tools/testing/selftests/drivers/net/mlxsw/blackhole_routes.sh

   1 #!/bin/bash
   2 # SPDX-License-Identifier: GPL-2.0
   3 #
   4 # Test that blackhole routes are marked as offloaded and that packets hitting
   5 # them are dropped by the ASIC and not by the kernel.
   6 #
   7 # +---------------------------------+
   8 # | H1 (vrf)                        |
   9 # |    + $h1                        |
  10 # |    | 192.0.2.1/24               |
  11 # |    | 2001:db8:1::1/64           |
  12 # |    |                            |
  13 # |    |  default via 192.0.2.2     |
  14 # |    |  default via 2001:db8:1::2 |
  15 # +----|----------------------------+
  16 #      |
  17 # +----|----------------------------------------------------------------------+
  18 # | SW |                                                                      |
  19 # |    + $rp1                                                                 |
  20 # |        192.0.2.2/24                                                       |
  21 # |        2001:db8:1::2/64                                                   |
  22 # |                                                                           |
  23 # |        2001:db8:2::2/64                                                   |
  24 # |        198.51.100.2/24                                                    |
  25 # |    + $rp2                                                                 |
  26 # |    |                                                                      |
  27 # +----|----------------------------------------------------------------------+
  28 #      |
  29 # +----|----------------------------+
  30 # |    |  default via 198.51.100.2  |
  31 # |    |  default via 2001:db8:2::2 |
  32 # |    |                            |
  33 # |    | 2001:db8:2::1/64           |
  34 # |    | 198.51.100.1/24            |
  35 # |    + $h2                        |
  36 # | H2 (vrf)                        |
  37 # +---------------------------------+
  38
  39 lib_dir=$(dirname $0)/../../../net/forwarding
  40
  41 ALL_TESTS="
  42         ping_ipv4
  43         ping_ipv6
  44         blackhole_ipv4
  45         blackhole_ipv6
  46 "
  47 NUM_NETIFS=4
  48 : ${TIMEOUT:=20000} # ms
  49 source $lib_dir/tc_common.sh
  50 source $lib_dir/lib.sh
  51
  52 h1_create()
  53 {
  54         simple_if_init $h1 192.0.2.1/24 2001:db8:1::1/64
  55
  56         ip -4 route add default vrf v$h1 nexthop via 192.0.2.2
  57         ip -6 route add default vrf v$h1 nexthop via 2001:db8:1::2
  58 }
  59
  60 h1_destroy()
  61 {
  62         ip -6 route del default vrf v$h1 nexthop via 2001:db8:1::2
  63         ip -4 route del default vrf v$h1 nexthop via 192.0.2.2
  64
  65         simple_if_fini $h1 192.0.2.1/24 2001:db8:1::1/64
  66 }
  67
  68 h2_create()
  69 {
  70         simple_if_init $h2 198.51.100.1/24 2001:db8:2::1/64
  71
  72         ip -4 route add default vrf v$h2 nexthop via 198.51.100.2
  73         ip -6 route add default vrf v$h2 nexthop via 2001:db8:2::2
  74 }
  75
  76 h2_destroy()
  77 {
  78         ip -6 route del default vrf v$h2 nexthop via 2001:db8:2::2
  79         ip -4 route del default vrf v$h2 nexthop via 198.51.100.2
  80
  81         simple_if_fini $h2 198.51.100.1/24 2001:db8:2::1/64
  82 }
  83
  84 router_create()
  85 {
  86         ip link set dev $rp1 up
  87         ip link set dev $rp2 up
  88
  89         tc qdisc add dev $rp1 clsact
  90
  91         __addr_add_del $rp1 add 192.0.2.2/24 2001:db8:1::2/64
  92         __addr_add_del $rp2 add 198.51.100.2/24 2001:db8:2::2/64
  93 }
  94
  95 router_destroy()
  96 {
  97         __addr_add_del $rp2 del 198.51.100.2/24 2001:db8:2::2/64
  98         __addr_add_del $rp1 del 192.0.2.2/24 2001:db8:1::2/64
  99
 100         tc qdisc del dev $rp1 clsact
 101
 102         ip link set dev $rp2 down
 103         ip link set dev $rp1 down
 104 }
 105
 106 ping_ipv4()
 107 {
 108         ping_test $h1 198.51.100.1 ": h1->h2"
 109 }
 110
 111 ping_ipv6()
 112 {
 113         ping6_test $h1 2001:db8:2::1 ": h1->h2"
 114 }
 115
 116 blackhole_ipv4()
 117 {
 118         # Transmit packets from H1 to H2 and make sure they are dropped by the
 119         # ASIC and not by the kernel
 120         RET=0
 121
 122         ip -4 route add blackhole 198.51.100.0/30
 123         tc filter add dev $rp1 ingress protocol ip pref 1 handle 101 flower \
 124                 skip_hw dst_ip 198.51.100.1 src_ip 192.0.2.1 ip_proto icmp \
 125                 action pass
 126
 127         busywait "$TIMEOUT" wait_for_offload ip -4 route show 198.51.100.0/30
 128         check_err $? "route not marked as offloaded when should"
 129
 130         ping_do $h1 198.51.100.1
 131         check_fail $? "ping passed when should not"
 132
 133         tc_check_packets "dev $rp1 ingress" 101 0
 134         check_err $? "packets trapped and not dropped by ASIC"
 135
 136         log_test "IPv4 blackhole route"
 137
 138         tc filter del dev $rp1 ingress protocol ip pref 1 handle 101 flower
 139         ip -4 route del blackhole 198.51.100.0/30
 140 }
 141
 142 blackhole_ipv6()
 143 {
 144         RET=0
 145
 146         ip -6 route add blackhole 2001:db8:2::/120
 147         tc filter add dev $rp1 ingress protocol ipv6 pref 1 handle 101 flower \
 148                 skip_hw dst_ip 2001:db8:2::1 src_ip 2001:db8:1::1 \
 149                 ip_proto icmpv6 action pass
 150
 151         busywait "$TIMEOUT" wait_for_offload ip -6 route show 2001:db8:2::/120
 152         check_err $? "route not marked as offloaded when should"
 153
 154         ping6_do $h1 2001:db8:2::1
 155         check_fail $? "ping passed when should not"
 156
 157         tc_check_packets "dev $rp1 ingress" 101 0
 158         check_err $? "packets trapped and not dropped by ASIC"
 159
 160         log_test "IPv6 blackhole route"
 161
 162         tc filter del dev $rp1 ingress protocol ipv6 pref 1 handle 101 flower
 163         ip -6 route del blackhole 2001:db8:2::/120
 164 }
 165
 166 setup_prepare()
 167 {
 168         h1=${NETIFS[p1]}
 169         rp1=${NETIFS[p2]}
 170
 171         rp2=${NETIFS[p3]}
 172         h2=${NETIFS[p4]}
 173
 174         vrf_prepare
 175         forwarding_enable
 176
 177         h1_create
 178         h2_create
 179         router_create
 180 }
 181
 182 cleanup()
 183 {
 184         pre_cleanup
 185
 186         router_destroy
 187         h2_destroy
 188         h1_destroy
 189
 190         forwarding_restore
 191         vrf_cleanup
 192 }
 193
 194 trap cleanup EXIT
 195
 196 setup_prepare
 197 setup_wait
 198
 199 tests_run
 200
 201 exit $EXIT_STATUS