linux/tools/testing/selftests/net/forwarding
Petr Machata 855067defa selftests: mirror_gre_changes: Tighten up the TTL test match
This test verifies whether the encapsulated packets have the correct
configured TTL. It does so by sending ICMP packets through the test
topology and mirroring them to a gretap netdevice. On a busy host
however, more than just the test ICMP packets may end up flowing
through the topology, get mirrored, and counted. This leads to
potential spurious failures as the test observes much more mirrored
packets than the sent test packets, and assumes a bug.

Fix this by tightening up the mirror action match. Change it from
matchall to a flower classifier matching on ICMP packets specifically.

Fixes: 45315673e0 ("selftests: forwarding: Test changes in mirror-to-gretap")
Signed-off-by: Petr Machata <petrm@nvidia.com>
Tested-by: Mirsad Todorovac <mirsad.todorovac@alu.unizg.hr>
Reviewed-by: Ido Schimmel <idosch@nvidia.com>
Reviewed-by: Simon Horman <horms@kernel.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2023-08-14 11:14:24 +01:00
..
.gitignore
Makefile selftests: net: add tc flower cfm test 2023-06-12 17:01:45 -07:00
README
bridge_igmp.sh selftests: bridge_igmp: Remove unnecessary address deletion 2022-10-19 14:01:08 +01:00
bridge_locked_port.sh selftests: forwarding: Add MAC Authentication Bypass (MAB) test cases 2022-11-03 20:46:32 -07:00
bridge_mdb.sh selftests: forwarding: bridge_mdb: Make test more robust 2023-08-09 14:53:36 -07:00
bridge_mdb_host.sh selftests: forwarding: Rename bridge_mdb test 2022-12-12 15:33:37 -08:00
bridge_mdb_max.sh selftests: forwarding: bridge_mdb_max: Fix failing test with old libnet 2023-08-09 14:53:36 -07:00
bridge_mdb_port_down.sh selftest: net: bridge mdb add/del entry to port that is down 2022-07-04 10:30:06 +01:00
bridge_mld.sh selftests: net: bridge: update IGMP/MLD membership interval value 2021-10-29 13:58:21 +01:00
bridge_port_isolation.sh
bridge_sticky_fdb.sh
bridge_vlan_aware.sh selftests: net: bridge: Parameterize ageing timeout 2022-02-03 14:05:56 +00:00
bridge_vlan_mcast.sh selftests: bridge_vlan_mcast: Delete qdiscs during cleanup 2022-10-19 14:01:08 +01:00
bridge_vlan_unaware.sh selftests: net: bridge: Parameterize ageing timeout 2022-02-03 14:05:56 +00:00
config selftests: add a test case for mirred egress to ingress 2021-11-16 19:17:38 -08:00
custom_multipath_hash.sh selftests: forwarding: Fix failing tests with old libnet 2022-08-10 22:36:14 -07:00
devlink_lib.sh selftests: devlink_lib: Split out helper 2022-11-09 19:06:15 -08:00
dual_vxlan_bridge.sh selftests: forwarding: dual_vxlan_bridge: Disable IPv6 autogen on bridges 2023-06-21 14:02:52 -07:00
ethtool.sh selftests: forwarding: ethtool: Skip when using veth pairs 2023-08-09 14:53:35 -07:00
ethtool_extended_state.sh selftests: forwarding: ethtool_extended_state: Skip when using veth pairs 2023-08-09 14:53:35 -07:00
ethtool_lib.sh net: selftests: Add lanes setting test 2021-02-03 18:37:29 -08:00
ethtool_mm.sh selftests: forwarding: ethtool_mm: Skip when MAC Merge is not supported 2023-08-09 14:53:35 -07:00
fib_offload_lib.sh selftests: fib offload: use sensible tos values 2022-02-03 19:11:21 -08:00
forwarding.config.sample selftests: net: bridge: Parameterize ageing timeout 2022-02-03 14:05:56 +00:00
gre_custom_multipath_hash.sh selftests: forwarding: Fix failing tests with old libnet 2022-08-10 22:36:14 -07:00
gre_inner_v4_multipath.sh
gre_inner_v6_multipath.sh
gre_multipath.sh
gre_multipath_nh.sh selftests: forwarding: Add multipath tunneling nexthop test 2020-11-20 15:20:21 -08:00
