| #!/bin/bash | |
| # | |
| # This test is for checking rtnetlink callpaths, and get as much coverage as possible. | |
| # | |
| # set -e | |
| ALL_TESTS=" | |
| kci_test_polrouting | |
| kci_test_route_get | |
| kci_test_addrlft | |
| kci_test_addrlft_route_cleanup | |
| kci_test_promote_secondaries | |
| kci_test_tc | |
| kci_test_gre | |
| kci_test_gretap | |
| kci_test_ip6gretap | |
| kci_test_erspan | |
| kci_test_ip6erspan | |
| kci_test_bridge | |
| kci_test_addrlabel | |
| kci_test_ifalias | |
| kci_test_vrf | |
| kci_test_encap | |
| kci_test_macsec | |
| kci_test_macsec_vlan | |
| kci_test_team_bridge_macvlan | |
| kci_test_bridge_promisc_netlink | |
| kci_test_bridge_promisc_sysfs | |
| kci_test_ipsec | |
| kci_test_ipsec_offload | |
| kci_test_fdb_get | |
| kci_test_fdb_del | |
| kci_test_neigh_get | |
| kci_test_neigh_update | |
| kci_test_bridge_parent_id | |
| kci_test_address_proto | |
| kci_test_enslave_bonding | |
| kci_test_mngtmpaddr | |
| kci_test_operstate | |
| " | |
| devdummy="test-dummy0" | |
| VERBOSE=0 | |
| PAUSE=no | |
| PAUSE_ON_FAIL=no | |
| source lib.sh | |
| # set global exit status, but never reset nonzero one. | |
| check_err() | |
| { | |
| if [ $ret -eq 0 ]; then | |
| ret=$1 | |
| fi | |
| [ -n "$2" ] && echo "$2" | |
| } | |
| # same but inverted -- used when command must fail for test to pass | |
| check_fail() | |
| { | |
| if [ $1 -eq 0 ]; then | |
| ret=1 | |
| fi | |
| } | |
| sysfs_write() | |
| { | |
| local val="$1" | |
| local path="$2" | |
| echo "$val" > "$path" | |
| } | |
| run_cmd_common() | |
| { | |
| local cmd="$*" | |
| local out | |
| if [ "$VERBOSE" = "1" ]; then | |
| echo "COMMAND: ${cmd}" | |
| fi | |
| out=$($cmd 2>&1) | |
| rc=$? | |
| if [ "$VERBOSE" = "1" -a -n "$out" ]; then | |
| echo " $out" | |
| fi | |
| return $rc | |
| } | |
| run_cmd() { | |
| run_cmd_common "$@" | |
| rc=$? | |
| check_err $rc | |
| return $rc | |
| } | |
| run_cmd_fail() | |
| { | |
| run_cmd_common "$@" | |
| rc=$? | |
| check_fail $rc | |
| return $rc | |
| } | |
| run_cmd_grep_common() | |
| { | |
| local find="$1"; shift | |
| local cmd="$*" | |
| local out | |
| if [ "$VERBOSE" = "1" ]; then | |
| echo "COMMAND: ${cmd} 2>&1 | grep -q '${find}'" | |
| fi | |
| out=$($cmd 2>&1 | grep -q "${find}" 2>&1) | |
| return $? | |
| } | |
| run_cmd_grep() { | |
| run_cmd_grep_common "$@" | |
| rc=$? | |
| check_err $rc | |
| return $rc | |
| } | |
| run_cmd_grep_fail() | |
| { | |
| run_cmd_grep_common "$@" | |
| rc=$? | |
| check_fail $rc | |
| return $rc | |
| } | |
| end_test() | |
| { | |
| echo "$*" | |
| [ "${VERBOSE}" = "1" ] && echo | |
| if [[ $ret -ne 0 ]] && [[ "${PAUSE_ON_FAIL}" = "yes" ]]; then | |
| echo "Hit enter to continue" | |
| read a | |
| fi; | |
| if [ "${PAUSE}" = "yes" ]; then | |
| echo "Hit enter to continue" | |
| read a | |
| fi | |
| } | |
| kci_add_dummy() | |
| { | |
| run_cmd ip link add name "$devdummy" type dummy | |
| run_cmd ip link set "$devdummy" up | |
| } | |
| kci_del_dummy() | |
| { | |
| run_cmd ip link del dev "$devdummy" | |
| } | |
| kci_test_netconf() | |
| { | |
| dev="$1" | |
| r=$ret | |
| run_cmd ip netconf show dev "$dev" | |
| for f in 4 6; do | |
| run_cmd ip -$f netconf show dev "$dev" | |
| done | |
| if [ $ret -ne 0 ] ;then | |
| end_test "FAIL: ip netconf show $dev" | |
| test $r -eq 0 && ret=0 | |
| return 1 | |
| fi | |
| } | |
| # add a bridge with vlans on top | |
| kci_test_bridge() | |
| { | |
| devbr="test-br0" | |
| vlandev="testbr-vlan1" | |
| local ret=0 | |
| run_cmd ip link add name "$devbr" type bridge | |
| run_cmd ip link set dev "$devdummy" master "$devbr" | |
| run_cmd ip link set "$devbr" up | |
| run_cmd ip link add link "$devbr" name "$vlandev" type vlan id 1 | |
| run_cmd ip addr add dev "$vlandev" 10.200.7.23/30 | |
| run_cmd ip -6 addr add dev "$vlandev" dead:42::1234/64 | |
| run_cmd ip -d link | |
| run_cmd ip r s t all | |
| for name in "$devbr" "$vlandev" "$devdummy" ; do | |
| kci_test_netconf "$name" | |
| done | |
| run_cmd ip -6 addr del dev "$vlandev" dead:42::1234/64 | |
| run_cmd ip link del dev "$vlandev" | |
| run_cmd ip link del dev "$devbr" | |
| if [ $ret -ne 0 ];then | |
| end_test "FAIL: bridge setup" | |
| return 1 | |
| fi | |
| end_test "PASS: bridge setup" | |
| } | |
| kci_test_gre() | |
| { | |
| gredev=neta | |
| rem=10.42.42.1 | |
| loc=10.0.0.1 | |
| local ret=0 | |
| run_cmd ip tunnel add $gredev mode gre remote $rem local $loc ttl 1 | |
| run_cmd ip link set $gredev up | |
| run_cmd ip addr add 10.23.7.10 dev $gredev | |
| run_cmd ip route add 10.23.8.0/30 dev $gredev | |
| run_cmd ip addr add dev "$devdummy" 10.23.7.11/24 | |
| run_cmd ip link | |
| run_cmd ip addr | |
| kci_test_netconf "$gredev" | |
| run_cmd ip addr del dev "$devdummy" 10.23.7.11/24 | |
| run_cmd ip link del $gredev | |
| if [ $ret -ne 0 ];then | |
| end_test "FAIL: gre tunnel endpoint" | |
| return 1 | |
| fi | |
| end_test "PASS: gre tunnel endpoint" | |
| } | |
| # tc uses rtnetlink too, for full tc testing | |
| # please see tools/testing/selftests/tc-testing. | |
| kci_test_tc() | |
| { | |
| dev=lo | |
| local ret=0 | |
| run_cmd tc qdisc add dev "$dev" root handle 1: htb | |
| run_cmd tc class add dev "$dev" parent 1: classid 1:10 htb rate 1mbit | |
| run_cmd tc filter add dev "$dev" parent 1:0 prio 5 handle ffe: protocol ip u32 divisor 256 | |
| run_cmd tc filter add dev "$dev" parent 1:0 prio 5 handle ffd: protocol ip u32 divisor 256 | |
| run_cmd tc filter add dev "$dev" parent 1:0 prio 5 handle ffc: protocol ip u32 divisor 256 | |
| run_cmd tc filter add dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:3 u32 ht ffe:2: match ip src 10.0.0.3 flowid 1:10 | |
| run_cmd tc filter add dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:2 u32 ht ffe:2: match ip src 10.0.0.2 flowid 1:10 | |
| run_cmd tc filter show dev "$dev" parent 1:0 | |
| run_cmd tc filter del dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:3 u32 | |
| run_cmd tc filter show dev "$dev" parent 1:0 | |
| run_cmd tc qdisc del dev "$dev" root handle 1: htb | |
| if [ $ret -ne 0 ];then | |
| end_test "FAIL: tc htb hierarchy" | |
| return 1 | |
| fi | |
| end_test "PASS: tc htb hierarchy" | |
| } | |
| kci_test_polrouting() | |
| { | |
| local ret=0 | |
