Skip to content

Commit 03f1c26

Browse files
Alexis Bauvindavem330
Alexis Bauvin
authored and
davem330
committed
test/net: Add script for VXLAN underlay in a VRF
This script tests the support of a VXLAN underlay in a non-default VRF. It does so by simulating two hypervisors and two VMs, an extended L2 between the VMs with the hypervisors as VTEPs with the underlay in a VRF, and finally by pinging the two VMs. It also tests that moving the underlay from a VRF to another works when down/up the VXLAN interface. Signed-off-by: Alexis Bauvin <abauvin@scaleway.com> Reviewed-by: Amine Kherbouche <akherbouche@scaleway.com> Reviewed-by: David Ahern <dsahern@gmail.com> Tested-by: Amine Kherbouche <akherbouche@scaleway.com> Signed-off-by: David S. Miller <davem@davemloft.net>
1 parent aab8cc3 commit 03f1c26

File tree

2 files changed

+130
-1
lines changed

2 files changed

+130
-1
lines changed

‎tools/testing/selftests/net/Makefile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ CFLAGS += -I../../../../usr/include/
77
TEST_PROGS := run_netsocktests run_afpackettests test_bpf.sh netdevice.sh rtnetlink.sh
88
TEST_PROGS += fib_tests.sh fib-onlink-tests.sh pmtu.sh udpgso.sh ip_defrag.sh
99
TEST_PROGS += udpgso_bench.sh fib_rule_tests.sh msg_zerocopy.sh psock_snd.sh
10-
TEST_PROGS += udpgro_bench.sh udpgro.sh
10+
TEST_PROGS += udpgro_bench.sh udpgro.sh test_vxlan_under_vrf.sh
1111
TEST_PROGS_EXTENDED := in_netns.sh
1212
TEST_GEN_FILES = socket
1313
TEST_GEN_FILES += psock_fanout psock_tpacket msg_zerocopy

