tjh.dev
Linux kernel mirror (for testing)
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel
os
linux
1#!/bin/bash
2# SPDX-License-Identifier: GPL-2.0
3
4# +-----------------------+ +------------------------+
5# | H1 (vrf) | | H2 (vrf) |
6# | + $h1 | | + $h2 |
7# | | 192.0.2.1/28 | | | 192.0.2.2/28 |
8# | | 2001:db8:1::1/64 | | | 2001:db8:1::2/64 |
9# +----|------------------+ +----|-------------------+
10# | |
11# +----|--------------------------------------------------|-------------------+
12# | SW | | |
13# | +--|--------------------------------------------------|-----------------+ |
14# | | + $swp1 BR1 (802.1d) + $swp2 | |
15# | | | |
16# | | + vx1 (vxlan) | |
17# | | local 2001:db8:3::1 | |
18# | | remote 2001:db8:4::1 2001:db8:5::1 | |
19# | | id 1000 dstport $VXPORT | |
20# | +-----------------------------------------------------------------------+ |
21# | |
22# | 2001:db8:4::0/64 via 2001:db8:3::2 |
23# | 2001:db8:5::0/64 via 2001:db8:3::2 |
24# | |
25# | + $rp1 |
26# | | 2001:db8:3::1/64 |
27# +----|----------------------------------------------------------------------+
28# |
29# +----|----------------------------------------------------------+
30# | | VRP2 (vrf) |
31# | + $rp2 |
32# | 2001:db8:3::2/64 |
33# | | (maybe) HW
34# =============================================================================
35# | | (likely) SW
36# | + v1 (veth) + v3 (veth) |
37# | | 2001:db8:4::2/64 | 2001:db8:5::2/64 |
38# +----|---------------------------------------|------------------+
39# | |
40# +----|--------------------------------+ +----|-------------------------------+
41# | + v2 (veth) NS1 (netns) | | + v4 (veth) NS2 (netns) |
42# | 2001:db8:4::1/64 | | 2001:db8:5::1/64 |
43# | | | |
44# | 2001:db8:3::0/64 via 2001:db8:4::2 | | 2001:db8:3::0/64 via 2001:db8:5::2 |
45# | 2001:db8:5::1/128 via 2001:db8:4::2 | | 2001:db8:4::1/128 via |
46# | | | 2001:db8:5::2 |
47# | | | |
48# | +-------------------------------+ | | +-------------------------------+ |
49# | | BR2 (802.1d) | | | | BR2 (802.1d) | |
50# | | + vx2 (vxlan) | | | | + vx2 (vxlan) | |
51# | | local 2001:db8:4::1 | | | | local 2001:db8:5::1 | |
52# | | remote 2001:db8:3::1 | | | | remote 2001:db8:3::1 | |
53# | | remote 2001:db8:5::1 | | | | remote 2001:db8:4::1 | |
54# | | id 1000 dstport $VXPORT | | | | id 1000 dstport $VXPORT | |
55# | | | | | | | |
56# | | + w1 (veth) | | | | + w1 (veth) | |
57# | +--|----------------------------+ | | +--|----------------------------+ |
58# | | | | | |
59# | +--|----------------------------+ | | +--|----------------------------+ |
60# | | + w2 (veth) VW2 (vrf) | | | | + w2 (veth) VW2 (vrf) | |
61# | | 192.0.2.3/28 | | | | 192.0.2.4/28 | |
62# | | 2001:db8:1::3/64 | | | | 2001:db8:1::4/64 | |
63# | +-------------------------------+ | | +-------------------------------+ |
64# +-------------------------------------+ +------------------------------------+
65
66: ${VXPORT:=4789}
67export VXPORT
68
69: ${ALL_TESTS:="
70 ping_ipv4
71 ping_ipv6
72 test_flood
73 test_unicast
74 test_ttl
75 test_tos
76 test_ecn_encap
77 test_ecn_decap
78 reapply_config
79 ping_ipv4
80 ping_ipv6
81 test_flood
82 test_unicast
83"}
84
85NUM_NETIFS=6
86source lib.sh
87source tc_common.sh
88
89h1_create()
