201 lines · bash
1#!/bin/bash2# SPDX-License-Identifier: GPL-2.03 4# This test sends traffic from H1 to H2. Either on ingress of $swp1, or on egress of $swp2, the5# traffic is acted upon by a pedit action. An ingress filter installed on $h2 verifies that the6# packet looks like expected.7#8# +----------------------+ +----------------------+9# | H1 | | H2 |10# | + $h1 | | $h2 + |11# | | 192.0.2.1/28 | | 192.0.2.2/28 | |12# +----|-----------------+ +----------------|-----+13# | |14# +----|----------------------------------------------------------------|-----+15# | SW | | |16# | +-|----------------------------------------------------------------|-+ |17# | | + $swp1 BR $swp2 + | |18# | +--------------------------------------------------------------------+ |19# +---------------------------------------------------------------------------+20 21ALL_TESTS="22 ping_ipv423 test_udp_sport24 test_udp_dport25 test_tcp_sport26 test_tcp_dport27"28 29NUM_NETIFS=430source lib.sh31source tc_common.sh32 33: ${HIT_TIMEOUT:=2000} # ms34 35h1_create()36{37 simple_if_init $h1 192.0.2.1/28 2001:db8:1::1/6438}39 40h1_destroy()41{42 simple_if_fini $h1 192.0.2.1/28 2001:db8:1::1/6443}44 45h2_create()46{47 simple_if_init $h2 192.0.2.2/28 2001:db8:1::2/6448 tc qdisc add dev $h2 clsact49}50 51h2_destroy()52{53 tc qdisc del dev $h2 clsact54 simple_if_fini $h2 192.0.2.2/28 2001:db8:1::2/6455}56 57switch_create()58{59 ip link add name br1 up type bridge vlan_filtering 160 ip link set dev $swp1 master br161 ip link set dev $swp1 up62 ip link set dev $swp2 master br163 ip link set dev $swp2 up64 65 tc qdisc add dev $swp1 clsact66 tc qdisc add dev $swp2 clsact67}68 69switch_destroy()70{71 tc qdisc del dev $swp2 clsact72 tc qdisc del dev $swp1 clsact73 74 ip link set dev $swp2 down75 ip link set dev $swp2 nomaster76 ip link set dev $swp1 down77 ip link set dev $swp1 nomaster78 ip link del dev br179}80 81setup_prepare()82{83 h1=${NETIFS[p1]}84 swp1=${NETIFS[p2]}85 86 swp2=${NETIFS[p3]}87 h2=${NETIFS[p4]}88 89 h2mac=$(mac_get $h2)90 91 vrf_prepare92 h1_create93 h2_create94 switch_create95}96 97cleanup()98{99 pre_cleanup100 101 switch_destroy102 h2_destroy103 h1_destroy104 vrf_cleanup105}106 107ping_ipv4()108{109 ping_test $h1 192.0.2.2110}111 112ping_ipv6()113{114 ping6_test $h1 2001:db8:1::2115}116 117do_test_pedit_l4port_one()118{119 local pedit_locus=$1; shift120 local pedit_prot=$1; shift121 local pedit_action=$1; shift122 local match_prot=$1; shift123 local match_flower=$1; shift124 local mz_flags=$1; shift125 local saddr=$1; shift126 local daddr=$1; shift127 128 tc filter add $pedit_locus handle 101 pref 1 \129 flower action pedit ex munge $pedit_action130 tc filter add dev $h2 ingress handle 101 pref 1 prot $match_prot \131 flower skip_hw $match_flower action pass132 133 RET=0134 135 $MZ $mz_flags $h1 -c 10 -d 20msec -p 100 \136 -a own -b $h2mac -q -t $pedit_prot sp=54321,dp=12345137 138 local pkts139 pkts=$(busywait "$TC_HIT_TIMEOUT" until_counter_is ">= 10" \140 tc_rule_handle_stats_get "dev $h2 ingress" 101)141 check_err $? "Expected to get 10 packets, but got $pkts."142 143 pkts=$(tc_rule_handle_stats_get "$pedit_locus" 101)144 ((pkts >= 10))145 check_err $? "Expected to get 10 packets on pedit rule, but got $pkts."146 147 log_test "$pedit_locus pedit $pedit_action"148 149 tc filter del dev $h2 ingress pref 1150 tc filter del $pedit_locus pref 1151}152 153do_test_pedit_l4port()154{155 local locus=$1; shift156 local prot=$1; shift157 local pedit_port=$1; shift158 local flower_port=$1; shift159 local port160 161 for port in 1 11111 65535; do162 do_test_pedit_l4port_one "$locus" "$prot" \163 "$prot $pedit_port set $port" \164 ip "ip_proto $prot $flower_port $port" \165 "-A 192.0.2.1 -B 192.0.2.2"166 done167}168 169test_udp_sport()170{171 do_test_pedit_l4port "dev $swp1 ingress" udp sport src_port172 do_test_pedit_l4port "dev $swp2 egress" udp sport src_port173}174 175test_udp_dport()176{177 do_test_pedit_l4port "dev $swp1 ingress" udp dport dst_port178 do_test_pedit_l4port "dev $swp2 egress" udp dport dst_port179}180 181test_tcp_sport()182{183 do_test_pedit_l4port "dev $swp1 ingress" tcp sport src_port184 do_test_pedit_l4port "dev $swp2 egress" tcp sport src_port185}186 187test_tcp_dport()188{189 do_test_pedit_l4port "dev $swp1 ingress" tcp dport dst_port190 do_test_pedit_l4port "dev $swp2 egress" tcp dport dst_port191}192 193trap cleanup EXIT194 195setup_prepare196setup_wait197 198tests_run199 200exit $EXIT_STATUS201