forked from Minki/linux
selftests: Add ipv6 ping tests to fcnal-test
Add IPv6 ping tests to fcnal-test.sh. Covers the permutations of directly connected addresses, routed destinations, VRF and non-VRF, and expected failures. Setup includes unreachable routes and fib rules blocking traffic. Signed-off-by: David Ahern <dsahern@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
David Ahern
David S. Miller
parent
c032dd8cc7
commit
c0644e71df
@ -711,6 +711,287 @@ ipv4_ping()
|
||||
ipv4_ping_vrf
|
||||
}
|
||||
|
||||
################################################################################
|
||||
# IPv6
|
||||
|
||||
ipv6_ping_novrf()
|
||||
{
|
||||
local a
|
||||
|
||||
# should not have an impact, but make a known state
|
||||
set_sysctl net.ipv4.raw_l3mdev_accept=0 2>/dev/null
|
||||
|
||||
#
|
||||
# out
|
||||
#
|
||||
for a in ${NSB_IP6} ${NSB_LO_IP6} ${NSB_LINKIP6}%${NSA_DEV} ${MCAST}%${NSA_DEV}
|
||||
do
|
||||
log_start
|
||||
run_cmd ${ping6} -c1 -w1 ${a}
|
||||
log_test_addr ${a} $? 0 "ping out"
|
||||
done
|
||||
|
||||
for a in ${NSB_IP6} ${NSB_LO_IP6}
|
||||
do
|
||||
log_start
|
||||
run_cmd ${ping6} -c1 -w1 -I ${NSA_DEV} ${a}
|
||||
log_test_addr ${a} $? 0 "ping out, device bind"
|
||||
|
||||
log_start
|
||||
run_cmd ${ping6} -c1 -w1 -I ${NSA_LO_IP6} ${a}
|
||||
log_test_addr ${a} $? 0 "ping out, loopback address bind"
|
||||
done
|
||||
|
||||
#
|
||||
# in
|
||||
#
|
||||
for a in ${NSA_IP6} ${NSA_LO_IP6} ${NSA_LINKIP6}%${NSB_DEV} ${MCAST}%${NSB_DEV}
|
||||
do
|
||||
log_start
|
||||
run_cmd_nsb ${ping6} -c1 -w1 ${a}
|
||||
log_test_addr ${a} $? 0 "ping in"
|
||||
done
|
||||
|
||||
#
|
||||
# local traffic, local address
|
||||
#
|
||||
for a in ${NSA_IP6} ${NSA_LO_IP6} ::1 ${NSA_LINKIP6}%${NSA_DEV} ${MCAST}%${NSA_DEV}
|
||||
do
|
||||
log_start
|
||||
run_cmd ${ping6} -c1 -w1 ${a}
|
||||
log_test_addr ${a} $? 0 "ping local, no bind"
|
||||
done
|
||||
|
||||
for a in ${NSA_IP6} ${NSA_LINKIP6}%${NSA_DEV} ${MCAST}%${NSA_DEV}
|
||||
do
|
||||
log_start
|
||||
run_cmd ${ping6} -c1 -w1 -I ${NSA_DEV} ${a}
|
||||
log_test_addr ${a} $? 0 "ping local, device bind"
|
||||
done
|
||||
|
||||
for a in ${NSA_LO_IP6} ::1
|
||||
do
|
||||
log_start
|
||||
show_hint "Fails since address on loopback is out of device scope"
|
||||
run_cmd ${ping6} -c1 -w1 -I ${NSA_DEV} ${a}
|
||||
log_test_addr ${a} $? 2 "ping local, device bind"
|
||||
done
|
||||
|
||||
#
|
||||
# ip rule blocks address
|
||||
#
|
||||
log_start
|
||||
setup_cmd ip -6 rule add pref 32765 from all lookup local
|
||||
setup_cmd ip -6 rule del pref 0 from all lookup local
|
||||
setup_cmd ip -6 rule add pref 50 to ${NSB_LO_IP6} prohibit
|
||||
setup_cmd ip -6 rule add pref 51 from ${NSB_IP6} prohibit
|
||||
|
||||
a=${NSB_LO_IP6}
|
||||
run_cmd ${ping6} -c1 -w1 ${a}
|
||||
log_test_addr ${a} $? 2 "ping out, blocked by rule"
|
||||
|
||||
log_start
|
||||
run_cmd ${ping6} -c1 -w1 -I ${NSA_DEV} ${a}
|
||||
log_test_addr ${a} $? 2 "ping out, device bind, blocked by rule"
|
||||
|
||||
a=${NSA_LO_IP6}
|
||||
log_start
|
||||
show_hint "Response lost due to ip rule"
|
||||
run_cmd_nsb ${ping6} -c1 -w1 ${a}
|
||||
log_test_addr ${a} $? 1 "ping in, blocked by rule"
|
||||
|
||||
setup_cmd ip -6 rule add pref 0 from all lookup local
