xref: /linux/tools/testing/selftests/net/netfilter/ipvs.sh (revision 8be4d31cb8aaeea27bde4b7ddb26e28a89062ebf) 
1#!/bin/bash
2# SPDX-License-Identifier: GPL-2.0
3#
4# End-to-end ipvs test suite
5# Topology:
6#--------------------------------------------------------------+
7#                      |                                       |
8#         ns0          |         ns1                           |
9#      -----------     |     -----------    -----------        |
10#      | veth01  | --------- | veth10  |    | veth12  |        |
11#      -----------    peer   -----------    -----------        |
12#           |          |                        |              |
13#      -----------     |                        |              |
14#      |  br0    |     |-----------------  peer |--------------|
15#      -----------     |                        |              |
16#           |          |                        |              |
17#      ----------     peer   ----------      -----------       |
18#      |  veth02 | --------- |  veth20 |     | veth21  |       |
19#      ----------      |     ----------      -----------       |
20#                      |         ns2                           |
21#                      |                                       |
22#--------------------------------------------------------------+
23#
24# We assume that all network driver are loaded
25#
26
27source lib.sh
28
29ret=0
30GREEN='\033[0;92m'
31RED='\033[0;31m'
32NC='\033[0m' # No Color
33
34readonly port=8080
35
36readonly vip_v4=207.175.44.110
37readonly cip_v4=10.0.0.2
38readonly gip_v4=10.0.0.1
39readonly dip_v4=172.16.0.1
40readonly rip_v4=172.16.0.2
41readonly sip_v4=10.0.0.3
42
43readonly infile="$(mktemp)"
44readonly outfile="$(mktemp)"
45readonly datalen=32
46
47sysipvsnet="/proc/sys/net/ipv4/vs/"
48if [ ! -d $sysipvsnet ]; then
49	if ! modprobe -q ip_vs; then
50		echo "skip: could not run test without ipvs module"
51		exit $ksft_skip
52	fi
53fi
54
55checktool "ipvsadm -v" "run test without ipvsadm"
56checktool "socat -h" "run test without socat"
57
58setup() {
59	setup_ns ns0 ns1 ns2
60
61	ip link add veth01 netns "${ns0}" type veth peer name veth10 netns "${ns1}"
62	ip link add veth02 netns "${ns0}" type veth peer name veth20 netns "${ns2}"
63	ip link add veth12 netns "${ns1}" type veth peer name veth21 netns "${ns2}"
64
65	ip netns exec "${ns0}" ip link set veth01 up
66	ip netns exec "${ns0}" ip link set veth02 up
67	ip netns exec "${ns0}" ip link add br0 type bridge
68	ip netns exec "${ns0}" ip link set veth01 master br0
69	ip netns exec "${ns0}" ip link set veth02 master br0
70	ip netns exec "${ns0}" ip link set br0 up
71	ip netns exec "${ns0}" ip addr add "${cip_v4}/24" dev br0
72
73	ip netns exec "${ns1}" ip link set veth10 up
74	ip netns exec "${ns1}" ip addr add "${gip_v4}/24" dev veth10
75	ip netns exec "${ns1}" ip link set veth12 up
76	ip netns exec "${ns1}" ip addr add "${dip_v4}/24" dev veth12
77
78	ip netns exec "${ns2}" ip link set veth21 up
79	ip netns exec "${ns2}" ip addr add "${rip_v4}/24" dev veth21
80	ip netns exec "${ns2}" ip link set veth20 up
81	ip netns exec "${ns2}" ip addr add "${sip_v4}/24" dev veth20
82
83	sleep 1
84
85	dd if=/dev/urandom of="${infile}" bs="${datalen}" count=1 status=none
86}
87
88cleanup() {
89	cleanup_all_ns
90
91	if [ -f "${outfile}" ]; then
92		rm "${outfile}"
93	fi
94	if [ -f "${infile}" ]; then
95		rm "${infile}"
96	fi
97}
98
99server_listen() {
100	ip netns exec "$ns2" timeout 5 socat -u -4 TCP-LISTEN:8080,reuseaddr STDOUT > "${outfile}" &
101	server_pid=$!
