linux/tools/testing/selftests/net/forwarding
Vladimir Oltean 90b9566aa5 selftests: forwarding: add a test for local_termination.sh
This tests the capability of switch ports to filter out undesired
traffic. Different drivers are expected to have different capabilities
here (so some may fail and some may pass), yet the test still has some
value, for example to check for regressions.

There are 2 kinds of failures, one is when a packet which should have
been accepted isn't (and that should be fixed), and the other "failure"
(as reported by the test) is when a packet could have been filtered out
(for being unnecessary) yet it was received.

The bridge driver fares particularly badly at this test:

TEST: br0: Unicast IPv4 to primary MAC address                      [ OK ]
TEST: br0: Unicast IPv4 to macvlan MAC address                      [ OK ]
TEST: br0: Unicast IPv4 to unknown MAC address                      [FAIL]
        reception succeeded, but should have failed
TEST: br0: Unicast IPv4 to unknown MAC address, promisc             [ OK ]
TEST: br0: Unicast IPv4 to unknown MAC address, allmulti            [FAIL]
        reception succeeded, but should have failed
TEST: br0: Multicast IPv4 to joined group                           [ OK ]
TEST: br0: Multicast IPv4 to unknown group                          [FAIL]
        reception succeeded, but should have failed
TEST: br0: Multicast IPv4 to unknown group, promisc                 [ OK ]
TEST: br0: Multicast IPv4 to unknown group, allmulti                [ OK ]
TEST: br0: Multicast IPv6 to joined group                           [ OK ]
TEST: br0: Multicast IPv6 to unknown group                          [FAIL]
        reception succeeded, but should have failed
TEST: br0: Multicast IPv6 to unknown group, promisc                 [ OK ]
TEST: br0: Multicast IPv6 to unknown group, allmulti                [ OK ]

mainly because it does not implement IFF_UNICAST_FLT. Yet I still think
having the test (with the failures) is useful in case somebody wants to
tackle that problem in the future, to make an easy before-and-after
comparison.

