make -C tools/testing/selftests TARGETS=net TEST_PROGS=fcnal-test.sh TEST__GEN_PROGS="" run_tests make: Entering directory '/home/virtme/testing-1/tools/testing/selftests' make[1]: Entering directory '/home/virtme/testing-1/tools/testing/selftests/net' make[1]: Nothing to be done for 'all'. make[1]: Leaving directory '/home/virtme/testing-1/tools/testing/selftests/net' make[1]: Entering directory '/home/virtme/testing-1/tools/testing/selftests/net' TAP version 13 1..1 # timeout set to 6000 # selftests: net: fcnal-test.sh # # ########################################################################### # IPv4 ping # ########################################################################### # # # ################################################################# # No VRF # [ 164.996224] ip (3203) used greatest stack depth: 12008 bytes left [ 165.038026] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=0 # # TEST: ping out - ns-B IP [ OK ] # TEST: ping out, device bind - ns-B IP [ OK ] # TEST: ping out, address bind - ns-B IP [ OK ] # TEST: ping out - ns-B loopback IP [ OK ] # TEST: ping out, device bind - ns-B loopback IP [ OK ] # TEST: ping out, address bind - ns-B loopback IP [ OK ] # TEST: ping out (don't route), peer on link - ns-B IP [ OK ] # TEST: ping out (don't route), peer not on link - ns-B loopback IP [ OK ] # TEST: ping in - ns-A IP [ OK ] # TEST: ping in - ns-A loopback IP [ OK ] # TEST: ping local - ns-A IP [ OK ] # TEST: ping local - ns-A loopback IP [ OK ] # TEST: ping local - loopback [ OK ] # TEST: ping local, device bind - ns-A IP [ OK ] # TEST: ping local, device bind - ns-A loopback IP [ OK ] # TEST: ping local, device bind - loopback [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IP [ OK ] # TEST: ping out, blocked by route - ns-B loopback IP [ OK ] # TEST: ping in, blocked by route - ns-A loopback IP [ OK ] # TEST: ping out, unreachable default route - ns-B loopback IP [ OK ] [ 215.749103] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=1 # # TEST: ping out - ns-B IP [ OK ] # TEST: ping out, device bind - ns-B IP [ OK ] # TEST: ping out, address bind - ns-B IP [ OK ] # TEST: ping out - ns-B loopback IP [ OK ] # TEST: ping out, device bind - ns-B loopback IP [ OK ] # TEST: ping out, address bind - ns-B loopback IP [ OK ] # TEST: ping out (don't route), peer on link - ns-B IP [ OK ] # TEST: ping out (don't route), peer not on link - ns-B loopback IP [ OK ] # TEST: ping in - ns-A IP [ OK ] # TEST: ping in - ns-A loopback IP [ OK ] # TEST: ping local - ns-A IP [ OK ] # TEST: ping local - ns-A loopback IP [ OK ] # TEST: ping local - loopback [ OK ] # TEST: ping local, device bind - ns-A IP [ OK ] # TEST: ping local, device bind - ns-A loopback IP [ OK ] # TEST: ping local, device bind - loopback [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IP [ OK ] # TEST: ping out, blocked by route - ns-B loopback IP [ OK ] # TEST: ping in, blocked by route - ns-A loopback IP [ OK ] # TEST: ping out, unreachable default route - ns-B loopback IP [ OK ] [ 266.398862] eth1: renamed from tmp # TEST: ping out - ns-B IP [ OK ] # TEST: ping out, device bind - ns-B IP [ OK ] # TEST: ping out, address bind - ns-B IP [ OK ] # TEST: ping out - ns-B loopback IP [ OK ] # TEST: ping out, device bind - ns-B loopback IP [ OK ] # TEST: ping out, address bind - ns-B loopback IP [ OK ] # TEST: ping out (don't route), peer on link - ns-B IP [ OK ] # TEST: ping out (don't route), peer not on link - ns-B loopback IP [ OK ] # TEST: ping in - ns-A IP [ OK ] # TEST: ping in - ns-A loopback IP [ OK ] # TEST: ping local - ns-A IP [ OK ] # TEST: ping local - ns-A loopback IP [ OK ] # TEST: ping local - loopback [ OK ] # TEST: ping local, device bind - ns-A IP [ OK ] # TEST: ping local, device bind - ns-A loopback IP [ OK ] # TEST: ping local, device bind - loopback [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IP [ OK ] # TEST: ping out, blocked by route - ns-B loopback IP [ OK ] # TEST: ping in, blocked by route - ns-A loopback IP [ OK ] # TEST: ping out, unreachable default route - ns-B loopback IP [ OK ] # # ################################################################# # With VRF # [ 317.133903] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=1 # # TEST: ping out, VRF bind - ns-B IP [ OK ] # TEST: ping out, device bind - ns-B IP [ OK ] # TEST: ping out, vrf device + dev address bind - ns-B IP [ OK ] # TEST: ping out, vrf device + vrf address bind - ns-B IP [ OK ] # TEST: ping out, VRF bind - ns-B loopback IP [ OK ] # TEST: ping out, device bind - ns-B loopback IP [ OK ] # TEST: ping out, vrf device + dev address bind - ns-B loopback IP [ OK ] # TEST: ping out, vrf device + vrf address bind - ns-B loopback IP [ OK ] # TEST: ping in - ns-A IP [ OK ] # TEST: ping in - VRF IP [ OK ] # TEST: ping local, VRF bind - ns-A IP [ OK ] # TEST: ping local, VRF bind - VRF IP [ OK ] # TEST: ping local, VRF bind - loopback [ OK ] # TEST: ping local, device bind - ns-A IP [ OK ] # TEST: ping local, device bind - VRF IP [ OK ] # TEST: ping local, device bind - loopback [ OK ] # TEST: ping out, vrf bind, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping out, device bind, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IP [ OK ] # TEST: ping out, vrf bind, unreachable route - ns-B loopback IP [ OK ] # TEST: ping out, device bind, unreachable route - ns-B loopback IP [ OK ] # TEST: ping in, unreachable route - ns-A loopback IP [ OK ] [ 366.217969] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=1 # # TEST: ping out, VRF bind - ns-B IP [ OK ] # TEST: ping out, device bind - ns-B IP [ OK ] # TEST: ping out, vrf device + dev address bind - ns-B IP [ OK ] # TEST: ping out, vrf device + vrf address bind - ns-B IP [ OK ] # TEST: ping out, VRF bind - ns-B loopback IP [ OK ] # TEST: ping out, device bind - ns-B loopback IP [ OK ] # TEST: ping out, vrf device + dev address bind - ns-B loopback IP [ OK ] # TEST: ping out, vrf device + vrf address bind - ns-B loopback IP [ OK ] # TEST: ping in - ns-A IP [ OK ] # TEST: ping in - VRF IP [ OK ] # TEST: ping local, VRF bind - ns-A IP [ OK ] # TEST: ping local, VRF bind - VRF IP [ OK ] # TEST: ping local, VRF bind - loopback [ OK ] # TEST: ping local, device bind - ns-A IP [ OK ] # TEST: ping local, device bind - VRF IP [ OK ] # TEST: ping local, device bind - loopback [ OK ] # TEST: ping out, vrf bind, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping out, device bind, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IP [ OK ] # TEST: ping out, vrf bind, unreachable route - ns-B loopback IP [ OK ] # TEST: ping out, device bind, unreachable route - ns-B loopback IP [ OK ] # TEST: ping in, unreachable route - ns-A loopback IP [ OK ] # # ########################################################################### # IPv4/TCP # ########################################################################### # # # ################################################################# # No VRF # [ 415.430913] eth1: renamed from tmp # # ################################################################# # tcp_l3mdev_accept disabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=0 # # TEST: Global server - ns-A IP [ OK ] # TEST: Global server - ns-A loopback IP [ OK ] # TEST: Device server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: No server - ns-A loopback IP [ OK ] # TEST: Client - ns-B IP [ OK ] # TEST: Client, device bind - ns-B IP [ OK ] # TEST: No server, unbound client - ns-B IP [ OK ] # TEST: No server, device client - ns-B IP [ OK ] # TEST: Client - ns-B loopback IP [ OK ] # TEST: Client, device bind - ns-B loopback IP [ OK ] # TEST: No server, unbound client - ns-B loopback IP [ OK ] # TEST: No server, device client - ns-B loopback IP [ OK ] # TEST: Global server, local connection - ns-A IP [ OK ] # TEST: Global server, local connection - ns-A loopback IP [ OK ] # TEST: Global server, local connection - loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IP [ OK ] # TEST: Device server, unbound client, local connection - ns-A loopback IP [ OK ] # TEST: Device server, unbound client, local connection - loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IP [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device client, local connection - loopback [ OK ] # TEST: Device server, device client, local connection - ns-A IP [ OK ] # TEST: No server, device client, local conn - ns-A IP [ OK ] # TEST: MD5: Single address config [ OK ] [ 494.754975] TCP: Unexpected MD5 Hash found for 172.16.1.2.57002->172.16.1.1.12345 [S] [ 495.805919] TCP: Unexpected MD5 Hash found for 172.16.1.2.57002->172.16.1.1.12345 [S] [ 496.829851] TCP: Unexpected MD5 Hash found for 172.16.1.2.57002->172.16.1.1.12345 [S] [ 497.853862] TCP: Unexpected MD5 Hash found for 172.16.1.2.57002->172.16.1.1.12345 [S] # TEST: MD5: Server no config, client uses password [ OK ] [ 502.832471] TCP: MD5 Hash failed for 172.16.1.2.52884->172.16.1.1.12345 [S] L3 index 0 [ 503.869810] TCP: MD5 Hash failed for 172.16.1.2.52884->172.16.1.1.12345 [S] L3 index 0 [ 504.893829] TCP: MD5 Hash failed for 172.16.1.2.52884->172.16.1.1.12345 [S] L3 index 0 [ 505.917828] TCP: MD5 Hash failed for 172.16.1.2.52884->172.16.1.1.12345 [S] L3 index 0 # TEST: MD5: Client uses wrong password [ OK ] [ 510.914579] TCP: Unexpected MD5 Hash found for 172.16.1.2.52886->172.16.1.1.12345 [S] [ 511.933860] TCP: Unexpected MD5 Hash found for 172.16.1.2.52886->172.16.1.1.12345 [S] [ 512.957823] TCP: Unexpected MD5 