make -C tools/testing/selftests TARGETS=net TEST_PROGS=fcnal-test.sh TEST__GEN_PROGS="" run_tests make: Entering directory '/home/virtme/testing-1/tools/testing/selftests' make[1]: Entering directory '/home/virtme/testing-1/tools/testing/selftests/net' make[1]: Nothing to be done for 'all'. make[1]: Leaving directory '/home/virtme/testing-1/tools/testing/selftests/net' make[1]: Entering directory '/home/virtme/testing-1/tools/testing/selftests/net' TAP version 13 1..1 # timeout set to 3600 # selftests: net: fcnal-test.sh # # ########################################################################### # IPv4 ping # ########################################################################### # # # ################################################################# # No VRF # [ 3.670987] ip (264) used greatest stack depth: 11784 bytes left [ 3.705361] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=0 # # TEST: ping out - ns-B IP [ OK ] # TEST: ping out, device bind - ns-B IP [ OK ] # TEST: ping out, address bind - ns-B IP [ OK ] # TEST: ping out - ns-B loopback IP [ OK ] # TEST: ping out, device bind - ns-B loopback IP [ OK ] # TEST: ping out, address bind - ns-B loopback IP [ OK ] # TEST: ping out (don't route), peer on link - ns-B IP [ OK ] # TEST: ping out (don't route), peer not on link - ns-B loopback IP [ OK ] # TEST: ping in - ns-A IP [ OK ] # TEST: ping in - ns-A loopback IP [ OK ] # TEST: ping local - ns-A IP [ OK ] # TEST: ping local - ns-A loopback IP [ OK ] # TEST: ping local - loopback [ OK ] # TEST: ping local, device bind - ns-A IP [ OK ] # TEST: ping local, device bind - ns-A loopback IP [ OK ] # TEST: ping local, device bind - loopback [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IP [ OK ] # TEST: ping out, blocked by route - ns-B loopback IP [ OK ] # TEST: ping in, blocked by route - ns-A loopback IP [ OK ] # TEST: ping out, unreachable default route - ns-B loopback IP [ OK ] [ 54.104442] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=1 # # TEST: ping out - ns-B IP [ OK ] # TEST: ping out, device bind - ns-B IP [ OK ] # TEST: ping out, address bind - ns-B IP [ OK ] # TEST: ping out - ns-B loopback IP [ OK ] # TEST: ping out, device bind - ns-B loopback IP [ OK ] # TEST: ping out, address bind - ns-B loopback IP [ OK ] # TEST: ping out (don't route), peer on link - ns-B IP [ OK ] # TEST: ping out (don't route), peer not on link - ns-B loopback IP [ OK ] # TEST: ping in - ns-A IP [ OK ] # TEST: ping in - ns-A loopback IP [ OK ] # TEST: ping local - ns-A IP [ OK ] # TEST: ping local - ns-A loopback IP [ OK ] # TEST: ping local - loopback [ OK ] # TEST: ping local, device bind - ns-A IP [ OK ] # TEST: ping local, device bind - ns-A loopback IP [ OK ] # TEST: ping local, device bind - loopback [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IP [ OK ] # TEST: ping out, blocked by route - ns-B loopback IP [ OK ] # TEST: ping in, blocked by route - ns-A loopback IP [ OK ] # TEST: ping out, unreachable default route - ns-B loopback IP [ OK ] [ 104.798341] eth1: renamed from tmp # TEST: ping out - ns-B IP [ OK ] # TEST: ping out, device bind - ns-B IP [ OK ] # TEST: ping out, address bind - ns-B IP [ OK ] # TEST: ping out - ns-B loopback IP [ OK ] # TEST: ping out, device bind - ns-B loopback IP [ OK ] # TEST: ping out, address bind - ns-B loopback IP [ OK ] # TEST: ping out (don't route), peer on link - ns-B IP [ OK ] # TEST: ping out (don't route), peer not on link - ns-B loopback IP [ OK ] # TEST: ping in - ns-A IP [ OK ] # TEST: ping in - ns-A loopback IP [ OK ] # TEST: ping local - ns-A IP [ OK ] # TEST: ping local - ns-A loopback IP [ OK ] # TEST: ping local - loopback [ OK ] # TEST: ping local, device bind - ns-A IP [ OK ] # TEST: ping local, device bind - ns-A loopback IP [ OK ] # TEST: ping local, device bind - loopback [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IP [ OK ] # TEST: ping out, blocked by route - ns-B loopback IP [ OK ] # TEST: ping in, blocked by route - ns-A loopback IP [ OK ] # TEST: ping out, unreachable default route - ns-B loopback IP [ OK ] # # ################################################################# # With VRF # [ 155.432358] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=1 # # TEST: ping out, VRF bind - ns-B IP [ OK ] # TEST: ping out, device bind - ns-B IP [ OK ] # TEST: ping out, vrf device + dev address bind - ns-B IP [ OK ] # TEST: ping out, vrf device + vrf address bind - ns-B IP [ OK ] # TEST: ping out, VRF bind - ns-B loopback IP [ OK ] # TEST: ping out, device bind - ns-B loopback IP [ OK ] # TEST: ping out, vrf device + dev address bind - ns-B loopback IP [ OK ] # TEST: ping out, vrf device + vrf address bind - ns-B loopback IP [ OK ] # TEST: ping in - ns-A IP [ OK ] # TEST: ping in - VRF IP [ OK ] # TEST: ping local, VRF bind - ns-A IP [ OK ] # TEST: ping local, VRF bind - VRF IP [ OK ] # TEST: ping local, VRF bind - loopback [ OK ] # TEST: ping local, device bind - ns-A IP [ OK ] # TEST: ping local, device bind - VRF IP [ OK ] # TEST: ping local, device bind - loopback [ OK ] # TEST: ping out, vrf bind, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping out, device bind, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IP [ OK ] # TEST: ping out, vrf bind, unreachable route - ns-B loopback IP [ OK ] # TEST: ping out, device bind, unreachable route - ns-B loopback IP [ OK ] # TEST: ping in, unreachable route - ns-A loopback IP [ OK ] [ 204.334350] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=1 # # TEST: ping out, VRF bind - ns-B IP [ OK ] # TEST: ping out, device bind - ns-B IP [ OK ] # TEST: ping out, vrf device + dev address bind - ns-B IP [ OK ] # TEST: ping out, vrf device + vrf address bind - ns-B IP [ OK ] # TEST: ping out, VRF bind - ns-B loopback IP [ OK ] # TEST: ping out, device bind - ns-B loopback IP [ OK ] # TEST: ping out, vrf device + dev address bind - ns-B loopback IP [ OK ] # TEST: ping out, vrf device + vrf address bind - ns-B loopback IP [ OK ] # TEST: ping in - ns-A IP [ OK ] # TEST: ping in - VRF IP [ OK ] # TEST: ping local, VRF bind - ns-A IP [ OK ] # TEST: ping local, VRF bind - VRF IP [ OK ] # TEST: ping local, VRF bind - loopback [ OK ] # TEST: ping local, device bind - ns-A IP [ OK ] # TEST: ping local, device bind - VRF IP [ OK ] # TEST: ping local, device bind - loopback [ OK ] # TEST: ping out, vrf bind, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping out, device bind, blocked by rule - ns-B loopback IP [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IP [ OK ] # TEST: ping out, vrf bind, unreachable route - ns-B loopback IP [ OK ] # TEST: ping out, device bind, unreachable route - ns-B loopback IP [ OK ] # TEST: ping in, unreachable route - ns-A loopback IP [ OK ] # # ########################################################################### # IPv4/TCP # ########################################################################### # # # ################################################################# # No VRF # [ 253.223404] eth1: renamed from tmp # # ################################################################# # tcp_l3mdev_accept disabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=0 # # TEST: Global server - ns-A IP [ OK ] # TEST: Global server - ns-A loopback IP [ OK ] # TEST: Device server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: No server - ns-A loopback IP [ OK ] # TEST: Client - ns-B IP [ OK ] # TEST: Client, device bind - ns-B IP [ OK ] # TEST: No server, unbound client - ns-B IP [ OK ] # TEST: No server, device client - ns-B IP [ OK ] # TEST: Client - ns-B loopback IP [ OK ] # TEST: Client, device bind - ns-B loopback IP [ OK ] # TEST: No server, unbound client - ns-B loopback IP [ OK ] # TEST: No server, device client - ns-B loopback IP [ OK ] # TEST: Global server, local connection - ns-A IP [ OK ] # TEST: Global server, local connection - ns-A loopback IP [ OK ] # TEST: Global server, local connection - loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IP [ OK ] # TEST: Device server, unbound client, local connection - ns-A loopback IP [ OK ] # TEST: Device server, unbound client, local connection - loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IP [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device client, local connection - loopback [ OK ] # TEST: Device server, device client, local connection - ns-A IP [ OK ] # TEST: No server, device client, local conn - ns-A IP [ OK ] # TEST: MD5: Single address config [ OK ] [ 332.446650] TCP: Unexpected MD5 Hash found for 172.16.1.2.46202->172.16.1.1.12345 [S] [ 333.503270] TCP: Unexpected MD5 Hash found for 172.16.1.2.46202->172.16.1.1.12345 [S] [ 334.527276] TCP: Unexpected MD5 Hash found for 172.16.1.2.46202->172.16.1.1.12345 [S] [ 335.551254] TCP: Unexpected MD5 Hash found for 172.16.1.2.46202->172.16.1.1.12345 [S] # TEST: MD5: Server no config, client uses password [ OK ] [ 340.528388] TCP: MD5 Hash failed for 172.16.1.2.40990->172.16.1.1.12345 [S] L3 index 0 [ 341.567259] TCP: MD5 Hash failed for 172.16.1.2.40990->172.16.1.1.12345 [S] L3 index 0 [ 342.591267] TCP: MD5 Hash failed for 172.16.1.2.40990->172.16.1.1.12345 [S] L3 index 0 [ 343.615244] TCP: MD5 Hash failed for 172.16.1.2.40990->172.16.1.1.12345 [S] L3 index 0 # TEST: MD5: Client uses wrong password [ OK ] [ 348.602841] TCP: Unexpected MD5 Hash found for 172.16.1.2.41644->172.16.1.1.12345 [S] [ 349.631238] TCP: Unexpected MD5 Hash found for 172.16.1.2.41644->172.16.1.1.12345 [S] [ 350.655248] TCP: Unexpected MD5 Hash found for 172.16.1.2.41644->172.16.1.1.12345 [S] [ 351.679246] TCP: Unexpected MD5 Hash found for 172.16.1.2.41644->172.16.1.1.12345 [S] # TEST: MD5: Client address does not match address configured with password [ OK ] # TEST: MD5: Prefix config [ OK ] [ 359.756113] TCP: MD5 Hash failed for 172.16.1.2.45146->172.16.1.1.12345 [S] L3 index 0 [ 360.767264] TCP: MD5 Hash failed for 172.16.1.2.45146->172.16.1.1.12345 [S] L3 index 0 [ 361.791239] TCP: MD5 Hash failed for 172.16.1.2.45146->172.16.1.1.12345 [S] L3 index 0 [ 362.815240] TCP: MD5 Hash failed for 172.16.1.2.45146->172.16.1.1.12345 [S] L3 index 0 # TEST: MD5: Prefix config, client uses wrong password [ OK ] [ 367.839741] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 368.895296] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 369.919280] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 370.943257] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] # TEST: MD5: Prefix config, client address not in configured prefix [ OK ] # TEST: SO_DONTROUTE client, syncookies=0 - ns-B IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=0 - ns-B IP [ OK ] # TEST: SO_DONTROUTE client, syncookies=0 - ns-B loopback IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=0 - ns-B loopback IP [ OK ] # TEST: SO_DONTROUTE client, syncookies=2 - ns-B IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=2 - ns-B IP [ OK ] # TEST: SO_DONTROUTE client, syncookies=2 - ns-B loopback IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=2 - ns-B loopback IP [ OK ] # # ################################################################# # tcp_l3mdev_accept enabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=1 # # TEST: Global server - ns-A IP [ OK ] # TEST: Global server - ns-A loopback IP [ OK ] # TEST: Device server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: No server - ns-A loopback IP [ OK ] # TEST: Client - ns-B IP [ OK ] # TEST: Client, device bind - ns-B IP [ OK ] # TEST: No server, unbound client - ns-B IP [ OK ] # TEST: No server, device client - ns-B IP [ OK ] # TEST: Client - ns-B loopback IP [ OK ] # TEST: Client, device bind - ns-B loopback IP [ OK ] # TEST: No server, unbound client - ns-B loopback IP [ OK ] # TEST: No server, device client - ns-B loopback IP [ OK ] # TEST: Global server, local connection - ns-A IP [ OK ] # TEST: Global server, local connection - ns-A loopback IP [ OK ] # TEST: Global server, local connection - loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IP [ OK ] # TEST: Device server, unbound client, local connection - ns-A loopback IP [ OK ] # TEST: Device server, unbound client, local connection - loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IP [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device client, local connection - loopback [ OK ] # TEST: Device server, device client, local connection - ns-A IP [ OK ] # TEST: No server, device client, local conn - ns-A IP [ OK ] # TEST: MD5: Single address config [ OK ] [ 478.834771] TCP: Unexpected MD5 Hash found for 172.16.1.2.34776->172.16.1.1.12345 [S] [ 479.871333] TCP: Unexpected MD5 Hash found for 172.16.1.2.34776->172.16.1.1.12345 [S] [ 480.895305] TCP: Unexpected MD5 Hash found for 172.16.1.2.34776->172.16.1.1.12345 [S] [ 481.919279] TCP: Unexpected MD5 Hash found for 172.16.1.2.34776->172.16.1.1.12345 [S] # TEST: MD5: Server no config, client uses password [ OK ] [ 486.925348] TCP: MD5 Hash failed for 172.16.1.2.34412->172.16.1.1.12345 [S] L3 index 0 [ 487.935273] TCP: MD5 Hash failed for 172.16.1.2.34412->172.16.1.1.12345 [S] L3 index 0 [ 488.959275] TCP: MD5 Hash failed for 172.16.1.2.34412->172.16.1.1.12345 [S] L3 index 0 [ 489.983282] TCP: MD5 Hash failed for 172.16.1.2.34412->172.16.1.1.12345 [S] L3 index 0 # TEST: MD5: Client uses wrong password [ OK ] [ 495.006010] TCP: Unexpected MD5 Hash found for 172.16.1.2.60210->172.16.1.1.12345 [S] [ 496.063269] TCP: Unexpected MD5 Hash found for 172.16.1.2.60210->172.16.1.1.12345 [S] [ 497.087248] TCP: Unexpected MD5 Hash found for 172.16.1.2.60210->172.16.1.1.12345 [S] [ 498.111272] TCP: Unexpected MD5 Hash found for 172.16.1.2.60210->172.16.1.1.12345 [S] # TEST: MD5: Client address does not match address configured with password [ OK ] # TEST: MD5: Prefix config [ OK ] [ 506.171060] TCP: MD5 Hash failed for 172.16.1.2.51390->172.16.1.1.12345 [S] L3 index 0 [ 507.199244] TCP: MD5 Hash failed for 172.16.1.2.51390->172.16.1.1.12345 [S] L3 index 0 [ 508.223252] TCP: MD5 Hash failed for 172.16.1.2.51390->172.16.1.1.12345 [S] L3 index 0 [ 509.247245] TCP: MD5 Hash failed for 172.16.1.2.51390->172.16.1.1.12345 [S] L3 index 0 # TEST: MD5: Prefix config, client uses wrong password [ OK ] [ 514.255257] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 515.263253] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 516.287242] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 517.311248] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] # TEST: MD5: Prefix config, client address not in configured prefix [ OK ] # TEST: SO_DONTROUTE client, syncookies=0 - ns-B IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=0 - ns-B IP [ OK ] # TEST: SO_DONTROUTE client, syncookies=0 - ns-B loopback IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=0 - ns-B loopback IP [ OK ] # TEST: SO_DONTROUTE client, syncookies=2 - ns-B IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=2 - ns-B IP [ OK ] # TEST: SO_DONTROUTE client, syncookies=2 - ns-B loopback IP [ OK ] # TEST: SO_DONTROUTE server, syncookies=2 - ns-B loopback IP [ OK ] # # ################################################################# # With VRF # [ 549.008410] eth1: renamed from tmp # # ################################################################# # Global server disabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=0 # # TEST: Global server - ns-A IP [ OK ] # TEST: VRF server - ns-A IP [ OK ] # TEST: Device server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: Global server - VRF IP [ OK ] # TEST: VRF server - VRF IP [ OK ] # TEST: Device server - VRF IP [ OK ] # TEST: No server - VRF IP [ OK ] # TEST: Global server, local connection - ns-A IP [ OK ] [ 576.457443] eth2: renamed from tmp # TEST: MD5: VRF: Single address config [ OK ] [ 581.675195] TCP: Unexpected MD5 Hash found for 172.16.1.2.57296->172.16.1.1.12345 [S] [ 582.719280] TCP: Unexpected MD5 Hash found for 172.16.1.2.57296->172.16.1.1.12345 [S] [ 583.743324] TCP: Unexpected MD5 Hash found for 172.16.1.2.57296->172.16.1.1.12345 [S] [ 584.767278] TCP: Unexpected MD5 Hash found for 172.16.1.2.57296->172.16.1.1.12345 [S] # TEST: MD5: VRF: Server no config, client uses password [ OK ] [ 589.762098] TCP: MD5 Hash failed for 172.16.1.2.59910->172.16.1.1.12345 [S] L3 index 9 [ 590.783312] TCP: MD5 Hash failed for 172.16.1.2.59910->172.16.1.1.12345 [S] L3 index 9 [ 591.807286] TCP: MD5 Hash failed for 172.16.1.2.59910->172.16.1.1.12345 [S] L3 index 9 [ 592.831284] TCP: MD5 Hash failed for 172.16.1.2.59910->172.16.1.1.12345 [S] L3 index 9 # TEST: MD5: VRF: Client uses wrong password [ OK ] [ 597.850688] TCP: Unexpected MD5 Hash found for 172.16.1.2.43034->172.16.1.1.12345 [S] [ 598.911306] TCP: Unexpected MD5 Hash found for 172.16.1.2.43034->172.16.1.1.12345 [S] [ 599.935314] TCP: Unexpected MD5 Hash found for 172.16.1.2.43034->172.16.1.1.12345 [S] [ 600.959307] TCP: Unexpected MD5 Hash found for 172.16.1.2.43034->172.16.1.1.12345 [S] # TEST: MD5: VRF: Client address does not match address configured with password [ OK ] # TEST: MD5: VRF: Prefix config [ OK ] [ 609.026848] TCP: MD5 Hash failed for 172.16.1.2.53710->172.16.1.1.12345 [S] L3 index 9 [ 610.047291] TCP: MD5 Hash failed for 172.16.1.2.53710->172.16.1.1.12345 [S] L3 index 9 [ 611.071264] TCP: MD5 Hash failed for 172.16.1.2.53710->172.16.1.1.12345 [S] L3 index 9 [ 612.095297] TCP: MD5 Hash failed for 172.16.1.2.53710->172.16.1.1.12345 [S] L3 index 9 # TEST: MD5: VRF: Prefix config, client uses wrong password [ OK ] [ 617.116438] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 618.175320] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 619.199283] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] [ 620.223291] TCP: Unexpected MD5 Hash found for 172.16.2.2.12345->172.16.1.1.12345 [S] # TEST: MD5: VRF: Prefix config, client address not in configured prefix [ OK ] # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in VRF [ OK ] # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in default VRF [ OK ] [ 631.369750] TCP: MD5 Hash failed for 172.16.1.2.36606->172.16.1.1.12345 [S] L3 index 0 [ 632.383264] TCP: MD5 Hash failed for 172.16.1.2.36606->172.16.1.1.12345 [S] L3 index 0 [ 633.407292] TCP: MD5 Hash failed for 172.16.1.2.36606->172.16.1.1.12345 [S] L3 index 0 [ 634.431283] TCP: MD5 Hash failed for 172.16.1.2.36606->172.16.1.1.12345 [S] L3 index 0 # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in default VRF with VRF pw [ OK ] [ 639.460385] TCP: MD5 Hash failed for 172.16.1.2.40038->172.16.1.1.12345 [S] L3 index 9 [ 640.511289] TCP: MD5 Hash failed for 172.16.1.2.40038->172.16.1.1.12345 [S] L3 index 9 [ 641.535321] TCP: MD5 Hash failed for 172.16.1.2.40038->172.16.1.1.12345 [S] L3 index 9 [ 642.559277] TCP: MD5 Hash failed for 172.16.1.2.40038->172.16.1.1.12345 [S] L3 index 9 # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in VRF with default VRF pw [ OK ] # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in VRF [ OK ] # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in default VRF [ OK ] [ 653.700598] TCP: MD5 Hash failed for 172.16.1.2.33234->172.16.1.1.12345 [S] L3 index 0 [ 654.719254] TCP: MD5 Hash failed