417 lines
11 KiB
Bash
417 lines
11 KiB
Bash
|
#!/bin/bash
|
||
|
|
# SPDX-License-Identifier: GPL-2.0
|
||
|
|
|
||
|
|
# +------------------+
|
||
|
|
# | H1 (v$h1) |
|
||
|
|
# | 2001:db8:1::2/64 |
|
||
|
|
# | 198.51.100.2/28 |
|
||
|
|
# | $h1 + |
|
||
|
|
# +-------------|----+
|
||
|
|
# |
|
||
|
|
# +-------------|-------------------------------+
|
||
|
|
# | SW1 | |
|
||
|
|
# | $rp1 + |
|
||
|
|
# | 198.51.100.1/28 |
|
||
|
|
# | 2001:db8:1::1/64 |
|
||
|
|
# | |
|
||
|
|
# | 2001:db8:2::1/64 2001:db8:3::1/64 |
|
||
|
|
# | 198.51.100.17/28 198.51.100.33/28 |
|
||
|
|
# | $rp2 + $rp3 + |
|
||
|
|
# +--------------|--------------------------|---+
|
||
|
|
# | |
|
||
|
|
# | |
|
||
|
|
# +--------------|---+ +--------------|---+
|
||
|
|
# | H2 (v$h2) | | | H3 (v$h3) | |
|
||
|
|
# | $h2 + | | $h3 + |
|
||
|
|
# | 198.51.100.18/28 | | 198.51.100.34/28 |
|
||
|
|
# | 2001:db8:2::2/64 | | 2001:db8:3::2/64 |
|
||
|
|
# +------------------+ +------------------+
|
||
|
|
#
|
||
|
|
|
||
|
|
ALL_TESTS="mcast_v4 mcast_v6 rpf_v4 rpf_v6"
|
||
|
|
NUM_NETIFS=6
|
||
|
|
source lib.sh
|
||
|
|
source tc_common.sh
|
||
|
|
|
||
|
|
require_command $MCD
|
||
|
|
require_command $MC_CLI
|
||
|
|
table_name=selftests
|
||
|
|
|
||
|
|
h1_create()
|
||
|
|
{
|
||
|
|
simple_if_init $h1 198.51.100.2/28 2001:db8:1::2/64
|
||
|
|
|
||
|
|
ip route add 198.51.100.16/28 vrf v$h1 nexthop via 198.51.100.1
|
||
|
|
ip route add 198.51.100.32/28 vrf v$h1 nexthop via 198.51.100.1
|
||
|
|
|
||
|
|
ip route add 2001:db8:2::/64 vrf v$h1 nexthop via 2001:db8:1::1
|
||
|
|
ip route add 2001:db8:3::/64 vrf v$h1 nexthop via 2001:db8:1::1
|
||
|
|
|
||
|
|
tc qdisc add dev $h1 ingress
|
||
|
|
}
|
||
|
|
|
||
|
|
h1_destroy()
|
||
|
|
{
|
||
|
|
tc qdisc del dev $h1 ingress
|
||
|
|
|
||
|
|
ip route del 2001:db8:3::/64 vrf v$h1
|
||
|
|
ip route del 2001:db8:2::/64 vrf v$h1
|
||
|
|
|
||
|
|
ip route del 198.51.100.32/28 vrf v$h1
|
||
|
|
ip route del 198.51.100.16/28 vrf v$h1
|
||
|
|
|
||
|
|
simple_if_fini $h1 198.51.100.2/28 2001:db8:1::2/64
|
||
|
|
}
|
||
|
|
|
||
|
|
h2_create()
|
||
|
|
{
|
||
|
|
simple_if_init $h2 198.51.100.18/28 2001:db8:2::2/64