| run_cmd ip rule add fwmark 1 lookup 100 | |
| run_cmd ip route add local 0.0.0.0/0 dev lo table 100 | |
| run_cmd ip r s t all | |
| run_cmd ip rule del fwmark 1 lookup 100 | |
| run_cmd ip route del local 0.0.0.0/0 dev lo table 100 | |
| if [ $ret -ne 0 ];then | |
| end_test "FAIL: policy route test" | |
| return 1 | |
| fi | |
| end_test "PASS: policy routing" | |
| } | |
| kci_test_route_get() | |
| { | |
| local hash_policy=$(sysctl -n net.ipv4.fib_multipath_hash_policy) | |
| local ret=0 | |
| run_cmd ip route get 127.0.0.1 | |
| run_cmd ip route get 127.0.0.1 dev "$devdummy" | |
| run_cmd ip route get ::1 | |
| run_cmd ip route get fe80::1 dev "$devdummy" | |
| run_cmd ip route get 127.0.0.1 from 127.0.0.1 oif lo tos 0x10 mark 0x1 | |
| run_cmd ip route get ::1 from ::1 iif lo oif lo tos 0x10 mark 0x1 | |
| run_cmd ip addr add dev "$devdummy" 10.23.7.11/24 | |
| run_cmd ip route get 10.23.7.11 from 10.23.7.12 iif "$devdummy" | |
| run_cmd ip route add 10.23.8.0/24 \ | |
| nexthop via 10.23.7.13 dev "$devdummy" \ | |
| nexthop via 10.23.7.14 dev "$devdummy" | |
| sysctl -wq net.ipv4.fib_multipath_hash_policy=0 | |
| run_cmd ip route get 10.23.8.11 | |
| sysctl -wq net.ipv4.fib_multipath_hash_policy=1 | |
| run_cmd ip route get 10.23.8.11 | |
| sysctl -wq net.ipv4.fib_multipath_hash_policy="$hash_policy" | |
| run_cmd ip route del 10.23.8.0/24 | |
| run_cmd ip addr del dev "$devdummy" 10.23.7.11/24 | |
| if [ $ret -ne 0 ];then | |
| end_test "FAIL: route get" | |
| return 1 | |
| fi | |
| end_test "PASS: route get" | |
| } | |
| check_addr_not_exist() | |
| { | |
| dev=$1 | |
| addr=$2 | |
| if ip addr show dev $dev | grep -q $addr; then | |
| return 1 | |
| else | |
| return 0 | |
| fi | |
| } | |
| kci_test_addrlft() | |
| { | |
| for i in $(seq 10 100) ;do | |
| lft=$(((RANDOM%3) + 1)) | |
| run_cmd ip addr add 10.23.11.$i/32 dev "$devdummy" preferred_lft $lft valid_lft $((lft+1)) | |
| done | |
| slowwait 5 check_addr_not_exist "$devdummy" "10.23.11." | |
| if [ $? -eq 1 ]; then | |
| # troubleshoot the reason for our failure | |
| run_cmd ip addr show dev "$devdummy" | |
| check_err 1 | |
| end_test "FAIL: preferred_lft addresses remaining" | |
| return | |
| fi | |
| end_test "PASS: preferred_lft addresses have expired" | |
| } | |
| kci_test_addrlft_route_cleanup() | |
| { | |
| local ret=0 | |
| local test_addr="2001:db8:99::1/64" | |
| local test_prefix="2001:db8:99::/64" | |
| run_cmd ip -6 addr add $test_addr dev "$devdummy" valid_lft 300 preferred_lft 300 | |
| run_cmd_grep "$test_prefix proto kernel" ip -6 route show dev "$devdummy" | |
| run_cmd ip -6 addr del $test_addr dev "$devdummy" | |
| run_cmd_grep_fail "$test_prefix" ip -6 route show dev "$devdummy" | |
| if [ $ret -ne 0 ]; then | |
| end_test "FAIL: route not cleaned up when address with valid_lft deleted" | |
| return 1 | |
| fi | |
| end_test "PASS: route cleaned up when address with valid_lft deleted" | |
| } | |
| kci_test_promote_secondaries() | |
| { | |
| run_cmd ifconfig "$devdummy" | |
| if [ $ret -ne 0 ]; then | |
| end_test "SKIP: ifconfig not installed" | |
| return $ksft_skip | |
| fi | |
| promote=$(sysctl -n net.ipv4.conf.$devdummy.promote_secondaries) | |
| sysctl -q net.ipv4.conf.$devdummy.promote_secondaries=1 | |
| for i in $(seq 2 254);do | |
| IP="10.23.11.$i" | |
| ip -f inet addr add $IP/16 brd + dev "$devdummy" | |
| ifconfig "$devdummy" $IP netmask 255.255.0.0 | |
| done | |
| ip addr flush dev "$devdummy" | |
| [ $promote -eq 0 ] && sysctl -q net.ipv4.conf.$devdummy.promote_secondaries=0 | |
| end_test "PASS: promote_secondaries complete" | |
| } | |
| kci_test_addrlabel() | |
| { | |
| local ret=0 | |
| run_cmd ip addrlabel add prefix dead::/64 dev lo label 1 | |
| run_cmd_grep "prefix dead::/64 dev lo label 1" ip addrlabel list | |
| run_cmd ip addrlabel del prefix dead::/64 dev lo label 1 | |
| run_cmd ip addrlabel add prefix dead::/64 label 1 | |
| run_cmd ip addrlabel del prefix dead::/64 label 1 | |
| # concurrent add/delete | |
| for i in $(seq 1 1000); do | |
| ip addrlabel add prefix 1c3::/64 label 12345 2>/dev/null | |
| done & | |
| for i in $(seq 1 1000); do | |
| ip addrlabel del prefix 1c3::/64 label 12345 2>/dev/null | |
| done | |
| wait | |
| ip addrlabel del prefix 1c3::/64 label 12345 2>/dev/null | |
| if [ $ret -ne 0 ];then | |
| end_test "FAIL: ipv6 addrlabel" | |
| return 1 | |
| fi | |
| end_test "PASS: ipv6 addrlabel" | |
| } | |
| kci_test_ifalias() | |
| { | |
| local ret=0 | |
| namewant=$(uuidgen) | |
| syspathname="/sys/class/net/$devdummy/ifalias" | |
| run_cmd ip link set dev "$devdummy" alias "$namewant" | |
| if [ $ret -ne 0 ]; then | |
| end_test "FAIL: cannot set interface alias of $devdummy to $namewant" | |
| return 1 | |
| fi | |
| run_cmd_grep "alias $namewant" ip link show "$devdummy" | |
| if [ -r "$syspathname" ] ; then | |
| read namehave < "$syspathname" | |
| if [ "$namewant" != "$namehave" ]; then | |
| end_test "FAIL: did set ifalias $namewant but got $namehave" | |
| return 1 | |
| fi | |
| namewant=$(uuidgen) | |
| echo "$namewant" > "$syspathname" | |
| run_cmd_grep "alias $namewant" ip link show "$devdummy" | |
| # sysfs interface allows to delete alias again | |
| echo "" > "$syspathname" | |
| run_cmd_grep_fail "alias $namewant" ip link show "$devdummy" | |
| for i in $(seq 1 100); do | |
| uuidgen > "$syspathname" & | |
| done | |
| wait | |
| # re-add the alias -- kernel should free mem when dummy dev is removed | |
| run_cmd ip link set dev "$devdummy" alias "$namewant" | |
| fi | |
| if [ $ret -ne 0 ]; then | |
| end_test "FAIL: set interface alias $devdummy to $namewant" | |
| return 1 | |
| fi | |
| end_test "PASS: set ifalias $namewant for $devdummy" | |
| } | |
| kci_test_vrf() | |
| { | |
| vrfname="test-vrf" | |
| local ret=0 | |
| run_cmd ip link show type vrf | |
| if [ $? -ne 0 ]; then | |
| end_test "SKIP: vrf: iproute2 too old" | |
| return $ksft_skip | |
| fi | |
| run_cmd ip link add "$vrfname" type vrf table 10 | |
| if [ $ret -ne 0 ];then | |
| end_test "FAIL: can't add vrf interface, skipping test" | |
| return 0 | |
| fi | |
| run_cmd_grep "$vrfname" ip -br link show type vrf | |
| if [ $ret -ne 0 ];then | |
| end_test "FAIL: created vrf device not found" | |
| return 1 | |
| fi | |
