#!/bin/bash # SPDX-License-Identifier: GPL-2.0 # # This test is for checking bridge backup port and backup nexthop ID # functionality. The topology consists of two bridge (VTEPs) connected using # VXLAN. The test checks that when the switch port (swp1) is down, traffic is # redirected to the VXLAN port (vx0). When a backup nexthop ID is configured, # the test checks that traffic is redirected with the correct nexthop # information. # # +------------------------------------+ +------------------------------------+ # | + swp1 + vx0 | | + swp1 + vx0 | # | | | | | | | | # | | br0 | | | | | | # | +------------+-----------+ | | +------------+-----------+ | # | | | | | | # | | | | | | # | + | | + | # | br0 | | br0 | # | + | | + | # | | | | | | # | | | | | | # | + | | + | # | br0.10 | | br0.10 | # | 192.0.2.65/28 | | 192.0.2.66/28 | # | | | | # | | | | # | 192.0.2.33 | | 192.0.2.34 | # | + lo | | + lo | # | | | | # | | | | # | 192.0.2.49/28 | | 192.0.2.50/28 | # | veth0 +-------+ veth0 | # | | | | # | sw1 | | sw2 | # +------------------------------------+ +------------------------------------+ ret=0 # Kselftest framework requirement - SKIP code is 4. ksft_skip=4 # All tests in this script. Can be overridden with -t option. TESTS=" backup_port backup_nhid backup_nhid_invalid backup_nhid_ping backup_nhid_torture " VERBOSE=0 PAUSE_ON_FAIL=no PAUSE=no PING_TIMEOUT=5 ################################################################################ # Utilities log_test() { local rc=$1 local expected=$2 local msg="$3" if [ ${rc} -eq ${expected} ]; then printf "TEST: %-60s [ OK ]\n" "${msg}" nsuccess=$((nsuccess+1)) else ret=1 nfail=$((nfail+1)) printf "TEST: %-60s [FAIL]\n" "${msg}" if [ "$VERBOSE" = "1" ]; then echo " rc=$rc, expected $expected" fi if [ "${PAUSE_ON_FAIL}" = "yes" ]; then echo echo "hit enter to continue, 'q' to quit" read a [ "$a" = "q" ] && exit 1 fi fi if [ "${PAUSE}" = "yes" ]; then echo echo "hit enter to continue, 'q' to quit" read a [ "$a" = "q" ] && exit 1 fi [ "$VERBOSE" = "1" ] && echo } run_cmd() { local cmd="$1" local out local stderr="2>/dev/null" if [ "$VERBOSE" = "1" ]; then printf "COMMAND: $cmd\n" stderr= fi out=$(eval $cmd $stderr) rc=$? if [ "$VERBOSE" = "1" -a -n "$out" ]; then echo " $out" fi return $rc } tc_check_packets() { local ns=$1; shift local id=$1; shift local handle=$1; shift local count=$1; shift local pkts sleep 0.1 pkts=$(tc -n $ns -j -s filter show $id \ | jq ".[] | select(.options.handle == $handle) | \ .options.actions[0].stats.packets") [[ $pkts == $count ]] } ################################################################################ # Setup setup_topo_ns() { local ns=$1; shift ip netns add $ns ip -n $ns link set dev lo up ip netns exec $ns sysctl -qw net.ipv6.conf.all.keep_addr_on_down=1 ip netns exec $ns sysctl -qw net.ipv6.conf.default.ignore_routes_with_linkdown=1 ip netns exec $ns sysctl -qw net.ipv6.conf.all.accept_dad=0 ip netns exec $ns sysctl -qw net.ipv6.conf.default.accept_dad=0 } setup_topo() { local ns for ns in sw1 sw2; do setup_topo_ns $ns done ip link add name veth0 type veth peer name veth1 ip link set dev veth0 netns sw1 name veth0 ip link set dev veth1 netns sw2 name veth0 } setup_sw_common() { local ns=$1; shift local local_addr=$1; shift local remote_addr=$1; shift local veth_addr=$1; shift local gw_addr=$1; shift local br_addr=$1; shift ip -n $ns