mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-09-29 05:44:11 +00:00
91bc35789d
Modify the existing bpf_tcp_check_syncookie test to also generate a SYN cookie, pass the packet to the kernel, and verify that the two cookies are the same (and both valid). Since cloned SKBs are skipped during generic XDP, this test does not issue a SYN cookie when run in XDP mode. We therefore only check that a valid SYN cookie was issued at the TC hook. Additionally, verify that the MSS for that SYN cookie is within expected range. Signed-off-by: Petar Penkov <ppenkov@google.com> Reviewed-by: Lorenz Bauer <lmb@cloudflare.com> Signed-off-by: Alexei Starovoitov <ast@kernel.org>
84 lines
1.7 KiB
Bash
Executable file
84 lines
1.7 KiB
Bash
Executable file
#!/bin/sh
|
|
# SPDX-License-Identifier: GPL-2.0
|
|
# Copyright (c) 2018 Facebook
|
|
# Copyright (c) 2019 Cloudflare
|
|
|
|
set -eu
|
|
|
|
wait_for_ip()
|
|
{
|
|
local _i
|
|
printf "Wait for IP %s to become available " "$1"
|
|
for _i in $(seq ${MAX_PING_TRIES}); do
|
|
printf "."
|
|
if ns1_exec ping -c 1 -W 1 "$1" >/dev/null 2>&1; then
|
|
echo " OK"
|
|
return
|
|
fi
|
|
sleep 1
|
|
done
|
|
echo 1>&2 "ERROR: Timeout waiting for test IP to become available."
|
|
exit 1
|
|
}
|
|
|
|
get_prog_id()
|
|
{
|
|
awk '/ id / {sub(/.* id /, "", $0); print($1)}'
|
|
}
|
|
|
|
ns1_exec()
|
|
{
|
|
ip netns exec ns1 "$@"
|
|
}
|
|
|
|
setup()
|
|
{
|
|
ip netns add ns1
|
|
ns1_exec ip link set lo up
|
|
|
|
ns1_exec sysctl -w net.ipv4.tcp_syncookies=2
|
|
ns1_exec sysctl -w net.ipv4.tcp_window_scaling=0
|
|
ns1_exec sysctl -w net.ipv4.tcp_timestamps=0
|
|
ns1_exec sysctl -w net.ipv4.tcp_sack=0
|
|
|
|
wait_for_ip 127.0.0.1
|
|
wait_for_ip ::1
|
|
}
|
|
|
|
cleanup()
|
|
{
|
|
ip netns del ns1 2>/dev/null || :
|
|
}
|
|
|
|
main()
|
|
{
|
|
trap cleanup EXIT 2 3 6 15
|
|
setup
|
|
|
|
printf "Testing clsact..."
|
|
ns1_exec tc qdisc add dev "${TEST_IF}" clsact
|
|
ns1_exec tc filter add dev "${TEST_IF}" ingress \
|
|
bpf obj "${BPF_PROG_OBJ}" sec "${CLSACT_SECTION}" da
|
|
|
|
BPF_PROG_ID=$(ns1_exec tc filter show dev "${TEST_IF}" ingress | \
|
|
get_prog_id)
|
|
ns1_exec "${PROG}" "${BPF_PROG_ID}"
|
|
ns1_exec tc qdisc del dev "${TEST_IF}" clsact
|
|
|
|
printf "Testing XDP..."
|
|
ns1_exec ip link set "${TEST_IF}" xdp \
|
|
object "${BPF_PROG_OBJ}" section "${XDP_SECTION}"
|
|
BPF_PROG_ID=$(ns1_exec ip link show "${TEST_IF}" | get_prog_id)
|
|
ns1_exec "${PROG}" "${BPF_PROG_ID}"
|
|
}
|
|
|
|
DIR=$(dirname $0)
|
|
TEST_IF=lo
|
|
MAX_PING_TRIES=5
|
|
BPF_PROG_OBJ="${DIR}/test_tcp_check_syncookie_kern.o"
|
|
CLSACT_SECTION="clsact/check_syncookie"
|
|
XDP_SECTION="xdp/check_syncookie"
|
|
BPF_PROG_ID=0
|
|
PROG="${DIR}/test_tcp_check_syncookie_user"
|
|
|
|
main
|