90{
91 simple_if_init $h1 192.0.2.1/28 2001:db8:1::1/64
92 tc qdisc add dev $h1 clsact
93}
94
95h1_destroy()
96{
97 tc qdisc del dev $h1 clsact
98 simple_if_fini $h1 192.0.2.1/28 2001:db8:1::1/64
99}
100
101h2_create()
102{
103 simple_if_init $h2 192.0.2.2/28 2001:db8:1::2/64
104 tc qdisc add dev $h2 clsact
105}
106
107h2_destroy()
108{
109 tc qdisc del dev $h2 clsact
110 simple_if_fini $h2 192.0.2.2/28 2001:db8:1::2/64
111}
112
113rp1_set_addr()
114{
115 ip address add dev $rp1 2001:db8:3::1/64
116
117 ip route add 2001:db8:4::0/64 nexthop via 2001:db8:3::2
118 ip route add 2001:db8:5::0/64 nexthop via 2001:db8:3::2
119}
120
121rp1_unset_addr()
122{
123 ip route del 2001:db8:5::0/64 nexthop via 2001:db8:3::2
124 ip route del 2001:db8:4::0/64 nexthop via 2001:db8:3::2
125
126 ip address del dev $rp1 2001:db8:3::1/64
127}
128
129switch_create()
130{
131 ip link add name br1 type bridge vlan_filtering 0 mcast_snooping 0
132 # Make sure the bridge uses the MAC address of the local port and not
133 # that of the VxLAN's device.
134 ip link set dev br1 address $(mac_get $swp1)
135 ip link set dev br1 up
136
137 ip link set dev $rp1 up
138 rp1_set_addr
139 tc qdisc add dev $rp1 clsact
140
141 ip link add name vx1 type vxlan id 1000 local 2001:db8:3::1 \
142 dstport "$VXPORT" nolearning udp6zerocsumrx udp6zerocsumtx \
143 tos inherit ttl 100
144 ip link set dev vx1 up
145
146 ip link set dev vx1 master br1
147 ip link set dev $swp1 master br1
148 ip link set dev $swp1 up
149 tc qdisc add dev $swp1 clsact
150
151 ip link set dev $swp2 master br1
152 ip link set dev $swp2 up
153
154 bridge fdb append dev vx1 00:00:00:00:00:00 dst 2001:db8:4::1 self
155 bridge fdb append dev vx1 00:00:00:00:00:00 dst 2001:db8:5::1 self
156}
157
158switch_destroy()
159{
160 bridge fdb del dev vx1 00:00:00:00:00:00 dst 2001:db8:5::1 self
161 bridge fdb del dev vx1 00:00:00:00:00:00 dst 2001:db8:4::1 self
162
163 ip link set dev $swp2 down
164 ip link set dev $swp2 nomaster
165
166 tc qdisc del dev $swp1 clsact
167 ip link set dev $swp1 down
168 ip link set dev $swp1 nomaster
169
170 ip link set dev vx1 nomaster
171 ip link set dev vx1 down
172 ip link del dev vx1
173
174 tc qdisc del dev $rp1 clsact
175 rp1_unset_addr
176 ip link set dev $rp1 down
177
178 ip link set dev br1 down
179 ip link del dev br1
180}
181
182vrp2_create()
183{
184 simple_if_init $rp2 2001:db8:3::2/64
185 __simple_if_init v1 v$rp2 2001:db8:4::2/64
186 __simple_if_init v3 v$rp2 2001:db8:5::2/64
187 tc qdisc add dev v1 clsact
188}
189
190vrp2_destroy()
191{
192 tc qdisc del dev v1 clsact
193 __simple_if_fini v3 2001:db8:5::2/64
194 __simple_if_fini v1 2001:db8:4::2/64
195 simple_if_fini $rp2 2001:db8:3::2/64
196}
197
198ns_init_common()
199{
200 local in_if=$1; shift
201 local in_addr=$1; shift
202 local other_in_addr=$1; shift
203 local nh_addr=$1; shift
204 local host_addr_ipv4=$1; shift
205 local host_addr_ipv6=$1; shift
206
207 ip link set dev $in_if up
208 ip address add dev $in_if $in_addr/64
209 tc qdisc add dev $in_if clsact
210
211 ip link add name br2 type bridge vlan_filtering 0
212 ip link set dev br2 up
213
214 ip link add name w1 type veth peer name w2
215
216 ip link set dev w1 master br2
217 ip link set dev w1 up