| run_cmd ip link set dev "$vrfname" up | |
| run_cmd ip link set dev "$devdummy" master "$vrfname" | |
| run_cmd ip link del dev "$vrfname" | |
| if [ $ret -ne 0 ];then | |
| end_test "FAIL: vrf" | |
| return 1 | |
| fi | |
| end_test "PASS: vrf" | |
| } | |
| kci_test_encap_vxlan() | |
| { | |
| local ret=0 | |
| vxlan="test-vxlan0" | |
| vlan="test-vlan0" | |
| run_cmd ip -netns "$testns" link add "$vxlan" type vxlan id 42 group 239.1.1.1 \ | |
| dev "$devdummy" dstport 4789 | |
| if [ $? -ne 0 ]; then | |
| end_test "FAIL: can't add vxlan interface, skipping test" | |
| return 0 | |
| fi | |
| run_cmd ip -netns "$testns" addr add 10.2.11.49/24 dev "$vxlan" | |
| run_cmd ip -netns "$testns" link set up dev "$vxlan" | |
| run_cmd ip -netns "$testns" link add link "$vxlan" name "$vlan" type vlan id 1 | |
| # changelink testcases | |
| run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan vni 43 | |
| run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan group ffe5::5 dev "$devdummy" | |
| run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan ttl inherit | |
| run_cmd ip -netns "$testns" link set dev "$vxlan" type vxlan ttl 64 | |
| run_cmd ip -netns "$testns" link set dev "$vxlan" type vxlan nolearning | |
| run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan proxy | |
| run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan norsc | |
| run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan l2miss | |
| run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan l3miss | |
| run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan external | |
| run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan udpcsum | |
| run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan udp6zerocsumtx | |
| run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan udp6zerocsumrx | |
| run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan remcsumtx | |
| run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan remcsumrx | |
| run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan gbp | |
| run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan gpe | |
| run_cmd ip -netns "$testns" link del "$vxlan" | |
| if [ $ret -ne 0 ]; then | |
| end_test "FAIL: vxlan" | |
| return 1 | |
| fi | |
| end_test "PASS: vxlan" | |
| } | |
| kci_test_encap_fou() | |
| { | |
| local ret=0 | |
| name="test-fou" | |
| run_cmd_grep 'Usage: ip fou' ip fou help | |
| if [ $? -ne 0 ];then | |
| end_test "SKIP: fou: iproute2 too old" | |
| return $ksft_skip | |
| fi | |
| if ! /sbin/modprobe -q -n fou; then | |
| end_test "SKIP: module fou is not found" | |
| return $ksft_skip | |
| fi | |
| /sbin/modprobe -q fou | |
| run_cmd ip -netns "$testns" fou add port 7777 ipproto 47 | |
| if [ $? -ne 0 ];then | |
| end_test "FAIL: can't add fou port 7777, skipping test" | |
| return 1 | |
| fi | |
| run_cmd ip -netns "$testns" fou add port 8888 ipproto 4 | |
| run_cmd_fail ip -netns "$testns" fou del port 9999 | |
| run_cmd ip -netns "$testns" fou del port 7777 | |
| if [ $ret -ne 0 ]; then | |
| end_test "FAIL: fou" | |
| return 1 | |
| fi | |
| end_test "PASS: fou" | |
| } | |
| # test various encap methods, use netns to avoid unwanted interference | |
| kci_test_encap() | |
| { | |
| local ret=0 | |
| setup_ns testns | |
| if [ $? -ne 0 ]; then | |
| end_test "SKIP encap tests: cannot add net namespace $testns" | |
| return $ksft_skip | |
| fi | |
| run_cmd ip -netns "$testns" link set lo up | |
| run_cmd ip -netns "$testns" link add name "$devdummy" type dummy | |
| run_cmd ip -netns "$testns" link set "$devdummy" up | |
| run_cmd kci_test_encap_vxlan | |
| run_cmd kci_test_encap_fou | |
| ip netns del "$testns" | |
| return $ret | |
| } | |
| kci_test_macsec() | |
| { | |
| msname="test_macsec0" | |
| local ret=0 | |
| run_cmd_grep "^Usage: ip macsec" ip macsec help | |
| if [ $? -ne 0 ]; then | |
| end_test "SKIP: macsec: iproute2 too old" | |
| return $ksft_skip | |
| fi | |
| run_cmd ip link add link "$devdummy" "$msname" type macsec port 42 encrypt on | |
| if [ $ret -ne 0 ];then | |
| end_test "FAIL: can't add macsec interface, skipping test" | |
| return 1 | |
| fi | |
| run_cmd ip macsec add "$msname" tx sa 0 pn 1024 on key 01 12345678901234567890123456789012 | |
| run_cmd ip macsec add "$msname" rx port 1234 address "1c:ed:de:ad:be:ef" | |
| run_cmd ip macsec add "$msname" rx port 1234 address "1c:ed:de:ad:be:ef" sa 0 pn 1 on key 00 0123456789abcdef0123456789abcdef | |
| run_cmd ip macsec show | |
| run_cmd ip link del dev "$msname" | |
| if [ $ret -ne 0 ];then | |
| end_test "FAIL: macsec" | |
| return 1 | |
| fi | |
| end_test "PASS: macsec" | |
| } | |
| # Test __dev_set_rx_mode call from dev_uc_add under addr_list_lock spinlock. | |
| # Make sure __dev_set_promiscuity is not grabbing (sleeping) netdev instance | |
| # lock. | |
| # https://lore.kernel.org/netdev/2aff4342b0f5b1539c02ffd8df4c7e58dd9746e7.camel@nvidia.com/ | |
| kci_test_macsec_vlan() | |
| { | |
| msname="test_macsec1" | |
| vlanname="test_vlan1" | |
| local ret=0 | |
| run_cmd_grep "^Usage: ip macsec" ip macsec help | |
| if [ $? -ne 0 ]; then | |
| end_test "SKIP: macsec: iproute2 too old" | |
| return $ksft_skip | |
| fi | |
| run_cmd ip link add link "$devdummy" "$msname" type macsec port 42 encrypt on | |
| if [ $ret -ne 0 ];then | |
| end_test "FAIL: can't add macsec interface, skipping test" | |
| return 1 | |
| fi | |
| run_cmd ip link set dev "$msname" up | |
| ip link add link "$msname" name "$vlanname" type vlan id 1 | |
| ip link set dev "$vlanname" address 00:11:22:33:44:88 | |
| ip link set dev "$vlanname" up | |
| run_cmd ip link del dev "$vlanname" | |
| run_cmd ip link del dev "$msname" | |
| if [ $ret -ne 0 ];then | |
| end_test "FAIL: macsec_vlan" | |
| return 1 | |
| fi | |
| end_test "PASS: macsec_vlan" | |
| } | |
| # Test ndo_change_rx_flags call from dev_uc_add under addr_list_lock spinlock. | |
| # When we are flipping the promisc, make sure it runs on the work queue. | |
| # | |
| # https://lore.kernel.org/netdev/20260214033859.43857-1-jiayuan.chen@linux.dev/ | |
| # With (more conventional) macvlan instead of macsec. | |
| # macvlan -> bridge -> team -> dummy | |
| kci_test_team_bridge_macvlan() | |
| { | |
| local vlan="test_macv1" | |
| local bridge="test_br1" | |
