blob: 484c722cb273a6d6099474d6c2d61f8b9a918628 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
|
# $OpenBSD: Makefile,v 1.15 2020/12/30 21:40:33 kn Exp $
# The following ports must be installed:
#
# scapy powerful interactive packet manipulation in python
.if ! exists(/usr/local/bin/scapy)
regress:
@echo Install scapy package to run this regress.
@echo SKIPPED
.endif
# This test needs a manual setup of two machines
# Set up machines: LOCAL REMOTE
# LOCAL is the machine where this makefile is running.
# REMOTE is running OpenBSD with echo and chargen server to test PMTU
# FAKE is an non existing machine in a non existing network.
# REMOTE_SSH is the hostname to log in on the REMOTE machine.
# Configure Addresses on the machines.
# Adapt interface and addresse variables to your local setup.
#
LOCAL_IF ?=
LOCAL_MAC ?=
REMOTE_MAC ?=
REMOTE_SSH ?=
LOCAL_ADDR ?=
REMOTE_ADDR ?=
FAKE_NET ?=
FAKE_NET_ADDR ?=
LOCAL_ADDR6 ?=
REMOTE_ADDR6 ?=
FAKE_NET6 ?=
FAKE_NET_ADDR6 ?=
.if empty (LOCAL_IF) || empty (REMOTE_SSH) || \
empty (LOCAL_MAC) || empty (REMOTE_MAC) || \
empty (LOCAL_ADDR) || empty (LOCAL_ADDR6) || \
empty (REMOTE_ADDR) || empty (REMOTE_ADDR6) || \
empty (FAKE_NET) || empty (FAKE_NET6) || \
empty (FAKE_NET_ADDR) || empty (FAKE_NET_ADDR6)
regress:
@echo This tests needs a remote machine to operate on
@echo LOCAL_IF REMOTE_SSH LOCAL_MAC REMOTE_MAC LOCAL_ADDR LOCAL_ADDR6
@echo REMOTE_ADDR REMOTE_ADDR6 FAKE_NET FAKE_NET6 FAKE_NET_ADDR
@echo FAKE_NET_ADDR6
@echo are empty. Fill out these variables for additional tests.
@echo SKIPPED
.elif make (regress) || make (all)
.BEGIN: addr.py
${SUDO} true
ssh -t ${REMOTE_SSH} ${SUDO} true
@echo
.endif
# Create python include file containing the addresses.
addr.py: Makefile
rm -f $@ $@.tmp
echo 'LOCAL_IF = "${LOCAL_IF}"' >>$@.tmp
echo 'LOCAL_MAC = "${LOCAL_MAC}"' >>$@.tmp
echo 'REMOTE_MAC = "${REMOTE_MAC}"' >>$@.tmp
.for var in LOCAL REMOTE FAKE_NET
echo '${var}_ADDR = "${${var}_ADDR}"' >>$@.tmp
echo '${var}_ADDR6 = "${${var}_ADDR6}"' >>$@.tmp
.endfor
echo 'FAKE_NET = "${FAKE_NET}"' >>$@.tmp
echo 'FAKE_NET6 = "${FAKE_NET6}"' >>$@.tmp
mv $@.tmp $@
# Set variables so that make runs with and without obj directory.
# Only do that if necessary to keep visible output short.
.if ${.CURDIR} == ${.OBJDIR}
PYTHON = python3 -u ./
.else
PYTHON = PYTHONPATH=${.OBJDIR} python3 -u ${.CURDIR}/
.endif
# Clear local and remote path mtu routes, set fake net route
REGRESS_CLEANUP += reset-route
reset-route:
${SUDO} route -n delete -inet -host ${REMOTE_ADDR} || true
ssh ${REMOTE_SSH} ${SUDO} route -n delete -inet -host ${FAKE_NET_ADDR} || true
REGRESS_CLEANUP += reset-route6
reset-route6:
