Commit bb53bcb2 authored by David S. Miller's avatar David S. Miller
Browse files

Merge branch 'mlxsw-tests' 



Amit Cohen says:

====================
mlxsw: Add tests for VxLAN with IPv6 underlay

mlxsw driver lately added support for VxLAN with IPv6 underlay.
This set adds tests for IPv6, which are dedicated for mlxsw.

Patch set overview:
Patches #1-#2 make vxlan.sh test more flexible and extend it for IPv6
Patches #3-#4 make vxlan_fdb_veto.sh test more flexible and extend it
for IPv6
Patches #5-#6 add tests for VxLAN flooding for different ASICs
Patches #7-#8 add test for VxLAN related traps and align the existing
test
====================

Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parents 30be4551 810ef955

tools/testing/selftests/drivers/net/mlxsw/devlink_trap_tunnel_vxlan.sh

+5 −2
Original line number Diff line number Diff line
@@ -217,9 +217,11 @@ short_payload_get() 
        dest_mac=$(mac_get $h1)

        p=$(:

		)"08:"$(                      : VXLAN flags

		)"01:00:00:"$(                : VXLAN reserved

		)"00:00:00:"$(                : VXLAN reserved

		)"00:03:e8:"$(                : VXLAN VNI : 1000

		)"00:"$(                      : VXLAN reserved

		)"$dest_mac:"$(               : ETH daddr

		)"00:00:00:00:00:00:"$(       : ETH saddr

		)

        echo $p

}
@@ -263,7 +265,8 @@ decap_error_test() 


	corrupted_packet_test "Decap error: Reserved bits in use" \

		"reserved_bits_payload_get"

	corrupted_packet_test "Decap error: No L2 header" "short_payload_get"

	corrupted_packet_test "Decap error: Too short inner packet" \

		"short_payload_get"

}



mc_smac_payload_get()

tools/testing/selftests/drivers/net/mlxsw/devlink_trap_tunnel_vxlan_ipv6.sh

0 → 100755
+342 −0
Original line number Diff line number Diff line 
#!/bin/bash

# SPDX-License-Identifier: GPL-2.0

#

# Test devlink-trap tunnel drops and exceptions functionality over mlxsw.

# Check all traps to make sure they are triggered under the right

# conditions.



# +------------------------+

# | H1 (vrf)               |

# |    + $h1               |

# |    | 2001:db8:1::1/64  |

# +----|-------------------+

#      |

# +----|----------------------------------------------------------------------+

# | SW |                                                                      |

# | +--|--------------------------------------------------------------------+ |

# | |  + $swp1                   BR1 (802.1d)                               | |

# | |                                                                       | |

# | |  + vx1 (vxlan)                                                        | |

# | |    local 2001:db8:3::1                                                | |

# | |    id 1000 dstport $VXPORT                                            | |

# | +-----------------------------------------------------------------------+ |

# |                                                                           |

# |    + $rp1                                                                 |

# |    | 2001:db8:3::1/64                                                     |

# +----|----------------------------------------------------------------------+

#      |

# +----|--------------------------------------------------------+

# |    |                                             VRF2       |

# |    + $rp2                                                   |

# |      2001:db8:3::2/64                                       |

# |                                                             |

# +-------------------------------------------------------------+



lib_dir=$(dirname $0)/../../../net/forwarding



ALL_TESTS="

	decap_error_test

	overlay_smac_is_mc_test

"



NUM_NETIFS=4

source $lib_dir/lib.sh

source $lib_dir/tc_common.sh

source $lib_dir/devlink_lib.sh



: ${VXPORT:=4789}

export VXPORT



h1_create()

{

	simple_if_init $h1 2001:db8:1::1/64

}



h1_destroy()

{

	simple_if_fini $h1 2001:db8:1::1/64

}



switch_create()

