Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit c0644e71 authored by David Ahern's avatar David Ahern Committed by David S. Miller
Browse files

selftests: Add ipv6 ping tests to fcnal-test 



Add IPv6 ping tests to fcnal-test.sh. Covers the permutations of directly
connected addresses, routed destinations, VRF and non-VRF, and expected
failures.

Setup includes unreachable routes and fib rules blocking traffic.

Signed-off-by: default avatarDavid Ahern <dsahern@gmail.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent c032dd8c

tools/testing/selftests/net/fcnal-test.sh

+283 −1
Original line number Diff line number Diff line
@@ -711,6 +711,287 @@ ipv4_ping() 
	ipv4_ping_vrf

}



################################################################################

# IPv6



ipv6_ping_novrf()

{

	local a



	# should not have an impact, but make a known state

	set_sysctl net.ipv4.raw_l3mdev_accept=0 2>/dev/null



	#

	# out

	#

	for a in ${NSB_IP6} ${NSB_LO_IP6} ${NSB_LINKIP6}%${NSA_DEV} ${MCAST}%${NSA_DEV}

	do

		log_start

		run_cmd ${ping6} -c1 -w1 ${a}

		log_test_addr ${a} $? 0 "ping out"

	done



	for a in ${NSB_IP6} ${NSB_LO_IP6}

	do

		log_start

		run_cmd ${ping6} -c1 -w1 -I ${NSA_DEV} ${a}

		log_test_addr ${a} $? 0 "ping out, device bind"



		log_start

		run_cmd ${ping6} -c1 -w1 -I ${NSA_LO_IP6} ${a}

		log_test_addr ${a} $? 0 "ping out, loopback address bind"

	done



	#

	# in

	#

	for a in ${NSA_IP6} ${NSA_LO_IP6} ${NSA_LINKIP6}%${NSB_DEV} ${MCAST}%${NSB_DEV}

	do

		log_start

		run_cmd_nsb ${ping6} -c1 -w1 ${a}

		log_test_addr ${a} $? 0 "ping in"

	done



	#

	# local traffic, local address

	#

	for a in ${NSA_IP6} ${NSA_LO_IP6} ::1 ${NSA_LINKIP6}%${NSA_DEV} ${MCAST}%${NSA_DEV}

	do

		log_start

		run_cmd ${ping6} -c1 -w1 ${a}

		log_test_addr ${a} $? 0 "ping local, no bind"

	done



	for a in ${NSA_IP6} ${NSA_LINKIP6}%${NSA_DEV} ${MCAST}%${NSA_DEV}

	do

		log_start

		run_cmd ${ping6} -c1 -w1 -I ${NSA_DEV} ${a}

		log_test_addr ${a} $? 0 "ping local, device bind"

	done



	for a in ${NSA_LO_IP6} ::1

	do

		log_start

		show_hint "Fails since address on loopback is out of device scope"

		run_cmd ${ping6} -c1 -w1 -I ${NSA_DEV} ${a}

		log_test_addr ${a} $? 2 "ping local, device bind"

	done



	#

	# ip rule blocks address

	#

	log_start

	setup_cmd ip -6 rule add pref 32765 from all lookup local

	setup_cmd ip -6 rule del pref 0 from all lookup local

	setup_cmd ip -6 rule add pref 50 to ${NSB_LO_IP6} prohibit

	setup_cmd ip -6 rule add pref 51 from ${NSB_IP6} prohibit



	a=${NSB_LO_IP6}

	run_cmd ${ping6} -c1 -w1 ${a}

	log_test_addr ${a} $? 2 "ping out, blocked by rule"



	log_start

	run_cmd ${ping6} -c1 -w1 -I ${NSA_DEV} ${a}

	log_test_addr ${a} $? 2 "ping out, device bind, blocked by rule"



	a=${NSA_LO_IP6}

	log_start

	show_hint "Response lost due to ip rule"

	run_cmd_nsb ${ping6} -c1 -w1 ${a}

	log_test_addr ${a} $? 1 "ping in, blocked by rule"



