/*
	Generates configurations to test blackhole on a single workstation.
	It uses the loopback network to generate address for horizons and blackholes


	Each horizon is listening on port 9000 for connections from blackholes.
	Each horizon is listening on 127.0.0.N,N+1,N+2 where N is defined by horizon_baseip()
	Each vserver tied to an horizon is listening on IP 127.0.0.M,M+1,M+2 where M
	is defined by horizon_vservip()
*/

#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include <unistd.h>
#include <errno.h>
#include <misc.h>
#include <sys/stat.h>
#include <sys/wait.h>
#include <tlmplib.h>
#include <tlmpnet.h>
#include <string>

using namespace std;

static int NBPORT=5;
static int NBVSERV=4;
static int NBPROTOCHECK=3;
static bool NOCONPROXY=false;
/*
	Return the base IP number of an horizon. This is the number N in 127.0.0.N.
	We allocate 20 IPs per horizon. 10 for the base IP and the IP0,..N and 10 for the vservers
*/
static int horizon_baseip (int no_horizon)
{
	return no_horizon*20+10;
}
static int horizon_vservip (int no_horizon)
{
	return no_horizon*20+20;
}
static bool horizon_unixsock = false;	// Use a unix socket to reach the horizon
<mod>
static void genconfigs (int nbhorizons, int nbblackholes)
{
	glocal const char *user = getenv ("USER"); 
	glocal int nbh = nbhorizons;
	glocal int nbb = nbblackholes;
	mkdir ("/tmp/tmp",0755);
	mkdir ("/tmp/tmp/errors",0755);
	mkdir ("/tmp/tmp/sock",0755);
	mkdir ("/tmp/tmp/pid",0755);
	mkdir ("/tmp/tmp/debug",0755);
	for (int i=0; i<nbhorizons; i++){
		glocal int basei = i;;
		string f = string_f ("/tmp/tmp/horizon-%d.sh",i);
		<call savefile>(f.c_str(),false);
		<f dowrite>
			int baseip = horizon_baseip(glocal.basei);
			fprintf (fout,"./horizon ");
			for (int i=0; i<NBVSERV; i++){
				for (int j=0; j<NBPORT; j++) fprintf (fout," --bind 127.0.0.%d,%d",baseip+i,9001+j);
				fprintf (fout," --bind 127.0.0.%d,%d",baseip+i,9022);
				fprintf (fout," --bind 127.0.0.%d,%d",baseip+i,9023);
				fprintf (fout," --bind 127.0.0.%d,%d",baseip+i,9080);
				fprintf (fout," --bind 127.0.0.%d,%d",baseip+i,9081);
			}
			fprintf (fout," --control /tmp/tmp/sock/horizon-%d.sock",glocal.basei);
			if (NOCONPROXY){
				fprintf (fout," --conproxyport none");
			}else{
				fprintf (fout," --conproxyport /tmp/tmp/sock/conproxy.sock");
			}
			fprintf (fout," --master 127.0.0.%d,9000",baseip);
			fprintf (fout," --master /tmp/tmp/sock/horizon-master-%d.sock",glocal.basei);
			fprintf (fout," --pidfile /tmp/tmp/pid/horizon-%d.pid",glocal.basei);
			fprintf (fout," --user %s",glocal.user);
			fprintf (fout," --debug --debugfile /tmp/tmp/debug/horizon-debug-%d.log",glocal.basei);
			fprintf (fout," --errorfile /tmp/tmp/errors/horizon-error-%d.log",glocal.basei);
			fprintf (fout," --daemon\n");
			return 0;
		</f>
		</call>
		chmod (f.c_str(),0755);
		f = string_f ("/tmp/tmp/horizon-%d-rules.sh",i);
		<call savefile>(f.c_str(),false);
		<f dowrite>
			int baseip = horizon_vservip(glocal.basei);
			fprintf (fout,"./horizon-control -p /tmp/tmp/sock/horizon-%d.sock allow 127.0.0.1\n",glocal.basei);
			string hctl = string_f("./horizon-control -p /tmp/tmp/sock/horizon-%d.sock",glocal.basei);