218
219 ip link add name vx2 type vxlan id 1000 local $in_addr \
220 dstport "$VXPORT" udp6zerocsumrx
221 ip link set dev vx2 up
222 bridge fdb append dev vx2 00:00:00:00:00:00 dst 2001:db8:3::1 self
223 bridge fdb append dev vx2 00:00:00:00:00:00 dst $other_in_addr self
224
225 ip link set dev vx2 master br2
226 tc qdisc add dev vx2 clsact
227
228 simple_if_init w2 $host_addr_ipv4/28 $host_addr_ipv6/64
229
230 ip route add 2001:db8:3::0/64 nexthop via $nh_addr
231 ip route add $other_in_addr/128 nexthop via $nh_addr
232}
233export -f ns_init_common
234
235ns1_create()
236{
237 ip netns add ns1
238 ip link set dev v2 netns ns1
239 in_ns ns1 \
240 ns_init_common v2 2001:db8:4::1 2001:db8:5::1 2001:db8:4::2 \
241 192.0.2.3 2001:db8:1::3
242}
243
244ns1_destroy()
245{
246 ip netns exec ns1 ip link set dev v2 netns 1
247 ip netns del ns1
248}
249
250ns2_create()
251{
252 ip netns add ns2
253 ip link set dev v4 netns ns2
254 in_ns ns2 \
255 ns_init_common v4 2001:db8:5::1 2001:db8:4::1 2001:db8:5::2 \
256 192.0.2.4 2001:db8:1::4
257}
258
259ns2_destroy()
260{
261 ip netns exec ns2 ip link set dev v4 netns 1
262 ip netns del ns2
263}
264
265setup_prepare()
266{
267 h1=${NETIFS[p1]}
268 swp1=${NETIFS[p2]}
269
270 swp2=${NETIFS[p3]}
271 h2=${NETIFS[p4]}
272
273 rp1=${NETIFS[p5]}
274 rp2=${NETIFS[p6]}
275
276 vrf_prepare
277 forwarding_enable
278
279 h1_create
280 h2_create
281 switch_create
282
283 ip link add name v1 type veth peer name v2
284 ip link add name v3 type veth peer name v4
285 vrp2_create
286 ns1_create
287 ns2_create
288
289 r1_mac=$(in_ns ns1 mac_get w2)
290 r2_mac=$(in_ns ns2 mac_get w2)
291 h2_mac=$(mac_get $h2)
292}
293
294cleanup()
295{
296 pre_cleanup
297
298 ns2_destroy
299 ns1_destroy
300 vrp2_destroy
301 ip link del dev v3
302 ip link del dev v1
303
304 switch_destroy
305 h2_destroy
306 h1_destroy
307
308 forwarding_restore
309 vrf_cleanup
310}
311
312# For the first round of tests, vx1 is the first device to get
313# attached to the bridge, and at that point the local IP is already
314# configured. Try the other scenario of attaching the devices to a an
315# already-offloaded bridge, and only then assign the local IP.
316reapply_config()
317{
318 log_info "Reapplying configuration"
319
320 bridge fdb del dev vx1 00:00:00:00:00:00 dst 2001:db8:5::1 self
321 bridge fdb del dev vx1 00:00:00:00:00:00 dst 2001:db8:4::1 self
322 ip link set dev vx1 nomaster
323 rp1_unset_addr
324 sleep 5
325
326 ip link set dev vx1 master br1
327 bridge fdb append dev vx1 00:00:00:00:00:00 dst 2001:db8:4::1 self
328 bridge fdb append dev vx1 00:00:00:00:00:00 dst 2001:db8:5::1 self
329 sleep 1
330 rp1_set_addr
331 sleep 5
332}
333
334__ping_ipv4()
335{
336 local vxlan_local_ip=$1; shift
337 local vxlan_remote_ip=$1; shift
338 local src_ip=$1; shift
339 local dst_ip=$1; shift
340 local dev=$1; shift
341 local info=$1; shift
342
343 RET=0
344
345 tc filter add dev $rp1 egress protocol ipv6 pref 1 handle 101 \
346 flower ip_proto udp src_ip $vxlan_local_ip \
347 dst_ip $vxlan_remote_ip dst_port $VXPORT $TC_FLAG action pass
348 # Match ICMP-reply packets after decapsulation, so source IP is
349 # destination IP of the ping and destination IP is source IP of the
350 # ping.
