mirror of
https://github.com/torvalds/linux.git
synced 2025-11-04 02:30:34 +02:00
selftests: net: Add bridge backup port and backup nexthop ID test
Add test cases for bridge backup port and backup nexthop ID, testing both good and bad flows. Example truncated output: # ./test_bridge_backup_port.sh [...] Tests passed: 83 Tests failed: 0 Signed-off-by: Ido Schimmel <idosch@nvidia.com> Acked-by: Nikolay Aleksandrov <razor@blackwall.org> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
Ido Schimmel
David S. Miller
parent
29cfb2aaa4
commit
b408453053
2 changed files with 760 additions and 0 deletions
|
|
@ -87,6 +87,7 @@ TEST_GEN_FILES += bind_wildcard
|
|||
TEST_PROGS += test_vxlan_mdb.sh
|
||||
TEST_PROGS += test_bridge_neigh_suppress.sh
|
||||
TEST_PROGS += test_vxlan_nolocalbypass.sh
|
||||
TEST_PROGS += test_bridge_backup_port.sh
|
||||
|
||||
TEST_FILES := settings
|
||||
|
||||
|
|
|
|||
759
tools/testing/selftests/net/test_bridge_backup_port.sh
Executable file
759
tools/testing/selftests/net/test_bridge_backup_port.sh
Executable file
|
|
@ -0,0 +1,759 @@
|
|||
#!/bin/bash
|
||||
# SPDX-License-Identifier: GPL-2.0
|
||||
#
|
||||
# This test is for checking bridge backup port and backup nexthop ID
|
||||
# functionality. The topology consists of two bridge (VTEPs) connected using
|
||||
# VXLAN. The test checks that when the switch port (swp1) is down, traffic is
|
||||
# redirected to the VXLAN port (vx0). When a backup nexthop ID is configured,
|
||||
# the test checks that traffic is redirected with the correct nexthop
|
||||
# information.
|
||||
#
|
||||
# +------------------------------------+ +------------------------------------+
|
||||
# | + swp1 + vx0 | | + swp1 + vx0 |
|
||||
# | | | | | | | |
|
||||
# | | br0 | | | | | |
|
||||
# | +------------+-----------+ | | +------------+-----------+ |
|
||||
# | | | | | |
|
||||
# | | | | | |
|
||||
# | + | | + |
|
||||
# | br0 | | br0 |
|
||||
# | + | | + |
|
||||
# | | | | | |
|
||||
# | | | | | |
|
||||
# | + | | + |
|
||||
# | br0.10 | | br0.10 |
|
||||
# | 192.0.2.65/28 | | 192.0.2.66/28 |
|
||||
# | | | |
|
||||
# | | | |
|
||||
# | 192.0.2.33 | | 192.0.2.34 |
|
||||
# | + lo | | + lo |
|
||||
# | | | |
|
||||
# | | | |
|
||||
# | 192.0.2.49/28 | | 192.0.2.50/28 |
|
||||
# | veth0 +-------+ veth0 |
|
||||
# | | | |
|
||||
# | sw1 | | sw2 |
|
||||
# +------------------------------------+ +------------------------------------+
|
||||
|
||||
ret=0
|
||||
# Kselftest framework requirement - SKIP code is 4.
|
||||
ksft_skip=4
|
||||
|
||||
# All tests in this script. Can be overridden with -t option.
|
||||
TESTS="
|
||||
backup_port
|
||||
backup_nhid
|
||||
backup_nhid_invalid
|
||||
backup_nhid_ping
|
||||
backup_nhid_torture
|
||||
"
|
||||
VERBOSE=0
|
||||
PAUSE_ON_FAIL=no
|
||||
PAUSE=no
|
||||
PING_TIMEOUT=5
|
||||
|
||||
################################################################################
|
||||
# Utilities
|
||||
|
||||
log_test()
|
||||
{
|
||||
local rc=$1
|
||||
local expected=$2
|
||||
local msg="$3"
|
||||
|
||||
if [ ${rc} -eq ${expected} ]; then
|
||||
printf "TEST: %-60s [ OK ]\n" "${msg}"
|
||||
nsuccess=$((nsuccess+1))
|
||||
else
|
||||
ret=1
|
||||
nfail=$((nfail+1))
|
||||
printf "TEST: %-60s [FAIL]\n" "${msg}"
|
||||
if [ "$VERBOSE" = "1" ]; then
|
||||
echo " rc=$rc, expected $expected"
|
||||
fi
|
||||
|
||||
if [ "${PAUSE_ON_FAIL}" = "yes" ]; then
|
||||
echo
|
||||
echo "hit enter to continue, 'q' to quit"
|
||||
read a
|
||||
[ "$a" = "q" ] && exit 1
|
||||
fi
|
||||
fi
|
||||
|
||||
if [ "${PAUSE}" = "yes" ]; then
|
||||
echo
|
||||
echo "hit enter to continue, 'q' to quit"
|
||||
read a
|
||||
[ "$a" = "q" ] && exit 1
|
||||
fi
|
||||
|
||||
[ "$VERBOSE" = "1" ] && echo
|
||||
}
|
||||
|
||||
run_cmd()
|
||||
{
|
||||
local cmd="$1"
|
||||
local out
|
||||
local stderr="2>/dev/null"
|
||||
|
||||
if [ "$VERBOSE" = "1" ]; then
|
||||
printf "COMMAND: $cmd\n"
|
||||
stderr=
|
||||
fi
|
||||
|
||||
out=$(eval $cmd $stderr)
|
||||
rc=$?