gre_multipath_nh_res.sh selftests: forwarding: Add resilient multipath tunneling nexthop test 2021-03-12 17:44:10 -08:00
hw_stats_l3.sh selftests: forwarding: hw_stats_l3: Set addrgenmode in a separate step 2023-06-14 12:40:02 +02:00
hw_stats_l3_gre.sh selftests: forwarding: hw_stats_l3_gre: Skip when using veth pairs 2023-08-09 14:53:35 -07:00
ip6_forward_instats_vrf.sh selftests: forwarding: Set default IPv6 traceroute utility 2023-08-09 14:53:35 -07:00
ip6gre_custom_multipath_hash.sh selftests: forwarding: Fix failing tests with old libnet 2022-08-10 22:36:14 -07:00
ip6gre_flat.sh selftests: forwarding: Add IPv6 GRE flat tests 2021-10-08 16:40:58 +01:00
ip6gre_flat_key.sh selftests: forwarding: Add IPv6 GRE flat tests 2021-10-08 16:40:58 +01:00
ip6gre_flat_keys.sh selftests: forwarding: Add IPv6 GRE flat tests 2021-10-08 16:40:58 +01:00
ip6gre_hier.sh selftests: forwarding: Add IPv6 GRE hierarchical tests 2021-10-08 16:40:58 +01:00
ip6gre_hier_key.sh selftests: forwarding: Add IPv6 GRE hierarchical tests 2021-10-08 16:40:58 +01:00
ip6gre_hier_keys.sh selftests: forwarding: Add IPv6 GRE hierarchical tests 2021-10-08 16:40:58 +01:00
ip6gre_inner_v4_multipath.sh
ip6gre_inner_v6_multipath.sh
ip6gre_lib.sh selftests: forwarding: Add IPv6 GRE hierarchical tests 2021-10-08 16:40:58 +01:00
ipip_flat_gre.sh
ipip_flat_gre_key.sh
ipip_flat_gre_keys.sh
ipip_hier_gre.sh
ipip_hier_gre_key.sh
ipip_hier_gre_keys.sh
ipip_lib.sh
lib.sh selftests: forwarding: Add a helper to skip test when using veth pairs 2023-08-09 14:53:35 -07:00
local_termination.sh selftests: forwarding: add a test for local_termination.sh 2022-04-23 12:18:16 +01:00
loopback.sh
mirror_gre.sh
mirror_gre_bound.sh selftests: forwarding: mirror_gre_*: Disable IPv6 autogen on bridges 2023-06-21 14:02:52 -07:00
mirror_gre_bridge_1d.sh Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net 2023-06-22 18:40:38 -07:00
mirror_gre_bridge_1d_vlan.sh selftests: forwarding: mirror_gre_*: Use port MAC for bridge address 2023-06-21 14:02:52 -07:00
mirror_gre_bridge_1q.sh selftests: forwarding: Fix race condition in mirror installation 2023-06-22 10:03:07 +02:00
mirror_gre_bridge_1q_lag.sh selftests: forwarding: mirror_gre_*: Use port MAC for bridge address 2023-06-21 14:02:52 -07:00
mirror_gre_changes.sh selftests: mirror_gre_changes: Tighten up the TTL test match 2023-08-14 11:14:24 +01:00
mirror_gre_flower.sh
mirror_gre_lag_lacp.sh
mirror_gre_lib.sh
mirror_gre_neigh.sh
mirror_gre_nh.sh
mirror_gre_topo_lib.sh
mirror_gre_vlan.sh
mirror_gre_vlan_bridge_1q.sh selftests: forwarding: Fix packet matching in mirroring selftests 2021-11-10 14:38:44 +00:00
mirror_lib.sh selftests: forwarding: Fix packet matching in mirroring selftests 2021-11-10 14:38:44 +00:00
mirror_topo_lib.sh selftests: forwarding: mirror_gre_*: Disable IPv6 autogen on bridges 2023-06-21 14:02:52 -07:00
mirror_vlan.sh selftests: forwarding: Fix packet matching in mirroring selftests 2021-11-10 14:38:44 +00:00
no_forwarding.sh selftests: forwarding: add a no_forwarding.sh test 2022-04-23 12:18:16 +01:00
pedit_dsfield.sh selftests: forwarding: skbedit_priority: Disable IPv6 autogen on a bridge 2023-06-21 14:02:52 -07:00
pedit_ip.sh selftests: forwarding: Add a test for pedit munge SIP and DIP 2022-02-07 11:59:57 +00:00
pedit_l4port.sh selftests: Clean forgotten resources as part of cleanup() 2021-06-08 14:39:07 -07:00
q_in_vni.sh selftests: forwarding: q_in_vni: Disable IPv6 autogen on bridges 2023-06-21 14:02:51 -07:00
q_in_vni_ipv6.sh selftests: forwarding: Add Q-in-VNI test for IPv6 2021-12-22 17:14:34 -08:00
router.sh selftests: router.sh: Add a diagram 2022-05-04 11:21:32 +01:00