address add $local_addr/32 dev lo ip -n $ns link set dev veth0 up ip -n $ns address add $veth_addr/28 dev veth0 ip -n $ns route add default via $gw_addr ip -n $ns link add name br0 up type bridge vlan_filtering 1 \ vlan_default_pvid 0 mcast_snooping 0 ip -n $ns link add link br0 name br0.10 up type vlan id 10 bridge -n $ns vlan add vid 10 dev br0 self ip -n $ns address add $br_addr/28 dev br0.10 ip -n $ns link add name swp1 up type dummy ip -n $ns link set dev swp1 master br0 bridge -n $ns vlan add vid 10 dev swp1 untagged ip -n $ns link add name vx0 up master br0 type vxlan \ local $local_addr dstport 4789 nolearning external bridge -n $ns link set dev vx0 vlan_tunnel on learning off bridge -n $ns vlan add vid 10 dev vx0 bridge -n $ns vlan add vid 10 dev vx0 tunnel_info id 10010 } setup_sw1() { local ns=sw1 local local_addr=192.0.2.33 local remote_addr=192.0.2.34 local veth_addr=192.0.2.49 local gw_addr=192.0.2.50 local br_addr=192.0.2.65 setup_sw_common $ns $local_addr $remote_addr $veth_addr $gw_addr \ $br_addr } setup_sw2() { local ns=sw2 local local_addr=192.0.2.34 local remote_addr=192.0.2.33 local veth_addr=192.0.2.50 local gw_addr=192.0.2.49 local br_addr=192.0.2.66 setup_sw_common $ns $local_addr $remote_addr $veth_addr $gw_addr \ $br_addr } setup() { set -e setup_topo setup_sw1 setup_sw2 sleep 5 set +e } cleanup() { local ns for ns in h1 h2 sw1 sw2; do ip netns del $ns &> /dev/null done } ################################################################################ # Tests backup_port() { local dmac=00:11:22:33:44:55 local smac=00:aa:bb:cc:dd:ee echo echo "Backup port" echo "-----------" run_cmd "tc -n sw1 qdisc replace dev swp1 clsact" run_cmd "tc -n sw1 filter replace dev swp1 egress pref 1 handle 101 proto ip flower src_mac $smac dst_mac $dmac action pass" run_cmd "tc -n sw1 qdisc replace dev vx0 clsact" run_cmd "tc -n sw1 filter replace dev vx0 egress pref 1 handle 101 proto ip flower src_mac $smac dst_mac $dmac action pass" run_cmd "bridge -n sw1 fdb replace $dmac dev swp1 master static vlan 10" # Initial state - check that packets are forwarded out of swp1 when it # has a carrier and not forwarded out of any port when it does not have # a carrier. run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1" tc_check_packets sw1 "dev swp1 egress" 101 1 log_test $? 0 "Forwarding out of swp1" tc_check_packets sw1 "dev vx0 egress" 101 0 log_test $? 0 "No forwarding out of vx0" run_cmd "ip -n sw1 link set dev swp1 carrier off" log_test $? 0 "swp1 carrier off" run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1" tc_check_packets sw1 "dev swp1 egress" 101 1 log_test $? 0 "No forwarding out of swp1" tc_check_packets sw1 "dev vx0 egress" 101 0 log_test $? 0 "No forwarding out of vx0" run_cmd "ip -n sw1 link set dev swp1 carrier on" log_test $? 0 "swp1 carrier on" # Configure vx0 as the backup port of swp1 and check that packets are # forwarded out of swp1 when it has a carrier and out of vx0 when swp1 # does not have a carrier. run_cmd "bridge -n sw1 link set dev swp1 backup_port vx0" run_cmd "bridge -n sw1 -d link show dev swp1 | grep \"backup_port vx0\"" log_test $? 0 "vx0 configured as backup port of swp1" run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1" tc_check_packets sw1 "dev swp1 egress" 101 2 log_test $? 0 "Forwarding out of swp1" tc_check_packets sw1 "dev vx0 egress" 101 0 log_test $? 