776 lines
27 KiB
Bash
Executable File
776 lines
27 KiB
Bash
Executable File
#!/bin/bash
|
|
# SPDX-License-Identifier: GPL-2.0
|
|
#
|
|
# This test is for checking bridge backup port and backup nexthop ID
|
|
# functionality. The topology consists of two bridge (VTEPs) connected using
|
|
# VXLAN. The test checks that when the switch port (swp1) is down, traffic is
|
|
# redirected to the VXLAN port (vx0). When a backup nexthop ID is configured,
|
|
# the test checks that traffic is redirected with the correct nexthop
|
|
# information.
|
|
#
|
|
# +------------------------------------+ +------------------------------------+
|
|
# | + swp1 + vx0 | | + swp1 + vx0 |
|
|
# | | | | | | | |
|
|
# | | br0 | | | | | |
|
|
# | +------------+-----------+ | | +------------+-----------+ |
|
|
# | | | | | |
|
|
# | | | | | |
|
|
# | + | | + |
|
|
# | br0 | | br0 |
|
|
# | + | | + |
|
|
# | | | | | |
|
|
# | | | | | |
|
|
# | + | | + |
|
|
# | br0.10 | | br0.10 |
|
|
# | 192.0.2.65/28 | | 192.0.2.66/28 |
|
|
# | | | |
|
|
# | | | |
|
|
# | 192.0.2.33 | | 192.0.2.34 |
|
|
# | + lo | | + lo |
|
|
# | | | |
|
|
# | | | |
|
|
# | 192.0.2.49/28 | | 192.0.2.50/28 |
|
|
# | veth0 +-------+ veth0 |
|
|
# | | | |
|
|
# | sw1 | | sw2 |
|
|
# +------------------------------------+ +------------------------------------+
|
|
|
|
source lib.sh
|
|
ret=0
|
|
|
|
# All tests in this script. Can be overridden with -t option.
|
|
TESTS="
|
|
backup_port
|
|
backup_nhid
|
|
backup_nhid_invalid
|
|
backup_nhid_ping
|
|
backup_nhid_torture
|
|
"
|
|
VERBOSE=0
|
|
PAUSE_ON_FAIL=no
|
|
PAUSE=no
|
|
PING_TIMEOUT=5
|
|
|
|
################################################################################
|
|
# Utilities
|
|
|
|
log_test()
|
|
{
|
|
local rc=$1
|
|
local expected=$2
|
|
local msg="$3"
|
|
|
|
if [ ${rc} -eq ${expected} ]; then
|
|
printf "TEST: %-60s [ OK ]\n" "${msg}"
|
|
nsuccess=$((nsuccess+1))
|
|
else
|
|
ret=1
|
|
nfail=$((nfail+1))
|
|
printf "TEST: %-60s [FAIL]\n" "${msg}"
|
|
if [ "$VERBOSE" = "1" ]; then
|
|
echo " rc=$rc, expected $expected"
|
|
fi
|
|
|
|
if [ "${PAUSE_ON_FAIL}" = "yes" ]; then
|
|
echo
|
|
echo "hit enter to continue, 'q' to quit"
|
|
read a
|
|
[ "$a" = "q" ] && exit 1
|
|
fi
|
|
fi
|
|
|
|
if [ "${PAUSE}" = "yes" ]; then
|
|
echo
|
|
echo "hit enter to continue, 'q' to quit"
|
|
read a
|
|
[ "$a" = "q" ] && exit 1
|
|
fi
|
|
|
|
[ "$VERBOSE" = "1" ] && echo
|
|
}
|
|
|
|
run_cmd()
|
|
{
|
|
local cmd="$1"
|
|
local out
|
|
local stderr="2>/dev/null"
|
|
|
|
if [ "$VERBOSE" = "1" ]; then
|
|
printf "COMMAND: $cmd\n"
|
|
stderr=
|
|
fi
|
|
|
|
out=$(eval $cmd $stderr)
|
|
rc=$?
