2 # SPDX-License-Identifier: GPL-2.0
4 # This test is for checking the [no]localbypass VXLAN device option. The test
5 # configures two VXLAN devices in the same network namespace and a tc filter on
6 # the loopback device that drops encapsulated packets. The test sends packets
7 # from the first VXLAN device and verifies that by default these packets are
8 # received by the second VXLAN device. The test then enables the nolocalbypass
9 # option and verifies that packets are no longer received by the second VXLAN
13 # Kselftest framework requirement - SKIP code is 4.
23 ################################################################################
32 if [ ${rc} -eq ${expected} ]; then
33 printf "TEST: %-60s [ OK ]\n" "${msg}"
34 nsuccess=$((nsuccess+1))
38 printf "TEST: %-60s [FAIL]\n" "${msg}"
39 if [ "$VERBOSE" = "1" ]; then
40 echo " rc=$rc, expected $expected"
43 if [ "${PAUSE_ON_FAIL}" = "yes" ]; then
45 echo "hit enter to continue, 'q' to quit"
47 [ "$a" = "q" ] && exit 1
51 if [ "${PAUSE}" = "yes" ]; then
53 echo "hit enter to continue, 'q' to quit"
55 [ "$a" = "q" ] && exit 1
58 [ "$VERBOSE" = "1" ] && echo
65 local stderr="2>/dev/null"
67 if [ "$VERBOSE" = "1" ]; then
68 printf "COMMAND: $cmd\n"
72 out=$(eval $cmd $stderr)
74 if [ "$VERBOSE" = "1" -a -n "$out" ]; then
85 local handle=$1; shift
90 pkts=$(tc -n $ns -j -s filter show $id \
91 | jq ".[] | select(.options.handle == $handle) | \
92 .options.actions[0].stats.packets")
96 ################################################################################
103 ip -n ns1 link set dev lo up
104 ip -n ns1 address add 192.0.2.1/32 dev lo
105 ip -n ns1 address add 198.51.100.1/32 dev lo
107 ip -n ns1 link add name vx0 up type vxlan id 100 local 198.51.100.1 \
108 dstport 4789 nolearning
109 ip -n ns1 link add name vx1 up type vxlan id 100 dstport 4790
114 ip netns del ns1 &> /dev/null
117 ################################################################################
122 local smac=00:01:02:03:04:05
123 local dmac=00:0a:0b:0c:0d:0e
125 run_cmd "bridge -n ns1 fdb add $dmac dev vx0 self static dst 192.0.2.1 port 4790"
127 run_cmd "tc -n ns1 qdisc add dev vx1 clsact"
128 run_cmd "tc -n ns1 filter add dev vx1 ingress pref 1 handle 101 proto all flower src_mac $smac dst_mac $dmac action pass"
130 run_cmd "tc -n ns1 qdisc add dev lo clsact"
131 run_cmd "tc -n ns1 filter add dev lo ingress pref 1 handle 101 proto ip flower ip_proto udp dst_port 4790 action drop"
133 run_cmd "ip -n ns1 -d -j link show dev vx0 | jq -e '.[][\"linkinfo\"][\"info_data\"][\"localbypass\"] == true'"
134 log_test $? 0 "localbypass enabled"
136 run_cmd "ip netns exec ns1 mausezahn vx0 -a $smac -b $dmac -c 1 -p 100 -q"
138 tc_check_packets "ns1" "dev vx1 ingress" 101 1
139 log_test $? 0 "Packet received by local VXLAN device - localbypass"
141 run_cmd "ip -n ns1 link set dev vx0 type vxlan nolocalbypass"
143 run_cmd "ip -n ns1 -d -j link show dev vx0 | jq -e '.[][\"linkinfo\"][\"info_data\"][\"localbypass\"] == false'"
144 log_test $? 0 "localbypass disabled"
146 run_cmd "ip netns exec ns1 mausezahn vx0 -a $smac -b $dmac -c 1 -p 100 -q"
148 tc_check_packets "ns1" "dev vx1 ingress" 101 1
149 log_test $? 0 "Packet not received by local VXLAN device - nolocalbypass"
151 run_cmd "ip -n ns1 link set dev vx0 type vxlan localbypass"
153 run_cmd "ip -n ns1 -d -j link show dev vx0 | jq -e '.[][\"linkinfo\"][\"info_data\"][\"localbypass\"] == true'"
154 log_test $? 0 "localbypass enabled"
156 run_cmd "ip netns exec ns1 mausezahn vx0 -a $smac -b $dmac -c 1 -p 100 -q"
158 tc_check_packets "ns1" "dev vx1 ingress" 101 2
159 log_test $? 0 "Packet received by local VXLAN device - localbypass"
162 ################################################################################
170 -t <test> Test(s) to run (default: all)
173 -P Pause after each test before cleanup
174 -v Verbose mode (show commands and output)
178 ################################################################################
183 while getopts ":t:pPvh" opt; do
186 p) PAUSE_ON_FAIL=yes;;
188 v) VERBOSE=$(($VERBOSE + 1));;
194 # Make sure we don't pause twice.
195 [ "${PAUSE}" = "yes" ] && PAUSE_ON_FAIL=no
197 if [ "$(id -u)" -ne 0 ];then
198 echo "SKIP: Need root privileges"
202 if [ ! -x "$(command -v ip)" ]; then
203 echo "SKIP: Could not run test without ip tool"
207 if [ ! -x "$(command -v bridge)" ]; then
208 echo "SKIP: Could not run test without bridge tool"
212 if [ ! -x "$(command -v mausezahn)" ]; then
213 echo "SKIP: Could not run test without mausezahn tool"
217 if [ ! -x "$(command -v jq)" ]; then
218 echo "SKIP: Could not run test without jq tool"
222 ip link help vxlan 2>&1 | grep -q "localbypass"
223 if [ $? -ne 0 ]; then
224 echo "SKIP: iproute2 ip too old, missing VXLAN nolocalbypass support"
235 if [ "$TESTS" != "none" ]; then
236 printf "\nTests passed: %3d\n" ${nsuccess}
237 printf "Tests failed: %3d\n" ${nfail}