Commit 43478201 authored by David S. Miller's avatar David S. Miller
Browse files

Merge branch 'selftests-Add-tests-for-VXLAN-at-an-802-1d-bridge' 



Ido Schimmel says:

====================
selftests: Add tests for VXLAN at an 802.1d bridge

Petr says:

This patchset adds several tests for VXLAN attached to an 802.1d bridge
and fixes a related bug.

First patch #1 fixes a bug in propagating SKB already-forwarded marks
over veth to bridges, where they are irrelevant. This bug causes the
vxlan_bridge_1d test suite from this patchset to fail as the packets
aren't forwarded by br2.

In patches #2 and #3, lib.sh is extended to support network namespaces.
The use of namespaces is necessitated by VXLAN, which allows only one
VXLAN device with a given VNI per namespace. Thus to host full topology
on a single box for selftests, the "remote" endpoints need to be in
namespaces.

In patches #4-#6, lib.sh is extended in other ways to facilitate the
following patches.

In patches #7-#15, first the skeleton, and later the generic tests
themselves are added.

Patch #16 then adds another test that serves as a wrapper around the
previous one, and runs it with a non-default port number.

Patches #17 and #18 add mlxsw-specific tests. About those, Ido writes:

The first test creates various configurations with regards to the VxLAN
and bridge devices and makes sure the driver correctly forbids
unsupported configuration and permits supported ones. It also verifies
that the driver correctly sets the offload indication on FDB entries and
the local route used for VxLAN decapsulation.

The second test verifies that the driver correctly configures the singly
linked list used to flood BUM traffic and that traffic is flooded as
expected.
====================

Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parents 7abaf9a8 94d302de

net/core/skbuff.c

+5 −0
Original line number Diff line number Diff line
@@ -4882,6 +4882,11 @@ void skb_scrub_packet(struct sk_buff *skb, bool xnet) 
	nf_reset(skb);

	nf_reset_trace(skb);



#ifdef CONFIG_NET_SWITCHDEV

	skb->offload_fwd_mark = 0;

	skb->offload_mr_fwd_mark = 0;

#endif



	if (!xnet)

		return;

tools/testing/selftests/drivers/net/mlxsw/vxlan.sh

0 → 100755
+664 −0
Original line number Diff line number Diff line 
#!/bin/bash

# SPDX-License-Identifier: GPL-2.0

#

# Test various aspects of VxLAN offloading which are specific to mlxsw, such

# as sanitization of invalid configurations and offload indication.



lib_dir=$(dirname $0)/../../../net/forwarding



ALL_TESTS="sanitization_test offload_indication_test"

NUM_NETIFS=2

source $lib_dir/lib.sh



setup_prepare()

{

	swp1=${NETIFS[p1]}

	swp2=${NETIFS[p2]}



	ip link set dev $swp1 up

	ip link set dev $swp2 up

}



cleanup()

{

	pre_cleanup



	ip link set dev $swp2 down

	ip link set dev $swp1 down

}



sanitization_single_dev_test_pass()

{

	ip link set dev $swp1 master br0

	check_err $?

	ip link set dev vxlan0 master br0

	check_err $?



	ip link set dev $swp1 nomaster



	ip link set dev $swp1 master br0

	check_err $?

}



sanitization_single_dev_test_fail()

{

	ip link set dev $swp1 master br0

	check_err $?

	ip link set dev vxlan0 master br0 &> /dev/null

	check_fail $?



	ip link set dev $swp1 nomaster



	ip link set dev vxlan0 master br0

	check_err $?

	ip link set dev $swp1 master br0 &> /dev/null

	check_fail $?

}



sanitization_single_dev_valid_test()

{

	RET=0



	ip link add dev br0 type bridge mcast_snooping 0



	ip link add name vxlan0 up type vxlan id 10 nolearning noudpcsum \

		ttl 20 tos inherit local 198.51.100.1 dstport 4789



	sanitization_single_dev_test_pass



	ip link del dev vxlan0

	ip link del dev br0



	log_test "vxlan device - valid configuration"

}



sanitization_single_dev_vlan_aware_test()

{

	RET=0



	ip link add dev br0 type bridge mcast_snooping 0 vlan_filtering 1



	ip link add name vxlan0 up type vxlan id 10 nolearning noudpcsum \

		ttl 20 tos inherit local 198.51.100.1 dstport 4789



	sanitization_single_dev_test_fail



	ip link del dev vxlan0

	ip link del dev br0



	log_test "vxlan device with a vlan-aware bridge"

