1#!/bin/bash 2# 3# This test is for checking rtnetlink callpaths, and get as much coverage as possible. 4# 5# set -e 6 7ALL_TESTS=" 8 kci_test_polrouting 9 kci_test_route_get 10 kci_test_addrlft 11 kci_test_promote_secondaries 12 kci_test_tc 13 kci_test_gre 14 kci_test_gretap 15 kci_test_ip6gretap 16 kci_test_erspan 17 kci_test_ip6erspan 18 kci_test_bridge 19 kci_test_addrlabel 20 kci_test_ifalias 21 kci_test_vrf 22 kci_test_encap 23 kci_test_macsec 24 kci_test_macsec_offload 25 kci_test_ipsec 26 kci_test_ipsec_offload 27 kci_test_fdb_get 28 kci_test_neigh_get 29 kci_test_bridge_parent_id 30 kci_test_address_proto 31 kci_test_enslave_bonding 32" 33 34devdummy="test-dummy0" 35VERBOSE=0 36PAUSE=no 37PAUSE_ON_FAIL=no 38 39source lib.sh 40 41# set global exit status, but never reset nonzero one. 42check_err() 43{ 44 if [ $ret -eq 0 ]; then 45 ret=$1 46 fi 47} 48 49# same but inverted -- used when command must fail for test to pass 50check_fail() 51{ 52 if [ $1 -eq 0 ]; then 53 ret=1 54 fi 55} 56 57run_cmd_common() 58{ 59 local cmd="$*" 60 local out 61 if [ "$VERBOSE" = "1" ]; then 62 echo "COMMAND: ${cmd}" 63 fi 64 out=$($cmd 2>&1) 65 rc=$? 66 if [ "$VERBOSE" = "1" -a -n "$out" ]; then 67 echo " $out" 68 fi 69 return $rc 70} 71 72run_cmd() { 73 run_cmd_common "$@" 74 rc=$? 75 check_err $rc 76 return $rc 77} 78run_cmd_fail() 79{ 80 run_cmd_common "$@" 81 rc=$? 82 check_fail $rc 83 return $rc 84} 85 86run_cmd_grep_common() 87{ 88 local find="$1"; shift 89 local cmd="$*" 90 local out 91 if [ "$VERBOSE" = "1" ]; then 92 echo "COMMAND: ${cmd} 2>&1 | grep -q '${find}'" 93 fi 94 out=$($cmd 2>&1 | grep -q "${find}" 2>&1) 95 return $? 96} 97 98run_cmd_grep() { 99 run_cmd_grep_common "$@" 100 rc=$? 101 check_err $rc 102 return $rc 103} 104 105run_cmd_grep_fail() 106{ 107 run_cmd_grep_common "$@" 108 rc=$? 109 check_fail $rc 110 return $rc 111} 112 113end_test() 114{ 115 echo "$*" 116 [ "${VERBOSE}" = "1" ] && echo 117 118 if [[ $ret -ne 0 ]] && [[ "${PAUSE_ON_FAIL}" = "yes" ]]; then 119 echo "Hit enter to continue" 120 read a 121 fi; 122 123 if [ "${PAUSE}" = "yes" ]; then 124 echo "Hit enter to continue" 125 read a 126 fi 127 128} 129 130 131kci_add_dummy() 132{ 133 run_cmd ip link add name "$devdummy" type dummy 134 run_cmd ip link set "$devdummy" up 135} 136 137kci_del_dummy() 138{ 139 run_cmd ip link del dev "$devdummy" 140} 141 142kci_test_netconf() 143{ 144 dev="$1" 145 r=$ret 146 run_cmd ip netconf show dev "$dev" 147 for f in 4 6; do 148 run_cmd ip -$f netconf show dev "$dev" 149 done 150 151 if [ $ret -ne 0 ] ;then 152 end_test "FAIL: ip netconf show $dev" 153 test $r -eq 0 && ret=0 154 return 1 155 fi 156} 157 158# add a bridge with vlans on top 159kci_test_bridge() 160{ 161 devbr="test-br0" 162 vlandev="testbr-vlan1" 163 164 local ret=0 165 run_cmd ip link add name "$devbr" type bridge 166 run_cmd ip link set dev "$devdummy" master "$devbr" 167 run_cmd ip link set "$devbr" up 168 run_cmd ip link add link "$devbr" name "$vlandev" type vlan id 1 169 run_cmd ip addr add dev "$vlandev" 10.200.7.23/30 170 run_cmd ip -6 addr add dev "$vlandev" dead:42::1234/64 171 run_cmd ip -d link 172 run_cmd ip r s t all 173 174 for name in "$devbr" "$vlandev" "$devdummy" ; do 175 kci_test_netconf "$name" 176 done 177 run_cmd ip -6 addr del dev "$vlandev" dead:42::1234/64 178 run_cmd ip link del dev "$vlandev" 179 run_cmd ip link del dev "$devbr" 180 181 if [ $ret -ne 0 ];then 182 end_test "FAIL: bridge setup" 183 return 1 184 fi 185 end_test "PASS: bridge setup" 186 187} 188 189kci_test_gre() 190{ 191 gredev=neta 192 rem=10.42.42.1 193 loc=10.0.0.1 194 195 local ret=0 196 run_cmd ip tunnel add $gredev mode gre remote $rem local $loc ttl 1 197 run_cmd ip link set $gredev up 198 run_cmd ip addr add 10.23.7.10 dev $gredev 199 run_cmd ip route add 10.23.8.0/30 dev $gredev 200 run_cmd ip addr add dev "$devdummy" 10.23.7.11/24 201 run_cmd ip link 202 run_cmd ip addr 203 204 kci_test_netconf "$gredev" 205 run_cmd ip addr del dev "$devdummy" 10.23.7.11/24 206 run_cmd ip link del $gredev 207 208 if [ $ret -ne 0 ];then 209 end_test "FAIL: gre tunnel endpoint" 210 return 1 211 fi 212 end_test "PASS: gre tunnel endpoint" 213} 214 215# tc uses rtnetlink too, for full tc testing 216# please see tools/testing/selftests/tc-testing. 