|
||
|
|
|
||
|
|
ip route add 198.51.100.0/28 vrf v$h2 nexthop via 198.51.100.17
|
||
|
|
ip route add 198.51.100.32/28 vrf v$h2 nexthop via 198.51.100.17
|
||
|
|
|
||
|
|
ip route add 2001:db8:1::/64 vrf v$h2 nexthop via 2001:db8:2::1
|
||
|
|
ip route add 2001:db8:3::/64 vrf v$h2 nexthop via 2001:db8:2::1
|
||
|
|
|
||
|
|
tc qdisc add dev $h2 ingress
|
||
|
|
}
|
||
|
|
|
||
|
|
h2_destroy()
|
||
|
|
{
|
||
|
|
tc qdisc del dev $h2 ingress
|
||
|
|
|
||
|
|
ip route del 2001:db8:3::/64 vrf v$h2
|
||
|
|
ip route del 2001:db8:1::/64 vrf v$h2
|
||
|
|
|
||
|
|
ip route del 198.51.100.32/28 vrf v$h2
|
||
|
|
ip route del 198.51.100.0/28 vrf v$h2
|
||
|
|
|
||
|
|
simple_if_fini $h2 198.51.100.18/28 2001:db8:2::2/64
|
||
|
|
}
|
||
|
|
|
||
|
|
h3_create()
|
||
|
|
{
|
||
|
|
simple_if_init $h3 198.51.100.34/28 2001:db8:3::2/64
|
||
|
|
|
||
|
|
ip route add 198.51.100.0/28 vrf v$h3 nexthop via 198.51.100.33
|
||
|
|
ip route add 198.51.100.16/28 vrf v$h3 nexthop via 198.51.100.33
|
||
|
|
|
||
|
|
ip route add 2001:db8:1::/64 vrf v$h3 nexthop via 2001:db8:3::1
|
||
|
|
ip route add 2001:db8:2::/64 vrf v$h3 nexthop via 2001:db8:3::1
|
||
|
|
|
||
|
|
tc qdisc add dev $h3 ingress
|
||
|
|
}
|
||
|
|
|
||
|
|
h3_destroy()
|
||
|
|
{
|
||
|
|
tc qdisc del dev $h3 ingress
|
||
|
|
|
||
|
|
ip route del 2001:db8:2::/64 vrf v$h3
|
||
|
|
ip route del 2001:db8:1::/64 vrf v$h3
|
||
|
|
|
||
|
|
ip route del 198.51.100.16/28 vrf v$h3
|
||
|
|
ip route del 198.51.100.0/28 vrf v$h3
|
||
|
|
|
||
|
|
simple_if_fini $h3 198.51.100.34/28 2001:db8:3::2/64
|
||
|
|
}
|
||
|
|
|
||
|
|
router_create()
|
||
|
|
{
|
||
|
|
ip link set dev $rp1 up
|
||
|
|
ip link set dev $rp2 up
|
||
|
|
ip link set dev $rp3 up
|
||
|
|
|
||
|
|
ip address add 198.51.100.1/28 dev $rp1
|
||
|
|
ip address add 198.51.100.17/28 dev $rp2
|
||
|
|
ip address add 198.51.100.33/28 dev $rp3
|
||
|
|
|
||
|
|
ip address add 2001:db8:1::1/64 dev $rp1
|
||
|
|
ip address add 2001:db8:2::1/64 dev $rp2
|
||
|
|
ip address add 2001:db8:3::1/64 dev $rp3
|
||
|
|
|
||
|
|
tc qdisc add dev $rp3 ingress
|
||
|
|
}
|
||
|
|
|
||
|
|
router_destroy()
|
||
|
|
{
|
||
|
|
tc qdisc del dev $rp3 ingress