}



sanitization_single_dev_mcast_enabled_test()

{

	RET=0



	ip link add dev br0 type bridge



	ip link add name vxlan0 up type vxlan id 10 nolearning noudpcsum \

		ttl 20 tos inherit local 198.51.100.1 dstport 4789



	sanitization_single_dev_test_fail



	ip link del dev vxlan0

	ip link del dev br0



	log_test "vxlan device with a multicast enabled bridge"

}



sanitization_single_dev_mcast_group_test()

{

	RET=0



	ip link add dev br0 type bridge mcast_snooping 0



	ip link add name vxlan0 up type vxlan id 10 nolearning noudpcsum \

		ttl 20 tos inherit local 198.51.100.1 dstport 4789 \

		dev $swp2 group 239.0.0.1



	sanitization_single_dev_test_fail



	ip link del dev vxlan0

	ip link del dev br0



	log_test "vxlan device with a multicast group"

}



sanitization_single_dev_no_local_ip_test()

{

	RET=0



	ip link add dev br0 type bridge mcast_snooping 0



	ip link add name vxlan0 up type vxlan id 10 nolearning noudpcsum \

		ttl 20 tos inherit dstport 4789



	sanitization_single_dev_test_fail



	ip link del dev vxlan0

	ip link del dev br0



	log_test "vxlan device with no local ip"

}



sanitization_single_dev_local_ipv6_test()

{

	RET=0



	ip link add dev br0 type bridge mcast_snooping 0



	ip link add name vxlan0 up type vxlan id 10 nolearning noudpcsum \

		ttl 20 tos inherit local 2001:db8::1 dstport 4789



	sanitization_single_dev_test_fail



	ip link del dev vxlan0

	ip link del dev br0



	log_test "vxlan device with local ipv6 address"

}



sanitization_single_dev_learning_enabled_test()

{

	RET=0



	ip link add dev br0 type bridge mcast_snooping 0



	ip link add name vxlan0 up type vxlan id 10 learning noudpcsum \

		ttl 20 tos inherit local 198.51.100.1 dstport 4789



	sanitization_single_dev_test_fail



	ip link del dev vxlan0

	ip link del dev br0



	log_test "vxlan device with learning enabled"

}



sanitization_single_dev_local_interface_test()

{

	RET=0



	ip link add dev br0 type bridge mcast_snooping 0



	ip link add name vxlan0 up type vxlan id 10 nolearning noudpcsum \

		ttl 20 tos inherit local 198.51.100.1 dstport 4789 dev $swp2



	sanitization_single_dev_test_fail



	ip link del dev vxlan0

	ip link del dev br0



	log_test "vxlan device with local interface"

}



sanitization_single_dev_port_range_test()

{

	RET=0



	ip link add dev br0 type bridge mcast_snooping 0



	ip link add name vxlan0 up type vxlan id 10 nolearning noudpcsum \

		ttl 20 tos inherit local 198.51.100.1 dstport 4789 \

		srcport 4000 5000



	sanitization_single_dev_test_fail



	ip link del dev vxlan0

	ip link del dev br0



	log_test "vxlan device with udp source port range"

}



sanitization_single_dev_tos_static_test()

{

	RET=0



	ip link add dev br0 type bridge mcast_snooping 0



	ip link add name vxlan0 up type vxlan id 10 nolearning noudpcsum \

		ttl 20 tos 20 local 198.51.100.1 dstport 4789



	sanitization_single_dev_test_fail



	ip link del dev vxlan0

	ip link del dev br0



	log_test "vxlan device with static tos"

}



sanitization_single_dev_ttl_inherit_test()

{

	RET=0



	ip link add dev br0 type bridge mcast_snooping 0



	ip link add name vxlan0 up type vxlan id 10 nolearning noudpcsum \

		ttl inherit tos inherit local 198.51.100.1 dstport 4789



	sanitization_single_dev_test_fail



	ip link del dev vxlan0

	ip link del dev br0



	log_test "vxlan device with inherit ttl"

}



sanitization_single_dev_udp_checksum_test()

