1#!/bin/bash 2# 3# This test is for checking rtnetlink callpaths, and get as much coverage as possible. 4# 5# set -e 6 7ALL_TESTS=" 8 kci_test_polrouting 9 kci_test_route_get 10 kci_test_addrlft 11 kci_test_promote_secondaries 12 kci_test_tc 13 kci_test_gre 14 kci_test_gretap 15 kci_test_ip6gretap 16 kci_test_erspan 17 kci_test_ip6erspan 18 kci_test_bridge 19 kci_test_addrlabel 20 kci_test_ifalias 21 kci_test_vrf 22 kci_test_encap 23 kci_test_macsec 24 kci_test_macsec_offload 25 kci_test_ipsec 26 kci_test_ipsec_offload 27 kci_test_fdb_get 28 kci_test_neigh_get 29 kci_test_bridge_parent_id 30 kci_test_address_proto 31" 32 33devdummy="test-dummy0" 34VERBOSE=0 35PAUSE=no 36PAUSE_ON_FAIL=no 37 38source lib.sh 39 40# set global exit status, but never reset nonzero one. 41check_err() 42{ 43 if [ $ret -eq 0 ]; then 44 ret=$1 45 fi 46} 47 48# same but inverted -- used when command must fail for test to pass 49check_fail() 50{ 51 if [ $1 -eq 0 ]; then 52 ret=1 53 fi 54} 55 56run_cmd_common() 57{ 58 local cmd="$*" 59 local out 60 if [ "$VERBOSE" = "1" ]; then 61 echo "COMMAND: ${cmd}" 62 fi 63 out=$($cmd 2>&1) 64 rc=$? 65 if [ "$VERBOSE" = "1" -a -n "$out" ]; then 66 echo " $out" 67 fi 68 return $rc 69} 70 71run_cmd() { 72 run_cmd_common "$@" 73 rc=$? 74 check_err $rc 75 return $rc 76} 77run_cmd_fail() 78{ 79 run_cmd_common "$@" 80 rc=$? 81 check_fail $rc 82 return $rc 83} 84 85run_cmd_grep_common() 86{ 87 local find="$1"; shift 88 local cmd="$*" 89 local out 90 if [ "$VERBOSE" = "1" ]; then 91 echo "COMMAND: ${cmd} 2>&1 | grep -q '${find}'" 92 fi 93 out=$($cmd 2>&1 | grep -q "${find}" 2>&1) 94 return $? 95} 96 97run_cmd_grep() { 98 run_cmd_grep_common "$@" 99 rc=$? 100 check_err $rc 101 return $rc 102} 103 104run_cmd_grep_fail() 105{ 106 run_cmd_grep_common "$@" 107 rc=$? 108 check_fail $rc 109 return $rc 110} 111 112end_test() 113{ 114 echo "$*" 115 [ "${VERBOSE}" = "1" ] && echo 116 117 if [[ $ret -ne 0 ]] && [[ "${PAUSE_ON_FAIL}" = "yes" ]]; then 118 echo "Hit enter to continue" 119 read a 120 fi; 121 122 if [ "${PAUSE}" = "yes" ]; then 123 echo "Hit enter to continue" 124 read a 125 fi 126 127} 128 129 130kci_add_dummy() 131{ 132 run_cmd ip link add name "$devdummy" type dummy 133 run_cmd ip link set "$devdummy" up 134} 135 136kci_del_dummy() 137{ 138 run_cmd ip link del dev "$devdummy" 139} 140 141kci_test_netconf() 142{ 143 dev="$1" 144 r=$ret 145 run_cmd ip netconf show dev "$dev" 146 for f in 4 6; do 147 run_cmd ip -$f netconf show dev "$dev" 148 done 149 150 if [ $ret -ne 0 ] ;then 151 end_test "FAIL: ip netconf show $dev" 152 test $r -eq 0 && ret=0 153 return 1 154 fi 155} 156 157# add a bridge with vlans on top 158kci_test_bridge() 159{ 160 devbr="test-br0" 161 vlandev="testbr-vlan1" 162 163 local ret=0 164 run_cmd ip link add name "$devbr" type bridge 165 run_cmd ip link set dev "$devdummy" master "$devbr" 166 run_cmd ip link set "$devbr" up 167 run_cmd ip link add link "$devbr" name "$vlandev" type vlan id 1 168 run_cmd ip addr add dev "$vlandev" 10.200.7.23/30 169 run_cmd ip -6 addr add dev "$vlandev" dead:42::1234/64 170 run_cmd ip -d link 171 run_cmd ip r s t all 172 173 for name in "$devbr" "$vlandev" "$devdummy" ; do 174 kci_test_netconf "$name" 175 done 176 run_cmd ip -6 addr del dev "$vlandev" dead:42::1234/64 177 run_cmd ip link del dev "$vlandev" 178 run_cmd ip link del dev "$devbr" 179 180 if [ $ret -ne 0 ];then 181 end_test "FAIL: bridge setup" 182 return 1 183 fi 184 end_test "PASS: bridge setup" 185 186} 187 188kci_test_gre() 189{ 190 gredev=neta 191 rem=10.42.42.1 192 loc=10.0.0.1 193 194 local ret=0 195 run_cmd ip tunnel add $gredev mode gre remote $rem local $loc ttl 1 196 run_cmd ip link set $gredev up 197 run_cmd ip addr add 10.23.7.10 dev $gredev 198 run_cmd ip route add 10.23.8.0/30 dev $gredev 199 run_cmd ip addr add dev "$devdummy" 10.23.7.11/24 200 run_cmd ip link 201 run_cmd ip addr 202 203 kci_test_netconf "$gredev" 204 run_cmd ip addr del dev "$devdummy" 10.23.7.11/24 205 run_cmd ip link del $gredev 206 207 if [ $ret -ne 0 ];then 208 end_test "FAIL: gre tunnel endpoint" 209 return 1 210 fi 211 end_test "PASS: gre tunnel endpoint" 212} 213 214# tc uses rtnetlink too, for full tc testing 215# please see tools/testing/selftests/tc-testing. 