#!/bin/bash
|
# SPDX-License-Identifier: GPL-2.0
|
|
# +-----------------------+ +------------------------+
|
# | H1 (vrf) | | H2 (vrf) |
|
# | + $h1.10 | | + $h2.10 |
|
# | | 192.0.2.1/28 | | | 192.0.2.2/28 |
|
# | | | | | |
|
# | | + $h1.20 | | | + $h2.20 |
|
# | \ | 198.51.100.1/24 | | \ | 198.51.100.2/24 |
|
# | \| | | \| |
|
# | + $h1 | | + $h2 |
|
# +----|------------------+ +----|-------------------+
|
# | |
|
# +----|--------------------------------------------------|-------------------+
|
# | SW | | |
|
# | +--|--------------------------------------------------|-----------------+ |
|
# | | + $swp1 BR1 (802.1q) + $swp2 | |
|
# | | vid 10 vid 10 | |
|
# | | vid 20 vid 20 | |
|
# | | | |
|
# | | + vx10 (vxlan) + vx20 (vxlan) | |
|
# | | local 192.0.2.17 local 192.0.2.17 | |
|
# | | remote 192.0.2.34 192.0.2.50 remote 192.0.2.34 192.0.2.50 | |
|
# | | id 1000 dstport $VXPORT id 2000 dstport $VXPORT | |
|
# | | vid 10 pvid untagged vid 20 pvid untagged | |
|
# | +-----------------------------------------------------------------------+ |
|
# | |
|
# | 192.0.2.32/28 via 192.0.2.18 |
|
# | 192.0.2.48/28 via 192.0.2.18 |
|
# | |
|
# | + $rp1 |
|
# | | 192.0.2.17/28 |
|
# +----|----------------------------------------------------------------------+
|
# |
|
# +----|--------------------------------------------------------+
|
# | | VRP2 (vrf) |
|
# | + $rp2 |
|
# | 192.0.2.18/28 |
|
# | | (maybe) HW
|
# =============================================================================
|
# | | (likely) SW
|
# | + v1 (veth) + v3 (veth) |
|
# | | 192.0.2.33/28 | 192.0.2.49/28 |
|
# +----|---------------------------------------|----------------+
|
# | |
|
# +----|------------------------------+ +----|------------------------------+
|
# | + v2 (veth) NS1 (netns) | | + v4 (veth) NS2 (netns) |
|
# | 192.0.2.34/28 | | 192.0.2.50/28 |
|
# | | | |
|
# | 192.0.2.16/28 via 192.0.2.33 | | 192.0.2.16/28 via 192.0.2.49 |
|
# | 192.0.2.50/32 via 192.0.2.33 | | 192.0.2.34/32 via 192.0.2.49 |
|
# | | | |
|
# | +-------------------------------+ | | +-------------------------------+ |
|
# | | BR2 (802.1q) | | | | BR2 (802.1q) | |
|
# | | + vx10 (vxlan) | | | | + vx10 (vxlan) | |
|
# | | local 192.0.2.34 | | | | local 192.0.2.50 | |
|
# | | remote 192.0.2.17 | | | | remote 192.0.2.17 | |
|
# | | remote 192.0.2.50 | | | | remote 192.0.2.34 | |
|
