578 lines · bash
1#!/bin/bash2# SPDX-License-Identifier: GPL-2.03 4# +---------------------------+ +------------------------------+5# | vrf-h1 | | vrf-h2 |6# | + $h1 | | + $h2 |7# | | 10.1.1.101/24 | | | 10.1.2.101/24 |8# | | default via 10.1.1.1 | | | default via 10.1.2.1 |9# +----|----------------------+ +----|-------------------------+10# | |11# +----|--------------------------------------------|-------------------------+12# | SW | | |13# | +--|--------------------------------------------|-----------------------+ |14# | | + $swp1 br1 + $swp2 | |15# | | vid 10 pvid untagged vid 20 pvid untagged | |16# | | | |17# | | + vx10 + vx20 | |18# | | local 10.0.0.1 local 10.0.0.1 | |19# | | remote 10.0.0.2 remote 10.0.0.2 | |20# | | id 1000 id 2000 | |21# | | dstport 4789 dstport 4789 | |22# | | vid 10 pvid untagged vid 20 pvid untagged | |23# | | | |24# | +-----------------------------------+-----------------------------------+ |25# | | |26# | +-----------------------------------|-----------------------------------+ |27# | | | | |28# | | +--------------------------------+--------------------------------+ | |29# | | | | | |30# | | + vlan10 vlan20 + | |31# | | | 10.1.1.11/24 10.1.2.11/24 | | |32# | | | | | |33# | | + vlan10-v (macvlan) vlan20-v (macvlan) + | |34# | | 10.1.1.1/24 10.1.2.1/24 | |35# | | 00:00:5e:00:01:01 00:00:5e:00:01:01 | |36# | | vrf-green | |37# | +-----------------------------------------------------------------------+ |38# | |39# | + $rp1 +lo |40# | | 192.0.2.1/24 10.0.0.1/32 |41# +----|----------------------------------------------------------------------+42# |43# +----|--------------------------------------------------------+44# | | vrf-spine |45# | + $rp2 |46# | 192.0.2.2/24 |47# | | (maybe) HW48# =============================================================================49# | | (likely) SW50# | |51# | + v1 (veth) |52# | | 192.0.3.2/24 |53# +----|--------------------------------------------------------+54# |55# +----|----------------------------------------------------------------------+56# | + v2 (veth) +lo NS1 (netns) |57# | 192.0.3.1/24 10.0.0.2/32 |58# | |59# | +-----------------------------------------------------------------------+ |60# | | vrf-green | |61# | | + vlan10-v (macvlan) vlan20-v (macvlan) + | |62# | | | 10.1.1.1/24 10.1.2.1/24 | | |63# | | | 00:00:5e:00:01:01 00:00:5e:00:01:01 | | |64# | | | | | |65# | | + vlan10 vlan20 + | |66# | | | 10.1.1.12/24 10.1.2.12/24 | | |67# | | | | | |68# | | +--------------------------------+--------------------------------+ | |69# | | | | |70# | +-----------------------------------|-----------------------------------+ |71# | | |72# | +-----------------------------------+-----------------------------------+ |73# | | | |74# | | + vx10 + vx20 | |75# | | local 10.0.0.2 local 10.0.0.2 | |76# | | remote 10.0.0.1 remote 10.0.0.1 | |77# | | id 1000 id 2000 | |78# | | dstport 4789 dstport 4789 | |79# | | vid 10 pvid untagged vid 20 pvid untagged | |80# | | | |81# | | + w1 (veth) + w3 (veth) | |82# | | | vid 10 pvid untagged br1 | vid 20 pvid untagged | |83# | +--|------------------------------------------|-------------------------+ |84# | | | |85# | | | |86# | +--|----------------------+ +--|-------------------------+ |87# | | | vrf-h1 | | | vrf-h2 | |88# | | + w2 (veth) | | + w4 (veth) | |89# | | 10.1.1.102/24 | | 10.1.2.102/24 | |90# | | default via 10.1.1.1 | | default via 10.1.2.1 | |91# | +-------------------------+ +----------------------------+ |92# +---------------------------------------------------------------------------+93 94ALL_TESTS="95 ping_ipv496 arp_decap97 arp_suppression98"99NUM_NETIFS=6100source lib.sh101 102require_command $ARPING103 104hx_create()105{106 local vrf_name=$1; shift107 local if_name=$1; shift108 local ip_addr=$1; shift109 local gw_ip=$1; shift110 111 vrf_create $vrf_name112 ip link set dev $if_name master $vrf_name113 ip link set dev $vrf_name up114 ip link set dev $if_name up115 116 ip address add $ip_addr/24 dev $if_name117 ip neigh replace $gw_ip lladdr 00:00:5e:00:01:01 nud permanent \118 dev $if_name119 ip route add default vrf $vrf_name nexthop via $gw_ip120}121export -f hx_create122 123hx_destroy()124{125 local vrf_name=$1; shift126 local if_name=$1; shift127 local ip_addr=$1; shift128 local gw_ip=$1; shift129 130 ip route del default vrf $vrf_name nexthop via $gw_ip131 ip neigh del $gw_ip dev $if_name132 ip address del $ip_addr/24 dev $if_name133 134 ip link set dev $if_name down135 vrf_destroy $vrf_name136}137 138h1_create()139{140 hx_create "vrf-h1" $h1 10.1.1.101 10.1.1.1141}142 143h1_destroy()144{145 hx_destroy "vrf-h1" $h1 10.1.1.101 10.1.1.1146}147 148h2_create()149{150 hx_create "vrf-h2" $h2 10.1.2.101 10.1.2.1151}152 153h2_destroy()154{155 hx_destroy "vrf-h2" $h2 10.1.2.101 10.1.2.1156}157 158switch_create()159{160 ip link add name br1 type bridge vlan_filtering 1 vlan_default_pvid 0 \161 mcast_snooping 0162 # Make sure the bridge uses the MAC address of the local port and not163 # that of the VxLAN's device.164 ip link set dev br1 address $(mac_get $swp1)165 ip link set dev br1 up166 167 ip link set dev $rp1 up168 ip address add dev $rp1 192.0.2.1/24169 ip route add 10.0.0.2/32 nexthop via 192.0.2.2170 171 ip link add name vx10 type vxlan id 1000 \172 local 10.0.0.1 remote 10.0.0.2 dstport 4789 \173 nolearning noudpcsum tos inherit ttl 100174 ip link set dev vx10 up175 176 ip link set dev vx10 master br1177 bridge vlan add vid 10 dev vx10 pvid untagged178 179 ip link add name vx20 type vxlan id 2000 \180 local 10.0.0.1 remote 10.0.0.2 dstport 4789 \181 nolearning noudpcsum tos inherit ttl 100182 ip link set dev vx20 up183 184 ip link set dev vx20 master br1185 bridge vlan add vid 20 dev vx20 pvid untagged186 187 ip link set dev $swp1 master br1188 ip link set dev $swp1 up189 bridge vlan add vid 10 dev $swp1 pvid untagged190 191 ip link set dev $swp2 master br1192 ip link set dev $swp2 up193 bridge vlan add vid 20 dev $swp2 pvid untagged194 195 ip address add 10.0.0.1/32 dev lo196 197 # Create SVIs198 vrf_create "vrf-green"199 ip link set dev vrf-green up200 201 ip link add link br1 name vlan10 up master vrf-green type vlan id 10202 ip address add 10.1.1.11/24 dev vlan10203 ip link add link vlan10 name vlan10-v up master vrf-green \204 address 00:00:5e:00:01:01 