239 lines · bash
1#!/bin/bash2# SPDX-License-Identifier: GPL-2.03 4# This test is for checking the [no]localbypass VXLAN device option. The test5# configures two VXLAN devices in the same network namespace and a tc filter on6# the loopback device that drops encapsulated packets. The test sends packets7# from the first VXLAN device and verifies that by default these packets are8# received by the second VXLAN device. The test then enables the nolocalbypass9# option and verifies that packets are no longer received by the second VXLAN10# device.11 12source lib.sh13ret=014 15TESTS="16 nolocalbypass17"18VERBOSE=019PAUSE_ON_FAIL=no20PAUSE=no21 22################################################################################23# Utilities24 25log_test()26{27 local rc=$128 local expected=$229 local msg="$3"30 31 if [ ${rc} -eq ${expected} ]; then32 printf "TEST: %-60s [ OK ]\n" "${msg}"33 nsuccess=$((nsuccess+1))34 else35 ret=136 nfail=$((nfail+1))37 printf "TEST: %-60s [FAIL]\n" "${msg}"38 if [ "$VERBOSE" = "1" ]; then39 echo " rc=$rc, expected $expected"40 fi41 42 if [ "${PAUSE_ON_FAIL}" = "yes" ]; then43 echo44 echo "hit enter to continue, 'q' to quit"45 read a46 [ "$a" = "q" ] && exit 147 fi48 fi49 50 if [ "${PAUSE}" = "yes" ]; then51 echo52 echo "hit enter to continue, 'q' to quit"53 read a54 [ "$a" = "q" ] && exit 155 fi56 57 [ "$VERBOSE" = "1" ] && echo58}59 60run_cmd()61{62 local cmd="$1"63 local out64 local stderr="2>/dev/null"65 66 if [ "$VERBOSE" = "1" ]; then67 printf "COMMAND: $cmd\n"68 stderr=69 fi70 71 out=$(eval $cmd $stderr)72 rc=$?73 if [ "$VERBOSE" = "1" -a -n "$out" ]; then74 echo " $out"75 fi76 77 return $rc78}79 80tc_check_packets()81{82 local ns=$1; shift83 local id=$1; shift84 local handle=$1; shift85 local count=$1; shift86 local pkts87 88 sleep 0.189 pkts=$(tc -n $ns -j -s filter show $id \90 | jq ".[] | select(.options.handle == $handle) | \91 .options.actions[0].stats.packets")92 [[ $pkts == $count ]]93}94 95################################################################################96# Setup97 98setup()99{100 setup_ns ns1101 102 ip -n $ns1 address add 192.0.2.1/32 dev lo103 ip -n $ns1 address add 198.51.100.1/32 dev lo104 105 ip -n $ns1 link add name vx0 up type vxlan id 100 local 198.51.100.1 \106 dstport 4789 nolearning107 ip -n $ns1 link add name vx1 up type vxlan id 100 dstport 4790108}109 110cleanup()111{112 cleanup_ns $ns1113}114 115################################################################################116# Tests117 118nolocalbypass()119{120 local smac=00:01:02:03:04:05121 local dmac=00:0a:0b:0c:0d:0e122 123 run_cmd "bridge -n $ns1 fdb add $dmac dev vx0 self static dst 192.0.2.1 port 4790"124 125 run_cmd "tc -n $ns1 qdisc add dev vx1 clsact"126 run_cmd "tc -n $ns1 filter add dev vx1 ingress pref 1 handle 101 proto all flower src_mac $smac dst_mac $dmac action pass"127 128 run_cmd "tc -n $ns1 qdisc add dev lo clsact"129 run_cmd "tc -n $ns1 filter add dev lo ingress pref 1 handle 101 proto ip flower ip_proto udp dst_port 4790 action drop"130 131 run_cmd "ip -n $ns1 -d -j link show dev vx0 | jq -e '.[][\"linkinfo\"][\"info_data\"][\"localbypass\"] == true'"132 log_test $? 0 "localbypass enabled"133 134 run_cmd "ip netns exec $ns1 mausezahn vx0 -a $smac -b $dmac -c 1 -p 100 -q"135 136 tc_check_packets "$ns1" "dev vx1 ingress" 101 1137 log_test $? 0 "Packet received by local VXLAN device - localbypass"138 139 run_cmd "ip -n $ns1 link set dev vx0 type vxlan nolocalbypass"140 141 run_cmd "ip -n $ns1 -d -j link show dev vx0 | jq -e '.[][\"linkinfo\"][\"info_data\"][\"localbypass\"] == false'"142 log_test $? 0 "localbypass disabled"143 144 run_cmd "ip netns exec $ns1 mausezahn vx0 -a $smac -b $dmac -c 1 -p 100 -q"145 146 tc_check_packets "$ns1" "dev vx1 ingress" 101 1147 log_test $? 0 "Packet not received by local VXLAN device - nolocalbypass"148 149 run_cmd "ip -n $ns1 link set dev vx0 type vxlan localbypass"150 151 run_cmd "ip -n $ns1 -d -j link show dev vx0 | jq -e '.[][\"linkinfo\"][\"info_data\"][\"localbypass\"] == true'"152 log_test $? 0 "localbypass enabled"153 154 run_cmd "ip netns exec $ns1 mausezahn vx0 -a $smac -b $dmac -c 1 -p 100 -q"155 156 tc_check_packets "$ns1" "dev vx1 ingress" 101 2157 log_test $? 0 "Packet received by local VXLAN device - localbypass"158}159 160################################################################################161# Usage162 163usage()164{165 cat <<EOF166usage: ${0##*/} OPTS167 168 -t <test> Test(s) to run (default: all)169 (options: $TESTS)170 -p Pause on fail171 -P Pause after each test before cleanup172 -v Verbose mode (show commands and output)173EOF174}175 176################################################################################177# Main178 179trap cleanup EXIT180 181while getopts ":t:pPvh" opt; do182 case $opt in183 t) TESTS=$OPTARG ;;184 p) PAUSE_ON_FAIL=yes;;185 P) PAUSE=yes;;186 v) VERBOSE=$(($VERBOSE + 1));;187 h) usage; exit 0;;188 *) usage; exit 1;;189 esac190done191 192# Make sure we don't pause twice.193[ "${PAUSE}" = "yes" ] && PAUSE_ON_FAIL=no194 195if [ "$(id -u)" -ne 0 ];then196 echo "SKIP: Need root privileges"197 exit $ksft_skip;198fi199 200if [ ! -x "$(command -v ip)" ]; then201 echo "SKIP: Could not run test without ip tool"202 exit $ksft_skip203fi204 205if [ ! -x "$(command -v bridge)" ]; then206 echo "SKIP: Could not run test without bridge tool"207 exit $ksft_skip208fi209 210if [ ! -x "$(command -v mausezahn)" ]; then211 echo "SKIP: Could not run test without mausezahn tool"212 exit $ksft_skip213fi214 215if [ ! -x "$(command -v jq)" ]; then216 echo "SKIP: Could not run test without jq tool"217 exit $ksft_skip218fi219 220ip link help vxlan 2>&1 | grep -q "localbypass"221if [ $? -ne 0 ]; then222 echo "SKIP: iproute2 ip too old, missing VXLAN nolocalbypass support"223 exit $ksft_skip224fi225 226cleanup227 228for t in $TESTS229do230 setup; $t; cleanup;231done232 233if [ "$TESTS" != "none" ]; then234 printf "\nTests passed: %3d\n" ${nsuccess}235 printf "Tests failed: %3d\n" ${nfail}236fi237 238exit $ret239