test_ipip.sh 5.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179
  1. #!/bin/bash
  2. # SPDX-License-Identifier: GPL-2.0
  3. function config_device {
  4. ip netns add at_ns0
  5. ip netns add at_ns1
  6. ip netns add at_ns2
  7. ip link add veth0 type veth peer name veth0b
  8. ip link add veth1 type veth peer name veth1b
  9. ip link add veth2 type veth peer name veth2b
  10. ip link set veth0b up
  11. ip link set veth1b up
  12. ip link set veth2b up
  13. ip link set dev veth0b mtu 1500
  14. ip link set dev veth1b mtu 1500
  15. ip link set dev veth2b mtu 1500
  16. ip link set veth0 netns at_ns0
  17. ip link set veth1 netns at_ns1
  18. ip link set veth2 netns at_ns2
  19. ip netns exec at_ns0 ip addr add 172.16.1.100/24 dev veth0
  20. ip netns exec at_ns0 ip addr add 2401:db00::1/64 dev veth0 nodad
  21. ip netns exec at_ns0 ip link set dev veth0 up
  22. ip netns exec at_ns1 ip addr add 172.16.1.101/24 dev veth1
  23. ip netns exec at_ns1 ip addr add 2401:db00::2/64 dev veth1 nodad
  24. ip netns exec at_ns1 ip link set dev veth1 up
  25. ip netns exec at_ns2 ip addr add 172.16.1.200/24 dev veth2
  26. ip netns exec at_ns2 ip addr add 2401:db00::3/64 dev veth2 nodad
  27. ip netns exec at_ns2 ip link set dev veth2 up
  28. ip link add br0 type bridge
  29. ip link set br0 up
  30. ip link set dev br0 mtu 1500
  31. ip link set veth0b master br0
  32. ip link set veth1b master br0
  33. ip link set veth2b master br0
  34. }
  35. function add_ipip_tunnel {
  36. ip netns exec at_ns0 \
  37. ip link add dev $DEV_NS type ipip local 172.16.1.100 remote 172.16.1.200
  38. ip netns exec at_ns0 ip link set dev $DEV_NS up
  39. ip netns exec at_ns0 ip addr add dev $DEV_NS 10.1.1.100/24
  40. ip netns exec at_ns1 \
  41. ip link add dev $DEV_NS type ipip local 172.16.1.101 remote 172.16.1.200
  42. ip netns exec at_ns1 ip link set dev $DEV_NS up
  43. # same inner IP address in at_ns0 and at_ns1
  44. ip netns exec at_ns1 ip addr add dev $DEV_NS 10.1.1.100/24
  45. ip netns exec at_ns2 ip link add dev $DEV type ipip external
  46. ip netns exec at_ns2 ip link set dev $DEV up
  47. ip netns exec at_ns2 ip addr add dev $DEV 10.1.1.200/24
  48. }
  49. function add_ipip6_tunnel {
  50. ip netns exec at_ns0 \
  51. ip link add dev $DEV_NS type ip6tnl mode ipip6 local 2401:db00::1/64 remote 2401:db00::3/64
  52. ip netns exec at_ns0 ip link set dev $DEV_NS up
  53. ip netns exec at_ns0 ip addr add dev $DEV_NS 10.1.1.100/24
  54. ip netns exec at_ns1 \
  55. ip link add dev $DEV_NS type ip6tnl mode ipip6 local 2401:db00::2/64 remote 2401:db00::3/64
  56. ip netns exec at_ns1 ip link set dev $DEV_NS up
  57. # same inner IP address in at_ns0 and at_ns1
  58. ip netns exec at_ns1 ip addr add dev $DEV_NS 10.1.1.100/24
  59. ip netns exec at_ns2 ip link add dev $DEV type ip6tnl mode ipip6 external
  60. ip netns exec at_ns2 ip link set dev $DEV up
  61. ip netns exec at_ns2 ip addr add dev $DEV 10.1.1.200/24
  62. }
  63. function add_ip6ip6_tunnel {
  64. ip netns exec at_ns0 \
  65. ip link add dev $DEV_NS type ip6tnl mode ip6ip6 local 2401:db00::1/64 remote 2401:db00::3/64
  66. ip netns exec at_ns0 ip link set dev $DEV_NS up
  67. ip netns exec at_ns0 ip addr add dev $DEV_NS 2601:646::1/64
  68. ip netns exec at_ns1 \
