Create two gif(4) interfaces in different routing domains. Test

encapsulating IPv4 and IPv6 packets in IPv4 and IPv6 gif tunnels.

2 files changed, 224 insertions, 0 deletions

diff --git a/regress/sys/net/gif/Makefile b/regress/sys/net/gif/Makefile
new file mode 100644
index 00000000000..efcf38528f4
--- /dev/null
+++ b/regress/sys/net/gif/Makefile
@@ -0,0 +1,218 @@
+#	$OpenBSD: Makefile,v 1.1.1.1 2018/04/19 01:09:30 bluhm Exp $
+
+# Copyright (c) 2018 Alexander Bluhm <bluhm@openbsd.org>
+#
+# Permission to use, copy, modify, and distribute this software for any
+# purpose with or without fee is hereby granted, provided that the above
+# copyright notice and this permission notice appear in all copies.
+#
+# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+# OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+# Set up two gif interfaces in different routing domains.
+# Try to ping existing addresses in these domains with various tunnels.
+
+# This test uses routing doamin and interface number 11 and 12.
+# Adjust it here, if you want to use something else.
+N1 =		11
+N2 =		12
+NUMS =		${N1} ${N2}
+
+TUNNEL4_SRC_ADDR4_${N1} =	10.188.44.${N1}
+TUNNEL4_DST_ADDR4_${N1} =	10.188.44.${N2}
+TUNNEL6_SRC_ADDR4_${N1} =	10.188.64.${N1}
+TUNNEL6_DST_ADDR4_${N1} =	10.188.64.${N2}
+SRC_TUNNEL4_${N1} =		10.188.4.${N1}
+DST_TUNNEL4_${N1} =		10.188.4.${N2}
+TUNNEL4_SRC_ADDR6_${N1} =	fdd7:e83e:66bc:46::${N1}
+TUNNEL4_DST_ADDR6_${N1} =	fdd7:e83e:66bc:46::${N2}
+TUNNEL6_SRC_ADDR6_${N1} =	fdd7:e83e:66bc:66::${N1}
+TUNNEL6_DST_ADDR6_${N1} =	fdd7:e83e:66bc:66::${N2}
+SRC_TUNNEL6_${N1} =		fdd7:e83e:66bc:6::${N1}
+DST_TUNNEL6_${N1} =		fdd7:e83e:66bc:6::${N2}
+
+TUNNEL4_SRC_ADDR4_${N2} =	${TUNNEL4_DST_ADDR4_${N1}}
+TUNNEL4_DST_ADDR4_${N2} =	${TUNNEL4_SRC_ADDR4_${N1}}
+TUNNEL6_SRC_ADDR4_${N2} =	${TUNNEL6_DST_ADDR4_${N1}}
+TUNNEL6_DST_ADDR4_${N2} =	${TUNNEL6_SRC_ADDR4_${N1}}
+SRC_TUNNEL4_${N2} =		${DST_TUNNEL4_${N1}}
+DST_TUNNEL4_${N2} =		${SRC_TUNNEL4_${N1}}
+TUNNEL4_SRC_ADDR6_${N2} =	${TUNNEL4_DST_ADDR6_${N1}}
+TUNNEL4_DST_ADDR6_${N2} =	${TUNNEL4_SRC_ADDR6_${N1}}
+TUNNEL6_SRC_ADDR6_${N2} =	${TUNNEL6_DST_ADDR6_${N1}}
+TUNNEL6_DST_ADDR6_${N2} =	${TUNNEL6_SRC_ADDR6_${N1}}
+SRC_TUNNEL6_${N2} =		${DST_TUNNEL6_${N1}}
+DST_TUNNEL6_${N2} =		${SRC_TUNNEL6_${N1}}
+
+.include <bsd.own.mk>
+
+.if ! (make(clean) || make(cleandir) || make(obj))
+SYSCTL_FORWARDING !=	sysctl net.inet.ip.forwarding
+
+.if ${SYSCTL_FORWARDING:C/.*=//} != 1
+regress:
+	@echo "${SYSCTL_FORWARDING}"
+	@echo set this sysctl to 1 for additional tests
+	@echo SKIPPED
+.endif
+
+PF_SKIP_IFACE !=	${SUDO} /sbin/pfctl -sI -v | sed -n 's/ (skip)//p'
+
+.if ! empty(PF_SKIP_IFACE:Mlo*:Nlo0)
+regress:
+	@echo "${PF_SKIP_IFACE}"
+	@echo Do not set skip on interface lo, lo${N1}, or lo${N2}.