Hash found for 172.16.1.2.52886->172.16.1.1.12345 [S] [ 513.981829] TCP: Unexpected MD5 Hash found for 172.16.1.2.52886->172.16.1.1.12345 [S] # TEST: MD5: Client address does not match address configured with password [ OK ] # TEST: MD5: Prefix config [ OK ] [ 522.073936] TCP: MD5 Hash failed for 172.16.1.2.39264->172.16.1.1.12345 [S] L3 index 0 [ 523.133861] TCP: MD5 Hash failed for 172.16.1.2.39264->172.16.1.1.12345 [S] L3 index 0 [ 524.157810] TCP: MD5 Hash failed for 172.16.1.2.39264->172.16.1.1.12345 [S] L3 index 0 [ 525.181855] TCP: MD5 Hash failed for 172.16.1.2.39264->172.16.1.1.12345 [S] L3 index 0 # TEST: MD5: Prefix config, client uses wrong password [ OK ] [ 530.154600] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 531.197813] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 532.221840] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 533.245818] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] # TEST: MD5: Prefix config, client address not in configured prefix [ OK ] # TEST: SO_DONTROUTE client, syncookies=0 - ns-B IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=0 - ns-B IP [ OK ] # TEST: SO_DONTROUTE client, syncookies=0 - ns-B loopback IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=0 - ns-B loopback IP [ OK ] # TEST: SO_DONTROUTE client, syncookies=2 - ns-B IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=2 - ns-B IP [ OK ] # TEST: SO_DONTROUTE client, syncookies=2 - ns-B loopback IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=2 - ns-B loopback IP [ OK ] # # ################################################################# # tcp_l3mdev_accept enabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=1 # # TEST: Global server - ns-A IP [ OK ] # TEST: Global server - ns-A loopback IP [ OK ] # TEST: Device server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: No server - ns-A loopback IP [ OK ] # TEST: Client - ns-B IP [ OK ] # TEST: Client, device bind - ns-B IP [ OK ] # TEST: No server, unbound client - ns-B IP [ OK ] # TEST: No server, device client - ns-B IP [ OK ] # TEST: Client - ns-B loopback IP [ OK ] # TEST: Client, device bind - ns-B loopback IP [ OK ] # TEST: No server, unbound client - ns-B loopback IP [ OK ] # TEST: No server, device client - ns-B loopback IP [ OK ] # TEST: Global server, local connection - ns-A IP [ OK ] # TEST: Global server, local connection - ns-A loopback IP [ OK ] # TEST: Global server, local connection - loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IP [ OK ] # TEST: Device server, unbound client, local connection - ns-A loopback IP [ OK ] # TEST: Device server, unbound client, local connection - loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IP [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device client, local connection - loopback [ OK ] # TEST: Device server, device client, local connection - ns-A IP [ OK ] # TEST: No server, device client, local conn - ns-A IP [ OK ] # TEST: MD5: Single address config [ OK ] [ 641.137796] TCP: Unexpected MD5 Hash found for 172.16.1.2.51568->172.16.1.1.12345 [S] [ 642.173839] TCP: Unexpected MD5 Hash found for 172.16.1.2.51568->172.16.1.1.12345 [S] [ 643.197817] TCP: Unexpected MD5 Hash found for 172.16.1.2.51568->172.16.1.1.12345 [S] [ 644.221814] TCP: Unexpected MD5 Hash found for 172.16.1.2.51568->172.16.1.1.12345 [S] # TEST: MD5: Server no config, client uses password [ OK ] [ 649.226157] TCP: MD5 Hash failed for 172.16.1.2.33980->172.16.1.1.12345 [S] L3 index 0 [ 650.237848] TCP: MD5 Hash failed for 172.16.1.2.33980->172.16.1.1.12345 [S] L3 index 0 [ 651.261813] TCP: MD5 Hash failed for 172.16.1.2.33980->172.16.1.1.12345 [S] L3 index 0 [ 652.285820] TCP: MD5 Hash failed for 172.16.1.2.33980->172.16.1.1.12345 [S] L3 index 0 # TEST: MD5: Client uses wrong password [ OK ] [ 657.310659] TCP: Unexpected MD5 Hash found for 172.16.1.2.55016->172.16.1.1.12345 [S] [ 658.365898] TCP: Unexpected MD5 Hash found for 172.16.1.2.55016->172.16.1.1.12345 [S] [ 659.389814] TCP: Unexpected MD5 Hash found for 172.16.1.2.55016->172.16.1.1.12345 [S] [ 660.413840] TCP: Unexpected MD5 Hash found for 172.16.1.2.55016->172.16.1.1.12345 [S] # TEST: MD5: Client address does not match address configured with password [ OK ] # TEST: MD5: Prefix config [ OK ] [ 668.471334] TCP: MD5 Hash failed for 172.16.1.2.48354->172.16.1.1.12345 [S] L3 index 0 [ 669.501878] TCP: MD5 Hash failed for 172.16.1.2.48354->172.16.1.1.12345 [S] L3 index 0 [ 670.525804] TCP: MD5 Hash failed for 172.16.1.2.48354->172.16.1.1.12345 [S] L3 index 0 [ 671.549860] TCP: MD5 Hash failed for 172.16.1.2.48354->172.16.1.1.12345 [S] L3 index 0 # TEST: MD5: Prefix config, client uses wrong password [ OK ] [ 676.567074] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 677.629815] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 678.653828] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 679.677836] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] # TEST: MD5: Prefix config, client address not in configured prefix [ OK ] # TEST: SO_DONTROUTE client, syncookies=0 - ns-B IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=0 - ns-B IP [ OK ] # TEST: SO_DONTROUTE client, syncookies=0 - ns-B loopback IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=0 - ns-B loopback IP [ OK ] # TEST: SO_DONTROUTE client, syncookies=2 - ns-B IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=2 - ns-B IP [ OK ] # TEST: SO_DONTROUTE client, syncookies=2 - ns-B loopback IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=2 - ns-B loopback IP [ OK ] # # ################################################################# # With VRF # [ 711.124954] eth1: renamed from tmp # # ################################################################# # Global server disabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=0 # # TEST: Global server - ns-A IP [ OK ] # TEST: VRF server - ns-A IP [ OK ] # TEST: Device server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: Global server - VRF IP [ OK ] # TEST: VRF server - VRF IP [ OK ] # TEST: Device server - VRF IP [ OK ] # TEST: No server - VRF IP [ OK ] # TEST: Global server, local connection - ns-A IP [ OK ] [ 738.466967] eth2: renamed from tmp # TEST: MD5: VRF: Single address config [ OK ] [ 743.687674] TCP: Unexpected MD5 Hash found for 172.16.1.2.47660->172.16.1.1.12345 [S] [ 744.701840] TCP: Unexpected MD5 Hash found for 172.16.1.2.47660->172.16.1.1.12345 [S] [ 745.725806] TCP: Unexpected MD5 Hash found for 172.16.1.2.47660->172.16.1.1.12345 [S] [ 746.749817] TCP: Unexpected MD5 Hash found for 172.16.1.2.47660->172.16.1.1.12345 [S] # TEST: MD5: VRF: Server no config, client uses password [ OK ] [ 751.774926] TCP: MD5 Hash failed for 172.16.1.2.47670->172.16.1.1.12345 [S] L3 index 9 [ 752.829841] TCP: MD5 Hash failed for 172.16.1.2.47670->172.16.1.1.12345 [S] L3 index 9 [ 753.853861] TCP: MD5 Hash failed for 172.16.1.2.47670->172.16.1.1.12345 [S] L3 index 9 [ 754.877883] TCP: MD5 Hash failed for 172.16.1.2.47670->172.16.1.1.12345 [S] L3 index 9 # TEST: MD5: VRF: Client uses wrong password [ OK ] [ 759.859655] TCP: Unexpected MD5 Hash found for 172.16.1.2.49738->172.16.1.1.12345 [S] [ 760.893844] TCP: Unexpected MD5 Hash found for 172.16.1.2.49738->172.16.1.1.12345 [S] [ 761.917838] TCP: Unexpected MD5 Hash found for 172.16.1.2.49738->172.16.1.1.12345 [S] [ 762.941813] TCP: Unexpected MD5 Hash found for 172.16.1.2.49738->172.16.1.1.12345 [S] # TEST: MD5: VRF: Client address does not match address configured with password [ OK ] # TEST: MD5: VRF: Prefix config [ OK ] [ 771.021878] TCP: MD5 Hash failed for 172.16.1.2.53588->172.16.1.1.12345 [S] L3 index 9 [ 772.029906] TCP: MD5 Hash failed for 172.16.1.2.53588->172.16.1.1.12345 [S] L3 index 9 [ 773.053883] TCP: MD5 Hash failed for 172.16.1.2.53588->172.16.1.1.12345 [S] L3 index 9 [ 774.077817] TCP: MD5 Hash failed for 172.16.1.2.53588->172.16.1.1.12345 [S] L3 index 9 # TEST: MD5: VRF: Prefix config, client uses wrong password [ OK ] [ 779.109905] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 780.157835] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 781.181839] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 782.205825] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] # TEST: MD5: VRF: Prefix config, client address not in configured prefix [ OK ] # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in VRF [ OK ] # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in default VRF [ OK ] [ 793.357973] TCP: MD5 Hash failed for 172.16.1.2.39836->172.16.1.1.12345 [S] L3 index 0 [ 794.365855] TCP: MD5 Hash failed for 172.16.1.2.39836->172.16.1.1.12345 [S] L3 index 0 [ 795.389829] TCP: MD5 Hash failed for 172.16.1.2.39836->172.16.1.1.12345 [S] L3 index 0 [ 796.413894] TCP: MD5 Hash failed for 172.16.1.2.39836->172.16.1.1.12345 [S] L3 index 0 # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in default VRF with VRF pw [ OK ] [ 801.440719] TCP: MD5 Hash failed for 172.16.1.2.39846->172.16.1.1.12345 [S] L3 index 9 [ 802.493794] TCP: MD5 Hash failed for 172.16.1.2.39846->172.16.1.1.12345 [S] L3 index 9 [ 803.517814] TCP: MD5 Hash failed for 172.16.1.2.39846->172.16.1.1.12345 [S] L3 index 9 [ 804.541806] TCP: MD5 Hash failed for 172.16.1.2.39846->172.16.1.1.12345 [S] L3 index 9 # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in VRF with default VRF pw [ OK ] # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in VRF [ OK ] # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in