216kci_test_tc() 217{ 218 dev=lo 219 local ret=0 220 221 run_cmd tc qdisc add dev "$dev" root handle 1: htb 222 run_cmd tc class add dev "$dev" parent 1: classid 1:10 htb rate 1mbit 223 run_cmd tc filter add dev "$dev" parent 1:0 prio 5 handle ffe: protocol ip u32 divisor 256 224 run_cmd tc filter add dev "$dev" parent 1:0 prio 5 handle ffd: protocol ip u32 divisor 256 225 run_cmd tc filter add dev "$dev" parent 1:0 prio 5 handle ffc: protocol ip u32 divisor 256 226 run_cmd tc filter add dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:3 u32 ht ffe:2: match ip src 10.0.0.3 flowid 1:10 227 run_cmd tc filter add dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:2 u32 ht ffe:2: match ip src 10.0.0.2 flowid 1:10 228 run_cmd tc filter show dev "$dev" parent 1:0 229 run_cmd tc filter del dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:3 u32 230 run_cmd tc filter show dev "$dev" parent 1:0 231 run_cmd tc qdisc del dev "$dev" root handle 1: htb 232 233 if [ $ret -ne 0 ];then 234 end_test "FAIL: tc htb hierarchy" 235 return 1 236 fi 237 end_test "PASS: tc htb hierarchy" 238 239} 240 241kci_test_polrouting() 242{ 243 local ret=0 244 run_cmd ip rule add fwmark 1 lookup 100 245 run_cmd ip route add local 0.0.0.0/0 dev lo table 100 246 run_cmd ip r s t all 247 run_cmd ip rule del fwmark 1 lookup 100 248 run_cmd ip route del local 0.0.0.0/0 dev lo table 100 249 250 if [ $ret -ne 0 ];then 251 end_test "FAIL: policy route test" 252 return 1 253 fi 254 end_test "PASS: policy routing" 255} 256 257kci_test_route_get() 258{ 259 local hash_policy=$(sysctl -n net.ipv4.fib_multipath_hash_policy) 260 261 local ret=0 262 run_cmd ip route get 127.0.0.1 263 run_cmd ip route get 127.0.0.1 dev "$devdummy" 264 run_cmd ip route get ::1 265 run_cmd ip route get fe80::1 dev "$devdummy" 266 run_cmd ip route get 127.0.0.1 from 127.0.0.1 oif lo tos 0x10 mark 0x1 267 run_cmd ip route get ::1 from ::1 iif lo oif lo tos 0x10 mark 0x1 268 run_cmd ip addr add dev "$devdummy" 10.23.7.11/24 269 run_cmd ip route get 10.23.7.11 from 10.23.7.12 iif "$devdummy" 270 run_cmd ip route add 10.23.8.0/24 \ 271 nexthop via 10.23.7.13 dev "$devdummy" \ 272 nexthop via 10.23.7.14 dev "$devdummy" 273 274 sysctl -wq net.ipv4.fib_multipath_hash_policy=0 275 run_cmd ip route get 10.23.8.11 276 sysctl -wq net.ipv4.fib_multipath_hash_policy=1 277 run_cmd ip route get 10.23.8.11 278 sysctl -wq net.ipv4.fib_multipath_hash_policy="$hash_policy" 279 run_cmd ip route del 10.23.8.0/24 280 run_cmd ip addr del dev "$devdummy" 10.23.7.11/24 281 282 283 if [ $ret -ne 0 ];then 284 end_test "FAIL: route get" 285 return 1 286 fi 287 288 end_test "PASS: route get" 289} 290 291kci_test_addrlft() 292{ 293 for i in $(seq 10 100) ;do 294 lft=$(((RANDOM%3) + 1)) 295 run_cmd ip addr add 10.23.11.$i/32 dev "$devdummy" preferred_lft $lft valid_lft $((lft+1)) 296 done 297 298 sleep 5 299 run_cmd_grep_fail "10.23.11." ip addr show dev "$devdummy" 300 if [ $? -eq 0 ]; then 301 check_err 1 302 end_test "FAIL: preferred_lft addresses remaining" 303 return 304 fi 305 306 end_test "PASS: preferred_lft addresses have expired" 307} 308 309kci_test_promote_secondaries() 310{ 311 promote=$(sysctl -n net.ipv4.conf.$devdummy.promote_secondaries) 312 313 sysctl -q net.ipv4.conf.$devdummy.promote_secondaries=1 314 315 for i in $(seq 2 254);do 316 IP="10.23.11.$i" 317 ip -f inet addr add $IP/16 brd + dev "$devdummy" 318 ifconfig "$devdummy" $IP netmask 255.255.0.0 319 done 320 321 ip addr flush dev "$devdummy" 322 323 [ $promote -eq 0 ] && sysctl -q net.ipv4.conf.$devdummy.promote_secondaries=0 324 325 end_test "PASS: promote_secondaries complete" 326} 327 328kci_test_addrlabel() 329{ 330 local ret=0 331 run_cmd ip addrlabel add prefix dead::/64 dev lo label 1 332 run_cmd_grep "prefix dead::/64 dev lo label 1" ip addrlabel list 333 run_cmd ip addrlabel del prefix dead::/64 dev lo label 1 334 run_cmd ip addrlabel add prefix dead::/64 label 1 335 run_cmd ip addrlabel del prefix dead::/64 label 1 336 337 # concurrent add/delete 338 for i in $(seq 1 1000); do 339 ip addrlabel add prefix 1c3::/64 label 12345 2>/dev/null 340 done & 341 342 for i in $(seq 1 1000); do 343 ip addrlabel del prefix 1c3::/64 label 12345 2>/dev/null 344 done 345 346 wait 347 348 ip addrlabel del prefix 1c3::/64 label 12345 2>/dev/null 349 350 if [ $ret -ne 0 ];then 351 end_test "FAIL: ipv6 addrlabel" 352 return 1 353 fi 354 355 end_test "PASS: ipv6 addrlabel" 356} 357 358kci_test_ifalias() 359{ 360 local ret=0 361 namewant=$(uuidgen) 362 syspathname="/sys/class/net/$devdummy/ifalias" 363 run_cmd ip link set dev "$devdummy" alias "$namewant" 364 365 if [ $ret -ne 0 ]; then 366 end_test "FAIL: cannot set interface alias of $devdummy to $namewant" 367 return 1 368 fi 369 run_cmd_grep "alias $namewant" ip link show "$devdummy" 370 371 if [ -r "$syspathname" ] ; then 372 read namehave < "$syspathname" 373 if [ "$namewant" != "$namehave" ]; then 374 end_test "FAIL: did set ifalias $namewant but got $namehave" 375 return 1 376 fi 377 378 namewant=$(uuidgen) 379 echo "$namewant" > "$syspathname" 380 run_cmd_grep "alias $namewant" ip link show "$devdummy" 381 382 # sysfs interface allows to delete alias again 383 echo "" > "$syspathname" 384 run_cmd_grep_fail "alias $namewant" ip link show "$devdummy" 385 386 for i in $(seq 1 100); do 387 uuidgen > "$syspathname" & 388 done 389 390 wait 391 392 # re-add the alias -- kernel should free mem when dummy dev is removed 393 run_cmd ip link set dev "$devdummy" alias "$namewant" 394 395 fi 396 397 if [ $ret -ne 0 ]; then 398 end_test "FAIL: set interface alias $devdummy to $namewant" 399 return 1 400 fi 401 402 end_test "PASS: set ifalias $namewant for $devdummy" 403} 404 405kci_test_vrf() 406{ 407 vrfname="test-vrf" 408 local ret=0 409 run_cmd ip link show type vrf 410 if [ $? -ne 0 ]; then 411 end_test "SKIP: vrf: iproute2 too old" 412 return $ksft_skip 413 fi 414 run_cmd ip link add "$vrfname" type vrf table 10 415 if [ $ret -ne 0 ];then 416 end_test "FAIL: can't add vrf interface, skipping test" 417 return 0 418 fi 419 run_cmd_grep "$vrfname" ip -br link show type vrf 420 if [ $ret -ne 0 ];then 421 end_test "FAIL: created vrf device not found" 422 return 1 423 fi 424 425 run_cmd ip link set dev "$vrfname" up 426 run_cmd ip link set dev "$devdummy" master "$vrfname" 427 run_cmd ip link del dev "$vrfname" 428 429 if [ $ret -ne 0 ];then 430 end_test "FAIL: vrf" 431 return 1 432 fi 433 434 end_test "PASS: vrf" 435} 436 437kci_test_encap_vxlan() 438{ 439 local ret=0 440 vxlan="test-vxlan0" 441 vlan="test-vlan0" 442 testns="$1" 443 run_cmd ip -netns "$testns" link add "$vxlan" type vxlan id 42 group 239.1.1.1 \ 444 dev "$devdummy" dstport 4789 445 if [ $? -ne 0 ]; then 446 end_test "FAIL: can't add vxlan interface, skipping test" 447 return 0 448 fi 449 450 run_cmd ip -netns "$testns" addr add 10.2.11.49/24 dev "$vxlan" 451 run_cmd ip -netns "$testns" link set up dev "$vxlan" 452 run_cmd ip -netns "$testns" link add link "$vxlan" name "$vlan" type vlan id 1 453 454 # changelink testcases 455 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan vni 43 456 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan group ffe5::5 dev "$devdummy" 457 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan ttl inherit 458 459 run_cmd ip -netns "$testns" link set dev "$vxlan" type vxlan ttl 64 460 run_cmd ip -netns "$testns" link set dev "$vxlan" type vxlan nolearning 461 462 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan proxy 463 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan norsc 464 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan l2miss 465 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan l3miss 466 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan external 467 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan udpcsum 468 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan udp6zerocsumtx 469 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan udp6zerocsumrx 470 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan remcsumtx 471 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan remcsumrx 472 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan gbp 473 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan gpe 474 run_cmd ip -netns "$testns" link del "$vxlan" 475 476 if [ $ret -ne 0 ]; then 477 end_test "FAIL: vxlan" 478 return 1 479 fi 480 end_test "PASS: vxlan" 481} 482 483kci_test_encap_fou() 484{ 485 local ret=0 486 name="test-fou" 487 testns="$1" 488 run_cmd_grep 'Usage: ip fou' ip fou help 489 if [ $? -ne 0 ];then 490 end_test "SKIP: fou: iproute2 too old" 491 return $ksft_skip 492 fi 493 494 if ! /sbin/modprobe -q -n fou; then 495 end_test "SKIP: module fou is not found" 496 return $ksft_skip 497 fi 498 /sbin/modprobe -q fou 499 500 run_cmd ip -netns "$testns" fou add port 7777 ipproto 47 501 if [ $? -ne 0 ];then 502 end_test "FAIL: can't add fou port 7777, skipping test" 503 return 1 504 fi 505 run_cmd ip -netns "$testns" fou add port 8888 ipproto 4 506 run_cmd_fail ip -netns "$testns" fou del port 9999 507 run_cmd ip -netns "$testns" fou del port 7777 508 if [ $ret -ne 0 ]; then 509 end_test "FAIL: fou"s 510 return 1 511 fi 512 513 end_test "PASS: fou" 514} 515 516# test various encap methods, use netns to avoid unwanted interference 517kci_test_encap() 518{ 519 local ret=0 520 setup_ns