tools/testing/selftests/net/forwarding/vxlan_asymmetric.sh

   1 #!/bin/bash
   2 # SPDX-License-Identifier: GPL-2.0
   3
   4 # +---------------------------+                +------------------------------+
   5 # |                    vrf-h1 |                |                       vrf-h2 |
   6 # |    + $h1                  |                |    + $h2                     |
   7 # |    | 10.1.1.101/24        |                |    | 10.1.2.101/24           |
   8 # |    | default via 10.1.1.1 |                |    | default via 10.1.2.1    |
   9 # +----|----------------------+                +----|-------------------------+
  10 #      |                                            |
  11 # +----|--------------------------------------------|-------------------------+
  12 # | SW |                                            |                         |
  13 # | +--|--------------------------------------------|-----------------------+ |
  14 # | |  + $swp1                         br1          + $swp2                 | |
  15 # | |     vid 10 pvid untagged                         vid 20 pvid untagged | |
  16 # | |                                                                       | |
  17 # | |  + vx10                                       + vx20                  | |
  18 # | |    local 10.0.0.1                               local 10.0.0.1        | |
  19 # | |    remote 10.0.0.2                              remote 10.0.0.2       | |
  20 # | |    id 1000                                      id 2000               | |
  21 # | |    dstport 4789                                 dstport 4789          | |
  22 # | |    vid 10 pvid untagged                         vid 20 pvid untagged  | |
  23 # | |                                                                       | |
  24 # | +-----------------------------------+-----------------------------------+ |
  25 # |                                     |                                     |
  26 # | +-----------------------------------|-----------------------------------+ |
  27 # | |                                   |                                   | |
  28 # | |  +--------------------------------+--------------------------------+  | |
  29 # | |  |                                                                 |  | |
  30 # | |  + vlan10                                                   vlan20 +  | |
  31 # | |  | 10.1.1.11/24                                       10.1.2.11/24 |  | |
  32 # | |  |                                                                 |  | |
  33 # | |  + vlan10-v (macvlan)                           vlan20-v (macvlan) +  | |
  34 # | |    10.1.1.1/24                                         10.1.2.1/24    | |
  35 # | |    00:00:5e:00:01:01                             00:00:5e:00:01:01    | |
  36 # | |                               vrf-green                               | |
  37 # | +-----------------------------------------------------------------------+ |
  38 # |                                                                           |
  39 # |    + $rp1                                       +lo                       |
  40 # |    | 192.0.2.1/24                                10.0.0.1/32              |
  41 # +----|----------------------------------------------------------------------+
  42 #      |
  43 # +----|--------------------------------------------------------+
  44 # |    |                            vrf-spine                   |
  45 # |    + $rp2                                                   |
  46 # |      192.0.2.2/24                                           |
  47 # |                                                             |   (maybe) HW
  48 # =============================================================================
  49 # |                                                             |  (likely) SW
  50 # |                                                             |
  51 # |    + v1 (veth)                                              |
  52 # |    | 192.0.3.2/24                                           |
  53 # +----|--------------------------------------------------------+
  54 #      |
  55 # +----|----------------------------------------------------------------------+
  56 # |    + v2 (veth)                                  +lo           NS1 (netns) |
  57 # |      192.0.3.1/24                                10.0.0.2/32              |
  58 # |                                                                           |
  59 # | +-----------------------------------------------------------------------+ |
  60 # | |                               vrf-green                               | |