| local team="test_team1" | |
| local dummy="test_dummy1" | |
| local ret=0 | |
| run_cmd ip link add $team type team | |
| if [ $ret -ne 0 ]; then | |
| end_test "SKIP: team_bridge_macvlan: can't add team interface" | |
| return $ksft_skip | |
| fi | |
| run_cmd ip link add $dummy type dummy | |
| run_cmd ip link set $dummy master $team | |
| run_cmd ip link set $team up | |
| run_cmd ip link add $bridge type bridge vlan_filtering 1 | |
| run_cmd ip link set $bridge up | |
| run_cmd ip link set $team master $bridge | |
| run_cmd ip link add link $bridge name $vlan \ | |
| address 00:aa:bb:cc:dd:ee type macvlan mode bridge | |
| run_cmd ip link set $vlan up | |
| run_cmd ip link del $vlan | |
| run_cmd ip link del $bridge | |
| run_cmd ip link del $team | |
| run_cmd ip link del $dummy | |
| if [ $ret -ne 0 ]; then | |
| end_test "FAIL: team_bridge_macvlan" | |
| return 1 | |
| fi | |
| end_test "PASS: team_bridge_macvlan" | |
| } | |
| # Test that changing bridge port flags via the netlink path does not sleep with | |
| # the bridge spin lock held. | |
| kci_test_bridge_promisc_netlink() | |
| { | |
| local dummy="test_dummy1" | |
| local bridge="test_br1" | |
| local team="test_team1" | |
| local ret=0 | |
| run_cmd ip link add $team up type team | |
| run_cmd ip link add $bridge up type bridge vlan_filtering 1 | |
| run_cmd ip link add $dummy up type dummy | |
| run_cmd ip link set $dummy master $bridge | |
| run_cmd ip link set $team master $bridge | |
| # This causes the bridge driver to sync all the static FDB entries to | |
| # the team device (which supports unicast filtering) and remove it from | |
| # promiscuous mode. The call to dev_set_promiscuity() can sleep due to | |
| # Rx mode inlining, which is a problem if the bridge spin lock is held. | |
| run_cmd bridge link set dev $dummy flood off learning off | |
| run_cmd ip link del $dummy | |
| run_cmd ip link del $bridge | |
| run_cmd ip link del $team | |
| end_test "PASS: bridge_promisc_netlink" | |
| } | |
| # Same as kci_test_bridge_promisc_netlink(), but the flags are changed via the | |
| # sysfs path. | |
| kci_test_bridge_promisc_sysfs() | |
| { | |
| local dummy="test_dummy1" | |
| local bridge="test_br1" | |
| local team="test_team1" | |
| local ret=0 | |
| run_cmd ip link add $team up type team | |
| run_cmd ip link add $bridge up type bridge vlan_filtering 1 | |
| run_cmd ip link add $dummy up type dummy | |
| run_cmd ip link set $dummy master $bridge | |
| run_cmd ip link set $team master $bridge | |
| run_cmd sysfs_write 0 /sys/class/net/$dummy/brport/unicast_flood | |
| run_cmd sysfs_write 0 /sys/class/net/$dummy/brport/learning | |
| run_cmd ip link del $dummy | |
| run_cmd ip link del $bridge | |
| run_cmd ip link del $team | |
| end_test "PASS: bridge_promisc_sysfs" | |
| } | |
| #------------------------------------------------------------------- | |
| # Example commands | |
| # ip x s add proto esp src 14.0.0.52 dst 14.0.0.70 \ | |
| # spi 0x07 mode transport reqid 0x07 replay-window 32 \ | |
| # aead 'rfc4106(gcm(aes))' 1234567890123456dcba 128 \ | |
| # sel src 14.0.0.52/24 dst 14.0.0.70/24 | |
| # ip x p add dir out src 14.0.0.52/24 dst 14.0.0.70/24 \ | |
| # tmpl proto esp src 14.0.0.52 dst 14.0.0.70 \ | |
| # spi 0x07 mode transport reqid 0x07 | |
| # | |
| # Subcommands not tested | |
| # ip x s update | |
| # ip x s allocspi | |
| # ip x s deleteall | |
| # ip x p update | |
| # ip x p deleteall | |
| # ip x p set | |
| #------------------------------------------------------------------- | |
| kci_test_ipsec() | |
| { | |
| local ret=0 | |
| algo="aead rfc4106(gcm(aes)) 0x3132333435363738393031323334353664636261 128" | |
| srcip=192.168.123.1 | |
| dstip=192.168.123.2 | |
| spi=7 | |
| ip addr add $srcip dev $devdummy | |
| # flush to be sure there's nothing configured | |
| run_cmd ip x s flush ; ip x p flush | |
| # start the monitor in the background | |
| tmpfile=`mktemp /var/run/ipsectestXXX` | |
| mpid=`(ip x m > $tmpfile & echo $!) 2>/dev/null` | |
| sleep 0.2 | |
| ipsecid="proto esp src $srcip dst $dstip spi 0x07" | |
| run_cmd ip x s add $ipsecid \ | |
| mode transport reqid 0x07 replay-window 32 \ | |
| $algo sel src $srcip/24 dst $dstip/24 | |
| lines=`ip x s list | grep $srcip | grep $dstip | wc -l` | |
| run_cmd test $lines -eq 2 | |
| run_cmd_grep "SAD count 1" ip x s count | |
| lines=`ip x s get $ipsecid | grep $srcip | grep $dstip | wc -l` | |
| run_cmd test $lines -eq 2 | |
| run_cmd ip x s delete $ipsecid | |
| lines=`ip x s list | wc -l` | |
| run_cmd test $lines -eq 0 | |
| ipsecsel="dir out src $srcip/24 dst $dstip/24" | |
| run_cmd ip x p add $ipsecsel \ | |
| tmpl proto esp src $srcip dst $dstip \ | |
| spi 0x07 mode transport reqid 0x07 | |
| lines=`ip x p list | grep $srcip | grep $dstip | wc -l` | |
| run_cmd test $lines -eq 2 | |
| run_cmd_grep "SPD IN 0 OUT 1 FWD 0" ip x p count | |
| lines=`ip x p get $ipsecsel | grep $srcip | grep $dstip | wc -l` | |
| run_cmd test $lines -eq 2 | |
| run_cmd ip x p delete $ipsecsel | |
| lines=`ip x p list | wc -l` | |
| run_cmd test $lines -eq 0 | |
| # check the monitor results | |
| kill $mpid | |
| lines=`wc -l $tmpfile | cut "-d " -f1` | |
| run_cmd test $lines -eq 20 | |
| rm -rf $tmpfile | |
| # clean up any leftovers | |
| run_cmd ip x s flush | |
| run_cmd ip x p flush | |
| ip addr del $srcip/32 dev $devdummy | |
| if [ $ret -ne 0 ]; then | |
| end_test "FAIL: ipsec" | |
| return 1 | |
| fi | |
| end_test "PASS: ipsec" | |
| } | |
| #------------------------------------------------------------------- | |
| # Example commands | |
| # ip x s add proto esp src 14.0.0.52 dst 14.0.0.70 \ | |
| # spi 0x07 mode transport reqid 0x07 replay-window 32 \ | |
| # aead 'rfc4106(gcm(aes))' 1234567890123456dcba 128 \ | |
| # sel src 14.0.0.52/24 dst 14.0.0.70/24 | |
| # offload dev sim1 dir out | |
| # ip x p add dir out src 14.0.0.52/24 dst 14.0.0.70/24 \ | |
| # tmpl proto esp src 14.0.0.52 dst 14.0.0.70 \ | |
| # spi 0x07 mode transport reqid 0x07 | |
| # | |
| #------------------------------------------------------------------- | |
| kci_test_ipsec_offload() | |
| { | |
| local ret=0 | |
| algo="aead rfc4106(gcm(aes)) 0x3132333435363738393031323334353664636261 128" | |
| srcip=192.168.123.3 | |