	setup_cmd ip -6 rule add pref 0 from all lookup local

	setup_cmd ip -6 rule del pref 32765 from all lookup local

	setup_cmd ip -6 rule del pref 50 to ${NSB_LO_IP6} prohibit

	setup_cmd ip -6 rule del pref 51 from ${NSB_IP6} prohibit



	#

	# route blocks reachability to remote address

	#

	log_start

	setup_cmd ip -6 route del ${NSB_LO_IP6}

	setup_cmd ip -6 route add unreachable ${NSB_LO_IP6} metric 10

	setup_cmd ip -6 route add unreachable ${NSB_IP6} metric 10



	a=${NSB_LO_IP6}

	run_cmd ${ping6} -c1 -w1 ${a}

	log_test_addr ${a} $? 2 "ping out, blocked by route"



	log_start

	run_cmd ${ping6} -c1 -w1 -I ${NSA_DEV} ${a}

	log_test_addr ${a} $? 2 "ping out, device bind, blocked by route"



	a=${NSA_LO_IP6}

	log_start

	show_hint "Response lost due to ip route"

	run_cmd_nsb ${ping6} -c1 -w1 ${a}

	log_test_addr ${a} $? 1 "ping in, blocked by route"





	#

	# remove 'remote' routes; fallback to default

	#

	log_start

	setup_cmd ip -6 ro del unreachable ${NSB_LO_IP6}

	setup_cmd ip -6 ro del unreachable ${NSB_IP6}



	a=${NSB_LO_IP6}

	run_cmd ${ping6} -c1 -w1 ${a}

	log_test_addr ${a} $? 2 "ping out, unreachable route"



	log_start

	run_cmd ${ping6} -c1 -w1 -I ${NSA_DEV} ${a}

	log_test_addr ${a} $? 2 "ping out, device bind, unreachable route"

}



ipv6_ping_vrf()

{

	local a



	# should default on; does not exist on older kernels

	set_sysctl net.ipv4.raw_l3mdev_accept=1 2>/dev/null



	#

	# out

	#

	for a in ${NSB_IP6} ${NSB_LO_IP6}

	do

		log_start

		run_cmd ${ping6} -c1 -w1 -I ${VRF} ${a}

		log_test_addr ${a} $? 0 "ping out, VRF bind"

	done



	for a in ${NSB_LINKIP6}%${VRF} ${MCAST}%${VRF}

	do

		log_start

		show_hint "Fails since VRF device does not support linklocal or multicast"

		run_cmd ${ping6} -c1 -w1 ${a}

		log_test_addr ${a} $? 2 "ping out, VRF bind"

	done



	for a in ${NSB_IP6} ${NSB_LO_IP6} ${NSB_LINKIP6}%${NSA_DEV} ${MCAST}%${NSA_DEV}

	do

		log_start

		run_cmd ${ping6} -c1 -w1 -I ${NSA_DEV} ${a}

		log_test_addr ${a} $? 0 "ping out, device bind"

	done



	for a in ${NSB_IP6} ${NSB_LO_IP6} ${NSB_LINKIP6}%${NSA_DEV}

	do

		log_start

		run_cmd ip vrf exec ${VRF} ${ping6} -c1 -w1 -I ${VRF_IP6} ${a}

		log_test_addr ${a} $? 0 "ping out, vrf device+address bind"

	done



	#

	# in

	#

	for a in ${NSA_IP6} ${VRF_IP6} ${NSA_LINKIP6}%${NSB_DEV} ${MCAST}%${NSB_DEV}

	do

		log_start

		run_cmd_nsb ${ping6} -c1 -w1 ${a}

		log_test_addr ${a} $? 0 "ping in"

	done



	a=${NSA_LO_IP6}

	log_start

	show_hint "Fails since loopback address is out of VRF scope"

	run_cmd_nsb ${ping6} -c1 -w1 ${a}

	log_test_addr ${a} $? 1 "ping in"



