1#!/bin/bash 2# SPDX-License-Identifier: GPL-2.0 3 4# This test is for checking IPv4 and IPv6 FIB behavior in response to 5# different events. 6 7ret=0 8# Kselftest framework requirement - SKIP code is 4. 9ksft_skip=4 10 11# all tests in this script. Can be overridden with -t option 12TESTS="unregister down carrier nexthop suppress ipv6_notify ipv4_notify \ 13 ipv6_rt ipv4_rt ipv6_addr_metric ipv4_addr_metric ipv6_route_metrics \ 14 ipv4_route_metrics ipv4_route_v6_gw rp_filter ipv4_del_addr \ 15 ipv6_del_addr ipv4_mangle ipv6_mangle ipv4_bcast_neigh fib6_gc_test \ 16 ipv4_mpath_list ipv6_mpath_list" 17 18VERBOSE=0 19PAUSE_ON_FAIL=no 20PAUSE=no 21IP="$(which ip) -netns ns1" 22NS_EXEC="$(which ip) netns exec ns1" 23 24which ping6 > /dev/null 2>&1 && ping6=$(which ping6) || ping6=$(which ping) 25 26log_test() 27{ 28 local rc=$1 29 local expected=$2 30 local msg="$3" 31 32 if [ ${rc} -eq ${expected} ]; then 33 printf " TEST: %-60s [ OK ]\n" "${msg}" 34 nsuccess=$((nsuccess+1)) 35 else 36 ret=1 37 nfail=$((nfail+1)) 38 printf " TEST: %-60s [FAIL]\n" "${msg}" 39 if [ "${PAUSE_ON_FAIL}" = "yes" ]; then 40 echo 41 echo "hit enter to continue, 'q' to quit" 42 read a 43 [ "$a" = "q" ] && exit 1 44 fi 45 fi 46 47 if [ "${PAUSE}" = "yes" ]; then 48 echo 49 echo "hit enter to continue, 'q' to quit" 50 read a 51 [ "$a" = "q" ] && exit 1 52 fi 53} 54 55setup() 56{ 57 set -e 58 ip netns add ns1 59 ip netns set ns1 auto 60 $IP link set dev lo up 61 ip netns exec ns1 sysctl -qw net.ipv4.ip_forward=1 62 ip netns exec ns1 sysctl -qw net.ipv6.conf.all.forwarding=1 63 64 $IP link add dummy0 type dummy 65 $IP link set dev dummy0 up 66 $IP address add 198.51.100.1/24 dev dummy0 67 $IP -6 address add 2001:db8:1::1/64 dev dummy0 68 set +e 69 70} 71 72cleanup() 73{ 74 $IP link del dev dummy0 &> /dev/null 75 ip netns del ns1 &> /dev/null 76 ip netns del ns2 &> /dev/null 77} 78 79get_linklocal() 80{ 81 local dev=$1 82 local addr 83 84 addr=$($IP -6 -br addr show dev ${dev} | \ 85 awk '{ 86 for (i = 3; i <= NF; ++i) { 87 if ($i ~ /^fe80/) 88 print $i 89 } 90 }' 91 ) 92 addr=${addr/\/*} 93 94 [ -z "$addr" ] && return 1 95 96 echo $addr 97 98 return 0 99} 100 101fib_unreg_unicast_test() 102{ 103 echo 104 echo "Single path route test" 105 106 setup 107 108 echo " Start point" 109 $IP route get fibmatch 198.51.100.2 &> /dev/null 110 log_test $? 0 "IPv4 fibmatch" 111 $IP -6 route get fibmatch 2001:db8:1::2 &> /dev/null 112 log_test $? 0 "IPv6 fibmatch" 113 114 set -e 115 $IP link del dev dummy0 116 set +e 117 118 echo " Nexthop device deleted" 119 $IP route get fibmatch 198.51.100.2 &> /dev/null 120 log_test $? 2 "IPv4 fibmatch - no route" 121 $IP -6 route get fibmatch 2001:db8:1::2 &> /dev/null 122 log_test $? 2 "IPv6 fibmatch - no route" 123 124 cleanup 125} 126 127fib_unreg_multipath_test() 128{ 129 130 echo 131 echo "Multipath route test" 132 133 setup 134 135 set -e 136 $IP link add dummy1 type dummy 137 $IP link set dev dummy1 up 138 $IP address add 192.0.2.1/24 dev dummy1 139 $IP -6 address add 2001:db8:2::1/64 dev dummy1 140 141 $IP route add 203.0.113.0/24 \ 142 nexthop via 198.51.100.2 dev dummy0 \ 143 nexthop via 192.0.2.2 dev dummy1 144 $IP -6 route add 2001:db8:3::/64 \ 145 nexthop via 2001:db8:1::2 dev dummy0 \ 146 nexthop via 2001:db8:2::2 dev dummy1 147 set +e 148 149 echo " Start point" 150 $IP route get fibmatch 203.0.113.1 &> /dev/null 151 log_test $? 0 "IPv4 fibmatch" 152 $IP -6 route get fibmatch 2001:db8:3::1 &> /dev/null 153 log_test $? 0 "IPv6 fibmatch" 154 155 set -e 156 $IP link del dev dummy0 157 set +e 158 159 echo " One nexthop device deleted" 160 $IP route get fibmatch 203.0.113.1 &> /dev/null 161 log_test $? 2 "IPv4 - multipath route removed on delete" 162 163 $IP -6 route get fibmatch 2001:db8:3::1 &> /dev/null 164 # In IPv6 we do not flush the entire multipath route. 165 log_test $? 0 "IPv6 - multipath down to single path" 166 167 set -e 168 $IP link del dev dummy1 169 set +e 170 171 echo " Second nexthop device deleted" 172 $IP -6 route get fibmatch 2001:db8:3::1 &> /dev/null 173 log_test $? 2 "IPv6 - no route" 174 175 cleanup 176} 177 178fib_unreg_test() 179{ 180 fib_unreg_unicast_test 181 fib_unreg_multipath_test 182} 183 184fib_down_unicast_test() 185{ 186 echo 187 echo "Single path, admin down" 188 189 setup 190 191 echo " Start point" 192 $IP route get fibmatch 198.51.100.2 &> /dev/null 193 log_test $? 0 "IPv4 fibmatch" 194 $IP -6 route get fibmatch 2001:db8:1::2 &> /dev/null 195 log_test $? 0 "IPv6 fibmatch" 196 197 set -e 198 $IP link set dev dummy0 down 199 set +e 200 201 echo " Route deleted on down" 202 $IP route get fibmatch 198.51.100.2 &> /dev/null 203 log_test $? 2 "IPv4 fibmatch" 204 $IP -6 route get fibmatch 2001:db8:1::2 &> /dev/null 205 log_test $? 2 "IPv6 fibmatch" 206 207 cleanup 208} 209 210fib_down_multipath_test_do() 211{ 212 local down_dev=$1 213 local up_dev=$2 214 215 $IP route get fibmatch 203.0.113.1 \ 216 oif $down_dev &> /dev/null 217 log_test $? 2 "IPv4 fibmatch on down device" 218 $IP -6 route get fibmatch 2001:db8:3::1 \ 219 oif $down_dev &> /dev/null 220 log_test $? 2 "IPv6 fibmatch on down device" 221 222 $IP route get fibmatch 203.0.113.1 \ 223 oif $up_dev &> /dev/null 224 log_test $? 0 "IPv4 fibmatch on up device" 225 $IP -6 route get fibmatch 2001:db8:3::1 \ 226 oif $up_dev &> /dev/null 227 log_test $? 0 "IPv6 fibmatch on up device" 228 229 $IP route get fibmatch 203.0.113.1 | \ 230 grep $down_dev | grep -q "dead linkdown" 231 log_test $? 0 "IPv4 flags on down device" 232 $IP -6 route get fibmatch 2001:db8:3::1 | \ 233 grep $down_dev | grep -q "dead linkdown" 234 log_test $? 0 "IPv6 flags on down device" 235 236 $IP route get fibmatch 203.0.113.1 | \ 237 grep $up_dev | grep -q "dead linkdown" 238 log_test $? 1 "IPv4 flags on up device" 239 $IP -6 route get fibmatch 2001:db8:3::1 | \ 240 grep $up_dev | grep -q "dead linkdown" 241 log_test $? 1 "IPv6 flags on up device" 242} 243 244fib_down_multipath_test() 245{ 246 echo 247 echo "Admin down multipath" 248 249 setup 250 251 set -e 252 $IP link add dummy1 type dummy 253 $IP link set dev dummy1 up 254 255 $IP address add 192.0.2.1/24 dev dummy1 256 $IP -6 address add 2001:db8:2::1/64 dev dummy1 257 258 $IP route add 203.0.113.0/24 \ 259 nexthop via 198.51.100.2 dev dummy0 \ 260 nexthop via 192.0.2.2 dev dummy1 261 $IP -6 route add 2001:db8:3::/64 \ 262 nexthop via 2001:db8:1::2 dev dummy0 \ 263 nexthop via 2001:db8:2::2 dev dummy1 264 set +e 265 266 echo " Verify start point" 267 $IP route get fibmatch 203.0.113.1 &> /dev/null 268 log_test $? 0 "IPv4 fibmatch" 269 270 $IP -6 route get fibmatch 2001:db8:3::1 &> /dev/null 271 log_test $? 0 "IPv6 fibmatch" 272 273 set -e 274 $IP link set dev dummy0 down 275 set +e 276 277 echo " One device down, one up" 278 fib_down_multipath_test_do "dummy0" "dummy1" 279 280 set -e 281 $IP link set dev dummy0 up 282 $IP link set dev dummy1 down 283 set +e 284 285 echo " Other device down and up" 286 fib_down_multipath_test_do "dummy1" "dummy0" 287 288 set -e 289 $IP link set dev dummy0 down 290 set +e 291 292 echo " Both devices down" 293 $IP route get fibmatch 203.0.113.1 &> /dev/null 294 log_test $? 2 "IPv4 fibmatch" 295 $IP -6 route get fibmatch 2001:db8:3::1 &> /dev/null 296 log_test $? 2 "IPv6 fibmatch" 297 298 $IP link del dev dummy1 299 cleanup 300} 301 302fib_down_test() 303{ 304 fib_down_unicast_test 305 fib_down_multipath_test 306} 307 308# Local routes should not be affected when carrier changes. 309fib_carrier_local_test() 310{ 311 echo 312 echo "Local carrier tests - single path" 313 314 setup 315 316 set -e 317 $IP link set dev dummy0 carrier on 318 set +e 319 320 echo " Start point" 321 $IP route get fibmatch 198.51.100.1 &> /dev/null 322 log_test $? 0 "IPv4 fibmatch" 323 $IP -6 route get fibmatch 2001:db8:1::1 &> /dev/null 324 log_test $? 0 "IPv6 fibmatch" 325 326 $IP route get fibmatch 198.51.100.1 | \ 327 grep -q "linkdown" 328 log_test $? 1 "IPv4 - no linkdown flag" 329 $IP -6 route get fibmatch 2001:db8:1::1 | \ 330 grep -q "linkdown" 331 log_test $? 1 "IPv6 - no linkdown flag" 332 333 set -e 334 $IP link set dev dummy0 carrier off 335 sleep 1 336 set +e 337 338 echo " Carrier off on nexthop" 339 $IP route get fibmatch 198.51.100.1 &> /dev/null 340 log_test $? 0 "IPv4 fibmatch" 341 $IP -6 route get fibmatch 2001:db8:1::1 &> /dev/null 342 log_test $? 0 "IPv6 fibmatch" 343 344 $IP route get fibmatch 198.51.100.1 | \ 345 grep -q "linkdown" 346 log_test $? 1 "IPv4 - linkdown flag set" 347 $IP -6 route get fibmatch 2001:db8:1::1 | \ 348 grep -q "linkdown" 349 log_test $? 1 "IPv6 - linkdown flag set" 350 351 set -e 352 $IP address add 192.0.2.1/24 dev dummy0 353 $IP -6 address add 2001:db8:2::1/64 dev dummy0 354 set +e 355 356 echo " Route to local address with carrier down" 357 $IP route get fibmatch 192.0.2.1 &> /dev/null 358 log_test $? 0 "IPv4 fibmatch" 359 $IP -6 route get fibmatch 2001:db8:2::1 &> /dev/null 360 log_test $? 0 "IPv6 fibmatch" 361 362 $IP route get fibmatch 192.0.2.1 | \ 363 grep -q "linkdown" 364 log_test $? 1 "IPv4 linkdown flag set" 365 $IP -6 route get fibmatch 2001:db8:2::1 | \ 366 grep -q "linkdown" 367 log_test $? 1 "IPv6 linkdown flag set" 368 369 cleanup 370} 371 372fib_carrier_unicast_test() 373{ 374 ret=0 375 376 echo 377 echo "Single path route carrier test" 378 379 setup 380 381 set -e 382 $IP link set dev dummy0 carrier on 383 set +e 384 385 echo " Start point" 386 $IP route get fibmatch 198.51.100.2 &> /dev/null 387 log_test $? 0 "IPv4 fibmatch" 388 $IP -6 route get fibmatch 2001:db8:1::2 &> /dev/null 389 log_test $? 0 "IPv6 fibmatch" 390 391 $IP route get fibmatch 198.51.100.2 | \ 392 grep -q "linkdown" 393 log_test $? 1 "IPv4 no linkdown flag" 394 $IP -6 route get fibmatch 2001:db8:1::2 | \ 395 grep -q "linkdown" 396 log_test $? 1 "IPv6 no linkdown flag" 397 398 set -e 399 $IP link set dev dummy0 carrier off 400 sleep 1 401 set +e 402 403 echo " Carrier down" 404 $IP route get fibmatch 198.51.100.2 &> /dev/null 405 log_test $? 0 "IPv4 fibmatch" 406 $IP -6 route get fibmatch 2001:db8:1::2 &> /dev/null 407 log_test $? 0 "IPv6 fibmatch" 408 409 $IP route get fibmatch 198.51.100.2 | \ 410 grep -q "linkdown" 411 log_test $? 0 "IPv4 linkdown flag set" 412 $IP -6 route get fibmatch 2001:db8:1::2 | \ 413 grep -q "linkdown" 414 log_test $? 0 "IPv6 linkdown flag set" 415 416 set -e 417 $IP address add 192.0.2.1/24 dev dummy0 418 $IP -6 address add 2001:db8:2::1/64 dev dummy0 419 set +e 420 421 echo " Second address added with carrier down" 422 $IP route get fibmatch 192.0.2.2 &> /dev/null 423 log_test $? 0 "IPv4 fibmatch" 424 $IP -6 route get fibmatch 2001:db8:2::2 &> /dev/null 425 log_test $? 