+    'stl.trex_stl_lib.functools': mock.MagicMock(),
+    'stl.trex_stl_lib.imp': mock.MagicMock(),
+    'stl.trex_stl_lib.inspect': mock.MagicMock(),
+    'stl.trex_stl_lib.json': mock.MagicMock(),
+    'stl.trex_stl_lib.linecache': mock.MagicMock(),
+    'stl.trex_stl_lib.math': mock.MagicMock(),
+    'stl.trex_stl_lib.os': mock.MagicMock(),
+    'stl.trex_stl_lib.platform': mock.MagicMock(),
+    'stl.trex_stl_lib.pprint': mock.MagicMock(),
+    'stl.trex_stl_lib.random': mock.MagicMock(),
+    'stl.trex_stl_lib.re': mock.MagicMock(),
+    'stl.trex_stl_lib.scapy': mock.MagicMock(),
+    'stl.trex_stl_lib.socket': mock.MagicMock(),
+    'stl.trex_stl_lib.string': mock.MagicMock(),
+    'stl.trex_stl_lib.struct': mock.MagicMock(),
+    'stl.trex_stl_lib.sys': mock.MagicMock(),
+    'stl.trex_stl_lib.threading': mock.MagicMock(),
+    'stl.trex_stl_lib.time': mock.MagicMock(),
+    'stl.trex_stl_lib.traceback': mock.MagicMock(),
+    'stl.trex_stl_lib.trex_stl_async_client': mock.MagicMock(),
+    'stl.trex_stl_lib.trex_stl_client': mock.MagicMock(),
+    'stl.trex_stl_lib.trex_stl_exceptions': mock.MagicMock(),
+    'stl.trex_stl_lib.trex_stl_ext': mock.MagicMock(),
+    'stl.trex_stl_lib.trex_stl_jsonrpc_client': mock.MagicMock(),
+    'stl.trex_stl_lib.trex_stl_packet_builder_interface': mock.MagicMock(),
+    'stl.trex_stl_lib.trex_stl_packet_builder_scapy': mock.MagicMock(),
+    'stl.trex_stl_lib.trex_stl_port': mock.MagicMock(),
+    'stl.trex_stl_lib.trex_stl_stats': mock.MagicMock(),
+    'stl.trex_stl_lib.trex_stl_streams': mock.MagicMock(),
+    'stl.trex_stl_lib.trex_stl_types': mock.MagicMock(),
+    'stl.trex_stl_lib.types': mock.MagicMock(),
+    'stl.trex_stl_lib.utils': mock.MagicMock(),
+    'stl.trex_stl_lib.utils.argparse': mock.MagicMock(),
+    'stl.trex_stl_lib.utils.collections': mock.MagicMock(),
+    'stl.trex_stl_lib.utils.common': mock.MagicMock(),
+    'stl.trex_stl_lib.utils.json': mock.MagicMock(),
+    'stl.trex_stl_lib.utils.os': mock.MagicMock(),
+    'stl.trex_stl_lib.utils.parsing_opts': mock.MagicMock(),
+    'stl.trex_stl_lib.utils.pwd': mock.MagicMock(),
+    'stl.trex_stl_lib.utils.random': mock.MagicMock(),
+    'stl.trex_stl_lib.utils.re': mock.MagicMock(),
+    'stl.trex_stl_lib.utils.string': mock.MagicMock(),
+    'stl.trex_stl_lib.utils.sys': mock.MagicMock(),
+    'stl.trex_stl_lib.utils.text_opts': mock.MagicMock(),
+    'stl.trex_stl_lib.utils.text_tables': mock.MagicMock(),
+    'stl.trex_stl_lib.utils.texttable': mock.MagicMock(),
+    'stl.trex_stl_lib.warnings': mock.MagicMock(),
+    'stl.trex_stl_lib.yaml': mock.MagicMock(),
+    'stl.trex_stl_lib.zlib': mock.MagicMock(),
+    'stl.trex_stl_lib.zmq': mock.MagicMock(),
+}
+
+STLClient = mock.MagicMock()
+stl_patch = mock.patch.dict("sys.modules", STL_MOCKS)
+stl_patch.start()
+
+if stl_patch:
+    from yardstick.network_services.vnf_generic.vnf.acl_vnf import AclApproxVnf
+    from yardstick.network_services.vnf_generic.vnf import acl_vnf
+    from yardstick.network_services.nfvi.resource import ResourceProfile
+
+
+TEST_FILE_YAML = 'nsb_test_case.yaml'
+
+
+name = 'vnf__1'
+
+
+@mock.patch("yardstick.network_services.vnf_generic.vnf.sample_vnf.Process")
+class TestAclApproxVnf(unittest.TestCase):
+    VNFD = {'vnfd:vnfd-catalog':
+            {'vnfd':
+             [{'short-name': 'VpeVnf',
+               'vdu':
+               [{'routing_table':
+                 [{'network': '152.16.100.20',
+                   'netmask': '255.255.255.0',
+                   'gateway': '152.16.100.20',
+                   'if': 'xe0'},
+                  {'network': '152.16.40.20',
+                   'netmask': '255.255.255.0',
+                   'gateway': '152.16.40.20',
+                   'if': 'xe1'}],
+                 'description': 'VPE approximation using DPDK',