|
|
if [ "$VERBOSE" = "1" -a -n "$out" ]; then
|
|
echo " $out"
|
|
fi
|
|
|
|
return $rc
|
|
}
|
|
|
|
tc_check_packets()
|
|
{
|
|
local ns=$1; shift
|
|
local id=$1; shift
|
|
local handle=$1; shift
|
|
local count=$1; shift
|
|
local pkts
|
|
|
|
sleep 0.1
|
|
pkts=$(tc -n $ns -j -s filter show $id \
|
|
| jq ".[] | select(.options.handle == $handle) | \
|
|
.options.actions[0].stats.packets")
|
|
[[ $pkts == $count ]]
|
|
}
|
|
|
|
bridge_link_check()
|
|
{
|
|
local ns=$1; shift
|
|
local dev=$1; shift
|
|
local state=$1; shift
|
|
|
|
bridge -n $ns -d -j link show dev $dev | \
|
|
jq -e ".[][\"state\"] == \"$state\"" &> /dev/null
|
|
}
|
|
|
|
################################################################################
|
|
# Setup
|
|
|
|
setup_topo_ns()
|
|
{
|
|
local ns=$1; shift
|
|
|
|
ip netns exec $ns sysctl -qw net.ipv6.conf.all.keep_addr_on_down=1
|
|
ip netns exec $ns sysctl -qw net.ipv6.conf.default.ignore_routes_with_linkdown=1
|
|
ip netns exec $ns sysctl -qw net.ipv6.conf.all.accept_dad=0
|
|
ip netns exec $ns sysctl -qw net.ipv6.conf.default.accept_dad=0
|
|
}
|
|
|
|
setup_topo()
|
|
{
|
|
local ns
|
|
|
|
setup_ns sw1 sw2
|
|
for ns in $sw1 $sw2; do
|
|
setup_topo_ns $ns
|
|
done
|
|
|
|
ip link add name veth0 type veth peer name veth1
|
|
ip link set dev veth0 netns $sw1 name veth0
|
|
ip link set dev veth1 netns $sw2 name veth0
|
|
}
|
|
|
|
setup_sw_common()
|
|
{
|
|
local ns=$1; shift
|
|
local local_addr=$1; shift
|
|
local remote_addr=$1; shift
|
|
local veth_addr=$1; shift
|
|
local gw_addr=$1; shift
|
|
local br_addr=$1; shift
|
|
|
|
ip -n $ns address add $local_addr/32 dev lo
|
|
|
|
ip -n $ns link set dev veth0 up
|
|
ip -n $ns address add $veth_addr/28 dev veth0
|
|
ip -n $ns route add default via $gw_addr
|
|
|
|
ip -n $ns link add name br0 up type bridge vlan_filtering 1 \
|
|
vlan_default_pvid 0 mcast_snooping 0
|
|
|
|
ip -n $ns link add link br0 name br0.10 up type vlan id 10
|
|
bridge -n $ns vlan add vid 10 dev br0 self
|
|
ip -n $ns address add $br_addr/28 dev br0.10
|
|
|
|
ip -n $ns link add name swp1 up type dummy
|
|
ip -n $ns link set dev swp1 master br0
|
|
bridge -n $ns vlan add vid 10 dev swp1 untagged
|
|
|
|
ip -n $ns link add name vx0 up master br0 type vxlan \
|
|
local $local_addr dstport 4789 nolearning external
|
|
bridge -n $ns link set dev vx0 vlan_tunnel on learning off
|
|
|
|
bridge -n $ns vlan add vid 10 dev vx0
|
|
bridge -n $ns vlan add vid 10 dev vx0 tunnel_info id 10010
|
|
}
|
|
|
|
setup_sw1()
|
|
{
|
|
local ns=$sw1
|
|
local local_addr=192.0.2.33
|
|
local remote_addr=192.0.2.34
|
|
local veth_addr=192.0.2.49
|
|
local gw_addr=192.0.2.50
|
|
local br_addr=192.0.2.65
|
|
|
|
setup_sw_common $ns $local_addr $remote_addr $veth_addr $gw_addr \
|
|
$br_addr
|
|
}
|
|
|
|
setup_sw2()
|
|
{
|
|
local ns=$sw2
|
|
local local_addr=192.0.2.34
|
|
local remote_addr=192.0.2.33
|
|
local veth_addr=192.0.2.50
|
|
local gw_addr=192.0.2.49
|
|
local br_addr=192.0.2.66
|
|
|
|
setup_sw_common $ns $local_addr $remote_addr $veth_addr $gw_addr \
|
|
$br_addr
|
|
}
|
|
|
|
setup()
|
|
{
|
|
set -e
|
|
|
|
setup_topo
|
|
setup_sw1
|
|
setup_sw2
|
|
|
|
sleep 5
|
|
|
|
set +e
|
|
}
|
|
|
|
cleanup()
|
|
{
|
|
cleanup_ns $sw1 $sw2
|
|
}
|
|
|
|
################################################################################
|
|
# Tests
|
|
|
|
backup_port()
|
|
{
|
|
local dmac=00:11:22:33:44:55
|
|
local smac=00:aa:bb:cc:dd:ee
|
|
|
|
echo
|
|
echo "Backup port"
|
|
echo "-----------"
|
|
|
|
run_cmd "tc -n $sw1 qdisc replace dev swp1 clsact"
|
|
run_cmd "tc -n $sw1 filter replace dev swp1 egress pref 1 handle 101 proto ip flower src_mac $smac dst_mac $dmac action pass"
|
|
|
|
run_cmd "tc -n $sw1 qdisc replace dev vx0 clsact"
|
|
run_cmd "tc -n $sw1 filter replace dev vx0 egress pref 1 handle 101 proto ip flower src_mac $smac dst_mac $dmac action pass"
|
|
|
|
run_cmd "bridge -n $sw1 fdb replace $dmac dev swp1 master static vlan 10"
