name : dual_vxlan_bridge.sh #!/bin/bash # SPDX-License-Identifier: GPL-2.0 # +--------------------+ +----------------------+ # | H1 (vrf) | | H2 (vrf) | # | + h1.10 | | + h2.20 | # | | 192.0.2.1/28 | | | 192.0.2.2/28 | # | | | | | | # | + $h1 | | + $h2 | # | | | | | | # +----|---------------+ +--|-------------------+ # | | # +----|--------------------------------------------------|--------------------+ # | SW | | | # | +--|-------------------------------+ +----------------|------------------+ | # | | + $swp1 BR1 (802.1ad) | | BR2 (802.1d) + $swp2 | | # | | vid 100 pvid untagged | | | | | # | | | | + $swp2.20 | | # | | | | | | # | | + vx100 (vxlan) | | + vx200 (vxlan) | | # | | local 192.0.2.17 | | local 192.0.2.17 | | # | | remote 192.0.2.34 | | remote 192.0.2.50 | | # | | id 1000 dstport $VXPORT | | id 2000 dstport $VXPORT | | # | | vid 100 pvid untagged | | | | # | +--------------------------------- + +-----------------------------------+ | # | | # | 192.0.2.32/28 via 192.0.2.18 | # | 192.0.2.48/28 via 192.0.2.18 | # | | # | + $rp1 | # | | 192.0.2.17/28 | # +----|-----------------------------------------------------------------------+ # | # +----|--------------------------------------------------------+ # | | VRP2 (vrf) | # | + $rp2 | # | 192.0.2.18/28 | # | | (maybe) HW # ============================================================================= # | | (likely) SW # | + v1 (veth) + v3 (veth) | # | | 192.0.2.33/28 | 192.0.2.49/28 | # +----|---------------------------------------|----------------+ # | | # +----|------------------------------+ +----|------------------------------+ # | + v2 (veth) NS1 (netns) | | + v4 (veth) NS2 (netns) | # | 192.0.2.34/28 | | 192.0.2.50/28 | # | | | | # | 192.0.2.16/28 via 192.0.2.33 | | 192.0.2.16/28 via 192.0.2.49 | # | 192.0.2.50/32 via 192.0.2.33 | | 192.0.2.34/32 via 192.0.2.49 | # | | | | # | +-------------------------------+ | | +-------------------------------+ | # | | BR3 (802.1ad) | | | | BR3 (802.1d) | | # | | + vx100 (vxlan) | | | | + vx200 (vxlan) | | # | | local 192.0.2.34 | | | | local 192.0.2.50 | | # | | remote 192.0.2.17 | | | | remote 192.0.2.17 | | # | | remote 192.0.2.50 | | | | remote 192.0.2.34 | | # | | id 1000 dstport $VXPORT | | | | id 2000 dstport $VXPORT | | # | | vid 100 pvid untagged | | | | | | # | | | | | | + w1.20 | | # | | | | | | | | | # | | + w1 (veth) | | | | + w1 (veth) | | # | | | vid 100 pvid untagged | | | | | | | # | +--|----------------------------+ | | +--|----------------------------+ | # | | | | | | # | +--|----------------------------+ | | +--|----------------------------+ | # | | | VW2 (vrf) | | | | | VW2 (vrf) | | # | | + w2 (veth) | | | | + w2 (veth) | | # | | | | | | | | | | # | | | | | | | | | | # | | + w2.10 | | | | + w2.20 | | # | | 192.0.2.3/28 | | | | 192.0.2.4/28 | | # | +-------------------------------+ | | +-------------------------------+ | # +-----------------------------------+ +-----------------------------------+ : ${VXPORT:=4789} export VXPORT : ${ALL_TESTS:=" ping_ipv4 "} NUM_NETIFS=6 source lib.sh h1_create() { simple_if_init $h1 tc qdisc add dev $h1 clsact vlan_create $h1 10 v$h1 192.0.2.1/28 } h1_destroy() { vlan_destroy $h1 10 tc qdisc del dev $h1 clsact simple_if_fini $h1 } h2_create() { simple_if_init $h2 tc qdisc add dev $h2 clsact vlan_create $h2 20 v$h2 192.0.2.2/28 } h2_destroy() { vlan_destroy $h2 20 tc qdisc del dev $h2 clsact simple_if_fini $h2 } rp1_set_addr() { ip address add dev $rp1 192.0.2.17/28 ip route add 192.0.2.32/28 nexthop via 192.0.2.18 ip route add 192.0.2.48/28 nexthop via 192.0.2.18 } rp1_unset_addr() { ip route del 192.0.2.48/28 nexthop via 192.0.2.18 ip route del 192.0.2.32/28 nexthop via 192.0.2.18 ip address del dev $rp1 192.0.2.17/28 } switch_create() { #### BR1 #### ip link add name br1 type bridge vlan_filtering 1 \ vlan_protocol 802.1ad vlan_default_pvid 0 mcast_snooping 0 ip link set dev br1 addrgenmode none # Make sure the bridge uses the MAC address of the local port and not # that of the VxLAN's device. ip link set dev br1 address $(mac_get $swp1) ip link set dev br1 up #### BR2 #### ip link add name br2 type bridge vlan_filtering 0 mcast_snooping 0 # Make sure the bridge uses the MAC address of the local port and not # that of the VxLAN's device. ip link set dev br2 address $(mac_get $swp2) ip link set dev