+                 'name': 'vpevnf-baremetal',
+                 'nd_route_tbl':
+                 [{'network': '0064:ff9b:0:0:0:0:9810:6414',
+                   'netmask': '112',
+                   'gateway': '0064:ff9b:0:0:0:0:9810:6414',
+                   'if': 'xe0'},
+                  {'network': '0064:ff9b:0:0:0:0:9810:2814',
+                   'netmask': '112',
+                   'gateway': '0064:ff9b:0:0:0:0:9810:2814',
+                   'if': 'xe1'}],
+                 'id': 'vpevnf-baremetal',
+                 'external-interface':
+                 [{'virtual-interface':
+                   {'dst_mac': '00:00:00:00:00:04',
+                    'vpci': '0000:05:00.0',
+                    'local_ip': '152.16.100.19',
+                    'type': 'PCI-PASSTHROUGH',
+                    'netmask': '255.255.255.0',
+                    'dpdk_port_num': '0',
+                    'bandwidth': '10 Gbps',
+                    'driver': "i40e",
+                    'dst_ip': '152.16.100.20',
+                    'local_iface_name': 'xe0',
+                    'local_mac': '00:00:00:00:00:02'},
+                   'vnfd-connection-point-ref': 'xe0',
+                   'name': 'xe0'},
+                  {'virtual-interface':
+                   {'dst_mac': '00:00:00:00:00:03',
+                    'vpci': '0000:05:00.1',
+                    'local_ip': '152.16.40.19',
+                    'type': 'PCI-PASSTHROUGH',
+                    'driver': "i40e",
+                    'netmask': '255.255.255.0',
+                    'dpdk_port_num': '1',
+                    'bandwidth': '10 Gbps',
+                    'dst_ip': '152.16.40.20',
+                    'local_iface_name': 'xe1',
+                    'local_mac': '00:00:00:00:00:01'},
+                   'vnfd-connection-point-ref': 'xe1',
+                   'name': 'xe1'}]}],
+               'description': 'Vpe approximation using DPDK',
+               'mgmt-interface':
+                   {'vdu-id': 'vpevnf-baremetal',
+                    'host': '1.2.1.1',
+                    'password': 'r00t',
+                    'user': 'root',
+                    'ip': '1.2.1.1'},
+               'benchmark':
+                   {'kpi': ['packets_in', 'packets_fwd', 'packets_dropped']},
+               'connection-point': [{'type': 'VPORT', 'name': 'xe0'},
+                                    {'type': 'VPORT', 'name': 'xe1'}],
+               'id': 'AclApproxVnf', 'name': 'VPEVnfSsh'}]}}
+
+    scenario_cfg = {'options': {'packetsize': 64, 'traffic_type': 4,
+                                'rfc2544': {'allowed_drop_rate': '0.8 - 1'},
+                                'vnf__1': {'rules': 'acl_1rule.yaml',
+                                           'vnf_config': {'lb_config': 'SW',
+                                                          'lb_count': 1,
+                                                          'worker_config':
+                                                          '1C/1T',
+                                                          'worker_threads': 1}}
+                                },
+                    'task_id': 'a70bdf4a-8e67-47a3-9dc1-273c14506eb7',
+                    'task_path': '/tmp',
+                    'tc': 'tc_ipv4_1Mflow_64B_packetsize',
+                    'runner': {'object': 'NetworkServiceTestCase',
+                               'interval': 35,
+                               'output_filename': '/tmp/yardstick.out',
+                               'runner_id': 74476, 'duration': 400,
+                               'type': 'Duration'},
+                    'traffic_profile': 'ipv4_throughput_acl.yaml',
+                    'traffic_options': {'flow': 'ipv4_Packets_acl.yaml',
