| #!/bin/bash |
| # SPDX-License-Identifier: GPL-2.0 |
| |
| # +-----------------------+ +----------------------+ |
| # | H1 (vrf) | | H2 (vrf) | |
| # | + $h1 | | $h2 + | |
| # | | 192.0.2.1/28 | | 192.0.2.2/28 | | |
| # | | 2001:db8:1::1/64 | | 2001:db8:1::2/64 | | |
| # +----|------------------+ +------------------|---+ |
| # | | |
| # +----|-------------------------------------------------------------------|---+ |
| # | SW | | | |
| # | +-|-------------------------------------------------------------------|-+ | |
| # | | + $swp1 BR $swp2 + | | |
| # | +-----------------------------------------------------------------------+ | |
| # +----------------------------------------------------------------------------+ |
| |
| ALL_TESTS=" |
| test_l2_miss_unicast |
| test_l2_miss_multicast |
| test_l2_miss_ll_multicast |
| test_l2_miss_broadcast |
| " |
| |
| NUM_NETIFS=4 |
| source lib.sh |
| source tc_common.sh |
| |
| h1_create() |
| { |
| simple_if_init $h1 192.0.2.1/28 2001:db8:1::1/64 |
| } |
| |
| h1_destroy() |
| { |
| simple_if_fini $h1 192.0.2.1/28 2001:db8:1::1/64 |
| } |
| |
| h2_create() |
| { |
| simple_if_init $h2 192.0.2.2/28 2001:db8:1::2/64 |
| } |
| |
| h2_destroy() |
| { |
| simple_if_fini $h2 192.0.2.2/28 2001:db8:1::2/64 |
| } |
| |
| switch_create() |
| { |
| ip link add name br1 up type bridge |
| ip link set dev $swp1 master br1 |
| ip link set dev $swp1 up |
| ip link set dev $swp2 master br1 |
| ip link set dev $swp2 up |
| |
| tc qdisc add dev $swp2 clsact |
| } |
| |
| switch_destroy() |
| { |
| tc qdisc del dev $swp2 clsact |
| |
| ip link set dev $swp2 down |
| ip link set dev $swp2 nomaster |
| ip link set dev $swp1 down |
| ip link set dev $swp1 nomaster |
| ip link del dev br1 |
| } |
| |
| test_l2_miss_unicast() |
| { |
| local dmac=00:01:02:03:04:05 |
| local dip=192.0.2.2 |
| local sip=192.0.2.1 |
| |
| RET=0 |
| |
| # Unknown unicast. |
| tc filter add dev $swp2 egress protocol ipv4 handle 101 pref 1 \ |
| flower indev $swp1 l2_miss 1 dst_mac $dmac src_ip $sip \ |
| dst_ip $dip action pass |
| # Known unicast. |
| tc filter add dev $swp2 egress protocol ipv4 handle 102 pref 1 \ |
| flower indev $swp1 l2_miss 0 dst_mac $dmac src_ip $sip \ |
| dst_ip $dip action pass |
| |
| # Before adding FDB entry. |
| $MZ $h1 -a own -b $dmac -t ip -A $sip -B $dip -c 1 -p 100 -q |
| |
| tc_check_packets "dev $swp2 egress" 101 1 |
| check_err $? "Unknown unicast filter was not hit before adding FDB entry" |
| |
| tc_check_packets "dev $swp2 egress" 102 0 |
| check_err $? "Known unicast filter was hit before adding FDB entry" |
| |
| # Adding FDB entry. |
| bridge fdb replace $dmac dev $swp2 master static |
| |
| $MZ $h1 -a own -b $dmac -t ip -A $sip -B $dip -c 1 -p 100 -q |
| |
| tc_check_packets "dev $swp2 egress" 101 1 |
| check_err $? "Unknown unicast filter was hit after adding FDB entry" |
| |
| tc_check_packets "dev $swp2 egress" 102 1 |
| check_err $? "Known unicast filter was not hit after adding FDB entry" |
| |
| # Deleting FDB entry. |
| bridge fdb del $dmac dev $swp2 master static |
| |
| $MZ $h1 -a own -b $dmac -t ip -A $sip -B $dip -c 1 -p 100 -q |
| |
| tc_check_packets "dev $swp2 egress" 101 2 |
| check_err $? "Unknown unicast filter was not hit after deleting FDB entry" |
| |
| tc_check_packets "dev $swp2 egress" 102 1 |