{

	RET=0



	ip link add dev br0 type bridge mcast_snooping 0



	ip link add name vxlan0 up type vxlan id 10 nolearning udpcsum \

		ttl 20 tos inherit local 198.51.100.1 dstport 4789



	sanitization_single_dev_test_fail



	ip link del dev vxlan0

	ip link del dev br0



	log_test "vxlan device with udp checksum"

}



sanitization_single_dev_test()

{

	# These tests make sure that we correctly sanitize VxLAN device

	# configurations we do not support

	sanitization_single_dev_valid_test

	sanitization_single_dev_vlan_aware_test

	sanitization_single_dev_mcast_enabled_test

	sanitization_single_dev_mcast_group_test

	sanitization_single_dev_no_local_ip_test

	sanitization_single_dev_local_ipv6_test

	sanitization_single_dev_learning_enabled_test

	sanitization_single_dev_local_interface_test

	sanitization_single_dev_port_range_test

	sanitization_single_dev_tos_static_test

	sanitization_single_dev_ttl_inherit_test

	sanitization_single_dev_udp_checksum_test

}



sanitization_multi_devs_test_pass()

{

	ip link set dev $swp1 master br0

	check_err $?

	ip link set dev vxlan0 master br0

	check_err $?

	ip link set dev $swp2 master br1

	check_err $?

	ip link set dev vxlan1 master br1

	check_err $?



	ip link set dev $swp2 nomaster

	ip link set dev $swp1 nomaster



	ip link set dev $swp1 master br0

	check_err $?

	ip link set dev $swp2 master br1

	check_err $?

}



sanitization_multi_devs_test_fail()

{

	ip link set dev $swp1 master br0

	check_err $?

	ip link set dev vxlan0 master br0

	check_err $?

	ip link set dev $swp2 master br1

	check_err $?

	ip link set dev vxlan1 master br1 &> /dev/null

	check_fail $?



	ip link set dev $swp2 nomaster

	ip link set dev $swp1 nomaster



	ip link set dev vxlan1 master br1

	check_err $?

	ip link set dev $swp1 master br0

	check_err $?

	ip link set dev $swp2 master br1 &> /dev/null

	check_fail $?

}



sanitization_multi_devs_valid_test()

{

	RET=0



	ip link add dev br0 type bridge mcast_snooping 0

	ip link add dev br1 type bridge mcast_snooping 0



	ip link add name vxlan0 up type vxlan id 10 nolearning noudpcsum \

		ttl 20 tos inherit local 198.51.100.1 dstport 4789

	ip link add name vxlan1 up type vxlan id 20 nolearning noudpcsum \

		ttl 20 tos inherit local 198.51.100.1 dstport 4789



	sanitization_multi_devs_test_pass



	ip link del dev vxlan1

	ip link del dev vxlan0

	ip link del dev br1

	ip link del dev br0



	log_test "multiple vxlan devices - valid configuration"

}



sanitization_multi_devs_ttl_test()

{

	RET=0



	ip link add dev br0 type bridge mcast_snooping 0

	ip link add dev br1 type bridge mcast_snooping 0



	ip link add name vxlan0 up type vxlan id 10 nolearning noudpcsum \

		ttl 20 tos inherit local 198.51.100.1 dstport 4789

	ip link add name vxlan1 up type vxlan id 20 nolearning noudpcsum \

		ttl 40 tos inherit local 198.51.100.1 dstport 4789



	sanitization_multi_devs_test_fail



	ip link del dev vxlan1

	ip link del dev vxlan0

	ip link del dev br1

	ip link del dev br0



	log_test "multiple vxlan devices with different ttl"

}



sanitization_multi_devs_udp_dstport_test()

{

	RET=0



	ip link add dev br0 type bridge mcast_snooping 0

	ip link add dev br1 type bridge mcast_snooping 0



	ip link add name vxlan0 up type vxlan id 10 nolearning noudpcsum \

		ttl 20 tos inherit local 198.51.100.1 dstport 4789

	ip link add name vxlan1 up type vxlan id 20 nolearning noudpcsum \

		ttl 20 tos inherit local 198.51.100.1 dstport 5789



	sanitization_multi_devs_test_fail



	ip link del dev vxlan1

	ip link del dev vxlan0

	ip link del dev br1

	ip link del dev br0



	log_test "multiple vxlan devices with different udp destination port"

}



sanitization_multi_devs_local_ip_test()