testns 521 if [ $? -ne 0 ]; then 522 end_test "SKIP encap tests: cannot add net namespace $testns" 523 return $ksft_skip 524 fi 525 run_cmd ip -netns "$testns" link set lo up 526 run_cmd ip -netns "$testns" link add name "$devdummy" type dummy 527 run_cmd ip -netns "$testns" link set "$devdummy" up 528 run_cmd kci_test_encap_vxlan "$testns" 529 run_cmd kci_test_encap_fou "$testns" 530 531 ip netns del "$testns" 532 return $ret 533} 534 535kci_test_macsec() 536{ 537 msname="test_macsec0" 538 local ret=0 539 run_cmd_grep "^Usage: ip macsec" ip macsec help 540 if [ $? -ne 0 ]; then 541 end_test "SKIP: macsec: iproute2 too old" 542 return $ksft_skip 543 fi 544 run_cmd ip link add link "$devdummy" "$msname" type macsec port 42 encrypt on 545 if [ $ret -ne 0 ];then 546 end_test "FAIL: can't add macsec interface, skipping test" 547 return 1 548 fi 549 run_cmd ip macsec add "$msname" tx sa 0 pn 1024 on key 01 12345678901234567890123456789012 550 run_cmd ip macsec add "$msname" rx port 1234 address "1c:ed:de:ad:be:ef" 551 run_cmd ip macsec add "$msname" rx port 1234 address "1c:ed:de:ad:be:ef" sa 0 pn 1 on key 00 0123456789abcdef0123456789abcdef 552 run_cmd ip macsec show 553 run_cmd ip link del dev "$msname" 554 555 if [ $ret -ne 0 ];then 556 end_test "FAIL: macsec" 557 return 1 558 fi 559 560 end_test "PASS: macsec" 561} 562 563kci_test_macsec_offload() 564{ 565 sysfsd=/sys/kernel/debug/netdevsim/netdevsim0/ports/0/ 566 sysfsnet=/sys/bus/netdevsim/devices/netdevsim0/net/ 567 probed=false 568 local ret=0 569 run_cmd_grep "^Usage: ip macsec" ip macsec help 570 if [ $? -ne 0 ]; then 571 end_test "SKIP: macsec: iproute2 too old" 572 return $ksft_skip 573 fi 574 575 if ! mount | grep -q debugfs; then 576 mount -t debugfs none /sys/kernel/debug/ &> /dev/null 577 fi 578 579 # setup netdevsim since dummydev doesn't have offload support 580 if [ ! -w /sys/bus/netdevsim/new_device ] ; then 581 run_cmd modprobe -q netdevsim 582 583 if [ $ret -ne 0 ]; then 584 end_test "SKIP: macsec_offload can't load netdevsim" 585 return $ksft_skip 586 fi 587 probed=true 588 fi 589 590 echo "0" > /sys/bus/netdevsim/new_device 591 while [ ! -d $sysfsnet ] ; do :; done 592 udevadm settle 593 dev=`ls $sysfsnet` 594 595 ip link set $dev up 596 if [ ! -d $sysfsd ] ; then 597 end_test "FAIL: macsec_offload can't create device $dev" 598 return 1 599 fi 600 run_cmd_grep 'macsec-hw-offload: on' ethtool -k $dev 601 if [ $? -eq 1 ] ; then 602 end_test "FAIL: macsec_offload netdevsim doesn't support MACsec offload" 603 return 1 604 fi 605 run_cmd ip link add link $dev kci_macsec1 type macsec port 4 offload mac 606 run_cmd ip link add link $dev kci_macsec2 type macsec address "aa:bb:cc:dd:ee:ff" port 5 offload mac 607 run_cmd ip link add link $dev kci_macsec3 type macsec sci abbacdde01020304 offload mac 608 run_cmd_fail ip link add link $dev kci_macsec4 type macsec port 8 offload mac 609 610 msname=kci_macsec1 611 run_cmd ip macsec add "$msname" tx sa 0 pn 1024 on key 01 12345678901234567890123456789012 612 run_cmd ip macsec add "$msname" rx port 1234 address "1c:ed:de:ad:be:ef" 613 run_cmd ip macsec add "$msname" rx port 1234 address "1c:ed:de:ad:be:ef" sa 0 pn 1 on \ 614 key 00 0123456789abcdef0123456789abcdef 615 run_cmd_fail ip macsec add "$msname" rx port 1235 address "1c:ed:de:ad:be:ef" 616 # clean up any leftovers 617 for msdev in kci_macsec{1,2,3,4} ; do 618 ip link del $msdev 2> /dev/null 619 done 620 echo 0 > /sys/bus/netdevsim/del_device 621 $probed && rmmod netdevsim 622 623 if [ $ret -ne 0 ]; then 624 end_test "FAIL: macsec_offload" 625 return 1 626 fi 627 end_test "PASS: macsec_offload" 628} 629 630#------------------------------------------------------------------- 631# Example commands 632# ip x s add proto esp src 14.0.0.52 dst 14.0.0.70 \ 633# spi 0x07 mode transport reqid 0x07 replay-window 32 \ 634# aead 'rfc4106(gcm(aes))' 1234567890123456dcba 128 \ 635# sel src 14.0.0.52/24 dst 14.0.0.70/24 636# ip x p add dir out src 14.0.0.52/24 dst 14.0.0.70/24 \ 637# tmpl proto esp src 14.0.0.52 dst 14.0.0.70 \ 638# spi 0x07 mode transport reqid 0x07 639# 640# Subcommands not tested 641# ip x s update 642# ip x s allocspi 643# ip x s deleteall 644# ip x p update 645# ip x p deleteall 646# ip x p set 647#------------------------------------------------------------------- 648kci_test_ipsec() 649{ 650 local ret=0 651 algo="aead rfc4106(gcm(aes)) 0x3132333435363738393031323334353664636261 128" 652 srcip=192.168.123.1 653 dstip=192.168.123.2 654 spi=7 655 656 ip addr add $srcip dev $devdummy 657 658 # flush to be sure there's nothing configured 659 run_cmd ip x s flush ; ip x p flush 660 661 # start the monitor in the background 662 tmpfile=`mktemp /var/run/ipsectestXXX` 663 mpid=`(ip x m > $tmpfile & echo $!) 