default VRF [ OK ] [ 815.673001] TCP: MD5 Hash failed for 172.16.1.2.41418->172.16.1.1.12345 [S] L3 index 0 [ 816.701860] TCP: MD5 Hash failed for 172.16.1.2.41418->172.16.1.1.12345 [S] L3 index 0 [ 817.725825] TCP: MD5 Hash failed for 172.16.1.2.41418->172.16.1.1.12345 [S] L3 index 0 [ 818.749792] TCP: MD5 Hash failed for 172.16.1.2.41418->172.16.1.1.12345 [S] L3 index 0 # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in default VRF with VRF pw [ OK ] [ 823.750044] TCP: MD5 Hash failed for 172.16.1.2.52652->172.16.1.1.12345 [S] L3 index 9 [ 824.765813] TCP: MD5 Hash failed for 172.16.1.2.52652->172.16.1.1.12345 [S] L3 index 9 [ 825.789850] TCP: MD5 Hash failed for 172.16.1.2.52652->172.16.1.1.12345 [S] L3 index 9 [ 826.813827] TCP: MD5 Hash failed for 172.16.1.2.52652->172.16.1.1.12345 [S] L3 index 9 # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in VRF with default VRF pw [ OK ] # TEST: MD5: VRF: Device must be a VRF - single address [ OK ] # TEST: MD5: VRF: Device must be a VRF - prefix [ OK ] # TEST: MD5: VRF: VRF-bound server, unbound key accepts connection [ OK ] # TEST: MD5: VRF: VRF-bound server, bound key accepts connection [ OK ] # SYSCTL: net.ipv4.tcp_l3mdev_accept=1 # [ 842.172213] TCP: Unexpected MD5 Hash found for 172.16.1.2.45836->172.16.1.1.12345 [S] [ 843.197795] TCP: Unexpected MD5 Hash found for 172.16.1.2.45836->172.16.1.1.12345 [S] [ 844.221800] TCP: Unexpected MD5 Hash found for 172.16.1.2.45836->172.16.1.1.12345 [S] [ 845.245798] TCP: Unexpected MD5 Hash found for 172.16.1.2.45836->172.16.1.1.12345 [S] # TEST: MD5: VRF: Global server, Key bound to ifindex=0 rejects VRF connection [ OK ] # TEST: MD5: VRF: Global server, key bound to ifindex=0 accepts non-VRF connection [ OK ] # TEST: MD5: VRF: Global server, key not bound to ifindex accepts VRF connection [ OK ] # TEST: MD5: VRF: Global server, key not bound to ifindex accepts non-VRF connection [ OK ] # SYSCTL: net.ipv4.tcp_l3mdev_accept=0 # # # ################################################################# # VRF Global server enabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=1 # # TEST: Global server - ns-A IP [ OK ] # TEST: VRF server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: Global server - VRF IP [ OK ] # TEST: VRF server - VRF IP [ OK ] # TEST: No server - VRF IP [ OK ] # TEST: Device server - ns-A IP [ OK ] # TEST: Global server, local connection - ns-A IP [ OK ] # TEST: Global server, local connection - VRF IP [ OK ] # TEST: Client, VRF bind - ns-B IP [ OK ] # TEST: Client, device bind - ns-B IP [ OK ] # TEST: No server, VRF client - ns-B IP [ OK ] # TEST: No server, device client - ns-B IP [ OK ] # TEST: Client, VRF bind - ns-B loopback IP [ OK ] # TEST: Client, device bind - ns-B loopback IP [ OK ] # TEST: No server, VRF client - ns-B loopback IP [ OK ] # TEST: No server, device client - ns-B loopback IP [ OK ] # TEST: VRF server, VRF client, local connection - ns-A IP [ OK ] # TEST: VRF server, VRF client, local connection - VRF IP [ OK ] # TEST: VRF server, VRF client, local connection - loopback [ OK ] # TEST: VRF server, device client, local connection - ns-A IP [ OK ] # TEST: VRF server, unbound client, local connection - ns-A IP [ OK ] # TEST: Device server, VRF client, local connection - ns-A IP [ OK ] # TEST: Device server, device client, local connection - ns-A IP [ OK ] # # ########################################################################### # IPv4/UDP # ########################################################################### # # # ################################################################# # No VRF # [ 927.265939] eth1: renamed from tmp # # ################################################################# # udp_l3mdev_accept disabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=0 # # TEST: Global server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: Global server - ns-A loopback IP [ OK ] # TEST: No server - ns-A loopback IP [ OK ] # TEST: Device server - ns-A IP [ OK ] # TEST: Client - ns-B IP [ OK ] # TEST: Client, device bind - ns-B IP [ OK ] # TEST: Client, device send via cmsg - ns-B IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF - ns-B IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF, with connect() - ns-B IP [ OK ] # TEST: No server, unbound client - ns-B IP [ OK ] # TEST: No server, device client - ns-B IP [ OK ] # TEST: Client - ns-B loopback IP [ OK ] # TEST: Client, device bind - ns-B loopback IP [ OK ] # TEST: Client, device send via cmsg - ns-B loopback IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF - ns-B loopback IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF, with connect() - ns-B loopback IP [ OK ] # TEST: No server, unbound client - ns-B loopback IP [ OK ] # TEST: No server, device client - ns-B loopback IP [ OK ] # TEST: Global server, local connection - ns-A IP [ OK ] # TEST: Global server, local connection - ns-A loopback IP [ OK ] # TEST: Global server, local connection - loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IP [ OK ] # TEST: Device server, unbound client, local connection - ns-A loopback IP [ OK ] # TEST: Device server, unbound client, local connection - loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IP [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - ns-A IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - ns-A IP [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - ns-A loopback IP [ OK ] # TEST: Global server, device client, local connection - loopback [ OK ] # TEST: Global server, device send via cmsg, local connection - loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - loopback [ OK ] # TEST: Device server, device client, local conn - ns-A IP [ OK ] # TEST: No server, device client, local conn - ns-A IP [ OK ] # TEST: SO_DONTROUTE client - ns-B IP [ OK ] # TEST: SO_DONTROUTE client - ns-B loopback IP [ OK ] # # ################################################################# # udp_l3mdev_accept enabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=1 # # TEST: Global server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: Global server - ns-A loopback IP [ OK ] # TEST: No server - ns-A loopback IP [ OK ] # TEST: Device server - ns-A IP [ OK ] # TEST: Client - ns-B IP [ OK ] # TEST: Client, device bind - ns-B IP [ OK ] # TEST: Client, device send via cmsg - ns-B IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF - ns-B IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF, with connect() - ns-B IP [ OK ] # TEST: No server, unbound client - ns-B IP [ OK ] # TEST: No server, device client - ns-B IP [ OK ] # TEST: Client - ns-B loopback IP [ OK ] # TEST: Client, device bind - ns-B loopback IP [ OK ] # TEST: Client, device send via cmsg - ns-B loopback IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF - ns-B loopback IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF, with connect() - ns-B loopback IP [ OK ] # TEST: No server, unbound client - ns-B loopback IP [ OK ] # TEST: No server, device client - ns-B loopback IP [ OK ] # TEST: Global server, local connection - ns-A IP [ OK ] # TEST: Global server, local connection - ns-A loopback IP [ OK ] # TEST: Global server, local connection - loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IP [ OK ] # TEST: Device server, unbound client, local connection - ns-A loopback IP [ OK ] # TEST: Device server, unbound client, local connection - loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IP [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - ns-A IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - ns-A IP [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - ns-A loopback IP [ OK ] # TEST: Global server, device client, local connection - loopback [ OK ] # TEST: Global server, device send via cmsg, local connection - loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - loopback [ OK ] # TEST: Device server, device client, local conn - ns-A IP [ OK ] # TEST: No server, device client, local conn - ns-A IP [ OK ] # TEST: SO_DONTROUTE client - ns-B IP [ OK ] # TEST: SO_DONTROUTE client - ns-B loopback IP [ OK ] # # ################################################################# # With VRF # [ 1231.362001] eth1: renamed from tmp # # ################################################################# # Global server disabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=0 # # TEST: Global server - ns-A IP [ OK ] # TEST: VRF server - ns-A IP [ OK ] # TEST: Enslaved device server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: Global server, VRF client, local connection - ns-A IP [ OK ] # TEST: Global server - VRF IP [ OK ] # TEST: VRF server - VRF IP [ OK ] # TEST: Enslaved device server - VRF IP [ OK ] # TEST: No server - VRF IP [ OK ] # TEST: Global server, VRF client, local connection - VRF IP [ OK ] # TEST: VRF server, VRF client, local conn - ns-A IP [ OK ] # TEST: VRF server, enslaved device client, local connection - ns-A IP [ OK ] # TEST: Enslaved device server, VRF client, local conn - ns-A IP [ OK ] # TEST: Enslaved device server, device client, local conn - ns-A IP [ OK ] # # ################################################################# # Global server enabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=1 # # TEST: Global server - ns-A IP [ OK ] # TEST: VRF server - ns-A IP [ OK ] # TEST: Enslaved device server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: Global server - VRF IP [ OK ] # TEST: VRF server - VRF IP [ OK ] # TEST: Enslaved device server - VRF IP [ OK ] # TEST: No server - VRF IP [ OK ] # TEST: VRF client [ OK ] # TEST: Enslaved device client [ OK ] # TEST: No server, VRF client [ OK ] # TEST: No server, enslaved device client [ OK ] # TEST: Global server, VRF client, local conn - ns-A IP [ OK ] # TEST: VRF server, VRF client, local conn - ns-A IP [ OK ] # TEST: VRF server, device client, local conn - ns-A IP [ OK ] # TEST: Enslaved device server, VRF client, local conn - ns-A IP [ OK ] # TEST: Enslaved device server, device client, local conn - ns-A IP [ OK ] # TEST: Global server, VRF client, local conn - VRF IP [ OK ] # TEST: Global server, VRF client, local conn - loopback [ OK ] # TEST: VRF server, VRF client, local conn - VRF IP [ OK ] # TEST: VRF server, VRF client, local conn - loopback [ OK ] # TEST: No server, VRF client, local conn - ns-A IP [ OK ] # TEST: No server, VRF client, local conn - VRF IP [ OK ] # TEST: No server, VRF client, local conn - loopback [ OK ] # # ########################################################################### # IPv4 address binds # ########################################################################### # # # ################################################################# # No VRF # [ 1342.677971] eth1: renamed from tmp # TEST: Raw socket bind to local address - ns-A IP [ OK ] # TEST: Raw socket bind to local address after device bind - ns-A IP [ OK ] # TEST: Raw socket bind to local address - ns-A loopback IP [ OK ] # TEST: Raw socket bind to local address after device bind - ns-A loopback IP [ OK ] # TEST: Raw socket bind to nonlocal address - nonlocal IP [ OK ] # TEST: TCP socket bind to nonlocal address - nonlocal IP [ OK ] # TEST: ICMP socket bind to nonlocal address - nonlocal IP [ OK ] # TEST: ICMP socket bind to broadcast address - broadcast [ OK ] # TEST: ICMP socket bind to multicast address - multicast [ OK ] # TEST: TCP socket bind to local address - ns-A IP [ OK ] # TEST: TCP socket bind to local address after device bind - ns-A IP [ OK ] # # ################################################################# # With VRF # [ 1368.464909] eth1: renamed from tmp # TEST: Raw socket bind to local address - ns-A IP [ OK ] # TEST: Raw socket bind to local address after device bind - ns-A IP [ OK ] # TEST: Raw socket bind to local address after VRF bind - ns-A IP [ OK ] # TEST: Raw socket bind to local address - VRF IP [ OK ] # TEST: Raw socket bind to local address after device bind - VRF IP [ OK ] # TEST: Raw socket bind to local address after VRF bind - VRF IP [ OK ] # TEST: Raw socket bind to out of scope address after VRF bind - ns-A loopback IP [ OK ] # TEST: Raw socket bind to nonlocal address after VRF bind - nonlocal IP [ OK ] # TEST: TCP socket bind to nonlocal address after VRF bind - nonlocal IP [ OK ] # TEST: ICMP socket bind to nonlocal address after VRF bind - nonlocal IP [ OK ] # TEST: ICMP socket bind to broadcast address after VRF bind - broadcast [ OK ] # TEST: ICMP socket bind to multicast address after VRF bind - multicast [ OK ] # TEST: TCP socket bind to local address - ns-A IP [ OK ] # TEST: TCP socket bind to local address after device bind - ns-A IP [ OK ] # TEST: TCP socket bind to local address - VRF IP [ OK ] # TEST: TCP socket bind to local address after device bind - VRF IP [ OK ] # TEST: TCP socket bind to invalid local address for VRF - ns-A loopback IP [ OK ] # TEST: TCP socket bind to invalid local address for device bind - ns-A loopback IP [ OK ] # # ########################################################################### # Run time tests - ipv4 # ########################################################################### # [ 1408.848981] eth1: renamed from tmp # TEST: Device delete with active traffic - ping in - ns-A IP [ OK ] [ 1418.182864] eth1: renamed from tmp # TEST: Device delete with active traffic - ping in - VRF IP [ OK ] [ 1427.458961] eth1: renamed from tmp # TEST: Device delete with active traffic - ping out - ns-B IP [ OK ] [ 1436.660911] eth1: renamed from tmp # TEST: TCP active socket, global server - ns-A IP [ OK ] [ 1446.897948] eth1: renamed from tmp # TEST: TCP active socket, global server - VRF IP [ OK ] [ 1457.166004] eth1: renamed from tmp # TEST: TCP active socket, VRF server - ns-A IP [ OK ] [ 1467.449981] eth1: renamed from tmp # TEST: TCP active socket, VRF server - VRF IP [ OK ] [ 1477.821023] eth1: renamed from tmp # TEST: TCP active socket, enslaved device server - ns-A IP [ OK ] [ 1488.193941] eth1: renamed from tmp # TEST: TCP active socket, VRF client - ns-A IP [ OK ] [ 1498.395872] eth1: renamed from tmp # TEST: TCP active socket, enslaved device client - ns-A IP [ OK ] [ 1508.621888] eth1: renamed from tmp # TEST: TCP active socket, global server, VRF client, local - ns-A IP [ OK ] [ 1518.852906] eth1: renamed from tmp # TEST: TCP active socket, global server, VRF client, local - VRF IP [ OK ] [ 1529.121919] eth1: renamed from tmp # TEST: TCP active socket, VRF server and client, local - ns-A IP [ OK ] [ 1539.323920] eth1: renamed from tmp # TEST: TCP active socket, VRF server and client, local - VRF IP [ OK ] [ 1549.571910] eth1: renamed from tmp # TEST: TCP active socket, global server, enslaved device client, local - ns-A IP [ OK ] [ 1559.883940] eth1: renamed from tmp # TEST: TCP active socket, VRF server, enslaved device client, local - ns-A IP [ OK ] [ 1570.080932] eth1: renamed from tmp # TEST: TCP active socket, enslaved device server and client, local - ns-A IP [ OK ] [ 1580.416877] eth1: renamed from tmp # TEST: TCP passive socket, global server - ns-A IP [ OK ] [ 1590.700919] eth1: renamed from tmp # TEST: TCP passive socket, global server - VRF IP [ OK ] [ 1601.059921] eth1: renamed from tmp # TEST: TCP passive socket, VRF server - ns-A IP [ OK ] [ 1611.329906] eth1: renamed from tmp # TEST: TCP passive socket, VRF server - VRF IP [ OK ] [ 1621.565860] eth1: renamed from tmp # TEST: TCP passive socket, enslaved device server - ns-A IP [ OK ] [ 1631.776876] eth1: renamed from tmp # TEST: TCP passive socket, VRF client - ns-A IP [ OK ] [ 1641.935907] eth1: renamed from tmp # TEST: TCP passive socket, enslaved device client - ns-A IP [ OK ] [ 1652.191927] eth1: renamed from tmp # TEST: TCP passive socket, global server, VRF client, local - ns-A IP [ OK ] [ 1662.444907] eth1: renamed from tmp # TEST: TCP passive socket, global server, VRF client, local - VRF IP [ OK ] [ 1672.638859] eth1: renamed from tmp # TEST: TCP passive socket, VRF server and client, local - ns-A IP [ OK ] [ 1682.912911] eth1: renamed from tmp # TEST: TCP passive socket, VRF server and client, local - VRF IP [ OK ] [ 1693.176921] eth1: renamed from tmp # TEST: TCP passive socket, global server, enslaved device client, local - ns-A IP [ OK ] [ 1703.373883] eth1: renamed from tmp # TEST: TCP passive socket, VRF server, enslaved device client, local - ns-A IP [ OK ] [ 1713.591929] eth1: renamed from tmp # TEST: TCP passive socket, enslaved device server and client, local - ns-A IP [ OK ] # # ########################################################################### # IPv4 Netfilter # ########################################################################### # # # ################################################################# # TCP reset # [ 1723.746914] eth1: renamed from tmp # TEST: Global server, reject with TCP-reset on Rx - ns-A IP [ OK ] # TEST: Global server, reject with TCP-reset on Rx - VRF IP [ OK ] # # ################################################################# # ICMP unreachable # # TEST: Global TCP server, Rx reject icmp-port-unreach - ns-A IP [ OK ] # TEST: Global TCP server, Rx reject icmp-port-unreach - VRF IP [ OK ] # TEST: Global UDP server, Rx reject icmp-port-unreach - ns-A IP [ OK ] # TEST: Global UDP server, Rx reject icmp-port-unreach - VRF IP [ OK ] # # ########################################################################### # IPv6 ping # ########################################################################### # # # ################################################################# # No VRF # [ 1748.467853] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=0 # # TEST: ping out - ns-B IPv6 [ OK ] # TEST: ping out - ns-B loopback IPv6 [ OK ] # TEST: ping out - ns-B IPv6 LLA [ OK ] # TEST: ping out - multicast IP [ OK ] # TEST: ping out, device bind - ns-B IPv6 [ OK ] # TEST: ping out, loopback address bind - ns-B IPv6 [ OK ] # TEST: ping out, device bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, loopback address bind - ns-B loopback IPv6 [ OK ] # TEST: ping in - ns-A IPv6 [ OK ] # TEST: ping in - ns-A loopback IPv6 [ OK ] # TEST: ping in - ns-A IPv6 LLA [ OK ] # TEST: ping in - multicast IP [ OK ] # TEST: ping local, no bind - ns-A IPv6 [ OK ] # TEST: ping local, no bind - ns-A loopback IPv6 [ OK ] # TEST: ping local, no bind - IPv6 loopback [ OK ] # TEST: ping local, no bind - ns-A IPv6 LLA [ OK ] # TEST: ping local, no bind - multicast IP [ OK ] # TEST: ping local, device bind - ns-A IPv6 [ OK ] # TEST: ping local, device bind - ns-A IPv6 LLA [ OK ] # TEST: ping local, device bind - multicast IP [ OK ] # TEST: ping local, device bind - ns-A loopback IPv6 [ OK ] # TEST: ping local, device bind - IPv6 loopback [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IPv6 [ OK ] # TEST: ping out, blocked by route - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, blocked by route - ns-B loopback IPv6 [ OK ] # TEST: ping in, blocked by route - ns-A