selftests: Add ipv6 udp tests to fcnal-test

Add IPv6 udp tests to fcnal-test.sh. Covers the permutations of directly
connected addresses, routed destinations, VRF and non-VRF, and expected
failures for both clients and servers. Includes permutations with
net.ipv4.udp_l3mdev_accept set to 0 and 1.

Signed-off-by: David Ahern <dsahern@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

diff --git a/tools/testing/selftests/net/fcnal-test.sh b/tools/testing/selftests/net/fcnal-test.sh
index afe9eb55d04a88de4237ba12e8fb2ad32c5e7d1a..2a2e692bc2421db1212a0832acffdfe63ea0c9b4 100755 (executable)
--- a/tools/testing/selftests/net/fcnal-test.sh
+++ b/tools/testing/selftests/net/fcnal-test.sh
@@ -2048,6 +2048,495 @@ ipv6_tcp()
        ipv6_tcp_vrf
 }
 
+################################################################################
+# IPv6 UDP
+
+ipv6_udp_novrf()
+{
+       local a
+
+       #
+       # server tests
+       #
+       for a in ${NSA_IP6} ${NSA_LINKIP6}%${NSB_DEV}
+       do
+               log_start
+               run_cmd nettest -6 -D -s -2 ${NSA_DEV} &
+               sleep 1
+               run_cmd_nsb nettest -6 -D -r ${a}
+               log_test_addr ${a} $? 0 "Global server"
+
+               log_start
+               run_cmd nettest -6 -D -d ${NSA_DEV} -s -2 ${NSA_DEV} &
+               sleep 1
+               run_cmd_nsb nettest -6 -D -r ${a}
+               log_test_addr ${a} $? 0 "Device server"
+       done
+
+       a=${NSA_LO_IP6}
+       log_start
+       run_cmd nettest -6 -D -s -2 ${NSA_DEV} &
+       sleep 1
+       run_cmd_nsb nettest -6 -D -r ${a}
+       log_test_addr ${a} $? 0 "Global server"
+
+       # should fail since loopback address is out of scope for a device
+       # bound server, but it does not - hence this is more documenting
+       # behavior.
+       #log_start
+       #show_hint "Should fail since loopback address is out of scope"
+       #run_cmd nettest -6 -D -d ${NSA_DEV} -s -2 ${NSA_DEV} &
+       #sleep 1
+       #run_cmd_nsb nettest -6 -D -r ${a}
+       #log_test_addr ${a} $? 1 "Device server"
+
+       # negative test - should fail
+       for a in ${NSA_IP6} ${NSA_LO_IP6} ${NSA_LINKIP6}%${NSB_DEV}
+       do
+               log_start
+               show_hint "Should fail 'Connection refused' since there is no server"
+               run_cmd_nsb nettest -6 -D -r ${a}
+               log_test_addr ${a} $? 1 "No server"
+       done
+
+       #
+       # client
+       #
+       for a in ${NSB_IP6} ${NSB_LO_IP6} ${NSB_LINKIP6}%${NSA_DEV}
+       do
+               log_start
+               run_cmd_nsb nettest -6 -D -s &
+               sleep 1
+               run_cmd nettest -6 -D -r ${a} -0 ${NSA_IP6}
+               log_test_addr ${a} $? 0 "Client"
+
+               log_start
+               run_cmd_nsb nettest -6 -D -s &
+               sleep 1
+               run_cmd nettest -6 -D -r ${a} -d ${NSA_DEV} -0 ${NSA_IP6}
+               log_test_addr ${a} $? 0 "Client, device bind"
+
+               log_start
+               run_cmd_nsb nettest -6 -D -s &
+               sleep 1
+               run_cmd nettest -6 -D -r ${a} -d ${NSA_DEV} -C -0 ${NSA_IP6}
+               log_test_addr ${a} $? 0 "Client, device send via cmsg"
+
+               log_start
+               run_cmd_nsb nettest -6 -D -s &
+               sleep 1
+               run_cmd nettest -6 -D -r ${a} -d ${NSA_DEV} -S -0 ${NSA_IP6}
+               log_test_addr ${a} $? 0 "Client, device bind via IPV6_UNICAST_IF"
+
+               log_start