{

	RET=0



	ip link add dev br0 type bridge mcast_snooping 0

	ip link add dev br1 type bridge mcast_snooping 0



	ip link add name vxlan0 up type vxlan id 10 nolearning noudpcsum \

		ttl 20 tos inherit local 198.51.100.1 dstport 4789

	ip link add name vxlan1 up type vxlan id 20 nolearning noudpcsum \

		ttl 20 tos inherit local 198.51.100.2 dstport 4789



	sanitization_multi_devs_test_fail



	ip link del dev vxlan1

	ip link del dev vxlan0

	ip link del dev br1

	ip link del dev br0



	log_test "multiple vxlan devices with different local ip"

}



sanitization_multi_devs_test()

{

	# The device has a single VTEP, which means all the VxLAN devices

	# we offload must share certain properties such as source IP and

	# UDP destination port. These tests make sure that we forbid

	# configurations that violate this limitation

	sanitization_multi_devs_valid_test

	sanitization_multi_devs_ttl_test

	sanitization_multi_devs_udp_dstport_test

	sanitization_multi_devs_local_ip_test

}



sanitization_test()

{

	sanitization_single_dev_test

	sanitization_multi_devs_test

}



offload_indication_setup_create()

{

	# Create a simple setup with two bridges, each with a VxLAN device

	# and one local port

	ip link add name br0 up type bridge mcast_snooping 0

	ip link add name br1 up type bridge mcast_snooping 0



	ip link set dev $swp1 master br0

	ip link set dev $swp2 master br1



	ip address add 198.51.100.1/32 dev lo



	ip link add name vxlan0 up master br0 type vxlan id 10 nolearning \

		noudpcsum ttl 20 tos inherit local 198.51.100.1 dstport 4789

	ip link add name vxlan1 up master br1 type vxlan id 20 nolearning \

		noudpcsum ttl 20 tos inherit local 198.51.100.1 dstport 4789

}



offload_indication_setup_destroy()

{

	ip link del dev vxlan1

	ip link del dev vxlan0



	ip address del 198.51.100.1/32 dev lo



	ip link set dev $swp2 nomaster

	ip link set dev $swp1 nomaster



	ip link del dev br1

	ip link del dev br0

}



offload_indication_fdb_flood_test()

{

	RET=0



	bridge fdb append 00:00:00:00:00:00 dev vxlan0 self dst 198.51.100.2



	bridge fdb show brport vxlan0 | grep 00:00:00:00:00:00 \

		| grep -q offload

	check_err $?



	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self



	log_test "vxlan flood entry offload indication"

}



offload_indication_fdb_bridge_test()

{

	RET=0



	bridge fdb add de:ad:be:ef:13:37 dev vxlan0 self master static \

		dst 198.51.100.2



	bridge fdb show brport vxlan0 | grep de:ad:be:ef:13:37 | grep self \

		| grep -q offload

	check_err $?

	bridge fdb show brport vxlan0 | grep de:ad:be:ef:13:37 | grep -v self \

		| grep -q offload

	check_err $?



	log_test "vxlan entry offload indication - initial state"



	# Remove FDB entry from the bridge driver and check that corresponding

	# entry in the VxLAN driver is not marked as offloaded

	RET=0



	bridge fdb del de:ad:be:ef:13:37 dev vxlan0 master

	bridge fdb show brport vxlan0 | grep de:ad:be:ef:13:37 | grep self \

		| grep -q offload

	check_fail $?



	log_test "vxlan entry offload indication - after removal from bridge"



	# Add the FDB entry back to the bridge driver and make sure it is

	# marked as offloaded in both drivers

	RET=0



	bridge fdb add de:ad:be:ef:13:37 dev vxlan0 master static

	bridge fdb show brport vxlan0 | grep de:ad:be:ef:13:37 | grep self \

		| grep -q offload

	check_err $?

	bridge fdb show brport vxlan0 | grep de:ad:be:ef:13:37 | grep -v self \

		| grep -q offload

	check_err $?



	log_test "vxlan entry offload indication - after re-add to bridge"



	# Remove FDB entry from the VxLAN driver and check that corresponding

	# entry in the bridge driver is not marked as offloaded

	RET=0



	bridge fdb del de:ad:be:ef:13:37 dev vxlan0 self

	bridge fdb show brport vxlan0 | grep de:ad:be:ef:13:37 | grep -v self \

		| grep -q offload

	check_fail $?



	log_test "vxlan entry offload indication - after removal from vxlan"



