| .. | .. |
|---|
| 1 | 1 | #!/bin/bash |
|---|
| 2 | 2 | # SPDX-License-Identifier: GPL-2.0 |
|---|
| 3 | 3 | |
|---|
| 4 | | -ALL_TESTS="ping_ipv4 ping_ipv6" |
|---|
| 4 | +ALL_TESTS=" |
|---|
| 5 | + ping_ipv4 |
|---|
| 6 | + ping_ipv6 |
|---|
| 7 | + sip_in_class_e |
|---|
| 8 | + mc_mac_mismatch |
|---|
| 9 | + ipv4_sip_equal_dip |
|---|
| 10 | + ipv6_sip_equal_dip |
|---|
| 11 | + ipv4_dip_link_local |
|---|
| 12 | +" |
|---|
| 13 | + |
|---|
| 5 | 14 | NUM_NETIFS=4 |
|---|
| 6 | 15 | source lib.sh |
|---|
| 16 | +source tc_common.sh |
|---|
| 17 | + |
|---|
| 18 | +require_command $MCD |
|---|
| 19 | +require_command $MC_CLI |
|---|
| 20 | +table_name=selftests |
|---|
| 7 | 21 | |
|---|
| 8 | 22 | h1_create() |
|---|
| 9 | 23 | { |
|---|
| .. | .. |
|---|
| 64 | 78 | ip link set dev $rp1 up |
|---|
| 65 | 79 | ip link set dev $rp2 up |
|---|
| 66 | 80 | |
|---|
| 81 | + tc qdisc add dev $rp2 clsact |
|---|
| 82 | + |
|---|
| 67 | 83 | ip address add 192.0.2.1/24 dev $rp1 |
|---|
| 68 | 84 | ip address add 2001:db8:1::1/64 dev $rp1 |
|---|
| 69 | 85 | |
|---|
| .. | .. |
|---|
| 79 | 95 | ip address del 2001:db8:1::1/64 dev $rp1 |
|---|
| 80 | 96 | ip address del 192.0.2.1/24 dev $rp1 |
|---|
| 81 | 97 | |
|---|
| 98 | + tc qdisc del dev $rp2 clsact |
|---|
| 99 | + |
|---|
| 82 | 100 | ip link set dev $rp2 down |
|---|
| 83 | 101 | ip link set dev $rp1 down |
|---|
| 102 | +} |
|---|
| 103 | + |
|---|
| 104 | +start_mcd() |
|---|
| 105 | +{ |
|---|
| 106 | + SMCROUTEDIR="$(mktemp -d)" |
|---|
| 107 | + |
|---|
| 108 | + for ((i = 1; i <= $NUM_NETIFS; ++i)); do |
|---|
| 109 | + echo "phyint ${NETIFS[p$i]} enable" >> \ |
|---|
| 110 | + $SMCROUTEDIR/$table_name.conf |
|---|
| 111 | + done |
|---|
| 112 | + |
|---|
| 113 | + $MCD -N -I $table_name -f $SMCROUTEDIR/$table_name.conf \ |
|---|
| 114 | + -P $SMCROUTEDIR/$table_name.pid |
|---|
| 115 | +} |
|---|
| 116 | + |
|---|
| 117 | +kill_mcd() |
|---|
| 118 | +{ |
|---|
| 119 | + pkill $MCD |
|---|
| 120 | + rm -rf $SMCROUTEDIR |
|---|
| 84 | 121 | } |
|---|
| 85 | 122 | |
|---|
| 86 | 123 | setup_prepare() |
|---|
| .. | .. |
|---|
| 90 | 127 | |
|---|
| 91 | 128 | rp2=${NETIFS[p3]} |
|---|
| 92 | 129 | h2=${NETIFS[p4]} |
|---|
| 130 | + |
|---|
| 131 | + rp1mac=$(mac_get $rp1) |
|---|
| 132 | + |
|---|
| 133 | + start_mcd |
|---|
| 93 | 134 | |
|---|
| 94 | 135 | vrf_prepare |
|---|
| 95 | 136 | |
|---|
| .. | .. |
|---|
| 113 | 154 | h1_destroy |
|---|
| 114 | 155 | |
|---|
| 115 | 156 | vrf_cleanup |
|---|
| 157 | + |
|---|
| 158 | + kill_mcd |
|---|
| 116 | 159 | } |
|---|
| 117 | 160 | |
|---|
| 118 | 161 | ping_ipv4() |
|---|
| .. | .. |
|---|
| 125 | 168 | ping6_test $h1 2001:db8:2::2 |
|---|
| 126 | 169 | } |
|---|
| 127 | 170 | |
|---|
| 171 | +sip_in_class_e() |
|---|
| 172 | +{ |
|---|
| 173 | + RET=0 |
|---|
| 174 | + |
|---|
| 175 | + # Disable rpfilter to prevent packets to be dropped because of it. |
|---|
