make -C tools/testing/selftests TARGETS=net TEST_PROGS=fcnal-test.sh TEST__GEN_PROGS="" run_tests make: Entering directory '/home/virtme/testing-1/tools/testing/selftests' make[1]: Entering directory '/home/virtme/testing-1/tools/testing/selftests/net' make[1]: Nothing to be done for 'all'. make[1]: Leaving directory '/home/virtme/testing-1/tools/testing/selftests/net' make[1]: Entering directory '/home/virtme/testing-1/tools/testing/selftests/net' TAP version 13 1..1 # timeout set to 4800 # selftests: net: fcnal-test.sh # # ########################################################################### # IPv4 ping # ########################################################################### # # # ################################################################# # No VRF # [ 3.265961] ip (262) used greatest stack depth: 12056 bytes left [ 3.298506] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=0 # # TEST: ping out - ns-B IP [ OK ] # TEST: ping out, device bind - ns-B IP [ OK ] # TEST: ping out, address bind - ns-B IP [ OK ] # TEST: ping out - ns-B loopback IP [ OK ] # TEST: ping out, device bind - ns-B loopback IP [ OK ] # TEST: ping out, address bind - ns-B loopback IP [ OK ] # TEST: ping out (don't route), peer on link - ns-B IP [ OK ] # TEST: ping out (don't route), peer not on link - ns-B loopback IP [ OK ] # TEST: ping in - ns-A IP [ OK ] # TEST: ping in - ns-A loopback IP [ OK ] # TEST: ping local - ns-A IP [ OK ] # TEST: ping local - ns-A loopback IP [ OK ] # TEST: ping local - loopback [ OK ] # TEST: ping local, device bind - ns-A IP [ OK ] # TEST: ping local, device bind - ns-A loopback IP [ OK ] # TEST: ping local, device bind - loopback [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IP [ OK ] # TEST: ping out, blocked by route - ns-B loopback IP [ OK ] # TEST: ping in, blocked by route - ns-A loopback IP [ OK ] # TEST: ping out, unreachable default route - ns-B loopback IP [ OK ] [ 53.261533] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=1 # # TEST: ping out - ns-B IP [ OK ] # TEST: ping out, device bind - ns-B IP [ OK ] # TEST: ping out, address bind - ns-B IP [ OK ] # TEST: ping out - ns-B loopback IP [ OK ] # TEST: ping out, device bind - ns-B loopback IP [ OK ] # TEST: ping out, address bind - ns-B loopback IP [ OK ] # TEST: ping out (don't route), peer on link - ns-B IP [ OK ] # TEST: ping out (don't route), peer not on link - ns-B loopback IP [ OK ] # TEST: ping in - ns-A IP [ OK ] # TEST: ping in - ns-A loopback IP [ OK ] # TEST: ping local - ns-A IP [ OK ] # TEST: ping local - ns-A loopback IP [ OK ] # TEST: ping local - loopback [ OK ] # TEST: ping local, device bind - ns-A IP [ OK ] # TEST: ping local, device bind - ns-A loopback IP [ OK ] # TEST: ping local, device bind - loopback [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IP [ OK ] # TEST: ping out, blocked by route - ns-B loopback IP [ OK ] # TEST: ping in, blocked by route - ns-A loopback IP [ OK ] # TEST: ping out, unreachable default route - ns-B loopback IP [ OK ] [ 103.276447] eth1: renamed from tmp # TEST: ping out - ns-B IP [ OK ] # TEST: ping out, device bind - ns-B IP [ OK ] # TEST: ping out, address bind - ns-B IP [ OK ] # TEST: ping out - ns-B loopback IP [ OK ] # TEST: ping out, device bind - ns-B loopback IP [ OK ] # TEST: ping out, address bind - ns-B loopback IP [ OK ] # TEST: ping out (don't route), peer on link - ns-B IP [ OK ] # TEST: ping out (don't route), peer not on link - ns-B loopback IP [ OK ] # TEST: ping in - ns-A IP [ OK ] # TEST: ping in - ns-A loopback IP [ OK ] # TEST: ping local - ns-A IP [ OK ] # TEST: ping local - ns-A loopback IP [ OK ] # TEST: ping local - loopback [ OK ] # TEST: ping local, device bind - ns-A IP [ OK ] # TEST: ping local, device bind - ns-A loopback IP [ OK ] # TEST: ping local, device bind - loopback [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IP [ OK ] # TEST: ping out, blocked by route - ns-B loopback IP [ OK ] # TEST: ping in, blocked by route - ns-A loopback IP [ OK ] # TEST: ping out, unreachable default route - ns-B loopback IP [ OK ] # # ################################################################# # With VRF # [ 153.169462] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=1 # # TEST: ping out, VRF bind - ns-B IP [ OK ] # TEST: ping out, device bind - ns-B IP [ OK ] # TEST: ping out, vrf device + dev address bind - ns-B IP [ OK ] # TEST: ping out, vrf device + vrf address bind - ns-B IP [ OK ] # TEST: ping out, VRF bind - ns-B loopback IP [ OK ] # TEST: ping out, device bind - ns-B loopback IP [ OK ] # TEST: ping out, vrf device + dev address bind - ns-B loopback IP [ OK ] # TEST: ping out, vrf device + vrf address bind - ns-B loopback IP [ OK ] # TEST: ping in - ns-A IP [ OK ] # TEST: ping in - VRF IP [ OK ] # TEST: ping local, VRF bind - ns-A IP [ OK ] # TEST: ping local, VRF bind - VRF IP [ OK ] # TEST: ping local, VRF bind - loopback [ OK ] # TEST: ping local, device bind - ns-A IP [ OK ] # TEST: ping local, device bind - VRF IP [ OK ] # TEST: ping local, device bind - loopback [ OK ] # TEST: ping out, vrf bind, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping out, device bind, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IP [ OK ] # TEST: ping out, vrf bind, unreachable route - ns-B loopback IP [ OK ] # TEST: ping out, device bind, unreachable route - ns-B loopback IP [ OK ] # TEST: ping in, unreachable route - ns-A loopback IP [ OK ] [ 201.320422] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=1 # # TEST: ping out, VRF bind - ns-B IP [ OK ] # TEST: ping out, device bind - ns-B IP [ OK ] # TEST: ping out, vrf device + dev address bind - ns-B IP [ OK ] # TEST: ping out, vrf device + vrf address bind - ns-B IP [ OK ] # TEST: ping out, VRF bind - ns-B loopback IP [ OK ] # TEST: ping out, device bind - ns-B loopback IP [ OK ] # TEST: ping out, vrf device + dev address bind - ns-B loopback IP [ OK ] # TEST: ping out, vrf device + vrf address bind - ns-B loopback IP [ OK ] # TEST: ping in - ns-A IP [ OK ] # TEST: ping in - VRF IP [ OK ] # TEST: ping local, VRF bind - ns-A IP [ OK ] # TEST: ping local, VRF bind - VRF IP [ OK ] # TEST: ping local, VRF bind - loopback [ OK ] # TEST: ping local, device bind - ns-A IP [ OK ] # TEST: ping local, device bind - VRF IP [ OK ] # TEST: ping local, device bind - loopback [ OK ] # TEST: ping out, vrf bind, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping out, device bind, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IP [ OK ] # TEST: ping out, vrf bind, unreachable route - ns-B loopback IP [ OK ] # TEST: ping out, device bind, unreachable route - ns-B loopback IP [ OK ] # TEST: ping in, unreachable route - ns-A loopback IP [ OK ] # # ########################################################################### # IPv4/TCP # ########################################################################### # # # ################################################################# # No VRF # [ 249.515479] eth1: renamed from tmp # # ################################################################# # tcp_l3mdev_accept disabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=0 # # TEST: Global server - ns-A IP [ OK ] # TEST: Global server - ns-A loopback IP [ OK ] # TEST: Device server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: No server - ns-A loopback IP [ OK ] # TEST: Client - ns-B IP [ OK ] # TEST: Client, device bind - ns-B IP [ OK ] # TEST: No server, unbound client - ns-B IP [ OK ] # TEST: No server, device client - ns-B IP [ OK ] # TEST: Client - ns-B loopback IP [ OK ] # TEST: Client, device bind - ns-B loopback IP [ OK ] # TEST: No server, unbound client - ns-B loopback IP [ OK ] # TEST: No server, device client - ns-B loopback IP [ OK ] # TEST: Global server, local connection - ns-A IP [ OK ] # TEST: Global server, local connection - ns-A loopback IP [ OK ] # TEST: Global server, local connection - loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IP [ OK ] # TEST: Device server, unbound client, local connection - ns-A loopback IP [ OK ] # TEST: Device server, unbound client, local connection - loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IP [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device client, local connection - loopback [ OK ] # TEST: Device server, device client, local connection - ns-A IP [ OK ] # TEST: No server, device client, local conn - ns-A IP [ OK ] # TEST: MD5: Single address config [ OK ] [ 328.270451] TCP: Unexpected MD5 Hash found for 172.16.1.2.42916->172.16.1.1.12345 [S] [ 329.334434] TCP: Unexpected MD5 Hash found for 172.16.1.2.42916->172.16.1.1.12345 [S] [ 330.358404] TCP: Unexpected MD5 Hash found for 172.16.1.2.42916->172.16.1.1.12345 [S] [ 331.382406] TCP: Unexpected MD5 Hash found for 172.16.1.2.42916->172.16.1.1.12345 [S] # TEST: MD5: Server no config, client uses password [ OK ] [ 336.335124] TCP: MD5 Hash failed for 172.16.1.2.35916->172.16.1.1.12345 [S] L3 index 0 [ 337.398396] TCP: MD5 Hash failed for 172.16.1.2.35916->172.16.1.1.12345 [S] L3 index 0 [ 338.422385] TCP: MD5 Hash failed for 172.16.1.2.35916->172.16.1.1.12345 [S] L3 index 0 [ 339.446448] TCP: MD5 Hash failed for 172.16.1.2.35916->172.16.1.1.12345 [S] L3 index 0 # TEST: MD5: Client uses wrong password [ OK ] [ 344.401206] TCP: Unexpected MD5 Hash found for 172.16.1.2.54258->172.16.1.1.12345 [S] [ 345.462380] TCP: Unexpected MD5 Hash found for 172.16.1.2.54258->172.16.1.1.12345 [S] [ 346.486415] TCP: Unexpected MD5 Hash found for 