| dstip=192.168.123.4 | |
| sysfsd=/sys/kernel/debug/netdevsim/netdevsim0/ports/0/ | |
| sysfsf=$sysfsd/ipsec | |
| sysfsnet=/sys/bus/netdevsim/devices/netdevsim0/net/ | |
| probed=false | |
| esp4_offload_probed_default=false | |
| if lsmod | grep -q esp4_offload; then | |
| esp4_offload_probed_default=true | |
| fi | |
| if ! mount | grep -q debugfs; then | |
| mount -t debugfs none /sys/kernel/debug/ &> /dev/null | |
| fi | |
| # setup netdevsim since dummydev doesn't have offload support | |
| if [ ! -w /sys/bus/netdevsim/new_device ] ; then | |
| run_cmd modprobe -q netdevsim | |
| if [ $ret -ne 0 ]; then | |
| end_test "SKIP: ipsec_offload can't load netdevsim" | |
| return $ksft_skip | |
| fi | |
| probed=true | |
| fi | |
| echo "0" > /sys/bus/netdevsim/new_device | |
| while [ ! -d $sysfsnet ] ; do :; done | |
| udevadm settle | |
| dev=`ls $sysfsnet` | |
| ip addr add $srcip dev $dev | |
| ip link set $dev up | |
| if [ ! -d $sysfsd ] ; then | |
| end_test "FAIL: ipsec_offload can't create device $dev" | |
| return 1 | |
| fi | |
| if [ ! -f $sysfsf ] ; then | |
| end_test "FAIL: ipsec_offload netdevsim doesn't support IPsec offload" | |
| return 1 | |
| fi | |
| # flush to be sure there's nothing configured | |
| ip x s flush ; ip x p flush | |
| # create offloaded SAs, both in and out | |
| run_cmd ip x p add dir out src $srcip/24 dst $dstip/24 \ | |
| tmpl proto esp src $srcip dst $dstip spi 9 \ | |
| mode transport reqid 42 | |
| run_cmd ip x p add dir in src $dstip/24 dst $srcip/24 \ | |
| tmpl proto esp src $dstip dst $srcip spi 9 \ | |
| mode transport reqid 42 | |
| run_cmd ip x s add proto esp src $srcip dst $dstip spi 9 \ | |
| mode transport reqid 42 $algo sel src $srcip/24 dst $dstip/24 \ | |
| offload dev $dev dir out | |
| run_cmd ip x s add proto esp src $dstip dst $srcip spi 9 \ | |
| mode transport reqid 42 $algo sel src $dstip/24 dst $srcip/24 \ | |
| offload dev $dev dir in | |
| if [ $ret -ne 0 ]; then | |
| end_test "FAIL: ipsec_offload can't create SA" | |
| return 1 | |
| fi | |
| # does offload show up in ip output | |
| lines=`ip x s list | grep -c "crypto offload parameters: dev $dev dir"` | |
| if [ $lines -ne 2 ] ; then | |
| check_err 1 | |
| end_test "FAIL: ipsec_offload SA offload missing from list output" | |
| fi | |
| # we didn't create a peer, make sure we can Tx | |
| ip neigh add $dstip dev $dev lladdr 00:11:22:33:44:55 | |
| # use ping to exercise the Tx path | |
| ping -I $dev -c 3 -W 1 -i 0 $dstip >/dev/null | |
| # does driver have correct offload info | |
| run_cmd diff $sysfsf - << EOF | |
| SA count=2 tx=3 | |
| sa[0] tx ipaddr=$dstip | |
| sa[0] spi=0x00000009 proto=0x32 salt=0x61626364 crypt=1 | |
| sa[0] key=0x34333231 38373635 32313039 36353433 | |
| sa[1] rx ipaddr=$srcip | |
| sa[1] spi=0x00000009 proto=0x32 salt=0x61626364 crypt=1 | |
| sa[1] key=0x34333231 38373635 32313039 36353433 | |
| EOF | |
| if [ $? -ne 0 ] ; then | |
| end_test "FAIL: ipsec_offload incorrect driver data" | |
| check_err 1 | |
| fi | |
| # does offload get removed from driver | |
| ip x s flush | |
| ip x p flush | |
| lines=`grep -c "SA count=0" $sysfsf` | |
| if [ $lines -ne 1 ] ; then | |
| check_err 1 | |
| end_test "FAIL: ipsec_offload SA not removed from driver" | |
| fi | |
| # clean up any leftovers | |
| ! "$esp4_offload_probed_default" && lsmod | grep -q esp4_offload && rmmod esp4_offload | |
| echo 0 > /sys/bus/netdevsim/del_device | |
| $probed && rmmod netdevsim | |
| if [ $ret -ne 0 ]; then | |
| end_test "FAIL: ipsec_offload" | |
| return 1 | |
| fi | |
| end_test "PASS: ipsec_offload" | |
| } | |
| kci_test_gretap() | |
| { | |
| DEV_NS=gretap00 | |
| local ret=0 | |
| setup_ns testns | |
| if [ $? -ne 0 ]; then | |
| end_test "SKIP gretap tests: cannot add net namespace $testns" | |
| return $ksft_skip | |
| fi | |
| run_cmd_grep "^Usage:" ip link help gretap | |
| if [ $? -ne 0 ];then | |
| end_test "SKIP: gretap: iproute2 too old" | |
| ip netns del "$testns" | |
| return $ksft_skip | |
| fi | |
| # test native tunnel | |
| run_cmd ip -netns "$testns" link add dev "$DEV_NS" type gretap seq \ | |
| key 102 local 172.16.1.100 remote 172.16.1.200 | |
| run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 | |
| run_cmd ip -netns "$testns" link set dev $DEV_NS up | |
| run_cmd ip -netns "$testns" link del "$DEV_NS" | |
| # test external mode | |
| run_cmd ip -netns "$testns" link add dev "$DEV_NS" type gretap external | |
| run_cmd ip -netns "$testns" link del "$DEV_NS" | |
| if [ $ret -ne 0 ]; then | |
| end_test "FAIL: gretap" | |
| ip netns del "$testns" | |
| return 1 | |
| fi | |
| end_test "PASS: gretap" | |
| ip netns del "$testns" | |
| } | |
| kci_test_ip6gretap() | |
| { | |
| DEV_NS=ip6gretap00 | |
| local ret=0 | |
| setup_ns testns | |
| if [ $? -ne 0 ]; then | |
| end_test "SKIP ip6gretap tests: cannot add net namespace $testns" | |
| return $ksft_skip | |
| fi | |
| run_cmd_grep "^Usage:" ip link help ip6gretap | |
| if [ $? -ne 0 ];then | |
| end_test "SKIP: ip6gretap: iproute2 too old" | |
| ip netns del "$testns" | |
| return $ksft_skip | |
| fi | |
| # test native tunnel | |
| run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6gretap seq \ | |
| key 102 local fc00:100::1 remote fc00:100::2 | |
| run_cmd ip -netns "$testns" addr add dev "$DEV_NS" fc00:200::1/96 | |
| run_cmd ip -netns "$testns" link set dev $DEV_NS up | |
| run_cmd ip -netns "$testns" link del "$DEV_NS" | |
| # test external mode | |
| run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6gretap external | |
| run_cmd ip -netns "$testns" link del "$DEV_NS" | |
| if [ $ret -ne 0 ]; then | |
| end_test "FAIL: ip6gretap" | |
| ip netns del "$testns" | |
| return 1 | |
| fi | |
| end_test "PASS: ip6gretap" | |
| ip netns del "$testns" | |
| } | |
| kci_test_erspan() | |
| { | |
| DEV_NS=erspan00 | |
| local ret=0 | |
| run_cmd_grep "^Usage:" ip link help erspan | |
| if [ $? -ne 0 ];then | |
| end_test "SKIP: erspan: iproute2 too old" | |
| return $ksft_skip | |
| fi | |
| setup_ns testns | |
| if [ $? -ne 0 ]; then | |
| end_test "SKIP erspan tests: cannot add net namespace $testns" | |
| return $ksft_skip | |
| fi | |
| # test native tunnel erspan v1 | |
| run_cmd ip -netns "$testns" link add dev "$DEV_NS" type erspan seq \ | |
