#!/bin/bash
# SPDX-License-Identifier: GPL-2.0
# +-----------------------+ +----------------------+
# | H1 (vrf) | | H2 (vrf) |
# | + $h1 | | $h2 + |
# | | 192.0.2.1/28 | | 192.0.2.2/28 | |
# | | 2001:db8:1::1/64 | | 2001:db8:1::2/64 | |
# +----|------------------+ +------------------|---+
# | |
# +----|-------------------------------------------------------------------|---+
# | SW | | |
# | +-|-------------------------------------------------------------------|-+ |
# | | + $swp1 BR $swp2 + | |
# | +-----------------------------------------------------------------------+ |
# +----------------------------------------------------------------------------+
ALL_TESTS="
test_l2_miss_unicast
test_l2_miss_multicast
test_l2_miss_ll_multicast
test_l2_miss_broadcast
"
NUM_NETIFS=4
source lib.sh
source tc_common.sh
h1_create()
{
simple_if_init $h1 192.0.2.1/28 2001:db8:1::1/64
}
h1_destroy()
{
simple_if_fini $h1 192.0.2.1/28 2001:db8:1::1/64
}
h2_create()
{
simple_if_init $h2 192.0.2.2/28 2001:db8:1::2/64
}
h2_destroy()
{
simple_if_fini $h2 192.0.2.2/28 2001:db8:1::2/64
}
switch_create()
{
ip link add name br1 up type bridge
ip link set dev $swp1 master br1
ip link set dev $swp1 up
ip link set dev $swp2 master br1
ip link set dev $swp2 up
tc qdisc add dev $swp2 clsact
}
switch_destroy()
{
tc qdisc del dev $swp2 clsact
ip link set dev $swp2 down
ip link set dev $swp2 nomaster
ip link set dev $swp1 down
ip link set dev $swp1 nomaster
ip link del dev br1
}
test_l2_miss_unicast()
{
local dmac=00:01:02:03:04:05
local dip=192.0.2.2
local sip=192.0.2.1
RET=0
# Unknown unicast.
tc filter add dev $swp2 egress protocol ipv4 handle 101 pref 1 \
flower indev $swp1 l2_miss 1 dst_mac $dmac src_ip $sip \
dst_ip $dip action pass
# Known unicast.
tc filter add dev $swp2 egress protocol ipv4 handle 102 pref 1 \
flower indev $swp1 l2_miss 0 dst_mac $dmac src_ip $sip \
dst_ip $dip action pass
# Before adding FDB entry.
$MZ $h1 -a own -b $dmac -t ip -A $sip -B $dip -c 1 -p 100 -q
tc_check_packets "dev $swp2 egress" 101 1
check_err $? "Unknown unicast filter was not hit before adding FDB entry"
tc_check_packets "dev $swp2 egress" 102 0
check_err $? "Known unicast filter was hit before adding FDB entry"
# Adding FDB entry.
bridge fdb replace $dmac dev $swp2 master static
$MZ $h1 -a own -b $dmac -t ip -A $sip -B $dip -c 1 -p 100 -q
tc_check_packets "dev $swp2 egress" 101 1
check_err $? "Unknown unicast filter was hit after adding FDB entry"
tc_check_packets "dev $swp2 egress" 102 1
check_err $? "Known unicast filter was not hit after adding FDB entry"
# Deleting FDB entry.
bridge fdb del $dmac dev $swp2 master static
$MZ $h1 -a own -b $dmac -t ip -A $sip -B $dip -c 1 -p 100 -q
tc_check_packets "dev $swp2 egress" 101 2
check_err $? "Unknown unicast filter was not hit after deleting FDB entry"
tc_check_packets "dev $swp2 egress" 102 1
check_err $? "Known unicast filter was hit after deleting FDB entry"
tc filter del dev $swp2 egress protocol ipv4 pref 1 handle 102 flower
tc filter del dev $swp2 egress protocol ipv4 pref 1 handle 101 flower
log_test "L2 miss - Unicast"
}
test_l2_miss_multicast_common()
