docker-compose-slicing-basic-nrf-prox-limit.yaml

# Adapted from docker-compose-slicing-basic-nrf.yaml in https://gitlab.eurecom.fr/oai/cn5g/oai-cn5g-fed
# See README.md in this repo.
version: '3.8'
services:
    mysql:
        cpuset: "0-19"
        container_name: "mysql"
        image: mysql:8.0
        volumes:
            - ./database/oai_db2.sql:/docker-entrypoint-initdb.d/oai_db.sql
            - ./healthscripts/mysql-healthcheck2.sh:/tmp/mysql-healthcheck.sh
        environment:
            - TZ=Europe/Paris
            - MYSQL_DATABASE=oai_db
            - MYSQL_USER=test
            - MYSQL_PASSWORD=test
            - MYSQL_ROOT_PASSWORD=linux
        healthcheck:
            test: /bin/bash -c "/tmp/mysql-healthcheck.sh"
            interval: 10s
            timeout: 5s
            retries: 30
        networks:
            public_net:
                ipv4_address: 192.168.70.131
    oai-nssf:
        cpuset: "0-19"
        container_name: "oai-nssf"
        image: oaisoftwarealliance/oai-nssf:v2.0.1
        expose:
            - 80/tcp
            - 8080/tcp
        volumes:
            - ./conf/slicing_base_config.yaml:/openair-nssf/etc/config.yaml
            - ./conf/nssf_slice_config.yaml:/openair-nssf/etc/nssf_slice_config.yaml
        cap_add:
            - NET_ADMIN
            - SYS_ADMIN
        cap_drop:
            - ALL
        privileged: true
        networks:
            public_net:
                ipv4_address: 192.168.70.132
    oai_udr:
        cpuset: "0-19"
        container_name: "oai-udr"
        image: oaisoftwarealliance/oai-udr:v2.0.1
        expose:
            - 80/tcp
            - 8080/tcp
        volumes:
            - ./conf/slicing_base_config.yaml:/openair-udr/etc/config.yaml
        depends_on:
            - mysql
        networks:
            public_net:
                ipv4_address: 192.168.70.133
    oai_udm:
        cpuset: "0-19"
        container_name: "oai-udm"
        image: oaisoftwarealliance/oai-udm:v2.0.1
        expose:
            - 80/tcp
            - 8080/tcp
        volumes:
            - ./conf/slicing_base_config.yaml:/openair-udm/etc/config.yaml
        depends_on:
            - oai_udr
        networks:
            public_net:
                ipv4_address: 192.168.70.134
    oai_ausf:
        cpuset: "20"
        container_name: "oai-ausf"
        image: oaisoftwarealliance/oai-ausf:v2.0.1
        expose:
            - 80/tcp
            - 8080/tcp
        volumes:
            - ./conf/slicing_base_config.yaml:/openair-ausf/etc/config.yaml
            - /home/user/curl-override/curl-install/lib/libcurl.so.4.8.0:/lib/x86_64-linux-gnu/libcurl-gnutls.so.4.7.0
            - /home/user/ns/prototype/override/ausf-conf/config.yaml:/openair-ausf/etc/config.yaml
        depends_on:
            - oai_udm
        networks:
            public_net:
                ipv4_address: 192.168.70.135
    ausf-prox:
        cpuset: "21"
        container_name: "prox-ausf"
        image: prox
        depends_on:
            - oai_ausf
        privileged: true
        user: "1337:1337"
        network_mode: service:oai_ausf
        environment:
            - LOC_IP=192.168.70.135
            - LOC_SRV_PORT=8080
            - RMT_IP=192.168.70.138
            - RMT_SRV_PORT=8080
            - PROX_PORT=8124
            - REV_PROX_PORT=8123
            - DEBUG=False
            - CLIENTPAD=${CLIENTPAD}
            - PAD=${PAD}
            - SPAD=${SPAD}
            - TIMEPAD1=${TIMEPAD1}
            - TIMEPAD2=${TIMEPAD2}
    oai_nrf_slice12:
        cpuset: "0-19"
        container_name: "oai-nrf-slice12"
        image: oaisoftwarealliance/oai-nrf:v2.0.1
        expose:
            - 80/tcp
            - 8080/tcp
        volumes:
            - ./conf/slicing_slice1_config.yaml:/openair-nrf/etc/config.yaml
        networks:
            public_net:
                ipv4_address: 192.168.70.136
