blob: 90450216a10d042e82a09a4ff70a257d097ebad4 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
|
#!/bin/bash
# SPDX-License-Identifier: GPL-2.0
# Test routing after VXLAN decapsulation and verify that the order of
# configuration does not impact switch behavior. Verify that RIF is added
# correctly for existing mapping and that new mapping uses the correct RIF.
# +---------------------------+
# | H1 |
# | + $h1 |
# | | 192.0.2.1/28 |
# +----|----------------------+
# |
# +----|----------------------------------------------------------------------+
# | SW | |
# | +--|--------------------------------------------------------------------+ |
# | | + $swp1 br1 | |
# | | vid 10 pvid untagged | |
# | | | |
# | | | |
# | | + vx4001 | |
# | | local 192.0.2.17 | |
# | | remote 192.0.2.18 | |
# | | id 104001 | |
# | | dstport $VXPORT | |
# | | vid 4001 pvid untagged | |
# | | | |
# | +----------------------------------+------------------------------------+ |
# | | |
# | +----------------------------------|------------------------------------+ |
# | | | | |
# | | +-------------------------------+---------------------------------+ | |
# | | | | | |
# | | + vlan10 vlan4001 + | |
# | | 192.0.2.2/28 | |
# | | | |
# | | vrf-green | |
# | +-----------------------------------------------------------------------+ |
# | |
# | + $rp1 +lo |
# | | 198.51.100.1/24 192.0.2.17/32 |
# +----|----------------------------------------------------------------------+
# |
# +----|--------------------------------------------------------+
# | | v$rp2 |
# | + $rp2 |
# | 198.51.100.2/24 |
# | |
# +-------------------------------------------------------------+
lib_dir=$(dirname $0)/../../../net/forwarding
ALL_TESTS="
vni_fid_map_rif
rif_vni_fid_map
"
NUM_NETIFS=4
source $lib_dir/lib.sh
source $lib_dir/tc_common.sh
source $lib_dir/devlink_lib.sh
: ${VXPORT:=4789}
export VXPORT
h1_create()
{
simple_if_init $h1 192.0.2.1/28
}
h1_destroy()
{
simple_if_fini $h1 192.0.2.1/28
}
switch_create()
{
ip link add name br1 type bridge vlan_filtering 1 vlan_default_pvid 0 \
mcast_snooping 0
# Make sure the bridge uses the MAC address of the local port and not
# that of the VxLAN's device.
ip link set dev br1 address $(mac_get $swp1)
ip link set dev br1 up
ip link set dev $rp1 up
ip address add dev $rp1 198.51.100.1/24
ip link set dev $swp1 master br1
ip link set dev $swp1 up
bridge vlan add vid 10 dev $swp1 pvid untagged
tc qdisc add dev $swp1 clsact
ip link add name vx4001 type vxlan id 104001 \
local 192.0.2.17 dstport $VXPORT \
nolearning noudpcsum tos inherit ttl 100
ip link set dev vx4001 up
ip link set dev vx4001 master br1
ip address add 192.0.2.17/32 dev lo
# Create SVIs.
vrf_create "vrf-green"