  61 # | |  + vlan10-v (macvlan)                           vlan20-v (macvlan) +  | |
  62 # | |  | 10.1.1.1/24                                         10.1.2.1/24 |  | |
  63 # | |  | 00:00:5e:00:01:01                             00:00:5e:00:01:01 |  | |
  64 # | |  |                                                                 |  | |
  65 # | |  + vlan10                                                   vlan20 +  | |
  66 # | |  | 10.1.1.12/24                                       10.1.2.12/24 |  | |
  67 # | |  |                                                                 |  | |
  68 # | |  +--------------------------------+--------------------------------+  | |
  69 # | |                                   |                                   | |
  70 # | +-----------------------------------|-----------------------------------+ |
  71 # |                                     |                                     |
  72 # | +-----------------------------------+-----------------------------------+ |
  73 # | |                                                                       | |
  74 # | |  + vx10                                     + vx20                    | |
  75 # | |    local 10.0.0.2                             local 10.0.0.2          | |
  76 # | |    remote 10.0.0.1                            remote 10.0.0.1         | |
  77 # | |    id 1000                                    id 2000                 | |
  78 # | |    dstport 4789                               dstport 4789            | |
  79 # | |    vid 10 pvid untagged                       vid 20 pvid untagged    | |
  80 # | |                                                                       | |
  81 # | |  + w1 (veth)                                + w3 (veth)               | |
  82 # | |  | vid 10 pvid untagged          br1        | vid 20 pvid untagged    | |
  83 # | +--|------------------------------------------|-------------------------+ |
  84 # |    |                                          |                           |
  85 # |    |                                          |                           |
  86 # | +--|----------------------+                +--|-------------------------+ |
  87 # | |  |               vrf-h1 |                |  |                  vrf-h2 | |
  88 # | |  + w2 (veth)            |                |  + w4 (veth)               | |
  89 # | |    10.1.1.102/24        |                |    10.1.2.102/24           | |
  90 # | |    default via 10.1.1.1 |                |    default via 10.1.2.1    | |
  91 # | +-------------------------+                +----------------------------+ |
  92 # +---------------------------------------------------------------------------+
  93
  94 ALL_TESTS="
  95         ping_ipv4
  96         arp_decap
  97         arp_suppression
  98 "
  99 NUM_NETIFS=6
 100 source lib.sh
 101
 102 require_command $ARPING
 103
 104 hx_create()
 105 {
 106         local vrf_name=$1; shift
 107         local if_name=$1; shift
 108         local ip_addr=$1; shift
 109         local gw_ip=$1; shift
 110
 111         vrf_create $vrf_name
 112         ip link set dev $if_name master $vrf_name
 113         ip link set dev $vrf_name up
 114         ip link set dev $if_name up
 115
 116         ip address add $ip_addr/24 dev $if_name
 117         ip neigh replace $gw_ip lladdr 00:00:5e:00:01:01 nud permanent \
 118                 dev $if_name
 119         ip route add default vrf $vrf_name nexthop via $gw_ip
 120 }
 121 export -f hx_create
 122
 123 hx_destroy()
 124 {
 125         local vrf_name=$1; shift
 126         local if_name=$1; shift
 127         local ip_addr=$1; shift
 128         local gw_ip=$1; shift
 129
 130         ip route del default vrf $vrf_name nexthop via $gw_ip
 131         ip neigh del $gw_ip dev $if_name
 132         ip address del $ip_addr/24 dev $if_name
 133
 134         ip link set dev $if_name down
 135         vrf_destroy $vrf_name
 136 }
 137
 138 h1_create()
 139 {
 140         hx_create "vrf-h1" $h1 10.1.1.101 10.1.1.1
 141 }
 142
 143 h1_destroy()
 144 {
 145         hx_destroy "vrf-h1" $h1 10.1.1.101 10.1.1.1
 146 }
 147
 148 h2_create()
 149 {
 150         hx_create "vrf-h2" $h2 10.1.2.101 10.1.2.1
 151 }
 152
 153 h2_destroy()
 154 {
 155         hx_destroy "vrf-h2" $h2 10.1.2.101 10.1.2.1
 156 }
 157
 158 switch_create()
 159 {
 160         ip link add name br1 type bridge vlan_filtering 1 vlan_default_pvid 0 \
 161                 mcast_snooping 0
 162         # Make sure the bridge uses the MAC address of the local port and not
 163         # that of the VxLAN's device.