	# Add the FDB entry back to the VxLAN driver and make sure it is

	# marked as offloaded in both drivers

	RET=0



	bridge fdb add de:ad:be:ef:13:37 dev vxlan0 self dst 198.51.100.2

	bridge fdb show brport vxlan0 | grep de:ad:be:ef:13:37 | grep self \

		| grep -q offload

	check_err $?

	bridge fdb show brport vxlan0 | grep de:ad:be:ef:13:37 | grep -v self \

		| grep -q offload

	check_err $?



	log_test "vxlan entry offload indication - after re-add to vxlan"



	bridge fdb del de:ad:be:ef:13:37 dev vxlan0 self master

}



offload_indication_fdb_test()

{

	offload_indication_fdb_flood_test

	offload_indication_fdb_bridge_test

}



offload_indication_decap_route_test()

{

	RET=0



	ip route show table local | grep 198.51.100.1 | grep -q offload

	check_err $?



	ip link set dev vxlan0 down

	ip route show table local | grep 198.51.100.1 | grep -q offload

	check_err $?



	ip link set dev vxlan1 down

	ip route show table local | grep 198.51.100.1 | grep -q offload

	check_fail $?



	log_test "vxlan decap route - vxlan device down"



	RET=0



	ip link set dev vxlan1 up

	ip route show table local | grep 198.51.100.1 | grep -q offload

	check_err $?



	ip link set dev vxlan0 up

	ip route show table local | grep 198.51.100.1 | grep -q offload

	check_err $?



	log_test "vxlan decap route - vxlan device up"



	RET=0



	ip address delete 198.51.100.1/32 dev lo

	ip route show table local | grep 198.51.100.1 | grep -q offload

	check_fail $?



	ip address add 198.51.100.1/32 dev lo

	ip route show table local | grep 198.51.100.1 | grep -q offload

	check_err $?



	log_test "vxlan decap route - add local route"



	RET=0



	ip link set dev $swp1 nomaster

	ip route show table local | grep 198.51.100.1 | grep -q offload

	check_err $?



	ip link set dev $swp2 nomaster

	ip route show table local | grep 198.51.100.1 | grep -q offload

	check_fail $?



	ip link set dev $swp1 master br0

	ip link set dev $swp2 master br1

	ip route show table local | grep 198.51.100.1 | grep -q offload

	check_err $?



	log_test "vxlan decap route - local ports enslavement"



	RET=0



	ip link del dev br0

	ip route show table local | grep 198.51.100.1 | grep -q offload

	check_err $?



	ip link del dev br1

	ip route show table local | grep 198.51.100.1 | grep -q offload

	check_fail $?



	log_test "vxlan decap route - bridge device deletion"



	RET=0



	ip link add name br0 up type bridge mcast_snooping 0

	ip link add name br1 up type bridge mcast_snooping 0

	ip link set dev $swp1 master br0

	ip link set dev $swp2 master br1

	ip link set dev vxlan0 master br0

	ip link set dev vxlan1 master br1

	ip route show table local | grep 198.51.100.1 | grep -q offload

	check_err $?



	ip link del dev vxlan0

	ip route show table local | grep 198.51.100.1 | grep -q offload

	check_err $?



	ip link del dev vxlan1

	ip route show table local | grep 198.51.100.1 | grep -q offload

	check_fail $?



	log_test "vxlan decap route - vxlan device deletion"



	ip link add name vxlan0 up master br0 type vxlan id 10 nolearning \

		noudpcsum ttl 20 tos inherit local 198.51.100.1 dstport 4789

	ip link add name vxlan1 up master br1 type vxlan id 20 nolearning \

		noudpcsum ttl 20 tos inherit local 198.51.100.1 dstport 4789

}



offload_indication_test()

