ip6gre_lib.sh 16 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518
  1. # SPDX-License-Identifier: GPL-2.0
  2. #!/bin/bash
  3. # Handles creation and destruction of IP-in-IP or GRE tunnels over the given
  4. # topology. Supports both flat and hierarchical models.
  5. #
  6. # Flat Model:
  7. # Overlay and underlay share the same VRF.
  8. # SW1 uses default VRF so tunnel has no bound dev.
  9. # SW2 uses non-default VRF tunnel has a bound dev.
  10. # +--------------------------------+
  11. # | H1 |
  12. # | $h1 + |
  13. # | 198.51.100.1/24 | |
  14. # | 2001:db8:1::1/64 | |
  15. # +-------------------------|------+
  16. # |
  17. # +-------------------------|-------------------+
  18. # | SW1 | |
  19. # | $ol1 + |
  20. # | 198.51.100.2/24 |
  21. # | 2001:db8:1::2/64 |
  22. # | |
  23. # | + g1a (ip6gre) |
  24. # | loc=2001:db8:3::1 |
  25. # | rem=2001:db8:3::2 --. |
  26. # | tos=inherit | |
  27. # | . |
  28. # | .--------------------- |
  29. # | | |
  30. # | v |
  31. # | + $ul1.111 (vlan) |
  32. # | | 2001:db8:10::1/64 |
  33. # | \ |
  34. # | \____________ |
  35. # | | |
  36. # | VRF default + $ul1 |
  37. # +---------------------|-----------------------+
  38. # |
  39. # +---------------------|-----------------------+
  40. # | SW2 | |
  41. # | $ul2 + |
  42. # | ___________| |
  43. # | / |
  44. # | / |
  45. # | + $ul2.111 (vlan) |
  46. # | ^ 2001:db8:10::2/64 |
  47. # | | |
  48. # | | |
  49. # | '----------------------. |
  50. # | + g2a (ip6gre) | |
  51. # | loc=2001:db8:3::2 | |
  52. # | rem=2001:db8:3::1 --' |
  53. # | tos=inherit |
  54. # | |
  55. # | + $ol2 |
  56. # | | 203.0.113.2/24 |
  57. # | VRF v$ol2 | 2001:db8:2::2/64 |
  58. # +---------------------|-----------------------+
  59. # +---------------------|----------+
  60. # | H2 | |
  61. # | $h2 + |
  62. # | 203.0.113.1/24 |
  63. # | 2001:db8:2::1/64 |
  64. # +--------------------------------+
  65. #
  66. # Hierarchical model:
  67. # The tunnel is bound to a device in a different VRF
  68. #
  69. # +--------------------------------+
  70. # | H1 |
  71. # | $h1 + |
  72. # | 198.51.100.1/24 | |
  73. # | 2001:db8:1::1/64 | |
  74. # +-------------------------|------+
  75. # |
  76. # +-------------------------|-------------------+
  77. # | SW1 | |
  78. # | +-----------------------|-----------------+ |
  79. # | | $ol1 + | |
  80. # | | 198.51.100.2/24 | |
  81. # | | 2001:db8:1::2/64 | |
  82. # | | | |
  83. # | | + g1a (ip6gre) | |
  84. # | | loc=2001:db8:3::1 | |
  85. # | | rem=2001:db8:3::2 | |
  86. # | | tos=inherit | |
  87. # | | ^ | |
  88. # | | VRF v$ol1 | | |
  89. # | +--------------------|--------------------+ |
  90. # | | |
  91. # | +--------------------|--------------------+ |
  92. # | | VRF v$ul1 | | |
  93. # | | | | |
  94. # | | v | |
  95. # | | dummy1 + | |
  96. # | | 2001:db8:3::1/64 | |
  97. # | | .-----------' | |
  98. # | | | | |
  99. # | | v | |
