1*f8df95e8SBastien Curutchet (eBPF Foundation) // SPDX-License-Identifier: GPL-2.0 2*f8df95e8SBastien Curutchet (eBPF Foundation) 3*f8df95e8SBastien Curutchet (eBPF Foundation) /* 4*f8df95e8SBastien Curutchet (eBPF Foundation) * Network topology: 5*f8df95e8SBastien Curutchet (eBPF Foundation) * ----------- ----------- 6*f8df95e8SBastien Curutchet (eBPF Foundation) * | NS1 | | NS2 | 7*f8df95e8SBastien Curutchet (eBPF Foundation) * | veth0 -|--------|- veth0 | 8*f8df95e8SBastien Curutchet (eBPF Foundation) * ----------- ----------- 9*f8df95e8SBastien Curutchet (eBPF Foundation) * 10*f8df95e8SBastien Curutchet (eBPF Foundation) */ 11*f8df95e8SBastien Curutchet (eBPF Foundation) 12*f8df95e8SBastien Curutchet (eBPF Foundation) #define _GNU_SOURCE 13*f8df95e8SBastien Curutchet (eBPF Foundation) #include <net/if.h> 14*f8df95e8SBastien Curutchet (eBPF Foundation) #include <uapi/linux/if_link.h> 15*f8df95e8SBastien Curutchet (eBPF Foundation) 16*f8df95e8SBastien Curutchet (eBPF Foundation) #include "network_helpers.h" 17*f8df95e8SBastien Curutchet (eBPF Foundation) #include "test_progs.h" 18*f8df95e8SBastien Curutchet (eBPF Foundation) #include "test_xdp_vlan.skel.h" 19*f8df95e8SBastien Curutchet (eBPF Foundation) 20*f8df95e8SBastien Curutchet (eBPF Foundation) 21*f8df95e8SBastien Curutchet (eBPF Foundation) #define VETH_NAME "veth0" 22*f8df95e8SBastien Curutchet (eBPF Foundation) #define NS_MAX_SIZE 32 23*f8df95e8SBastien Curutchet (eBPF Foundation) #define NS1_NAME "ns-xdp-vlan-1-" 24*f8df95e8SBastien Curutchet (eBPF Foundation) #define NS2_NAME "ns-xdp-vlan-2-" 25*f8df95e8SBastien Curutchet (eBPF Foundation) #define NS1_IP_ADDR "100.64.10.1" 26*f8df95e8SBastien Curutchet (eBPF Foundation) #define NS2_IP_ADDR "100.64.10.2" 27*f8df95e8SBastien Curutchet (eBPF Foundation) #define VLAN_ID 4011 28*f8df95e8SBastien Curutchet (eBPF Foundation) 29*f8df95e8SBastien Curutchet (eBPF Foundation) static int setup_network(char *ns1, char *ns2) 30*f8df95e8SBastien Curutchet (eBPF Foundation) { 31*f8df95e8SBastien Curutchet (eBPF Foundation) if (!ASSERT_OK(append_tid(ns1, NS_MAX_SIZE), "create ns1 name")) 32*f8df95e8SBastien Curutchet (eBPF Foundation) goto fail; 33*f8df95e8SBastien Curutchet (eBPF Foundation) if (!ASSERT_OK(append_tid(ns2, NS_MAX_SIZE), "create ns2 name")) 34*f8df95e8SBastien Curutchet (eBPF Foundation) goto fail; 35*f8df95e8SBastien Curutchet (eBPF Foundation) 36*f8df95e8SBastien Curutchet (eBPF Foundation) SYS(fail, "ip netns add %s", ns1); 37*f8df95e8SBastien Curutchet (eBPF Foundation) SYS(fail, "ip netns add %s", ns2); 38*f8df95e8SBastien Curutchet (eBPF Foundation) SYS(fail, "ip -n %s link add %s type veth peer name %s netns %s", 39*f8df95e8SBastien Curutchet (eBPF Foundation) ns1, VETH_NAME, VETH_NAME, ns2); 40*f8df95e8SBastien Curutchet (eBPF Foundation) 41*f8df95e8SBastien Curutchet (eBPF Foundation) /* NOTICE: XDP require VLAN header inside packet payload 42*f8df95e8SBastien Curutchet (eBPF Foundation) * - Thus, disable VLAN offloading driver features 43*f8df95e8SBastien Curutchet (eBPF Foundation) */ 44*f8df95e8SBastien Curutchet (eBPF Foundation) SYS(fail, "ip netns exec %s ethtool -K %s rxvlan off txvlan off", ns1, VETH_NAME); 45*f8df95e8SBastien Curutchet (eBPF Foundation) SYS(fail, "ip netns exec %s ethtool -K %s rxvlan off txvlan off", ns2, VETH_NAME); 46*f8df95e8SBastien