217kci_test_tc() 218{ 219 dev=lo 220 local ret=0 221 222 run_cmd tc qdisc add dev "$dev" root handle 1: htb 223 run_cmd tc class add dev "$dev" parent 1: classid 1:10 htb rate 1mbit 224 run_cmd tc filter add dev "$dev" parent 1:0 prio 5 handle ffe: protocol ip u32 divisor 256 225 run_cmd tc filter add dev "$dev" parent 1:0 prio 5 handle ffd: protocol ip u32 divisor 256 226 run_cmd tc filter add dev "$dev" parent 1:0 prio 5 handle ffc: protocol ip u32 divisor 256 227 run_cmd tc filter add dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:3 u32 ht ffe:2: match ip src 10.0.0.3 flowid 1:10 228 run_cmd tc filter add dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:2 u32 ht ffe:2: match ip src 10.0.0.2 flowid 1:10 229 run_cmd tc filter show dev "$dev" parent 1:0 230 run_cmd tc filter del dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:3 u32 231 run_cmd tc filter show dev "$dev" parent 1:0 232 run_cmd tc qdisc del dev "$dev" root handle 1: htb 233 234 if [ $ret -ne 0 ];then 235 end_test "FAIL: tc htb hierarchy" 236 return 1 237 fi 238 end_test "PASS: tc htb hierarchy" 239 240} 241 242kci_test_polrouting() 243{ 244 local ret=0 245 run_cmd ip rule add fwmark 1 lookup 100 246 run_cmd ip route add local 0.0.0.0/0 dev lo table 100 247 run_cmd ip r s t all 248 run_cmd ip rule del fwmark 1 lookup 100 249 run_cmd ip route del local 0.0.0.0/0 dev lo table 100 250 251 if [ $ret -ne 0 ];then 252 end_test "FAIL: policy route test" 253 return 1 254 fi 255 end_test "PASS: policy routing" 256} 257 258kci_test_route_get() 259{ 260 local hash_policy=$(sysctl -n net.ipv4.fib_multipath_hash_policy) 261 262 local ret=0 263 run_cmd ip route get 127.0.0.1 264 run_cmd ip route get 127.0.0.1 dev "$devdummy" 265 run_cmd ip route get ::1 266 run_cmd ip route get fe80::1 dev "$devdummy" 267 run_cmd ip route get 127.0.0.1 from 127.0.0.1 oif lo tos 0x10 mark 0x1 268 run_cmd ip route get ::1 from ::1 iif lo oif lo tos 0x10 mark 0x1 269 run_cmd ip addr add dev "$devdummy" 10.23.7.11/24 270 run_cmd ip route get 10.23.7.11 from 10.23.7.12 iif "$devdummy" 271 run_cmd ip route add 10.23.8.0/24 \ 272 nexthop via 10.23.7.13 dev "$devdummy" \ 273 nexthop via 10.23.7.14 dev "$devdummy" 274 275 sysctl -wq net.ipv4.fib_multipath_hash_policy=0 276 run_cmd ip route get 10.23.8.11 277 sysctl -wq net.ipv4.fib_multipath_hash_policy=1 278 run_cmd ip route get 10.23.8.11 279 sysctl -wq net.ipv4.fib_multipath_hash_policy="$hash_policy" 280 run_cmd ip route del 10.23.8.0/24 281 run_cmd ip addr del dev "$devdummy" 10.23.7.11/24 282 283 284 if [ $ret -ne 0 ];then 285 end_test "FAIL: route get" 286 return 1 287 fi 288 289 end_test "PASS: route get" 290} 291 292kci_test_addrlft() 293{ 294 for i in $(seq 10 100) ;do 295 lft=$(((RANDOM%3) + 1)) 296 run_cmd ip addr add 10.23.11.$i/32 dev "$devdummy" preferred_lft $lft valid_lft $((lft+1)) 297 done 298 299 sleep 5 300 run_cmd_grep_fail "10.23.11." ip addr show dev "$devdummy" 301 if [ $? -eq 0 ]; then 302 check_err 1 303 end_test "FAIL: preferred_lft addresses remaining" 304 return 305 fi 306 307 end_test "PASS: preferred_lft addresses have expired" 308} 309 310kci_test_promote_secondaries() 311{ 312 promote=$(sysctl -n net.ipv4.conf.$devdummy.promote_secondaries) 313 314 sysctl -q net.ipv4.conf.$devdummy.promote_secondaries=1 315 316 for i in $(seq 2 254);do 317 IP="10.23.11.$i" 318 ip -f inet addr add $IP/16 brd + dev "$devdummy" 319 ifconfig "$devdummy" $IP netmask 255.255.0.0 320 done 321 322 ip addr flush dev "$devdummy" 323 324 [ $promote -eq 0 ] && sysctl -q net.ipv4.conf.$devdummy.promote_secondaries=0 325 326 end_test "PASS: promote_secondaries complete" 327} 328 329kci_test_addrlabel() 330{ 331 local ret=0 332 run_cmd ip addrlabel add prefix dead::/64 dev lo label 1 333 run_cmd_grep "prefix dead::/64 dev lo label 1" ip addrlabel list 334 run_cmd ip addrlabel del prefix dead::/64 dev lo label 1 335 run_cmd ip addrlabel add prefix dead::/64 label 1 336 run_cmd ip addrlabel del prefix dead::/64 label 1 337 338 # concurrent add/delete 339 for i in $(seq 1 1000); do 340 ip addrlabel add prefix 1c3::/64 label 12345 2>/dev/null 341 done & 342 343 for i in $(seq 1 1000); do 344 ip addrlabel del prefix 1c3::/64 label 12345 2>/dev/null 345 done 346 347 wait 348 349 ip addrlabel del prefix 1c3::/64 label 12345 2>/dev/null 350 351 if [ $ret -ne 0 ];then 352 end_test "FAIL: ipv6 addrlabel" 353 return 1 354 fi 355 356 end_test "PASS: ipv6 addrlabel" 357} 358 359kci_test_ifalias() 360{ 361 local ret=0 362 namewant=$(uuidgen) 363 syspathname="/sys/class/net/$devdummy/ifalias" 364 run_cmd ip link set dev "$devdummy" alias "$namewant" 365 366 if [ $ret -ne 0 ]; then 367 end_test "FAIL: cannot set interface alias of $devdummy to $namewant" 368 return 1 369 fi 370 run_cmd_grep "alias $namewant" ip link show "$devdummy" 371 372 if [ -r "$syspathname" ] ; then 373 read namehave < "$syspathname" 374 if [ "$namewant" != "$namehave" ]; then 375 end_test "FAIL: did set ifalias $namewant but got $namehave" 376 return 1 377 fi 378 379 namewant=$(uuidgen) 380 echo "$namewant" > "$syspathname" 381 run_cmd_grep "alias $namewant" ip link show "$devdummy" 382 383 # sysfs interface allows to delete alias again 384 echo "" > "$syspathname" 385 run_cmd_grep_fail "alias $namewant" ip link show "$devdummy" 386 387 for i in $(seq 1 100); do 388 uuidgen > "$syspathname" & 389 done 390 391 wait 392 393 # re-add the alias -- kernel should free mem when dummy dev is removed 394 run_cmd ip link set dev "$devdummy" alias "$namewant" 395 396 fi 397 398 if [ $ret -ne 0 ]; then 399 end_test "FAIL: set interface alias $devdummy to $namewant" 400 return 1 401 fi 402 403 end_test "PASS: set ifalias $namewant for $devdummy" 404} 405 406kci_test_vrf() 407{ 408 vrfname="test-vrf" 409 local ret=0 410 run_cmd ip link show type vrf 411 if [ $? -ne 0 ]; then 412 end_test "SKIP: vrf: iproute2 too old" 413 return $ksft_skip 414 fi 415 run_cmd ip link add "$vrfname" type vrf table 10 416 if [ $ret -ne 0 ];then 417 end_test "FAIL: can't add vrf interface, skipping test" 418 return 0 419 fi 420 run_cmd_grep "$vrfname" ip -br link show type vrf 421 if [ $ret -ne 0 ];then 422 end_test "FAIL: created vrf device not found" 423 return 1 424 fi 425 426 run_cmd ip link set dev "$vrfname" up 427 run_cmd ip link set dev "$devdummy" master "$vrfname" 428 run_cmd ip link del dev "$vrfname" 429 430 if [ $ret -ne 0 ];then 431 end_test "FAIL: vrf" 432 return 1 433 fi 434 435 end_test "PASS: vrf" 436} 437 438kci_test_encap_vxlan() 439{ 440 local ret=0 441 vxlan="test-vxlan0" 442 vlan="test-vlan0" 443 run_cmd ip -netns "$testns" link add "$vxlan" type vxlan id 42 group 239.1.1.1 \ 444 dev "$devdummy" dstport 4789 445 if [ $? -ne 0 ]; then 446 end_test "FAIL: can't add vxlan interface, skipping test" 447 return 0 448 fi 449 450 run_cmd ip -netns "$testns" addr add 10.2.11.49/24 dev "$vxlan" 451 run_cmd ip -netns "$testns" link set up dev "$vxlan" 452 run_cmd ip -netns "$testns" link add link "$vxlan" name "$vlan" type vlan id 1 453 454 # changelink testcases 455 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan vni 43 456 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan group ffe5::5 dev "$devdummy" 457 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan ttl inherit 458 459 run_cmd ip -netns "$testns" link set dev "$vxlan" type vxlan ttl 64 460 run_cmd ip -netns "$testns" link set dev "$vxlan" type vxlan nolearning 461 462 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan proxy 463 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan norsc 464 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan l2miss 465 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan l3miss 466 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan external 467 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan udpcsum 468 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan udp6zerocsumtx 469 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan udp6zerocsumrx 470 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan remcsumtx 471 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan remcsumrx 472 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan gbp 473 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan gpe 474 run_cmd ip -netns "$testns" link del "$vxlan" 475 476 if [ $ret -ne 0 ]; then 477 end_test "FAIL: vxlan" 478 return 1 479 fi 480 end_test "PASS: vxlan" 481} 482 483kci_test_encap_fou() 484{ 485 local ret=0 486 name="test-fou" 487 run_cmd_grep 'Usage: ip fou' ip fou help 488 if [ $? -ne 0 ];then 489 end_test "SKIP: fou: iproute2 too old" 490 return $ksft_skip 491 fi 492 493 if ! /sbin/modprobe -q -n fou; then 494 end_test "SKIP: module fou is not found" 495 return $ksft_skip 496 fi 497 /sbin/modprobe -q fou 498 499 run_cmd ip -netns "$testns" fou add port 7777 ipproto 47 500 if [ $? -ne 0 ];then 501 end_test "FAIL: can't add fou port 7777, skipping test" 502 return 1 503 fi 504 run_cmd ip -netns "$testns" fou add port 8888 ipproto 4 505 run_cmd_fail ip -netns "$testns" fou del port 9999 506 run_cmd ip -netns "$testns" fou del port 7777 507 if [ $ret -ne 0 ]; then 508 end_test "FAIL: fou"s 509 return 1 510 fi 511 512 end_test "PASS: fou" 513} 514 515# test various encap methods, use netns to avoid unwanted interference 516kci_test_encap() 517{ 518 local ret=0 519 setup_ns testns 520 if [ $? -ne 0 ]; then 521 end_test "SKIP encap tests: cannot add net namespace $testns" 522 return $ksft_skip 523 fi 524 run_cmd ip -netns "$testns" link set lo up 525 run_cmd ip -netns "$testns" link add name "$devdummy" type dummy 526 run_cmd ip -netns "$testns" link set "$devdummy" up 527 run_cmd kci_test_encap_vxlan 528 run_cmd kci_test_encap_fou 529 530 ip netns