{

	offload_indication_setup_create

	offload_indication_fdb_test

	offload_indication_decap_route_test

	offload_indication_setup_destroy

}



trap cleanup EXIT



setup_prepare

setup_wait



tests_run



exit $EXIT_STATUS

tools/testing/selftests/drivers/net/mlxsw/vxlan_flooding.sh

0 → 100755
+309 −0
Original line number Diff line number Diff line 
#!/bin/bash

# SPDX-License-Identifier: GPL-2.0

#

# Test VxLAN flooding. The device stores flood records in a singly linked list

# where each record stores up to three IPv4 addresses of remote VTEPs. The test

# verifies that packets are correctly flooded in various cases such as deletion

# of a record in the middle of the list.

#

# +--------------------+

# | H1 (vrf)           |

# |    + $h1           |

# |    | 203.0.113.1/24|

# +----|---------------+

#      |

# +----|----------------------------------------------------------------------+

# | SW |                                                                      |

# | +--|--------------------------------------------------------------------+ |

# | |  + $swp1                   BR0 (802.1d)                               | |

# | |                                                                       | |

# | |  + vxlan0 (vxlan)                                                     | |

# | |    local 198.51.100.1                                                 | |

# | |    remote 198.51.100.{2..13}                                          | |

# | |    id 10 dstport 4789                                                 | |

# | +-----------------------------------------------------------------------+ |

# |                                                                           |

# |  198.51.100.0/24 via 192.0.2.2                                            |

# |                                                                           |

# |    + $rp1                                                                 |

# |    | 192.0.2.1/24                                                         |

# +----|----------------------------------------------------------------------+

#      |

# +----|--------------------------------------------------------+

# |    |                                               R2 (vrf) |

# |    + $rp2                                                   |

# |      192.0.2.2/24                                           |

# |                                                             |

# +-------------------------------------------------------------+



lib_dir=$(dirname $0)/../../../net/forwarding



ALL_TESTS="flooding_test"

NUM_NETIFS=4

source $lib_dir/tc_common.sh

source $lib_dir/lib.sh



h1_create()

{

	simple_if_init $h1 203.0.113.1/24

}



h1_destroy()

{

	simple_if_fini $h1 203.0.113.1/24

}



switch_create()

{

	# Make sure the bridge uses the MAC address of the local port and

	# not that of the VxLAN's device

	ip link add dev br0 type bridge mcast_snooping 0

	ip link set dev br0 address $(mac_get $swp1)



	ip link add name vxlan0 type vxlan id 10 nolearning noudpcsum \

		ttl 20 tos inherit local 198.51.100.1 dstport 4789



	ip address add 198.51.100.1/32 dev lo



	ip link set dev $swp1 master br0

	ip link set dev vxlan0 master br0



	ip link set dev br0 up

	ip link set dev $swp1 up

	ip link set dev vxlan0 up

}



switch_destroy()

{

	ip link set dev vxlan0 down

	ip link set dev $swp1 down

	ip link set dev br0 down



	ip link set dev vxlan0 nomaster

	ip link set dev $swp1 nomaster



	ip address del 198.51.100.1/32 dev lo



	ip link del dev vxlan0



	ip link del dev br0

}



router1_create()

{

	# This router is in the default VRF, where the VxLAN device is

	# performing the L3 lookup

	ip link set dev $rp1 up

	ip address add 192.0.2.1/24 dev $rp1

	ip route add 198.51.100.0/24 via 192.0.2.2

}



router1_destroy()

{

	ip route del 198.51.100.0/24 via 192.0.2.2

	ip address del 192.0.2.1/24 dev $rp1

	ip link set dev $rp1 down

}



router2_create()

{

	# This router is not in the default VRF, so use simple_if_init()

	simple_if_init $rp2 192.0.2.2/24

}



router2_destroy()

{

	simple_if_fini $rp2 192.0.2.2/24

}



setup_prepare()

{

	h1=${NETIFS[p1]}

	swp1=${NETIFS[p2]}



	rp1=${NETIFS[p3]}

	rp2=${NETIFS[p4]}



	vrf_prepare



	h1_create



	switch_create



	router1_create

	router2_create



	forwarding_enable

}



cleanup()

{

	pre_cleanup



	forwarding_restore



	router2_destroy

	router1_destroy



	switch_destroy



	h1_destroy



	vrf_cleanup

}



flooding_remotes_add()

{

	local num_remotes=$1

	local lsb

	local i



	for i in $(eval echo {1..$num_remotes}); do

		lsb=$((i + 1))



		bridge fdb append 00:00:00:00:00:00 dev vxlan0 self \

			dst 198.51.100.$lsb

	done

}



flooding_filters_add()

{

	local num_remotes=$1

	local lsb

	local i



	tc qdisc add dev $rp2 clsact



	for i in $(eval echo {1..$num_remotes}); do

		lsb=$((i + 1))



		tc filter add dev $rp2 ingress protocol ip pref $i handle $i \

			flower ip_proto udp dst_ip 198.51.100.$lsb \

			dst_port 4789 skip_sw action drop

	done

}



flooding_filters_del()