  100. # | | + $ul1.111 (vlan) | |
  101. # | | | 2001:db8:10::1/64 | |
  102. # | | \ | |
  103. # | | \__________ | |
  104. # | | | | |
  105. # | | + $ul1 | |
  106. # | +---------------------|-------------------+ |
  107. # +-----------------------|---------------------+
  108. # |
  109. # +-----------------------|---------------------+
  110. # | SW2 | |
  111. # | +---------------------|-------------------+ |
  112. # | | + $ul2 | |
  113. # | | _____| | |
  114. # | | / | |
  115. # | | / | |
  116. # | | | $ul2.111 (vlan) | |
  117. # | | + 2001:db8:10::2/64 | |
  118. # | | ^ | |
  119. # | | | | |
  120. # | | '------. | |
  121. # | | dummy2 + | |
  122. # | | 2001:db8:3::2/64 | |
  123. # | | ^ | |
  124. # | | | | |
  125. # | | | | |
  126. # | | VRF v$ul2 | | |
  127. # | +---------------------|-------------------+ |
  128. # | | |
  129. # | +---------------------|-------------------+ |
  130. # | | VRF v$ol2 | | |
  131. # | | | | |
  132. # | | v | |
  133. # | | g2a (ip6gre) + | |
  134. # | | loc=2001:db8:3::2 | |
  135. # | | rem=2001:db8:3::1 | |
  136. # | | tos=inherit | |
  137. # | | | |
  138. # | | $ol2 + | |
  139. # | | 203.0.113.2/24 | | |
  140. # | | 2001:db8:2::2/64 | | |
  141. # | +---------------------|-------------------+ |
  142. # +-----------------------|---------------------+
  143. # |
  144. # +-----------------------|--------+
  145. # | H2 | |
  146. # | $h2 + |
  147. # | 203.0.113.1/24 |
  148. # | 2001:db8:2::1/64 |
  149. # +--------------------------------+
  150. source lib.sh
  151. source tc_common.sh
  152. h1_create()
  153. {
  154. simple_if_init $h1 198.51.100.1/24 2001:db8:1::1/64
  155. ip route add vrf v$h1 203.0.113.0/24 via 198.51.100.2
  156. ip -6 route add vrf v$h1 2001:db8:2::/64 via 2001:db8:1::2
  157. }
  158. h1_destroy()
  159. {
  160. ip -6 route del vrf v$h1 2001:db8:2::/64 via 2001:db8:1::2
  161. ip route del vrf v$h1 203.0.113.0/24 via 198.51.100.2
  162. simple_if_fini $h1 198.51.100.1/24 2001:db8:1::1/64
  163. }
  164. h2_create()
  165. {
  166. simple_if_init $h2 203.0.113.1/24 2001:db8:2::1/64
  167. ip route add vrf v$h2 198.51.100.0/24 via 203.0.113.2
  168. ip -6 route add vrf v$h2 2001:db8:1::/64 via 2001:db8:2::2
  169. }
  170. h2_destroy()
  171. {
  172. ip -6 route del vrf v$h2 2001:db8:1::/64 via 2001:db8:2::2
  173. ip route del vrf v$h2 198.51.100.0/24 via 203.0.113.2
  174. simple_if_fini $h2 203.0.113.1/24 2001:db8:2::1/64
  175. }
  176. sw1_flat_create()
  177. {
  178. local ol1=$1; shift
  179. local ul1=$1; shift
  180. ip link set dev $ol1 up
  181. __addr_add_del $ol1 add 198.51.100.2/24 2001:db8:1::2/64
  182. ip link set dev $ul1 up
  183. vlan_create $ul1 111 "" 2001:db8:10::1/64
  184. tunnel_create g1a ip6gre 2001:db8:3::1 2001:db8:3::2 tos inherit \
  185. ttl inherit "$@"
  186. ip link set dev g1a up
  187. __addr_add_del g1a add "2001:db8:3::1/128"
  188. ip -6 route add 2001:db8:3::2/128 via 2001:db8:10::2