2>/dev/null` 664 sleep 0.2 665 666 ipsecid="proto esp src $srcip dst $dstip spi 0x07" 667 run_cmd ip x s add $ipsecid \ 668 mode transport reqid 0x07 replay-window 32 \ 669 $algo sel src $srcip/24 dst $dstip/24 670 671 672 lines=`ip x s list | grep $srcip | grep $dstip | wc -l` 673 run_cmd test $lines -eq 2 674 run_cmd_grep "SAD count 1" ip x s count 675 676 lines=`ip x s get $ipsecid | grep $srcip | grep $dstip | wc -l` 677 run_cmd test $lines -eq 2 678 run_cmd ip x s delete $ipsecid 679 680 lines=`ip x s list | wc -l` 681 run_cmd test $lines -eq 0 682 683 ipsecsel="dir out src $srcip/24 dst $dstip/24" 684 run_cmd ip x p add $ipsecsel \ 685 tmpl proto esp src $srcip dst $dstip \ 686 spi 0x07 mode transport reqid 0x07 687 688 689 lines=`ip x p list | grep $srcip | grep $dstip | wc -l` 690 run_cmd test $lines -eq 2 691 692 run_cmd_grep "SPD IN 0 OUT 1 FWD 0" ip x p count 693 694 lines=`ip x p get $ipsecsel | grep $srcip | grep $dstip | wc -l` 695 run_cmd test $lines -eq 2 696 697 run_cmd ip x p delete $ipsecsel 698 699 lines=`ip x p list | wc -l` 700 run_cmd test $lines -eq 0 701 702 # check the monitor results 703 kill $mpid 704 lines=`wc -l $tmpfile | cut "-d " -f1` 705 run_cmd test $lines -eq 20 706 rm -rf $tmpfile 707 708 # clean up any leftovers 709 run_cmd ip x s flush 710 run_cmd ip x p flush 711 ip addr del $srcip/32 dev $devdummy 712 713 if [ $ret -ne 0 ]; then 714 end_test "FAIL: ipsec" 715 return 1 716 fi 717 end_test "PASS: ipsec" 718} 719 720#------------------------------------------------------------------- 721# Example commands 722# ip x s add proto esp src 14.0.0.52 dst 14.0.0.70 \ 723# spi 0x07 mode transport reqid 0x07 replay-window 32 \ 724# aead 'rfc4106(gcm(aes))' 1234567890123456dcba 128 \ 725# sel src 14.0.0.52/24 dst 14.0.0.70/24 726# offload dev sim1 dir out 727# ip x p add dir out src 14.0.0.52/24 dst 14.0.0.70/24 \ 728# tmpl proto esp src 14.0.0.52 dst 14.0.0.70 \ 729# spi 0x07 mode transport reqid 0x07 730# 731#------------------------------------------------------------------- 732kci_test_ipsec_offload() 733{ 734 local ret=0 735 algo="aead rfc4106(gcm(aes)) 0x3132333435363738393031323334353664636261 128" 736 srcip=192.168.123.3 737 dstip=192.168.123.4 738 sysfsd=/sys/kernel/debug/netdevsim/netdevsim0/ports/0/ 739 sysfsf=$sysfsd/ipsec 740 sysfsnet=/sys/bus/netdevsim/devices/netdevsim0/net/ 741 probed=false 742 743 if ! mount | grep -q debugfs; then 744 mount -t debugfs none /sys/kernel/debug/ &> /dev/null 745 fi 746 747 # setup netdevsim since dummydev doesn't have offload support 748 if [ ! -w /sys/bus/netdevsim/new_device ] ; then 749 run_cmd modprobe -q netdevsim 750 if [ $ret -ne 0 ]; then 751 end_test "SKIP: ipsec_offload can't load netdevsim" 752 return $ksft_skip 753 fi 754 probed=true 755 fi 756 757 echo "0" > /sys/bus/netdevsim/new_device 758 while [ ! -d $sysfsnet ] ; do :; done 759 udevadm settle 760 dev=`ls $sysfsnet` 761 762 ip addr add $srcip dev $dev 763 ip link set $dev up 764 if [ ! -d $sysfsd ] ; then 765 end_test "FAIL: ipsec_offload can't create device $dev" 766 return 1 767 fi 768 if [ ! -f $sysfsf ] ; then 769 end_test "FAIL: ipsec_offload netdevsim doesn't support IPsec offload" 770 return 1 771 fi 772 773 # flush to be sure there's nothing configured 774 ip x s flush ; ip x p flush 775 776 # create offloaded SAs, both in and out 777 run_cmd ip x p add dir out src $srcip/24 dst $dstip/24 \ 778 tmpl proto esp src $srcip dst $dstip spi 9 \ 779 mode transport reqid 42 780 781 run_cmd ip x p add dir in src $dstip/24 dst $srcip/24 \ 782 tmpl proto esp src $dstip dst $srcip spi 9 \ 783 mode transport reqid 42 784 785 run_cmd ip x s add proto esp src $srcip dst $dstip spi 9 \ 786 mode transport reqid 42 $algo sel src $srcip/24 dst $dstip/24 \ 787 offload dev $dev dir out 788 789 run_cmd ip x s add proto esp src $dstip dst $srcip spi 9 \ 790 mode transport reqid 42 $algo sel src $dstip/24 dst $srcip/24 \ 791 offload dev $dev dir in 792 793 if [ $ret -ne 0 ]; then 794 end_test "FAIL: ipsec_offload can't create SA" 795 return 1 796 fi 797 798 # does offload show up in ip output 799 lines=`ip x s list | grep -c "crypto offload parameters: dev $dev dir"` 800 if [ $lines -ne 2 ] ; then 801 check_err 1 802 end_test "FAIL: ipsec_offload SA offload missing from list output" 803 fi 804 805 # use ping