|
|
|
|
# Initial state - check that packets are forwarded out of swp1 when it
|
|
# has a carrier and not forwarded out of any port when it does not have
|
|
# a carrier.
|
|
run_cmd "ip netns exec $sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
|
tc_check_packets $sw1 "dev swp1 egress" 101 1
|
|
log_test $? 0 "Forwarding out of swp1"
|
|
tc_check_packets $sw1 "dev vx0 egress" 101 0
|
|
log_test $? 0 "No forwarding out of vx0"
|
|
|
|
run_cmd "ip -n $sw1 link set dev swp1 carrier off"
|
|
busywait $BUSYWAIT_TIMEOUT bridge_link_check $sw1 swp1 disabled
|
|
log_test $? 0 "swp1 carrier off"
|
|
|
|
run_cmd "ip netns exec $sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
|
tc_check_packets $sw1 "dev swp1 egress" 101 1
|
|
log_test $? 0 "No forwarding out of swp1"
|
|
tc_check_packets $sw1 "dev vx0 egress" 101 0
|
|
log_test $? 0 "No forwarding out of vx0"
|
|
|
|
run_cmd "ip -n $sw1 link set dev swp1 carrier on"
|
|
busywait $BUSYWAIT_TIMEOUT bridge_link_check $sw1 swp1 forwarding
|
|
log_test $? 0 "swp1 carrier on"
|
|
|
|
# Configure vx0 as the backup port of swp1 and check that packets are
|
|
# forwarded out of swp1 when it has a carrier and out of vx0 when swp1
|
|
# does not have a carrier.
|
|
run_cmd "bridge -n $sw1 link set dev swp1 backup_port vx0"
|
|
run_cmd "bridge -n $sw1 -d link show dev swp1 | grep \"backup_port vx0\""
|
|
log_test $? 0 "vx0 configured as backup port of swp1"
|
|
|
|
run_cmd "ip netns exec $sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
|
tc_check_packets $sw1 "dev swp1 egress" 101 2
|
|
log_test $? 0 "Forwarding out of swp1"
|
|
tc_check_packets $sw1 "dev vx0 egress" 101 0
|
|
log_test $? 0 "No forwarding out of vx0"
|
|
|
|
run_cmd "ip -n $sw1 link set dev swp1 carrier off"
|
|
busywait $BUSYWAIT_TIMEOUT bridge_link_check $sw1 swp1 disabled
|
|
log_test $? 0 "swp1 carrier off"
|
|
|
|
run_cmd "ip netns exec $sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
|
tc_check_packets $sw1 "dev swp1 egress" 101 2
|
|
log_test $? 0 "No forwarding out of swp1"
|
|
tc_check_packets $sw1 "dev vx0 egress" 101 1
|
|
log_test $? 0 "Forwarding out of vx0"
|
|
|
|
run_cmd "ip -n $sw1 link set dev swp1 carrier on"
|
|
busywait $BUSYWAIT_TIMEOUT bridge_link_check $sw1 swp1 forwarding
|
|
log_test $? 0 "swp1 carrier on"
|
|
|
|
run_cmd "ip netns exec $sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
|
tc_check_packets $sw1 "dev swp1 egress" 101 3
|
|
log_test $? 0 "Forwarding out of swp1"
|
|
tc_check_packets $sw1 "dev vx0 egress" 101 1
|
|
log_test $? 0 "No forwarding out of vx0"
|
|
|
|
# Remove vx0 as the backup port of swp1 and check that packets are no
|
|
# longer forwarded out of vx0 when swp1 does not have a carrier.
|
|
run_cmd "bridge -n $sw1 link set dev swp1 nobackup_port"
|
|
run_cmd "bridge -n $sw1 -d link show dev swp1 | grep \"backup_port vx0\""
|
|
log_test $? 1 "vx0 not configured as backup port of swp1"
|
|
|
|
run_cmd "ip netns exec $sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
|
tc_check_packets $sw1 "dev swp1 egress" 101 4
|
|
log_test $? 0 "Forwarding out of swp1"
|
|
tc_check_packets $sw1 "dev vx0 egress" 101 1
|
|
log_test $? 0 "No forwarding out of vx0"
|
|
|
|
run_cmd "ip -n $sw1 link set dev swp1 carrier off"
|
|
busywait $BUSYWAIT_TIMEOUT bridge_link_check $sw1 swp1 disabled
|
|
log_test $? 0 "swp1 carrier off"
|
|
|
|
run_cmd "ip netns exec $sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
|
tc_check_packets $sw1 "dev swp1 egress" 101 4
|
|
log_test $? 0 "No forwarding out of swp1"
|
|
tc_check_packets $sw1 "dev vx0 egress" 101 1
|
|
log_test $? 0 "No forwarding out of vx0"
|
|
}
|
|
|
|
backup_nhid()
|
|
{
|
|
local dmac=00:11:22:33:44:55
|
|
local smac=00:aa:bb:cc:dd:ee
|
|
|
|
echo
|
|
echo "Backup nexthop ID"
|
|
echo "-----------------"
|
|
|
|
run_cmd "tc -n $sw1 qdisc replace dev swp1 clsact"
|
|
run_cmd "tc -n $sw1 filter replace dev swp1 egress pref 1 handle 101 proto ip flower src_mac $smac dst_mac $dmac action pass"
|
|
|
|
run_cmd "tc -n $sw1 qdisc replace dev vx0 clsact"
|
|
run_cmd "tc -n $sw1 filter replace dev vx0 egress pref 1 handle 101 proto ip flower src_mac $smac dst_mac $dmac action pass"
|
|
|
|
run_cmd "ip -n $sw1 nexthop replace id 1 via 192.0.2.34 fdb"
|
|
run_cmd "ip -n $sw1 nexthop replace id 2 via 192.0.2.34 fdb"
|
|
run_cmd "ip -n $sw1 nexthop replace id 10 group 1/2 fdb"
|
|
|
|
run_cmd "bridge -n $sw1 fdb replace $dmac dev swp1 master static vlan 10"
|
|
run_cmd "bridge -n $sw1 fdb replace $dmac dev vx0 self static dst 192.0.2.36 src_vni 10010"
|
|
|
|
run_cmd "ip -n $sw2 address replace 192.0.2.36/32 dev lo"