  69. ip link add dev $DEV_NS type ip6tnl mode ip6ip6 local 2401:db00::2/64 remote 2401:db00::3/64
  70. ip netns exec at_ns1 ip link set dev $DEV_NS up
  71. # same inner IP address in at_ns0 and at_ns1
  72. ip netns exec at_ns1 ip addr add dev $DEV_NS 2601:646::1/64
  73. ip netns exec at_ns2 ip link add dev $DEV type ip6tnl mode ip6ip6 external
  74. ip netns exec at_ns2 ip link set dev $DEV up
  75. ip netns exec at_ns2 ip addr add dev $DEV 2601:646::2/64
  76. }
  77. function attach_bpf {
  78. DEV=$1
  79. SET_TUNNEL=$2
  80. GET_TUNNEL=$3
  81. ip netns exec at_ns2 tc qdisc add dev $DEV clsact
  82. ip netns exec at_ns2 tc filter add dev $DEV egress bpf da obj tcbpf2_kern.o sec $SET_TUNNEL
  83. ip netns exec at_ns2 tc filter add dev $DEV ingress bpf da obj tcbpf2_kern.o sec $GET_TUNNEL
  84. }
  85. function test_ipip {
  86. DEV_NS=ipip_std
  87. DEV=ipip_bpf
  88. config_device
  89. # tcpdump -nei br0 &
  90. cat /sys/kernel/debug/tracing/trace_pipe &
  91. add_ipip_tunnel
  92. attach_bpf $DEV ipip_set_tunnel ipip_get_tunnel
  93. ip netns exec at_ns0 ping -c 1 10.1.1.200
  94. ip netns exec at_ns2 ping -c 1 10.1.1.100
  95. ip netns exec at_ns0 iperf -sD -p 5200 > /dev/null
  96. ip netns exec at_ns1 iperf -sD -p 5201 > /dev/null
  97. sleep 0.2
  98. # tcp check _same_ IP over different tunnels
  99. ip netns exec at_ns2 iperf -c 10.1.1.100 -n 5k -p 5200
  100. ip netns exec at_ns2 iperf -c 10.1.1.100 -n 5k -p 5201
  101. cleanup
  102. }
  103. # IPv4 over IPv6 tunnel
  104. function test_ipip6 {
  105. DEV_NS=ipip_std
  106. DEV=ipip_bpf
  107. config_device
  108. # tcpdump -nei br0 &
  109. cat /sys/kernel/debug/tracing/trace_pipe &
  110. add_ipip6_tunnel
  111. attach_bpf $DEV ipip6_set_tunnel ipip6_get_tunnel
  112. ip netns exec at_ns0 ping -c 1 10.1.1.200
  113. ip netns exec at_ns2 ping -c 1 10.1.1.100
  114. ip netns exec at_ns0 iperf -sD -p 5200 > /dev/null
  115. ip netns exec at_ns1 iperf -sD -p 5201 > /dev/null
  116. sleep 0.2
  117. # tcp check _same_ IP over different tunnels
  118. ip netns exec at_ns2 iperf -c 10.1.1.100 -n 5k -p 5200
  119. ip netns exec at_ns2 iperf -c 10.1.1.100 -n 5k -p 5201
  120. cleanup
  121. }
  122. # IPv6 over IPv6 tunnel
  123. function test_ip6ip6 {
  124. DEV_NS=ipip_std
  125. DEV=ipip_bpf
  126. config_device
  127. # tcpdump -nei br0 &
  128. cat /sys/kernel/debug/tracing/trace_pipe &
  129. add_ip6ip6_tunnel
  130. attach_bpf $DEV ip6ip6_set_tunnel ip6ip6_get_tunnel
  131. ip netns exec at_ns0 ping -6 -c 1 2601:646::2
  132. ip netns exec at_ns2 ping -6 -c 1 2601:646::1
  133. ip netns exec at_ns0 iperf -6sD -p 5200 > /dev/null
  134. ip netns exec at_ns1 iperf -6sD -p 5201 > /dev/null
  135. sleep 0.2
  136. # tcp check _same_ IP over different tunnels
  137. ip netns exec at_ns2 iperf -6c 2601:646::1 -n 5k -p 5200
  138. ip netns exec at_ns2 iperf -6c 2601:646::1 -n 5k -p 5201
  139. cleanup
  140. }
  141. function cleanup {
  142. set +ex
  143. pkill iperf
  144. ip netns delete at_ns0
  145. ip netns delete at_ns1
  146. ip netns delete at_ns2
  147. ip link del veth0
  148. ip link del veth1
  149. ip link del veth2
  150. ip link del br0
  151. pkill tcpdump
  152. pkill cat
  153. set -ex
  154. }
  155. cleanup
  156. echo "Testing IP tunnels..."
  157. test_ipip
  158. test_ipip6
  159. test_ip6ip6
  160. echo "*** PASS ***"