 164         ip link set dev br1 address $(mac_get $swp1)
 165         ip link set dev br1 up
 166
 167         ip link set dev $rp1 up
 168         ip address add dev $rp1 192.0.2.1/24
 169         ip route add 10.0.0.2/32 nexthop via 192.0.2.2
 170
 171         ip link add name vx10 type vxlan id 1000                \
 172                 local 10.0.0.1 remote 10.0.0.2 dstport 4789     \
 173                 nolearning noudpcsum tos inherit ttl 100
 174         ip link set dev vx10 up
 175
 176         ip link set dev vx10 master br1
 177         bridge vlan add vid 10 dev vx10 pvid untagged
 178
 179         ip link add name vx20 type vxlan id 2000                \
 180                 local 10.0.0.1 remote 10.0.0.2 dstport 4789     \
 181                 nolearning noudpcsum tos inherit ttl 100
 182         ip link set dev vx20 up
 183
 184         ip link set dev vx20 master br1
 185         bridge vlan add vid 20 dev vx20 pvid untagged
 186
 187         ip link set dev $swp1 master br1
 188         ip link set dev $swp1 up
 189         bridge vlan add vid 10 dev $swp1 pvid untagged
 190
 191         ip link set dev $swp2 master br1
 192         ip link set dev $swp2 up
 193         bridge vlan add vid 20 dev $swp2 pvid untagged
 194
 195         ip address add 10.0.0.1/32 dev lo
 196
 197         # Create SVIs
 198         vrf_create "vrf-green"
 199         ip link set dev vrf-green up
 200
 201         ip link add link br1 name vlan10 up master vrf-green type vlan id 10
 202         ip address add 10.1.1.11/24 dev vlan10
 203         ip link add link vlan10 name vlan10-v up master vrf-green \
 204                 address 00:00:5e:00:01:01 type macvlan mode private
 205         ip address add 10.1.1.1/24 dev vlan10-v
 206
 207         ip link add link br1 name vlan20 up master vrf-green type vlan id 20
 208         ip address add 10.1.2.11/24 dev vlan20
 209         ip link add link vlan20 name vlan20-v up master vrf-green \
 210                 address 00:00:5e:00:01:01 type macvlan mode private
 211         ip address add 10.1.2.1/24 dev vlan20-v
 212
 213         bridge vlan add vid 10 dev br1 self
 214         bridge vlan add vid 20 dev br1 self
 215
 216         bridge fdb add 00:00:5e:00:01:01 dev br1 self local vlan 10
 217         bridge fdb add 00:00:5e:00:01:01 dev br1 self local vlan 20
 218
 219         sysctl_set net.ipv4.conf.all.rp_filter 0
 220         sysctl_set net.ipv4.conf.vlan10-v.rp_filter 0
 221         sysctl_set net.ipv4.conf.vlan20-v.rp_filter 0
 222 }
 223
 224 switch_destroy()
 225 {
 226         sysctl_restore net.ipv4.conf.all.rp_filter
 227
 228         bridge fdb del 00:00:5e:00:01:01 dev br1 self local vlan 20
 229         bridge fdb del 00:00:5e:00:01:01 dev br1 self local vlan 10
 230
 231         bridge vlan del vid 20 dev br1 self
 232         bridge vlan del vid 10 dev br1 self
 233
 234         ip link del dev vlan20
 235
 236         ip link del dev vlan10
 237
 238         vrf_destroy "vrf-green"
 239
 240         ip address del 10.0.0.1/32 dev lo
 241
 242         bridge vlan del vid 20 dev $swp2
 243         ip link set dev $swp2 down
 244         ip link set dev $swp2 nomaster
 245
 246         bridge vlan del vid 10 dev $swp1
 247         ip link set dev $swp1 down
 248         ip link set dev $swp1 nomaster
 249
 250         bridge vlan del vid 20 dev vx20
 251         ip link set dev vx20 nomaster
 252
