#!/bin/bash
# SPDX-License-Identifier: GPL-2.0
lib_dir=$(dirname $0)/../../../net/forwarding
ALL_TESTS="
mac_profile_test
"
NUM_NETIFS=4
source $lib_dir/lib.sh
source $lib_dir/tc_common.sh
source $lib_dir/devlink_lib.sh
h1_create()
{
simple_if_init $h1 192.0.2.1/24
ip route add 198.51.100.0/24 vrf v$h1 nexthop via 192.0.2.2
tc qdisc add dev $h1 ingress
}
h1_destroy()
{
tc qdisc del dev $h1 ingress
ip route del 198.51.100.0/24 vrf v$h1
simple_if_fini $h1 192.0.2.1/24
}
h2_create()
{
simple_if_init $h2 198.51.100.1/24
ip route add 192.0.2.0/24 vrf v$h2 nexthop via 198.51.100.2
tc qdisc add dev $h2 ingress
}
h2_destroy()
{
tc qdisc del dev $h2 ingress
ip route del 192.0.2.0/24 vrf v$h2
simple_if_fini $h2 198.51.100.1/24
}
router_create()
{
ip link set dev $rp1 up
ip link set dev $rp2 up
tc qdisc add dev $rp1 clsact
tc qdisc add dev $rp2 clsact
ip address add 192.0.2.2/24 dev $rp1
ip address add 198.51.100.2/24 dev $rp2
}
router_destroy()
{
ip address del 198.51.100.2/24 dev $rp2
ip address del 192.0.2.2/24 dev $rp1
tc qdisc del dev $rp2 clsact
tc qdisc del dev $rp1 clsact
ip link set dev $rp2 down
ip link set dev $rp1 down
}
setup_prepare()
{
h1=${NETIFS[p1]}
rp1=${NETIFS[p2]}
rp2=${NETIFS[p3]}
h2=${NETIFS[p4]}
vrf_prepare
h1_create
h2_create
router_create
forwarding_enable
}
cleanup()
{
pre_cleanup
forwarding_restore
router_destroy
h2_destroy
h1_destroy
vrf_cleanup
}
h1_to_h2()
{
local test_name=$@; shift
local smac=$(mac_get $rp2)
RET=0
# Replace neighbour to avoid first packet being forwarded in software
ip neigh replace dev $rp2 198.51.100.1 lladdr $(mac_get $h2)
# Add a filter to ensure that packets are forwarded in hardware. Cannot
# match on source MAC because it is not set in eACL after routing
tc filter add dev $rp2 egress proto ip pref 1 handle 101 \
flower skip_sw ip_proto udp src_port 12345 dst_port 54321 \
action pass
# Add a filter to ensure that packets are received with the correct
# source MAC
tc filter add dev $h2 ingress proto ip pref 1 handle 101 \
flower skip_sw src_mac $smac ip_proto udp src_port 12345 \
dst_port 54321 action pass
$MZ $h1 -a own -b $(mac_get $rp1) -t udp "sp=12345,dp=54321" \
-A 192.0.2.1 -B 198.51.100.1 -c 10 -p 100 -d 1msec -q
tc_check_packets "dev $rp2 egress" 101 10
check_err $? "packets not forwarded in hardware"
tc_check_packets "dev $h2 ingress" 101 10
check_err $? "packets not forwarded with correct source mac"
log_test "h1->h2: $test_name"
tc filter del dev $h2 ingress protocol ip pref 1 handle 101 flower
tc filter del dev $rp2 egress protocol ip pref 1 handle 101 flower
ip neigh del dev $rp2 198.51.100.1 lladdr $(mac_get $h2)
}
h2_to_h1()
{
local test_name=$@; shift
local rp1_mac=$(mac_get $rp1)
RET=0
ip neigh replace dev $rp1 192.0.2.1 lladdr $(mac_get $h1)
tc filter add dev $rp1 egress proto ip pref 1 handle 101 \
flower skip_sw ip_proto udp src_port 54321 dst_port 12345 \
action pass
tc filter add dev $h1 ingress proto ip pref 1 handle 101 \
flower skip_sw src_mac $rp1_mac ip_proto udp src_port 54321 \
dst_port 12345 action pass
$MZ $h2 -a own -b $(mac_get $rp2) -t udp "sp=54321,dp=12345" \
-A 198.51.100.1 -B 192.0.2.1 -c 10 -p 100 -d 1msec -q
tc_check_packets "dev $rp1 egress" 101 10
check_err $? "packets not forwarded in hardware"
tc_check_packets "dev $h1 ingress" 101 10
check_err $? "packets not forwarded with correct source mac"
log_test "h2->h1: $test_name"
tc filter del dev $h1 ingress protocol ip pref 1 handle 101 flower
tc filter del dev $rp1 egress protocol ip pref 1 handle 101 flower
ip neigh del dev $rp1 192.0.2.1 lladdr $(mac_get $h1)
}
smac_test()
{
local test_name=$@; shift
# Test that packets forwarded to $h2 via $rp2 are forwarded with the
# current source MAC of $rp2
h1_to_h2 $test_name
# Test that packets forwarded to $h1 via $rp1 are forwarded with the
# current source MAC of $rp1. This MAC is never changed during the test,
# but given the shared nature of MAC profile, the point is to see that
# changes to the MAC of $rp2 do not affect that of $rp1
h2_to_h1 $test_name
}
mac_profile_test()
{
local rp2_mac=$(mac_get $rp2)
# Test behavior when the RIF backing $rp2 is transitioned to use
# a new MAC profile
ip link set dev $rp2 addr 00:11:22:33:44:55
smac_test "new mac profile"
# Test behavior when the MAC profile used by the RIF is edited
ip link set dev $rp2 address 00:22:22:22:22:22
smac_test "edit mac profile"
# Restore original MAC
ip link set dev $rp2 addr $rp2_mac
}
trap cleanup EXIT
setup_prepare
setup_wait
mac_profiles=$(devlink_resource_size_get rif_mac_profiles)
if [[ $mac_profiles -ne 1 ]]; then
tests_run
fi
exit $EXIT_STATUS