type macvlan mode private205 ip address add 10.1.1.1/24 dev vlan10-v206 207 ip link add link br1 name vlan20 up master vrf-green type vlan id 20208 ip address add 10.1.2.11/24 dev vlan20209 ip link add link vlan20 name vlan20-v up master vrf-green \210 address 00:00:5e:00:01:01 type macvlan mode private211 ip address add 10.1.2.1/24 dev vlan20-v212 213 bridge vlan add vid 10 dev br1 self214 bridge vlan add vid 20 dev br1 self215 216 bridge fdb add 00:00:5e:00:01:01 dev br1 self local vlan 10217 bridge fdb add 00:00:5e:00:01:01 dev br1 self local vlan 20218 219 sysctl_set net.ipv4.conf.all.rp_filter 0220 sysctl_set net.ipv4.conf.vlan10-v.rp_filter 0221 sysctl_set net.ipv4.conf.vlan20-v.rp_filter 0222}223 224switch_destroy()225{226 sysctl_restore net.ipv4.conf.all.rp_filter227 228 bridge fdb del 00:00:5e:00:01:01 dev br1 self local vlan 20229 bridge fdb del 00:00:5e:00:01:01 dev br1 self local vlan 10230 231 bridge vlan del vid 20 dev br1 self232 bridge vlan del vid 10 dev br1 self233 234 ip link del dev vlan20235 236 ip link del dev vlan10237 238 vrf_destroy "vrf-green"239 240 ip address del 10.0.0.1/32 dev lo241 242 bridge vlan del vid 20 dev $swp2243 ip link set dev $swp2 down244 ip link set dev $swp2 nomaster245 246 bridge vlan del vid 10 dev $swp1247 ip link set dev $swp1 down248 ip link set dev $swp1 nomaster249 250 bridge vlan del vid 20 dev vx20251 ip link set dev vx20 nomaster252 253 ip link set dev vx20 down254 ip link del dev vx20255 256 bridge vlan del vid 10 dev vx10257 ip link set dev vx10 nomaster258 259 ip link set dev vx10 down260 ip link del dev vx10261 262 ip route del 10.0.0.2/32 nexthop via 192.0.2.2263 ip address del dev $rp1 192.0.2.1/24264 ip link set dev $rp1 down265 266 ip link set dev br1 down267 ip link del dev br1268}269 270spine_create()271{272 vrf_create "vrf-spine"273 ip link set dev $rp2 master vrf-spine274 ip link set dev v1 master vrf-spine275 ip link set dev vrf-spine up276 ip link set dev $rp2 up277 ip link set dev v1 up278 279 ip address add 192.0.2.2/24 dev $rp2280 ip address add 192.0.3.2/24 dev v1281 282 ip route add 10.0.0.1/32 vrf vrf-spine nexthop via 192.0.2.1283 ip route add 10.0.0.2/32 vrf vrf-spine nexthop via 192.0.3.1284}285 286spine_destroy()287{288 ip route del 10.0.0.2/32 vrf vrf-spine nexthop via 192.0.3.1289 ip route del 10.0.0.1/32 vrf vrf-spine nexthop via 192.0.2.1290 291 ip address del 192.0.3.2/24 dev v1292 ip address del 192.0.2.2/24 dev $rp2293 294 ip link set dev v1 down295 ip link set dev $rp2 down296 vrf_destroy "vrf-spine"297}298 299ns_h1_create()300{301 hx_create "vrf-h1" w2 10.1.1.102 10.1.1.1302}303export -f ns_h1_create304 305ns_h2_create()306{307 hx_create "vrf-h2" w4 10.1.2.102 10.1.2.1308}309export -f ns_h2_create310 311ns_switch_create()312{313 ip link add name br1 type bridge vlan_filtering 1 vlan_default_pvid 0 \314 mcast_snooping 0315 ip link set dev br1 up316 317 ip link set dev v2 up318 ip address add dev v2 192.0.3.1/24319 ip route add 10.0.0.1/32 nexthop via 192.0.3.2320 321 ip link add name vx10 type vxlan id 1000 \322 local 10.0.0.2 remote 10.0.0.1 dstport 4789 \323 nolearning noudpcsum tos inherit