172.16.1.2.54258->172.16.1.1.12345 [S] [ 347.510380] TCP: Unexpected MD5 Hash found for 172.16.1.2.54258->172.16.1.1.12345 [S] # TEST: MD5: Client address does not match address configured with password [ OK ] # TEST: MD5: Prefix config [ OK ] [ 355.523590] TCP: MD5 Hash failed for 172.16.1.2.57110->172.16.1.1.12345 [S] L3 index 0 [ 356.534411] TCP: MD5 Hash failed for 172.16.1.2.57110->172.16.1.1.12345 [S] L3 index 0 [ 357.558410] TCP: MD5 Hash failed for 172.16.1.2.57110->172.16.1.1.12345 [S] L3 index 0 [ 358.582387] TCP: MD5 Hash failed for 172.16.1.2.57110->172.16.1.1.12345 [S] L3 index 0 # TEST: MD5: Prefix config, client uses wrong password [ OK ] [ 363.591394] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 364.598377] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 365.622417] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 366.646394] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] # TEST: MD5: Prefix config, client address not in configured prefix [ OK ] # TEST: SO_DONTROUTE client, syncookies=0 - ns-B IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=0 - ns-B IP [ OK ] # TEST: SO_DONTROUTE client, syncookies=0 - ns-B loopback IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=0 - ns-B loopback IP [ OK ] # TEST: SO_DONTROUTE client, syncookies=2 - ns-B IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=2 - ns-B IP [ OK ] # TEST: SO_DONTROUTE client, syncookies=2 - ns-B loopback IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=2 - ns-B loopback IP [ OK ] # # ################################################################# # tcp_l3mdev_accept enabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=1 # # TEST: Global server - ns-A IP [ OK ] # TEST: Global server - ns-A loopback IP [ OK ] # TEST: Device server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: No server - ns-A loopback IP [ OK ] # TEST: Client - ns-B IP [ OK ] # TEST: Client, device bind - ns-B IP [ OK ] # TEST: No server, unbound client - ns-B IP [ OK ] # TEST: No server, device client - ns-B IP [ OK ] # TEST: Client - ns-B loopback IP [ OK ] # TEST: Client, device bind - ns-B loopback IP [ OK ] # TEST: No server, unbound client - ns-B loopback IP [ OK ] # TEST: No server, device client - ns-B loopback IP [ OK ] # TEST: Global server, local connection - ns-A IP [ OK ] # TEST: Global server, local connection - ns-A loopback IP [ OK ] # TEST: Global server, local connection - loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IP [ OK ] # TEST: Device server, unbound client, local connection - ns-A loopback IP [ OK ] # TEST: Device server, unbound client, local connection - loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IP [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device client, local connection - loopback [ OK ] # TEST: Device server, device client, local connection - ns-A IP [ OK ] # TEST: No server, device client, local conn - ns-A IP [ OK ] # TEST: MD5: Single address config [ OK ] [ 473.956612] TCP: Unexpected MD5 Hash found for 172.16.1.2.51162->172.16.1.1.12345 [S] [ 474.998407] TCP: Unexpected MD5 Hash found for 172.16.1.2.51162->172.16.1.1.12345 [S] [ 476.022406] TCP: Unexpected MD5 Hash found for 172.16.1.2.51162->172.16.1.1.12345 [S] [ 477.046383] TCP: Unexpected MD5 Hash found for 172.16.1.2.51162->172.16.1.1.12345 [S] # TEST: MD5: Server no config, client uses password [ OK ] [ 482.021139] TCP: MD5 Hash failed for 172.16.1.2.51170->172.16.1.1.12345 [S] L3 index 0 [ 483.062446] TCP: MD5 Hash failed for 172.16.1.2.51170->172.16.1.1.12345 [S] L3 index 0 [ 484.086384] TCP: MD5 Hash failed for 172.16.1.2.51170->172.16.1.1.12345 [S] L3 index 0 [ 485.110398] TCP: MD5 Hash failed for 172.16.1.2.51170->172.16.1.1.12345 [S] L3 index 0 # TEST: MD5: Client uses wrong password [ OK ] [ 490.084921] TCP: Unexpected MD5 Hash found for 172.16.1.2.53046->172.16.1.1.12345 [S] [ 491.126381] TCP: Unexpected MD5 Hash found for 172.16.1.2.53046->172.16.1.1.12345 [S] [ 492.150412] TCP: Unexpected MD5 Hash found for 172.16.1.2.53046->172.16.1.1.12345 [S] [ 493.174389] TCP: Unexpected MD5 Hash found for 172.16.1.2.53046->172.16.1.1.12345 [S] # TEST: MD5: Client address does not match address configured with password [ OK ] # TEST: MD5: Prefix config [ OK ] [ 501.215605] TCP: MD5 Hash failed for 172.16.1.2.52382->172.16.1.1.12345 [S] L3 index 0 [ 502.262384] TCP: MD5 Hash failed for 172.16.1.2.52382->172.16.1.1.12345 [S] L3 index 0 [ 503.286400] TCP: MD5 Hash failed for 172.16.1.2.52382->172.16.1.1.12345 [S] L3 index 0 [ 504.310386] TCP: MD5 Hash failed for 172.16.1.2.52382->172.16.1.1.12345 [S] L3 index 0 # TEST: MD5: Prefix config, client uses wrong password [ OK ] [ 509.282610] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 510.326459] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 511.350412] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 512.374419] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] # TEST: MD5: Prefix config, client address not in configured prefix [ OK ] # TEST: SO_DONTROUTE client, syncookies=0 - ns-B IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=0 - ns-B IP [ OK ] # TEST: SO_DONTROUTE client, syncookies=0 - ns-B loopback IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=0 - ns-B loopback IP [ OK ] # TEST: SO_DONTROUTE client, syncookies=2 - ns-B IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=2 - ns-B IP [ OK ] # TEST: SO_DONTROUTE client, syncookies=2 - ns-B loopback IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=2 - ns-B loopback IP [ OK ] # # ################################################################# # With VRF # [ 543.535589] eth1: renamed from tmp # # ################################################################# # Global server disabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=0 # # TEST: Global server - ns-A IP [ OK ] # TEST: VRF server - ns-A IP [ OK ] # TEST: Device server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: Global server - VRF IP [ OK ] # TEST: VRF server - VRF IP [ OK ] # TEST: Device server - VRF IP [ OK ] # TEST: No server - VRF IP [ OK ] # TEST: Global server, local connection - ns-A IP [ OK ] [ 570.584435] eth2: renamed from tmp # TEST: MD5: VRF: Single address config [ OK ] [ 575.737624] TCP: Unexpected MD5 Hash found for 172.16.1.2.50282->172.16.1.1.12345 [S] [ 576.758372] TCP: Unexpected MD5 Hash found for 172.16.1.2.50282->172.16.1.1.12345 [S] [ 577.782372] TCP: Unexpected MD5 Hash found for 172.16.1.2.50282->172.16.1.1.12345 [S] [ 578.806381] TCP: Unexpected MD5 Hash found for 172.16.1.2.50282->172.16.1.1.12345 [S] # TEST: MD5: VRF: Server no config, client uses password [ OK ] [ 583.797612] TCP: MD5 Hash failed for 172.16.1.2.35320->172.16.1.1.12345 [S] L3 index 8 [ 584.822383] TCP: MD5 Hash failed for 172.16.1.2.35320->172.16.1.1.12345 [S] L3 index 8 [ 585.846393] TCP: MD5 Hash failed for 172.16.1.2.35320->172.16.1.1.12345 [S] L3 index 8 [ 586.870399] TCP: MD5 Hash failed for 172.16.1.2.35320->172.16.1.1.12345 [S] L3 index 8 # TEST: MD5: VRF: Client uses wrong password [ OK ] [ 591.863922] TCP: Unexpected MD5 Hash found for 172.16.1.2.35328->172.16.1.1.12345 [S] [ 592.886371] TCP: Unexpected MD5 Hash found for 172.16.1.2.35328->172.16.1.1.12345 [S] [ 593.910456] TCP: Unexpected MD5 Hash found for 172.16.1.2.35328->172.16.1.1.12345 [S] [ 594.934385] TCP: Unexpected MD5 Hash found for 172.16.1.2.35328->172.16.1.1.12345 [S] # TEST: MD5: VRF: Client address does not match address configured with password [ OK ] # TEST: MD5: VRF: Prefix config [ OK ] [ 602.995384] TCP: MD5 Hash failed for 172.16.1.2.45424->172.16.1.1.12345 [S] L3 index 8 [ 604.022382] TCP: MD5 Hash failed for 172.16.1.2.45424->172.16.1.1.12345 [S] L3 index 8 [ 605.046359] TCP: MD5 Hash failed for 172.16.1.2.45424->172.16.1.1.12345 [S] L3 index 8 [ 606.070359] TCP: MD5 Hash failed for 172.16.1.2.45424->172.16.1.1.12345 [S] L3 index 8 # TEST: MD5: VRF: Prefix config, client uses wrong password [ OK ] [ 611.063703] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 612.086376] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 613.110378] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 614.134403] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] # TEST: MD5: VRF: Prefix config, client address not in configured prefix [ OK ] # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in VRF [ OK ] # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in default VRF [ OK ] [ 625.248139] TCP: MD5 Hash failed for 172.16.1.2.50828->172.16.1.1.12345 [S] L3 index 0 [ 626.294368] TCP: MD5 Hash failed for 172.16.1.2.50828->172.16.1.1.12345 [S] L3 index 0 [ 627.318376] TCP: MD5 Hash failed for 172.16.1.2.50828->172.16.1.1.12345 [S] L3 index 0 [ 628.342377] TCP: MD5 Hash failed for 172.16.1.2.50828->172.16.1.1.12345 [S] L3 index 0 # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in default VRF with VRF pw [ OK ] [ 633.307979] TCP: MD5 Hash failed for 172.16.1.2.36846->172.16.1.1.12345 [S] L3 index 8 [ 634.358353] TCP: MD5 Hash failed for 172.16.1.2.36846->172.16.1.1.12345 [S] L3 index 8 [ 635.382361] TCP: MD5 Hash failed for 172.16.1.2.36846->172.16.1.1.12345 [S] L3 index 8 [ 636.406357] TCP: MD5 Hash failed for 172.16.1.2.36846->172.16.1.1.12345 [S] L3 index 8 # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in VRF with default VRF pw [ OK ] # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in VRF [ OK ] # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in default VRF [ OK ] [ 647.505885] TCP: MD5 Hash failed for 172.16.1.2.35066->172.16.1.1.12345 [S] L3 index 0 [ 648.566356] TCP: MD5 Hash failed for 172.16.1.2.35066->172.16.1.1.12345 [S] L3 index 0 [ 649.590366] TCP: MD5 Hash failed for 172.16.1.2.35066->172.16.1.1.12345 [S] L3 index 0 [ 650.614356] TCP: MD5 Hash failed for 172.16.1.2.35066->172.16.1.1.12345 [S] L3 index 0 # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in default VRF with VRF pw [ OK ] [ 655.570737] TCP: MD5 Hash failed for 172.16.1.2.56010->172.16.1.1.12345 [S] L3 index 8 [ 656.630358] TCP: MD5 Hash failed for 172.16.1.2.56010->172.16.1.1.12345 [S] L3 index 8 [ 657.654381] TCP: MD5 Hash failed for 172.16.1.2.56010->172.16.1.1.12345 [S] L3 index 8 [ 658.678361] TCP: MD5 Hash failed for 172.16.1.2.56010->172.16.1.1.12345 [S] L3 index 8 # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in VRF with default VRF pw [ OK ] # TEST: MD5: VRF: Device must be a VRF - single address [ OK ] # TEST: MD5: VRF: Device must be a VRF - prefix [ OK ] # TEST: MD5: VRF: VRF-bound server, unbound key accepts connection [ OK ] # TEST: MD5: VRF: VRF-bound server, bound key accepts connection [ OK ] # SYSCTL: net.ipv4.tcp_l3mdev_accept=1 # [ 673.885518] TCP: Unexpected MD5 Hash found for 172.16.1.2.54262->172.16.1.1.12345 [S] [ 674.934389] TCP: Unexpected MD5 Hash found for 172.16.1.2.54262->172.16.1.1.12345 [S] [ 675.958419] TCP: Unexpected MD5 Hash found for 172.16.1.2.54262->172.16.1.1.12345 [S] [ 676.982387] TCP: Unexpected MD5 Hash found for 172.16.1.2.54262->172.16.1.1.12345 [S] # TEST: MD5: VRF: Global server, Key bound to ifindex=0 rejects VRF connection [ OK ] # TEST: MD5: VRF: Global server, key bound to ifindex=0 accepts non-VRF connection [ OK ] # TEST: MD5: VRF: Global server, key not bound to ifindex accepts VRF connection [ OK ] # TEST: MD5: VRF: Global server, key not bound to ifindex accepts non-VRF connection [ OK ] # SYSCTL: net.ipv4.tcp_l3mdev_accept=0 # # # ################################################################# # VRF Global server enabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=1 # # TEST: Global server - ns-A IP [ OK ] # TEST: VRF server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: Global server - VRF IP [ OK ] # TEST: VRF server - VRF IP [ OK ] # TEST: No server - VRF IP [ OK ] # TEST: Device server - ns-A IP [ OK ] # TEST: Global server, local connection - ns-A IP [ OK ] # TEST: Global server, local connection - VRF IP [ OK ] # TEST: Client, VRF bind - ns-B IP [ OK ] # TEST: Client, device bind - ns-B IP [ OK ] # TEST: No server, VRF client - ns-B IP [ OK ] # TEST: No server, device client - ns-B IP [ OK ] # TEST: Client, VRF bind - ns-B loopback IP [ OK ] # TEST: Client, device bind - ns-B loopback IP [ OK ] # TEST: No server, VRF client - ns-B loopback IP [ OK ] # TEST: No server, device client - ns-B loopback IP [ OK ] # TEST: VRF server, VRF client, local connection - ns-A IP [ OK ] # TEST: VRF server, VRF client, local connection - VRF IP [ OK ] # TEST: VRF server, VRF client, local connection - loopback [ OK ] # TEST: VRF server, device client, local connection - ns-A IP [ OK ] # TEST: VRF server, unbound client, local connection - ns-A IP [ OK ] # TEST: Device server, VRF client, local connection - ns-A IP [ OK ] # TEST: Device server, device client, local connection - ns-A IP [ OK ] # # ########################################################################### # IPv4/UDP # ########################################################################### # # # ################################################################# # No VRF # [ 758.144488] eth1: renamed from tmp # # ################################################################# # udp_l3mdev_accept disabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=0 # # TEST: Global server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: Global server - ns-A loopback IP [ OK ] # TEST: No server - ns-A loopback IP [ OK ] # TEST: Device server - ns-A IP [ OK ] # TEST: Client - ns-B IP [ OK ] # TEST: Client, device bind - ns-B IP [ OK ] # TEST: Client, device send via cmsg - ns-B IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF - ns-B IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF, with connect() - ns-B IP [ OK ] # TEST: No server, unbound client - ns-B IP [ OK ] # TEST: No server, device client - ns-B IP [ OK ] # TEST: Client - ns-B loopback IP [ OK ] # TEST: Client, device bind - ns-B loopback IP [ OK ] # TEST: Client, device send via cmsg - ns-B loopback IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF - ns-B loopback IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF, with connect() - ns-B loopback IP [ OK ] # TEST: No server, unbound client - ns-B loopback IP [ OK ] # TEST: No server, device client - ns-B loopback IP [ OK ] # TEST: Global server, local connection - ns-A IP [ OK ] # TEST: Global server, local connection - ns-A loopback IP [ OK ] # TEST: Global server, local connection - loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IP [ OK ] # TEST: Device server, unbound client, local connection - ns-A loopback IP [ OK ] # TEST: Device server, unbound client, local connection - loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IP [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - ns-A IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - ns-A IP [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - ns-A loopback IP [ OK ] # TEST: Global server, device client, local connection - loopback [ OK ] # TEST: Global server, device send via cmsg, local connection - loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - loopback [ OK ] # TEST: Device server, device client, local conn - ns-A IP [ OK ] # TEST: No server, device client, local conn - ns-A IP [ OK ] # TEST: SO_DONTROUTE client - ns-B IP [ OK ] # TEST: SO_DONTROUTE client - ns-B loopback IP [ OK ] # # ################################################################# # udp_l3mdev_accept enabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=1 # # TEST: Global server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: Global server - ns-A loopback IP [ OK ] # TEST: No server - ns-A loopback IP [ OK ] # TEST: Device server - ns-A IP [ OK ] # TEST: Client - ns-B IP [ OK ] # TEST: Client, device bind - ns-B IP [ OK ] # TEST: Client, device send via cmsg - ns-B IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF - ns-B IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF, with connect() - ns-B IP [ OK ] # TEST: No server, unbound client - ns-B IP [ OK ] # TEST: No server, device client - ns-B IP [ OK ] # TEST: Client - ns-B loopback IP [ OK ] # TEST: Client, device bind - ns-B loopback IP [ OK ] # TEST: Client, device send via cmsg - ns-B loopback IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF - ns-B loopback IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF, with connect() - ns-B loopback IP [ OK ] # TEST: No server, unbound client - ns-B loopback IP [ OK ] # TEST: No server, device client - ns-B loopback IP [ OK ] # TEST: Global server, local connection - ns-A IP [ OK ] # TEST: Global server, local connection - ns-A loopback IP [ OK ] # TEST: Global server, local connection - loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IP [ OK ] # TEST: Device server, unbound client, local connection - ns-A loopback IP [ OK ] # TEST: Device server, unbound client, local connection - loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IP [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - ns-A IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - ns-A IP [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - ns-A loopback IP [ OK ] # TEST: Global server, device client, local connection - loopback [ OK ] # TEST: Global server, device send via cmsg, local connection - loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - loopback [ OK ] # TEST: Device server, device client, local conn - ns-A IP [ OK ] # TEST: No server, device client, local conn - ns-A IP [ OK ] # TEST: SO_DONTROUTE client - ns-B IP [ OK ] # TEST: SO_DONTROUTE client - ns-B loopback IP [ OK ] # # ################################################################# # With VRF # [ 1060.790535] eth1: renamed from tmp # # ################################################################# # Global server disabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=0 # # TEST: Global server - ns-A IP [ OK ] # TEST: VRF server - ns-A IP [ OK ] # TEST: Enslaved device server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: Global server, VRF client, local connection - ns-A IP [ OK ] # TEST: Global server - VRF IP [ OK ] # TEST: VRF server - VRF IP [ OK ] # TEST: Enslaved device server - VRF IP [ OK ] # TEST: No server - VRF IP [ OK ] # TEST: Global server, VRF client, local connection - VRF IP [ OK ] # TEST: VRF server, VRF client, local conn - ns-A IP [ OK ] # TEST: VRF server, enslaved device client, local connection - ns-A IP [ OK ] # TEST: Enslaved device server, VRF client, local conn - ns-A IP [ OK ] # TEST: Enslaved device server, device client, local conn - ns-A IP [ OK ] # # ################################################################# # Global server enabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=1 # # TEST: Global server - ns-A IP [ OK ] # TEST: VRF server - ns-A IP [ OK ] # TEST: Enslaved device server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: Global server - VRF IP [ OK ] # TEST: VRF server - VRF IP [ OK ] # TEST: Enslaved device