kernel-fxtec-pro1x/tools/testing/selftests/net/forwarding
Hangbin Liu cf99e2442b selftests: forwarding: use proto icmp for {gretap, ip6gretap}_mac testing
[ Upstream commit e8023b030ce1748930e2dc76353a262fe47d4745 ]

For tc ip_proto filter, when we extract the flow via __skb_flow_dissect()
without flag FLOW_DISSECTOR_F_STOP_AT_ENCAP, we will continue extract to
the inner proto.

So for GRE + ICMP messages, we should not track GRE proto, but inner ICMP
proto.

For test mirror_gre.sh, it may make user confused if we capture ICMP
message on $h3(since the flow is GRE message). So I move the capture
dev to h3-gt{4,6}, and only capture ICMP message.

Before the fix:
]# ./mirror_gre.sh
TEST: ingress mirror to gretap (skip_hw)                            [ OK ]
TEST: egress mirror to gretap (skip_hw)                             [ OK ]
TEST: ingress mirror to ip6gretap (skip_hw)                         [ OK ]
TEST: egress mirror to ip6gretap (skip_hw)                          [ OK ]
TEST: ingress mirror to gretap: envelope MAC (skip_hw)              [FAIL]
 Expected to capture 10 packets, got 0.
TEST: egress mirror to gretap: envelope MAC (skip_hw)               [FAIL]
 Expected to capture 10 packets, got 0.
TEST: ingress mirror to ip6gretap: envelope MAC (skip_hw)           [FAIL]
 Expected to capture 10 packets, got 0.
TEST: egress mirror to ip6gretap: envelope MAC (skip_hw)            [FAIL]
 Expected to capture 10 packets, got 0.
TEST: two simultaneously configured mirrors (skip_hw)               [ OK ]
WARN: Could not test offloaded functionality

After fix:
]# ./mirror_gre.sh
TEST: ingress mirror to gretap (skip_hw)                            [ OK ]
TEST: egress mirror to gretap (skip_hw)                             [ OK ]
TEST: ingress mirror to ip6gretap (skip_hw)                         [ OK ]
TEST: egress mirror to ip6gretap (skip_hw)                          [ OK ]
TEST: ingress mirror to gretap: envelope MAC (skip_hw)              [ OK ]
TEST: egress mirror to gretap: envelope MAC (skip_hw)               [ OK ]
TEST: ingress mirror to ip6gretap: envelope MAC (skip_hw)           [ OK ]
TEST: egress mirror to ip6gretap: envelope MAC (skip_hw)            [ OK ]
TEST: two simultaneously configured mirrors (skip_hw)               [ OK ]
WARN: Could not test offloaded functionality

