selftests/net/rtnetlink.sh

0001 #!/bin/bash
0002 #
0003 # This test is for checking rtnetlink callpaths, and get as much coverage as possible.
0004 #
0005 # set -e
0006
0007 devdummy="test-dummy0"
0008
0009 # Kselftest framework requirement - SKIP code is 4.
0010 ksft_skip=4
0011
0012 # set global exit status, but never reset nonzero one.
0013 check_err()
0014 {
0015         if [ $ret -eq 0 ]; then
0016                 ret=$1
0017         fi
0018 }
0019
0020 # same but inverted -- used when command must fail for test to pass
0021 check_fail()
0022 {
0023         if [ $1 -eq 0 ]; then
0024                 ret=1
0025         fi
0026 }
0027
0028 kci_add_dummy()
0029 {
0030         ip link add name "$devdummy" type dummy
0031         check_err $?
0032         ip link set "$devdummy" up
0033         check_err $?
0034 }
0035
0036 kci_del_dummy()
0037 {
0038         ip link del dev "$devdummy"
0039         check_err $?
0040 }
0041
0042 kci_test_netconf()
0043 {
0044         dev="$1"
0045         r=$ret
0046
0047         ip netconf show dev "$dev" > /dev/null
0048         check_err $?
0049
0050         for f in 4 6; do
0051                 ip -$f netconf show dev "$dev" > /dev/null
0052                 check_err $?
0053         done
0054
0055         if [ $ret -ne 0 ] ;then
0056                 echo "FAIL: ip netconf show $dev"
0057                 test $r -eq 0 && ret=0
0058                 return 1
0059         fi
0060 }
0061
0062 # add a bridge with vlans on top
0063 kci_test_bridge()
0064 {
0065         devbr="test-br0"
0066         vlandev="testbr-vlan1"
0067
0068         local ret=0
0069         ip link add name "$devbr" type bridge
0070         check_err $?
0071
0072         ip link set dev "$devdummy" master "$devbr"
0073         check_err $?
0074
0075         ip link set "$devbr" up
0076         check_err $?
0077
0078         ip link add link "$devbr" name "$vlandev" type vlan id 1
0079         check_err $?
0080         ip addr add dev "$vlandev" 10.200.7.23/30
0081         check_err $?
0082         ip -6 addr add dev "$vlandev" dead:42::1234/64
0083         check_err $?
0084         ip -d link > /dev/null
0085         check_err $?
0086         ip r s t all > /dev/null
0087         check_err $?
0088
0089         for name in "$devbr" "$vlandev" "$devdummy" ; do
0090                 kci_test_netconf "$name"
0091         done
0092
0093         ip -6 addr del dev "$vlandev" dead:42::1234/64
0094         check_err $?
0095
0096         ip link del dev "$vlandev"
0097         check_err $?
0098         ip link del dev "$devbr"
0099         check_err $?
0100
0101         if [ $ret -ne 0 ];then
0102                 echo "FAIL: bridge setup"
0103                 return 1
0104         fi
0105         echo "PASS: bridge setup"
0106
0107 }
0108
0109 kci_test_gre()
0110 {
0111         gredev=neta
0112         rem=10.42.42.1
0113         loc=10.0.0.1
0114
0115         local ret=0
0116         ip tunnel add $gredev mode gre remote $rem local $loc ttl 1
0117         check_err $?
0118         ip link set $gredev up
0119         check_err $?
0120         ip addr add 10.23.7.10 dev $gredev
0121         check_err $?
0122         ip route add 10.23.8.0/30 dev $gredev
0123         check_err $?
0124         ip addr add dev "$devdummy" 10.23.7.11/24
0125         check_err $?
0126         ip link > /dev/null
0127         check_err $?
0128         ip addr > /dev/null
0129         check_err $?
0130
0131         kci_test_netconf "$gredev"
0132
0133         ip addr del dev "$devdummy" 10.23.7.11/24
0134         check_err $?
0135
0136         ip link del $gredev
0137         check_err $?
0138
0139         if [ $ret -ne 0 ];then
0140                 echo "FAIL: gre tunnel endpoint"
0141                 return 1
0142         fi
0143         echo "PASS: gre tunnel endpoint"
0144 }
0145
0146 # tc uses rtnetlink too, for full tc testing
0147 # please see tools/testing/selftests/tc-testing.
0148 kci_test_tc()
0149 {
0150         dev=lo
0151         local ret=0
0152
0153         tc qdisc add dev "$dev" root handle 1: htb
0154         check_err $?
0155         tc class add dev "$dev" parent 1: classid 1:10 htb rate 1mbit
0156         check_err $?
0157         tc filter add dev "$dev" parent 1:0 prio 5 handle ffe: protocol ip u32 divisor 256
0158         check_err $?
0159         tc filter add dev "$dev" parent 1:0 prio 5 handle ffd: protocol ip u32 divisor 256
0160         check_err $?
0161         tc filter add dev "$dev" parent 1:0 prio 5 handle ffc: protocol ip u32 divisor 256
0162         check_err $?
0163         tc filter add dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:3 u32 ht ffe:2: match ip src 10.0.0.3 flowid 1:10
0164         check_err $?
0165         tc filter add dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:2 u32 ht ffe:2: match ip src 10.0.0.2 flowid 1:10
0166         check_err $?
0167         tc filter show dev "$dev" parent  1:0 > /dev/null
0168         check_err $?
0169         tc filter del dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:3 u32
0170         check_err $?
0171         tc filter show dev "$dev" parent  1:0 > /dev/null
0172         check_err $?
0173         tc qdisc del dev "$dev" root handle 1: htb
0174         check_err $?
0175
0176         if [ $ret -ne 0 ];then
0177                 echo "FAIL: tc htb hierarchy"
0178                 return 1
0179         fi
0180         echo "PASS: tc htb hierarchy"
0181
0182 }
0183
0184 kci_test_polrouting()
0185 {
0186         local ret=0
0187         ip rule add fwmark 1 lookup 100
0188         check_err $?