  189. ip route add 203.0.113.0/24 dev g1a
  190. ip -6 route add 2001:db8:2::/64 dev g1a
  191. }
  192. sw1_flat_destroy()
  193. {
  194. local ol1=$1; shift
  195. local ul1=$1; shift
  196. ip -6 route del 2001:db8:2::/64
  197. ip route del 203.0.113.0/24
  198. ip -6 route del 2001:db8:3::2/128 via 2001:db8:10::2
  199. __simple_if_fini g1a 2001:db8:3::1/128
  200. tunnel_destroy g1a
  201. vlan_destroy $ul1 111
  202. __simple_if_fini $ul1
  203. __simple_if_fini $ol1 198.51.100.2/24 2001:db8:1::2/64
  204. }
  205. sw2_flat_create()
  206. {
  207. local ol2=$1; shift
  208. local ul2=$1; shift
  209. simple_if_init $ol2 203.0.113.2/24 2001:db8:2::2/64
  210. __simple_if_init $ul2 v$ol2
  211. vlan_create $ul2 111 v$ol2 2001:db8:10::2/64
  212. tunnel_create g2a ip6gre 2001:db8:3::2 2001:db8:3::1 tos inherit \
  213. ttl inherit dev v$ol2 "$@"
  214. __simple_if_init g2a v$ol2 2001:db8:3::2/128
  215. # Replace neighbor to avoid 1 dropped packet due to "unresolved neigh"
  216. ip neigh replace dev $ol2 203.0.113.1 lladdr $(mac_get $h2)
  217. ip -6 neigh replace dev $ol2 2001:db8:2::1 lladdr $(mac_get $h2)
  218. ip -6 route add vrf v$ol2 2001:db8:3::1/128 via 2001:db8:10::1
  219. ip route add vrf v$ol2 198.51.100.0/24 dev g2a
  220. ip -6 route add vrf v$ol2 2001:db8:1::/64 dev g2a
  221. }
  222. sw2_flat_destroy()
  223. {
  224. local ol2=$1; shift
  225. local ul2=$1; shift
  226. ip -6 route del vrf v$ol2 2001:db8:2::/64
  227. ip route del vrf v$ol2 198.51.100.0/24
  228. ip -6 route del vrf v$ol2 2001:db8:3::1/128 via 2001:db8:10::1
  229. __simple_if_fini g2a 2001:db8:3::2/128
  230. tunnel_destroy g2a
  231. vlan_destroy $ul2 111
  232. __simple_if_fini $ul2
  233. simple_if_fini $ol2 203.0.113.2/24 2001:db8:2::2/64
  234. }
  235. sw1_hierarchical_create()
  236. {
  237. local ol1=$1; shift
  238. local ul1=$1; shift
  239. simple_if_init $ol1 198.51.100.2/24 2001:db8:1::2/64
  240. simple_if_init $ul1
  241. ip link add name dummy1 type dummy
  242. __simple_if_init dummy1 v$ul1 2001:db8:3::1/64
  243. vlan_create $ul1 111 v$ul1 2001:db8:10::1/64
  244. tunnel_create g1a ip6gre 2001:db8:3::1 2001:db8:3::2 tos inherit \
  245. ttl inherit dev dummy1 "$@"
  246. ip link set dev g1a master v$ol1
  247. ip -6 route add vrf v$ul1 2001:db8:3::2/128 via 2001:db8:10::2
  248. ip route add vrf v$ol1 203.0.113.0/24 dev g1a
  249. ip -6 route add vrf v$ol1 2001:db8:2::/64 dev g1a
  250. }
  251. sw1_hierarchical_destroy()
  252. {
  253. local ol1=$1; shift
  254. local ul1=$1; shift
  255. ip -6 route del vrf v$ol1 2001:db8:2::/64
  256. ip route del vrf v$ol1 203.0.113.0/24
  257. ip -6 route del vrf v$ul1 2001:db8:3::2/128
  258. tunnel_destroy g1a
  259. vlan_destroy $ul1 111
  260. __simple_if_fini dummy1 2001:db8:3::1/64
  261. ip link del dev dummy1
  262. simple_if_fini $ul1
  263. simple_if_fini $ol1 198.51.100.2/24 2001:db8:1::2/64
  264. }
  265. sw2_hierarchical_create()
  266. {
  267. local ol2=$1; shift