server - VRF IP [ OK ] # TEST: No server - VRF IP [ OK ] # TEST: VRF client [ OK ] # TEST: Enslaved device client [ OK ] # TEST: No server, VRF client [ OK ] # TEST: No server, enslaved device client [ OK ] # TEST: Global server, VRF client, local conn - ns-A IP [ OK ] # TEST: VRF server, VRF client, local conn - ns-A IP [ OK ] # TEST: VRF server, device client, local conn - ns-A IP [ OK ] # TEST: Enslaved device server, VRF client, local conn - ns-A IP [ OK ] # TEST: Enslaved device server, device client, local conn - ns-A IP [ OK ] # TEST: Global server, VRF client, local conn - VRF IP [ OK ] # TEST: Global server, VRF client, local conn - loopback [ OK ] # TEST: VRF server, VRF client, local conn - VRF IP [ OK ] # TEST: VRF server, VRF client, local conn - loopback [ OK ] # TEST: No server, VRF client, local conn - ns-A IP [ OK ] # TEST: No server, VRF client, local conn - VRF IP [ OK ] # TEST: No server, VRF client, local conn - loopback [ OK ] # # ########################################################################### # IPv4 address binds # ########################################################################### # # # ################################################################# # No VRF # [ 1171.155685] eth1: renamed from tmp # TEST: Raw socket bind to local address - ns-A IP [ OK ] # TEST: Raw socket bind to local address after device bind - ns-A IP [ OK ] # TEST: Raw socket bind to local address - ns-A loopback IP [ OK ] # TEST: Raw socket bind to local address after device bind - ns-A loopback IP [ OK ] # TEST: Raw socket bind to nonlocal address - nonlocal IP [ OK ] # TEST: TCP socket bind to nonlocal address - nonlocal IP [ OK ] # TEST: ICMP socket bind to nonlocal address - nonlocal IP [ OK ] # TEST: ICMP socket bind to broadcast address - broadcast [ OK ] # TEST: ICMP socket bind to multicast address - multicast [ OK ] # TEST: TCP socket bind to local address - ns-A IP [ OK ] # TEST: TCP socket bind to local address after device bind - ns-A IP [ OK ] # # ################################################################# # With VRF # [ 1196.604452] eth1: renamed from tmp # TEST: Raw socket bind to local address - ns-A IP [ OK ] # TEST: Raw socket bind to local address after device bind - ns-A IP [ OK ] # TEST: Raw socket bind to local address after VRF bind - ns-A IP [ OK ] # TEST: Raw socket bind to local address - VRF IP [ OK ] # TEST: Raw socket bind to local address after device bind - VRF IP [ OK ] # TEST: Raw socket bind to local address after VRF bind - VRF IP [ OK ] # TEST: Raw socket bind to out of scope address after VRF bind - ns-A loopback IP [ OK ] # TEST: Raw socket bind to nonlocal address after VRF bind - nonlocal IP [ OK ] # TEST: TCP socket bind to nonlocal address after VRF bind - nonlocal IP [ OK ] # TEST: ICMP socket bind to nonlocal address after VRF bind - nonlocal IP [ OK ] # TEST: ICMP socket bind to broadcast address after VRF bind - broadcast [ OK ] # TEST: ICMP socket bind to multicast address after VRF bind - multicast [ OK ] # TEST: TCP socket bind to local address - ns-A IP [ OK ] # TEST: TCP socket bind to local address after device bind - ns-A IP [ OK ] # TEST: TCP socket bind to local address - VRF IP [ OK ] # TEST: TCP socket bind to local address after device bind - VRF IP [ OK ] # TEST: TCP socket bind to invalid local address for VRF - ns-A loopback IP [ OK ] # TEST: TCP socket bind to invalid local address for device bind - ns-A loopback IP [ OK ] # # ########################################################################### # Run time tests - ipv4 # ########################################################################### # [ 1236.472514] eth1: renamed from tmp # TEST: Device delete with active traffic - ping in - ns-A IP [ OK ] [ 1245.613577] eth1: renamed from tmp # TEST: Device delete with active traffic - ping in - VRF IP [ OK ] [ 1254.630620] eth1: renamed from tmp # TEST: Device delete with active traffic - ping out - ns-B IP [ OK ] [ 1263.616554] eth1: renamed from tmp # TEST: TCP active socket, global server - ns-A IP [ OK ] [ 1273.743610] eth1: renamed from tmp # TEST: TCP active socket, global server - VRF IP [ OK ] [ 1283.803436] eth1: renamed from tmp # TEST: TCP active socket, VRF server - ns-A IP [ OK ] [ 1293.845467] eth1: renamed from tmp # TEST: TCP active socket, VRF server - VRF IP [ OK ] [ 1303.894570] eth1: renamed from tmp # TEST: TCP active socket, enslaved device server - ns-A IP [ OK ] [ 1314.021556] eth1: renamed from tmp # TEST: TCP active socket, VRF client - ns-A IP [ OK ] [ 1324.083448] eth1: renamed from tmp # TEST: TCP active socket, enslaved device client - ns-A IP [ OK ] [ 1334.069474] eth1: renamed from tmp # TEST: TCP active socket, global server, VRF client, local - ns-A IP [ OK ] [ 1344.038520] eth1: renamed from tmp # TEST: TCP active socket, global server, VRF client, local - VRF IP [ OK ] [ 1354.030434] eth1: renamed from tmp # TEST: TCP active socket, VRF server and client, local - ns-A IP [ OK ] [ 1364.009471] eth1: renamed from tmp # TEST: TCP active socket, VRF server and client, local - VRF IP [ OK ] [ 1374.015467] eth1: renamed from tmp # TEST: TCP active socket, global server, enslaved device client, local - ns-A IP [ OK ] [ 1384.053545] eth1: renamed from tmp # TEST: TCP active socket, VRF server, enslaved device client, local - ns-A IP [ OK ] [ 1394.089514] eth1: renamed from tmp # TEST: TCP active socket, enslaved device server and client, local - ns-A IP [ OK ] [ 1404.129421] eth1: renamed from tmp # TEST: TCP passive socket, global server - ns-A IP [ OK ] [ 1414.149463] eth1: renamed from tmp # TEST: TCP passive socket, global server - VRF IP [ OK ] [ 1424.093482] eth1: renamed from tmp # TEST: TCP passive socket, VRF server - ns-A IP [ OK ] [ 1434.093413] eth1: renamed from tmp # TEST: TCP passive socket, VRF server - VRF IP [ OK ] [ 1444.089604] eth1: renamed from tmp # TEST: TCP passive socket, enslaved device server - ns-A IP [ OK ] [ 1454.031559] eth1: renamed from tmp # TEST: TCP passive socket, VRF client - ns-A IP [ OK ] [ 1463.989554] eth1: renamed from tmp # TEST: TCP passive socket, enslaved device client - ns-A IP [ OK ] [ 1473.994445] eth1: renamed from tmp # TEST: TCP passive socket, global server, VRF client, local - ns-A IP [ OK ] [ 1484.059491] eth1: renamed from tmp # TEST: TCP passive socket, global server, VRF client, local - VRF IP [ OK ] [ 1494.062450] eth1: renamed from tmp # TEST: TCP passive socket, VRF server and client, local - ns-A IP [ OK ] [ 1504.033552] eth1: renamed from tmp # TEST: TCP passive socket, VRF server and client, local - VRF IP [ OK ] [ 1514.030590] eth1: renamed from tmp # TEST: TCP passive socket, global server, enslaved device client, local - ns-A IP [ OK ] [ 1523.999572] eth1: renamed from tmp # TEST: TCP passive socket, VRF server, enslaved device client, local - ns-A IP [ OK ] [ 1533.978465] eth1: renamed from tmp # TEST: TCP passive socket, enslaved device server and client, local - ns-A IP [ OK ] # # ########################################################################### # IPv4 Netfilter # ########################################################################### # # # ################################################################# # TCP reset # [ 1543.973456] eth1: renamed from tmp # TEST: Global server, reject with TCP-reset on Rx - ns-A IP [ OK ] # TEST: Global server, reject with TCP-reset on Rx - VRF IP [ OK ] # # ################################################################# # ICMP unreachable # # TEST: Global TCP server, Rx reject icmp-port-unreach - ns-A IP [ OK ] # TEST: Global TCP server, Rx reject icmp-port-unreach - VRF IP [ OK ] # TEST: Global UDP server, Rx reject icmp-port-unreach - ns-A IP [ OK ] # TEST: Global UDP server, Rx reject icmp-port-unreach - VRF IP [ OK ] # # ########################################################################### # IPv6 ping # ########################################################################### # # # ################################################################# # No VRF # [ 1568.378449] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=0 # # TEST: ping out - ns-B IPv6 [ OK ] # TEST: ping out - ns-B loopback IPv6 [ OK ] # TEST: ping out - ns-B IPv6 LLA [ OK ] # TEST: ping out - multicast IP [ OK ] # TEST: ping out, device bind - ns-B IPv6 [ OK ] # TEST: ping out, loopback address bind - ns-B IPv6 [ OK ] # TEST: ping out, device bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, loopback address bind - ns-B loopback IPv6 [ OK ] # TEST: ping in - ns-A IPv6 [ OK ] # TEST: ping in - ns-A loopback IPv6 [ OK ] # TEST: ping in - ns-A IPv6 LLA [ OK ] # TEST: ping in - multicast IP [ OK ] # TEST: ping local, no bind - ns-A IPv6 [ OK ] # TEST: ping local, no bind - ns-A loopback IPv6 [ OK ] # TEST: ping local, no bind - IPv6 loopback [ OK ] # TEST: ping local, no bind - ns-A IPv6 LLA [ OK ] # TEST: ping local, no bind - multicast IP [ OK ] # TEST: ping local, device bind - ns-A IPv6 [ OK ] # TEST: ping local, device bind - ns-A IPv6 LLA [ OK ] # TEST: ping local, device bind - multicast IP [ OK ] # TEST: ping local, device bind - ns-A loopback IPv6 [ OK ] # TEST: ping local, device bind - IPv6 loopback [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IPv6 [ OK ] # TEST: ping out, blocked by route - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, blocked by route - ns-B loopback IPv6 [ OK ] # TEST: ping in, blocked by route - ns-A loopback IPv6 [ OK ] # TEST: ping