router_bridge.sh selftests: forwarding: router_bridge: Use port MAC for bridge address 2023-06-21 14:02:52 -07:00
router_bridge_vlan.sh selftests: router_bridge_vlan: Set vlan_default_pvid 0 on the bridge 2023-06-05 11:29:49 +01:00
router_broadcast.sh
router_mpath_nh.sh selftests/net: Use kselftest skip code for skipped tests 2021-08-24 16:49:09 -07:00
router_mpath_nh_res.sh selftests/net: Use kselftest skip code for skipped tests 2021-08-24 16:49:09 -07:00
router_multicast.sh selftests: forwarding: Add test cases for unresolved multicast routes 2022-09-20 08:22:15 -07:00
router_multipath.sh selftests: forwarding: Specify interface when invoking mausezahn 2021-01-28 13:09:01 -08:00
router_nh.sh selftests: forwarding: Add device-only nexthop test 2020-11-20 15:20:20 -08:00
router_vid_1.sh selftests: router_vid_1: Add a diagram, fix coding style 2022-05-04 11:21:32 +01:00
sch_ets.sh
sch_ets_core.sh
sch_ets_tests.sh
sch_red.sh selftests: forwarding: add shebang for sch_red.sh 2022-09-22 07:33:56 -07:00
sch_tbf_core.sh
sch_tbf_ets.sh
sch_tbf_etsprio.sh selftests: forwarding: sch_tbf_*: Add a pre-run hook 2023-04-20 20:03:21 -07:00
sch_tbf_prio.sh
sch_tbf_root.sh selftests: forwarding: sch_tbf_*: Add a pre-run hook 2023-04-20 20:03:21 -07:00
settings selftests: forwarding: Switch off timeout 2023-08-09 14:53:34 -07:00
skbedit_priority.sh selftests: forwarding: pedit_dsfield: Disable IPv6 autogen on a bridge 2023-06-21 14:02:52 -07:00
tc_actions.sh selftests: forwarding: tc_actions: Use ncat instead of nc 2023-08-09 14:53:35 -07:00
tc_chains.sh selftests: forwarding: Fix spelling mistake "succeded" -> "succeeded" 2021-01-19 17:44:09 -08:00
tc_common.sh testing: selftests: tc_common: Add tc_check_at_least_x_packets() 2021-10-08 16:40:58 +01:00
tc_flower.sh selftests: forwarding: tc_flower: Relax success criterion 2023-08-09 14:53:35 -07:00
tc_flower_cfm.sh selftests: net: add tc flower cfm test 2023-06-12 17:01:45 -07:00
tc_flower_l2_miss.sh selftests: forwarding: tc_flower_l2_miss: Fix failing test with old libnet 2023-08-09 14:53:36 -07:00
tc_flower_router.sh
tc_mpls_l2vpn.sh selftests: forwarding: Add MPLS L2VPN test 2020-12-04 17:44:06 -08:00
tc_police.sh net/sched: act_police: more accurate MTU policing 2022-02-14 11:15:04 +00:00
tc_shblocks.sh
tc_tunnel_key.sh selftests: forwarding: tc_tunnel_key: Make filters more specific 2023-08-09 14:53:35 -07:00
tc_vlan_modify.sh
tsn_lib.sh selftests: net: tsn_lib: run phc2sys in automatic mode 2022-09-26 13:22:01 -07:00
vxlan_asymmetric.sh selftests: net: Fix typo 'the the' in comment 2022-07-26 20:26:58 -07:00
vxlan_asymmetric_ipv6.sh selftests: forwarding: Add a test for VxLAN asymmetric routing with IPv6 2021-12-22 17:14:34 -08:00
vxlan_bridge_1d.sh selftests: forwarding: vxlan_bridge_1d: Add more ECN decap test cases 2021-03-29 13:29:49 -07:00
vxlan_bridge_1d_ipv6.sh selftests: forwarding: Add VxLAN tests with a VLAN-unaware bridge for IPv6 2021-12-22 17:14:32 -08:00
vxlan_bridge_1d_port_8472.sh
vxlan_bridge_1d_port_8472_ipv6.sh selftests: forwarding: Add VxLAN tests with a VLAN-unaware bridge for IPv6 2021-12-22 17:14:32 -08:00
vxlan_bridge_1q.sh selftests: forwarding: vxlan_bridge_1q: Remove unused function 2021-12-22 17:14:33 -08:00
vxlan_bridge_1q_ipv6.sh selftests: forwarding: Add VxLAN tests with a VLAN-aware bridge for IPv6 2021-12-22 17:14:33 -08:00
vxlan_bridge_1q_port_8472.sh
vxlan_bridge_1q_port_8472_ipv6.sh selftests: forwarding: Add VxLAN tests with a VLAN-aware bridge for IPv6 2021-12-22 17:14:33 -08:00
vxlan_symmetric.sh
vxlan_symmetric_ipv6.sh selftests: forwarding: Add a test for VxLAN symmetric routing with IPv6 2021-12-22 17:14:34 -08:00