|
|
|
|
# The first filter matches on packets forwarded using the backup
|
|
# nexthop ID and the second filter matches on packets forwarded using a
|
|
# regular VXLAN FDB entry.
|
|
run_cmd "tc -n $sw2 qdisc replace dev vx0 clsact"
|
|
run_cmd "tc -n $sw2 filter replace dev vx0 ingress pref 1 handle 101 proto ip flower src_mac $smac dst_mac $dmac enc_key_id 10010 enc_dst_ip 192.0.2.34 action pass"
|
|
run_cmd "tc -n $sw2 filter replace dev vx0 ingress pref 1 handle 102 proto ip flower src_mac $smac dst_mac $dmac enc_key_id 10010 enc_dst_ip 192.0.2.36 action pass"
|
|
|
|
# Configure vx0 as the backup port of swp1 and check that packets are
|
|
# forwarded out of swp1 when it has a carrier and out of vx0 when swp1
|
|
# does not have a carrier. When packets are forwarded out of vx0, check
|
|
# that they are forwarded by the VXLAN FDB entry.
|
|
run_cmd "bridge -n $sw1 link set dev swp1 backup_port vx0"
|
|
run_cmd "bridge -n $sw1 -d link show dev swp1 | grep \"backup_port vx0\""
|
|
log_test $? 0 "vx0 configured as backup port of swp1"
|
|
|
|
run_cmd "ip netns exec $sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
|
tc_check_packets $sw1 "dev swp1 egress" 101 1
|
|
log_test $? 0 "Forwarding out of swp1"
|
|
tc_check_packets $sw1 "dev vx0 egress" 101 0
|
|
log_test $? 0 "No forwarding out of vx0"
|
|
|
|
run_cmd "ip -n $sw1 link set dev swp1 carrier off"
|
|
busywait $BUSYWAIT_TIMEOUT bridge_link_check $sw1 swp1 disabled
|
|
log_test $? 0 "swp1 carrier off"
|
|
|
|
run_cmd "ip netns exec $sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
|
tc_check_packets $sw1 "dev swp1 egress" 101 1
|
|
log_test $? 0 "No forwarding out of swp1"
|
|
tc_check_packets $sw1 "dev vx0 egress" 101 1
|
|
log_test $? 0 "Forwarding out of vx0"
|
|
tc_check_packets $sw2 "dev vx0 ingress" 101 0
|
|
log_test $? 0 "No forwarding using backup nexthop ID"
|
|
tc_check_packets $sw2 "dev vx0 ingress" 102 1
|
|
log_test $? 0 "Forwarding using VXLAN FDB entry"
|
|
|
|
run_cmd "ip -n $sw1 link set dev swp1 carrier on"
|
|
busywait $BUSYWAIT_TIMEOUT bridge_link_check $sw1 swp1 forwarding
|
|
log_test $? 0 "swp1 carrier on"