Signed-off-by: Vladimir Oltean <vladimir.oltean@nxp.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2022-04-23 12:18:16 +01:00
..
.gitignore .gitignore: add SPDX License Identifier 2020-03-25 11:50:48 +01:00
bridge_igmp.sh selftests: net: bridge: update IGMP/MLD membership interval value 2021-10-29 13:58:21 +01:00
bridge_locked_port.sh selftests: forwarding: Use same VRF for port and VLAN upper 2022-03-22 11:09:24 +01:00
bridge_mdb.sh selftests: forwarding: new test, verify host mdb entries 2022-04-12 10:06:53 +02:00
bridge_mld.sh selftests: net: bridge: update IGMP/MLD membership interval value 2021-10-29 13:58:21 +01:00
bridge_port_isolation.sh
bridge_sticky_fdb.sh
bridge_vlan_aware.sh selftests: net: bridge: Parameterize ageing timeout 2022-02-03 14:05:56 +00:00
bridge_vlan_mcast.sh selftests: net: bridge: fix typo in vlan_filtering dependency test 2021-11-29 12:49:53 +00:00
bridge_vlan_unaware.sh selftests: net: bridge: Parameterize ageing timeout 2022-02-03 14:05:56 +00:00
config selftests: add a test case for mirred egress to ingress 2021-11-16 19:17:38 -08:00
custom_multipath_hash.sh selftests: forwarding: Add test for custom multipath hash 2021-05-18 13:27:32 -07:00
devlink_lib.sh selftests: mlxsw: Reduce test run time 2021-10-25 14:10:11 +01:00
dual_vxlan_bridge.sh selftests: forwarding: Add test for dual VxLAN bridge 2021-03-17 12:26:28 -07:00
ethtool_extended_state.sh selftests: forwarding: Add tests for ethtool extended state 2020-06-29 17:45:02 -07:00
ethtool_lib.sh net: selftests: Add lanes setting test 2021-02-03 18:37:29 -08:00
ethtool.sh Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net 2020-08-02 01:02:12 -07:00
fib_offload_lib.sh selftests: fib offload: use sensible tos values 2022-02-03 19:11:21 -08:00
forwarding.config.sample selftests: net: bridge: Parameterize ageing timeout 2022-02-03 14:05:56 +00:00
gre_custom_multipath_hash.sh selftests: forwarding: Add test for custom multipath hash with IPv4 GRE 2021-05-18 13:27:32 -07:00
gre_inner_v4_multipath.sh selftests: forwarding: Test multipath hashing on inner IP pkts for GRE tunnel 2019-07-08 16:37:29 -07:00
gre_inner_v6_multipath.sh selftests: forwarding: Test multipath hashing on inner IP pkts for GRE tunnel 2019-07-08 16:37:29 -07:00
gre_multipath_nh_res.sh selftests: forwarding: Add resilient multipath tunneling nexthop test 2021-03-12 17:44:10 -08:00
gre_multipath_nh.sh selftests: forwarding: Add multipath tunneling nexthop test 2020-11-20 15:20:21 -08:00
gre_multipath.sh selftests: forwarding: gre_multipath: Fix flower filters 2019-07-23 13:06:48 -07:00
hw_stats_l3.sh selftests: forwarding: hw_stats_l3: Add a new test 2022-03-03 10:37:23 +00:00
ip6_forward_instats_vrf.sh ipv6: When forwarding count rx stats on the orig netdev 2021-10-15 15:32:04 -07:00
ip6gre_custom_multipath_hash.sh selftests: forwarding: Add test for custom multipath hash with IPv6 GRE 2021-05-18 13:27:32 -07:00
ip6gre_flat_key.sh selftests: forwarding: Add IPv6 GRE flat tests 2021-10-08 16:40:58 +01:00
ip6gre_flat_keys.sh selftests: forwarding: Add IPv6 GRE flat tests 2021-10-08 16:40:58 +01:00
ip6gre_flat.sh selftests: forwarding: Add IPv6 GRE flat tests 2021-10-08 16:40:58 +01:00
ip6gre_hier_key.sh selftests: forwarding: Add IPv6 GRE hierarchical tests 2021-10-08 16:40:58 +01:00
ip6gre_hier_keys.sh selftests: forwarding: Add IPv6 GRE hierarchical tests 2021-10-08 16:40:58 +01:00
ip6gre_hier.sh selftests: forwarding: Add IPv6 GRE hierarchical tests 2021-10-08 16:40:58 +01:00
ip6gre_inner_v4_multipath.sh selftests: forwarding: Test multipath hashing on inner IP pkts for GRE tunnel 2019-07-08 16:37:29 -07:00
ip6gre_inner_v6_multipath.sh selftests: forwarding: Test multipath hashing on inner IP pkts for GRE tunnel 2019-07-08 16:37:29 -07:00
ip6gre_lib.sh selftests: forwarding: Add IPv6 GRE hierarchical tests 2021-10-08 16:40:58 +01:00
ipip_flat_gre_key.sh selftests: forwarding: Add IP-in-IP GRE flat topology with key test 2019-01-20 11:12:58 -08:00
ipip_flat_gre_keys.sh selftests: forwarding: Add IP-in-IP GRE flat topology with keys test 2019-01-20 11:12:58 -08:00
ipip_flat_gre.sh selftests: forwarding: Add IP-in-IP GRE flat topology test 2019-01-20 11:12:58 -08:00
ipip_hier_gre_key.sh selftests: forwarding: Add IP-in-IP GRE hierarchical topology with key test 2019-01-20 11:12:58 -08:00
ipip_hier_gre_keys.sh selftests: forwarding: Add IP-in-IP GRE hierarchical topology with keys test 2019-01-20 11:12:58 -08:00
ipip_hier_gre.sh selftests: forwarding: Add IP-in-IP GRE hierarchical topology test 2019-01-20 11:12:58 -08:00
ipip_lib.sh selftests: forwarding: Add IP tunneling lib 2019-01-20 11:12:58 -08:00
lib.sh selftests: forwarding: add helper for retrieving IPv6 link-local address of interface 2022-04-23 12:18:16 +01:00
local_termination.sh selftests: forwarding: add a test for local_termination.sh 2022-04-23 12:18:16 +01:00
loopback.sh selftests: loopback.sh: skip this test if the driver does not support 2020-01-03 12:23:34 -08:00
Makefile selftests: forwarding: new test, verify host mdb entries 2022-04-12 10:06:53 +02:00
mirror_gre_bound.sh
mirror_gre_bridge_1d_vlan.sh selftests: forwarding: Fix packet matching in mirroring selftests 2021-11-10 14:38:44 +00:00
mirror_gre_bridge_1d.sh
mirror_gre_bridge_1q_lag.sh selftests: forwarding: mirror_gre_bridge_1q_lag: Ignore ARP 2019-02-01 15:26:37 -08:00
mirror_gre_bridge_1q.sh