0189         ip route add local 0.0.0.0/0 dev lo table 100
0190         check_err $?
0191         ip r s t all > /dev/null
0192         check_err $?
0193         ip rule del fwmark 1 lookup 100
0194         check_err $?
0195         ip route del local 0.0.0.0/0 dev lo table 100
0196         check_err $?
0197
0198         if [ $ret -ne 0 ];then
0199                 echo "FAIL: policy route test"
0200                 return 1
0201         fi
0202         echo "PASS: policy routing"
0203 }
0204
0205 kci_test_route_get()
0206 {
0207         local hash_policy=$(sysctl -n net.ipv4.fib_multipath_hash_policy)
0208
0209         local ret=0
0210
0211         ip route get 127.0.0.1 > /dev/null
0212         check_err $?
0213         ip route get 127.0.0.1 dev "$devdummy" > /dev/null
0214         check_err $?
0215         ip route get ::1 > /dev/null
0216         check_err $?
0217         ip route get fe80::1 dev "$devdummy" > /dev/null
0218         check_err $?
0219         ip route get 127.0.0.1 from 127.0.0.1 oif lo tos 0x10 mark 0x1 > /dev/null
0220         check_err $?
0221         ip route get ::1 from ::1 iif lo oif lo tos 0x10 mark 0x1 > /dev/null
0222         check_err $?
0223         ip addr add dev "$devdummy" 10.23.7.11/24
0224         check_err $?
0225         ip route get 10.23.7.11 from 10.23.7.12 iif "$devdummy" > /dev/null
0226         check_err $?
0227         ip route add 10.23.8.0/24 \
0228                 nexthop via 10.23.7.13 dev "$devdummy" \
0229                 nexthop via 10.23.7.14 dev "$devdummy"
0230         check_err $?
0231         sysctl -wq net.ipv4.fib_multipath_hash_policy=0
0232         ip route get 10.23.8.11 > /dev/null
0233         check_err $?
0234         sysctl -wq net.ipv4.fib_multipath_hash_policy=1
0235         ip route get 10.23.8.11 > /dev/null
0236         check_err $?
0237         sysctl -wq net.ipv4.fib_multipath_hash_policy="$hash_policy"
0238         ip route del 10.23.8.0/24
0239         check_err $?
0240         ip addr del dev "$devdummy" 10.23.7.11/24
0241         check_err $?
0242
0243         if [ $ret -ne 0 ];then
0244                 echo "FAIL: route get"
0245                 return 1
0246         fi
0247
0248         echo "PASS: route get"
0249 }
0250
0251 kci_test_addrlft()
0252 {
0253         for i in $(seq 10 100) ;do
0254                 lft=$(((RANDOM%3) + 1))
0255                 ip addr add 10.23.11.$i/32 dev "$devdummy" preferred_lft $lft valid_lft $((lft+1))
0256                 check_err $?
0257         done
0258
0259         sleep 5
0260
0261         ip addr show dev "$devdummy" | grep "10.23.11."
0262         if [ $? -eq 0 ]; then
0263                 echo "FAIL: preferred_lft addresses remaining"
0264                 check_err 1
0265                 return
0266         fi
0267
0268         echo "PASS: preferred_lft addresses have expired"
0269 }
0270
0271 kci_test_promote_secondaries()
0272 {
0273         promote=$(sysctl -n net.ipv4.conf.$devdummy.promote_secondaries)
0274
0275         sysctl -q net.ipv4.conf.$devdummy.promote_secondaries=1
0276
0277         for i in $(seq 2 254);do
0278                 IP="10.23.11.$i"
0279                 ip -f inet addr add $IP/16 brd + dev "$devdummy"
0280                 ifconfig "$devdummy" $IP netmask 255.255.0.0
0281         done
0282
0283         ip addr flush dev "$devdummy"
0284
0285         [ $promote -eq 0 ] && sysctl -q net.ipv4.conf.$devdummy.promote_secondaries=0
0286
0287         echo "PASS: promote_secondaries complete"
0288 }
0289
0290 kci_test_addrlabel()
0291 {
0292         local ret=0
0293
0294         ip addrlabel add prefix dead::/64 dev lo label 1
0295         check_err $?
0296
0297         ip addrlabel list |grep -q "prefix dead::/64 dev lo label 1"
0298         check_err $?
0299
0300         ip addrlabel del prefix dead::/64 dev lo label 1 2> /dev/null
0301         check_err $?
0302
0303         ip addrlabel add prefix dead::/64 label 1 2> /dev/null
0304         check_err $?
0305
0306         ip addrlabel del prefix dead::/64 label 1 2> /dev/null
0307         check_err $?
0308
0309         # concurrent add/delete
0310         for i in $(seq 1 1000); do
0311                 ip addrlabel add prefix 1c3::/64 label 12345 2>/dev/null
0312         done &
0313
0314         for i in $(seq 1 1000); do
0315                 ip addrlabel del prefix 1c3::/64 label 12345 2>/dev/null
0316         done
0317
0318         wait
0319
0320         ip addrlabel del prefix 1c3::/64 label 12345 2>/dev/null
0321
0322         if [ $ret -ne 0 ];then
0323                 echo "FAIL: ipv6 addrlabel"
0324                 return 1
0325         fi
0326
0327         echo "PASS: ipv6 addrlabel"
0328 }
0329
0330 kci_test_ifalias()
0331 {
0332         local ret=0
0333         namewant=$(uuidgen)
0334         syspathname="/sys/class/net/$devdummy/ifalias"
0335
0336         ip link set dev "$devdummy" alias "$namewant"
0337         check_err $?