loopback IPv6 [ OK ] # TEST: ping out, unreachable route - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, unreachable route - ns-B loopback IPv6 [ OK ] [ 1814.773961] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=0 # # TEST: ping out - ns-B IPv6 [ OK ] # TEST: ping out - ns-B loopback IPv6 [ OK ] # TEST: ping out - ns-B IPv6 LLA [ OK ] # TEST: ping out - multicast IP [ OK ] # TEST: ping out, device bind - ns-B IPv6 [ OK ] # TEST: ping out, loopback address bind - ns-B IPv6 [ OK ] # TEST: ping out, device bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, loopback address bind - ns-B loopback IPv6 [ OK ] # TEST: ping in - ns-A IPv6 [ OK ] # TEST: ping in - ns-A loopback IPv6 [ OK ] # TEST: ping in - ns-A IPv6 LLA [ OK ] # TEST: ping in - multicast IP [ OK ] # TEST: ping local, no bind - ns-A IPv6 [ OK ] # TEST: ping local, no bind - ns-A loopback IPv6 [ OK ] # TEST: ping local, no bind - IPv6 loopback [ OK ] # TEST: ping local, no bind - ns-A IPv6 LLA [ OK ] # TEST: ping local, no bind - multicast IP [ OK ] # TEST: ping local, device bind - ns-A IPv6 [ OK ] # TEST: ping local, device bind - ns-A IPv6 LLA [ OK ] # TEST: ping local, device bind - multicast IP [ OK ] # TEST: ping local, device bind - ns-A loopback IPv6 [ OK ] # TEST: ping local, device bind - IPv6 loopback [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IPv6 [ OK ] # TEST: ping out, blocked by route - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, blocked by route - ns-B loopback IPv6 [ OK ] # TEST: ping in, blocked by route - ns-A loopback IPv6 [ OK ] # TEST: ping out, unreachable route - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, unreachable route - ns-B loopback IPv6 [ OK ] # # ################################################################# # With VRF # [ 1881.121901] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=1 # # TEST: ping out, VRF bind - ns-B IPv6 [ OK ] # TEST: ping out, VRF bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, VRF bind - ns-B IPv6 LLA [ OK ] # TEST: ping out, VRF bind - multicast IP [ OK ] # TEST: ping out, device bind - ns-B IPv6 [ OK ] # TEST: ping out, device bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind - ns-B IPv6 LLA [ OK ] # TEST: ping out, device bind - multicast IP [ OK ] # TEST: ping out, vrf device+address bind - ns-B IPv6 [ OK ] # TEST: ping out, vrf device+address bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, vrf device+address bind - ns-B IPv6 LLA [ OK ] # TEST: ping in - ns-A IPv6 [ OK ] # TEST: ping in - VRF IPv6 [ OK ] # TEST: ping in - ns-A IPv6 LLA [ OK ] # TEST: ping in - multicast IP [ OK ] # TEST: ping in - ns-A loopback IPv6 [ OK ] # TEST: ping local, VRF bind - ns-A IPv6 [ OK ] # TEST: ping local, VRF bind - VRF IPv6 [ OK ] # TEST: ping local, VRF bind - IPv6 loopback [ OK ] # TEST: ping local, device bind - ns-A IPv6 [ OK ] # TEST: ping local, device bind - ns-A IPv6 LLA [ OK ] # TEST: ping local, device bind - multicast IP [ OK ] # TEST: ping in, LLA to GUA - ns-A IPv6 [ OK ] # TEST: ping in, LLA to GUA - VRF IPv6 [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IPv6 [ OK ] # TEST: ping out, unreachable route - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, unreachable route - ns-B loopback IPv6 [ OK ] # TEST: ping in, unreachable route - ns-A loopback IPv6 [ OK ] [ 1949.681951] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=1 # # TEST: ping out, VRF bind - ns-B IPv6 [ OK ] # TEST: ping out, VRF bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, VRF bind - ns-B IPv6 LLA [ OK ] # TEST: ping out, VRF bind - multicast IP [ OK ] # TEST: ping out, device bind - ns-B IPv6 [ OK ] # TEST: ping out, device bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind - ns-B IPv6 LLA [ OK ] # TEST: ping out, device bind - multicast IP [ OK ] # TEST: ping out, vrf device+address bind - ns-B IPv6 [ OK ] # TEST: ping out, vrf device+address bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, vrf device+address bind - ns-B IPv6 LLA [ OK ] # TEST: ping in - ns-A IPv6 [ OK ] # TEST: ping in - VRF IPv6 [ OK ] # TEST: ping in - ns-A IPv6 LLA [ OK ] # TEST: ping in - multicast IP [ OK ] # TEST: ping in - ns-A loopback IPv6 [ OK ] # TEST: ping local, VRF bind - ns-A IPv6 [ OK ] # TEST: ping local, VRF bind - VRF IPv6 [ OK ] # TEST: ping local, VRF bind - IPv6 loopback [ OK ] # TEST: ping local, device bind - ns-A IPv6 [ OK ] # TEST: ping local, device bind - ns-A IPv6 LLA [ OK ] # TEST: ping local, device bind - multicast IP [ OK ] # TEST: ping in, LLA to GUA - ns-A IPv6 [ OK ] # TEST: ping in, LLA to GUA - VRF IPv6 [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IPv6 [ OK ] # TEST: ping out, unreachable route - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, unreachable route - ns-B loopback IPv6 [ OK ] # TEST: ping in, unreachable route - ns-A loopback IPv6 [ OK ] # # ########################################################################### # IPv6/TCP # ########################################################################### # # # ################################################################# # No VRF # [ 2018.089881] eth1: renamed from tmp # # ################################################################# # tcp_l3mdev_accept disabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=0 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Global server - ns-A loopback IPv6 [ OK ] # TEST: Global server - ns-A IPv6 LLA [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - ns-A loopback IPv6 [ OK ] # TEST: No server - ns-A IPv6 LLA [ OK ] # TEST: Client - ns-B IPv6 [ OK ] # TEST: Client - ns-B loopback IPv6 [ OK ] # TEST: Client - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind - ns-B IPv6 [ OK ] # TEST: Client, device bind - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind - ns-B IPv6 LLA [ OK ] # TEST: No server, device client - ns-B IPv6 [ OK ] # TEST: No server, device client - ns-B loopback IPv6 [ OK ] # TEST: No server, device client - ns-B IPv6 LLA [ OK ] # TEST: Global server, local connection - ns-A IPv6 [ OK ] # TEST: Global server, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, local connection - IPv6 loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, unbound client, local connection - ns-A loopback IPv6 [ OK ] # TEST: Device server, unbound client, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client, local connection - IPv6 loopback [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 LLA [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 LLA [ OK ] # TEST: MD5: Single address config [ OK ] [ 2102.270162] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].58092->[2001:db8:1::1].12345 [S] [ 2103.293872] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].58092->[2001:db8:1::1].12345 [S] [ 2104.317803] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].58092->[2001:db8:1::1].12345 [S] [ 2105.341803] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].58092->[2001:db8:1::1].12345 [S] # TEST: MD5: Server no config, client uses password [ OK ] [ 2110.348924] TCP: MD5 Hash mismatch for [2001:db8:1::2].53450->[2001:db8:1::1].12345 [S]L3 index 0 [ 2111.357816] TCP: MD5 Hash mismatch for [2001:db8:1::2].53450->[2001:db8:1::1].12345 [S]L3 index 0 [ 2112.381821] TCP: MD5 Hash mismatch for [2001:db8:1::2].53450->[2001:db8:1::1].12345 [S]L3 index 0 [ 2113.405856] TCP: MD5 Hash mismatch for [2001:db8:1::2].53450->[2001:db8:1::1].12345 [S]L3 index 0 # TEST: MD5: Client uses wrong password [ OK ] [ 2118.421527] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].36560->[2001:db8:1::1].12345 [S] [ 2119.485792] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].36560->[2001:db8:1::1].12345 [S] [ 2120.509796] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].36560->[2001:db8:1::1].12345 [S] [ 2121.533792] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].36560->[2001:db8:1::1].12345 [S] # TEST: MD5: Client address does not match address configured with password [ OK ] # TEST: MD5: Prefix config [ OK ] [ 2129.565318] TCP: MD5 Hash mismatch for [2001:db8:1::2].47262->[2001:db8:1::1].12345 [S]L3 index 0 [ 2130.621830] TCP: MD5 Hash mismatch for [2001:db8:1::2].47262->[2001:db8:1::1].12345 [S]L3 index 0 [ 2131.645799] TCP: MD5 Hash mismatch for [2001:db8:1::2].47262->[2001:db8:1::1].12345 [S]L3 index 0 [ 2132.669798] TCP: MD5 Hash mismatch for [2001:db8:1::2].47262->[2001:db8:1::1].12345 [S]L3 index 0 # TEST: MD5: Prefix config, client uses wrong password [ OK ] [ 2137.639788] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 2138.685839] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 2139.709833] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 2140.733799] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] # TEST: MD5: Prefix config, client address not in configured prefix [ OK ] # # ################################################################# # tcp_l3mdev_accept enabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=1 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Global server - ns-A loopback IPv6 [ OK ] # TEST: Global server - ns-A IPv6 LLA [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - ns-A loopback IPv6 [ OK ] # TEST: No server - ns-A IPv6 LLA [ OK ] # TEST: Client - ns-B IPv6 [ OK ] # TEST: Client - ns-B loopback IPv6 [ OK ] # TEST: Client - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind - ns-B IPv6 [ OK ] # TEST: Client, device bind - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind - ns-B IPv6 LLA [ OK ] # TEST: No server, device client - ns-B IPv6 [ OK ] # TEST: No server, device client - ns-B loopback IPv6 [ OK ] # TEST: No server, device client - ns-B IPv6 LLA [ OK ] # TEST: Global server, local connection - ns-A IPv6 [ OK ] # TEST: Global server, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, local connection - IPv6 loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, unbound client, local connection - ns-A loopback IPv6 [ OK ] # TEST: Device server, unbound client, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client, local connection - IPv6 loopback [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 LLA [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 LLA [ OK ] # TEST: MD5: Single address config [ OK ] [ 2226.725556] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].59060->[2001:db8:1::1].12345 [S] [ 2227.773852] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].59060->[2001:db8:1::1].12345 [S] [ 2228.797875] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].59060->[2001:db8:1::1].12345 [S] [ 2229.821830] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].59060->[2001:db8:1::1].12345 [S] # TEST: MD5: Server no config, client uses password [ OK ] [ 2234.811428] TCP: MD5 Hash mismatch for [2001:db8:1::2].50802->[2001:db8:1::1].12345 [S]L3 index 0 [ 2235.837818] TCP: MD5 Hash mismatch for [2001:db8:1::2].50802->[2001:db8:1::1].12345 [S]L3 index 0 [ 2236.861833] TCP: MD5 Hash mismatch for [2001:db8:1::2].50802->[2001:db8:1::1].12345 [S]L3 index 0 [ 2237.885832] TCP: MD5 Hash mismatch for [2001:db8:1::2].50802->[2001:db8:1::1].12345 [S]L3 index 0 # TEST: MD5: Client uses wrong password [ OK ] [ 2242.898010] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].34970->[2001:db8:1::1].12345 [S] [ 2243.901817] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].34970->[2001:db8:1::1].12345 [S] [ 2244.925798] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].34970->[2001:db8:1::1].12345 [S] [ 2245.949818] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].34970->[2001:db8:1::1].12345 [S] # TEST: MD5: Client address does not match address configured with password [ OK ] # TEST: MD5: Prefix config [ OK ] [ 2254.043107] TCP: MD5 Hash mismatch for [2001:db8:1::2].45198->[2001:db8:1::1].12345 [S]L3 index 0 [ 2255.101858] TCP: MD5 Hash mismatch for [2001:db8:1::2].45198->[2001:db8:1::1].12345 [S]L3 index 0 [ 2256.125805] TCP: MD5 Hash mismatch for [2001:db8:1::2].45198->[2001:db8:1::1].12345 [S]L3 index 0 [ 2257.149803] TCP: MD5 Hash mismatch for [2001:db8:1::2].45198->[2001:db8:1::1].12345 [S]L3 index 0 # TEST: MD5: Prefix config, client uses wrong password [ OK ] [ 2262.120917] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 2263.165816] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 2264.189801] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 2265.213795] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] # TEST: MD5: Prefix config, client address not in configured prefix [ OK ] # # ################################################################# # With VRF # [ 2269.877944] eth1: renamed from tmp # # ################################################################# # Global server disabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=0 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Global server - VRF IPv6 [ OK ] # TEST: Global server - ns-A IPv6 LLA [ OK ] # TEST: VRF server - ns-A IPv6 [ OK ] # TEST: VRF server - VRF IPv6 [ OK ] # TEST: VRF server - ns-A IPv6 LLA [ OK ] # TEST: Device server - ns-A IPv6 [ OK ] # TEST: Device server - VRF IPv6 [ OK ] # TEST: Device server - ns-A IPv6 LLA [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - VRF IPv6 [ OK ] # TEST: No server - ns-A IPv6 LLA [ OK ] # TEST: Global server, local connection - ns-A IPv6 [ OK ] [ 2308.342859] eth2: renamed from tmp # TEST: MD5: VRF: Single address config [ OK ] [ 2313.520517] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].36220->[2001:db8:1::1].12345 [S] [ 2314.557825] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].36220->[2001:db8:1::1].12345 [S] [ 2315.581804] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].36220->[2001:db8:1::1].12345 [S] [ 2316.605824] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].36220->[2001:db8:1::1].12345 [S] # TEST: MD5: VRF: Server no config, client uses password [ OK ] [ 2321.593704] TCP: MD5 Hash mismatch for [2001:db8:1::2].36224->[2001:db8:1::1].12345 [S]L3 index 9 [ 2322.621829] TCP: MD5 Hash mismatch for [2001:db8:1::2].36224->[2001:db8:1::1].12345 [S]L3 index 9 [ 2323.645807] TCP: MD5 Hash mismatch for [2001:db8:1::2].36224->[2001:db8:1::1].12345 [S]L3 index 9 [ 2324.669803] TCP: MD5 Hash mismatch for [2001:db8:1::2].36224->[2001:db8:1::1].12345 [S]L3 index 9 # TEST: MD5: VRF: Client uses wrong password [ OK ] [ 2329.666879] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].47298->[2001:db8:1::1].12345 [S] [ 2330.685849] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].47298->[2001:db8:1::1].12345 [S] [ 2331.709878] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].47298->[2001:db8:1::1].12345 [S] [ 2332.733887] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].47298->[2001:db8:1::1].12345 [S] # TEST: MD5: VRF: Client address does not match address configured with password [ OK ] # TEST: MD5: VRF: Prefix config [ OK ] [ 2340.824455] TCP: MD5 Hash mismatch for [2001:db8:1::2].45002->[2001:db8:1::1].12345 [S]L3 index 9 [ 2341.885884] TCP: MD5 Hash mismatch for [2001:db8:1::2].45002->[2001:db8:1::1].12345 [S]L3 index 9 [ 2342.909903] TCP: MD5 Hash mismatch for [2001:db8:1::2].45002->[2001:db8:1::1].12345 [S]L3 index 9 [ 2343.933857] TCP: MD5 Hash mismatch for [2001:db8:1::2].45002->[2001:db8:1::1].12345 [S]L3 index 9 # TEST: MD5: VRF: Prefix config, client uses wrong password [ OK ] [ 2348.909015] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 2349.949828] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 2350.973807] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 2351.997820] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] # TEST: MD5: VRF: Prefix config, client address not in configured prefix [ OK ] # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in VRF [ OK ] # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in default VRF [ OK ] [ 2363.132239] TCP: MD5 Hash mismatch for [2001:db8:1::2].44074->[2001:db8:1::1].12345 [S]L3 index 0 [ 2364.157790] TCP: MD5 Hash mismatch for [2001:db8:1::2].44074->[2001:db8:1::1].12345 [S]L3 index 0 [ 2365.181803] TCP: MD5 Hash mismatch for [2001:db8:1::2].44074->[2001:db8:1::1].12345 [S]L3 index 0 [ 2366.205805] TCP: MD5 Hash mismatch for [2001:db8:1::2].44074->[2001:db8:1::1].12345 [S]L3 index 0 # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in default VRF with VRF pw [ OK ] [ 2371.204337] TCP: MD5 Hash mismatch for [2001:db8:1::2].44090->[2001:db8:1::1].12345 [S]L3 index 9 [ 2372.221817] TCP: MD5 Hash mismatch for [2001:db8:1::2].44090->[2001:db8:1::1].12345 [S]L3 index 9 [ 2373.245830] TCP: MD5 Hash mismatch for [2001:db8:1::2].44090->[2001:db8:1::1].12345 [S]L3 index 9 [ 2374.269877] TCP: MD5 Hash mismatch for [2001:db8:1::2].44090->[2001:db8:1::1].12345 [S]L3 index 9 # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in VRF with default VRF pw [ OK ] # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in VRF [ OK ] # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in default VRF [ OK ] [ 2385.407716] TCP: MD5 Hash mismatch for [2001:db8:1::2].53108->[2001:db8:1::1].12345 [S]L3 index 0 [ 2386.429798] TCP: MD5 Hash mismatch for [2001:db8:1::2].53108->[2001:db8:1::1].12345 [S]L3 index 0 [ 2387.453798] TCP: MD5 Hash mismatch for [2001:db8:1::2].53108->[2001:db8:1::1].12345 [S]L3 index 0 [ 2388.477821] TCP: MD5 Hash mismatch for [2001:db8:1::2].53108->[2001:db8:1::1].12345 [S]L3 index 0 # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in default VRF with VRF pw [ OK ] [ 2393.476996] TCP: MD5 Hash mismatch for [2001:db8:1::2].41020->[2001:db8:1::1].12345 [S]L3 index 9 [ 2394.493805] TCP: MD5 Hash mismatch for [2001:db8:1::2].41020->[2001:db8:1::1].12345 [S]L3 index 9 [ 2395.517804] TCP: MD5 Hash mismatch for [2001:db8:1::2].41020->[2001:db8:1::1].12345 [S]L3 index 9 [ 2396.541825] TCP: MD5 Hash mismatch for [2001:db8:1::2].41020->[2001:db8:1::1].12345 [S]L3 index 9 # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in VRF with default VRF pw [ OK ] # TEST: MD5: VRF: Device must be a VRF - single address [ OK ] # TEST: MD5: VRF: Device must be a VRF - prefix [ OK ] # # ################################################################# # VRF Global server enabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=1 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Global server - VRF IPv6 [ OK ] # TEST: VRF server - ns-A IPv6 [ OK ] # TEST: VRF server - VRF IPv6 [ OK ] # TEST: Global server - ns-A IPv6 LLA [ OK ] # TEST: VRF server - ns-A IPv6 LLA [ OK ] # TEST: Device server - ns-A IPv6 [ OK ] # TEST: Device server - ns-A IPv6 LLA [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - VRF IPv6 [ OK ] # TEST: No server - ns-A IPv6 LLA [ OK ] # TEST: Global server, local connection - ns-A IPv6 [ OK ] # TEST: Global server, local connection - VRF IPv6 [ OK ] # TEST: Client, VRF bind - ns-B IPv6 [ OK ] # TEST: Client, VRF bind - ns-B loopback IPv6 [ OK ] # TEST: Client, VRF bind - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind - ns-B