tools/testing/selftests/net/forwarding/vxlan_bridge_1q.sh

   1 #!/bin/bash
   2 # SPDX-License-Identifier: GPL-2.0
   3
   4 # +-----------------------+                          +------------------------+
   5 # | H1 (vrf)              |                          | H2 (vrf)               |
   6 # |  + $h1.10             |                          |  + $h2.10              |
   7 # |  | 192.0.2.1/28       |                          |  | 192.0.2.2/28        |
   8 # |  |                    |                          |  |                     |
   9 # |  | + $h1.20           |                          |  | + $h2.20            |
  10 # |  \ | 198.51.100.1/24  |                          |  \ | 198.51.100.2/24   |
  11 # |   \|                  |                          |   \|                   |
  12 # |    + $h1              |                          |    + $h2               |
  13 # +----|------------------+                          +----|-------------------+
  14 #      |                                                  |
  15 # +----|--------------------------------------------------|-------------------+
  16 # | SW |                                                  |                   |
  17 # | +--|--------------------------------------------------|-----------------+ |
  18 # | |  + $swp1                   BR1 (802.1q)             + $swp2           | |
  19 # | |     vid 10                                             vid 10         | |
  20 # | |     vid 20                                             vid 20         | |
  21 # | |                                                                       | |
  22 # | |  + vx10 (vxlan)                        + vx20 (vxlan)                 | |
  23 # | |    local 192.0.2.17                      local 192.0.2.17             | |
  24 # | |    remote 192.0.2.34 192.0.2.50          remote 192.0.2.34 192.0.2.50 | |
  25 # | |    id 1000 dstport $VXPORT               id 2000 dstport $VXPORT      | |
  26 # | |    vid 10 pvid untagged                  vid 20 pvid untagged         | |
  27 # | +-----------------------------------------------------------------------+ |
  28 # |                                                                           |
  29 # |  192.0.2.32/28 via 192.0.2.18                                             |
  30 # |  192.0.2.48/28 via 192.0.2.18                                             |
  31 # |                                                                           |
  32 # |    + $rp1                                                                 |
  33 # |    | 192.0.2.17/28                                                        |
  34 # +----|----------------------------------------------------------------------+
  35 #      |
  36 # +----|--------------------------------------------------------+
  37 # |    |                                             VRP2 (vrf) |
  38 # |    + $rp2                                                   |
  39 # |      192.0.2.18/28                                          |
  40 # |                                                             |   (maybe) HW
  41 # =============================================================================
  42 # |                                                             |  (likely) SW
  43 # |    + v1 (veth)                             + v3 (veth)      |
  44 # |    | 192.0.2.33/28                         | 192.0.2.49/28  |
  45 # +----|---------------------------------------|----------------+
  46 #      |                                       |
  47 # +----|------------------------------+   +----|------------------------------+
  48 # |    + v2 (veth)        NS1 (netns) |   |    + v4 (veth)        NS2 (netns) |
  49 # |      192.0.2.34/28                |   |      192.0.2.50/28                |
  50 # |                                   |   |                                   |
  51 # |   192.0.2.16/28 via 192.0.2.33    |   |   192.0.2.16/28 via 192.0.2.49    |
  52 # |   192.0.2.50/32 via 192.0.2.33    |   |   192.0.2.34/32 via 192.0.2.49    |
  53 # |                                   |   |                                   |
  54 # | +-------------------------------+ |   | +-------------------------------+ |
  55 # | |                  BR2 (802.1q) | |   | |                  BR2 (802.1q) | |