|
||
|
|
|
||
|
|
ip address del 2001:db8:3::1/64 dev $rp3
|
||
|
|
ip address del 2001:db8:2::1/64 dev $rp2
|
||
|
|
ip address del 2001:db8:1::1/64 dev $rp1
|
||
|
|
|
||
|
|
ip address del 198.51.100.33/28 dev $rp3
|
||
|
|
ip address del 198.51.100.17/28 dev $rp2
|
||
|
|
ip address del 198.51.100.1/28 dev $rp1
|
||
|
|
|
||
|
|
ip link set dev $rp3 down
|
||
|
|
ip link set dev $rp2 down
|
||
|
|
ip link set dev $rp1 down
|
||
|
|
}
|
||
|
|
|
||
|
|
start_mcd()
|
||
|
|
{
|
||
|
|
SMCROUTEDIR="$(mktemp -d)"
|
||
|
|
|
||
|
|
for ((i = 1; i <= $NUM_NETIFS; ++i)); do
|
||
|
|
echo "phyint ${NETIFS[p$i]} enable" >> \
|
||
|
|
$SMCROUTEDIR/$table_name.conf
|
||
|
|
done
|
||
|
|
|
||
|
|
$MCD -N -I $table_name -f $SMCROUTEDIR/$table_name.conf \
|
||
|
|
-P $SMCROUTEDIR/$table_name.pid
|
||
|
|
}
|
||
|
|
|
||
|
|
kill_mcd()
|
||
|
|
{
|
||
|
|
pkill $MCD
|
||
|
|
rm -rf $SMCROUTEDIR
|
||
|
|
}
|
||
|
|
|
||
|
|
setup_prepare()
|
||
|
|
{
|
||
|
|
h1=${NETIFS[p1]}
|
||
|
|
rp1=${NETIFS[p2]}
|
||
|
|
|
||
|
|
rp2=${NETIFS[p3]}
|
||
|
|
h2=${NETIFS[p4]}
|
||
|
|
|
||
|
|
rp3=${NETIFS[p5]}
|
||
|
|
h3=${NETIFS[p6]}
|
||
|
|
|
||
|
|
start_mcd
|
||
|
|
|
||
|
|
vrf_prepare
|
||
|
|
|
||
|
|
h1_create
|
||
|
|
h2_create
|
||
|
|
h3_create
|
||
|
|
|
||
|
|
router_create
|
||
|
|
|
||
|
|
forwarding_enable
|
||
|
|
}
|
||
|
|
|
||
|
|
cleanup()
|
||
|
|
{
|
||
|
|
pre_cleanup
|
||
|
|
|
||
|
|
forwarding_restore
|
||
|
|
|
||
|
|
router_destroy
|
||
|
|
|
||
|
|
h3_destroy
|
||
|
|
h2_destroy
|
||
|
|
h1_destroy
|
||
|
|
|
||
|
|
vrf_cleanup
|
||
|
|
|
||
|
|
kill_mcd
|
||
|
|
}
|
||
|
|
|
||
|
|
create_mcast_sg()
|
||
|
|
{
|
||
|
|
local if_name=$1; shift
|
||
|
|
local s_addr=$1; shift
|
||
|
|
local mcast=$1; shift
|
||
|
|
local dest_ifs=${@}
|
||
|
|
|
||
|
|
$MC_CLI -I $table_name add $if_name $s_addr $mcast $dest_ifs
|
||
|
|
}
|
||
|
|
|
||
|
|
delete_mcast_sg()
|
||
|
|
{
|
||
|
|
local if_name=$1; shift
|
||
|
|
local s_addr=$1; shift
|
||
|
|
local mcast=$1; shift
|
||
|
|
local dest_ifs=${@}
|
||
|
|
|
||
|
|
$MC_CLI -I $table_name remove $if_name $s_addr $mcast $dest_ifs
|
||
|
|
}
|
||
|
|
|
||
|
|
mcast_v4()
