1#!/bin/bash 2# SPDX-License-Identifier: GPL-2.0 3 4# +-----------------------+ +------------------------+ 5# | H1 (vrf) | | H2 (vrf) | 6# | + $h1.10 | | + $h2.10 | 7# | | 192.0.2.1/28 | | | 192.0.2.2/28 | 8# | | | | | | 9# | | + $h1.20 | | | + $h2.20 | 10# | \ | 198.51.100.1/24 | | \ | 198.51.100.2/24 | 11# | \| | | \| | 12# | + $h1 | | + $h2 | 13# +----|------------------+ +----|-------------------+ 14# | | 15# +----|--------------------------------------------------|-------------------+ 16# | SW | | | 17# | +--|--------------------------------------------------|-----------------+ | 18# | | + $swp1 BR1 (802.1q) + $swp2 | | 19# | | vid 10 vid 10 | | 20# | | vid 20 vid 20 | | 21# | | | | 22# | | + vx10 (vxlan) + vx20 (vxlan) | | 23# | | local 192.0.2.17 local 192.0.2.17 | | 24# | | remote 192.0.2.34 192.0.2.50 remote 192.0.2.34 192.0.2.50 | | 25# | | id 1000 dstport $VXPORT id 2000 dstport $VXPORT | | 26# | | vid 10 pvid untagged vid 20 pvid untagged | | 27# | +-----------------------------------------------------------------------+ | 28# | | 29# | 192.0.2.32/28 via 192.0.2.18 | 30# | 192.0.2.48/28 via 192.0.2.18 | 31# | | 32# | + $rp1 | 33# | | 192.0.2.17/28 | 34# +----|----------------------------------------------------------------------+ 35# | 36# +----|--------------------------------------------------------+ 37# | | VRP2 (vrf) | 38# | + $rp2 | 39# | 192.0.2.18/28 | 40# | | (maybe) HW 41# ============================================================================= 42# | | (likely) SW 43# | + v1 (veth) + v3 (veth) | 44# | | 192.0.2.33/28 | 192.0.2.49/28 | 45# +----|---------------------------------------|----------------+ 46# | | 47# +----|------------------------------+ +----|------------------------------+ 48# | + v2 (veth) NS1 (netns) | | + v4 (veth) NS2 (netns) | 49# | 192.0.2.34/28 | | 192.0.2.50/28 | 50# | | | | 51# | 192.0.2.16/28 via 192.0.2.33 | | 192.0.2.16/28 via 192.0.2.49 | 52# | 192.0.2.50/32 via 192.0.2.33 | | 192.0.2.34/32 via 192.0.2.49 | 53# | | | | 54# | +-------------------------------+ | | +-------------------------------+ | 55# | | BR2 (802.1q) | | | | BR2 (802.1q) | | 56# | | + vx10 (vxlan) | | | | + vx10 (vxlan) | | 57# | | local 192.0.2.34 | | | | local 192.0.2.50 | | 58# | | remote 192.0.2.17 | | | | remote 192.0.2.17 | | 59# | | remote 192.0.2.50 | | | | remote 192.0.2.34 | | 60# | | id 1000 dstport $VXPORT | | | | id 1000 dstport $VXPORT | | 61# | | vid 10 pvid untagged | | | | vid 10 pvid untagged | | 62# | | | | | | | | 63# | | + vx20 (vxlan) | | | | + vx20 (vxlan) | | 64# | | local 192.0.2.34 | | | | local 192.0.2.50 | | 65# | | remote 192.0.2.17 | | | | remote 192.0.2.17 | | 66# | | remote 192.0.2.50 | | | | remote 192.0.2.34 | | 67# | | id 2000 dstport $VXPORT | | | | id 2000 dstport $VXPORT | | 68# | | vid 20 pvid untagged | | | | vid 20 pvid untagged | | 69# | | | | | | | | 70# | | + w1 (veth) | | | | + w1 (veth) | | 71# | | | vid 10 | | | | | vid 10 | | 72# | | | vid 20 | | | | | vid 20 | | 73# | +--|----------------------------+ | | +--|----------------------------+ | 74# | | | | | | 75# | +--|----------------------------+ | | +--|----------------------------+ | 76# | | + w2 (veth) VW2 (vrf) | | | | + w2 (veth) VW2 (vrf) | | 77# | | |\ | | | | |\ | | 78# | | | + w2.10 | | | | | + w2.10 | | 79# | | | 192.0.2.3/28 | | | | | 192.0.2.4/28 | | 80# | | | | | | | | | | 81# | | + w2.20 | | | | + w2.20 | | 82# | | 198.51.100.3/24 | | | | 198.51.100.4/24 | | 83# | +-------------------------------+ | | +-------------------------------+ | 84# +-----------------------------------+ +-----------------------------------+ 85 86: ${VXPORT:=4789} 87export VXPORT 88 89: ${ALL_TESTS:=" 90 ping_ipv4 91 test_flood 92 test_unicast 93 reapply_config 94 ping_ipv4 95 test_flood 96 test_unicast 97 test_learning 98 test_pvid 99 "} 100 101NUM_NETIFS=6 102source lib.sh 103 104h1_create() 105{ 106 simple_if_init $h1 107 tc qdisc add dev $h1 clsact 108 vlan_create $h1 10 v$h1 192.0.2.1/28 109 vlan_create $h1 20 v$h1 198.51.100.1/24 110} 111 112h1_destroy() 113{ 114 vlan_destroy $h1 20 115 vlan_destroy $h1 10 116 tc qdisc del dev $h1 clsact 117 simple_if_fini $h1 118} 119 120h2_create() 121{ 122 simple_if_init $h2 123 tc qdisc add dev $h2 clsact 124 vlan_create $h2 10 v$h2 192.0.2.2/28 125 vlan_create $h2 20 v$h2 198.51.100.2/24 126} 127 128h2_destroy() 129{ 130 vlan_destroy $h2 20 131 vlan_destroy $h2 10 132 tc qdisc del dev $h2 clsact 133 simple_if_fini $h2 134} 135 136rp1_set_addr() 137{ 138 ip address add dev $rp1 192.0.2.17/28 139 140 ip route add 192.0.2.32/28 nexthop via 192.0.2.18 141 ip route add 192.0.2.48/28 nexthop via 192.0.2.18 142} 143 144rp1_unset_addr() 145{ 146 ip route del 192.0.2.48/28 nexthop via 192.0.2.18 147 ip route del 192.0.2.32/28 nexthop via 192.0.2.18 148 149 ip address del dev $rp1 192.0.2.17/28 150} 151 152switch_create() 153{ 154 ip link add name br1 type bridge vlan_filtering 1 vlan_default_pvid 0 \ 155 mcast_snooping 0 156 # Make sure the bridge uses the MAC address of the local port and not 157 # that of the VxLAN's device. 158 ip link set dev br1 address $(mac_get $swp1) 159 ip link set dev br1 up 160 161 ip link set dev $rp1 up 162 rp1_set_addr 163 164 ip link add name vx10 type vxlan id 1000 \ 165 local 192.0.2.17 dstport "$VXPORT" \ 166 nolearning noudpcsum tos inherit ttl 100 167 ip link set dev vx10 up 168 169 ip link set dev vx10 master br1 170 bridge vlan add vid 10 dev vx10 pvid untagged 171 172 ip link add name vx20 type vxlan id 2000 \ 173 local 192.0.2.17 dstport "$VXPORT" \ 174 nolearning noudpcsum tos inherit ttl 100 175 ip link set dev vx20 up 176 177 ip link set dev vx20 master br1 178 bridge vlan add vid 20 dev vx20 pvid untagged 179 180 ip link set dev $swp1 master br1 181 ip link set dev $swp1 up 182 bridge vlan add vid 10 dev $swp1 183 bridge vlan add vid 20 dev $swp1 184 185 ip link set dev $swp2 master br1 186 ip link set dev $swp2 up 187 bridge vlan add vid 10 dev $swp2 188 bridge vlan add vid 20 dev $swp2 189 190 bridge fdb append dev vx10 00:00:00:00:00:00 dst 192.0.2.34 self 191 bridge fdb append dev vx10 00:00:00:00:00:00 dst 192.0.2.50 self 192 193 bridge fdb append dev vx20 00:00:00:00:00:00 dst 192.0.2.34 self 194 bridge fdb append dev vx20 00:00:00:00:00:00 dst 192.0.2.50 self 195} 196 197switch_destroy() 198{ 199 bridge fdb del dev vx20 00:00:00:00:00:00 dst 192.0.2.50 self 200 bridge fdb del dev vx20 00:00:00:00:00:00 dst 192.0.2.34 self 201 202 bridge fdb del dev vx10 00:00:00:00:00:00 dst 192.0.2.50 self 203 bridge fdb del dev vx10 00:00:00:00:00:00 