|
||||
if [ "$VERBOSE" = "1" -a -n "$out" ]; then
|
||||
echo " $out"
|
||||
fi
|
||||
|
||||
return $rc
|
||||
}
|
||||
|
||||
tc_check_packets()
|
||||
{
|
||||
local ns=$1; shift
|
||||
local id=$1; shift
|
||||
local handle=$1; shift
|
||||
local count=$1; shift
|
||||
local pkts
|
||||
|
||||
sleep 0.1
|
||||
pkts=$(tc -n $ns -j -s filter show $id \
|
||||
| jq ".[] | select(.options.handle == $handle) | \
|
||||
.options.actions[0].stats.packets")
|
||||
[[ $pkts == $count ]]
|
||||
}
|
||||
|
||||
################################################################################
|
||||
# Setup
|
||||
|
||||
setup_topo_ns()
|
||||
{
|
||||
local ns=$1; shift
|
||||
|
||||
ip netns add $ns
|
||||
ip -n $ns link set dev lo up
|
||||
|
||||
ip netns exec $ns sysctl -qw net.ipv6.conf.all.keep_addr_on_down=1
|
||||
ip netns exec $ns sysctl -qw net.ipv6.conf.default.ignore_routes_with_linkdown=1
|
||||
ip netns exec $ns sysctl -qw net.ipv6.conf.all.accept_dad=0
|
||||
ip netns exec $ns sysctl -qw net.ipv6.conf.default.accept_dad=0
|
||||
}
|
||||
|
||||
setup_topo()
|
||||
{
|
||||
local ns
|
||||
|
||||
for ns in sw1 sw2; do
|
||||
setup_topo_ns $ns
|
||||
done
|
||||
|
||||
ip link add name veth0 type veth peer name veth1
|
||||
ip link set dev veth0 netns sw1 name veth0
|
||||
ip link set dev veth1 netns sw2 name veth0
|
||||
}
|
||||
|
||||
setup_sw_common()
|
||||
{
|
||||
local ns=$1; shift
|
||||
local local_addr=$1; shift
|
||||
local remote_addr=$1; shift
|
||||
local veth_addr=$1; shift
|
||||
local gw_addr=$1; shift
|
||||
local br_addr=$1; shift
|
||||
|
||||
ip -n $ns address add $local_addr/32 dev lo
|
||||
|
||||
ip -n $ns link set dev veth0 up
|
||||
ip -n $ns address add $veth_addr/28 dev veth0
|
||||
ip -n $ns route add default via $gw_addr
|
||||
|
||||
ip -n $ns link add name br0 up type bridge vlan_filtering 1 \
|
||||
vlan_default_pvid 0 mcast_snooping 0
|
||||
|
||||
ip -n $ns link add link br0 name br0.10 up type vlan id 10
|
||||
bridge -n $ns vlan add vid 10 dev br0 self
|
||||
ip -n $ns address add $br_addr/28 dev br0.10
|
||||
|
||||
ip -n $ns link add name swp1 up type dummy
|
||||
ip -n $ns link set dev swp1 master br0
|
||||
bridge -n $ns vlan add vid 10 dev swp1 untagged
|
||||
|
||||
ip -n $ns link add name vx0 up master br0 type vxlan \
|
||||
local $local_addr dstport 4789 nolearning external
|
||||
bridge -n $ns link set dev vx0 vlan_tunnel on learning off
|
||||
|
||||
bridge -n $ns vlan add vid 10 dev vx0
|
||||
bridge -n $ns vlan add vid 10 dev vx0 tunnel_info id 10010
|
||||
}
|
||||
|
||||
setup_sw1()
|
||||
{
|
||||
local ns=sw1
|
||||
local local_addr=192.0.2.33
|
||||
local remote_addr=192.0.2.34
|
||||
local veth_addr=192.0.2.49
|
||||
local gw_addr=192.0.2.50
|
||||
local br_addr=192.0.2.65
|
||||
|
||||
setup_sw_common $ns $local_addr $remote_addr $veth_addr $gw_addr \
|
||||
$br_addr
|
||||
}
|
||||
|
||||
setup_sw2()
|
||||
{
|
||||
local ns=sw2
|
||||
local local_addr=192.0.2.34
|
||||
local remote_addr=192.0.2.33
|
||||
local veth_addr=192.0.2.50
|
||||
local gw_addr=192.0.2.49
|
||||
local br_addr=192.0.2.66
|
||||
|
||||
setup_sw_common $ns $local_addr $remote_addr $veth_addr $gw_addr \
|
||||
$br_addr
|
||||
}
|
||||
|
||||
setup()
|
||||
{
|
||||
set -e
|
||||
|
||||
setup_topo
|
||||
setup_sw1
|
||||
setup_sw2
|
||||
|
||||
sleep 5
|
||||
|
||||
set +e
|
||||
}
|
||||
|
||||
cleanup()
|
||||
{
|
||||
local ns
|
||||
|
||||
for ns in h1 h2 sw1 sw2; do
|
||||
ip netns del $ns &> /dev/null
|
||||
done
|
||||
}
|
||||
|
||||
################################################################################
|
||||
# Tests
|
||||
|
||||
backup_port()
|
||||
{
|
||||
local dmac=00:11:22:33:44:55
|
||||
local smac=00:aa:bb:cc:dd:ee
|
||||
|
||||
echo
|
||||
echo "Backup port"
|
||||
echo "-----------"
|
||||
|
||||
run_cmd "tc -n sw1 qdisc replace dev swp1 clsact"
|
||||
run_cmd "tc -n sw1 filter replace dev swp1 egress pref 1 handle 101 proto ip flower src_mac $smac dst_mac $dmac action pass"
|
||||
|
||||
run_cmd "tc -n sw1 qdisc replace dev vx0 clsact"
|
||||
run_cmd "tc -n sw1 filter replace dev vx0 egress pref 1 handle 101 proto ip flower src_mac $smac dst_mac $dmac action pass"
|
||||
|
||||
run_cmd "bridge -n sw1 fdb replace $dmac dev swp1 master static vlan 10"
