Commit 65b2b493 authored by Roopa Prabhu's avatar Roopa Prabhu Committed by David S. Miller
Browse files

selftests: net: initial fib rule tests 



This adds a first set of tests for fib rule match/action for
ipv4 and ipv6. Initial tests only cover action lookup table.
can be extended to cover other actions in the future.
Uses ip route get to validate the rule lookup.

Signed-off-by: default avatarRoopa Prabhu <roopa@cumulusnetworks.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent eacb9384

tools/testing/selftests/net/Makefile

+1 −1
Original line number Diff line number Diff line
@@ -6,7 +6,7 @@ CFLAGS += -I../../../../usr/include/ 


TEST_PROGS := run_netsocktests run_afpackettests test_bpf.sh netdevice.sh rtnetlink.sh

TEST_PROGS += fib_tests.sh fib-onlink-tests.sh pmtu.sh udpgso.sh

TEST_PROGS += udpgso_bench.sh

TEST_PROGS += udpgso_bench.sh fib_rule_tests.sh

TEST_PROGS_EXTENDED := in_netns.sh

TEST_GEN_FILES =  socket

TEST_GEN_FILES += psock_fanout psock_tpacket msg_zerocopy

tools/testing/selftests/net/fib_rule_tests.sh

0 → 100755
+248 −0
Original line number Diff line number Diff line 
#!/bin/bash

# SPDX-License-Identifier: GPL-2.0



# This test is for checking IPv4 and IPv6 FIB rules API



ret=0



PAUSE_ON_FAIL=${PAUSE_ON_FAIL:=no}

IP="ip -netns testns"



RTABLE=100

GW_IP4=192.51.100.2

SRC_IP=192.51.100.3

GW_IP6=2001:db8:1::2

SRC_IP6=2001:db8:1::3



DEV_ADDR=192.51.100.1

DEV=dummy0



log_test()

{

	local rc=$1

	local expected=$2

	local msg="$3"



	if [ ${rc} -eq ${expected} ]; then

		nsuccess=$((nsuccess+1))

		printf "\n    TEST: %-50s  [ OK ]\n" "${msg}"

	else

		nfail=$((nfail+1))

		printf "\n    TEST: %-50s  [FAIL]\n" "${msg}"

		if [ "${PAUSE_ON_FAIL}" = "yes" ]; then

			echo

			echo "hit enter to continue, 'q' to quit"

			read a

			[ "$a" = "q" ] && exit 1

		fi

	fi

}



log_section()

{

	echo

	echo "######################################################################"

	echo "TEST SECTION: $*"

	echo "######################################################################"

}



setup()

{

	set -e

	ip netns add testns

	$IP link set dev lo up



	$IP link add dummy0 type dummy

	$IP link set dev dummy0 up

	$IP address add 198.51.100.1/24 dev dummy0

	$IP -6 address add 2001:db8:1::1/64 dev dummy0



	set +e

}



cleanup()

{

	$IP link del dev dummy0 &> /dev/null

	ip netns del testns

}



fib_check_iproute_support()

{

	ip rule help 2>&1 | grep -q $1

	if [ $? -ne 0 ]; then

		echo "SKIP: iproute2 iprule too old, missing $1 match"

		return 1

	fi



	ip route get help 2>&1 | grep -q $2

	if [ $? -ne 0 ]; then

		echo "SKIP: iproute2 get route too old, missing $2 match"

		return 1

	fi



	return 0

}



fib_rule6_del()

{

	$IP -6 rule del $1

	log_test $? 0 "rule6 del $1"

}



fib_rule6_del_by_pref()

{

	pref=$($IP -6 rule show | grep "$1 lookup $TABLE" | cut -d ":" -f 1)

	$IP -6 rule del pref $pref

}



fib_rule6_test_match_n_redirect()

{

	local match="$1"

	local getmatch="$2"



	$IP -6 rule add $match table $RTABLE

	$IP -6 route get $GW_IP6 $getmatch | grep -q "table $RTABLE"

	log_test $? 0 "rule6 check: $1"



	fib_rule6_del_by_pref "$match"

	log_test $? 0 "rule6 del by pref: $match"

}



fib_rule6_test()