0 "IPv6 fibmatch" 426 427 $IP route get fibmatch 192.0.2.2 | \ 428 grep -q "linkdown" 429 log_test $? 0 "IPv4 linkdown flag set" 430 $IP -6 route get fibmatch 2001:db8:2::2 | \ 431 grep -q "linkdown" 432 log_test $? 0 "IPv6 linkdown flag set" 433 434 cleanup 435} 436 437fib_carrier_test() 438{ 439 fib_carrier_local_test 440 fib_carrier_unicast_test 441} 442 443fib_rp_filter_test() 444{ 445 echo 446 echo "IPv4 rp_filter tests" 447 448 setup 449 450 set -e 451 ip netns add ns2 452 ip netns set ns2 auto 453 454 ip -netns ns2 link set dev lo up 455 456 $IP link add name veth1 type veth peer name veth2 457 $IP link set dev veth2 netns ns2 458 $IP address add 192.0.2.1/24 dev veth1 459 ip -netns ns2 address add 192.0.2.1/24 dev veth2 460 $IP link set dev veth1 up 461 ip -netns ns2 link set dev veth2 up 462 463 $IP link set dev lo address 52:54:00:6a:c7:5e 464 $IP link set dev veth1 address 52:54:00:6a:c7:5e 465 ip -netns ns2 link set dev lo address 52:54:00:6a:c7:5e 466 ip -netns ns2 link set dev veth2 address 52:54:00:6a:c7:5e 467 468 # 1. (ns2) redirect lo's egress to veth2's egress 469 ip netns exec ns2 tc qdisc add dev lo parent root handle 1: fq_codel 470 ip netns exec ns2 tc filter add dev lo parent 1: protocol arp basic \ 471 action mirred egress redirect dev veth2 472 ip netns exec ns2 tc filter add dev lo parent 1: protocol ip basic \ 473 action mirred egress redirect dev veth2 474 475 # 2. (ns1) redirect veth1's ingress to lo's ingress 476 $NS_EXEC tc qdisc add dev veth1 ingress 477 $NS_EXEC tc filter add dev veth1 ingress protocol arp basic \ 478 action mirred ingress redirect dev lo 479 $NS_EXEC tc filter add dev veth1 ingress protocol ip basic \ 480 action mirred ingress redirect dev lo 481 482 # 3. (ns1) redirect lo's egress to veth1's egress 483 $NS_EXEC tc qdisc add dev lo parent root handle 1: fq_codel 484 $NS_EXEC tc filter add dev lo parent 1: protocol arp basic \ 485 action mirred egress redirect dev veth1 486 $NS_EXEC tc filter add dev lo parent 1: protocol ip basic \ 487 action mirred egress redirect dev veth1 488 489 # 4. (ns2) redirect veth2's ingress to lo's ingress 490 ip netns exec ns2 tc qdisc add dev veth2 ingress 491 ip netns exec ns2 tc filter add dev veth2 ingress protocol arp basic \ 492 action mirred ingress redirect dev lo 493 ip netns exec ns2 tc filter add dev veth2 ingress protocol ip basic \ 494 action mirred ingress redirect dev lo 495 496 $NS_EXEC sysctl -qw net.ipv4.conf.all.rp_filter=1 497 $NS_EXEC sysctl -qw net.ipv4.conf.all.accept_local=1 498 $NS_EXEC sysctl -qw net.ipv4.conf.all.route_localnet=1 499 ip netns exec ns2 sysctl -qw net.ipv4.conf.all.rp_filter=1 500 ip netns exec ns2 sysctl -qw net.ipv4.conf.all.accept_local=1 501 ip netns exec ns2 sysctl -qw net.ipv4.conf.all.route_localnet=1 502 set +e 503 504 run_cmd "ip netns exec ns2 ping -w1 -c1 192.0.2.1" 505 log_test $? 0 "rp_filter passes local packets" 506 507 run_cmd "ip netns exec ns2 ping -w1 -c1 127.0.0.1" 508 log_test $? 0 "rp_filter passes loopback packets" 509 510 cleanup 511} 512 513################################################################################ 514# Tests on nexthop spec 515 516# run 'ip route add' with given spec 517add_rt() 518{ 519 local desc="$1" 520 local erc=$2 521 local vrf=$3 522 local pfx=$4 523 local gw=$5 524 local dev=$6 525 local cmd out rc 526 527 [ "$vrf" = "-" ] && vrf="default" 528 [ -n "$gw" ] && gw="via $gw" 529 [ -n "$dev" ] && dev="dev $dev" 530 531 cmd="$IP route add vrf $vrf $pfx $gw $dev" 532 if [ "$VERBOSE" = "1" ]; then 533 printf "\n COMMAND: $cmd\n" 534 fi 535 536 out=$(eval $cmd 2>&1) 537 rc=$? 538 if [ "$VERBOSE" = "1" -a -n "$out" ]; then 539 echo " $out" 540 fi 541 log_test $rc $erc "$desc" 542} 543 544fib4_nexthop() 545{ 546 echo 547 echo "IPv4 nexthop tests" 548 549 echo "<<< write me >>>" 550} 551 552fib6_nexthop() 553{ 554 local lldummy=$(get_linklocal dummy0) 555 local llv1=$(get_linklocal dummy0) 556 557 if [ -z "$lldummy" ]; then 558 echo "Failed to get linklocal address for dummy0" 559 return 1 560 fi 561 if [ -z "$llv1" ]; then 562 echo "Failed to get linklocal address for veth1" 563 return 1 564 fi 565 566 echo 567 echo "IPv6 nexthop tests" 568 569 add_rt "Directly connected nexthop, unicast address" 0 \ 570 - 2001:db8:101::/64 2001:db8:1::2 571 add_rt "Directly connected nexthop, unicast address with device" 0 \ 572 - 2001:db8:102::/64 2001:db8:1::2 "dummy0" 573 add_rt "Gateway is linklocal address" 0 \ 574 - 2001:db8:103::1/64 $llv1 "veth0" 575 576 # fails because LL address requires a device 577 add_rt "Gateway is linklocal address, no device" 2 \ 578 - 2001:db8:104::1/64 $llv1 579 580 # local address can not be a gateway 581 add_rt "Gateway can not be local unicast address" 2 \ 582 - 2001:db8:105::/64 2001:db8:1::1 583 add_rt "Gateway can not be local unicast address, with device" 2 \ 584 - 2001:db8:106::/64 2001:db8:1::1 "dummy0" 585 add_rt "Gateway can not be a local linklocal address" 2 \ 586 - 2001:db8:107::1/64 $lldummy "dummy0" 587 588 # VRF tests 589 add_rt "Gateway can be local address in a VRF" 0 \ 590 - 2001:db8:108::/64 2001:db8:51::2 591 add_rt "Gateway can be local address in a VRF, with device" 0 \ 592 - 2001:db8:109::/64 2001:db8:51::2 "veth0" 593 add_rt "Gateway can be local linklocal address in a VRF" 0 \ 594 - 2001:db8:110::1/64 $llv1 "veth0" 595 596 add_rt "Redirect to VRF lookup" 0 \ 597 - 2001:db8:111::/64 "" "red" 598 599 add_rt "VRF route, gateway can be local address in default VRF" 0 \ 600 red 2001:db8:112::/64 2001:db8:51::1 601 602 # local address in same VRF fails 603 add_rt "VRF route, gateway can not be a local address" 2 \ 604 red 2001:db8:113::1/64 2001:db8:2::1 605 add_rt "VRF route, gateway can not be a local addr with device" 2 \ 606 red 2001:db8:114::1/64 2001:db8:2::1 "dummy1" 607} 608 609# Default VRF: 610# dummy0 - 198.51.100.1/24 2001:db8:1::1/64 611# veth0 - 192.0.2.1/24 2001:db8:51::1/64 612# 613# VRF red: 614# dummy1 - 192.168.2.1/24 2001:db8:2::1/64 615# veth1 - 192.0.2.2/24 2001:db8:51::2/64 616# 617# [ dummy0 veth0 ]--[ veth1 dummy1 ] 618 619fib_nexthop_test() 620{ 621 setup 622 623 set -e 624 625 $IP -4 rule add pref 32765 table local 626 $IP -4 rule del pref 0 627 $IP -6 rule add pref 32765 table local 628 $IP -6 rule del pref 0 629 630 $IP link add red type vrf table 1 631 $IP link set red up 632 $IP -4 route add vrf red unreachable default metric 4278198272 633 $IP -6 route add vrf red unreachable default metric 4278198272 634 635 $IP link add veth0 type veth peer name veth1 636 $IP link set dev veth0 up 637 $IP address add 192.0.2.1/24 dev veth0 638 $IP -6 address add 2001:db8:51::1/64 dev veth0 639 640 $IP link set dev veth1 vrf red up 641 $IP address add 192.0.2.2/24 dev veth1 642 $IP -6 address add 2001:db8:51::2/64 dev veth1 643 644 $IP link add dummy1 type dummy 645 $IP link set dev dummy1 vrf red up 646 $IP address add 192.168.2.1/24 dev dummy1 647 $IP -6 address add 2001:db8:2::1/64 dev dummy1 648 set +e 649 650 sleep 1 651 fib4_nexthop 652 fib6_nexthop 653 654 ( 655 $IP link del dev dummy1 656 $IP link del veth0 657 $IP link del red 658 ) 2>/dev/null 659 cleanup 660} 661 662fib6_notify_test() 663{ 664 setup 665 666 echo 667 echo "Fib6 info length calculation in route notify test" 668 set -e 669 670 for i in 10 20 30 40 50 60 70; 671 do 672 $IP link add dummy_$i type dummy 673 $IP link set dev dummy_$i up 674 $IP -6 address add 2001:$i::1/64 dev dummy_$i 675 done 676 677 $NS_EXEC ip monitor route &> errors.txt & 678 sleep 2 679 680 $IP -6 route add 2001::/64 \ 681 nexthop via 2001:10::2 dev dummy_10 \ 682 nexthop encap ip6 dst 2002::20 via 2001:20::2 dev dummy_20 \ 683 nexthop encap ip6 dst 2002::30 via 2001:30::2 dev dummy_30 \ 684 nexthop encap ip6 dst 2002::40 via 2001:40::2 dev dummy_40 \ 685 nexthop encap ip6 dst 2002::50 via 2001:50::2 dev dummy_50 \ 686 nexthop encap ip6 dst 2002::60 via 2001:60::2 dev dummy_60 \ 687 nexthop encap ip6 dst 2002::70 via 2001:70::2 dev dummy_70 688 689 set +e 690 691 err=`cat errors.txt |grep "Message too long"` 692 if [ -z "$err" ];then 693 ret=0 694 else 695 ret=1 696 fi 697 698 log_test $ret 0 "ipv6 route add notify" 699 700 { kill %% && wait %%; } 2>/dev/null 701 702 #rm errors.txt 703 704 cleanup &> /dev/null 705} 706 707 708fib_notify_test() 709{ 710 setup 711 712 echo 713 echo "Fib4 info length calculation in route notify test" 714 715 set -e 716 717 for i in 10 20 30 40 50 60 70; 718 do 719 $IP link add dummy_$i type dummy 720 $IP link set dev dummy_$i up 721 $IP address add 20.20.$i.2/24 dev dummy_$i 722 done 723 724 $NS_EXEC ip monitor route &> errors.txt & 725 sleep 2 726 727 $IP route add 10.0.0.0/24 \ 728 nexthop via 20.20.10.1 dev dummy_10 \ 729 nexthop encap ip dst 192.168.10.20 via 20.20.20.1 dev dummy_20 \ 730 nexthop encap ip dst 192.168.10.30 via 20.20.30.1 dev dummy_30 \ 731 nexthop encap ip dst 192.168.10.40 via 20.20.40.1 dev dummy_40 \ 732 nexthop encap ip dst 192.168.10.50 via 20.20.50.1 dev dummy_50 \ 733 nexthop encap ip dst 192.168.10.60 via 20.20.60.1 dev dummy_60 \ 734 nexthop encap ip dst 192.168.10.70 via 20.20.70.1 dev dummy_70 735 736 set +e 737 738 err=`cat errors.txt |grep "Message too long"` 739 if [ -z "$err" ];then 740 ret=0 741 else 742 ret=1 743 fi 744 745 log_test $ret 0 "ipv4 route add notify" 746 747 { kill %% && wait %%; } 2>/dev/null 748 749 rm errors.txt 750 751 cleanup &> /dev/null 752} 753 754fib6_gc_test() 755{ 756 setup 757 758 echo 759 echo "Fib6 garbage collection test" 760 set -e 761 762 EXPIRE=3 763 764 # Check expiration of routes every $EXPIRE seconds (GC) 765 $NS_EXEC sysctl -wq net.ipv6.route.gc_interval=$EXPIRE 766 767 $IP link add dummy_10 type dummy 768 $IP link set dev dummy_10 up 769 $IP -6 address add 2001:10::1/64 dev dummy_10 770 771 $NS_EXEC sysctl -wq net.ipv6.route.flush=1 772 773 # Temporary routes 774 for i in $(seq 1 1000); do 775 # Expire route after $EXPIRE seconds 776 $IP -6 route add 2001:20::$i \ 777 via 2001:10::2 dev dummy_10 expires $EXPIRE 778 done 779 sleep $(($EXPIRE * 2)) 780 N_EXP_SLEEP=$($IP -6 route list |grep expires|wc -l) 781 if [ $N_EXP_SLEEP -ne 0 ]; then 782 echo "FAIL: expected 0 routes with expires, got $N_EXP_SLEEP" 783 ret=1 784 else 785 ret=0 786 fi 787 788 # Permanent routes 789 for i in $(seq 1 5000); do 790 $IP -6 route add 2001:30::$i \ 791 via 2001:10::2 dev dummy_10 792 done 793 # Temporary routes 794 for i in $(seq 1 1000); do 795 # Expire route after $EXPIRE seconds 796 $IP -6 route add 2001:20::$i \ 797 via 2001:10::2 dev dummy_10 expires $EXPIRE 798 done 799 sleep $(($EXPIRE * 2)) 800 N_EXP_SLEEP=$($IP -6 route list |grep expires|wc -l) 801 if [ $N_EXP_SLEEP -ne 0 ]; then 802 echo "FAIL: expected 0 routes with expires," \ 803 "got $N_EXP_SLEEP (5000 permanent routes)" 804 ret=1 805 else 806 ret=0 807 fi 808 809 set +e 810 811 log_test $ret 0 "ipv6 route garbage collection" 812 813 cleanup &> /dev/null 814} 815 816fib_suppress_test() 817{ 818 echo 819 echo "FIB rule with suppress_prefixlength" 820 setup 821 822 $IP link add dummy1 type dummy 823 $IP link set dummy1 up 824 $IP -6 route add default dev dummy1 825 $IP -6 rule add table main suppress_prefixlength 0 826 ping -f -c 1000 -W 1 1234::1 >/dev/null 2>&1 827 $IP -6 rule del table main suppress_prefixlength 0 828 $IP link del dummy1 829 830 # If we got here without crashing, we're good. 831 log_test 0 0 "FIB rule suppress test" 832 833 cleanup 834} 835 836################################################################################ 837# Tests on route add and replace 838 839run_cmd() 840{ 841 local cmd="$1" 842 local out 843 local stderr="2>/dev/null" 844 845 if [ "$VERBOSE" = "1" ]; then 846 printf " COMMAND: $cmd\n" 847 stderr= 848 fi 849 850 out=$(eval $cmd $stderr) 851 rc=$? 