|
||
|
|
{
|
||
|
|
# Add two interfaces to an MC group, send a packet to the MC group and
|
||
|
|
# verify packets are received on both. Then delete the route and verify
|
||
|
|
# packets are no longer received.
|
||
|
|
|
||
|
|
RET=0
|
||
|
|
|
||
|
|
tc filter add dev $h2 ingress protocol ip pref 1 handle 122 flower \
|
||
|
|
dst_ip 225.1.2.3 action drop
|
||
|
|
tc filter add dev $h3 ingress protocol ip pref 1 handle 133 flower \
|
||
|
|
dst_ip 225.1.2.3 action drop
|
||
|
|
|
||
|
|
create_mcast_sg $rp1 198.51.100.2 225.1.2.3 $rp2 $rp3
|
||
|
|
|
||
|
|
# Send frames with the corresponding L2 destination address.
|
||
|
|
$MZ $h1 -c 5 -p 128 -t udp -a 00:11:22:33:44:55 -b 01:00:5e:01:02:03 \
|
||
|
|
-A 198.51.100.2 -B 225.1.2.3 -q
|
||
|
|
|
||
|
|
tc_check_packets "dev $h2 ingress" 122 5
|
||
|
|
check_err $? "Multicast not received on first host"
|
||
|
|
tc_check_packets "dev $h3 ingress" 133 5
|
||
|
|
check_err $? "Multicast not received on second host"
|
||
|
|
|
||
|
|
delete_mcast_sg $rp1 198.51.100.2 225.1.2.3 $rp2 $rp3
|
||
|
|
|
||
|
|
$MZ $h1 -c 5 -p 128 -t udp -a 00:11:22:33:44:55 -b 01:00:5e:01:02:03 \
|
||
|
|
-A 198.51.100.2 -B 225.1.2.3 -q
|
||
|
|
|
||
|
|
tc_check_packets "dev $h2 ingress" 122 5
|
||
|
|
check_err $? "Multicast received on host although deleted"
|
||
|
|
tc_check_packets "dev $h3 ingress" 133 5
|
||
|
|
check_err $? "Multicast received on second host although deleted"
|
||
|
|
|
||
|
|
tc filter del dev $h3 ingress protocol ip pref 1 handle 133 flower
|
||
|
|
tc filter del dev $h2 ingress protocol ip pref 1 handle 122 flower
|
||
|
|
|
||
|
|
log_test "mcast IPv4"
|
||
|
|
}
|
||
|
|
|
||
|
|
mcast_v6()