Fixes: ba8d39871a ("selftests: forwarding: Add test for mirror to gretap")
Signed-off-by: Hangbin Liu <liuhangbin@gmail.com>
Reviewed-by: Petr Machata <pmachata@gmail.com>
Tested-by: Petr Machata <pmachata@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-03-11 14:14:51 +01:00
..
.gitignore
bridge_port_isolation.sh selftests: forwarding: test for bridge port isolation 2018-07-04 21:40:02 +09:00
bridge_vlan_aware.sh selftests: forwarding: Add a test case for externally learned FDB entries 2019-02-27 10:08:57 +01:00
bridge_vlan_unaware.sh selftests: forwarding: Allow running specific tests 2018-05-03 12:54:31 -04:00
config
devlink_lib.sh selftests: forwarding: Add devlink_lib.sh 2018-06-30 22:06:15 +09:00
forwarding.config.sample selftests: forwarding: Allow creation of interfaces without a config file 2018-03-11 22:44:24 -04:00
gre_multipath.sh selftests: forwarding: gre_multipath: Fix flower filters 2019-08-29 08:28:30 +02:00
lib.sh selftests: forwarding: Have lldpad_app_wait_set() wait for unknown, too 2019-11-24 08:21:02 +01:00
mirror_gre.sh selftests: forwarding: use proto icmp for {gretap, ip6gretap}_mac testing 2020-03-11 14:14:51 +01:00
mirror_gre_bound.sh selftests: forwarding: Allow running specific tests 2018-05-03 12:54:31 -04:00
mirror_gre_bridge_1d.sh selftests: forwarding: Test mirror-to-gretap w/ UL 802.1d 2018-07-04 14:18:45 +09:00
mirror_gre_bridge_1d_vlan.sh selftests: forwarding: Tweak tc filters for mirror-to-gretap tests 2018-06-30 20:34:09 +09:00
mirror_gre_bridge_1q.sh selftests: forwarding: Test mirror-to-gretap w/ UL 802.1q 2018-07-04 14:18:45 +09:00
mirror_gre_bridge_1q_lag.sh selftests: forwarding: Test mirror-to-gretap w/ UL team 2018-07-30 09:47:21 -07:00
mirror_gre_changes.sh selftests: forwarding: mirror_gre_changes: Fix waiting for neighbor 2018-06-30 20:34:09 +09:00
mirror_gre_flower.sh selftests: forwarding: Test removal of mirroring 2018-05-24 22:14:36 -04:00
mirror_gre_lag_lacp.sh selftests: forwarding: Test mirror-to-gretap w/ UL team LACP 2018-07-30 09:47:21 -07:00
mirror_gre_lib.sh selftests: forwarding: Allow importing dependent libraries 2018-07-07 20:29:34 +09:00
mirror_gre_neigh.sh selftests: forwarding: Allow running specific tests 2018-05-03 12:54:31 -04:00
mirror_gre_nh.sh selftests: forwarding: mirror_gre_nh: Unset rp_filter on host VRF 2018-07-11 23:59:27 -07:00
mirror_gre_topo_lib.sh selftests: forwarding: Allow importing dependent libraries 2018-07-07 20:29:34 +09:00
mirror_gre_vlan.sh selftests: forwarding: Test mirror-to-gre w/ UL VLAN 2018-05-24 22:26:20 -04:00
mirror_gre_vlan_bridge_1q.sh selftests: forwarding: Introduce $ARPING 2018-07-30 09:47:21 -07:00
mirror_lib.sh selftests: forwarding: mirror_lib: Tighten up VLAN capture 2018-07-10 22:58:10 -07:00
mirror_topo_lib.sh selftests: forwarding: Add $h3's clsact to mirror_topo_lib.sh 2018-05-24 22:26:19 -04:00
mirror_vlan.sh selftests: forwarding: mirror_vlan: Change test description 2018-06-04 10:08:45 -04:00
README selftests: forwarding: README: Require diagrams 2018-06-27 10:42:13 +09:00
router.sh selftests: forwarding: Allow running specific tests 2018-05-03 12:54:31 -04:00
router_bridge.sh selftests: forwarding: Test routed bridge interface 2018-06-26 18:05:22 +09:00
router_bridge_vlan.sh selftests: forwarding: Delete IPv6 address at the end 2019-12-31 16:34:40 +01:00
router_broadcast.sh selftests: add a selftest for directed broadcast forwarding 2018-07-29 12:37:06 -07:00
router_multipath.sh selftests: forwarding: Move multipath_eval() to lib.sh 2018-06-27 10:42:12 +09:00
tc_actions.sh selftests: forwarding: Allow running specific tests 2018-05-03 12:54:31 -04:00
tc_chains.sh selftests: forwarding: add tests for TC chain get and dump operations 2018-07-26 09:35:32 -07:00
tc_common.sh selftests: forwarding: Only check tc version for tc tests 2018-03-01 21:19:02 -05:00
tc_flower.sh selftests: forwarding: Allow running specific tests 2018-05-03 12:54:31 -04:00
tc_shblocks.sh selftests: forwarding: move shblock tc support check to a separate helper 2018-07-23 20:44:13 -07:00

Motivation
==========

One of the nice things about network namespaces is that they allow one
to easily create and test complex environments.

Unfortunately, these namespaces can not be used with actual switching
ASICs, as their ports can not be migrated to other network namespaces
(NETIF_F_NETNS_LOCAL) and most of them probably do not support the
L1-separation provided by namespaces.

However, a similar kind of flexibility can be achieved by using VRFs and
by looping the switch ports together. For example:

                             br0
                              +
               vrf-h1         |           vrf-h2
                 +        +---+----+        +
                 |        |        |        |
    192.0.2.1/24 +        +        +        + 192.0.2.2/24
               swp1     swp2     swp3     swp4
                 +        +        +        +
                 |        |        |        |
                 +--------+        +--------+

The VRFs act as lightweight namespaces representing hosts connected to
the switch.

This approach for testing switch ASICs has several advantages over the
traditional method that requires multiple physical machines, to name a
few:

1. Only the device under test (DUT) is being tested without noise from
other system.

2. Ability to easily provision complex topologies. Testing bridging
between 4-ports LAGs or 8-way ECMP requires many physical links that are
not always available. With the VRF-based approach one merely needs to
loopback more ports.

These tests are written with switch ASICs in mind, but they can be run
on any Linux box using veth pairs to emulate physical loopbacks.

Guidelines for Writing Tests
============================

o Where possible, reuse an existing topology for different tests instead
  of recreating the same topology.
o Tests that use anything but the most trivial topologies should include
  an ASCII art showing the topology.
o Where possible, IPv6 and IPv4 addresses shall conform to RFC 3849 and
  RFC 5737, respectively.
o Where possible, tests shall be written so that they can be reused by
  multiple topologies and added to lib.sh.
o Checks shall be added to lib.sh for any external dependencies.
o Code shall be checked using ShellCheck [1] prior to submission.

1. https://www.shellcheck.net/