|
||||
setup_cmd ip -6 rule del pref 32765 from all lookup local
|
||||
setup_cmd ip -6 rule del pref 50 to ${NSB_LO_IP6} prohibit
|
||||
setup_cmd ip -6 rule del pref 51 from ${NSB_IP6} prohibit
|
||||
|
||||
#
|
||||
# route blocks reachability to remote address
|
||||
#
|
||||
log_start
|
||||
setup_cmd ip -6 route del ${NSB_LO_IP6}
|
||||
setup_cmd ip -6 route add unreachable ${NSB_LO_IP6} metric 10
|
||||
setup_cmd ip -6 route add unreachable ${NSB_IP6} metric 10
|
||||
|
||||
a=${NSB_LO_IP6}
|
||||
run_cmd ${ping6} -c1 -w1 ${a}
|
||||
log_test_addr ${a} $? 2 "ping out, blocked by route"
|
||||
|
||||
log_start
|
||||
run_cmd ${ping6} -c1 -w1 -I ${NSA_DEV} ${a}
|
||||
log_test_addr ${a} $? 2 "ping out, device bind, blocked by route"
|
||||
|
||||
a=${NSA_LO_IP6}
|
||||
log_start
|
||||
show_hint "Response lost due to ip route"
|
||||
run_cmd_nsb ${ping6} -c1 -w1 ${a}
|
||||
log_test_addr ${a} $? 1 "ping in, blocked by route"
|
||||
|
||||
|
||||
#
|
||||
# remove 'remote' routes; fallback to default
|
||||
#
|
||||
log_start
|
||||
setup_cmd ip -6 ro del unreachable ${NSB_LO_IP6}
|
||||
setup_cmd ip -6 ro del unreachable ${NSB_IP6}
|
||||
|
||||
a=${NSB_LO_IP6}
|
||||
run_cmd ${ping6} -c1 -w1 ${a}
|
||||
log_test_addr ${a} $? 2 "ping out, unreachable route"
|
||||
|
||||
log_start
|
||||
run_cmd ${ping6} -c1 -w1 -I ${NSA_DEV} ${a}
|
||||
log_test_addr ${a} $? 2 "ping out, device bind, unreachable route"
|
||||
}
|
||||
|
||||
ipv6_ping_vrf()
|
||||
{
|
||||
local a
|
||||
|
||||
# should default on; does not exist on older kernels
|
||||
set_sysctl net.ipv4.raw_l3mdev_accept=1 2>/dev/null
|
||||
|
||||
#
|
||||
# out
|
||||
#
|
||||
for a in ${NSB_IP6} ${NSB_LO_IP6}
|
||||
do
|
||||
log_start
|
||||
run_cmd ${ping6} -c1 -w1 -I ${VRF} ${a}
|
||||
log_test_addr ${a} $? 0 "ping out, VRF bind"
|
||||
done
|
||||
|
||||
for a in ${NSB_LINKIP6}%${VRF} ${MCAST}%${VRF}
|
||||
do
|
||||
log_start
|
||||
show_hint "Fails since VRF device does not support linklocal or multicast"
|
||||
run_cmd ${ping6} -c1 -w1 ${a}
|
||||
log_test_addr ${a} $? 2 "ping out, VRF bind"
|
||||
done
|
||||
|
||||
for a in ${NSB_IP6} ${NSB_LO_IP6} ${NSB_LINKIP6}%${NSA_DEV} ${MCAST}%${NSA_DEV}
|
||||
do
|
||||
log_start
|
||||
run_cmd ${ping6} -c1 -w1 -I ${NSA_DEV} ${a}
|
||||
log_test_addr ${a} $? 0 "ping out, device bind"
|
||||
done
|
||||
|
||||
for a in ${NSB_IP6} ${NSB_LO_IP6} ${NSB_LINKIP6}%${NSA_DEV}
|
||||
do
|
||||
log_start
|
||||
run_cmd ip vrf exec ${VRF} ${ping6} -c1 -w1 -I ${VRF_IP6} ${a}
|
||||
log_test_addr ${a} $? 0 "ping out, vrf device+address bind"
|
||||
done
|
||||
|
||||
#
|
||||
# in
|
||||
#
|
||||
for a in ${NSA_IP6} ${VRF_IP6} ${NSA_LINKIP6}%${NSB_DEV} ${MCAST}%${NSB_DEV}
|
||||
do
|
||||
log_start
|
||||
run_cmd_nsb ${ping6} -c1 -w1 ${a}
|
||||
log_test_addr ${a} $? 0 "ping in"
|
||||
done
|
||||
|
||||
a=${NSA_LO_IP6}
|
||||
log_start
|
||||
show_hint "Fails since loopback address is out of VRF scope"
|
||||
run_cmd_nsb ${ping6} -c1 -w1 ${a}
|
||||
log_test_addr ${a} $? 1 "ping in"
|
||||
|
||||
#
|
||||
# local traffic, local address
|
||||
#
|
||||
for a in ${NSA_IP6} ${VRF_IP6} ::1
|
||||
do
|
||||
log_start
|
||||
show_hint "Source address should be ${a}"
|
||||
run_cmd ${ping6} -c1 -w1 -I ${VRF} ${a}