| check_err $? "Known unicast filter was hit after deleting FDB entry" |
| |
| tc filter del dev $swp2 egress protocol ipv4 pref 1 handle 102 flower |
| tc filter del dev $swp2 egress protocol ipv4 pref 1 handle 101 flower |
| |
| log_test "L2 miss - Unicast" |
| } |
| |
| test_l2_miss_multicast_common() |
| { |
| local proto=$1; shift |
| local sip=$1; shift |
| local dip=$1; shift |
| local dmac=$1; shift |
| local mode=$1; shift |
| local name=$1; shift |
| |
| RET=0 |
| |
| # Unregistered multicast. |
| tc filter add dev $swp2 egress protocol $proto handle 101 pref 1 \ |
| flower indev $swp1 l2_miss 1 src_ip $sip dst_ip $dip \ |
| action pass |
| # Registered multicast. |
| tc filter add dev $swp2 egress protocol $proto handle 102 pref 1 \ |
| flower indev $swp1 l2_miss 0 src_ip $sip dst_ip $dip \ |
| action pass |
| |
| # Before adding MDB entry. |
| $MZ $mode $h1 -a own -b $dmac -t ip -A $sip -B $dip -c 1 -p 100 -q |
| |
| tc_check_packets "dev $swp2 egress" 101 1 |
| check_err $? "Unregistered multicast filter was not hit before adding MDB entry" |
| |
| tc_check_packets "dev $swp2 egress" 102 0 |
| check_err $? "Registered multicast filter was hit before adding MDB entry" |
| |
| # Adding MDB entry. |
| bridge mdb replace dev br1 port $swp2 grp $dip permanent |
| |
| $MZ $mode $h1 -a own -b $dmac -t ip -A $sip -B $dip -c 1 -p 100 -q |
| |
| tc_check_packets "dev $swp2 egress" 101 1 |
| check_err $? "Unregistered multicast filter was hit after adding MDB entry" |
| |
| tc_check_packets "dev $swp2 egress" 102 1 |
| check_err $? "Registered multicast filter was not hit after adding MDB entry" |
| |
| # Deleting MDB entry. |
| bridge mdb del dev br1 port $swp2 grp $dip |
| |
| $MZ $mode $h1 -a own -b $dmac -t ip -A $sip -B $dip -c 1 -p 100 -q |
| |
| tc_check_packets "dev $swp2 egress" 101 2 |
| check_err $? "Unregistered multicast filter was not hit after deleting MDB entry" |
| |
| tc_check_packets "dev $swp2 egress" 102 1 |
| check_err $? "Registered multicast filter was hit after deleting MDB entry" |
| |
| tc filter del dev $swp2 egress protocol $proto pref 1 handle 102 flower |
| tc filter del dev $swp2 egress protocol $proto pref 1 handle 101 flower |
| |
| log_test "L2 miss - Multicast ($name)" |
| } |
| |
| test_l2_miss_multicast_ipv4() |
| { |
| local proto="ipv4" |
| local sip=192.0.2.1 |
| local dip=239.1.1.1 |
| local dmac=01:00:5e:01:01:01 |
| local mode="-4" |
| local name="IPv4" |
| |
| test_l2_miss_multicast_common $proto $sip $dip $dmac $mode $name |
| } |
| |
| test_l2_miss_multicast_ipv6() |
| { |
| local proto="ipv6" |
| local sip=2001:db8:1::1 |
| local dip=ff0e::1 |
| local dmac=33:33:00:00:00:01 |
| local mode="-6" |
| local name="IPv6" |
| |
| test_l2_miss_multicast_common $proto $sip $dip $dmac $mode $name |
| } |
| |
| test_l2_miss_multicast() |
| { |
| # Configure $swp2 as a multicast router port so that it will forward |
| # both registered and unregistered multicast traffic. |
| bridge link set dev $swp2 mcast_router 2 |
| |
| # Set the Max Response Delay to 100 centiseconds (1 second) so that the |
| # bridge will start forwarding according to its MDB soon after a |
| # multicast querier is enabled. |
| ip link set dev br1 type bridge mcast_query_response_interval 100 |
| |
| # Forwarding according to MDB entries only takes place when the bridge |