351 tc filter add dev $swp1 egress protocol ip pref 1 handle 101 \
352 flower src_ip $dst_ip dst_ip $src_ip \
353 $TC_FLAG action pass
354
355 # Send 100 packets and verify that at least 100 packets hit the rule,
356 # to overcome ARP noise.
357 PING_COUNT=100 PING_TIMEOUT=11 ping_do $dev $dst_ip
358 check_err $? "Ping failed"
359
360 tc_check_at_least_x_packets "dev $rp1 egress" 101 10 100
361 check_err $? "Encapsulated packets did not go through router"
362
363 tc_check_at_least_x_packets "dev $swp1 egress" 101 10 100
364 check_err $? "Decapsulated packets did not go through switch"
365
366 log_test "ping: $info"
367
368 tc filter del dev $swp1 egress
369 tc filter del dev $rp1 egress
370}
371
372ping_ipv4()
373{
374 RET=0
375
376 local local_sw_ip=2001:db8:3::1
377 local remote_ns1_ip=2001:db8:4::1
378 local remote_ns2_ip=2001:db8:5::1
379 local h1_ip=192.0.2.1
380 local w2_ns1_ip=192.0.2.3
381 local w2_ns2_ip=192.0.2.4
382
383 ping_test $h1 192.0.2.2 ": local->local"
384
385 __ping_ipv4 $local_sw_ip $remote_ns1_ip $h1_ip $w2_ns1_ip $h1 \
386 "local->remote 1"
387 __ping_ipv4 $local_sw_ip $remote_ns2_ip $h1_ip $w2_ns2_ip $h1 \
388 "local->remote 2"
389}
390
391__ping_ipv6()
392{
393 local vxlan_local_ip=$1; shift
394 local vxlan_remote_ip=$1; shift
395 local src_ip=$1; shift
396 local dst_ip=$1; shift
397 local dev=$1; shift
398 local info=$1; shift
399
400 RET=0
401
402 tc filter add dev $rp1 egress protocol ipv6 pref 1 handle 101 \
403 flower ip_proto udp src_ip $vxlan_local_ip \
404 dst_ip $vxlan_remote_ip dst_port $VXPORT $TC_FLAG action pass
405 # Match ICMP-reply packets after decapsulation, so source IP is
406 # destination IP of the ping and destination IP is source IP of the
407 # ping.
408 tc filter add dev $swp1 egress protocol ipv6 pref 1 handle 101 \
409 flower src_ip $dst_ip dst_ip $src_ip $TC_FLAG action pass
410
411 # Send 100 packets and verify that at least 100 packets hit the rule,
412 # to overcome neighbor discovery noise.
413 PING_COUNT=100 PING_TIMEOUT=11 ping6_do $dev $dst_ip
414 check_err $? "Ping failed"
415
416 tc_check_at_least_x_packets "dev $rp1 egress" 101 100
417 check_err $? "Encapsulated packets did not go through router"
418
419 tc_check_at_least_x_packets "dev $swp1 egress" 101 100
420 check_err $? "Decapsulated packets did not go through switch"
421
422 log_test "ping6: $info"
423
424 tc filter del dev $swp1 egress
425 tc filter del dev $rp1 egress
426}
427
428ping_ipv6()
429{
430 RET=0
431
432 local local_sw_ip=2001:db8:3::1
433 local remote_ns1_ip=2001:db8:4::1
434 local remote_ns2_ip=2001:db8:5::1
435 local h1_ip=2001:db8:1::1
436 local w2_ns1_ip=2001:db8:1::3
437 local w2_ns2_ip=2001:db8:1::4
438
439 ping6_test $h1 2001:db8:1::2 ": local->local"
440
441 __ping_ipv6 $local_sw_ip $remote_ns1_ip $h1_ip $w2_ns1_ip $h1 \
442 "local->remote 1"
443 __ping_ipv6 $local_sw_ip $remote_ns2_ip $h1_ip $w2_ns2_ip $h1 \
444 "local->remote 2"
445}
446
447maybe_in_ns()
448{
449 echo ${1:+in_ns} $1
450}
451
452__flood_counter_add_del()
453{
454 local add_del=$1; shift
455 local dst_ip=$1; shift
456 local dev=$1; shift
457 local ns=$1; shift
458
459 # Putting the ICMP capture both to HW and to SW will end up
460 # double-counting the packets that are trapped to slow path, such as for
461 # the unicast test. Adding either skip_hw or skip_sw fixes this problem,
462 # but with skip_hw, the flooded packets are not counted at all, because
463 # those are dropped due to MAC address mismatch; and skip_sw is a no-go
464 # for veth-based topologies.