			const char *hctl_str = hctl.c_str();
			for (int i=0; i<NBVSERV; i++){
				fprintf (fout,"%s vserver vserv%d 127.0.0.%d\n"
					,hctl_str,i,baseip+i);
				fprintf (fout,"%s vserverdir vserv%d /\n"
					,hctl_str,i);
			}
			fprintf (fout,"%s vserver localhost 127.0.0.1\n",hctl_str);
			fprintf (fout,"%s --bind unix,/tmp/tmp/sock/server%d-vserv3.sock,vserv3\n",hctl_str,glocal.basei);
			return 0;
		</f>
		</call>
		chmod (f.c_str(),0755);
	}
	<call savefile>("/tmp/tmp/tcpecho.sh",false);
	<f dowrite>
		for (int i=0; i<glocal.nbh-1; i++){
			for (int j=0; j<NBVSERV; j++){
				for (int k=0; k<NBPORT; k++){
					int ip = horizon_vservip(i)+j;
					int port = 9001+k;
					fprintf (fout,"./tcpecho --daemon --user %s --pidfile /tmp/tmp/pid/tcpecho-%d-%d-%d.pid"
						" --bind 127.0.0.%d --port %d"
						" -m \"echo 127.0.0.%d %d\"\n"
						,glocal.user,i,ip,port
						,ip,port
						,ip,port);
				}
			}
		}
		// One tcpecho listening on unix socket
		fprintf (fout,"./tcpecho --daemon --user %s --pidfile /tmp/tmp/pid/tcpecho-unix.pid"
			" --port unix:/tmp/tmp/sock/unix.sock"
			" -m \"echo unix\"\n"
			,glocal.user);
		return 0;
	</f>
	chmod ("/tmp/tmp/tcpecho.sh",0755);
	</call>
	for (int i=0; i<nbblackholes; i++){
		glocal int basei = i;
		string f = string_f ("/tmp/tmp/blackhole-%d.sh",i);
		<call savefile>(f.c_str(),false);
		<f dowrite>
			fprintf (fout,"./blackhole --daemon --user %s --horizon_port 9000"
				" --control /tmp/tmp/sock/blackhole-%d.sock --statfile /tmp/blackhole-%d-connect.log"
				" --pidfile /tmp/tmp/pid/blackhole-%d.pid --conproxyport /tmp/tmp/sock/conproxy.sock"
				" --debug --debugfile /tmp/tmp/debug/blackhole-debug-%d.log --errorfile /tmp/tmp/errors/blackhole-error-%d.log\n"
				,glocal.user,glocal.basei,glocal.basei,glocal.basei,glocal.basei,glocal.basei);
			return 0;
		</f>
		</call>
		chmod (f.c_str(),0755);
		f = string_f ("/tmp/tmp/blackhole-%d-rules.sh",i);
		<call savefile>(f.c_str(),false);
		<f dowrite>
			string bkc = string_f("./blackhole-control -p /tmp/tmp/sock/blackhole-%d.sock",glocal.basei);
			for (int i=0; i<glocal.nbh; i++){
				if (horizon_unixsock){
					fprintf (fout,"%s horizon server%d:/tmp/tmp/sock/horizon-master-%d.sock near\n",bkc.c_str(),i,i);
				}else{
					fprintf (fout,"%s horizon server%d near\n",bkc.c_str(),i);
				}
			}
			// Generate some rules
			// server0 vserverN portM-> server1 vserverN portM
			// and server1 vserverN portM -> server1 vserverN portM
			for (int i=0; i<NBVSERV; i++){
				for (int j=0; j<NBPORT; j++){
					int port = 9001+j;
					fprintf (fout,"%s rule server0 vserv%d ip0 %d server1 vserv%d %d\n"
						,bkc.c_str()
						,i,port,i,port);
					fprintf (fout,"%s rule server1 vserv%d ip0 %d server1 vserv%d %d\n"
						,bkc.c_str()
						,i,port,i,port);
				}
				fprintf (fout,"%s rule server0 vserv%d ip0 9022 server1 vserv%d 22\n"
					,bkc.c_str()
					,i,i);
				fprintf (fout,"%s rule server0 vserv%d ip0 9080 server1 vserv%d 80\n"
					,bkc.c_str()
					,i,i);
			}
			// Rules to test unix socket performance. one testing single horizons, the other testing
			// two horizons
			fprintf (fout,"%s rule server0 vserv3 ip0 9001 server0 vserv3 /tmp/tmp/sock/unix.sock\n"
