tjh.dev
Linux kernel mirror (for testing)
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel
os
linux
selftests: netfilter: add ipvs test script
Test virutal server via directing routing for IPv4.
Tested:
# selftests: netfilter: ipvs.sh
# Testing DR mode...
# ipvs.sh: PASS
ok 6 selftests: netfilter: ipvs.sh
Signed-off-by: Haishuang Yan <yanhaishuang@cmss.chinamobile.com>
Signed-off-by: Simon Horman <horms@verge.net.au>
authored by
Haishuang Yan
and committed by
Simon Horman
867d2190
ac524481
+179
-1
+1
-1
tools/testing/selftests/netfilter/Makefile
+1
-1
tools/testing/selftests/netfilter/Makefile
+178
tools/testing/selftests/netfilter/ipvs.sh
+178
tools/testing/selftests/netfilter/ipvs.sh
···
1
+
#!/bin/sh
2
+
# SPDX-License-Identifier: GPL-2.0
3
+
#
4
+
# End-to-end ipvs test suite
5
+
# Topology:
6
+
#--------------------------------------------------------------+
7
+
# | |
8
+
# ns0 | ns1 |
9
+
# ----------- | ----------- ----------- |
10
+
# | veth01 | --------- | veth10 | | veth12 | |
11
+
# ----------- peer ----------- ----------- |
12
+
# | | | |
13
+
# ----------- | | |
14
+
# | br0 | |----------------- peer |--------------|
15
+
# ----------- | | |
16
+
# | | | |
17
+
# ---------- peer ---------- ----------- |
18
+
# | veth02 | --------- | veth20 | | veth21 | |
19
+
# ---------- | ---------- ----------- |
20
+
# | ns2 |
21
+
# | |
22
+
#--------------------------------------------------------------+
23
+
#
24
+
# We assume that all network driver are loaded
25
+
#
26
+
27
+
# Kselftest framework requirement - SKIP code is 4.
28
+
ksft_skip=4
29
+
ret=0
30
+
GREEN='\033[0;92m'
31
+
RED='\033[0;31m'
32
+
NC='\033[0m' # No Color
33
+
34
+
readonly port=8080
35
+
36
+
readonly vip_v4=207.175.44.110
37
+
readonly cip_v4=10.0.0.2
38
+
readonly gip_v4=10.0.0.1
39
+
readonly dip_v4=172.16.0.1
40
+
readonly rip_v4=172.16.0.2
41
+
readonly sip_v4=10.0.0.3
42
+
43
+
readonly infile="$(mktemp)"
44
+
readonly outfile="$(mktemp)"
45
+
readonly datalen=32
46
+
47
+
sysipvsnet="/proc/sys/net/ipv4/vs/"
48
+
if [ ! -d $sysipvsnet ]; then
49
+
modprobe -q ip_vs
50
+
if [ $? -ne 0 ]; then
51
+
echo "skip: could not run test without ipvs module"
52
+
exit $ksft_skip
53
+
fi
54
+
fi
55
+
56
+
ip -Version > /dev/null 2>&1
57
+
if [ $? -ne 0 ]; then
58
+
echo "SKIP: Could not run test without ip tool"
59
+
exit $ksft_skip
60
+
fi
61
+
62
+
ipvsadm -v > /dev/null 2>&1
63
+
if [ $? -ne 0 ]; then
64
+
echo "SKIP: Could not run test without ipvsadm"
65
+
exit $ksft_skip
66
+
fi
67
+
68
+
setup() {
69
+
ip netns add ns0
70
+
ip netns add ns1
71
+
ip netns add ns2
72
+
73
+
ip link add veth01 netns ns0 type veth peer name veth10 netns ns1
74
+
ip link add veth02 netns ns0 type veth peer name veth20 netns ns2
75
+
ip link add veth12 netns ns1 type veth peer name veth21 netns ns2
76
+
77
+