mirror_gre_changes.sh selftests: forwarding: Fix packet matching in mirroring selftests 2021-11-10 14:38:44 +00:00
mirror_gre_flower.sh selftests: forwarding: mirror_gre_flower: Fix test result handling 2019-02-01 15:26:37 -08:00
mirror_gre_lag_lacp.sh
mirror_gre_lib.sh
mirror_gre_neigh.sh
mirror_gre_nh.sh
mirror_gre_topo_lib.sh
mirror_gre_vlan_bridge_1q.sh selftests: forwarding: Fix packet matching in mirroring selftests 2021-11-10 14:38:44 +00:00
mirror_gre_vlan.sh
mirror_gre.sh selftests: forwarding: use proto icmp for {gretap, ip6gretap}_mac testing 2020-02-16 18:31:48 -08:00
mirror_lib.sh selftests: forwarding: Fix packet matching in mirroring selftests 2021-11-10 14:38:44 +00:00
mirror_topo_lib.sh
mirror_vlan.sh selftests: forwarding: Fix packet matching in mirroring selftests 2021-11-10 14:38:44 +00:00
no_forwarding.sh selftests: forwarding: add a no_forwarding.sh test 2022-04-23 12:18:16 +01:00
pedit_dsfield.sh selftests: Clean forgotten resources as part of cleanup() 2021-06-08 14:39:07 -07:00
pedit_ip.sh selftests: forwarding: Add a test for pedit munge SIP and DIP 2022-02-07 11:59:57 +00:00
pedit_l4port.sh selftests: Clean forgotten resources as part of cleanup() 2021-06-08 14:39:07 -07:00
q_in_vni_ipv6.sh selftests: forwarding: Add Q-in-VNI test for IPv6 2021-12-22 17:14:34 -08:00
q_in_vni.sh selftests: forwarding: Add Q-in-VNI test 2020-12-08 15:45:57 -08:00
README
router_bridge_vlan.sh selftests: forwarding: Delete IPv6 address at the end 2019-12-09 10:19:45 -08:00
router_bridge.sh
router_broadcast.sh selftests: set sysctl bc_forwarding properly in router_broadcast.sh 2019-06-03 15:15:01 -07:00
router_mpath_nh_res.sh selftests/net: Use kselftest skip code for skipped tests 2021-08-24 16:49:09 -07:00
router_mpath_nh.sh selftests/net: Use kselftest skip code for skipped tests 2021-08-24 16:49:09 -07:00
router_multicast.sh selftests: forwarding: Add reverse path forwarding (RPF) test cases 2019-03-28 17:20:52 -07:00
router_multipath.sh selftests: forwarding: Specify interface when invoking mausezahn 2021-01-28 13:09:01 -08:00
router_nh.sh selftests: forwarding: Add device-only nexthop test 2020-11-20 15:20:20 -08:00
router_vid_1.sh selftests: forwarding: Add router test with VID 1 2018-12-20 15:48:54 -08:00
router.sh selftests: forwarding: router: Add test case for destination IP link-local 2020-01-06 13:38:37 -08:00
sch_ets_core.sh selftests: forwarding: sch_ets: Add test coverage for ETS Qdisc 2019-12-18 13:32:30 -08:00
sch_ets_tests.sh selftests: forwarding: ETS: Use Qdisc counters 2020-03-05 14:03:32 -08:00
sch_ets.sh selftests: forwarding: ETS: Use Qdisc counters 2020-03-05 14:03:32 -08:00
sch_red.sh selftests: forwarding: Add a RED test for SW datapath 2020-06-29 17:08:28 -07:00
sch_tbf_core.sh selftests: mlxsw: Add a TBF selftest 2020-01-25 10:56:31 +01:00
sch_tbf_ets.sh selftests: mlxsw: Add a TBF selftest 2020-01-25 10:56:31 +01:00
sch_tbf_etsprio.sh selftests: mlxsw: Test port shaper 2021-10-28 19:47:50 -07:00
sch_tbf_prio.sh selftests: mlxsw: Add a TBF selftest 2020-01-25 10:56:31 +01:00
sch_tbf_root.sh selftests: mlxsw: Add a TBF selftest 2020-01-25 10:56:31 +01:00
skbedit_priority.sh selftests: Clean forgotten resources as part of cleanup() 2021-06-08 14:39:07 -07:00
tc_actions.sh selftests: add a test case for mirred egress to ingress 2021-11-16 19:17:38 -08:00
tc_chains.sh selftests: forwarding: Fix spelling mistake "succeded" -> "succeeded" 2021-01-19 17:44:09 -08:00
tc_common.sh testing: selftests: tc_common: Add tc_check_at_least_x_packets() 2021-10-08 16:40:58 +01:00
tc_flower_router.sh selftests: tc: add ingress device matching support 2019-06-19 10:09:22 -04:00
tc_flower.sh net: re-solve some conflicts after net -> net-next merge 2021-02-16 23:12:23 -08:00
tc_mpls_l2vpn.sh selftests: forwarding: Add MPLS L2VPN test 2020-12-04 17:44:06 -08:00
tc_police.sh net/sched: act_police: more accurate MTU policing 2022-02-14 11:15:04 +00:00
tc_shblocks.sh selftests: tc: add ingress device matching support 2019-06-19 10:09:22 -04:00
tc_vlan_modify.sh selftests: forwarding: Test action VLAN modify 2019-03-28 17:20:52 -07:00
vxlan_asymmetric_ipv6.sh selftests: forwarding: Add a test for VxLAN asymmetric routing with IPv6 2021-12-22 17:14:34 -08:00
vxlan_asymmetric.sh selftests: forwarding: Add missing 'rp_filter' configuration 2020-10-18 12:47:32 -07:00
vxlan_bridge_1d_ipv6.sh selftests: forwarding: Add VxLAN tests with a VLAN-unaware bridge for IPv6 2021-12-22 17:14:32 -08:00
vxlan_bridge_1d_port_8472_ipv6.sh selftests: forwarding: Add VxLAN tests with a VLAN-unaware bridge for IPv6 2021-12-22 17:14:32 -08:00
vxlan_bridge_1d_port_8472.sh
vxlan_bridge_1d.sh selftests: forwarding: vxlan_bridge_1d: Add more ECN decap test cases 2021-03-29 13:29:49 -07:00
vxlan_bridge_1q_ipv6.sh selftests: forwarding: Add VxLAN tests with a VLAN-aware bridge for IPv6 2021-12-22 17:14:33 -08:00
vxlan_bridge_1q_port_8472_ipv6.sh selftests: forwarding: Add VxLAN tests with a VLAN-aware bridge for IPv6 2021-12-22 17:14:33 -08:00
vxlan_bridge_1q_port_8472.sh
vxlan_bridge_1q.sh selftests: forwarding: vxlan_bridge_1q: Remove unused function 2021-12-22 17:14:33 -08:00
vxlan_symmetric_ipv6.sh selftests: forwarding: Add a test for VxLAN symmetric routing with IPv6 2021-12-22 17:14:34 -08:00
vxlan_symmetric.sh selftests: forwarding: Add missing 'rp_filter' configuration 2020-10-18 12:47:32 -07:00