{

	# setup the fib rule redirect route

	$IP -6 route add table $RTABLE default via $GW_IP6 dev $DEV onlink



	match="oif $DEV"

	fib_rule6_test_match_n_redirect "$match" "$match" "oif redirect to table"



	match="from $SRC_IP6 iif $DEV"

	fib_rule6_test_match_n_redirect "$match" "$match" "iif redirect to table"



	match="tos 0x10"

	fib_rule6_test_match_n_redirect "$match" "$match" "tos redirect to table"



	match="fwmark 0x64"

	getmatch="mark 0x64"

	fib_rule6_test_match_n_redirect "$match" "$getmatch" "fwmark redirect to table"



	fib_check_iproute_support "uidrange" "uid"

	if [ $? -eq 0 ]; then

		match="uidrange 100-100"

		getmatch="uid 100"

		fib_rule6_test_match_n_redirect "$match" "$getmatch" "uid redirect to table"

	fi



	fib_check_iproute_support "sport" "sport"

	if [ $? -eq 0 ]; then

		match="sport 666 dport 777"

		fib_rule6_test_match_n_redirect "$match" "$match" "sport and dport redirect to table"

	fi



	fib_check_iproute_support "ipproto" "ipproto"

	if [ $? -eq 0 ]; then

		match="ipproto tcp"

		fib_rule6_test_match_n_redirect "$match" "$match" "ipproto match"

	fi



	fib_check_iproute_support "ipproto" "ipproto"

	if [ $? -eq 0 ]; then

		match="ipproto icmp"

		fib_rule6_test_match_n_redirect "$match" "$match" "ipproto icmp match"

	fi

}



fib_rule4_del()

{

	$IP rule del $1

	log_test $? 0 "del $1"

}



fib_rule4_del_by_pref()

{

	pref=$($IP rule show | grep "$1 lookup $TABLE" | cut -d ":" -f 1)

	$IP rule del pref $pref

}



fib_rule4_test_match_n_redirect()

{

	local match="$1"

	local getmatch="$2"



	$IP rule add $match table $RTABLE

	$IP route get $GW_IP4 $getmatch | grep -q "table $RTABLE"

	log_test $? 0 "rule4 check: $1"



	fib_rule4_del_by_pref "$match"

	log_test $? 0 "rule4 del by pref: $match"

}



fib_rule4_test()

{

	# setup the fib rule redirect route

	$IP route add table $RTABLE default via $GW_IP4 dev $DEV onlink



	match="oif $DEV"

	fib_rule4_test_match_n_redirect "$match" "$match" "oif redirect to table"



	match="from $SRC_IP iif $DEV"

	fib_rule4_test_match_n_redirect "$match" "$match" "iif redirect to table"



	match="tos 0x10"

	fib_rule4_test_match_n_redirect "$match" "$match" "tos redirect to table"



	match="fwmark 0x64"

	getmatch="mark 0x64"

	fib_rule4_test_match_n_redirect "$match" "$getmatch" "fwmark redirect to table"



	fib_check_iproute_support "uidrange" "uid"

	if [ $? -eq 0 ]; then

		match="uidrange 100-100"

		getmatch="uid 100"

		fib_rule4_test_match_n_redirect "$match" "$getmatch" "uid redirect to table"

	fi



	fib_check_iproute_support "sport" "sport"

	if [ $? -eq 0 ]; then

		match="sport 666 dport 777"

		fib_rule4_test_match_n_redirect "$match" "$match" "sport and dport redirect to table"

	fi



	fib_check_iproute_support "ipproto" "ipproto"

	if [ $? -eq 0 ]; then

		match="ipproto tcp"

		fib_rule4_test_match_n_redirect "$match" "$match" "ipproto tcp match"

	fi



	fib_check_iproute_support "ipproto" "ipproto"

	if [ $? -eq 0 ]; then

		match="ipproto icmp"

		fib_rule4_test_match_n_redirect "$match" "$match" "ipproto icmp match"

	fi

}



run_fibrule_tests()

{

	log_section "IPv4 fib rule"

	fib_rule4_test

	log_section "IPv6 fib rule"

	fib_rule6_test

}



if [ "$(id -u)" -ne 0 ];then

	echo "SKIP: Need root privileges"

	exit 0

fi



if [ ! -x "$(command -v ip)" ]; then

	echo "SKIP: Could not run test without ip tool"

	exit 0

fi



# start clean

cleanup &> /dev/null

setup

run_fibrule_tests

cleanup



exit $ret

CRA Git | Maintained and supported by SUSTech CRA and CCSE