+               show_hint "Should fail 'Connection refused'"
+               run_cmd nettest -6 -D -r ${a}
+               log_test_addr ${a} $? 1 "No server, unbound client"
+
+               log_start
+               show_hint "Should fail 'Connection refused'"
+               run_cmd nettest -6 -D -r ${a} -d ${NSA_DEV}
+               log_test_addr ${a} $? 1 "No server, device client"
+       done
+
+       #
+       # local address tests
+       #
+       for a in ${NSA_IP6} ${NSA_LO_IP6} ::1
+       do
+               log_start
+               run_cmd nettest -6 -D -s &
+               sleep 1
+               run_cmd nettest -6 -D -r ${a} -0 ${a} -1 ${a}
+               log_test_addr ${a} $? 0 "Global server, local connection"
+       done
+
+       a=${NSA_IP6}
+       log_start
+       run_cmd nettest -6 -s -D -d ${NSA_DEV} -2 ${NSA_DEV} &
+       sleep 1
+       run_cmd nettest -6 -D -r ${a}
+       log_test_addr ${a} $? 0 "Device server, unbound client, local connection"
+
+       for a in ${NSA_LO_IP6} ::1
+       do
+               log_start
+               show_hint "Should fail 'Connection refused' since address is out of device scope"
+               run_cmd nettest -6 -s -D -d ${NSA_DEV} &
+               sleep 1
+               run_cmd nettest -6 -D -r ${a}
+               log_test_addr ${a} $? 1 "Device server, local connection"
+       done
+
+       a=${NSA_IP6}
+       log_start
+       run_cmd nettest -6 -s -D &
+       sleep 1
+       run_cmd nettest -6 -D -d ${NSA_DEV} -r ${a}
+       log_test_addr ${a} $? 0 "Global server, device client, local connection"
+
+       log_start
+       run_cmd nettest -6 -s -D &
+       sleep 1
+       run_cmd nettest -6 -D -d ${NSA_DEV} -C -r ${a}
+       log_test_addr ${a} $? 0 "Global server, device send via cmsg, local connection"
+
+       log_start
+       run_cmd nettest -6 -s -D &
+       sleep 1
+       run_cmd nettest -6 -D -d ${NSA_DEV} -S -r ${a}
+       log_test_addr ${a} $? 0 "Global server, device client via IPV6_UNICAST_IF, local connection"
+
+       for a in ${NSA_LO_IP6} ::1
+       do
+               log_start
+               show_hint "Should fail 'No route to host' since addresses on loopback are out of device scope"
+               run_cmd nettest -6 -D -s &
+               sleep 1
+               run_cmd nettest -6 -D -r ${a} -d ${NSA_DEV}
+               log_test_addr ${a} $? 1 "Global server, device client, local connection"
+
+               log_start
+               show_hint "Should fail 'No route to host' since addresses on loopback are out of device scope"
+               run_cmd nettest -6 -D -s &
+               sleep 1
+               run_cmd nettest -6 -D -r ${a} -d ${NSA_DEV} -C
+               log_test_addr ${a} $? 1 "Global server, device send via cmsg, local connection"
+
+               log_start
+               show_hint "Should fail 'No route to host' since addresses on loopback are out of device scope"
+               run_cmd nettest -6 -D -s &
+               sleep 1
+               run_cmd nettest -6 -D -r ${a} -d ${NSA_DEV} -S
+               log_test_addr ${a} $? 1 "Global server, device client via IP_UNICAST_IF, local connection"
+       done
+
+       a=${NSA_IP6}
+       log_start
+       run_cmd nettest -6 -D -s -d ${NSA_DEV} -2 ${NSA_DEV} &
+       sleep 1
+       run_cmd nettest -6 -D -d ${NSA_DEV} -r ${a} -0 ${a}
+       log_test_addr ${a} $? 0 "Device server, device client, local conn"
+
+       log_start
+       show_hint "Should fail 'Connection refused'"
+       run_cmd nettest -6 -D -d ${NSA_DEV} -r ${a}