465 #
466 # So try to install with skip_sw and fall back to skip_sw if that fails.
467
468 $(maybe_in_ns $ns) tc filter $add_del dev "$dev" ingress \
469 proto ipv6 pref 100 flower dst_ip $dst_ip ip_proto \
470 icmpv6 skip_sw action pass 2>/dev/null || \
471 $(maybe_in_ns $ns) tc filter $add_del dev "$dev" ingress \
472 proto ipv6 pref 100 flower dst_ip $dst_ip ip_proto \
473 icmpv6 skip_hw action pass
474}
475
476flood_counter_install()
477{
478 __flood_counter_add_del add "$@"
479}
480
481flood_counter_uninstall()
482{
483 __flood_counter_add_del del "$@"
484}
485
486flood_fetch_stat()
487{
488 local dev=$1; shift
489 local ns=$1; shift
490
491 $(maybe_in_ns $ns) tc_rule_stats_get $dev 100 ingress
492}
493
494flood_fetch_stats()
495{
496 local counters=("${@}")
497 local counter
498
499 for counter in "${counters[@]}"; do
500 flood_fetch_stat $counter
501 done
502}
503
504vxlan_flood_test()
505{
506 local mac=$1; shift
507 local dst=$1; shift
508 local -a expects=("${@}")
509
510 local -a counters=($h2 "vx2 ns1" "vx2 ns2")
511 local counter
512 local key
513
514 for counter in "${counters[@]}"; do
515 flood_counter_install $dst $counter
516 done
517
518 local -a t0s=($(flood_fetch_stats "${counters[@]}"))
519 $MZ -6 $h1 -c 10 -d 100msec -p 64 -b $mac -B $dst -t icmp6 type=128 -q
520 sleep 1
521 local -a t1s=($(flood_fetch_stats "${counters[@]}"))
522
523 for key in ${!t0s[@]}; do
524 local delta=$((t1s[$key] - t0s[$key]))
525 local expect=${expects[$key]}
526
527 ((expect == delta))
528 check_err $? "${counters[$key]}: Expected to capture $expect packets, got $delta."
529 done
530
531 for counter in "${counters[@]}"; do
532 flood_counter_uninstall $dst $counter
533 done
534}
535
536__test_flood()
537{
538 local mac=$1; shift
539 local dst=$1; shift
540 local what=$1; shift
541
542 RET=0
543
544 vxlan_flood_test $mac $dst 10 10 10
545
546 log_test "VXLAN: $what"
547}
548
549test_flood()
550{
551 __test_flood de:ad:be:ef:13:37 2001:db8:1::100 "flood"
552}
553
554vxlan_fdb_add_del()
555{
556 local add_del=$1; shift
557 local mac=$1; shift
558 local dev=$1; shift
559 local dst=$1; shift
560
561 bridge fdb $add_del dev $dev $mac self static permanent \
562 ${dst:+dst} $dst 2>/dev/null
563 bridge fdb $add_del dev $dev $mac master static 2>/dev/null
564}
565
566__test_unicast()
567{
568 local mac=$1; shift
569 local dst=$1; shift
570 local hit_idx=$1; shift
571 local what=$1; shift
572
573 RET=0
574
575 local -a expects=(0 0 0)
576 expects[$hit_idx]=10
577
578 vxlan_flood_test $mac $dst "${expects[@]}"
579
580 log_test "VXLAN: $what"
581}
582
583test_unicast()
584{
585 local -a targets=("$h2_mac $h2"
586 "$r1_mac vx1 2001:db8:4::1"
587 "$r2_mac vx1 2001:db8:5::1")
588 local target
589
590 for target in "${targets[@]}"; do
591 vxlan_fdb_add_del add $target
592 done
593