				,bkc.c_str());
			fprintf (fout,"%s rule server1 vserv3 ip0 9001 server0 vserv3 /tmp/tmp/sock/unix.sock\n"
				,bkc.c_str());
			// Same thing but reachable using unix socket
			fprintf (fout,"%s rule server0 vserv3 unix /tmp/tmp/sock/server0-vserv3.sock server0 vserv3 /tmp/tmp/sock/unix.sock\n"
				,bkc.c_str());
			fprintf (fout,"%s rule server1 vserv3 unix /tmp/tmp/sock/server1-vserv3.sock server0 vserv3 /tmp/tmp/sock/unix.sock\n"
				,bkc.c_str());
			// Test two factor and protocol checker
			// server2 -> server0
			const char *prefix = "";
			for (int i=0; i<NBPROTOCHECK; i++){
				int portoff = i*100;
				fprintf (fout,"%s %sprotocheck 2factors server3 vserv0 %d\n",bkc.c_str(),prefix,9001+portoff);
				fprintf (fout,"%s %sprotocheck 2factors-f server3 vserv0 %d\n",bkc.c_str(),prefix,9002+portoff);
				fprintf (fout,"%s %sprotocheck http server3 vserv0 %d\n",bkc.c_str(),prefix,9003+portoff);
				fprintf (fout,"%s %sprotocheck httpl server3 vserv0 %d\n",bkc.c_str(),prefix,9004+portoff);
				prefix = "a";
			}
			for (int i=0; i<NBVSERV; i++){
				for (int j=0; j<4; j++){
					int port = 9001+j;
					static const char *tbcheck[]={"2factors","2factors-f","http","httpl"};
					const char *check = tbcheck[j];
					fprintf (fout,"%s rule server2 vserv%d ip0 %d %s:server0 vserv%d %d\n"
						,bkc.c_str()
						,i,port,check,i,port);
				}
				fprintf (fout,"%s rule server2 vserv%d ip0 9022 2factors:server0 vserv%d 22\n"
					,bkc.c_str()
					,i,i);
				fprintf (fout,"%s rule server2 vserv%d ip0 9023 2factors-f:server0 vserv%d 22\n"
					,bkc.c_str()
					,i,i);
				fprintf (fout,"%s rule server2 vserv%d ip0 9080 http:server0 vserv%d 80\n"
					,bkc.c_str()
					,i,i);
				fprintf (fout,"%s rule server2 vserv%d ip0 9081 httpl:server0 vserv%d 80\n"
					,bkc.c_str()
					,i,i);
				// Allows test using a browser (no control over the source IP)
				fprintf (fout,"%s rule server2 localhost ip0 9080 http:server0 vserv%d 80\n"
					,bkc.c_str()
					,i);
				fprintf (fout,"%s rule server2 localhost ip0 9081 httpl:server0 vserv%d 80\n"
					,bkc.c_str()
					,i);
			}
			fprintf (fout,"%s logall-on\n",bkc.c_str());
			fprintf (fout,"%s resume\n",bkc.c_str());
			return 0;
		</f>
		</call>
		chmod (f.c_str(),0755);
	}
	<call savefile>("/tmp/tmp/2factors.sh",false);
	<f dowrite>
		for (int i=0; i<NBPROTOCHECK; i++){
			int portoff = i * 100;
			fprintf (fout,"./protocheck-2factors --control /tmp/tmp/sock/protocheck-2factors-%d-1.sock"
				" --pidfile /tmp/tmp/pid/blackhole-2factors-%d-1.pid"
				" --user %s --daemon --command /tmp/tmp/2factors-command.sh"
				" --bind 127.0.0.80 --port %d"
				" --debug --debugfile /tmp/tmp/debug/2factors-debug-%d-1.log"
				" --errorfile /tmp/tmp/errors/2factors-%d-1.log\n"
				,i,i,glocal.user,9001+portoff,i,i);
			fprintf (fout,"./protocheck-2factors --control /tmp/tmp/sock/protocheck-2factors-%d-2.sock"
				" --follow_mode"
				" --pidfile /tmp/tmp/pid/blackhole-2factors-%d-2.pid"
				" --user %s --daemon --command /tmp/tmp/2factors-command.sh"
				" --bind 127.0.0.80 --port %d"
				" --debug --debugfile /tmp/tmp/debug/2factors-debug-%d-2.log"
				" --errorfile /tmp/tmp/errors/2factors-%d-2.log\n"