ttl 100324 ip link set dev vx10 up325 326 ip link set dev vx10 master br1327 bridge vlan add vid 10 dev vx10 pvid untagged328 329 ip link add name vx20 type vxlan id 2000 \330 local 10.0.0.2 remote 10.0.0.1 dstport 4789 \331 nolearning noudpcsum tos inherit ttl 100332 ip link set dev vx20 up333 334 ip link set dev vx20 master br1335 bridge vlan add vid 20 dev vx20 pvid untagged336 337 ip link set dev w1 master br1338 ip link set dev w1 up339 bridge vlan add vid 10 dev w1 pvid untagged340 341 ip link set dev w3 master br1342 ip link set dev w3 up343 bridge vlan add vid 20 dev w3 pvid untagged344 345 ip address add 10.0.0.2/32 dev lo346 347 # Create SVIs348 vrf_create "vrf-green"349 ip link set dev vrf-green up350 351 ip link add link br1 name vlan10 up master vrf-green type vlan id 10352 ip address add 10.1.1.12/24 dev vlan10353 ip link add link vlan10 name vlan10-v up master vrf-green \354 address 00:00:5e:00:01:01 type macvlan mode private355 ip address add 10.1.1.1/24 dev vlan10-v356 357 ip link add link br1 name vlan20 up master vrf-green type vlan id 20358 ip address add 10.1.2.12/24 dev vlan20359 ip link add link vlan20 name vlan20-v up master vrf-green \360 address 00:00:5e:00:01:01 type macvlan mode private361 ip address add 10.1.2.1/24 dev vlan20-v362 363 bridge vlan add vid 10 dev br1 self364 bridge vlan add vid 20 dev br1 self365 366 bridge fdb add 00:00:5e:00:01:01 dev br1 self local vlan 10367 bridge fdb add 00:00:5e:00:01:01 dev br1 self local vlan 20368 369 sysctl_set net.ipv4.conf.all.rp_filter 0370 sysctl_set net.ipv4.conf.vlan10-v.rp_filter 0371 sysctl_set net.ipv4.conf.vlan20-v.rp_filter 0372}373export -f ns_switch_create374 375ns_init()376{377 ip link add name w1 type veth peer name w2378 ip link add name w3 type veth peer name w4379 380 ip link set dev lo up381 382 ns_h1_create383 ns_h2_create384 ns_switch_create385}386export -f ns_init387 388ns1_create()389{390 ip netns add ns1391 ip link set dev v2 netns ns1392 in_ns ns1 ns_init393}394 395ns1_destroy()396{397 ip netns exec ns1 ip link set dev v2 netns 1398 ip netns del ns1399}400 401macs_populate()402{403 local mac1=$1; shift404 local mac2=$1; shift405 local ip1=$1; shift406 local ip2=$1; shift407 local dst=$1; shift408 409 bridge fdb add $mac1 dev vx10 self master extern_learn static \410 dst $dst vlan 10411 bridge fdb add $mac2 dev vx20 self master extern_learn static \412 dst $dst vlan 20413 414 ip neigh add $ip1 lladdr $mac1 nud noarp dev vlan10 \415 extern_learn416 ip neigh add $ip2 lladdr $mac2 nud noarp dev vlan20 \417 extern_learn418}419export -f macs_populate420 421macs_initialize()422{423 local h1_ns_mac=$(in_ns ns1 mac_get w2)424 local h2_ns_mac=$(in_ns ns1 mac_get w4)425 local h1_mac=$(mac_get $h1)426 local h2_mac=$(mac_get $h2)427 428 macs_populate $h1_ns_mac $h2_ns_mac 10.1.1.102 10.1.2.102 10.0.0.2429 in_ns ns1 macs_populate $h1_mac $h2_mac 10.1.1.101 10.1.2.101 10.0.0.1430}431 432setup_prepare()433{434 h1=${NETIFS[p1]}435 swp1=${NETIFS[p2]}436 437 swp2=${NETIFS[p3]}438 h2=${NETIFS[p4]}439 440 rp1=${NETIFS[p5]}441 rp2=${NETIFS[p6]}442 443 vrf_prepare444 forwarding_enable445 446 h1_create447 