0338
0339         if [ $ret -ne 0 ]; then
0340                 echo "FAIL: cannot set interface alias of $devdummy to $namewant"
0341                 return 1
0342         fi
0343
0344         ip link show "$devdummy" | grep -q "alias $namewant"
0345         check_err $?
0346
0347         if [ -r "$syspathname" ] ; then
0348                 read namehave < "$syspathname"
0349                 if [ "$namewant" != "$namehave" ]; then
0350                         echo "FAIL: did set ifalias $namewant but got $namehave"
0351                         return 1
0352                 fi
0353
0354                 namewant=$(uuidgen)
0355                 echo "$namewant" > "$syspathname"
0356                 ip link show "$devdummy" | grep -q "alias $namewant"
0357                 check_err $?
0358
0359                 # sysfs interface allows to delete alias again
0360                 echo "" > "$syspathname"
0361
0362                 ip link show "$devdummy" | grep -q "alias $namewant"
0363                 check_fail $?
0364
0365                 for i in $(seq 1 100); do
0366                         uuidgen > "$syspathname" &
0367                 done
0368
0369                 wait
0370
0371                 # re-add the alias -- kernel should free mem when dummy dev is removed
0372                 ip link set dev "$devdummy" alias "$namewant"
0373                 check_err $?
0374         fi
0375
0376         if [ $ret -ne 0 ]; then
0377                 echo "FAIL: set interface alias $devdummy to $namewant"
0378                 return 1
0379         fi
0380
0381         echo "PASS: set ifalias $namewant for $devdummy"
0382 }
0383
0384 kci_test_vrf()
0385 {
0386         vrfname="test-vrf"
0387         local ret=0
0388
0389         ip link show type vrf 2>/dev/null
0390         if [ $? -ne 0 ]; then
0391                 echo "SKIP: vrf: iproute2 too old"
0392                 return $ksft_skip
0393         fi
0394
0395         ip link add "$vrfname" type vrf table 10
0396         check_err $?
0397         if [ $ret -ne 0 ];then
0398                 echo "FAIL: can't add vrf interface, skipping test"
0399                 return 0
0400         fi
0401
0402         ip -br link show type vrf | grep -q "$vrfname"
0403         check_err $?
0404         if [ $ret -ne 0 ];then
0405                 echo "FAIL: created vrf device not found"
0406                 return 1
0407         fi
0408
0409         ip link set dev "$vrfname" up
0410         check_err $?
0411
0412         ip link set dev "$devdummy" master "$vrfname"
0413         check_err $?
0414         ip link del dev "$vrfname"
0415         check_err $?
0416
0417         if [ $ret -ne 0 ];then
0418                 echo "FAIL: vrf"
0419                 return 1
0420         fi
0421
0422         echo "PASS: vrf"
0423 }
0424
0425 kci_test_encap_vxlan()
0426 {
0427         local ret=0
0428         vxlan="test-vxlan0"
0429         vlan="test-vlan0"
0430         testns="$1"
0431
0432         ip -netns "$testns" link add "$vxlan" type vxlan id 42 group 239.1.1.1 \
0433                 dev "$devdummy" dstport 4789 2>/dev/null
0434         if [ $? -ne 0 ]; then
0435                 echo "FAIL: can't add vxlan interface, skipping test"
0436                 return 0
0437         fi
0438         check_err $?
0439
0440         ip -netns "$testns" addr add 10.2.11.49/24 dev "$vxlan"
0441         check_err $?
0442
0443         ip -netns "$testns" link set up dev "$vxlan"
0444         check_err $?
0445
0446         ip -netns "$testns" link add link "$vxlan" name "$vlan" type vlan id 1
0447         check_err $?
0448
0449         # changelink testcases
0450         ip -netns "$testns" link set dev "$vxlan" type vxlan vni 43 2>/dev/null
0451         check_fail $?
0452
0453         ip -netns "$testns" link set dev "$vxlan" type vxlan group ffe5::5 dev "$devdummy" 2>/dev/null
0454         check_fail $?
0455
0456         ip -netns "$testns" link set dev "$vxlan" type vxlan ttl inherit 2>/dev/null
0457         check_fail $?
0458
0459         ip -netns "$testns" link set dev "$vxlan" type vxlan ttl 64
0460         check_err $?
0461
0462         ip -netns "$testns" link set dev "$vxlan" type vxlan nolearning
0463         check_err $?
0464
0465         ip -netns "$testns" link set dev "$vxlan" type vxlan proxy 2>/dev/null
0466         check_fail $?
0467
0468         ip -netns "$testns" link set dev "$vxlan" type vxlan norsc 2>/dev/null
0469         check_fail $?
0470
0471         ip -netns "$testns" link set dev "$vxlan" type vxlan l2miss 2>/dev/null
0472         check_fail $?
0473
0474         ip -netns "$testns" link set dev "$vxlan" type vxlan l3miss 2>/dev/null
0475         check_fail $?
0476
0477         ip -netns "$testns" link set dev "$vxlan" type vxlan external 2>/dev/null
0478         check_fail $?
0479
0480         ip -netns "$testns" link set dev "$vxlan" type vxlan udpcsum 2>/dev/null
0481         check_fail $?
0482
0483         ip -netns "$testns" link set dev "$vxlan" type vxlan udp6zerocsumtx 2>/dev/null
0484         check_fail $?
0485
0486         ip -netns "$testns" link set dev "$vxlan" type vxlan udp6zerocsumrx 2>/dev/null
0487         check_fail $?
0488
0489         ip -netns "$testns" link set dev "$vxlan" type vxlan remcsumtx 2>/dev/null
0490         check_fail $?
0491
0492         ip -netns "$testns" link set dev "$vxlan" type vxlan remcsumrx 2>/dev/null
0493         check_fail $?
0494
0495         ip -netns "$testns" link set dev "$vxlan" type vxlan gbp 2>/dev/null
0496         check_fail $?