  56 # | |  + vx10 (vxlan)               | |   | |  + vx10 (vxlan)               | |
  57 # | |    local 192.0.2.34           | |   | |    local 192.0.2.50           | |
  58 # | |    remote 192.0.2.17          | |   | |    remote 192.0.2.17          | |
  59 # | |    remote 192.0.2.50          | |   | |    remote 192.0.2.34          | |
  60 # | |    id 1000 dstport $VXPORT    | |   | |    id 1000 dstport $VXPORT    | |
  61 # | |    vid 10 pvid untagged       | |   | |    vid 10 pvid untagged       | |
  62 # | |                               | |   | |                               | |
  63 # | |  + vx20 (vxlan)               | |   | |  + vx20 (vxlan)               | |
  64 # | |    local 192.0.2.34           | |   | |    local 192.0.2.50           | |
  65 # | |    remote 192.0.2.17          | |   | |    remote 192.0.2.17          | |
  66 # | |    remote 192.0.2.50          | |   | |    remote 192.0.2.34          | |
  67 # | |    id 2000 dstport $VXPORT    | |   | |    id 2000 dstport $VXPORT    | |
  68 # | |    vid 20 pvid untagged       | |   | |    vid 20 pvid untagged       | |
  69 # | |                               | |   | |                               | |
  70 # | |  + w1 (veth)                  | |   | |  + w1 (veth)                  | |
  71 # | |  | vid 10                     | |   | |  | vid 10                     | |
  72 # | |  | vid 20                     | |   | |  | vid 20                     | |
  73 # | +--|----------------------------+ |   | +--|----------------------------+ |
  74 # |    |                              |   |    |                              |
  75 # | +--|----------------------------+ |   | +--|----------------------------+ |
  76 # | |  + w2 (veth)        VW2 (vrf) | |   | |  + w2 (veth)        VW2 (vrf) | |
  77 # | |  |\                           | |   | |  |\                           | |
  78 # | |  | + w2.10                    | |   | |  | + w2.10                    | |
  79 # | |  |   192.0.2.3/28             | |   | |  |   192.0.2.4/28             | |
  80 # | |  |                            | |   | |  |                            | |
  81 # | |  + w2.20                      | |   | |  + w2.20                      | |
  82 # | |    198.51.100.3/24            | |   | |    198.51.100.4/24            | |
  83 # | +-------------------------------+ |   | +-------------------------------+ |
  84 # +-----------------------------------+   +-----------------------------------+
  85
  86 : ${VXPORT:=4789}
  87 export VXPORT
  88
  89 : ${ALL_TESTS:="
  90         ping_ipv4
  91         test_flood
  92         test_unicast
  93         reapply_config
  94         ping_ipv4
  95         test_flood
  96         test_unicast
  97         test_learning
  98         test_pvid
  99     "}
 100
 101 NUM_NETIFS=6
 102 source lib.sh
 103
 104 h1_create()
 105 {
 106         simple_if_init $h1
 107         tc qdisc add dev $h1 clsact
 108         vlan_create $h1 10 v$h1 192.0.2.1/28
 109         vlan_create $h1 20 v$h1 198.51.100.1/24
 110 }
 111
 112 h1_destroy()
 113 {
 114         vlan_destroy $h1 20
 115         vlan_destroy $h1 10
 116         tc qdisc del dev $h1 clsact
 117         simple_if_fini $h1
 118 }
 119
 120 h2_create()
 121 {
 122         simple_if_init $h2
 123         tc qdisc add dev $h2 clsact
 124         vlan_create $h2 10 v$h2 192.0.2.2/28
 125         vlan_create $h2 20 v$h2 198.51.100.2/24
 126 }
 127
 128 h2_destroy()
 129 {
 130         vlan_destroy $h2 20
 131         vlan_destroy $h2 10
 132         tc qdisc del dev $h2 clsact
 133         simple_if_fini $h2
 134 }
 135
 136 rp1_set_addr()
 137 {
 138         ip address add dev $rp1 192.0.2.17/28
 139
 140         ip route add 192.0.2.32/28 nexthop via 192.0.2.18
 141         ip route add 192.0.2.48/28 nexthop via 192.0.2.18
 142 }
 143
 144 rp1_unset_addr()
 145 {
 146         ip route del 192.0.2.48/28 nexthop via 192.0.2.18
 147         ip route del 192.0.2.32/28 nexthop via 192.0.2.18
 148
 149         ip address del dev $rp1 192.0.2.17/28
 150 }
 151
 152 switch_create()
 153 {
 154         ip link add name br1 type bridge vlan_filtering 1 vlan_default_pvid 0 \
 155                 mcast_snooping 0
 156         # Make sure the bridge uses the MAC address of the local port and not
 157         # that of the VxLAN's device.