del "$testns" 531 return $ret 532} 533 534kci_test_macsec() 535{ 536 msname="test_macsec0" 537 local ret=0 538 run_cmd_grep "^Usage: ip macsec" ip macsec help 539 if [ $? -ne 0 ]; then 540 end_test "SKIP: macsec: iproute2 too old" 541 return $ksft_skip 542 fi 543 run_cmd ip link add link "$devdummy" "$msname" type macsec port 42 encrypt on 544 if [ $ret -ne 0 ];then 545 end_test "FAIL: can't add macsec interface, skipping test" 546 return 1 547 fi 548 run_cmd ip macsec add "$msname" tx sa 0 pn 1024 on key 01 12345678901234567890123456789012 549 run_cmd ip macsec add "$msname" rx port 1234 address "1c:ed:de:ad:be:ef" 550 run_cmd ip macsec add "$msname" rx port 1234 address "1c:ed:de:ad:be:ef" sa 0 pn 1 on key 00 0123456789abcdef0123456789abcdef 551 run_cmd ip macsec show 552 run_cmd ip link del dev "$msname" 553 554 if [ $ret -ne 0 ];then 555 end_test "FAIL: macsec" 556 return 1 557 fi 558 559 end_test "PASS: macsec" 560} 561 562kci_test_macsec_offload() 563{ 564 sysfsd=/sys/kernel/debug/netdevsim/netdevsim0/ports/0/ 565 sysfsnet=/sys/bus/netdevsim/devices/netdevsim0/net/ 566 probed=false 567 local ret=0 568 run_cmd_grep "^Usage: ip macsec" ip macsec help 569 if [ $? -ne 0 ]; then 570 end_test "SKIP: macsec: iproute2 too old" 571 return $ksft_skip 572 fi 573 574 if ! mount | grep -q debugfs; then 575 mount -t debugfs none /sys/kernel/debug/ &> /dev/null 576 fi 577 578 # setup netdevsim since dummydev doesn't have offload support 579 if [ ! -w /sys/bus/netdevsim/new_device ] ; then 580 run_cmd modprobe -q netdevsim 581 582 if [ $ret -ne 0 ]; then 583 end_test "SKIP: macsec_offload can't load netdevsim" 584 return $ksft_skip 585 fi 586 probed=true 587 fi 588 589 echo "0" > /sys/bus/netdevsim/new_device 590 while [ ! -d $sysfsnet ] ; do :; done 591 udevadm settle 592 dev=`ls $sysfsnet` 593 594 ip link set $dev up 595 if [ ! -d $sysfsd ] ; then 596 end_test "FAIL: macsec_offload can't create device $dev" 597 return 1 598 fi 599 run_cmd_grep 'macsec-hw-offload: on' ethtool -k $dev 600 if [ $? -eq 1 ] ; then 601 end_test "FAIL: macsec_offload netdevsim doesn't support MACsec offload" 602 return 1 603 fi 604 run_cmd ip link add link $dev kci_macsec1 type macsec port 4 offload mac 605 run_cmd ip link add link $dev kci_macsec2 type macsec address "aa:bb:cc:dd:ee:ff" port 5 offload mac 606 run_cmd ip link add link $dev kci_macsec3 type macsec sci abbacdde01020304 offload mac 607 run_cmd_fail ip link add link $dev kci_macsec4 type macsec port 8 offload mac 608 609 msname=kci_macsec1 610 run_cmd ip macsec add "$msname" tx sa 0 pn 1024 on key 01 12345678901234567890123456789012 611 run_cmd ip macsec add "$msname" rx port 1234 address "1c:ed:de:ad:be:ef" 612 run_cmd ip macsec add "$msname" rx port 1234 address "1c:ed:de:ad:be:ef" sa 0 pn 1 on \ 613 key 00 0123456789abcdef0123456789abcdef 614 run_cmd_fail ip macsec add "$msname" rx port 1235 address "1c:ed:de:ad:be:ef" 615 # clean up any leftovers 616 for msdev in kci_macsec{1,2,3,4} ; do 617 ip link del $msdev 2> /dev/null 618 done 619 echo 0 > /sys/bus/netdevsim/del_device 620 $probed && rmmod netdevsim 621 622 if [ $ret -ne 0 ]; then 623 end_test "FAIL: macsec_offload" 624 return 1 625 fi 626 end_test "PASS: macsec_offload" 627} 628 629#------------------------------------------------------------------- 630# Example commands 631# ip x s add proto esp src 14.0.0.52 dst 14.0.0.70 \ 632# spi 0x07 mode transport reqid 0x07 replay-window 32 \ 633# aead 'rfc4106(gcm(aes))' 1234567890123456dcba 128 \ 634# sel src 14.0.0.52/24 dst 14.0.0.70/24 635# ip x p add dir out src 14.0.0.52/24 dst 14.0.0.70/24 \ 636# tmpl proto esp src 14.0.0.52 dst 14.0.0.70 \ 637# spi 0x07 mode transport reqid 0x07 638# 639# Subcommands not tested 640# ip x s update 641# ip x s allocspi 642# ip x s deleteall 643# ip x p update 644# ip x p deleteall 645# ip x p set 646#------------------------------------------------------------------- 647kci_test_ipsec() 648{ 649 local ret=0 650 algo="aead rfc4106(gcm(aes)) 0x3132333435363738393031323334353664636261 128" 651 srcip=192.168.123.1 652 dstip=192.168.123.2 653 spi=7 654 655 ip addr add $srcip dev $devdummy 656 657 # flush to be sure there's nothing configured 658 run_cmd ip x s flush ; ip x p flush 659 660 # start the monitor in the background 661 tmpfile=`mktemp /var/run/ipsectestXXX` 662 mpid=`(ip x m > $tmpfile & echo $!) 