0497
0498         ip -netns "$testns" link set dev "$vxlan" type vxlan gpe 2>/dev/null
0499         check_fail $?
0500
0501         ip -netns "$testns" link del "$vxlan"
0502         check_err $?
0503
0504         if [ $ret -ne 0 ]; then
0505                 echo "FAIL: vxlan"
0506                 return 1
0507         fi
0508         echo "PASS: vxlan"
0509 }
0510
0511 kci_test_encap_fou()
0512 {
0513         local ret=0
0514         name="test-fou"
0515         testns="$1"
0516
0517         ip fou help 2>&1 |grep -q 'Usage: ip fou'
0518         if [ $? -ne 0 ];then
0519                 echo "SKIP: fou: iproute2 too old"
0520                 return $ksft_skip
0521         fi
0522
0523         if ! /sbin/modprobe -q -n fou; then
0524                 echo "SKIP: module fou is not found"
0525                 return $ksft_skip
0526         fi
0527         /sbin/modprobe -q fou
0528         ip -netns "$testns" fou add port 7777 ipproto 47 2>/dev/null
0529         if [ $? -ne 0 ];then
0530                 echo "FAIL: can't add fou port 7777, skipping test"
0531                 return 1
0532         fi
0533
0534         ip -netns "$testns" fou add port 8888 ipproto 4
0535         check_err $?
0536
0537         ip -netns "$testns" fou del port 9999 2>/dev/null
0538         check_fail $?
0539
0540         ip -netns "$testns" fou del port 7777
0541         check_err $?
0542
0543         if [ $ret -ne 0 ]; then
0544                 echo "FAIL: fou"
0545                 return 1
0546         fi
0547
0548         echo "PASS: fou"
0549 }
0550
0551 # test various encap methods, use netns to avoid unwanted interference
0552 kci_test_encap()
0553 {
0554         testns="testns"
0555         local ret=0
0556
0557         ip netns add "$testns"
0558         if [ $? -ne 0 ]; then
0559                 echo "SKIP encap tests: cannot add net namespace $testns"
0560                 return $ksft_skip
0561         fi
0562
0563         ip -netns "$testns" link set lo up
0564         check_err $?
0565
0566         ip -netns "$testns" link add name "$devdummy" type dummy
0567         check_err $?
0568         ip -netns "$testns" link set "$devdummy" up
0569         check_err $?
0570
0571         kci_test_encap_vxlan "$testns"
0572         check_err $?
0573         kci_test_encap_fou "$testns"
0574         check_err $?
0575
0576         ip netns del "$testns"
0577         return $ret
0578 }
0579
0580 kci_test_macsec()
0581 {
0582         msname="test_macsec0"
0583         local ret=0
0584
0585         ip macsec help 2>&1 | grep -q "^Usage: ip macsec"
0586         if [ $? -ne 0 ]; then
0587                 echo "SKIP: macsec: iproute2 too old"
0588                 return $ksft_skip
0589         fi
0590
0591         ip link add link "$devdummy" "$msname" type macsec port 42 encrypt on
0592         check_err $?
0593         if [ $ret -ne 0 ];then
0594                 echo "FAIL: can't add macsec interface, skipping test"
0595                 return 1
0596         fi
0597
0598         ip macsec add "$msname" tx sa 0 pn 1024 on key 01 12345678901234567890123456789012
0599         check_err $?
0600
0601         ip macsec add "$msname" rx port 1234 address "1c:ed:de:ad:be:ef"
0602         check_err $?
0603
0604         ip macsec add "$msname" rx port 1234 address "1c:ed:de:ad:be:ef" sa 0 pn 1 on key 00 0123456789abcdef0123456789abcdef
0605         check_err $?
0606
0607         ip macsec show > /dev/null
0608         check_err $?
0609
0610         ip link del dev "$msname"
0611         check_err $?
0612
0613         if [ $ret -ne 0 ];then
0614                 echo "FAIL: macsec"
0615                 return 1
0616         fi
0617
0618         echo "PASS: macsec"
0619 }
0620
0621 #-------------------------------------------------------------------
0622 # Example commands
0623 #   ip x s add proto esp src 14.0.0.52 dst 14.0.0.70 \
0624 #            spi 0x07 mode transport reqid 0x07 replay-window 32 \
0625 #            aead 'rfc4106(gcm(aes))' 1234567890123456dcba 128 \
0626 #            sel src 14.0.0.52/24 dst 14.0.0.70/24
0627 #   ip x p add dir out src 14.0.0.52/24 dst 14.0.0.70/24 \
0628 #            tmpl proto esp src 14.0.0.52 dst 14.0.0.70 \
0629 #            spi 0x07 mode transport reqid 0x07
0630 #
0631 # Subcommands not tested
0632 #    ip x s update
0633 #    ip x s allocspi
0634 #    ip x s deleteall
0635 #    ip x p update
0636 #    ip x p deleteall
0637 #    ip x p set
0638 #-------------------------------------------------------------------
0639 kci_test_ipsec()
0640 {
0641         local ret=0
0642         algo="aead rfc4106(gcm(aes)) 0x3132333435363738393031323334353664636261 128"
0643         srcip=192.168.123.1
0644         dstip=192.168.123.2
0645         spi=7
0646
0647         ip addr add $srcip dev $devdummy
0648
0649         # flush to be sure there's nothing configured
0650         ip x s flush ; ip x p flush
0651         check_err $?
0652
0653         # start the monitor in the background
0654         tmpfile=`mktemp /var/run/ipsectestXXX`
0655         mpid=`(ip x m > $tmpfile & echo $!) 2>/dev/null`
0656         sleep 0.2
0657
0658         ipsecid="proto esp src $srcip dst $dstip spi 0x07"
0659         ip x s add $ipsecid \
0660             mode transport reqid 0x07 replay-window 32 \
0661             $algo sel src $srcip/24 dst $dstip/24
0662         check_err $?