dst 192.0.2.34 self 204 205 bridge vlan del vid 20 dev $swp2 206 bridge vlan del vid 10 dev $swp2 207 ip link set dev $swp2 down 208 ip link set dev $swp2 nomaster 209 210 bridge vlan del vid 20 dev $swp1 211 bridge vlan del vid 10 dev $swp1 212 ip link set dev $swp1 down 213 ip link set dev $swp1 nomaster 214 215 bridge vlan del vid 20 dev vx20 216 ip link set dev vx20 nomaster 217 218 ip link set dev vx20 down 219 ip link del dev vx20 220 221 bridge vlan del vid 10 dev vx10 222 ip link set dev vx10 nomaster 223 224 ip link set dev vx10 down 225 ip link del dev vx10 226 227 rp1_unset_addr 228 ip link set dev $rp1 down 229 230 ip link set dev br1 down 231 ip link del dev br1 232} 233 234vrp2_create() 235{ 236 simple_if_init $rp2 192.0.2.18/28 237 __simple_if_init v1 v$rp2 192.0.2.33/28 238 __simple_if_init v3 v$rp2 192.0.2.49/28 239 tc qdisc add dev v1 clsact 240} 241 242vrp2_destroy() 243{ 244 tc qdisc del dev v1 clsact 245 __simple_if_fini v3 192.0.2.49/28 246 __simple_if_fini v1 192.0.2.33/28 247 simple_if_fini $rp2 192.0.2.18/28 248} 249 250ns_init_common() 251{ 252 local in_if=$1; shift 253 local in_addr=$1; shift 254 local other_in_addr=$1; shift 255 local nh_addr=$1; shift 256 local host_addr1=$1; shift 257 local host_addr2=$1; shift 258 259 ip link set dev $in_if up 260 ip address add dev $in_if $in_addr/28 261 tc qdisc add dev $in_if clsact 262 263 ip link add name br2 type bridge vlan_filtering 1 vlan_default_pvid 0 264 ip link set dev br2 up 265 266 ip link add name w1 type veth peer name w2 267 268 ip link set dev w1 master br2 269 ip link set dev w1 up 270 271 bridge vlan add vid 10 dev w1 272 bridge vlan add vid 20 dev w1 273 274 ip link add name vx10 type vxlan id 1000 local $in_addr \ 275 dstport "$VXPORT" 276 ip link set dev vx10 up 277 bridge fdb append dev vx10 00:00:00:00:00:00 dst 192.0.2.17 self 278 bridge fdb append dev vx10 00:00:00:00:00:00 dst $other_in_addr self 279 280 ip link set dev vx10 master br2 281 tc qdisc add dev vx10 clsact 282 283 bridge vlan add vid 10 dev vx10 pvid untagged 284 285 ip link add name vx20 type vxlan id 2000 local $in_addr \ 286 dstport "$VXPORT" 287 ip link set dev vx20 up 288 bridge fdb append dev vx20 00:00:00:00:00:00 dst 192.0.2.17 self 289 bridge fdb append dev vx20 00:00:00:00:00:00 dst $other_in_addr self 290 291 ip link set dev vx20 master br2 292 tc qdisc add dev vx20 clsact 293 294 bridge vlan add vid 20 dev vx20 pvid untagged 295 296 simple_if_init w2 297 vlan_create w2 10 vw2 $host_addr1/28 298 vlan_create w2 20 vw2 $host_addr2/24 299 300 ip route add 192.0.2.16/28 nexthop via $nh_addr 301 ip route add $other_in_addr/32 nexthop via $nh_addr 302} 303export -f ns_init_common 304 305ns1_create() 306{ 307 ip netns add ns1 308 ip link set dev v2 netns ns1 309 in_ns ns1 \ 310 ns_init_common v2 192.0.2.34 192.0.2.50 192.0.2.33 192.0.2.3 \ 311 198.51.100.3 312} 313 314ns1_destroy() 315{ 316 ip netns exec ns1 ip link set dev v2 netns 1 317 ip netns del ns1 318} 319 320ns2_create() 321{ 322 ip netns add ns2 323 ip link set dev v4 netns ns2 324 in_ns ns2 \ 325 ns_init_common v4 192.0.2.50 192.0.2.34 192.0.2.49 192.0.2.4 \ 326 198.51.100.4 327} 328 329ns2_destroy() 330{ 331 ip netns exec ns2 ip link set dev v4 netns 1 332 ip netns del ns2 333} 334 