|
||||
log_test_addr ${a} $? 0 "ping local, VRF bind"
|
||||
done
|
||||
|
||||
for a in ${NSA_IP6} ${NSA_LINKIP6}%${NSA_DEV} ${MCAST}%${NSA_DEV}
|
||||
do
|
||||
log_start
|
||||
run_cmd ${ping6} -c1 -w1 -I ${NSA_DEV} ${a}
|
||||
log_test_addr ${a} $? 0 "ping local, device bind"
|
||||
done
|
||||
|
||||
# LLA to GUA - remove ipv6 global addresses from ns-B
|
||||
setup_cmd_nsb ip -6 addr del ${NSB_IP6}/64 dev ${NSB_DEV}
|
||||
setup_cmd_nsb ip -6 addr del ${NSB_LO_IP6}/128 dev lo
|
||||
setup_cmd_nsb ip -6 ro add ${NSA_IP6}/128 via ${NSA_LINKIP6} dev ${NSB_DEV}
|
||||
|
||||
for a in ${NSA_IP6} ${VRF_IP6}
|
||||
do
|
||||
log_start
|
||||
run_cmd_nsb ${ping6} -c1 -w1 ${NSA_IP6}
|
||||
log_test_addr ${a} $? 0 "ping in, LLA to GUA"
|
||||
done
|
||||
|
||||
setup_cmd_nsb ip -6 ro del ${NSA_IP6}/128 via ${NSA_LINKIP6} dev ${NSB_DEV}
|
||||
setup_cmd_nsb ip -6 addr add ${NSB_IP6}/64 dev ${NSB_DEV}
|
||||
setup_cmd_nsb ip -6 addr add ${NSB_LO_IP6}/128 dev lo
|
||||
|
||||
#
|
||||
# ip rule blocks address
|
||||
#
|
||||
log_start
|
||||
setup_cmd ip -6 rule add pref 50 to ${NSB_LO_IP6} prohibit
|
||||
setup_cmd ip -6 rule add pref 51 from ${NSB_IP6} prohibit
|
||||
|
||||
a=${NSB_LO_IP6}
|
||||
run_cmd ${ping6} -c1 -w1 ${a}
|
||||
log_test_addr ${a} $? 2 "ping out, blocked by rule"
|
||||
|
||||
log_start
|
||||
run_cmd ${ping6} -c1 -w1 -I ${NSA_DEV} ${a}
|
||||
log_test_addr ${a} $? 2 "ping out, device bind, blocked by rule"
|
||||
|
||||
a=${NSA_LO_IP6}
|
||||
log_start
|
||||
show_hint "Response lost due to ip rule"
|
||||
run_cmd_nsb ${ping6} -c1 -w1 ${a}
|
||||
log_test_addr ${a} $? 1 "ping in, blocked by rule"
|
||||
|
||||
log_start
|
||||
setup_cmd ip -6 rule del pref 50 to ${NSB_LO_IP6} prohibit
|
||||
setup_cmd ip -6 rule del pref 51 from ${NSB_IP6} prohibit
|
||||
|
||||
#
|
||||
# remove 'remote' routes; fallback to default
|
||||
#
|
||||
log_start
|
||||
setup_cmd ip -6 ro del ${NSB_LO_IP6} vrf ${VRF}
|
||||
|
||||
a=${NSB_LO_IP6}
|
||||
run_cmd ${ping6} -c1 -w1 ${a}
|
||||
log_test_addr ${a} $? 2 "ping out, unreachable route"
|
||||
|
||||
log_start
|
||||
run_cmd ${ping6} -c1 -w1 -I ${NSA_DEV} ${a}
|
||||
log_test_addr ${a} $? 2 "ping out, device bind, unreachable route"
|
||||
|
||||
ip -netns ${NSB} -6 ro del ${NSA_LO_IP6}
|
||||
a=${NSA_LO_IP6}
|
||||
log_start
|
||||
run_cmd_nsb ${ping6} -c1 -w1 ${a}
|
||||
log_test_addr ${a} $? 2 "ping in, unreachable route"
|
||||
}
|
||||
|
||||
ipv6_ping()
|
||||
{
|
||||
log_section "IPv6 ping"
|
||||
|
||||
log_subsection "No VRF"
|
||||
setup
|
||||
ipv6_ping_novrf
|
||||
|
||||
log_subsection "With VRF"
|
||||
setup "yes"
|
||||
ipv6_ping_vrf
|
||||
}
|
||||
|
||||
################################################################################
|
||||
# usage
|
||||
|
||||
@ -732,7 +1013,7 @@ EOF
|
||||
# main
|
||||
|
||||
TESTS_IPV4="ipv4_ping"
|
||||
TESTS_IPV6=""
|
||||
TESTS_IPV6="ipv6_ping"
|
||||
PAUSE_ON_FAIL=no
|
||||
PAUSE=no
|
||||
|
||||
@ -771,6 +1052,7 @@ for t in $TESTS
|
||||
do
|
||||
case $t in
|
||||
ipv4_ping|ping) ipv4_ping;;
|
||||
ipv6_ping|ping6) ipv6_ping;;
|
||||
|
||||
# setup namespaces and config, but do not run any tests
|
||||
setup) setup; exit 0;;
|
||||
|
||||
Loading…
Reference in New Issue
Block a user