for 172.16.1.2.33234->172.16.1.1.12345 [S] L3 index 0 [ 655.743277] TCP: MD5 Hash failed for 172.16.1.2.33234->172.16.1.1.12345 [S] L3 index 0 [ 656.767257] TCP: MD5 Hash failed for 172.16.1.2.33234->172.16.1.1.12345 [S] L3 index 0 # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in default VRF with VRF pw [ OK ] [ 661.785106] TCP: MD5 Hash failed for 172.16.1.2.33240->172.16.1.1.12345 [S] L3 index 9 [ 662.847334] TCP: MD5 Hash failed for 172.16.1.2.33240->172.16.1.1.12345 [S] L3 index 9 [ 663.871344] TCP: MD5 Hash failed for 172.16.1.2.33240->172.16.1.1.12345 [S] L3 index 9 [ 664.895327] TCP: MD5 Hash failed for 172.16.1.2.33240->172.16.1.1.12345 [S] L3 index 9 # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in VRF with default VRF pw [ OK ] # TEST: MD5: VRF: Device must be a VRF - single address [ OK ] # TEST: MD5: VRF: Device must be a VRF - prefix [ OK ] # TEST: MD5: VRF: VRF-bound server, unbound key accepts connection [ OK ] # TEST: MD5: VRF: VRF-bound server, bound key accepts connection [ OK ] # SYSCTL: net.ipv4.tcp_l3mdev_accept=1 # [ 680.224182] TCP: Unexpected MD5 Hash found for 172.16.1.2.57248->172.16.1.1.12345 [S] [ 681.279255] TCP: Unexpected MD5 Hash found for 172.16.1.2.57248->172.16.1.1.12345 [S] [ 682.303283] TCP: Unexpected MD5 Hash found for 172.16.1.2.57248->172.16.1.1.12345 [S] [ 683.327254] TCP: Unexpected MD5 Hash found for 172.16.1.2.57248->172.16.1.1.12345 [S] # TEST: MD5: VRF: Global server, Key bound to ifindex=0 rejects VRF connection [ OK ] # TEST: MD5: VRF: Global server, key bound to ifindex=0 accepts non-VRF connection [ OK ] # TEST: MD5: VRF: Global server, key not bound to ifindex accepts VRF connection [ OK ] # TEST: MD5: VRF: Global server, key not bound to ifindex accepts non-VRF connection [ OK ] # SYSCTL: net.ipv4.tcp_l3mdev_accept=0 # # # ################################################################# # VRF Global server enabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=1 # # TEST: Global server - ns-A IP [ OK ] # TEST: VRF server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: Global server - VRF IP [ OK ] # TEST: VRF server - VRF IP [ OK ] # TEST: No server - VRF IP [ OK ] # TEST: Device server - ns-A IP [ OK ] # TEST: Global server, local connection - ns-A IP [ OK ] # TEST: Global server, local connection - VRF IP [ OK ] # TEST: Client, VRF bind - ns-B IP [ OK ] # TEST: Client, device bind - ns-B IP [ OK ] # TEST: No server, VRF client - ns-B IP [ OK ] # TEST: No server, device client - ns-B IP [ OK ] # TEST: Client, VRF bind - ns-B loopback IP [ OK ] # TEST: Client, device bind - ns-B loopback IP [ OK ] # TEST: No server, VRF client - ns-B loopback IP [ OK ] # TEST: No server, device client - ns-B loopback IP [ OK ] # TEST: VRF server, VRF client, local connection - ns-A IP [ OK ] # TEST: VRF server, VRF client, local connection - VRF IP [ OK ] # TEST: VRF server, VRF client, local connection - loopback [ OK ] # TEST: VRF server, device client, local connection - ns-A IP [ OK ] # TEST: VRF server, unbound client, local connection - ns-A IP [ OK ] # TEST: Device server, VRF client, local connection - ns-A IP [ OK ] # TEST: Device server, device client, local connection - ns-A IP [ OK ] # # ########################################################################### # IPv4/UDP # ########################################################################### # # # ################################################################# # No VRF # [ 765.492403] eth1: renamed from tmp # # ################################################################# # udp_l3mdev_accept disabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=0 # # TEST: Global server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: Global server - ns-A loopback IP [ OK ] # TEST: No server - ns-A loopback IP [ OK ] # TEST: Device server - ns-A IP [ OK ] # TEST: Client - ns-B IP [ OK ] # TEST: Client, device bind - ns-B IP [ OK ] # TEST: Client, device send via cmsg - ns-B IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF - ns-B IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF, with connect() - ns-B IP [ OK ] # TEST: No server, unbound client - ns-B IP [ OK ] # TEST: No server, device client - ns-B IP [ OK ] # TEST: Client - ns-B loopback IP [ OK ] # TEST: Client, device bind - ns-B loopback IP [ OK ] # TEST: Client, device send via cmsg - ns-B loopback IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF - ns-B loopback IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF, with connect() - ns-B loopback IP [ OK ] # TEST: No server, unbound client - ns-B loopback IP [ OK ] # TEST: No server, device client - ns-B loopback IP [ OK ] # TEST: Global server, local connection - ns-A IP [ OK ] # TEST: Global server, local connection - ns-A loopback IP [ OK ] # TEST: Global server, local connection - loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IP [ OK ] # TEST: Device server, unbound client, local connection - ns-A loopback IP [ OK ] # TEST: Device server, unbound client, local connection - loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IP [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - ns-A IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - ns-A IP [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - ns-A loopback IP [ OK ] # TEST: Global server, device client, local connection - loopback [ OK ] # TEST: Global server, device send via cmsg, local connection - loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - loopback [ OK ] # TEST: Device server, device client, local conn - ns-A IP [ OK ] # TEST: No server, device client, local conn - ns-A IP [ OK ] # TEST: SO_DONTROUTE client - ns-B IP [ OK ] # TEST: SO_DONTROUTE client - ns-B loopback IP [ OK ] # # ################################################################# # udp_l3mdev_accept enabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=1 # # TEST: Global server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: Global server - ns-A loopback IP [ OK ] # TEST: No server - ns-A loopback IP [ OK ] # TEST: Device server - ns-A IP [ OK ] # TEST: Client - ns-B IP [ OK ] # TEST: Client, device bind - ns-B IP [ OK ] # TEST: Client, device send via cmsg - ns-B IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF - ns-B IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF, with connect() - ns-B IP [ OK ] # TEST: No server, unbound client - ns-B IP [ OK ] # TEST: No server, device client - ns-B IP [ OK ] # TEST: Client - ns-B loopback IP [ OK ] # TEST: Client, device bind - ns-B loopback IP [ OK ] # TEST: Client, device send via cmsg - ns-B loopback IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF - ns-B loopback IP [ OK ] # TEST: Client, device bind via IP_UNICAST_IF, with connect() - ns-B loopback IP [ OK ] # TEST: No server, unbound client - ns-B loopback IP [ OK ] # TEST: No server, device client - ns-B loopback IP [ OK ] # TEST: Global server, local connection - ns-A IP [ OK ] # TEST: Global server, local connection - ns-A loopback IP [ OK ] # TEST: Global server, local connection - loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IP [ OK ] # TEST: Device server, unbound client, local connection - ns-A loopback IP [ OK ] # TEST: Device server, unbound client, local connection - loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IP [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - ns-A IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - ns-A IP [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - ns-A loopback IP [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - ns-A loopback IP [ OK ] # TEST: Global server, device client, local connection - loopback [ OK ] # TEST: Global server, device send via cmsg, local connection - loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - loopback [ OK ] # TEST: Device server, device client, local conn - ns-A IP [ OK ] # TEST: No server, device client, local conn - ns-A IP [ OK ] # TEST: SO_DONTROUTE client - ns-B IP [ OK ] # TEST: SO_DONTROUTE client - ns-B loopback IP [ OK ] # # ################################################################# # With VRF # [ 1069.849411] eth1: renamed from tmp # # ################################################################# # Global server disabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=0 # # TEST: Global server - ns-A IP [ OK ] # TEST: VRF server - ns-A IP [ OK ] # TEST: Enslaved device server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: Global server, VRF client, local connection - ns-A IP [ OK ] # TEST: Global server - VRF IP [ OK ] # TEST: VRF server - VRF IP [ OK ] # TEST: Enslaved device server - VRF IP [ OK ] # TEST: No server - VRF IP [ OK ] # TEST: Global server, VRF client, local connection - VRF IP [ OK ] # TEST: VRF server, VRF client, local conn - ns-A IP [ OK ] # TEST: VRF server, enslaved device client, local connection - ns-A IP [ OK ] # TEST: Enslaved device server, VRF client, local conn - ns-A IP [ OK ] # TEST: Enslaved device server, device client, local conn - ns-A IP [ OK ] # # ################################################################# # Global server enabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=1 # # TEST: Global server - ns-A IP [ OK ] # TEST: VRF server - ns-A IP [ OK ] # TEST: Enslaved device server - ns-A IP [ OK ] # TEST: No server - ns-A IP [ OK ] # TEST: Global server - VRF IP [ OK ] # TEST: VRF server - VRF IP [ OK ] # TEST: Enslaved device server - VRF IP [ OK ] # TEST: No server - VRF IP [ OK ] # TEST: VRF client [ OK ] # TEST: Enslaved device client [ OK ] # TEST: No