				,i,i,glocal.user,9002+portoff,i,i);
			fprintf (fout,"./protocheck-2factors --control /tmp/tmp/sock/protocheck-2factors-%d-3.sock"
				" --follow_mode"
				" --pidfile /tmp/tmp/pid/blackhole-2factors-%d-3.pid"
				" --user %s --daemon --command /tmp/tmp/2factors-command.sh"
				" --bind 127.0.0.80 --port %d"
				" --unlocked --http /tmp/tmp/http_check.conf"
				" --debug --debugfile /tmp/tmp/debug/2factors-debug-%d-3.log"
				" --errorfile /tmp/tmp/errors/2factors-%d-3.log\n"
				,i,i,glocal.user,9003+portoff,i,i);
			fprintf (fout,"./protocheck-2factors --control /tmp/tmp/sock/protocheck-2factors-%d-4.sock"
				" --follow_mode"
				" --pidfile /tmp/tmp/pid/blackhole-2factors-%d-4.pid"
				" --user %s --daemon --command /tmp/tmp/2factors-command.sh"
				" --bind 127.0.0.80 --port %d"
				" --unlocked --http /tmp/tmp/http_check.conf --learnfile /tmp/tmp/httpl.log"
				" --debug --debugfile /tmp/tmp/debug/2factors-debug-%d-4.log"
				" --errorfile /tmp/tmp/errors/2factors-%d-4.log\n"
				,i,i,glocal.user,9004+portoff,i,i);
		}
		return 0;
	</f>
	</call>
	chmod ("/tmp/tmp/2factors.sh",0755);
	<call savefile>("/tmp/tmp/http_check.conf",false);
	<f dowrite>
		fprintf (fout,"# This is a test\n");
		fprintf (fout,"GETURL=/somepage/\n");
		return 0;
	</f>
	</call>
	<call savefile>("/tmp/tmp/2factors-command.sh",false);
	<f dowrite>
		fprintf (fout,"#!/bin/sh\n");
		fprintf (fout,"echo `date` $* >>/tmp/2factors.log\n");
		return 0;
	</f>
	</call>
	chmod ("/tmp/tmp/2factors-command.sh",0755);
	<call savefile>("/tmp/tmp/2factors-confirm.sh",false);
	<f dowrite>
		char path[1000];
		getcwd(path,sizeof(path));
		fprintf (fout,"#!/bin/sh\n");
		fprintf (fout,"if [ \"$2\" = \"\" ] ; then\n");
		fprintf (fout,"\t%s/protocheck-2factors-control -p /tmp/tmp/sock/protocheck-2factors-$1.sock status\\\n",path);
		fprintf (fout,"\t\t| grep client | while read a b c d e\n");
		fprintf (fout,"\tdo\n");
		fprintf (fout,"\t\techo -n \"Confirm $d: \"\n");
		fprintf (fout,"\t\t%s/protocheck-2factors-control -p /tmp/tmp/sock/protocheck-2factors-$1.sock confirm $d\n",path);
		fprintf (fout,"\tdone\n");
		fprintf (fout,"else\n");
		fprintf (fout,"\t%s/protocheck-2factors-control -p /tmp/tmp/sock/protocheck-2factors-$1.sock confirm $2\n",path);
		fprintf (fout,"fi\n");
		return 0;
	</f>
	</call>
	chmod ("/tmp/tmp/2factors-confirm.sh",0755);
	<call savefile>("/tmp/tmp/2factors-lock.sh",false);
	<f dowrite>
		char path[1000];
		getcwd(path,sizeof(path));
		fprintf (fout,"#!/bin/sh\n");
		fprintf (fout,"%s/protocheck-2factors-control -p /tmp/tmp/sock/protocheck-2factors-2.sock status\\\n",path);
		fprintf (fout,"\t| grep client | while read a b c d e\n");
		fprintf (fout,"do\n");
		fprintf (fout,"\techo -n \"Lock $c: \"\n");
		fprintf (fout,"\t%s/protocheck-2factors-control -p /tmp/tmp/sock/protocheck-2factors-2.sock lock $c\n",path);
		fprintf (fout,"done\n");
		return 0;
	</f>
	</call>
	chmod ("/tmp/tmp/2factors-lock.sh",0755);
	if (!NOCONPROXY){
		<call savefile>("/tmp/tmp/conproxy.sh",false);
		<f dowrite>
			fprintf (fout,"#!/bin/sh\n");
			fprintf (fout,"./conproxy -p /tmp/tmp/sock/conproxy.sock --pidfile /tmp/tmp/pid/conproxy.pid"
				" --user %s --daemon --statfile /tmp/conproxy-connect.log"
