fib-onlink-tests.sh 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505
  1. #!/bin/bash
  2. # SPDX-License-Identifier: GPL-2.0
  3. # IPv4 and IPv6 onlink tests
  4. PAUSE_ON_FAIL=${PAUSE_ON_FAIL:=no}
  5. VERBOSE=0
  6. # Network interfaces
  7. # - odd in current namespace; even in peer ns
  8. declare -A NETIFS
  9. # default VRF
  10. NETIFS[p1]=veth1
  11. NETIFS[p2]=veth2
  12. NETIFS[p3]=veth3
  13. NETIFS[p4]=veth4
  14. # VRF
  15. NETIFS[p5]=veth5
  16. NETIFS[p6]=veth6
  17. NETIFS[p7]=veth7
  18. NETIFS[p8]=veth8
  19. # /24 network
  20. declare -A V4ADDRS
  21. V4ADDRS[p1]=169.254.1.1
  22. V4ADDRS[p2]=169.254.1.2
  23. V4ADDRS[p3]=169.254.3.1
  24. V4ADDRS[p4]=169.254.3.2
  25. V4ADDRS[p5]=169.254.5.1
  26. V4ADDRS[p6]=169.254.5.2
  27. V4ADDRS[p7]=169.254.7.1
  28. V4ADDRS[p8]=169.254.7.2
  29. # /64 network
  30. declare -A V6ADDRS
  31. V6ADDRS[p1]=2001:db8:101::1
  32. V6ADDRS[p2]=2001:db8:101::2
  33. V6ADDRS[p3]=2001:db8:301::1
  34. V6ADDRS[p4]=2001:db8:301::2
  35. V6ADDRS[p5]=2001:db8:501::1
  36. V6ADDRS[p6]=2001:db8:501::2
  37. V6ADDRS[p7]=2001:db8:701::1
  38. V6ADDRS[p8]=2001:db8:701::2
  39. # Test networks:
  40. # [1] = default table
  41. # [2] = VRF
  42. #
  43. # /32 host routes
  44. declare -A TEST_NET4
  45. TEST_NET4[1]=169.254.101
  46. TEST_NET4[2]=169.254.102
  47. # /128 host routes
  48. declare -A TEST_NET6
  49. TEST_NET6[1]=2001:db8:101
  50. TEST_NET6[2]=2001:db8:102
  51. # connected gateway
  52. CONGW[1]=169.254.1.254
  53. CONGW[2]=169.254.3.254
  54. CONGW[3]=169.254.5.254
  55. # recursive gateway
  56. RECGW4[1]=169.254.11.254
  57. RECGW4[2]=169.254.12.254
  58. RECGW6[1]=2001:db8:11::64
  59. RECGW6[2]=2001:db8:12::64
  60. # for v4 mapped to v6
  61. declare -A TEST_NET4IN6IN6
  62. TEST_NET4IN6[1]=10.1.1.254
  63. TEST_NET4IN6[2]=10.2.1.254
  64. # mcast address
  65. MCAST6=ff02::1
  66. PEER_NS=bart
  67. PEER_CMD="ip netns exec ${PEER_NS}"
  68. VRF=lisa
  69. VRF_TABLE=1101
  70. PBR_TABLE=101
  71. ################################################################################
  72. # utilities
  73. log_test()
  74. {
  75. local rc=$1
  76. local expected=$2
  77. local msg="$3"
  78. if [ ${rc} -eq ${expected} ]; then
  79. nsuccess=$((nsuccess+1))
  80. printf " TEST: %-50s [ OK ]\n" "${msg}"
  81. else
  82. nfail=$((nfail+1))
  83. printf " TEST: %-50s [FAIL]\n" "${msg}"
  84. if [ "${PAUSE_ON_FAIL}" = "yes" ]; then
  85. echo
  86. echo "hit enter to continue, 'q' to quit"
  87. read a
  88. [ "$a" = "q" ] && exit 1
  89. fi
  90. fi
  91. }
  92. log_section()
  93. {
  94. echo
  95. echo "######################################################################"
  96. echo "TEST SECTION: $*"
  97. echo "######################################################################"
  98. }
  99. log_subsection()
  100. {
  101. echo
  102. echo "#########################################"
  103. echo "TEST SUBSECTION: $*"
  104. }
  105. run_cmd()
  106. {
  107. local cmd="$*"
  108. local out
  109. local rc
  110. if [ "$VERBOSE" = "1" ]; then
  111. printf " COMMAND: $cmd\n"
  112. fi
  113. out=$(eval $cmd 2>&1)
  114. rc=$?