| key 102 local 172.16.1.100 remote 172.16.1.200 \ | |
| erspan_ver 1 erspan 488 | |
| run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 | |
| run_cmd ip -netns "$testns" link set dev $DEV_NS up | |
| run_cmd ip -netns "$testns" link del "$DEV_NS" | |
| # test native tunnel erspan v2 | |
| run_cmd ip -netns "$testns" link add dev "$DEV_NS" type erspan seq \ | |
| key 102 local 172.16.1.100 remote 172.16.1.200 \ | |
| erspan_ver 2 erspan_dir ingress erspan_hwid 7 | |
| run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 | |
| run_cmd ip -netns "$testns" link set dev $DEV_NS up | |
| run_cmd ip -netns "$testns" link del "$DEV_NS" | |
| # test external mode | |
| run_cmd ip -netns "$testns" link add dev "$DEV_NS" type erspan external | |
| run_cmd ip -netns "$testns" link del "$DEV_NS" | |
| if [ $ret -ne 0 ]; then | |
| end_test "FAIL: erspan" | |
| ip netns del "$testns" | |
| return 1 | |
| fi | |
| end_test "PASS: erspan" | |
| ip netns del "$testns" | |
| } | |
| kci_test_ip6erspan() | |
| { | |
| DEV_NS=ip6erspan00 | |
| local ret=0 | |
| run_cmd_grep "^Usage:" ip link help ip6erspan | |
| if [ $? -ne 0 ];then | |
| end_test "SKIP: ip6erspan: iproute2 too old" | |
| return $ksft_skip | |
| fi | |
| setup_ns testns | |
| if [ $? -ne 0 ]; then | |
| end_test "SKIP ip6erspan tests: cannot add net namespace $testns" | |
| return $ksft_skip | |
| fi | |
| # test native tunnel ip6erspan v1 | |
| run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6erspan seq \ | |
| key 102 local fc00:100::1 remote fc00:100::2 \ | |
| erspan_ver 1 erspan 488 | |
| run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 | |
| run_cmd ip -netns "$testns" link set dev $DEV_NS up | |
| run_cmd ip -netns "$testns" link del "$DEV_NS" | |
| # test native tunnel ip6erspan v2 | |
| run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6erspan seq \ | |
| key 102 local fc00:100::1 remote fc00:100::2 \ | |
| erspan_ver 2 erspan_dir ingress erspan_hwid 7 | |
| run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 | |
| run_cmd ip -netns "$testns" link set dev $DEV_NS up | |
| run_cmd ip -netns "$testns" link del "$DEV_NS" | |
| # test external mode | |
| run_cmd ip -netns "$testns" link add dev "$DEV_NS" \ | |
| type ip6erspan external | |
| run_cmd ip -netns "$testns" link del "$DEV_NS" | |
| if [ $ret -ne 0 ]; then | |
| end_test "FAIL: ip6erspan" | |
| ip netns del "$testns" | |
| return 1 | |
| fi | |
| end_test "PASS: ip6erspan" | |
| ip netns del "$testns" | |
| } | |
| kci_test_fdb_get() | |
| { | |
| brdev="test-br0" | |
| vxlandev="vxlan10" | |
| test_mac=de:ad:be:ef:13:37 | |
| localip="10.0.2.2" | |
| dstip="10.0.2.3" | |
| local ret=0 | |
| run_cmd_grep 'bridge fdb get' bridge fdb help | |
| if [ $? -ne 0 ];then | |
| end_test "SKIP: fdb get tests: iproute2 too old" | |
| return $ksft_skip | |
| fi | |
| setup_ns testns | |
| if [ $? -ne 0 ]; then | |
| end_test "SKIP fdb get tests: cannot add net namespace $testns" | |
| return $ksft_skip | |
| fi | |
| IP="ip -netns $testns" | |
| BRIDGE="bridge -netns $testns" | |
| run_cmd $IP link add "$vxlandev" type vxlan id 10 local $localip \ | |
| dstport 4789 | |
| run_cmd $IP link add name "$brdev" type bridge | |
| run_cmd $IP link set dev "$vxlandev" master "$brdev" | |
| run_cmd $BRIDGE fdb add $test_mac dev "$vxlandev" master | |
| run_cmd $BRIDGE fdb add $test_mac dev "$vxlandev" dst $dstip self | |
| run_cmd_grep "dev $vxlandev master $brdev" $BRIDGE fdb get $test_mac brport "$vxlandev" | |
| run_cmd_grep "dev $vxlandev master $brdev" $BRIDGE fdb get $test_mac br "$brdev" | |
| run_cmd_grep "dev $vxlandev dst $dstip" $BRIDGE fdb get $test_mac dev "$vxlandev" self | |
| ip netns del $testns &>/dev/null | |
| if [ $ret -ne 0 ]; then | |
| end_test "FAIL: bridge fdb get" | |
| return 1 | |
| fi | |
| end_test "PASS: bridge fdb get" | |
| } | |
| kci_test_fdb_del() | |
| { | |
| local test_mac=de:ad:be:ef:13:37 | |
| local dummydev="dummy1" | |
| local brdev="test-br0" | |
| local ret=0 | |
| run_cmd_grep 'bridge fdb get' bridge fdb help | |
| if [ $? -ne 0 ]; then | |
| end_test "SKIP: fdb del tests: iproute2 too old" | |
| return $ksft_skip | |
| fi | |
| setup_ns testns | |
| if [ $? -ne 0 ]; then | |
| end_test "SKIP fdb del tests: cannot add net namespace $testns" | |
| return $ksft_skip | |
| fi | |
| IP="ip -netns $testns" | |
| BRIDGE="bridge -netns $testns" | |
| run_cmd $IP link add $dummydev type dummy | |
| run_cmd $IP link add name $brdev type bridge vlan_filtering 1 | |
| run_cmd $IP link set dev $dummydev master $brdev | |
| run_cmd $BRIDGE fdb add $test_mac dev $dummydev master static vlan 1 | |
| run_cmd $BRIDGE vlan del vid 1 dev $dummydev | |
| run_cmd $BRIDGE fdb get $test_mac br $brdev vlan 1 | |
| run_cmd $BRIDGE fdb del $test_mac dev $dummydev master vlan 1 | |
| run_cmd_fail $BRIDGE fdb get $test_mac br $brdev vlan 1 | |
| ip netns del $testns &>/dev/null | |
| if [ $ret -ne 0 ]; then | |
| end_test "FAIL: bridge fdb del" | |
| return 1 | |
| fi | |
| end_test "PASS: bridge fdb del" | |
| } | |
| kci_test_neigh_get() | |
| { | |
| dstmac=de:ad:be:ef:13:37 | |
| dstip=10.0.2.4 | |
| dstip6=dead::2 | |
| local ret=0 | |
| run_cmd_grep 'ip neigh get' ip neigh help | |
| if [ $? -ne 0 ];then | |
| end_test "SKIP: fdb get tests: iproute2 too old" | |
| return $ksft_skip | |
| fi | |
| # ipv4 | |
| run_cmd ip neigh add $dstip lladdr $dstmac dev "$devdummy" | |
| run_cmd_grep "$dstmac" ip neigh get $dstip dev "$devdummy" | |
| run_cmd ip neigh del $dstip lladdr $dstmac dev "$devdummy" | |
| # ipv4 proxy | |
| run_cmd ip neigh add proxy $dstip dev "$devdummy" | |
| run_cmd_grep "$dstip" ip neigh get proxy $dstip dev "$devdummy" | |
| run_cmd ip neigh del proxy $dstip dev "$devdummy" | |
| # ipv6 | |
| run_cmd ip neigh add $dstip6 lladdr $dstmac dev "$devdummy" | |
| run_cmd_grep "$dstmac" ip neigh get $dstip6 dev "$devdummy" | |
| run_cmd ip neigh del $dstip6 lladdr $dstmac dev "$devdummy" | |
| # ipv6 proxy | |
| run_cmd ip neigh add proxy $dstip6 dev "$devdummy" | |
| run_cmd_grep "$dstip6" ip neigh get proxy $dstip6 dev "$devdummy" | |
| run_cmd ip neigh del proxy $dstip6 dev "$devdummy" | |
| if [ $ret -ne 0 ];then | |
| end_test "FAIL: neigh get" | |
| return 1 | |
| fi | |
| end_test "PASS: neigh get" | |