335setup_prepare() 336{ 337 h1=${NETIFS[p1]} 338 swp1=${NETIFS[p2]} 339 340 swp2=${NETIFS[p3]} 341 h2=${NETIFS[p4]} 342 343 rp1=${NETIFS[p5]} 344 rp2=${NETIFS[p6]} 345 346 vrf_prepare 347 forwarding_enable 348 349 h1_create 350 h2_create 351 switch_create 352 353 ip link add name v1 type veth peer name v2 354 ip link add name v3 type veth peer name v4 355 vrp2_create 356 ns1_create 357 ns2_create 358 359 r1_mac=$(in_ns ns1 mac_get w2) 360 r2_mac=$(in_ns ns2 mac_get w2) 361 h2_mac=$(mac_get $h2) 362} 363 364cleanup() 365{ 366 pre_cleanup 367 368 ns2_destroy 369 ns1_destroy 370 vrp2_destroy 371 ip link del dev v3 372 ip link del dev v1 373 374 switch_destroy 375 h2_destroy 376 h1_destroy 377 378 forwarding_restore 379 vrf_cleanup 380} 381 382# For the first round of tests, vx10 and vx20 were the first devices to get 383# attached to the bridge, and that at the point that the local IP is already 384# configured. Try the other scenario of attaching these devices to a bridge 385# that already has local ports members, and only then assign the local IP. 386reapply_config() 387{ 388 log_info "Reapplying configuration" 389 390 bridge fdb del dev vx20 00:00:00:00:00:00 dst 192.0.2.50 self 391 bridge fdb del dev vx20 00:00:00:00:00:00 dst 192.0.2.34 self 392 393 bridge fdb del dev vx10 00:00:00:00:00:00 dst 192.0.2.50 self 394 bridge fdb del dev vx10 00:00:00:00:00:00 dst 192.0.2.34 self 395 396 ip link set dev vx20 nomaster 397 ip link set dev vx10 nomaster 398 399 rp1_unset_addr 400 sleep 5 401 402 ip link set dev vx10 master br1 403 bridge vlan add vid 10 dev vx10 pvid untagged 404 405 ip link set dev vx20 master br1 406 bridge vlan add vid 20 dev vx20 pvid untagged 407 408 bridge fdb append dev vx10 00:00:00:00:00:00 dst 192.0.2.34 self 409 bridge fdb append dev vx10 00:00:00:00:00:00 dst 192.0.2.50 self 410 411 bridge fdb append dev vx20 00:00:00:00:00:00 dst 192.0.2.34 self 412 bridge fdb append dev vx20 00:00:00:00:00:00 dst 192.0.2.50 self 413 414 rp1_set_addr 415 sleep 5 416} 417 418ping_ipv4() 419{ 420 ping_test $h1.10 192.0.2.2 ": local->local vid 10" 421 ping_test $h1.20 198.51.100.2 ": local->local vid 20" 422 ping_test $h1.10 192.0.2.3 ": local->remote 1 vid 10" 423 ping_test $h1.10 192.0.2.4 ": local->remote 2 vid 10" 424 ping_test $h1.20 198.51.100.3 ": local->remote 1 vid 20" 425 ping_test $h1.20 198.51.100.4 ": local->remote 2 vid 20" 426} 427 428maybe_in_ns() 429{ 430 echo ${1:+in_ns} $1 431} 432 433__flood_counter_add_del() 434{ 435 local add_del=$1; shift 436 local dev=$1; shift 437 local ns=$1; shift 438 439 # Putting the ICMP capture both to HW and to SW will end up 440 # double-counting the packets that are trapped to slow path, such as for 441 # the unicast test. Adding either skip_hw or skip_sw fixes this problem, 442 # but with skip_hw, the flooded packets are not counted at all, because 443 # those are dropped due to MAC address mismatch; and skip_sw is a no-go 444 # for veth-based topologies. 445 # 446 # So try to install with skip_sw and fall back to skip_sw if that fails. 