  115. if [ "$VERBOSE" = "1" -a -n "$out" ]; then
  116. echo " $out"
  117. fi
  118. [ "$VERBOSE" = "1" ] && echo
  119. return $rc
  120. }
  121. get_linklocal()
  122. {
  123. local dev=$1
  124. local pfx
  125. local addr
  126. addr=$(${pfx} ip -6 -br addr show dev ${dev} | \
  127. awk '{
  128. for (i = 3; i <= NF; ++i) {
  129. if ($i ~ /^fe80/)
  130. print $i
  131. }
  132. }'
  133. )
  134. addr=${addr/\/*}
  135. [ -z "$addr" ] && return 1
  136. echo $addr
  137. return 0
  138. }
  139. ################################################################################
  140. #
  141. setup()
  142. {
  143. echo
  144. echo "########################################"
  145. echo "Configuring interfaces"
  146. set -e
  147. # create namespace
  148. ip netns add ${PEER_NS}
  149. ip -netns ${PEER_NS} li set lo up
  150. # add vrf table
  151. ip li add ${VRF} type vrf table ${VRF_TABLE}
  152. ip li set ${VRF} up
  153. ip ro add table ${VRF_TABLE} unreachable default metric 8192
  154. ip -6 ro add table ${VRF_TABLE} unreachable default metric 8192
  155. # create test interfaces
  156. ip li add ${NETIFS[p1]} type veth peer name ${NETIFS[p2]}
  157. ip li add ${NETIFS[p3]} type veth peer name ${NETIFS[p4]}
  158. ip li add ${NETIFS[p5]} type veth peer name ${NETIFS[p6]}
  159. ip li add ${NETIFS[p7]} type veth peer name ${NETIFS[p8]}
  160. # enslave vrf interfaces
  161. for n in 5 7; do
  162. ip li set ${NETIFS[p${n}]} vrf ${VRF}
  163. done
  164. # add addresses
  165. for n in 1 3 5 7; do
  166. ip li set ${NETIFS[p${n}]} up
  167. ip addr add ${V4ADDRS[p${n}]}/24 dev ${NETIFS[p${n}]}
  168. ip addr add ${V6ADDRS[p${n}]}/64 dev ${NETIFS[p${n}]} nodad
  169. done
  170. # move peer interfaces to namespace and add addresses
  171. for n in 2 4 6 8; do
  172. ip li set ${NETIFS[p${n}]} netns ${PEER_NS} up
  173. ip -netns ${PEER_NS} addr add ${V4ADDRS[p${n}]}/24 dev ${NETIFS[p${n}]}
  174. ip -netns ${PEER_NS} addr add ${V6ADDRS[p${n}]}/64 dev ${NETIFS[p${n}]} nodad
  175. done
  176. ip -6 ro add default via ${V6ADDRS[p3]/::[0-9]/::64}
  177. ip -6 ro add table ${VRF_TABLE} default via ${V6ADDRS[p7]/::[0-9]/::64}
  178. set +e
  179. }
  180. cleanup()
  181. {
  182. # make sure we start from a clean slate
  183. ip netns del ${PEER_NS} 2>/dev/null
  184. for n in 1 3 5 7; do
  185. ip link del ${NETIFS[p${n}]} 2>/dev/null
  186. done
  187. ip link del ${VRF} 2>/dev/null
  188. ip ro flush table ${VRF_TABLE}
  189. ip -6 ro flush table ${VRF_TABLE}
  190. }
  191. ################################################################################
  192. # IPv4 tests
  193. #
  194. run_ip()
  195. {
  196. local table="$1"
  197. local prefix="$2"
  198. local gw="$3"
  199. local dev="$4"
  200. local exp_rc="$5"
  201. local desc="$6"
  202. # dev arg may be empty
  203. [ -n "${dev}" ] && dev="dev ${dev}"