0 "No forwarding out of vx0" run_cmd "ip -n sw1 link set dev swp1 carrier off" log_test $? 0 "swp1 carrier off" run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1" tc_check_packets sw1 "dev swp1 egress" 101 2 log_test $? 0 "No forwarding out of swp1" tc_check_packets sw1 "dev vx0 egress" 101 1 log_test $? 0 "Forwarding out of vx0" run_cmd "ip -n sw1 link set dev swp1 carrier on" log_test $? 0 "swp1 carrier on" run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1" tc_check_packets sw1 "dev swp1 egress" 101 3 log_test $? 0 "Forwarding out of swp1" tc_check_packets sw1 "dev vx0 egress" 101 1 log_test $? 0 "No forwarding out of vx0" # Remove vx0 as the backup port of swp1 and check that packets are no # longer forwarded out of vx0 when swp1 does not have a carrier. run_cmd "bridge -n sw1 link set dev swp1 nobackup_port" run_cmd "bridge -n sw1 -d link show dev swp1 | grep \"backup_port vx0\"" log_test $? 1 "vx0 not configured as backup port of swp1" run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1" tc_check_packets sw1 "dev swp1 egress" 101 4 log_test $? 0 "Forwarding out of swp1" tc_check_packets sw1 "dev vx0 egress" 101 1 log_test $? 0 "No forwarding out of vx0" run_cmd "ip -n sw1 link set dev swp1 carrier off" log_test $? 0 "swp1 carrier off" run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1" tc_check_packets sw1 "dev swp1 egress" 101 4 log_test $? 0 "No forwarding out of swp1" tc_check_packets sw1 "dev vx0 egress" 101 1 log_test $? 0 "No forwarding out of vx0" } backup_nhid() { local dmac=00:11:22:33:44:55 local smac=00:aa:bb:cc:dd:ee echo echo "Backup nexthop ID" echo "-----------------" run_cmd "tc -n sw1 qdisc replace dev swp1 clsact" run_cmd "tc -n sw1 filter replace dev swp1 egress pref 1 handle 101 proto ip flower src_mac $smac dst_mac $dmac action pass" run_cmd "tc -n sw1 qdisc replace dev vx0 clsact" run_cmd "tc -n sw1 filter replace dev vx0 egress pref 1 handle 101 proto ip flower src_mac $smac dst_mac $dmac action pass" run_cmd "ip -n sw1 nexthop replace id 1 via 192.0.2.34 fdb" run_cmd "ip -n sw1 nexthop replace id 2 via 192.0.2.34 fdb" run_cmd "ip -n sw1 nexthop replace id 10 group 1/2 fdb" run_cmd "bridge -n sw1 fdb replace $dmac dev swp1 master static vlan 10" run_cmd "bridge -n sw1 fdb replace $dmac dev vx0 self static dst 192.0.2.36 src_vni 10010" run_cmd "ip -n sw2 address replace 192.0.2.36/32 dev lo" # The first filter matches on packets forwarded using the backup # nexthop ID and the second filter matches on packets forwarded using a # regular VXLAN FDB entry. run_cmd "tc -n sw2 qdisc replace dev vx0 clsact" run_cmd "tc -n sw2 filter replace dev vx0 ingress pref 1 handle 101 proto ip flower src_mac $smac dst_mac $dmac enc_key_id 10010 enc_dst_ip 192.0.2.34 action pass" run_cmd "tc -n sw2 filter replace dev vx0 ingress pref 1 handle 102 proto ip flower src_mac $smac dst_mac $dmac enc_key_id 10010 enc_dst_ip 192.0.2.36 action pass" # Configure vx0 as the backup port of swp1 and check that packets are # forwarded out of swp1 when it has a carrier and out of vx0 when swp1 # does not have a carrier. When packets are forwarded out of vx0, check # that they are forwarded by the VXLAN FDB entry. run_cmd "bridge -n sw1 link set dev swp1 backup_port vx0" run_cmd "bridge -n sw1 -d link show dev swp1 | grep \"backup_port vx0\"" log_test $? 