 253         ip link set dev vx20 down
 254         ip link del dev vx20
 255
 256         bridge vlan del vid 10 dev vx10
 257         ip link set dev vx10 nomaster
 258
 259         ip link set dev vx10 down
 260         ip link del dev vx10
 261
 262         ip route del 10.0.0.2/32 nexthop via 192.0.2.2
 263         ip address del dev $rp1 192.0.2.1/24
 264         ip link set dev $rp1 down
 265
 266         ip link set dev br1 down
 267         ip link del dev br1
 268 }
 269
 270 spine_create()
 271 {
 272         vrf_create "vrf-spine"
 273         ip link set dev $rp2 master vrf-spine
 274         ip link set dev v1 master vrf-spine
 275         ip link set dev vrf-spine up
 276         ip link set dev $rp2 up
 277         ip link set dev v1 up
 278
 279         ip address add 192.0.2.2/24 dev $rp2
 280         ip address add 192.0.3.2/24 dev v1
 281
 282         ip route add 10.0.0.1/32 vrf vrf-spine nexthop via 192.0.2.1
 283         ip route add 10.0.0.2/32 vrf vrf-spine nexthop via 192.0.3.1
 284 }
 285
 286 spine_destroy()
 287 {
 288         ip route del 10.0.0.2/32 vrf vrf-spine nexthop via 192.0.3.1
 289         ip route del 10.0.0.1/32 vrf vrf-spine nexthop via 192.0.2.1
 290
 291         ip address del 192.0.3.2/24 dev v1
 292         ip address del 192.0.2.2/24 dev $rp2
 293
 294         ip link set dev v1 down
 295         ip link set dev $rp2 down
 296         vrf_destroy "vrf-spine"
 297 }
 298
 299 ns_h1_create()
 300 {
 301         hx_create "vrf-h1" w2 10.1.1.102 10.1.1.1
 302 }
 303 export -f ns_h1_create
 304
 305 ns_h2_create()
 306 {
 307         hx_create "vrf-h2" w4 10.1.2.102 10.1.2.1
 308 }
 309 export -f ns_h2_create
 310
 311 ns_switch_create()
 312 {
 313         ip link add name br1 type bridge vlan_filtering 1 vlan_default_pvid 0 \
 314                 mcast_snooping 0
 315         ip link set dev br1 up
 316
 317         ip link set dev v2 up
 318         ip address add dev v2 192.0.3.1/24
 319         ip route add 10.0.0.1/32 nexthop via 192.0.3.2
 320
 321         ip link add name vx10 type vxlan id 1000                \
 322                 local 10.0.0.2 remote 10.0.0.1 dstport 4789     \
 323                 nolearning noudpcsum tos inherit ttl 100
 324         ip link set dev vx10 up
 325
 326         ip link set dev vx10 master br1
 327         bridge vlan add vid 10 dev vx10 pvid untagged
 328
 329         ip link add name vx20 type vxlan id 2000                \
 330                 local 10.0.0.2 remote 10.0.0.1 dstport 4789     \
 331                 nolearning noudpcsum tos inherit ttl 100
 332         ip link set dev vx20 up
 333
 334         ip link set dev vx20 master br1
 335         bridge vlan add vid 20 dev vx20 pvid untagged
 336
 337         ip link set dev w1 master br1
 338         ip link set dev w1 up
 339         bridge vlan add vid 10 dev w1 pvid untagged
 340
 341         ip link set dev w3 master br1
 342         ip link set dev w3 up
 343         bridge vlan add vid 20 dev w3 pvid untagged
 344
 345         ip address add 10.0.0.2/32 dev lo
 346
 347         # Create SVIs
 348         vrf_create "vrf-green"
 349         ip link set dev vrf-green up
 350
 351         ip link add link br1 name vlan10 up master vrf-green type vlan id 10
 352         ip address add 10.1.1.12/24 dev vlan10
 353         ip link add link vlan10 name vlan10-v up master vrf-green \
 354                 address 00:00:5e:00:01:01 type macvlan mode private