0663
0664         lines=`ip x s list | grep $srcip | grep $dstip | wc -l`
0665         test $lines -eq 2
0666         check_err $?
0667
0668         ip x s count | grep -q "SAD count 1"
0669         check_err $?
0670
0671         lines=`ip x s get $ipsecid | grep $srcip | grep $dstip | wc -l`
0672         test $lines -eq 2
0673         check_err $?
0674
0675         ip x s delete $ipsecid
0676         check_err $?
0677
0678         lines=`ip x s list | wc -l`
0679         test $lines -eq 0
0680         check_err $?
0681
0682         ipsecsel="dir out src $srcip/24 dst $dstip/24"
0683         ip x p add $ipsecsel \
0684                     tmpl proto esp src $srcip dst $dstip \
0685                     spi 0x07 mode transport reqid 0x07
0686         check_err $?
0687
0688         lines=`ip x p list | grep $srcip | grep $dstip | wc -l`
0689         test $lines -eq 2
0690         check_err $?
0691
0692         ip x p count | grep -q "SPD IN  0 OUT 1 FWD 0"
0693         check_err $?
0694
0695         lines=`ip x p get $ipsecsel | grep $srcip | grep $dstip | wc -l`
0696         test $lines -eq 2
0697         check_err $?
0698
0699         ip x p delete $ipsecsel
0700         check_err $?
0701
0702         lines=`ip x p list | wc -l`
0703         test $lines -eq 0
0704         check_err $?
0705
0706         # check the monitor results
0707         kill $mpid
0708         lines=`wc -l $tmpfile | cut "-d " -f1`
0709         test $lines -eq 20
0710         check_err $?
0711         rm -rf $tmpfile
0712
0713         # clean up any leftovers
0714         ip x s flush
0715         check_err $?
0716         ip x p flush
0717         check_err $?
0718         ip addr del $srcip/32 dev $devdummy
0719
0720         if [ $ret -ne 0 ]; then
0721                 echo "FAIL: ipsec"
0722                 return 1
0723         fi
0724         echo "PASS: ipsec"
0725 }
0726
0727 #-------------------------------------------------------------------
0728 # Example commands
0729 #   ip x s add proto esp src 14.0.0.52 dst 14.0.0.70 \
0730 #            spi 0x07 mode transport reqid 0x07 replay-window 32 \
0731 #            aead 'rfc4106(gcm(aes))' 1234567890123456dcba 128 \
0732 #            sel src 14.0.0.52/24 dst 14.0.0.70/24
0733 #            offload dev sim1 dir out
0734 #   ip x p add dir out src 14.0.0.52/24 dst 14.0.0.70/24 \
0735 #            tmpl proto esp src 14.0.0.52 dst 14.0.0.70 \
0736 #            spi 0x07 mode transport reqid 0x07
0737 #
0738 #-------------------------------------------------------------------
0739 kci_test_ipsec_offload()
0740 {
0741         local ret=0
0742         algo="aead rfc4106(gcm(aes)) 0x3132333435363738393031323334353664636261 128"
0743         srcip=192.168.123.3
0744         dstip=192.168.123.4
0745         sysfsd=/sys/kernel/debug/netdevsim/netdevsim0/ports/0/
0746         sysfsf=$sysfsd/ipsec
0747         sysfsnet=/sys/bus/netdevsim/devices/netdevsim0/net/
0748         probed=false
0749
0750         # setup netdevsim since dummydev doesn't have offload support
0751         if [ ! -w /sys/bus/netdevsim/new_device ] ; then
0752                 modprobe -q netdevsim
0753                 check_err $?
0754                 if [ $ret -ne 0 ]; then
0755                         echo "SKIP: ipsec_offload can't load netdevsim"
0756                         return $ksft_skip
0757                 fi
0758                 probed=true
0759         fi
0760
0761         echo "0" > /sys/bus/netdevsim/new_device
0762         while [ ! -d $sysfsnet ] ; do :; done
0763         udevadm settle
0764         dev=`ls $sysfsnet`
0765
0766         ip addr add $srcip dev $dev
0767         ip link set $dev up
0768         if [ ! -d $sysfsd ] ; then
0769                 echo "FAIL: ipsec_offload can't create device $dev"
0770                 return 1
0771         fi
0772         if [ ! -f $sysfsf ] ; then
0773                 echo "FAIL: ipsec_offload netdevsim doesn't support IPsec offload"
0774                 return 1
0775         fi
0776
0777         # flush to be sure there's nothing configured
0778         ip x s flush ; ip x p flush
0779
0780         # create offloaded SAs, both in and out
0781         ip x p add dir out src $srcip/24 dst $dstip/24 \
0782             tmpl proto esp src $srcip dst $dstip spi 9 \
0783             mode transport reqid 42
0784         check_err $?
0785         ip x p add dir out src $dstip/24 dst $srcip/24 \
0786             tmpl proto esp src $dstip dst $srcip spi 9 \
0787             mode transport reqid 42
0788         check_err $?
0789
0790         ip x s add proto esp src $srcip dst $dstip spi 9 \
0791             mode transport reqid 42 $algo sel src $srcip/24 dst $dstip/24 \
0792             offload dev $dev dir out
0793         check_err $?
0794         ip x s add proto esp src $dstip dst $srcip spi 9 \
0795             mode transport reqid 42 $algo sel src $dstip/24 dst $srcip/24 \
0796             offload dev $dev dir in
0797         check_err $?