2>/dev/null` 663 sleep 0.2 664 665 ipsecid="proto esp src $srcip dst $dstip spi 0x07" 666 run_cmd ip x s add $ipsecid \ 667 mode transport reqid 0x07 replay-window 32 \ 668 $algo sel src $srcip/24 dst $dstip/24 669 670 671 lines=`ip x s list | grep $srcip | grep $dstip | wc -l` 672 run_cmd test $lines -eq 2 673 run_cmd_grep "SAD count 1" ip x s count 674 675 lines=`ip x s get $ipsecid | grep $srcip | grep $dstip | wc -l` 676 run_cmd test $lines -eq 2 677 run_cmd ip x s delete $ipsecid 678 679 lines=`ip x s list | wc -l` 680 run_cmd test $lines -eq 0 681 682 ipsecsel="dir out src $srcip/24 dst $dstip/24" 683 run_cmd ip x p add $ipsecsel \ 684 tmpl proto esp src $srcip dst $dstip \ 685 spi 0x07 mode transport reqid 0x07 686 687 688 lines=`ip x p list | grep $srcip | grep $dstip | wc -l` 689 run_cmd test $lines -eq 2 690 691 run_cmd_grep "SPD IN 0 OUT 1 FWD 0" ip x p count 692 693 lines=`ip x p get $ipsecsel | grep $srcip | grep $dstip | wc -l` 694 run_cmd test $lines -eq 2 695 696 run_cmd ip x p delete $ipsecsel 697 698 lines=`ip x p list | wc -l` 699 run_cmd test $lines -eq 0 700 701 # check the monitor results 702 kill $mpid 703 lines=`wc -l $tmpfile | cut "-d " -f1` 704 run_cmd test $lines -eq 20 705 rm -rf $tmpfile 706 707 # clean up any leftovers 708 run_cmd ip x s flush 709 run_cmd ip x p flush 710 ip addr del $srcip/32 dev $devdummy 711 712 if [ $ret -ne 0 ]; then 713 end_test "FAIL: ipsec" 714 return 1 715 fi 716 end_test "PASS: ipsec" 717} 718 719#------------------------------------------------------------------- 720# Example commands 721# ip x s add proto esp src 14.0.0.52 dst 14.0.0.70 \ 722# spi 0x07 mode transport reqid 0x07 replay-window 32 \ 723# aead 'rfc4106(gcm(aes))' 1234567890123456dcba 128 \ 724# sel src 14.0.0.52/24 dst 14.0.0.70/24 725# offload dev sim1 dir out 726# ip x p add dir out src 14.0.0.52/24 dst 14.0.0.70/24 \ 727# tmpl proto esp src 14.0.0.52 dst 14.0.0.70 \ 728# spi 0x07 mode transport reqid 0x07 729# 730#------------------------------------------------------------------- 731kci_test_ipsec_offload() 732{ 733 local ret=0 734 algo="aead rfc4106(gcm(aes)) 0x3132333435363738393031323334353664636261 128" 735 srcip=192.168.123.3 736 dstip=192.168.123.4 737 sysfsd=/sys/kernel/debug/netdevsim/netdevsim0/ports/0/ 738 sysfsf=$sysfsd/ipsec 739 sysfsnet=/sys/bus/netdevsim/devices/netdevsim0/net/ 740 probed=false 741 esp4_offload_probed_default=false 742 743 if lsmod | grep -q esp4_offload; then 744 esp4_offload_probed_default=true 745 fi 746 747 if ! mount | grep -q debugfs; then 748 mount -t debugfs none /sys/kernel/debug/ &> /dev/null 749 fi 750 751 # setup netdevsim since dummydev doesn't have offload support 752 if [ ! -w /sys/bus/netdevsim/new_device ] ; then 753 run_cmd modprobe -q netdevsim 754 if [ $ret -ne 0 ]; then 755 end_test "SKIP: ipsec_offload can't load netdevsim" 756 return $ksft_skip 757 fi 758 probed=true 759 fi 760 761 echo "0" > /sys/bus/netdevsim/new_device 762 while [ ! -d $sysfsnet ] ; do :; done 763 udevadm settle 764 dev=`ls $sysfsnet` 765 766 ip addr add $srcip dev $dev 767 ip link set $dev up 768 if [ ! -d $sysfsd ] ; then 769 end_test "FAIL: ipsec_offload can't create device $dev" 770 return 1 771 fi 772 if [ ! -f $sysfsf ] ; then 773 end_test "FAIL: ipsec_offload netdevsim doesn't support IPsec offload" 774 return 1 775 fi 776 777 # flush to be sure there's nothing configured 778 ip x s flush ; ip x p flush 779 780 # create offloaded SAs, both in and out 781 run_cmd ip x p add dir out src $srcip/24 dst $dstip/24 \ 782 tmpl proto esp src $srcip dst $dstip spi 9 \ 783 mode transport reqid 42 784 785 run_cmd ip x p add dir in src $dstip/24 dst $srcip/24 \ 786 tmpl proto esp src $dstip dst $srcip spi 9 \ 787 mode transport reqid 42 788 789 run_cmd ip x s add proto esp src $srcip dst $dstip spi 9 \ 790 mode transport reqid 42 $algo sel src $srcip/24 dst $dstip/24 \ 791 offload dev $dev dir out 792 793 run_cmd ip x s add proto esp src $dstip dst $srcip spi 9 \ 794 mode transport reqid 42 $algo sel src $dstip/24 dst $srcip/24 \ 795 offload dev $dev dir in 796 797 if [ $ret -ne 0 ]; then 798 end_test "FAIL: ipsec_offload can't create SA" 799 return 1 800 fi 801 802 # does offload show up in ip output 803 lines=`ip x s list | grep -c "crypto offload parameters: dev $dev dir"` 804 if [ $lines -ne 2 ] ; then 805 check_err 1 806 end_test "FAIL: ipsec_offload SA offload missing from list output" 807 fi 808 809 # we didn't create a peer, make sure we can Tx 810 ip neigh add $dstip dev $dev lladdr 00:11:22:33:44:55 811 # use ping to exercise the Tx path 812 ping -I $dev -c 3 -W 1 -i 0 $dstip >/dev/null 813 814 # does driver have correct offload info 815 run_cmd diff $sysfsf - << EOF 816SA count=2 tx=3 817sa[0] tx ipaddr=$dstip 818sa[0] spi=0x00000009 proto=0x32 salt=0x61626364 crypt=1 819sa[0] key=0x34333231 38373635 32313039 36353433 820sa[1] rx ipaddr=$srcip 821sa[1] spi=0x00000009 proto=0x32 salt=0x61626364 crypt=1 822sa[1] key=0x34333231 