Motivation
==========

One of the nice things about network namespaces is that they allow one
to easily create and test complex environments.

Unfortunately, these namespaces can not be used with actual switching
ASICs, as their ports can not be migrated to other network namespaces
(NETIF_F_NETNS_LOCAL) and most of them probably do not support the
L1-separation provided by namespaces.

However, a similar kind of flexibility can be achieved by using VRFs and
by looping the switch ports together. For example:

                             br0
                              +
               vrf-h1         |           vrf-h2
                 +        +---+----+        +
                 |        |        |        |
    192.0.2.1/24 +        +        +        + 192.0.2.2/24
               swp1     swp2     swp3     swp4
                 +        +        +        +
                 |        |        |        |
                 +--------+        +--------+

The VRFs act as lightweight namespaces representing hosts connected to
the switch.

This approach for testing switch ASICs has several advantages over the
traditional method that requires multiple physical machines, to name a
few:

1. Only the device under test (DUT) is being tested without noise from
other system.

2. Ability to easily provision complex topologies. Testing bridging
between 4-ports LAGs or 8-way ECMP requires many physical links that are
not always available. With the VRF-based approach one merely needs to
loopback more ports.

These tests are written with switch ASICs in mind, but they can be run
on any Linux box using veth pairs to emulate physical loopbacks.

Guidelines for Writing Tests
============================

o Where possible, reuse an existing topology for different tests instead
  of recreating the same topology.
o Tests that use anything but the most trivial topologies should include
  an ASCII art showing the topology.
o Where possible, IPv6 and IPv4 addresses shall conform to RFC 3849 and
  RFC 5737, respectively.
o Where possible, tests shall be written so that they can be reused by
  multiple topologies and added to lib.sh.
o Checks shall be added to lib.sh for any external dependencies.
o Code shall be checked using ShellCheck [1] prior to submission.

1. https://www.shellcheck.net/