0 "vx0 configured as backup port of swp1" run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1" tc_check_packets sw1 "dev swp1 egress" 101 1 log_test $? 0 "Forwarding out of swp1" tc_check_packets sw1 "dev vx0 egress" 101 0 log_test $? 0 "No forwarding out of vx0" run_cmd "ip -n sw1 link set dev swp1 carrier off" log_test $? 0 "swp1 carrier off" run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1" tc_check_packets sw1 "dev swp1 egress" 101 1 log_test $? 0 "No forwarding out of swp1" tc_check_packets sw1 "dev vx0 egress" 101 1 log_test $? 0 "Forwarding out of vx0" tc_check_packets sw2 "dev vx0 ingress" 101 0 log_test $? 0 "No forwarding using backup nexthop ID" tc_check_packets sw2 "dev vx0 ingress" 102 1 log_test $? 0 "Forwarding using VXLAN FDB entry" run_cmd "ip -n sw1 link set dev swp1 carrier on" log_test $? 0 "swp1 carrier on" # Configure nexthop ID 10 as the backup nexthop ID of swp1 and check # that when packets are forwarded out of vx0, they are forwarded using # the backup nexthop ID. run_cmd "bridge -n sw1 link set dev swp1 backup_nhid 10" run_cmd "bridge -n sw1 -d link show dev swp1 | grep \"backup_nhid 10\"" log_test $? 0 "nexthop ID 10 configured as backup nexthop ID of swp1" run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1" tc_check_packets sw1 "dev swp1 egress" 101 2 log_test $? 0 "Forwarding out of swp1" tc_check_packets sw1 "dev vx0 egress" 101 1 log_test $? 0 "No forwarding out of vx0" run_cmd "ip -n sw1 link set dev swp1 carrier off" log_test $? 0 "swp1 carrier off" run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1" tc_check_packets sw1 "dev swp1 egress" 101 2 log_test $? 0 "No forwarding out of swp1" tc_check_packets sw1 "dev vx0 egress" 101 2 log_test $? 0 "Forwarding out of vx0" tc_check_packets sw2 "dev vx0 ingress" 101 1 log_test $? 0 "Forwarding using backup nexthop ID" tc_check_packets sw2 "dev vx0 ingress" 102 1 log_test $? 0 "No forwarding using VXLAN FDB entry" run_cmd "ip -n sw1 link set dev swp1 carrier on" log_test $? 0 "swp1 carrier on" run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1" tc_check_packets sw1 "dev swp1 egress" 101 3 log_test $? 0 "Forwarding out of swp1" tc_check_packets sw1 "dev vx0 egress" 101 2 log_test $? 0 "No forwarding out of vx0" tc_check_packets sw2 "dev vx0 ingress" 101 1 log_test $? 0 "No forwarding using backup nexthop ID" tc_check_packets sw2 "dev vx0 ingress" 102 1 log_test $? 0 "No forwarding using VXLAN FDB entry" # Reset the backup nexthop ID to 0 and check that packets are no longer # forwarded using the backup nexthop ID when swp1 does not have a # carrier and are instead forwarded by the VXLAN FDB. run_cmd "bridge -n sw1 link set dev swp1 backup_nhid 0" run_cmd "bridge -n sw1 -d link show dev swp1 | grep \"backup_nhid\"" log_test $? 1 "No backup nexthop ID configured for swp1" run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1" tc_check_packets sw1 "dev swp1 egress" 101 4 log_test $? 0 "Forwarding out of swp1" tc_check_packets sw1 "dev vx0 egress" 101 2 log_test $? 0 "No forwarding out of vx0" tc_check_packets sw2 "dev vx0 ingress" 101 1 log_test $? 0 "No forwarding using backup nexthop ID" tc_check_packets sw2 "dev vx0 ingress" 102 1 log_test $? 0 "No forwarding using VXLAN FDB entry" run_cmd "ip -n sw1 link set dev swp1 carrier off" log_test $? 0 "swp1 carrier off" run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1" tc_check_packets sw1 "dev swp1 egress" 101 4 log_test $? 