docker-compose.yml

# SPDX-FileCopyrightText: 2020 The tls-interop-runner Authors
# SPDX-License-Identifier: MIT

version: "2.4"

services:
  network:
    image: tls-interop-network
    build: ./network
    container_name: network
    hostname: network
    stdin_open: true
    tty: true
    volumes:
      - ./generated/test-outputs:/test-outputs
    cap_add:
      - NET_ADMIN
    expose:
      - "57832"
    networks:
      clientnet:
        ipv4_address: 193.167.0.2
        ipv6_address: fd00:cafe:cafe:0::2
      servernet:
        ipv4_address: 193.167.100.2
        ipv6_address: fd00:cafe:cafe:100::2

  server:
    image: tls-endpoint-${SERVER}
    build: endpoints/${SERVER}
    container_name: server
    hostname: server
    stdin_open: true
    tty: true
    volumes:
      - ./generated/test-inputs:/test-inputs:ro
      - ./network/endpoint-route-setup.sh:/setup-routes.sh:ro
      - ./generated/test-outputs:/test-outputs
    cap_add:
      - NET_ADMIN
    ulimits:
      memlock: 67108864
    environment:
      - TESTCASE=${TESTCASE}
      - ROLE=server
    depends_on:
      - network
    networks:
      servernet:
        ipv4_address: 193.167.100.100
        ipv6_address: fd00:cafe:cafe:100::100
    extra_hosts:
      - "client:193.167.0.100"

  client:
    image: tls-endpoint-${CLIENT}
    build: endpoints/${CLIENT}
    container_name: client
    hostname: client
    stdin_open: true
    tty: true
    volumes:
      - ./generated/test-inputs:/test-inputs:ro
      - ./network/endpoint-route-setup.sh:/setup-routes.sh:ro
      - ./generated/test-outputs:/test-outputs
    cap_add:
      - NET_ADMIN
    ulimits:
      memlock: 67108864
    environment:
      - TESTCASE=${TESTCASE}
      - ROLE=client
    depends_on:
      - network
      - server
    networks:
      clientnet:
        ipv4_address: 193.167.0.100
        ipv6_address: fd00:cafe:cafe:0::100
    extra_hosts:
      - "example.com:193.167.100.100"

networks:
  clientnet:
    driver: bridge
    driver_opts:
      com.docker.network.bridge.enable_ip_masquerade: 'false'
    enable_ipv6: true
    ipam:
      config:
        - subnet: 193.167.0.0/24
        - subnet: fd00:cafe:cafe:0::/64
  servernet:
    driver: bridge
    driver_opts:
      com.docker.network.bridge.enable_ip_masquerade: 'false'
    enable_ipv6: true
    ipam:
      config:
        - subnet: 193.167.100.0/24
        - subnet: fd00:cafe:cafe:100::/64