# | | id 1000 dstport $VXPORT | | | | id 1000 dstport $VXPORT | |
|
# | | vid 10 pvid untagged | | | | vid 10 pvid untagged | |
|
# | | | | | | | |
|
# | | + vx20 (vxlan) | | | | + vx20 (vxlan) | |
|
# | | local 192.0.2.34 | | | | local 192.0.2.50 | |
|
# | | remote 192.0.2.17 | | | | remote 192.0.2.17 | |
|
# | | remote 192.0.2.50 | | | | remote 192.0.2.34 | |
|
# | | id 2000 dstport $VXPORT | | | | id 2000 dstport $VXPORT | |
|
# | | vid 20 pvid untagged | | | | vid 20 pvid untagged | |
|
# | | | | | | | |
|
# | | + w1 (veth) | | | | + w1 (veth) | |
|
# | | | vid 10 | | | | | vid 10 | |
|
# | | | vid 20 | | | | | vid 20 | |
|
# | +--|----------------------------+ | | +--|----------------------------+ |
|
# | | | | | |
|
# | +--|----------------------------+ | | +--|----------------------------+ |
|
# | | + w2 (veth) VW2 (vrf) | | | | + w2 (veth) VW2 (vrf) | |
|
# | | |\ | | | | |\ | |
|
# | | | + w2.10 | | | | | + w2.10 | |
|
# | | | 192.0.2.3/28 | | | | | 192.0.2.4/28 | |
|
# | | | | | | | | | |
|
# | | + w2.20 | | | | + w2.20 | |
|
# | | 198.51.100.3/24 | | | | 198.51.100.4/24 | |
|
# | +-------------------------------+ | | +-------------------------------+ |
|
# +-----------------------------------+ +-----------------------------------+
|
|
: ${VXPORT:=4789}
|
export VXPORT
|
|
: ${ALL_TESTS:="
|
ping_ipv4
|
test_flood
|
test_unicast
|
reapply_config
|
ping_ipv4
|
test_flood
|
test_unicast
|
test_learning
|
test_pvid
|
"}
|
|
NUM_NETIFS=6
|
source lib.sh
|
|
h1_create()
|
{
|
simple_if_init $h1
|
tc qdisc add dev $h1 clsact
|
vlan_create $h1 10 v$h1 192.0.2.1/28
|
vlan_create $h1 20 v$h1 198.51.100.1/24
|
}
|
|
h1_destroy()
|
{
|
vlan_destroy $h1 20
|
vlan_destroy $h1 10
|
tc qdisc del dev $h1 clsact
|
simple_if_fini $h1
|
}
|
|
h2_create()
|
{
|
simple_if_init $h2
|
tc qdisc add dev $h2 clsact
|
vlan_create $h2 10 v$h2 192.0.2.2/28
|
vlan_create $h2 20 v$h2 198.51.100.2/24
|
}
|
|
h2_destroy()
|
{
|
vlan_destroy $h2 20
|
vlan_destroy $h2 10
|
tc qdisc del dev $h2 clsact
|
simple_if_fini $h2
|
}
|
|
rp1_set_addr()
|
{
|
ip address add dev $rp1 192.0.2.17/28
|
|
ip route add 192.0.2.32/28 nexthop via 192.0.2.18
|
ip route add 192.0.2.48/28 nexthop via 192.0.2.18
|
}
|
|
rp1_unset_addr()
|
{
|
ip route del 192.0.2.48/28 nexthop via 192.0.2.18
|
ip route del 192.0.2.32/28 nexthop via 192.0.2.18
|
|
ip address del dev $rp1 192.0.2.17/28
|
}
|
|
switch_create()