0798         if [ $ret -ne 0 ]; then
0799                 echo "FAIL: ipsec_offload can't create SA"
0800                 return 1
0801         fi
0802
0803         # does offload show up in ip output
0804         lines=`ip x s list | grep -c "crypto offload parameters: dev $dev dir"`
0805         if [ $lines -ne 2 ] ; then
0806                 echo "FAIL: ipsec_offload SA offload missing from list output"
0807                 check_err 1
0808         fi
0809
0810         # use ping to exercise the Tx path
0811         ping -I $dev -c 3 -W 1 -i 0 $dstip >/dev/null
0812
0813         # does driver have correct offload info
0814         diff $sysfsf - << EOF
0815 SA count=2 tx=3
0816 sa[0] tx ipaddr=0x00000000 00000000 00000000 00000000
0817 sa[0]    spi=0x00000009 proto=0x32 salt=0x61626364 crypt=1
0818 sa[0]    key=0x34333231 38373635 32313039 36353433
0819 sa[1] rx ipaddr=0x00000000 00000000 00000000 037ba8c0
0820 sa[1]    spi=0x00000009 proto=0x32 salt=0x61626364 crypt=1
0821 sa[1]    key=0x34333231 38373635 32313039 36353433
0822 EOF
0823         if [ $? -ne 0 ] ; then
0824                 echo "FAIL: ipsec_offload incorrect driver data"
0825                 check_err 1
0826         fi
0827
0828         # does offload get removed from driver
0829         ip x s flush
0830         ip x p flush
0831         lines=`grep -c "SA count=0" $sysfsf`
0832         if [ $lines -ne 1 ] ; then
0833                 echo "FAIL: ipsec_offload SA not removed from driver"
0834                 check_err 1
0835         fi
0836
0837         # clean up any leftovers
0838         $probed && rmmod netdevsim
0839
0840         if [ $ret -ne 0 ]; then
0841                 echo "FAIL: ipsec_offload"
0842                 return 1
0843         fi
0844         echo "PASS: ipsec_offload"
0845 }
0846
0847 kci_test_gretap()
0848 {
0849         testns="testns"
0850         DEV_NS=gretap00
0851         local ret=0
0852
0853         ip netns add "$testns"
0854         if [ $? -ne 0 ]; then
0855                 echo "SKIP gretap tests: cannot add net namespace $testns"
0856                 return $ksft_skip
0857         fi
0858
0859         ip link help gretap 2>&1 | grep -q "^Usage:"
0860         if [ $? -ne 0 ];then
0861                 echo "SKIP: gretap: iproute2 too old"
0862                 ip netns del "$testns"
0863                 return $ksft_skip
0864         fi
0865
0866         # test native tunnel
0867         ip -netns "$testns" link add dev "$DEV_NS" type gretap seq \
0868                 key 102 local 172.16.1.100 remote 172.16.1.200
0869         check_err $?
0870
0871         ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24
0872         check_err $?
0873
0874         ip -netns "$testns" link set dev $DEV_NS up
0875         check_err $?
0876
0877         ip -netns "$testns" link del "$DEV_NS"
0878         check_err $?
0879
0880         # test external mode
0881         ip -netns "$testns" link add dev "$DEV_NS" type gretap external
0882         check_err $?
0883
0884         ip -netns "$testns" link del "$DEV_NS"
0885         check_err $?
0886
0887         if [ $ret -ne 0 ]; then
0888                 echo "FAIL: gretap"
0889                 ip netns del "$testns"
0890                 return 1
0891         fi
0892         echo "PASS: gretap"
0893
0894         ip netns del "$testns"
0895 }
0896
0897 kci_test_ip6gretap()
0898 {
0899         testns="testns"
0900         DEV_NS=ip6gretap00
0901         local ret=0
0902
0903         ip netns add "$testns"
0904         if [ $? -ne 0 ]; then
0905                 echo "SKIP ip6gretap tests: cannot add net namespace $testns"
0906                 return $ksft_skip
0907         fi
0908
0909         ip link help ip6gretap 2>&1 | grep -q "^Usage:"
0910         if [ $? -ne 0 ];then
0911                 echo "SKIP: ip6gretap: iproute2 too old"
0912                 ip netns del "$testns"
0913                 return $ksft_skip
0914         fi
0915
0916         # test native tunnel
0917         ip -netns "$testns" link add dev "$DEV_NS" type ip6gretap seq \
0918                 key 102 local fc00:100::1 remote fc00:100::2
0919         check_err $?
0920
0921         ip -netns "$testns" addr add dev "$DEV_NS" fc00:200::1/96
0922         check_err $?
0923
0924         ip -netns "$testns" link set dev $DEV_NS up
0925         check_err $?
0926
0927         ip -netns "$testns" link del "$DEV_NS"
0928         check_err $?
0929
0930         # test external mode
0931         ip -netns "$testns" link add dev "$DEV_NS" type ip6gretap external
0932         check_err $?
0933
0934         ip -netns "$testns" link del "$DEV_NS"
0935         check_err $?
0936
0937         if [ $ret -ne 0 ]; then
0938                 echo "FAIL: ip6gretap"
0939                 ip netns del "$testns"
0940                 return 1
0941         fi
0942         echo "PASS: ip6gretap"
0943
0944         ip netns del "$testns"
0945 }
0946
0947 kci_test_erspan()
0948 {
0949         testns="testns"
0950         DEV_NS=erspan00
0951         local ret=0
0952
0953         ip link help erspan 2>&1 | grep -q "^Usage:"
0954         if [ $? -ne 0 ];then
0955                 echo "SKIP: erspan: iproute2 too old"
0956                 return $ksft_skip
0957         fi
0958
0959         ip netns add "$testns"
0960         if [ $? -ne 0 ]; then
0961                 echo "SKIP erspan tests: cannot add net namespace $testns"
0962                 return $ksft_skip
0963         fi
0964
0965         # test native tunnel erspan v1
0966         ip -netns "$testns" link add dev "$DEV_NS" type erspan seq \
0967                 key 102 local 172.16.1.100 remote 172.16.1.200 \
0968                 erspan_ver 1 erspan 488
0969         check_err $?
0970
0971         ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24
0972         check_err $?