|
|
|
|
# Configure nexthop ID 10 as the backup nexthop ID of swp1 and check
|
|
# that when packets are forwarded out of vx0, they are forwarded using
|
|
# the backup nexthop ID.
|
|
run_cmd "bridge -n $sw1 link set dev swp1 backup_nhid 10"
|
|
run_cmd "bridge -n $sw1 -d link show dev swp1 | grep \"backup_nhid 10\""
|
|
log_test $? 0 "nexthop ID 10 configured as backup nexthop ID of swp1"
|
|
|
|
run_cmd "ip netns exec $sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
|
tc_check_packets $sw1 "dev swp1 egress" 101 2
|
|
log_test $? 0 "Forwarding out of swp1"
|
|
tc_check_packets $sw1 "dev vx0 egress" 101 1
|
|
log_test $? 0 "No forwarding out of vx0"
|
|
|
|
run_cmd "ip -n $sw1 link set dev swp1 carrier off"
|
|
busywait $BUSYWAIT_TIMEOUT bridge_link_check $sw1 swp1 disabled
|
|
log_test $? 0 "swp1 carrier off"
|
|
|
|
run_cmd "ip netns exec $sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
|
tc_check_packets $sw1 "dev swp1 egress" 101 2
|
|
log_test $? 0 "No forwarding out of swp1"
|
|
tc_check_packets $sw1 "dev vx0 egress" 101 2
|
|
log_test $? 0 "Forwarding out of vx0"
|
|
tc_check_packets $sw2 "dev vx0 ingress" 101 1
|
|
log_test $? 0 "Forwarding using backup nexthop ID"
|
|
tc_check_packets $sw2 "dev vx0 ingress" 102 1
|
|
log_test $? 0 "No forwarding using VXLAN FDB entry"
|
|
|
|
run_cmd "ip -n $sw1 link set dev swp1 carrier on"
|
|
busywait $BUSYWAIT_TIMEOUT bridge_link_check $sw1 swp1 forwarding
|
|
log_test $? 0 "swp1 carrier on"
|
|
|
|
run_cmd "ip netns exec $sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
|
tc_check_packets $sw1 "dev swp1 egress" 101 3
|
|
log_test $? 0 "Forwarding out of swp1"
|
|
tc_check_packets $sw1 "dev vx0 egress" 101 2
|
|
log_test $? 0 "No forwarding out of vx0"
|
|
tc_check_packets $sw2 "dev vx0 ingress" 101 1
|
|
log_test $? 0 "No forwarding using backup nexthop ID"
|
|
tc_check_packets $sw2 "dev vx0 ingress" 102 1
|
|
log_test $? 0 "No forwarding using VXLAN FDB entry"
|
|
|
|
# Reset the backup nexthop ID to 0 and check that packets are no longer
|
|
# forwarded using the backup nexthop ID when swp1 does not have a
|
|
# carrier and are instead forwarded by the VXLAN FDB.
|
|
run_cmd "bridge -n $sw1 link set dev swp1 backup_nhid 0"
|
|
run_cmd "bridge -n $sw1 -d link show dev swp1 | grep \"backup_nhid\""
|
|
log_test $? 1 "No backup nexthop ID configured for swp1"
|
|
|
|
run_cmd "ip netns exec $sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
|
tc_check_packets $sw1 "dev swp1 egress" 101 4
|
|
log_test $? 0 "Forwarding out of swp1"
|
|
tc_check_packets $sw1 "dev vx0 egress" 101 2
|
|
log_test $? 0 "No forwarding out of vx0"
|
|
tc_check_packets $sw2 "dev vx0 ingress" 101 1
|
|
log_test $? 0 "No forwarding using backup nexthop ID"
|
|
tc_check_packets $sw2 "dev vx0 ingress" 102 1
|
|
log_test $? 0 "No forwarding using VXLAN FDB entry"
|
|
|
|
run_cmd "ip -n $sw1 link set dev swp1 carrier off"
|
|
busywait $BUSYWAIT_TIMEOUT bridge_link_check $sw1 swp1 disabled
|
|
log_test $? 0 "swp1 carrier off"
|
|
|
|
run_cmd "ip netns exec $sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
|
tc_check_packets $sw1 "dev swp1 egress" 101 4
|
|
log_test $? 0 "No forwarding out of swp1"
|
|
tc_check_packets $sw1 "dev vx0 egress" 101 3
|
|
log_test $? 0 "Forwarding out of vx0"
|
|
tc_check_packets $sw2 "dev vx0 ingress" 101 1
|
|
log_test $? 0 "No forwarding using backup nexthop ID"
|
|
tc_check_packets $sw2 "dev vx0 ingress" 102 2
|
|
log_test $? 0 "Forwarding using VXLAN FDB entry"
|
|
}
|
|
|
|
backup_nhid_invalid()
|
|
{
|
|
local dmac=00:11:22:33:44:55
|
|
local smac=00:aa:bb:cc:dd:ee
|
|
local tx_drop
|
|
|
|
echo
|
|
echo "Backup nexthop ID - invalid IDs"
|
|
echo "-------------------------------"
|
|
|
|
# Check that when traffic is redirected with an invalid nexthop ID, it
|
|
# is forwarded out of the VXLAN port, but dropped by the VXLAN driver
|
|
# and does not crash the host.
|
|
|
|
run_cmd "tc -n $sw1 qdisc replace dev swp1 clsact"
|
|
run_cmd "tc -n $sw1 filter replace dev swp1 egress pref 1 handle 101 proto ip flower src_mac $smac dst_mac $dmac action pass"
|
|
|
|
run_cmd "tc -n $sw1 qdisc replace dev vx0 clsact"
|
|
run_cmd "tc -n $sw1 filter replace dev vx0 egress pref 1 handle 101 proto ip flower src_mac $smac dst_mac $dmac action pass"
