linux/samples/bpf/test_ipip.sh
<<
>>
Prefs
   1#!/bin/bash
   2# SPDX-License-Identifier: GPL-2.0
   3
   4function config_device {
   5        ip netns add at_ns0
   6        ip netns add at_ns1
   7        ip netns add at_ns2
   8        ip link add veth0 type veth peer name veth0b
   9        ip link add veth1 type veth peer name veth1b
  10        ip link add veth2 type veth peer name veth2b
  11        ip link set veth0b up
  12        ip link set veth1b up
  13        ip link set veth2b up
  14        ip link set dev veth0b mtu 1500
  15        ip link set dev veth1b mtu 1500
  16        ip link set dev veth2b mtu 1500
  17        ip link set veth0 netns at_ns0
  18        ip link set veth1 netns at_ns1
  19        ip link set veth2 netns at_ns2
  20        ip netns exec at_ns0 ip addr add 172.16.1.100/24 dev veth0
  21        ip netns exec at_ns0 ip addr add 2401:db00::1/64 dev veth0 nodad
  22        ip netns exec at_ns0 ip link set dev veth0 up
  23        ip netns exec at_ns1 ip addr add 172.16.1.101/24 dev veth1
  24        ip netns exec at_ns1 ip addr add 2401:db00::2/64 dev veth1 nodad
  25        ip netns exec at_ns1 ip link set dev veth1 up
  26        ip netns exec at_ns2 ip addr add 172.16.1.200/24 dev veth2
  27        ip netns exec at_ns2 ip addr add 2401:db00::3/64 dev veth2 nodad
  28        ip netns exec at_ns2 ip link set dev veth2 up
  29        ip link add br0 type bridge
  30        ip link set br0 up
  31        ip link set dev br0 mtu 1500
  32        ip link set veth0b master br0
  33        ip link set veth1b master br0
  34        ip link set veth2b master br0
  35}
  36
  37function add_ipip_tunnel {
  38        ip netns exec at_ns0 \
  39                ip link add dev $DEV_NS type ipip local 172.16.1.100 remote 172.16.1.200
  40        ip netns exec at_ns0 ip link set dev $DEV_NS up
  41        ip netns exec at_ns0 ip addr add dev $DEV_NS 10.1.1.100/24
  42        ip netns exec at_ns1 \
  43                ip link add dev $DEV_NS type ipip local 172.16.1.101 remote 172.16.1.200
  44        ip netns exec at_ns1 ip link set dev $DEV_NS up
  45        # same inner IP address in at_ns0 and at_ns1
  46        ip netns exec at_ns1 ip addr add dev $DEV_NS 10.1.1.100/24
  47
  48        ip netns exec at_ns2 ip link add dev $DEV type ipip external
  49        ip netns exec at_ns2 ip link set dev $DEV up
  50        ip netns exec at_ns2 ip addr add dev $DEV 10.1.1.200/24
  51}
  52
  53function add_ipip6_tunnel {
  54        ip netns exec at_ns0 \
  55                ip link add dev $DEV_NS type ip6tnl mode ipip6 local 2401:db00::1/64 remote 2401:db00::3/64
  56        ip netns exec at_ns0 ip link set dev $DEV_NS up
  57        ip netns exec at_ns0 ip addr add dev $DEV_NS 10.1.1.100/24
  58        ip netns exec at_ns1 \
  59                ip link add dev $DEV_NS type ip6tnl mode ipip6 local 2401:db00::2/64 remote 2401:db00::3/64
  60        ip netns exec at_ns1 ip link set dev $DEV_NS up
  61        # same inner IP address in at_ns0 and at_ns1
  62        ip netns exec at_ns1 ip addr add dev $DEV_NS 10.1.1.100/24
  63
  64        ip netns exec at_ns2 ip link add dev $DEV type ip6tnl mode ipip6 external
  65        ip netns exec at_ns2 ip link set dev $DEV up
  66        ip netns exec at_ns2 ip addr add dev $DEV 10.1.1.200/24
  67}
  68
  69function add_ip6ip6_tunnel {
  70        ip netns exec at_ns0 \
  71                ip link add dev $DEV_NS type ip6tnl mode ip6ip6 local 2401:db00::1/64 remote 2401:db00::3/64
  72        ip netns exec at_ns0 ip link set dev $DEV_NS up
  73        ip netns exec at_ns0 ip addr add dev $DEV_NS 2601:646::1/64
  74        ip netns exec at_ns1 \
