net/forwarding/pedit_dsfield.sh

0001 #!/bin/bash
0002 # SPDX-License-Identifier: GPL-2.0
0003
0004 # This test sends traffic from H1 to H2. Either on ingress of $swp1, or on
0005 # egress of $swp2, the traffic is acted upon by a pedit action. An ingress
0006 # filter installed on $h2 verifies that the packet looks like expected.
0007 #
0008 # +----------------------+                             +----------------------+
0009 # | H1                   |                             |                   H2 |
0010 # |    + $h1             |                             |            $h2 +     |
0011 # |    | 192.0.2.1/28    |                             |   192.0.2.2/28 |     |
0012 # +----|-----------------+                             +----------------|-----+
0013 #      |                                                                |
0014 # +----|----------------------------------------------------------------|-----+
0015 # | SW |                                                                |     |
0016 # |  +-|----------------------------------------------------------------|-+   |
0017 # |  | + $swp1                       BR                           $swp2 + |   |
0018 # |  +--------------------------------------------------------------------+   |
0019 # +---------------------------------------------------------------------------+
0020
0021 ALL_TESTS="
0022         ping_ipv4
0023         ping_ipv6
0024         test_ip_dsfield
0025         test_ip_dscp
0026         test_ip_ecn
0027         test_ip_dscp_ecn
0028         test_ip6_dsfield
0029         test_ip6_dscp
0030         test_ip6_ecn
0031 "
0032
0033 NUM_NETIFS=4
0034 source lib.sh
0035 source tc_common.sh
0036
0037 : ${HIT_TIMEOUT:=2000} # ms
0038
0039 h1_create()
0040 {
0041         simple_if_init $h1 192.0.2.1/28 2001:db8:1::1/64
0042 }
0043
0044 h1_destroy()
0045 {
0046         simple_if_fini $h1 192.0.2.1/28 2001:db8:1::1/64
0047 }
0048
0049 h2_create()
0050 {
0051         simple_if_init $h2 192.0.2.2/28 2001:db8:1::2/64
0052         tc qdisc add dev $h2 clsact
0053 }
0054
0055 h2_destroy()
0056 {
0057         tc qdisc del dev $h2 clsact
0058         simple_if_fini $h2 192.0.2.2/28 2001:db8:1::2/64
0059 }
0060
0061 switch_create()
0062 {
0063         ip link add name br1 up type bridge vlan_filtering 1
0064         ip link set dev $swp1 master br1
0065         ip link set dev $swp1 up
0066         ip link set dev $swp2 master br1
0067         ip link set dev $swp2 up
0068
0069         tc qdisc add dev $swp1 clsact
0070         tc qdisc add dev $swp2 clsact
0071 }
0072
0073 switch_destroy()
0074 {
0075         tc qdisc del dev $swp2 clsact
0076         tc qdisc del dev $swp1 clsact
0077
0078         ip link set dev $swp2 down
0079         ip link set dev $swp2 nomaster
0080         ip link set dev $swp1 down
0081         ip link set dev $swp1 nomaster
0082         ip link del dev br1
0083 }
0084
0085 setup_prepare()
0086 {
0087         h1=${NETIFS[p1]}
0088         swp1=${NETIFS[p2]}
0089
0090         swp2=${NETIFS[p3]}
0091         h2=${NETIFS[p4]}
0092
0093         h2mac=$(mac_get $h2)
0094
0095         vrf_prepare
0096         h1_create
0097         h2_create
0098         switch_create
0099 }
0100
0101 cleanup()
0102 {
0103         pre_cleanup
0104
0105         switch_destroy
0106         h2_destroy
0107         h1_destroy
0108         vrf_cleanup
0109 }
0110
0111 ping_ipv4()
0112 {
0113         ping_test $h1 192.0.2.2
0114 }
0115
0116 ping_ipv6()
0117 {
0118         ping6_test $h1 2001:db8:1::2
0119 }
0120
0121 do_test_pedit_dsfield_common()
0122 {
0123         local pedit_locus=$1; shift
0124         local pedit_action=$1; shift
0125         local mz_flags=$1; shift
0126
0127         RET=0
0128
0129         # TOS 125: DSCP 31, ECN 1. Used for testing that the relevant part is
0130         # overwritten when zero is selected.
0131         $MZ $mz_flags $h1 -c 10 -d 20msec -p 100 \
0132             -a own -b $h2mac -q -t tcp tos=0x7d,sp=54321,dp=12345
0133
0134         local pkts
0135         pkts=$(busywait "$TC_HIT_TIMEOUT" until_counter_is ">= 10" \
0136                         tc_rule_handle_stats_get "dev $h2 ingress" 101)
0137         check_err $? "Expected to get 10 packets on test probe, but got $pkts."
0138
0139         pkts=$(tc_rule_handle_stats_get "$pedit_locus" 101)
0140         ((pkts >= 10))
0141         check_err $? "Expected to get 10 packets on pedit rule, but got $pkts."