+       log_test_addr ${a} $? 1 "No server, device client, local conn"
+
+       # LLA to GUA
+       run_cmd_nsb ip -6 addr del ${NSB_IP6}/64 dev ${NSB_DEV}
+       run_cmd_nsb ip -6 ro add ${NSA_IP6}/128 dev ${NSB_DEV}
+       log_start
+       run_cmd nettest -6 -s -D &
+       sleep 1
+       run_cmd_nsb nettest -6 -D -r ${NSA_IP6}
+       log_test $? 0 "UDP in - LLA to GUA"
+
+       run_cmd_nsb ip -6 ro del ${NSA_IP6}/128 dev ${NSB_DEV}
+       run_cmd_nsb ip -6 addr add ${NSB_IP6}/64 dev ${NSB_DEV} nodad
+}
+
+ipv6_udp_vrf()
+{
+       local a
+
+       # disable global server
+       log_subsection "Global server disabled"
+       set_sysctl net.ipv4.udp_l3mdev_accept=0
+
+       #
+       # server tests
+       #
+       for a in ${NSA_IP6} ${VRF_IP6}
+       do
+               log_start
+               show_hint "Should fail 'Connection refused' since global server is disabled"
+               run_cmd nettest -6 -D -s &
+               sleep 1
+               run_cmd_nsb nettest -6 -D -r ${a}
+               log_test_addr ${a} $? 1 "Global server"
+       done
+
+       for a in ${NSA_IP6} ${VRF_IP6}
+       do
+               log_start
+               run_cmd nettest -6 -D -d ${VRF} -s -2 ${NSA_DEV} &
+               sleep 1
+               run_cmd_nsb nettest -6 -D -r ${a}
+               log_test_addr ${a} $? 0 "VRF server"
+       done
+
+       for a in ${NSA_IP6} ${VRF_IP6}
+       do
+               log_start
+               run_cmd nettest -6 -D -d ${NSA_DEV} -s -2 ${NSA_DEV} &
+               sleep 1
+               run_cmd_nsb nettest -6 -D -r ${a}
+               log_test_addr ${a} $? 0 "Enslaved device server"
+       done
+
+       # negative test - should fail
+       for a in ${NSA_IP6} ${VRF_IP6}
+       do
+               log_start
+               show_hint "Should fail 'Connection refused' since there is no server"
+               run_cmd_nsb nettest -6 -D -r ${a}
+               log_test_addr ${a} $? 1 "No server"
+       done
+
+       #
+       # local address tests
+       #
+       for a in ${NSA_IP6} ${VRF_IP6}
+       do
+               log_start
+               show_hint "Should fail 'Connection refused' since global server is disabled"
+               run_cmd nettest -6 -D -s &
+               sleep 1
+               run_cmd nettest -6 -D -d ${VRF} -r ${a}
+               log_test_addr ${a} $? 1 "Global server, VRF client, local conn"
+       done
+
+       for a in ${NSA_IP6} ${VRF_IP6}
+       do
+               log_start
+               run_cmd nettest -6 -D -d ${VRF} -s &
+               sleep 1
+               run_cmd nettest -6 -D -d ${VRF} -r ${a}
+               log_test_addr ${a} $? 0 "VRF server, VRF client, local conn"
+       done
+
+       a=${NSA_IP6}
+       log_start
+       show_hint "Should fail 'Connection refused' since global server is disabled"
+       run_cmd nettest -6 -D -s &
+       sleep 1
+       run_cmd nettest -6 -D -d ${NSA_DEV} -r ${a}
+       log_test_addr ${a} $? 1 "Global server, device client, local conn"
+
+       log_start
+       run_cmd nettest -6 -D -d ${VRF} -s -2 ${NSA_DEV} &
+       sleep 1
+       run_cmd nettest -6 -D -d ${NSA_DEV} -r ${a}
+       log_test_addr ${a} $? 0 "VRF server, device client, local conn"
+
+       log_start
+       run_cmd nettest -6 -D -d ${NSA_DEV} -s -2 ${NSA_DEV} &
+       sleep 1
+       run_cmd nettest -6 -D -d ${VRF} -r ${a}
+       log_test_addr ${a} $? 0 "Enslaved device server, VRF client, local conn"
+
+       log_start
+       run_cmd nettest -6 -D -d ${NSA_DEV} -s -2 ${NSA_DEV} &