				" --debug --debugfile /tmp/tmp/debug/conproxy.log --errorfile /tmp/tmp/errors/conproxy-error.log\n"
				,glocal.user);
			return 0;
		</f>
		</call>
		chmod ("/tmp/tmp/conproxy.sh",0755);
	}
	<call savefile>("/tmp/tmp/stopall",false);
	<f dowrite>
		for (int i=0; i<glocal.nbh; i++){
			fprintf (fout,"./horizon-control -p /tmp/tmp/sock/horizon-%d.sock quit\n",i);
		}
		for (int i=0; i<glocal.nbb; i++){
			fprintf (fout,"./blackhole-control -p /tmp/tmp/sock/blackhole-%d.sock quit\n",i);
		}
		if (!NOCONPROXY) fprintf (fout,"./conproxy-control -p /tmp/tmp/sock/conproxy.sock quit\n");
		for (int i=0; i<NBPROTOCHECK; i++){
			fprintf (fout,"./protocheck-2factors-control -p /tmp/tmp/sock/protocheck-2factors-%d-1.sock quit\n",i);
			fprintf (fout,"./protocheck-2factors-control -p /tmp/tmp/sock/protocheck-2factors-%d-2.sock quit\n",i);
			fprintf (fout,"./protocheck-2factors-control -p /tmp/tmp/sock/protocheck-2factors-%d-3.sock quit\n",i);
			fprintf (fout,"./protocheck-2factors-control -p /tmp/tmp/sock/protocheck-2factors-%d-4.sock quit\n",i);
		}
		fprintf (fout,"killall tcpecho\n");
		return 0;
	</f>
	</call>
	chmod ("/tmp/tmp/stopall",0755);
	<call savefile>("/tmp/tmp/startall",false);
	<f dowrite>
		for (int i=0; i<glocal.nbh; i++){
			fprintf (fout,"/tmp/tmp/horizon-%d.sh\n",i);
			fprintf (fout,"/tmp/tmp/horizon-%d-rules.sh\n",i);
		}
		if (!NOCONPROXY) fprintf (fout,"/tmp/tmp/conproxy.sh\n");
		for (int i=0; i<glocal.nbb; i++){
			fprintf (fout,"/tmp/tmp/blackhole-%d.sh\n",i);
			fprintf (fout,"/tmp/tmp/blackhole-%d-rules.sh\n",i);
		}
		fprintf (fout,"/tmp/tmp/tcpecho.sh\n");
		fprintf (fout,"/tmp/tmp/2factors.sh\n");
		#if 0
		fprintf (fout,"echo Wait for blackhole to connect to horizons\n");
		fprintf (fout,"while true\n");
		fprintf (fout,"do\n");
		fprintf (fout,"\tBK=`./blackhole-control -p /tmp/tmp/sock/blackhole-0.sock status| grep Horizon | grep -q fd=-1 && echo 1`\n");
		fprintf (fout,"\tif [ \"$BK\" = \"\" ] ; then\n");
		fprintf (fout,"\t\tbreak\n");
		fprintf (fout,"\tfi\n");
		fprintf (fout,"\techo -n .; sleep 1\n");
		fprintf (fout,"done\n");
		#endif
		fprintf (fout,"echo Wait for all services to initialise\n");
		fprintf (fout,"sleep 5\n");
		return 0;
	</f>
	</call>
	chmod ("/tmp/tmp/startall",0755);
	<call savefile>("/tmp/tmp/status",false);
	<f dowrite>
		fprintf (fout,"if [ \"$1\" = \"\" -o \"$1\" = \"horizon\" ]; then\n");
		for (int i=0; i<glocal.nbh; i++){
			fprintf (fout,"echo ========== horizon %d =========\n",i);
			fprintf (fout,"./horizon-control -p /tmp/tmp/sock/horizon-%d.sock status\n",i);
		}
		fprintf (fout,"fi\n");
		fprintf (fout,"if [ \"$1\" = \"\" -o \"$1\" = \"blackhole\" ]; then\n");
		for (int i=0; i<glocal.nbb; i++){
			fprintf (fout,"echo ========== blackhole %d =========\n",i);
			fprintf (fout,"./blackhole-control -p /tmp/tmp/sock/blackhole-%d.sock status\n",i);
			fprintf (fout,"echo ========== blackhole %d rejects ========\n",i);
			fprintf (fout,"./blackhole-control -p /tmp/tmp/sock/blackhole-%d.sock rejects\n",i);
		}
		fprintf (fout,"fi\n");
		if (!NOCONPROXY){
			fprintf (fout,"if [ \"$1\" = \"\" -o \"$1\" = \"conproxy\" ]; then\n");