|
||
|
|
{
|
||
|
|
# Add two interfaces to an MC group, send a packet to the MC group and
|
||
|
|
# verify packets are received on both. Then delete the route and verify
|
||
|
|
# packets are no longer received.
|
||
|
|
|
||
|
|
RET=0
|
||
|
|
|
||
|
|
tc filter add dev $h2 ingress protocol ipv6 pref 1 handle 122 flower \
|
||
|
|
dst_ip ff0e::3 action drop
|
||
|
|
tc filter add dev $h3 ingress protocol ipv6 pref 1 handle 133 flower \
|
||
|
|
dst_ip ff0e::3 action drop
|
||
|
|
|
||
|
|
create_mcast_sg $rp1 2001:db8:1::2 ff0e::3 $rp2 $rp3
|
||
|
|
|
||
|
|
# Send frames with the corresponding L2 destination address.
|
||
|
|
$MZ $h1 -6 -c 5 -p 128 -t udp -a 00:11:22:33:44:55 \
|
||
|
|
-b 33:33:00:00:00:03 -A 2001:db8:1::2 -B ff0e::3 -q
|
||
|
|
|
||
|
|
tc_check_packets "dev $h2 ingress" 122 5
|
||
|
|
check_err $? "Multicast not received on first host"
|
||
|
|
tc_check_packets "dev $h3 ingress" 133 5
|
||
|
|
check_err $? "Multicast not received on second host"
|
||
|
|
|
||
|
|
delete_mcast_sg $rp1 2001:db8:1::2 ff0e::3 $rp2 $rp3
|
||
|
|
|
||
|
|
$MZ $h1 -6 -c 5 -p 128 -t udp -a 00:11:22:33:44:55 \
|
||
|
|
-b 33:33:00:00:00:03 -A 2001:db8:1::2 -B ff0e::3 -q
|
||
|
|
|
||
|
|
tc_check_packets "dev $h2 ingress" 122 5
|
||
|
|
check_err $? "Multicast received on first host although deleted"
|
||
|
|
tc_check_packets "dev $h3 ingress" 133 5
|
||
|
|
check_err $? "Multicast received on second host although deleted"
|
||
|
|
|
||
|
|
tc filter del dev $h3 ingress protocol ipv6 pref 1 handle 133 flower
|
||
|
|
tc filter del dev $h2 ingress protocol ipv6 pref 1 handle 122 flower
|
||
|
|
|
||
|
|
log_test "mcast IPv6"
|
||
|
|
}
|
||
|
|
|
||
|
|
rpf_v4()
|
||
|
|
{
|
||
|
|
# Add a multicast route from first router port to the other two. Send
|
||
|
|
# matching packets and test that both hosts receive them. Then, send
|
||
|
|
# the same packets via the third router port and test that they do not
|
||
|
|
# reach any host due to RPF check. A filter with 'skip_hw' is added to
|
||
|
|
# test that devices capable of multicast routing offload trap those
|
||
|
|
# packets. The filter is essentialy a NOP in other scenarios.
|
||
|
|
|
||
|
|
RET=0
|
||
|
|
|
||
|
|
tc filter add dev $h1 ingress protocol ip pref 1 handle 1 flower \
|
||
|
|
dst_ip 225.1.2.3 ip_proto udp dst_port 12345 action drop
|
||
|
|
tc filter add dev $h2 ingress protocol ip pref 1 handle 1 flower \
|
||
|
|
dst_ip 225.1.2.3 ip_proto udp dst_port 12345 action drop
|
||
|
|
tc filter add dev $h3 ingress protocol ip pref 1 handle 1 flower \
|
||
|
|
dst_ip 225.1.2.3 ip_proto udp dst_port 12345 action drop
|
||
|
|
tc filter add dev $rp3 ingress protocol ip pref 1 handle 1 flower \
|
||
|
|
skip_hw dst_ip 225.1.2.3 ip_proto udp dst_port 12345 action pass
|
||
|
|
|
||
|
|
create_mcast_sg $rp1 198.51.100.2 225.1.2.3 $rp2 $rp3
|
||
|
|
|
||
|
|
$MZ $h1 -c 5 -p 128 -t udp "ttl=10,sp=54321,dp=12345" \
|
||
|
|
-a 00:11:22:33:44:55 -b 01:00:5e:01:02:03 \
|
||
|
|
-A 198.51.100.2 -B 225.1.2.3 -q
|
||
|
|
|
||
|
|
tc_check_packets "dev $h2 ingress" 1 5
|
||
|
|
check_err $? "Multicast not received on first host"
|
||
|
|
tc_check_packets "dev $h3 ingress" 1 5
|
||
|
|