    oai_nrf_slice3:
        cpuset: "0-19"
        container_name: "oai-nrf-slice3"
        image: oaisoftwarealliance/oai-nrf:v2.0.1
        expose:
            - 80/tcp
            - 8080/tcp
        volumes:
            - ./conf/slicing_slice3_config.yaml:/openair-nrf/etc/config.yaml
        networks:
            public_net:
                ipv4_address: 192.168.70.137
    oai_amf:
        cpuset: "22"
        container_name: "oai-amf"
        image: oaisoftwarealliance/oai-amf:v2.0.1
        expose:
            - 80/tcp
            - 8080/tcp
            - 38412/sctp
        volumes:
            - ./conf/slicing_base_config.yaml:/openair-amf/etc/config.yaml
            - /home/user/curl-override/curl-install/lib/libcurl.so.4.8.0:/lib/x86_64-linux-gnu/libcurl-gnutls.so.4.7.0
            - /home/user/ns/prototype/override/amf-conf/config.yaml:/openair-amf/etc/config.yaml
        depends_on:
            - oai_nrf_slice12
            - oai_nrf_slice3
            - oai_ausf
        networks:
            public_net:
                ipv4_address: 192.168.70.138
    amf-prox:
        cpuset: "23"
        container_name: "prox-amf"
        image: prox
        depends_on:
            - oai_amf
        privileged: true
        user: "1337:1337"
        network_mode: service:oai_amf
        environment:
            - LOC_IP=192.168.70.138
            - LOC_SRV_PORT=8080
            - RMT_IP=192.168.70.135
            - RMT_SRV_PORT=8080
            - PROX_PORT=8124
            - REV_PROX_PORT=8123
            - DEBUG=False
            - CLIENTPAD=${CLIENTPAD} #True
            - SERVERPAD=${SERVERPAD} #--pad
            - PAD=${PAD}
            - SPAD=${SPAD}
            - TIMEPAD1=${TIMEPAD1}
            - TIMEPAD2=${TIMEPAD2}
    oai_smf_slice1:
        cpuset: "0-19"
        container_name: "oai-smf-slice1"
        image: oaisoftwarealliance/oai-smf:v2.0.1
        expose:
            - 80/tcp
            - 8080/tcp
            - 8805/udp
        volumes:
            - ./conf/slicing_slice1_config.yaml:/openair-smf/etc/config.yaml
        depends_on:
            - oai_amf
            - oai_nrf_slice12
        networks:
            public_net:
                ipv4_address: 192.168.70.139
    oai_smf_slice2:
        cpuset: "0-19"
        container_name: "oai-smf-slice2"
        image: oaisoftwarealliance/oai-smf:v2.0.1
        expose:
            - 80/tcp
            - 8080/tcp
            - 8805/udp
        volumes:
            - ./conf/slicing_slice2_config.yaml:/openair-smf/etc/config.yaml
        depends_on:
            - oai_amf
            - oai_nrf_slice12
        networks:
            public_net:
                ipv4_address: 192.168.70.140
    oai_smf_slice3:
        cpuset: "0-19"
        container_name: "oai-smf-slice3"
        image: oaisoftwarealliance/oai-smf:v2.0.1
        expose:
            - 80/tcp
            - 8080/tcp
            - 8805/udp
        volumes:
            - ./conf/slicing_slice3_config.yaml:/openair-smf/etc/config.yaml
        depends_on:
            - oai_amf
            - oai_nrf_slice3
        extra_hosts:
            - "vpp-upf.node.5gcn.mnc95.mcc208.3gppnetwork.org:192.168.70.201"
        networks:
            public_net:
                ipv4_address: 192.168.70.141
    oai_upf_slice1:
        cpuset: "0-19"
        container_name: "oai-upf-slice1"
        image: oaisoftwarealliance/oai-upf:v2.0.1
        expose:
            - 2152/udp
            - 8805/udp
            - 8080/tcp
        volumes:
            - ./conf/slicing_slice1_config.yaml:/openair-upf/etc/config.yaml
        environment:
            - TZ=Europe/Paris
        depends_on:
            - oai_nrf_slice12
            - oai_smf_slice1
        cap_add:
            - NET_ADMIN
            - SYS_ADMIN
        cap_drop:
            - ALL
        privileged: true
        networks:
            public_net:
                ipv4_address: 192.168.70.142
    oai_upf_slice2:
        cpuset: "0-19"
        container_name: "oai-upf-slice2"
        image: oaisoftwarealliance/oai-upf:v2.0.1
        expose:
            - 2152/udp
            - 8805/udp
            - 8080/tcp
        volumes:
            - ./conf/slicing_slice2_config.yaml:/openair-upf/etc/config.yaml
        environment:
            - TZ=Europe/Paris
        depends_on:
            - oai_nrf_slice12
            - oai_smf_slice2
        cap_add:
            - NET_ADMIN
            - SYS_ADMIN
        cap_drop:
            - ALL
        privileged: true
        networks:
            public_net:
                ipv4_address: 192.168.70.143
    vpp_upf_slice3:
        cpuset: "0-19"
        container_name: "vpp-upf-slice3"
        image: oaisoftwarealliance/oai-upf-vpp:v2.0.1
        privileged: true
        environment:
            - IF_1_IP=192.168.70.201
            - IF_1_TYPE=N4
            - IF_2_IP=192.168.72.201
            - IF_2_TYPE=N3
            - IF_2_NWI=access.oai.org
            - IF_3_IP=192.168.73.201
            - IF_3_TYPE=N6
            - IF_3_IP_REMOTE=192.168.73.145 # EXT-DN IP Address
            - IF_3_NWI=internet.oai.org
            - NAME=VPP-UPF
            - MNC=95
            - MCC=208
            - REALM=3gppnetwork.org
            - VPP_MAIN_CORE=0
            - VPP_CORE_WORKER=1
#           - VPP_PLUGIN_PATH=/usr/lib64/vpp_plugins/                # RHEL7
            - VPP_PLUGIN_PATH=/usr/lib/x86_64-linux-gnu/vpp_plugins/
            - SNSSAI_SD=130
            - SNSSAI_SST=130
            - DNN=oai.ipv4
            - REGISTER_NRF=yes
            - NRF_IP_ADDR=192.168.70.137
            - NRF_PORT=8080
            - HTTP_VERSION=2
        depends_on:
            - oai_nrf_slice3
            - oai_smf_slice3
        healthcheck:
            test: /bin/bash -c "pgrep vpp"
            interval: 10s
            timeout: 5s
            retries: 5
        networks:
            public_net:
                ipv4_address: 192.168.70.144
            public_net_access:
                ipv4_address: 192.168.72.144
            public_net_core:
                ipv4_address: 192.168.73.144
        deploy:
          resources:
            limits:
              cpus: '0.5'
        #      memory: 50M
    oai_ext_dn:
        cpuset: "0-19"
        image: oaisoftwarealliance/trf-gen-cn5g:latest
        privileged: true
        init: true
        container_name: oai-ext-dn
        entrypoint: /bin/bash -c \
              "iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE;"\
              "ip route add 12.2.1.2/32 via 192.168.70.142 dev eth0;"\
              "ip route add 12.1.1.130/32 via 192.168.70.143 dev eth0;"\
              "ip route add 12.1.1.2/32 via 192.168.73.201 dev eth1; ip route; sleep infinity"
        command: ["/bin/bash", "-c", "trap : SIGTERM SIGINT; sleep infinity & wait"]
        healthcheck:
            test: /bin/bash -c "iptables -L -t nat | grep MASQUERADE"
            interval: 10s
            timeout: 5s
            retries: 10
        networks:
            public_net:
                ipv4_address: 192.168.70.145
            public_net_core:
                ipv4_address: 192.168.73.145
networks:
    public_net:
        driver: bridge
        name: demo-oai-public-net
        ipam:
            config:
                - subnet: 192.168.70.0/24
        driver_opts:
            com.docker.network.bridge.name: "demo-oai"
    public_net_access:
        name: oai-public-access
        ipam:
            config:
                - subnet: 192.168.72.0/24
        driver_opts:
            com.docker.network.bridge.name: "cn5g-access"
    public_net_core:
        name: oai-public-core
        ipam:
            config:
                - subnet: 192.168.73.0/24
        driver_opts:
            com.docker.network.bridge.name: "cn5g-core"