1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
|
#!/bin/bash
# SPDX-License-Identifier: GPL-2.0
# Test VLAN classification after routing and verify that the order of
# configuration does not impact switch behavior. Verify that {RIF, Port}->VID
# mapping is added correctly for existing {Port, VID}->FID mapping and that
# {RIF, Port}->VID mapping is added correctly for new {Port, VID}->FID mapping.
# +-------------------+ +--------------------+
# | H1 | | H2 |
# | | | |
# | $h1.10 + | | + $h2.10 |
# | 192.0.2.1/28 | | | | 192.0.2.3/28 |
# | | | | | |
# | $h1 + | | + $h2 |
# +----------------|--+ +--|-----------------+
# | |
# +----------------|-------------------------|-----------------+
# | SW | | |
# | +--------------|-------------------------|---------------+ |
# | | $swp1 + + $swp2 | |
# | | | | | |
# | | $swp1.10 + + $swp2.10 | |
# | | | |
# | | br0 | |
# | | 192.0.2.2/28 | |
# | +--------------------------------------------------------+ |
# | |
# | $swp3.20 + |
# | 192.0.2.17/28 | |
# | | |
# | $swp3 + |
# +---------------|--------------------------------------------+
# |
# +---------------|--+
# | $h3 + |
# | | |
# | $h3.20 + |
# | 192.0.2.18/28 |
# | |
# | H3 |
# +------------------+
lib_dir=$(dirname $0)/../../../net/forwarding
ALL_TESTS="
port_vid_map_rif
rif_port_vid_map
"
NUM_NETIFS=6
source $lib_dir/lib.sh
source $lib_dir/tc_common.sh
source $lib_dir/devlink_lib.sh
h1_create()
{
simple_if_init $h1
vlan_create $h1 10 v$h1 192.0.2.1/28
ip route add 192.0.2.16/28 vrf v$h1 nexthop via 192.0.2.2
}
h1_destroy()
{
ip route del 192.0.2.16/28 vrf v$h1 nexthop via 192.0.2.2
vlan_destroy $h1 10
simple_if_fini $h1
}
h2_create()
{
simple_if_init $h2
vlan_create $h2 10 v$h2 192.0.2.3/28
}
h2_destroy()
{
vlan_destroy $h2 10
simple_if_fini $h2
}
h3_create()
{
simple_if_init $h3
vlan_create $h3 20 v$h3 192.0.2.18/28
ip route add 192.0.2.0/28 vrf v$h3 nexthop via 192.0.2.17
}
h3_destroy()
{
ip route del 192.0.2.0/28 vrf v$h3 nexthop via 192.0.2.17
vlan_destroy $h3 20
simple_if_fini $h3
}
switch_create()
{
ip link set dev $swp1 up
tc qdisc add dev $swp1 clsact
ip link add dev br0 type bridge mcast_snooping 0
# By default, a link-local address is generated when netdevice becomes
# up. Adding an address to the bridge will cause creating a RIF for it.
# Prevent generating link-local address to be able to control when the
# RIF is added.
sysctl_set net.ipv6.conf.br0.addr_gen_mode 1
ip link set dev br0 up
ip link set dev $swp2 up
vlan_create $swp2 10
ip link set dev $swp2.10 master br0
ip link set dev $swp3 up
vlan_create $swp3 20 "" 192.0.2.17/28
# Replace neighbor to avoid 1 packet which is forwarded in software due
# to "unresolved neigh".
ip neigh replace dev $swp3.20 192.0.2.18 lladdr $(mac_get $h3.20)
}
switch_destroy()
{
vlan_destroy $swp3 20
ip link set dev $swp3 down
ip link set dev $swp2.10 nomaster
vlan_destroy $swp2 10
ip link set dev $swp2 down
ip link set dev br0 down
sysctl_restore net.ipv6.conf.br0.addr_gen_mode
ip link del dev br0
tc qdisc del dev $swp1 clsact
ip link set dev $swp1 down
}
setup_prepare()
{
h1=${NETIFS[p1]}
swp1=${NETIFS[p2]}
swp2=${NETIFS[p3]}
h2=${NETIFS[p4]}
swp3=${NETIFS[p5]}
h3=${NETIFS[p6]}
vrf_prepare
forwarding_enable
h1_create
h2_create
h3_create
switch_create
}
cleanup()
{
pre_cleanup
switch_destroy
h3_destroy
h2_destroy
h1_destroy
forwarding_restore
vrf_cleanup
}
bridge_rif_add()
{
rifs_occ_t0=$(devlink_resource_occ_get rifs)
__addr_add_del br0 add 192.0.2.2/28
rifs_occ_t1=$(devlink_resource_occ_get rifs)
expected_rifs=$((rifs_occ_t0 + 1))
[[ $expected_rifs -eq $rifs_occ_t1 ]]
check_err $? "Expected $expected_rifs RIFs, $rifs_occ_t1 are used"
sleep 1
}
bridge_rif_del()
{
__addr_add_del br0 del 192.0.2.2/28
}
port_vid_map_rif()
{
RET=0
# First add {port, VID}->FID for swp1.10, then add a RIF and verify that
# packets get the correct VID after routing.
vlan_create $swp1 10
ip link set dev $swp1.10 master br0
bridge_rif_add
# Replace neighbor to avoid 1 packet which is forwarded in software due
# to "unresolved neigh".
ip neigh replace dev br0 192.0.2.1 lladdr $(mac_get $h1.10)
# The hardware matches on the first ethertype which is not VLAN,
# so the protocol should be IP.
tc filter add dev $swp1 egress protocol ip pref 1 handle 101 \
flower skip_sw dst_ip 192.0.2.1 action pass
ping_do $h1.10 192.0.2.18
check_err $? "Ping failed"
tc_check_at_least_x_packets "dev $swp1 egress" 101 10
check_err $? "Packets were not routed in hardware"
log_test "Add RIF for existing {port, VID}->FID mapping"
tc filter del dev $swp1 egress
bridge_rif_del
ip link set dev $swp1.10 nomaster
vlan_destroy $swp1 10
}
rif_port_vid_map()
{
RET=0
# First add an address to the bridge, which will create a RIF on top of
# it, then add a new {port, VID}->FID mapping and verify that packets
# get the correct VID after routing.
bridge_rif_add
vlan_create $swp1 10
ip link set dev $swp1.10 master br0
# Replace neighbor to avoid 1 packet which is forwarded in software due
# to "unresolved neigh".
ip neigh replace dev br0 192.0.2.1 lladdr $(mac_get $h1.10)
# The hardware matches on the first ethertype which is not VLAN,
# so the protocol should be IP.
tc filter add dev $swp1 egress protocol ip pref 1 handle 101 \
flower skip_sw dst_ip 192.0.2.1 action pass
ping_do $h1.10 192.0.2.18
check_err $? "Ping failed"
tc_check_at_least_x_packets "dev $swp1 egress" 101 10
check_err $? "Packets were not routed in hardware"
log_test "Add {port, VID}->FID mapping for FID with a RIF"
tc filter del dev $swp1 egress
ip link set dev $swp1.10 nomaster
vlan_destroy $swp1 10
bridge_rif_del
}
trap cleanup EXIT
setup_prepare
setup_wait
tests_run
exit $EXIT_STATUS
|
