make -C tools/testing/selftests TARGETS=net TEST_PROGS=fcnal-test.sh TEST__GEN_PROGS="" run_tests make: Entering directory '/home/virtme/testing-1/tools/testing/selftests' make[1]: Entering directory '/home/virtme/testing-1/tools/testing/selftests/net' make[1]: Nothing to be done for 'all'. make[1]: Leaving directory '/home/virtme/testing-1/tools/testing/selftests/net' make[1]: Entering directory '/home/virtme/testing-1/tools/testing/selftests/net' TAP version 13 1..1 # timeout set to 3600 # selftests: net: fcnal-test.sh # # ########################################################################### # IPv4 ping # ########################################################################### # # # ################################################################# # No VRF # [ 3.491021] sysctl (253) used greatest stack depth: 11944 bytes left [ 3.663028] ip (265) used greatest stack depth: 11848 bytes left [ 3.693966] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=0 # # TEST: ping out - ns-B IP [ OK ] # TEST: ping out, device bind - ns-B IP [ OK ] # TEST: ping out, address bind - ns-B IP [ OK ] # TEST: ping out - ns-B loopback IP [ OK ] # TEST: ping out, device bind - ns-B loopback IP [ OK ] # TEST: ping out, address bind - ns-B loopback IP [ OK ] # TEST: ping out (don't route), peer on link - ns-B IP [ OK ] # TEST: ping out (don't route), peer not on link - ns-B loopback IP [ OK ] # TEST: ping in - ns-A IP [ OK ] # TEST: ping in - ns-A loopback IP [ OK ] # TEST: ping local - ns-A IP [ OK ] # TEST: ping local - ns-A loopback IP [ OK ] # TEST: ping local - loopback [ OK ] # TEST: ping local, device bind - ns-A IP [ OK ] # TEST: ping local, device bind - ns-A loopback IP [ OK ] # TEST: ping local, device bind - loopback [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IP [ OK ] # TEST: ping out, blocked by route - ns-B loopback IP [ OK ] # TEST: ping in, blocked by route - ns-A loopback IP [ OK ] # TEST: ping out, unreachable default route - ns-B loopback IP [ OK ] [ 54.056014] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=1 # # TEST: ping out - ns-B IP [ OK ] # TEST: ping out, device bind - ns-B IP [ OK ] # TEST: ping out, address bind - ns-B IP [ OK ] # TEST: ping out - ns-B loopback IP [ OK ] # TEST: ping out, device bind - ns-B loopback IP [ OK ] # TEST: ping out, address bind - ns-B loopback IP [ OK ] # TEST: ping out (don't route), peer on link - ns-B IP [ OK ] # TEST: ping out (don't route), peer not on link - ns-B loopback IP [ OK ] # TEST: ping in - ns-A IP [ OK ] # TEST: ping in - ns-A loopback IP [ OK ] # TEST: ping local - ns-A IP [ OK ] # TEST: ping local - ns-A loopback IP [ OK ] # TEST: ping local - loopback [ OK ] # TEST: ping local, device bind - ns-A IP [ OK ] # TEST: ping local, device bind - ns-A loopback IP [ OK ] # TEST: ping local, device bind - loopback [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IP [ OK ] # TEST: ping out, blocked by route - ns-B loopback IP [ OK ] # TEST: ping in, blocked by route - ns-A loopback IP [ OK ] # TEST: ping out, unreachable default route - ns-B loopback IP [ OK ] [ 104.570950] eth1: renamed from tmp # TEST: ping out - ns-B IP [ OK ] # TEST: ping out, device bind - ns-B IP [ OK ] # TEST: ping out, address bind - ns-B IP [ OK ] # TEST: ping out - ns-B loopback IP [ OK ] # TEST: ping out, device bind - ns-B loopback IP [ OK ] # TEST: ping out, address bind - ns-B loopback IP [ OK ] # TEST: ping out (don't route), peer on link - ns-B IP [ OK ] # TEST: ping out (don't route), peer not on link - ns-B loopback IP [ OK ] # TEST: ping in - ns-A IP [ OK ] # TEST: ping in - ns-A loopback IP [ OK ] # TEST: ping local - ns-A IP [ OK ] # TEST: ping local - ns-A loopback IP [ OK ] # TEST: ping local - loopback [ OK ] # TEST: ping local, device bind - ns-A IP [ OK ] # TEST: ping local, device bind - ns-A loopback IP [ OK ] # TEST: ping local, device bind - loopback [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IP [ OK ] # TEST: ping out, blocked by route - ns-B loopback IP [ OK ] # TEST: ping in, blocked by route - ns-A loopback IP [ OK ] # TEST: ping out, unreachable default route - ns-B loopback IP [ OK ] # # ################################################################# # With VRF # [ 155.067934] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=1 # # TEST: ping out, VRF bind - ns-B IP [ OK ] # TEST: ping out, device bind - ns-B IP [ OK ] # TEST: ping out, vrf device + dev address bind - ns-B IP [ OK ] # TEST: ping out, vrf device + vrf address bind - ns-B IP [ OK ] # TEST: ping out, VRF bind - ns-B loopback IP [ OK ] # TEST: ping out, device bind - ns-B loopback IP [ OK ] # TEST: ping out, vrf device + dev address bind - ns-B loopback IP [ OK ] # TEST: ping out, vrf device + vrf address bind - ns-B loopback IP [ OK ] # TEST: ping in - ns-A IP [ OK ] # TEST: ping in - VRF IP [ OK ] # TEST: ping local, VRF bind - ns-A IP [ OK ] # TEST: ping local, VRF bind - VRF IP [ OK ] # TEST: ping local, VRF bind - loopback [ OK ] # TEST: ping local, device bind - ns-A IP [ OK ] # TEST: ping local, device bind - VRF IP [ OK ] # TEST: ping local, device bind - loopback [ OK ] # TEST: ping out, vrf bind, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping out, device bind, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IP [ OK ] # TEST: ping out, vrf bind, unreachable route - ns-B loopback IP [ OK ] # TEST: ping out, device bind, unreachable route - ns-B loopback IP [ OK ] # TEST: ping in, unreachable route - ns-A loopback IP [ OK ] [ 203.767915] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=1 # # TEST: ping out, VRF bind - ns-B IP [ OK ] # TEST: ping out, device bind - ns-B IP [ OK ] # TEST: ping out, vrf device + dev address bind - ns-B IP [ OK ] # TEST: ping out, vrf device + vrf address bind - ns-B IP [ OK ] # TEST: ping out, VRF bind - ns-B loopback IP [ OK ] # TEST: ping out, device bind - ns-B loopback IP [ OK ] # TEST: ping out, vrf device + dev address bind - ns-B loopback IP [ OK ] # TEST: ping out, vrf device + vrf address bind - ns-B loopback IP [ OK ] # TEST: ping in - ns-A IP [ OK ] # TEST: ping in - VRF IP [ OK ] # TEST: ping local, VRF bind - ns-A IP [ OK ] # TEST: ping local, VRF bind - VRF IP [ OK ] # TEST: ping local, VRF bind - loopback [ OK ] # TEST: ping local, device bind - ns-A IP [ OK ] # TEST: ping local, device bind - VRF IP [ OK ] # TEST: ping local, device bind - loopback [ OK ] # TEST: ping out, vrf bind, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping out, device bind, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IP [ OK ] # TEST: ping out, vrf bind, unreachable route - ns-B loopback IP [ OK ] # TEST: ping out, device bind, unreachable route - ns-B loopback IP [ OK ] # TEST: ping in, unreachable route - ns-A loopback IP [ OK ] # # ########################################################################### # IPv4/TCP # ########################################################################### # # # ################################################################# # No VRF # [ 252.528012] eth1: renamed from tmp # # ################################################################# # tcp_l3mdev_accept disabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=0 # # TEST: Global server - ns-A IP [ OK ] # TEST: Global server - ns-A loopback IP [ OK ] # TEST: Device server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: No server - ns-A loopback IP [ OK ] # TEST: Client - ns-B IP [ OK ] # TEST: Client, device bind - ns-B IP [ OK ] # TEST: No server, unbound client - ns-B IP [ OK ] # TEST: No server, device client - ns-B IP [ OK ] # TEST: Client - ns-B loopback IP [ OK ] # TEST: Client, device bind - ns-B loopback IP [ OK ] # TEST: No server, unbound client - ns-B loopback IP [ OK ] # TEST: No server, device client - ns-B loopback IP [ OK ] # TEST: Global server, local connection - ns-A IP [ OK ] # TEST: Global server, local connection - ns-A loopback IP [ OK ] # TEST: Global server, local connection - loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IP [ OK ] # TEST: Device server, unbound client, local connection - ns-A loopback IP [ OK ] # TEST: Device server, unbound client, local connection - loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IP [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device client, local connection - loopback [ OK ] # TEST: Device server, device client, local connection - ns-A IP [ OK ] # TEST: No server, device client, local conn - ns-A IP [ OK ] # TEST: MD5: Single address config [ OK ] [ 331.819909] TCP: Unexpected MD5 Hash found for 172.16.1.2.43208->172.16.1.1.12345 [S] [ 332.862135] TCP: Unexpected MD5 Hash found for 172.16.1.2.43208->172.16.1.1.12345 [S] [ 333.885973] TCP: Unexpected MD5 Hash found for 172.16.1.2.43208->172.16.1.1.12345 [S] [ 334.909950] TCP: Unexpected MD5 Hash found for 172.16.1.2.43208->172.16.1.1.12345 [S] # TEST: MD5: Server no config, client uses password [ OK ] [ 339.900199] TCP: MD5 Hash failed for 172.16.1.2.48178->172.16.1.1.12345 [S] L3 index 0 [ 340.925911] TCP: MD5 Hash failed for 172.16.1.2.48178->172.16.1.1.12345 [S] L3 index 0 [ 341.949920] TCP: MD5 Hash failed for 172.16.1.2.48178->172.16.1.1.12345 [S] L3 index 0 [ 342.973974] TCP: MD5 Hash failed for 172.16.1.2.48178->172.16.1.1.12345 [S] L3 index 0 # TEST: MD5: Client uses wrong password [ OK ] [ 347.978650] TCP: Unexpected MD5 Hash found for 172.16.1.2.36390->172.16.1.1.12345 [S] [ 348.989899] TCP: Unexpected MD5 Hash found for 172.16.1.2.36390->172.16.1.1.12345 [S] [ 350.013876] TCP: Unexpected MD5 Hash found for 172.16.1.2.36390->172.16.1.1.12345 [S] [ 351.037900] TCP: Unexpected MD5 Hash found for 172.16.1.2.36390->172.16.1.1.12345 [S] # TEST: MD5: Client address does not match address configured with password [ OK ] # TEST: MD5: Prefix config [ OK ] [ 359.119046] TCP: MD5 Hash failed for 172.16.1.2.53204->172.16.1.1.12345 [S] L3 index 0 [ 360.125877] TCP: MD5 Hash failed for 172.16.1.2.53204->172.16.1.1.12345 [S] L3 index 0 [ 361.149883] TCP: MD5 Hash failed for 172.16.1.2.53204->172.16.1.1.12345 [S] L3 index 0 [ 362.173893] TCP: MD5 Hash failed for 172.16.1.2.53204->172.16.1.1.12345 [S] L3 index 0 # TEST: MD5: Prefix config, client uses wrong password [ OK ] [ 367.192478] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 368.253890] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 369.277872] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 370.301872] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] # TEST: MD5: Prefix config, client address not in configured prefix [ OK ] # TEST: SO_DONTROUTE client, syncookies=0 - ns-B IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=0 - ns-B IP [ OK ] # TEST: SO_DONTROUTE client, syncookies=0 - ns-B loopback IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=0 - ns-B loopback IP [ OK ] # TEST: SO_DONTROUTE client, syncookies=2 - ns-B IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=2 - ns-B IP [ OK ] # TEST: SO_DONTROUTE client, syncookies=2 - ns-B loopback IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=2 - ns-B loopback IP [ OK ] # # ################################################################# # tcp_l3mdev_accept enabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=1 # # TEST: Global server - ns-A IP [ OK ] # TEST: Global server - ns-A loopback IP [ OK ] # TEST: Device server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: No server - ns-A loopback IP [ OK ] # TEST: Client - ns-B IP [ OK ] # TEST: Client, device bind - ns-B IP [ OK ] # TEST: No server, unbound client - ns-B IP [ OK ] # TEST: No server, device client - ns-B IP [ OK ] # TEST: Client - ns-B loopback IP [ OK ] # TEST: Client, device bind - ns-B loopback IP [ OK ] # TEST: No server, unbound client - ns-B loopback IP [ OK ] # TEST: No server, device client - ns-B loopback IP [ OK ] # TEST: Global server, local connection - ns-A IP [ OK ] # TEST: Global server, local connection - ns-A loopback IP [ OK ] # TEST: Global server, local connection - loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IP [ OK ] # TEST: Device server, unbound client, local connection - ns-A loopback IP [ OK ] # TEST: Device server, unbound client, local connection - loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IP [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device client, local connection - loopback [ OK ] # TEST: Device server, device client, local connection - ns-A IP [ OK ] # TEST: No server, device client, local conn - ns-A IP [ OK ] # TEST: MD5: Single address config [ OK ] [ 477.983476] TCP: Unexpected MD5 Hash found for 172.16.1.2.45278->172.16.1.1.12345 [S] [ 479.037901] TCP: Unexpected MD5 Hash found for 172.16.1.2.45278->172.16.1.1.12345 [S] [ 480.061919] TCP: Unexpected MD5 Hash found for 172.16.1.2.45278->172.16.1.1.12345 [S] [ 481.085898] TCP: Unexpected MD5 Hash found for 172.16.1.2.45278->172.16.1.1.12345 [S] # TEST: MD5: Server no config, client uses password [ OK ] [ 486.064271] TCP: MD5 Hash failed for 172.16.1.2.34154->172.16.1.1.12345 [S] L3 index 0 [ 487.101946] TCP: MD5 Hash failed for 172.16.1.2.34154->172.16.1.1.12345 [S] L3 index 0 [ 488.125901] TCP: MD5 Hash failed for 172.16.1.2.34154->172.16.1.1.12345 [S] L3 index 0 [ 489.149939] TCP: MD5 Hash failed for 172.16.1.2.34154->172.16.1.1.12345 [S] L3 index 0 # TEST: MD5: Client uses wrong password [ OK ] [ 494.153715] TCP: Unexpected MD5 Hash found for 172.16.1.2.58856->172.16.1.1.12345 [S] [ 495.165922] TCP: Unexpected MD5 Hash found for 172.16.1.2.58856->172.16.1.1.12345 [S] [ 496.189918] TCP: Unexpected MD5 Hash found for 172.16.1.2.58856->172.16.1.1.12345 [S] [ 497.213885] TCP: Unexpected MD5 Hash found for 172.16.1.2.58856->172.16.1.1.12345 [S] # TEST: MD5: Client address does not match address configured with password [ OK ] # TEST: MD5: Prefix config [ OK ] [ 505.326642] TCP: MD5 Hash failed for 172.16.1.2.52448->172.16.1.1.12345 [S] L3 index 0 [ 506.365890] TCP: MD5 Hash failed for 172.16.1.2.52448->172.16.1.1.12345 [S] L3 index 0 [ 507.389902] TCP: MD5 Hash failed for 172.16.1.2.52448->172.16.1.1.12345 [S] L3 index 0 [ 508.413885] TCP: MD5 Hash failed for 172.16.1.2.52448->172.16.1.1.12345 [S] L3 index 0 # TEST: MD5: Prefix config, client uses wrong password [ OK ] [ 513.400298] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 514.429907] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 515.453868] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 516.477904] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] # TEST: MD5: Prefix config, client address not in configured prefix [ OK ] # TEST: SO_DONTROUTE client, syncookies=0 - ns-B IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=0 - ns-B IP [ OK ] # TEST: SO_DONTROUTE client, syncookies=0 - ns-B loopback IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=0 - ns-B loopback IP [ OK ] # TEST: SO_DONTROUTE client, syncookies=2 - ns-B IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=2 - ns-B IP [ OK ] # TEST: SO_DONTROUTE client, syncookies=2 - ns-B loopback IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=2 - ns-B loopback IP [ OK ] # # ################################################################# # With VRF # [ 547.946019] eth1: renamed from tmp # # ################################################################# # Global server disabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=0 # # TEST: Global server - ns-A IP [ OK ] # TEST: VRF server - ns-A IP [ OK ] # TEST: Device server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: Global server - VRF IP [ OK ] # TEST: VRF server - VRF IP [ OK ] # TEST: Device server - VRF IP [ OK ] # TEST: No server - VRF IP [ OK ] # TEST: Global server, local connection - ns-A IP [ OK ] [ 575.280953] eth2: renamed from tmp # TEST: MD5: VRF: Single address config [ OK ] [ 580.470659] TCP: Unexpected MD5 Hash found for 172.16.1.2.35788->172.16.1.1.12345 [S] [ 581.501888] TCP: Unexpected MD5 Hash found for 172.16.1.2.35788->172.16.1.1.12345 [S] [ 582.525909] TCP: Unexpected MD5 Hash found for 172.16.1.2.35788->172.16.1.1.12345 [S] [ 583.549895] TCP: Unexpected MD5 Hash found for 172.16.1.2.35788->172.16.1.1.12345 [S] # TEST: MD5: VRF: Server no config, client uses password [ OK ] [ 588.564288] TCP: MD5 Hash failed for 172.16.1.2.33164->172.16.1.1.12345 [S] L3 index 9 [ 589.565928] TCP: MD5 Hash failed for 172.16.1.2.33164->172.16.1.1.12345 [S] L3 index 9 [ 590.589925] TCP: MD5 Hash failed for 172.16.1.2.33164->172.16.1.1.12345 [S] L3 index 9 [ 591.613903] TCP: MD5 Hash failed for 172.16.1.2.33164->172.16.1.1.12345 [S] L3 index 9 # TEST: MD5: VRF: Client uses wrong password [ OK ] [ 596.653363] TCP: Unexpected MD5 Hash found for 172.16.1.2.35194->172.16.1.1.12345 [S] [ 597.693904] TCP: Unexpected MD5 Hash found for 172.16.1.2.35194->172.16.1.1.12345 [S] [ 598.717911] TCP: Unexpected MD5 Hash found for 172.16.1.2.35194->172.16.1.1.12345 [S] [ 599.741908] TCP: Unexpected MD5 Hash found for 172.16.1.2.35194->172.16.1.1.12345 [S] # TEST: MD5: VRF: Client address does not match address configured with password [ OK ] # TEST: MD5: VRF: Prefix config [ OK ] [ 607.801453] TCP: MD5 Hash failed for 172.16.1.2.57804->172.16.1.1.12345 [S] L3 index 9 [ 608.829925] TCP: MD5 Hash failed for 172.16.1.2.57804->172.16.1.1.12345 [S] L3 index 9 [ 609.853905] TCP: MD5 Hash failed for 172.16.1.2.57804->172.16.1.1.12345 [S] L3 index 9 [ 610.877911] TCP: MD5 Hash failed for 172.16.1.2.57804->172.16.1.1.12345 [S] L3 index 9 # TEST: MD5: VRF: Prefix config, client uses wrong password [ OK ] [ 615.882170] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 616.893874] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 617.917897] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 618.941892] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] # TEST: MD5: VRF: Prefix config, client address not in configured prefix [ OK ] # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in VRF [ OK ] # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in default VRF [ OK ] [ 630.109802] TCP: MD5 Hash failed for 172.16.1.2.40334->172.16.1.1.12345 [S] L3 index 0 [ 631.165875] TCP: MD5 Hash failed for 172.16.1.2.40334->172.16.1.1.12345 [S] L3 index 0 [ 632.189879] TCP: MD5 Hash failed for 172.16.1.2.40334->172.16.1.1.12345 [S] L3 index 0 [ 633.213888] TCP: MD5 Hash failed for 172.16.1.2.40334->172.16.1.1.12345 [S] L3 index 0 # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in default VRF with VRF pw [ OK ] [ 638.185510] TCP: MD5 Hash failed for 172.16.1.2.47602->172.16.1.1.12345 [S] L3 index 9 [ 639.229899] TCP: MD5 Hash failed for 172.16.1.2.47602->172.16.1.1.12345 [S] L3 index 9 [ 640.253883] TCP: MD5 Hash failed for 172.16.1.2.47602->172.16.1.1.12345 [S] L3 index 9 [ 641.277894] TCP: MD5 Hash failed for 172.16.1.2.47602->172.16.1.1.12345 [S] L3 index 9 # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in VRF with default VRF pw [ OK ] # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in VRF [ OK ] # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in default VRF [ OK ] [ 652.402707] TCP: MD5 Hash failed for 172.16.1.2.33522->172.16.1.1.12345 [S] L3 index 0 [ 653.437878] TCP: MD5 Hash failed for 172.16.1.2.33522->172.16.1.1.12345 [S] L3 index 0 [ 654.461923] TCP: MD5 Hash failed for 172.16.1.2.33522->172.16.1.1.12345 [S] L3 index 0 [ 655.485921] TCP: MD5 Hash failed for 172.16.1.2.33522->172.16.1.1.12345 [S] L3 index 0 # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in default VRF with VRF pw [ OK ] [ 660.483075] TCP: MD5 Hash failed for 172.16.1.2.32864->172.16.1.1.12345 [S] L3 index 9 [ 661.501893] TCP: MD5 Hash failed for 172.16.1.2.32864->172.16.1.1.12345 [S] L3 index 9 [ 662.525922] TCP: MD5 Hash failed for 172.16.1.2.32864->172.16.1.1.12345 [S] L3 index 9 [ 663.549900] TCP: MD5 Hash failed for 172.16.1.2.32864->172.16.1.1.12345 [S] L3 index 9 # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in VRF with default VRF pw [ OK ] # TEST: MD5: VRF: Device must be a VRF - single address [ OK ] # TEST: MD5: VRF: Device must be a VRF - prefix [ OK ] # TEST: MD5: VRF: VRF-bound server, unbound key accepts connection [ OK ] # TEST: MD5: VRF: VRF-bound server, bound key accepts connection [ OK ] # SYSCTL: net.ipv4.tcp_l3mdev_accept=1 # [ 678.868294] TCP: Unexpected MD5 Hash found for 172.16.1.2.43086->172.16.1.1.12345 [S] [ 679.869935] TCP: Unexpected MD5 Hash found for 172.16.1.2.43086->172.16.1.1.12345 [S] [ 680.893923] TCP: Unexpected MD5 Hash found for 172.16.1.2.43086->172.16.1.1.12345 [S] [ 681.917917] TCP: Unexpected MD5 Hash found for 172.16.1.2.43086->172.16.1.1.12345 [S] # TEST: MD5: VRF: Global server, Key bound to ifindex=0 rejects VRF connection [ OK ] # TEST: MD5: VRF: Global server, key bound to ifindex=0 accepts non-VRF connection [ OK ] # TEST: MD5: VRF: Global server, key not bound to ifindex accepts VRF connection [ OK ] # TEST: MD5: VRF: Global server, key not bound to ifindex accepts non-VRF connection [ OK ] # SYSCTL: net.ipv4.tcp_l3mdev_accept=0 # # # ################################################################# # VRF Global server enabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=1 # # TEST: Global server - ns-A IP [ OK ] # TEST: VRF server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: Global server - VRF IP [ OK ] # TEST: VRF server - VRF IP [ OK ] # TEST: No server - VRF IP [ OK ] # TEST: Device server - ns-A IP [ OK ] # TEST: Global server, local connection - ns-A IP [ OK ] # TEST: Global server, local connection - VRF IP [ OK ] # TEST: Client, VRF bind - ns-B IP [ OK ] # TEST: Client, device bind - ns-B IP [ OK ] # TEST: No server, VRF client - ns-B IP [ OK ] # TEST: No server, device client - ns-B IP [ OK ] # TEST: Client, VRF bind - ns-B loopback IP [ OK ] # TEST: Client, device bind - ns-B loopback IP [ OK ] # TEST: No server, VRF client - ns-B loopback IP [ OK ] # TEST: No server, device client - ns-B loopback IP [ OK ] # TEST: VRF server, VRF client, local connection - ns-A IP [ OK ] # TEST: VRF server, VRF client, local connection - VRF IP [ OK ] # TEST: VRF server, VRF client, local connection - loopback [ OK ] # TEST: VRF server, device client, local connection - ns-A IP [ OK ] # TEST: VRF server, unbound client, local connection - ns-A IP [ OK ] # TEST: Device server, VRF client, local connection - ns-A IP [ OK ] # TEST: Device server, device client, local connection - ns-A IP [ OK ] # # ########################################################################### # IPv4/UDP # ########################################################################### # # # ################################################################# # No VRF # [ 763.911010] eth1: renamed from tmp # # ################################################################# # udp_l3mdev_accept disabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=0 # # TEST: Global server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: Global server - ns-A loopback IP [ OK ] # TEST: No server - ns-A loopback IP [ OK ] # TEST: Device server - ns-A IP [ OK ] # TEST: Client - ns-B IP [ OK ] # TEST: Client, device bind - ns-B IP [ OK ] # TEST: Client, device send via cmsg - ns-B IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF - ns-B IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF, with connect() - ns-B IP [ OK ] # TEST: No server, unbound client - ns-B IP [ OK ] # TEST: No server, device client - ns-B IP [ OK ] # TEST: Client - ns-B loopback IP [ OK ] # TEST: Client, device bind - ns-B loopback IP [ OK ] # TEST: Client, device send via cmsg - ns-B loopback IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF - ns-B loopback IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF, with connect() - ns-B loopback IP [ OK ] # TEST: No server, unbound client - ns-B loopback IP [ OK ] # TEST: No server, device client - ns-B loopback IP [ OK ] # TEST: Global server, local connection - ns-A IP [ OK ] # TEST: Global server, local connection - ns-A loopback IP [ OK ] # TEST: Global server, local connection - loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IP [ OK ] # TEST: Device server, unbound client, local connection - ns-A loopback IP [ OK ] # TEST: Device server, unbound client, local connection - loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IP [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - ns-A IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - ns-A IP [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - ns-A loopback IP [ OK ] # TEST: Global server, device client, local connection - loopback [ OK ] # TEST: Global server, device send via cmsg, local connection - loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - loopback [ OK ] # TEST: Device server, device client, local conn - ns-A IP [ OK ] # TEST: No server, device client, local conn - ns-A IP [ OK ] # TEST: SO_DONTROUTE client - ns-B IP [ OK ] # TEST: SO_DONTROUTE client - ns-B loopback IP [ OK ] # # ################################################################# # udp_l3mdev_accept enabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=1 # # TEST: Global server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: Global server - ns-A loopback IP [ OK ] # TEST: No server - ns-A loopback IP [ OK ] # TEST: Device server - ns-A IP [ OK ] # TEST: Client - ns-B IP [ OK ] # TEST: Client, device bind - ns-B IP [ OK ] # TEST: Client, device send via cmsg - ns-B IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF - ns-B IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF, with connect() - ns-B IP [ OK ] # TEST: No server, unbound client - ns-B IP [ OK ] # TEST: No server, device client - ns-B IP [ OK ] # TEST: Client - ns-B loopback IP [ OK ] # TEST: Client, device bind - ns-B loopback IP [ OK ] # TEST: Client, device send via cmsg - ns-B loopback IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF - ns-B loopback IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF, with connect() - ns-B loopback IP [ OK ] # TEST: No server, unbound client - ns-B loopback IP [ OK ] # TEST: No server, device client - ns-B loopback IP [ OK ] # TEST: Global server, local connection - ns-A IP [ OK ] # TEST: Global server, local connection - ns-A loopback IP [ OK ] # TEST: Global server, local connection - loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IP [ OK ] # TEST: Device server, unbound client, local connection - ns-A loopback IP [ OK ] # TEST: Device server, unbound client, local connection - loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IP [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - ns-A IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - ns-A IP [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - ns-A loopback IP [ OK ] # TEST: Global server, device client, local connection - loopback [ OK ] # TEST: Global server, device send via cmsg, local connection - loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - loopback [ OK ] # TEST: Device server, device client, local conn - ns-A IP [ OK ] # TEST: No server, device client, local conn - ns-A IP [ OK ] # TEST: SO_DONTROUTE client - ns-B IP [ OK ] # TEST: SO_DONTROUTE client - ns-B loopback IP [ OK ] # # ################################################################# # With VRF # [ 1067.528957] eth1: renamed from tmp # # ################################################################# # Global server disabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=0 # # TEST: Global server - ns-A IP [ OK ] # TEST: VRF server - ns-A IP [ OK ] # TEST: Enslaved device server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: Global server, VRF client, local connection - ns-A IP [ OK ] # TEST: Global server - VRF IP [ OK ] # TEST: VRF server - VRF IP [ OK ] # TEST: Enslaved device server - VRF IP [ OK ] # TEST: No server - VRF IP [ OK ] # TEST: Global server, VRF client, local connection - VRF IP [ OK ] # TEST: VRF server, VRF client, local conn - ns-A IP [ OK ] # TEST: VRF server, enslaved device client, local connection - ns-A IP [ OK ] # TEST: Enslaved device server, VRF client, local conn - ns-A IP [ OK ] # TEST: Enslaved device server, device client, local conn - ns-A IP [ OK ] # # ################################################################# # Global server enabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=1 # # TEST: Global server - ns-A IP [ OK ] # TEST: VRF server - ns-A IP [ OK ] # TEST: Enslaved device server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: Global server - VRF