0 "No forwarding out of swp1" tc_check_packets sw1 "dev vx0 egress" 101 3 log_test $? 0 "Forwarding out of vx0" tc_check_packets sw2 "dev vx0 ingress" 101 1 log_test $? 0 "No forwarding using backup nexthop ID" tc_check_packets sw2 "dev vx0 ingress" 102 2 log_test $? 0 "Forwarding using VXLAN FDB entry" } backup_nhid_invalid() { local dmac=00:11:22:33:44:55 local smac=00:aa:bb:cc:dd:ee local tx_drop echo echo "Backup nexthop ID - invalid IDs" echo "-------------------------------" # Check that when traffic is redirected with an invalid nexthop ID, it # is forwarded out of the VXLAN port, but dropped by the VXLAN driver # and does not crash the host. run_cmd "tc -n sw1 qdisc replace dev swp1 clsact" run_cmd "tc -n sw1 filter replace dev swp1 egress pref 1 handle 101 proto ip flower src_mac $smac dst_mac $dmac action pass" run_cmd "tc -n sw1 qdisc replace dev vx0 clsact" run_cmd "tc -n sw1 filter replace dev vx0 egress pref 1 handle 101 proto ip flower src_mac $smac dst_mac $dmac action pass" # Drop all other Tx traffic to avoid changes to Tx drop counter. run_cmd "tc -n sw1 filter replace dev vx0 egress pref 2 handle 102 proto all matchall action drop" tx_drop=$(ip -n sw1 -s -j link show dev vx0 | jq '.[]["stats64"]["tx"]["dropped"]') run_cmd "ip -n sw1 nexthop replace id 1 via 192.0.2.34 fdb" run_cmd "ip -n sw1 nexthop replace id 2 via 192.0.2.34 fdb" run_cmd "ip -n sw1 nexthop replace id 10 group 1/2 fdb" run_cmd "bridge -n sw1 fdb replace $dmac dev swp1 master static vlan 10" run_cmd "tc -n sw2 qdisc replace dev vx0 clsact" run_cmd "tc -n sw2 filter replace dev vx0 ingress pref 1 handle 101 proto ip flower src_mac $smac dst_mac $dmac enc_key_id 10010 enc_dst_ip 192.0.2.34 action pass" # First, check that redirection works. run_cmd "bridge -n sw1 link set dev swp1 backup_port vx0" run_cmd "bridge -n sw1 -d link show dev swp1 | grep \"backup_port vx0\"" log_test $? 0 "vx0 configured as backup port of swp1" run_cmd "bridge -n sw1 link set dev swp1 backup_nhid 10" run_cmd "bridge -n sw1 -d link show dev swp1 | grep \"backup_nhid 10\"" log_test $? 0 "Valid nexthop as backup nexthop" run_cmd "ip -n sw1 link set dev swp1 carrier off" log_test $? 0 "swp1 carrier off" run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1" tc_check_packets sw1 "dev swp1 egress" 101 0 log_test $? 0 "No forwarding out of swp1" tc_check_packets sw1 "dev vx0 egress" 101 1 log_test $? 0 "Forwarding out of vx0" tc_check_packets sw2 "dev vx0 ingress" 101 1 log_test $? 0 "Forwarding using backup nexthop ID" run_cmd "ip -n sw1 -s -j link show dev vx0 | jq -e '.[][\"stats64\"][\"tx\"][\"dropped\"] == $tx_drop'" log_test $? 0 "No Tx drop increase" # Use a non-existent nexthop ID. run_cmd "bridge -n sw1 link set dev swp1 backup_nhid 20" run_cmd "bridge -n sw1 -d link show dev swp1 | grep \"backup_nhid 20\"" log_test $? 0 "Non-existent nexthop as backup nexthop" run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1" tc_check_packets sw1 "dev swp1 egress" 101 0 log_test $? 0 "No forwarding out of swp1" tc_check_packets sw1 "dev vx0 egress" 101 2 log_test $? 0 "Forwarding out of vx0" tc_check_packets sw2 "dev vx0 ingress" 101 1 log_test $? 0 "No forwarding using backup nexthop ID" run_cmd "ip -n sw1 -s -j link show dev vx0 | jq -e '.[][\"stats64\"][\"tx\"][\"dropped\"] == $((tx_drop + 1))'" log_test $? 