‎tools/testing/selftests/net/test_vxlan_under_vrf.sh

Lines changed: 129 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,129 @@
1+
#!/bin/bash
2+
# SPDX-License-Identifier: GPL-2.0
3+
4+
# This test is for checking VXLAN underlay in a non-default VRF.
5+
#
6+
# It simulates two hypervisors running a VM each using four network namespaces:
7+
# two for the HVs, two for the VMs.
8+
# A small VXLAN tunnel is made between the two hypervisors to have the two vms
9+
# in the same virtual L2:
10+
#
11+
# +-------------------+ +-------------------+
12+
# | | | |
13+
# | vm-1 netns | | vm-2 netns |
14+
# | | | |
15+
# | +-------------+ | | +-------------+ |
16+
# | | veth-hv | | | | veth-hv | |
17+
# | | 10.0.0.1/24 | | | | 10.0.0.2/24 | |
18+
# | +-------------+ | | +-------------+ |
19+
# | . | | . |
20+
# +-------------------+ +-------------------+
21+
# . .
22+
# . .
23+
# . .
24+
# +-----------------------------------+ +------------------------------------+
25+
# | . | | . |
26+
# | +----------+ | | +----------+ |
27+
# | | veth-tap | | | | veth-tap | |
28+
# | +----+-----+ | | +----+-----+ |
29+
# | | | | | |
30+
# | +--+--+ +--------------+ | | +--------------+ +--+--+ |
31+
# | | br0 | | vrf-underlay | | | | vrf-underlay | | br0 | |
32+
# | +--+--+ +-------+------+ | | +------+-------+ +--+--+ |
33+
# | | | | | | | |
34+
# | +---+----+ +-------+-------+ | | +-------+-------+ +---+----+ |
35+
# | | vxlan0 |....| veth0 |.|...|.| veth0 |....| vxlan0 | |
36+
# | +--------+ | 172.16.0.1/24 | | | | 172.16.0.2/24 | +--------+ |
37+
# | +---------------+ | | +---------------+ |
38+
# | | | |
39+
# | hv-1 netns | | hv-2 netns |
40+
# | | | |
41+
# +-----------------------------------+ +------------------------------------+
42+
#
43+
# This tests both the connectivity between vm-1 and vm-2, and that the underlay
44+
# can be moved in and out of the vrf by unsetting and setting veth0's master.
45+
46+
set -e
47+
48+
cleanup() {
49+
ip link del veth-hv-1 2>/dev/null || true
50+
ip link del veth-tap 2>/dev/null || true
51+
52+
for ns in hv-1 hv-2 vm-1 vm-2; do
53+
ip netns del $ns || true
54+
done
55+
}
56+
57+
# Clean start
58+
cleanup &> /dev/null
59+
60+
[[ $1 == "clean" ]] && exit 0
61+
62+
trap cleanup EXIT
63+
64+
# Setup "Hypervisors" simulated with netns
65+
ip link add veth-hv-1 type veth peer name veth-hv-2
66+
setup-hv-networking() {
67+
hv=$1
68+
69+
ip netns add hv-$hv
70+
ip link set veth-hv-$hv netns hv-$hv
71+
ip -netns hv-$hv link set veth-hv-$hv name veth0
72+
73+
ip -netns hv-$hv link add vrf-underlay type vrf table 1
74+
ip -netns hv-$hv link set vrf-underlay up
75+
ip -netns hv-$hv addr add 172.16.0.$hv/24 dev veth0
76+
ip -netns hv-$hv link set veth0 up
77+
78+
ip -netns hv-$hv link add br0 type bridge
79+
ip -netns hv-$hv link set br0 up
80+
81+
ip -netns hv-$hv link add vxlan0 type vxlan id 10 local 172.16.0.$hv dev veth0 dstport 4789
82+
ip -netns hv-$hv link set vxlan0 master br0
83+
ip -netns hv-$hv link set vxlan0 up
84+
}
85+
setup-hv-networking 1
86+
setup-hv-networking 2
87+
88+
# Check connectivity between HVs by pinging hv-2 from hv-1
89+
echo -n "Checking HV connectivity "
90+
ip netns exec hv-1 ping -c 1 -W 1 172.16.0.2 &> /dev/null || (echo "[FAIL]"; false)
91+
echo "[ OK ]"
92+
93+
# Setups a "VM" simulated by a netns an a veth pair
94+
setup-vm() {
95+
id=$1
96+
97+
ip netns add vm-$id
98+
ip link add veth-tap type veth peer name veth-hv
99+
100+
ip link set veth-tap netns hv-$id
101+
ip -netns hv-$id link set veth-tap master br0
102+
ip -netns hv-$id link set veth-tap up
103+
104+
ip link set veth-hv netns vm-$id
105+
ip -netns vm-$id addr add 10.0.0.$id/24 dev veth-hv
106+
ip -netns vm-$id link set veth-hv up
107+
}
108+
setup-vm 1
109+
setup-vm 2
110+
111+
# Setup VTEP routes to make ARP work
112+
bridge -netns hv-1 fdb add 00:00:00:00:00:00 dev vxlan0 dst 172.16.0.2 self permanent
113+
bridge -netns hv-2 fdb add 00:00:00:00:00:00 dev vxlan0 dst 172.16.0.1 self permanent
114+
115+
echo -n "Check VM connectivity through VXLAN (underlay in the default VRF) "
116+
ip netns exec vm-1 ping -c 1 -W 1 10.0.0.2 &> /dev/null || (echo "[FAIL]"; false)
117+
echo "[ OK ]"
118+
119+
# Move the underlay to a non-default VRF
120+
ip -netns hv-1 link set veth0 vrf vrf-underlay
121+
ip -netns hv-1 link set veth0 down
122+
ip -netns hv-1 link set veth0 up
123+
ip -netns hv-2 link set veth0 vrf vrf-underlay
124+
ip -netns hv-2 link set veth0 down
125+
ip -netns hv-2 link set veth0 up
126+
127+
echo -n "Check VM connectivity through VXLAN (underlay in a VRF) "
128+
ip netns exec vm-1 ping -c 1 -W 1 10.0.0.2 &> /dev/null || (echo "[FAIL]"; false)
129+
echo "[ OK ]"

0 commit comments

Comments
 (0)