to exercise the Tx path 806 ping -I $dev -c 3 -W 1 -i 0 $dstip >/dev/null 807 808 # does driver have correct offload info 809 run_cmd diff $sysfsf - << EOF 810SA count=2 tx=3 811sa[0] tx ipaddr=0x00000000 00000000 00000000 00000000 812sa[0] spi=0x00000009 proto=0x32 salt=0x61626364 crypt=1 813sa[0] key=0x34333231 38373635 32313039 36353433 814sa[1] rx ipaddr=0x00000000 00000000 00000000 037ba8c0 815sa[1] spi=0x00000009 proto=0x32 salt=0x61626364 crypt=1 816sa[1] key=0x34333231 38373635 32313039 36353433 817EOF 818 if [ $? -ne 0 ] ; then 819 end_test "FAIL: ipsec_offload incorrect driver data" 820 check_err 1 821 fi 822 823 # does offload get removed from driver 824 ip x s flush 825 ip x p flush 826 lines=`grep -c "SA count=0" $sysfsf` 827 if [ $lines -ne 1 ] ; then 828 check_err 1 829 end_test "FAIL: ipsec_offload SA not removed from driver" 830 fi 831 832 # clean up any leftovers 833 echo 0 > /sys/bus/netdevsim/del_device 834 $probed && rmmod netdevsim 835 836 if [ $ret -ne 0 ]; then 837 end_test "FAIL: ipsec_offload" 838 return 1 839 fi 840 end_test "PASS: ipsec_offload" 841} 842 843kci_test_gretap() 844{ 845 DEV_NS=gretap00 846 local ret=0 847 848 setup_ns testns 849 if [ $? -ne 0 ]; then 850 end_test "SKIP gretap tests: cannot add net namespace $testns" 851 return $ksft_skip 852 fi 853 854 run_cmd_grep "^Usage:" ip link help gretap 855 if [ $? -ne 0 ];then 856 end_test "SKIP: gretap: iproute2 too old" 857 ip netns del "$testns" 858 return $ksft_skip 859 fi 860 861 # test native tunnel 862 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type gretap seq \ 863 key 102 local 172.16.1.100 remote 172.16.1.200 864 865 866 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 867 run_cmd ip -netns "$testns" link set dev $DEV_NS up 868 run_cmd ip -netns "$testns" link del "$DEV_NS" 869 870 # test external mode 871 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type gretap external 872 run_cmd ip -netns "$testns" link del "$DEV_NS" 873 874 if [ $ret -ne 0 ]; then 875 end_test "FAIL: gretap" 876 ip netns del "$testns" 877 return 1 878 fi 879 end_test "PASS: gretap" 880 881 ip netns del "$testns" 882} 883 884kci_test_ip6gretap() 885{ 886 DEV_NS=ip6gretap00 887 local ret=0 888 889 setup_ns testns 890 if [ $? -ne 0 ]; then 891 end_test "SKIP ip6gretap tests: cannot add net namespace $testns" 892 return $ksft_skip 893 fi 894 895 run_cmd_grep "^Usage:" ip link help ip6gretap 896 if [ $? -ne 0 ];then 897 end_test "SKIP: ip6gretap: iproute2 too old" 898 ip netns del "$testns" 899 return $ksft_skip 900 fi 901 902 # test native tunnel 903 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6gretap seq \ 904 key 102 local fc00:100::1 remote fc00:100::2 905 906 907 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" fc00:200::1/96 908 run_cmd ip -netns "$testns" link set dev $DEV_NS up 909 run_cmd ip -netns "$testns" link del "$DEV_NS" 910 911 # test external mode 912 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6gretap external 913 run_cmd ip -netns "$testns" link del "$DEV_NS" 914 915 if [ $ret -ne 0 ]; then 916 end_test "FAIL: ip6gretap" 917 ip netns del "$testns" 918 return 1 919 fi 920 end_test "PASS: ip6gretap" 921 922 ip netns del "$testns" 923} 924 925kci_test_erspan() 926{ 927 DEV_NS=erspan00 928 local ret=0 929 run_cmd_grep "^Usage:" ip link help erspan 930 if [ $? -ne 0 ];then 931 end_test "SKIP: erspan: iproute2 too old" 932 return $ksft_skip 933 fi 934 setup_ns testns 935 if [ $? -ne 0 ]; then 936 end_test "SKIP erspan tests: cannot add net namespace $testns" 937 return $ksft_skip 938 fi 939 940 # test native tunnel erspan v1 941 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type erspan seq \ 942 key 102 local 172.16.1.100 remote 172.16.1.200 \ 943 erspan_ver 1 erspan 488 944 945 946 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 947 run_cmd ip -netns "$testns" link set dev $DEV_NS up 948 run_cmd ip -netns "$testns" link del "$DEV_NS" 949 950 # test native tunnel erspan v2 951 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type erspan seq \ 952 key 102 local 172.16.1.100 remote 172.16.1.200 \ 953 erspan_ver 2 erspan_dir ingress erspan_hwid 7 954 955 956 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 957 run_cmd ip -netns "$testns" link set dev $DEV_NS up 958 run_cmd ip -netns "$testns" link del "$DEV_NS" 959 960 # test external mode 961 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type erspan external 962 run_cmd ip -netns "$testns" link del "$DEV_NS" 963 964 if [ $ret -ne 0 ]; then 965 end_test "FAIL: erspan" 966 ip netns del "$testns" 967 return 1 968 fi 969 end_test "PASS: erspan" 970 971 ip netns del "$testns" 972} 973 974kci_test_ip6erspan() 975{ 976 DEV_NS=ip6erspan00 977 local ret=0 978 run_cmd_grep "^Usage:" ip link help ip6erspan 979 if [ $? -ne 0 ];then 980 end_test "SKIP: ip6erspan: iproute2 too old" 981 return $ksft_skip 982 fi 983 setup_ns testns 984 if [ $? -ne 0 ]; then 985 end_test "SKIP ip6erspan tests: cannot add net namespace $testns" 986 return $ksft_skip 987 fi 988 989 # test native tunnel ip6erspan v1 990 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6erspan seq \ 991 key 102 local fc00:100::1 remote fc00:100::2 \ 992 erspan_ver 1 erspan 488 993 994 995 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 996 run_cmd ip -netns "$testns" link set dev $DEV_NS up 997 run_cmd ip -netns "$testns" link del "$DEV_NS" 998 999 # test native tunnel ip6erspan v2 1000 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6erspan seq \ 1001 key 102 local fc00:100::1 remote fc00:100::2 \ 1002 erspan_ver 2 erspan_dir ingress erspan_hwid 7 1003 1004 1005 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 1006 run_cmd ip -netns "$testns" link set dev $DEV_NS up 1007 run_cmd ip -netns "$testns" link del "$DEV_NS" 1008 1009 # test external mode 1010 run_cmd ip -netns "$testns" link add dev "$DEV_NS" \ 1011 type ip6erspan external 1012 1013 run_cmd ip -netns "$testns" link del "$DEV_NS" 1014 1015 if [ $ret -ne 0 ]; then 1016 end_test "FAIL: ip6erspan" 1017 ip netns del "$testns" 1018 return 1 1019 fi 1020 end_test "PASS: ip6erspan" 1021 1022 ip netns del "$testns" 1023} 1024 1025kci_test_fdb_get() 1026{ 1027 brdev="test-br0" 1028 vxlandev="vxlan10" 1029 test_mac=de:ad:be:ef:13:37 1030 localip="10.0.2.2" 1031 dstip="10.0.2.3" 1032 local ret=0 1033 1034 run_cmd_grep 'bridge fdb get' bridge fdb help 1035 if [ $? -ne 0 ];then 1036 end_test "SKIP: fdb get tests: iproute2 too old" 1037 return $ksft_skip 1038 fi 1039 1040 setup_ns testns 1041 if [ $? -ne 0 ]; then 1042 end_test "SKIP fdb get tests: cannot add net namespace $testns" 1043 return $ksft_skip 1044 fi 1045 IP="ip -netns $testns" 1046 BRIDGE="bridge -netns $testns" 1047 run_cmd $IP link add "$vxlandev" type vxlan id 10 local $localip \ 1048 dstport 4789 1049 run_cmd $IP link add name "$brdev" type bridge 1050 run_cmd $IP link set dev "$vxlandev" master "$brdev" 1051 run_cmd $BRIDGE fdb add $test_mac dev "$vxlandev" master 1052 run_cmd $BRIDGE fdb add $test_mac dev "$vxlandev" dst $dstip self 1053 run_cmd_grep "dev $vxlandev master $brdev" $BRIDGE fdb get $test_mac brport "$vxlandev" 1054 run_cmd_grep "dev $vxlandev master $brdev" $BRIDGE fdb get $test_mac br "$brdev" 1055 run_cmd_grep "dev $vxlandev dst $dstip" $BRIDGE fdb get $test_mac dev "$vxlandev" self 1056 1057 ip netns del $testns &>/dev/null 1058 1059 if [ $ret -ne 0 ]; then 1060 end_test "FAIL: bridge fdb get" 1061 return 1 1062 fi 1063 1064 end_test "PASS: bridge fdb get" 1065} 1066 1067kci_test_neigh_get() 1068{ 1069 dstmac=de:ad:be:ef:13:37 1070 dstip=10.0.2.4 1071 dstip6=dead::2 1072 local ret=0 1073 1074 run_cmd_grep 'ip neigh get' ip neigh help 1075 if [ $? -ne 0 ];then 1076 end_test "SKIP: fdb get tests: iproute2 too old" 1077 return $ksft_skip 1078 fi 1079 1080 # ipv4 1081 run_cmd ip neigh add $dstip lladdr $dstmac dev "$devdummy" 1082 run_cmd_grep "$dstmac" ip neigh get $dstip dev "$devdummy" 1083 run_cmd ip neigh del $dstip lladdr $dstmac dev "$devdummy" 1084 1085 # ipv4 proxy 1086 run_cmd ip neigh add proxy $dstip dev "$devdummy" 1087 run_cmd_grep "$dstip" ip neigh get proxy $dstip dev "$devdummy" 1088 run_cmd ip neigh del proxy $dstip dev "$devdummy" 1089 1090 # ipv6 1091 run_cmd ip neigh add $dstip6 lladdr $dstmac dev "$devdummy" 1092 run_cmd_grep "$dstmac" ip neigh get $dstip6 dev "$devdummy" 1093 run_cmd ip neigh del $dstip6 lladdr $dstmac dev "$devdummy" 1094 1095 # ipv6 proxy 1096 run_cmd ip neigh add proxy $dstip6 dev "$devdummy" 1097 run_cmd_grep "$dstip6" ip neigh get proxy $dstip6 dev "$devdummy" 1098 run_cmd ip neigh del proxy $dstip6 dev "$devdummy" 1099 1100 if [ $ret -ne 0 ];then 1101 end_test "FAIL: neigh get" 1102 return 1 1103 fi 1104 1105 end_test "PASS: neigh get" 1106} 1107 1108kci_test_bridge_parent_id() 1109{ 1110 local ret=0 1111 sysfsnet=/sys/bus/netdevsim/devices/netdevsim 1112 probed=false 1113 1114 if [ ! -w /sys/bus/netdevsim/new_device ] ; then 1115 run_cmd modprobe -q netdevsim 1116 if [ $ret -ne 0 ]; then 1117 end_test "SKIP: bridge_parent_id can't load netdevsim" 1118 return $ksft_skip 1119 fi 1120 probed=true 1121 fi 1122 1123 echo "10 1" > /sys/bus/netdevsim/new_device 1124 while [ ! -d ${sysfsnet}10 ] ; do :; done 1125 echo "20 1" > /sys/bus/netdevsim/new_device 1126 while [ ! -d ${sysfsnet}20 ] ; do :; done 1127 udevadm settle 1128 dev10=`ls ${sysfsnet}10/net/` 1129 dev20=`ls ${sysfsnet}20/net/` 1130 run_cmd ip link add name test-bond0 type bond mode 802.3ad 1131 run_cmd ip link set dev $dev10 master test-bond0 1132 run_cmd ip link set dev $dev20 master test-bond0 1133 run_cmd ip link add name test-br0 type bridge 1134 run_cmd ip link set dev test-bond0 master test-br0 1135 1136 # clean up any leftovers 1137 ip link del dev test-br0 1138 ip link del dev test-bond0 1139 echo 20 > /sys/bus/netdevsim/del_device 1140 echo 10 > /sys/bus/netdevsim/del_device 1141 $probed && rmmod netdevsim 1142 1143 if [ $ret -ne 0 ]; then 1144 end_test "FAIL: bridge_parent_id" 1145 return 1 1146 fi 1147 end_test "PASS: bridge_parent_id" 1148} 1149 1150address_get_proto() 1151{ 1152 local addr=$1; shift 1153 1154 ip -N -j address show dev "$devdummy" | 1155 jq -e -r --arg addr "${addr%/*}" \ 1156 '.[].addr_info[] | select(.local == $addr) | .protocol' 1157} 1158 1159address_count() 1160{ 1161 ip -N -j address show dev "$devdummy" "$@" | 1162 jq -e -r '[.[].addr_info[] | .local | select(. != null)] | length' 1163} 1164 1165do_test_address_proto() 1166{ 1167 local what=$1; shift 1168 local addr=$1; shift 1169 local addr2=${addr%/*}2/${addr#*/} 1170 local addr3=${addr%/*}3/${addr#*/} 1171 local proto 1172 local count 1173 local ret=0 1174 local err 1175 1176 ip address add dev "$devdummy" "$addr3" 1177 check_err $? 1178 proto=$(address_get_proto "$addr3") 1179 [[ "$proto" == null ]] 1180 check_err $? 1181 1182 ip address add dev "$devdummy" "$addr2" proto 0x99 1183 check_err $? 1184 proto=$(address_get_proto "$addr2") 1185 [[ "$proto" == 0x99 ]] 1186 check_err $? 1187 1188 ip address add dev "$devdummy" "$addr" proto 0xab 1189 check_err $? 1190 proto=$(address_get_proto "$addr") 1191 [[ "$proto" == 0xab ]] 1192 check_err $? 1193 1194 ip address replace dev "$devdummy" "$addr" proto 0x11 1195 proto=$(address_get_proto "$addr") 1196 check_err $? 1197 [[ "$proto" == 0x11 ]] 1198 check_err $? 1199 1200 count=$(address_count) 1201 check_err $? 1202 (( count >= 3 )) # $addr, $addr2 and $addr3 plus any kernel addresses 1203 check_err $? 1204 1205 count=$(address_count proto 0) 1206 check_err $? 1207 (( count == 1 )) # just $addr3 1208 check_err $? 1209 1210 count=$(address_count proto 0x11) 1211 check_err $? 1212 (( count == 2 )) # $addr and $addr3 1213 check_err $? 1214 1215 count=$(address_count proto 0xab) 1216 check_err $? 1217 (( count == 1 )) # just $addr3 1218 check_err $? 1219 1220 ip address del dev "$devdummy" "$addr" 1221 ip address del dev "$devdummy" "$addr2" 1222 ip address del dev "$devdummy" "$addr3" 1223 1224 if [ $ret -ne 0 ]; then 1225 end_test "FAIL: address proto $what" 1226 return 1 1227 fi 1228 end_test "PASS: address proto $what" 1229} 1230 1231kci_test_address_proto() 1232{ 1233 local ret=0 1234 1235 do_test_address_proto IPv4 192.0.2.1/28 1236 check_err $? 1237 1238 do_test_address_proto IPv6 2001:db8:1::1/64 1239 check_err $? 1240 1241 return $ret 1242} 1243 1244kci_test_rtnl() 1245{ 1246 local current_test 1247 local ret=0 1248 1249 kci_add_dummy 1250 if [ $ret -ne 0 ];then 1251 end_test "FAIL: cannot add dummy interface" 1252 return 1 1253 fi 1254 1255 for current_test in ${TESTS:-$ALL_TESTS}; do 1256 $current_test 1257 check_err $? 1258 done 1259 1260 kci_del_dummy 1261 return $ret 1262} 1263 1264usage() 1265{ 1266 cat <<EOF 1267usage: ${0##*/} OPTS 1268 1269 -t <test> Test(s) to run (default: all) 1270 (options: $(echo $ALL_TESTS)) 1271 -v Verbose mode (show commands and output) 1272 -P Pause after every test 1273 -p Pause after every failing test before cleanup (for debugging) 1274EOF 1275} 1276 1277#check for needed privileges 1278if [ "$(id -u)" -ne 0 ];then 1279 end_test "SKIP: Need root privileges" 1280 exit $ksft_skip 1281fi 1282 1283for x in ip tc;do 1284 $x -Version 2>/dev/null >/dev/null 1285 if [ $? -ne 0 ];then 1286 end_test "SKIP: Could not run test without the $x tool" 1287 exit $ksft_skip 1288 fi 1289done 1290 1291while getopts t:hvpP o; do 1292 case $o in 1293 t) TESTS=$OPTARG;; 1294 v) VERBOSE=1;; 1295 p) PAUSE_ON_FAIL=yes;; 1296 P) PAUSE=yes;; 1297 h) usage; exit 0;; 1298 *) usage; exit 1;; 1299 esac 1300done 1301 1302[ $PAUSE = "yes" ] && PAUSE_ON_FAIL="no" 1303 1304kci_test_rtnl 1305 1306exit $? 1307