|
||||
|
||||
# Initial state - check that packets are forwarded out of swp1 when it
|
||||
# has a carrier and not forwarded out of any port when it does not have
|
||||
# a carrier.
|
||||
run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
||||
tc_check_packets sw1 "dev swp1 egress" 101 1
|
||||
log_test $? 0 "Forwarding out of swp1"
|
||||
tc_check_packets sw1 "dev vx0 egress" 101 0
|
||||
log_test $? 0 "No forwarding out of vx0"
|
||||
|
||||
run_cmd "ip -n sw1 link set dev swp1 carrier off"
|
||||
log_test $? 0 "swp1 carrier off"
|
||||
|
||||
run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
||||
tc_check_packets sw1 "dev swp1 egress" 101 1
|
||||
log_test $? 0 "No forwarding out of swp1"
|
||||
tc_check_packets sw1 "dev vx0 egress" 101 0
|
||||
log_test $? 0 "No forwarding out of vx0"
|
||||
|
||||
run_cmd "ip -n sw1 link set dev swp1 carrier on"
|
||||
log_test $? 0 "swp1 carrier on"
|
||||
|
||||
# Configure vx0 as the backup port of swp1 and check that packets are
|
||||
# forwarded out of swp1 when it has a carrier and out of vx0 when swp1
|
||||
# does not have a carrier.
|
||||
run_cmd "bridge -n sw1 link set dev swp1 backup_port vx0"
|
||||
run_cmd "bridge -n sw1 -d link show dev swp1 | grep \"backup_port vx0\""
|
||||
log_test $? 0 "vx0 configured as backup port of swp1"
|
||||
|
||||
run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
||||
tc_check_packets sw1 "dev swp1 egress" 101 2
|
||||
log_test $? 0 "Forwarding out of swp1"
|
||||
tc_check_packets sw1 "dev vx0 egress" 101 0
|
||||
log_test $? 0 "No forwarding out of vx0"
|
||||
|
||||
run_cmd "ip -n sw1 link set dev swp1 carrier off"
|
||||
log_test $? 0 "swp1 carrier off"
|
||||
|
||||
run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
||||
tc_check_packets sw1 "dev swp1 egress" 101 2
|
||||
log_test $? 0 "No forwarding out of swp1"
|
||||
tc_check_packets sw1 "dev vx0 egress" 101 1
|
||||
log_test $? 0 "Forwarding out of vx0"
|
||||
|
||||
run_cmd "ip -n sw1 link set dev swp1 carrier on"
|
||||
log_test $? 0 "swp1 carrier on"
|
||||
|
||||
run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
||||
tc_check_packets sw1 "dev swp1 egress" 101 3
|
||||
log_test $? 0 "Forwarding out of swp1"
|
||||
tc_check_packets sw1 "dev vx0 egress" 101 1
|
||||
log_test $? 0 "No forwarding out of vx0"