| } | |
| kci_test_neigh_update() | |
| { | |
| dstip=10.0.2.4 | |
| dstmac=de:ad:be:ef:13:37 | |
| local ret=0 | |
| for proxy in "" "proxy" ; do | |
| # add a neighbour entry without any flags | |
| run_cmd ip neigh add $proxy $dstip dev "$devdummy" lladdr $dstmac nud permanent | |
| run_cmd_grep $dstip ip neigh show $proxy | |
| run_cmd_grep_fail "$dstip dev $devdummy .*\(managed\|use\|router\|extern\)" ip neigh show $proxy | |
| # set the extern_learn flag, but no other | |
| run_cmd ip neigh change $proxy $dstip dev "$devdummy" extern_learn | |
| run_cmd_grep "$dstip dev $devdummy .* extern_learn" ip neigh show $proxy | |
| run_cmd_grep_fail "$dstip dev $devdummy .* \(managed\|use\|router\)" ip neigh show $proxy | |
| # flags are reset when not provided | |
| run_cmd ip neigh change $proxy $dstip dev "$devdummy" | |
| run_cmd_grep $dstip ip neigh show $proxy | |
| run_cmd_grep_fail "$dstip dev $devdummy .* extern_learn" ip neigh show $proxy | |
| # add a protocol | |
| run_cmd ip neigh change $proxy $dstip dev "$devdummy" protocol boot | |
| run_cmd_grep "$dstip dev $devdummy .* proto boot" ip neigh show $proxy | |
| # protocol is retained when not provided | |
| run_cmd ip neigh change $proxy $dstip dev "$devdummy" | |
| run_cmd_grep "$dstip dev $devdummy .* proto boot" ip neigh show $proxy | |
| # change protocol | |
| run_cmd ip neigh change $proxy $dstip dev "$devdummy" protocol static | |
| run_cmd_grep "$dstip dev $devdummy .* proto static" ip neigh show $proxy | |
| # also check an extended flag for non-proxy neighs | |
| if [ "$proxy" = "" ]; then | |
| run_cmd ip neigh change $proxy $dstip dev "$devdummy" managed | |
| run_cmd_grep "$dstip dev $devdummy managed" ip neigh show $proxy | |
| run_cmd ip neigh change $proxy $dstip dev "$devdummy" lladdr $dstmac | |
| run_cmd_grep_fail "$dstip dev $devdummy managed" ip neigh show $proxy | |
| fi | |
| run_cmd ip neigh del $proxy $dstip dev "$devdummy" | |
| done | |
| if [ $ret -ne 0 ];then | |
| end_test "FAIL: neigh update" | |
| return 1 | |
| fi | |
| end_test "PASS: neigh update" | |
| } | |
| kci_test_bridge_parent_id() | |
| { | |
| local ret=0 | |
| sysfsnet=/sys/bus/netdevsim/devices/netdevsim | |
| probed=false | |
| if [ ! -w /sys/bus/netdevsim/new_device ] ; then | |
| run_cmd modprobe -q netdevsim | |
| if [ $ret -ne 0 ]; then | |
| end_test "SKIP: bridge_parent_id can't load netdevsim" | |
| return $ksft_skip | |
| fi | |
| probed=true | |
| fi | |
| echo "10 1" > /sys/bus/netdevsim/new_device | |
| while [ ! -d ${sysfsnet}10 ] ; do :; done | |
| echo "20 1" > /sys/bus/netdevsim/new_device | |
| while [ ! -d ${sysfsnet}20 ] ; do :; done | |
| udevadm settle | |
| dev10=`ls ${sysfsnet}10/net/` | |
| dev20=`ls ${sysfsnet}20/net/` | |
| run_cmd ip link add name test-bond0 type bond mode 802.3ad | |
| run_cmd ip link set dev $dev10 master test-bond0 | |
| run_cmd ip link set dev $dev20 master test-bond0 | |
| run_cmd ip link add name test-br0 type bridge | |
| run_cmd ip link set dev test-bond0 master test-br0 | |
| # clean up any leftovers | |
| ip link del dev test-br0 | |
| ip link del dev test-bond0 | |
| echo 20 > /sys/bus/netdevsim/del_device | |
| echo 10 > /sys/bus/netdevsim/del_device | |
| $probed && rmmod netdevsim | |
| if [ $ret -ne 0 ]; then | |
| end_test "FAIL: bridge_parent_id" | |
| return 1 | |
| fi | |
| end_test "PASS: bridge_parent_id" | |
| } | |
| address_get_proto() | |
| { | |
| local addr=$1; shift | |
| ip -N -j address show dev "$devdummy" | | |
| jq -e -r --arg addr "${addr%/*}" \ | |
| '.[].addr_info[] | select(.local == $addr) | .protocol' | |
| } | |
| address_count() | |
| { | |
| ip -N -j address show dev "$devdummy" "$@" | | |
| jq -e -r '[.[].addr_info[] | .local | select(. != null)] | length' | |
| } | |
| do_test_address_proto() | |
| { | |
| local what=$1; shift | |
| local addr=$1; shift | |
| local addr2=${addr%/*}2/${addr#*/} | |
| local addr3=${addr%/*}3/${addr#*/} | |
| local proto | |
| local count | |
| local ret=0 | |
| local err | |
| run_cmd_grep 'proto' ip address help | |
| if [ $? -ne 0 ];then | |
| end_test "SKIP: addr proto ${what}: iproute2 too old" | |
| return $ksft_skip | |
| fi | |
| ip address add dev "$devdummy" "$addr3" | |
| check_err $? | |
| proto=$(address_get_proto "$addr3") | |
| [[ "$proto" == null ]] | |
| check_err $? | |
| ip address add dev "$devdummy" "$addr2" proto 0x99 | |
| check_err $? | |
| proto=$(address_get_proto "$addr2") | |
| [[ "$proto" == 0x99 ]] | |
| check_err $? | |
| ip address add dev "$devdummy" "$addr" proto 0xab | |
| check_err $? | |
| proto=$(address_get_proto "$addr") | |
| [[ "$proto" == 0xab ]] | |
| check_err $? | |
| ip address replace dev "$devdummy" "$addr" proto 0x11 | |
| proto=$(address_get_proto "$addr") | |
| check_err $? | |
| [[ "$proto" == 0x11 ]] | |
| check_err $? | |
| count=$(address_count) | |
| check_err $? | |
| (( count >= 3 )) # $addr, $addr2 and $addr3 plus any kernel addresses | |
| check_err $? | |
| count=$(address_count proto 0) | |
| check_err $? | |
| (( count == 1 )) # just $addr3 | |
| check_err $? | |
| count=$(address_count proto 0x11) | |
| check_err $? | |
| (( count == 2 )) # $addr and $addr3 | |
| check_err $? | |
| count=$(address_count proto 0xab) | |
| check_err $? | |
| (( count == 1 )) # just $addr3 | |
| check_err $? | |
| ip address del dev "$devdummy" "$addr" | |
| ip address del dev "$devdummy" "$addr2" | |
| ip address del dev "$devdummy" "$addr3" | |
| if [ $ret -ne 0 ]; then | |
| end_test "FAIL: address proto $what" | |
| return 1 | |
| fi | |
| end_test "PASS: address proto $what" | |
| } | |
| kci_test_address_proto() | |
| { | |
| local ret=0 | |
| do_test_address_proto IPv4 192.0.2.1/28 | |
| check_err $? | |
| do_test_address_proto IPv6 2001:db8:1::1/64 | |
| check_err $? | |
| return $ret | |
| } | |
| kci_test_enslave_bonding() | |
| { | |
| local bond="bond123" | |
| local ret=0 | |
| setup_ns testns | |
| if [ $? -ne 0 ]; then | |
| end_test "SKIP bonding tests: cannot add net namespace $testns" | |
| return $ksft_skip | |
| fi | |
| run_cmd ip -netns $testns link add dev $bond type bond mode balance-rr | |
| run_cmd ip -netns $testns link add dev $devdummy type dummy | |
| run_cmd ip -netns $testns link set dev $devdummy up | |