{
local proto=$1; shift
local sip=$1; shift
local dip=$1; shift
local dmac=$1; shift
local mode=$1; shift
local name=$1; shift
RET=0
# Unregistered multicast.
tc filter add dev $swp2 egress protocol $proto handle 101 pref 1 \
flower indev $swp1 l2_miss 1 src_ip $sip dst_ip $dip \
action pass
# Registered multicast.
tc filter add dev $swp2 egress protocol $proto handle 102 pref 1 \
flower indev $swp1 l2_miss 0 src_ip $sip dst_ip $dip \
action pass
# Before adding MDB entry.
$MZ $mode $h1 -a own -b $dmac -t ip -A $sip -B $dip -c 1 -p 100 -q
tc_check_packets "dev $swp2 egress" 101 1
check_err $? "Unregistered multicast filter was not hit before adding MDB entry"
tc_check_packets "dev $swp2 egress" 102 0
check_err $? "Registered multicast filter was hit before adding MDB entry"
# Adding MDB entry.
bridge mdb replace dev br1 port $swp2 grp $dip permanent
$MZ $mode $h1 -a own -b $dmac -t ip -A $sip -B $dip -c 1 -p 100 -q
tc_check_packets "dev $swp2 egress" 101 1
check_err $? "Unregistered multicast filter was hit after adding MDB entry"
tc_check_packets "dev $swp2 egress" 102 1
check_err $? "Registered multicast filter was not hit after adding MDB entry"
# Deleting MDB entry.
bridge mdb del dev br1 port $swp2 grp $dip
$MZ $mode $h1 -a own -b $dmac -t ip -A $sip -B $dip -c 1 -p 100 -q
tc_check_packets "dev $swp2 egress" 101 2
check_err $? "Unregistered multicast filter was not hit after deleting MDB entry"
tc_check_packets "dev $swp2 egress" 102 1
check_err $? "Registered multicast filter was hit after deleting MDB entry"
tc filter del dev $swp2 egress protocol $proto pref 1 handle 102 flower
tc filter del dev $swp2 egress protocol $proto pref 1 handle 101 flower
log_test "L2 miss - Multicast ($name)"
}
test_l2_miss_multicast_ipv4()
{
local proto="ipv4"
local sip=192.0.2.1
local dip=239.1.1.1
local dmac=01:00:5e:01:01:01
local mode="-4"
local name="IPv4"
test_l2_miss_multicast_common $proto $sip $dip $dmac $mode $name
}
test_l2_miss_multicast_ipv6()
{
local proto="ipv6"
local sip=2001:db8:1::1
local dip=ff0e::1
local dmac=33:33:00:00:00:01
local mode="-6"
local name="IPv6"
test_l2_miss_multicast_common $proto $sip $dip $dmac $mode $name
}
test_l2_miss_multicast()
{
# Configure $swp2 as a multicast router port so that it will forward
# both registered and unregistered multicast traffic.
bridge link set dev $swp2 mcast_router 2
# Forwarding according to MDB entries only takes place when the bridge
# detects that there is a valid querier in the network. Set the bridge
# as the querier and assign it a valid IPv6 link-local address to be
# used as the source address for MLD queries.
ip link set dev br1 type bridge mcast_querier 1
ip -6 address add fe80::1/64 nodad dev br1
# Wait the default Query Response Interval (10 seconds) for the bridge
# to determine that there are no other queriers in the network.
sleep 10
test_l2_miss_multicast_ipv4
test_l2_miss_multicast_ipv6
ip -6 address del fe80::1/64 dev br1
ip link set dev br1 type bridge mcast_querier 0
bridge link set dev $swp2 mcast_router 1
}
test_l2_miss_multicast_common2()
{
local name=$1; shift
local dmac=$1; shift
local dip=224.0.0.1
local sip=192.0.2.1
}
test_l2_miss_ll_multicast_common()
{
local proto=$1; shift
local dmac=$1; shift
local sip=$1; shift
local dip=$1; shift
local mode=$1; shift
local name=$1; shift
RET=0
tc filter add dev $swp2 egress protocol $proto handle 101 pref 1 \
flower indev $swp1 l2_miss 1 dst_mac $dmac src_ip $sip \
dst_ip $dip action pass
$MZ $mode $h1 -a own -b $dmac -t ip -A $sip -B $dip -c 1 -p 100 -q
tc_check_packets "dev $swp2 egress" 101 1
check_err $? "Filter was not hit"
tc filter del dev $swp2 egress protocol $proto pref 1 handle 101 flower
log_test "L2 miss - Link-local multicast ($name)"
}
test_l2_miss_ll_multicast_ipv4()
{
local proto=ipv4
local dmac=01:00:5e:00:00:01
local sip=192.0.2.1
local dip=224.0.0.1
local mode="-4"
local name="IPv4"
test_l2_miss_ll_multicast_common $proto $dmac $sip $dip $mode $name
}
test_l2_miss_ll_multicast_ipv6()
{
local proto=ipv6
local dmac=33:33:00:00:00:01
local sip=2001:db8:1::1
local dip=ff02::1
local mode="-6"
local name="IPv6"
test_l2_miss_ll_multicast_common $proto $dmac $sip $dip $mode $name
}
test_l2_miss_ll_multicast()
{
test_l2_miss_ll_multicast_ipv4
test_l2_miss_ll_multicast_ipv6
}
test_l2_miss_broadcast()
{
local dmac=ff:ff:ff:ff:ff:ff
local smac=00:01:02:03:04:05
RET=0
tc filter add dev $swp2 egress protocol all handle 101 pref 1 \
flower l2_miss 1 dst_mac $dmac src_mac $smac \
action pass
tc filter add dev $swp2 egress protocol all handle 102 pref 1 \
flower l2_miss 0 dst_mac $dmac src_mac $smac \
action pass
$MZ $h1 -a $smac -b $dmac -c 1 -p 100 -q
tc_check_packets "dev $swp2 egress" 101 0
check_err $? "L2 miss filter was hit when should not"
tc_check_packets "dev $swp2 egress" 102 1
check_err $? "L2 no miss filter was not hit when should"
tc filter del dev $swp2 egress protocol all pref 1 handle 102 flower
tc filter del dev $swp2 egress protocol all pref 1 handle 101 flower
log_test "L2 miss - Broadcast"
}
setup_prepare()
{
h1=${NETIFS[p1]}
swp1=${NETIFS[p2]}
swp2=${NETIFS[p3]}
h2=${NETIFS[p4]}
vrf_prepare
h1_create
h2_create
switch_create
}
cleanup()
{
pre_cleanup
switch_destroy
h2_destroy
h1_destroy
vrf_cleanup
}
trap cleanup EXIT
setup_prepare
setup_wait
tests_run
exit $EXIT_STATUS