server, VRF client [ OK ] # TEST: No server, enslaved device client [ OK ] # TEST: Global server, VRF client, local conn - ns-A IP [ OK ] # TEST: VRF server, VRF client, local conn - ns-A IP [ OK ] # TEST: VRF server, device client, local conn - ns-A IP [ OK ] # TEST: Enslaved device server, VRF client, local conn - ns-A IP [ OK ] # TEST: Enslaved device server, device client, local conn - ns-A IP [ OK ] # TEST: Global server, VRF client, local conn - VRF IP [ OK ] # TEST: Global server, VRF client, local conn - loopback [ OK ] # TEST: VRF server, VRF client, local conn - VRF IP [ OK ] # TEST: VRF server, VRF client, local conn - loopback [ OK ] # TEST: No server, VRF client, local conn - ns-A IP [ OK ] # TEST: No server, VRF client, local conn - VRF IP [ OK ] # TEST: No server, VRF client, local conn - loopback [ OK ] # # ########################################################################### # IPv4 address binds # ########################################################################### # # # ################################################################# # No VRF # [ 1181.062328] eth1: renamed from tmp # TEST: Raw socket bind to local address - ns-A IP [ OK ] # TEST: Raw socket bind to local address after device bind - ns-A IP [ OK ] # TEST: Raw socket bind to local address - ns-A loopback IP [ OK ] # TEST: Raw socket bind to local address after device bind - ns-A loopback IP [ OK ] # TEST: Raw socket bind to nonlocal address - nonlocal IP [ OK ] # TEST: TCP socket bind to nonlocal address - nonlocal IP [ OK ] # TEST: ICMP socket bind to nonlocal address - nonlocal IP [ OK ] # TEST: ICMP socket bind to broadcast address - broadcast [ OK ] # TEST: ICMP socket bind to multicast address - multicast [ OK ] # TEST: TCP socket bind to local address - ns-A IP [ OK ] # TEST: TCP socket bind to local address after device bind - ns-A IP [ OK ] # # ################################################################# # With VRF # [ 1206.961355] eth1: renamed from tmp # TEST: Raw socket bind to local address - ns-A IP [ OK ] # TEST: Raw socket bind to local address after device bind - ns-A IP [ OK ] # TEST: Raw socket bind to local address after VRF bind - ns-A IP [ OK ] # TEST: Raw socket bind to local address - VRF IP [ OK ] # TEST: Raw socket bind to local address after device bind - VRF IP [ OK ] # TEST: Raw socket bind to local address after VRF bind - VRF IP [ OK ] # TEST: Raw socket bind to out of scope address after VRF bind - ns-A loopback IP [ OK ] # TEST: Raw socket bind to nonlocal address after VRF bind - nonlocal IP [ OK ] # TEST: TCP socket bind to nonlocal address after VRF bind - nonlocal IP [ OK ] # TEST: ICMP socket bind to nonlocal address after VRF bind - nonlocal IP [ OK ] # TEST: ICMP socket bind to broadcast address after VRF bind - broadcast [ OK ] # TEST: ICMP socket bind to multicast address after VRF bind - multicast [ OK ] # TEST: TCP socket bind to local address - ns-A IP [ OK ] # TEST: TCP socket bind to local address after device bind - ns-A IP [ OK ] # TEST: TCP socket bind to local address - VRF IP [ OK ] # TEST: TCP socket bind to local address after device bind - VRF IP [ OK ] # TEST: TCP socket bind to invalid local address for VRF - ns-A loopback IP [ OK ] # TEST: TCP socket bind to invalid local address for device bind - ns-A loopback IP [ OK ] # # ########################################################################### # Run time tests - ipv4 # ########################################################################### # [ 1247.627450] eth1: renamed from tmp # TEST: Device delete with active traffic - ping in - ns-A IP [ OK ] [ 1257.000381] eth1: renamed from tmp # TEST: Device delete with active traffic - ping in - VRF IP [ OK ] [ 1266.241370] eth1: renamed from tmp # TEST: Device delete with active traffic - ping out - ns-B IP [ OK ] [ 1275.559331] eth1: renamed from tmp # TEST: TCP active socket, global server - ns-A IP [ OK ] [ 1285.813379] eth1: renamed from tmp # TEST: TCP active socket, global server - VRF IP [ OK ] [ 1296.094335] eth1: renamed from tmp # TEST: TCP active socket, VRF server - ns-A IP [ OK ] [ 1306.319390] eth1: renamed from tmp # TEST: TCP active socket, VRF server - VRF IP [ OK ] [ 1316.667377] eth1: renamed from tmp # TEST: TCP active socket, enslaved device server - ns-A IP [ OK ] [ 1326.993386] eth1: renamed from tmp # TEST: TCP active socket, VRF client - ns-A IP [ OK ] [ 1337.308363] eth1: renamed from tmp # TEST: TCP active socket, enslaved device client - ns-A IP [ OK ] [ 1347.668424] eth1: renamed from tmp # TEST: TCP active socket, global server, VRF client, local - ns-A IP [ OK ] [ 1357.938434] eth1: renamed from tmp # TEST: TCP active socket, global server, VRF client, local - VRF IP [ OK ] [ 1368.240428] eth1: renamed from tmp # TEST: TCP active socket, VRF server and client, local - ns-A IP [ OK ] [ 1378.466347] eth1: renamed from tmp # TEST: TCP active socket, VRF server and client, local - VRF IP [ OK ] [ 1388.775353] eth1: renamed from tmp # TEST: TCP active socket, global server, enslaved device client, local - ns-A IP [ OK ] [ 1399.032431] eth1: renamed from tmp # TEST: TCP active socket, VRF server, enslaved device client, local - ns-A IP [ OK ] [ 1409.284429] eth1: renamed from tmp # TEST: TCP active socket, enslaved device server and client, local - ns-A IP [ OK ] [ 1419.758403] eth1: renamed from tmp # TEST: TCP passive socket, global server - ns-A IP [ OK ] [ 1430.222356] eth1: renamed from tmp # TEST: TCP passive socket, global server - VRF IP [ OK ] [ 1440.659383] eth1: renamed from tmp # TEST: TCP passive socket, VRF server - ns-A IP [ OK ] [ 1450.939348] eth1: renamed from tmp # TEST: TCP passive socket, VRF server - VRF IP [ OK ] [ 1461.279396] eth1: renamed from tmp # TEST: TCP passive socket, enslaved device server - ns-A IP [ OK ] [ 1471.525366] eth1: renamed from tmp # TEST: TCP passive socket, VRF client - ns-A IP [ OK ] [ 1481.751361] eth1: renamed from tmp # TEST: TCP passive socket, enslaved device client - ns-A IP [ OK ] [ 1491.962410] eth1: renamed from tmp # TEST: TCP passive socket, global server, VRF client, local - ns-A IP [ OK ] [ 1502.181364] eth1: renamed from tmp # TEST: TCP passive socket, global server, VRF client, local - VRF IP [ OK ] [ 1512.501349] eth1: renamed from tmp # TEST: TCP passive socket, VRF server and client, local - ns-A IP [ OK ] [ 1522.754317] eth1: renamed from tmp # TEST: TCP passive socket, VRF server and client, local - VRF IP [ OK ] [ 1532.975458] eth1: renamed from tmp # TEST: TCP passive socket, global server, enslaved device client, local - ns-A IP [ OK ] [ 1543.266324] eth1: renamed from tmp # TEST: TCP passive socket, VRF server, enslaved device client, local - ns-A IP [ OK ] [ 1553.574431] eth1: renamed from tmp # TEST: TCP passive socket, enslaved device server and client, local - ns-A IP [ OK ] # # ########################################################################### # IPv4 Netfilter # ########################################################################### # # # ################################################################# # TCP reset # [ 1563.823419] eth1: renamed from tmp # TEST: Global server, reject with TCP-reset on Rx - ns-A IP [ OK ] # TEST: Global server, reject with TCP-reset on Rx - VRF IP [ OK ] # # ################################################################# # ICMP unreachable # # TEST: Global TCP server, Rx reject icmp-port-unreach - ns-A IP [ OK ] # TEST: Global TCP server, Rx reject icmp-port-unreach - VRF IP [ OK ] # TEST: Global UDP server, Rx reject icmp-port-unreach - ns-A IP [ OK ] # TEST: Global UDP server, Rx reject icmp-port-unreach - VRF IP [ OK ] # # ########################################################################### # IPv6 ping # ########################################################################### # # # ################################################################# # No VRF # [ 1588.630370] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=0 # # TEST: ping out - ns-B IPv6 [ OK ] # TEST: ping out - ns-B loopback IPv6 [ OK ] # TEST: ping out - ns-B IPv6 LLA [ OK ] # TEST: ping out - multicast IP [ OK ] # TEST: ping out, device bind - ns-B IPv6 [ OK ] # TEST: ping out, loopback address bind - ns-B IPv6 [ OK ] # TEST: ping out, device bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, loopback address bind - ns-B loopback IPv6 [ OK ] # TEST: ping in - ns-A IPv6 [ OK ] # TEST: ping in - ns-A loopback IPv6 [ OK ] # TEST: ping in - ns-A IPv6 LLA [ OK ] # TEST: ping in - multicast IP [ OK ] # TEST: ping local, no bind - ns-A IPv6 [ OK ] # TEST: ping local, no bind - ns-A loopback IPv6 [ OK ] # TEST: ping local, no bind - IPv6 loopback [ OK ] # TEST: ping local, no bind - ns-A IPv6 LLA [ OK ] # TEST: ping local, no bind - multicast IP [ OK ] # TEST: ping local, device bind - ns-A IPv6 [ OK ] # TEST: ping local, device bind - ns-A IPv6 LLA [ OK ] # TEST: ping local, device bind - multicast IP [ OK ] # TEST: ping local, device bind - ns-A loopback IPv6 [ OK ] # TEST: ping local, device bind - IPv6 loopback [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IPv6 [ OK ] # TEST: ping out, blocked by route - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, blocked by route - ns-B loopback IPv6 [ OK ] # TEST: ping in, blocked by route - ns-A loopback IPv6 [ OK ] # TEST: ping out, unreachable route - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, unreachable route - ns-B loopback IPv6 [ OK ] [ 1655.021414] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=0 # # TEST: ping out - ns-B