852 if [ "$VERBOSE" = "1" -a -n "$out" ]; then 853 echo " $out" 854 fi 855 856 [ "$VERBOSE" = "1" ] && echo 857 858 return $rc 859} 860 861check_expected() 862{ 863 local out="$1" 864 local expected="$2" 865 local rc=0 866 867 [ "${out}" = "${expected}" ] && return 0 868 869 if [ -z "${out}" ]; then 870 if [ "$VERBOSE" = "1" ]; then 871 printf "\nNo route entry found\n" 872 printf "Expected:\n" 873 printf " ${expected}\n" 874 fi 875 return 1 876 fi 877 878 # tricky way to convert output to 1-line without ip's 879 # messy '\'; this drops all extra white space 880 out=$(echo ${out}) 881 if [ "${out}" != "${expected}" ]; then 882 rc=1 883 if [ "${VERBOSE}" = "1" ]; then 884 printf " Unexpected route entry. Have:\n" 885 printf " ${out}\n" 886 printf " Expected:\n" 887 printf " ${expected}\n\n" 888 fi 889 fi 890 891 return $rc 892} 893 894# add route for a prefix, flushing any existing routes first 895# expected to be the first step of a test 896add_route6() 897{ 898 local pfx="$1" 899 local nh="$2" 900 local out 901 902 if [ "$VERBOSE" = "1" ]; then 903 echo 904 echo " ##################################################" 905 echo 906 fi 907 908 run_cmd "$IP -6 ro flush ${pfx}" 909 [ $? -ne 0 ] && exit 1 910 911 out=$($IP -6 ro ls match ${pfx}) 912 if [ -n "$out" ]; then 913 echo "Failed to flush routes for prefix used for tests." 914 exit 1 915 fi 916 917 run_cmd "$IP -6 ro add ${pfx} ${nh}" 918 if [ $? -ne 0 ]; then 919 echo "Failed to add initial route for test." 920 exit 1 921 fi 922} 923 924# add initial route - used in replace route tests 925add_initial_route6() 926{ 927 add_route6 "2001:db8:104::/64" "$1" 928} 929 930check_route6() 931{ 932 local pfx 933 local expected="$1" 934 local out 935 local rc=0 936 937 set -- $expected 938 pfx=$1 939 940 out=$($IP -6 ro ls match ${pfx} | sed -e 's/ pref medium//') 941 check_expected "${out}" "${expected}" 942} 943 944route_cleanup() 945{ 946 $IP li del red 2>/dev/null 947 $IP li del dummy1 2>/dev/null 948 $IP li del veth1 2>/dev/null 949 $IP li del veth3 2>/dev/null 950 951 cleanup &> /dev/null 952} 953 954route_setup() 955{ 956 route_cleanup 957 setup 958 959 [ "${VERBOSE}" = "1" ] && set -x 960 set -e 961 962 ip netns add ns2 963 ip netns set ns2 auto 964 ip -netns ns2 link set dev lo up 965 ip netns exec ns2 sysctl -qw net.ipv4.ip_forward=1 966 ip netns exec ns2 sysctl -qw net.ipv6.conf.all.forwarding=1 967 968 $IP li add veth1 type veth peer name veth2 969 $IP li add veth3 type veth peer name veth4 970 971 $IP li set veth1 up 972 $IP li set veth3 up 973 $IP li set veth2 netns ns2 up 974 $IP li set veth4 netns ns2 up 975 ip -netns ns2 li add dummy1 type dummy 976 ip -netns ns2 li set dummy1 up 977 978 $IP -6 addr add 2001:db8:101::1/64 dev veth1 nodad 979 $IP -6 addr add 2001:db8:103::1/64 dev veth3 nodad 980 $IP addr add 172.16.101.1/24 dev veth1 981 $IP addr add 172.16.103.1/24 dev veth3 982 983 ip -netns ns2 -6 addr add 2001:db8:101::2/64 dev veth2 nodad 984 ip -netns ns2 -6 addr add 2001:db8:103::2/64 dev veth4 nodad 985 ip -netns ns2 -6 addr add 2001:db8:104::1/64 dev dummy1 nodad 986 987 ip -netns ns2 addr add 172.16.101.2/24 dev veth2 988 ip -netns ns2 addr add 172.16.103.2/24 dev veth4 989 ip -netns ns2 addr add 172.16.104.1/24 dev dummy1 990 991 set +e 992} 993 994# assumption is that basic add of a single path route works 995# otherwise just adding an address on an interface is broken 996ipv6_rt_add() 997{ 998 local rc 999 1000 echo 1001 echo "IPv6 route add / append tests" 1002 1003 # route add same prefix - fails with EEXISTS b/c ip adds NLM_F_EXCL 1004 add_route6 "2001:db8:104::/64" "via 2001:db8:101::2" 1005 run_cmd "$IP -6 ro add 2001:db8:104::/64 via 2001:db8:103::2" 1006 log_test $? 2 "Attempt to add duplicate route - gw" 1007 1008 # route add same prefix - fails with EEXISTS b/c ip adds NLM_F_EXCL 1009 add_route6 "2001:db8:104::/64" "via 2001:db8:101::2" 1010 run_cmd "$IP -6 ro add 2001:db8:104::/64 dev veth3" 1011 log_test $? 2 "Attempt to add duplicate route - dev only" 1012 1013 # route add same prefix - fails with EEXISTS b/c ip adds NLM_F_EXCL 1014 add_route6 "2001:db8:104::/64" "via 2001:db8:101::2" 1015 run_cmd "$IP -6 ro add unreachable 2001:db8:104::/64" 1016 log_test $? 2 "Attempt to add duplicate route - reject route" 1017 1018 # route append with same prefix adds a new route 1019 # - iproute2 sets NLM_F_CREATE | NLM_F_APPEND 1020 add_route6 "2001:db8:104::/64" "via 2001:db8:101::2" 1021 run_cmd "$IP -6 ro append 2001:db8:104::/64 via 2001:db8:103::2" 1022 check_route6 "2001:db8:104::/64 metric 1024 nexthop via 2001:db8:101::2 dev veth1 weight 1 nexthop via 2001:db8:103::2 dev veth3 weight 1" 1023 log_test $? 0 "Append nexthop to existing route - gw" 1024 1025 # insert mpath directly 1026 add_route6 "2001:db8:104::/64" "nexthop via 2001:db8:101::2 nexthop via 2001:db8:103::2" 1027 check_route6 "2001:db8:104::/64 metric 1024 nexthop via 2001:db8:101::2 dev veth1 weight 1 nexthop via 2001:db8:103::2 dev veth3 weight 1" 1028 log_test $? 0 "Add multipath route" 1029 1030 add_route6 "2001:db8:104::/64" "nexthop via 2001:db8:101::2 nexthop via 2001:db8:103::2" 1031 run_cmd "$IP -6 ro add 2001:db8:104::/64 nexthop via 2001:db8:101::2 nexthop via 2001:db8:103::2" 1032 log_test $? 2 "Attempt to add duplicate multipath route" 1033 1034 # insert of a second route without append but different metric 1035 add_route6 "2001:db8:104::/64" "via 2001:db8:101::2" 1036 run_cmd "$IP -6 ro add 2001:db8:104::/64 via 2001:db8:103::2 metric 512" 1037 rc=$? 1038 if [ $rc -eq 0 ]; then 1039 run_cmd "$IP -6 ro add 2001:db8:104::/64 via 2001:db8:103::3 metric 256" 1040 rc=$? 1041 fi 1042 log_test $rc 0 "Route add with different metrics" 1043 1044 run_cmd "$IP -6 ro del 2001:db8:104::/64 metric 512" 1045 rc=$? 1046 if [ $rc -eq 0 ]; then 1047 check_route6 "2001:db8:104::/64 via 2001:db8:103::3 dev veth3 metric 256 2001:db8:104::/64 via 2001:db8:101::2 dev veth1 metric 1024" 1048 rc=$? 1049 fi 1050 log_test $rc 0 "Route delete with metric" 1051} 1052 1053ipv6_rt_replace_single() 1054{ 1055 # single path with single path 1056 # 1057 add_initial_route6 "via 2001:db8:101::2" 1058 run_cmd "$IP -6 ro replace 2001:db8:104::/64 via 2001:db8:103::2" 1059 check_route6 "2001:db8:104::/64 via 2001:db8:103::2 dev veth3 metric 1024" 1060 log_test $? 0 "Single path with single path" 1061 1062 # single path with multipath 1063 # 1064 add_initial_route6 "nexthop via 2001:db8:101::2" 1065 run_cmd "$IP -6 ro replace 2001:db8:104::/64 nexthop via 2001:db8:101::3 nexthop via 2001:db8:103::2" 1066 check_route6 "2001:db8:104::/64 metric 1024 nexthop via 2001:db8:101::3 dev veth1 weight 1 nexthop via 2001:db8:103::2 dev veth3 weight 1" 1067 log_test $? 0 "Single path with multipath" 1068 1069 # single path with single path using MULTIPATH attribute 1070 # 1071 add_initial_route6 "via 2001:db8:101::2" 1072 run_cmd "$IP -6 ro replace 2001:db8:104::/64 nexthop via 2001:db8:103::2" 1073 check_route6 "2001:db8:104::/64 via 2001:db8:103::2 dev veth3 metric 1024" 1074 log_test $? 0 "Single path with single path via multipath attribute" 1075 1076 # route replace fails - invalid nexthop 1077 add_initial_route6 "via 2001:db8:101::2" 1078 run_cmd "$IP -6 ro replace 2001:db8:104::/64 via 2001:db8:104::2" 1079 if [ $? -eq 0 ]; then 1080 # previous command is expected to fail so if it returns 0 1081 # that means the test failed. 1082 log_test 0 1 "Invalid nexthop" 1083 else 1084 check_route6 "2001:db8:104::/64 via 2001:db8:101::2 dev veth1 metric 1024" 1085 log_test $? 0 "Invalid nexthop" 1086 fi 1087 1088 # replace non-existent route 1089 # - note use of change versus replace since ip adds NLM_F_CREATE 1090 # for replace 1091 add_initial_route6 "via 2001:db8:101::2" 1092 run_cmd "$IP -6 ro change 2001:db8:105::/64 via 2001:db8:101::2" 1093 log_test $? 2 "Single path - replace of non-existent route" 1094} 1095 1096ipv6_rt_replace_mpath() 1097{ 1098 # multipath with multipath 1099 add_initial_route6 "nexthop via 2001:db8:101::2 nexthop via 2001:db8:103::2" 1100 run_cmd "$IP -6 ro replace 2001:db8:104::/64 nexthop via 2001:db8:101::3 nexthop via 2001:db8:103::3" 1101 check_route6 "2001:db8:104::/64 metric 1024 nexthop via 2001:db8:101::3 dev veth1 weight 1 nexthop via 2001:db8:103::3 dev veth3 weight 1" 1102 log_test $? 0 "Multipath with multipath" 1103 1104 # multipath with single 1105 add_initial_route6 "nexthop via 2001:db8:101::2 nexthop via 2001:db8:103::2" 1106 run_cmd "$IP -6 ro replace 2001:db8:104::/64 via 2001:db8:101::3" 1107 check_route6 "2001:db8:104::/64 via 2001:db8:101::3 dev veth1 metric 1024" 1108 log_test $? 0 "Multipath with single path" 1109 1110 # multipath with single 1111 add_initial_route6 "nexthop via 2001:db8:101::2 nexthop via 2001:db8:103::2" 1112 run_cmd "$IP -6 ro replace 2001:db8:104::/64 nexthop via 2001:db8:101::3" 1113 check_route6 "2001:db8:104::/64 via 2001:db8:101::3 dev veth1 metric 1024" 1114 log_test $? 0 "Multipath with single path via multipath attribute" 1115 1116 # multipath with dev-only 1117 add_initial_route6 "nexthop via 2001:db8:101::2 nexthop via 2001:db8:103::2" 1118 run_cmd "$IP -6 ro replace 2001:db8:104::/64 dev veth1" 1119 check_route6 "2001:db8:104::/64 dev veth1 metric 1024" 1120 log_test $? 0 "Multipath with dev-only" 1121 1122 # route replace fails - invalid nexthop 1 1123 add_initial_route6 "nexthop via 2001:db8:101::2 nexthop via 2001:db8:103::2" 1124 run_cmd "$IP -6 ro replace 2001:db8:104::/64 nexthop via 2001:db8:111::3 nexthop via 2001:db8:103::3" 1125 check_route6 "2001:db8:104::/64 metric 1024 nexthop via 2001:db8:101::2 dev veth1 weight 1 nexthop via 2001:db8:103::2 dev veth3 weight 1" 1126 log_test $? 