|
|
# Drop all other Tx traffic to avoid changes to Tx drop counter.
|
|
run_cmd "tc -n $sw1 filter replace dev vx0 egress pref 2 handle 102 proto all matchall action drop"
|
|
|
|
tx_drop=$(ip -n $sw1 -s -j link show dev vx0 | jq '.[]["stats64"]["tx"]["dropped"]')
|
|
|
|
run_cmd "ip -n $sw1 nexthop replace id 1 via 192.0.2.34 fdb"
|
|
run_cmd "ip -n $sw1 nexthop replace id 2 via 192.0.2.34 fdb"
|
|
run_cmd "ip -n $sw1 nexthop replace id 10 group 1/2 fdb"
|
|
|
|
run_cmd "bridge -n $sw1 fdb replace $dmac dev swp1 master static vlan 10"
|
|
|
|
run_cmd "tc -n $sw2 qdisc replace dev vx0 clsact"
|
|
run_cmd "tc -n $sw2 filter replace dev vx0 ingress pref 1 handle 101 proto ip flower src_mac $smac dst_mac $dmac enc_key_id 10010 enc_dst_ip 192.0.2.34 action pass"
|
|
|
|
# First, check that redirection works.
|
|
run_cmd "bridge -n $sw1 link set dev swp1 backup_port vx0"
|
|
run_cmd "bridge -n $sw1 -d link show dev swp1 | grep \"backup_port vx0\""
|
|
log_test $? 0 "vx0 configured as backup port of swp1"
|
|
|
|
run_cmd "bridge -n $sw1 link set dev swp1 backup_nhid 10"
|
|
run_cmd "bridge -n $sw1 -d link show dev swp1 | grep \"backup_nhid 10\""
|
|
log_test $? 0 "Valid nexthop as backup nexthop"
|
|
|
|
run_cmd "ip -n $sw1 link set dev swp1 carrier off"
|
|
busywait $BUSYWAIT_TIMEOUT bridge_link_check $sw1 swp1 disabled
|
|
log_test $? 0 "swp1 carrier off"
|
|
|
|
run_cmd "ip netns exec $sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
|
tc_check_packets $sw1 "dev swp1 egress" 101 0
|
|
log_test $? 0 "No forwarding out of swp1"
|
|
tc_check_packets $sw1 "dev vx0 egress" 101 1
|
|
log_test $? 0 "Forwarding out of vx0"
|
|
tc_check_packets $sw2 "dev vx0 ingress" 101 1
|
|
log_test $? 0 "Forwarding using backup nexthop ID"
|
|
run_cmd "ip -n $sw1 -s -j link show dev vx0 | jq -e '.[][\"stats64\"][\"tx\"][\"dropped\"] == $tx_drop'"
|
|
log_test $? 0 "No Tx drop increase"
|
|
|
|
# Use a non-existent nexthop ID.
|
|
run_cmd "bridge -n $sw1 link set dev swp1 backup_nhid 20"
|
|
run_cmd "bridge -n $sw1 -d link show dev swp1 | grep \"backup_nhid 20\""
|
|
log_test $? 0 "Non-existent nexthop as backup nexthop"
|
|
|
|
run_cmd "ip netns exec $sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
|
tc_check_packets $sw1 "dev swp1 egress" 101 0
|
|
log_test $? 0 "No forwarding out of swp1"
|
|
tc_check_packets $sw1 "dev vx0 egress" 101 2
|
|
log_test $? 0 "Forwarding out of vx0"
|
|
tc_check_packets $sw2 "dev vx0 ingress" 101 1
|
|
log_test $? 0 "No forwarding using backup nexthop ID"
|
|
run_cmd "ip -n $sw1 -s -j link show dev vx0 | jq -e '.[][\"stats64\"][\"tx\"][\"dropped\"] == $((tx_drop + 1))'"
|
|
log_test $? 0 "Tx drop increased"
|
|
|
|
# Use a blckhole nexthop.
|
|
run_cmd "ip -n $sw1 nexthop replace id 30 blackhole"
|
|
run_cmd "bridge -n $sw1 link set dev swp1 backup_nhid 30"
|
|
run_cmd "bridge -n $sw1 -d link show dev swp1 | grep \"backup_nhid 30\""
|
|
log_test $? 0 "Blackhole nexthop as backup nexthop"
|
|
|
|
run_cmd "ip netns exec $sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
|
tc_check_packets $sw1 "dev swp1 egress" 101 0
|
|
log_test $? 0 "No forwarding out of swp1"
|
|
tc_check_packets $sw1 "dev vx0 egress" 101 3
|
|
log_test $? 0 "Forwarding out of vx0"
|
|
tc_check_packets $sw2 "dev vx0 ingress" 101 1
|
|
log_test $? 0 "No forwarding using backup nexthop ID"
|
|
run_cmd "ip -n $sw1 -s -j link show dev vx0 | jq -e '.[][\"stats64\"][\"tx\"][\"dropped\"] == $((tx_drop + 2))'"
|
|
log_test $? 0 "Tx drop increased"