+	@echo SKIPPED
+.endif
+.endif
+
+.PHONY: check-rdomains ifconfig unconfig
+
+check-rdomains:
+	# check if rdomains are busy
+.for n in ${NUMS}
+	@if /sbin/ifconfig | grep -v '^lo${n}:' | grep ' rdomain ${n} '; then\
+	    echo routing domain ${n} is already used >&2; exit 1; fi
+.endfor
+
+ifconfig: check-rdomains unconfig
+	# create and configure loopback interfaces
+.for n in ${NUMS}
+	${SUDO} /sbin/ifconfig lo${n} rdomain ${n}
+	${SUDO} /sbin/ifconfig lo${n} inet 127.0.0.1/8
+	${SUDO} /sbin/ifconfig lo${n} inet6 ::1/128
+	${SUDO} /sbin/ifconfig lo${n} inet ${SRC_TUNNEL4_${n}} alias
+	${SUDO} /sbin/ifconfig lo${n} inet6 ${SRC_TUNNEL6_${n}} alias
+	${SUDO} /sbin/route -n -T ${n} add -inet -host ${DST_TUNNEL4_${n}}\
+	    127.0.0.1
+	${SUDO} /sbin/route -n -T ${n} add -inet6 -host ${DST_TUNNEL6_${n}}\
+	    ::1
+	${SUDO} /sbin/ifconfig gif${n}4 create rdomain ${n}
+	${SUDO} /sbin/ifconfig gif${n}4 tunnel ${SRC_TUNNEL4_${n}}\
+	    ${DST_TUNNEL4_${n}} tunneldomain ${n}
+	${SUDO} /sbin/ifconfig gif${n}4 inet ${TUNNEL4_SRC_ADDR4_${n}}/32\
+	    ${TUNNEL4_DST_ADDR4_${n}}
+	${SUDO} /sbin/ifconfig gif${n}4 inet6 ${TUNNEL4_SRC_ADDR6_${n}}\
+	    ${TUNNEL4_DST_ADDR6_${n}}
+	${SUDO} /sbin/ifconfig gif${n}6 create rdomain ${n}
+	${SUDO} /sbin/ifconfig gif${n}6 tunnel ${SRC_TUNNEL6_${n}}\
+	    ${DST_TUNNEL6_${n}} tunneldomain ${n}
+	${SUDO} /sbin/ifconfig gif${n}6 inet ${TUNNEL6_SRC_ADDR4_${n}}/32\
+	    ${TUNNEL6_DST_ADDR4_${n}}
+	${SUDO} /sbin/ifconfig gif${n}6 inet6 ${TUNNEL6_SRC_ADDR6_${n}}\
+	    ${TUNNEL6_DST_ADDR6_${n}}
+.endfor
+
+unconfig:
+	# destroy interfaces
+.for n in ${NUMS}
+	-${SUDO} /sbin/ifconfig lo${n} inet 127.0.0.1 delete
+	-${SUDO} /sbin/ifconfig lo${n} inet6 ::1 delete
+	-${SUDO} /sbin/ifconfig lo${n} inet ${SRC_TUNNEL4_${n}} delete
+	-${SUDO} /sbin/ifconfig lo${n} inet6 ${SRC_TUNNEL6_${n}} delete
+	-${SUDO} /sbin/ifconfig gif${n}4 destroy
+	-${SUDO} /sbin/ifconfig gif${n}6 destroy
+.endfor
+	rm -f stamp-setup
+
+stamp-setup: Makefile
+	@echo '\n======== $@ ========'
+	${.MAKE} -C ${.CURDIR} ifconfig
+	sleep 1  # XXX test is unreliable without sleep
+	date >$@
+
+# Create python include file containing the addresses.
+addr.py: Makefile
+	rm -f $@ $@.tmp
+.for N in N1 N2
+	echo '${N}="${${N}}"' >>$@.tmp
+	echo 'IF_${N}="lo${${N}}"' >>$@.tmp
+	echo 'DST_TUNNEL4_${N}="${DST_TUNNEL4_${${N}}}"' >>$@.tmp
+	echo 'DST_TUNNEL6_${N}="${DST_TUNNEL6_${${N}}}"' >>$@.tmp
+.endfor
+	mv $@.tmp $@
+
+# Load the pf rules into the kernel.
+stamp-pfctl: addr.py pf.conf stamp-setup
+	@echo '\n======== $@ ========'
+	cat addr.py ${.CURDIR}/pf.conf | /sbin/pfctl -n -f -
+	cat addr.py ${.CURDIR}/pf.conf | ${SUDO} /sbin/pfctl -a regress -f -
+	@date >$@
+
+.for n in ${N1} ${N2}
+
+REGRESS_TARGETS +=	run-regress-ping-local-${n}
+run-regress-ping-local-${n}: stamp-setup stamp-pfctl
+	@echo '\n======== $@ ========'
+	# Ping localhost in routing domain ${n}.