{

	ip link add name br1 type bridge vlan_filtering 0 mcast_snooping 0

	# Make sure the bridge uses the MAC address of the local port and not

	# that of the VxLAN's device.

	ip link set dev br1 address $(mac_get $swp1)

	ip link set dev br1 up



	tc qdisc add dev $swp1 clsact

	ip link set dev $swp1 master br1

	ip link set dev $swp1 up



	ip link add name vx1 type vxlan id 1000 local 2001:db8:3::1 \

		dstport "$VXPORT" nolearning udp6zerocsumrx udp6zerocsumtx \

		tos inherit ttl 100

	ip link set dev vx1 master br1

	ip link set dev vx1 up



	ip link set dev $rp1 up

	ip address add dev $rp1 2001:db8:3::1/64

}



switch_destroy()

{

	ip address del dev $rp1 2001:db8:3::1/64

	ip link set dev $rp1 down



	ip link set dev vx1 down

	ip link set dev vx1 nomaster

	ip link del dev vx1



	ip link set dev $swp1 down

	ip link set dev $swp1 nomaster

	tc qdisc del dev $swp1 clsact



	ip link set dev br1 down

	ip link del dev br1

}



vrf2_create()

{

	simple_if_init $rp2 2001:db8:3::2/64

}



vrf2_destroy()

{

	simple_if_fini $rp2 2001:db8:3::2/64

}



setup_prepare()

{

	h1=${NETIFS[p1]}

	swp1=${NETIFS[p2]}



	rp1=${NETIFS[p3]}

	rp2=${NETIFS[p4]}



	vrf_prepare

	forwarding_enable

	h1_create

	switch_create

	vrf2_create

}



cleanup()

{

	pre_cleanup



	vrf2_destroy

	switch_destroy

	h1_destroy

	forwarding_restore

	vrf_cleanup

}



ecn_payload_get()

{

	local dest_mac=$(mac_get $h1)

	local saddr="20:01:0d:b8:00:01:00:00:00:00:00:00:00:00:00:03"

	local daddr="20:01:0d:b8:00:01:00:00:00:00:00:00:00:00:00:01"

	p=$(:

		)"08:"$(                      : VXLAN flags

		)"00:00:00:"$(                : VXLAN reserved

		)"00:03:e8:"$(                : VXLAN VNI : 1000

		)"00:"$(                      : VXLAN reserved

		)"$dest_mac:"$(               : ETH daddr

		)"00:00:00:00:00:00:"$(       : ETH saddr

		)"86:dd:"$(                   : ETH type

		)"6"$(                        : IP version

		)"0:0"$(		      : Traffic class

		)"0:00:00:"$(                 : Flow label

		)"00:08:"$(                   : Payload length

		)"3a:"$(                      : Next header

		)"04:"$(                      : Hop limit

		)"$saddr:"$(                  : IP saddr

		)"$daddr:"$(		      : IP daddr

		)"80:"$(                      : ICMPv6.type

		)"00:"$(                      : ICMPv6.code

		)"00:"$(                      : ICMPv6.checksum

		)

	echo $p

}



ecn_decap_test()

{

	local trap_name="decap_error"

	local desc=$1; shift

	local ecn_desc=$1; shift

	local outer_tos=$1; shift

	local mz_pid



	RET=0



	tc filter add dev $swp1 egress protocol ipv6 pref 1 handle 101 \

		flower src_ip 2001:db8:1::3 dst_ip 2001:db8:1::1 action pass



	rp1_mac=$(mac_get $rp1)

	payload=$(ecn_payload_get)



	ip vrf exec v$rp2 $MZ -6 $rp2 -c 0 -d 1msec -b $rp1_mac \

		-B 2001:db8:3::1 -t udp \

		sp=12345,dp=$VXPORT,tos=$outer_tos,p=$payload -q &

	mz_pid=$!



	devlink_trap_exception_test $trap_name



	tc_check_packets "dev $swp1 egress" 101 0

	check_err $? "Packets were not dropped"



	log_test "$desc: Inner ECN is not ECT and outer is $ecn_desc"



	kill $mz_pid && wait $mz_pid &> /dev/null

	tc filter del dev $swp1 egress protocol ipv6 pref 1 handle 101 flower

}



reserved_bits_payload_get()