| 176 | + sysctl_set net.ipv4.conf.all.rp_filter 0 |
|---|
| 177 | + sysctl_set net.ipv4.conf.$rp1.rp_filter 0 |
|---|
| 178 | + |
|---|
| 179 | + tc filter add dev $rp2 egress protocol ip pref 1 handle 101 \ |
|---|
| 180 | + flower src_ip 240.0.0.1 ip_proto udp action pass |
|---|
| 181 | + |
|---|
| 182 | + $MZ $h1 -t udp "sp=54321,dp=12345" -c 5 -d 1msec \ |
|---|
| 183 | + -A 240.0.0.1 -b $rp1mac -B 198.51.100.2 -q |
|---|
| 184 | + |
|---|
| 185 | + tc_check_packets "dev $rp2 egress" 101 5 |
|---|
| 186 | + check_err $? "Packets were dropped" |
|---|
| 187 | + |
|---|
| 188 | + log_test "Source IP in class E" |
|---|
| 189 | + |
|---|
| 190 | + tc filter del dev $rp2 egress protocol ip pref 1 handle 101 flower |
|---|
| 191 | + sysctl_restore net.ipv4.conf.$rp1.rp_filter |
|---|
| 192 | + sysctl_restore net.ipv4.conf.all.rp_filter |
|---|
| 193 | +} |
|---|
| 194 | + |
|---|
| 195 | +create_mcast_sg() |
|---|
| 196 | +{ |
|---|
| 197 | + local if_name=$1; shift |
|---|
| 198 | + local s_addr=$1; shift |
|---|
| 199 | + local mcast=$1; shift |
|---|
| 200 | + local dest_ifs=${@} |
|---|
| 201 | + |
|---|
| 202 | + $MC_CLI -I $table_name add $if_name $s_addr $mcast $dest_ifs |
|---|
| 203 | +} |
|---|
| 204 | + |
|---|
| 205 | +delete_mcast_sg() |
|---|
| 206 | +{ |
|---|
| 207 | + local if_name=$1; shift |
|---|
| 208 | + local s_addr=$1; shift |
|---|
| 209 | + local mcast=$1; shift |
|---|
| 210 | + local dest_ifs=${@} |
|---|
| 211 | + |
|---|
| 212 | + $MC_CLI -I $table_name remove $if_name $s_addr $mcast $dest_ifs |
|---|
| 213 | +} |
|---|
| 214 | + |
|---|
| 215 | +__mc_mac_mismatch() |
|---|
| 216 | +{ |
|---|
| 217 | + local desc=$1; shift |
|---|
| 218 | + local proto=$1; shift |
|---|
| 219 | + local sip=$1; shift |
|---|
| 220 | + local dip=$1; shift |
|---|
| 221 | + local flags=${1:-""}; shift |
|---|
| 222 | + local dmac=01:02:03:04:05:06 |
|---|
| 223 | + |
|---|
| 224 | + RET=0 |
|---|
| 225 | + |
|---|
| 226 | + tc filter add dev $rp2 egress protocol $proto pref 1 handle 101 \ |
|---|
| 227 | + flower dst_ip $dip action pass |
|---|
| 228 | + |
|---|
| 229 | + create_mcast_sg $rp1 $sip $dip $rp2 |
|---|
| 230 | + |
|---|
| 231 | + $MZ $flags $h1 -t udp "sp=54321,dp=12345" -c 5 -d 1msec -b $dmac \ |
|---|
| 232 | + -B $dip -q |
|---|
| 233 | + |
|---|
| 234 | + tc_check_packets "dev $rp2 egress" 101 5 |
|---|
| 235 | + check_err $? "Packets were dropped" |
|---|
| 236 | + |
|---|
| 237 | + log_test "Multicast MAC mismatch: $desc" |
|---|
| 238 | + |
|---|
| 239 | + delete_mcast_sg $rp1 $sip $dip $rp2 |
|---|
| 240 | + tc filter del dev $rp2 egress protocol $proto pref 1 handle 101 flower |
|---|
| 241 | +} |
|---|
| 242 | + |
|---|
| 243 | +mc_mac_mismatch() |
|---|
| 244 | +{ |
|---|
| 245 | + __mc_mac_mismatch "IPv4" "ip" 192.0.2.2 225.1.2.3 |
|---|
| 246 | + __mc_mac_mismatch "IPv6" "ipv6" 2001:db8:1::2 ff0e::3 "-6" |
|---|
| 247 | +} |
|---|
| 248 | + |
|---|
| 249 | +ipv4_sip_equal_dip() |
