Loading...
1#!/bin/bash
2# SPDX-License-Identifier: GPL-2.0
3
4function config_device {
5 ip netns add at_ns0
6 ip netns add at_ns1
7 ip netns add at_ns2
8 ip link add veth0 type veth peer name veth0b
9 ip link add veth1 type veth peer name veth1b
10 ip link add veth2 type veth peer name veth2b
11 ip link set veth0b up
12 ip link set veth1b up
13 ip link set veth2b up
14 ip link set dev veth0b mtu 1500
15 ip link set dev veth1b mtu 1500
16 ip link set dev veth2b mtu 1500
17 ip link set veth0 netns at_ns0
18 ip link set veth1 netns at_ns1
19 ip link set veth2 netns at_ns2
20 ip netns exec at_ns0 ip addr add 172.16.1.100/24 dev veth0
21 ip netns exec at_ns0 ip addr add 2401:db00::1/64 dev veth0 nodad
22 ip netns exec at_ns0 ip link set dev veth0 up
23 ip netns exec at_ns1 ip addr add 172.16.1.101/24 dev veth1
24 ip netns exec at_ns1 ip addr add 2401:db00::2/64 dev veth1 nodad
25 ip netns exec at_ns1 ip link set dev veth1 up
26 ip netns exec at_ns2 ip addr add 172.16.1.200/24 dev veth2
27 ip netns exec at_ns2 ip addr add 2401:db00::3/64 dev veth2 nodad
28 ip netns exec at_ns2 ip link set dev veth2 up
29 ip link add br0 type bridge
30 ip link set br0 up
31 ip link set dev br0 mtu 1500
32 ip link set veth0b master br0
33 ip link set veth1b master br0
34 ip link set veth2b master br0
35}
36
37function add_ipip_tunnel {
38 ip netns exec at_ns0 \
39 ip link add dev $DEV_NS type ipip local 172.16.1.100 remote 172.16.1.200
40 ip netns exec at_ns0 ip link set dev $DEV_NS up
41 ip netns exec at_ns0 ip addr add dev $DEV_NS 10.1.1.100/24
42 ip netns exec at_ns1 \
43 ip link add dev $DEV_NS type ipip local 172.16.1.101 remote 172.16.1.200
44 ip netns exec at_ns1 ip link set dev $DEV_NS up
45 # same inner IP address in at_ns0 and at_ns1
46 ip netns exec at_ns1 ip addr add dev $DEV_NS 10.1.1.100/24
47
48 ip netns exec at_ns2 ip link add dev $DEV type ipip external
49 ip netns exec at_ns2 ip link set dev $DEV up
50 ip netns exec at_ns2 ip addr add dev $DEV 10.1.1.200/24
51}
52
53function add_ipip6_tunnel {
54 ip netns exec at_ns0 \
55 ip link add dev $DEV_NS type ip6tnl mode ipip6 local 2401:db00::1/64 remote 2401:db00::3/64
56 ip netns exec at_ns0 ip link set dev $DEV_NS up
57 ip netns exec at_ns0 ip addr add dev $DEV_NS 10.1.1.100/24
58 ip netns exec at_ns1 \
59 ip link add dev $DEV_NS type ip6tnl mode ipip6 local 2401:db00::2/64 remote 2401:db00::3/64
60 ip netns exec at_ns1 ip link set dev $DEV_NS up
61 # same inner IP address in at_ns0 and at_ns1
62 ip netns exec at_ns1 ip addr add dev $DEV_NS 10.1.1.100/24
63
64 ip netns exec at_ns2 ip link add dev $DEV type ip6tnl mode ipip6 external
65 ip netns exec at_ns2 ip link set dev $DEV up
66 ip netns exec at_ns2 ip addr add dev $DEV 10.1.1.200/24
67}
68
69function add_ip6ip6_tunnel {
70 ip netns exec at_ns0 \
71 ip link add dev $DEV_NS type ip6tnl mode ip6ip6 local 2401:db00::1/64 remote 2401:db00::3/64
72 ip netns exec at_ns0 ip link set dev $DEV_NS up
73 ip netns exec at_ns0 ip addr add dev $DEV_NS 2601:646::1/64
74 ip netns exec at_ns1 \