|
{
|
ip link add name br1 type bridge vlan_filtering 1 vlan_default_pvid 0 \
|
mcast_snooping 0
|
# Make sure the bridge uses the MAC address of the local port and not
|
# that of the VxLAN's device.
|
ip link set dev br1 address $(mac_get $swp1)
|
ip link set dev br1 up
|
|
ip link set dev $rp1 up
|
rp1_set_addr
|
|
ip link add name vx10 type vxlan id 1000 \
|
local 192.0.2.17 dstport "$VXPORT" \
|
nolearning noudpcsum tos inherit ttl 100
|
ip link set dev vx10 up
|
|
ip link set dev vx10 master br1
|
bridge vlan add vid 10 dev vx10 pvid untagged
|
|
ip link add name vx20 type vxlan id 2000 \
|
local 192.0.2.17 dstport "$VXPORT" \
|
nolearning noudpcsum tos inherit ttl 100
|
ip link set dev vx20 up
|
|
ip link set dev vx20 master br1
|
bridge vlan add vid 20 dev vx20 pvid untagged
|
|
ip link set dev $swp1 master br1
|
ip link set dev $swp1 up
|
bridge vlan add vid 10 dev $swp1
|
bridge vlan add vid 20 dev $swp1
|
|
ip link set dev $swp2 master br1
|
ip link set dev $swp2 up
|
bridge vlan add vid 10 dev $swp2
|
bridge vlan add vid 20 dev $swp2
|
|
bridge fdb append dev vx10 00:00:00:00:00:00 dst 192.0.2.34 self
|
bridge fdb append dev vx10 00:00:00:00:00:00 dst 192.0.2.50 self
|
|
bridge fdb append dev vx20 00:00:00:00:00:00 dst 192.0.2.34 self
|
bridge fdb append dev vx20 00:00:00:00:00:00 dst 192.0.2.50 self
|
}
|
|
switch_destroy()
|
{
|
bridge fdb del dev vx20 00:00:00:00:00:00 dst 192.0.2.50 self
|
bridge fdb del dev vx20 00:00:00:00:00:00 dst 192.0.2.34 self
|
|
bridge fdb del dev vx10 00:00:00:00:00:00 dst 192.0.2.50 self
|
bridge fdb del dev vx10 00:00:00:00:00:00 dst 192.0.2.34 self
|
|
bridge vlan del vid 20 dev $swp2
|
bridge vlan del vid 10 dev $swp2
|
ip link set dev $swp2 down
|
ip link set dev $swp2 nomaster
|
|
bridge vlan del vid 20 dev $swp1
|
bridge vlan del vid 10 dev $swp1
|
ip link set dev $swp1 down
|
ip link set dev $swp1 nomaster
|
|
bridge vlan del vid 20 dev vx20
|
ip link set dev vx20 nomaster
|
|
ip link set dev vx20 down
|
ip link del dev vx20
|
|
bridge vlan del vid 10 dev vx10
|
ip link set dev vx10 nomaster
|
|
ip link set dev vx10 down
|
ip link del dev vx10
|
|
rp1_unset_addr
|
ip link set dev $rp1 down
|
|
ip link set dev br1 down
|
ip link del dev br1
|
}
|
|
vrp2_create()
|
{
|
simple_if_init $rp2 192.0.2.18/28
|
__simple_if_init v1 v$rp2 192.0.2.33/28
|
__simple_if_init v3 v$rp2 192.0.2.49/28
|
tc qdisc add dev v1 clsact
|
}
|
|
vrp2_destroy()
|
{
|
tc qdisc del dev v1 clsact
|
__simple_if_fini v3 192.0.2.49/28
|
__simple_if_fini v1 192.0.2.33/28
|