|---|
| 250 | +{ |
|---|
| 251 | + RET=0 |
|---|
| 252 | + |
|---|
| 253 | + # Disable rpfilter to prevent packets to be dropped because of it. |
|---|
| 254 | + sysctl_set net.ipv4.conf.all.rp_filter 0 |
|---|
| 255 | + sysctl_set net.ipv4.conf.$rp1.rp_filter 0 |
|---|
| 256 | + |
|---|
| 257 | + tc filter add dev $rp2 egress protocol ip pref 1 handle 101 \ |
|---|
| 258 | + flower src_ip 198.51.100.2 action pass |
|---|
| 259 | + |
|---|
| 260 | + $MZ $h1 -t udp "sp=54321,dp=12345" -c 5 -d 1msec \ |
|---|
| 261 | + -A 198.51.100.2 -b $rp1mac -B 198.51.100.2 -q |
|---|
| 262 | + |
|---|
| 263 | + tc_check_packets "dev $rp2 egress" 101 5 |
|---|
| 264 | + check_err $? "Packets were dropped" |
|---|
| 265 | + |
|---|
| 266 | + log_test "Source IP is equal to destination IP: IPv4" |
|---|
| 267 | + |
|---|
| 268 | + tc filter del dev $rp2 egress protocol ip pref 1 handle 101 flower |
|---|
| 269 | + sysctl_restore net.ipv4.conf.$rp1.rp_filter |
|---|
| 270 | + sysctl_restore net.ipv4.conf.all.rp_filter |
|---|
| 271 | +} |
|---|
| 272 | + |
|---|
| 273 | +ipv6_sip_equal_dip() |
|---|
| 274 | +{ |
|---|
| 275 | + RET=0 |
|---|
| 276 | + |
|---|
| 277 | + tc filter add dev $rp2 egress protocol ipv6 pref 1 handle 101 \ |
|---|
| 278 | + flower src_ip 2001:db8:2::2 action pass |
|---|
| 279 | + |
|---|
| 280 | + $MZ -6 $h1 -t udp "sp=54321,dp=12345" -c 5 -d 1msec \ |
|---|
| 281 | + -A 2001:db8:2::2 -b $rp1mac -B 2001:db8:2::2 -q |
|---|
| 282 | + |
|---|
| 283 | + tc_check_packets "dev $rp2 egress" 101 5 |
|---|
| 284 | + check_err $? "Packets were dropped" |
|---|
| 285 | + |
|---|
| 286 | + log_test "Source IP is equal to destination IP: IPv6" |
|---|
| 287 | + |
|---|
| 288 | + tc filter del dev $rp2 egress protocol ipv6 pref 1 handle 101 flower |
|---|
| 289 | +} |
|---|
| 290 | + |
|---|
| 291 | +ipv4_dip_link_local() |
|---|
| 292 | +{ |
|---|
| 293 | + local dip=169.254.1.1 |
|---|
| 294 | + |
|---|
| 295 | + RET=0 |
|---|
| 296 | + |
|---|
| 297 | + tc filter add dev $rp2 egress protocol ip pref 1 handle 101 \ |
|---|
| 298 | + flower dst_ip $dip action pass |
|---|
| 299 | + |
|---|
| 300 | + ip neigh add 169.254.1.1 lladdr 00:11:22:33:44:55 dev $rp2 |
|---|
| 301 | + ip route add 169.254.1.0/24 dev $rp2 |
|---|
| 302 | + |
|---|
| 303 | + $MZ $h1 -t udp "sp=54321,dp=12345" -c 5 -d 1msec -b $rp1mac -B $dip -q |
|---|
| 304 | + |
|---|
| 305 | + tc_check_packets "dev $rp2 egress" 101 5 |
|---|
| 306 | + check_err $? "Packets were dropped" |
|---|
| 307 | + |
|---|
| 308 | + log_test "IPv4 destination IP is link-local" |
|---|
| 309 | + |
|---|
| 310 | + ip route del 169.254.1.0/24 dev $rp2 |
|---|
| 311 | + ip neigh del 169.254.1.1 lladdr 00:11:22:33:44:55 dev $rp2 |
|---|
| 312 | + tc filter del dev $rp2 egress protocol ip pref 1 handle 101 flower |
|---|
| 313 | +} |
|---|
| 314 | + |
|---|
| 128 | 315 | trap cleanup EXIT |
|---|
| 129 | 316 | |
|---|
| 130 | 317 | setup_prepare |
|---|