 158         ip link set dev br1 address $(mac_get $swp1)
 159         ip link set dev br1 up
 160
 161         ip link set dev $rp1 up
 162         rp1_set_addr
 163
 164         ip link add name vx10 type vxlan id 1000        \
 165                 local 192.0.2.17 dstport "$VXPORT"      \
 166                 nolearning noudpcsum tos inherit ttl 100
 167         ip link set dev vx10 up
 168
 169         ip link set dev vx10 master br1
 170         bridge vlan add vid 10 dev vx10 pvid untagged
 171
 172         ip link add name vx20 type vxlan id 2000        \
 173                 local 192.0.2.17 dstport "$VXPORT"      \
 174                 nolearning noudpcsum tos inherit ttl 100
 175         ip link set dev vx20 up
 176
 177         ip link set dev vx20 master br1
 178         bridge vlan add vid 20 dev vx20 pvid untagged
 179
 180         ip link set dev $swp1 master br1
 181         ip link set dev $swp1 up
 182         bridge vlan add vid 10 dev $swp1
 183         bridge vlan add vid 20 dev $swp1
 184
 185         ip link set dev $swp2 master br1
 186         ip link set dev $swp2 up
 187         bridge vlan add vid 10 dev $swp2
 188         bridge vlan add vid 20 dev $swp2
 189
 190         bridge fdb append dev vx10 00:00:00:00:00:00 dst 192.0.2.34 self
 191         bridge fdb append dev vx10 00:00:00:00:00:00 dst 192.0.2.50 self
 192
 193         bridge fdb append dev vx20 00:00:00:00:00:00 dst 192.0.2.34 self
 194         bridge fdb append dev vx20 00:00:00:00:00:00 dst 192.0.2.50 self
 195 }
 196
 197 switch_destroy()
 198 {
 199         bridge fdb del dev vx20 00:00:00:00:00:00 dst 192.0.2.50 self
 200         bridge fdb del dev vx20 00:00:00:00:00:00 dst 192.0.2.34 self
 201
 202         bridge fdb del dev vx10 00:00:00:00:00:00 dst 192.0.2.50 self
 203         bridge fdb del dev vx10 00:00:00:00:00:00 dst 192.0.2.34 self
 204
 205         bridge vlan del vid 20 dev $swp2
 206         bridge vlan del vid 10 dev $swp2
 207         ip link set dev $swp2 down
 208         ip link set dev $swp2 nomaster
 209
 210         bridge vlan del vid 20 dev $swp1
 211         bridge vlan del vid 10 dev $swp1
 212         ip link set dev $swp1 down
 213         ip link set dev $swp1 nomaster
 214
 215         bridge vlan del vid 20 dev vx20
 216         ip link set dev vx20 nomaster
 217
 218         ip link set dev vx20 down
 219         ip link del dev vx20
 220
 221         bridge vlan del vid 10 dev vx10
 222         ip link set dev vx10 nomaster
 223
 224         ip link set dev vx10 down
 225         ip link del dev vx10
 226
 227         rp1_unset_addr
 228         ip link set dev $rp1 down
 229
 230         ip link set dev br1 down
 231         ip link del dev br1
 232 }
 233
 234 vrp2_create()
 235 {
 236         simple_if_init $rp2 192.0.2.18/28
 237         __simple_if_init v1 v$rp2 192.0.2.33/28
 238         __simple_if_init v3 v$rp2 192.0.2.49/28
 239         tc qdisc add dev v1 clsact
 240 }
 241
 242 vrp2_destroy()
 243 {
 244         tc qdisc del dev v1 clsact
 245         __simple_if_fini v3 192.0.2.49/28
 246         __simple_if_fini v1 192.0.2.33/28
 247         simple_if_fini $rp2 192.0.2.18/28
 248 }
 249
 250 ns_init_common()
 251 {
 252         local in_if=$1; shift
 253         local in_addr=$1; shift
 254         local other_in_addr=$1; shift
 255         local nh_addr=$1; shift
 256         local host_addr1=$1; shift
 257         local host_addr2=$1; shift
 258
 259         ip link set dev $in_if up
 260         ip address add dev $in_if $in_addr/28
 261         tc qdisc add dev $in_if clsact
 262
 263         ip link add name br2 type bridge vlan_filtering 1 vlan_default_pvid 0