simple_if_fini $rp2 192.0.2.18/28
|
}
|
|
ns_init_common()
|
{
|
local in_if=$1; shift
|
local in_addr=$1; shift
|
local other_in_addr=$1; shift
|
local nh_addr=$1; shift
|
local host_addr1=$1; shift
|
local host_addr2=$1; shift
|
|
ip link set dev $in_if up
|
ip address add dev $in_if $in_addr/28
|
tc qdisc add dev $in_if clsact
|
|
ip link add name br2 type bridge vlan_filtering 1 vlan_default_pvid 0
|
ip link set dev br2 up
|
|
ip link add name w1 type veth peer name w2
|
|
ip link set dev w1 master br2
|
ip link set dev w1 up
|
|
bridge vlan add vid 10 dev w1
|
bridge vlan add vid 20 dev w1
|
|
ip link add name vx10 type vxlan id 1000 local $in_addr \
|
dstport "$VXPORT"
|
ip link set dev vx10 up
|
bridge fdb append dev vx10 00:00:00:00:00:00 dst 192.0.2.17 self
|
bridge fdb append dev vx10 00:00:00:00:00:00 dst $other_in_addr self
|
|
ip link set dev vx10 master br2
|
tc qdisc add dev vx10 clsact
|
|
bridge vlan add vid 10 dev vx10 pvid untagged
|
|
ip link add name vx20 type vxlan id 2000 local $in_addr \
|
dstport "$VXPORT"
|
ip link set dev vx20 up
|
bridge fdb append dev vx20 00:00:00:00:00:00 dst 192.0.2.17 self
|
bridge fdb append dev vx20 00:00:00:00:00:00 dst $other_in_addr self
|
|
ip link set dev vx20 master br2
|
tc qdisc add dev vx20 clsact
|
|
bridge vlan add vid 20 dev vx20 pvid untagged
|
|
simple_if_init w2
|
vlan_create w2 10 vw2 $host_addr1/28
|
vlan_create w2 20 vw2 $host_addr2/24
|
|
ip route add 192.0.2.16/28 nexthop via $nh_addr
|
ip route add $other_in_addr/32 nexthop via $nh_addr
|
}
|
export -f ns_init_common
|
|
ns1_create()
|
{
|
ip netns add ns1
|
ip link set dev v2 netns ns1
|
in_ns ns1 \
|
ns_init_common v2 192.0.2.34 192.0.2.50 192.0.2.33 192.0.2.3 \
|
198.51.100.3
|
}
|
|
ns1_destroy()
|
{
|
ip netns exec ns1 ip link set dev v2 netns 1
|
ip netns del ns1
|
}
|
|
ns2_create()
|
{
|
ip netns add ns2
|
ip link set dev v4 netns ns2
|
in_ns ns2 \
|
ns_init_common v4 192.0.2.50 192.0.2.34 192.0.2.49 192.0.2.4 \
|
198.51.100.4
|
}
|
|
ns2_destroy()
|
{
|
ip netns exec ns2 ip link set dev v4 netns 1
|
ip netns del ns2
|
}
|
|
setup_prepare()
|
{
|
h1=${NETIFS[p1]}
|
swp1=${NETIFS[p2]}
|
|
swp2=${NETIFS[p3]}
|
h2=${NETIFS[p4]}
|
|
rp1=${NETIFS[p5]}
|
rp2=${NETIFS[p6]}
|
|
vrf_prepare
|
forwarding_enable
|
|
h1_create
|
h2_create
|
switch_create
|
|
ip link add name v1 type veth peer name v2
|
ip link add name v3 type veth peer name v4
|
vrp2_create
|
ns1_create
|
ns2_create
|
|
r1_mac=$(in_ns ns1 mac_get w2)
|
r2_mac=$(in_ns ns2 mac_get w2)
|
h2_mac=$(mac_get $h2)
|
}
|
|
cleanup()