|
||||
|
||||
# Remove vx0 as the backup port of swp1 and check that packets are no
|
||||
# longer forwarded out of vx0 when swp1 does not have a carrier.
|
||||
run_cmd "bridge -n sw1 link set dev swp1 nobackup_port"
|
||||
run_cmd "bridge -n sw1 -d link show dev swp1 | grep \"backup_port vx0\""
|
||||
log_test $? 1 "vx0 not configured as backup port of swp1"
|
||||
|
||||
run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
||||
tc_check_packets sw1 "dev swp1 egress" 101 4
|
||||
log_test $? 0 "Forwarding out of swp1"
|
||||
tc_check_packets sw1 "dev vx0 egress" 101 1
|
||||
log_test $? 0 "No forwarding out of vx0"
|
||||
|
||||
run_cmd "ip -n sw1 link set dev swp1 carrier off"
|
||||
log_test $? 0 "swp1 carrier off"
|
||||
|
||||
run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
||||
tc_check_packets sw1 "dev swp1 egress" 101 4
|
||||
log_test $? 0 "No forwarding out of swp1"
|
||||
tc_check_packets sw1 "dev vx0 egress" 101 1
|
||||
log_test $? 0 "No forwarding out of vx0"
|
||||
}
|
||||
|
||||
backup_nhid()
|
||||
{
|
||||
local dmac=00:11:22:33:44:55
|
||||
local smac=00:aa:bb:cc:dd:ee
|
||||
|
||||
echo
|
||||
echo "Backup nexthop ID"
|
||||
echo "-----------------"
|
||||
|
||||
run_cmd "tc -n sw1 qdisc replace dev swp1 clsact"
|
||||
run_cmd "tc -n sw1 filter replace dev swp1 egress pref 1 handle 101 proto ip flower src_mac $smac dst_mac $dmac action pass"
|
||||
|
||||
run_cmd "tc -n sw1 qdisc replace dev vx0 clsact"
|
||||
run_cmd "tc -n sw1 filter replace dev vx0 egress pref 1 handle 101 proto ip flower src_mac $smac dst_mac $dmac action pass"
|
||||
|
||||
run_cmd "ip -n sw1 nexthop replace id 1 via 192.0.2.34 fdb"
|
||||
run_cmd "ip -n sw1 nexthop replace id 2 via 192.0.2.34 fdb"
|
||||
run_cmd "ip -n sw1 nexthop replace id 10 group 1/2 fdb"
|
||||
|
||||
run_cmd "bridge -n sw1 fdb replace $dmac dev swp1 master static vlan 10"
|
||||
run_cmd "bridge -n sw1 fdb replace $dmac dev vx0 self static dst 192.0.2.36 src_vni 10010"
|
||||
|
||||
run_cmd "ip -n sw2 address replace 192.0.2.36/32 dev lo"
|
||||
|
||||
# The first filter matches on packets forwarded using the backup
|
||||
# nexthop ID and the second filter matches on packets forwarded using a
|
||||
# regular VXLAN FDB entry.
|
||||
run_cmd "tc -n sw2 qdisc replace dev vx0 clsact"
|
||||
run_cmd "tc -n sw2 filter replace dev vx0 ingress pref 1 handle 101 proto ip flower src_mac $smac dst_mac $dmac enc_key_id 10010 enc_dst_ip 192.0.2.34 action pass"
|
||||
run_cmd "tc -n sw2 filter replace dev vx0 ingress pref 1 handle 102 proto ip flower src_mac $smac dst_mac $dmac enc_key_id 10010 enc_dst_ip 192.0.2.36 action pass"
|
||||
|
||||
# Configure vx0 as the backup port of swp1 and check that packets are
|
||||
# forwarded out of swp1 when it has a carrier and out of vx0 when swp1
|
||||
# does not have a carrier. When packets are forwarded out of vx0, check
|
||||
# that they are forwarded by the VXLAN FDB entry.
|
||||
run_cmd "bridge -n sw1 link set dev swp1 backup_port vx0"
|
||||
run_cmd "bridge -n sw1 -d link show dev swp1 | grep \"backup_port vx0\""
|
||||
log_test $? 0 "vx0 configured as backup port of swp1"
|
||||
|
||||
run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
||||
tc_check_packets sw1 "dev swp1 egress" 101 1
|
||||
log_test $? 0 "Forwarding out of swp1"
|
||||
tc_check_packets sw1 "dev vx0 egress" 101 0
|
||||
log_test $? 0 "No forwarding out of vx0"
|
||||
|
||||
run_cmd "ip -n sw1 link set dev swp1 carrier off"
|
||||
log_test $? 0 "swp1 carrier off"
|
||||
|
||||
run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
||||
tc_check_packets sw1 "dev swp1 egress" 101 1
|
||||
log_test $? 0 "No forwarding out of swp1"
|
||||
tc_check_packets sw1 "dev vx0 egress" 101 1
|
||||
log_test $? 0 "Forwarding out of vx0"
|
||||
tc_check_packets sw2 "dev vx0 ingress" 101 0
|
||||
log_test $? 0 "No forwarding using backup nexthop ID"
|
||||
tc_check_packets sw2 "dev vx0 ingress" 102 1
|
||||
log_test $? 0 "Forwarding using VXLAN FDB entry"
|
||||
|
||||
run_cmd "ip -n sw1 link set dev swp1 carrier on"
|
||||
log_test $? 0 "swp1 carrier on"
