* [PATCH] selftests: vrf: Add test for SNAT over VRF
@ 2021-08-18 8:52 Lahav Schlesinger
2021-08-18 10:30 ` patchwork-bot+netdevbpf
2021-08-18 15:36 ` David Ahern
0 siblings, 2 replies; 3+ messages in thread
From: Lahav Schlesinger @ 2021-08-18 8:52 UTC (permalink / raw)
To: netdev; +Cc: dsahern, kuba, shuah
Commit 09e856d54bda ("vrf: Reset skb conntrack connection on VRF rcv")
fixes the "reverse-DNAT" of an SNAT-ed packet over a VRF.
This patch adds a test for this scenario.
Signed-off-by: Lahav Schlesinger <lschlesinger@drivenets.com>
---
tools/testing/selftests/net/fcnal-test.sh | 28 +++++++++++++++++++++++
1 file changed, 28 insertions(+)
diff --git a/tools/testing/selftests/net/fcnal-test.sh b/tools/testing/selftests/net/fcnal-test.sh
index a8ad92850e63..162e5f1ac36b 100755
--- a/tools/testing/selftests/net/fcnal-test.sh
+++ b/tools/testing/selftests/net/fcnal-test.sh
@@ -3879,6 +3879,32 @@ use_case_ping_lla_multi()
log_test_addr ${MCAST}%${NSC_DEV} $? 0 "Post cycle ${NSA} ${NSA_DEV2}, ping out ns-C"
}
+# Perform IPv{4,6} SNAT on ns-A, and verify TCP connection is successfully
+# established with ns-B.
+use_case_snat_on_vrf()
+{
+ setup "yes"
+
+ local port="12345"
+
+ run_cmd iptables -t nat -A POSTROUTING -p tcp -m tcp --dport ${port} -j SNAT --to-source ${NSA_LO_IP} -o ${VRF}
+ run_cmd ip6tables -t nat -A POSTROUTING -p tcp -m tcp --dport ${port} -j SNAT --to-source ${NSA_LO_IP6} -o ${VRF}
+
+ run_cmd_nsb nettest -s -l ${NSB_IP} -p ${port} &
+ sleep 1
+ run_cmd nettest -d ${VRF} -r ${NSB_IP} -p ${port}
+ log_test $? 0 "IPv4 TCP connection over VRF with SNAT"
+
+ run_cmd_nsb nettest -6 -s -l ${NSB_IP6} -p ${port} &
+ sleep 1
+ run_cmd nettest -6 -d ${VRF} -r ${NSB_IP6} -p ${port}
+ log_test $? 0 "IPv6 TCP connection over VRF with SNAT"
+
+ # Cleanup
+ run_cmd iptables -t nat -D POSTROUTING -p tcp -m tcp --dport ${port} -j SNAT --to-source ${NSA_LO_IP} -o ${VRF}
+ run_cmd ip6tables -t nat -D POSTROUTING -p tcp -m tcp --dport ${port} -j SNAT --to-source ${NSA_LO_IP6} -o ${VRF}
+}
+
use_cases()
{
log_section "Use cases"
@@ -3886,6 +3912,8 @@ use_cases()
use_case_br
log_subsection "Ping LLA with multiple interfaces"
use_case_ping_lla_multi
+ log_subsection "SNAT on VRF"
+ use_case_snat_on_vrf
}
################################################################################
--
2.25.1
^ permalink raw reply related [flat|nested] 3+ messages in thread
* Re: [PATCH] selftests: vrf: Add test for SNAT over VRF
2021-08-18 8:52 [PATCH] selftests: vrf: Add test for SNAT over VRF Lahav Schlesinger
@ 2021-08-18 10:30 ` patchwork-bot+netdevbpf
2021-08-18 15:36 ` David Ahern
1 sibling, 0 replies; 3+ messages in thread
From: patchwork-bot+netdevbpf @ 2021-08-18 10:30 UTC (permalink / raw)
To: Lahav Schlesinger; +Cc: netdev, dsahern, kuba, shuah
Hello:
This patch was applied to netdev/net-next.git (refs/heads/master):
On Wed, 18 Aug 2021 08:52:12 +0000 you wrote:
> Commit 09e856d54bda ("vrf: Reset skb conntrack connection on VRF rcv")
> fixes the "reverse-DNAT" of an SNAT-ed packet over a VRF.
>
> This patch adds a test for this scenario.
>
> Signed-off-by: Lahav Schlesinger <lschlesinger@drivenets.com>
>
> [...]
Here is the summary with links:
- selftests: vrf: Add test for SNAT over VRF
https://git.kernel.org/netdev/net-next/c/d3cec5ca2996
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [PATCH] selftests: vrf: Add test for SNAT over VRF
2021-08-18 8:52 [PATCH] selftests: vrf: Add test for SNAT over VRF Lahav Schlesinger
2021-08-18 10:30 ` patchwork-bot+netdevbpf
@ 2021-08-18 15:36 ` David Ahern
1 sibling, 0 replies; 3+ messages in thread
From: David Ahern @ 2021-08-18 15:36 UTC (permalink / raw)
To: Lahav Schlesinger, netdev; +Cc: dsahern, kuba, shuah
On 8/18/21 2:52 AM, Lahav Schlesinger wrote:
> Commit 09e856d54bda ("vrf: Reset skb conntrack connection on VRF rcv")
> fixes the "reverse-DNAT" of an SNAT-ed packet over a VRF.
>
> This patch adds a test for this scenario.
>
> Signed-off-by: Lahav Schlesinger <lschlesinger@drivenets.com>
> ---
> tools/testing/selftests/net/fcnal-test.sh | 28 +++++++++++++++++++++++
> 1 file changed, 28 insertions(+)
>
Thanks for the follow up!
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2021-08-18 15:36 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-08-18 8:52 [PATCH] selftests: vrf: Add test for SNAT over VRF Lahav Schlesinger
2021-08-18 10:30 ` patchwork-bot+netdevbpf
2021-08-18 15:36 ` David Ahern
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.