+	/sbin/ping -n -w 1 -c 1 -V ${n} 127.0.0.1
+
+REGRESS_TARGETS +=	run-regress-ping-src-${n}
+run-regress-ping-src-${n}: stamp-setup stamp-pfctl
+	@echo '\n======== $@ ========'
+	# Ping source address in local routing domain.
+	/sbin/ping -n -w 1 -c 1 -V ${n} ${SRC_TUNNEL4_${n}}
+
+REGRESS_TARGETS +=	run-regress-ping-dst-${n}
+run-regress-ping-dst-${n}: stamp-setup stamp-pfctl
+	@echo '\n======== $@ ========'
+	# Ping destination address in other routing domain.
+	/sbin/ping -n -w 1 -c 1 -V ${n} ${DST_TUNNEL4_${n}}
+
+REGRESS_TARGETS +=	run-regress-ping-tunnel4-${n}
+run-regress-ping-tunnel4-${n}: stamp-setup stamp-pfctl
+	@echo '\n======== $@ ========'
+	# Ping IPv4 address through IPv4 tunnel.
+	/sbin/ping -n -w 1 -c 1 -V ${n} ${TUNNEL4_DST_ADDR4_${n}}
+
+REGRESS_TARGETS +=	run-regress-ping-tunnel6-${n}
+run-regress-ping-tunnel6-${n}: stamp-setup stamp-pfctl
+	@echo '\n======== $@ ========'
+	# Ping IPv4 address through IPv6 tunnel.
+	/sbin/ping -n -w 1 -c 1 -V ${n} ${TUNNEL6_DST_ADDR4_${n}}
+
+REGRESS_TARGETS +=	run-regress-ping6-local-${n}
+run-regress-ping6-local-${n}: stamp-setup stamp-pfctl
+	@echo '\n======== $@ ========'
+	# Ping localhost in routing domain ${n}.
+	/sbin/ping6 -n -w 1 -c 1 -V ${n} ::1
+
+REGRESS_TARGETS +=	run-regress-ping6-src-${n}
+run-regress-ping6-src-${n}: stamp-setup stamp-pfctl
+	@echo '\n======== $@ ========'
+	# Ping source address in local routing domain.
+	/sbin/ping6 -n -w 1 -c 1 -V ${n} ${SRC_TUNNEL6_${n}}
+
+REGRESS_TARGETS +=	run-regress-ping6-dst-${n}
+run-regress-ping6-dst-${n}: stamp-setup stamp-pfctl
+	@echo '\n======== $@ ========'
+	# Ping destination address in other routing domain.
+	/sbin/ping6 -n -w 1 -c 1 -V ${n} ${DST_TUNNEL6_${n}}
+
+REGRESS_TARGETS +=	run-regress-ping6-tunnel4-${n}
+run-regress-ping6-tunnel4-${n}: stamp-setup stamp-pfctl
+	@echo '\n======== $@ ========'
+	# Ping IPv6 address through IPv4 tunnel.
+	/sbin/ping6 -n -w 1 -c 1 -V ${n} ${TUNNEL4_DST_ADDR6_${n}}
+
+REGRESS_TARGETS +=	run-regress-ping6-tunnel6-${n}
+run-regress-ping6-tunnel6-${n}: stamp-setup stamp-pfctl
+	@echo '\n======== $@ ========'
+	# Ping IPv6 address through IPv6 tunnel.
+	/sbin/ping6 -n -w 1 -c 1 -V ${n} ${TUNNEL6_DST_ADDR6_${n}}
+
+.endfor
+
+REGRESS_TARGETS +=	run-regress-cleanup
+run-regress-cleanup:
+	@echo '\n======== $@ ========'
+	${.MAKE} -C ${.CURDIR} unconfig
+
+CLEANFILES +=	addr.py *.pyc *.log stamp-*
+
+.include <bsd.regress.mk>
diff --git a/regress/sys/net/gif/pf.conf b/regress/sys/net/gif/pf.conf
new file mode 100644
index 00000000000..d93d6e6e85c
--- /dev/null
+++ b/regress/sys/net/gif/pf.conf
@@ -0,0 +1,6 @@
+# pf must have these rules in the regress anchor
+
+pass in on rdomain $N1 to $DST_TUNNEL4_N1 rtable $N2
+pass in on rdomain $N2 to $DST_TUNNEL4_N2 rtable $N1
+pass in on rdomain $N1 to $DST_TUNNEL6_N1 rtable $N2
+pass in on rdomain $N2 to $DST_TUNNEL6_N2 rtable $N1