{

	local dest_mac=$(mac_get $h1)

	local saddr="20:01:0d:b8:00:01:00:00:00:00:00:00:00:00:00:03"

	local daddr="20:01:0d:b8:00:01:00:00:00:00:00:00:00:00:00:01"

	p=$(:

		)"08:"$(                      : VXLAN flags

		)"01:00:00:"$(                : VXLAN reserved

		)"00:03:e8:"$(                : VXLAN VNI : 1000

		)"00:"$(                      : VXLAN reserved

		)"$dest_mac:"$(               : ETH daddr

		)"00:00:00:00:00:00:"$(       : ETH saddr

		)"86:dd:"$(                   : ETH type

		)"6"$(                        : IP version

		)"0:0"$(		      : Traffic class

		)"0:00:00:"$(                 : Flow label

		)"00:08:"$(                   : Payload length

		)"3a:"$(                      : Next header

		)"04:"$(                      : Hop limit

		)"$saddr:"$(                  : IP saddr

		)"$daddr:"$(		      : IP daddr

		)"80:"$(                      : ICMPv6.type

		)"00:"$(                      : ICMPv6.code

		)"00:"$(                      : ICMPv6.checksum

		)

	echo $p

}



short_payload_get()

{

        dest_mac=$(mac_get $h1)

        p=$(:

		)"08:"$(                      : VXLAN flags

		)"00:00:00:"$(                : VXLAN reserved

		)"00:03:e8:"$(                : VXLAN VNI : 1000

		)"00:"$(                      : VXLAN reserved

		)"$dest_mac:"$(               : ETH daddr

		)"00:00:00:00:00:00:"$(       : ETH saddr

		)

        echo $p

}



corrupted_packet_test()

{

	local trap_name="decap_error"

	local desc=$1; shift

	local payload_get=$1; shift

	local mz_pid



	RET=0



	# In case of too short packet, there is no any inner packet,

	# so the matching will always succeed

	tc filter add dev $swp1 egress protocol ipv6 pref 1 handle 101 \

		flower skip_hw src_ip 2001:db8:3::1 dst_ip 2001:db8:1::1 \

		action pass



	rp1_mac=$(mac_get $rp1)

	payload=$($payload_get)

	ip vrf exec v$rp2 $MZ -6 $rp2 -c 0 -d 1msec -b $rp1_mac \

		-B 2001:db8:3::1 -t udp sp=12345,dp=$VXPORT,p=$payload -q &

	mz_pid=$!



	devlink_trap_exception_test $trap_name



	tc_check_packets "dev $swp1 egress" 101 0

	check_err $? "Packets were not dropped"



	log_test "$desc"



	kill $mz_pid && wait $mz_pid &> /dev/null

	tc filter del dev $swp1 egress protocol ipv6 pref 1 handle 101 flower

}



decap_error_test()

{

	ecn_decap_test "Decap error" "ECT(1)" 01

	ecn_decap_test "Decap error" "ECT(0)" 02

	ecn_decap_test "Decap error" "CE" 03



	corrupted_packet_test "Decap error: Reserved bits in use" \

		"reserved_bits_payload_get"

	corrupted_packet_test "Decap error: Too short inner packet" \

		"short_payload_get"

}



mc_smac_payload_get()

{

	local dest_mac=$(mac_get $h1)

	local source_mac="01:02:03:04:05:06"

	local saddr="20:01:0d:b8:00:01:00:00:00:00:00:00:00:00:00:03"

	local daddr="20:01:0d:b8:00:01:00:00:00:00:00:00:00:00:00:01"

	p=$(:

		)"08:"$(                      : VXLAN flags

		)"00:00:00:"$(                : VXLAN reserved

		)"00:03:e8:"$(                : VXLAN VNI : 1000

		)"00:"$(                      : VXLAN reserved

		)"$dest_mac:"$(               : ETH daddr

		)"$source_mac:"$(	      : ETH saddr

		)"86:dd:"$(                   : ETH type

		)"6"$(                        : IP version

		)"0:0"$(		      : Traffic class

		)"0:00:00:"$(                 : Flow label

		)"00:08:"$(                   : Payload length

		)"3a:"$(                      : Next header

		)"04:"$(                      : Hop limit

		)"$saddr:"$(                  : IP saddr

		)"$daddr:"$(		      : IP daddr

		)"80:"$(                      : ICMPv6.type

		)"00:"$(                      : ICMPv6.code

		)"00:"$(                      : ICMPv6.checksum

		)

	echo $p

}



overlay_smac_is_mc_test()

{

	local trap_name="overlay_smac_is_mc"

	local mz_pid



	RET=0



	# The matching will be checked on devlink_trap_drop_test()

	# and the filter will be removed on devlink_trap_drop_cleanup()

	tc filter add dev $swp1 egress protocol ipv6 pref 1 handle 101 \

		flower src_mac 01:02:03:04:05:06 action pass



	rp1_mac=$(mac_get $rp1)

	payload=$(mc_smac_payload_get)



	ip vrf exec v$rp2 $MZ -6 $rp2 -c 0 -d 1msec -b $rp1_mac \

		-B 2001:db8:3::1 -t udp sp=12345,dp=$VXPORT,p=$payload -q &

	mz_pid=$!



	devlink_trap_drop_test $trap_name $swp1 101



	log_test "Overlay source MAC is multicast"



	devlink_trap_drop_cleanup $mz_pid $swp1 "ipv6" 1 101

}



trap cleanup EXIT



setup_prepare

setup_wait

tests_run



exit $EXIT_STATUS

tools/testing/selftests/drivers/net/mlxsw/spectrum-2/vxlan_flooding_ipv6.sh

0 → 100755
+322 −0
Original line number Diff line number Diff line 
#!/bin/bash

# SPDX-License-Identifier: GPL-2.0

#

# Test VxLAN flooding. The device stores flood records in a singly linked list

# where each record stores up to four IPv6 addresses of remote VTEPs. The test

# verifies that packets are correctly flooded in various cases such as deletion

# of a record in the middle of the list.

#

# +-----------------------+

# | H1 (vrf)              |

# |    + $h1              |

# |    | 2001:db8:1::1/64 |

# +----|------------------+

#      |

# +----|----------------------------------------------------------------------+

# | SW |                                                                      |

# | +--|--------------------------------------------------------------------+ |

# | |  + $swp1                   BR0 (802.1d)                               | |

# | |                                                                       | |

# | |  + vxlan0 (vxlan)                                                     | |

# | |    local 2001:db8:2::1                                                | |

# | |    remote 2001:db8:2::{2..17}                                         | |

# | |    id 10 dstport 4789                                                 | |

# | +-----------------------------------------------------------------------+ |

# |                                                                           |

# |  2001:db8:2::0/64 via 2001:db8:3::2                                       |

# |                                                                           |

# |    + $rp1                                                                 |

# |    | 2001:db8:3::1/64                                                     |

# +----|----------------------------------------------------------------------+

#      |

# +----|--------------------------------------------------------+

# |    |                                               R2 (vrf) |

# |    + $rp2                                                   |

# |      2001:db8:3::2/64                                       |

# |                                                             |

# +-------------------------------------------------------------+



lib_dir=$(dirname $0)/../../../../net/forwarding



ALL_TESTS="flooding_test"

NUM_NETIFS=4

source $lib_dir/tc_common.sh

source $lib_dir/lib.sh



h1_create()

{

	simple_if_init $h1 2001:db8:1::1/64

}



h1_destroy()

{

	simple_if_fini $h1 2001:db8:1::1/64

}



switch_create()