|
||||
|
||||
# Configure nexthop ID 10 as the backup nexthop ID of swp1 and check
|
||||
# that when packets are forwarded out of vx0, they are forwarded using
|
||||
# the backup nexthop ID.
|
||||
run_cmd "bridge -n sw1 link set dev swp1 backup_nhid 10"
|
||||
run_cmd "bridge -n sw1 -d link show dev swp1 | grep \"backup_nhid 10\""
|
||||
log_test $? 0 "nexthop ID 10 configured as backup nexthop ID of swp1"
|
||||
|
||||
run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
||||
tc_check_packets sw1 "dev swp1 egress" 101 2
|
||||
log_test $? 0 "Forwarding out of swp1"
|
||||
tc_check_packets sw1 "dev vx0 egress" 101 1
|
||||
log_test $? 0 "No forwarding out of vx0"
|
||||
|
||||
run_cmd "ip -n sw1 link set dev swp1 carrier off"
|
||||
log_test $? 0 "swp1 carrier off"
|
||||
|
||||
run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
||||
tc_check_packets sw1 "dev swp1 egress" 101 2
|
||||
log_test $? 0 "No forwarding out of swp1"
|
||||
tc_check_packets sw1 "dev vx0 egress" 101 2
|
||||
log_test $? 0 "Forwarding out of vx0"
|
||||
tc_check_packets sw2 "dev vx0 ingress" 101 1
|
||||
log_test $? 0 "Forwarding using backup nexthop ID"
|
||||
tc_check_packets sw2 "dev vx0 ingress" 102 1
|
||||
log_test $? 0 "No forwarding using VXLAN FDB entry"
|
||||
|
||||
run_cmd "ip -n sw1 link set dev swp1 carrier on"
|
||||
log_test $? 0 "swp1 carrier on"
|
||||
|
||||
run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
||||
tc_check_packets sw1 "dev swp1 egress" 101 3
|
||||
log_test $? 0 "Forwarding out of swp1"
|
||||
tc_check_packets sw1 "dev vx0 egress" 101 2
|
||||
log_test $? 0 "No forwarding out of vx0"
|
||||
tc_check_packets sw2 "dev vx0 ingress" 101 1
|
||||
log_test $? 0 "No forwarding using backup nexthop ID"
|
||||
tc_check_packets sw2 "dev vx0 ingress" 102 1
|
||||
log_test $? 0 "No forwarding using VXLAN FDB entry"
|
||||
|
||||
# Reset the backup nexthop ID to 0 and check that packets are no longer
|
||||
# forwarded using the backup nexthop ID when swp1 does not have a
|
||||
# carrier and are instead forwarded by the VXLAN FDB.
|
||||
run_cmd "bridge -n sw1 link set dev swp1 backup_nhid 0"
|
||||
run_cmd "bridge -n sw1 -d link show dev swp1 | grep \"backup_nhid\""
|
||||
log_test $? 1 "No backup nexthop ID configured for swp1"
|
||||
|
||||
run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
||||
tc_check_packets sw1 "dev swp1 egress" 101 4
|
||||
log_test $? 0 "Forwarding out of swp1"
|
||||
tc_check_packets sw1 "dev vx0 egress" 101 2
|
||||
log_test $? 0 "No forwarding out of vx0"
|
||||
tc_check_packets sw2 "dev vx0 ingress" 101 1
|
||||
log_test $? 0 "No forwarding using backup nexthop ID"
|
||||
tc_check_packets sw2 "dev vx0 ingress" 102 1
|
||||
log_test $? 0 "No forwarding using VXLAN FDB entry"
|
||||
|
||||
run_cmd "ip -n sw1 link set dev swp1 carrier off"
|
||||
log_test $? 0 "swp1 carrier off"
|
||||
|
||||
run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
||||
tc_check_packets sw1 "dev swp1 egress" 101 4
|
||||
log_test $? 0 "No forwarding out of swp1"
|
||||
tc_check_packets sw1 "dev vx0 egress" 101 3
|
||||
log_test $? 0 "Forwarding out of vx0"
|
||||
tc_check_packets sw2 "dev vx0 ingress" 101 1
|
||||
log_test $? 0 "No forwarding using backup nexthop ID"
|
||||
tc_check_packets sw2 "dev vx0 ingress" 102 2
|
||||
log_test $? 0 "Forwarding using VXLAN FDB entry"
|
||||
}
|
||||
|
||||
backup_nhid_invalid()
|
||||
{
|
||||
local dmac=00:11:22:33:44:55
|
||||
local smac=00:aa:bb:cc:dd:ee
|
||||
local tx_drop
|
||||
|
||||
echo
|
||||
echo "Backup nexthop ID - invalid IDs"
|
||||
echo "-------------------------------"
|
||||
|
||||
# Check that when traffic is redirected with an invalid nexthop ID, it
|
||||
# is forwarded out of the VXLAN port, but dropped by the VXLAN driver
|
||||
# and does not crash the host.
|
||||
|
||||
run_cmd "tc -n sw1 qdisc replace dev swp1 clsact"
|
||||
run_cmd "tc -n sw1 filter replace dev swp1 egress pref 1 handle 101 proto ip flower src_mac $smac dst_mac $dmac action pass"
|
||||
|
||||
run_cmd "tc -n sw1 qdisc replace dev vx0 clsact"
|
||||
run_cmd "tc -n sw1 filter replace dev vx0 egress pref 1 handle 101 proto ip flower src_mac $smac dst_mac $dmac action pass"