75 ip link add dev $DEV_NS type ip6tnl mode ip6ip6 local 2401:db00::2/64 remote 2401:db00::3/64
76 ip netns exec at_ns1 ip link set dev $DEV_NS up
77 # same inner IP address in at_ns0 and at_ns1
78 ip netns exec at_ns1 ip addr add dev $DEV_NS 2601:646::1/64
79
80 ip netns exec at_ns2 ip link add dev $DEV type ip6tnl mode ip6ip6 external
81 ip netns exec at_ns2 ip link set dev $DEV up
82 ip netns exec at_ns2 ip addr add dev $DEV 2601:646::2/64
83}
84
85function attach_bpf {
86 DEV=$1
87 SET_TUNNEL=$2
88 GET_TUNNEL=$3
89 ip netns exec at_ns2 tc qdisc add dev $DEV clsact
90 ip netns exec at_ns2 tc filter add dev $DEV egress bpf da obj tcbpf2_kern.o sec $SET_TUNNEL
91 ip netns exec at_ns2 tc filter add dev $DEV ingress bpf da obj tcbpf2_kern.o sec $GET_TUNNEL
92}
93
94function test_ipip {
95 DEV_NS=ipip_std
96 DEV=ipip_bpf
97 config_device
98# tcpdump -nei br0 &
99 cat /sys/kernel/debug/tracing/trace_pipe &
100
101 add_ipip_tunnel
102 attach_bpf $DEV ipip_set_tunnel ipip_get_tunnel
103
104 ip netns exec at_ns0 ping -c 1 10.1.1.200
105 ip netns exec at_ns2 ping -c 1 10.1.1.100
106 ip netns exec at_ns0 iperf -sD -p 5200 > /dev/null
107 ip netns exec at_ns1 iperf -sD -p 5201 > /dev/null
108 sleep 0.2
109 # tcp check _same_ IP over different tunnels
110 ip netns exec at_ns2 iperf -c 10.1.1.100 -n 5k -p 5200
111 ip netns exec at_ns2 iperf -c 10.1.1.100 -n 5k -p 5201
112 cleanup
113}
114
115# IPv4 over IPv6 tunnel
116function test_ipip6 {
117 DEV_NS=ipip_std
118 DEV=ipip_bpf
119 config_device
120# tcpdump -nei br0 &
121 cat /sys/kernel/debug/tracing/trace_pipe &
122
123 add_ipip6_tunnel
124 attach_bpf $DEV ipip6_set_tunnel ipip6_get_tunnel
125
126 ip netns exec at_ns0 ping -c 1 10.1.1.200
127 ip netns exec at_ns2 ping -c 1 10.1.1.100
128 ip netns exec at_ns0 iperf -sD -p 5200 > /dev/null
129 ip netns exec at_ns1 iperf -sD -p 5201 > /dev/null
130 sleep 0.2
131 # tcp check _same_ IP over different tunnels
132 ip netns exec at_ns2 iperf -c 10.1.1.100 -n 5k -p 5200
133 ip netns exec at_ns2 iperf -c 10.1.1.100 -n 5k -p 5201
134 cleanup
135}
136
137# IPv6 over IPv6 tunnel
138function test_ip6ip6 {
139 DEV_NS=ipip_std
140 DEV=ipip_bpf
141 config_device
142# tcpdump -nei br0 &
143 cat /sys/kernel/debug/tracing/trace_pipe &
144
145 add_ip6ip6_tunnel
146 attach_bpf $DEV ip6ip6_set_tunnel ip6ip6_get_tunnel
147
148 ip netns exec at_ns0 ping -6 -c 1 2601:646::2
149 ip netns exec at_ns2 ping -6 -c 1 2601:646::1
150 ip netns exec at_ns0 iperf -6sD -p 5200 > /dev/null
151 ip netns exec at_ns1 iperf -6sD -p 5201 > /dev/null
152 sleep 0.2
153 # tcp check _same_ IP over different tunnels
154 ip netns exec at_ns2 iperf -6c 2601:646::1 -n 5k -p 5200
155 ip netns exec at_ns2 iperf -6c 2601:646::1 -n 5k -p 5201
156 cleanup
157}
158
159function cleanup {
160 set +ex
161 pkill iperf
162 ip netns delete at_ns0
163 ip netns delete at_ns1
164 ip netns delete at_ns2
165 ip link del veth0
166 ip link del veth1
167 ip link del veth2
168 ip link del br0
169 pkill tcpdump
170 pkill cat
171 set -ex
172}
173
174cleanup
175echo "Testing IP tunnels..."