|
{
|
pre_cleanup
|
|
ns2_destroy
|
ns1_destroy
|
vrp2_destroy
|
ip link del dev v3
|
ip link del dev v1
|
|
switch_destroy
|
h2_destroy
|
h1_destroy
|
|
forwarding_restore
|
vrf_cleanup
|
}
|
|
# For the first round of tests, vx10 and vx20 were the first devices to get
|
# attached to the bridge, and that at the point that the local IP is already
|
# configured. Try the other scenario of attaching these devices to a bridge
|
# that already has local ports members, and only then assign the local IP.
|
reapply_config()
|
{
|
log_info "Reapplying configuration"
|
|
bridge fdb del dev vx20 00:00:00:00:00:00 dst 192.0.2.50 self
|
bridge fdb del dev vx20 00:00:00:00:00:00 dst 192.0.2.34 self
|
|
bridge fdb del dev vx10 00:00:00:00:00:00 dst 192.0.2.50 self
|
bridge fdb del dev vx10 00:00:00:00:00:00 dst 192.0.2.34 self
|
|
ip link set dev vx20 nomaster
|
ip link set dev vx10 nomaster
|
|
rp1_unset_addr
|
sleep 5
|
|
ip link set dev vx10 master br1
|
bridge vlan add vid 10 dev vx10 pvid untagged
|
|
ip link set dev vx20 master br1
|
bridge vlan add vid 20 dev vx20 pvid untagged
|
|
bridge fdb append dev vx10 00:00:00:00:00:00 dst 192.0.2.34 self
|
bridge fdb append dev vx10 00:00:00:00:00:00 dst 192.0.2.50 self
|
|
bridge fdb append dev vx20 00:00:00:00:00:00 dst 192.0.2.34 self
|
bridge fdb append dev vx20 00:00:00:00:00:00 dst 192.0.2.50 self
|
|
rp1_set_addr
|
sleep 5
|
}
|
|
ping_ipv4()
|
{
|
ping_test $h1.10 192.0.2.2 ": local->local vid 10"
|
ping_test $h1.20 198.51.100.2 ": local->local vid 20"
|
ping_test $h1.10 192.0.2.3 ": local->remote 1 vid 10"
|
ping_test $h1.10 192.0.2.4 ": local->remote 2 vid 10"
|
ping_test $h1.20 198.51.100.3 ": local->remote 1 vid 20"
|
ping_test $h1.20 198.51.100.4 ": local->remote 2 vid 20"
|
}
|
|
maybe_in_ns()
|
{
|
echo ${1:+in_ns} $1
|
}
|
|
__flood_counter_add_del()
|
{
|
local add_del=$1; shift
|
local dev=$1; shift
|
local ns=$1; shift
|
|
# Putting the ICMP capture both to HW and to SW will end up
|
# double-counting the packets that are trapped to slow path, such as for
|
# the unicast test. Adding either skip_hw or skip_sw fixes this problem,
|
# but with skip_hw, the flooded packets are not counted at all, because
|
# those are dropped due to MAC address mismatch; and skip_sw is a no-go
|
# for veth-based topologies.
|
#
|
# So try to install with skip_sw and fall back to skip_sw if that fails.
|
|
$(maybe_in_ns $ns) __icmp_capture_add_del \
|
$add_del 100 "" $dev skip_sw 2>/dev/null || \
|
$(maybe_in_ns $ns) __icmp_capture_add_del \
|
$add_del 100 "" $dev skip_hw
|
}
|
|
flood_counter_install()
|
{
|
__flood_counter_add_del add "$@"
|
}
|
|
flood_counter_uninstall()
|
{
|
__flood_counter_add_del del "$@"
|
}
|
|
flood_fetch_stat()
|
{
|
local dev=$1; shift
|
local ns=$1; shift
|
|
$(maybe_in_ns $ns) tc_rule_stats_get $dev 100 ingress
|
}
|
|
flood_fetch_stats()
|
{
|
local counters=("${@}")
|
local counter
|
|
for counter in "${counters[@]}"; do
|
flood_fetch_stat $counter
|
done
|
}
|
|
vxlan_flood_test()
|
{
|
local mac=$1; shift
|
local dst=$1; shift
|
local vid=$1; shift
|
local -a expects=("${@}")
|
|
local -a counters=($h2 "vx10 ns1" "vx20 ns1" "vx10 ns2" "vx20 ns2")
|
local counter
|
local key
|
|
# Packets reach the local host tagged whereas they reach the VxLAN
|
# devices untagged. In order to be able to use the same filter for
|
# all counters, make sure the packets also reach the local host
|
# untagged
|
bridge vlan add vid $vid dev $swp2 untagged
|
for counter in "${counters[@]}"; do
|
flood_counter_install $counter
|
done
|
|
local -a t0s=($(flood_fetch_stats "${counters[@]}"))
|
$MZ $h1 -Q $vid -c 10 -d 100msec -p 64 -b $mac -B $dst -t icmp -q
|
sleep 1
|
local -a t1s=($(flood_fetch_stats "${counters[@]}"))
|
|
for key in ${!t0s[@]}; do
|
local delta=$((t1s[$key] - t0s[$key]))
|
local expect=${expects[$key]}
|
|
((expect == delta))
|
check_err $? "${counters[$key]}: Expected to capture $expect packets, got $delta."