38373635 32313039 36353433 823EOF 824 if [ $? -ne 0 ] ; then 825 end_test "FAIL: ipsec_offload incorrect driver data" 826 check_err 1 827 fi 828 829 # does offload get removed from driver 830 ip x s flush 831 ip x p flush 832 lines=`grep -c "SA count=0" $sysfsf` 833 if [ $lines -ne 1 ] ; then 834 check_err 1 835 end_test "FAIL: ipsec_offload SA not removed from driver" 836 fi 837 838 # clean up any leftovers 839 ! "$esp4_offload_probed_default" && lsmod | grep -q esp4_offload && rmmod esp4_offload 840 echo 0 > /sys/bus/netdevsim/del_device 841 $probed && rmmod netdevsim 842 843 if [ $ret -ne 0 ]; then 844 end_test "FAIL: ipsec_offload" 845 return 1 846 fi 847 end_test "PASS: ipsec_offload" 848} 849 850kci_test_gretap() 851{ 852 DEV_NS=gretap00 853 local ret=0 854 855 setup_ns testns 856 if [ $? -ne 0 ]; then 857 end_test "SKIP gretap tests: cannot add net namespace $testns" 858 return $ksft_skip 859 fi 860 861 run_cmd_grep "^Usage:" ip link help gretap 862 if [ $? -ne 0 ];then 863 end_test "SKIP: gretap: iproute2 too old" 864 ip netns del "$testns" 865 return $ksft_skip 866 fi 867 868 # test native tunnel 869 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type gretap seq \ 870 key 102 local 172.16.1.100 remote 172.16.1.200 871 872 873 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 874 run_cmd ip -netns "$testns" link set dev $DEV_NS up 875 run_cmd ip -netns "$testns" link del "$DEV_NS" 876 877 # test external mode 878 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type gretap external 879 run_cmd ip -netns "$testns" link del "$DEV_NS" 880 881 if [ $ret -ne 0 ]; then 882 end_test "FAIL: gretap" 883 ip netns del "$testns" 884 return 1 885 fi 886 end_test "PASS: gretap" 887 888 ip netns del "$testns" 889} 890 891kci_test_ip6gretap() 892{ 893 DEV_NS=ip6gretap00 894 local ret=0 895 896 setup_ns testns 897 if [ $? -ne 0 ]; then 898 end_test "SKIP ip6gretap tests: cannot add net namespace $testns" 899 return $ksft_skip 900 fi 901 902 run_cmd_grep "^Usage:" ip link help ip6gretap 903 if [ $? -ne 0 ];then 904 end_test "SKIP: ip6gretap: iproute2 too old" 905 ip netns del "$testns" 906 return $ksft_skip 907 fi 908 909 # test native tunnel 910 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6gretap seq \ 911 key 102 local fc00:100::1 remote fc00:100::2 912 913 914 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" fc00:200::1/96 915 run_cmd ip -netns "$testns" link set dev $DEV_NS up 916 run_cmd ip -netns "$testns" link del "$DEV_NS" 917 918 # test external mode 919 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6gretap external 920 run_cmd ip -netns "$testns" link del "$DEV_NS" 921 922 if [ $ret -ne 0 ]; then 923 end_test "FAIL: ip6gretap" 924 ip netns del "$testns" 925 return 1 926 fi 927 end_test "PASS: ip6gretap" 928 929 ip netns del "$testns" 930} 931 932kci_test_erspan() 933{ 934 DEV_NS=erspan00 935 local ret=0 936 run_cmd_grep "^Usage:" ip link help erspan 937 if [ $? -ne 0 ];then 938 end_test "SKIP: erspan: iproute2 too old" 939 return $ksft_skip 940 fi 941 setup_ns testns 942 if [ $? -ne 0 ]; then 943 end_test "SKIP erspan tests: cannot add net namespace $testns" 944 return $ksft_skip 945 fi 946 947 # test native tunnel erspan v1 948 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type erspan seq \ 949 key 102 local 172.16.1.100 remote 172.16.1.200 \ 950 erspan_ver 1 erspan 488 951 952 953 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 954 run_cmd ip -netns "$testns" link set dev $DEV_NS up 955 run_cmd ip -netns "$testns" link del "$DEV_NS" 956 957 # test native tunnel erspan v2 958 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type erspan seq \ 959 key 102 local 172.16.1.100 remote 172.16.1.200 \ 960 erspan_ver 2 erspan_dir ingress erspan_hwid 7 961 962 963 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 964 run_cmd ip -netns "$testns" link set dev $DEV_NS up 965 run_cmd ip -netns "$testns" link del "$DEV_NS" 966 967 # test external mode 968 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type erspan external 969 run_cmd ip -netns "$testns" link del "$DEV_NS" 970 971 if [ $ret -ne 0 ]; then 972 end_test "FAIL: erspan" 973 ip netns del "$testns" 974 return 1 975 fi 976 end_test "PASS: erspan" 977 978 ip netns del "$testns" 979} 980 981kci_test_ip6erspan() 982{ 983 DEV_NS=ip6erspan00 984 local ret=0 985 run_cmd_grep "^Usage:" ip link help ip6erspan 986 if [ $? -ne 0 ];then 987 end_test "SKIP: ip6erspan: iproute2 too old" 988 return $ksft_skip 989 fi 990 setup_ns testns 991 if [ $? -ne 0 ]; then 992 end_test "SKIP ip6erspan tests: cannot add net namespace $testns" 993 return $ksft_skip 994 fi 995 996 # test