0 "Multipath - invalid first nexthop" 1127 1128 # route replace fails - invalid nexthop 2 1129 add_initial_route6 "nexthop via 2001:db8:101::2 nexthop via 2001:db8:103::2" 1130 run_cmd "$IP -6 ro replace 2001:db8:104::/64 nexthop via 2001:db8:101::3 nexthop via 2001:db8:113::3" 1131 check_route6 "2001:db8:104::/64 metric 1024 nexthop via 2001:db8:101::2 dev veth1 weight 1 nexthop via 2001:db8:103::2 dev veth3 weight 1" 1132 log_test $? 0 "Multipath - invalid second nexthop" 1133 1134 # multipath non-existent route 1135 add_initial_route6 "nexthop via 2001:db8:101::2 nexthop via 2001:db8:103::2" 1136 run_cmd "$IP -6 ro change 2001:db8:105::/64 nexthop via 2001:db8:101::3 nexthop via 2001:db8:103::3" 1137 log_test $? 2 "Multipath - replace of non-existent route" 1138} 1139 1140ipv6_rt_replace() 1141{ 1142 echo 1143 echo "IPv6 route replace tests" 1144 1145 ipv6_rt_replace_single 1146 ipv6_rt_replace_mpath 1147} 1148 1149ipv6_rt_dsfield() 1150{ 1151 echo 1152 echo "IPv6 route with dsfield tests" 1153 1154 run_cmd "$IP -6 route flush 2001:db8:102::/64" 1155 1156 # IPv6 doesn't support routing based on dsfield 1157 run_cmd "$IP -6 route add 2001:db8:102::/64 dsfield 0x04 via 2001:db8:101::2" 1158 log_test $? 2 "Reject route with dsfield" 1159} 1160 1161ipv6_route_test() 1162{ 1163 route_setup 1164 1165 ipv6_rt_add 1166 ipv6_rt_replace 1167 ipv6_rt_dsfield 1168 1169 route_cleanup 1170} 1171 1172ip_addr_metric_check() 1173{ 1174 ip addr help 2>&1 | grep -q metric 1175 if [ $? -ne 0 ]; then 1176 echo "iproute2 command does not support metric for addresses. Skipping test" 1177 return 1 1178 fi 1179 1180 return 0 1181} 1182 1183ipv6_addr_metric_test() 1184{ 1185 local rc 1186 1187 echo 1188 echo "IPv6 prefix route tests" 1189 1190 ip_addr_metric_check || return 1 1191 1192 setup 1193 1194 set -e 1195 $IP li add dummy1 type dummy 1196 $IP li add dummy2 type dummy 1197 $IP li set dummy1 up 1198 $IP li set dummy2 up 1199 1200 # default entry is metric 256 1201 run_cmd "$IP -6 addr add dev dummy1 2001:db8:104::1/64" 1202 run_cmd "$IP -6 addr add dev dummy2 2001:db8:104::2/64" 1203 set +e 1204 1205 check_route6 "2001:db8:104::/64 dev dummy1 proto kernel metric 256 2001:db8:104::/64 dev dummy2 proto kernel metric 256" 1206 log_test $? 0 "Default metric" 1207 1208 set -e 1209 run_cmd "$IP -6 addr flush dev dummy1" 1210 run_cmd "$IP -6 addr add dev dummy1 2001:db8:104::1/64 metric 257" 1211 set +e 1212 1213 check_route6 "2001:db8:104::/64 dev dummy2 proto kernel metric 256 2001:db8:104::/64 dev dummy1 proto kernel metric 257" 1214 log_test $? 0 "User specified metric on first device" 1215 1216 set -e 1217 run_cmd "$IP -6 addr flush dev dummy2" 1218 run_cmd "$IP -6 addr add dev dummy2 2001:db8:104::2/64 metric 258" 1219 set +e 1220 1221 check_route6 "2001:db8:104::/64 dev dummy1 proto kernel metric 257 2001:db8:104::/64 dev dummy2 proto kernel metric 258" 1222 log_test $? 0 "User specified metric on second device" 1223 1224 run_cmd "$IP -6 addr del dev dummy1 2001:db8:104::1/64 metric 257" 1225 rc=$? 1226 if [ $rc -eq 0 ]; then 1227 check_route6 "2001:db8:104::/64 dev dummy2 proto kernel metric 258" 1228 rc=$? 1229 fi 1230 log_test $rc 0 "Delete of address on first device" 1231 1232 run_cmd "$IP -6 addr change dev dummy2 2001:db8:104::2/64 metric 259" 1233 rc=$? 1234 if [ $rc -eq 0 ]; then 1235 check_route6 "2001:db8:104::/64 dev dummy2 proto kernel metric 259" 1236 rc=$? 1237 fi 1238 log_test $rc 0 "Modify metric of address" 1239 1240 # verify prefix route removed on down 1241 run_cmd "ip netns exec ns1 sysctl -qw net.ipv6.conf.all.keep_addr_on_down=1" 1242 run_cmd "$IP li set dev dummy2 down" 1243 rc=$? 1244 if [ $rc -eq 0 ]; then 1245 out=$($IP -6 ro ls match 2001:db8:104::/64) 1246 check_expected "${out}" "" 1247 rc=$? 1248 fi 1249 log_test $rc 0 "Prefix route removed on link down" 1250 1251 # verify prefix route re-inserted with assigned metric 1252 run_cmd "$IP li set dev dummy2 up" 1253 rc=$? 1254 if [ $rc -eq 0 ]; then 1255 check_route6 "2001:db8:104::/64 dev dummy2 proto kernel metric 259" 1256 rc=$? 1257 fi 1258 log_test $rc 0 "Prefix route with metric on link up" 1259 1260 # verify peer metric added correctly 1261 set -e 1262 run_cmd "$IP -6 addr flush dev dummy2" 1263 run_cmd "$IP -6 addr add dev dummy2 2001:db8:104::1 peer 2001:db8:104::2 metric 260" 1264 set +e 1265 1266 check_route6 "2001:db8:104::1 dev dummy2 proto kernel metric 260" 1267 log_test $? 0 "Set metric with peer route on local side" 1268 check_route6 "2001:db8:104::2 dev dummy2 proto kernel metric 260" 1269 log_test $? 0 "Set metric with peer route on peer side" 1270 1271 set -e 1272 run_cmd "$IP -6 addr change dev dummy2 2001:db8:104::1 peer 2001:db8:104::3 metric 261" 1273 set +e 1274 1275 check_route6 "2001:db8:104::1 dev dummy2 proto kernel metric 261" 1276 log_test $? 0 "Modify metric and peer address on local side" 1277 check_route6 "2001:db8:104::3 dev dummy2 proto kernel metric 261" 1278 log_test $? 0 "Modify metric and peer address on peer side" 1279 1280 $IP li del dummy1 1281 $IP li del dummy2 1282 cleanup 1283} 1284 1285ipv6_route_metrics_test() 1286{ 1287 local rc 1288 1289 echo 1290 echo "IPv6 routes with metrics" 1291 1292 route_setup 1293 1294 # 1295 # single path with metrics 1296 # 1297 run_cmd "$IP -6 ro add 2001:db8:111::/64 via 2001:db8:101::2 mtu 1400" 1298 rc=$? 1299 if [ $rc -eq 0 ]; then 1300 check_route6 "2001:db8:111::/64 via 2001:db8:101::2 dev veth1 metric 1024 mtu 1400" 1301 rc=$? 1302 fi 1303 log_test $rc 0 "Single path route with mtu metric" 1304 1305 1306 # 1307 # multipath via separate routes with metrics 1308 # 1309 run_cmd "$IP -6 ro add 2001:db8:112::/64 via 2001:db8:101::2 mtu 1400" 1310 run_cmd "$IP -6 ro append 2001:db8:112::/64 via 2001:db8:103::2" 1311 rc=$? 1312 if [ $rc -eq 0 ]; then 1313 check_route6 "2001:db8:112::/64 metric 1024 mtu 1400 nexthop via 2001:db8:101::2 dev veth1 weight 1 nexthop via 2001:db8:103::2 dev veth3 weight 1" 1314 rc=$? 1315 fi 1316 log_test $rc 0 "Multipath route via 2 single routes with mtu metric on first" 1317 1318 # second route is coalesced to first to make a multipath route. 1319 # MTU of the second path is hidden from display! 1320 run_cmd "$IP -6 ro add 2001:db8:113::/64 via 2001:db8:101::2" 1321 run_cmd "$IP -6 ro append 2001:db8:113::/64 via 2001:db8:103::2 mtu 1400" 1322 rc=$? 1323 if [ $rc -eq 0 ]; then 1324 check_route6 "2001:db8:113::/64 metric 1024 nexthop via 2001:db8:101::2 dev veth1 weight 1 nexthop via 2001:db8:103::2 dev veth3 weight 1" 1325 rc=$? 1326 fi 1327 log_test $rc 0 "Multipath route via 2 single routes with mtu metric on 2nd" 1328 1329 run_cmd "$IP -6 ro del 2001:db8:113::/64 via 2001:db8:101::2" 1330 if [ $? -eq 0 ]; then 1331 check_route6 "2001:db8:113::/64 via 2001:db8:103::2 dev veth3 metric 1024 mtu 1400" 1332 log_test $? 0 " MTU of second leg" 1333 fi 1334 1335 # 1336 # multipath with metrics 1337 # 1338 run_cmd "$IP -6 ro add 2001:db8:115::/64 mtu 1400 nexthop via 2001:db8:101::2 nexthop via 2001:db8:103::2" 1339 rc=$? 1340 if [ $rc -eq 0 ]; then 1341 check_route6 "2001:db8:115::/64 metric 1024 mtu 1400 nexthop via 2001:db8:101::2 dev veth1 weight 1 nexthop via 2001:db8:103::2 dev veth3 weight 1" 1342 rc=$? 1343 fi 1344 log_test $rc 0 "Multipath route with mtu metric" 1345 1346 $IP -6 ro add 2001:db8:104::/64 via 2001:db8:101::2 mtu 1300 1347 run_cmd "ip netns exec ns1 ${ping6} -w1 -c1 -s 1500 2001:db8:104::1" 1348 log_test $? 0 "Using route with mtu metric" 1349 1350 run_cmd "$IP -6 ro add 2001:db8:114::/64 via 2001:db8:101::2 congctl lock foo" 1351 log_test $? 2 "Invalid metric (fails metric_convert)" 1352 1353 route_cleanup 1354} 1355 1356# add route for a prefix, flushing any existing routes first 1357# expected to be the first step of a test 1358add_route() 1359{ 1360 local pfx="$1" 1361 local nh="$2" 1362 local out 1363 1364 if [ "$VERBOSE" = "1" ]; then 1365 echo 1366 echo " ##################################################" 1367 echo 1368 fi 1369 1370 run_cmd "$IP ro flush ${pfx}" 1371 [ $? -ne 0 ] && exit 1 1372 1373 out=$($IP ro ls match ${pfx}) 1374 if [ -n "$out" ]; then 1375 echo "Failed to flush routes for prefix used for tests." 1376 exit 1 1377 fi 1378 1379 run_cmd "$IP ro add ${pfx} ${nh}" 1380 if [ $? -ne 0 ]; then 1381 echo "Failed to add initial route for test." 1382 exit 1 1383 fi 1384} 1385 1386# add initial route - used in replace route tests 1387add_initial_route() 1388{ 1389 add_route "172.16.104.0/24" "$1" 1390} 1391 1392check_route() 1393{ 1394 local pfx 1395 local expected="$1" 1396 local out 1397 1398 set -- $expected 1399 pfx=$1 1400 [ "${pfx}" = "unreachable" ] && pfx=$2 1401 1402 out=$($IP ro ls match ${pfx}) 1403 check_expected "${out}" "${expected}" 1404} 1405 1406# assumption is that basic add of a single path route works 1407# otherwise just adding an address on an interface is broken 1408ipv4_rt_add() 1409{ 1410 local rc 1411 1412 echo 1413 echo "IPv4 route add / append tests" 1414 1415 # route add same prefix - fails with EEXISTS b/c ip adds NLM_F_EXCL 1416 add_route "172.16.104.0/24" "via 172.16.101.2" 1417 run_cmd "$IP ro add 172.16.104.0/24 via 172.16.103.2" 1418 log_test $? 2 "Attempt to add duplicate route - gw" 1419 1420 # route add same prefix - fails with EEXISTS b/c ip adds NLM_F_EXCL 1421 add_route "172.16.104.0/24" "via 172.16.101.2" 1422 run_cmd "$IP ro add 172.16.104.0/24 dev veth3" 1423 log_test $? 2 "Attempt to add duplicate route - dev only" 1424 1425 # route add same prefix - fails with EEXISTS b/c ip adds NLM_F_EXCL 1426 add_route "172.16.104.0/24" "via 172.16.101.2" 1427 run_cmd "$IP ro add unreachable 172.16.104.0/24" 1428 log_test $? 2 "Attempt to add duplicate route - reject route" 1429 1430 # iproute2 prepend only sets NLM_F_CREATE 1431 # - adds a new route; does NOT convert existing route to ECMP 1432 add_route "172.16.104.0/24" "via 172.16.101.2" 1433 run_cmd "$IP ro prepend 172.16.104.0/24 via 172.16.103.2" 1434 check_route "172.16.104.0/24 via 172.16.103.2 dev veth3 172.16.104.0/24 via 172.16.101.2 dev veth1" 1435 log_test $? 0 "Add new nexthop for existing prefix" 1436 1437 # route append with same prefix adds a new route 1438 # - iproute2 sets NLM_F_CREATE | NLM_F_APPEND 1439 add_route "172.16.104.0/24" "via 172.16.101.2" 1440 run_cmd "$IP ro append 172.16.104.0/24 via 172.16.103.2" 1441 check_route "172.16.104.0/24 via 172.16.101.2 dev veth1 172.16.104.0/24 via 172.16.103.2 dev veth3" 1442 log_test $? 