  268. local ul2=$1; shift
  269. simple_if_init $ol2 203.0.113.2/24 2001:db8:2::2/64
  270. simple_if_init $ul2
  271. ip link add name dummy2 type dummy
  272. __simple_if_init dummy2 v$ul2 2001:db8:3::2/64
  273. vlan_create $ul2 111 v$ul2 2001:db8:10::2/64
  274. tunnel_create g2a ip6gre 2001:db8:3::2 2001:db8:3::1 tos inherit \
  275. ttl inherit dev dummy2 "$@"
  276. ip link set dev g2a master v$ol2
  277. # Replace neighbor to avoid 1 dropped packet due to "unresolved neigh"
  278. ip neigh replace dev $ol2 203.0.113.1 lladdr $(mac_get $h2)
  279. ip -6 neigh replace dev $ol2 2001:db8:2::1 lladdr $(mac_get $h2)
  280. ip -6 route add vrf v$ul2 2001:db8:3::1/128 via 2001:db8:10::1
  281. ip route add vrf v$ol2 198.51.100.0/24 dev g2a
  282. ip -6 route add vrf v$ol2 2001:db8:1::/64 dev g2a
  283. }
  284. sw2_hierarchical_destroy()
  285. {
  286. local ol2=$1; shift
  287. local ul2=$1; shift
  288. ip -6 route del vrf v$ol2 2001:db8:2::/64
  289. ip route del vrf v$ol2 198.51.100.0/24
  290. ip -6 route del vrf v$ul2 2001:db8:3::1/128
  291. tunnel_destroy g2a
  292. vlan_destroy $ul2 111
  293. __simple_if_fini dummy2 2001:db8:3::2/64
  294. ip link del dev dummy2
  295. simple_if_fini $ul2
  296. simple_if_fini $ol2 203.0.113.2/24 2001:db8:2::2/64
  297. }
  298. test_traffic_ip4ip6()
  299. {
  300. RET=0
  301. h1mac=$(mac_get $h1)
  302. ol1mac=$(mac_get $ol1)
  303. tc qdisc add dev $ul1 clsact
  304. tc filter add dev $ul1 egress proto all pref 1 handle 101 \
  305. flower $TC_FLAG action pass
  306. tc qdisc add dev $ol2 clsact
  307. tc filter add dev $ol2 egress protocol ipv4 pref 1 handle 101 \
  308. flower $TC_FLAG dst_ip 203.0.113.1 action pass
  309. $MZ $h1 -c 1000 -p 64 -a $h1mac -b $ol1mac -A 198.51.100.1 \
  310. -B 203.0.113.1 -t ip -q -d $MZ_DELAY
  311. # Check ports after encap and after decap.
  312. tc_check_at_least_x_packets "dev $ul1 egress" 101 1000
  313. check_err $? "Packets did not go through $ul1, tc_flag = $TC_FLAG"
  314. tc_check_at_least_x_packets "dev $ol2 egress" 101 1000
  315. check_err $? "Packets did not go through $ol2, tc_flag = $TC_FLAG"
  316. log_test "$@"
  317. tc filter del dev $ol2 egress protocol ipv4 pref 1 handle 101 flower
  318. tc qdisc del dev $ol2 clsact
  319. tc filter del dev $ul1 egress proto all pref 1 handle 101 flower
  320. tc qdisc del dev $ul1 clsact
  321. }
  322. test_traffic_ip6ip6()
  323. {
  324. RET=0
  325. h1mac=$(mac_get $h1)
  326. ol1mac=$(mac_get $ol1)
  327. tc qdisc add dev $ul1 clsact
  328. tc filter add dev $ul1 egress proto all pref 1 handle 101 \
  329. flower $TC_FLAG action pass
  330. tc qdisc add dev $ol2 clsact
  331. tc filter add dev $ol2 egress protocol ipv6 pref 1 handle 101 \
  332. flower $TC_FLAG dst_ip 2001:db8:2::1 action pass
  333. $MZ -6 $h1 -c 1000 -p 64 -a $h1mac -b $ol1mac -A 2001:db8:1::1 \
  334. -B 2001:db8:2::1 -t ip -q -d $MZ_DELAY
  335. # Check ports after encap and after decap.