|
||||
# Drop all other Tx traffic to avoid changes to Tx drop counter.
|
||||
run_cmd "tc -n sw1 filter replace dev vx0 egress pref 2 handle 102 proto all matchall action drop"
|
||||
|
||||
tx_drop=$(ip -n sw1 -s -j link show dev vx0 | jq '.[]["stats64"]["tx"]["dropped"]')
|
||||
|
||||
run_cmd "ip -n sw1 nexthop replace id 1 via 192.0.2.34 fdb"
|
||||
run_cmd "ip -n sw1 nexthop replace id 2 via 192.0.2.34 fdb"
|
||||
run_cmd "ip -n sw1 nexthop replace id 10 group 1/2 fdb"
|
||||
|
||||
run_cmd "bridge -n sw1 fdb replace $dmac dev swp1 master static vlan 10"
|
||||
|
||||
run_cmd "tc -n sw2 qdisc replace dev vx0 clsact"
|
||||
run_cmd "tc -n sw2 filter replace dev vx0 ingress pref 1 handle 101 proto ip flower src_mac $smac dst_mac $dmac enc_key_id 10010 enc_dst_ip 192.0.2.34 action pass"
|
||||
|
||||
# First, check that redirection works.
|
||||
run_cmd "bridge -n sw1 link set dev swp1 backup_port vx0"
|
||||
run_cmd "bridge -n sw1 -d link show dev swp1 | grep \"backup_port vx0\""
|
||||
log_test $? 0 "vx0 configured as backup port of swp1"
|
||||
|
||||
run_cmd "bridge -n sw1 link set dev swp1 backup_nhid 10"
|
||||
run_cmd "bridge -n sw1 -d link show dev swp1 | grep \"backup_nhid 10\""
|
||||
log_test $? 0 "Valid nexthop as backup nexthop"
|
||||
|
||||
run_cmd "ip -n sw1 link set dev swp1 carrier off"
|
||||
log_test $? 0 "swp1 carrier off"
|
||||
|
||||
run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
||||
tc_check_packets sw1 "dev swp1 egress" 101 0
|
||||
log_test $? 0 "No forwarding out of swp1"
|
||||
tc_check_packets sw1 "dev vx0 egress" 101 1
|
||||
log_test $? 0 "Forwarding out of vx0"
|
||||
tc_check_packets sw2 "dev vx0 ingress" 101 1
|
||||
log_test $? 0 "Forwarding using backup nexthop ID"
|
||||
run_cmd "ip -n sw1 -s -j link show dev vx0 | jq -e '.[][\"stats64\"][\"tx\"][\"dropped\"] == $tx_drop'"
|
||||
log_test $? 0 "No Tx drop increase"
|
||||
|
||||
# Use a non-existent nexthop ID.
|
||||
run_cmd "bridge -n sw1 link set dev swp1 backup_nhid 20"
|
||||
run_cmd "bridge -n sw1 -d link show dev swp1 | grep \"backup_nhid 20\""
|
||||
log_test $? 0 "Non-existent nexthop as backup nexthop"
|
||||
|
||||
run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
||||
tc_check_packets sw1 "dev swp1 egress" 101 0
|
||||
log_test $? 0 "No forwarding out of swp1"
|
||||
tc_check_packets sw1 "dev vx0 egress" 101 2
|
||||
log_test $? 0 "Forwarding out of vx0"
|
||||
tc_check_packets sw2 "dev vx0 ingress" 101 1
|
||||
log_test $? 0 "No forwarding using backup nexthop ID"
|
||||
run_cmd "ip -n sw1 -s -j link show dev vx0 | jq -e '.[][\"stats64\"][\"tx\"][\"dropped\"] == $((tx_drop + 1))'"
|
||||
log_test $? 0 "Tx drop increased"
|
||||
|
||||
# Use a blckhole nexthop.
|
||||
run_cmd "ip -n sw1 nexthop replace id 30 blackhole"
|
||||
run_cmd "bridge -n sw1 link set dev swp1 backup_nhid 30"
|
||||
run_cmd "bridge -n sw1 -d link show dev swp1 | grep \"backup_nhid 30\""
|
||||
log_test $? 0 "Blackhole nexthop as backup nexthop"
|
||||
|
||||
run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
||||
tc_check_packets sw1 "dev swp1 egress" 101 0
|
||||
log_test $? 0 "No forwarding out of swp1"
|
||||
tc_check_packets sw1 "dev vx0 egress" 101 3
|
||||
log_test $? 0 "Forwarding out of vx0"
|
||||
tc_check_packets sw2 "dev vx0 ingress" 101 1
|
||||
log_test $? 0 "No forwarding using backup nexthop ID"
|
||||
run_cmd "ip -n sw1 -s -j link show dev vx0 | jq -e '.[][\"stats64\"][\"tx\"][\"dropped\"] == $((tx_drop + 2))'"
|
||||
log_test $? 0 "Tx drop increased"