0 "Append nexthop to existing route - gw" 1443 1444 add_route "172.16.104.0/24" "via 172.16.101.2" 1445 run_cmd "$IP ro append 172.16.104.0/24 dev veth3" 1446 check_route "172.16.104.0/24 via 172.16.101.2 dev veth1 172.16.104.0/24 dev veth3 scope link" 1447 log_test $? 0 "Append nexthop to existing route - dev only" 1448 1449 add_route "172.16.104.0/24" "via 172.16.101.2" 1450 run_cmd "$IP ro append unreachable 172.16.104.0/24" 1451 check_route "172.16.104.0/24 via 172.16.101.2 dev veth1 unreachable 172.16.104.0/24" 1452 log_test $? 0 "Append nexthop to existing route - reject route" 1453 1454 run_cmd "$IP ro flush 172.16.104.0/24" 1455 run_cmd "$IP ro add unreachable 172.16.104.0/24" 1456 run_cmd "$IP ro append 172.16.104.0/24 via 172.16.103.2" 1457 check_route "unreachable 172.16.104.0/24 172.16.104.0/24 via 172.16.103.2 dev veth3" 1458 log_test $? 0 "Append nexthop to existing reject route - gw" 1459 1460 run_cmd "$IP ro flush 172.16.104.0/24" 1461 run_cmd "$IP ro add unreachable 172.16.104.0/24" 1462 run_cmd "$IP ro append 172.16.104.0/24 dev veth3" 1463 check_route "unreachable 172.16.104.0/24 172.16.104.0/24 dev veth3 scope link" 1464 log_test $? 0 "Append nexthop to existing reject route - dev only" 1465 1466 # insert mpath directly 1467 add_route "172.16.104.0/24" "nexthop via 172.16.101.2 nexthop via 172.16.103.2" 1468 check_route "172.16.104.0/24 nexthop via 172.16.101.2 dev veth1 weight 1 nexthop via 172.16.103.2 dev veth3 weight 1" 1469 log_test $? 0 "add multipath route" 1470 1471 add_route "172.16.104.0/24" "nexthop via 172.16.101.2 nexthop via 172.16.103.2" 1472 run_cmd "$IP ro add 172.16.104.0/24 nexthop via 172.16.101.2 nexthop via 172.16.103.2" 1473 log_test $? 2 "Attempt to add duplicate multipath route" 1474 1475 # insert of a second route without append but different metric 1476 add_route "172.16.104.0/24" "via 172.16.101.2" 1477 run_cmd "$IP ro add 172.16.104.0/24 via 172.16.103.2 metric 512" 1478 rc=$? 1479 if [ $rc -eq 0 ]; then 1480 run_cmd "$IP ro add 172.16.104.0/24 via 172.16.103.3 metric 256" 1481 rc=$? 1482 fi 1483 log_test $rc 0 "Route add with different metrics" 1484 1485 run_cmd "$IP ro del 172.16.104.0/24 metric 512" 1486 rc=$? 1487 if [ $rc -eq 0 ]; then 1488 check_route "172.16.104.0/24 via 172.16.101.2 dev veth1 172.16.104.0/24 via 172.16.103.3 dev veth3 metric 256" 1489 rc=$? 1490 fi 1491 log_test $rc 0 "Route delete with metric" 1492} 1493 1494ipv4_rt_replace_single() 1495{ 1496 # single path with single path 1497 # 1498 add_initial_route "via 172.16.101.2" 1499 run_cmd "$IP ro replace 172.16.104.0/24 via 172.16.103.2" 1500 check_route "172.16.104.0/24 via 172.16.103.2 dev veth3" 1501 log_test $? 0 "Single path with single path" 1502 1503 # single path with multipath 1504 # 1505 add_initial_route "nexthop via 172.16.101.2" 1506 run_cmd "$IP ro replace 172.16.104.0/24 nexthop via 172.16.101.3 nexthop via 172.16.103.2" 1507 check_route "172.16.104.0/24 nexthop via 172.16.101.3 dev veth1 weight 1 nexthop via 172.16.103.2 dev veth3 weight 1" 1508 log_test $? 0 "Single path with multipath" 1509 1510 # single path with reject 1511 # 1512 add_initial_route "nexthop via 172.16.101.2" 1513 run_cmd "$IP ro replace unreachable 172.16.104.0/24" 1514 check_route "unreachable 172.16.104.0/24" 1515 log_test $? 0 "Single path with reject route" 1516 1517 # single path with single path using MULTIPATH attribute 1518 # 1519 add_initial_route "via 172.16.101.2" 1520 run_cmd "$IP ro replace 172.16.104.0/24 nexthop via 172.16.103.2" 1521 check_route "172.16.104.0/24 via 172.16.103.2 dev veth3" 1522 log_test $? 0 "Single path with single path via multipath attribute" 1523 1524 # route replace fails - invalid nexthop 1525 add_initial_route "via 172.16.101.2" 1526 run_cmd "$IP ro replace 172.16.104.0/24 via 2001:db8:104::2" 1527 if [ $? -eq 0 ]; then 1528 # previous command is expected to fail so if it returns 0 1529 # that means the test failed. 1530 log_test 0 1 "Invalid nexthop" 1531 else 1532 check_route "172.16.104.0/24 via 172.16.101.2 dev veth1" 1533 log_test $? 0 "Invalid nexthop" 1534 fi 1535 1536 # replace non-existent route 1537 # - note use of change versus replace since ip adds NLM_F_CREATE 1538 # for replace 1539 add_initial_route "via 172.16.101.2" 1540 run_cmd "$IP ro change 172.16.105.0/24 via 172.16.101.2" 1541 log_test $? 2 "Single path - replace of non-existent route" 1542} 1543 1544ipv4_rt_replace_mpath() 1545{ 1546 # multipath with multipath 1547 add_initial_route "nexthop via 172.16.101.2 nexthop via 172.16.103.2" 1548 run_cmd "$IP ro replace 172.16.104.0/24 nexthop via 172.16.101.3 nexthop via 172.16.103.3" 1549 check_route "172.16.104.0/24 nexthop via 172.16.101.3 dev veth1 weight 1 nexthop via 172.16.103.3 dev veth3 weight 1" 1550 log_test $? 0 "Multipath with multipath" 1551 1552 # multipath with single 1553 add_initial_route "nexthop via 172.16.101.2 nexthop via 172.16.103.2" 1554 run_cmd "$IP ro replace 172.16.104.0/24 via 172.16.101.3" 1555 check_route "172.16.104.0/24 via 172.16.101.3 dev veth1" 1556 log_test $? 0 "Multipath with single path" 1557 1558 # multipath with single 1559 add_initial_route "nexthop via 172.16.101.2 nexthop via 172.16.103.2" 1560 run_cmd "$IP ro replace 172.16.104.0/24 nexthop via 172.16.101.3" 1561 check_route "172.16.104.0/24 via 172.16.101.3 dev veth1" 1562 log_test $? 0 "Multipath with single path via multipath attribute" 1563 1564 # multipath with reject 1565 add_initial_route "nexthop via 172.16.101.2 nexthop via 172.16.103.2" 1566 run_cmd "$IP ro replace unreachable 172.16.104.0/24" 1567 check_route "unreachable 172.16.104.0/24" 1568 log_test $? 0 "Multipath with reject route" 1569 1570 # route replace fails - invalid nexthop 1 1571 add_initial_route "nexthop via 172.16.101.2 nexthop via 172.16.103.2" 1572 run_cmd "$IP ro replace 172.16.104.0/24 nexthop via 172.16.111.3 nexthop via 172.16.103.3" 1573 check_route "172.16.104.0/24 nexthop via 172.16.101.2 dev veth1 weight 1 nexthop via 172.16.103.2 dev veth3 weight 1" 1574 log_test $? 0 "Multipath - invalid first nexthop" 1575 1576 # route replace fails - invalid nexthop 2 1577 add_initial_route "nexthop via 172.16.101.2 nexthop via 172.16.103.2" 1578 run_cmd "$IP ro replace 172.16.104.0/24 nexthop via 172.16.101.3 nexthop via 172.16.113.3" 1579 check_route "172.16.104.0/24 nexthop via 172.16.101.2 dev veth1 weight 1 nexthop via 172.16.103.2 dev veth3 weight 1" 1580 log_test $? 0 "Multipath - invalid second nexthop" 1581 1582 # multipath non-existent route 1583 add_initial_route "nexthop via 172.16.101.2 nexthop via 172.16.103.2" 1584 run_cmd "$IP ro change 172.16.105.0/24 nexthop via 172.16.101.3 nexthop via 172.16.103.3" 1585 log_test $? 2 "Multipath - replace of non-existent route" 1586} 1587 1588ipv4_rt_replace() 1589{ 1590 echo 1591 echo "IPv4 route replace tests" 1592 1593 ipv4_rt_replace_single 1594 ipv4_rt_replace_mpath 1595} 1596 1597# checks that cached input route on VRF port is deleted 1598# when VRF is deleted 1599ipv4_local_rt_cache() 1600{ 1601 run_cmd "ip addr add 10.0.0.1/32 dev lo" 1602 run_cmd "ip netns add test-ns" 1603 run_cmd "ip link add veth-outside type veth peer name veth-inside" 1604 run_cmd "ip link add vrf-100 type vrf table 1100" 1605 run_cmd "ip link set veth-outside master vrf-100" 1606 run_cmd "ip link set veth-inside netns test-ns" 1607 run_cmd "ip link set veth-outside up" 1608 run_cmd "ip link set vrf-100 up" 1609 run_cmd "ip route add 10.1.1.1/32 dev veth-outside table 1100" 1610 run_cmd "ip netns exec test-ns ip link set veth-inside up" 1611 run_cmd "ip netns exec test-ns ip addr add 10.1.1.1/32 dev veth-inside" 1612 run_cmd "ip netns exec test-ns ip route add 10.0.0.1/32 dev veth-inside" 1613 run_cmd "ip netns exec test-ns ip route add default via 10.0.0.1" 1614 run_cmd "ip netns exec test-ns ping 10.0.0.1 -c 1 -i 1" 1615 run_cmd "ip link delete vrf-100" 1616 1617 # if we do not hang test is a success 1618 log_test $? 0 "Cached route removed from VRF port device" 1619} 1620 1621ipv4_rt_dsfield() 1622{ 1623 echo 1624 echo "IPv4 route with dsfield tests" 1625 1626 run_cmd "$IP route flush 172.16.102.0/24" 1627 1628 # New routes should reject dsfield options that interfere with ECN 1629 run_cmd "$IP route add 172.16.102.0/24 dsfield 0x01 via 172.16.101.2" 1630 log_test $? 2 "Reject route with dsfield 0x01" 1631 1632 run_cmd "$IP route add 172.16.102.0/24 dsfield 0x02 via 172.16.101.2" 1633 log_test $? 2 "Reject route with dsfield 0x02" 1634 1635 run_cmd "$IP route add 172.16.102.0/24 dsfield 0x03 via 172.16.101.2" 1636 log_test $? 2 "Reject route with dsfield 0x03" 1637 1638 # A generic route that doesn't take DSCP into account 1639 run_cmd "$IP route add 172.16.102.0/24 via 172.16.101.2" 1640 1641 # A more specific route for DSCP 0x10 1642 run_cmd "$IP route add 172.16.102.0/24 dsfield 0x10 via 172.16.103.2" 1643 1644 # DSCP 0x10 should match the specific route, no matter the ECN bits 1645 $IP route get fibmatch 172.16.102.1 dsfield 0x10 | \ 1646 grep -q "via 172.16.103.2" 1647 log_test $? 0 "IPv4 route with DSCP and ECN:Not-ECT" 1648 1649 $IP route get fibmatch 172.16.102.1 dsfield 0x11 | \ 1650 grep -q "via 172.16.103.2" 1651 log_test $? 0 "IPv4 route with DSCP and ECN:ECT(1)" 1652 1653 $IP route get fibmatch 172.16.102.1 dsfield 0x12 | \ 1654 grep -q "via 172.16.103.2" 1655 log_test $? 0 "IPv4 route with DSCP and ECN:ECT(0)" 1656 1657 $IP route get fibmatch 172.16.102.1 dsfield 0x13 | \ 1658 grep -q "via 172.16.103.2" 1659 log_test $? 0 "IPv4 route with DSCP and ECN:CE" 1660 1661 # Unknown DSCP should match the generic route, no matter the ECN bits 1662 $IP route get fibmatch 172.16.102.1 dsfield 0x14 | \ 1663 grep -q "via 172.16.101.2" 1664 log_test $? 0 "IPv4 route with unknown DSCP and ECN:Not-ECT" 1665 1666 $IP route get fibmatch 172.16.102.1 dsfield 0x15 | \ 1667 grep -q "via 172.16.101.2" 1668 log_test $? 0 "IPv4 route with unknown DSCP and ECN:ECT(1)" 1669 1670 $IP route get fibmatch 172.16.102.1 dsfield 0x16 | \ 1671 grep -q "via 172.16.101.2" 1672 log_test $? 0 "IPv4 route with unknown DSCP and ECN:ECT(0)" 1673 1674 $IP route get fibmatch 172.16.102.1 dsfield 0x17 | \ 1675 grep -q "via 172.16.101.2" 1676 log_test $? 0 "IPv4 route with unknown DSCP and ECN:CE" 1677 1678 # Null DSCP should match the generic route, no matter the ECN bits 1679 $IP route get fibmatch 172.16.102.1 dsfield 0x00 | \ 1680 grep -q "via 172.16.101.2" 1681 log_test $? 0 "IPv4 route with no DSCP and ECN:Not-ECT" 1682 1683 $IP route get fibmatch 172.16.102.1 dsfield 0x01 | \ 1684 grep -q "via 172.16.101.2" 1685 log_test $? 0 "IPv4 route with no DSCP and ECN:ECT(1)" 1686 1687 $IP route get fibmatch 172.16.102.1 dsfield 0x02 | \ 1688 grep -q "via 172.16.101.2" 1689 log_test $? 