IPv6 [ OK ] # TEST: ping out - ns-B loopback IPv6 [ OK ] # TEST: ping out - ns-B IPv6 LLA [ OK ] # TEST: ping out - multicast IP [ OK ] # TEST: ping out, device bind - ns-B IPv6 [ OK ] # TEST: ping out, loopback address bind - ns-B IPv6 [ OK ] # TEST: ping out, device bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, loopback address bind - ns-B loopback IPv6 [ OK ] # TEST: ping in - ns-A IPv6 [ OK ] # TEST: ping in - ns-A loopback IPv6 [ OK ] # TEST: ping in - ns-A IPv6 LLA [ OK ] # TEST: ping in - multicast IP [ OK ] # TEST: ping local, no bind - ns-A IPv6 [ OK ] # TEST: ping local, no bind - ns-A loopback IPv6 [ OK ] # TEST: ping local, no bind - IPv6 loopback [ OK ] # TEST: ping local, no bind - ns-A IPv6 LLA [ OK ] # TEST: ping local, no bind - multicast IP [ OK ] # TEST: ping local, device bind - ns-A IPv6 [ OK ] # TEST: ping local, device bind - ns-A IPv6 LLA [ OK ] # TEST: ping local, device bind - multicast IP [ OK ] # TEST: ping local, device bind - ns-A loopback IPv6 [ OK ] # TEST: ping local, device bind - IPv6 loopback [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IPv6 [ OK ] # TEST: ping out, blocked by route - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, blocked by route - ns-B loopback IPv6 [ OK ] # TEST: ping in, blocked by route - ns-A loopback IPv6 [ OK ] # TEST: ping out, unreachable route - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, unreachable route - ns-B loopback IPv6 [ OK ] # # ################################################################# # With VRF # [ 1721.352323] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=1 # # TEST: ping out, VRF bind - ns-B IPv6 [ OK ] # TEST: ping out, VRF bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, VRF bind - ns-B IPv6 LLA [ OK ] # TEST: ping out, VRF bind - multicast IP [ OK ] # TEST: ping out, device bind - ns-B IPv6 [ OK ] # TEST: ping out, device bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind - ns-B IPv6 LLA [ OK ] # TEST: ping out, device bind - multicast IP [ OK ] # TEST: ping out, vrf device+address bind - ns-B IPv6 [ OK ] # TEST: ping out, vrf device+address bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, vrf device+address bind - ns-B IPv6 LLA [ OK ] # TEST: ping in - ns-A IPv6 [ OK ] # TEST: ping in - VRF IPv6 [ OK ] # TEST: ping in - ns-A IPv6 LLA [ OK ] # TEST: ping in - multicast IP [ OK ] # TEST: ping in - ns-A loopback IPv6 [ OK ] # TEST: ping local, VRF bind - ns-A IPv6 [ OK ] # TEST: ping local, VRF bind - VRF IPv6 [ OK ] # TEST: ping local, VRF bind - IPv6 loopback [ OK ] # TEST: ping local, device bind - ns-A IPv6 [ OK ] # TEST: ping local, device bind - ns-A IPv6 LLA [ OK ] # TEST: ping local, device bind - multicast IP [ OK ] # TEST: ping in, LLA to GUA - ns-A IPv6 [ OK ] # TEST: ping in, LLA to GUA - VRF IPv6 [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IPv6 [ OK ] # TEST: ping out, unreachable route - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, unreachable route - ns-B loopback IPv6 [ OK ] # TEST: ping in, unreachable route - ns-A loopback IPv6 [ OK ] [ 1789.757331] eth1: renamed from tmp # SYSCTL: net.ipv4.raw_l3mdev_accept=1 # # TEST: ping out, VRF bind - ns-B IPv6 [ OK ] # TEST: ping out, VRF bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, VRF bind - ns-B IPv6 LLA [ OK ] # TEST: ping out, VRF bind - multicast IP [ OK ] # TEST: ping out, device bind - ns-B IPv6 [ OK ] # TEST: ping out, device bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind - ns-B IPv6 LLA [ OK ] # TEST: ping out, device bind - multicast IP [ OK ] # TEST: ping out, vrf device+address bind - ns-B IPv6 [ OK ] # TEST: ping out, vrf device+address bind - ns-B loopback IPv6 [ OK ] # TEST: ping out, vrf device+address bind - ns-B IPv6 LLA [ OK ] # TEST: ping in - ns-A IPv6 [ OK ] # TEST: ping in - VRF IPv6 [ OK ] # TEST: ping in - ns-A IPv6 LLA [ OK ] # TEST: ping in - multicast IP [ OK ] # TEST: ping in - ns-A loopback IPv6 [ OK ] # TEST: ping local, VRF bind - ns-A IPv6 [ OK ] # TEST: ping local, VRF bind - VRF IPv6 [ OK ] # TEST: ping local, VRF bind - IPv6 loopback [ OK ] # TEST: ping local, device bind - ns-A IPv6 [ OK ] # TEST: ping local, device bind - ns-A IPv6 LLA [ OK ] # TEST: ping local, device bind - multicast IP [ OK ] # TEST: ping in, LLA to GUA - ns-A IPv6 [ OK ] # TEST: ping in, LLA to GUA - VRF IPv6 [ OK ] # TEST: ping out, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, blocked by rule - ns-B loopback IPv6 [ OK ] # TEST: ping in, blocked by rule - ns-A loopback IPv6 [ OK ] # TEST: ping out, unreachable route - ns-B loopback IPv6 [ OK ] # TEST: ping out, device bind, unreachable route - ns-B loopback IPv6 [ OK ] # TEST: ping in, unreachable route - ns-A loopback IPv6 [ OK ] # # ########################################################################### # IPv6/TCP # ########################################################################### # # # ################################################################# # No VRF # [ 1858.292339] eth1: renamed from tmp # # ################################################################# # tcp_l3mdev_accept disabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=0 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Global server - ns-A loopback IPv6 [ OK ] # TEST: Global server - ns-A IPv6 LLA [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - ns-A loopback IPv6 [ OK ] # TEST: No server - ns-A IPv6 LLA [ OK ] # TEST: Client - ns-B IPv6 [ OK ] # TEST: Client - ns-B loopback IPv6 [ OK ] # TEST: Client - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind - ns-B IPv6 [ OK ] # TEST: Client, device bind - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind - ns-B IPv6 LLA [ OK ] # TEST: No server, device client - ns-B IPv6 [ OK ] # TEST: No server, device client - ns-B loopback IPv6 [ OK ] # TEST: No server, device client - ns-B IPv6 LLA [ OK ] # TEST: Global server, local connection - ns-A IPv6 [ OK ] # TEST: Global server, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, local connection - IPv6 loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, unbound client, local connection - ns-A loopback IPv6 [ OK ] # TEST: Device server, unbound client, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client, local connection - IPv6 loopback [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 LLA [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 LLA [ OK ] # TEST: MD5: Single address config [ OK ] [ 1942.550452] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].56088->[2001:db8:1::1].12345 [S] [ 1943.551319] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].56088->[2001:db8:1::1].12345 [S] [ 1944.575251] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].56088->[2001:db8:1::1].12345 [S] [ 1945.599376] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].56088->[2001:db8:1::1].12345 [S] # TEST: MD5: Server no config, client uses password [ OK ] [ 1950.625524] TCP: MD5 Hash mismatch for [2001:db8:1::2].37340->[2001:db8:1::1].12345 [S]L3 index 0 [ 1951.679311] TCP: MD5 Hash mismatch for [2001:db8:1::2].37340->[2001:db8:1::1].12345 [S]L3 index 0 [ 1952.703259] TCP: MD5 Hash mismatch for [2001:db8:1::2].37340->[2001:db8:1::1].12345 [S]L3 index 0 [ 1953.727259] TCP: MD5 Hash mismatch for [2001:db8:1::2].37340->[2001:db8:1::1].12345 [S]L3 index 0 # TEST: MD5: Client uses wrong password [ OK ] [ 1958.699379] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].55670->[2001:db8:1::1].12345 [S] [ 1959.743331] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].55670->[2001:db8:1::1].12345 [S] [ 1960.767257] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].55670->[2001:db8:1::1].12345 [S] [ 1961.791255] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].55670->[2001:db8:1::1].12345 [S] # TEST: MD5: Client address does not match address configured with password [ OK ] # TEST: MD5: Prefix config [ OK ] [ 1969.839406] TCP: MD5 Hash mismatch for [2001:db8:1::2].59840->[2001:db8:1::1].12345 [S]L3 index 0 [ 1970.879293] TCP: MD5 Hash mismatch for [2001:db8:1::2].59840->[2001:db8:1::1].12345 [S]L3 index 0 [ 1971.903291] TCP: MD5 Hash mismatch for [2001:db8:1::2].59840->[2001:db8:1::1].12345 [S]L3 index 0 [ 1972.927352] TCP: MD5 Hash mismatch for [2001:db8:1::2].59840->[2001:db8:1::1].12345 [S]L3 index 0 # TEST: MD5: Prefix config, client uses wrong password [ OK ] [ 1977.911006] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 1978.943273] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 1979.967275] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 1980.991335] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] # TEST: MD5: Prefix config, client address not in configured prefix [ OK ] # # ################################################################# # tcp_l3mdev_accept enabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=1 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Global server - ns-A loopback IPv6 [ OK ] # TEST: Global server - ns-A IPv6 LLA [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - ns-A loopback IPv6 [ OK ] # TEST: No server - ns-A IPv6 LLA [ OK ] # TEST: Client - ns-B IPv6 [ OK ] # TEST: Client - ns-B loopback IPv6 [ OK ] # TEST: Client - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind - ns-B IPv6 [ OK ] # TEST: Client, device bind - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind - ns-B IPv6 LLA [ OK ] # TEST: No server, device client - ns-B IPv6 [ OK ] # TEST: No server, device client - ns-B loopback IPv6 [ OK ] # TEST: No server, device client - ns-B IPv6 LLA [ OK ] # TEST: Global server, local