|
done
|
|
for counter in "${counters[@]}"; do
|
flood_counter_uninstall $counter
|
done
|
bridge vlan add vid $vid dev $swp2
|
}
|
|
__test_flood()
|
{
|
local mac=$1; shift
|
local dst=$1; shift
|
local vid=$1; shift
|
local what=$1; shift
|
local -a expects=("${@}")
|
|
RET=0
|
|
vxlan_flood_test $mac $dst $vid "${expects[@]}"
|
|
log_test "VXLAN: $what"
|
}
|
|
test_flood()
|
{
|
__test_flood de:ad:be:ef:13:37 192.0.2.100 10 "flood vlan 10" \
|
10 10 0 10 0
|
__test_flood ca:fe:be:ef:13:37 198.51.100.100 20 "flood vlan 20" \
|
10 0 10 0 10
|
}
|
|
vxlan_fdb_add_del()
|
{
|
local add_del=$1; shift
|
local vid=$1; shift
|
local mac=$1; shift
|
local dev=$1; shift
|
local dst=$1; shift
|
|
bridge fdb $add_del dev $dev $mac self static permanent \
|
${dst:+dst} $dst 2>/dev/null
|
bridge fdb $add_del dev $dev $mac master static vlan $vid 2>/dev/null
|
}
|
|
__test_unicast()
|
{
|
local mac=$1; shift
|
local dst=$1; shift
|
local hit_idx=$1; shift
|
local vid=$1; shift
|
local what=$1; shift
|
|
RET=0
|
|
local -a expects=(0 0 0 0 0)
|
expects[$hit_idx]=10
|
|
vxlan_flood_test $mac $dst $vid "${expects[@]}"
|
|
log_test "VXLAN: $what"
|
}
|
|
test_unicast()
|
{
|
local -a targets=("$h2_mac $h2"
|
"$r1_mac vx10 192.0.2.34"
|
"$r2_mac vx10 192.0.2.50")
|
local target
|
|
log_info "unicast vlan 10"
|
|
for target in "${targets[@]}"; do
|
vxlan_fdb_add_del add 10 $target
|
done
|
|
__test_unicast $h2_mac 192.0.2.2 0 10 "local MAC unicast"
|
__test_unicast $r1_mac 192.0.2.3 1 10 "remote MAC 1 unicast"
|
__test_unicast $r2_mac 192.0.2.4 3 10 "remote MAC 2 unicast"
|
|
for target in "${targets[@]}"; do
|
vxlan_fdb_add_del del 10 $target
|
done
|
|
log_info "unicast vlan 20"
|
|
targets=("$h2_mac $h2" "$r1_mac vx20 192.0.2.34" \
|
"$r2_mac vx20 192.0.2.50")
|
|
for target in "${targets[@]}"; do
|
vxlan_fdb_add_del add 20 $target
|
done
|
|
__test_unicast $h2_mac 198.51.100.2 0 20 "local MAC unicast"
|
__test_unicast $r1_mac 198.51.100.3 2 20 "remote MAC 1 unicast"
|
__test_unicast $r2_mac 198.51.100.4 4 20 "remote MAC 2 unicast"
|
|
for target in "${targets[@]}"; do
|
vxlan_fdb_add_del del 20 $target
|
done
|
}
|
|
test_pvid()
|
{
|
local -a expects=(0 0 0 0 0)
|
local mac=de:ad:be:ef:13:37
|
local dst=192.0.2.100
|
local vid=10
|
|
# Check that flooding works
|
RET=0
|
|
expects[0]=10; expects[1]=10; expects[3]=10
|
vxlan_flood_test $mac $dst $vid "${expects[@]}"
|
|
log_test "VXLAN: flood before pvid off"
|
|
# Toggle PVID off and test that flood to remote hosts does not work
|
RET=0
|
|
bridge vlan add vid 10 dev vx10
|
|
expects[0]=10; expects[1]=0; expects[3]=0