| # detects that there is a valid querier in the network. Set the bridge |
| # as the querier and assign it a valid IPv6 link-local address to be |
| # used as the source address for MLD queries. |
| ip link set dev br1 type bridge mcast_querier 1 |
| ip -6 address add fe80::1/64 nodad dev br1 |
| sleep 10 |
| |
| test_l2_miss_multicast_ipv4 |
| test_l2_miss_multicast_ipv6 |
| |
| ip -6 address del fe80::1/64 dev br1 |
| ip link set dev br1 type bridge mcast_querier 0 |
| ip link set dev br1 type bridge mcast_query_response_interval 1000 |
| bridge link set dev $swp2 mcast_router 1 |
| } |
| |
| test_l2_miss_multicast_common2() |
| { |
| local name=$1; shift |
| local dmac=$1; shift |
| local dip=224.0.0.1 |
| local sip=192.0.2.1 |
| |
| } |
| |
| test_l2_miss_ll_multicast_common() |
| { |
| local proto=$1; shift |
| local dmac=$1; shift |
| local sip=$1; shift |
| local dip=$1; shift |
| local mode=$1; shift |
| local name=$1; shift |
| |
| RET=0 |
| |
| tc filter add dev $swp2 egress protocol $proto handle 101 pref 1 \ |
| flower indev $swp1 l2_miss 1 dst_mac $dmac src_ip $sip \ |
| dst_ip $dip action pass |
| |
| $MZ $mode $h1 -a own -b $dmac -t ip -A $sip -B $dip -c 1 -p 100 -q |
| |
| tc_check_packets "dev $swp2 egress" 101 1 |
| check_err $? "Filter was not hit" |
| |
| tc filter del dev $swp2 egress protocol $proto pref 1 handle 101 flower |
| |
| log_test "L2 miss - Link-local multicast ($name)" |
| } |
| |
| test_l2_miss_ll_multicast_ipv4() |
| { |
| local proto=ipv4 |
| local dmac=01:00:5e:00:00:01 |
| local sip=192.0.2.1 |
| local dip=224.0.0.1 |
| local mode="-4" |
| local name="IPv4" |
| |
| test_l2_miss_ll_multicast_common $proto $dmac $sip $dip $mode $name |
| } |
| |
| test_l2_miss_ll_multicast_ipv6() |
| { |
| local proto=ipv6 |
| local dmac=33:33:00:00:00:01 |
| local sip=2001:db8:1::1 |
| local dip=ff02::1 |
| local mode="-6" |
| local name="IPv6" |
| |
| test_l2_miss_ll_multicast_common $proto $dmac $sip $dip $mode $name |
| } |
| |
| test_l2_miss_ll_multicast() |
| { |
| test_l2_miss_ll_multicast_ipv4 |
| test_l2_miss_ll_multicast_ipv6 |
| } |
| |
| test_l2_miss_broadcast() |
| { |
| local dmac=ff:ff:ff:ff:ff:ff |
| local smac=00:01:02:03:04:05 |
| |
| RET=0 |
| |
| tc filter add dev $swp2 egress protocol all handle 101 pref 1 \ |
| flower l2_miss 1 dst_mac $dmac src_mac $smac \ |
| action pass |
| tc filter add dev $swp2 egress protocol all handle 102 pref 1 \ |
| flower l2_miss 0 dst_mac $dmac src_mac $smac \ |
| action pass |
| |
| $MZ $h1 -a $smac -b $dmac -c 1 -p 100 -q |
| |
| tc_check_packets "dev $swp2 egress" 101 0 |
| check_err $? "L2 miss filter was hit when should not" |
| |
| tc_check_packets "dev $swp2 egress" 102 1 |
| check_err $? "L2 no miss filter was not hit when should" |
| |
| tc filter del dev $swp2 egress protocol all pref 1 handle 102 flower |
| tc filter del dev $swp2 egress protocol all pref 1 handle 101 flower |
| |
| log_test "L2 miss - Broadcast" |
| } |
| |
| setup_prepare() |
| { |
| h1=${NETIFS[p1]} |
| swp1=${NETIFS[p2]} |
| |
| swp2=${NETIFS[p3]} |
| h2=${NETIFS[p4]} |
| |
| vrf_prepare |
| h1_create |
| h2_create |
| switch_create |
| } |
| |
| cleanup() |
| { |
| pre_cleanup |
| |
| switch_destroy |
| h2_destroy |
| h1_destroy |
| vrf_cleanup |
| } |
| |
| trap cleanup EXIT |
| |
| setup_prepare |
| setup_wait |
| |
| tests_run |
| |
| exit $EXIT_STATUS |