  204. run_cmd ip ro add table "${table}" "${prefix}"/32 via "${gw}" "${dev}" onlink
  205. log_test $? ${exp_rc} "${desc}"
  206. }
  207. run_ip_mpath()
  208. {
  209. local table="$1"
  210. local prefix="$2"
  211. local nh1="$3"
  212. local nh2="$4"
  213. local exp_rc="$5"
  214. local desc="$6"
  215. # dev arg may be empty
  216. [ -n "${dev}" ] && dev="dev ${dev}"
  217. run_cmd ip ro add table "${table}" "${prefix}"/32 \
  218. nexthop via ${nh1} nexthop via ${nh2}
  219. log_test $? ${exp_rc} "${desc}"
  220. }
  221. valid_onlink_ipv4()
  222. {
  223. # - unicast connected, unicast recursive
  224. #
  225. log_subsection "default VRF - main table"
  226. run_ip 254 ${TEST_NET4[1]}.1 ${CONGW[1]} ${NETIFS[p1]} 0 "unicast connected"
  227. run_ip 254 ${TEST_NET4[1]}.2 ${RECGW4[1]} ${NETIFS[p1]} 0 "unicast recursive"
  228. log_subsection "VRF ${VRF}"
  229. run_ip ${VRF_TABLE} ${TEST_NET4[2]}.1 ${CONGW[3]} ${NETIFS[p5]} 0 "unicast connected"
  230. run_ip ${VRF_TABLE} ${TEST_NET4[2]}.2 ${RECGW4[2]} ${NETIFS[p5]} 0 "unicast recursive"
  231. log_subsection "VRF device, PBR table"
  232. run_ip ${PBR_TABLE} ${TEST_NET4[2]}.3 ${CONGW[3]} ${NETIFS[p5]} 0 "unicast connected"
  233. run_ip ${PBR_TABLE} ${TEST_NET4[2]}.4 ${RECGW4[2]} ${NETIFS[p5]} 0 "unicast recursive"
  234. # multipath version
  235. #
  236. log_subsection "default VRF - main table - multipath"
  237. run_ip_mpath 254 ${TEST_NET4[1]}.5 \
  238. "${CONGW[1]} dev ${NETIFS[p1]} onlink" \
  239. "${CONGW[2]} dev ${NETIFS[p3]} onlink" \
  240. 0 "unicast connected - multipath"
  241. run_ip_mpath 254 ${TEST_NET4[1]}.6 \
  242. "${RECGW4[1]} dev ${NETIFS[p1]} onlink" \
  243. "${RECGW4[2]} dev ${NETIFS[p3]} onlink" \
  244. 0 "unicast recursive - multipath"
  245. run_ip_mpath 254 ${TEST_NET4[1]}.7 \
  246. "${CONGW[1]} dev ${NETIFS[p1]}" \
  247. "${CONGW[2]} dev ${NETIFS[p3]} onlink" \
  248. 0 "unicast connected - multipath onlink first only"
  249. run_ip_mpath 254 ${TEST_NET4[1]}.8 \
  250. "${CONGW[1]} dev ${NETIFS[p1]} onlink" \
  251. "${CONGW[2]} dev ${NETIFS[p3]}" \
  252. 0 "unicast connected - multipath onlink second only"
  253. }
  254. invalid_onlink_ipv4()
  255. {
  256. run_ip 254 ${TEST_NET4[1]}.11 ${V4ADDRS[p1]} ${NETIFS[p1]} 2 \
  257. "Invalid gw - local unicast address"
  258. run_ip ${VRF_TABLE} ${TEST_NET4[2]}.11 ${V4ADDRS[p5]} ${NETIFS[p5]} 2 \
  259. "Invalid gw - local unicast address, VRF"
  260. run_ip 254 ${TEST_NET4[1]}.101 ${V4ADDRS[p1]} "" 2 "No nexthop device given"
  261. run_ip 254 ${TEST_NET4[1]}.102 ${V4ADDRS[p3]} ${NETIFS[p1]} 2 \
  262. "Gateway resolves to wrong nexthop device"
  263. run_ip ${VRF_TABLE} ${TEST_NET4[2]}.103 ${V4ADDRS[p7]} ${NETIFS[p5]} 2 \
  264. "Gateway resolves to wrong nexthop device - VRF"
  265. }
  266. ################################################################################
  267. # IPv6 tests
  268. #