|
vxlan_flood_test $mac $dst $vid "${expects[@]}"
|
|
log_test "VXLAN: flood after pvid off"
|
|
# Toggle PVID on and test that flood to remote hosts does work
|
RET=0
|
|
bridge vlan add vid 10 dev vx10 pvid untagged
|
|
expects[0]=10; expects[1]=10; expects[3]=10
|
vxlan_flood_test $mac $dst $vid "${expects[@]}"
|
|
log_test "VXLAN: flood after pvid on"
|
|
# Add a new VLAN and test that it does not affect flooding
|
RET=0
|
|
bridge vlan add vid 30 dev vx10
|
|
expects[0]=10; expects[1]=10; expects[3]=10
|
vxlan_flood_test $mac $dst $vid "${expects[@]}"
|
|
bridge vlan del vid 30 dev vx10
|
|
log_test "VXLAN: flood after vlan add"
|
|
# Remove currently mapped VLAN and test that flood to remote hosts does
|
# not work
|
RET=0
|
|
bridge vlan del vid 10 dev vx10
|
|
expects[0]=10; expects[1]=0; expects[3]=0
|
vxlan_flood_test $mac $dst $vid "${expects[@]}"
|
|
log_test "VXLAN: flood after vlan delete"
|
|
# Re-add the VLAN and test that flood to remote hosts does work
|
RET=0
|
|
bridge vlan add vid 10 dev vx10 pvid untagged
|
|
expects[0]=10; expects[1]=10; expects[3]=10
|
vxlan_flood_test $mac $dst $vid "${expects[@]}"
|
|
log_test "VXLAN: flood after vlan re-add"
|
}
|
|
vxlan_ping_test()
|
{
|
local ping_dev=$1; shift
|
local ping_dip=$1; shift
|
local ping_args=$1; shift
|
local capture_dev=$1; shift
|
local capture_dir=$1; shift
|
local capture_pref=$1; shift
|
local expect=$1; shift
|
|
local t0=$(tc_rule_stats_get $capture_dev $capture_pref $capture_dir)
|
ping_do $ping_dev $ping_dip "$ping_args"
|
local t1=$(tc_rule_stats_get $capture_dev $capture_pref $capture_dir)
|
local delta=$((t1 - t0))
|
|
# Tolerate a couple stray extra packets.
|
((expect <= delta && delta <= expect + 2))
|
check_err $? "$capture_dev: Expected to capture $expect packets, got $delta."
|
}
|
|
__test_learning()
|
{
|
local -a expects=(0 0 0 0 0)
|
local mac=$1; shift
|
local dst=$1; shift
|
local vid=$1; shift
|
local idx1=$1; shift
|
local idx2=$1; shift
|
local vx=vx$vid
|
|
# Check that flooding works
|
RET=0
|
|
expects[0]=10; expects[$idx1]=10; expects[$idx2]=10
|
vxlan_flood_test $mac $dst $vid "${expects[@]}"
|
|
log_test "VXLAN: flood before learning"
|
|
# Send a packet with source mac set to $mac from host w2 and check that
|
# a corresponding entry is created in the VxLAN device
|
RET=0
|
|
in_ns ns1 $MZ w2 -Q $vid -c 1 -p 64 -a $mac -b ff:ff:ff:ff:ff:ff \
|
-B $dst -t icmp -q
|
sleep 1
|
|
bridge fdb show brport $vx | grep $mac | grep -q self
|
check_err $?
|
bridge fdb show brport $vx | grep $mac | grep "vlan $vid" \
|
| grep -q -v self
|
check_err $?