check_err $? "Multicast not received on second host"
|
||
|
|
|
||
|
|
$MZ $h3 -c 5 -p 128 -t udp "ttl=10,sp=54321,dp=12345" \
|
||
|
|
-a 00:11:22:33:44:55 -b 01:00:5e:01:02:03 \
|
||
|
|
-A 198.51.100.2 -B 225.1.2.3 -q
|
||
|
|
|
||
|
|
tc_check_packets "dev $h1 ingress" 1 0
|
||
|
|
check_err $? "Multicast received on first host when should not"
|
||
|
|
tc_check_packets "dev $h2 ingress" 1 5
|
||
|
|
check_err $? "Multicast received on second host when should not"
|
||
|
|
tc_check_packets "dev $rp3 ingress" 1 5
|
||
|
|
check_err $? "Packets not trapped due to RPF check"
|
||
|
|
|
||
|
|
delete_mcast_sg $rp1 198.51.100.2 225.1.2.3 $rp2 $rp3
|
||
|
|
|
||
|
|
tc filter del dev $rp3 ingress protocol ip pref 1 handle 1 flower
|
||
|
|
tc filter del dev $h3 ingress protocol ip pref 1 handle 1 flower
|
||
|
|
tc filter del dev $h2 ingress protocol ip pref 1 handle 1 flower
|
||
|
|
tc filter del dev $h1 ingress protocol ip pref 1 handle 1 flower
|
||
|
|
|
||
|
|
log_test "RPF IPv4"
|
||
|
|
}
|
||
|
|
|
||
|
|
rpf_v6()
|
||
|
|
{
|
||
|
|
RET=0
|
||
|
|
|
||
|
|
tc filter add dev $h1 ingress protocol ipv6 pref 1 handle 1 flower \
|
||
|
|
dst_ip ff0e::3 ip_proto udp dst_port 12345 action drop
|
||
|
|
tc filter add dev $h2 ingress protocol ipv6 pref 1 handle 1 flower \
|
||
|
|
dst_ip ff0e::3 ip_proto udp dst_port 12345 action drop
|
||
|
|
tc filter add dev $h3 ingress protocol ipv6 pref 1 handle 1 flower \
|
||
|
|
dst_ip ff0e::3 ip_proto udp dst_port 12345 action drop
|
||
|
|
tc filter add dev $rp3 ingress protocol ipv6 pref 1 handle 1 flower \
|
||
|
|
skip_hw dst_ip ff0e::3 ip_proto udp dst_port 12345 action pass
|
||
|
|
|
||
|
|
create_mcast_sg $rp1 2001:db8:1::2 ff0e::3 $rp2 $rp3
|
||
|
|
|
||
|
|
$MZ $h1 -6 -c 5 -p 128 -t udp "ttl=10,sp=54321,dp=12345" \
|
||
|
|
-a 00:11:22:33:44:55 -b 33:33:00:00:00:03 \
|
||
|
|
-A 2001:db8:1::2 -B ff0e::3 -q
|
||
|
|
|
||
|
|
tc_check_packets "dev $h2 ingress" 1 5
|
||
|
|
check_err $? "Multicast not received on first host"
|
||
|
|
tc_check_packets "dev $h3 ingress" 1 5
|
||
|
|
check_err $? "Multicast not received on second host"
|
||
|
|
|
||
|
|
$MZ $h3 -6 -c 5 -p 128 -t udp "ttl=10,sp=54321,dp=12345" \
|
||
|
|
-a 00:11:22:33:44:55 -b 33:33:00:00:00:03 \
|
||
|
|
-A 2001:db8:1::2 -B ff0e::3 -q
|
||
|
|
|
||
|
|
tc_check_packets "dev $h1 ingress" 1 0
|
||
|
|
check_err $? "Multicast received on first host when should not"
|
||
|
|
tc_check_packets "dev $h2 ingress" 1 5
|
||
|
|
check_err $? "Multicast received on second host when should not"
|
||
|
|
tc_check_packets "dev $rp3 ingress" 1 5
|
||
|
|
check_err $? "Packets not trapped due to RPF check"
|
||
|
|
|
||
|
|
delete_mcast_sg $rp1 2001:db8:1::2 ff0e::3 $rp2 $rp3
|
||
|
|
|
||
|
|
tc filter del dev $rp3 ingress protocol ipv6 pref 1 handle 1 flower
|
||
|
|
tc filter del dev $h3 ingress protocol ipv6 pref 1 handle 1 flower
|
||
|
|
tc filter del dev $h2 ingress protocol ipv6 pref 1 handle 1 flower
|
||
|
|
tc filter del dev $h1 ingress protocol ipv6 pref 1 handle 1 flower
|
||
|
|
|
||
|
|
log_test "RPF IPv6"
|
||
|
|
}
|
||
|
|
|
||
|
|
trap cleanup EXIT
|
||
|
|
|
||
|
|
setup_prepare
|
||
|
|
setup_wait
|
||
|
|
|
||
|
|
tests_run
|
||
|
|
|
||
|
|
exit $EXIT_STATUS
|