			fprintf (fout,"echo ======== conproxy =======\n");
			fprintf (fout,"./conproxy-control -p /tmp/tmp/sock/conproxy.sock status\n");
			fprintf (fout,"fi\n");
		}
		fprintf (fout,"if [ \"$1\" = \"\" -o \"$1\" = \"2factors\" ]; then\n");
		for (int i=0; i<NBPROTOCHECK; i++){
			fprintf (fout,"echo ======== 2factors %d-1 =======\n",i);
			fprintf (fout,"./protocheck-2factors-control -p /tmp/tmp/sock/protocheck-2factors-%d-1.sock status\n",i);
			fprintf (fout,"echo ======== 2factors %d-2 =======\n",i);
			fprintf (fout,"./protocheck-2factors-control -p /tmp/tmp/sock/protocheck-2factors-%d-2.sock status\n",i);
			fprintf (fout,"echo ======== 2factors %d-3 http =======\n",i);
			fprintf (fout,"./protocheck-2factors-control -p /tmp/tmp/sock/protocheck-2factors-%d-3.sock status\n",i);
			fprintf (fout,"echo ======== 2factors %d-4 httpl =======\n",i);
			fprintf (fout,"./protocheck-2factors-control -p /tmp/tmp/sock/protocheck-2factors-%d-4.sock status\n",i);
		}
		fprintf (fout,"fi\n");
		fprintf (fout,"if [ \"$1\" = \"\" -o \"$1\" = \"connectload\" ]; then\n");
		for (int i=0; i<glocal.nbb; i++){
			fprintf (fout,"echo ========== blackhole connectload %d =========\n",i);
			fprintf (fout,"./blackhole-control -p /tmp/tmp/sock/blackhole-%d.sock connectload\n",i);
		}
		fprintf (fout,"fi\n");
		return 0;
	</f>
	</call>
	chmod ("/tmp/tmp/status",0755);
}
</mod>

<mod>
static int probe (
	const string &bind,
	const string &host,		// IP number of the horizon
	const string &port,
	const char *expect,
	unsigned nbechoreq)
{
	glocal int ret = -1;
	glocal int noline = 0;
	glocal const char *expect = expect;
	glocal unsigned nbechoreq = nbechoreq;

	debug_printf ("probe: bind %s host %s port %s\n"
		,bind.c_str(),host.c_str(),port.c_str());
	<call tcpconnect>(bind.c_str(),host.c_str(),port.c_str(),5);
	<f init>
		settcpnodelay(true);
	</f>
	<f oneline>
		debug_printf ("probe len=%zu/%zu line=%s\n",strlen(glocal.expect),strlen(line),line);	
		if (glocal.noline == 0){
			if (strcmp(line,glocal.expect)==0){
				glocal.ret = 0;
				if (glocal.nbechoreq==0){
					end = true;
				}else{
					send ("Hello\n");
				}
			}else{
				end = true;
			}
		}else{
			if (strcmp(line,"echo Hello\r")!=0){
				glocal.ret = -1;
				end = true;
			}
			glocal.nbechoreq--;
			if (glocal.nbechoreq == 0){
				end = true;
			}else{
				send ("Hello\n");
			}
		}
		glocal.noline++;
	</f>
	<f end>
	</f>
	</call>
	debug_printf ("probe ret=%d\n",glocal.ret);
	if (glocal.ret == -1){
		fprintf (stderr,"probe fail bind=%s host=%s port=%s <> %s\n"
			,bind.c_str(),host.c_str(),port.c_str(),expect);
	}
	return glocal.ret;
}
</mod>
static int probe (
	int fromvserver,	// This is just the last number of the IP 127.0.0
				// From this, we know the horizon address
	int ipn,		// IP number of the horizon
	int portnum,
	const char *expect,
	unsigned nbechoreq)
{
	string bind = string_f("127.0.0.%d",fromvserver);
	string host = string_f("127.0.0.%d",((fromvserver/10)-1)*10+ipn);
	string port = string_f("%d",portnum+9001);
	return probe (bind,host,port,expect,nbechoreq);
}

<mod>
static void runtest (int nbhorizons, int nbblackholes, unsigned nbechoreq)
{
	string msg;
	for (int i=0; i<NBPORT; i++){