  269. run_ip6()
  270. {
  271. local table="$1"
  272. local prefix="$2"
  273. local gw="$3"
  274. local dev="$4"
  275. local exp_rc="$5"
  276. local desc="$6"
  277. # dev arg may be empty
  278. [ -n "${dev}" ] && dev="dev ${dev}"
  279. run_cmd ip -6 ro add table "${table}" "${prefix}"/128 via "${gw}" "${dev}" onlink
  280. log_test $? ${exp_rc} "${desc}"
  281. }
  282. run_ip6_mpath()
  283. {
  284. local table="$1"
  285. local prefix="$2"
  286. local opts="$3"
  287. local nh1="$4"
  288. local nh2="$5"
  289. local exp_rc="$6"
  290. local desc="$7"
  291. run_cmd ip -6 ro add table "${table}" "${prefix}"/128 "${opts}" \
  292. nexthop via ${nh1} nexthop via ${nh2}
  293. log_test $? ${exp_rc} "${desc}"
  294. }
  295. valid_onlink_ipv6()
  296. {
  297. # - unicast connected, unicast recursive, v4-mapped
  298. #
  299. log_subsection "default VRF - main table"
  300. run_ip6 254 ${TEST_NET6[1]}::1 ${V6ADDRS[p1]/::*}::64 ${NETIFS[p1]} 0 "unicast connected"
  301. run_ip6 254 ${TEST_NET6[1]}::2 ${RECGW6[1]} ${NETIFS[p1]} 0 "unicast recursive"
  302. run_ip6 254 ${TEST_NET6[1]}::3 ::ffff:${TEST_NET4IN6[1]} ${NETIFS[p1]} 0 "v4-mapped"
  303. log_subsection "VRF ${VRF}"
  304. run_ip6 ${VRF_TABLE} ${TEST_NET6[2]}::1 ${V6ADDRS[p5]/::*}::64 ${NETIFS[p5]} 0 "unicast connected"
  305. run_ip6 ${VRF_TABLE} ${TEST_NET6[2]}::2 ${RECGW6[2]} ${NETIFS[p5]} 0 "unicast recursive"
  306. run_ip6 ${VRF_TABLE} ${TEST_NET6[2]}::3 ::ffff:${TEST_NET4IN6[2]} ${NETIFS[p5]} 0 "v4-mapped"
  307. log_subsection "VRF device, PBR table"
  308. run_ip6 ${PBR_TABLE} ${TEST_NET6[2]}::4 ${V6ADDRS[p5]/::*}::64 ${NETIFS[p5]} 0 "unicast connected"
  309. run_ip6 ${PBR_TABLE} ${TEST_NET6[2]}::5 ${RECGW6[2]} ${NETIFS[p5]} 0 "unicast recursive"
  310. run_ip6 ${PBR_TABLE} ${TEST_NET6[2]}::6 ::ffff:${TEST_NET4IN6[2]} ${NETIFS[p5]} 0 "v4-mapped"
  311. # multipath version
  312. #
  313. log_subsection "default VRF - main table - multipath"
  314. run_ip6_mpath 254 ${TEST_NET6[1]}::4 "onlink" \
  315. "${V6ADDRS[p1]/::*}::64 dev ${NETIFS[p1]}" \
  316. "${V6ADDRS[p3]/::*}::64 dev ${NETIFS[p3]}" \
  317. 0 "unicast connected - multipath onlink"
  318. run_ip6_mpath 254 ${TEST_NET6[1]}::5 "onlink" \
  319. "${RECGW6[1]} dev ${NETIFS[p1]}" \
  320. "${RECGW6[2]} dev ${NETIFS[p3]}" \
  321. 0 "unicast recursive - multipath onlink"
  322. run_ip6_mpath 254 ${TEST_NET6[1]}::6 "onlink" \
  323. "::ffff:${TEST_NET4IN6[1]} dev ${NETIFS[p1]}" \
  324. "::ffff:${TEST_NET4IN6[2]} dev ${NETIFS[p3]}" \
  325. 0 "v4-mapped - multipath onlink"
  326. run_ip6_mpath 254 ${TEST_NET6[1]}::7 "" \
  327. "${V6ADDRS[p1]/::*}::64 dev ${NETIFS[p1]} onlink" \
  328. "${V6ADDRS[p3]/::*}::64 dev ${NETIFS[p3]} onlink" \
  329. 0 "unicast connected - multipath onlink both nexthops"
  330. run_ip6_mpath 254 ${TEST_NET6[1]}::8 "" \
  331. "${V6ADDRS[p1]/::*}::64 dev ${NETIFS[p1]} onlink" \
