blob: 5db69dad0cfc096795cf0728d7d5b31705eb46e3 [file] [log] [blame]
#!/bin/bash
# SPDX-License-Identifier: GPL-2.0
# This test is for the accept_untracked_na feature to
# enable RFC9131 behaviour. The following is the test-matrix.
# drop accept fwding behaviour
# ---- ------ ------ ----------------------------------------------
# 1 X X Don't update NC
# 0 0 X Don't update NC
# 0 1 0 Don't update NC
# 0 1 1 Add a STALE NC entry
source lib.sh
ret=0
PAUSE_ON_FAIL=no
PAUSE=no
HOST_INTF="veth-host"
ROUTER_INTF="veth-router"
ROUTER_ADDR="2000:20::1"
HOST_ADDR="2000:20::2"
SUBNET_WIDTH=64
ROUTER_ADDR_WITH_MASK="${ROUTER_ADDR}/${SUBNET_WIDTH}"
HOST_ADDR_WITH_MASK="${HOST_ADDR}/${SUBNET_WIDTH}"
tcpdump_stdout=
tcpdump_stderr=
log_test()
{
local rc=$1
local expected=$2
local msg="$3"
if [ ${rc} -eq ${expected} ]; then
printf " TEST: %-60s [ OK ]\n" "${msg}"
nsuccess=$((nsuccess+1))
else
ret=1
nfail=$((nfail+1))
printf " TEST: %-60s [FAIL]\n" "${msg}"
if [ "${PAUSE_ON_FAIL}" = "yes" ]; then
echo
echo "hit enter to continue, 'q' to quit"
read a
[ "$a" = "q" ] && exit 1
fi
fi
if [ "${PAUSE}" = "yes" ]; then
echo
echo "hit enter to continue, 'q' to quit"
read a
[ "$a" = "q" ] && exit 1
fi
}
setup()
{
set -e
local drop_unsolicited_na=$1
local accept_untracked_na=$2
local forwarding=$3
# Setup two namespaces and a veth tunnel across them.
# On end of the tunnel is a router and the other end is a host.
setup_ns HOST_NS ROUTER_NS
IP_HOST="ip -6 -netns ${HOST_NS}"
IP_HOST_EXEC="ip netns exec ${HOST_NS}"
IP_ROUTER="ip -6 -netns ${ROUTER_NS}"
IP_ROUTER_EXEC="ip netns exec ${ROUTER_NS}"