176test_ipip
177test_ipip6
178test_ip6ip6
179echo "*** PASS ***"
1#!/bin/bash
2
3function config_device {
4 ip netns add at_ns0
5 ip netns add at_ns1
6 ip netns add at_ns2
7 ip link add veth0 type veth peer name veth0b
8 ip link add veth1 type veth peer name veth1b
9 ip link add veth2 type veth peer name veth2b
10 ip link set veth0b up
11 ip link set veth1b up
12 ip link set veth2b up
13 ip link set dev veth0b mtu 1500
14 ip link set dev veth1b mtu 1500
15 ip link set dev veth2b mtu 1500
16 ip link set veth0 netns at_ns0
17 ip link set veth1 netns at_ns1
18 ip link set veth2 netns at_ns2
19 ip netns exec at_ns0 ip addr add 172.16.1.100/24 dev veth0
20 ip netns exec at_ns0 ip addr add 2401:db00::1/64 dev veth0 nodad
21 ip netns exec at_ns0 ip link set dev veth0 up
22 ip netns exec at_ns1 ip addr add 172.16.1.101/24 dev veth1
23 ip netns exec at_ns1 ip addr add 2401:db00::2/64 dev veth1 nodad
24 ip netns exec at_ns1 ip link set dev veth1 up
25 ip netns exec at_ns2 ip addr add 172.16.1.200/24 dev veth2
26 ip netns exec at_ns2 ip addr add 2401:db00::3/64 dev veth2 nodad
27 ip netns exec at_ns2 ip link set dev veth2 up
28 ip link add br0 type bridge
29 ip link set br0 up
30 ip link set dev br0 mtu 1500
31 ip link set veth0b master br0
32 ip link set veth1b master br0
33 ip link set veth2b master br0
34}
35
36function add_ipip_tunnel {
37 ip netns exec at_ns0 \
38 ip link add dev $DEV_NS type ipip local 172.16.1.100 remote 172.16.1.200
39 ip netns exec at_ns0 ip link set dev $DEV_NS up
40 ip netns exec at_ns0 ip addr add dev $DEV_NS 10.1.1.100/24
41 ip netns exec at_ns1 \
42 ip link add dev $DEV_NS type ipip local 172.16.1.101 remote 172.16.1.200
43 ip netns exec at_ns1 ip link set dev $DEV_NS up
44 # same inner IP address in at_ns0 and at_ns1
45 ip netns exec at_ns1 ip addr add dev $DEV_NS 10.1.1.100/24
46
47 ip netns exec at_ns2 ip link add dev $DEV type ipip external
48 ip netns exec at_ns2 ip link set dev $DEV up
49 ip netns exec at_ns2 ip addr add dev $DEV 10.1.1.200/24
50}
51
52function add_ipip6_tunnel {
53 ip netns exec at_ns0 \
54 ip link add dev $DEV_NS type ip6tnl mode ipip6 local 2401:db00::1/64 remote 2401:db00::3/64
55 ip netns exec at_ns0 ip link set dev $DEV_NS up
56 ip netns exec at_ns0 ip addr add dev $DEV_NS 10.1.1.100/24
57 ip netns exec at_ns1 \
58 ip link add dev $DEV_NS type ip6tnl mode ipip6 local 2401:db00::2/64 remote 2401:db00::3/64
59 ip netns exec at_ns1 ip link set dev $DEV_NS up
60 # same inner IP address in at_ns0 and at_ns1
61 ip netns exec at_ns1 ip addr add dev $DEV_NS 10.1.1.100/24
62
63 ip netns exec at_ns2 ip link add dev $DEV type ip6tnl mode ipip6 external
64 ip netns exec at_ns2 ip link set dev $DEV up
65 ip netns exec at_ns2 ip addr add dev $DEV 10.1.1.200/24
66}
67
68function add_ip6ip6_tunnel {
69 ip netns exec at_ns0 \
70 ip link add dev $DEV_NS type ip6tnl mode ip6ip6 local 2401:db00::1/64 remote 2401:db00::3/64
71 ip netns exec at_ns0 ip link set dev $DEV_NS up
72 ip netns exec at_ns0 ip addr add dev $DEV_NS 2601:646::1/64
73 ip netns exec at_ns1 \