447 448 $(maybe_in_ns $ns) __icmp_capture_add_del \ 449 $add_del 100 "" $dev skip_sw 2>/dev/null || \ 450 $(maybe_in_ns $ns) __icmp_capture_add_del \ 451 $add_del 100 "" $dev skip_hw 452} 453 454flood_counter_install() 455{ 456 __flood_counter_add_del add "$@" 457} 458 459flood_counter_uninstall() 460{ 461 __flood_counter_add_del del "$@" 462} 463 464flood_fetch_stat() 465{ 466 local dev=$1; shift 467 local ns=$1; shift 468 469 $(maybe_in_ns $ns) tc_rule_stats_get $dev 100 ingress 470} 471 472flood_fetch_stats() 473{ 474 local counters=("${@}") 475 local counter 476 477 for counter in "${counters[@]}"; do 478 flood_fetch_stat $counter 479 done 480} 481 482vxlan_flood_test() 483{ 484 local mac=$1; shift 485 local dst=$1; shift 486 local vid=$1; shift 487 local -a expects=("${@}") 488 489 local -a counters=($h2 "vx10 ns1" "vx20 ns1" "vx10 ns2" "vx20 ns2") 490 local counter 491 local key 492 493 # Packets reach the local host tagged whereas they reach the VxLAN 494 # devices untagged. In order to be able to use the same filter for 495 # all counters, make sure the packets also reach the local host 496 # untagged 497 bridge vlan add vid $vid dev $swp2 untagged 498 for counter in "${counters[@]}"; do 499 flood_counter_install $counter 500 done 501 502 local -a t0s=($(flood_fetch_stats "${counters[@]}")) 503 $MZ $h1 -Q $vid -c 10 -d 100msec -p 64 -b $mac -B $dst -t icmp -q 504 sleep 1 505 local -a t1s=($(flood_fetch_stats "${counters[@]}")) 506 507 for key in ${!t0s[@]}; do 508 local delta=$((t1s[$key] - t0s[$key])) 509 local expect=${expects[$key]} 510 511 ((expect == delta)) 512 check_err $? "${counters[$key]}: Expected to capture $expect packets, got $delta." 513 done 514 515 for counter in "${counters[@]}"; do 516 flood_counter_uninstall $counter 517 done 518 bridge vlan add vid $vid dev $swp2 519} 520 521__test_flood() 522{ 523 local mac=$1; shift 524 local dst=$1; shift 525 local vid=$1; shift 526 local what=$1; shift 527 local -a expects=("${@}") 528 529 RET=0 530 531 vxlan_flood_test $mac $dst $vid "${expects[@]}" 532 533 log_test "VXLAN: $what" 534} 535 536test_flood() 537{ 538 __test_flood de:ad:be:ef:13:37 192.0.2.100 10 "flood vlan 10" \ 539 10 10 0 10 0 540 __test_flood ca:fe:be:ef:13:37 198.51.100.100 20 "flood vlan 20" \ 541 10 0 10 0 10 542} 543 544vxlan_fdb_add_del() 545{ 546 local add_del=$1; shift 547 local vid=$1; shift 548 local mac=$1; shift 549 local dev=$1; shift 550 local dst=$1; shift 551 552 bridge fdb $add_del dev $dev $mac self static permanent \ 553 ${dst:+dst} $dst 2>/dev/null 554 bridge fdb $add_del dev $dev $mac master static vlan $vid 2>/dev/null 555} 556 557__test_unicast() 558{ 559 local mac=$1; shift 560 local dst=$1; shift 561 local hit_idx=$1; shift 562 local vid=$1; shift 563 local what=$1; shift 564 565 RET=0 566 567 local -a expects=(0 0 0 0 0) 568 expects[$hit_idx]=10 569 570 vxlan_flood_test $mac $dst $vid "${expects[@]}" 571 572 log_test "VXLAN: $what" 573} 574 575test_unicast() 576{ 577 local -a targets=("$h2_mac $h2" 578 "$r1_mac vx10 192.0.2.34" 579 "$r2_mac vx10 192.0.2.50") 580 local target 581 582 log_info "unicast vlan 10" 583 584 for target in "${targets[@]}"; do 585 vxlan_fdb_add_del add 10 $target 586 done 587 588 __test_unicast $h2_mac 192.0.2.2 0 10 "local MAC unicast" 589 __test_unicast $r1_mac 192.0.2.3 1 10 "remote MAC 1 unicast" 590 __test_unicast $r2_mac 192.0.2.4 3 10 "remote MAC 2 unicast" 591 592 for target in "${targets[@]}"; do 593 vxlan_fdb_add_del del 10 $target 594 done 595 596 log_info "unicast vlan 20" 597 598 targets=("$h2_mac $h2" "$r1_mac vx20 192.0.2.34" \ 599 "$r2_mac vx20 192.0.2.50") 600 601 for target in "${targets[@]}"; do 602 vxlan_fdb_add_del add 20 $target 603 done 604 605 __test_unicast $h2_mac 198.51.100.2 0 20 "local MAC unicast" 606 __test_unicast $r1_mac 198.51.100.3 2 20 "remote MAC 1 unicast" 607 __test_unicast $r2_mac 198.51.100.4 4 20 "remote MAC 2 unicast" 608 609 for target in "${targets[@]}"; do 610 vxlan_fdb_add_del del 20 $target 611 done 612} 613 614test_pvid() 615{ 616 local -a expects=(0 0 0 0 0) 617 local mac=de:ad:be:ef:13:37 618 local dst=192.0.2.100 619 local vid=10 620 621 # Check that flooding works 622 RET=0 623 624 expects[0]=10; expects[1]=10; expects[3]=10 625 vxlan_flood_test $mac $dst $vid "${expects[@]}" 626 627 log_test "VXLAN: flood before pvid off" 628 629 # Toggle PVID off and test that flood to remote hosts does not work 630 RET=0 631 632 bridge vlan add vid 10 dev vx10 633 634 expects[0]=10; expects[1]=0; expects[3]=0 635 vxlan_flood_test $mac $dst $vid "${expects[@]}" 636 637 log_test "VXLAN: flood after pvid off" 638 639 # Toggle PVID on and test that flood to remote hosts does work 640 RET=0 641 642 bridge vlan add vid 10 dev vx10 pvid untagged 643 644 expects[0]=10; expects[1]=10; expects[3]=10 645 vxlan_flood_test $mac $dst $vid "${expects[@]}" 646 647 log_test "VXLAN: flood after pvid on" 648 649 # Add a new VLAN and test that it does not affect flooding 650 RET=0 651 652 bridge vlan add vid 30 dev vx10 653 654 expects[0]=10; expects[1]=10; expects[3]=10 655 vxlan_flood_test $mac $dst $vid "${expects[@]}" 656 657 bridge vlan del vid 30 dev vx10 658 659 log_test "VXLAN: flood after vlan add" 660 661 # Remove currently mapped VLAN and test that flood to remote hosts does 662 # not work 663 RET=0 664 665 bridge vlan del vid 10 dev vx10 666 667 expects[0]=10; expects[1]=0; expects[3]=0 668 vxlan_flood_test $mac $dst $vid "${expects[@]}" 669 670 log_test "VXLAN: flood after vlan delete" 671 672 # Re-add the VLAN and test that flood to remote hosts does work 673 RET=0 674 675 bridge vlan add vid 10 dev vx10 pvid untagged 676 677 expects[0]=10; expects[1]=10; expects[3]=10 678 vxlan_flood_test $mac $dst $vid "${expects[@]}" 679 680 log_test "VXLAN: flood after vlan re-add" 681} 682 683__test_learning() 684{ 685 local -a expects=(0 0 0 0 0) 686 local mac=$1; shift 687 local dst=$1; shift 688 local vid=$1; shift 689 local idx1=$1; shift 690 local idx2=$1; shift 691 local vx=vx$vid 692 693 # Check that flooding works 694 RET=0 695 696 expects[0]=10; expects[$idx1]=10; expects[$idx2]=10 697 vxlan_flood_test $mac $dst $vid "${expects[@]}" 698 699 log_test "VXLAN: flood before learning" 700 701 # Send a packet with source mac set to $mac from host w2 and check that 702 # a corresponding entry is created in the VxLAN device 703 RET=0 704 705 in_ns ns1 $MZ w2 -Q $vid -c 1 -p 64 -a $mac -b ff:ff:ff:ff:ff:ff \ 706 -B $dst -t icmp -q 707 sleep 1 708 709 bridge fdb show brport $vx | grep $mac | grep -q self 710 check_err $? 711 bridge fdb show brport $vx | grep $mac | grep "vlan $vid" \ 712 | grep -q -v self 713 check_err $? 