 264         ip link set dev br2 up
 265
 266         ip link add name w1 type veth peer name w2
 267
 268         ip link set dev w1 master br2
 269         ip link set dev w1 up
 270
 271         bridge vlan add vid 10 dev w1
 272         bridge vlan add vid 20 dev w1
 273
 274         ip link add name vx10 type vxlan id 1000 local $in_addr \
 275                 dstport "$VXPORT"
 276         ip link set dev vx10 up
 277         bridge fdb append dev vx10 00:00:00:00:00:00 dst 192.0.2.17 self
 278         bridge fdb append dev vx10 00:00:00:00:00:00 dst $other_in_addr self
 279
 280         ip link set dev vx10 master br2
 281         tc qdisc add dev vx10 clsact
 282
 283         bridge vlan add vid 10 dev vx10 pvid untagged
 284
 285         ip link add name vx20 type vxlan id 2000 local $in_addr \
 286                 dstport "$VXPORT"
 287         ip link set dev vx20 up
 288         bridge fdb append dev vx20 00:00:00:00:00:00 dst 192.0.2.17 self
 289         bridge fdb append dev vx20 00:00:00:00:00:00 dst $other_in_addr self
 290
 291         ip link set dev vx20 master br2
 292         tc qdisc add dev vx20 clsact
 293
 294         bridge vlan add vid 20 dev vx20 pvid untagged
 295
 296         simple_if_init w2
 297         vlan_create w2 10 vw2 $host_addr1/28
 298         vlan_create w2 20 vw2 $host_addr2/24
 299
 300         ip route add 192.0.2.16/28 nexthop via $nh_addr
 301         ip route add $other_in_addr/32 nexthop via $nh_addr
 302 }
 303 export -f ns_init_common
 304
 305 ns1_create()
 306 {
 307         ip netns add ns1
 308         ip link set dev v2 netns ns1
 309         in_ns ns1 \
 310               ns_init_common v2 192.0.2.34 192.0.2.50 192.0.2.33 192.0.2.3 \
 311               198.51.100.3
 312 }
 313
 314 ns1_destroy()
 315 {
 316         ip netns exec ns1 ip link set dev v2 netns 1
 317         ip netns del ns1
 318 }
 319
 320 ns2_create()
 321 {
 322         ip netns add ns2
 323         ip link set dev v4 netns ns2
 324         in_ns ns2 \
 325               ns_init_common v4 192.0.2.50 192.0.2.34 192.0.2.49 192.0.2.4 \
 326               198.51.100.4
 327 }
 328
 329 ns2_destroy()
 330 {
 331         ip netns exec ns2 ip link set dev v4 netns 1
 332         ip netns del ns2
 333 }
 334
 335 setup_prepare()
 336 {
 337         h1=${NETIFS[p1]}
 338         swp1=${NETIFS[p2]}
 339
 340         swp2=${NETIFS[p3]}
 341         h2=${NETIFS[p4]}
 342
 343         rp1=${NETIFS[p5]}
 344         rp2=${NETIFS[p6]}
 345
 346         vrf_prepare
 347         forwarding_enable
 348
 349         h1_create
 350         h2_create
 351         switch_create
 352
 353         ip link add name v1 type veth peer name v2
 354         ip link add name v3 type veth peer name v4
 355         vrp2_create
 356         ns1_create
 357         ns2_create
 358
 359         r1_mac=$(in_ns ns1 mac_get w2)
 360         r2_mac=$(in_ns ns2 mac_get w2)
 361         h2_mac=$(mac_get $h2)
 362 }
 363
 364 cleanup()
 365 {
 366         pre_cleanup
 367
 368         ns2_destroy
 369         ns1_destroy
 370         vrp2_destroy
 371         ip link del dev v3
 372         ip link del dev v1
 373
 374         switch_destroy
 375         h2_destroy
 376         h1_destroy
 377
 378         forwarding_restore
 379         vrf_cleanup
 380 }
 381
 382 # For the first round of tests, vx10 and vx20 were the first devices to get
 383 # attached to the bridge, and that at the point that the local IP is already
 384 # configured. Try the other scenario of attaching these devices to a bridge
 385 # that already has local ports members, and only then assign the local IP.