+                                        'imix': 'imix_voice.yaml'},
+                    'type': 'ISB',
+                    'nodes': {'tg__2': 'trafficgen_2.yardstick',
+                              'tg__1': 'trafficgen_1.yardstick',
+                              'vnf__1': 'vnf.yardstick'},
+                    'topology': 'vpe-tg-topology-baremetal.yaml'}
+
+    context_cfg = {'nodes': {'tg__2':
+                             {'member-vnf-index': '3',
+                              'role': 'TrafficGen',
+                              'name': 'trafficgen_2.yardstick',
+                              'vnfd-id-ref': 'tg__2',
+                              'ip': '1.2.1.1',
+                              'interfaces':
+                              {'xe0': {'local_iface_name': 'ens513f0',
+                                       'vld_id': 'public',
+                                       'netmask': '255.255.255.0',
+                                       'local_ip': '152.16.40.20',
+                                       'dst_mac': '00:00:00:00:00:01',
+                                       'local_mac': '00:00:00:00:00:03',
+                                       'dst_ip': '152.16.40.19',
+                                       'driver': 'ixgbe',
+                                       'vpci': '0000:02:00.0',
+                                       'dpdk_port_num': 0},
+                               'xe1': {'local_iface_name': 'ens513f1',
+                                       'netmask': '255.255.255.0',
+                                       'network': '202.16.100.0',
+                                       'local_ip': '202.16.100.20',
+                                       'local_mac': '00:1e:67:d0:60:5d',
+                                       'driver': 'ixgbe',
+                                       'vpci': '0000:02:00.1',
+                                       'dpdk_port_num': 1}},
+                              'password': 'r00t',
+                              'VNF model': 'l3fwd_vnf.yaml',
+                              'user': 'root'},
+                             'tg__1':
+                             {'member-vnf-index': '1',
+                              'role': 'TrafficGen',
+                              'name': 'trafficgen_1.yardstick',
+                              'vnfd-id-ref': 'tg__1',
+                              'ip': '1.2.1.1',
+                              'interfaces':
+                              {'xe0': {'local_iface_name': 'ens785f0',
+                                       'vld_id': 'private',
+                                       'netmask': '255.255.255.0',
+                                       'local_ip': '152.16.100.20',
+                                       'dst_mac': '00:00:00:00:00:02',
+                                       'local_mac': '00:00:00:00:00:04',
+                                       'dst_ip': '152.16.100.19',
+                                       'driver': 'i40e',
+                                       'vpci': '0000:05:00.0',
+                                       'dpdk_port_num': 0},
+                               'xe1': {'local_iface_name': 'ens785f1',
+                                       'netmask': '255.255.255.0',
+                                       'local_ip': '152.16.100.21',
+                                       'local_mac': '00:00:00:00:00:01',
+                                       'driver': 'i40e',
+                                       'vpci': '0000:05:00.1',
+                                       'dpdk_port_num': 1}},
+                              'password': 'r00t',
+                              'VNF model': 'tg_rfc2544_tpl.yaml',
+                              'user': 'root'},
+                             'vnf__1':
+                             {'name': 'vnf.yardstick',