0973
0974         ip -netns "$testns" link set dev $DEV_NS up
0975         check_err $?
0976
0977         ip -netns "$testns" link del "$DEV_NS"
0978         check_err $?
0979
0980         # test native tunnel erspan v2
0981         ip -netns "$testns" link add dev "$DEV_NS" type erspan seq \
0982                 key 102 local 172.16.1.100 remote 172.16.1.200 \
0983                 erspan_ver 2 erspan_dir ingress erspan_hwid 7
0984         check_err $?
0985
0986         ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24
0987         check_err $?
0988
0989         ip -netns "$testns" link set dev $DEV_NS up
0990         check_err $?
0991
0992         ip -netns "$testns" link del "$DEV_NS"
0993         check_err $?
0994
0995         # test external mode
0996         ip -netns "$testns" link add dev "$DEV_NS" type erspan external
0997         check_err $?
0998
0999         ip -netns "$testns" link del "$DEV_NS"
1000         check_err $?
1001
1002         if [ $ret -ne 0 ]; then
1003                 echo "FAIL: erspan"
1004                 ip netns del "$testns"
1005                 return 1
1006         fi
1007         echo "PASS: erspan"
1008
1009         ip netns del "$testns"
1010 }
1011
1012 kci_test_ip6erspan()
1013 {
1014         testns="testns"
1015         DEV_NS=ip6erspan00
1016         local ret=0
1017
1018         ip link help ip6erspan 2>&1 | grep -q "^Usage:"
1019         if [ $? -ne 0 ];then
1020                 echo "SKIP: ip6erspan: iproute2 too old"
1021                 return $ksft_skip
1022         fi
1023
1024         ip netns add "$testns"
1025         if [ $? -ne 0 ]; then
1026                 echo "SKIP ip6erspan tests: cannot add net namespace $testns"
1027                 return $ksft_skip
1028         fi
1029
1030         # test native tunnel ip6erspan v1
1031         ip -netns "$testns" link add dev "$DEV_NS" type ip6erspan seq \
1032                 key 102 local fc00:100::1 remote fc00:100::2 \
1033                 erspan_ver 1 erspan 488
1034         check_err $?
1035
1036         ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24
1037         check_err $?
1038
1039         ip -netns "$testns" link set dev $DEV_NS up
1040         check_err $?
1041
1042         ip -netns "$testns" link del "$DEV_NS"
1043         check_err $?
1044
1045         # test native tunnel ip6erspan v2
1046         ip -netns "$testns" link add dev "$DEV_NS" type ip6erspan seq \
1047                 key 102 local fc00:100::1 remote fc00:100::2 \
1048                 erspan_ver 2 erspan_dir ingress erspan_hwid 7
1049         check_err $?
1050
1051         ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24
1052         check_err $?
1053
1054         ip -netns "$testns" link set dev $DEV_NS up
1055         check_err $?
1056
1057         ip -netns "$testns" link del "$DEV_NS"
1058         check_err $?
1059
1060         # test external mode
1061         ip -netns "$testns" link add dev "$DEV_NS" \
1062                 type ip6erspan external
1063         check_err $?
1064
1065         ip -netns "$testns" link del "$DEV_NS"
1066         check_err $?
1067
1068         if [ $ret -ne 0 ]; then
1069                 echo "FAIL: ip6erspan"
1070                 ip netns del "$testns"
1071                 return 1
1072         fi
1073         echo "PASS: ip6erspan"
1074
1075         ip netns del "$testns"
1076 }
1077
1078 kci_test_fdb_get()
1079 {
1080         IP="ip -netns testns"
1081         BRIDGE="bridge -netns testns"
1082         brdev="test-br0"
1083         vxlandev="vxlan10"
1084         test_mac=de:ad:be:ef:13:37
1085         localip="10.0.2.2"
1086         dstip="10.0.2.3"
1087         local ret=0
1088
1089         bridge fdb help 2>&1 |grep -q 'bridge fdb get'
1090         if [ $? -ne 0 ];then
1091                 echo "SKIP: fdb get tests: iproute2 too old"
1092                 return $ksft_skip
1093         fi
1094
1095         ip netns add testns
1096         if [ $? -ne 0 ]; then
1097                 echo "SKIP fdb get tests: cannot add net namespace $testns"
1098                 return $ksft_skip
1099         fi
1100
1101         $IP link add "$vxlandev" type vxlan id 10 local $localip \
1102                 dstport 4789 2>/dev/null
1103         check_err $?
1104         $IP link add name "$brdev" type bridge &>/dev/null
1105         check_err $?
1106         $IP link set dev "$vxlandev" master "$brdev" &>/dev/null
1107         check_err $?
1108         $BRIDGE fdb add $test_mac dev "$vxlandev" master &>/dev/null
1109         check_err $?
1110         $BRIDGE fdb add $test_mac dev "$vxlandev" dst $dstip self &>/dev/null
1111         check_err $?
1112
1113         $BRIDGE fdb get $test_mac brport "$vxlandev" 2>/dev/null | grep -q "dev $vxlandev master $brdev"
1114         check_err $?
1115         $BRIDGE fdb get $test_mac br "$brdev" 2>/dev/null | grep -q "dev $vxlandev master $brdev"
1116         check_err $?
1117         $BRIDGE fdb get $test_mac dev "$vxlandev" self 2>/dev/null | grep -q "dev $vxlandev dst $dstip"
1118         check_err $?
1119
1120         ip netns del testns &>/dev/null
1121
1122         if [ $ret -ne 0 ]; then
1123                 echo "FAIL: bridge fdb get"
1124                 return 1
1125         fi
1126
1127         echo "PASS: bridge fdb get"
1128 }
1129
1130 kci_test_neigh_get()
1131 {
1132         dstmac=de:ad:be:ef:13:37
1133         dstip=10.0.2.4
1134         dstip6=dead::2
1135         local ret=0
1136
1137         ip neigh help 2>&1 |grep -q 'ip neigh get'
1138         if [ $? -ne 0 ];then
1139                 echo "SKIP: fdb get tests: iproute2 too old"
1140                 return $ksft_skip
1141         fi
1142
1143         # ipv4
1144         ip neigh add $dstip lladdr $dstmac dev "$devdummy"  > /dev/null
1145         check_err $?