 386 reapply_config()
 387 {
 388         log_info "Reapplying configuration"
 389
 390         bridge fdb del dev vx20 00:00:00:00:00:00 dst 192.0.2.50 self
 391         bridge fdb del dev vx20 00:00:00:00:00:00 dst 192.0.2.34 self
 392
 393         bridge fdb del dev vx10 00:00:00:00:00:00 dst 192.0.2.50 self
 394         bridge fdb del dev vx10 00:00:00:00:00:00 dst 192.0.2.34 self
 395
 396         ip link set dev vx20 nomaster
 397         ip link set dev vx10 nomaster
 398
 399         rp1_unset_addr
 400         sleep 5
 401
 402         ip link set dev vx10 master br1
 403         bridge vlan add vid 10 dev vx10 pvid untagged
 404
 405         ip link set dev vx20 master br1
 406         bridge vlan add vid 20 dev vx20 pvid untagged
 407
 408         bridge fdb append dev vx10 00:00:00:00:00:00 dst 192.0.2.34 self
 409         bridge fdb append dev vx10 00:00:00:00:00:00 dst 192.0.2.50 self
 410
 411         bridge fdb append dev vx20 00:00:00:00:00:00 dst 192.0.2.34 self
 412         bridge fdb append dev vx20 00:00:00:00:00:00 dst 192.0.2.50 self
 413
 414         rp1_set_addr
 415         sleep 5
 416 }
 417
 418 ping_ipv4()
 419 {
 420         ping_test $h1.10 192.0.2.2 ": local->local vid 10"
 421         ping_test $h1.20 198.51.100.2 ": local->local vid 20"
 422         ping_test $h1.10 192.0.2.3 ": local->remote 1 vid 10"
 423         ping_test $h1.10 192.0.2.4 ": local->remote 2 vid 10"
 424         ping_test $h1.20 198.51.100.3 ": local->remote 1 vid 20"
 425         ping_test $h1.20 198.51.100.4 ": local->remote 2 vid 20"
 426 }
 427
 428 maybe_in_ns()
 429 {
 430         echo ${1:+in_ns} $1
 431 }
 432
 433 __flood_counter_add_del()
 434 {
 435         local add_del=$1; shift
 436         local dev=$1; shift
 437         local ns=$1; shift
 438
 439         # Putting the ICMP capture both to HW and to SW will end up
 440         # double-counting the packets that are trapped to slow path, such as for
 441         # the unicast test. Adding either skip_hw or skip_sw fixes this problem,
 442         # but with skip_hw, the flooded packets are not counted at all, because
 443         # those are dropped due to MAC address mismatch; and skip_sw is a no-go
 444         # for veth-based topologies.
 445         #
 446         # So try to install with skip_sw and fall back to skip_sw if that fails.
 447
 448         $(maybe_in_ns $ns) __icmp_capture_add_del          \
 449                            $add_del 100 "" $dev skip_sw 2>/dev/null || \
 450         $(maybe_in_ns $ns) __icmp_capture_add_del          \
 451                            $add_del 100 "" $dev skip_hw
 452 }
 453
 454 flood_counter_install()
 455 {
 456         __flood_counter_add_del add "$@"
 457 }
 458
 459 flood_counter_uninstall()
 460 {
 461         __flood_counter_add_del del "$@"
 462 }
 463
 464 flood_fetch_stat()
 465 {
 466         local dev=$1; shift
 467         local ns=$1; shift
 468
 469         $(maybe_in_ns $ns) tc_rule_stats_get $dev 100 ingress
 470 }
 471
 472 flood_fetch_stats()
 473 {
 474         local counters=("${@}")
 475         local counter
 476
 477         for counter in "${counters[@]}"; do
 478                 flood_fetch_stat $counter
 479         done
 480 }
 481
 482 vxlan_flood_test()
 483 {
 484         local mac=$1; shift
 485         local dst=$1; shift
 486         local vid=$1; shift
 487         local -a expects=("${@}")
 488
 489         local -a counters=($h2 "vx10 ns1" "vx20 ns1" "vx10 ns2" "vx20 ns2")
 490         local counter
 491         local key
 492
 493         # Packets reach the local host tagged whereas they reach the VxLAN
 494         # devices untagged. In order to be able to use the same filter for
 495         # all counters, make sure the packets also reach the local host
 496         # untagged
 497         bridge vlan add vid $vid dev $swp2 untagged
 498         for counter in "${counters[@]}"; do
 499                 flood_counter_install $counter
 500         done
 501
 502         local -a t0s=($(flood_fetch_stats "${counters[@]}"))
 503         $MZ $h1 -Q $vid -c 10 -d 100msec -p 64 -b $mac -B $dst -t icmp -q
 504         sleep 1
 505         local -a t1s=($(flood_fetch_stats "${counters[@]}"))
 506
 507         for key in ${!t0s[@]}; do
 508                 local delta=$((t1s[$key] - t0s[$key]))
 509                 local expect=${expects[$key]}
 510
 511                 ((expect == delta))
 512                 check_err $? "${counters[$key]}: Expected to capture $expect packets, got $delta."