native tunnel ip6erspan v1 997 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6erspan seq \ 998 key 102 local fc00:100::1 remote fc00:100::2 \ 999 erspan_ver 1 erspan 488 1000 1001 1002 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 1003 run_cmd ip -netns "$testns" link set dev $DEV_NS up 1004 run_cmd ip -netns "$testns" link del "$DEV_NS" 1005 1006 # test native tunnel ip6erspan v2 1007 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6erspan seq \ 1008 key 102 local fc00:100::1 remote fc00:100::2 \ 1009 erspan_ver 2 erspan_dir ingress erspan_hwid 7 1010 1011 1012 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 1013 run_cmd ip -netns "$testns" link set dev $DEV_NS up 1014 run_cmd ip -netns "$testns" link del "$DEV_NS" 1015 1016 # test external mode 1017 run_cmd ip -netns "$testns" link add dev "$DEV_NS" \ 1018 type ip6erspan external 1019 1020 run_cmd ip -netns "$testns" link del "$DEV_NS" 1021 1022 if [ $ret -ne 0 ]; then 1023 end_test "FAIL: ip6erspan" 1024 ip netns del "$testns" 1025 return 1 1026 fi 1027 end_test "PASS: ip6erspan" 1028 1029 ip netns del "$testns" 1030} 1031 1032kci_test_fdb_get() 1033{ 1034 brdev="test-br0" 1035 vxlandev="vxlan10" 1036 test_mac=de:ad:be:ef:13:37 1037 localip="10.0.2.2" 1038 dstip="10.0.2.3" 1039 local ret=0 1040 1041 run_cmd_grep 'bridge fdb get' bridge fdb help 1042 if [ $? -ne 0 ];then 1043 end_test "SKIP: fdb get tests: iproute2 too old" 1044 return $ksft_skip 1045 fi 1046 1047 setup_ns testns 1048 if [ $? -ne 0 ]; then 1049 end_test "SKIP fdb get tests: cannot add net namespace $testns" 1050 return $ksft_skip 1051 fi 1052 IP="ip -netns $testns" 1053 BRIDGE="bridge -netns $testns" 1054 run_cmd $IP link add "$vxlandev" type vxlan id 10 local $localip \ 1055 dstport 4789 1056 run_cmd $IP link add name "$brdev" type bridge 1057 run_cmd $IP link set dev "$vxlandev" master "$brdev" 1058 run_cmd $BRIDGE fdb add $test_mac dev "$vxlandev" master 1059 run_cmd $BRIDGE fdb add $test_mac dev "$vxlandev" dst $dstip self 1060 run_cmd_grep "dev $vxlandev master $brdev" $BRIDGE fdb get $test_mac brport "$vxlandev" 1061 run_cmd_grep "dev $vxlandev master $brdev" $BRIDGE fdb get $test_mac br "$brdev" 1062 run_cmd_grep "dev $vxlandev dst $dstip" $BRIDGE fdb get $test_mac dev "$vxlandev" self 1063 1064 ip netns del $testns &>/dev/null 1065 1066 if [ $ret -ne 0 ]; then 1067 end_test "FAIL: bridge fdb get" 1068 return 1 1069 fi 1070 1071 end_test "PASS: bridge fdb get" 1072} 1073 1074kci_test_neigh_get() 1075{ 1076 dstmac=de:ad:be:ef:13:37 1077 dstip=10.0.2.4 1078 dstip6=dead::2 1079 local ret=0 1080 1081 run_cmd_grep 'ip neigh get' ip neigh help 1082 if [ $? -ne 0 ];then 1083 end_test "SKIP: fdb get tests: iproute2 too old" 1084 return $ksft_skip 1085 fi 1086 1087 # ipv4 1088 run_cmd ip neigh add $dstip lladdr $dstmac dev "$devdummy" 1089 run_cmd_grep "$dstmac" ip neigh get $dstip dev "$devdummy" 1090 run_cmd ip neigh del $dstip lladdr $dstmac dev "$devdummy" 1091 1092 # ipv4 proxy 1093 run_cmd ip neigh add proxy $dstip dev "$devdummy" 1094 run_cmd_grep "$dstip" ip neigh get proxy $dstip dev "$devdummy" 1095 run_cmd ip neigh del proxy $dstip dev "$devdummy" 1096 1097 # ipv6 1098 run_cmd ip neigh add $dstip6 lladdr $dstmac dev "$devdummy" 1099 run_cmd_grep "$dstmac" ip neigh get $dstip6 dev "$devdummy" 1100 run_cmd ip neigh del $dstip6 lladdr $dstmac dev "$devdummy" 1101 1102 # ipv6 proxy 1103 run_cmd ip neigh add proxy $dstip6 dev "$devdummy" 1104 run_cmd_grep "$dstip6" ip neigh get proxy $dstip6 dev "$devdummy" 1105 run_cmd ip neigh del proxy $dstip6 dev "$devdummy" 1106 1107 if [ $ret -ne 0 ];then 1108 end_test "FAIL: neigh get" 1109 return 1 1110 fi 1111 1112 end_test "PASS: neigh get" 1113} 1114 1115kci_test_bridge_parent_id() 1116{ 1117 local ret=0 1118 sysfsnet=/sys/bus/netdevsim/devices/netdevsim 1119 probed=false 1120 1121 if [ ! -w /sys/bus/netdevsim/new_device ] ; then 1122 run_cmd modprobe -q netdevsim 1123 if [ $ret -ne 0 ]; then 1124 end_test "SKIP: bridge_parent_id can't load netdevsim" 1125 return $ksft_skip 1126 fi 1127 probed=true 1128 fi 1129 1130 echo "10 1" > /sys/bus/netdevsim/new_device 1131 while [ ! -d ${sysfsnet}10 ] ; do :; done 1132 echo "20 1" > /sys/bus/netdevsim/new_device 1133 while [ ! -d ${sysfsnet}20 ] ; do :; done 1134 udevadm settle 1135 dev10=`ls ${sysfsnet}10/net/` 1136 dev20=`ls ${sysfsnet}20/net/` 1137 run_cmd ip link add name test-bond0 type bond mode 802.3ad 1138 run_cmd ip link set dev $dev10 master test-bond0 1139 run_cmd ip link set dev $dev20 master test-bond0 1140 run_cmd ip link add name test-br0 type bridge 1141 run_cmd ip link set dev test-bond0 master test-br0 1142 1143 # clean up any leftovers 1144 ip link del dev test-br0 1145 ip link del dev test-bond0 1146 echo 20 > /sys/bus/netdevsim/del_device 1147 echo 10 > /sys/bus/netdevsim/del_device 1148 $probed && rmmod netdevsim 1149 1150 if [ $ret -ne 0 ]; then 1151 end_test "FAIL: bridge_parent_id" 1152 return 1 1153 fi 1154 end_test "PASS: bridge_parent_id" 1155} 1156 1157address_get_proto() 1158{ 1159 local addr=$1; shift 1160 1161 ip -N -j address show dev "$devdummy" | 1162 jq -e -r --arg addr "${addr%/*}" \ 1163 '.