	#

	# local traffic, local address

	#

	for a in ${NSA_IP6} ${VRF_IP6} ::1

	do

		log_start

		show_hint "Source address should be ${a}"

		run_cmd ${ping6} -c1 -w1 -I ${VRF} ${a}

		log_test_addr ${a} $? 0 "ping local, VRF bind"

	done



	for a in ${NSA_IP6} ${NSA_LINKIP6}%${NSA_DEV} ${MCAST}%${NSA_DEV}

	do

		log_start

		run_cmd ${ping6} -c1 -w1 -I ${NSA_DEV} ${a}

		log_test_addr ${a} $? 0 "ping local, device bind"

	done



	# LLA to GUA - remove ipv6 global addresses from ns-B

	setup_cmd_nsb ip -6 addr del ${NSB_IP6}/64 dev ${NSB_DEV}

	setup_cmd_nsb ip -6 addr del ${NSB_LO_IP6}/128 dev lo

	setup_cmd_nsb ip -6 ro add ${NSA_IP6}/128 via ${NSA_LINKIP6} dev ${NSB_DEV}



	for a in ${NSA_IP6} ${VRF_IP6}

	do

		log_start

		run_cmd_nsb ${ping6} -c1 -w1 ${NSA_IP6}

		log_test_addr ${a} $? 0 "ping in, LLA to GUA"

	done



	setup_cmd_nsb ip -6 ro del ${NSA_IP6}/128 via ${NSA_LINKIP6} dev ${NSB_DEV}

	setup_cmd_nsb ip -6 addr add ${NSB_IP6}/64 dev ${NSB_DEV}

	setup_cmd_nsb ip -6 addr add ${NSB_LO_IP6}/128 dev lo



	#

	# ip rule blocks address

	#

	log_start

	setup_cmd ip -6 rule add pref 50 to ${NSB_LO_IP6} prohibit

	setup_cmd ip -6 rule add pref 51 from ${NSB_IP6} prohibit



	a=${NSB_LO_IP6}

	run_cmd ${ping6} -c1 -w1 ${a}

	log_test_addr ${a} $? 2 "ping out, blocked by rule"



	log_start

	run_cmd ${ping6} -c1 -w1 -I ${NSA_DEV} ${a}

	log_test_addr ${a} $? 2 "ping out, device bind, blocked by rule"



	a=${NSA_LO_IP6}

	log_start

	show_hint "Response lost due to ip rule"

	run_cmd_nsb ${ping6} -c1 -w1 ${a}

	log_test_addr ${a} $? 1 "ping in, blocked by rule"



	log_start

	setup_cmd ip -6 rule del pref 50 to ${NSB_LO_IP6} prohibit

	setup_cmd ip -6 rule del pref 51 from ${NSB_IP6} prohibit



	#

	# remove 'remote' routes; fallback to default

	#

	log_start

	setup_cmd ip -6 ro del ${NSB_LO_IP6} vrf ${VRF}



	a=${NSB_LO_IP6}

	run_cmd ${ping6} -c1 -w1 ${a}

	log_test_addr ${a} $? 2 "ping out, unreachable route"



	log_start

	run_cmd ${ping6} -c1 -w1 -I ${NSA_DEV} ${a}

	log_test_addr ${a} $? 2 "ping out, device bind, unreachable route"



	ip -netns ${NSB} -6 ro del ${NSA_LO_IP6}

	a=${NSA_LO_IP6}

	log_start

	run_cmd_nsb ${ping6} -c1 -w1 ${a}

	log_test_addr ${a} $? 2 "ping in, unreachable route"

}



ipv6_ping()

{

	log_section "IPv6 ping"



	log_subsection "No VRF"

	setup

	ipv6_ping_novrf



	log_subsection "With VRF"

	setup "yes"

	ipv6_ping_vrf

}



################################################################################

# usage
@@ -732,7 +1013,7 @@ EOF 
# main



TESTS_IPV4="ipv4_ping"

TESTS_IPV6=""

TESTS_IPV6="ipv6_ping"

PAUSE_ON_FAIL=no

PAUSE=no
@@ -771,6 +1052,7 @@ for t in $TESTS 
do

	case $t in

	ipv4_ping|ping)  ipv4_ping;;

	ipv6_ping|ping6) ipv6_ping;;



	# setup namespaces and config, but do not run any tests

	setup)		 setup; exit 0;;