selftests: net: initial fib rule tests
This adds a first set of tests for fib rule match/action for ipv4 and ipv6. Initial tests only cover action lookup table. can be extended to cover other actions in the future. Uses ip route get to validate the rule lookup. Signed-off-by: Roopa Prabhu <roopa@cumulusnetworks.com> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
Roopa Prabhu
David S. Miller
parent
eacb9384a3
commit
65b2b4939a
|
|
@ -6,7 +6,7 @@ CFLAGS += -I../../../../usr/include/
|
|||
|
||||
TEST_PROGS := run_netsocktests run_afpackettests test_bpf.sh netdevice.sh rtnetlink.sh
|
||||
TEST_PROGS += fib_tests.sh fib-onlink-tests.sh pmtu.sh udpgso.sh
|
||||
TEST_PROGS += udpgso_bench.sh
|
||||
TEST_PROGS += udpgso_bench.sh fib_rule_tests.sh
|
||||
TEST_PROGS_EXTENDED := in_netns.sh
|
||||
TEST_GEN_FILES = socket
|
||||
TEST_GEN_FILES += psock_fanout psock_tpacket msg_zerocopy
|
||||
|
|
|
|||
|
|
@ -0,0 +1,248 @@
|
|||
#!/bin/bash
|
||||
# SPDX-License-Identifier: GPL-2.0
|
||||
|
||||
# This test is for checking IPv4 and IPv6 FIB rules API
|
||||
|
||||
ret=0
|
||||
|
||||
PAUSE_ON_FAIL=${PAUSE_ON_FAIL:=no}
|
||||
IP="ip -netns testns"
|
||||
|
||||
RTABLE=100
|
||||
GW_IP4=192.51.100.2
|
||||
SRC_IP=192.51.100.3
|
||||
GW_IP6=2001:db8:1::2
|
||||
SRC_IP6=2001:db8:1::3
|
||||
|
||||
DEV_ADDR=192.51.100.1
|
||||
DEV=dummy0
|
||||
|
||||
log_test()
|
||||
{
|
||||
local rc=$1
|
||||
local expected=$2
|
||||
local msg="$3"
|
||||
|
||||
if [ ${rc} -eq ${expected} ]; then
|
||||
nsuccess=$((nsuccess+1))
|
||||
printf "\n TEST: %-50s [ OK ]\n" "${msg}"
|
||||
else
|
||||
nfail=$((nfail+1))
|
||||
printf "\n TEST: %-50s [FAIL]\n" "${msg}"
|
||||
if [ "${PAUSE_ON_FAIL}" = "yes" ]; then
|
||||
echo
|
||||
echo "hit enter to continue, 'q' to quit"
|
||||
read a
|
||||
[ "$a" = "q" ] && exit 1
|
||||
fi
|
||||
fi
|
||||
}
|
||||
|
||||
log_section()
|
||||
{
|
||||
echo
|
||||
echo "######################################################################"
|
||||
echo "TEST SECTION: $*"
|
||||
echo "######################################################################"
|
||||
}
|
||||
|
||||
setup()
|
||||
{
|
||||
set -e
|
||||
ip netns add testns
|
||||
$IP link set dev lo up
|
||||
|
||||
$IP link add dummy0 type dummy
|
||||
$IP link set dev dummy0 up
|
||||
$IP address add 198.51.100.1/24 dev dummy0
|
||||
$IP -6 address add 2001:db8:1::1/64 dev dummy0
|
||||
|
||||
set +e
|
||||
}
|
||||
|
||||
cleanup()
|
||||
{
|
||||
$IP link del dev dummy0 &> /dev/null
|
||||
ip netns del testns
|
||||
}
|
||||
|
||||
fib_check_iproute_support()
|
||||
{
|
||||
ip rule help 2>&1 | grep -q $1
|
||||
if [ $? -ne 0 ]; then
|
||||
echo "SKIP: iproute2 iprule too old, missing $1 match"
|
||||
return 1
|
||||
fi
|
||||
|
||||
ip route get help 2>&1 | grep -q $2
|
||||
if [ $? -ne 0 ]; then
|
||||
echo "SKIP: iproute2 get route too old, missing $2 match"
|
||||
return 1
|
||||
fi
|
||||
|
||||
return 0
|
||||
}
|
||||
|
||||
fib_rule6_del()
|
||||
{
|
||||
$IP -6 rule del $1
|
||||
log_test $? 0 "rule6 del $1"
|
||||
}
|
||||
|
||||
fib_rule6_del_by_pref()
|
||||
{
|
||||
pref=$($IP -6 rule show | grep "$1 lookup $TABLE" | cut -d ":" -f 1)
|
||||
$IP -6 rule del pref $pref
|
||||
}
|
||||
|
||||
fib_rule6_test_match_n_redirect()
|
||||
{
|
||||
local match="$1"
|
||||
local getmatch="$2"
|
||||
|
||||
$IP -6 rule add $match table $RTABLE
|
||||
$IP -6 route get $GW_IP6 $getmatch | grep -q "table $RTABLE"
|
||||
log_test $? 0 "rule6 check: $1"
|
||||
|
||||
fib_rule6_del_by_pref "$match"
|
||||
log_test $? 0 "rule6 del by pref: $match"
|
||||
}
|
||||
|
||||
fib_rule6_test()
|
||||
{
|
||||
# setup the fib rule redirect route
|
||||
$IP -6 route add table $RTABLE default via $GW_IP6 dev $DEV onlink
|
||||
|
||||
match="oif $DEV"
|
||||
fib_rule6_test_match_n_redirect "$match" "$match" "oif redirect to table"
|
||||
|
||||
match="from $SRC_IP6 iif $DEV"
|
||||