 513         done
 514
 515         for counter in "${counters[@]}"; do
 516                 flood_counter_uninstall $counter
 517         done
 518         bridge vlan add vid $vid dev $swp2
 519 }
 520
 521 __test_flood()
 522 {
 523         local mac=$1; shift
 524         local dst=$1; shift
 525         local vid=$1; shift
 526         local what=$1; shift
 527         local -a expects=("${@}")
 528
 529         RET=0
 530
 531         vxlan_flood_test $mac $dst $vid "${expects[@]}"
 532
 533         log_test "VXLAN: $what"
 534 }
 535
 536 test_flood()
 537 {
 538         __test_flood de:ad:be:ef:13:37 192.0.2.100 10 "flood vlan 10" \
 539                 10 10 0 10 0
 540         __test_flood ca:fe:be:ef:13:37 198.51.100.100 20 "flood vlan 20" \
 541                 10 0 10 0 10
 542 }
 543
 544 vxlan_fdb_add_del()
 545 {
 546         local add_del=$1; shift
 547         local vid=$1; shift
 548         local mac=$1; shift
 549         local dev=$1; shift
 550         local dst=$1; shift
 551
 552         bridge fdb $add_del dev $dev $mac self static permanent \
 553                 ${dst:+dst} $dst 2>/dev/null
 554         bridge fdb $add_del dev $dev $mac master static vlan $vid 2>/dev/null
 555 }
 556
 557 __test_unicast()
 558 {
 559         local mac=$1; shift
 560         local dst=$1; shift
 561         local hit_idx=$1; shift
 562         local vid=$1; shift
 563         local what=$1; shift
 564
 565         RET=0
 566
 567         local -a expects=(0 0 0 0 0)
 568         expects[$hit_idx]=10
 569
 570         vxlan_flood_test $mac $dst $vid "${expects[@]}"
 571
 572         log_test "VXLAN: $what"
 573 }
 574
 575 test_unicast()
 576 {
 577         local -a targets=("$h2_mac $h2"
 578                           "$r1_mac vx10 192.0.2.34"
 579                           "$r2_mac vx10 192.0.2.50")
 580         local target
 581
 582         log_info "unicast vlan 10"
 583
 584         for target in "${targets[@]}"; do
 585                 vxlan_fdb_add_del add 10 $target
 586         done
 587
 588         __test_unicast $h2_mac 192.0.2.2 0 10 "local MAC unicast"
 589         __test_unicast $r1_mac 192.0.2.3 1 10 "remote MAC 1 unicast"
 590         __test_unicast $r2_mac 192.0.2.4 3 10 "remote MAC 2 unicast"
 591
 592         for target in "${targets[@]}"; do
 593                 vxlan_fdb_add_del del 10 $target
 594         done
 595
 596         log_info "unicast vlan 20"
 597
 598         targets=("$h2_mac $h2" "$r1_mac vx20 192.0.2.34" \
 599                  "$r2_mac vx20 192.0.2.50")
 600
 601         for target in "${targets[@]}"; do
 602                 vxlan_fdb_add_del add 20 $target
 603         done
 604
 605         __test_unicast $h2_mac 198.51.100.2 0 20 "local MAC unicast"
 606         __test_unicast $r1_mac 198.51.100.3 2 20 "remote MAC 1 unicast"
 607         __test_unicast $r2_mac 198.51.100.4 4 20 "remote MAC 2 unicast"
 608
 609         for target in "${targets[@]}"; do
 610                 vxlan_fdb_add_del del 20 $target
 611         done
 612 }
 613
 614 test_pvid()
 615 {
 616         local -a expects=(0 0 0 0 0)
 617         local mac=de:ad:be:ef:13:37
 618         local dst=192.0.2.100
 619         local vid=10
 620
 621         # Check that flooding works
 622         RET=0
 623
 624         expects[0]=10; expects[1]=10; expects[3]=10
 625         vxlan_flood_test $mac $dst $vid "${expects[@]}"
 626
 627         log_test "VXLAN: flood before pvid off"
 628
 629         # Toggle PVID off and test that flood to remote hosts does not work