h2_create448 switch_create449 450 ip link add name v1 type veth peer name v2451 spine_create452 ns1_create453 454 macs_initialize455}456 457cleanup()458{459 pre_cleanup460 461 ns1_destroy462 spine_destroy463 ip link del dev v1464 465 switch_destroy466 h2_destroy467 h1_destroy468 469 forwarding_restore470 vrf_cleanup471}472 473ping_ipv4()474{475 ping_test $h1 10.1.2.101 ": local->local vid 10->vid 20"476 ping_test $h1 10.1.1.102 ": local->remote vid 10->vid 10"477 ping_test $h2 10.1.2.102 ": local->remote vid 20->vid 20"478 ping_test $h1 10.1.2.102 ": local->remote vid 10->vid 20"479 ping_test $h2 10.1.1.102 ": local->remote vid 20->vid 10"480}481 482arp_decap()483{484 # Repeat the ping tests, but without populating the neighbours. This485 # makes sure we correctly decapsulate ARP packets486 log_info "deleting neighbours from vlan interfaces"487 488 ip neigh del 10.1.1.102 dev vlan10489 ip neigh del 10.1.2.102 dev vlan20490 491 ping_ipv4492 493 ip neigh replace 10.1.1.102 lladdr $(in_ns ns1 mac_get w2) nud noarp \494 dev vlan10 extern_learn495 ip neigh replace 10.1.2.102 lladdr $(in_ns ns1 mac_get w4) nud noarp \496 dev vlan20 extern_learn497}498 499arp_suppression_compare()500{501 local expect=$1; shift502 local actual=$(in_ns ns1 tc_rule_stats_get vx10 1 ingress)503 504 (( expect == actual ))505 check_err $? "expected $expect arps got $actual"506}507 508arp_suppression()509{510 ip link set dev vx10 type bridge_slave neigh_suppress on511 512 in_ns ns1 tc qdisc add dev vx10 clsact513 in_ns ns1 tc filter add dev vx10 ingress proto arp pref 1 handle 101 \514 flower dst_mac ff:ff:ff:ff:ff:ff arp_tip 10.1.1.102 arp_op \515 request action pass516 517 # The neighbour is configured on the SVI and ARP suppression is on, so518 # the ARP request should be suppressed519 RET=0520 521 $ARPING -I $h1 -fqb -c 1 -w 1 10.1.1.102522 check_err $? "arping failed"523 524 arp_suppression_compare 0525 526 log_test "neigh_suppress: on / neigh exists: yes"527 528 # Delete the neighbour from the SVI. A single ARP request should be529 # received by the remote VTEP530 RET=0531 532 ip neigh del 10.1.1.102 dev vlan10533 534 $ARPING -I $h1 -fqb -c 1 -w 1 10.1.1.102535 check_err $? "arping failed"536 537 arp_suppression_compare 1538 539 log_test "neigh_suppress: on / neigh exists: no"540 541 # Turn off ARP suppression and make sure ARP is not suppressed,542 # regardless of neighbour existence on the SVI543 RET=0544 545 ip neigh del 10.1.1.102 dev vlan10 &> /dev/null546 ip link set dev vx10 type bridge_slave neigh_suppress off547 548 $ARPING -I $h1 -fqb -c 1 -w 1 10.1.1.102549 check_err $? "arping failed"550 551 arp_suppression_compare 2552 553 log_test "neigh_suppress: off / neigh exists: no"554 555 RET=0556 557 ip neigh add 10.1.1.102 lladdr $(in_ns ns1 mac_get w2) nud noarp \558 dev vlan10 extern_learn559 560 $ARPING -I $h1 -fqb -c 1 -w 1 10.1.1.102561 check_err $? "arping failed"562 563 arp_suppression_compare 3564 565 log_test "neigh_suppress: off / neigh exists: yes"566 567 in_ns ns1 tc qdisc del dev vx10 clsact568}569 570trap cleanup EXIT571 572setup_prepare573setup_wait574 575tests_run576 577exit $EXIT_STATUS578