connection - ns-A IPv6 [ OK ] # TEST: Global server, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, local connection - IPv6 loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, unbound client, local connection - ns-A loopback IPv6 [ OK ] # TEST: Device server, unbound client, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client, local connection - IPv6 loopback [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 LLA [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 LLA [ OK ] # TEST: MD5: Single address config [ OK ] [ 2066.909932] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].51266->[2001:db8:1::1].12345 [S] [ 2067.967277] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].51266->[2001:db8:1::1].12345 [S] [ 2068.991258] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].51266->[2001:db8:1::1].12345 [S] [ 2070.015254] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].51266->[2001:db8:1::1].12345 [S] # TEST: MD5: Server no config, client uses password [ OK ] [ 2074.981871] TCP: MD5 Hash mismatch for [2001:db8:1::2].32806->[2001:db8:1::1].12345 [S]L3 index 0 [ 2076.031276] TCP: MD5 Hash mismatch for [2001:db8:1::2].32806->[2001:db8:1::1].12345 [S]L3 index 0 [ 2077.055283] TCP: MD5 Hash mismatch for [2001:db8:1::2].32806->[2001:db8:1::1].12345 [S]L3 index 0 [ 2078.079306] TCP: MD5 Hash mismatch for [2001:db8:1::2].32806->[2001:db8:1::1].12345 [S]L3 index 0 # TEST: MD5: Client uses wrong password [ OK ] [ 2083.055860] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].60808->[2001:db8:1::1].12345 [S] [ 2084.095290] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].60808->[2001:db8:1::1].12345 [S] [ 2085.119264] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].60808->[2001:db8:1::1].12345 [S] [ 2086.143315] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].60808->[2001:db8:1::1].12345 [S] # TEST: MD5: Client address does not match address configured with password [ OK ] # TEST: MD5: Prefix config [ OK ] [ 2094.187020] TCP: MD5 Hash mismatch for [2001:db8:1::2].43026->[2001:db8:1::1].12345 [S]L3 index 0 [ 2095.231290] TCP: MD5 Hash mismatch for [2001:db8:1::2].43026->[2001:db8:1::1].12345 [S]L3 index 0 [ 2096.255254] TCP: MD5 Hash mismatch for [2001:db8:1::2].43026->[2001:db8:1::1].12345 [S]L3 index 0 [ 2097.279277] TCP: MD5 Hash mismatch for [2001:db8:1::2].43026->[2001:db8:1::1].12345 [S]L3 index 0 # TEST: MD5: Prefix config, client uses wrong password [ OK ] [ 2102.260388] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 2103.295253] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 2104.319359] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 2105.343259] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] # TEST: MD5: Prefix config, client address not in configured prefix [ OK ] # # ################################################################# # With VRF # [ 2110.012332] eth1: renamed from tmp # # ################################################################# # Global server disabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=0 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Global server - VRF IPv6 [ OK ] # TEST: Global server - ns-A IPv6 LLA [ OK ] # TEST: VRF server - ns-A IPv6 [ OK ] # TEST: VRF server - VRF IPv6 [ OK ] # TEST: VRF server - ns-A IPv6 LLA [ OK ] # TEST: Device server - ns-A IPv6 [ OK ] # TEST: Device server - VRF IPv6 [ OK ] # TEST: Device server - ns-A IPv6 LLA [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - VRF IPv6 [ OK ] # TEST: No server - ns-A IPv6 LLA [ OK ] # TEST: Global server, local connection - ns-A IPv6 [ OK ] [ 2148.421315] eth2: renamed from tmp # TEST: MD5: VRF: Single address config [ OK ] [ 2153.594729] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].46332->[2001:db8:1::1].12345 [S] [ 2154.623337] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].46332->[2001:db8:1::1].12345 [S] [ 2155.647261] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].46332->[2001:db8:1::1].12345 [S] [ 2156.671283] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].46332->[2001:db8:1::1].12345 [S] # TEST: MD5: VRF: Server no config, client uses password [ OK ] [ 2161.671063] TCP: MD5 Hash mismatch for [2001:db8:1::2].46336->[2001:db8:1::1].12345 [S]L3 index 9 [ 2162.687321] TCP: MD5 Hash mismatch for [2001:db8:1::2].46336->[2001:db8:1::1].12345 [S]L3 index 9 [ 2163.711288] TCP: MD5 Hash mismatch for [2001:db8:1::2].46336->[2001:db8:1::1].12345 [S]L3 index 9 [ 2164.735261] TCP: MD5 Hash mismatch for [2001:db8:1::2].46336->[2001:db8:1::1].12345 [S]L3 index 9 # TEST: MD5: VRF: Client uses wrong password [ OK ] [ 2169.743181] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].34426->[2001:db8:1::1].12345 [S] [ 2170.751315] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].34426->[2001:db8:1::1].12345 [S] [ 2171.775256] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].34426->[2001:db8:1::1].12345 [S] [ 2172.799323] TCP: Unexpected MD5 Hash found for [2001:db8:1::2].34426->[2001:db8:1::1].12345 [S] # TEST: MD5: VRF: Client address does not match address configured with password [ OK ] # TEST: MD5: VRF: Prefix config [ OK ] [ 2180.889251] TCP: MD5 Hash mismatch for [2001:db8:1::2].43272->[2001:db8:1::1].12345 [S]L3 index 9 [ 2181.951386] TCP: MD5 Hash mismatch for [2001:db8:1::2].43272->[2001:db8:1::1].12345 [S]L3 index 9 [ 2182.975290] TCP: MD5 Hash mismatch for [2001:db8:1::2].43272->[2001:db8:1::1].12345 [S]L3 index 9 [ 2183.999272] TCP: MD5 Hash mismatch for [2001:db8:1::2].43272->[2001:db8:1::1].12345 [S]L3 index 9 # TEST: MD5: VRF: Prefix config, client uses wrong password [ OK ] [ 2188.959737] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 2190.015311] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 2191.039264] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] [ 2192.063297] TCP: Unexpected MD5 Hash found for [2001:db8:2::2].12345->[2001:db8:1::1].12345 [S] # TEST: MD5: VRF: Prefix config, client address not in configured prefix [ OK ] # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in VRF [ OK ] # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in default VRF [ OK ] [ 2203.166763] TCP: MD5 Hash mismatch for [2001:db8:1::2].44146->[2001:db8:1::1].12345 [S]L3 index 0 [ 2204.223292] TCP: MD5 Hash mismatch for [2001:db8:1::2].44146->[2001:db8:1::1].12345 [S]L3 index 0 [ 2205.247281] TCP: MD5 Hash mismatch for [2001:db8:1::2].44146->[2001:db8:1::1].12345 [S]L3 index 0 [ 2206.271331] TCP: MD5 Hash mismatch for [2001:db8:1::2].44146->[2001:db8:1::1].12345 [S]L3 index 0 # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in default VRF with VRF pw [ OK ] [ 2211.240439] TCP: MD5 Hash mismatch for [2001:db8:1::2].44158->[2001:db8:1::1].12345 [S]L3 index 9 [ 2212.287319] TCP: MD5 Hash mismatch for [2001:db8:1::2].44158->[2001:db8:1::1].12345 [S]L3 index 9 [ 2213.311257] TCP: MD5 Hash mismatch for [2001:db8:1::2].44158->[2001:db8:1::1].12345 [S]L3 index 9 [ 2214.335262] TCP: MD5 Hash mismatch for [2001:db8:1::2].44158->[2001:db8:1::1].12345 [S]L3 index 9 # TEST: MD5: VRF: Single address config in default VRF and VRF, conn in VRF with default VRF pw [ OK ] # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in VRF [ OK ] # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in default VRF [ OK ] [ 2225.481275] TCP: MD5 Hash mismatch for [2001:db8:1::2].45806->[2001:db8:1::1].12345 [S]L3 index 0 [ 2226.495253] TCP: MD5 Hash mismatch for [2001:db8:1::2].45806->[2001:db8:1::1].12345 [S]L3 index 0 [ 2227.519320] TCP: MD5 Hash mismatch for [2001:db8:1::2].45806->[2001:db8:1::1].12345 [S]L3 index 0 [ 2228.543285] TCP: MD5 Hash mismatch for [2001:db8:1::2].45806->[2001:db8:1::1].12345 [S]L3 index 0 # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in default VRF with VRF pw [ OK ] [ 2233.558805] TCP: MD5 Hash mismatch for [2001:db8:1::2].54600->[2001:db8:1::1].12345 [S]L3 index 9 [ 2234.623265] TCP: MD5 Hash mismatch for [2001:db8:1::2].54600->[2001:db8:1::1].12345 [S]L3 index 9 [ 2235.647314] TCP: MD5 Hash mismatch for [2001:db8:1::2].54600->[2001:db8:1::1].12345 [S]L3 index 9 [ 2236.671311] TCP: MD5 Hash mismatch for [2001:db8:1::2].54600->[2001:db8:1::1].12345 [S]L3 index 9 # TEST: MD5: VRF: Prefix config in default VRF and VRF, conn in VRF with default VRF pw [ OK ] # TEST: MD5: VRF: Device must be a VRF - single address [ OK ] # TEST: MD5: VRF: Device must be a VRF - prefix [ OK ] # # ################################################################# # VRF Global server enabled # # SYSCTL: net.ipv4.tcp_l3mdev_accept=1 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Global server - VRF IPv6 [ OK ] # TEST: VRF server - ns-A IPv6 [ OK ] # TEST: VRF server - VRF IPv6 [ OK ] # TEST: Global server - ns-A IPv6 LLA [ OK ] # TEST: VRF server - ns-A IPv6 LLA [ OK ] # TEST: Device server - ns-A IPv6 [ OK ] # TEST: Device server - ns-A IPv6 LLA [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - VRF IPv6 [ OK ] # TEST: No server - ns-A IPv6 LLA [ OK ] # TEST: Global server, local connection - ns-A IPv6 [ OK ] # TEST: Global server, local connection - VRF IPv6 [ OK ] # TEST: Client, VRF bind - ns-B IPv6 [ OK ] # TEST: Client, VRF bind - ns-B loopback IPv6 [ OK ] # TEST: Client, VRF bind - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind - ns-B IPv6 [ OK ] # TEST: Client, device bind - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind - ns-B IPv6 LLA [ OK ] # TEST: No server, VRF client - ns-B IPv6 [ OK ] # TEST: No server, VRF client - ns-B loopback IPv6 [ OK ] # TEST: No server, device client - ns-B IPv6 [ OK ] # TEST: No