 630         RET=0
 631
 632         bridge vlan add vid 10 dev vx10
 633
 634         expects[0]=10; expects[1]=0; expects[3]=0
 635         vxlan_flood_test $mac $dst $vid "${expects[@]}"
 636
 637         log_test "VXLAN: flood after pvid off"
 638
 639         # Toggle PVID on and test that flood to remote hosts does work
 640         RET=0
 641
 642         bridge vlan add vid 10 dev vx10 pvid untagged
 643
 644         expects[0]=10; expects[1]=10; expects[3]=10
 645         vxlan_flood_test $mac $dst $vid "${expects[@]}"
 646
 647         log_test "VXLAN: flood after pvid on"
 648
 649         # Add a new VLAN and test that it does not affect flooding
 650         RET=0
 651
 652         bridge vlan add vid 30 dev vx10
 653
 654         expects[0]=10; expects[1]=10; expects[3]=10
 655         vxlan_flood_test $mac $dst $vid "${expects[@]}"
 656
 657         bridge vlan del vid 30 dev vx10
 658
 659         log_test "VXLAN: flood after vlan add"
 660
 661         # Remove currently mapped VLAN and test that flood to remote hosts does
 662         # not work
 663         RET=0
 664
 665         bridge vlan del vid 10 dev vx10
 666
 667         expects[0]=10; expects[1]=0; expects[3]=0
 668         vxlan_flood_test $mac $dst $vid "${expects[@]}"
 669
 670         log_test "VXLAN: flood after vlan delete"
 671
 672         # Re-add the VLAN and test that flood to remote hosts does work
 673         RET=0
 674
 675         bridge vlan add vid 10 dev vx10 pvid untagged
 676
 677         expects[0]=10; expects[1]=10; expects[3]=10
 678         vxlan_flood_test $mac $dst $vid "${expects[@]}"
 679
 680         log_test "VXLAN: flood after vlan re-add"
 681 }
 682
 683 vxlan_ping_test()
 684 {
 685         local ping_dev=$1; shift
 686         local ping_dip=$1; shift
 687         local ping_args=$1; shift
 688         local capture_dev=$1; shift
 689         local capture_dir=$1; shift
 690         local capture_pref=$1; shift
 691         local expect=$1; shift
 692
 693         local t0=$(tc_rule_stats_get $capture_dev $capture_pref $capture_dir)
 694         ping_do $ping_dev $ping_dip "$ping_args"
 695         local t1=$(tc_rule_stats_get $capture_dev $capture_pref $capture_dir)
 696         local delta=$((t1 - t0))
 697
 698         # Tolerate a couple stray extra packets.
 699         ((expect <= delta && delta <= expect + 2))
 700         check_err $? "$capture_dev: Expected to capture $expect packets, got $delta."
 701 }
 702
 703 __test_learning()
 704 {
 705         local -a expects=(0 0 0 0 0)
 706         local mac=$1; shift
 707         local dst=$1; shift
 708         local vid=$1; shift
 709         local idx1=$1; shift
 710         local idx2=$1; shift
 711         local vx=vx$vid
 712
 713         # Check that flooding works
 714         RET=0
 715
 716         expects[0]=10; expects[$idx1]=10; expects[$idx2]=10
 717         vxlan_flood_test $mac $dst $vid "${expects[@]}"
 718
 719         log_test "VXLAN: flood before learning"
 720
 721         # Send a packet with source mac set to $mac from host w2 and check that
 722         # a corresponding entry is created in the VxLAN device
 723         RET=0
 724
 725         in_ns ns1 $MZ w2 -Q $vid -c 1 -p 64 -a $mac -b ff:ff:ff:ff:ff:ff \
 726                 -B $dst -t icmp -q
 727         sleep 1
 728
 729         bridge fdb show brport $vx | grep $mac | grep -q self
 730         check_err $?
 731         bridge fdb show brport $vx | grep $mac | grep "vlan $vid" \
 732                 | grep -q -v self
 733         check_err $?