102	sleep 0.2
103}
104
105client_connect() {
106	ip netns exec "${ns0}" timeout 2 socat -u -4 STDIN TCP:"${vip_v4}":"${port}" < "${infile}"
107}
108
109verify_data() {
110	wait "${server_pid}"
111	cmp "$infile" "$outfile" 2>/dev/null
112}
113
114test_service() {
115	server_listen
116	client_connect
117	verify_data
118}
119
120
121test_dr() {
122	ip netns exec "${ns0}" ip route add "${vip_v4}" via "${gip_v4}" dev br0
123
124	ip netns exec "${ns1}" sysctl -qw net.ipv4.ip_forward=1
125	ip netns exec "${ns1}" ipvsadm -A -t "${vip_v4}:${port}" -s rr
126	ip netns exec "${ns1}" ipvsadm -a -t "${vip_v4}:${port}" -r "${rip_v4}:${port}"
127	ip netns exec "${ns1}" ip addr add "${vip_v4}/32" dev lo:1
128
129	# avoid incorrect arp response
130	ip netns exec "${ns2}" sysctl -qw net.ipv4.conf.all.arp_ignore=1
131	ip netns exec "${ns2}" sysctl -qw net.ipv4.conf.all.arp_announce=2
132	ip netns exec "${ns2}" ip addr add "${vip_v4}/32" dev lo:1
133
134	test_service
135}
136
137test_nat() {
138	ip netns exec "${ns0}" ip route add "${vip_v4}" via "${gip_v4}" dev br0
139
140	ip netns exec "${ns1}" sysctl -qw net.ipv4.ip_forward=1
141	ip netns exec "${ns1}" ipvsadm -A -t "${vip_v4}:${port}" -s rr
142	ip netns exec "${ns1}" ipvsadm -a -m -t "${vip_v4}:${port}" -r "${rip_v4}:${port}"
143	ip netns exec "${ns1}" ip addr add "${vip_v4}/32" dev lo:1
144
145	ip netns exec "${ns2}" ip link del veth20
146	ip netns exec "${ns2}" ip route add default via "${dip_v4}" dev veth21
147
148	test_service
149}
150
151test_tun() {
152	ip netns exec "${ns0}" ip route add "${vip_v4}" via "${gip_v4}" dev br0
153
154	modprobe -q ipip
155	ip netns exec "${ns1}" ip link set tunl0 up
156	ip netns exec "${ns1}" sysctl -qw net.ipv4.ip_forward=0
157	ip netns exec "${ns1}" sysctl -qw net.ipv4.conf.all.send_redirects=0
158	ip netns exec "${ns1}" sysctl -qw net.ipv4.conf.default.send_redirects=0
159	ip netns exec "${ns1}" ipvsadm -A -t "${vip_v4}:${port}" -s rr
160	ip netns exec "${ns1}" ipvsadm -a -i -t "${vip_v4}:${port}" -r ${rip_v4}:${port}
161	ip netns exec "${ns1}" ip addr add ${vip_v4}/32 dev lo:1
162
163	ip netns exec "${ns2}" ip link set tunl0 up
164	ip netns exec "${ns2}" sysctl -qw net.ipv4.conf.all.arp_ignore=1
165	ip netns exec "${ns2}" sysctl -qw net.ipv4.conf.all.arp_announce=2
166	ip netns exec "${ns2}" sysctl -qw net.ipv4.conf.tunl0.rp_filter=0
167	ip netns exec "${ns2}" ip addr add "${vip_v4}/32" dev lo:1
168
169	test_service
170}
171
172run_tests() {
173	local errors=
174
175	echo "Testing DR mode..."
176	cleanup
177	setup
178	test_dr
179	errors=$(( $errors + $? ))
180
181	echo "Testing NAT mode..."
182	cleanup
183	setup
184	test_nat
185	errors=$(( $errors + $? ))
186
187	echo "Testing Tunnel mode..."
188	cleanup
189	setup
190	test_tun
191	errors=$(( $errors + $? ))
192
193	return $errors
194}
195
196trap cleanup EXIT
197
198run_tests
199
200if [ $? -ne 0 ]; then
201	echo -e "$(basename $0): ${RED}FAIL${NC}"
202	exit 1
203fi
204echo -e "$(basename $0): ${GREEN}PASS${NC}"
205exit 0
206