server, device client - ns-B loopback IPv6 [ OK ] # TEST: No server, device client - ns-B IPv6 LLA [ OK ] # TEST: VRF server, VRF client, local connection - ns-A IPv6 [ OK ] # TEST: VRF server, VRF client, local connection - VRF IPv6 [ OK ] # TEST: VRF server, VRF client, local connection - IPv6 loopback [ OK ] # TEST: VRF server, device client, local connection - ns-A IPv6 [ OK ] # TEST: VRF server, unbound client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, VRF client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, device client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, device client, local connection - ns-A IPv6 LLA [ OK ] # SYSCTL: net.ipv4.udp_early_demux=1 # # # ########################################################################### # IPv6/UDP # ########################################################################### # # # ################################################################# # No VRF # [ 2335.669352] eth1: renamed from tmp # # ################################################################# # udp_l3mdev_accept disabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=0 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Device server - ns-A IPv6 [ OK ] # TEST: Global server - ns-A IPv6 LLA [ OK ] # TEST: Device server - ns-A IPv6 LLA [ OK ] # TEST: Global server - ns-A loopback IPv6 [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - ns-A loopback IPv6 [ OK ] # TEST: No server - ns-A IPv6 LLA [ OK ] # TEST: Client - ns-B IPv6 [ OK ] # TEST: Client, device bind - ns-B IPv6 [ OK ] # TEST: Client, device send via cmsg - ns-B IPv6 [ OK ] # TEST: Client, device bind via IPV6_UNICAST_IF - ns-B IPv6 [ OK ] # TEST: No server, unbound client - ns-B IPv6 [ OK ] # TEST: No server, device client - ns-B IPv6 [ OK ] # TEST: Client - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind - ns-B loopback IPv6 [ OK ] # TEST: Client, device send via cmsg - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind via IPV6_UNICAST_IF - ns-B loopback IPv6 [ OK ] # TEST: No server, unbound client - ns-B loopback IPv6 [ OK ] # TEST: No server, device client - ns-B loopback IPv6 [ OK ] # TEST: Client - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind - ns-B IPv6 LLA [ OK ] # TEST: Client, device send via cmsg - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind via IPV6_UNICAST_IF - ns-B IPv6 LLA [ OK ] # TEST: No server, unbound client - ns-B IPv6 LLA [ OK ] # TEST: No server, device client - ns-B IPv6 LLA [ OK ] # TEST: Global server, local connection - ns-A IPv6 [ OK ] # TEST: Global server, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, local connection - IPv6 loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, local connection - ns-A loopback IPv6 [ OK ] # TEST: Device server, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device client via IPV6_UNICAST_IF, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client, local connection - IPv6 loopback [ OK ] # TEST: Global server, device send via cmsg, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - IPv6 loopback [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 [ OK ] # TEST: UDP in - LLA to GUA [ OK ] # # ################################################################# # udp_l3mdev_accept enabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=1 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Device server - ns-A IPv6 [ OK ] # TEST: Global server - ns-A IPv6 LLA [ OK ] # TEST: Device server - ns-A IPv6 LLA [ OK ] # TEST: Global server - ns-A loopback IPv6 [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - ns-A loopback IPv6 [ OK ] # TEST: No server - ns-A IPv6 LLA [ OK ] # TEST: Client - ns-B IPv6 [ OK ] # TEST: Client, device bind - ns-B IPv6 [ OK ] # TEST: Client, device send via cmsg - ns-B IPv6 [ OK ] # TEST: Client, device bind via IPV6_UNICAST_IF - ns-B IPv6 [ OK ] # TEST: No server, unbound client - ns-B IPv6 [ OK ] # TEST: No server, device client - ns-B IPv6 [ OK ] # TEST: Client - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind - ns-B loopback IPv6 [ OK ] # TEST: Client, device send via cmsg - ns-B loopback IPv6 [ OK ] # TEST: Client, device bind via IPV6_UNICAST_IF - ns-B loopback IPv6 [ OK ] # TEST: No server, unbound client - ns-B loopback IPv6 [ OK ] # TEST: No server, device client - ns-B loopback IPv6 [ OK ] # TEST: Client - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind - ns-B IPv6 LLA [ OK ] # TEST: Client, device send via cmsg - ns-B IPv6 LLA [ OK ] # TEST: Client, device bind via IPV6_UNICAST_IF - ns-B IPv6 LLA [ OK ] # TEST: No server, unbound client - ns-B IPv6 LLA [ OK ] # TEST: No server, device client - ns-B IPv6 LLA [ OK ] # TEST: Global server, local connection - ns-A IPv6 [ OK ] # TEST: Global server, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, local connection - IPv6 loopback [ OK ] # TEST: Device server, unbound client, local connection - ns-A IPv6 [ OK ] # TEST: Device server, local connection - ns-A loopback IPv6 [ OK ] # TEST: Device server, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device client via IPV6_UNICAST_IF, local connection - ns-A IPv6 [ OK ] # TEST: Global server, device client, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device send via cmsg, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - ns-A loopback IPv6 [ OK ] # TEST: Global server, device client, local connection - IPv6 loopback [ OK ] # TEST: Global server, device send via cmsg, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection - IPv6 loopback [ OK ] # TEST: Global server, device client via IP_UNICAST_IF, local connection, with connect() - IPv6 loopback [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 [ OK ] # TEST: UDP in - LLA to GUA [ OK ] # # ################################################################# # With VRF # [ 2601.068325] eth1: renamed from tmp # # ################################################################# # Global server disabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=0 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Global server - VRF IPv6 [ OK ] # TEST: VRF server - ns-A IPv6 [ OK ] # TEST: VRF server - VRF IPv6 [ OK ] # TEST: Enslaved device server - ns-A IPv6 [ OK ] # TEST: Enslaved device server - VRF IPv6 [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - VRF IPv6 [ OK ] # TEST: Global server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: Global server, VRF client, local conn - VRF IPv6 [ OK ] # TEST: VRF server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: VRF server, VRF client, local conn - VRF IPv6 [ OK ] # TEST: Global server, device client, local conn - ns-A IPv6 [ OK ] # TEST: VRF server, device client, local conn - ns-A IPv6 [ OK ] # TEST: Enslaved device server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: Enslaved device server, device client, local conn - ns-A IPv6 [ OK ] # # ################################################################# # Global server enabled # # SYSCTL: net.ipv4.udp_l3mdev_accept=1 # # TEST: Global server - ns-A IPv6 [ OK ] # TEST: Global server - VRF IPv6 [ OK ] # TEST: VRF server - ns-A IPv6 [ OK ] # TEST: VRF server - VRF IPv6 [ OK ] # TEST: Enslaved device server - ns-A IPv6 [ OK ] # TEST: Enslaved device server - VRF IPv6 [ OK ] # TEST: No server - ns-A IPv6 [ OK ] # TEST: No server - VRF IPv6 [ OK ] # TEST: VRF client [ OK ] # TEST: No server, VRF client [ OK ] # TEST: Enslaved device client [ OK ] # TEST: No server, enslaved device client [ OK ] # TEST: Global server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: VRF server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: Global server, VRF client, local conn - VRF IPv6 [ OK ] # TEST: VRF server, VRF client, local conn - VRF IPv6 [ OK ] # TEST: No server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: No server, VRF client, local conn - VRF IPv6 [ OK ] # TEST: Global server, device client, local conn - ns-A IPv6 [ OK ] # TEST: VRF server, device client, local conn - ns-A IPv6 [ OK ] # TEST: Device server, VRF client, local conn - ns-A IPv6 [ OK ] # TEST: Device server, device client, local conn - ns-A IPv6 [ OK ] # TEST: No server, device client, local conn - ns-A IPv6 [ OK ] # TEST: Global server, linklocal IP [ OK ] # TEST: No server, linklocal IP [ OK ] # TEST: Enslaved device client, linklocal IP [ OK ] # TEST: No server, device client, peer linklocal IP [ OK ] # TEST: Enslaved device client, local conn - linklocal IP [ OK ] # TEST: No server, device client, local conn - linklocal IP [ OK ] # TEST: UDP in - LLA to GUA [ OK ] # # ########################################################################### # IPv6 address binds # ########################################################################### # # # ################################################################# # No VRF # [ 2732.320317] eth1: renamed from tmp # TEST: Raw socket bind to local address - ns-A IPv6 [ OK ] # TEST: Raw socket bind to local address after device bind - ns-A IPv6 [ OK ] # TEST: Raw socket bind to local address - ns-A loopback IPv6 [ OK ] # TEST: Raw socket bind to local address after device bind - ns-A loopback IPv6 [ OK ] # TEST: Raw socket bind to nonlocal address - nonlocal IPv6 [ OK ] # TEST: TCP socket bind to local address - ns-A IPv6 [ OK ] # TEST: TCP socket bind to local address after device bind - ns-A IPv6 [ OK ] # TEST: TCP socket bind to out of scope local address - ns-A loopback IPv6 [ OK ] # # ################################################################# # With VRF # [ 2751.704354] eth1: renamed from