out, unreachable route - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, unreachable route - ns-B loopback IPv6 [ OK ] [ 1633.958498] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=0 # # TEST: ping out - ns-B IPv6 [ OK ] # TEST: ping out - ns-B loopback IPv6 [ OK ] # TEST: ping out - ns-B IPv6 LLA [ OK ] # TEST: ping out - multicast IP [ OK ] # TEST: ping out, device bind - ns-B IPv6 [ OK ] # TEST: ping out, loopback address bind - ns-B IPv6 [ OK ] # TEST: ping out, device bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, loopback address bind - ns-B loopback IPv6 [ OK ] # TEST: ping in - ns-A IPv6 [ OK ] # TEST: ping in - ns-A loopback IPv6 [ OK ] # TEST: ping in - ns-A IPv6 LLA [ OK ] # TEST: ping in - multicast IP [ OK ] # TEST: ping local, no bind - ns-A IPv6 [ OK ] # TEST: ping local, no bind - ns-A loopback IPv6 [ OK ] # TEST: ping local, no bind - IPv6 loopback [ OK ] # TEST: ping local, no bind - ns-A IPv6 LLA [ OK ] # TEST: ping local, no bind - multicast IP [ OK ] # TEST: ping local, device bind - ns-A IPv6 [ OK ] # TEST: ping local, device bind - ns-A IPv6 LLA [ OK ] # TEST: ping local, device bind - multicast IP [ OK ] # TEST: ping local, device bind - ns-A loopback IPv6 [ OK ] # TEST: ping local, device bind - IPv6 loopback [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IPv6 [ OK ] # TEST: ping out, blocked by route - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, blocked by route - ns-B loopback IPv6 [ OK ] # TEST: ping in, blocked by route - ns-A loopback IPv6 [ OK ] # TEST: ping out, unreachable route - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, unreachable route - ns-B loopback IPv6 [ OK ] # # ################################################################# # With VRF # [ 1699.528449] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=1 # # TEST: ping out, VRF bind - ns-B IPv6 [ OK ] # TEST: ping out, VRF bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, VRF bind - ns-B IPv6 LLA [ OK ] # TEST: ping out, VRF bind - multicast IP [ OK ] # TEST: ping out, device bind - ns-B IPv6 [ OK ] # TEST: ping out, device bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind - ns-B IPv6 LLA [ OK ] # TEST: ping out, device bind - multicast IP [ OK ] # TEST: ping out, vrf device+address bind - ns-B IPv6 [ OK ] # TEST: ping out, vrf device+address bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, vrf device+address bind - ns-B IPv6 LLA [ OK ] # TEST: ping in - ns-A IPv6 [ OK ] # TEST: ping in - VRF IPv6 [ OK ] # TEST: ping in - ns-A IPv6 LLA [ OK ] # TEST: ping in - multicast IP [ OK ] # TEST: ping in - ns-A loopback IPv6 [ OK ] # TEST: ping local, VRF bind - ns-A IPv6 [ OK ] # TEST: ping local, VRF bind - VRF IPv6 [ OK ] # TEST: ping local, VRF bind - IPv6 loopback [ OK ] # TEST: ping local, device bind - ns-A IPv6 [ OK ] # TEST: ping local, device bind - ns-A IPv6 LLA [ OK ] # TEST: ping local, device bind - multicast IP [ OK ] # TEST: ping in, LLA to GUA - ns-A IPv6 [ OK ] # TEST: ping in, LLA to GUA - VRF IPv6 [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IPv6 [ OK ] # TEST: ping out, unreachable route - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, unreachable route - ns-B loopback IPv6 [ OK ] # TEST: ping in, unreachable route - ns-A loopback IPv6 [ OK ] [ 1767.214462] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=1 # # TEST: ping out, VRF bind - ns-B IPv6 [ OK ] # TEST: ping out, VRF bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, VRF bind - ns-B IPv6 LLA [ OK ] # TEST: ping out, VRF bind - multicast IP [ OK ] # TEST: ping out, device bind - ns-B IPv6 [ OK ] # TEST: ping out, device bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind - ns-B IPv6 LLA [ OK ] # TEST: ping out, device bind - multicast IP [ OK ] # TEST: ping out, vrf device+address bind - ns-B IPv6 [ OK ] # TEST: ping out, vrf device+address bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, vrf device+address bind - ns-B IPv6 LLA [ OK ] # TEST: ping in - ns-A IPv6 [ OK ] # TEST: ping in - VRF IPv6 [ OK ] # TEST: ping in - ns-A IPv6 LLA [ OK ] # TEST: ping in - multicast IP [ OK ] # TEST: ping in - ns-A loopback IPv6 [ OK ] # TEST: ping local, VRF bind - ns-A IPv6 [ OK ] # TEST: ping local, VRF bind - VRF IPv6 [ OK ] # TEST: ping local, VRF bind - IPv6 loopback [ OK ] # TEST: ping local, device bind - ns-A IPv6 [ OK ] # TEST: ping local, device bind - ns-A IPv6 LLA [ OK ] # TEST: ping local, device bind - multicast IP [ OK ] # TEST: ping in, LLA to GUA - ns-A IPv6 [ OK ] # TEST: ping in, LLA to GUA - VRF IPv6 [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IPv6 [ OK ] # TEST: ping out, unreachable route - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, unreachable route - ns-B loopback IPv6 [ OK ] # TEST: ping in, unreachable route - ns-A loopback IPv6 [ OK ] # # ########################################################################### # IPv6/TCP # ########################################################################### # # # ################################################################# # No VRF # [ 1834.751443] eth1: renamed from tmp # # ################################################################# # tcp_l3mdev_accept disabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=0 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Global server - ns-A loopback IPv6 [ OK ] # TEST: Global server - ns-A IPv6 LLA [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - ns-A loopback IPv6 [ OK ] # TEST: No server - ns-A IPv6 LLA [ OK ] # TEST: Client - ns-B IPv6 [ OK ] # TEST: Client - ns-B loopback IPv6 [ OK ] # TEST: Client - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind - ns-B IPv6 [ OK ] # TEST: Client, device bind - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind - ns-B IPv6 LLA [ OK ] # TEST: No server, device client - ns-B IPv6 [ OK ] # TEST: No server, device client - ns-B loopback IPv6 [ OK ] # TEST: No server, device client - ns-B IPv6 LLA [ OK ] # TEST: Global server, local connection - ns-A IPv6 [ OK ] # TEST: Global server, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, local connection - IPv6 loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, unbound client, local connection - ns-A loopback IPv6 [ OK ] # TEST: Device server, unbound client, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client, local connection - IPv6 loopback [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 LLA [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 LLA [ OK ] # TEST: MD5: Single address config [ OK ] [ 1918.448862] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].34426->[2001:db8:1::1].12345 [S] [ 1919.478448] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].34426->[2001:db8:1::1].12345 [S] [ 1920.502434] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].34426->[2001:db8:1::1].12345 [S] [ 1921.526432] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].34426->[2001:db8:1::1].12345 [S] # TEST: MD5: Server no config, client uses password [ OK ] [ 1926.509822] TCP: MD5 Hash mismatch for [2001:db8:1::2].44232->[2001:db8:1::1].12345 [S]L3 index 0 [ 1927.542413] TCP: MD5 Hash mismatch for [2001:db8:1::2].44232->[2001:db8:1::1].12345 [S]L3 index 0 [ 1928.566387] TCP: MD5 Hash mismatch for [2001:db8:1::2].44232->[2001:db8:1::1].12345 [S]L3 index 0 [ 1929.590358] TCP: MD5 Hash mismatch for [2001:db8:1::2].44232->[2001:db8:1::1].12345 [S]L3 index 0 # TEST: MD5: Client uses wrong password [ OK ] [ 1934.573545] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].48218->[2001:db8:1::1].12345 [S] [ 1935.606386] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].48218->[2001:db8:1::1].12345 [S] [ 1936.630369] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].48218->[2001:db8:1::1].12345 [S] [ 1937.654393] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].48218->[2001:db8:1::1].12345 [S] # TEST: MD5: Client address does not match address configured with password [ OK ] # TEST: MD5: Prefix config [ OK ] [ 1945.683342] TCP: MD5 Hash mismatch for [2001:db8:1::2].50410->[2001:db8:1::1].12345 [S]L3 index 0 [ 1946.742415] TCP: MD5 Hash mismatch for [2001:db8:1::2].50410->[2001:db8:1::1].12345 [S]L3 index 0 [ 1947.766364] TCP: MD5 Hash mismatch for [2001:db8:1::2].50410->[2001:db8:1::1].12345 [S]L3 index 0 [ 1948.790386] TCP: MD5 Hash mismatch for [2001:db8:1::2].50410->[2001:db8:1::1].12345 [S]L3 index 0 # TEST: MD5: Prefix config, client uses wrong password [ OK ] [ 1953.742375] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 1954.806383] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 1955.830384] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 1956.854357] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] # TEST: MD5: Prefix config, client address not in configured prefix [ OK ] # # ################################################################# # tcp_l3mdev_accept enabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=1 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Global server - ns-A loopback IPv6 [ OK ] # TEST: Global server - ns-A IPv6 LLA [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - ns-A loopback IPv6 [ OK ] # TEST: No server - ns-A IPv6 LLA [ OK ] # TEST: Client - ns-B IPv6 [ OK ] # TEST: Client - ns-B loopback IPv6 [ OK ] # TEST: Client - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind - ns-B IPv6 [ OK ] # TEST: Client, device bind - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind - ns-B IPv6 LLA [ OK ] # TEST: No server, device client - ns-B IPv6 [ OK ] # TEST: No server, device client - ns-B loopback IPv6 [ OK ] # TEST: No server, device client - ns-B IPv6 LLA [ OK ] # TEST: Global server, local connection - ns-A IPv6 [ OK ] # TEST: Global server, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, local connection - IPv6 loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, unbound client, local connection - ns-A loopback IPv6 [ OK ] # TEST: Device server, unbound client, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client, local connection - IPv6 loopback [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 LLA [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 LLA [ OK ] # TEST: MD5: Single address config [ OK ] [ 2042.318124] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].37094->[2001:db8:1::1].12345 [S] [ 2043.382359] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].37094->[2001:db8:1::1].12345 [S] [ 2044.406417] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].37094->[2001:db8:1::1].12345 [S] [ 2045.430362] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].37094->[2001:db8:1::1].12345 [S] # TEST: MD5: Server no config, client uses password [ OK ] [ 2050.370707] TCP: MD5 Hash mismatch for [2001:db8:1::2].38460->[2001:db8:1::1].12345 [S]L3 index 0 [ 2051.382378] TCP: MD5 Hash mismatch for [2001:db8:1::2].38460->[2001:db8:1::1].12345 [S]L3 index 0 [ 2052.406387] TCP: MD5 Hash mismatch for [2001:db8:1::2].38460->[2001:db8:1::1].12345 [S]L3 index 0 [ 2053.430366] TCP: MD5 Hash mismatch for [2001:db8:1::2].38460->[2001:db8:1::1].12345 [S]L3 index 0 # TEST: MD5: Client uses wrong password [ OK ] [ 2058.425511] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].43630->[2001:db8:1::1].12345 [S] [ 2059.446370] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].43630->[2001:db8:1::1].12345 [S] [ 2060.470447] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].43630->[2001:db8:1::1].12345 [S] [ 2061.494374] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].43630->[2001:db8:1::1].12345 [S] # TEST: MD5: Client address does not match address configured with password [ OK ] # TEST: MD5: Prefix config [ OK ] [ 2069.531453] TCP: MD5 Hash mismatch for [2001:db8:1::2].56594->[2001:db8:1::1].12345 [S]L3 index 0 [ 2070.582371] TCP: MD5 Hash mismatch for [2001:db8:1::2].56594->[2001:db8:1::1].12345 [S]L3 index 0 [ 2071.606363] TCP: MD5 Hash mismatch for [2001:db8:1::2].56594->[2001:db8:1::1].12345 [S]L3 index 0 [ 2072.630478] TCP: MD5 Hash mismatch for [2001:db8:1::2].56594->[2001:db8:1::1].12345 [S]L3 index 0 # TEST: MD5: Prefix config, client uses wrong password [ OK ] [ 2077.589951] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 2078.646393] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 2079.670361] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 2080.694382] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] # TEST: MD5: Prefix config, client address not in configured prefix [ OK ] # # ################################################################# # With VRF # [ 2085.171408] eth1: renamed from tmp # # ################################################################# # Global server disabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=0 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Global server - VRF IPv6 [ OK ] # TEST: Global server - ns-A IPv6 LLA [ OK ] # TEST: VRF server - ns-A IPv6 [ OK ] # TEST: VRF server - VRF IPv6 [ OK ] # TEST: VRF server - ns-A IPv6 LLA [ OK ] # TEST: Device server - ns-A IPv6 [ OK ] # TEST: Device server - VRF IPv6 [ OK ] # TEST: Device server - ns-A IPv6 LLA [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - VRF IPv6 [ OK ] # TEST: No server - ns-A IPv6 LLA [ OK ] # TEST: Global server, local connection - ns-A IPv6 [ OK ] [ 2123.294428] eth2: renamed from tmp # TEST: MD5: VRF: Single address config [ OK ] [ 2128.430839] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].45884->[2001:db8:1::1].12345 [S] [ 2129.462353] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].45884->[2001:db8:1::1].12345 [S] [ 2130.486355] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].45884->[2001:db8:1::1].12345 [S] [ 2131.510359] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].45884->[2001:db8:1::1].12345 [S] # TEST: MD5: VRF: Server no config, client uses password [ OK ] [ 2136.490799] TCP: MD5 Hash mismatch for [2001:db8:1::2].48146->[2001:db8:1::1].12345 [S]L3 index 8 [ 2137.526388] TCP: MD5 Hash mismatch for [2001:db8:1::2].48146->[2001:db8:1::1].12345 [S]L3 index 8 [ 2138.550362] TCP: MD5 Hash mismatch for [2001:db8:1::2].48146->[2001:db8:1::1].12345 [S]L3 index 8 [ 2139.574385] TCP: MD5 Hash mismatch for [2001:db8:1::2].48146->[2001:db8:1::1].12345 [S]L3 index 8 # TEST: MD5: VRF: Client uses wrong password [ OK ] [ 2144.549780] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].42112->[2001:db8:1::1].12345 [S] [ 2145.590405] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].42112->[2001:db8:1::1].12345 [S] [ 2146.614395] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].42112->[2001:db8:1::1].12345 [S] [ 2147.638408] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].42112->[2001:db8:1::1].12345 [S] # TEST: MD5: VRF: Client address does not match address configured with password [ OK ] # TEST: MD5: VRF: Prefix config [ OK ] [ 2155.659182] TCP: MD5 Hash mismatch for [2001:db8:1::2].34386->[2001:db8:1::1].12345 [S]L3 index 8 [ 2156.662427] TCP: MD5 Hash mismatch for [2001:db8:1::2].34386->[2001:db8:1::1].12345 [S]L3 index 8 [ 2157.686368] TCP: MD5 Hash mismatch for [2001:db8:1::2].34386->[2001:db8:1::1].12345 [S]L3 index 8 [ 2158.710391] TCP: MD5 Hash mismatch for [2001:db8:1::2].34386->[2001:db8:1::1].12345 [S]L3 index 8 # TEST: MD5: VRF: Prefix config, client uses wrong password [ OK ] [ 2163.715773] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 2164.726360] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 2165.750360] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 2166.774359] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] # TEST: MD5: VRF: Prefix config, client address not in configured prefix [ OK ] # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in VRF [ OK ] # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in default VRF [ OK ] [ 2177.878908] TCP: MD5 Hash mismatch for [2001:db8:1::2].37558->[2001:db8:1::1].12345 [S]L3 index 0 [ 2178.934395] TCP: MD5 Hash mismatch for [2001:db8:1::2].37558->[2001:db8:1::1].12345 [S]L3 index 0 [ 2179.958410] TCP: MD5 Hash mismatch for [2001:db8:1::2].37558->[2001:db8:1::1].12345 [S]L3 index 0 [ 2180.982357] TCP: MD5 Hash mismatch for [2001:db8:1::2].37558->[2001:db8:1::1].12345 [S]L3 index 0 # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in default VRF with VRF pw [ OK ] [ 2185.938694] TCP: MD5 Hash mismatch for [2001:db8:1::2].41028->[2001:db8:1::1].12345 [S]L3 index 8 [ 2186.998452] TCP: MD5 Hash mismatch for [2001:db8:1::2].41028->[2001:db8:1::1].12345 [S]L3 index 8 [ 2188.022358] TCP: MD5 Hash mismatch for [2001:db8:1::2].41028->[2001:db8:1::1].12345 [S]L3 index 8 [ 2189.046425] TCP: MD5 Hash mismatch for [2001:db8:1::2].41028->[2001:db8:1::1].12345 [S]L3 index 8 # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in VRF with default VRF pw [ OK ] # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in VRF [ OK ] # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in default VRF [ OK ] [ 2200.100323] TCP: MD5 Hash mismatch for [2001:db8:1::2].41642->[2001:db8:1::1].12345 [S]L3 index 0 [ 2201.142440] TCP: MD5 Hash mismatch for [2001:db8:1::2].41642->[2001:db8:1::1].12345 [S]L3 index 0 [ 2202.166368] TCP: MD5 Hash mismatch for [2001:db8:1::2].41642->[2001:db8:1::1].12345 [S]L3 index 0 [ 2203.190390] TCP: MD5 Hash mismatch for [2001:db8:1::2].41642->[2001:db8:1::1].12345 [S]L3 index 0 # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in default VRF with VRF pw [ OK ] [ 2208.158372] TCP: MD5 Hash mismatch for [2001:db8:1::2].53938->[2001:db8:1::1].12345 [S]L3 index 8 [ 2209.206443] TCP: MD5 Hash mismatch for [2001:db8:1::2].53938->[2001:db8:1::1].12345 [S]L3 index 8 [ 2210.230381] TCP: MD5 Hash mismatch for [2001:db8:1::2].53938->[2001:db8:1::1].12345 [S]L3 index 8 [ 2211.254396] TCP: MD5 Hash mismatch for [2001:db8:1::2].53938->[2001:db8:1::1].12345 [S]L3 index 8 # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in VRF with default VRF pw [ OK ] # TEST: MD5: VRF: Device must be a VRF - single address [ OK ] # TEST: MD5: VRF: Device must be a VRF - prefix [ OK ] # # ################################################################# # VRF Global server enabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=1 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Global server - VRF IPv6 [ OK ] # TEST: VRF server - ns-A IPv6 [ OK ] # TEST: VRF server - VRF IPv6 [ OK ] # TEST: Global server - ns-A IPv6 LLA [ OK ] # TEST: VRF server - ns-A IPv6 LLA [ OK ] # TEST: Device server - ns-A IPv6 [ OK ] # TEST: Device server - ns-A IPv6 LLA [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - VRF IPv6 [ OK ] # TEST: No server - ns-A IPv6 LLA [ OK ] # TEST: Global server, local connection - ns-A IPv6 [ OK ] # TEST: Global server, local connection - VRF IPv6 [ OK ] # TEST: Client, VRF bind - ns-B IPv6 [ OK ] # TEST: Client, VRF bind - ns-B loopback IPv6 [ OK ] # TEST: Client, VRF bind - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind - ns-B IPv6 [ OK ] # TEST: Client, device bind - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind - ns-B IPv6 LLA [ OK ] # TEST: No server, VRF client - ns-B IPv6 [ OK ] # TEST: No server, VRF client - ns-B loopback IPv6 [ OK ] # TEST: No server, device client - ns-B IPv6 [ OK ] # TEST: No server, device client - ns-B loopback IPv6 [ OK ] # TEST: No server, device client - ns-B IPv6 LLA [ OK ] # TEST: VRF server, VRF client, local connection - ns-A IPv6 [ OK ] # TEST: VRF server, VRF client, local connection - VRF IPv6 [ OK ] # TEST: VRF server, VRF client, local connection - IPv6 loopback [ OK ] # TEST: VRF server, device client, local connection - ns-A IPv6 [ OK ] # TEST: VRF server, unbound client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, VRF client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, device client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, device client, local connection - ns-A IPv6 LLA [ OK ] # SYSCTL: net.ipv4.udp_early_demux=1 # # # ########################################################################### # IPv6/UDP # ########################################################################### # # # ################################################################# # No VRF # [ 2309.571411] eth1: renamed from tmp # # ################################################################# # udp_l3mdev_accept disabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=0 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Device server - ns-A IPv6 [ OK ] # TEST: Global server - ns-A IPv6 LLA [ OK ] # TEST: Device server - ns-A IPv6 LLA [ OK ] # TEST: Global server - ns-A loopback IPv6 [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - ns-A loopback IPv6 [ OK ] # TEST: No server - ns-A IPv6 LLA [ OK ] # TEST: Client - ns-B IPv6 [ OK ] # TEST: Client, device bind - ns-B IPv6 [ OK ] # TEST: Client, device send via cmsg - ns-B IPv6 [ OK ] # TEST: Client, device bind via IPV6_UNICAST_IF - ns-B IPv6 [ OK ] # TEST: No server, unbound client - ns-B IPv6 [ OK ] # TEST: No server, device client - ns-B IPv6 [ OK ] # TEST: Client - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind - ns-B loopback IPv6 [ OK ] # TEST: Client, device send via cmsg - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind via IPV6_UNICAST_IF - ns-B loopback IPv6 [ OK ] # TEST: No server, unbound client - ns-B loopback IPv6 [ OK ] # TEST: No server, device client - ns-B loopback IPv6 [ OK ] # TEST: Client - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind - ns-B IPv6 LLA [ OK ] # TEST: Client, device send via cmsg - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind via IPV6_UNICAST_IF - ns-B IPv6 LLA [ OK ] # TEST: No server, unbound client - ns-B IPv6 LLA [ OK ] # TEST: No server, device client - ns-B IPv6 LLA [ OK ] # TEST: Global server, local connection - ns-A IPv6 [ OK ] # TEST: Global server, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, local connection - IPv6 loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, local connection - ns-A loopback IPv6 [ OK ] # TEST: Device server, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device client via IPV6_UNICAST_IF, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client, local connection - IPv6 loopback [ OK ] # TEST: Global server, device send via cmsg, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - IPv6 loopback [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 [ OK ] # TEST: UDP in - LLA to GUA [ OK ] # # ################################################################# # udp_l3mdev_accept enabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=1 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Device server - ns-A IPv6 [ OK ] # TEST: Global server - ns-A IPv6 LLA [ OK ] # TEST: Device server - ns-A IPv6 LLA [ OK ] # TEST: Global server - ns-A loopback IPv6 [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - ns-A loopback IPv6 [ OK ] # TEST: No server - ns-A IPv6 LLA [ OK ] # TEST: Client - ns-B IPv6 [ OK ] # TEST: Client, device bind - ns-B IPv6 [ OK ] # TEST: Client, device send via cmsg - ns-B IPv6 [ OK ] # TEST: Client, device bind via IPV6_UNICAST_IF - ns-B IPv6 [ OK ] # TEST: No server, unbound client - ns-B IPv6 [ OK ] # TEST: No server, device client - ns-B IPv6 [ OK ] # TEST: Client - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind - ns-B loopback IPv6 [ OK ] # TEST: Client, device send via cmsg - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind via IPV6_UNICAST_IF - ns-B loopback IPv6 [ OK ] # TEST: No server, unbound client - ns-B loopback IPv6 [ OK ] # TEST: No server, device client - ns-B loopback IPv6 [ OK ] # TEST: Client - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind - ns-B IPv6 LLA [ OK ] # TEST: Client, device send via cmsg - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind via IPV6_UNICAST_IF - ns-B IPv6 LLA [ OK ] # TEST: No server, unbound client - ns-B IPv6 LLA [ OK ] # TEST: No server, device client - ns-B IPv6 LLA [ OK ] # TEST: Global server, local connection - ns-A IPv6 [ OK ] # TEST: Global server, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, local connection - IPv6 loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, local connection - ns-A loopback IPv6 [ OK ] # TEST: Device server, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device client via IPV6_UNICAST_IF, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client, local connection - IPv6 loopback [ OK ] # TEST: Global server, device send via cmsg, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - IPv6 loopback [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 [ OK ] # TEST: UDP in - LLA to GUA [ OK ] # # ################################################################# # With VRF # [ 2573.172207] ip (12140) used greatest stack depth: 11648 bytes left [ 2573.604485] eth1: renamed from tmp # # ################################################################# # Global server disabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=0 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Global server - VRF IPv6 [ OK ] # TEST: VRF server - ns-A IPv6 [ OK ] # TEST: VRF server - VRF IPv6 [ OK ] # TEST: Enslaved device server - ns-A IPv6 [ OK ] # TEST: Enslaved device server - VRF IPv6 [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - VRF IPv6 [ OK ] # TEST: Global server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: Global server, VRF client, local conn - VRF IPv6 [ OK ] # TEST: VRF server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: VRF server, VRF client, local conn - VRF IPv6 [ OK ] # TEST: Global server, device client, local conn - ns-A IPv6 [ OK ] # TEST: VRF server, device client, local conn - ns-A IPv6 [ OK ] # TEST: Enslaved device server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: Enslaved device server, device client, local conn - ns-A IPv6 [ OK ] # # ################################################################# # Global server enabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=1 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Global server - VRF IPv6 [ OK ] # TEST: VRF server - ns-A IPv6 [ OK ] # TEST: VRF server - VRF IPv6 [ OK ] # TEST: Enslaved device server - ns-A IPv6 [ OK ] # TEST: Enslaved device server - VRF IPv6 [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - VRF IPv6 [ OK ] # TEST: VRF client [ OK ] # TEST: No server, VRF client [ OK ] # TEST: Enslaved device client [ OK ] # TEST: No server, enslaved device client [ OK ] # TEST: Global server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: VRF server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: Global server, VRF client, local conn - VRF IPv6 [ OK ] # TEST: VRF server, VRF client, local conn - VRF IPv6 [ OK ] # TEST: No server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: No server, VRF client, local conn - VRF IPv6 [ OK ] # TEST: Global server, device client, local conn - ns-A IPv6 [ OK ] # TEST: VRF server, device client, local conn - ns-A IPv6 [ OK ] # TEST: Device server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 [ OK ] # TEST: Global server, linklocal IP [ OK ] # TEST: No server, linklocal IP [ OK ] # TEST: Enslaved device client, linklocal IP [ OK ] # TEST: No server, device client, peer linklocal IP [ OK ] # TEST: Enslaved device client, local conn - linklocal IP [ OK ] # TEST: No server, device client, local conn - linklocal IP [ OK ] # TEST: UDP in - LLA to GUA [ OK ] # # ########################################################################### # IPv6 address binds # ########################################################################### # # # ################################################################# # No VRF # [ 2703.994456] eth1: renamed from tmp # TEST: Raw socket bind to local address - ns-A IPv6 [ OK ] # TEST: Raw socket bind to local address after device bind - ns-A IPv6 [ OK ] # TEST: Raw socket bind to local address - ns-A loopback IPv6 [ OK ] # TEST: Raw socket bind to local address after device bind - ns-A loopback IPv6 [ OK ] # TEST: Raw socket bind to nonlocal address - nonlocal IPv6 [ OK ] # TEST: TCP socket bind to local address - ns-A IPv6 [ OK ] # TEST: TCP socket bind to local address after device bind - ns-A IPv6 [ OK ] # TEST: TCP socket bind to out of scope local address - ns-A loopback IPv6 [ OK ] # # ################################################################# # With VRF # [ 2723.073441] eth1: renamed from tmp # TEST: Raw socket bind to local address after vrf bind - ns-A IPv6 [ OK ] # TEST: Raw socket bind to local address after device bind - ns-A IPv6 [ OK ] # TEST: Raw socket bind to local address after vrf bind - VRF IPv6 [ OK ] # TEST: Raw socket bind to local address after device bind - VRF IPv6 [ OK ] # TEST: Raw socket bind to invalid local address after vrf bind - ns-A loopback IPv6 [ OK ] # TEST: Raw socket bind to nonlocal address after VRF bind - nonlocal IPv6 [ OK ] # TEST: TCP socket bind to local address with VRF bind - ns-A IPv6 [ OK ] # TEST: TCP socket bind to local address with VRF bind - VRF IPv6 [ OK ] # TEST: TCP socket bind to local address with device bind - ns-A IPv6 [ OK ] # TEST: TCP socket bind to VRF address with device bind - VRF IPv6 [ OK ] # TEST: TCP socket bind to invalid local address for VRF - ns-A loopback IPv6 [ OK ] # TEST: TCP socket bind to invalid local address for device bind - ns-A loopback IPv6 [ OK ] # # ########################################################################### # Run time tests - ipv6 # ########################################################################### # [ 2750.463429] eth1: renamed from tmp # TEST: Device delete with active traffic - ping in - ns-A IPv6 [ OK ] [ 2759.352427] eth1: renamed from tmp # TEST: Device delete with active traffic - ping out - ns-A IPv6 [ OK ] [ 2766.243432] eth1: renamed from tmp # TEST: TCP active socket, global server - ns-A IPv6 [ OK ] [ 2776.151404] eth1: renamed from tmp # TEST: TCP active socket, global server - VRF IPv6 [ OK ] [ 2786.083418] eth1: renamed from tmp # TEST: TCP active socket, VRF server - ns-A IPv6 [ OK ] [ 2795.975665] eth1: renamed from tmp # TEST: TCP active socket, VRF server - VRF IPv6 [ OK ] [ 2805.894422] eth1: renamed from tmp # TEST: TCP active socket, enslaved device server - ns-A IPv6 [ OK ] [ 2815.786434] eth1: renamed from tmp # TEST: TCP active socket, enslaved device server - VRF IPv6 [ OK ] [ 2825.704434] eth1: renamed from tmp # TEST: TCP active socket, VRF client [ OK ] [ 2835.600468] eth1: renamed from tmp # TEST: TCP active socket, enslaved device client [ OK ] [ 2845.473506] eth1: renamed from tmp # TEST: TCP active socket, global server, VRF client - ns-A IPv6 [ OK ] [ 2855.346422] eth1: renamed from tmp # TEST: TCP active socket, global server, VRF client - VRF IPv6 [ OK ] [ 2865.252496] eth1: renamed from tmp # TEST: TCP active socket, VRF server and client - ns-A IPv6 [ OK ] [ 2875.118499] eth1: renamed from tmp # TEST: TCP active socket, VRF server and client - VRF IPv6 [ OK ] [ 2885.012422] eth1: renamed from tmp # TEST: TCP active socket, global server, device client - ns-A IPv6 [ OK ] [ 2894.887462] eth1: renamed from tmp # TEST: TCP active socket, VRF server, device client - ns-A IPv6 [ OK ] [ 2904.766424] eth1: renamed from tmp # TEST: TCP active socket, device server, device client - ns-A IPv6 [ OK ] [ 2914.650476] eth1: renamed from tmp # TEST: TCP passive socket, global server - ns-A IPv6 [ OK ] [ 2924.538439] eth1: renamed from tmp # TEST: TCP passive socket, global server - VRF IPv6 [ OK ] [ 2934.442508] eth1: renamed from tmp # TEST: TCP passive socket, VRF server - ns-A IPv6 [ OK ] [ 2944.323504] eth1: renamed from tmp # TEST: TCP passive socket, VRF server - VRF IPv6 [ OK ] [ 2954.198420] eth1: renamed from tmp # TEST: TCP passive socket, enslaved device server - ns-A IPv6 [ OK ] [ 2964.048481] eth1: renamed from tmp # TEST: TCP passive socket, enslaved device server - VRF IPv6 [ OK ] [ 2973.954427] eth1: renamed from tmp # TEST: TCP passive socket, VRF client [ OK ] [ 2983.841434] eth1: renamed from tmp # TEST: TCP passive socket, enslaved device client [ OK ] [ 2993.746442] eth1: renamed from tmp # TEST: TCP passive socket, global server, VRF client - ns-A IPv6 [ OK ] [ 3003.629422] eth1: renamed from tmp # TEST: TCP passive socket, global server, VRF client - VRF IPv6 [ OK ] [ 3013.560435] eth1: renamed from tmp # TEST: TCP passive socket, VRF server and client - ns-A IPv6 [ OK ] [ 3023.462469] eth1: renamed from tmp # TEST: TCP passive socket, VRF server and client - VRF IPv6 [ OK ] [ 3033.366438] eth1: renamed from tmp # TEST: TCP passive socket, global server, device client - ns-A IPv6 [ OK ] [ 3043.310440] eth1: renamed from tmp # TEST: TCP passive socket, VRF server, device client - ns-A IPv6 [ OK ] [ 3053.232435] eth1: renamed from tmp # TEST: TCP passive socket, device server, device client - ns-A IPv6 [ OK ] [ 3063.186430] eth1: renamed from tmp # TEST: UDP active socket, global server - ns-A IPv6 [ OK ] [ 3073.105417] eth1: renamed from tmp # TEST: UDP active socket, global server - VRF IPv6 [ OK ] [ 3083.023509] eth1: renamed from tmp # TEST: UDP active socket, VRF server - ns-A IPv6 [ OK ] [ 3092.911479] eth1: renamed from tmp # TEST: UDP active socket, VRF server - VRF IPv6 [ OK ] [ 3102.840426] eth1: renamed from tmp # TEST: UDP active socket, enslaved device server - ns-A IPv6 [ OK ] [ 3112.841449] eth1: renamed from tmp # TEST: UDP active socket, enslaved device server - VRF IPv6 [ OK ] [ 3122.781440] eth1: renamed from tmp # TEST: UDP active socket, VRF client [ OK ] [ 3132.686444] eth1: renamed from tmp # TEST: UDP active socket, enslaved device client [ OK ] [ 3142.590430] eth1: renamed from tmp # TEST: UDP active socket, global server, VRF client - ns-A IPv6 [ OK ] [ 3152.470427] eth1: renamed from tmp # TEST: UDP active socket, global server, VRF client - VRF IPv6 [ OK ] [ 3162.351505] eth1: renamed from tmp # TEST: UDP active socket, VRF server and client - ns-A IPv6 [ OK ] [ 3172.237425] eth1: renamed from tmp # TEST: UDP active socket, VRF server and client - VRF IPv6 [ OK ] [ 3182.123425] eth1: renamed from tmp # TEST: UDP active socket, global server, device client - ns-A IPv6 [ OK ] [ 3191.997431] eth1: renamed from tmp # TEST: UDP active socket, VRF server, device client - ns-A IPv6 [ OK ] [ 3201.879420] eth1: renamed from tmp # TEST: UDP active socket, device server, device client - ns-A IPv6 [ OK ] # # ########################################################################### # IPv6 Netfilter # ########################################################################### # # # ################################################################# # TCP reset # [ 3211.791444] eth1: renamed from tmp # TEST: Global server, reject with TCP-reset on Rx - ns-A IPv6 [ OK ] # TEST: Global server, reject with TCP-reset on Rx - VRF IPv6 [ OK ] # # ################################################################# # ICMP unreachable # # TEST: Global TCP server, Rx reject icmp-port-unreach - ns-A IPv6 [ OK ] # TEST: Global TCP server, Rx reject icmp-port-unreach - VRF IPv6 [ OK ] # TEST: Global UDP server, Rx reject icmp-port-unreach - ns-A IPv6 [ OK ] # TEST: Global UDP server, Rx reject icmp-port-unreach - VRF IPv6 [ OK ] # # ########################################################################### # Use cases # ########################################################################### # # # ################################################################# # Device enslaved to bridge # [ 3237.151430] eth1: renamed from tmp [ 3238.551024] br0: port 1(eth1) entered blocking state [ 3238.551423] br0: port 1(eth1) entered disabled state [ 3238.551704] eth1: entered allmulticast mode [ 3238.552014] eth1: entered promiscuous mode [ 3238.591691] br0: port 1(eth1) entered blocking state [ 3238.592054] br0: port 1(eth1) entered forwarding state [ 3238.612130] br0: port 1(eth1) entered disabled state [ 3238.612685] br0: port 1(eth1) entered blocking state [ 3238.612974] br0: port 1(eth1) entered forwarding state # TEST: Bridge into VRF - IPv4 ping out [ OK ] # TEST: Bridge into VRF - IPv6 ping out [ OK ] # TEST: Bridge into VRF - IPv4 ping in [ OK ] # TEST: Bridge into VRF - IPv6 ping in [ OK ] # modprobe: FATAL: Module br_netfilter not found in directory /lib/modules/6.8.0-rc1-virtme [ 3247.876331] br0: port 1(eth1) entered disabled state [ 3247.877102] br0: port 1(eth1) entered blocking state [ 3247.877393] br0: port 1(eth1) entered forwarding state # TEST: Bridge vlan into VRF - IPv4 ping out [ OK ] # TEST: Bridge vlan into VRF - IPv6 ping out [ OK ] # TEST: Bridge vlan into VRF - IPv4 ping in [ OK ] # TEST: Bridge vlan into VRF - IPv6 ping in [ OK ] # modprobe: FATAL: Module br_netfilter not found in directory /lib/modules/6.8.0-rc1-virtme [ 3253.303945] eth1: left allmulticast mode [ 3253.304204] eth1: left promiscuous mode [ 3253.304522] br0: port 1(eth1) entered disabled state # # ################################################################# # Ping LLA with multiple interfaces # [ 3255.056446] eth1: renamed from tmp [ 3255.117427] eth2: renamed from tmp # TEST: Pre cycle, ping out ns-B - multicast IP [ OK ] # TEST: Pre cycle, ping out ns-C - multicast IP [ OK ] # TEST: Post cycle nsa-D7mA45 eth1, ping out ns-B - multicast IP [ OK ] # TEST: Post cycle nsa-D7mA45 eth1, ping out ns-C - multicast IP [ OK ] # TEST: Post cycle nsa-D7mA45 eth2, ping out ns-B - multicast IP [ OK ] # TEST: Post cycle nsa-D7mA45 eth2, ping out ns-C - multicast IP [ OK ] # # ################################################################# # SNAT on VRF # [ 3269.277441] eth1: renamed from tmp # TEST: IPv4 TCP connection over VRF with SNAT [ OK ] # TEST: IPv6 TCP connection over VRF with SNAT [ OK ] # # Tests passed: 906 # Tests failed: 0 ok 1 selftests: net: fcnal-test.sh make[1]: Leaving directory '/home/virtme/testing-1/tools/testing/selftests/net' make: Leaving directory '/home/virtme/testing-1/tools/testing/selftests' xx__-> echo $? 0 xx__->