|
||||
|
||||
# Non-group FDB nexthop.
|
||||
run_cmd "bridge -n sw1 link set dev swp1 backup_nhid 1"
|
||||
run_cmd "bridge -n sw1 -d link show dev swp1 | grep \"backup_nhid 1\""
|
||||
log_test $? 0 "Non-group FDB nexthop as backup nexthop"
|
||||
|
||||
run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
||||
tc_check_packets sw1 "dev swp1 egress" 101 0
|
||||
log_test $? 0 "No forwarding out of swp1"
|
||||
tc_check_packets sw1 "dev vx0 egress" 101 4
|
||||
log_test $? 0 "Forwarding out of vx0"
|
||||
tc_check_packets sw2 "dev vx0 ingress" 101 1
|
||||
log_test $? 0 "No forwarding using backup nexthop ID"
|
||||
run_cmd "ip -n sw1 -s -j link show dev vx0 | jq -e '.[][\"stats64\"][\"tx\"][\"dropped\"] == $((tx_drop + 3))'"
|
||||
log_test $? 0 "Tx drop increased"
|
||||
|
||||
# IPv6 address family nexthop.
|
||||
run_cmd "ip -n sw1 nexthop replace id 100 via 2001:db8:100::1 fdb"
|
||||
run_cmd "ip -n sw1 nexthop replace id 200 via 2001:db8:100::1 fdb"
|
||||
run_cmd "ip -n sw1 nexthop replace id 300 group 100/200 fdb"
|
||||
run_cmd "bridge -n sw1 link set dev swp1 backup_nhid 300"
|
||||
run_cmd "bridge -n sw1 -d link show dev swp1 | grep \"backup_nhid 300\""
|
||||
log_test $? 0 "IPv6 address family nexthop as backup nexthop"
|
||||
|
||||
run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
||||
tc_check_packets sw1 "dev swp1 egress" 101 0
|
||||
log_test $? 0 "No forwarding out of swp1"
|
||||
tc_check_packets sw1 "dev vx0 egress" 101 5
|
||||
log_test $? 0 "Forwarding out of vx0"
|
||||
tc_check_packets sw2 "dev vx0 ingress" 101 1
|
||||
log_test $? 0 "No forwarding using backup nexthop ID"
|
||||
run_cmd "ip -n sw1 -s -j link show dev vx0 | jq -e '.[][\"stats64\"][\"tx\"][\"dropped\"] == $((tx_drop + 4))'"
|
||||
log_test $? 0 "Tx drop increased"
|
||||
}
|
||||
|
||||
backup_nhid_ping()
|
||||
{
|
||||
local sw1_mac
|
||||
local sw2_mac
|
||||
|
||||
echo
|
||||
echo "Backup nexthop ID - ping"
|
||||
echo "------------------------"
|
||||
|
||||
# Test bidirectional traffic when traffic is redirected in both VTEPs.
|
||||
sw1_mac=$(ip -n sw1 -j -p link show br0.10 | jq -r '.[]["address"]')
|
||||
sw2_mac=$(ip -n sw2 -j -p link show br0.10 | jq -r '.[]["address"]')
|
||||
|
||||
run_cmd "bridge -n sw1 fdb replace $sw2_mac dev swp1 master static vlan 10"
|
||||
run_cmd "bridge -n sw2 fdb replace $sw1_mac dev swp1 master static vlan 10"
|
||||
|
||||
run_cmd "ip -n sw1 neigh replace 192.0.2.66 lladdr $sw2_mac nud perm dev br0.10"
|
||||
run_cmd "ip -n sw2 neigh replace 192.0.2.65 lladdr $sw1_mac nud perm dev br0.10"
|
||||
|
||||
run_cmd "ip -n sw1 nexthop replace id 1 via 192.0.2.34 fdb"
|
||||
run_cmd "ip -n sw2 nexthop replace id 1 via 192.0.2.33 fdb"
|
||||
run_cmd "ip -n sw1 nexthop replace id 10 group 1 fdb"
|
||||
run_cmd "ip -n sw2 nexthop replace id 10 group 1 fdb"
|
||||
|
||||
run_cmd "bridge -n sw1 link set dev swp1 backup_port vx0"
|
||||
run_cmd "bridge -n sw2 link set dev swp1 backup_port vx0"
|
||||
run_cmd "bridge -n sw1 link set dev swp1 backup_nhid 10"
|
||||
run_cmd "bridge -n sw2 link set dev swp1 backup_nhid 10"
|
||||
|
||||
run_cmd "ip -n sw1 link set dev swp1 carrier off"
|
||||
run_cmd "ip -n sw2 link set dev swp1 carrier off"
|
||||
|
||||
run_cmd "ip netns exec sw1 ping -i 0.1 -c 10 -w $PING_TIMEOUT 192.0.2.66"
|
||||
log_test $? 0 "Ping with backup nexthop ID"
