selftests/net/vrf_route_leaking.sh

14 # | h1 |-------------------| r1 |-------------------| h2 |
20 # Route from h1 to h2 and back goes through r1, incoming vrf blue has a route
24 # The first test sends a ping with a ttl of 1 from h1 to h2 and parses the
27 # The second test runs traceroute from h1 to h2 and parses the output to check
30 # The third test sends a ping with a packet size of 1450 from h1 to h2 and
46 # | h1 |--------------+              +--------------| h2 |
53 # Route from h1 to h2 goes through r1, incoming vrf blue has a route to the
55 # Route from h2 to h1 goes through r2.
175 	cleanup_ns $h1 $h2 $r1 $r2
212 	setup_ns h1 h2 r1
213 	for ns in $h1 $h2 $r1; do
226 	ip -netns $h1 link add eth0 type veth peer name r1h1
227 	ip -netns $h1 link set r1h1 netns $r1 name eth0 up
233 	# h1
235 	ip -netns $h1 addr add dev eth0 ${H1_N1_IP}/24
236 	ip -netns $h1 -6 addr add dev eth0 ${H1_N1_IP6}/64 nodad
237 	ip -netns $h1 link set eth0 up
239 	# h1 to h2 via r1
240 	ip -netns $h1    route add ${H2_N2} via ${R1_N1_IP} dev eth0
241 	ip -netns $h1 -6 route add ${H2_N2_6} via "${R1_N1_IP6}" dev eth0
250 	# h2 to h1 via r1
290 	setup_ns h1 h2 r1 r2
291 	for ns in $h1 $h2 $r1 $r2; do
304 	ip -netns $h1 link add eth0 type veth peer name r1h1
305 	ip -netns $h1 link set r1h1 netns $r1 name eth0 up
307 	ip -netns $h1 link add eth1 type veth peer name r2h1
308 	ip -netns $h1 link set r2h1 netns $r2 name eth0 up
317 	# h1
319 	ip -netns $h1 link add br0 type bridge
320 	ip -netns $h1 link set br0 up
321 	ip -netns $h1 addr add dev br0 ${H1_N1_IP}/24
322 	ip -netns $h1 -6 addr add dev br0 ${H1_N1_IP6}/64 nodad
323 	ip -netns $h1 link set eth0 master br0 up
324 	ip -netns $h1 link set eth1 master br0 up
326 	# h1 to h2 via r1
327 	ip -netns $h1    route add ${H2_N2} via ${R1_N1_IP} dev br0
328 	ip -netns $h1 -6 route add ${H2_N2_6} via "${R1_N1_IP6}" dev br0
340 	# h2 to h1 via r2
378 	ip netns exec $h1 ping -c1 -w1 ${H2_N2_IP} >/dev/null 2>&1
385 	ip netns exec $h1 "${ping6}" -c1 -w1 ${H2_N2_IP6} >/dev/null 2>&1
420 	run_cmd_grep "${R1_N1_IP}" ip netns exec $h1 traceroute ${H2_N2_IP}
443 	run_cmd_grep "${R1_N1_IP6}" ip netns exec $h1 traceroute6 ${H2_N2_IP6}
464 	run_cmd_grep "Time to live exceeded" ip netns exec $h1 ping -t1 -c1 -W2 ${H2_N2_IP}
485 	run_cmd_grep "Frag needed" ip netns exec $h1 ping -s 1450 -Mdo -c1 -W2 ${H2_N2_IP}
506 	run_cmd_grep "Time exceeded: Hop limit" ip netns exec $h1 "${ping6}" -t1 -c1 -W2 ${H2_N2_IP6}
527 	run_cmd_grep "Packet too big" ip netns exec $h1 "${ping6}" -s 1450 -Mdo -c1 -W2 ${H2_N2_IP6}