594 __test_unicast $h2_mac 2001:db8:1::2 0 "local MAC unicast"
595 __test_unicast $r1_mac 2001:db8:1::3 1 "remote MAC 1 unicast"
596 __test_unicast $r2_mac 2001:db8:1::4 2 "remote MAC 2 unicast"
597
598 for target in "${targets[@]}"; do
599 vxlan_fdb_add_del del $target
600 done
601}
602
603vxlan_ping_test()
604{
605 local ping_dev=$1; shift
606 local ping_dip=$1; shift
607 local ping_args=$1; shift
608 local capture_dev=$1; shift
609 local capture_dir=$1; shift
610 local capture_pref=$1; shift
611 local expect=$1; shift
612
613 local t0=$(tc_rule_stats_get $capture_dev $capture_pref $capture_dir)
614 ping6_do $ping_dev $ping_dip "$ping_args"
615 local t1=$(tc_rule_stats_get $capture_dev $capture_pref $capture_dir)
616 local delta=$((t1 - t0))
617
618 # Tolerate a couple stray extra packets.
619 ((expect <= delta && delta <= expect + 2))
620 check_err $? "$capture_dev: Expected to capture $expect packets, got $delta."
621}
622
623test_ttl()
624{
625 RET=0
626
627 tc filter add dev v1 egress pref 77 protocol ipv6 \
628 flower ip_ttl 99 action pass
629 vxlan_ping_test $h1 2001:db8:1::3 "" v1 egress 77 10
630 tc filter del dev v1 egress pref 77 protocol ipv6
631
632 log_test "VXLAN: envelope TTL"
633}
634
635test_tos()
636{
637 RET=0
638
639 tc filter add dev v1 egress pref 77 protocol ipv6 \
640 flower ip_tos 0x14 action pass
641 vxlan_ping_test $h1 2001:db8:1::3 "-Q 0x14" v1 egress 77 10
642 vxlan_ping_test $h1 2001:db8:1::3 "-Q 0x18" v1 egress 77 0
643 tc filter del dev v1 egress pref 77 protocol ipv6
644
645 log_test "VXLAN: envelope TOS inheritance"
646}
647
648__test_ecn_encap()
649{
650 local q=$1; shift
651 local tos=$1; shift
652
653 RET=0
654
655 tc filter add dev v1 egress pref 77 protocol ipv6 \
656 flower ip_tos $tos action pass
657 sleep 1
658 vxlan_ping_test $h1 2001:db8:1::3 "-Q $q" v1 egress 77 10
659 tc filter del dev v1 egress pref 77 protocol ipv6
660
661 log_test "VXLAN: ECN encap: $q->$tos"
662}
663
664test_ecn_encap()
665{
666 # In accordance with INET_ECN_encapsulate()
667 __test_ecn_encap 0x00 0x00
668 __test_ecn_encap 0x01 0x01
669 __test_ecn_encap 0x02 0x02
670 __test_ecn_encap 0x03 0x02
671}
672
673vxlan_encapped_ping_do()
674{
675 local count=$1; shift
676 local dev=$1; shift
677 local next_hop_mac=$1; shift
678 local dest_ip=$1; shift
679 local dest_mac=$1; shift
680 local inner_tos=$1; shift
681 local outer_tos=$1; shift
682 local saddr="20:01:0d:b8:00:01:00:00:00:00:00:00:00:00:00:03"
683 local daddr="20:01:0d:b8:00:01:00:00:00:00:00:00:00:00:00:01"
684
685 $MZ -6 $dev -c $count -d 100msec -q \
686 -b $next_hop_mac -B $dest_ip \
687 -t udp tos=$outer_tos,sp=23456,dp=$VXPORT,p=$(:
688 )"08:"$( : VXLAN flags
689 )"00:00:00:"$( : VXLAN reserved
690 )"00:03:e8:"$( : VXLAN VNI
691 )"00:"$( : VXLAN reserved
692 )"$dest_mac:"$( : ETH daddr
693 )"$(mac_get w2):"$( : ETH saddr