IP [ OK ] # TEST: VRF server - VRF IP [ OK ] # TEST: Enslaved device server - VRF IP [ OK ] # TEST: No server - VRF IP [ OK ] # TEST: VRF client [ OK ] # TEST: Enslaved device client [ OK ] # TEST: No server, VRF client [ OK ] # TEST: No server, enslaved device client [ OK ] # TEST: Global server, VRF client, local conn - ns-A IP [ OK ] # TEST: VRF server, VRF client, local conn - ns-A IP [ OK ] # TEST: VRF server, device client, local conn - ns-A IP [ OK ] # TEST: Enslaved device server, VRF client, local conn - ns-A IP [ OK ] # TEST: Enslaved device server, device client, local conn - ns-A IP [ OK ] # TEST: Global server, VRF client, local conn - VRF IP [ OK ] # TEST: Global server, VRF client, local conn - loopback [ OK ] # TEST: VRF server, VRF client, local conn - VRF IP [ OK ] # TEST: VRF server, VRF client, local conn - loopback [ OK ] # TEST: No server, VRF client, local conn - ns-A IP [ OK ] # TEST: No server, VRF client, local conn - VRF IP [ OK ] # TEST: No server, VRF client, local conn - loopback [ OK ] # # ########################################################################### # IPv4 address binds # ########################################################################### # # # ################################################################# # No VRF # [ 1178.299949] eth1: renamed from tmp # TEST: Raw socket bind to local address - ns-A IP [ OK ] # TEST: Raw socket bind to local address after device bind - ns-A IP [ OK ] # TEST: Raw socket bind to local address - ns-A loopback IP [ OK ] # TEST: Raw socket bind to local address after device bind - ns-A loopback IP [ OK ] # TEST: Raw socket bind to nonlocal address - nonlocal IP [ OK ] # TEST: TCP socket bind to nonlocal address - nonlocal IP [ OK ] # TEST: ICMP socket bind to nonlocal address - nonlocal IP [ OK ] # TEST: ICMP socket bind to broadcast address - broadcast [ OK ] # TEST: ICMP socket bind to multicast address - multicast [ OK ] # TEST: TCP socket bind to local address - ns-A IP [ OK ] # TEST: TCP socket bind to local address after device bind - ns-A IP [ OK ] # # ################################################################# # With VRF # [ 1203.902923] eth1: renamed from tmp # TEST: Raw socket bind to local address - ns-A IP [ OK ] # TEST: Raw socket bind to local address after device bind - ns-A IP [ OK ] # TEST: Raw socket bind to local address after VRF bind - ns-A IP [ OK ] # TEST: Raw socket bind to local address - VRF IP [ OK ] # TEST: Raw socket bind to local address after device bind - VRF IP [ OK ] # TEST: Raw socket bind to local address after VRF bind - VRF IP [ OK ] # TEST: Raw socket bind to out of scope address after VRF bind - ns-A loopback IP [ OK ] # TEST: Raw socket bind to nonlocal address after VRF bind - nonlocal IP [ OK ] # TEST: TCP socket bind to nonlocal address after VRF bind - nonlocal IP [ OK ] # TEST: ICMP socket bind to nonlocal address after VRF bind - nonlocal IP [ OK ] # TEST: ICMP socket bind to broadcast address after VRF bind - broadcast [ OK ] # TEST: ICMP socket bind to multicast address after VRF bind - multicast [ OK ] # TEST: TCP socket bind to local address - ns-A IP [ OK ] # TEST: TCP socket bind to local address after device bind - ns-A IP [ OK ] # TEST: TCP socket bind to local address - VRF IP [ OK ] # TEST: TCP socket bind to local address after device bind - VRF IP [ OK ] # TEST: TCP socket bind to invalid local address for VRF - ns-A loopback IP [ OK ] # TEST: TCP socket bind to invalid local address for device bind - ns-A loopback IP [ OK ] # # ########################################################################### # Run time tests - ipv4 # ########################################################################### # [ 1244.252950] eth1: renamed from tmp # TEST: Device delete with active traffic - ping in - ns-A IP [ OK ] [ 1253.451937] eth1: renamed from tmp # TEST: Device delete with active traffic - ping in - VRF IP [ OK ] [ 1262.599942] eth1: renamed from tmp # TEST: Device delete with active traffic - ping out - ns-B IP [ OK ] [ 1271.791945] eth1: renamed from tmp # TEST: TCP active socket, global server - ns-A IP [ OK ] [ 1281.996944] eth1: renamed from tmp # TEST: TCP active socket, global server - VRF IP [ OK ] [ 1292.178949] eth1: renamed from tmp # TEST: TCP active socket, VRF server - ns-A IP [ OK ] [ 1302.357962] eth1: renamed from tmp # TEST: TCP active socket, VRF server - VRF IP [ OK ] [ 1312.462958] eth1: renamed from tmp # TEST: TCP active socket, enslaved device server - ns-A IP [ OK ] [ 1322.562929] eth1: renamed from tmp # TEST: TCP active socket, VRF client - ns-A IP [ OK ] [ 1332.683983] eth1: renamed from tmp # TEST: TCP active socket, enslaved device client - ns-A IP [ OK ] [ 1342.920977] eth1: renamed from tmp # TEST: TCP active socket, global server, VRF client, local - ns-A IP [ OK ] [ 1353.194943] eth1: renamed from tmp # TEST: TCP active socket, global server, VRF client, local - VRF IP [ OK ] [ 1363.425956] eth1: renamed from tmp # TEST: TCP active socket, VRF server and client, local - ns-A IP [ OK ] [ 1373.581960] eth1: renamed from tmp # TEST: TCP active socket, VRF server and client, local - VRF IP [ OK ] [ 1383.785973] eth1: renamed from tmp # TEST: TCP active socket, global server, enslaved device client, local - ns-A IP [ OK ] [ 1394.053997] eth1: renamed from tmp # TEST: TCP active socket, VRF server, enslaved device client, local - ns-A IP [ OK ] [ 1404.318931] eth1: renamed from tmp # TEST: TCP active socket, enslaved device server and client, local - ns-A IP [ OK ] [ 1414.475961] eth1: renamed from tmp # TEST: TCP passive socket, global server - ns-A IP [ OK ] [ 1424.551928] eth1: renamed from tmp # TEST: TCP passive socket, global server - VRF IP [ OK ] [ 1434.685998] eth1: renamed from tmp # TEST: TCP passive socket, VRF server - ns-A IP [ OK ] [ 1444.824071] eth1: renamed from tmp # TEST: TCP passive socket, VRF server - VRF IP [ OK ] [ 1454.997007] eth1: renamed from tmp # TEST: TCP passive socket, enslaved device server - ns-A IP [ OK ] [ 1465.197962] eth1: renamed from tmp # TEST: TCP passive socket, VRF client - ns-A IP [ OK ] [ 1475.360962] eth1: renamed from tmp # TEST: TCP passive socket, enslaved device client - ns-A IP [ OK ] [ 1485.573976] eth1: renamed from tmp # TEST: TCP passive socket, global server, VRF client, local - ns-A IP [ OK ] [ 1495.848974] eth1: renamed from tmp # TEST: TCP passive socket, global server, VRF client, local - VRF IP [ OK ] [ 1506.122944] eth1: renamed from tmp # TEST: TCP passive socket, VRF server and client, local - ns-A IP [ OK ] [ 1516.406947] eth1: renamed from tmp # TEST: TCP passive socket, VRF server and client, local - VRF IP [ OK ] [ 1526.712948] eth1: renamed from tmp # TEST: TCP passive socket, global server, enslaved device client, local - ns-A IP [ OK ] [ 1536.945943] eth1: renamed from tmp # TEST: TCP passive socket, VRF server, enslaved device client, local - ns-A IP [ OK ] [ 1547.103959] eth1: renamed from tmp # TEST: TCP passive socket, enslaved device server and client, local - ns-A IP [ OK ] # # ########################################################################### # IPv4 Netfilter # ########################################################################### # # # ################################################################# # TCP reset # [ 1557.329940] eth1: renamed from tmp # TEST: Global server, reject with TCP-reset on Rx - ns-A IP [ OK ] # TEST: Global server, reject with TCP-reset on Rx - VRF IP [ OK ] # # ################################################################# # ICMP unreachable # # TEST: Global TCP server, Rx reject icmp-port-unreach - ns-A IP [ OK ] # TEST: Global TCP server, Rx reject icmp-port-unreach - VRF IP [ OK ] # TEST: Global UDP server, Rx reject icmp-port-unreach - ns-A IP [ OK ] # TEST: Global UDP server, Rx reject icmp-port-unreach - VRF IP [ OK ] # # ########################################################################### # IPv6 ping # ########################################################################### # # # ################################################################# # No VRF # [ 1582.097985] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=0 # # TEST: ping out - ns-B IPv6 [ OK ] # TEST: ping out - ns-B loopback IPv6 [ OK ] # TEST: ping out - ns-B IPv6 LLA [ OK ] # TEST: ping out - multicast IP [ OK ] # TEST: ping out, device bind - ns-B IPv6 [ OK ] # TEST: ping out, loopback address bind - ns-B IPv6 [ OK ] # TEST: ping out, device bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, loopback address bind - ns-B loopback IPv6 [ OK ] # TEST: ping in - ns-A IPv6 [ OK ] # TEST: ping in - ns-A loopback IPv6 [ OK ] # TEST: ping in - ns-A IPv6 LLA [ OK ] # TEST: ping in - multicast IP [ OK ] # TEST: ping local, no bind - ns-A IPv6 [ OK ] # TEST: ping local, no bind - ns-A loopback IPv6 [ OK ] # TEST: ping local, no bind - IPv6 loopback [ OK ] # TEST: ping local, no bind - ns-A IPv6 LLA [ OK ] # TEST: ping local, no bind - multicast IP [ OK ] # TEST: ping local, device bind - ns-A IPv6 [ OK ] # TEST: ping local, device bind - ns-A IPv6 LLA [ OK ] # TEST: ping local, device bind - multicast IP [ OK ] # TEST: ping local, device bind - ns-A loopback IPv6 [ OK ] # TEST: ping local, device bind - IPv6 loopback [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IPv6 [ OK ] # TEST: ping out, blocked by route - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, blocked by route - ns-B loopback IPv6 [ OK ] # TEST: ping in, blocked by route - ns-A loopback IPv6 [ OK ] # TEST: ping out, unreachable route - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, unreachable route - ns-B loopback IPv6 [ OK ] [ 1648.077949] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=0 # # TEST: ping out - ns-B IPv6 [ OK ] # TEST: ping out - ns-B loopback IPv6 [ OK ] # TEST: ping out - ns-B IPv6 LLA [ OK ] # TEST: ping out - multicast IP [ OK ] # TEST: ping out, device bind - ns-B IPv6 [ OK ] # TEST: ping out, loopback address bind - ns-B IPv6 [ OK ] # TEST: ping out, device bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, loopback address bind - ns-B loopback IPv6 [ OK ] # TEST: ping in - ns-A IPv6 [ OK ] # TEST: ping in - ns-A loopback IPv6 [ OK ] # TEST: ping in - ns-A IPv6 LLA [ OK ] # TEST: ping in - multicast IP [ OK ] # TEST: ping local, no bind - ns-A IPv6 [ OK ] # TEST: ping local, no bind - ns-A loopback IPv6 [ OK ] # TEST: ping local, no bind - IPv6 loopback [ OK ] # TEST: ping local, no bind - ns-A IPv6 LLA [ OK ] # TEST: ping local, no bind - multicast IP [ OK ] # TEST: ping local, device bind - ns-A IPv6 [ OK ] # TEST: ping local, device bind - ns-A IPv6 LLA [ OK ] # TEST: ping local, device bind - multicast IP [ OK ] # TEST: ping local, device bind - ns-A loopback IPv6 [ OK ] # TEST: ping local, device bind - IPv6 loopback [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IPv6 [ OK ] # TEST: ping out, blocked by route - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, blocked by route - ns-B loopback IPv6 [ OK ] # TEST: ping in, blocked by route - ns-A loopback IPv6 [ OK ] # TEST: ping out, unreachable route - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, unreachable route - ns-B loopback IPv6 [ OK ] # # ################################################################# # With VRF # [ 1714.289944] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=1 # # TEST: ping out, VRF bind - ns-B IPv6 [ OK ] # TEST: ping out, VRF bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, VRF bind - ns-B IPv6 LLA [ OK ] # TEST: ping out, VRF bind - multicast IP [ OK ] # TEST: ping out, device bind - ns-B IPv6 [ OK ] # TEST: ping out, device bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind - ns-B IPv6 LLA [ OK ] # TEST: ping out, device bind - multicast IP [ OK ] # TEST: ping out, vrf device+address bind - ns-B IPv6 [ OK ] # TEST: ping out, vrf device+address bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, vrf device+address bind - ns-B IPv6 LLA [ OK ] # TEST: ping in - ns-A IPv6 [ OK ] # TEST: ping in - VRF IPv6 [ OK ] # TEST: ping in - ns-A IPv6 LLA [ OK ] # TEST: ping in - multicast IP [ OK ] # TEST: ping in - ns-A loopback IPv6 [ OK ] # TEST: ping local, VRF bind - ns-A IPv6 [ OK ] # TEST: ping local, VRF bind - VRF IPv6 [ OK ] # TEST: ping local, VRF bind - IPv6 loopback [ OK ] # TEST: ping local, device bind - ns-A IPv6 [ OK ] # TEST: ping local, device bind - ns-A IPv6 LLA [ OK ] # TEST: ping local, device bind - multicast IP [ OK ] # TEST: ping in, LLA to GUA - ns-A IPv6 [ OK ] # TEST: ping in, LLA to GUA - VRF IPv6 [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IPv6 [ OK ] # TEST: ping out, unreachable route - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, unreachable route - ns-B loopback IPv6 [ OK ] # TEST: ping in, unreachable route - ns-A loopback IPv6 [ OK ] [ 1782.535965] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=1 # # TEST: ping out, VRF bind - ns-B IPv6 [ OK ] # TEST: ping out, VRF bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, VRF bind - ns-B IPv6 LLA [ OK ] # TEST: ping out, VRF bind - multicast IP [ OK ] # TEST: ping out, device bind - ns-B IPv6 [ OK ] # TEST: ping out, device bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind - ns-B IPv6 LLA [ OK ] # TEST: ping out, device bind - multicast IP [ OK ] # TEST: ping out, vrf device+address bind - ns-B IPv6 [ OK ] # TEST: ping out, vrf device+address bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, vrf device+address bind - ns-B IPv6 LLA [ OK ] # TEST: ping in - ns-A IPv6 [ OK ] # TEST: ping in - VRF IPv6 [ OK ] # TEST: ping in - ns-A IPv6 LLA [ OK ] # TEST: ping in - multicast IP [ OK ] # TEST: ping in - ns-A loopback IPv6 [ OK ] # TEST: ping local, VRF bind - ns-A IPv6 [ OK ] # TEST: ping local, VRF bind - VRF IPv6 [ OK ] # TEST: ping local, VRF bind - IPv6 loopback [ OK ] # TEST: ping local, device bind - ns-A IPv6 [ OK ] # TEST: ping local, device bind - ns-A IPv6 LLA [ OK ] # TEST: ping local, device bind - multicast IP [ OK ] # TEST: ping in, LLA to GUA - ns-A IPv6 [ OK ] # TEST: ping in, LLA to GUA - VRF IPv6 [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IPv6 [ OK ] # TEST: ping out, unreachable route - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, unreachable route - ns-B loopback IPv6 [ OK ] # TEST: ping in, unreachable route - ns-A loopback IPv6 [ OK ] # # ########################################################################### # IPv6/TCP # ########################################################################### # # # ################################################################# # No VRF # [ 1850.740961] eth1: renamed from tmp # # ################################################################# # tcp_l3mdev_accept disabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=0 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Global server - ns-A loopback IPv6 [ OK ] # TEST: Global server - ns-A IPv6 LLA [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - ns-A loopback IPv6 [ OK ] # TEST: No server - ns-A IPv6 LLA [ OK ] # TEST: Client - ns-B IPv6 [ OK ] # TEST: Client - ns-B loopback IPv6 [ OK ] # TEST: Client - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind - ns-B IPv6 [ OK ] # TEST: Client, device bind - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind - ns-B IPv6 LLA [ OK ] # TEST: No server, device client - ns-B IPv6 [ OK ] # TEST: No server, device client - ns-B loopback IPv6 [ OK ] # TEST: No server, device client - ns-B IPv6 LLA [ OK ] # TEST: Global server, local connection - ns-A IPv6 [ OK ] # TEST: Global server, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, local connection - IPv6 loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, unbound client, local connection - ns-A loopback IPv6 [ OK ] # TEST: Device server, unbound client, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client, local connection - IPv6 loopback [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 LLA [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 LLA [ OK ] # TEST: MD5: Single address config [ OK ] [ 1934.877951] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].43926->[2001:db8:1::1].12345 [S] [ 1935.934008] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].43926->[2001:db8:1::1].12345 [S] [ 1936.958012] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].43926->[2001:db8:1::1].12345 [S] [ 1937.982045] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].43926->[2001:db8:1::1].12345 [S] # TEST: MD5: Server no config, client uses password [ OK ] [ 1942.947077] TCP: MD5 Hash mismatch for [2001:db8:1::2].37150->[2001:db8:1::1].12345 [S]L3 index 0 [ 1943.997947] TCP: MD5 Hash mismatch for [2001:db8:1::2].37150->[2001:db8:1::1].12345 [S]L3 index 0 [ 1945.021944] TCP: MD5 Hash mismatch for [2001:db8:1::2].37150->[2001:db8:1::1].12345 [S]L3 index 0 [ 1946.045983] TCP: MD5 Hash mismatch for [2001:db8:1::2].37150->[2001:db8:1::1].12345 [S]L3 index 0 # TEST: MD5: Client uses wrong password [ OK ] [ 1951.023195] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].37154->[2001:db8:1::1].12345 [S] [ 1952.062024] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].37154->[2001:db8:1::1].12345 [S] [ 1953.085912] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].37154->[2001:db8:1::1].12345 [S] [ 1954.109953] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].37154->[2001:db8:1::1].12345 [S] # TEST: MD5: Client address does not match address configured with password [ OK ] # TEST: MD5: Prefix config [ OK ] [ 1962.166516] TCP: MD5 Hash mismatch for [2001:db8:1::2].32822->[2001:db8:1::1].12345 [S]L3 index 0 [ 1963.197957] TCP: MD5 Hash mismatch for [2001:db8:1::2].32822->[2001:db8:1::1].12345 [S]L3 index 0 [ 1964.222024] TCP: MD5 Hash mismatch for [2001:db8:1::2].32822->[2001:db8:1::1].12345 [S]L3 index 0 [ 1965.245910] TCP: MD5 Hash mismatch for [2001:db8:1::2].32822->[2001:db8:1::1].12345 [S]L3 index 0 # TEST: MD5: Prefix config, client uses wrong password [ OK ] [ 1970.236989] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 1971.261985] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 1972.285919] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 1973.309904] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] # TEST: MD5: Prefix config, client address not in configured prefix [ OK ] # # ################################################################# # tcp_l3mdev_accept enabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=1 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Global server - ns-A loopback IPv6 [ OK ] # TEST: Global server - ns-A IPv6 LLA [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - ns-A loopback IPv6 [ OK ] # TEST: No server - ns-A IPv6 LLA [ OK ] # TEST: Client - ns-B IPv6 [ OK ] # TEST: Client - ns-B loopback IPv6 [ OK ] # TEST: Client - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind - ns-B IPv6 [ OK ] # TEST: Client, device bind - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind - ns-B IPv6 LLA [ OK ] # TEST: No server, device client - ns-B IPv6 [ OK ] # TEST: No server, device client - ns-B loopback IPv6 [ OK ] # TEST: No server, device client - ns-B IPv6 LLA [ OK ] # TEST: Global server, local connection - ns-A IPv6 [ OK ] # TEST: Global server, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, local connection - IPv6 loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, unbound client, local connection - ns-A loopback IPv6 [ OK ] # TEST: Device server, unbound client, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client, local connection - IPv6 loopback [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 LLA [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 LLA [ OK ] # TEST: MD5: Single address config [ OK ] [ 2059.236355] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].50724->[2001:db8:1::1].12345 [S] [ 2060.286001] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].50724->[2001:db8:1::1].12345 [S] [ 2061.309913] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].50724->[2001:db8:1::1].12345 [S] [ 2062.333997] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].50724->[2001:db8:1::1].12345 [S] # TEST: MD5: Server no config, client uses password [ OK ] [ 2067.308395] TCP: MD5 Hash mismatch for [2001:db8:1::2].42170->[2001:db8:1::1].12345 [S]L3 index 0 [ 2068.349956] TCP: MD5 Hash mismatch for [2001:db8:1::2].42170->[2001:db8:1::1].12345 [S]L3 index 0 [ 2069.373918] TCP: MD5 Hash mismatch for [2001:db8:1::2].42170->[2001:db8:1::1].12345 [S]L3 index 0 [ 2070.397958] TCP: MD5 Hash mismatch for [2001:db8:1::2].42170->[2001:db8:1::1].12345 [S]L3 index 0 # TEST: MD5: Client uses wrong password [ OK ] [ 2075.382808] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].58218->[2001:db8:1::1].12345 [S] [ 2076.413924] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].58218->[2001:db8:1::1].12345 [S] [ 2077.437942] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].58218->[2001:db8:1::1].12345 [S] [ 2078.461905] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].58218->[2001:db8:1::1].12345 [S] # TEST: MD5: Client address does not match address configured with password [ OK ] # TEST: MD5: Prefix config [ OK ] [ 2086.521028] TCP: MD5 Hash mismatch for [2001:db8:1::2].53848->[2001:db8:1::1].12345 [S]L3 index 0 [ 2087.549998] TCP: MD5 Hash mismatch for [2001:db8:1::2].53848->[2001:db8:1::1].12345 [S]L3 index 0 [ 2088.573913] TCP: MD5 Hash mismatch for [2001:db8:1::2].53848->[2001:db8:1::1].12345 [S]L3 index 0 [ 2089.598032] TCP: MD5 Hash mismatch for [2001:db8:1::2].53848->[2001:db8:1::1].12345 [S]L3 index 0 # TEST: MD5: Prefix config, client uses wrong password [ OK ] [ 2094.593762] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 2095.613871] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 2096.637986] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 2097.661968] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] # TEST: MD5: Prefix config, client address not in configured prefix [ OK ] # # ################################################################# # With VRF # [ 2102.293939] eth1: renamed from tmp # # ################################################################# # Global server disabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=0 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Global server - VRF IPv6 [ OK ] # TEST: Global server - ns-A IPv6 LLA [ OK ] # TEST: VRF server - ns-A IPv6 [ OK ] # TEST: VRF server - VRF IPv6 [ OK ] # TEST: VRF server - ns-A IPv6 LLA [ OK ] # TEST: Device server - ns-A IPv6 [ OK ] # TEST: Device server - VRF IPv6 [ OK ] # TEST: Device server - ns-A IPv6 LLA [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - VRF IPv6 [ OK ] # TEST: No server - ns-A IPv6 LLA [ OK ] # TEST: Global server, local connection - ns-A IPv6 [ OK ] [ 2140.707007] eth2: renamed from tmp # TEST: MD5: VRF: Single address config [ OK ] [ 2145.882919] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].56690->[2001:db8:1::1].12345 [S] [ 2146.941999] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].56690->[2001:db8:1::1].12345 [S] [ 2147.965910] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].56690->[2001:db8:1::1].12345 [S] [ 2148.990007] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].56690->[2001:db8:1::1].12345 [S] # TEST: MD5: VRF: Server no config, client uses password [ OK ] [ 2153.956113] TCP: MD5 Hash mismatch for [2001:db8:1::2].57792->[2001:db8:1::1].12345 [S]L3 index 9 [ 2155.006071] TCP: MD5 Hash mismatch for [2001:db8:1::2].57792->[2001:db8:1::1].12345 [S]L3 index 9 [ 2156.029911] TCP: MD5 Hash mismatch for [2001:db8:1::2].57792->[2001:db8:1::1].12345 [S]L3 index 9 [ 2157.053915] TCP: MD5 Hash mismatch for [2001:db8:1::2].57792->[2001:db8:1::1].12345 [S]L3 index 9 # TEST: MD5: VRF: Client uses wrong password [ OK ] [ 2162.034442] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].57796->[2001:db8:1::1].12345 [S] [ 2163.069987] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].57796->[2001:db8:1::1].12345 [S] [ 2164.093920] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].57796->[2001:db8:1::1].12345 [S] [ 2165.117926] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].57796->[2001:db8:1::1].12345 [S] # TEST: MD5: VRF: Client address does not match address configured with password [ OK ] # TEST: MD5: VRF: Prefix config [ OK ] [ 2173.180080] TCP: MD5 Hash mismatch for [2001:db8:1::2].36372->[2001:db8:1::1].12345 [S]L3 index 9 [ 2174.205909] TCP: MD5 Hash mismatch for [2001:db8:1::2].36372->[2001:db8:1::1].12345 [S]L3 index 9 [ 2175.229984] TCP: MD5 Hash mismatch for [2001:db8:1::2].36372->[2001:db8:1::1].12345 [S]L3 index 9 [ 2176.253950] TCP: MD5 Hash mismatch for [2001:db8:1::2].36372->[2001:db8:1::1].12345 [S]L3 index 9 # TEST: MD5: VRF: Prefix config, client uses wrong password [ OK ] [ 2181.256625] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 2182.269938] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 2183.293946] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 2184.317967] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] # TEST: MD5: VRF: Prefix config, client address not in configured prefix [ OK ] # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in VRF [ OK ] # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in default VRF [ OK ] [ 2195.471336] TCP: MD5 Hash mismatch for [2001:db8:1::2].51666->[2001:db8:1::1].12345 [S]L3 index 0 [ 2196.478039] TCP: MD5 Hash mismatch for [2001:db8:1::2].51666->[2001:db8:1::1].12345 [S]L3 index 0 [ 2197.501978] TCP: MD5 Hash mismatch for [2001:db8:1::2].51666->[2001:db8:1::1].12345 [S]L3 index 0 [ 2198.525965] TCP: MD5 Hash mismatch for [2001:db8:1::2].51666->[2001:db8:1::1].12345 [S]L3 index 0 # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in default VRF with VRF pw [ OK ] [ 2203.550003] TCP: MD5 Hash mismatch for [2001:db8:1::2].46966->[2001:db8:1::1].12345 [S]L3 index 9 [ 2204.605970] TCP: MD5 Hash mismatch for [2001:db8:1::2].46966->[2001:db8:1::1].12345 [S]L3 index 9 [ 2205.629907] TCP: MD5 Hash mismatch for [2001:db8:1::2].46966->[2001:db8:1::1].12345 [S]L3 index 9 [ 2206.653916] TCP: MD5 Hash mismatch for [2001:db8:1::2].46966->[2001:db8:1::1].12345 [S]L3 index 9 # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in VRF with default VRF pw [ OK ] # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in VRF [ OK ] # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in default VRF [ OK ] [ 2217.760498] TCP: MD5 Hash mismatch for [2001:db8:1::2].57466->[2001:db8:1::1].12345 [S]L3 index 0 [ 2218.813999] TCP: MD5 Hash mismatch for [2001:db8:1::2].57466->[2001:db8:1::1].12345 [S]L3 index 0 [ 2219.837913] TCP: MD5 Hash mismatch for [2001:db8:1::2].57466->[2001:db8:1::1].12345 [S]L3 index 0 [ 2220.861918] TCP: MD5 Hash mismatch for [2001:db8:1::2].57466->[2001:db8:1::1].12345 [S]L3 index 0 # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in default VRF with VRF pw [ OK ] [ 2225.833032] TCP: MD5 Hash mismatch for [2001:db8:1::2].56138->[2001:db8:1::1].12345 [S]L3 index 9 [ 2226.877903] TCP: MD5 Hash mismatch for [2001:db8:1::2].56138->[2001:db8:1::1].12345 [S]L3 index 9 [ 2227.901946] TCP: MD5 Hash mismatch for [2001:db8:1::2].56138->[2001:db8:1::1].12345 [S]L3 index 9 [ 2228.925955] TCP: MD5 Hash mismatch for [2001:db8:1::2].56138->[2001:db8:1::1].12345 [S]L3 index 9 # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in VRF with default VRF pw [ OK ] # TEST: MD5: VRF: Device must be a VRF - single address [ OK ] # TEST: MD5: VRF: Device must be a VRF - prefix [ OK ] # # ################################################################# # VRF Global server enabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=1 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Global server - VRF IPv6 [ OK ] # TEST: VRF server - ns-A IPv6 [ OK ] # TEST: VRF server - VRF IPv6 [ OK ] # TEST: Global server - ns-A IPv6 LLA [ OK ] # TEST: VRF server - ns-A IPv6 LLA [ OK ] # TEST: Device server - ns-A IPv6 [ OK ] # TEST: Device server - ns-A IPv6 LLA [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - VRF IPv6 [ OK ] # TEST: No server - ns-A IPv6 LLA [ OK ] # TEST: Global server, local connection - ns-A IPv6 [ OK ] # TEST: Global server, local connection - VRF IPv6 [ OK ] # TEST: Client, VRF bind - ns-B IPv6 [ OK ] # TEST: Client, VRF bind - ns-B loopback IPv6 [ OK ] # TEST: Client, VRF bind - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind - ns-B IPv6 [ OK ] # TEST: Client, device bind - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind - ns-B IPv6 LLA [ OK ] # TEST: No server, VRF client - ns-B IPv6 [ OK ] # TEST: No server, VRF client - ns-B loopback IPv6 [ OK ] # TEST: No server, device client - ns-B IPv6 [ OK ] # TEST: No server, device client - ns-B loopback IPv6 [ OK ] # TEST: No server, device client - ns-B IPv6 LLA [ OK ] # TEST: VRF server, VRF client, local connection - ns-A IPv6 [ OK ] # TEST: VRF server, VRF client, local connection - VRF IPv6 [ OK ] # TEST: VRF server, VRF client, local connection - IPv6 loopback [ OK ] # TEST: VRF server, device client, local connection - ns-A IPv6 [ OK ] # TEST: VRF server, unbound client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, VRF client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, device client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, device client, local connection - ns-A IPv6 LLA [ OK ] # SYSCTL: net.ipv4.udp_early_demux=1 # # # ########################################################################### # IPv6/UDP # ########################################################################### # # # ################################################################# # No VRF # [ 2327.882943] eth1: renamed from tmp # # ################################################################# # udp_l3mdev_accept disabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=0 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Device server - ns-A IPv6 [ OK ] # TEST: Global server - ns-A IPv6 LLA [ OK ] # TEST: Device server - ns-A IPv6 LLA [ OK ] # TEST: Global server - ns-A loopback IPv6 [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - ns-A loopback IPv6 [ OK ] # TEST: No server - ns-A IPv6 LLA [ OK ] # TEST: Client - ns-B IPv6 [ OK ] # TEST: Client, device bind - ns-B IPv6 [ OK ] # TEST: Client, device send via cmsg - ns-B IPv6 [ OK ] # TEST: Client, device bind via IPV6_UNICAST_IF - ns-B IPv6 [ OK ] # TEST: No server, unbound client - ns-B IPv6 [ OK ] # TEST: No server, device client - ns-B IPv6 [ OK ] # TEST: Client - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind - ns-B loopback IPv6 [ OK ] # TEST: Client, device send via cmsg - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind via IPV6_UNICAST_IF - ns-B loopback IPv6 [ OK ] # TEST: No server, unbound client - ns-B loopback IPv6 [ OK ] # TEST: No server, device client - ns-B loopback IPv6 [ OK ] # TEST: Client - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind - ns-B IPv6 LLA [ OK ] # TEST: Client, device send via cmsg - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind via IPV6_UNICAST_IF - ns-B IPv6 LLA [ OK ] # TEST: No server, unbound client - ns-B IPv6 LLA [ OK ] # TEST: No server, device client - ns-B IPv6 LLA [ OK ] # TEST: Global server, local connection - ns-A IPv6 [ OK ] # TEST: Global server, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, local connection - IPv6 loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, local connection - ns-A loopback IPv6 [ OK ] # TEST: Device server, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device client via IPV6_UNICAST_IF, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client, local connection - IPv6 loopback [ OK ] # TEST: Global server, device send via cmsg, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - IPv6 loopback [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 [ OK ] # TEST: UDP in - LLA to GUA [ OK ] # # ################################################################# # udp_l3mdev_accept enabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=1 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Device server - ns-A IPv6 [ OK ] # TEST: Global server - ns-A IPv6 LLA [ OK ] # TEST: Device server - ns-A IPv6 LLA [ OK ] # TEST: Global server - ns-A loopback IPv6 [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - ns-A loopback IPv6 [ OK ] # TEST: No server - ns-A IPv6 LLA [ OK ] # TEST: Client - ns-B IPv6 [ OK ] # TEST: Client, device bind - ns-B IPv6 [ OK ] # TEST: Client, device send via cmsg - ns-B IPv6 [ OK ] # TEST: Client, device bind via IPV6_UNICAST_IF - ns-B IPv6 [ OK ] # TEST: No server, unbound client - ns-B IPv6 [ OK ] # TEST: No server, device client - ns-B IPv6 [ OK ] # TEST: Client - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind - ns-B loopback IPv6 [ OK ] # TEST: Client, device send via cmsg - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind via IPV6_UNICAST_IF - ns-B loopback IPv6 [ OK ] # TEST: No server, unbound client - ns-B loopback IPv6 [ OK ] # TEST: No server, device client - ns-B loopback IPv6 [ OK ] # TEST: Client - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind - ns-B IPv6 LLA [ OK ] # TEST: Client, device send via cmsg - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind via IPV6_UNICAST_IF - ns-B IPv6 LLA [ OK ] # TEST: No server, unbound client - ns-B IPv6 LLA [ OK ] # TEST: No server, device client - ns-B IPv6 LLA [ OK ] # TEST: Global server, local connection - ns-A IPv6 [ OK ] # TEST: Global server, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, local connection - IPv6 loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, local connection - ns-A loopback IPv6 [ OK ] # TEST: Device server, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device client via IPV6_UNICAST_IF, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client, local connection - IPv6 loopback [ OK ] # TEST: Global server, device send via cmsg, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - IPv6 loopback [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 [ OK ] # TEST: UDP in - LLA to GUA [ OK ] # # ################################################################# # With VRF # [ 2595.190994] eth1: renamed from tmp # # ################################################################# # Global server disabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=0 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Global server - VRF IPv6 [ OK ] # TEST: VRF server - ns-A IPv6 [ OK ] # TEST: VRF server - VRF IPv6 [ OK ] # TEST: Enslaved device server - ns-A IPv6 [ OK ] # TEST: Enslaved device server - VRF IPv6 [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - VRF IPv6 [ OK ] # TEST: Global server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: Global server, VRF client, local conn - VRF IPv6 [ OK ] # TEST: VRF server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: VRF server, VRF client, local conn - VRF IPv6 [ OK ] # TEST: Global server, device client, local conn - ns-A IPv6 [ OK ] # TEST: VRF server, device client, local conn - ns-A IPv6 [ OK ] # TEST: Enslaved device server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: Enslaved device server, device client, local conn - ns-A IPv6 [ OK ] # # ################################################################# # Global server enabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=1 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Global server - VRF IPv6 [ OK ] # TEST: VRF server - ns-A IPv6 [ OK ] # TEST: VRF server - VRF IPv6 [ OK ] # TEST: Enslaved device server - ns-A IPv6 [ OK ] # TEST: Enslaved device server - VRF IPv6 [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - VRF IPv6 [ OK ] # TEST: VRF client [ OK ] # TEST: No server, VRF client [ OK ] # TEST: Enslaved device client [ OK ] # TEST: No server, enslaved device client [ OK ] # TEST: Global server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: VRF server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: Global server, VRF client, local conn - VRF IPv6 [ OK ] # TEST: VRF server, VRF client, local conn - VRF IPv6 [ OK ] # TEST: No server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: No server, VRF client, local conn - VRF IPv6 [ OK ] # TEST: Global server, device client, local conn - ns-A IPv6 [ OK ] # TEST: VRF server, device client, local conn - ns-A IPv6 [ OK ] # TEST: Device server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 [ OK ] # TEST: Global server, linklocal IP [ OK ] # TEST: No server, linklocal IP [ OK ] # TEST: Enslaved device client, linklocal IP [ OK ] # TEST: No server, device client, peer linklocal IP [ OK ] # TEST: Enslaved device client, local conn - linklocal IP [ OK ] # TEST: No server, device client, local conn - linklocal IP [ OK ] # TEST: UDP in - LLA to GUA [ OK ] # # ########################################################################### # IPv6 address binds # ########################################################################### # # # ################################################################# # No VRF # [ 2726.195008] eth1: renamed from tmp # TEST: Raw socket bind to local address - ns-A IPv6 [ OK ] # TEST: Raw socket bind to local address after device bind - ns-A IPv6 [ OK ] # TEST: Raw socket bind to local address - ns-A loopback IPv6 [ OK ] # TEST: Raw socket bind to local address after device bind - ns-A loopback IPv6 [ OK ] # TEST: Raw socket bind to nonlocal address - nonlocal IPv6 [ OK ] # TEST: TCP socket bind to local address - ns-A IPv6 [ OK ] # TEST: TCP socket bind to local address after device bind - ns-A IPv6 [ OK ] # TEST: TCP socket bind to out of scope local address - ns-A loopback IPv6 [ OK ] # # ################################################################# # With VRF # [ 2745.507936] eth1: renamed from tmp # TEST: Raw socket bind to local address after vrf bind - ns-A IPv6 [ OK ] # TEST: Raw socket bind to local address after device bind - ns-A IPv6 [ OK ] # TEST: Raw socket bind to local address after vrf bind - VRF IPv6 [ OK ] # TEST: Raw socket bind to local address after device bind - VRF IPv6 [ OK ] # TEST: Raw socket bind to invalid local address after vrf bind - ns-A loopback IPv6 [ OK ] # TEST: Raw socket bind to nonlocal address after VRF bind - nonlocal IPv6 [ OK ] # TEST: TCP socket bind to local address with VRF bind - ns-A IPv6 [ OK ] # TEST: TCP socket bind to local address with VRF bind - VRF IPv6 [ OK ] # TEST: TCP socket bind to local address with device bind - ns-A IPv6 [ OK ] # TEST: TCP socket bind to VRF address with device bind - VRF IPv6 [ OK ] # TEST: TCP socket bind to invalid local address for VRF - ns-A loopback IPv6 [ OK ] # TEST: TCP socket bind to invalid local address for device bind - ns-A loopback IPv6 [ OK ] # # ########################################################################### # Run time tests - ipv6 # ########################################################################### # [ 2773.277940] eth1: renamed from tmp # TEST: Device delete with active traffic - ping in - ns-A IPv6 [ OK ] [ 2782.378990] eth1: renamed from tmp # TEST: Device delete with active traffic - ping out - ns-A IPv6 [ OK ] [ 2789.584927] eth1: renamed from tmp # TEST: TCP active socket, global server - ns-A IPv6 [ OK ] [ 2799.905940] eth1: renamed from tmp # TEST: TCP active socket, global server - VRF IPv6 [ OK ] [ 2810.140961] eth1: renamed from tmp # TEST: TCP active socket, VRF server - ns-A IPv6 [ OK ] [ 2820.298025] eth1: renamed from tmp # TEST: TCP active socket, VRF server - VRF IPv6 [ OK ] [ 2830.565002] eth1: renamed from tmp # TEST: TCP active socket, enslaved device server - ns-A IPv6 [ OK ] [ 2840.798961] eth1: renamed from tmp # TEST: TCP active socket, enslaved device server - VRF IPv6 [ OK ] [ 2851.089934] eth1: renamed from tmp # TEST: TCP active socket, VRF client [ OK ] [ 2861.262008] eth1: renamed from tmp # TEST: TCP active socket, enslaved device client [ OK ] [ 2871.357934] eth1: renamed from tmp # TEST: TCP active socket, global server, VRF client - ns-A IPv6 [ OK ] [ 2881.635946] eth1: renamed from tmp # TEST: TCP active socket, global server, VRF client - VRF IPv6 [ OK ] [ 2891.917984] eth1: renamed from tmp # TEST: TCP active socket, VRF server and client - ns-A IPv6 [ OK ] [ 2902.084962] eth1: renamed from tmp # TEST: TCP active socket, VRF server and client - VRF IPv6 [ OK ] [ 2912.212017] eth1: renamed from tmp # TEST: TCP active socket, global server, device client - ns-A IPv6 [ OK ] [ 2922.386956] eth1: renamed from tmp # TEST: TCP active socket, VRF server, device client - ns-A IPv6 [ OK ] [ 2932.714936] eth1: renamed from tmp # TEST: TCP active socket, device server, device client - ns-A IPv6 [ OK ] [ 2942.912962] eth1: renamed from tmp # TEST: TCP passive socket, global server - ns-A IPv6 [ OK ] [ 2953.107980] eth1: renamed from tmp # TEST: TCP passive socket, global server - VRF IPv6 [ OK ] [ 2963.333980] eth1: renamed from tmp # TEST: TCP passive socket, VRF server - ns-A IPv6 [ OK ] [ 2973.476979] eth1: renamed from tmp # TEST: TCP passive socket, VRF server - VRF IPv6 [ OK ] [ 2983.629958] eth1: renamed from tmp # TEST: TCP passive socket, enslaved device server - ns-A IPv6 [ OK ] [ 2993.777050] eth1: renamed from tmp # TEST: TCP passive socket, enslaved device server - VRF IPv6 [ OK ] [ 3003.909071] eth1: renamed from tmp # TEST: TCP passive socket, VRF client [ OK ] [ 3014.047069] eth1: renamed from tmp # TEST: TCP passive socket, enslaved device client [ OK ] [ 3024.213963] eth1: renamed from tmp # TEST: TCP passive socket, global server, VRF client - ns-A IPv6 [ OK ] [ 3034.371951] eth1: renamed from tmp # TEST: TCP passive socket, global server, VRF client - VRF IPv6 [ OK ] [ 3044.643954] eth1: renamed from tmp # TEST: TCP passive socket, VRF server and client - ns-A IPv6 [ OK ] [ 3054.997976] eth1: renamed from tmp # TEST: TCP passive socket, VRF server and client - VRF IPv6 [ OK ] [ 3065.309978] eth1: renamed from tmp # TEST: TCP passive socket, global server, device client - ns-A IPv6 [ OK ] [ 3075.578056] eth1: renamed from tmp # TEST: TCP passive socket, VRF server, device client - ns-A IPv6 [ OK ] [ 3085.856050] eth1: renamed from tmp # TEST: TCP passive socket, device server, device client - ns-A IPv6 [ OK ] [ 3096.092975] eth1: renamed from tmp # TEST: UDP active socket, global server - ns-A IPv6 [ OK ] [ 3106.386935] eth1: renamed from tmp # TEST: UDP active socket, global server - VRF IPv6 [ OK ] [ 3116.667013] eth1: renamed from tmp # TEST: UDP active socket, VRF server - ns-A IPv6 [ OK ] [ 3126.979998] eth1: renamed from tmp # TEST: UDP active socket, VRF server - VRF IPv6 [ OK ] [ 3137.276027] eth1: renamed from tmp # TEST: UDP active socket, enslaved device server - ns-A IPv6 [ OK ] [ 3147.557942] eth1: renamed from tmp # TEST: UDP active socket, enslaved device server - VRF IPv6 [ OK ] [ 3157.830018] eth1: renamed from tmp # TEST: UDP active socket, VRF client [ OK ] [ 3168.088999] eth1: renamed from tmp # TEST: UDP active socket, enslaved device client [ OK ] [ 3178.269058] eth1: renamed from tmp # TEST: UDP active socket, global server, VRF client - ns-A IPv6 [ OK ] [ 3188.479046] eth1: renamed from tmp # TEST: UDP active socket, global server, VRF client - VRF IPv6 [ OK ] [ 3198.802988] eth1: renamed from tmp # TEST: UDP active socket, VRF server and client - ns-A IPv6 [ OK ] [ 3209.048969] eth1: renamed from tmp # TEST: UDP active socket, VRF server and client - VRF IPv6 [ OK ] [ 3219.209969] eth1: renamed from tmp # TEST: UDP active socket, global server, device client - ns-A IPv6 [ OK ] [ 3229.430044] eth1: renamed from tmp # TEST: UDP active socket, VRF server, device client - ns-A IPv6 [ OK ] [ 3239.571055] eth1: renamed from tmp # TEST: UDP active socket, device server, device client - ns-A IPv6 [ OK ] # # ########################################################################### # IPv6 Netfilter # ########################################################################### # # # ################################################################# # TCP reset # [ 3249.716982] eth1: renamed from tmp # TEST: Global server, reject with TCP-reset on Rx - ns-A IPv6 [ OK ] # TEST: Global server, reject with TCP-reset on Rx - VRF IPv6 [ OK ] # # ################################################################# # ICMP unreachable # # TEST: Global TCP server, Rx reject icmp-port-unreach - ns-A IPv6 [ OK ] # TEST: Global TCP server, Rx reject icmp-port-unreach - VRF IPv6 [ OK ] # TEST: Global UDP server, Rx reject icmp-port-unreach - ns-A IPv6 [ OK ] # TEST: Global UDP server, Rx reject icmp-port-unreach - VRF IPv6 [ OK ] # # ########################################################################### # Use cases # ########################################################################### # # # ################################################################# # Device enslaved to bridge # [ 3275.426959] eth1: renamed from tmp [ 3276.904666] br0: port 1(eth1) entered blocking state [ 3276.905077] br0: port 1(eth1) entered disabled state [ 3276.905345] eth1: entered allmulticast mode [ 3276.905646] eth1: entered promiscuous mode [ 3276.955879] br0: port 1(eth1) entered blocking state [ 3276.956210] br0: port 1(eth1) entered forwarding state [ 3276.980939] br0: port 1(eth1) entered disabled state [ 3276.981444] br0: port 1(eth1) entered blocking state [ 3276.981704] br0: port 1(eth1) entered forwarding state # TEST: Bridge into VRF - IPv4 ping out [ OK ] # TEST: Bridge into VRF - IPv6 ping out [ OK ] # TEST: Bridge into VRF - IPv4 ping in [ OK ] # TEST: Bridge into VRF - IPv6 ping in [ OK ] # modprobe: FATAL: Module br_netfilter not found in directory /lib/modules/6.8.0-rc3-virtme [ 3286.316348] br0: port 1(eth1) entered disabled state [ 3286.317003] br0: port 1(eth1) entered blocking state [ 3286.317277] br0: port 1(eth1) entered forwarding state # TEST: Bridge vlan into VRF - IPv4 ping out [ OK ] # TEST: Bridge vlan into VRF - IPv6 ping out [ OK ] # TEST: Bridge vlan into VRF - IPv4 ping in [ OK ] # TEST: Bridge vlan into VRF - IPv6 ping in [ OK ] # modprobe: FATAL: Module br_netfilter not found in directory /lib/modules/6.8.0-rc3-virtme [ 3291.833976] eth1: left allmulticast mode [ 3291.834224] eth1: left promiscuous mode [ 3291.834441] br0: port 1(eth1) entered disabled state # # ################################################################# # Ping LLA with multiple interfaces # [ 3293.685980] eth1: renamed from tmp [ 3293.742989] eth2: renamed from tmp # TEST: Pre cycle, ping out ns-B - multicast IP [ OK ] # TEST: Pre cycle, ping out ns-C - multicast IP [ OK ] # TEST: Post cycle nsa-VJLcU3 eth1, ping out ns-B - multicast IP [ OK ] # TEST: Post cycle nsa-VJLcU3 eth1, ping out ns-C - multicast IP [ OK ] # TEST: Post cycle nsa-VJLcU3 eth2, ping out ns-B - multicast IP [ OK ] # TEST: Post cycle nsa-VJLcU3 eth2, ping out ns-C - multicast IP [ OK ] # # ################################################################# # SNAT on VRF # [ 3308.166973] eth1: renamed from tmp # TEST: IPv4 TCP connection over VRF with SNAT [ OK ] # TEST: IPv6 TCP connection over VRF with SNAT [ OK ] # # Tests passed: 906 # Tests failed: 0 ok 1 selftests: net: fcnal-test.sh make[1]: Leaving directory '/home/virtme/testing-1/tools/testing/selftests/net' make: Leaving directory '/home/virtme/testing-1/tools/testing/selftests' xx__-> echo $? 0 xx__->