1146         ip neigh get $dstip dev "$devdummy" 2> /dev/null | grep -q "$dstmac"
1147         check_err $?
1148         ip neigh del $dstip lladdr $dstmac dev "$devdummy"  > /dev/null
1149         check_err $?
1150
1151         # ipv4 proxy
1152         ip neigh add proxy $dstip dev "$devdummy" > /dev/null
1153         check_err $?
1154         ip neigh get proxy $dstip dev "$devdummy" 2>/dev/null | grep -q "$dstip"
1155         check_err $?
1156         ip neigh del proxy $dstip dev "$devdummy" > /dev/null
1157         check_err $?
1158
1159         # ipv6
1160         ip neigh add $dstip6 lladdr $dstmac dev "$devdummy"  > /dev/null
1161         check_err $?
1162         ip neigh get $dstip6 dev "$devdummy" 2> /dev/null | grep -q "$dstmac"
1163         check_err $?
1164         ip neigh del $dstip6 lladdr $dstmac dev "$devdummy"  > /dev/null
1165         check_err $?
1166
1167         # ipv6 proxy
1168         ip neigh add proxy $dstip6 dev "$devdummy" > /dev/null
1169         check_err $?
1170         ip neigh get proxy $dstip6 dev "$devdummy" 2>/dev/null | grep -q "$dstip6"
1171         check_err $?
1172         ip neigh del proxy $dstip6 dev "$devdummy" > /dev/null
1173         check_err $?
1174
1175         if [ $ret -ne 0 ];then
1176                 echo "FAIL: neigh get"
1177                 return 1
1178         fi
1179
1180         echo "PASS: neigh get"
1181 }
1182
1183 kci_test_bridge_parent_id()
1184 {
1185         local ret=0
1186         sysfsnet=/sys/bus/netdevsim/devices/netdevsim
1187         probed=false
1188
1189         if [ ! -w /sys/bus/netdevsim/new_device ] ; then
1190                 modprobe -q netdevsim
1191                 check_err $?
1192                 if [ $ret -ne 0 ]; then
1193                         echo "SKIP: bridge_parent_id can't load netdevsim"
1194                         return $ksft_skip
1195                 fi
1196                 probed=true
1197         fi
1198
1199         echo "10 1" > /sys/bus/netdevsim/new_device
1200         while [ ! -d ${sysfsnet}10 ] ; do :; done
1201         echo "20 1" > /sys/bus/netdevsim/new_device
1202         while [ ! -d ${sysfsnet}20 ] ; do :; done
1203         udevadm settle
1204         dev10=`ls ${sysfsnet}10/net/`
1205         dev20=`ls ${sysfsnet}20/net/`
1206
1207         ip link add name test-bond0 type bond mode 802.3ad
1208         ip link set dev $dev10 master test-bond0
1209         ip link set dev $dev20 master test-bond0
1210         ip link add name test-br0 type bridge
1211         ip link set dev test-bond0 master test-br0
1212         check_err $?
1213
1214         # clean up any leftovers
1215         ip link del dev test-br0
1216         ip link del dev test-bond0
1217         echo 20 > /sys/bus/netdevsim/del_device
1218         echo 10 > /sys/bus/netdevsim/del_device
1219         $probed && rmmod netdevsim
1220
1221         if [ $ret -ne 0 ]; then
1222                 echo "FAIL: bridge_parent_id"
1223                 return 1
1224         fi
1225         echo "PASS: bridge_parent_id"
1226 }
1227
1228 kci_test_rtnl()
1229 {
1230         local ret=0
1231         kci_add_dummy
1232         if [ $ret -ne 0 ];then
1233                 echo "FAIL: cannot add dummy interface"
1234                 return 1
1235         fi
1236
1237         kci_test_polrouting
1238         check_err $?
1239         kci_test_route_get
1240         check_err $?
1241         kci_test_addrlft
1242         check_err $?
1243         kci_test_promote_secondaries
1244         check_err $?
1245         kci_test_tc
1246         check_err $?
1247         kci_test_gre
1248         check_err $?
1249         kci_test_gretap
1250         check_err $?
1251         kci_test_ip6gretap
1252         check_err $?
1253         kci_test_erspan
1254         check_err $?
1255         kci_test_ip6erspan
1256         check_err $?
1257         kci_test_bridge
1258         check_err $?
1259         kci_test_addrlabel
1260         check_err $?
1261         kci_test_ifalias
1262         check_err $?
1263         kci_test_vrf
1264         check_err $?
1265         kci_test_encap
1266         check_err $?
1267         kci_test_macsec
1268         check_err $?
1269         kci_test_ipsec
1270         check_err $?
1271         kci_test_ipsec_offload
1272         check_err $?
1273         kci_test_fdb_get
1274         check_err $?
1275         kci_test_neigh_get
1276         check_err $?
1277         kci_test_bridge_parent_id
1278         check_err $?
1279
1280         kci_del_dummy
1281         return $ret
1282 }
1283
1284 #check for needed privileges
1285 if [ "$(id -u)" -ne 0 ];then
1286         echo "SKIP: Need root privileges"
1287         exit $ksft_skip
1288 fi
1289
1290 for x in ip tc;do
1291         $x -Version 2>/dev/null >/dev/null
1292         if [ $? -ne 0 ];then
1293                 echo "SKIP: Could not run test without the $x tool"
1294                 exit $ksft_skip
1295         fi
1296 done
1297
1298 kci_test_rtnl
1299
1300 exit $?