694 )"86:dd:"$( : ETH type
695 )"6"$( : IP version
696 )"$inner_tos"$( : Traffic class
697 )"0:00:00:"$( : Flow label
698 )"00:08:"$( : Payload length
699 )"3a:"$( : Next header
700 )"04:"$( : Hop limit
701 )"$saddr:"$( : IP saddr
702 )"$daddr:"$( : IP daddr
703 )"80:"$( : ICMPv6.type
704 )"00:"$( : ICMPv6.code
705 )"00:"$( : ICMPv6.checksum
706 )
707}
708export -f vxlan_encapped_ping_do
709
710vxlan_encapped_ping_test()
711{
712 local ping_dev=$1; shift
713 local nh_dev=$1; shift
714 local ping_dip=$1; shift
715 local inner_tos=$1; shift
716 local outer_tos=$1; shift
717 local stat_get=$1; shift
718 local expect=$1; shift
719
720 local t0=$($stat_get)
721
722 in_ns ns1 \
723 vxlan_encapped_ping_do 10 $ping_dev $(mac_get $nh_dev) \
724 $ping_dip $(mac_get $h1) \
725 $inner_tos $outer_tos
726 sleep 1
727 local t1=$($stat_get)
728 local delta=$((t1 - t0))
729
730 # Tolerate a couple stray extra packets.
731 ((expect <= delta && delta <= expect + 2))
732 check_err $? "Expected to capture $expect packets, got $delta."
733}
734export -f vxlan_encapped_ping_test
735
736__test_ecn_decap()
737{
738 local orig_inner_tos=$1; shift
739 local orig_outer_tos=$1; shift
740 local decapped_tos=$1; shift
741
742 RET=0
743
744 tc filter add dev $h1 ingress pref 77 protocol ipv6 \
745 flower src_ip 2001:db8:1::3 dst_ip 2001:db8:1::1 \
746 ip_tos $decapped_tos action drop
747 sleep 1
748 vxlan_encapped_ping_test v2 v1 2001:db8:3::1 \
749 $orig_inner_tos $orig_outer_tos \
750 "tc_rule_stats_get $h1 77 ingress" 10
751 tc filter del dev $h1 ingress pref 77
752
753 log_test "VXLAN: ECN decap: $orig_outer_tos/$orig_inner_tos->$decapped_tos"
754}
755
756test_ecn_decap_error()
757{
758 local orig_inner_tos="0:0"
759 local orig_outer_tos=03
760
761 RET=0
762
763 vxlan_encapped_ping_test v2 v1 2001:db8:3::1 \
764 $orig_inner_tos $orig_outer_tos \
765 "link_stats_rx_errors_get vx1" 10
766
767 log_test "VXLAN: ECN decap: $orig_outer_tos/$orig_inner_tos->error"
768}
769
770test_ecn_decap()
771{
772 # In accordance with INET_ECN_decapsulate()
773 __test_ecn_decap "0:0" 00 0x00
774 __test_ecn_decap "0:0" 01 0x00
775 __test_ecn_decap "0:0" 02 0x00
776 # 00 03 is tested in test_ecn_decap_error()
777 __test_ecn_decap "0:1" 00 0x01
778 __test_ecn_decap "0:1" 01 0x01
779 __test_ecn_decap "0:1" 02 0x01
780 __test_ecn_decap "0:1" 03 0x03
781 __test_ecn_decap "0:2" 00 0x02
782 __test_ecn_decap "0:2" 01 0x01
783 __test_ecn_decap "0:2" 02 0x02
784 __test_ecn_decap "0:2" 03 0x03
785 __test_ecn_decap "0:3" 00 0x03
786 __test_ecn_decap "0:3" 01 0x03
787 __test_ecn_decap "0:3" 02 0x03
788 __test_ecn_decap "0:3" 03 0x03
789 test_ecn_decap_error
790}
791
792test_all()
793{
794 log_info "Running tests with UDP port $VXPORT"
795 tests_run
796}
797
798trap cleanup EXIT
799
800setup_prepare
801setup_wait
802test_all
803
804exit $EXIT_STATUS