|
||||
|
||||
# Reset the backup nexthop ID to 0 and check that ping fails.
|
||||
run_cmd "bridge -n sw1 link set dev swp1 backup_nhid 0"
|
||||
run_cmd "bridge -n sw2 link set dev swp1 backup_nhid 0"
|
||||
|
||||
run_cmd "ip netns exec sw1 ping -i 0.1 -c 10 -w $PING_TIMEOUT 192.0.2.66"
|
||||
log_test $? 1 "Ping after disabling backup nexthop ID"
|
||||
}
|
||||
|
||||
backup_nhid_add_del_loop()
|
||||
{
|
||||
while true; do
|
||||
ip -n sw1 nexthop del id 10
|
||||
ip -n sw1 nexthop replace id 10 group 1/2 fdb
|
||||
done >/dev/null 2>&1
|
||||
}
|
||||
|
||||
backup_nhid_torture()
|
||||
{
|
||||
local dmac=00:11:22:33:44:55
|
||||
local smac=00:aa:bb:cc:dd:ee
|
||||
local pid1
|
||||
local pid2
|
||||
local pid3
|
||||
|
||||
echo
|
||||
echo "Backup nexthop ID - torture test"
|
||||
echo "--------------------------------"
|
||||
|
||||
# Continuously send traffic through the backup nexthop while adding and
|
||||
# deleting the group. The test is considered successful if nothing
|
||||
# crashed.
|
||||
|
||||
run_cmd "ip -n sw1 nexthop replace id 1 via 192.0.2.34 fdb"
|
||||
run_cmd "ip -n sw1 nexthop replace id 2 via 192.0.2.34 fdb"
|
||||
run_cmd "ip -n sw1 nexthop replace id 10 group 1/2 fdb"
|
||||
|
||||
run_cmd "bridge -n sw1 fdb replace $dmac dev swp1 master static vlan 10"
|
||||
|
||||
run_cmd "bridge -n sw1 link set dev swp1 backup_port vx0"
|
||||
run_cmd "bridge -n sw1 link set dev swp1 backup_nhid 10"
|
||||
run_cmd "ip -n sw1 link set dev swp1 carrier off"
|
||||
|
||||
backup_nhid_add_del_loop &
|
||||
pid1=$!
|
||||
ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 0 &
|
||||
pid2=$!
|
||||
|
||||
sleep 30
|
||||
kill -9 $pid1 $pid2
|
||||
wait $pid1 $pid2 2>/dev/null
|
||||
|
||||
log_test 0 0 "Torture test"
|
||||
}
|
||||
|
||||
################################################################################
|
||||
# Usage
|
||||
|
||||
usage()
|
||||
{
|
||||
cat <<EOF
|
||||
usage: ${0##*/} OPTS
|
||||
|
||||
-t <test> Test(s) to run (default: all)
|
||||
(options: $TESTS)
|
||||
-p Pause on fail
|
||||
-P Pause after each test before cleanup
|
||||
-v Verbose mode (show commands and output)
|
||||
-w Timeout for ping
|
||||
EOF
|
||||
}
|
||||
|
||||
################################################################################
|
||||
# Main
|
||||
|
||||
trap cleanup EXIT
|
||||
|
||||
while getopts ":t:pPvhw:" opt; do
|
||||
case $opt in
|
||||
t) TESTS=$OPTARG;;
|
||||
p) PAUSE_ON_FAIL=yes;;
|
||||
P) PAUSE=yes;;
|
||||
v) VERBOSE=$(($VERBOSE + 1));;
|
||||
w) PING_TIMEOUT=$OPTARG;;
|
||||
h) usage; exit 0;;
|
||||
*) usage; exit 1;;
|
||||
esac
|
||||
done
|
||||
|
||||
# Make sure we don't pause twice.
|
||||
[ "${PAUSE}" = "yes" ] && PAUSE_ON_FAIL=no
|
||||
|
||||
if [ "$(id -u)" -ne 0 ];then
|
||||
echo "SKIP: Need root privileges"
|
||||
exit $ksft_skip;
|
||||
fi
|
||||
|
||||
if [ ! -x "$(command -v ip)" ]; then
|
||||
echo "SKIP: Could not run test without ip tool"
|
||||
exit $ksft_skip
|
||||
fi
|
||||
|
||||
if [ ! -x "$(command -v bridge)" ]; then
|
||||
echo "SKIP: Could not run test without bridge tool"
|
||||
exit $ksft_skip
|
||||
fi
|
||||
|
||||
if [ ! -x "$(command -v tc)" ]; then
|
||||
echo "SKIP: Could not run test without tc tool"
|
||||
exit $ksft_skip
|
||||
fi
|
||||
|
||||
if [ ! -x "$(command -v mausezahn)" ]; then
|
||||
echo "SKIP: Could not run test without mausezahn tool"
|
||||
exit $ksft_skip
|
||||
fi
|
||||
|
||||
if [ ! -x "$(command -v jq)" ]; then
|
||||
echo "SKIP: Could not run test without jq tool"
|
||||
exit $ksft_skip
|
||||
fi
|
||||
|
||||
bridge link help 2>&1 | grep -q "backup_nhid"
|
||||
if [ $? -ne 0 ]; then
|
||||
echo "SKIP: iproute2 bridge too old, missing backup nexthop ID support"
|
||||
exit $ksft_skip
|
||||
fi
|
||||
|
||||
# Start clean.
|
||||
cleanup
|
||||
|
||||
for t in $TESTS
|
||||
do
|
||||
setup; $t; cleanup;
|
||||
done
|
||||
|
||||
if [ "$TESTS" != "none" ]; then
|
||||
printf "\nTests passed: %3d\n" ${nsuccess}
|
||||
printf "Tests failed: %3d\n" ${nfail}
|
||||
fi
|
||||
|
||||
exit $ret
|
||||
Loading…
Reference in a new issue