250 lines · bash
1#!/bin/bash2# SPDX-License-Identifier: GPL-2.03#4# Test devlink-trap tunnel exceptions functionality over mlxsw.5# Check all exception traps to make sure they are triggered under the right6# conditions.7 8# +-------------------------+9# | H1 |10# | $h1 + |11# | 192.0.2.1/28 | |12# +-------------------|-----+13# |14# +-------------------|-----+15# | SW1 | |16# | $swp1 + |17# | 192.0.2.2/28 |18# | |19# | + g1a (gre) |20# | loc=192.0.2.65 |21# | rem=192.0.2.66 |22# | tos=inherit |23# | |24# | + $rp1 |25# | | 198.51.100.1/28 |26# +--|----------------------+27# |28# +--|----------------------+29# | | VRF2 |30# | + $rp2 |31# | 198.51.100.2/28 |32# +-------------------------+33 34lib_dir=$(dirname $0)/../../../net/forwarding35 36ALL_TESTS="37 decap_error_test38"39 40NUM_NETIFS=441source $lib_dir/lib.sh42source $lib_dir/tc_common.sh43source $lib_dir/devlink_lib.sh44 45h1_create()46{47 simple_if_init $h1 192.0.2.1/2848}49 50h1_destroy()51{52 simple_if_fini $h1 192.0.2.1/2853}54 55vrf2_create()56{57 simple_if_init $rp2 198.51.100.2/2858}59 60vrf2_destroy()61{62 simple_if_fini $rp2 198.51.100.2/2863}64 65switch_create()66{67 __addr_add_del $swp1 add 192.0.2.2/2868 tc qdisc add dev $swp1 clsact69 ip link set dev $swp1 up70 71 tunnel_create g1 gre 192.0.2.65 192.0.2.66 tos inherit72 __addr_add_del g1 add 192.0.2.65/3273 ip link set dev g1 up74 75 __addr_add_del $rp1 add 198.51.100.1/2876 ip link set dev $rp1 up77}78 79switch_destroy()80{81 ip link set dev $rp1 down82 __addr_add_del $rp1 del 198.51.100.1/2883 84 ip link set dev g1 down85 __addr_add_del g1 del 192.0.2.65/3286 tunnel_destroy g187 88 ip link set dev $swp1 down89 tc qdisc del dev $swp1 clsact90 __addr_add_del $swp1 del 192.0.2.2/2891}92 93setup_prepare()94{95 h1=${NETIFS[p1]}96 swp1=${NETIFS[p2]}97 98 rp1=${NETIFS[p3]}99 rp2=${NETIFS[p4]}100 101 forwarding_enable102 vrf_prepare103 h1_create104 switch_create105 vrf2_create106}107 108cleanup()109{110 pre_cleanup111 112 vrf2_destroy113 switch_destroy114 h1_destroy115 vrf_cleanup116 forwarding_restore117}118 119ipip_payload_get()120{121 local flags=$1; shift122 local key=$1; shift123 124 p=$(:125 )"$flags"$( : GRE flags126 )"0:00:"$( : Reserved + version127 )"08:00:"$( : ETH protocol type128 )"$key"$( : Key129 )"4"$( : IP version130 )"5:"$( : IHL131 )"00:"$( : IP TOS132 )"00:14:"$( : IP total length133 )"00:00:"$( : IP identification134 )"20:00:"$( : IP flags + frag off135 )"30:"$( : IP TTL136 )"01:"$( : IP proto137 )"E7:E6:"$( : IP header csum138 )"C0:00:01:01:"$( : IP saddr : 192.0.1.1139 )"C0:00:02:01:"$( : IP daddr : 192.0.2.1140 )141 echo $p142}143 144ecn_payload_get()145{146 echo $(ipip_payload_get "0")147}148 149ecn_decap_test()150{151 local trap_name="decap_error"152 local desc=$1; shift153 local ecn_desc=$1; shift154 local outer_tos=$1; shift155 local mz_pid156 157 RET=0158 159 tc filter add dev $swp1 egress protocol ip pref 1 handle 101 \160 flower src_ip 192.0.1.1 dst_ip 192.0.2.1 action pass161 162 rp1_mac=$(mac_get $rp1)163 rp2_mac=$(mac_get $rp2)164 payload=$(ecn_payload_get)165 166 ip vrf exec v$rp2 $MZ $rp2 -c 0 -d 1msec -a $rp2_mac -b $rp1_mac \167 -A 192.0.2.66 -B 192.0.2.65 -t ip \168 len=48,tos=$outer_tos,proto=47,p=$payload -q &169 170 mz_pid=$!171 172 devlink_trap_exception_test $trap_name173 174 tc_check_packets "dev $swp1 egress" 101 0175 check_err $? "Packets were not dropped"176 177 log_test "$desc: Inner ECN is not ECT and outer is $ecn_desc"178 179 kill $mz_pid && wait $mz_pid &> /dev/null180 tc filter del dev $swp1 egress protocol ip pref 1 handle 101 flower181}182 183no_matching_tunnel_test()184{185 local trap_name="decap_error"186 local desc=$1; shift187 local sip=$1; shift188 local mz_pid189 190 RET=0191 192 tc filter add dev $swp1 egress protocol ip pref 1 handle 101 \193 flower src_ip 192.0.1.1 dst_ip 192.0.2.1 action pass194 195 rp1_mac=$(mac_get $rp1)196 rp2_mac=$(mac_get $rp2)197 payload=$(ipip_payload_get "$@")198 199 ip vrf exec v$rp2 $MZ $rp2 -c 0 -d 1msec -a $rp2_mac -b $rp1_mac \200 -A $sip -B 192.0.2.65 -t ip len=48,proto=47,p=$payload -q &201 mz_pid=$!202 203 devlink_trap_exception_test $trap_name204 205 tc_check_packets "dev $swp1 egress" 101 0206 check_err $? "Packets were not dropped"207 208 log_test "$desc"209 210 kill $mz_pid && wait $mz_pid &> /dev/null211 tc filter del dev $swp1 egress protocol ip pref 1 handle 101 flower212}213 214decap_error_test()215{216 # Correct source IP - the remote address217 local sip=192.0.2.66218 219 ecn_decap_test "Decap error" "ECT(1)" 01220 ecn_decap_test "Decap error" "ECT(0)" 02221 ecn_decap_test "Decap error" "CE" 03222 223 no_matching_tunnel_test "Decap error: Source IP check failed" \224 192.0.2.68 "0"225 no_matching_tunnel_test \226 "Decap error: Key exists but was not expected" $sip "2" \227 "00:00:00:E9:"228 229 # Destroy the tunnel and create new one with key230 __addr_add_del g1 del 192.0.2.65/32231 tunnel_destroy g1232 233 tunnel_create g1 gre 192.0.2.65 192.0.2.66 tos inherit key 233234 __addr_add_del g1 add 192.0.2.65/32235 236 no_matching_tunnel_test \237 "Decap error: Key does not exist but was expected" $sip "0"238 no_matching_tunnel_test \239 "Decap error: Packet has a wrong key field" $sip "2" \240 "00:00:00:E8:"241}242 243trap cleanup EXIT244 245setup_prepare246setup_wait247tests_run248 249exit $EXIT_STATUS250