714 715 log_test "VXLAN: show learned FDB entry" 716 717 # Repeat first test and check that packets only reach host w2 in ns1 718 RET=0 719 720 expects[0]=0; expects[$idx1]=10; expects[$idx2]=0 721 vxlan_flood_test $mac $dst $vid "${expects[@]}" 722 723 log_test "VXLAN: learned FDB entry" 724 725 # Delete the learned FDB entry from the VxLAN and bridge devices and 726 # check that packets are flooded 727 RET=0 728 729 bridge fdb del dev $vx $mac master self vlan $vid 730 sleep 1 731 732 expects[0]=10; expects[$idx1]=10; expects[$idx2]=10 733 vxlan_flood_test $mac $dst $vid "${expects[@]}" 734 735 log_test "VXLAN: deletion of learned FDB entry" 736 737 # Re-learn the first FDB entry and check that it is correctly aged-out 738 RET=0 739 740 in_ns ns1 $MZ w2 -Q $vid -c 1 -p 64 -a $mac -b ff:ff:ff:ff:ff:ff \ 741 -B $dst -t icmp -q 742 sleep 1 743 744 bridge fdb show brport $vx | grep $mac | grep -q self 745 check_err $? 746 bridge fdb show brport $vx | grep $mac | grep "vlan $vid" \ 747 | grep -q -v self 748 check_err $? 749 750 expects[0]=0; expects[$idx1]=10; expects[$idx2]=0 751 vxlan_flood_test $mac $dst $vid "${expects[@]}" 752 753 sleep 60 754 755 bridge fdb show brport $vx | grep $mac | grep -q self 756 check_fail $? 757 bridge fdb show brport $vx | grep $mac | grep "vlan $vid" \ 758 | grep -q -v self 759 check_fail $? 760 761 expects[0]=10; expects[$idx1]=10; expects[$idx2]=10 762 vxlan_flood_test $mac $dst $vid "${expects[@]}" 763 764 log_test "VXLAN: Ageing of learned FDB entry" 765 766 # Toggle learning on the bridge port and check that the bridge's FDB 767 # is populated only when it should 768 RET=0 769 770 ip link set dev $vx type bridge_slave learning off 771 772 in_ns ns1 $MZ w2 -Q $vid -c 1 -p 64 -a $mac -b ff:ff:ff:ff:ff:ff \ 773 -B $dst -t icmp -q 774 sleep 1 775 776 bridge fdb show brport $vx | grep $mac | grep "vlan $vid" \ 777 | grep -q -v self 778 check_fail $? 779 780 ip link set dev $vx type bridge_slave learning on 781 782 in_ns ns1 $MZ w2 -Q $vid -c 1 -p 64 -a $mac -b ff:ff:ff:ff:ff:ff \ 783 -B $dst -t icmp -q 784 sleep 1 785 786 bridge fdb show brport $vx | grep $mac | grep "vlan $vid" \ 787 | grep -q -v self 788 check_err $? 789 790 log_test "VXLAN: learning toggling on bridge port" 791} 792 793test_learning() 794{ 795 local mac=de:ad:be:ef:13:37 796 local dst=192.0.2.100 797 local vid=10 798 799 # Enable learning on the VxLAN devices and set ageing time to 30 seconds 800 ip link set dev br1 type bridge ageing_time 3000 801 ip link set dev vx10 type vxlan ageing 30 802 ip link set dev vx10 type vxlan learning 803 ip link set dev vx20 type vxlan ageing 30 804 ip link set dev vx20 type vxlan learning 805 reapply_config 806 807 log_info "learning vlan 10" 808 809 __test_learning $mac $dst $vid 1 3 810 811 log_info "learning vlan 20" 812 813 mac=ca:fe:be:ef:13:37 814 dst=198.51.100.100 815 vid=20 816 817 __test_learning $mac $dst $vid 2 4 818 819 # Restore previous settings 820 ip link set dev vx20 type vxlan nolearning 821 ip link set dev vx20 type vxlan ageing 300 822 ip link set dev vx10 type vxlan nolearning 823 ip link set dev vx10 type vxlan ageing 300 824 ip link set dev br1 type bridge ageing_time 30000 825 reapply_config 826} 827 828test_all() 829{ 830 log_info "Running tests with UDP port $VXPORT" 831 tests_run 832} 833 834trap cleanup EXIT 835 836setup_prepare 837setup_wait 838test_all 839 840exit $EXIT_STATUS 841