+                              'vnfd-id-ref': 'vnf__1',
+                              'ip': '1.2.1.1',
+                              'interfaces':
+                              {'xe0': {'local_iface_name': 'ens786f0',
+                                       'vld_id': 'private',
+                                       'netmask': '255.255.255.0',
+                                       'local_ip': '152.16.100.19',
+                                       'dst_mac': '00:00:00:00:00:04',
+                                       'local_mac': '00:00:00:00:00:02',
+                                       'dst_ip': '152.16.100.20',
+                                       'driver': 'i40e',
+                                       'vpci': '0000:05:00.0',
+                                       'dpdk_port_num': 0},
+                               'xe1': {'local_iface_name': 'ens786f1',
+                                       'vld_id': 'public',
+                                       'netmask': '255.255.255.0',
+                                       'local_ip': '152.16.40.19',
+                                       'dst_mac': '00:00:00:00:00:03',
+                                       'local_mac': '00:00:00:00:00:01',
+                                       'dst_ip': '152.16.40.20',
+                                       'driver': 'i40e',
+                                       'vpci': '0000:05:00.1',
+                                       'dpdk_port_num': 1}},
+                              'routing_table':
+                              [{'netmask': '255.255.255.0',
+                                'gateway': '152.16.100.20',
+                                'network': '152.16.100.20',
+                                'if': 'xe0'},
+                               {'netmask': '255.255.255.0',
+                                'gateway': '152.16.40.20',
+                                'network': '152.16.40.20',
+                                'if': 'xe1'}],
+                              'member-vnf-index': '2',
+                              'host': '1.2.1.1',
+                              'role': 'vnf',
+                              'user': 'root',
+                              'nd_route_tbl':
+                              [{'netmask': '112',
+                                'gateway': '0064:ff9b:0:0:0:0:9810:6414',
+                                'network': '0064:ff9b:0:0:0:0:9810:6414',
+                                'if': 'xe0'},
+                               {'netmask': '112',
+                                'gateway': '0064:ff9b:0:0:0:0:9810:2814',
+                                'network': '0064:ff9b:0:0:0:0:9810:2814',
+                                'if': 'xe1'}],
+                              'password': 'r00t',
+                              'VNF model': 'acl_vnf.yaml'}}}
+
+    def test___init__(self, mock_process):
+        vnfd = self.VNFD['vnfd:vnfd-catalog']['vnfd'][0]
+        acl_approx_vnf = AclApproxVnf(name, vnfd)
+        self.assertIsNone(acl_approx_vnf._vnf_process)
+
+    @mock.patch("yardstick.network_services.vnf_generic.vnf.sample_vnf.time")
+    def test_collect_kpi(self, mock_time, mock_process):
+        with mock.patch("yardstick.ssh.SSH") as ssh:
+            ssh_mock = mock.Mock(autospec=ssh.SSH)
+            ssh_mock.execute = \
+                mock.Mock(return_value=(0, "", ""))
+            ssh.from_node.return_value = ssh_mock
+            vnfd = self.VNFD['vnfd:vnfd-catalog']['vnfd'][0]
+            acl_approx_vnf = AclApproxVnf(name, vnfd)
+            acl_approx_vnf.q_in = mock.MagicMock()
+            acl_approx_vnf.q_out = mock.MagicMock()
+            acl_approx_vnf.q_out.qsize = mock.Mock(return_value=0)
+            acl_approx_vnf.resource = mock.Mock(autospec=ResourceProfile)