74 ip link add dev $DEV_NS type ip6tnl mode ip6ip6 local 2401:db00::2/64 remote 2401:db00::3/64
75 ip netns exec at_ns1 ip link set dev $DEV_NS up
76 # same inner IP address in at_ns0 and at_ns1
77 ip netns exec at_ns1 ip addr add dev $DEV_NS 2601:646::1/64
78
79 ip netns exec at_ns2 ip link add dev $DEV type ip6tnl mode ip6ip6 external
80 ip netns exec at_ns2 ip link set dev $DEV up
81 ip netns exec at_ns2 ip addr add dev $DEV 2601:646::2/64
82}
83
84function attach_bpf {
85 DEV=$1
86 SET_TUNNEL=$2
87 GET_TUNNEL=$3
88 ip netns exec at_ns2 tc qdisc add dev $DEV clsact
89 ip netns exec at_ns2 tc filter add dev $DEV egress bpf da obj tcbpf2_kern.o sec $SET_TUNNEL
90 ip netns exec at_ns2 tc filter add dev $DEV ingress bpf da obj tcbpf2_kern.o sec $GET_TUNNEL
91}
92
93function test_ipip {
94 DEV_NS=ipip_std
95 DEV=ipip_bpf
96 config_device
97# tcpdump -nei br0 &
98 cat /sys/kernel/debug/tracing/trace_pipe &
99
100 add_ipip_tunnel
101 attach_bpf $DEV ipip_set_tunnel ipip_get_tunnel
102
103 ip netns exec at_ns0 ping -c 1 10.1.1.200
104 ip netns exec at_ns2 ping -c 1 10.1.1.100
105 ip netns exec at_ns0 iperf -sD -p 5200 > /dev/null
106 ip netns exec at_ns1 iperf -sD -p 5201 > /dev/null
107 sleep 0.2
108 # tcp check _same_ IP over different tunnels
109 ip netns exec at_ns2 iperf -c 10.1.1.100 -n 5k -p 5200
110 ip netns exec at_ns2 iperf -c 10.1.1.100 -n 5k -p 5201
111 cleanup
112}
113
114# IPv4 over IPv6 tunnel
115function test_ipip6 {
116 DEV_NS=ipip_std
117 DEV=ipip_bpf
118 config_device
119# tcpdump -nei br0 &
120 cat /sys/kernel/debug/tracing/trace_pipe &
121
122 add_ipip6_tunnel
123 attach_bpf $DEV ipip6_set_tunnel ipip6_get_tunnel
124
125 ip netns exec at_ns0 ping -c 1 10.1.1.200
126 ip netns exec at_ns2 ping -c 1 10.1.1.100
127 ip netns exec at_ns0 iperf -sD -p 5200 > /dev/null
128 ip netns exec at_ns1 iperf -sD -p 5201 > /dev/null
129 sleep 0.2
130 # tcp check _same_ IP over different tunnels
131 ip netns exec at_ns2 iperf -c 10.1.1.100 -n 5k -p 5200
132 ip netns exec at_ns2 iperf -c 10.1.1.100 -n 5k -p 5201
133 cleanup
134}
135
136# IPv6 over IPv6 tunnel
137function test_ip6ip6 {
138 DEV_NS=ipip_std
139 DEV=ipip_bpf
140 config_device
141# tcpdump -nei br0 &
142 cat /sys/kernel/debug/tracing/trace_pipe &
143
144 add_ip6ip6_tunnel
145 attach_bpf $DEV ip6ip6_set_tunnel ip6ip6_get_tunnel
146
147 ip netns exec at_ns0 ping -6 -c 1 2601:646::2
148 ip netns exec at_ns2 ping -6 -c 1 2601:646::1
149 ip netns exec at_ns0 iperf -6sD -p 5200 > /dev/null
150 ip netns exec at_ns1 iperf -6sD -p 5201 > /dev/null
151 sleep 0.2
152 # tcp check _same_ IP over different tunnels
153 ip netns exec at_ns2 iperf -6c 2601:646::1 -n 5k -p 5200
154 ip netns exec at_ns2 iperf -6c 2601:646::1 -n 5k -p 5201
155 cleanup
156}
157
158function cleanup {
159 set +ex
160 pkill iperf
161 ip netns delete at_ns0
162 ip netns delete at_ns1
163 ip netns delete at_ns2
164 ip link del veth0
165 ip link del veth1
166 ip link del veth2
167 ip link del br0
168 pkill tcpdump
169 pkill cat
170 set -ex
171}
172
173cleanup
174echo "Testing IP tunnels..."
175test_ipip
176test_ipip6
177test_ip6ip6
178echo "*** PASS ***"