  332. "${V6ADDRS[p3]/::*}::64 dev ${NETIFS[p3]}" \
  333. 0 "unicast connected - multipath onlink first only"
  334. run_ip6_mpath 254 ${TEST_NET6[1]}::9 "" \
  335. "${V6ADDRS[p1]/::*}::64 dev ${NETIFS[p1]}" \
  336. "${V6ADDRS[p3]/::*}::64 dev ${NETIFS[p3]} onlink" \
  337. 0 "unicast connected - multipath onlink second only"
  338. }
  339. invalid_onlink_ipv6()
  340. {
  341. local lladdr
  342. lladdr=$(get_linklocal ${NETIFS[p1]}) || return 1
  343. run_ip6 254 ${TEST_NET6[1]}::11 ${V6ADDRS[p1]} ${NETIFS[p1]} 2 \
  344. "Invalid gw - local unicast address"
  345. run_ip6 254 ${TEST_NET6[1]}::12 ${lladdr} ${NETIFS[p1]} 2 \
  346. "Invalid gw - local linklocal address"
  347. run_ip6 254 ${TEST_NET6[1]}::12 ${MCAST6} ${NETIFS[p1]} 2 \
  348. "Invalid gw - multicast address"
  349. lladdr=$(get_linklocal ${NETIFS[p5]}) || return 1
  350. run_ip6 ${VRF_TABLE} ${TEST_NET6[2]}::11 ${V6ADDRS[p5]} ${NETIFS[p5]} 2 \
  351. "Invalid gw - local unicast address, VRF"
  352. run_ip6 ${VRF_TABLE} ${TEST_NET6[2]}::12 ${lladdr} ${NETIFS[p5]} 2 \
  353. "Invalid gw - local linklocal address, VRF"
  354. run_ip6 ${VRF_TABLE} ${TEST_NET6[2]}::12 ${MCAST6} ${NETIFS[p5]} 2 \
  355. "Invalid gw - multicast address, VRF"
  356. run_ip6 254 ${TEST_NET6[1]}::101 ${V6ADDRS[p1]} "" 2 \
  357. "No nexthop device given"
  358. # default VRF validation is done against LOCAL table
  359. # run_ip6 254 ${TEST_NET6[1]}::102 ${V6ADDRS[p3]/::[0-9]/::64} ${NETIFS[p1]} 2 \
  360. # "Gateway resolves to wrong nexthop device"
  361. run_ip6 ${VRF_TABLE} ${TEST_NET6[2]}::103 ${V6ADDRS[p7]/::[0-9]/::64} ${NETIFS[p5]} 2 \
  362. "Gateway resolves to wrong nexthop device - VRF"
  363. }
  364. run_onlink_tests()
  365. {
  366. log_section "IPv4 onlink"
  367. log_subsection "Valid onlink commands"
  368. valid_onlink_ipv4
  369. log_subsection "Invalid onlink commands"
  370. invalid_onlink_ipv4
  371. log_section "IPv6 onlink"
  372. log_subsection "Valid onlink commands"
  373. valid_onlink_ipv6
  374. log_subsection "Invalid onlink commands"
  375. invalid_onlink_ipv6
  376. }
  377. ################################################################################
  378. # usage
  379. usage()
  380. {
  381. cat <<EOF
  382. usage: ${0##*/} OPTS
  383. -p Pause on fail
  384. -v verbose mode (show commands and output)
  385. EOF
  386. }
  387. ################################################################################
  388. # main
  389. nsuccess=0
  390. nfail=0
  391. while getopts :t:pPhv o
  392. do
  393. case $o in
  394. p) PAUSE_ON_FAIL=yes;;
  395. v) VERBOSE=$(($VERBOSE + 1));;
  396. h) usage; exit 0;;
  397. *) usage; exit 1;;
  398. esac
  399. done
  400. cleanup
  401. setup
  402. run_onlink_tests
  403. cleanup
  404. if [ "$TESTS" != "none" ]; then
  405. printf "\nTests passed: %3d\n" ${nsuccess}
  406. printf "Tests failed: %3d\n" ${nfail}
  407. fi