+            acl_approx_vnf.vnf_execute = mock.Mock(return_value="")
+            result = {'packets_dropped': 0, 'packets_fwd': 0,
+                      'packets_in': 0}
+            self.assertEqual(result, acl_approx_vnf.collect_kpi())
+
+    @mock.patch("yardstick.network_services.vnf_generic.vnf.sample_vnf.time")
+    def test_vnf_execute_command(self, mock_time, mock_process):
+        with mock.patch("yardstick.ssh.SSH") as ssh:
+            ssh_mock = mock.Mock(autospec=ssh.SSH)
+            ssh_mock.execute = \
+                mock.Mock(return_value=(0, "", ""))
+            ssh.from_node.return_value = ssh_mock
+            vnfd = self.VNFD['vnfd:vnfd-catalog']['vnfd'][0]
+            acl_approx_vnf = AclApproxVnf(name, vnfd)
+            acl_approx_vnf.q_in = mock.MagicMock()
+            acl_approx_vnf.q_out = mock.MagicMock()
+            acl_approx_vnf.q_out.qsize = mock.Mock(return_value=0)
+            cmd = "quit"
+            self.assertEqual("", acl_approx_vnf.vnf_execute(cmd))
+
+    def test_get_stats(self, mock_process):
+        with mock.patch("yardstick.ssh.SSH") as ssh:
+            ssh_mock = mock.Mock(autospec=ssh.SSH)
+            ssh_mock.execute = mock.Mock(return_value=(0, "", ""))
+            ssh.from_node.return_value = ssh_mock
+            vnfd = self.VNFD['vnfd:vnfd-catalog']['vnfd'][0]
+            acl_approx_vnf = AclApproxVnf(name, vnfd)
+            acl_approx_vnf.q_in = mock.MagicMock()
+            acl_approx_vnf.q_out = mock.MagicMock()
+            acl_approx_vnf.q_out.qsize = mock.Mock(return_value=0)
+            mock_result = \
+                "ACL TOTAL: pkts_processed: 100, pkts_drop: 0, spkts_received: 100"
+            acl_approx_vnf.vnf_execute = mock.Mock(return_value=mock_result)
+            self.assertEqual(mock_result, acl_approx_vnf.get_stats())
+
+    def _get_file_abspath(self, filename):
+        curr_path = os.path.dirname(os.path.abspath(__file__))
+        file_path = os.path.join(curr_path, filename)
+        return file_path
+
+    @mock.patch("yardstick.network_services.vnf_generic.vnf.acl_vnf.hex")
+    @mock.patch("yardstick.network_services.vnf_generic.vnf.acl_vnf.eval")
+    @mock.patch('yardstick.network_services.vnf_generic.vnf.acl_vnf.open')
+    def test_run_acl(self, mock_open, eval, hex, mock_process):
+        with mock.patch("yardstick.ssh.SSH") as ssh:
+            ssh_mock = mock.Mock(autospec=ssh.SSH)
+            ssh_mock.execute = \
+                mock.Mock(return_value=(0, "", ""))
+            ssh_mock.run = \
+                mock.Mock(return_value=(0, "", ""))
+            ssh.from_node.return_value = ssh_mock
+            vnfd = self.VNFD['vnfd:vnfd-catalog']['vnfd'][0]
+            acl_approx_vnf = AclApproxVnf(name, vnfd)
+            acl_approx_vnf._build_config = mock.MagicMock()
+            acl_approx_vnf.queue_wrapper = mock.MagicMock()
+            acl_approx_vnf.ssh_helper = mock.MagicMock()
+            acl_approx_vnf.ssh_helper.run = mock.MagicMock()
+            acl_approx_vnf.scenario_helper.scenario_cfg = self.scenario_cfg
+            acl_approx_vnf.vnf_cfg = {'lb_config': 'SW',
+                                      'lb_count': 1,
+                                      'worker_config': '1C/1T',
+                                      'worker_threads': 1}
+            acl_approx_vnf.all_options = {'traffic_type': '4',
+                                          'topology': 'nsb_test_case.yaml'}
+            acl_approx_vnf._run()
+            acl_approx_vnf.ssh_helper.run.assert_called_once()
+
+    @mock.patch("yardstick.network_services.vnf_generic.vnf.acl_vnf.YangModel")
+    @mock.patch("yardstick.network_services.vnf_generic.vnf.acl_vnf.find_relative_file")
+    @mock.patch("yardstick.network_services.vnf_generic.vnf.sample_vnf.Context")