|
|
|
|
# Non-group FDB nexthop.
|
|
run_cmd "bridge -n $sw1 link set dev swp1 backup_nhid 1"
|
|
run_cmd "bridge -n $sw1 -d link show dev swp1 | grep \"backup_nhid 1\""
|
|
log_test $? 0 "Non-group FDB nexthop as backup nexthop"
|
|
|
|
run_cmd "ip netns exec $sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
|
tc_check_packets $sw1 "dev swp1 egress" 101 0
|
|
log_test $? 0 "No forwarding out of swp1"
|
|
tc_check_packets $sw1 "dev vx0 egress" 101 4
|
|
log_test $? 0 "Forwarding out of vx0"
|
|
tc_check_packets $sw2 "dev vx0 ingress" 101 1
|
|
log_test $? 0 "No forwarding using backup nexthop ID"
|
|
run_cmd "ip -n $sw1 -s -j link show dev vx0 | jq -e '.[][\"stats64\"][\"tx\"][\"dropped\"] == $((tx_drop + 3))'"
|
|
log_test $? 0 "Tx drop increased"
|
|
|
|
# IPv6 address family nexthop.
|
|
run_cmd "ip -n $sw1 nexthop replace id 100 via 2001:db8:100::1 fdb"
|
|
run_cmd "ip -n $sw1 nexthop replace id 200 via 2001:db8:100::1 fdb"
|
|
run_cmd "ip -n $sw1 nexthop replace id 300 group 100/200 fdb"
|
|
run_cmd "bridge -n $sw1 link set dev swp1 backup_nhid 300"
|
|
run_cmd "bridge -n $sw1 -d link show dev swp1 | grep \"backup_nhid 300\""
|
|
log_test $? 0 "IPv6 address family nexthop as backup nexthop"
|
|
|
|
run_cmd "ip netns exec $sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1"
|
|
tc_check_packets $sw1 "dev swp1 egress" 101 0
|
|
log_test $? 0 "No forwarding out of swp1"
|
|
tc_check_packets $sw1 "dev vx0 egress" 101 5
|
|
log_test $? 0 "Forwarding out of vx0"
|
|
tc_check_packets $sw2 "dev vx0 ingress" 101 1
|
|
log_test $? 0 "No forwarding using backup nexthop ID"
|
|
run_cmd "ip -n $sw1 -s -j link show dev vx0 | jq -e '.[][\"stats64\"][\"tx\"][\"dropped\"] == $((tx_drop + 4))'"
|
|
log_test $? 0 "Tx drop increased"
|
|
}
|
|
|
|
backup_nhid_ping()
|
|
{
|
|
local sw1_mac
|
|
local sw2_mac
|
|
|
|
echo
|
|
echo "Backup nexthop ID - ping"
|
|
echo "------------------------"
|
|
|
|
# Test bidirectional traffic when traffic is redirected in both VTEPs.
|
|
sw1_mac=$(ip -n $sw1 -j -p link show br0.10 | jq -r '.[]["address"]')
|
|
sw2_mac=$(ip -n $sw2 -j -p link show br0.10 | jq -r '.[]["address"]')
|
|
|
|
run_cmd "bridge -n $sw1 fdb replace $sw2_mac dev swp1 master static vlan 10"
|
|
run_cmd "bridge -n $sw2 fdb replace $sw1_mac dev swp1 master static vlan 10"
|
|
|
|
run_cmd "ip -n $sw1 neigh replace 192.0.2.66 lladdr $sw2_mac nud perm dev br0.10"
|
|
run_cmd "ip -n $sw2 neigh replace 192.0.2.65 lladdr $sw1_mac nud perm dev br0.10"
|
|
|
|
run_cmd "ip -n $sw1 nexthop replace id 1 via 192.0.2.34 fdb"
|
|
run_cmd "ip -n $sw2 nexthop replace id 1 via 192.0.2.33 fdb"
|
|
run_cmd "ip -n $sw1 nexthop replace id 10 group 1 fdb"
|
|
run_cmd "ip -n $sw2 nexthop replace id 10 group 1 fdb"
|
|
|
|
run_cmd "bridge -n $sw1 link set dev swp1 backup_port vx0"
|
|
run_cmd "bridge -n $sw2 link set dev swp1 backup_port vx0"
|
|
run_cmd "bridge -n $sw1 link set dev swp1 backup_nhid 10"
|
|
run_cmd "bridge -n $sw2 link set dev swp1 backup_nhid 10"
|
|
|
|
run_cmd "ip -n $sw1 link set dev swp1 carrier off"
|
|
busywait $BUSYWAIT_TIMEOUT bridge_link_check $sw1 swp1 disabled
|
|
run_cmd "ip -n $sw2 link set dev swp1 carrier off"
|
|
busywait $BUSYWAIT_TIMEOUT bridge_link_check $sw2 swp1 disabled
|
|
|
|
run_cmd "ip netns exec $sw1 ping -i 0.1 -c 10 -w $PING_TIMEOUT 192.0.2.66"
|
|
log_test $? 0 "Ping with backup nexthop ID"