IPv6 [ OK ] # TEST: Client, device bind - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind - ns-B IPv6 LLA [ OK ] # TEST: No server, VRF client - ns-B IPv6 [ OK ] # TEST: No server, VRF client - ns-B loopback IPv6 [ OK ] # TEST: No server, device client - ns-B IPv6 [ OK ] # TEST: No server, device client - ns-B loopback IPv6 [ OK ] # TEST: No server, device client - ns-B IPv6 LLA [ OK ] # TEST: VRF server, VRF client, local connection - ns-A IPv6 [ OK ] # TEST: VRF server, VRF client, local connection - VRF IPv6 [ OK ] # TEST: VRF server, VRF client, local connection - IPv6 loopback [ OK ] # TEST: VRF server, device client, local connection - ns-A IPv6 [ OK ] # TEST: VRF server, unbound client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, VRF client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, device client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, device client, local connection - ns-A IPv6 LLA [ OK ] # SYSCTL: net.ipv4.udp_early_demux=1 # # # ########################################################################### # IPv6/UDP # ########################################################################### # # # ################################################################# # No VRF # [ 2495.580840] eth1: renamed from tmp # # ################################################################# # udp_l3mdev_accept disabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=0 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Device server - ns-A IPv6 [ OK ] # TEST: Global server - ns-A IPv6 LLA [ OK ] # TEST: Device server - ns-A IPv6 LLA [ OK ] # TEST: Global server - ns-A loopback IPv6 [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - ns-A loopback IPv6 [ OK ] # TEST: No server - ns-A IPv6 LLA [ OK ] # TEST: Client - ns-B IPv6 [ OK ] # TEST: Client, device bind - ns-B IPv6 [ OK ] # TEST: Client, device send via cmsg - ns-B IPv6 [ OK ] # TEST: Client, device bind via IPV6_UNICAST_IF - ns-B IPv6 [ OK ] # TEST: No server, unbound client - ns-B IPv6 [ OK ] # TEST: No server, device client - ns-B IPv6 [ OK ] # TEST: Client - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind - ns-B loopback IPv6 [ OK ] # TEST: Client, device send via cmsg - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind via IPV6_UNICAST_IF - ns-B loopback IPv6 [ OK ] # TEST: No server, unbound client - ns-B loopback IPv6 [ OK ] # TEST: No server, device client - ns-B loopback IPv6 [ OK ] # TEST: Client - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind - ns-B IPv6 LLA [ OK ] # TEST: Client, device send via cmsg - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind via IPV6_UNICAST_IF - ns-B IPv6 LLA [ OK ] # TEST: No server, unbound client - ns-B IPv6 LLA [ OK ] # TEST: No server, device client - ns-B IPv6 LLA [ OK ] # TEST: Global server, local connection - ns-A IPv6 [ OK ] # TEST: Global server, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, local connection - IPv6 loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, local connection - ns-A loopback IPv6 [ OK ] # TEST: Device server, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device client via IPV6_UNICAST_IF, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client, local connection - IPv6 loopback [ OK ] # TEST: Global server, device send via cmsg, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - IPv6 loopback [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 [ OK ] # TEST: UDP in - LLA to GUA [ OK ] # # ################################################################# # udp_l3mdev_accept enabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=1 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Device server - ns-A IPv6 [ OK ] # TEST: Global server - ns-A IPv6 LLA [ OK ] # TEST: Device server - ns-A IPv6 LLA [ OK ] # TEST: Global server - ns-A loopback IPv6 [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - ns-A loopback IPv6 [ OK ] # TEST: No server - ns-A IPv6 LLA [ OK ] # TEST: Client - ns-B IPv6 [ OK ] # TEST: Client, device bind - ns-B IPv6 [ OK ] # TEST: Client, device send via cmsg - ns-B IPv6 [ OK ] # TEST: Client, device bind via IPV6_UNICAST_IF - ns-B IPv6 [ OK ] # TEST: No server, unbound client - ns-B IPv6 [ OK ] # TEST: No server, device client - ns-B IPv6 [ OK ] # TEST: Client - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind - ns-B loopback IPv6 [ OK ] # TEST: Client, device send via cmsg - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind via IPV6_UNICAST_IF - ns-B loopback IPv6 [ OK ] # TEST: No server, unbound client - ns-B loopback IPv6 [ OK ] # TEST: No server, device client - ns-B loopback IPv6 [ OK ] # TEST: Client - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind - ns-B IPv6 LLA [ OK ] # TEST: Client, device send via cmsg - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind via IPV6_UNICAST_IF - ns-B IPv6 LLA [ OK ] # TEST: No server, unbound client - ns-B IPv6 LLA [ OK ] # TEST: No server, device client - ns-B IPv6 LLA [ OK ] # TEST: Global server, local connection - ns-A IPv6 [ OK ] # TEST: Global server, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, local connection - IPv6 loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, local connection - ns-A loopback IPv6 [ OK ] # TEST: Device server, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device client via IPV6_UNICAST_IF, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client, local connection - IPv6 loopback [ OK ] # TEST: Global server, device send via cmsg, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - IPv6 loopback [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 [ OK ] # TEST: UDP in - LLA to GUA [ OK ] # # ################################################################# # With VRF # [ 2761.236900] eth1: renamed from tmp # # ################################################################# # Global server disabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=0 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Global server - VRF IPv6 [ OK ] # TEST: VRF server - ns-A IPv6 [ OK ] # TEST: VRF server - VRF IPv6 [ OK ] # TEST: Enslaved device server - ns-A IPv6 [ OK ] # TEST: Enslaved device server - VRF IPv6 [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - VRF IPv6 [ OK ] # TEST: Global server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: Global server, VRF client, local conn - VRF IPv6 [ OK ] # TEST: VRF server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: VRF server, VRF client, local conn - VRF IPv6 [ OK ] # TEST: Global server, device client, local conn - ns-A IPv6 [ OK ] # TEST: VRF server, device client, local conn - ns-A IPv6 [ OK ] # TEST: Enslaved device server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: Enslaved device server, device client, local conn - ns-A IPv6 [ OK ] # # ################################################################# # Global server enabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=1 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Global server - VRF IPv6 [ OK ] # TEST: VRF server - ns-A IPv6 [ OK ] # TEST: VRF server - VRF IPv6 [ OK ] # TEST: Enslaved device server - ns-A IPv6 [ OK ] # TEST: Enslaved device server - VRF IPv6 [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - VRF IPv6 [ OK ] # TEST: VRF client [ OK ] # TEST: No server, VRF client [ OK ] # TEST: Enslaved device client [ OK ] # TEST: No server, enslaved device client [ OK ] # TEST: Global server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: VRF server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: Global server, VRF client, local conn - VRF IPv6 [ OK ] # TEST: VRF server, VRF client, local conn - VRF IPv6 [ OK ] # TEST: No server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: No server, VRF client, local conn - VRF IPv6 [ OK ] # TEST: Global server, device client, local conn - ns-A IPv6 [ OK ] # TEST: VRF server, device client, local conn - ns-A IPv6 [ OK ] # TEST: Device server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 [ OK ] # TEST: Global server, linklocal IP [ OK ] # TEST: No server, linklocal IP [ OK ] # TEST: Enslaved device client, linklocal IP [ OK ] # TEST: No server, device client, peer linklocal IP [ OK ] # TEST: Enslaved device client, local conn - linklocal IP [ OK ] # TEST: No server, device client, local conn - linklocal IP [ OK ] # TEST: UDP in - LLA to GUA [ OK ] # # ########################################################################### # IPv6 address binds # ########################################################################### # # # ################################################################# # No VRF # [ 2892.524864] eth1: renamed from tmp # TEST: Raw socket bind to local address - ns-A IPv6 [ OK ] # TEST: Raw socket bind to local address after device bind - ns-A IPv6 [ OK ] # TEST: Raw socket bind to local address - ns-A loopback IPv6 [ OK ] # TEST: Raw socket bind to local address after device bind - ns-A loopback IPv6 [ OK ] # TEST: Raw socket bind to nonlocal address - nonlocal IPv6 [ OK ] # TEST: TCP socket bind to local address - ns-A IPv6 [ OK ] # TEST: TCP socket bind to local address after device bind - ns-A IPv6 [ OK ] # TEST: TCP socket bind to out of scope local address - ns-A loopback IPv6 [ OK ] # # ################################################################# # With VRF # [ 2911.837892] eth1: renamed from tmp # TEST: Raw socket bind to local address after vrf bind - ns-A IPv6 [ OK ] # TEST: Raw socket