		for (int j=0; j<NBVSERV; j++){
			string msg = string_f ("Welcome to service echo 127.0.0.%d %d\r",40+j,9001+i);
			probe (20+j,0,i,msg.c_str(),nbechoreq);
			probe (40+j,0,i,msg.c_str(),nbechoreq);
		}
	}
	glocal string sshmsg;
	<call tcpconnect>("127.0.0.1","22",5);
	<f init>
	</f>
	<f end>
	</f>
	<f oneline>
		glocal.sshmsg = line;
		end = true;
	</f>
	</call>
	for (int j=0; j<NBVSERV; j++){
		probe (20+j,0,21,glocal.sshmsg.c_str(),0);
	}
}
</mod>

<mod>
int main (int argc, char *argv[])
{
	glocal int ret = -1;
	glocal int nbhorizons = 4;
	glocal int nbblackholes = 1;
	glocal int count = 1;
	glocal int fromvserver = 40;
	glocal int ipnum = 0;
	glocal int portnum = 0;
	glocal bool direct = false;
	glocal unsigned nbechoreq = 1;
	glocal int nbproc = 1;
	glocal.ret = <call tlmpprogram>(argc,argv);
	<f init>
		setproginfo ("testconfig",VERSION
			,"Generates test configurations for the blackhole system\n"
			 "Executes test sequences on these configuration.\n"
			 "\n"
			 "commands are:\n"
			 "\tgen\n"
			 "\ttest\n"
			 "\ttestconnect\n"
			 "\tcompare\n");
		setgrouparg ("Parameters");
		setarg ('b',"nbblackholes","Number of blackhole servers",glocal.nbblackholes,false);
		setarg ('h',"nbhorizons","Number of horizons servers",glocal.nbhorizons,false);
		setarg (' ',"nbport","Number of server ports (9001,...)",NBPORT,false);
		setarg (' ',"nbvserv","Number of vserver per horizon",NBVSERV,false);
		setarg (' ',"nbprotocheck","Number of protocheck services",NBPROTOCHECK,false);
		setarg (' ',"noconproxy","Do not use conproxy",NOCONPROXY,false);
		setarg (' ',"horizon_unixsock","Connects to horizon using unix socket",horizon_unixsock,false);
		setgrouparg ("testconnect parms");
		setarg (' ',"count","Number of repetition",glocal.count,false);
		setarg (' ',"fromvserver","20 40 60",glocal.fromvserver,false);
		setarg (' ',"ipnum","0,1,2,4 horizon ip",glocal.ipnum,false);
		setarg (' ',"portnum","0,1,2... echo server port",glocal.portnum,false);
		setarg (' ',"direct","Test directly to tcpecho, without blackhole",glocal.direct,false);
		setarg (' ',"nbechoreq","Number of echo request after connection",glocal.nbechoreq,false);
		setarg (' ',"nbproc","Number of processes",glocal.nbproc,false);
	</f>
	<f main>
		int ret = -1;
		if (argc != 1){
			usage();
		}else if (strcmp(argv[0],"gen")==0){
			genconfigs (glocal.nbhorizons,glocal.nbblackholes);
			ret = 0;
		}else if (strcmp(argv[0],"test")==0){
			runtest (glocal.nbhorizons,glocal.nbblackholes,glocal.nbechoreq);
			ret = 0;
		}else if (strcmp(argv[0],"testconnect")==0){
			// This test is used to show how many connection we can do using blackhole or directly
			// Connections all succeed with the tcpecho server and response validation is done
			printf ("count=%d nbproc=%d fromvserver=%d ipnum=%d portnum=%d\n"
				,glocal.count,glocal.nbproc,glocal.fromvserver,glocal.ipnum,glocal.portnum);
			int tovserver = glocal.fromvserver;
			if (glocal.fromvserver == 20) tovserver = 40;
			string msg = string_f ("Welcome to service echo 127.0.0.%d %d\r",tovserver,9001+glocal.portnum);
			string bind = "127.0.0.20";
			string host = "127.0.0.21";
			string port = "9001";