0 "Tx drop increased" # Use a blckhole nexthop. run_cmd "ip -n sw1 nexthop replace id 30 blackhole" run_cmd "bridge -n sw1 link set dev swp1 backup_nhid 30" run_cmd "bridge -n sw1 -d link show dev swp1 | grep \"backup_nhid 30\"" log_test $? 0 "Blackhole nexthop as backup nexthop" run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1" tc_check_packets sw1 "dev swp1 egress" 101 0 log_test $? 0 "No forwarding out of swp1" tc_check_packets sw1 "dev vx0 egress" 101 3 log_test $? 0 "Forwarding out of vx0" tc_check_packets sw2 "dev vx0 ingress" 101 1 log_test $? 0 "No forwarding using backup nexthop ID" run_cmd "ip -n sw1 -s -j link show dev vx0 | jq -e '.[][\"stats64\"][\"tx\"][\"dropped\"] == $((tx_drop + 2))'" log_test $? 0 "Tx drop increased" # Non-group FDB nexthop. run_cmd "bridge -n sw1 link set dev swp1 backup_nhid 1" run_cmd "bridge -n sw1 -d link show dev swp1 | grep \"backup_nhid 1\"" log_test $? 0 "Non-group FDB nexthop as backup nexthop" run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1" tc_check_packets sw1 "dev swp1 egress" 101 0 log_test $? 0 "No forwarding out of swp1" tc_check_packets sw1 "dev vx0 egress" 101 4 log_test $? 0 "Forwarding out of vx0" tc_check_packets sw2 "dev vx0 ingress" 101 1 log_test $? 0 "No forwarding using backup nexthop ID" run_cmd "ip -n sw1 -s -j link show dev vx0 | jq -e '.[][\"stats64\"][\"tx\"][\"dropped\"] == $((tx_drop + 3))'" log_test $? 0 "Tx drop increased" # IPv6 address family nexthop. run_cmd "ip -n sw1 nexthop replace id 100 via 2001:db8:100::1 fdb" run_cmd "ip -n sw1 nexthop replace id 200 via 2001:db8:100::1 fdb" run_cmd "ip -n sw1 nexthop replace id 300 group 100/200 fdb" run_cmd "bridge -n sw1 link set dev swp1 backup_nhid 300" run_cmd "bridge -n sw1 -d link show dev swp1 | grep \"backup_nhid 300\"" log_test $? 0 "IPv6 address family nexthop as backup nexthop" run_cmd "ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 1" tc_check_packets sw1 "dev swp1 egress" 101 0 log_test $? 0 "No forwarding out of swp1" tc_check_packets sw1 "dev vx0 egress" 101 5 log_test $? 0 "Forwarding out of vx0" tc_check_packets sw2 "dev vx0 ingress" 101 1 log_test $? 0 "No forwarding using backup nexthop ID" run_cmd "ip -n sw1 -s -j link show dev vx0 | jq -e '.[][\"stats64\"][\"tx\"][\"dropped\"] == $((tx_drop + 4))'" log_test $? 0 "Tx drop increased" } backup_nhid_ping() { local sw1_mac local sw2_mac echo echo "Backup nexthop ID - ping" echo "------------------------" # Test bidirectional traffic when traffic is redirected in both VTEPs. sw1_mac=$(ip -n sw1 -j -p link show br0.10 | jq -r '.[]["address"]') sw2_mac=$(ip -n sw2 -j -p link show br0.10 | jq -r '.[]["address"]') run_cmd "bridge -n sw1 fdb replace $sw2_mac dev swp1 master static vlan 10" run_cmd "bridge -n sw2 fdb replace $sw1_mac dev swp1 master static vlan 10" run_cmd "ip -n sw1 neigh replace 192.0.2.66 lladdr $sw2_mac nud perm dev br0.10" run_cmd "ip -n sw2 neigh replace 192.0.2.65 lladdr $sw1_mac nud perm dev br0.10" run_cmd "ip -n sw1 nexthop replace id 1 via 192.0.2.34 fdb" run_cmd "ip -n sw2 nexthop replace id 1 via 192.0.2.33 fdb" run_cmd "ip -n sw1 nexthop replace id 10 group 1 fdb" run_cmd "ip -n sw2 nexthop replace id 10 group 1 fdb" run_cmd "bridge -n sw1 link set dev swp1 backup_port vx0" run_cmd "bridge -n sw2 link set dev swp1 backup_port vx0" run_cmd "bridge -n sw1 link set dev swp1 backup_nhid 10" run_cmd "bridge -n sw2 link set dev swp1 backup_nhid 10" run_cmd "ip -n sw1 link set dev swp1 carrier off" run_cmd "ip -n sw2 link set dev swp1 carrier off" run_cmd "ip netns exec sw1 ping -i 0.1 -c 10 -w $PING_TIMEOUT 192.0.2.66" log_test $? 