  336. tc_check_at_least_x_packets "dev $ul1 egress" 101 1000
  337. check_err $? "Packets did not go through $ul1, tc_flag = $TC_FLAG"
  338. tc_check_at_least_x_packets "dev $ol2 egress" 101 1000
  339. check_err $? "Packets did not go through $ol2, tc_flag = $TC_FLAG"
  340. log_test "$@"
  341. tc filter del dev $ol2 egress protocol ipv6 pref 1 handle 101 flower
  342. tc qdisc del dev $ol2 clsact
  343. tc filter del dev $ul1 egress proto all pref 1 handle 101 flower
  344. tc qdisc del dev $ul1 clsact
  345. }
  346. topo_mtu_change()
  347. {
  348. local mtu=$1
  349. ip link set mtu $mtu dev $h1
  350. ip link set mtu $mtu dev $ol1
  351. ip link set mtu $mtu dev g1a
  352. ip link set mtu $mtu dev $ul1
  353. ip link set mtu $mtu dev $ul1.111
  354. ip link set mtu $mtu dev $h2
  355. ip link set mtu $mtu dev $ol2
  356. ip link set mtu $mtu dev g2a
  357. ip link set mtu $mtu dev $ul2
  358. ip link set mtu $mtu dev $ul2.111
  359. }
  360. test_mtu_change()
  361. {
  362. RET=0
  363. ping6_do $h1 2001:db8:2::1 "-s 1800 -w 3"
  364. check_fail $? "ping GRE IPv6 should not pass with packet size 1800"
  365. RET=0
  366. topo_mtu_change 2000
  367. ping6_do $h1 2001:db8:2::1 "-s 1800 -w 3"
  368. check_err $?
  369. log_test "ping GRE IPv6, packet size 1800 after MTU change"
  370. }
  371. topo_flat_remote_change()
  372. {
  373. local old1=$1; shift
  374. local new1=$1; shift
  375. local old2=$1; shift
  376. local new2=$1; shift
  377. ip link set dev g1a type ip6gre local $new1 remote $new2
  378. __addr_add_del g1a add "$new1/128"
  379. __addr_add_del g1a del "$old1/128"
  380. ip -6 route add $new2/128 via 2001:db8:10::2
  381. ip -6 route del $old2/128
  382. ip link set dev g2a type ip6gre local $new2 remote $new1
  383. __addr_add_del g2a add "$new2/128"
  384. __addr_add_del g2a del "$old2/128"
  385. ip -6 route add vrf v$ol2 $new1/128 via 2001:db8:10::1
  386. ip -6 route del vrf v$ol2 $old1/128
  387. }
  388. flat_remote_change()
  389. {
  390. local old1=2001:db8:3::1
  391. local new1=2001:db8:3::10
  392. local old2=2001:db8:3::2
  393. local new2=2001:db8:3::20
  394. topo_flat_remote_change $old1 $new1 $old2 $new2
  395. }
  396. flat_remote_restore()
  397. {
  398. local old1=2001:db8:3::10
  399. local new1=2001:db8:3::1
  400. local old2=2001:db8:3::20
  401. local new2=2001:db8:3::2
  402. topo_flat_remote_change $old1 $new1 $old2 $new2
  403. }
  404. topo_hier_remote_change()
  405. {
  406. local old1=$1; shift
  407. local new1=$1; shift
  408. local old2=$1; shift
  409. local new2=$1; shift
  410. __addr_add_del dummy1 del "$old1/64"
  411. __addr_add_del dummy1 add "$new1/64"
  412. ip link set dev g1a type ip6gre local $new1 remote $new2
  413. ip -6 route add vrf v$ul1 $new2/128 via 2001:db8:10::2
  414. ip -6 route del vrf v$ul1 $old2/128
  415. __addr_add_del dummy2 del "$old2/64"
  416. __addr_add_del dummy2 add "$new2/64"
  417. ip link set dev g2a type ip6gre local $new2 remote $new1
  418. ip -6 route add vrf v$ul2 $new1/128 via 2001:db8:10::1
  419. ip -6 route del vrf v$ul2 $old1/128
  420. }
  421. hier_remote_change()
  422. {
  423. local old1=2001:db8:3::1
  424. local new1=2001:db8:3::10
  425. local old2=2001:db8:3::2
  426. local new2=2001:db8:3::20
  427. topo_hier_remote_change $old1 $new1 $old2 $new2
  428. }
  429. hier_remote_restore()
  430. {
  431. local old1=2001:db8:3::10
  432. local new1=2001:db8:3::1
  433. local old2=2001:db8:3::20
  434. local new2=2001:db8:3::2
  435. topo_hier_remote_change $old1 $new1 $old2 $new2
  436. }