0142
0143         log_test "$pedit_locus pedit $pedit_action"
0144 }
0145
0146 do_test_pedit_dsfield()
0147 {
0148         local pedit_locus=$1; shift
0149         local pedit_action=$1; shift
0150         local match_prot=$1; shift
0151         local match_flower=$1; shift
0152         local mz_flags=$1; shift
0153         local saddr=$1; shift
0154         local daddr=$1; shift
0155
0156         tc filter add $pedit_locus handle 101 pref 1 \
0157            flower action pedit ex munge $pedit_action
0158         tc filter add dev $h2 ingress handle 101 pref 1 prot $match_prot \
0159            flower skip_hw $match_flower action pass
0160
0161         do_test_pedit_dsfield_common "$pedit_locus" "$pedit_action" "$mz_flags"
0162
0163         tc filter del dev $h2 ingress pref 1
0164         tc filter del $pedit_locus pref 1
0165 }
0166
0167 do_test_ip_dsfield()
0168 {
0169         local locus=$1; shift
0170         local dsfield
0171
0172         for dsfield in 0 1 2 3 128 252 253 254 255; do
0173                 do_test_pedit_dsfield "$locus"                          \
0174                                       "ip dsfield set $dsfield"         \
0175                                       ip "ip_tos $dsfield"              \
0176                                       "-A 192.0.2.1 -B 192.0.2.2"
0177         done
0178 }
0179
0180 test_ip_dsfield()
0181 {
0182         do_test_ip_dsfield "dev $swp1 ingress"
0183         do_test_ip_dsfield "dev $swp2 egress"
0184 }
0185
0186 do_test_ip_dscp()
0187 {
0188         local locus=$1; shift
0189         local dscp
0190
0191         for dscp in 0 1 2 3 32 61 62 63; do
0192                 do_test_pedit_dsfield "$locus"                                 \
0193                                   "ip dsfield set $((dscp << 2)) retain 0xfc"  \
0194                                   ip "ip_tos $(((dscp << 2) | 1))"             \
0195                                   "-A 192.0.2.1 -B 192.0.2.2"
0196         done
0197 }
0198
0199 test_ip_dscp()
0200 {
0201         do_test_ip_dscp "dev $swp1 ingress"
0202         do_test_ip_dscp "dev $swp2 egress"
0203 }
0204
0205 do_test_ip_ecn()
0206 {
0207         local locus=$1; shift
0208         local ecn
0209
0210         for ecn in 0 1 2 3; do
0211                 do_test_pedit_dsfield "$locus"                          \
0212                                       "ip dsfield set $ecn retain 0x03" \
0213                                       ip "ip_tos $((124 | $ecn))"       \
0214                                       "-A 192.0.2.1 -B 192.0.2.2"
0215         done
0216 }
0217
0218 test_ip_ecn()
0219 {
0220         do_test_ip_ecn "dev $swp1 ingress"
0221         do_test_ip_ecn "dev $swp2 egress"
0222 }
0223
0224 do_test_ip_dscp_ecn()
0225 {
0226         local locus=$1; shift
0227
0228         tc filter add $locus handle 101 pref 1                          \
0229            flower action pedit ex munge ip dsfield set 124 retain 0xfc  \
0230                   action pedit ex munge ip dsfield set 1 retain 0x03
0231         tc filter add dev $h2 ingress handle 101 pref 1 prot ip         \
0232            flower skip_hw ip_tos 125 action pass
0233
0234         do_test_pedit_dsfield_common "$locus" "set DSCP + set ECN"      \
0235                                       "-A 192.0.2.1 -B 192.0.2.2"
0236
0237         tc filter del dev $h2 ingress pref 1
0238         tc filter del $locus pref 1
0239 }
0240
0241 test_ip_dscp_ecn()
0242 {
0243         do_test_ip_dscp_ecn "dev $swp1 ingress"
0244         do_test_ip_dscp_ecn "dev $swp2 egress"
0245 }
0246
0247 do_test_ip6_dsfield()
0248 {
0249         local locus=$1; shift
0250         local dsfield
0251
0252         for dsfield in 0 1 2 3 128 252 253 254 255; do
0253                 do_test_pedit_dsfield "$locus"                          \
0254                                   "ip6 traffic_class set $dsfield"      \
0255                                   ipv6 "ip_tos $dsfield"                \
0256                                   "-6 -A 2001:db8:1::1 -B 2001:db8:1::2"
0257         done
0258 }
0259
0260 test_ip6_dsfield()
0261 {
0262         do_test_ip6_dsfield "dev $swp1 ingress"
0263         do_test_ip6_dsfield "dev $swp2 egress"
0264 }
0265
0266 do_test_ip6_dscp()
0267 {
0268         local locus=$1; shift
0269         local dscp
0270
0271         for dscp in 0 1 2 3 32 61 62 63; do
0272                 do_test_pedit_dsfield "$locus"                                 \
0273                             "ip6 traffic_class set $((dscp << 2)) retain 0xfc" \
0274                             ipv6 "ip_tos $(((dscp << 2) | 1))"                 \
0275                             "-6 -A 2001:db8:1::1 -B 2001:db8:1::2"
0276         done
0277 }
0278
0279 test_ip6_dscp()
0280 {
0281         do_test_ip6_dscp "dev $swp1 ingress"
0282         do_test_ip6_dscp "dev $swp2 egress"
0283 }
0284
0285 do_test_ip6_ecn()
0286 {
0287         local locus=$1; shift
0288         local ecn
0289
0290         for ecn in 0 1 2 3; do
0291                 do_test_pedit_dsfield "$locus"                          \
0292                                 "ip6 traffic_class set $ecn retain 0x3" \
0293                                 ipv6 "ip_tos $((124 | $ecn))"           \
0294                                 "-6 -A 2001:db8:1::1 -B 2001:db8:1::2"
0295         done
0296 }
0297
0298 test_ip6_ecn()
0299 {
0300         do_test_ip6_ecn "dev $swp1 ingress"
0301         do_test_ip6_ecn "dev $swp2 egress"
0302 }
0303
0304 trap cleanup EXIT
0305
0306 setup_prepare
0307 setup_wait
0308
0309 tests_run
0310
0311 exit $EXIT_STATUS