0 "Ping with backup nexthop ID" # Reset the backup nexthop ID to 0 and check that ping fails. run_cmd "bridge -n sw1 link set dev swp1 backup_nhid 0" run_cmd "bridge -n sw2 link set dev swp1 backup_nhid 0" run_cmd "ip netns exec sw1 ping -i 0.1 -c 10 -w $PING_TIMEOUT 192.0.2.66" log_test $? 1 "Ping after disabling backup nexthop ID" } backup_nhid_add_del_loop() { while true; do ip -n sw1 nexthop del id 10 ip -n sw1 nexthop replace id 10 group 1/2 fdb done >/dev/null 2>&1 } backup_nhid_torture() { local dmac=00:11:22:33:44:55 local smac=00:aa:bb:cc:dd:ee local pid1 local pid2 local pid3 echo echo "Backup nexthop ID - torture test" echo "--------------------------------" # Continuously send traffic through the backup nexthop while adding and # deleting the group. The test is considered successful if nothing # crashed. run_cmd "ip -n sw1 nexthop replace id 1 via 192.0.2.34 fdb" run_cmd "ip -n sw1 nexthop replace id 2 via 192.0.2.34 fdb" run_cmd "ip -n sw1 nexthop replace id 10 group 1/2 fdb" run_cmd "bridge -n sw1 fdb replace $dmac dev swp1 master static vlan 10" run_cmd "bridge -n sw1 link set dev swp1 backup_port vx0" run_cmd "bridge -n sw1 link set dev swp1 backup_nhid 10" run_cmd "ip -n sw1 link set dev swp1 carrier off" backup_nhid_add_del_loop & pid1=$! ip netns exec sw1 mausezahn br0.10 -a $smac -b $dmac -A 198.51.100.1 -B 198.51.100.2 -t ip -p 100 -q -c 0 & pid2=$! sleep 30 kill -9 $pid1 $pid2 wait $pid1 $pid2 2>/dev/null log_test 0 0 "Torture test" } ################################################################################ # Usage usage() { cat < Test(s) to run (default: all) (options: $TESTS) -p Pause on fail -P Pause after each test before cleanup -v Verbose mode (show commands and output) -w Timeout for ping EOF } ################################################################################ # Main trap cleanup EXIT while getopts ":t:pPvhw:" opt; do case $opt in t) TESTS=$OPTARG;; p) PAUSE_ON_FAIL=yes;; P) PAUSE=yes;; v) VERBOSE=$(($VERBOSE + 1));; w) PING_TIMEOUT=$OPTARG;; h) usage; exit 0;; *) usage; exit 1;; esac done # Make sure we don't pause twice. [ "${PAUSE}" = "yes" ] && PAUSE_ON_FAIL=no if [ "$(id -u)" -ne 0 ];then echo "SKIP: Need root privileges" exit $ksft_skip; fi if [ ! -x "$(command -v ip)" ]; then echo "SKIP: Could not run test without ip tool" exit $ksft_skip fi if [ ! -x "$(command -v bridge)" ]; then echo "SKIP: Could not run test without bridge tool" exit $ksft_skip fi if [ ! -x "$(command -v tc)" ]; then echo "SKIP: Could not run test without tc tool" exit $ksft_skip fi if [ ! -x "$(command -v mausezahn)" ]; then echo "SKIP: Could not run test without mausezahn tool" exit $ksft_skip fi if [ ! -x "$(command -v jq)" ]; then echo "SKIP: Could not run test without jq tool" exit $ksft_skip fi bridge link help 2>&1 | grep -q "backup_nhid" if [ $? -ne 0 ]; then echo "SKIP: iproute2 bridge too old, missing backup nexthop ID support" exit $ksft_skip fi # Start clean. cleanup for t in $TESTS do setup; $t; cleanup; done if [ "$TESTS" != "none" ]; then printf "\nTests passed: %3d\n" ${nsuccess} printf "Tests failed: %3d\n" ${nfail} fi exit $ret