{

	# Make sure the bridge uses the MAC address of the local port and

	# not that of the VxLAN's device

	ip link add dev br0 type bridge mcast_snooping 0

	ip link set dev br0 address $(mac_get $swp1)



	ip link add name vxlan0 type vxlan id 10 nolearning \

		udp6zerocsumrx udp6zerocsumtx ttl 20 tos inherit \

		local 2001:db8:2::1 dstport 4789



	ip address add 2001:db8:2::1/128 dev lo



	ip link set dev $swp1 master br0

	ip link set dev vxlan0 master br0



	ip link set dev br0 up

	ip link set dev $swp1 up

	ip link set dev vxlan0 up

}



switch_destroy()

{

	ip link set dev vxlan0 down

	ip link set dev $swp1 down

	ip link set dev br0 down



	ip link set dev vxlan0 nomaster

	ip link set dev $swp1 nomaster



	ip address del 2001:db8:2::1/128 dev lo



	ip link del dev vxlan0



	ip link del dev br0

}



router1_create()

{

	# This router is in the default VRF, where the VxLAN device is

	# performing the L3 lookup

	ip link set dev $rp1 up

	ip address add 2001:db8:3::1/64 dev $rp1

	ip route add 2001:db8:2::0/64 via 2001:db8:3::2

}



router1_destroy()

{

	ip route del 2001:db8:2::0/64 via 2001:db8:3::2

	ip address del 2001:db8:3::1/64 dev $rp1

	ip link set dev $rp1 down

}



router2_create()

{

	# This router is not in the default VRF, so use simple_if_init()

	simple_if_init $rp2 2001:db8:3::2/64

}



router2_destroy()

{

	simple_if_fini $rp2 2001:db8:3::2/64

}



setup_prepare()

{

	h1=${NETIFS[p1]}

	swp1=${NETIFS[p2]}



	rp1=${NETIFS[p3]}

	rp2=${NETIFS[p4]}



	vrf_prepare



	h1_create



	switch_create



	router1_create

	router2_create



	forwarding_enable

}



cleanup()

{

	pre_cleanup



	forwarding_restore



	router2_destroy

	router1_destroy



	switch_destroy



	h1_destroy



	vrf_cleanup

}



flooding_remotes_add()

{

	local num_remotes=$1

	local lsb

	local i



	for i in $(eval echo {1..$num_remotes}); do

		lsb=$((i + 1))



		bridge fdb append 00:00:00:00:00:00 dev vxlan0 self \

			dst 2001:db8:2::$lsb

	done

}



flooding_filters_add()

{

	local num_remotes=$1

	local lsb

	local i



	tc qdisc add dev $rp2 clsact



	for i in $(eval echo {1..$num_remotes}); do

		lsb=$((i + 1))



		tc filter add dev $rp2 ingress protocol ipv6 pref $i handle $i \

			flower ip_proto udp dst_ip 2001:db8:2::$lsb \

			dst_port 4789 skip_sw action drop

	done

}



flooding_filters_del()

{

	local num_remotes=$1

	local i



	for i in $(eval echo {1..$num_remotes}); do

		tc filter del dev $rp2 ingress protocol ipv6 pref $i \

			handle $i flower

	done



	tc qdisc del dev $rp2 clsact

}



flooding_check_packets()

{

	local packets=("$@")

	local num_remotes=${#packets[@]}

	local i



	for i in $(eval echo {1..$num_remotes}); do

		tc_check_packets "dev $rp2 ingress" $i ${packets[i - 1]}

		check_err $? "remote $i - did not get expected number of packets"

	done

}



flooding_test()