ip link set dev vrf-green up
ip link add link br1 name vlan10 up master vrf-green type vlan id 10
# Replace neighbor to avoid 1 packet which is forwarded in software due
# to "unresolved neigh".
ip neigh replace dev vlan10 192.0.2.1 lladdr $(mac_get $h1)
ip address add 192.0.2.2/28 dev vlan10
bridge vlan add vid 10 dev br1 self
bridge vlan add vid 4001 dev br1 self
sysctl_set net.ipv4.conf.all.rp_filter 0
}
switch_destroy()
{
sysctl_restore net.ipv4.conf.all.rp_filter
bridge vlan del vid 4001 dev br1 self
bridge vlan del vid 10 dev br1 self
ip link del dev vlan10
vrf_destroy "vrf-green"
ip address del 192.0.2.17/32 dev lo
tc qdisc del dev $swp1 clsact
bridge vlan del vid 10 dev $swp1
ip link set dev $swp1 down
ip link set dev $swp1 nomaster
ip link set dev vx4001 nomaster
ip link set dev vx4001 down
ip link del dev vx4001
ip address del dev $rp1 198.51.100.1/24
ip link set dev $rp1 down
ip link set dev br1 down
ip link del dev br1
}
vrp2_create()
{
simple_if_init $rp2 198.51.100.2/24
ip route add 192.0.2.17/32 vrf v$rp2 nexthop via 198.51.100.1
}
vrp2_destroy()
{
ip route del 192.0.2.17/32 vrf v$rp2 nexthop via 198.51.100.1
simple_if_fini $rp2 198.51.100.2/24
}
setup_prepare()
{
h1=${NETIFS[p1]}
swp1=${NETIFS[p2]}
rp1=${NETIFS[p3]}
rp2=${NETIFS[p4]}
vrf_prepare
forwarding_enable
h1_create
switch_create
vrp2_create
}
cleanup()
{
pre_cleanup
vrp2_destroy
switch_destroy
h1_destroy
forwarding_restore
vrf_cleanup
}
payload_get()
{
local dest_mac=$(mac_get vlan4001)
local src_mac=$(mac_get $rp1)
p=$(:
)"08:"$( : VXLAN flags
)"00:00:00:"$( : VXLAN reserved
)"01:96:41:"$( : VXLAN VNI : 104001
)"00:"$( : VXLAN reserved
)"$dest_mac:"$( : ETH daddr
)"$src_mac:"$( : ETH saddr
)"08:00:"$( : ETH type
)"45:"$( : IP version + IHL
)"00:"$( : IP TOS
)"00:54:"$( : IP total length
)"3f:49:"$( : IP identification
)"00:00:"$( : IP flags + frag off
)"3f:"$( : IP TTL
)"01:"$( : IP proto
)"50:21:"$( : IP header csum
)"c6:33:64:0a:"$( : IP saddr: 198.51.100.10
)"c0:00:02:01:"$( : IP daddr: 192.0.2.1
)
echo $p
}
vlan_rif_add()
{
rifs_occ_t0=$(devlink_resource_occ_get rifs)
ip link add link br1 name vlan4001 up master vrf-green \
type vlan id 4001
rifs_occ_t1=$(devlink_resource_occ_get rifs)
expected_rifs=$((rifs_occ_t0 + 1))
[[ $expected_rifs -eq $rifs_occ_t1 ]]
check_err $? "Expected $expected_rifs RIFs, $rifs_occ_t1 are used"
}
vlan_rif_del()
{
ip link del dev vlan4001
}
vni_fid_map_rif()
{
local rp1_mac=$(mac_get $rp1)
RET=0
# First add VNI->FID mapping to the FID of VLAN 4001
bridge vlan add vid 4001 dev vx4001 pvid untagged
# Add a RIF to the FID with VNI->FID mapping
vlan_rif_add
tc filter add dev $swp1 egress protocol ip pref 1 handle 101 \
flower skip_sw dst_ip 192.0.2.1 action pass
payload=$(payload_get)
ip vrf exec v$rp2 $MZ $rp2 -c 10 -d 1msec -b $rp1_mac \
-B 192.0.2.17 -A 192.0.2.18 \
-t udp sp=12345,dp=$VXPORT,p=$payload -q
tc_check_at_least_x_packets "dev $swp1 egress" 101 10
check_err $? "Packets were not routed in hardware"
log_test "Add RIF for existing VNI->FID mapping"
tc filter del dev $swp1 egress
bridge vlan del vid 4001 dev vx4001 pvid untagged
vlan_rif_del
}
rif_vni_fid_map()
{
local rp1_mac=$(mac_get $rp1)
RET=0
# First add a RIF to the FID of VLAN 4001
vlan_rif_add
# Add VNI->FID mapping to FID with a RIF
bridge vlan add vid 4001 dev vx4001 pvid untagged
tc filter add dev $swp1 egress protocol ip pref 1 handle 101 \
flower skip_sw dst_ip 192.0.2.1 action pass
payload=$(payload_get)
ip vrf exec v$rp2 $MZ $rp2 -c 10 -d 1msec -b $rp1_mac \
-B 192.0.2.17 -A 192.0.2.18 \
-t udp sp=12345,dp=$VXPORT,p=$payload -q
tc_check_at_least_x_packets "dev $swp1 egress" 101 10
check_err $? "Packets were not routed in hardware"
log_test "Add VNI->FID mapping for FID with a RIF"
tc filter del dev $swp1 egress
bridge vlan del vid 4001 dev vx4001 pvid untagged
vlan_rif_del
}
trap cleanup EXIT
setup_prepare
setup_wait
tests_run
exit $EXIT_STATUS
|