Curutchet (eBPF Foundation) 47*f8df95e8SBastien Curutchet (eBPF Foundation) /* NS1 configuration */ 48*f8df95e8SBastien Curutchet (eBPF Foundation) SYS(fail, "ip -n %s addr add %s/24 dev %s", ns1, NS1_IP_ADDR, VETH_NAME); 49*f8df95e8SBastien Curutchet (eBPF Foundation) SYS(fail, "ip -n %s link set %s up", ns1, VETH_NAME); 50*f8df95e8SBastien Curutchet (eBPF Foundation) 51*f8df95e8SBastien Curutchet (eBPF Foundation) /* NS2 configuration */ 52*f8df95e8SBastien Curutchet (eBPF Foundation) SYS(fail, "ip -n %s link add link %s name %s.%d type vlan id %d", 53*f8df95e8SBastien Curutchet (eBPF Foundation) ns2, VETH_NAME, VETH_NAME, VLAN_ID, VLAN_ID); 54*f8df95e8SBastien Curutchet (eBPF Foundation) SYS(fail, "ip -n %s addr add %s/24 dev %s.%d", ns2, NS2_IP_ADDR, VETH_NAME, VLAN_ID); 55*f8df95e8SBastien Curutchet (eBPF Foundation) SYS(fail, "ip -n %s link set %s up", ns2, VETH_NAME); 56*f8df95e8SBastien Curutchet (eBPF Foundation) SYS(fail, "ip -n %s link set %s.%d up", ns2, VETH_NAME, VLAN_ID); 57*f8df95e8SBastien Curutchet (eBPF Foundation) 58*f8df95e8SBastien Curutchet (eBPF Foundation) /* At this point ping should fail because VLAN tags are only used by NS2 */ 59*f8df95e8SBastien Curutchet (eBPF Foundation) return !SYS_NOFAIL("ip netns exec %s ping -W 1 -c1 %s", ns2, NS1_IP_ADDR); 60*f8df95e8SBastien Curutchet (eBPF Foundation) 61*f8df95e8SBastien Curutchet (eBPF Foundation) fail: 62*f8df95e8SBastien Curutchet (eBPF Foundation) return -1; 63*f8df95e8SBastien Curutchet (eBPF Foundation) } 64*f8df95e8SBastien Curutchet (eBPF Foundation) 65*f8df95e8SBastien Curutchet (eBPF Foundation) static void cleanup_network(const char *ns1, const char *ns2) 66*f8df95e8SBastien Curutchet (eBPF Foundation) { 67*f8df95e8SBastien Curutchet (eBPF Foundation) SYS_NOFAIL("ip netns del %s", ns1); 68*f8df95e8SBastien Curutchet (eBPF Foundation) SYS_NOFAIL("ip netns del %s", ns2); 69*f8df95e8SBastien Curutchet (eBPF Foundation) } 70*f8df95e8SBastien Curutchet (eBPF Foundation) 71*f8df95e8SBastien Curutchet (eBPF Foundation) static void xdp_vlan(struct bpf_program *xdp, struct bpf_program *tc, u32 flags) 72*f8df95e8SBastien Curutchet (eBPF Foundation) { 73*f8df95e8SBastien Curutchet (eBPF Foundation) LIBBPF_OPTS(bpf_tc_hook, tc_hook, .attach_point = BPF_TC_EGRESS); 74*f8df95e8SBastien Curutchet (eBPF Foundation) LIBBPF_OPTS(bpf_tc_opts, tc_opts, .handle = 1, .priority = 1); 75*f8df95e8SBastien Curutchet (eBPF Foundation) char ns1[NS_MAX_SIZE] = NS1_NAME; 76*f8df95e8SBastien Curutchet (eBPF Foundation) char ns2[NS_MAX_SIZE] = NS2_NAME; 77*f8df95e8SBastien Curutchet (eBPF Foundation) struct nstoken *nstoken = NULL; 78*f8df95e8SBastien Curutchet (eBPF Foundation) int interface; 79*f8df95e8SBastien Curutchet (eBPF Foundation) int ret; 80*f8df95e8SBastien Curutchet (eBPF Foundation) 81*f8df95e8SBastien Curutchet (eBPF Foundation) if (!ASSERT_OK(setup_network(ns1, ns2), "setup network")) 82*f8df95e8SBastien Curutchet (eBPF Foundation) goto cleanup; 83*f8df95e8SBastien Curutchet (eBPF Foundation) 84*f8df95e8SBastien Curutchet (eBPF Foundation) nstoken = open_netns(ns1); 85*f8df95e8SBastien Curutchet (eBPF Foundation) if (!ASSERT_OK_PTR(nstoken, "open NS1")) 86*f8df95e8SBastien Curutchet (eBPF Foundation) goto cleanup; 87*f8df95e8SBastien Curutchet (eBPF Foundation) 88*f8df95e8SBastien Curutchet (eBPF Foundation) interface = if_nametoindex(VETH_NAME); 89*f8df95e8SBastien Curutchet (eBPF Foundation) if (!ASSERT_NEQ(interface, 0, "get interface index")) 90*f8df95e8SBastien Curutchet (eBPF Foundation) goto cleanup; 91*f8df95e8SBastien Curutchet (eBPF Foundation) 92*f8df95e8SBastien Curutchet (eBPF Foundation) ret = bpf_xdp_attach(interface, bpf_program__fd(xdp), flags, NULL); 93*f8df95e8SBastien Curutchet (eBPF Foundation) if (!ASSERT_OK(ret, "attach xdp_vlan_change")) 94*f8df95e8SBastien Curutchet (eBPF Foundation) goto cleanup; 95*f8df95e8SBastien Curutchet (eBPF Foundation) 96*f8df95e8SBastien Curutchet (eBPF Foundation) tc_hook.ifindex = interface; 97*f8df95e8SBastien Curutchet (eBPF Foundation) ret = bpf_tc_hook_create(&tc_hook); 98*f8df95e8SBastien Curutchet (eBPF Foundation) if (!ASSERT_OK(ret, "bpf_tc_hook_create")) 99*f8df95e8SBastien Curutchet (eBPF Foundation) goto detach_xdp; 100*f8df95e8SBastien Curutchet (eBPF Foundation) 101*f8df95e8SBastien Curutchet (eBPF Foundation) /* Now we'll use BPF programs to pop/push the VLAN tags */ 102*f8df95e8SBastien Curutchet (eBPF Foundation) tc_opts.prog_fd = bpf_program__fd(tc); 103*f8df95e8SBastien Curutchet (eBPF Foundation) ret = bpf_tc_attach(&tc_hook, &tc_opts); 104*f8df95e8SBastien Curutchet (eBPF Foundation) if (!ASSERT_OK(ret, "bpf_tc_attach")) 105*f8df95e8SBastien Curutchet (eBPF Foundation) goto detach_xdp; 106*f8df95e8SBastien Curutchet (eBPF Foundation) 107*f8df95e8SBastien Curutchet (eBPF Foundation) close_netns(nstoken); 108*f8df95e8SBastien Curutchet (eBPF Foundation) nstoken = NULL; 109*f8df95e8SBastien Curutchet (eBPF Foundation) 110*f8df95e8SBastien Curutchet (eBPF Foundation) /* Now the namespaces can reach each-other, test with pings */ 111*f8df95e8SBastien Curutchet (eBPF Foundation) SYS(detach_tc, "ip netns exec %s ping -i 0.2 -W 2 -c 2 %s > /dev/null", ns1, NS2_IP_ADDR); 112*f8df95e8SBastien Curutchet (eBPF Foundation) SYS(detach_tc, "ip netns exec %s ping -i 0.2 -W 2 -c 2 %s > /dev/null", ns2, NS1_IP_ADDR); 113*f8df95e8SBastien Curutchet (eBPF Foundation) 114*f8df95e8SBastien Curutchet (eBPF Foundation) 115*f8df95e8SBastien Curutchet (eBPF Foundation) detach_tc: 116*f8df95e8SBastien Curutchet (eBPF Foundation) bpf_tc_detach(&tc_hook, &tc_opts); 117*f8df95e8SBastien Curutchet (eBPF Foundation) detach_xdp: 118*f8df95e8SBastien Curutchet (eBPF Foundation) bpf_xdp_detach(interface, flags, NULL); 119*f8df95e8SBastien Curutchet (eBPF Foundation) cleanup: 120*f8df95e8SBastien Curutchet (eBPF Foundation) close_netns(nstoken); 121*f8df95e8SBastien Curutchet (eBPF Foundation) cleanup_network(ns1, ns2); 122*f8df95e8SBastien Curutchet (eBPF Foundation) } 123*f8df95e8SBastien Curutchet (eBPF Foundation) 124*f8df95e8SBastien Curutchet (eBPF Foundation) /* First test: Remove VLAN by setting VLAN ID 0, using "xdp_vlan_change" 125*f8df95e8SBastien Curutchet (eBPF Foundation) * egress use TC to add back VLAN tag 4011 126*f8df95e8SBastien Curutchet (eBPF Foundation) */ 127*f8df95e8SBastien Curutchet (eBPF Foundation) void test_xdp_vlan_change(void) 128*f8df95e8SBastien Curutchet (eBPF Foundation) { 129*f8df95e8SBastien Curutchet (eBPF Foundation) struct test_xdp_vlan *skel; 130*f8df95e8SBastien Curutchet (eBPF Foundation) 131*f8df95e8SBastien Curutchet (eBPF Foundation) skel = test_xdp_vlan__open_and_load(); 132*f8df95e8SBastien Curutchet (eBPF Foundation) if (!ASSERT_OK_PTR(skel, "xdp_vlan__open_and_load")) 133*f8df95e8SBastien Curutchet (eBPF Foundation) return; 134*f8df95e8SBastien Curutchet (eBPF Foundation) 135*f8df95e8SBastien Curutchet (eBPF Foundation) if (test__start_subtest("0")) 136*f8df95e8SBastien Curutchet (eBPF Foundation) xdp_vlan(skel->progs.xdp_vlan_change, skel->progs.tc_vlan_push, 0); 137*f8df95e8SBastien Curutchet (eBPF Foundation) 138*f8df95e8SBastien Curutchet (eBPF Foundation) if (test__start_subtest("DRV_MODE")) 139*f8df95e8SBastien Curutchet (eBPF Foundation) xdp_vlan(skel->progs.xdp_vlan_change, skel->progs.tc_vlan_push, 140*f8df95e8SBastien Curutchet (eBPF Foundation) XDP_FLAGS_DRV_MODE); 141*f8df95e8SBastien Curutchet (eBPF Foundation) 142*f8df95e8SBastien Curutchet (eBPF Foundation) if (test__start_subtest("SKB_MODE")) 143*f8df95e8SBastien Curutchet (eBPF Foundation) xdp_vlan(skel->progs.xdp_vlan_change, skel->progs.tc_vlan_push, 144*f8df95e8SBastien Curutchet (eBPF Foundation) XDP_FLAGS_SKB_MODE); 145*f8df95e8SBastien Curutchet (eBPF Foundation) 146*f8df95e8SBastien Curutchet (eBPF Foundation) test_xdp_vlan__destroy(skel); 147*f8df95e8SBastien Curutchet (eBPF Foundation) } 148*f8df95e8SBastien Curutchet (eBPF Foundation) 149*f8df95e8SBastien Curutchet (eBPF Foundation) /* Second test: XDP prog fully remove vlan header 150*f8df95e8SBastien Curutchet (eBPF Foundation) * 151*f8df95e8SBastien Curutchet (eBPF Foundation) * Catch kernel bug for generic-XDP, that doesn't allow us to 152*f8df95e8SBastien Curutchet (eBPF Foundation) * remove a VLAN header, because skb->protocol still contain VLAN 153*f8df95e8SBastien Curutchet (eBPF Foundation) * ETH_P_8021Q indication, and this cause overwriting of our changes. 154*f8df95e8SBastien Curutchet (eBPF Foundation) */ 155*f8df95e8SBastien Curutchet (eBPF Foundation) void test_xdp_vlan_remove(void) 156*f8df95e8SBastien Curutchet (eBPF Foundation) { 157*f8df95e8SBastien Curutchet (eBPF Foundation) struct test_xdp_vlan *skel; 158*f8df95e8SBastien Curutchet (eBPF Foundation) 159*f8df95e8SBastien Curutchet (eBPF Foundation) skel = test_xdp_vlan__open_and_load(); 160*f8df95e8SBastien Curutchet (eBPF Foundation) if (!ASSERT_OK_PTR(skel, "xdp_vlan__open_and_load")) 161*f8df95e8SBastien Curutchet (eBPF Foundation) return; 162*f8df95e8SBastien Curutchet (eBPF Foundation) 163*f8df95e8SBastien Curutchet (eBPF Foundation) if (test__start_subtest("0")) 164*f8df95e8SBastien Curutchet (eBPF Foundation) xdp_vlan(skel->progs.xdp_vlan_remove_outer2, skel->progs.tc_vlan_push, 0); 165*f8df95e8SBastien Curutchet (eBPF Foundation) 166*f8df95e8SBastien Curutchet (eBPF Foundation) if (test__start_subtest("DRV_MODE")) 167*f8df95e8SBastien Curutchet (eBPF Foundation) xdp_vlan(skel->progs.xdp_vlan_remove_outer2, skel->progs.tc_vlan_push, 168*f8df95e8SBastien Curutchet (eBPF Foundation) XDP_FLAGS_DRV_MODE); 169*f8df95e8SBastien Curutchet (eBPF Foundation) 170*f8df95e8SBastien Curutchet (eBPF Foundation) if (test__start_subtest("SKB_MODE")) 171*f8df95e8SBastien Curutchet (eBPF Foundation) xdp_vlan(skel->progs.xdp_vlan_remove_outer2, skel->progs.tc_vlan_push, 172*f8df95e8SBastien Curutchet (eBPF Foundation) XDP_FLAGS_SKB_MODE); 173*f8df95e8SBastien Curutchet (eBPF Foundation) 174*f8df95e8SBastien Curutchet (eBPF Foundation) test_xdp_vlan__destroy(skel); 175*f8df95e8SBastien Curutchet (eBPF Foundation) } 176