+    def test_instantiate(self, mock_context, mock_yang, mock_find, mock_process):
+        with mock.patch("yardstick.ssh.SSH") as ssh:
+            ssh_mock = mock.Mock(autospec=ssh.SSH)
+            ssh_mock.execute = mock.Mock(return_value=(0, "", ""))
+            ssh.from_node.return_value = ssh_mock
+            vnfd = self.VNFD['vnfd:vnfd-catalog']['vnfd'][0]
+            acl_approx_vnf = AclApproxVnf(name, vnfd)
+            acl_approx_vnf.ssh_helper = ssh
+            acl_approx_vnf.deploy_helper = mock.MagicMock()
+            acl_approx_vnf.resource_helper = mock.MagicMock()
+            acl_approx_vnf._build_config = mock.MagicMock()
+            self.scenario_cfg['vnf_options'] = {'acl': {'cfg': "",
+                                                        'rules': ""}}
+            acl_approx_vnf.q_out.put("pipeline>")
+            acl_approx_vnf.WAIT_TIME = 0
+            self.scenario_cfg.update({"nodes": {"vnf__1": ""}})
+            self.assertIsNone(acl_approx_vnf.instantiate(self.scenario_cfg,
+                                                         self.context_cfg))
+
+    def test_instantiate_panic(self, mock_process):
+        with mock.patch("yardstick.ssh.SSH") as ssh:
+            ssh_mock = mock.Mock(autospec=ssh.SSH)
+            ssh_mock.execute = mock.Mock(return_value=(1, "", ""))
+            ssh.from_node.return_value = ssh_mock
+            vnfd = self.VNFD['vnfd:vnfd-catalog']['vnfd'][0]
+            acl_approx_vnf = AclApproxVnf(name, vnfd)
+            self.scenario_cfg['vnf_options'] = {'acl': {'cfg': "",
+                                                        'rules': ""}}
+            acl_approx_vnf._run_acl = mock.Mock(return_value=0)
+            acl_approx_vnf.WAIT_TIME = 0
+            acl_approx_vnf.resource_helper = mock.MagicMock()
+            acl_approx_vnf._build_config = mock.MagicMock()
+            acl_approx_vnf._vnf_process = mock.MagicMock()
+            acl_approx_vnf._vnf_process.start = mock.Mock()
+            acl_approx_vnf._vnf_process.is_alive = mock.Mock(return_value=True)
+            self.assertRaises(ValueError, acl_approx_vnf.instantiate,
+                              self.scenario_cfg, self.context_cfg)
+            acl_approx_vnf.q_out.put("PANIC")
+            acl_approx_vnf.WAIT_TIME = 0
+            self.assertRaises(ValueError, acl_approx_vnf.instantiate,
+                              self.scenario_cfg, self.context_cfg)
+
+    def test_scale(self, mock_process):
+        vnfd = self.VNFD['vnfd:vnfd-catalog']['vnfd'][0]
+        acl_approx_vnf = AclApproxVnf(name, vnfd)
+        flavor = ""
+        self.assertRaises(NotImplementedError, acl_approx_vnf.scale, flavor)
+
+    @mock.patch("yardstick.network_services.vnf_generic.vnf.sample_vnf.time")
+    def test_terminate(self, mock_time, mock_process):
+        with mock.patch("yardstick.ssh.SSH") as ssh:
+            ssh_mock = mock.Mock(autospec=ssh.SSH)
+            ssh_mock.execute = \
+                mock.Mock(return_value=(0, "", ""))
+            ssh.from_node.return_value = ssh_mock
+            vnfd = self.VNFD['vnfd:vnfd-catalog']['vnfd'][0]
+            acl_approx_vnf = AclApproxVnf(name, vnfd)
+            acl_approx_vnf._vnf_process = mock.MagicMock()
+            acl_approx_vnf._vnf_process.terminate = mock.Mock()
+            acl_approx_vnf.used_drivers = {"01:01.0": "i40e",
+                                           "01:01.1": "i40e"}
+            acl_approx_vnf.vnf_execute = mock.MagicMock()
+            acl_approx_vnf.ssh_helper = ssh_mock
+            acl_approx_vnf.dpdk_nic_bind = "dpdk_nic_bind.py"
+            acl_approx_vnf._resource_collect_stop = mock.Mock()
+            self.assertEqual(None, acl_approx_vnf.terminate())
+
+if __name__ == '__main__':
+    unittest.main()