0 "IPv4 route with no DSCP and ECN:ECT(0)" 1690 1691 $IP route get fibmatch 172.16.102.1 dsfield 0x03 | \ 1692 grep -q "via 172.16.101.2" 1693 log_test $? 0 "IPv4 route with no DSCP and ECN:CE" 1694} 1695 1696ipv4_route_test() 1697{ 1698 route_setup 1699 1700 ipv4_rt_add 1701 ipv4_rt_replace 1702 ipv4_local_rt_cache 1703 ipv4_rt_dsfield 1704 1705 route_cleanup 1706} 1707 1708ipv4_addr_metric_test() 1709{ 1710 local rc 1711 1712 echo 1713 echo "IPv4 prefix route tests" 1714 1715 ip_addr_metric_check || return 1 1716 1717 setup 1718 1719 set -e 1720 $IP li add dummy1 type dummy 1721 $IP li add dummy2 type dummy 1722 $IP li set dummy1 up 1723 $IP li set dummy2 up 1724 1725 # default entry is metric 256 1726 run_cmd "$IP addr add dev dummy1 172.16.104.1/24" 1727 run_cmd "$IP addr add dev dummy2 172.16.104.2/24" 1728 set +e 1729 1730 check_route "172.16.104.0/24 dev dummy1 proto kernel scope link src 172.16.104.1 172.16.104.0/24 dev dummy2 proto kernel scope link src 172.16.104.2" 1731 log_test $? 0 "Default metric" 1732 1733 set -e 1734 run_cmd "$IP addr flush dev dummy1" 1735 run_cmd "$IP addr add dev dummy1 172.16.104.1/24 metric 257" 1736 set +e 1737 1738 check_route "172.16.104.0/24 dev dummy2 proto kernel scope link src 172.16.104.2 172.16.104.0/24 dev dummy1 proto kernel scope link src 172.16.104.1 metric 257" 1739 log_test $? 0 "User specified metric on first device" 1740 1741 set -e 1742 run_cmd "$IP addr flush dev dummy2" 1743 run_cmd "$IP addr add dev dummy2 172.16.104.2/24 metric 258" 1744 set +e 1745 1746 check_route "172.16.104.0/24 dev dummy1 proto kernel scope link src 172.16.104.1 metric 257 172.16.104.0/24 dev dummy2 proto kernel scope link src 172.16.104.2 metric 258" 1747 log_test $? 0 "User specified metric on second device" 1748 1749 run_cmd "$IP addr del dev dummy1 172.16.104.1/24 metric 257" 1750 rc=$? 1751 if [ $rc -eq 0 ]; then 1752 check_route "172.16.104.0/24 dev dummy2 proto kernel scope link src 172.16.104.2 metric 258" 1753 rc=$? 1754 fi 1755 log_test $rc 0 "Delete of address on first device" 1756 1757 run_cmd "$IP addr change dev dummy2 172.16.104.2/24 metric 259" 1758 rc=$? 1759 if [ $rc -eq 0 ]; then 1760 check_route "172.16.104.0/24 dev dummy2 proto kernel scope link src 172.16.104.2 metric 259" 1761 rc=$? 1762 fi 1763 log_test $rc 0 "Modify metric of address" 1764 1765 # verify prefix route removed on down 1766 run_cmd "$IP li set dev dummy2 down" 1767 rc=$? 1768 if [ $rc -eq 0 ]; then 1769 out=$($IP ro ls match 172.16.104.0/24) 1770 check_expected "${out}" "" 1771 rc=$? 1772 fi 1773 log_test $rc 0 "Prefix route removed on link down" 1774 1775 # verify prefix route re-inserted with assigned metric 1776 run_cmd "$IP li set dev dummy2 up" 1777 rc=$? 1778 if [ $rc -eq 0 ]; then 1779 check_route "172.16.104.0/24 dev dummy2 proto kernel scope link src 172.16.104.2 metric 259" 1780 rc=$? 1781 fi 1782 log_test $rc 0 "Prefix route with metric on link up" 1783 1784 # explicitly check for metric changes on edge scenarios 1785 run_cmd "$IP addr flush dev dummy2" 1786 run_cmd "$IP addr add dev dummy2 172.16.104.0/24 metric 259" 1787 run_cmd "$IP addr change dev dummy2 172.16.104.0/24 metric 260" 1788 rc=$? 1789 if [ $rc -eq 0 ]; then 1790 check_route "172.16.104.0/24 dev dummy2 proto kernel scope link src 172.16.104.0 metric 260" 1791 rc=$? 1792 fi 1793 log_test $rc 0 "Modify metric of .0/24 address" 1794 1795 run_cmd "$IP addr flush dev dummy2" 1796 run_cmd "$IP addr add dev dummy2 172.16.104.1/32 peer 172.16.104.2 metric 260" 1797 rc=$? 1798 if [ $rc -eq 0 ]; then 1799 check_route "172.16.104.2 dev dummy2 proto kernel scope link src 172.16.104.1 metric 260" 1800 rc=$? 1801 fi 1802 log_test $rc 0 "Set metric of address with peer route" 1803 1804 run_cmd "$IP addr change dev dummy2 172.16.104.1/32 peer 172.16.104.3 metric 261" 1805 rc=$? 1806 if [ $rc -eq 0 ]; then 1807 check_route "172.16.104.3 dev dummy2 proto kernel scope link src 172.16.104.1 metric 261" 1808 rc=$? 1809 fi 1810 log_test $rc 0 "Modify metric and peer address for peer route" 1811 1812 $IP li del dummy1 1813 $IP li del dummy2 1814 cleanup 1815} 1816 1817ipv4_route_metrics_test() 1818{ 1819 local rc 1820 1821 echo 1822 echo "IPv4 route add / append tests" 1823 1824 route_setup 1825 1826 run_cmd "$IP ro add 172.16.111.0/24 via 172.16.101.2 mtu 1400" 1827 rc=$? 1828 if [ $rc -eq 0 ]; then 1829 check_route "172.16.111.0/24 via 172.16.101.2 dev veth1 mtu 1400" 1830 rc=$? 1831 fi 1832 log_test $rc 0 "Single path route with mtu metric" 1833 1834 1835 run_cmd "$IP ro add 172.16.112.0/24 mtu 1400 nexthop via 172.16.101.2 nexthop via 172.16.103.2" 1836 rc=$? 1837 if [ $rc -eq 0 ]; then 1838 check_route "172.16.112.0/24 mtu 1400 nexthop via 172.16.101.2 dev veth1 weight 1 nexthop via 172.16.103.2 dev veth3 weight 1" 1839 rc=$? 1840 fi 1841 log_test $rc 0 "Multipath route with mtu metric" 1842 1843 $IP ro add 172.16.104.0/24 via 172.16.101.2 mtu 1300 1844 run_cmd "ip netns exec ns1 ping -w1 -c1 -s 1500 172.16.104.1" 1845 log_test $? 0 "Using route with mtu metric" 1846 1847 run_cmd "$IP ro add 172.16.111.0/24 via 172.16.101.2 congctl lock foo" 1848 log_test $? 2 "Invalid metric (fails metric_convert)" 1849 1850 route_cleanup 1851} 1852 1853ipv4_del_addr_test() 1854{ 1855 echo 1856 echo "IPv4 delete address route tests" 1857 1858 setup 1859 1860 set -e 1861 $IP li add dummy1 type dummy 1862 $IP li set dummy1 up 1863 $IP li add dummy2 type dummy 1864 $IP li set dummy2 up 1865 $IP li add red type vrf table 1111 1866 $IP li set red up 1867 $IP ro add vrf red unreachable default 1868 $IP li set dummy2 vrf red 1869 1870 $IP addr add dev dummy1 172.16.104.1/24 1871 $IP addr add dev dummy1 172.16.104.11/24 1872 $IP addr add dev dummy1 172.16.104.12/24 1873 $IP addr add dev dummy1 172.16.104.13/24 1874 $IP addr add dev dummy2 172.16.104.1/24 1875 $IP addr add dev dummy2 172.16.104.11/24 1876 $IP addr add dev dummy2 172.16.104.12/24 1877 $IP route add 172.16.105.0/24 via 172.16.104.2 src 172.16.104.11 1878 $IP route add 172.16.106.0/24 dev lo src 172.16.104.12 1879 $IP route add table 0 172.16.107.0/24 via 172.16.104.2 src 172.16.104.13 1880 $IP route add vrf red 172.16.105.0/24 via 172.16.104.2 src 172.16.104.11 1881 $IP route add vrf red 172.16.106.0/24 dev lo src 172.16.104.12 1882 set +e 1883 1884 # removing address from device in vrf should only remove route from vrf table 1885 echo " Regular FIB info" 1886 1887 $IP addr del dev dummy2 172.16.104.11/24 1888 $IP ro ls vrf red | grep -q 172.16.105.0/24 1889 log_test $? 1 "Route removed from VRF when source address deleted" 1890 1891 $IP ro ls | grep -q 172.16.105.0/24 1892 log_test $? 0 "Route in default VRF not removed" 1893 1894 $IP addr add dev dummy2 172.16.104.11/24 1895 $IP route add vrf red 172.16.105.0/24 via 172.16.104.2 src 172.16.104.11 1896 1897 $IP addr del dev dummy1 172.16.104.11/24 1898 $IP ro ls | grep -q 172.16.105.0/24 1899 log_test $? 1 "Route removed in default VRF when source address deleted" 1900 1901 $IP ro ls vrf red | grep -q 172.16.105.0/24 1902 log_test $? 0 "Route in VRF is not removed by address delete" 1903 1904 # removing address from device in vrf should only remove route from vrf 1905 # table even when the associated fib info only differs in table ID 1906 echo " Identical FIB info with different table ID" 1907 1908 $IP addr del dev dummy2 172.16.104.12/24 1909 $IP ro ls vrf red | grep -q 172.16.106.0/24 1910 log_test $? 1 "Route removed from VRF when source address deleted" 1911 1912 $IP ro ls | grep -q 172.16.106.0/24 1913 log_test $? 0 "Route in default VRF not removed" 1914 1915 $IP addr add dev dummy2 172.16.104.12/24 1916 $IP route add vrf red 172.16.106.0/24 dev lo src 172.16.104.12 1917 1918 $IP addr del dev dummy1 172.16.104.12/24 1919 $IP ro ls | grep -q 172.16.106.0/24 1920 log_test $? 1 "Route removed in default VRF when source address deleted" 1921 1922 $IP ro ls vrf red | grep -q 172.16.106.0/24 1923 log_test $? 0 "Route in VRF is not removed by address delete" 1924 1925 # removing address from device in default vrf should remove route from 1926 # the default vrf even when route was inserted with a table ID of 0. 1927 echo " Table ID 0" 1928 1929 $IP addr del dev dummy1 172.16.104.13/24 1930 $IP ro ls | grep -q 172.16.107.0/24 1931 log_test $? 1 "Route removed in default VRF when source address deleted" 1932 1933 $IP li del dummy1 1934 $IP li del dummy2 1935 cleanup 1936} 1937 1938ipv6_del_addr_test() 1939{ 1940 echo 1941 echo "IPv6 delete address route tests" 1942 1943 setup 1944 1945 set -e 1946 for i in $(seq 6); do 1947 $IP li add dummy${i} up type dummy 1948 done 1949 1950 $IP li add red up type vrf table 1111 1951 $IP ro add vrf red unreachable default 1952 for i in $(seq 4 6); do 1953 $IP li set dummy${i} vrf red 1954 done 1955 1956 $IP addr add dev dummy1 fe80::1/128 1957 $IP addr add dev dummy1 2001:db8:101::1/64 1958 $IP addr add dev dummy1 2001:db8:101::10/64 1959 $IP addr add dev dummy1 2001:db8:101::11/64 1960 $IP addr add dev dummy1 2001:db8:101::12/64 1961 $IP addr add dev dummy1 2001:db8:101::13/64 1962 $IP addr add dev dummy1 2001:db8:101::14/64 1963 $IP addr add dev dummy1 2001:db8:101::15/64 1964 $IP addr add dev dummy2 fe80::1/128 1965 $IP addr add dev dummy2 2001:db8:101::1/64 1966 $IP addr add dev dummy2 2001:db8:101::11/64 1967 $IP addr add dev dummy3 fe80::1/128 1968 1969 $IP addr add dev dummy4 2001:db8:101::1/64 1970 $IP addr add dev dummy4 2001:db8:101::10/64 1971 $IP addr add dev dummy4 2001:db8:101::11/64 1972 $IP addr add dev dummy4 2001:db8:101::12/64 1973 $IP addr add dev dummy4 2001:db8:101::13/64 1974 $IP addr add dev dummy4 2001:db8:101::14/64 1975 $IP addr add dev dummy5 2001:db8:101::1/64 1976 $IP addr add dev dummy5 2001:db8:101::11/64 1977 1978 # Single device using src address 1979 $IP route add 2001:db8:110::/64 dev dummy3 src 2001:db8:101::10 1980 # Two devices with the same source address 1981 $IP route add 2001:db8:111::/64 dev dummy3 src 2001:db8:101::11 1982 # VRF with single device using src address 1983 $IP route add vrf red 2001:db8:110::/64 dev dummy6 src 2001:db8:101::10 1984 # VRF with two devices using src address 1985 $IP route add vrf red 2001:db8:111::/64 dev dummy6 src 2001:db8:101::11 1986 # src address and nexthop dev in same VRF 1987 $IP route add 2001:db8:112::/64 dev dummy3 src 2001:db8:101::12 1988 $IP route add vrf red 2001:db8:112::/64 dev dummy6 src 2001:db8:101::12 1989 # src address and nexthop device in different VRF 1990 $IP route add 2001:db8:113::/64 dev lo src 2001:db8:101::13 1991 $IP route add vrf red 2001:db8:113::/64 dev lo src 2001:db8:101::13 1992 # table ID 0 1993 $IP route add table 0 2001:db8:115::/64 via 2001:db8:101::2 src 2001:db8:101::15 1994 # Link local source route 1995 $IP route add 2001:db8:116::/64 dev dummy2 src fe80::1 1996 $IP route add 2001:db8:117::/64 dev dummy3 src fe80::1 1997 set +e 1998 1999 echo " Single device using src address" 2000 2001 $IP addr del dev dummy1 2001:db8:101::10/64 2002 $IP -6 route show | grep -q "src 2001:db8:101::10 " 2003 log_test $? 