{

	# Use 16 remote VTEPs that will be stored in 4 records. The array

	# 'packets' will store how many packets are expected to be received

	# by each remote VTEP at each stage of the test

	declare -a packets=(1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1)

	local num_remotes=16



	RET=0



	# Add FDB entries for remote VTEPs and corresponding tc filters on the

	# ingress of the nexthop router. These filters will count how many

	# packets were flooded to each remote VTEP

	flooding_remotes_add $num_remotes

	flooding_filters_add $num_remotes



	# Send one packet and make sure it is flooded to all the remote VTEPs

	$MZ $h1 -q -p 64 -b de:ad:be:ef:13:37 -t ip -c 1

	flooding_check_packets "${packets[@]}"

	log_test "flood after 1 packet"



	# Delete the third record which corresponds to VTEPs with LSB 10..13

	# and check that packet is flooded correctly when we remove a record

	# from the middle of the list

	RET=0



	packets=(2 2 2 2 2 2 2 2 1 1 1 1 2 2 2 2)

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 2001:db8:2::10

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 2001:db8:2::11

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 2001:db8:2::12

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 2001:db8:2::13



	$MZ $h1 -q -p 64 -b de:ad:be:ef:13:37 -t ip -c 1

	flooding_check_packets "${packets[@]}"

	log_test "flood after 2 packets"



	# Delete the first record and make sure the packet is flooded correctly

	RET=0



	packets=(2 2 2 2 3 3 3 3 1 1 1 1 3 3 3 3)

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 2001:db8:2::2

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 2001:db8:2::3

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 2001:db8:2::4

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 2001:db8:2::5



	$MZ $h1 -q -p 64 -b de:ad:be:ef:13:37 -t ip -c 1

	flooding_check_packets "${packets[@]}"

	log_test "flood after 3 packets"



	# Delete the last record and make sure the packet is flooded correctly

	RET=0



	packets=(2 2 2 2 4 4 4 4 1 1 1 1 3 3 3 3)

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 2001:db8:2::14

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 2001:db8:2::15

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 2001:db8:2::16

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 2001:db8:2::17



	$MZ -6 $h1 -q -p 64 -b de:ad:be:ef:13:37 -t ip -c 1

	flooding_check_packets "${packets[@]}"

	log_test "flood after 4 packets"



	# Delete the last record, one entry at a time and make sure single

	# entries are correctly removed

	RET=0



	packets=(2 2 2 2 4 5 5 5 1 1 1 1 3 3 3 3)

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 2001:db8:2::6



	$MZ -6 $h1 -q -p 64 -b de:ad:be:ef:13:37 -t ip -c 1

	flooding_check_packets "${packets[@]}"

	log_test "flood after 5 packets"



	RET=0



	packets=(2 2 2 2 4 5 6 6 1 1 1 1 3 3 3 3)

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 2001:db8:2::7



	$MZ -6 $h1 -q -p 64 -b de:ad:be:ef:13:37 -t ip -c 1

	flooding_check_packets "${packets[@]}"

	log_test "flood after 6 packets"



	RET=0



	packets=(2 2 2 2 4 5 6 7 1 1 1 1 3 3 3 3)

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 2001:db8:2::8



	$MZ -6 $h1 -q -p 64 -b de:ad:be:ef:13:37 -t ip -c 1

	flooding_check_packets "${packets[@]}"

	log_test "flood after 7 packets"



	RET=0



	packets=(2 2 2 2 4 5 6 7 1 1 1 1 3 3 3 3)

	bridge fdb del 00:00:00:00:00:00 dev vxlan0 self dst 2001:db8:2::9



	$MZ -6 $h1 -q -p 64 -b de:ad:be:ef:13:37 -t ip -c 1

	flooding_check_packets "${packets[@]}"

	log_test "flood after 8 packets"



	flooding_filters_del $num_remotes

}



trap cleanup EXIT



setup_prepare

setup_wait



tests_run



exit $EXIT_STATUS

tools/testing/selftests/drivers/net/mlxsw/spectrum/vxlan_flooding_ipv6.sh

0 → 100755
+334 −0

File added.

Preview size limit exceeded, changes collapsed.

tools/testing/selftests/drivers/net/mlxsw/vxlan.sh

+125 −99

File changed.

Preview size limit exceeded, changes collapsed.