1 #!/bin/bash
2 # SPDX-License-Identifier: GPL-2.0
3
4 # This test is for checking VXLAN underlay in a non-default VRF.
5 #
6 # It simulates two hypervisors running a VM each using four network namespaces:
7 # two for the HVs, two for the VMs.
8 # A small VXLAN tunnel is made between the two hypervisors to have the two vms
9 # in the same virtual L2:
10 #
11 # +-------------------+ +-------------------+
12 # | | | |
13 # | vm-1 netns | | vm-2 netns |
14 # | | | |
15 # | +-------------+ | | +-------------+ |
16 # | | veth-hv | | | | veth-hv | |
17 # | | 10.0.0.1/24 | | | | 10.0.0.2/24 | |
18 # | +-------------+ | | +-------------+ |
19 # | . | | . |
20 # +-------------------+ +-------------------+
21 # . .
22 # . .
23 # . .
24 # +-----------------------------------+ +------------------------------------+
25 # | . | | . |
26 # | +----------+ | | +----------+ |
27 # | | veth-tap | | | | veth-tap | |
28 # | +----+-----+ | | +----+-----+ |
29 # | | | | | |
30 # | +--+--+ +--------------+ | | +--------------+ +--+--+ |
31 # | | br0 | | vrf-underlay | | | | vrf-underlay | | br0 | |
32 # | +--+--+ +-------+------+ | | +------+-------+ +--+--+ |
33 # | | | | | | | |
34 # | +---+----+ +-------+-------+ | | +-------+-------+ +---+----+ |
35 # | | vxlan0 |....| veth0 |.|...|.| veth0 |....| vxlan0 | |
36 # | +--------+ | 172.16.0.1/24 | | | | 172.16.0.2/24 | +--------+ |
37 # | +---------------+ | | +---------------+ |
38 # | | | |
39 # | hv-1 netns | | hv-2 netns |
40 # | | | |
41 # +-----------------------------------+ +------------------------------------+
42 #
43 # This tests both the connectivity between vm-1 and vm-2, and that the underlay
44 # can be moved in and out of the vrf by unsetting and setting veth0's master.
45
46 source lib.sh
47 set -e
48
49 cleanup() {
50 ip link del veth-hv-1 2>/dev/null || true
51 ip link del veth-tap 2>/dev/null || true
52
53 cleanup_ns $hv_1 $hv_2 $vm_1 $vm_2
54 }
55
56 # Clean start
57 cleanup &> /dev/null
58
59 [[ $1 == "clean" ]] && exit 0
60
61 trap cleanup EXIT
62 setup_ns hv_1 hv_2 vm_1 vm_2
63 hv[1]=$hv_1
64 hv[2]=$hv_2
65 vm[1]=$vm_1
66 vm[2]=$vm_2
67
68 # Setup "Hypervisors" simulated with netns
69 ip link add veth-hv-1 type veth peer name veth-hv-2
70 setup-hv-networking() {
71 id=$1
72
73 ip link set veth-hv-$id netns ${hv[$id]}
74 ip -netns ${hv[$id]} link set veth-hv-$id name veth0
75
76 ip -netns ${hv[$id]} link add vrf-underlay type vrf table 1
77 ip -netns ${hv[$id]} link set vrf-underlay up
78 ip -netns ${hv[$id]} addr add 172.16.0.$id/24 dev veth0
79 ip -netns ${hv[$id]} link set veth0 up
80
81 ip -netns ${hv[$id]} link add br0 type bridge
82 ip -netns ${hv[$id]} link set br0 up
83
84 ip -netns ${hv[$id]} link add vxlan0 type vxlan id 10 local 172.16.0.$id dev veth0 dstport 4789
85 ip -netns ${hv[$id]} link set vxlan0 master br0
86 ip -netns ${hv[$id]} link set vxlan0 up
87 }
88 setup-hv-networking 1
89 setup-hv-networking 2
90
91 # Check connectivity between HVs by pinging hv-2 from hv-1
92 echo -n "Checking HV connectivity "
93 ip netns exec $hv_1 ping -c 1 -W 1 172.16.0.2 &> /dev/null || (echo "[FAIL]"; false)
94 echo "[ OK ]"
95
96 # Setups a "VM" simulated by a netns an a veth pair
97 setup-vm() {
98 id=$1
99
100 ip link add veth-tap type veth peer name veth-hv
101
102 ip link set veth-tap netns ${hv[$id]}
103 ip -netns ${hv[$id]} link set veth-tap master br0
104 ip -netns ${hv[$id]} link set veth-tap up
105
106 ip link set veth-hv address 02:1d:8d:dd:0c:6$id
107
108 ip link set veth-hv netns ${vm[$id]}
109 ip -netns ${vm[$id]} addr add 10.0.0.$id/24 dev veth-hv
110 ip -netns ${vm[$id]} link set veth-hv up
111 }
112 setup-vm 1
113 setup-vm 2
114
115 # Setup VTEP routes to make ARP work
116 bridge -netns $hv_1 fdb add 00:00:00:00:00:00 dev vxlan0 dst 172.16.0.2 self permanent
117 bridge -netns $hv_2 fdb add 00:00:00:00:00:00 dev vxlan0 dst 172.16.0.1 self permanent
118
119 echo -n "Check VM connectivity through VXLAN (underlay in the default VRF) "
120 ip netns exec $vm_1 ping -c 1 -W 1 10.0.0.2 &> /dev/null || (echo "[FAIL]"; false)
121 echo "[ OK ]"
122
123 # Move the underlay to a non-default VRF
124 ip -netns $hv_1 link set veth0 vrf vrf-underlay
125 ip -netns $hv_1 link set vxlan0 down
126 ip -netns $hv_1 link set vxlan0 up
127 ip -netns $hv_2 link set veth0 vrf vrf-underlay
128 ip -netns $hv_2 link set vxlan0 down
129 ip -netns $hv_2 link set vxlan0 up
130
131 echo -n "Check VM connectivity through VXLAN (underlay in a VRF) "
132 ip netns exec $vm_1 ping -c 1 -W 1 10.0.0.2 &> /dev/null || (echo "[FAIL]"; false)
133 echo "[ OK ]"
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.