1 "Prefsrc removed when src address removed on other device" 2004 2005 echo " Two devices with the same source address" 2006 2007 $IP addr del dev dummy1 2001:db8:101::11/64 2008 $IP -6 route show | grep -q "src 2001:db8:101::11 " 2009 log_test $? 0 "Prefsrc not removed when src address exist on other device" 2010 2011 $IP addr del dev dummy2 2001:db8:101::11/64 2012 $IP -6 route show | grep -q "src 2001:db8:101::11 " 2013 log_test $? 1 "Prefsrc removed when src address removed on all devices" 2014 2015 echo " VRF with single device using src address" 2016 2017 $IP addr del dev dummy4 2001:db8:101::10/64 2018 $IP -6 route show vrf red | grep -q "src 2001:db8:101::10 " 2019 log_test $? 1 "Prefsrc removed when src address removed on other device" 2020 2021 echo " VRF with two devices using src address" 2022 2023 $IP addr del dev dummy4 2001:db8:101::11/64 2024 $IP -6 route show vrf red | grep -q "src 2001:db8:101::11 " 2025 log_test $? 0 "Prefsrc not removed when src address exist on other device" 2026 2027 $IP addr del dev dummy5 2001:db8:101::11/64 2028 $IP -6 route show vrf red | grep -q "src 2001:db8:101::11 " 2029 log_test $? 1 "Prefsrc removed when src address removed on all devices" 2030 2031 echo " src address and nexthop dev in same VRF" 2032 2033 $IP addr del dev dummy4 2001:db8:101::12/64 2034 $IP -6 route show vrf red | grep -q "src 2001:db8:101::12 " 2035 log_test $? 1 "Prefsrc removed from VRF when source address deleted" 2036 $IP -6 route show | grep -q " src 2001:db8:101::12 " 2037 log_test $? 0 "Prefsrc in default VRF not removed" 2038 2039 $IP addr add dev dummy4 2001:db8:101::12/64 2040 $IP route replace vrf red 2001:db8:112::/64 dev dummy6 src 2001:db8:101::12 2041 $IP addr del dev dummy1 2001:db8:101::12/64 2042 $IP -6 route show vrf red | grep -q "src 2001:db8:101::12 " 2043 log_test $? 0 "Prefsrc not removed from VRF when source address exist" 2044 $IP -6 route show | grep -q " src 2001:db8:101::12 " 2045 log_test $? 1 "Prefsrc in default VRF removed" 2046 2047 echo " src address and nexthop device in different VRF" 2048 2049 $IP addr del dev dummy4 2001:db8:101::13/64 2050 $IP -6 route show vrf red | grep -q "src 2001:db8:101::13 " 2051 log_test $? 0 "Prefsrc not removed from VRF when nexthop dev in diff VRF" 2052 $IP -6 route show | grep -q "src 2001:db8:101::13 " 2053 log_test $? 0 "Prefsrc not removed in default VRF" 2054 2055 $IP addr add dev dummy4 2001:db8:101::13/64 2056 $IP addr del dev dummy1 2001:db8:101::13/64 2057 $IP -6 route show vrf red | grep -q "src 2001:db8:101::13 " 2058 log_test $? 1 "Prefsrc removed from VRF when nexthop dev in diff VRF" 2059 $IP -6 route show | grep -q "src 2001:db8:101::13 " 2060 log_test $? 1 "Prefsrc removed in default VRF" 2061 2062 echo " Table ID 0" 2063 2064 $IP addr del dev dummy1 2001:db8:101::15/64 2065 $IP -6 route show | grep -q "src 2001:db8:101::15" 2066 log_test $? 1 "Prefsrc removed from default VRF when source address deleted" 2067 2068 echo " Link local source route" 2069 $IP addr del dev dummy1 fe80::1/128 2070 $IP -6 route show | grep -q "2001:db8:116::/64 dev dummy2 src fe80::1" 2071 log_test $? 0 "Prefsrc not removed when delete ll addr from other dev" 2072 $IP addr del dev dummy2 fe80::1/128 2073 $IP -6 route show | grep -q "2001:db8:116::/64 dev dummy2 src fe80::1" 2074 log_test $? 1 "Prefsrc removed when delete ll addr" 2075 $IP -6 route show | grep -q "2001:db8:117::/64 dev dummy3 src fe80::1" 2076 log_test $? 0 "Prefsrc not removed when delete ll addr from other dev" 2077 $IP addr add dev dummy1 fe80::1/128 2078 $IP addr del dev dummy3 fe80::1/128 2079 $IP -6 route show | grep -q "2001:db8:117::/64 dev dummy3 src fe80::1" 2080 log_test $? 1 "Prefsrc removed even ll addr still exist on other dev" 2081 2082 for i in $(seq 6); do 2083 $IP li del dummy${i} 2084 done 2085 cleanup 2086} 2087 2088ipv4_route_v6_gw_test() 2089{ 2090 local rc 2091 2092 echo 2093 echo "IPv4 route with IPv6 gateway tests" 2094 2095 route_setup 2096 sleep 2 2097 2098 # 2099 # single path route 2100 # 2101 run_cmd "$IP ro add 172.16.104.0/24 via inet6 2001:db8:101::2" 2102 rc=$? 2103 log_test $rc 0 "Single path route with IPv6 gateway" 2104 if [ $rc -eq 0 ]; then 2105 check_route "172.16.104.0/24 via inet6 2001:db8:101::2 dev veth1" 2106 fi 2107 2108 run_cmd "ip netns exec ns1 ping -w1 -c1 172.16.104.1" 2109 log_test $rc 0 "Single path route with IPv6 gateway - ping" 2110 2111 run_cmd "$IP ro del 172.16.104.0/24 via inet6 2001:db8:101::2" 2112 rc=$? 2113 log_test $rc 0 "Single path route delete" 2114 if [ $rc -eq 0 ]; then 2115 check_route "172.16.112.0/24" 2116 fi 2117 2118 # 2119 # multipath - v6 then v4 2120 # 2121 run_cmd "$IP ro add 172.16.104.0/24 nexthop via inet6 2001:db8:101::2 dev veth1 nexthop via 172.16.103.2 dev veth3" 2122 rc=$? 2123 log_test $rc 0 "Multipath route add - v6 nexthop then v4" 2124 if [ $rc -eq 0 ]; then 2125 check_route "172.16.104.0/24 nexthop via inet6 2001:db8:101::2 dev veth1 weight 1 nexthop via 172.16.103.2 dev veth3 weight 1" 2126 fi 2127 2128 run_cmd "$IP ro del 172.16.104.0/24 nexthop via 172.16.103.2 dev veth3 nexthop via inet6 2001:db8:101::2 dev veth1" 2129 log_test $? 2 " Multipath route delete - nexthops in wrong order" 2130 2131 run_cmd "$IP ro del 172.16.104.0/24 nexthop via inet6 2001:db8:101::2 dev veth1 nexthop via 172.16.103.2 dev veth3" 2132 log_test $? 0 " Multipath route delete exact match" 2133 2134 # 2135 # multipath - v4 then v6 2136 # 2137 run_cmd "$IP ro add 172.16.104.0/24 nexthop via 172.16.103.2 dev veth3 nexthop via inet6 2001:db8:101::2 dev veth1" 2138 rc=$? 2139 log_test $rc 0 "Multipath route add - v4 nexthop then v6" 2140 if [ $rc -eq 0 ]; then 2141 check_route "172.16.104.0/24 nexthop via 172.16.103.2 dev veth3 weight 1 nexthop via inet6 2001:db8:101::2 dev veth1 weight 1" 2142 fi 2143 2144 run_cmd "$IP ro del 172.16.104.0/24 nexthop via inet6 2001:db8:101::2 dev veth1 nexthop via 172.16.103.2 dev veth3" 2145 log_test $? 2 " Multipath route delete - nexthops in wrong order" 2146 2147 run_cmd "$IP ro del 172.16.104.0/24 nexthop via 172.16.103.2 dev veth3 nexthop via inet6 2001:db8:101::2 dev veth1" 2148 log_test $? 0 " Multipath route delete exact match" 2149 2150 route_cleanup 2151} 2152 2153socat_check() 2154{ 2155 if [ ! -x "$(command -v socat)" ]; then 2156 echo "socat command not found. Skipping test" 2157 return 1 2158 fi 2159 2160 return 0 2161} 2162 2163iptables_check() 2164{ 2165 iptables -t mangle -L OUTPUT &> /dev/null 2166 if [ $? -ne 0 ]; then 2167 echo "iptables configuration not supported. Skipping test" 2168 return 1 2169 fi 2170 2171 return 0 2172} 2173 2174ip6tables_check() 2175{ 2176 ip6tables -t mangle -L OUTPUT &> /dev/null 2177 if [ $? -ne 0 ]; then 2178 echo "ip6tables configuration not supported. Skipping test" 2179 return 1 2180 fi 2181 2182 return 0 2183} 2184 2185ipv4_mangle_test() 2186{ 2187 local rc 2188 2189 echo 2190 echo "IPv4 mangling tests" 2191 2192 socat_check || return 1 2193 iptables_check || return 1 2194 2195 route_setup 2196 sleep 2 2197 2198 local tmp_file=$(mktemp) 2199 ip netns exec ns2 socat UDP4-LISTEN:54321,fork $tmp_file & 2200 2201 # Add a FIB rule and a route that will direct our connection to the 2202 # listening server. 2203 $IP rule add pref 100 ipproto udp sport 12345 dport 54321 table 123 2204 $IP route add table 123 172.16.101.0/24 dev veth1 2205 2206 # Add an unreachable route to the main table that will block our 2207 # connection in case the FIB rule is not hit. 2208 $IP route add unreachable 172.16.101.2/32 2209 2210 run_cmd "echo a | $NS_EXEC socat STDIN UDP4:172.16.101.2:54321,sourceport=12345" 2211 log_test $? 0 " Connection with correct parameters" 2212 2213 run_cmd "echo a | $NS_EXEC socat STDIN UDP4:172.16.101.2:54321,sourceport=11111" 2214 log_test $? 1 " Connection with incorrect parameters" 2215 2216 # Add a mangling rule and make sure connection is still successful. 2217 $NS_EXEC iptables -t mangle -A OUTPUT -j MARK --set-mark 1 2218 2219 run_cmd "echo a | $NS_EXEC socat STDIN UDP4:172.16.101.2:54321,sourceport=12345" 2220 log_test $? 0 " Connection with correct parameters - mangling" 2221 2222 # Delete the mangling rule and make sure connection is still 2223 # successful. 2224 $NS_EXEC iptables -t mangle -D OUTPUT -j MARK --set-mark 1 2225 2226 run_cmd "echo a | $NS_EXEC socat STDIN UDP4:172.16.101.2:54321,sourceport=12345" 2227 log_test $? 0 " Connection with correct parameters - no mangling" 2228 2229 # Verify connections were indeed successful on server side. 2230 [[ $(cat $tmp_file | wc -l) -eq 3 ]] 2231 log_test $? 0 " Connection check - server side" 2232 2233 $IP route del unreachable 172.16.101.2/32 2234 $IP route del table 123 172.16.101.0/24 dev veth1 2235 $IP rule del pref 100 2236 2237 { kill %% && wait %%; } 2>/dev/null 2238 rm $tmp_file 2239 2240 route_cleanup 2241} 2242 2243ipv6_mangle_test() 2244{ 2245 local rc 2246 2247 echo 2248 echo "IPv6 mangling tests" 2249 2250 socat_check || return 1 2251 ip6tables_check || return 1 2252 2253 route_setup 2254 sleep 2 2255 2256 local tmp_file=$(mktemp) 2257 ip netns exec ns2 socat UDP6-LISTEN:54321,fork $tmp_file & 2258 2259 # Add a FIB rule and a route that will direct our connection to the 2260 # listening server. 2261 $IP -6 rule add pref 100 ipproto udp sport 12345 dport 54321 table 123 2262 $IP -6 route add table 123 2001:db8:101::/64 dev veth1 2263 2264 # Add an unreachable route to the main table that will block our 2265 # connection in case the FIB rule is not hit. 2266 $IP -6 route add unreachable 2001:db8:101::2/128 2267 2268 run_cmd "echo a | $NS_EXEC socat STDIN UDP6:[2001:db8:101::2]:54321,sourceport=12345" 2269 log_test $? 0 " Connection with correct parameters" 2270 2271 run_cmd "echo a | $NS_EXEC socat STDIN UDP6:[2001:db8:101::2]:54321,sourceport=11111" 2272 log_test $? 1 " Connection with incorrect parameters" 2273 2274 # Add a mangling rule and make sure connection is still successful. 2275 $NS_EXEC ip6tables -t mangle -A OUTPUT -j MARK --set-mark 1 2276 2277 run_cmd "echo a | $NS_EXEC socat STDIN UDP6:[2001:db8:101::2]:54321,sourceport=12345" 2278 log_test $? 0 " Connection with correct parameters - mangling" 2279 2280 # Delete the mangling rule and make sure connection is still 2281 # successful. 