|
|
|
|
# Reset the backup nexthop ID to 0 and check that ping fails.
|
|
run_cmd "bridge -n $sw1 link set dev swp1 backup_nhid 0"
|
|
run_cmd "bridge -n $sw2 link set dev swp1 backup_nhid 0"
|
|
|
|
run_cmd "ip netns exec $sw1 ping -i 0.1 -c 10 -w $PING_TIMEOUT 192.0.2.66"
|
|
log_test $? 1 "Ping after disabling backup nexthop ID"
|
|
}
|
|
|
|
backup_nhid_add_del_loop()
|
|
{
|
|
while true; do
|
|
ip -n $sw1 nexthop del id 10
|
|
ip -n $sw1 nexthop replace id 10 group 1/2 fdb
|
|
done >/dev/null 2>&1
|
|
}
|
|
|
|
backup_nhid_torture()
|
|
{
|
|
local dmac=00:11:22:33:44:55
|
|
local smac=00:aa:bb:cc:dd:ee
|
|
local pid1
|
|
local pid2
|
|
local pid3
|
|
|
|
echo
|
|
echo "Backup nexthop ID - torture test"
|
|
echo "--------------------------------"
|
|
|
|
# Continuously send traffic through the backup nexthop while adding and
|
|
# deleting the group. The test is considered successful if nothing
|
|
# crashed.
|
|
|
|
run_cmd "ip -n $sw1 nexthop replace id 1 via 192.0.2.34 fdb"
|
|
run_cmd "ip -n $sw1 nexthop replace id 2 via 192.0.2.34 fdb"
|
|
run_cmd "ip -n $sw1 nexthop replace id 10 group 1/2 fdb"
|
|
|
|
run_cmd "bridge -n $sw1 fdb replace $dmac dev swp1 master static vlan 10"
|
|
|
|
run_cmd "bridge -n $sw1 link set dev swp1 backup_port vx0"
|
|
run_cmd "bridge -n $sw1 link set dev swp1 backup_nhid 10"
|
|
run_cmd "ip -n $sw1 link set dev swp1 carrier off"
|
|
|
|
backup_nhid_add_del_loop &
|
|
pid1=$!
|
|
ip netns exec $sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 0 &
|
|
pid2=$!
|
|
|
|
sleep 30
|
|
kill -9 $pid1 $pid2
|
|
wait $pid1 $pid2 2>/dev/null
|
|
|
|
log_test 0 0 "Torture test"
|
|
}
|
|
|
|
################################################################################
|
|
# Usage
|
|
|
|
usage()
|
|
{
|
|
cat <<EOF
|
|
usage: ${0##*/} OPTS
|
|
|
|
-t <test> Test(s) to run (default: all)
|
|
(options: $TESTS)
|
|
-p Pause on fail
|
|
-P Pause after each test before cleanup
|
|
-v Verbose mode (show commands and output)
|
|
-w Timeout for ping
|
|
EOF
|
|
}
|
|
|
|
################################################################################
|
|
# Main
|
|
|
|
trap cleanup EXIT
|
|
|
|
while getopts ":t:pPvhw:" opt; do
|
|
case $opt in
|
|
t) TESTS=$OPTARG;;
|
|
p) PAUSE_ON_FAIL=yes;;
|
|
P) PAUSE=yes;;
|
|
v) VERBOSE=$(($VERBOSE + 1));;
|
|
w) PING_TIMEOUT=$OPTARG;;
|
|
h) usage; exit 0;;
|
|
*) usage; exit 1;;
|
|
esac
|
|
done
|
|
|
|
# Make sure we don't pause twice.
|
|
[ "${PAUSE}" = "yes" ] && PAUSE_ON_FAIL=no
|
|
|
|
if [ "$(id -u)" -ne 0 ];then
|
|
echo "SKIP: Need root privileges"
|
|
exit $ksft_skip;
|
|
fi
|
|
|
|
if [ ! -x "$(command -v ip)" ]; then
|
|
echo "SKIP: Could not run test without ip tool"
|
|
exit $ksft_skip
|
|
fi
|
|
|
|
if [ ! -x "$(command -v bridge)" ]; then
|
|
echo "SKIP: Could not run test without bridge tool"
|
|
exit $ksft_skip
|
|
fi
|
|
|
|
if [ ! -x "$(command -v tc)" ]; then
|
|
echo "SKIP: Could not run test without tc tool"
|
|
exit $ksft_skip
|
|
fi
|
|
|
|
if [ ! -x "$(command -v mausezahn)" ]; then
|
|
echo "SKIP: Could not run test without mausezahn tool"
|
|
exit $ksft_skip
|
|
fi
|
|
|
|
if [ ! -x "$(command -v jq)" ]; then
|
|
echo "SKIP: Could not run test without jq tool"
|
|
exit $ksft_skip
|
|
fi
|
|
|
|
bridge link help 2>&1 | grep -q "backup_nhid"
|
|
if [ $? -ne 0 ]; then
|
|
echo "SKIP: iproute2 bridge too old, missing backup nexthop ID support"
|
|
exit $ksft_skip
|
|
fi
|
|
|
|
# Start clean.
|
|
cleanup
|
|
|
|
for t in $TESTS
|
|
do
|
|
setup; $t; cleanup;
|
|
done
|
|
|
|
if [ "$TESTS" != "none" ]; then
|
|
printf "\nTests passed: %3d\n" ${nsuccess}
|
|
printf "Tests failed: %3d\n" ${nfail}
|
|
fi
|
|
|
|
exit $ret
|