tmp # TEST: Raw socket bind to local address after vrf bind - ns-A IPv6 [ OK ] # TEST: Raw socket bind to local address after device bind - ns-A IPv6 [ OK ] # TEST: Raw socket bind to local address after vrf bind - VRF IPv6 [ OK ] # TEST: Raw socket bind to local address after device bind - VRF IPv6 [ OK ] # TEST: Raw socket bind to invalid local address after vrf bind - ns-A loopback IPv6 [ OK ] # TEST: Raw socket bind to nonlocal address after VRF bind - nonlocal IPv6 [ OK ] # TEST: TCP socket bind to local address with VRF bind - ns-A IPv6 [ OK ] # TEST: TCP socket bind to local address with VRF bind - VRF IPv6 [ OK ] # TEST: TCP socket bind to local address with device bind - ns-A IPv6 [ OK ] # TEST: TCP socket bind to VRF address with device bind - VRF IPv6 [ OK ] # TEST: TCP socket bind to invalid local address for VRF - ns-A loopback IPv6 [ OK ] # TEST: TCP socket bind to invalid local address for device bind - ns-A loopback IPv6 [ OK ] # # ########################################################################### # Run time tests - ipv6 # ########################################################################### # [ 2779.471407] eth1: renamed from tmp # TEST: Device delete with active traffic - ping in - ns-A IPv6 [ OK ] [ 2788.625496] eth1: renamed from tmp # TEST: Device delete with active traffic - ping out - ns-A IPv6 [ OK ] [ 2795.790405] eth1: renamed from tmp # TEST: TCP active socket, global server - ns-A IPv6 [ OK ] [ 2805.969338] eth1: renamed from tmp # TEST: TCP active socket, global server - VRF IPv6 [ OK ] [ 2816.073324] eth1: renamed from tmp # TEST: TCP active socket, VRF server - ns-A IPv6 [ OK ] [ 2826.203359] eth1: renamed from tmp # TEST: TCP active socket, VRF server - VRF IPv6 [ OK ] [ 2836.362388] eth1: renamed from tmp # TEST: TCP active socket, enslaved device server - ns-A IPv6 [ OK ] [ 2846.464352] eth1: renamed from tmp # TEST: TCP active socket, enslaved device server - VRF IPv6 [ OK ] [ 2856.726349] eth1: renamed from tmp # TEST: TCP active socket, VRF client [ OK ] [ 2867.059311] eth1: renamed from tmp # TEST: TCP active socket, enslaved device client [ OK ] [ 2877.372368] eth1: renamed from tmp # TEST: TCP active socket, global server, VRF client - ns-A IPv6 [ OK ] [ 2887.680326] eth1: renamed from tmp # TEST: TCP active socket, global server, VRF client - VRF IPv6 [ OK ] [ 2897.908352] eth1: renamed from tmp # TEST: TCP active socket, VRF server and client - ns-A IPv6 [ OK ] [ 2908.075328] eth1: renamed from tmp # TEST: TCP active socket, VRF server and client - VRF IPv6 [ OK ] [ 2918.285484] eth1: renamed from tmp # TEST: TCP active socket, global server, device client - ns-A IPv6 [ OK ] [ 2928.397312] eth1: renamed from tmp # TEST: TCP active socket, VRF server, device client - ns-A IPv6 [ OK ] [ 2938.544434] eth1: renamed from tmp # TEST: TCP active socket, device server, device client - ns-A IPv6 [ OK ] [ 2948.737402] eth1: renamed from tmp # TEST: TCP passive socket, global server - ns-A IPv6 [ OK ] [ 2958.880374] eth1: renamed from tmp # TEST: TCP passive socket, global server - VRF IPv6 [ OK ] [ 2969.055339] eth1: renamed from tmp # TEST: TCP passive socket, VRF server - ns-A IPv6 [ OK ] [ 2979.236361] eth1: renamed from tmp # TEST: TCP passive socket, VRF server - VRF IPv6 [ OK ] [ 2989.394341] eth1: renamed from tmp # TEST: TCP passive socket, enslaved device server - ns-A IPv6 [ OK ] [ 2999.562393] eth1: renamed from tmp # TEST: TCP passive socket, enslaved device server - VRF IPv6 [ OK ] [ 3009.705427] eth1: renamed from tmp # TEST: TCP passive socket, VRF client [ OK ] [ 3019.811428] eth1: renamed from tmp # TEST: TCP passive socket, enslaved device client [ OK ] [ 3029.987351] eth1: renamed from tmp # TEST: TCP passive socket, global server, VRF client - ns-A IPv6 [ OK ] [ 3040.125342] eth1: renamed from tmp # TEST: TCP passive socket, global server, VRF client - VRF IPv6 [ OK ] [ 3050.310361] eth1: renamed from tmp # TEST: TCP passive socket, VRF server and client - ns-A IPv6 [ OK ] [ 3060.565318] eth1: renamed from tmp # TEST: TCP passive socket, VRF server and client - VRF IPv6 [ OK ] [ 3070.780346] eth1: renamed from tmp # TEST: TCP passive socket, global server, device client - ns-A IPv6 [ OK ] [ 3080.867309] eth1: renamed from tmp # TEST: TCP passive socket, VRF server, device client - ns-A IPv6 [ OK ] [ 3091.009400] eth1: renamed from tmp # TEST: TCP passive socket, device server, device client - ns-A IPv6 [ OK ] [ 3101.162369] eth1: renamed from tmp # TEST: UDP active socket, global server - ns-A IPv6 [ OK ] [ 3111.269301] eth1: renamed from tmp # TEST: UDP active socket, global server - VRF IPv6 [ OK ] [ 3121.347334] eth1: renamed from tmp # TEST: UDP active socket, VRF server - ns-A IPv6 [ OK ] [ 3131.455369] eth1: renamed from tmp # TEST: UDP active socket, VRF server - VRF IPv6 [ OK ] [ 3141.599383] eth1: renamed from tmp # TEST: UDP active socket, enslaved device server - ns-A IPv6 [ OK ] [ 3151.710412] eth1: renamed from tmp # TEST: UDP active socket, enslaved device server - VRF IPv6 [ OK ] [ 3161.908318] eth1: renamed from tmp # TEST: UDP active socket, VRF client [ OK ] [ 3172.030367] eth1: renamed from tmp # TEST: UDP active socket, enslaved device client [ OK ] [ 3182.118320] eth1: renamed from tmp # TEST: UDP active socket, global server, VRF client - ns-A IPv6 [ OK ] [ 3192.239385] eth1: renamed from tmp # TEST: UDP active socket, global server, VRF client - VRF IPv6 [ OK ] [ 3202.335352] eth1: renamed from tmp # TEST: UDP active socket, VRF server and client - ns-A IPv6 [ OK ] [ 3212.446297] eth1: renamed from tmp # TEST: UDP active socket, VRF server and client - VRF IPv6 [ OK ] [ 3222.517303] eth1: renamed from tmp # TEST: UDP active socket, global server, device client - ns-A IPv6 [ OK ] [ 3232.596297] eth1: renamed from tmp # TEST: UDP active socket, VRF server, device client - ns-A IPv6 [ OK ] [ 3242.721350] eth1: renamed from tmp # TEST: UDP active socket, device server, device client - ns-A IPv6 [ OK ] # # ########################################################################### # IPv6 Netfilter # ########################################################################### # # # ################################################################# # TCP reset # [ 3252.874303] eth1: renamed from tmp # TEST: Global server, reject with TCP-reset on Rx - ns-A IPv6 [ OK ] # TEST: Global server, reject with TCP-reset on Rx - VRF IPv6 [ OK ] # # ################################################################# # ICMP unreachable # # TEST: Global TCP server, Rx reject icmp-port-unreach - ns-A IPv6 [ OK ] # TEST: Global TCP server, Rx reject icmp-port-unreach - VRF IPv6 [ OK ] # TEST: Global UDP server, Rx reject icmp-port-unreach - ns-A IPv6 [ OK ] # TEST: Global UDP server, Rx reject icmp-port-unreach - VRF IPv6 [ OK ] # # ########################################################################### # Use cases # ########################################################################### # # # ################################################################# # Device enslaved to bridge # [ 3278.510313] eth1: renamed from tmp [ 3279.958003] br0: port 1(eth1) entered blocking state [ 3279.958377] br0: port 1(eth1) entered disabled state [ 3279.958644] eth1: entered allmulticast mode [ 3279.958943] eth1: entered promiscuous mode [ 3280.002369] br0: port 1(eth1) entered blocking state [ 3280.002689] br0: port 1(eth1) entered forwarding state [ 3280.025673] br0: port 1(eth1) entered disabled state [ 3280.026150] br0: port 1(eth1) entered blocking state [ 3280.026427] br0: port 1(eth1) entered forwarding state # TEST: Bridge into VRF - IPv4 ping out [ OK ] # TEST: Bridge into VRF - IPv6 ping out [ OK ] # TEST: Bridge into VRF - IPv4 ping in [ OK ] # TEST: Bridge into VRF - IPv6 ping in [ OK ] # modprobe: FATAL: Module br_netfilter not found in directory /lib/modules/6.8.0-rc4-virtme [ 3289.342424] br0: port 1(eth1) entered disabled state [ 3289.343063] br0: port 1(eth1) entered blocking state [ 3289.343338] br0: port 1(eth1) entered forwarding state # TEST: Bridge vlan into VRF - IPv4 ping out [ OK ] # TEST: Bridge vlan into VRF - IPv6 ping out [ OK ] # TEST: Bridge vlan into VRF - IPv4 ping in [ OK ] # TEST: Bridge vlan into VRF - IPv6 ping in [ OK ] # modprobe: FATAL: Module br_netfilter not found in directory /lib/modules/6.8.0-rc4-virtme [ 3294.831376] eth1: left allmulticast mode [ 3294.831627] eth1: left promiscuous mode [ 3294.831847] br0: port 1(eth1) entered disabled state # # ################################################################# # Ping LLA with multiple interfaces # [ 3296.695336] eth1: renamed from tmp [ 3296.752353] eth2: renamed from tmp # TEST: Pre cycle, ping out ns-B - multicast IP [ OK ] # TEST: Pre cycle, ping out ns-C - multicast IP [ OK ] # TEST: Post cycle nsa-riESVU eth1, ping out ns-B - multicast IP [ OK ] # TEST: Post cycle nsa-riESVU eth1, ping out ns-C - multicast IP [ OK ] # TEST: Post cycle nsa-riESVU eth2, ping out ns-B - multicast IP [ OK ] # TEST: Post cycle nsa-riESVU eth2, ping out ns-C - multicast IP [ OK ] # # ################################################################# # SNAT on VRF # [ 3311.166309] eth1: renamed from tmp # TEST: IPv4 TCP connection over VRF with SNAT [ OK ] # TEST: IPv6 TCP connection over VRF with SNAT [ OK ] # # Tests passed: 906 # Tests failed: 0 ok 1 selftests: net: fcnal-test.sh make[1]: Leaving directory '/home/virtme/testing-1/tools/testing/selftests/net' make: Leaving directory '/home/virtme/testing-1/tools/testing/selftests' xx__-> echo $? 0 xx__->