{

	local num_remotes=$1

	local i



	for i in $(eval echo {1..$num_remotes}); do

		tc filter del dev $rp2 ingress protocol ip pref $i \

			handle $i flower

	done



	tc qdisc del dev $rp2 clsact

}



flooding_check_packets()

{

	local packets=("$@")

	local num_remotes=${#packets[@]}

	local i



	for i in $(eval echo {1..$num_remotes}); do

		tc_check_packets "dev $rp2 ingress" $i ${packets[i - 1]}

		check_err $? "remote $i - did not get expected number of packets"

	done

}



flooding_test()

{

	# Use 12 remote VTEPs that will be stored in 4 records. The array

	# 'packets' will store how many packets are expected to be received

	# by each remote VTEP at each stage of the test

	declare -a packets=(1 1 1 1 1 1 1 1 1 1 1 1)

	local num_remotes=12



	RET=0



	# Add FDB entries for remote VTEPs and corresponding tc filters on the

	# ingress of the nexthop router. These filters will count how many

	# packets were flooded to each remote VTEP

	flooding_remotes_add $num_remotes

	flooding_filters_add $num_remotes



	# Send one packet and make sure it is flooded to all the remote VTEPs

	$MZ $h1 -q -p 64 -b de:ad:be:ef:13:37 -t ip -c 1

	flooding_check_packets "${packets[@]}"

	log_test "flood after 1 packet"



	# Delete the third record which corresponds to VTEPs with LSB 8..10

	# and check that packet is flooded correctly when we remove a record

	# from the middle of the list

	RET=0



	packets=(2 2 2 2 2 2 1 1 1 2 2 2)

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 198.51.100.8

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 198.51.100.9

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 198.51.100.10



	$MZ $h1 -q -p 64 -b de:ad:be:ef:13:37 -t ip -c 1

	flooding_check_packets "${packets[@]}"

	log_test "flood after 2 packets"



	# Delete the first record and make sure the packet is flooded correctly

	RET=0



	packets=(2 2 2 3 3 3 1 1 1 3 3 3)

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 198.51.100.2

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 198.51.100.3

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 198.51.100.4



	$MZ $h1 -q -p 64 -b de:ad:be:ef:13:37 -t ip -c 1

	flooding_check_packets "${packets[@]}"

	log_test "flood after 3 packets"



	# Delete the last record and make sure the packet is flooded correctly

	RET=0



	packets=(2 2 2 4 4 4 1 1 1 3 3 3)

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 198.51.100.11

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 198.51.100.12

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 198.51.100.13



	$MZ $h1 -q -p 64 -b de:ad:be:ef:13:37 -t ip -c 1

	flooding_check_packets "${packets[@]}"

	log_test "flood after 4 packets"



	# Delete the last record, one entry at a time and make sure single

	# entries are correctly removed

	RET=0



	packets=(2 2 2 4 5 5 1 1 1 3 3 3)

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 198.51.100.5



	$MZ $h1 -q -p 64 -b de:ad:be:ef:13:37 -t ip -c 1

	flooding_check_packets "${packets[@]}"

	log_test "flood after 5 packets"



	RET=0



	packets=(2 2 2 4 5 6 1 1 1 3 3 3)

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 198.51.100.6



	$MZ $h1 -q -p 64 -b de:ad:be:ef:13:37 -t ip -c 1

	flooding_check_packets "${packets[@]}"

	log_test "flood after 6 packets"



	RET=0



	packets=(2 2 2 4 5 6 1 1 1 3 3 3)

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 198.51.100.7



	$MZ $h1 -q -p 64 -b de:ad:be:ef:13:37 -t ip -c 1

	flooding_check_packets "${packets[@]}"

	log_test "flood after 7 packets"



	flooding_filters_del $num_remotes

}



trap cleanup EXIT



setup_prepare

setup_wait



tests_run



exit $EXIT_STATUS

tools/testing/selftests/net/forwarding/lib.sh

+34 −8

File changed.

Preview size limit exceeded, changes collapsed.

tools/testing/selftests/net/forwarding/vxlan_bridge_1d.sh

0 → 100755
+678 −0

File added.

Preview size limit exceeded, changes collapsed.

CRA Git | Maintained and supported by SUSTech CRA and CCSE