fib_rule6_test_match_n_redirect "$match" "$match" "iif redirect to table"
|
||||
|
||||
match="tos 0x10"
|
||||
fib_rule6_test_match_n_redirect "$match" "$match" "tos redirect to table"
|
||||
|
||||
match="fwmark 0x64"
|
||||
getmatch="mark 0x64"
|
||||
fib_rule6_test_match_n_redirect "$match" "$getmatch" "fwmark redirect to table"
|
||||
|
||||
fib_check_iproute_support "uidrange" "uid"
|
||||
if [ $? -eq 0 ]; then
|
||||
match="uidrange 100-100"
|
||||
getmatch="uid 100"
|
||||
fib_rule6_test_match_n_redirect "$match" "$getmatch" "uid redirect to table"
|
||||
fi
|
||||
|
||||
fib_check_iproute_support "sport" "sport"
|
||||
if [ $? -eq 0 ]; then
|
||||
match="sport 666 dport 777"
|
||||
fib_rule6_test_match_n_redirect "$match" "$match" "sport and dport redirect to table"
|
||||
fi
|
||||
|
||||
fib_check_iproute_support "ipproto" "ipproto"
|
||||
if [ $? -eq 0 ]; then
|
||||
match="ipproto tcp"
|
||||
fib_rule6_test_match_n_redirect "$match" "$match" "ipproto match"
|
||||
fi
|
||||
|
||||
fib_check_iproute_support "ipproto" "ipproto"
|
||||
if [ $? -eq 0 ]; then
|
||||
match="ipproto icmp"
|
||||
fib_rule6_test_match_n_redirect "$match" "$match" "ipproto icmp match"
|
||||
fi
|
||||
}
|
||||
|
||||
fib_rule4_del()
|
||||
{
|
||||
$IP rule del $1
|
||||
log_test $? 0 "del $1"
|
||||
}
|
||||
|
||||
fib_rule4_del_by_pref()
|
||||
{
|
||||
pref=$($IP rule show | grep "$1 lookup $TABLE" | cut -d ":" -f 1)
|
||||
$IP rule del pref $pref
|
||||
}
|
||||
|
||||
fib_rule4_test_match_n_redirect()
|
||||
{
|
||||
local match="$1"
|
||||
local getmatch="$2"
|
||||
|
||||
$IP rule add $match table $RTABLE
|
||||
$IP route get $GW_IP4 $getmatch | grep -q "table $RTABLE"
|
||||
log_test $? 0 "rule4 check: $1"
|
||||
|
||||
fib_rule4_del_by_pref "$match"
|
||||
log_test $? 0 "rule4 del by pref: $match"
|
||||
}
|
||||
|
||||
fib_rule4_test()
|
||||
{
|
||||
# setup the fib rule redirect route
|
||||
$IP route add table $RTABLE default via $GW_IP4 dev $DEV onlink
|
||||
|
||||
match="oif $DEV"
|
||||
fib_rule4_test_match_n_redirect "$match" "$match" "oif redirect to table"
|
||||
|
||||
match="from $SRC_IP iif $DEV"
|
||||
fib_rule4_test_match_n_redirect "$match" "$match" "iif redirect to table"
|
||||
|
||||
match="tos 0x10"
|
||||
fib_rule4_test_match_n_redirect "$match" "$match" "tos redirect to table"
|
||||
|
||||
match="fwmark 0x64"
|
||||
getmatch="mark 0x64"
|
||||
fib_rule4_test_match_n_redirect "$match" "$getmatch" "fwmark redirect to table"
|
||||
|
||||
fib_check_iproute_support "uidrange" "uid"
|
||||
if [ $? -eq 0 ]; then
|
||||
match="uidrange 100-100"
|
||||
getmatch="uid 100"
|
||||
fib_rule4_test_match_n_redirect "$match" "$getmatch" "uid redirect to table"
|
||||
fi
|
||||
|
||||
fib_check_iproute_support "sport" "sport"
|
||||
if [ $? -eq 0 ]; then
|
||||
match="sport 666 dport 777"
|
||||
fib_rule4_test_match_n_redirect "$match" "$match" "sport and dport redirect to table"
|
||||
fi
|
||||
|
||||
fib_check_iproute_support "ipproto" "ipproto"
|
||||
if [ $? -eq 0 ]; then
|
||||
match="ipproto tcp"
|
||||
fib_rule4_test_match_n_redirect "$match" "$match" "ipproto tcp match"
|
||||
fi
|
||||
|
||||
fib_check_iproute_support "ipproto" "ipproto"
|
||||
if [ $? -eq 0 ]; then
|
||||
match="ipproto icmp"
|
||||
fib_rule4_test_match_n_redirect "$match" "$match" "ipproto icmp match"
|
||||
fi
|
||||
}
|
||||
|
||||
run_fibrule_tests()
|
||||
{
|
||||
log_section "IPv4 fib rule"
|
||||
fib_rule4_test
|
||||
log_section "IPv6 fib rule"
|
||||
fib_rule6_test
|
||||
}
|
||||
|
||||
if [ "$(id -u)" -ne 0 ];then
|
||||
echo "SKIP: Need root privileges"
|
||||
exit 0
|
||||
fi
|
||||
|
||||
if [ ! -x "$(command -v ip)" ]; then
|
||||
echo "SKIP: Could not run test without ip tool"
|
||||
exit 0
|
||||
fi
|
||||
|
||||
# start clean
|
||||
cleanup &> /dev/null
|
||||
setup
|
||||
run_fibrule_tests
|
||||
cleanup
|
||||
|
||||
exit $ret
|
||||
Loading…
Reference in New Issue