Commit | Line | Data |
---|---|---|
6afb1e28 WT |
1 | #!/bin/bash |
2 | # In Namespace 0 (at_ns0) using native tunnel | |
3 | # Overlay IP: 10.1.1.100 | |
4 | # local 192.16.1.100 remote 192.16.1.200 | |
5 | # veth0 IP: 172.16.1.100, tunnel dev <type>00 | |
6 | ||
7 | # Out of Namespace using BPF set/get on lwtunnel | |
8 | # Overlay IP: 10.1.1.200 | |
9 | # local 172.16.1.200 remote 172.16.1.100 | |
10 | # veth1 IP: 172.16.1.200, tunnel dev <type>11 | |
11 | ||
12 | set -e | |
13 | ||
14 | function config_device { | |
15 | ip netns add at_ns0 | |
16 | ip link add veth0 type veth peer name veth1 | |
17 | ip link set veth0 netns at_ns0 | |
18 | ip netns exec at_ns0 ip addr add 172.16.1.100/24 dev veth0 | |
19 | ip netns exec at_ns0 ip link set dev veth0 up | |
20 | ip link set dev veth1 up | |
21 | ip addr add dev veth1 172.16.1.200/24 | |
22 | } | |
23 | ||
24 | function add_gre_tunnel { | |
25 | # in namespace | |
26 | ip netns exec at_ns0 \ | |
27 | ip link add dev $DEV_NS type $TYPE key 2 local 172.16.1.100 remote 172.16.1.200 | |
28 | ip netns exec at_ns0 ip link set dev $DEV_NS up | |
29 | ip netns exec at_ns0 ip addr add dev $DEV_NS 10.1.1.100/24 | |
30 | ||
31 | # out of namespace | |
32 | ip link add dev $DEV type $TYPE key 2 external | |
33 | ip link set dev $DEV up | |
34 | ip addr add dev $DEV 10.1.1.200/24 | |
35 | } | |
36 | ||
37 | function add_vxlan_tunnel { | |
38 | # Set static ARP entry here because iptables set-mark works | |
39 | # on L3 packet, as a result not applying to ARP packets, | |
40 | # causing errors at get_tunnel_{key/opt}. | |
41 | ||
42 | # in namespace | |
43 | ip netns exec at_ns0 \ | |
44 | ip link add dev $DEV_NS type $TYPE id 2 dstport 4789 gbp remote 172.16.1.200 | |
45 | ip netns exec at_ns0 ip link set dev $DEV_NS address 52:54:00:d9:01:00 up | |
46 | ip netns exec at_ns0 ip addr add dev $DEV_NS 10.1.1.100/24 | |
47 | ip netns exec at_ns0 arp -s 10.1.1.200 52:54:00:d9:02:00 | |
48 | ip netns exec at_ns0 iptables -A OUTPUT -j MARK --set-mark 0x800FF | |
49 | ||
50 | # out of namespace | |
51 | ip link add dev $DEV type $TYPE external gbp dstport 4789 | |
52 | ip link set dev $DEV address 52:54:00:d9:02:00 up | |
53 | ip addr add dev $DEV 10.1.1.200/24 | |
54 | arp -s 10.1.1.100 52:54:00:d9:01:00 | |
55 | } | |
56 | ||
57 | function add_geneve_tunnel { | |
58 | # in namespace | |
59 | ip netns exec at_ns0 \ | |
60 | ip link add dev $DEV_NS type $TYPE id 2 dstport 6081 remote 172.16.1.200 | |
61 | ip netns exec at_ns0 ip link set dev $DEV_NS up | |
62 | ip netns exec at_ns0 ip addr add dev $DEV_NS 10.1.1.100/24 | |
63 | ||
64 | # out of namespace | |
65 | ip link add dev $DEV type $TYPE dstport 6081 external | |
66 | ip link set dev $DEV up | |
67 | ip addr add dev $DEV 10.1.1.200/24 | |
68 | } | |
69 | ||
70 | function attach_bpf { | |
71 | DEV=$1 | |
72 | SET_TUNNEL=$2 | |
73 | GET_TUNNEL=$3 | |
74 | tc qdisc add dev $DEV clsact | |
75 | tc filter add dev $DEV egress bpf da obj tcbpf2_kern.o sec $SET_TUNNEL | |
76 | tc filter add dev $DEV ingress bpf da obj tcbpf2_kern.o sec $GET_TUNNEL | |
77 | } | |
78 | ||
79 | function test_gre { | |
80 | TYPE=gretap | |
81 | DEV_NS=gretap00 | |
82 | DEV=gretap11 | |
83 | config_device | |
84 | add_gre_tunnel | |
85 | attach_bpf $DEV gre_set_tunnel gre_get_tunnel | |
86 | ping -c 1 10.1.1.100 | |
87 | ip netns exec at_ns0 ping -c 1 10.1.1.200 | |
88 | } | |
89 | ||
90 | function test_vxlan { | |
91 | TYPE=vxlan | |
92 | DEV_NS=vxlan00 | |
93 | DEV=vxlan11 | |
94 | config_device | |
95 | add_vxlan_tunnel | |
96 | attach_bpf $DEV vxlan_set_tunnel vxlan_get_tunnel | |
97 | ping -c 1 10.1.1.100 | |
98 | ip netns exec at_ns0 ping -c 1 10.1.1.200 | |
99 | } | |
100 | ||
101 | function test_geneve { | |
102 | TYPE=geneve | |
103 | DEV_NS=geneve00 | |
104 | DEV=geneve11 | |
105 | config_device | |
106 | add_geneve_tunnel | |
107 | attach_bpf $DEV geneve_set_tunnel geneve_get_tunnel | |
108 | ping -c 1 10.1.1.100 | |
109 | ip netns exec at_ns0 ping -c 1 10.1.1.200 | |
110 | } | |
111 | ||
112 | function cleanup { | |
113 | ip netns delete at_ns0 | |
114 | ip link del veth1 | |
115 | ip link del $DEV | |
116 | } | |
117 | ||
118 | echo "Testing GRE tunnel..." | |
119 | test_gre | |
120 | cleanup | |
121 | echo "Testing VXLAN tunnel..." | |
122 | test_vxlan | |
123 | cleanup | |
124 | echo "Testing GENEVE tunnel..." | |
125 | test_geneve | |
126 | cleanup | |
127 | echo "Success" |