1#!/usr/bin/env atf-sh 2#- 3# SPDX-License-Identifier: BSD-2-Clause 4# 5# Copyright (c) 2020 Alexander V. Chernikov 6# 7# Redistribution and use in source and binary forms, with or without 8# modification, are permitted provided that the following conditions 9# are met: 10# 1. Redistributions of source code must retain the above copyright 11# notice, this list of conditions and the following disclaimer. 12# 2. Redistributions in binary form must reproduce the above copyright 13# notice, this list of conditions and the following disclaimer in the 14# documentation and/or other materials provided with the distribution. 15# 16# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 17# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 18# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 19# ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 20# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 21# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 22# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 23# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 24# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 25# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 26# SUCH DAMAGE. 27# 28# $FreeBSD$ 29# 30 31. $(atf_get_srcdir)/../common/vnet.subr 32 33load_divert_module() { 34 kldstat -q -m ipdivert 35 if [ $? -ne 0 ]; then 36 atf_skip "ipdivert module is not loaded" 37 fi 38} 39 40atf_test_case "ipdivert_ip_output_remote_success" "cleanup" 41ipdivert_ip_output_remote_success_head() { 42 43 atf_set descr 'Test diverting IPv4 packet to remote destination' 44 atf_set require.user root 45 atf_set require.progs scapy 46} 47 48ipdivert_ip_output_remote_success_body() { 49 50 if [ "$(atf_config_get ci false)" = "true" ] && \ 51 [ "$(uname -p)" = "i386" ]; then 52 atf_skip "https://bugs.freebsd.org/245764" 53 fi 54 55 ids=65530 56 id=`printf "%x" ${ids}` 57 if [ $$ -gt 65535 ]; then 58 xl=`printf "%x" $(($$ - 65535))` 59 yl="1" 60 else 61 xl=`printf "%x" $$` 62 yl="" 63 fi 64 65 vnet_init 66 load_divert_module 67 68 ip4a="192.0.2.5" 69 ip4b="192.0.2.6" 70 71 script_name="../common/divert.py" 72 73 epair=$(vnet_mkepair) 74 ifconfig ${epair}a up 75 ifconfig ${epair}a inet ${ip4a}/30 76 77 jname="v4t-${id}-${yl}-${xl}" 78 vnet_mkjail ${jname} ${epair}b 79 jexec ${jname} ifconfig ${epair}b up 80 jexec ${jname} ifconfig ${epair}b inet ${ip4b}/30 81 82 atf_check -s exit:0 $(atf_get_srcdir)/${script_name} \ 83 --dip ${ip4b} --test_name ipdivert_ip_output_remote_success 84 85 count=`jexec ${jname} netstat -s -p icmp | grep 'Input histogram:' -A8 | grep -c 'echo: '` 86 # Verify redirect got installed 87 atf_check_equal "1" "${count}" 88} 89 90ipdivert_ip_output_remote_success_cleanup() { 91 92 vnet_cleanup 93} 94 95atf_test_case "ipdivert_ip_input_local_success" "cleanup" 96ipdivert_ip_input_local_success_head() { 97 98 atf_set descr 'Test diverting IPv4 packet to remote destination' 99 atf_set require.user root 100 atf_set require.progs scapy 101} 102 103ipdivert_ip_input_local_success_body() { 104 105 if [ "$(atf_config_get ci false)" = "true" ] && \ 106 [ "$(uname -p)" = "i386" ]; then 107 atf_skip "https://bugs.freebsd.org/245764" 108 fi 109 110 ids=65529 111 id=`printf "%x" ${ids}` 112 if [ $$ -gt 65535 ]; then 113 xl=`printf "%x" $(($$ - 65535))` 114 yl="1" 115 else 116 xl=`printf "%x" $$` 117 yl="" 118 fi 119 120 vnet_init 121 load_divert_module 122 123 ip4a="192.0.2.5" 124 ip4b="192.0.2.6" 125 126 script_name="../common/divert.py" 127 128 epair=$(vnet_mkepair) 129 ifconfig ${epair}a up 130 ifconfig ${epair}a inet ${ip4a}/30 131 132 jname="v4t-${id}-${yl}-${xl}" 133 vnet_mkjail ${jname} ${epair}b 134 jexec ${jname} ifconfig ${epair}b up 135 jexec ${jname} ifconfig ${epair}b inet ${ip4b}/30 136 137 atf_check -s exit:0 jexec ${jname} $(atf_get_srcdir)/${script_name} \ 138 --sip ${ip4a} --dip ${ip4b} \ 139 --test_name ipdivert_ip_input_local_success 140 141 count=`jexec ${jname} netstat -s -p icmp | grep 'Input histogram:' -A8 | grep -c 'echo: '` 142 # Verify redirect got installed 143 atf_check_equal "1" "${count}" 144} 145 146ipdivert_ip_input_local_success_cleanup() { 147 148 vnet_cleanup 149} 150 151atf_init_test_cases() 152{ 153 154 atf_add_test_case "ipdivert_ip_output_remote_success" 155 atf_add_test_case "ipdivert_ip_input_local_success" 156} 157 158# end 159 160