  75                ip link add dev $DEV_NS type ip6tnl mode ip6ip6 local 2401:db00::2/64 remote 2401:db00::3/64
  76        ip netns exec at_ns1 ip link set dev $DEV_NS up
  77        # same inner IP address in at_ns0 and at_ns1
  78        ip netns exec at_ns1 ip addr add dev $DEV_NS 2601:646::1/64
  79
  80        ip netns exec at_ns2 ip link add dev $DEV type ip6tnl mode ip6ip6 external
  81        ip netns exec at_ns2 ip link set dev $DEV up
  82        ip netns exec at_ns2 ip addr add dev $DEV 2601:646::2/64
  83}
  84
  85function attach_bpf {
  86        DEV=$1
  87        SET_TUNNEL=$2
  88        GET_TUNNEL=$3
  89        ip netns exec at_ns2 tc qdisc add dev $DEV clsact
  90        ip netns exec at_ns2 tc filter add dev $DEV egress bpf da obj tcbpf2_kern.o sec $SET_TUNNEL
  91        ip netns exec at_ns2 tc filter add dev $DEV ingress bpf da obj tcbpf2_kern.o sec $GET_TUNNEL
  92}
  93
  94function test_ipip {
  95        DEV_NS=ipip_std
  96        DEV=ipip_bpf
  97        config_device
  98#       tcpdump -nei br0 &
  99        cat /sys/kernel/debug/tracing/trace_pipe &
 100
 101        add_ipip_tunnel
 102        attach_bpf $DEV ipip_set_tunnel ipip_get_tunnel
 103
 104        ip netns exec at_ns0 ping -c 1 10.1.1.200
 105        ip netns exec at_ns2 ping -c 1 10.1.1.100
 106        ip netns exec at_ns0 iperf -sD -p 5200 > /dev/null
 107        ip netns exec at_ns1 iperf -sD -p 5201 > /dev/null
 108        sleep 0.2
 109        # tcp check _same_ IP over different tunnels
 110        ip netns exec at_ns2 iperf -c 10.1.1.100 -n 5k -p 5200
 111        ip netns exec at_ns2 iperf -c 10.1.1.100 -n 5k -p 5201
 112        cleanup
 113}
 114
 115# IPv4 over IPv6 tunnel
 116function test_ipip6 {
 117        DEV_NS=ipip_std
 118        DEV=ipip_bpf
 119        config_device
 120#       tcpdump -nei br0 &
 121        cat /sys/kernel/debug/tracing/trace_pipe &
 122
 123        add_ipip6_tunnel
 124        attach_bpf $DEV ipip6_set_tunnel ipip6_get_tunnel
 125
 126        ip netns exec at_ns0 ping -c 1 10.1.1.200
 127        ip netns exec at_ns2 ping -c 1 10.1.1.100
 128        ip netns exec at_ns0 iperf -sD -p 5200 > /dev/null
 129        ip netns exec at_ns1 iperf -sD -p 5201 > /dev/null
 130        sleep 0.2
 131        # tcp check _same_ IP over different tunnels
 132        ip netns exec at_ns2 iperf -c 10.1.1.100 -n 5k -p 5200
 133        ip netns exec at_ns2 iperf -c 10.1.1.100 -n 5k -p 5201
 134        cleanup
 135}
 136
 137# IPv6 over IPv6 tunnel
 138function test_ip6ip6 {
 139        DEV_NS=ipip_std
 140        DEV=ipip_bpf
 141        config_device
 142#       tcpdump -nei br0 &
 143        cat /sys/kernel/debug/tracing/trace_pipe &
 144
 145        add_ip6ip6_tunnel
 146        attach_bpf $DEV ip6ip6_set_tunnel ip6ip6_get_tunnel
 147
 148        ip netns exec at_ns0 ping -6 -c 1 2601:646::2
 149        ip netns exec at_ns2 ping -6 -c 1 2601:646::1
 150        ip netns exec at_ns0 iperf -6sD -p 5200 > /dev/null
 151        ip netns exec at_ns1 iperf -6sD -p 5201 > /dev/null
 152        sleep 0.2
 153        # tcp check _same_ IP over different tunnels
 154        ip netns exec at_ns2 iperf -6c 2601:646::1 -n 5k -p 5200
 155        ip netns exec at_ns2 iperf -6c 2601:646::1 -n 5k -p 5201
 156        cleanup
 157}
 158
 159function cleanup {
 160        set +ex
 161        pkill iperf
 162        ip netns delete at_ns0
 163        ip netns delete at_ns1
 164        ip netns delete at_ns2
 165        ip link del veth0
 166        ip link del veth1
 167        ip link del veth2
 168        ip link del br0
 169        pkill tcpdump
 170        pkill cat
 171        set -ex
 172}
 173
 174cleanup
 175echo "Testing IP tunnels..."
 176test_ipip
 177test_ipip6
 178test_ip6ip6
 179echo "*** PASS ***"
 180