Commit bc2652b7 authored Sep 21, 2020 by Dmitry Safonov Committed by Steffen Klassert Sep 24, 2020

selftest/net/xfrm: Add test for ipsec tunnel



It's an exhaustive testing for ipsec: covering all encryption/
authentication/compression algorithms. The tests are run in two
network namespaces, connected by veth interfaces. To make exhaustive
testing less time-consuming, the tests are run in parallel tasks,
specified by parameter to the selftest.

As the patches set adds support for xfrm in compatible tasks, there are
tests to check structures that differ in size between 64-bit and 32-bit
applications.
The selftest doesn't use libnl so that it can be easily compiled as
compatible application and don't require compatible .so.

Here is a diagram of the selftest:

                           ---------------
                           |  selftest   |
                           |  (parent)   |
                           ---------------
                              |        |
                              | (pipe) |
                              ----------
                             /   |  |   \
               /-------------   /    \   -------------\
               |          /-----      -----\          |
      ---------|----------|----------------|----------|---------
      |   ---------   ---------        ---------   ---------   |
      |   | child |   | child |  NS A  | child |   | child |   |
      |   ---------   ---------        ---------   ---------   |
      -------|------------|----------------|-------------|------
           veth0        veth1            veth2         vethN
    ---------|------------|----------------|-------------|----------
    | ------------  ------------       ------------   ------------ |
    | | gr.child |  | gr.child | NS B  | gr.child |   | gr.child | |
    | ------------  ------------       ------------   ------------ |
    ----------------------------------------------------------------

The parent sends the description of a test (xfrm parameters) to the
child, the child and grand child setup a tunnel over veth interface and
test it by sending udp packets.

Cc: Shuah Khan <shuah@kernel.org>
Cc: linux-kselftest@vger.kernel.org
Signed-off-by: Dmitry Safonov <dima@arista.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>

parent 96392ee5

MAINTAINERS

+1 −0

Original line number	Diff line number	Diff line
		@@ -12145,6 +12145,7 @@ F: net/ipv6/ipcomp6.c
		F: net/ipv6/xfrm*
		F: net/key/
		F: net/xfrm/
		F: tools/testing/selftests/net/ipsec.c

		NETWORKING [IPv4/IPv6]
		M: "David S. Miller" <davem@davemloft.net>

tools/testing/selftests/net/.gitignore

+1 −0

Original line number	Diff line number	Diff line
		# SPDX-License-Identifier: GPL-2.0-only
		ipsec
		msg_zerocopy
		socket
		psock_fanout

tools/testing/selftests/net/Makefile

+1 −0

Original line number	Diff line number	Diff line
		@@ -29,6 +29,7 @@ TEST_GEN_FILES += tcp_fastopen_backup_key
		TEST_GEN_FILES += fin_ack_lat
		TEST_GEN_FILES += reuseaddr_ports_exhausted
		TEST_GEN_FILES += hwtstamp_config rxtimestamp timestamping txtimestamp
		TEST_GEN_FILES += ipsec
		TEST_GEN_PROGS = reuseport_bpf reuseport_bpf_cpu reuseport_bpf_numa
		TEST_GEN_PROGS += reuseport_dualstack reuseaddr_conflict tls

tools/testing/selftests/net/ipsec.c

0 → 100644

+2195 −0

File added.

Preview size limit exceeded, changes collapsed.

Admin message