br2 up ip link set dev $rp1 up rp1_set_addr #### VX100 #### ip link add name vx100 type vxlan id 1000 local 192.0.2.17 \ dstport "$VXPORT" nolearning noudpcsum tos inherit ttl 100 ip link set dev vx100 up ip link set dev vx100 master br1 bridge vlan add vid 100 dev vx100 pvid untagged ip link set dev $swp1 master br1 ip link set dev $swp1 up bridge vlan add vid 100 dev $swp1 pvid untagged #### VX200 #### ip link add name vx200 type vxlan id 2000 local 192.0.2.17 \ dstport "$VXPORT" nolearning noudpcsum tos inherit ttl 100 ip link set dev vx200 up ip link set dev vx200 master br2 ip link set dev $swp2 up ip link add name $swp2.20 link $swp2 type vlan id 20 ip link set dev $swp2.20 master br2 ip link set dev $swp2.20 up bridge fdb append dev vx100 00:00:00:00:00:00 dst 192.0.2.34 self bridge fdb append dev vx200 00:00:00:00:00:00 dst 192.0.2.50 self } switch_destroy() { bridge fdb del dev vx200 00:00:00:00:00:00 dst 192.0.2.50 self bridge fdb del dev vx100 00:00:00:00:00:00 dst 192.0.2.34 self ip link set dev vx200 nomaster ip link set dev vx200 down ip link del dev vx200 ip link del dev $swp2.20 ip link set dev $swp2 down ip link set dev $swp2 nomaster bridge vlan del vid 100 dev $swp1 ip link set dev $swp1 down ip link set dev $swp1 nomaster ip link set dev vx100 nomaster ip link set dev vx100 down ip link del dev vx100 rp1_unset_addr ip link set dev $rp1 down ip link set dev br2 down ip link del dev br2 ip link set dev br1 down ip link del dev br1 } vrp2_create() { simple_if_init $rp2 192.0.2.18/28 __simple_if_init v1 v$rp2 192.0.2.33/28 __simple_if_init v3 v$rp2 192.0.2.49/28 tc qdisc add dev v1 clsact } vrp2_destroy() { tc qdisc del dev v1 clsact __simple_if_fini v3 192.0.2.49/28 __simple_if_fini v1 192.0.2.33/28 simple_if_fini $rp2 192.0.2.18/28 } ns_init_common() { local in_if=$1; shift local in_addr=$1; shift local other_in_addr=$1; shift local vxlan_name=$1; shift local vxlan_id=$1; shift local vlan_id=$1; shift local host_addr=$1; shift local nh_addr=$1; shift ip link set dev $in_if up ip address add dev $in_if $in_addr/28 tc qdisc add dev $in_if clsact ip link add name br3 type bridge vlan_filtering 0 ip link set dev br3 up ip link add name w1 type veth peer name w2 ip link set dev w1 master br3 ip link set dev w1 up ip link add name $vxlan_name type vxlan id $vxlan_id local $in_addr \ dstport "$VXPORT" ip link set dev $vxlan_name up bridge fdb append dev $vxlan_name 00:00:00:00:00:00 dst 192.0.2.17 self bridge fdb append dev $vxlan_name 00:00:00:00:00:00 dst $other_in_addr self ip link set dev $vxlan_name master br3 tc qdisc add dev $vxlan_name clsact simple_if_init w2 vlan_create w2 $vlan_id vw2 $host_addr/28 ip route add 192.0.2.16/28 nexthop via $nh_addr ip route add $other_in_addr/32 nexthop via $nh_addr } export -f ns_init_common ns1_create() { ip netns add ns1 ip link set dev v2 netns ns1 in_ns ns1 \ ns_init_common v2 192.0.2.34 192.0.2.50 vx100 1000 10 192.0.2.3 \ 192.0.2.33 in_ns ns1 bridge vlan add vid 100 dev vx100 pvid untagged } ns1_destroy() { ip netns exec ns1 ip link set dev v2 netns 1 ip netns del ns1 } ns2_create() { ip netns add ns2 ip link set dev v4 netns ns2 in_ns ns2 \ ns_init_common v4 192.0.2.50 192.0.2.34 vx200 2000 20 192.0.2.4 \ 192.0.2.49 in_ns ns2 ip link add name w1.20 link w1 type vlan id 20 in_ns ns2 ip link set dev w1.20 master br3 in_ns ns2 ip link set dev w1.20 up } ns2_destroy() { ip netns exec ns2 ip link set dev v4 netns 1 ip netns del ns2 } setup_prepare() { h1=${NETIFS[p1]} swp1=${NETIFS[p2]} swp2=${NETIFS[p3]} h2=${NETIFS[p4]} rp1=${NETIFS[p5]} rp2=${NETIFS[p6]} vrf_prepare forwarding_enable h1_create h2_create switch_create ip link add name v1 type veth peer name v2 ip link add name v3 type veth peer name v4 vrp2_create ns1_create ns2_create r1_mac=$(in_ns ns1 mac_get w2) r2_mac=$(in_ns ns2 mac_get w2) h2_mac=$(mac_get $h2) } cleanup() { pre_cleanup ns2_destroy ns1_destroy vrp2_destroy ip link del dev v3 ip link del dev v1 switch_destroy h2_destroy h1_destroy forwarding_restore vrf_cleanup } ping_ipv4() { ping_test $h1 192.0.2.3 ": local->remote 1 through VxLAN with an 802.1ad bridge" ping_test $h2 192.0.2.4 ": local->remote 2 through VxLAN with an 802.1d bridge" } test_all() { echo "Running tests with UDP port $VXPORT" tests_run } trap cleanup EXIT setup_prepare setup_wait test_all exit $EXIT_STATUS