 355         ip address add 10.1.1.1/24 dev vlan10-v
 356
 357         ip link add link br1 name vlan20 up master vrf-green type vlan id 20
 358         ip address add 10.1.2.12/24 dev vlan20
 359         ip link add link vlan20 name vlan20-v up master vrf-green \
 360                 address 00:00:5e:00:01:01 type macvlan mode private
 361         ip address add 10.1.2.1/24 dev vlan20-v
 362
 363         bridge vlan add vid 10 dev br1 self
 364         bridge vlan add vid 20 dev br1 self
 365
 366         bridge fdb add 00:00:5e:00:01:01 dev br1 self local vlan 10
 367         bridge fdb add 00:00:5e:00:01:01 dev br1 self local vlan 20
 368
 369         sysctl_set net.ipv4.conf.all.rp_filter 0
 370         sysctl_set net.ipv4.conf.vlan10-v.rp_filter 0
 371         sysctl_set net.ipv4.conf.vlan20-v.rp_filter 0
 372 }
 373 export -f ns_switch_create
 374
 375 ns_init()
 376 {
 377         ip link add name w1 type veth peer name w2
 378         ip link add name w3 type veth peer name w4
 379
 380         ip link set dev lo up
 381
 382         ns_h1_create
 383         ns_h2_create
 384         ns_switch_create
 385 }
 386 export -f ns_init
 387
 388 ns1_create()
 389 {
 390         ip netns add ns1
 391         ip link set dev v2 netns ns1
 392         in_ns ns1 ns_init
 393 }
 394
 395 ns1_destroy()
 396 {
 397         ip netns exec ns1 ip link set dev v2 netns 1
 398         ip netns del ns1
 399 }
 400
 401 macs_populate()
 402 {
 403         local mac1=$1; shift
 404         local mac2=$1; shift
 405         local ip1=$1; shift
 406         local ip2=$1; shift
 407         local dst=$1; shift
 408
 409         bridge fdb add $mac1 dev vx10 self master extern_learn static \
 410                 dst $dst vlan 10
 411         bridge fdb add $mac2 dev vx20 self master extern_learn static \
 412                 dst $dst vlan 20
 413
 414         ip neigh add $ip1 lladdr $mac1 nud noarp dev vlan10 \
 415                 extern_learn
 416         ip neigh add $ip2 lladdr $mac2 nud noarp dev vlan20 \
 417                 extern_learn
 418 }
 419 export -f macs_populate
 420
 421 macs_initialize()
 422 {
 423         local h1_ns_mac=$(in_ns ns1 mac_get w2)
 424         local h2_ns_mac=$(in_ns ns1 mac_get w4)
 425         local h1_mac=$(mac_get $h1)
 426         local h2_mac=$(mac_get $h2)
 427
 428         macs_populate $h1_ns_mac $h2_ns_mac 10.1.1.102 10.1.2.102 10.0.0.2
 429         in_ns ns1 macs_populate $h1_mac $h2_mac 10.1.1.101 10.1.2.101 10.0.0.1
 430 }
 431
 432 setup_prepare()
 433 {
 434         h1=${NETIFS[p1]}
 435         swp1=${NETIFS[p2]}
 436
 437         swp2=${NETIFS[p3]}
 438         h2=${NETIFS[p4]}
 439
 440         rp1=${NETIFS[p5]}
 441         rp2=${NETIFS[p6]}
 442
 443         vrf_prepare
 444         forwarding_enable
 445
 446         h1_create
 447         h2_create
 448         switch_create
 449
 450         ip link add name v1 type veth peer name v2
 451         spine_create
 452         ns1_create
 453
 454         macs_initialize
 455 }
 456
 457 cleanup()
 458 {
 459         pre_cleanup
 460
 461         ns1_destroy
 462         spine_destroy
 463         ip link del dev v1
 464
 465         switch_destroy
 466         h2_destroy
 467         h1_destroy
 468
 469         forwarding_restore
 470         vrf_cleanup
 471 }
 472
 473 ping_ipv4()
 474 {
 475         ping_test $h1 10.1.2.101 ": local->local vid 10->vid 20"