			if (glocal.direct) msg = "Welcome to service echo 127.0.0.21 9001\r";
			for (int p=0; p<glocal.nbproc; p++){
				pid_t pid = fork();
				if (pid == (pid_t)0){
					for (int i=0; i<glocal.count; i++){
						if (glocal.direct){
							probe (bind,host,port,msg.c_str(),glocal.nbechoreq);
						}else{
							probe (glocal.fromvserver,glocal.ipnum,glocal.portnum,msg.c_str(),glocal.nbechoreq);
						}
					}
					_exit (0);
				}else if (pid == (pid_t)-1){
					tlmp_error ("Can't fork (%s)\n",strerror(errno));
					exit (-1);
				}
			}
			int st;
			while (wait(&st)!=-1);
			ret = 0;
		}else if (strcmp(argv[0],"testconnectunix")==0){
			// This test is used to show how many connection we can do using blackhole or directly
			// Connections all succeed with the tcpecho server and response validation is done
			printf ("count=%d nbproc=%d fromvserver=%d ipnum=%d portnum=%d\n"
				,glocal.count,glocal.nbproc,glocal.fromvserver,glocal.ipnum,glocal.portnum);
			string msg = "Welcome to service echo unix\r";
			string bind = "127.0.0.23";
			string host = "127.0.0.10";
			string port = "9001";
			if (glocal.portnum != 0){
				if (glocal.portnum == 1){
					bind = "127.0.0.43";
					host = "127.0.0.30";
				}else if (glocal.portnum == 2){
					// Connect to horizon using a unix socket, single horizon
					host = "unix:";
					port = "/tmp/tmp/sock/server0-vserv3.sock";
				}else if (glocal.portnum == 3){
					// Connect to horizon using a unix socket, two horizons
					host = "unix:";
					port = "/tmp/tmp/sock/server1-vserv3.sock";
				}else{
					tlmp_error ("Invalid portnum %d, aborting\n",glocal.portnum);
					exit (-1);
				}
			}else if (glocal.direct){
				// Connect directly to tcpecho, no blackhole
				host = "unix:";
				port = "/tmp/tmp/sock/unix.sock";
			}
			for (int p=0; p<glocal.nbproc; p++){
				pid_t pid = fork();
				if (pid == (pid_t)0){
					for (int i=0; i<glocal.count; i++){
						probe (bind,host,port,msg.c_str(),glocal.nbechoreq);
					}
					_exit (0);
				}else if (pid == (pid_t)-1){
					tlmp_error ("Can't fork (%s)\n",strerror(errno));
					exit (-1);
				}
			}
			int st;
			while (wait(&st)!=-1);
			ret = 0;
		}else if (strcmp(argv[0],"testconnectfail")==0){
			const char *bind = "127.0.0.20";
			const char *host = "127.0.0.11";
			const char *port = "9001";
			if (glocal.direct) port = "9006";
			printf ("count=%d nbproc=%d bind=%s host=%s port=%s\n"
				,glocal.count,glocal.nbproc,bind,host,port);

			for (int p=0; p<glocal.nbproc; p++){
				pid_t pid = fork();
				if (pid == (pid_t)0){
					for (int i=0; i<glocal.count; i++){
						<call tcpconnect>(bind,host,port,1);
						<f init>
							//tlmp_error ("Should not connect\n");
							//end = true;
						</f>
						<f oneline>
							tlmp_error ("Receiving something: %s\n",line);
							end = true;
						</f>
						<f fail>
						</f>
						<f end>
						</f>
						</call>
					}
					_exit (0);
				}else if (pid == (pid_t)-1){
					tlmp_error ("Can't fork (%s)\n",strerror(errno));
					exit (-1);
				}
			}
			int st;
			while (wait(&st)!=-1);
			ret = 0;
		}else{
			tlmp_error ("Invalid command: %s\n",argv[0]);
			usage();
		}
		return ret;
	</f>
	</call>
	return glocal.ret;
}
</mod>