[].addr_info[] | select(.local == $addr) | .protocol' 1164} 1165 1166address_count() 1167{ 1168 ip -N -j address show dev "$devdummy" "$@" | 1169 jq -e -r '[.[].addr_info[] | .local | select(. != null)] | length' 1170} 1171 1172do_test_address_proto() 1173{ 1174 local what=$1; shift 1175 local addr=$1; shift 1176 local addr2=${addr%/*}2/${addr#*/} 1177 local addr3=${addr%/*}3/${addr#*/} 1178 local proto 1179 local count 1180 local ret=0 1181 local err 1182 1183 ip address add dev "$devdummy" "$addr3" 1184 check_err $? 1185 proto=$(address_get_proto "$addr3") 1186 [[ "$proto" == null ]] 1187 check_err $? 1188 1189 ip address add dev "$devdummy" "$addr2" proto 0x99 1190 check_err $? 1191 proto=$(address_get_proto "$addr2") 1192 [[ "$proto" == 0x99 ]] 1193 check_err $? 1194 1195 ip address add dev "$devdummy" "$addr" proto 0xab 1196 check_err $? 1197 proto=$(address_get_proto "$addr") 1198 [[ "$proto" == 0xab ]] 1199 check_err $? 1200 1201 ip address replace dev "$devdummy" "$addr" proto 0x11 1202 proto=$(address_get_proto "$addr") 1203 check_err $? 1204 [[ "$proto" == 0x11 ]] 1205 check_err $? 1206 1207 count=$(address_count) 1208 check_err $? 1209 (( count >= 3 )) # $addr, $addr2 and $addr3 plus any kernel addresses 1210 check_err $? 1211 1212 count=$(address_count proto 0) 1213 check_err $? 1214 (( count == 1 )) # just $addr3 1215 check_err $? 1216 1217 count=$(address_count proto 0x11) 1218 check_err $? 1219 (( count == 2 )) # $addr and $addr3 1220 check_err $? 1221 1222 count=$(address_count proto 0xab) 1223 check_err $? 1224 (( count == 1 )) # just $addr3 1225 check_err $? 1226 1227 ip address del dev "$devdummy" "$addr" 1228 ip address del dev "$devdummy" "$addr2" 1229 ip address del dev "$devdummy" "$addr3" 1230 1231 if [ $ret -ne 0 ]; then 1232 end_test "FAIL: address proto $what" 1233 return 1 1234 fi 1235 end_test "PASS: address proto $what" 1236} 1237 1238kci_test_address_proto() 1239{ 1240 local ret=0 1241 1242 do_test_address_proto IPv4 192.0.2.1/28 1243 check_err $? 1244 1245 do_test_address_proto IPv6 2001:db8:1::1/64 1246 check_err $? 1247 1248 return $ret 1249} 1250 1251kci_test_enslave_bonding() 1252{ 1253 local bond="bond123" 1254 local ret=0 1255 1256 setup_ns testns 1257 if [ $? -ne 0 ]; then 1258 end_test "SKIP bonding tests: cannot add net namespace $testns" 1259 return $ksft_skip 1260 fi 1261 1262 run_cmd ip -netns $testns link add dev $bond type bond mode balance-rr 1263 run_cmd ip -netns $testns link add dev $devdummy type dummy 1264 run_cmd ip -netns $testns link set dev $devdummy up 1265 run_cmd ip -netns $testns link set dev $devdummy master $bond down 1266 if [ $ret -ne 0 ]; then 1267 end_test "FAIL: initially up interface added to a bond and set down" 1268 ip netns del "$testns" 1269 return 1 1270 fi 1271 1272 end_test "PASS: enslave interface in a bond" 1273 ip netns del "$testns" 1274} 1275 1276kci_test_rtnl() 1277{ 1278 local current_test 1279 local ret=0 1280 1281 kci_add_dummy 1282 if [ $ret -ne 0 ];then 1283 end_test "FAIL: cannot add dummy interface" 1284 return 1 1285 fi 1286 1287 for current_test in ${TESTS:-$ALL_TESTS}; do 1288 $current_test 1289 check_err $? 1290 done 1291 1292 kci_del_dummy 1293 return $ret 1294} 1295 1296usage() 1297{ 1298 cat <<EOF 1299usage: ${0##*/} OPTS 1300 1301 -t <test> Test(s) to run (default: all) 1302 (options: $(echo $ALL_TESTS)) 1303 -v Verbose mode (show commands and output) 1304 -P Pause after every test 1305 -p Pause after every failing test before cleanup (for debugging) 1306EOF 1307} 1308 1309#check for needed privileges 1310if [ "$(id -u)" -ne 0 ];then 1311 end_test "SKIP: Need root privileges" 1312 exit $ksft_skip 1313fi 1314 1315for x in ip tc;do 1316 $x -Version 2>/dev/null >/dev/null 1317 if [ $? -ne 0 ];then 1318 end_test "SKIP: Could not run test without the $x tool" 1319 exit $ksft_skip 1320 fi 1321done 1322 1323while getopts t:hvpP o; do 1324 case $o in 1325 t) TESTS=$OPTARG;; 1326 v) VERBOSE=1;; 1327 p) PAUSE_ON_FAIL=yes;; 1328 P) PAUSE=yes;; 1329 h) usage; exit 0;; 1330 *) usage; exit 1;; 1331 esac 1332done 1333 1334[ $PAUSE = "yes" ] && PAUSE_ON_FAIL="no" 1335 1336kci_test_rtnl 1337 1338exit $? 1339