+       sleep 1
+       run_cmd nettest -6 -D -d ${NSA_DEV} -r ${a}
+       log_test_addr ${a} $? 0 "Enslaved device server, device client, local conn"
+
+       # disable global server
+       log_subsection "Global server enabled"
+       set_sysctl net.ipv4.udp_l3mdev_accept=1
+
+       #
+       # server tests
+       #
+       for a in ${NSA_IP6} ${VRF_IP6}
+       do
+               log_start
+               run_cmd nettest -6 -D -s -2 ${NSA_DEV} &
+               sleep 1
+               run_cmd_nsb nettest -6 -D -r ${a}
+               log_test_addr ${a} $? 0 "Global server"
+       done
+
+       for a in ${NSA_IP6} ${VRF_IP6}
+       do
+               log_start
+               run_cmd nettest -6 -D -d ${VRF} -s -2 ${NSA_DEV} &
+               sleep 1
+               run_cmd_nsb nettest -6 -D -r ${a}
+               log_test_addr ${a} $? 0 "VRF server"
+       done
+
+       for a in ${NSA_IP6} ${VRF_IP6}
+       do
+               log_start
+               run_cmd nettest -6 -D -d ${NSA_DEV} -s -2 ${NSA_DEV} &
+               sleep 1
+               run_cmd_nsb nettest -6 -D -r ${a}
+               log_test_addr ${a} $? 0 "Enslaved device server"
+       done
+
+       # negative test - should fail
+       for a in ${NSA_IP6} ${VRF_IP6}
+       do
+               log_start
+               run_cmd_nsb nettest -6 -D -r ${a}
+               log_test_addr ${a} $? 1 "No server"
+       done
+
+       #
+       # client tests
+       #
+       log_start
+       run_cmd_nsb nettest -6 -D -s &
+       sleep 1
+       run_cmd nettest -6 -D -d ${VRF} -r ${NSB_IP6}
+       log_test $? 0 "VRF client"
+
+       # negative test - should fail
+       log_start
+       run_cmd nettest -6 -D -d ${VRF} -r ${NSB_IP6}
+       log_test $? 1 "No server, VRF client"
+
+       log_start
+       run_cmd_nsb nettest -6 -D -s &
+       sleep 1
+       run_cmd nettest -6 -D -d ${NSA_DEV} -r ${NSB_IP6}
+       log_test $? 0 "Enslaved device client"
+
+       # negative test - should fail
+       log_start
+       run_cmd nettest -6 -D -d ${NSA_DEV} -r ${NSB_IP6}
+       log_test $? 1 "No server, enslaved device client"
+
+       #
+       # local address tests
+       #
+       a=${NSA_IP6}
+       log_start
+       run_cmd nettest -6 -D -s -2 ${NSA_DEV} &
+       sleep 1
+       run_cmd nettest -6 -D -d ${VRF} -r ${a}
+       log_test_addr ${a} $? 0 "Global server, VRF client, local conn"
+
+       #log_start
+       run_cmd nettest -6 -D -d ${VRF} -s -2 ${NSA_DEV} &
+       sleep 1
+       run_cmd nettest -6 -D -d ${VRF} -r ${a}
+       log_test_addr ${a} $? 0 "VRF server, VRF client, local conn"
+
+
+       a=${VRF_IP6}
+       log_start
+       run_cmd nettest -6 -D -s -2 ${VRF} &
+       sleep 1
+       run_cmd nettest -6 -D -d ${VRF} -r ${a}
+       log_test_addr ${a} $? 0 "Global server, VRF client, local conn"
+
+       log_start
+       run_cmd nettest -6 -D -d ${VRF} -s -2 ${VRF} &
+       sleep 1
+       run_cmd nettest -6 -D -d ${VRF} -r ${a}
+       log_test_addr ${a} $? 0 "VRF server, VRF client, local conn"
+
+       # negative test - should fail
+       for a in ${NSA_IP6} ${VRF_IP6}
+       do
+               log_start
+               run_cmd nettest -6 -D -d ${VRF} -r ${a}
+               log_test_addr ${a} $? 1 "No server, VRF client, local conn"
+       done
+
+       # device to global IP
+       a=${NSA_IP6}
+       log_start
+       run_cmd nettest -6 -D -s -2 ${NSA_DEV} &
+       sleep 1
+       run_cmd nettest -6 -D -d ${NSA_DEV} -r ${a}