bind to local address after device bind - ns-A IPv6 [ OK ] # TEST: Raw socket bind to local address after vrf bind - VRF IPv6 [ OK ] # TEST: Raw socket bind to local address after device bind - VRF IPv6 [ OK ] # TEST: Raw socket bind to invalid local address after vrf bind - ns-A loopback IPv6 [ OK ] # TEST: Raw socket bind to nonlocal address after VRF bind - nonlocal IPv6 [ OK ] # TEST: TCP socket bind to local address with VRF bind - ns-A IPv6 [ OK ] # TEST: TCP socket bind to local address with VRF bind - VRF IPv6 [ OK ] # TEST: TCP socket bind to local address with device bind - ns-A IPv6 [ OK ] # TEST: TCP socket bind to VRF address with device bind - VRF IPv6 [ OK ] # TEST: TCP socket bind to invalid local address for VRF - ns-A loopback IPv6 [ OK ] # TEST: TCP socket bind to invalid local address for device bind - ns-A loopback IPv6 [ OK ] # # ########################################################################### # Run time tests - ipv6 # ########################################################################### # [ 2939.589874] eth1: renamed from tmp # TEST: Device delete with active traffic - ping in - ns-A IPv6 [ OK ] [ 2948.722866] eth1: renamed from tmp # TEST: Device delete with active traffic - ping out - ns-A IPv6 [ OK ] [ 2955.814859] eth1: renamed from tmp # TEST: TCP active socket, global server - ns-A IPv6 [ OK ] [ 2965.915864] eth1: renamed from tmp # TEST: TCP active socket, global server - VRF IPv6 [ OK ] [ 2976.017869] eth1: renamed from tmp # TEST: TCP active socket, VRF server - ns-A IPv6 [ OK ] [ 2986.281865] eth1: renamed from tmp # TEST: TCP active socket, VRF server - VRF IPv6 [ OK ] [ 2996.485868] eth1: renamed from tmp # TEST: TCP active socket, enslaved device server - ns-A IPv6 [ OK ] [ 3006.605835] eth1: renamed from tmp # TEST: TCP active socket, enslaved device server - VRF IPv6 [ OK ] [ 3016.728897] eth1: renamed from tmp # TEST: TCP active socket, VRF client [ OK ] [ 3027.053884] eth1: renamed from tmp # TEST: TCP active socket, enslaved device client [ OK ] [ 3037.287860] eth1: renamed from tmp # TEST: TCP active socket, global server, VRF client - ns-A IPv6 [ OK ] [ 3047.465877] eth1: renamed from tmp # TEST: TCP active socket, global server, VRF client - VRF IPv6 [ OK ] [ 3057.663875] eth1: renamed from tmp # TEST: TCP active socket, VRF server and client - ns-A IPv6 [ OK ] [ 3067.785848] eth1: renamed from tmp # TEST: TCP active socket, VRF server and client - VRF IPv6 [ OK ] [ 3077.866834] eth1: renamed from tmp # TEST: TCP active socket, global server, device client - ns-A IPv6 [ OK ] [ 3087.929873] eth1: renamed from tmp # TEST: TCP active socket, VRF server, device client - ns-A IPv6 [ OK ] [ 3098.007891] eth1: renamed from tmp # TEST: TCP active socket, device server, device client - ns-A IPv6 [ OK ] [ 3108.100884] eth1: renamed from tmp # TEST: TCP passive socket, global server - ns-A IPv6 [ OK ] [ 3118.192839] eth1: renamed from tmp # TEST: TCP passive socket, global server - VRF IPv6 [ OK ] [ 3128.283863] eth1: renamed from tmp # TEST: TCP passive socket, VRF server - ns-A IPv6 [ OK ] [ 3138.386872] eth1: renamed from tmp # TEST: TCP passive socket, VRF server - VRF IPv6 [ OK ] [ 3148.492837] eth1: renamed from tmp # TEST: TCP passive socket, enslaved device server - ns-A IPv6 [ OK ] [ 3158.610857] eth1: renamed from tmp # TEST: TCP passive socket, enslaved device server - VRF IPv6 [ OK ] [ 3168.717857] eth1: renamed from tmp # TEST: TCP passive socket, VRF client [ OK ] [ 3178.835821] eth1: renamed from tmp # TEST: TCP passive socket, enslaved device client [ OK ] [ 3188.918852] eth1: renamed from tmp # TEST: TCP passive socket, global server, VRF client - ns-A IPv6 [ OK ] [ 3199.007850] eth1: renamed from tmp # TEST: TCP passive socket, global server, VRF client - VRF IPv6 [ OK ] [ 3209.095891] eth1: renamed from tmp # TEST: TCP passive socket, VRF server and client - ns-A IPv6 [ OK ] [ 3219.192876] eth1: renamed from tmp # TEST: TCP passive socket, VRF server and client - VRF IPv6 [ OK ] [ 3229.382884] eth1: renamed from tmp # TEST: TCP passive socket, global server, device client - ns-A IPv6 [ OK ] [ 3239.697881] eth1: renamed from tmp # TEST: TCP passive socket, VRF server, device client - ns-A IPv6 [ OK ] [ 3250.064872] eth1: renamed from tmp # TEST: TCP passive socket, device server, device client - ns-A IPv6 [ OK ] [ 3260.442921] eth1: renamed from tmp # TEST: UDP active socket, global server - ns-A IPv6 [ OK ] [ 3270.800860] eth1: renamed from tmp # TEST: UDP active socket, global server - VRF IPv6 [ OK ] [ 3281.169967] eth1: renamed from tmp # TEST: UDP active socket, VRF server - ns-A IPv6 [ OK ] [ 3291.470904] eth1: renamed from tmp # TEST: UDP active socket, VRF server - VRF IPv6 [ OK ] [ 3301.574852] eth1: renamed from tmp # TEST: UDP active socket, enslaved device server - ns-A IPv6 [ OK ] [ 3311.678928] eth1: renamed from tmp # TEST: UDP active socket, enslaved device server - VRF IPv6 [ OK ] [ 3321.816846] eth1: renamed from tmp # TEST: UDP active socket, VRF client [ OK ] [ 3331.958958] eth1: renamed from tmp # TEST: UDP active socket, enslaved device client [ OK ] [ 3342.096872] eth1: renamed from tmp # TEST: UDP active socket, global server, VRF client - ns-A IPv6 [ OK ] [ 3352.202878] eth1: renamed from tmp # TEST: UDP active socket, global server, VRF client - VRF IPv6 [ OK ] [ 3362.317859] eth1: renamed from tmp # TEST: UDP active socket, VRF server and client - ns-A IPv6 [ OK ] [ 3372.429834] eth1: renamed from tmp # TEST: UDP active socket, VRF server and client - VRF IPv6 [ OK ] [ 3382.546852] eth1: renamed from tmp # TEST: UDP active socket, global server, device client - ns-A IPv6 [ OK ] [ 3392.640886] eth1: renamed from tmp # TEST: UDP active socket, VRF server, device client - ns-A IPv6 [ OK ] [ 3402.743913] eth1: renamed from tmp # TEST: UDP active socket, device server, device client - ns-A IPv6 [ OK ] # # ########################################################################### # IPv6 Netfilter # ########################################################################### # # # ################################################################# # TCP reset # [ 3413.007869] eth1: renamed from tmp # TEST: Global server, reject with TCP-reset on Rx - ns-A IPv6 [ OK ] # TEST: Global server, reject with TCP-reset on Rx - VRF IPv6 [ OK ] # # ################################################################# # ICMP unreachable # # TEST: Global TCP server, Rx reject icmp-port-unreach - ns-A IPv6 [ OK ] # TEST: Global TCP server, Rx reject icmp-port-unreach - VRF IPv6 [ OK ] # TEST: Global UDP server, Rx reject icmp-port-unreach - ns-A IPv6 [ OK ] # TEST: Global UDP server, Rx reject icmp-port-unreach - VRF IPv6 [ OK ] # # ########################################################################### # Use cases # ########################################################################### # # # ################################################################# # Device enslaved to bridge # [ 3438.763835] eth1: renamed from tmp [ 3440.229665] br0: port 1(eth1) entered blocking state [ 3440.230000] br0: port 1(eth1) entered disabled state [ 3440.230272] eth1: entered allmulticast mode [ 3440.230615] eth1: entered promiscuous mode [ 3440.275308] br0: port 1(eth1) entered blocking state [ 3440.275601] br0: port 1(eth1) entered forwarding state [ 3440.297900] br0: port 1(eth1) entered disabled state [ 3440.298301] br0: port 1(eth1) entered blocking state [ 3440.298578] br0: port 1(eth1) entered forwarding state # TEST: Bridge into VRF - IPv4 ping out [ OK ] # TEST: Bridge into VRF - IPv6 ping out [ OK ] # TEST: Bridge into VRF - IPv4 ping in [ OK ] # TEST: Bridge into VRF - IPv6 ping in [ OK ] # modprobe: FATAL: Module br_netfilter not found in directory /lib/modules/6.8.0-rc3-virtme [ 3449.624068] br0: port 1(eth1) entered disabled state [ 3449.624465] br0: port 1(eth1) entered blocking state [ 3449.624760] br0: port 1(eth1) entered forwarding state # TEST: Bridge vlan into VRF - IPv4 ping out [ OK ] # TEST: Bridge vlan into VRF - IPv6 ping out [ OK ] # TEST: Bridge vlan into VRF - IPv4 ping in [ OK ] # TEST: Bridge vlan into VRF - IPv6 ping in [ OK ] # modprobe: FATAL: Module br_netfilter not found in directory /lib/modules/6.8.0-rc3-virtme [ 3455.119713] eth1: left allmulticast mode [ 3455.119956] eth1: left promiscuous mode [ 3455.120178] br0: port 1(eth1) entered disabled state # # ################################################################# # Ping LLA with multiple interfaces # [ 3456.976853] eth1: renamed from tmp [ 3457.037854] eth2: renamed from tmp # TEST: Pre cycle, ping out ns-B - multicast IP [ OK ] # TEST: Pre cycle, ping out ns-C - multicast IP [ OK ] # TEST: Post cycle nsa-UQfXIz eth1, ping out ns-B - multicast IP [ OK ] # TEST: Post cycle nsa-UQfXIz eth1, ping out ns-C - multicast IP [ OK ] # TEST: Post cycle nsa-UQfXIz eth2, ping out ns-B - multicast IP [ OK ] # TEST: Post cycle nsa-UQfXIz eth2, ping out ns-C - multicast IP [ OK ] # # ################################################################# # SNAT on VRF # [ 3471.389835] eth1: renamed from tmp # TEST: IPv4 TCP connection over VRF with SNAT [ OK ] # TEST: IPv6 TCP connection over VRF with SNAT [ OK ] # # Tests passed: 906 # Tests failed: 0 ok 1 selftests: net: fcnal-test.sh make[1]: Leaving directory '/home/virtme/testing-1/tools/testing/selftests/net' make: Leaving directory '/home/virtme/testing-1/tools/testing/selftests' xx__-> echo $? 0 xx__->