${IP_ROUTER} link add ${ROUTER_INTF} type veth \
peer name ${HOST_INTF} netns ${HOST_NS}
# Enable IPv6 on both router and host, and configure static addresses.
# The router here is the DUT
# Setup router configuration as specified by the arguments.
# forwarding=0 case is to check that a non-router
# doesn't add neighbour entries.
ROUTER_CONF=net.ipv6.conf.${ROUTER_INTF}
${IP_ROUTER_EXEC} sysctl -qw \
${ROUTER_CONF}.forwarding=${forwarding}
${IP_ROUTER_EXEC} sysctl -qw \
${ROUTER_CONF}.drop_unsolicited_na=${drop_unsolicited_na}
${IP_ROUTER_EXEC} sysctl -qw \
${ROUTER_CONF}.accept_untracked_na=${accept_untracked_na}
${IP_ROUTER_EXEC} sysctl -qw ${ROUTER_CONF}.disable_ipv6=0
${IP_ROUTER} addr add ${ROUTER_ADDR_WITH_MASK} dev ${ROUTER_INTF}
# Turn on ndisc_notify on host interface so that
# the host sends unsolicited NAs.
HOST_CONF=net.ipv6.conf.${HOST_INTF}
${IP_HOST_EXEC} sysctl -qw ${HOST_CONF}.ndisc_notify=1
${IP_HOST_EXEC} sysctl -qw ${HOST_CONF}.disable_ipv6=0
${IP_HOST} addr add ${HOST_ADDR_WITH_MASK} dev ${HOST_INTF}
set +e
}
start_tcpdump() {
set -e
tcpdump_stdout=`mktemp`
tcpdump_stderr=`mktemp`
${IP_ROUTER_EXEC} timeout 15s \
tcpdump --immediate-mode -tpni ${ROUTER_INTF} -c 1 \
"icmp6 && icmp6[0] == 136 && src ${HOST_ADDR}" \
> ${tcpdump_stdout} 2> /dev/null
set +e
}
cleanup_tcpdump()
{
set -e
[[ ! -z ${tcpdump_stdout} ]] && rm -f ${tcpdump_stdout}
[[ ! -z ${tcpdump_stderr} ]] && rm -f ${tcpdump_stderr}
tcpdump_stdout=
tcpdump_stderr=
set +e
}
cleanup()
{
cleanup_tcpdump
ip netns del ${HOST_NS}
ip netns del ${ROUTER_NS}
}
link_up() {
set -e
${IP_ROUTER} link set dev ${ROUTER_INTF} up
${IP_HOST} link set dev ${HOST_INTF} up
set +e
}
verify_ndisc() {
local drop_unsolicited_na=$1
local accept_untracked_na=$2
local forwarding=$3
neigh_show_output=$(${IP_ROUTER} neigh show \
to ${HOST_ADDR} dev ${ROUTER_INTF} nud stale)
if [ ${drop_unsolicited_na} -eq 0 ] && \
[ ${accept_untracked_na} -eq 1 ] && \
[ ${forwarding} -eq 1 ]; then
# Neighbour entry expected to be present for 011 case
[[ ${neigh_show_output} ]]
else
# Neighbour entry expected to be absent for all other cases
[[ -z ${neigh_show_output} ]]
fi
}
test_unsolicited_na_common()
{
# Setup the test bed, but keep links down
setup $1 $2 $3
# Bring the link up, wait for the NA,
# and add a delay to ensure neighbour processing is done.
link_up
start_tcpdump
# Verify the neighbour table
verify_ndisc $1 $2 $3
}
test_unsolicited_na_combination() {
test_unsolicited_na_common $1 $2 $3
test_msg=("test_unsolicited_na: "
"drop_unsolicited_na=$1 "
"accept_untracked_na=$2 "
"forwarding=$3")
log_test $? 0 "${test_msg[*]}"
cleanup
}
test_unsolicited_na_combinations() {
# Args: drop_unsolicited_na accept_untracked_na forwarding
# Expect entry
test_unsolicited_na_combination 0 1 1
# Expect no entry
test_unsolicited_na_combination 0 0 0
test_unsolicited_na_combination 0 0 1
test_unsolicited_na_combination 0 1 0
test_unsolicited_na_combination 1 0 0
test_unsolicited_na_combination 1 0 1
test_unsolicited_na_combination 1 1 0
test_unsolicited_na_combination 1 1 1
}
###############################################################################
# usage
usage()
{
cat <<EOF
usage: ${0##*/} OPTS
-p Pause on fail
-P Pause after each test before cleanup
EOF
}
###############################################################################
# main
while getopts :pPh o
do
case $o in
p) PAUSE_ON_FAIL=yes;;
P) PAUSE=yes;;
h) usage; exit 0;;
*) usage; exit 1;;
esac
done
# make sure we don't pause twice
[ "${PAUSE}" = "yes" ] && PAUSE_ON_FAIL=no
if [ "$(id -u)" -ne 0 ];then
echo "SKIP: Need root privileges"
exit $ksft_skip;
fi
if [ ! -x "$(command -v ip)" ]; then
echo "SKIP: Could not run test without ip tool"
exit $ksft_skip
fi
if [ ! -x "$(command -v tcpdump)" ]; then
echo "SKIP: Could not run test without tcpdump tool"
exit $ksft_skip
fi
# start clean
cleanup &> /dev/null
test_unsolicited_na_combinations
printf "\nTests passed: %3d\n" ${nsuccess}
printf "Tests failed: %3d\n" ${nfail}
exit $ret