README

Motivation
==========

One of the nice things about network namespaces is that they allow one
to easily create and test complex environments.

Unfortunately, these namespaces can not be used with actual switching
ASICs, as their ports can not be migrated to other network namespaces
(NETIF_F_NETNS_LOCAL) and most of them probably do not support the
L1-separation provided by namespaces.

However, a similar kind of flexibility can be achieved by using VRFs and
by looping the switch ports together. For example:

                             br0
                              +
               vrf-h1         |           vrf-h2
                 +        +---+----+        +
                 |        |        |        |
    192.0.2.1/24 +        +        +        + 192.0.2.2/24
               swp1     swp2     swp3     swp4
                 +        +        +        +
                 |        |        |        |
                 +--------+        +--------+

The VRFs act as lightweight namespaces representing hosts connected to
the switch.

This approach for testing switch ASICs has several advantages over the
traditional method that requires multiple physical machines, to name a
few:

1. Only the device under test (DUT) is being tested without noise from
other system.

2. Ability to easily provision complex topologies. Testing bridging
between 4-ports LAGs or 8-way ECMP requires many physical links that are
not always available. With the VRF-based approach one merely needs to
loopback more ports.

These tests are written with switch ASICs in mind, but they can be run
on any Linux box using veth pairs to emulate physical loopbacks.

Guidelines for Writing Tests
============================

o Where possible, reuse an existing topology for different tests instead
  of recreating the same topology.
o Tests that use anything but the most trivial topologies should include
  an ASCII art showing the topology.
o Where possible, IPv6 and IPv4 addresses shall conform to RFC 3849 and
  RFC 5737, respectively.
o Where possible, tests shall be written so that they can be reused by
  multiple topologies and added to lib.sh.
o Checks shall be added to lib.sh for any external dependencies.
o Code shall be checked using ShellCheck [1] prior to submission.

1. https://www.shellcheck.net/