ip netns exec ns0 ip link set veth01 up
78
+
ip netns exec ns0 ip link set veth02 up
79
+
ip netns exec ns0 ip link add br0 type bridge
80
+
ip netns exec ns0 ip link set veth01 master br0
81
+
ip netns exec ns0 ip link set veth02 master br0
82
+
ip netns exec ns0 ip link set br0 up
83
+
ip netns exec ns0 ip addr add ${cip_v4}/24 dev br0
84
+
85
+
ip netns exec ns1 ip link set lo up
86
+
ip netns exec ns1 ip link set veth10 up
87
+
ip netns exec ns1 ip addr add ${gip_v4}/24 dev veth10
88
+
ip netns exec ns1 ip link set veth12 up
89
+
ip netns exec ns1 ip addr add ${dip_v4}/24 dev veth12
90
+
91
+
ip netns exec ns2 ip link set lo up
92
+
ip netns exec ns2 ip link set veth21 up
93
+
ip netns exec ns2 ip addr add ${rip_v4}/24 dev veth21
94
+
ip netns exec ns2 ip link set veth20 up
95
+
ip netns exec ns2 ip addr add ${sip_v4}/24 dev veth20
96
+
97
+
sleep 1
98
+
99
+
dd if=/dev/urandom of="${infile}" bs="${datalen}" count=1 status=none
100
+
}
101
+
102
+
cleanup() {
103
+
for i in 0 1 2
104
+
do
105
+
ip netns del ns$i > /dev/null 2>&1
106
+
done
107
+
108
+
if [ -f "${outfile}" ]; then
109
+
rm "${outfile}"
110
+
fi
111
+
if [ -f "${infile}" ]; then
112
+
rm "${infile}"
113
+
fi
114
+
}
115
+
116
+
server_listen() {
117
+
ip netns exec ns2 nc -l -p 8080 > "${outfile}" &
118
+
server_pid=$!
119
+
sleep 0.2
120
+
}
121
+
122
+
client_connect() {
123
+
ip netns exec ns0 timeout 2 nc -w 1 ${vip_v4} ${port} < "${infile}"
124
+
}
125
+
126
+
verify_data() {
127
+
wait "${server_pid}"
128
+
cmp "$infile" "$outfile" 2>/dev/null
129
+
}
130
+
131
+
test_service() {
132
+
server_listen
133
+
client_connect
134
+
verify_data
135
+
}
136
+
137
+
138
+
test_dr() {
139
+
ip netns exec ns0 ip route add ${vip_v4} via ${gip_v4} dev br0
140
+
141
+
ip netns exec ns1 sysctl -qw net.ipv4.ip_forward=1
142
+
ip netns exec ns1 ipvsadm -A -t ${vip_v4}:${port} -s rr
143
+
ip netns exec ns1 ipvsadm -a -t ${vip_v4}:${port} -r ${rip_v4}:${port}
144
+
ip netns exec ns1 ip addr add ${vip_v4}/32 dev lo:1
145
+
146
+
# avoid incorrect arp response
147
+
ip netns exec ns2 sysctl -qw net.ipv4.conf.all.arp_ignore=1
148
+
ip netns exec ns2 sysctl -qw net.ipv4.conf.all.arp_announce=2
149
+
# avoid reverse route lookup
150
+
ip netns exec ns2 sysctl -qw net.ipv4.conf.all.rp_filter=0
151
+
ip netns exec ns2 sysctl -qw net.ipv4.conf.veth21.rp_filter=0
152
+
ip netns exec ns2 ip addr add ${vip_v4}/32 dev lo:1
153
+
154
+
test_service
155
+
}
156
+
157
+
run_tests() {
158
+
local errors=
159
+
160
+
echo "Testing DR mode..."
161
+
setup
162
+
test_dr
163
+
errors=$(( $errors + $? ))
164
+
165
+
return $errors
166
+
}
167
+
168
+
trap cleanup EXIT
169
+
170
+
cleanup
171
+
run_tests
172
+
173
+
if [ $? -ne 0 ]; then
174
+
echo -e "$(basename $0): ${RED}FAIL${NC}"
175
+
exit 1
176
+
fi
177
+
echo -e "$(basename $0): ${GREEN}PASS${NC}"
178
+
exit 0