+       log_test_addr ${a} $? 0 "Global server, device client, local conn"
+
+       log_start
+       run_cmd nettest -6 -D -d ${VRF} -s -2 ${NSA_DEV} &
+       sleep 1
+       run_cmd nettest -6 -D -d ${NSA_DEV} -r ${a}
+       log_test_addr ${a} $? 0 "VRF server, device client, local conn"
+
+       log_start
+       run_cmd nettest -6 -D -d ${NSA_DEV} -s -2 ${NSA_DEV} &
+       sleep 1
+       run_cmd nettest -6 -D -d ${VRF} -r ${a}
+       log_test_addr ${a} $? 0 "Device server, VRF client, local conn"
+
+       log_start
+       run_cmd nettest -6 -D -d ${NSA_DEV} -s -2 ${NSA_DEV} &
+       sleep 1
+       run_cmd nettest -6 -D -d ${NSA_DEV} -r ${a}
+       log_test_addr ${a} $? 0 "Device server, device client, local conn"
+
+       log_start
+       run_cmd nettest -6 -D -d ${NSA_DEV} -r ${a}
+       log_test_addr ${a} $? 1 "No server, device client, local conn"
+
+
+       # link local addresses
+       log_start
+       run_cmd nettest -6 -D -s &
+       sleep 1
+       run_cmd_nsb nettest -6 -D -d ${NSB_DEV} -r ${NSA_LINKIP6}
+       log_test $? 0 "Global server, linklocal IP"
+
+       log_start
+       run_cmd_nsb nettest -6 -D -d ${NSB_DEV} -r ${NSA_LINKIP6}
+       log_test $? 1 "No server, linklocal IP"
+
+
+       log_start
+       run_cmd_nsb nettest -6 -D -s &
+       sleep 1
+       run_cmd nettest -6 -D -d ${NSA_DEV} -r ${NSB_LINKIP6}
+       log_test $? 0 "Enslaved device client, linklocal IP"
+
+       log_start
+       run_cmd nettest -6 -D -d ${NSA_DEV} -r ${NSB_LINKIP6}
+       log_test $? 1 "No server, device client, peer linklocal IP"
+
+
+       log_start
+       run_cmd nettest -6 -D -s &
+       sleep 1
+       run_cmd nettest -6 -D -d ${NSA_DEV} -r ${NSA_LINKIP6}
+       log_test $? 0 "Enslaved device client, local conn - linklocal IP"
+
+       log_start
+       run_cmd nettest -6 -D -d ${NSA_DEV} -r ${NSA_LINKIP6}
+       log_test $? 1 "No server, device client, local conn  - linklocal IP"
+
+       # LLA to GUA
+       run_cmd_nsb ip -6 addr del ${NSB_IP6}/64 dev ${NSB_DEV}
+       run_cmd_nsb ip -6 ro add ${NSA_IP6}/128 dev ${NSB_DEV}
+       log_start
+       run_cmd nettest -6 -s -D &
+       sleep 1
+       run_cmd_nsb nettest -6 -D -r ${NSA_IP6}
+       log_test $? 0 "UDP in - LLA to GUA"
+
+       run_cmd_nsb ip -6 ro del ${NSA_IP6}/128 dev ${NSB_DEV}
+       run_cmd_nsb ip -6 addr add ${NSB_IP6}/64 dev ${NSB_DEV} nodad
+}
+
+ipv6_udp()
+{
+        # should not matter, but set to known state
+        set_sysctl net.ipv4.udp_early_demux=1
+
+        log_section "IPv6/UDP"
+        log_subsection "No VRF"
+        setup
+
+        # udp_l3mdev_accept should have no affect without VRF;
+        # run tests with it enabled and disabled to verify
+        log_subsection "udp_l3mdev_accept disabled"
+        set_sysctl net.ipv4.udp_l3mdev_accept=0
+        ipv6_udp_novrf
+        log_subsection "udp_l3mdev_accept enabled"
+        set_sysctl net.ipv4.udp_l3mdev_accept=1
+        ipv6_udp_novrf
+
+        log_subsection "With VRF"
+        setup "yes"
+        ipv6_udp_vrf
+}
+
 ################################################################################
 # usage
 
@@ -2069,7 +2558,7 @@ EOF
 # main
 
 TESTS_IPV4="ipv4_ping ipv4_tcp ipv4_udp"
-TESTS_IPV6="ipv6_ping ipv6_tcp"
+TESTS_IPV6="ipv6_ping ipv6_tcp ipv6_udp"
 PAUSE_ON_FAIL=no
 PAUSE=no
 
@@ -2113,6 +2602,7 @@ do
 
        ipv6_ping|ping6) ipv6_ping;;
        ipv6_tcp|tcp6)   ipv6_tcp;;
+       ipv6_udp|udp6)   ipv6_udp;;
 
        # setup namespaces and config, but do not run any tests
        setup)           setup; exit 0;;