2282 $NS_EXEC ip6tables -t mangle -D OUTPUT -j MARK --set-mark 1 2283 2284 run_cmd "echo a | $NS_EXEC socat STDIN UDP6:[2001:db8:101::2]:54321,sourceport=12345" 2285 log_test $? 0 " Connection with correct parameters - no mangling" 2286 2287 # Verify connections were indeed successful on server side. 2288 [[ $(cat $tmp_file | wc -l) -eq 3 ]] 2289 log_test $? 0 " Connection check - server side" 2290 2291 $IP -6 route del unreachable 2001:db8:101::2/128 2292 $IP -6 route del table 123 2001:db8:101::/64 dev veth1 2293 $IP -6 rule del pref 100 2294 2295 { kill %% && wait %%; } 2>/dev/null 2296 rm $tmp_file 2297 2298 route_cleanup 2299} 2300 2301ip_neigh_get_check() 2302{ 2303 ip neigh help 2>&1 | grep -q 'ip neigh get' 2304 if [ $? -ne 0 ]; then 2305 echo "iproute2 command does not support neigh get. Skipping test" 2306 return 1 2307 fi 2308 2309 return 0 2310} 2311 2312ipv4_bcast_neigh_test() 2313{ 2314 local rc 2315 2316 echo 2317 echo "IPv4 broadcast neighbour tests" 2318 2319 ip_neigh_get_check || return 1 2320 2321 setup 2322 2323 set -e 2324 run_cmd "$IP neigh add 192.0.2.111 lladdr 00:11:22:33:44:55 nud perm dev dummy0" 2325 run_cmd "$IP neigh add 192.0.2.255 lladdr 00:11:22:33:44:55 nud perm dev dummy0" 2326 2327 run_cmd "$IP neigh get 192.0.2.111 dev dummy0" 2328 run_cmd "$IP neigh get 192.0.2.255 dev dummy0" 2329 2330 run_cmd "$IP address add 192.0.2.1/24 broadcast 192.0.2.111 dev dummy0" 2331 2332 run_cmd "$IP neigh add 203.0.113.111 nud failed dev dummy0" 2333 run_cmd "$IP neigh add 203.0.113.255 nud failed dev dummy0" 2334 2335 run_cmd "$IP neigh get 203.0.113.111 dev dummy0" 2336 run_cmd "$IP neigh get 203.0.113.255 dev dummy0" 2337 2338 run_cmd "$IP address add 203.0.113.1/24 broadcast 203.0.113.111 dev dummy0" 2339 set +e 2340 2341 run_cmd "$IP neigh get 192.0.2.111 dev dummy0" 2342 log_test $? 0 "Resolved neighbour for broadcast address" 2343 2344 run_cmd "$IP neigh get 192.0.2.255 dev dummy0" 2345 log_test $? 0 "Resolved neighbour for network broadcast address" 2346 2347 run_cmd "$IP neigh get 203.0.113.111 dev dummy0" 2348 log_test $? 2 "Unresolved neighbour for broadcast address" 2349 2350 run_cmd "$IP neigh get 203.0.113.255 dev dummy0" 2351 log_test $? 2 "Unresolved neighbour for network broadcast address" 2352 2353 cleanup 2354} 2355 2356mpath_dep_check() 2357{ 2358 if [ ! -x "$(command -v mausezahn)" ]; then 2359 echo "mausezahn command not found. Skipping test" 2360 return 1 2361 fi 2362 2363 if [ ! -x "$(command -v jq)" ]; then 2364 echo "jq command not found. Skipping test" 2365 return 1 2366 fi 2367 2368 if [ ! -x "$(command -v bc)" ]; then 2369 echo "bc command not found. Skipping test" 2370 return 1 2371 fi 2372 2373 if [ ! -x "$(command -v perf)" ]; then 2374 echo "perf command not found. Skipping test" 2375 return 1 2376 fi 2377 2378 perf list fib:* | grep -q fib_table_lookup 2379 if [ $? -ne 0 ]; then 2380 echo "IPv4 FIB tracepoint not found. Skipping test" 2381 return 1 2382 fi 2383 2384 perf list fib6:* | grep -q fib6_table_lookup 2385 if [ $? -ne 0 ]; then 2386 echo "IPv6 FIB tracepoint not found. Skipping test" 2387 return 1 2388 fi 2389 2390 return 0 2391} 2392 2393link_stats_get() 2394{ 2395 local ns=$1; shift 2396 local dev=$1; shift 2397 local dir=$1; shift 2398 local stat=$1; shift 2399 2400 ip -n $ns -j -s link show dev $dev \ 2401 | jq '.[]["stats64"]["'$dir'"]["'$stat'"]' 2402} 2403 2404list_rcv_eval() 2405{ 2406 local file=$1; shift 2407 local expected=$1; shift 2408 2409 local count=$(tail -n 1 $file | jq '.["counter-value"] | tonumber | floor') 2410 local ratio=$(echo "scale=2; $count / $expected" | bc -l) 2411 local res=$(echo "$ratio >= 0.95" | bc) 2412 [[ $res -eq 1 ]] 2413 log_test $? 0 "Multipath route hit ratio ($ratio)" 2414} 2415 2416ipv4_mpath_list_test() 2417{ 2418 echo 2419 echo "IPv4 multipath list receive tests" 2420 2421 mpath_dep_check || return 1 2422 2423 route_setup 2424 2425 set -e 2426 run_cmd "ip netns exec ns1 ethtool -K veth1 tcp-segmentation-offload off" 2427 2428 run_cmd "ip netns exec ns2 bash -c \"echo 20000 > /sys/class/net/veth2/gro_flush_timeout\"" 2429 run_cmd "ip netns exec ns2 bash -c \"echo 1 > /sys/class/net/veth2/napi_defer_hard_irqs\"" 2430 run_cmd "ip netns exec ns2 ethtool -K veth2 generic-receive-offload on" 2431 run_cmd "ip -n ns2 link add name nh1 up type dummy" 2432 run_cmd "ip -n ns2 link add name nh2 up type dummy" 2433 run_cmd "ip -n ns2 address add 172.16.201.1/24 dev nh1" 2434 run_cmd "ip -n ns2 address add 172.16.202.1/24 dev nh2" 2435 run_cmd "ip -n ns2 neigh add 172.16.201.2 lladdr 00:11:22:33:44:55 nud perm dev nh1" 2436 run_cmd "ip -n ns2 neigh add 172.16.202.2 lladdr 00:aa:bb:cc:dd:ee nud perm dev nh2" 2437 run_cmd "ip -n ns2 route add 203.0.113.0/24 2438 nexthop via 172.16.201.2 nexthop via 172.16.202.2" 2439 run_cmd "ip netns exec ns2 sysctl -qw net.ipv4.fib_multipath_hash_policy=1" 2440 run_cmd "ip netns exec ns2 sysctl -qw net.ipv4.conf.veth2.rp_filter=0" 2441 run_cmd "ip netns exec ns2 sysctl -qw net.ipv4.conf.all.rp_filter=0" 2442 run_cmd "ip netns exec ns2 sysctl -qw net.ipv4.conf.default.rp_filter=0" 2443 set +e 2444 2445 local dmac=$(ip -n ns2 -j link show dev veth2 | jq -r '.[]["address"]') 2446 local tmp_file=$(mktemp) 2447 local cmd="ip netns exec ns1 mausezahn veth1 -a own -b $dmac 2448 -A 172.16.101.1 -B 203.0.113.1 -t udp 'sp=12345,dp=0-65535' -q" 2449 2450 # Packets forwarded in a list using a multipath route must not reuse a 2451 # cached result so that a flow always hits the same nexthop. In other 2452 # words, the FIB lookup tracepoint needs to be triggered for every 2453 # packet. 2454 local t0_rx_pkts=$(link_stats_get ns2 veth2 rx packets) 2455 run_cmd "perf stat -a -e fib:fib_table_lookup --filter 'err == 0' -j -o $tmp_file -- $cmd" 2456 local t1_rx_pkts=$(link_stats_get ns2 veth2 rx packets) 2457 local diff=$(echo $t1_rx_pkts - $t0_rx_pkts | bc -l) 2458 list_rcv_eval $tmp_file $diff 2459 2460 rm $tmp_file 2461 route_cleanup 2462} 2463 2464ipv6_mpath_list_test() 2465{ 2466 echo 2467 echo "IPv6 multipath list receive tests" 2468 2469 mpath_dep_check || return 1 2470 2471 route_setup 2472 2473 set -e 2474 run_cmd "ip netns exec ns1 ethtool -K veth1 tcp-segmentation-offload off" 2475 2476 run_cmd "ip netns exec ns2 bash -c \"echo 20000 > /sys/class/net/veth2/gro_flush_timeout\"" 2477 run_cmd "ip netns exec ns2 bash -c \"echo 1 > /sys/class/net/veth2/napi_defer_hard_irqs\"" 2478 run_cmd "ip netns exec ns2 ethtool -K veth2 generic-receive-offload on" 2479 run_cmd "ip -n ns2 link add name nh1 up type dummy" 2480 run_cmd "ip -n ns2 link add name nh2 up type dummy" 2481 run_cmd "ip -n ns2 -6 address add 2001:db8:201::1/64 dev nh1" 2482 run_cmd "ip -n ns2 -6 address add 2001:db8:202::1/64 dev nh2" 2483 run_cmd "ip -n ns2 -6 neigh add 2001:db8:201::2 lladdr 00:11:22:33:44:55 nud perm dev nh1" 2484 run_cmd "ip -n ns2 -6 neigh add 2001:db8:202::2 lladdr 00:aa:bb:cc:dd:ee nud perm dev nh2" 2485 run_cmd "ip -n ns2 -6 route add 2001:db8:301::/64 2486 nexthop via 2001:db8:201::2 nexthop via 2001:db8:202::2" 2487 run_cmd "ip netns exec ns2 sysctl -qw net.ipv6.fib_multipath_hash_policy=1" 2488 set +e 2489 2490 local dmac=$(ip -n ns2 -j link show dev veth2 | jq -r '.[]["address"]') 2491 local tmp_file=$(mktemp) 2492 local cmd="ip netns exec ns1 mausezahn -6 veth1 -a own -b $dmac 2493 -A 2001:db8:101::1 -B 2001:db8:301::1 -t udp 'sp=12345,dp=0-65535' -q" 2494 2495 # Packets forwarded in a list using a multipath route must not reuse a 2496 # cached result so that a flow always hits the same nexthop. In other 2497 # words, the FIB lookup tracepoint needs to be triggered for every 2498 # packet. 2499 local t0_rx_pkts=$(link_stats_get ns2 veth2 rx packets) 2500 run_cmd "perf stat -a -e fib6:fib6_table_lookup --filter 'err == 0' -j -o $tmp_file -- $cmd" 2501 local t1_rx_pkts=$(link_stats_get ns2 veth2 rx packets) 2502 local diff=$(echo $t1_rx_pkts - $t0_rx_pkts | bc -l) 2503 list_rcv_eval $tmp_file $diff 2504 2505 rm $tmp_file 2506 route_cleanup 2507} 2508 2509################################################################################ 2510# usage 2511 2512usage() 2513{ 2514 cat <<EOF 2515usage: ${0##*/} OPTS 2516 2517 -t <test> Test(s) to run (default: all) 2518 (options: $TESTS) 2519 -p Pause on fail 2520 -P Pause after each test before cleanup 2521 -v verbose mode (show commands and output) 2522EOF 2523} 2524 2525################################################################################ 2526# main 2527 2528trap cleanup EXIT 2529 2530while getopts :t:pPhv o 2531do 2532 case $o in 2533 t) TESTS=$OPTARG;; 2534 p) PAUSE_ON_FAIL=yes;; 2535 P) PAUSE=yes;; 2536 v) VERBOSE=$(($VERBOSE + 1));; 2537 h) usage; exit 0;; 2538 *) usage; exit 1;; 2539 esac 2540done 2541 2542PEER_CMD="ip netns exec ${PEER_NS}" 2543 2544# make sure we don't pause twice 2545[ "${PAUSE}" = "yes" ] && PAUSE_ON_FAIL=no 2546 2547if [ "$(id -u)" -ne 0 ];then 2548 echo "SKIP: Need root privileges" 2549 exit $ksft_skip; 2550fi 2551 2552if [ ! -x "$(command -v ip)" ]; then 2553 echo "SKIP: Could not run test without ip tool" 2554 exit $ksft_skip 2555fi 2556 2557ip route help 2>&1 | grep -q fibmatch 2558if [ $? -ne 0 ]; then 2559 echo "SKIP: iproute2 too old, missing fibmatch" 2560 exit $ksft_skip 2561fi 2562 2563# start clean 2564cleanup &> /dev/null 2565 2566for t in $TESTS 2567do 2568 case $t in 2569 fib_unreg_test|unregister) fib_unreg_test;; 2570 fib_down_test|down) fib_down_test;; 2571 fib_carrier_test|carrier) fib_carrier_test;; 2572 fib_rp_filter_test|rp_filter) fib_rp_filter_test;; 2573 fib_nexthop_test|nexthop) fib_nexthop_test;; 2574 fib_notify_test|ipv4_notify) fib_notify_test;; 2575 fib6_notify_test|ipv6_notify) fib6_notify_test;; 2576 fib_suppress_test|suppress) fib_suppress_test;; 2577 ipv6_route_test|ipv6_rt) ipv6_route_test;; 2578 ipv4_route_test|ipv4_rt) ipv4_route_test;; 2579 ipv6_addr_metric) ipv6_addr_metric_test;; 2580 ipv4_addr_metric) ipv4_addr_metric_test;; 2581 ipv4_del_addr) ipv4_del_addr_test;; 2582 ipv6_del_addr) ipv6_del_addr_test;; 2583 ipv6_route_metrics) ipv6_route_metrics_test;; 2584 ipv4_route_metrics) ipv4_route_metrics_test;; 2585 ipv4_route_v6_gw) ipv4_route_v6_gw_test;; 2586 ipv4_mangle) ipv4_mangle_test;; 2587 ipv6_mangle) ipv6_mangle_test;; 2588 ipv4_bcast_neigh) ipv4_bcast_neigh_test;; 2589 fib6_gc_test|ipv6_gc) fib6_gc_test;; 2590 ipv4_mpath_list) ipv4_mpath_list_test;; 2591 ipv6_mpath_list) ipv6_mpath_list_test;; 2592 2593 help) echo "Test names: $TESTS"; exit 0;; 2594 esac 2595done 2596 2597if [ "$TESTS" != "none" ]; then 2598 printf "\nTests passed: %3d\n" ${nsuccess} 2599 printf "Tests failed: %3d\n" ${nfail} 2600fi 2601 2602exit $ret 2603