|
|
log_test "VXLAN: show learned FDB entry"
|
|
# Repeat first test and check that packets only reach host w2 in ns1
|
RET=0
|
|
expects[0]=0; expects[$idx1]=10; expects[$idx2]=0
|
vxlan_flood_test $mac $dst $vid "${expects[@]}"
|
|
log_test "VXLAN: learned FDB entry"
|
|
# Delete the learned FDB entry from the VxLAN and bridge devices and
|
# check that packets are flooded
|
RET=0
|
|
bridge fdb del dev $vx $mac master self vlan $vid
|
sleep 1
|
|
expects[0]=10; expects[$idx1]=10; expects[$idx2]=10
|
vxlan_flood_test $mac $dst $vid "${expects[@]}"
|
|
log_test "VXLAN: deletion of learned FDB entry"
|
|
# Re-learn the first FDB entry and check that it is correctly aged-out
|
RET=0
|
|
in_ns ns1 $MZ w2 -Q $vid -c 1 -p 64 -a $mac -b ff:ff:ff:ff:ff:ff \
|
-B $dst -t icmp -q
|
sleep 1
|
|
bridge fdb show brport $vx | grep $mac | grep -q self
|
check_err $?
|
bridge fdb show brport $vx | grep $mac | grep "vlan $vid" \
|
| grep -q -v self
|
check_err $?
|
|
expects[0]=0; expects[$idx1]=10; expects[$idx2]=0
|
vxlan_flood_test $mac $dst $vid "${expects[@]}"
|
|
sleep 20
|
|
bridge fdb show brport $vx | grep $mac | grep -q self
|
check_fail $?
|
bridge fdb show brport $vx | grep $mac | grep "vlan $vid" \
|
| grep -q -v self
|
check_fail $?
|
|
expects[0]=10; expects[$idx1]=10; expects[$idx2]=10
|
vxlan_flood_test $mac $dst $vid "${expects[@]}"
|
|
log_test "VXLAN: Ageing of learned FDB entry"
|
|
# Toggle learning on the bridge port and check that the bridge's FDB
|
# is populated only when it should
|
RET=0
|
|
ip link set dev $vx type bridge_slave learning off
|
|
in_ns ns1 $MZ w2 -Q $vid -c 1 -p 64 -a $mac -b ff:ff:ff:ff:ff:ff \
|
-B $dst -t icmp -q
|
sleep 1
|
|
bridge fdb show brport $vx | grep $mac | grep "vlan $vid" \
|
| grep -q -v self
|
check_fail $?
|
|
ip link set dev $vx type bridge_slave learning on
|
|
in_ns ns1 $MZ w2 -Q $vid -c 1 -p 64 -a $mac -b ff:ff:ff:ff:ff:ff \
|
-B $dst -t icmp -q
|
sleep 1
|
|
bridge fdb show brport $vx | grep $mac | grep "vlan $vid" \
|
| grep -q -v self
|
check_err $?
|
|
log_test "VXLAN: learning toggling on bridge port"
|
}
|
|
test_learning()
|
{
|
local mac=de:ad:be:ef:13:37
|
local dst=192.0.2.100
|
local vid=10
|
|
# Enable learning on the VxLAN devices and set ageing time to 10 seconds
|
ip link set dev br1 type bridge ageing_time 1000
|
ip link set dev vx10 type vxlan ageing 10
|
ip link set dev vx10 type vxlan learning
|
ip link set dev vx20 type vxlan ageing 10
|
ip link set dev vx20 type vxlan learning
|
reapply_config
|
|
log_info "learning vlan 10"
|
|
__test_learning $mac $dst $vid 1 3
|
|
log_info "learning vlan 20"
|
|
mac=ca:fe:be:ef:13:37
|
dst=198.51.100.100
|
vid=20
|
|
__test_learning $mac $dst $vid 2 4
|
|
# Restore previous settings
|
ip link set dev vx20 type vxlan nolearning
|
ip link set dev vx20 type vxlan ageing 300
|
ip link set dev vx10 type vxlan nolearning
|
ip link set dev vx10 type vxlan ageing 300
|
ip link set dev br1 type bridge ageing_time 30000
|
reapply_config
|
}
|
|
test_all()
|
{
|
log_info "Running tests with UDP port $VXPORT"
|
tests_run
|
}
|
|
trap cleanup EXIT
|
|
setup_prepare
|
setup_wait
|
test_all
|
|
exit $EXIT_STATUS
|