 734
 735         log_test "VXLAN: show learned FDB entry"
 736
 737         # Repeat first test and check that packets only reach host w2 in ns1
 738         RET=0
 739
 740         expects[0]=0; expects[$idx1]=10; expects[$idx2]=0
 741         vxlan_flood_test $mac $dst $vid "${expects[@]}"
 742
 743         log_test "VXLAN: learned FDB entry"
 744
 745         # Delete the learned FDB entry from the VxLAN and bridge devices and
 746         # check that packets are flooded
 747         RET=0
 748
 749         bridge fdb del dev $vx $mac master self vlan $vid
 750         sleep 1
 751
 752         expects[0]=10; expects[$idx1]=10; expects[$idx2]=10
 753         vxlan_flood_test $mac $dst $vid "${expects[@]}"
 754
 755         log_test "VXLAN: deletion of learned FDB entry"
 756
 757         # Re-learn the first FDB entry and check that it is correctly aged-out
 758         RET=0
 759
 760         in_ns ns1 $MZ w2 -Q $vid -c 1 -p 64 -a $mac -b ff:ff:ff:ff:ff:ff \
 761                 -B $dst -t icmp -q
 762         sleep 1
 763
 764         bridge fdb show brport $vx | grep $mac | grep -q self
 765         check_err $?
 766         bridge fdb show brport $vx | grep $mac | grep "vlan $vid" \
 767                 | grep -q -v self
 768         check_err $?
 769
 770         expects[0]=0; expects[$idx1]=10; expects[$idx2]=0
 771         vxlan_flood_test $mac $dst $vid "${expects[@]}"
 772
 773         sleep 20
 774
 775         bridge fdb show brport $vx | grep $mac | grep -q self
 776         check_fail $?
 777         bridge fdb show brport $vx | grep $mac | grep "vlan $vid" \
 778                 | grep -q -v self
 779         check_fail $?
 780
 781         expects[0]=10; expects[$idx1]=10; expects[$idx2]=10
 782         vxlan_flood_test $mac $dst $vid "${expects[@]}"
 783
 784         log_test "VXLAN: Ageing of learned FDB entry"
 785
 786         # Toggle learning on the bridge port and check that the bridge's FDB
 787         # is populated only when it should
 788         RET=0
 789
 790         ip link set dev $vx type bridge_slave learning off
 791
 792         in_ns ns1 $MZ w2 -Q $vid -c 1 -p 64 -a $mac -b ff:ff:ff:ff:ff:ff \
 793                 -B $dst -t icmp -q
 794         sleep 1
 795
 796         bridge fdb show brport $vx | grep $mac | grep "vlan $vid" \
 797                 | grep -q -v self
 798         check_fail $?
 799
 800         ip link set dev $vx type bridge_slave learning on
 801
 802         in_ns ns1 $MZ w2 -Q $vid -c 1 -p 64 -a $mac -b ff:ff:ff:ff:ff:ff \
 803                 -B $dst -t icmp -q
 804         sleep 1
 805
 806         bridge fdb show brport $vx | grep $mac | grep "vlan $vid" \
 807                 | grep -q -v self
 808         check_err $?
 809
 810         log_test "VXLAN: learning toggling on bridge port"
 811 }
 812
 813 test_learning()
 814 {
 815         local mac=de:ad:be:ef:13:37
 816         local dst=192.0.2.100
 817         local vid=10
 818
 819         # Enable learning on the VxLAN devices and set ageing time to 10 seconds
 820         ip link set dev br1 type bridge ageing_time 1000
 821         ip link set dev vx10 type vxlan ageing 10
 822         ip link set dev vx10 type vxlan learning
 823         ip link set dev vx20 type vxlan ageing 10
 824         ip link set dev vx20 type vxlan learning
 825         reapply_config
 826
 827         log_info "learning vlan 10"
 828
 829         __test_learning $mac $dst $vid 1 3
 830
 831         log_info "learning vlan 20"
 832
 833         mac=ca:fe:be:ef:13:37
 834         dst=198.51.100.100
 835         vid=20
 836
 837         __test_learning $mac $dst $vid 2 4
 838
 839         # Restore previous settings
 840         ip link set dev vx20 type vxlan nolearning
 841         ip link set dev vx20 type vxlan ageing 300
 842         ip link set dev vx10 type vxlan nolearning
 843         ip link set dev vx10 type vxlan ageing 300
 844         ip link set dev br1 type bridge ageing_time 30000
 845         reapply_config
 846 }
 847
 848 test_all()
 849 {
 850         log_info "Running tests with UDP port $VXPORT"
 851         tests_run
 852 }
 853
 854 trap cleanup EXIT
 855
 856 setup_prepare
 857 setup_wait
 858 test_all
 859
 860 exit $EXIT_STATUS