| run_cmd ip -netns $testns link set dev $devdummy master $bond down | |
| if [ $ret -ne 0 ]; then | |
| end_test "FAIL: initially up interface added to a bond and set down" | |
| ip netns del "$testns" | |
| return 1 | |
| fi | |
| end_test "PASS: enslave interface in a bond" | |
| ip netns del "$testns" | |
| } | |
| # Called to validate the addresses on $IFNAME: | |
| # | |
| # 1. Every `temporary` address must have a matching `mngtmpaddr` | |
| # 2. Every `mngtmpaddr` address must have some un`deprecated` `temporary` | |
| # | |
| # If the mngtmpaddr or tempaddr checking failed, return 0 and stop slowwait | |
| validate_mngtmpaddr() | |
| { | |
| local dev=$1 | |
| local prefix="" | |
| local addr_list=$(ip -j -n $testns addr show dev ${dev}) | |
| local temp_addrs=$(echo ${addr_list} | \ | |
| jq -r '.[].addr_info[] | select(.temporary == true) | .local') | |
| local mng_prefixes=$(echo ${addr_list} | \ | |
| jq -r '.[].addr_info[] | select(.mngtmpaddr == true) | .local' | \ | |
| cut -d: -f1-4 | tr '\n' ' ') | |
| local undep_prefixes=$(echo ${addr_list} | \ | |
| jq -r '.[].addr_info[] | select(.temporary == true and .deprecated != true) | .local' | \ | |
| cut -d: -f1-4 | tr '\n' ' ') | |
| # 1. All temporary addresses (temp and dep) must have a matching mngtmpaddr | |
| for address in ${temp_addrs}; do | |
| prefix=$(echo ${address} | cut -d: -f1-4) | |
| if [[ ! " ${mng_prefixes} " =~ " $prefix " ]]; then | |
| check_err 1 "FAIL: Temporary $address with no matching mngtmpaddr!"; | |
| return 0 | |
| fi | |
| done | |
| # 2. All mngtmpaddr addresses must have a temporary address (not dep) | |
| for prefix in ${mng_prefixes}; do | |
| if [[ ! " ${undep_prefixes} " =~ " $prefix " ]]; then | |
| check_err 1 "FAIL: No undeprecated temporary in $prefix!"; | |
| return 0 | |
| fi | |
| done | |
| return 1 | |
| } | |
| kci_test_mngtmpaddr() | |
| { | |
| local ret=0 | |
| setup_ns testns | |
| if [ $? -ne 0 ]; then | |
| end_test "SKIP mngtmpaddr tests: cannot add net namespace $testns" | |
| return $ksft_skip | |
| fi | |
| # 1. Create a dummy Ethernet interface | |
| run_cmd ip -n $testns link add ${devdummy} type dummy | |
| run_cmd ip -n $testns link set ${devdummy} up | |
| run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.use_tempaddr=1 | |
| run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.temp_prefered_lft=10 | |
| run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.temp_valid_lft=25 | |
| run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.max_desync_factor=1 | |
| # 2. Create several mngtmpaddr addresses on that interface. | |
| # with temp_*_lft configured to be pretty short (10 and 35 seconds | |
| # for prefer/valid respectively) | |
| for i in $(seq 1 9); do | |
| run_cmd ip -n $testns addr add 2001:db8:7e57:${i}::1/64 mngtmpaddr dev ${devdummy} | |
| done | |
| # 3. Confirm that a preferred temporary address exists for each mngtmpaddr | |
| # address at all times, polling once per second for 30 seconds. | |
| slowwait 30 validate_mngtmpaddr ${devdummy} | |
| # 4. Delete each mngtmpaddr address, one at a time (alternating between | |
| # deleting and merely un-mngtmpaddr-ing), and confirm that the other | |
| # mngtmpaddr addresses still have preferred temporaries. | |
| for i in $(seq 1 9); do | |
| (( $i % 4 == 0 )) && mng_flag="mngtmpaddr" || mng_flag="" | |
| if (( $i % 2 == 0 )); then | |
| run_cmd ip -n $testns addr del 2001:db8:7e57:${i}::1/64 $mng_flag dev ${devdummy} | |
| else | |
| run_cmd ip -n $testns addr change 2001:db8:7e57:${i}::1/64 dev ${devdummy} | |
| fi | |
| # the temp addr should be deleted | |
| validate_mngtmpaddr ${devdummy} | |
| done | |
| if [ $ret -ne 0 ]; then | |
| end_test "FAIL: mngtmpaddr add/remove incorrect" | |
| else | |
| end_test "PASS: mngtmpaddr add/remove correctly" | |
| fi | |
| ip netns del "$testns" | |
| return $ret | |
| } | |
| kci_test_operstate() | |
| { | |
| local ret=0 | |
| # Check that it is possible to set operational state during device | |
| # creation and that it is preserved when the administrative state of | |
| # the device is toggled. | |
| run_cmd ip link add name vx0 up state up type vxlan id 10010 dstport 4789 | |
| run_cmd_grep "state UP" ip link show dev vx0 | |
| run_cmd ip link set dev vx0 down | |
| run_cmd_grep "state DOWN" ip link show dev vx0 | |
| run_cmd ip link set dev vx0 up | |
| run_cmd_grep "state UP" ip link show dev vx0 | |
| run_cmd ip link del dev vx0 | |
| # Check that it is possible to set the operational state of the device | |
| # after creation. | |
| run_cmd ip link add name vx0 up type vxlan id 10010 dstport 4789 | |
| run_cmd_grep "state UNKNOWN" ip link show dev vx0 | |
| run_cmd ip link set dev vx0 state up | |
| run_cmd_grep "state UP" ip link show dev vx0 | |
| run_cmd ip link del dev vx0 | |
| if [ "$ret" -ne 0 ]; then | |
| end_test "FAIL: operstate" | |
| return 1 | |
| fi | |
| end_test "PASS: operstate" | |
| } | |
| kci_test_rtnl() | |
| { | |
| local current_test | |
| local ret=0 | |
| kci_add_dummy | |
| if [ $ret -ne 0 ];then | |
| end_test "FAIL: cannot add dummy interface" | |
| return 1 | |
| fi | |
| for current_test in ${TESTS:-$ALL_TESTS}; do | |
| $current_test | |
| check_err $? | |
| done | |
| kci_del_dummy | |
| return $ret | |
| } | |
| usage() | |
| { | |
| cat <<EOF | |
| usage: ${0##*/} OPTS | |
| -t <test> Test(s) to run (default: all) | |
| (options: $(echo $ALL_TESTS)) | |
| -v Verbose mode (show commands and output) | |
| -P Pause after every test | |
| -p Pause after every failing test before cleanup (for debugging) | |
| EOF | |
| } | |
| require_command jq | |
| #check for needed privileges | |
| if [ "$(id -u)" -ne 0 ];then | |
| end_test "SKIP: Need root privileges" | |
| exit $ksft_skip | |
| fi | |
| for x in ip tc;do | |
| $x -Version 2>/dev/null >/dev/null | |
| if [ $? -ne 0 ];then | |
| end_test "SKIP: Could not run test without the $x tool" | |
| exit $ksft_skip | |
| fi | |
| done | |
| while getopts t:hvpP o; do | |
| case $o in | |
| t) TESTS=$OPTARG;; | |
| v) VERBOSE=1;; | |
| p) PAUSE_ON_FAIL=yes;; | |
| P) PAUSE=yes;; | |
| h) usage; exit 0;; | |
| *) usage; exit 1;; | |
| esac | |
| done | |
| [ $PAUSE = "yes" ] && PAUSE_ON_FAIL="no" | |
| kci_test_rtnl | |
| exit $? |