 476         ping_test $h1 10.1.1.102 ": local->remote vid 10->vid 10"
 477         ping_test $h2 10.1.2.102 ": local->remote vid 20->vid 20"
 478         ping_test $h1 10.1.2.102 ": local->remote vid 10->vid 20"
 479         ping_test $h2 10.1.1.102 ": local->remote vid 20->vid 10"
 480 }
 481
 482 arp_decap()
 483 {
 484         # Repeat the ping tests, but without populating the neighbours. This
 485         # makes sure we correctly decapsulate ARP packets
 486         log_info "deleting neighbours from vlan interfaces"
 487
 488         ip neigh del 10.1.1.102 dev vlan10
 489         ip neigh del 10.1.2.102 dev vlan20
 490
 491         ping_ipv4
 492
 493         ip neigh replace 10.1.1.102 lladdr $(in_ns ns1 mac_get w2) nud noarp \
 494                 dev vlan10 extern_learn
 495         ip neigh replace 10.1.2.102 lladdr $(in_ns ns1 mac_get w4) nud noarp \
 496                 dev vlan20 extern_learn
 497 }
 498
 499 arp_suppression_compare()
 500 {
 501         local expect=$1; shift
 502         local actual=$(in_ns ns1 tc_rule_stats_get vx10 1 ingress)
 503
 504         (( expect == actual ))
 505         check_err $? "expected $expect arps got $actual"
 506 }
 507
 508 arp_suppression()
 509 {
 510         ip link set dev vx10 type bridge_slave neigh_suppress on
 511
 512         in_ns ns1 tc qdisc add dev vx10 clsact
 513         in_ns ns1 tc filter add dev vx10 ingress proto arp pref 1 handle 101 \
 514                 flower dst_mac ff:ff:ff:ff:ff:ff arp_tip 10.1.1.102 arp_op \
 515                 request action pass
 516
 517         # The neighbour is configured on the SVI and ARP suppression is on, so
 518         # the ARP request should be suppressed
 519         RET=0
 520
 521         $ARPING -I $h1 -fqb -c 1 -w 1 10.1.1.102
 522         check_err $? "arping failed"
 523
 524         arp_suppression_compare 0
 525
 526         log_test "neigh_suppress: on / neigh exists: yes"
 527
 528         # Delete the neighbour from the the SVI. A single ARP request should be
 529         # received by the remote VTEP
 530         RET=0
 531
 532         ip neigh del 10.1.1.102 dev vlan10
 533
 534         $ARPING -I $h1 -fqb -c 1 -w 1 10.1.1.102
 535         check_err $? "arping failed"
 536
 537         arp_suppression_compare 1
 538
 539         log_test "neigh_suppress: on / neigh exists: no"
 540
 541         # Turn off ARP suppression and make sure ARP is not suppressed,
 542         # regardless of neighbour existence on the SVI
 543         RET=0
 544
 545         ip neigh del 10.1.1.102 dev vlan10 &> /dev/null
 546         ip link set dev vx10 type bridge_slave neigh_suppress off
 547
 548         $ARPING -I $h1 -fqb -c 1 -w 1 10.1.1.102
 549         check_err $? "arping failed"
 550
 551         arp_suppression_compare 2
 552
 553         log_test "neigh_suppress: off / neigh exists: no"
 554
 555         RET=0
 556
 557         ip neigh add 10.1.1.102 lladdr $(in_ns ns1 mac_get w2) nud noarp \
 558                 dev vlan10 extern_learn
 559
 560         $ARPING -I $h1 -fqb -c 1 -w 1 10.1.1.102
 561         check_err $? "arping failed"
 562
 563         arp_suppression_compare 3
 564
 565         log_test "neigh_suppress: off / neigh exists: yes"
 566
 567         in_ns ns1 tc qdisc del dev vx10 clsact
 568 }
 569
 570 trap cleanup EXIT
 571
 572 setup_prepare
 573 setup_wait
 574
 575 tests_run
 576
 577 exit $EXIT_STATUS