${SUDO} route -n delete -inet6 -host ${REMOTE_ADDR6} || true
ssh ${REMOTE_SSH} ${SUDO} route -n delete -inet6 -host ${FAKE_NET_ADDR6} || true
# Clear host routes and ping all addresses. This ensures that
# the IP addresses are configured and all routing table are set up
# to allow bidirectional packet flow.
REGRESS_TARGETS += run-ping
run-ping: reset-route
.for ip in LOCAL_ADDR REMOTE_ADDR
@echo Check ping ${ip}
ping -n -c 1 ${${ip}}
.endfor
REGRESS_TARGETS += run-ping6
run-ping6: reset-route6
.for ip in LOCAL_ADDR REMOTE_ADDR
@echo Check ping6 ${ip}6
ping6 -n -c 1 ${${ip}6}
.endfor
REGRESS_TARGETS += run-pmtu
run-pmtu: addr.py reset-route
@echo Send ICMP fragmentation needed after fake TCP connect
${SUDO} ${PYTHON}tcp_connect.py
REGRESS_TARGETS += run-pmtu6
run-pmtu6: addr.py reset-route6
@echo Send ICMP6 packet too big after fake TCP connect
${SUDO} ${PYTHON}tcp_connect6.py
REGRESS_TARGETS += run-udp6
run-udp6: addr.py reset-route6
@echo Send ICMP6 packet too big after UDP echo
${SUDO} ${PYTHON}udp_echo6.py
REGRESS_TARGETS += run-gateway6
run-gateway6: run-udp6
@echo Remove gateway route of a dynamic PMTU route
ssh ${REMOTE_SSH} ${SUDO} route -n delete -inet6 -host ${LOCAL_ADDR6}
ssh ${REMOTE_SSH} route -n get -inet6 -host ${FAKE_NET_ADDR6}\
>pmtu.route
cat pmtu.route
grep -q 'gateway: ${LOCAL_ADDR6}' pmtu.route
grep -q 'flags: <UP,GATEWAY,HOST,DYNAMIC,DONE>' pmtu.route
${SUDO} ${PYTHON}udp_echo6.py
REGRESS_TARGETS += run-tcpfrag6
run-tcpfrag6: addr.py reset-route6
@echo Send ICMP6 and try to trigger a short TCP segment
${SUDO} ${PYTHON}tcp_atomicfrag6.py
REGRESS_TARGETS += run-udpfrag6
run-udpfrag6: addr.py reset-route6
@echo Send ICMP6 and try to trigger an atomic UDP IPv6 fragment
${SUDO} ${PYTHON}udp_atomicfrag6.py
CLEANFILES += addr.py *.pyc *.log *.route
.PHONY: check-setup check-setup-local check-setup-remote
# Check wether the address, route and remote setup is correct
check-setup: check-setup-local check-setup-remote
check-setup-local:
@echo '\n======== $@ ========'
ping -n -c 1 ${LOCAL_ADDR} # LOCAL_ADDR
route -n get -inet ${LOCAL_ADDR} | grep -q 'flags: .*LOCAL' # LOCAL_ADDR
arp -na | grep -q '^${LOCAL_ADDR} * ${LOCAL_MAC} * ${LOCAL_IF} permanent' # LOCAL_ADDR LOCAL_MAC LOCAL_IF
ping -n -c 1 ${REMOTE_ADDR} # REMOTE_ADDR
route -n get -inet ${REMOTE_ADDR} | fgrep -q 'interface: ${LOCAL_IF}' # REMOTE_ADDR LOCAL_IF
! ping -n -c 1 -w 1 ${FAKE_NET_ADDR} # FAKE_NET_ADDR
route -n get -inet ${FAKE_NET_ADDR} | grep -q 'flags: .*BLACKHOLE' # FAKE_NET_ADDR
route -n get -inet -net ${FAKE_NET} | grep -q 'flags: .*BLACKHOLE' # FAKE_NET
ping6 -n -c 1 ${LOCAL_ADDR6} # LOCAL_ADDR6
route -n get -inet6 ${LOCAL_ADDR6} | grep -q 'flags: .*LOCAL' # LOCAL_ADDR6
ndp -na | grep -q '^${LOCAL_ADDR6} * ${LOCAL_MAC} * ${LOCAL_IF} permanent' # LOCAL_ADDR6 LOCAL_MAC LOCAL_IF
ping6 -n -c 1 ${REMOTE_ADDR6} # REMOTE_ADDR6
route -n get -inet6 ${REMOTE_ADDR6} | fgrep -q 'interface: ${LOCAL_IF}' # REMOTE_ADDR6 LOCAL_IF
! ping -n -c 1 -w 1 ${FAKE_NET_ADDR6} # FAKE_NET_ADDR6
route -n get -inet6 ${FAKE_NET_ADDR6} | grep -q 'flags: .*BLACKHOLE' # FAKE_NET_ADDR6
route -n get -inet6 -net ${FAKE_NET6} | grep -q 'flags: .*BLACKHOLE' # FAKE_NET6
check-setup-remote:
@echo '\n======== $@ ========'
ssh ${REMOTE_SSH} ping -n -c 1 ${REMOTE_ADDR} # REMOTE_ADDR
ssh ${REMOTE_SSH} route -n get -inet ${REMOTE_ADDR} | grep -q 'flags: .*LOCAL' # REMOTE_ADDR
ssh ${REMOTE_SSH} arp -na | grep -q '^${REMOTE_ADDR} * ${REMOTE_MAC} * .* permanent' # REMOTE_ADDR REMOTE_MAC
ssh ${REMOTE_SSH} ping -n -c 1 ${LOCAL_ADDR} # LOCAL_ADDR
.for ip in FAKE_NET FAKE_NET_ADDR
ssh ${REMOTE_SSH} route -n get -inet ${${ip}} | fgrep -q 'gateway: ${LOCAL_ADDR}' # ${ip} LOCAL_ADDR
.endfor
ssh ${REMOTE_SSH} ping6 -n -c 1 ${REMOTE_ADDR6} # REMOTE_ADDR6
ssh ${REMOTE_SSH} route -n get -inet6 ${REMOTE_ADDR6} | grep -q 'flags: .*LOCAL' # REMOTE_ADDR6
ssh ${REMOTE_SSH} ndp -na | grep -q '^${REMOTE_ADDR6} * ${REMOTE_MAC} * .* permanent' # REMOTE_ADDR6 REMOTE_MAC
ssh ${REMOTE_SSH} ping6 -n -c 1 ${LOCAL_ADDR6} # LOCAL_ADDR6
.for ip in FAKE_NET6 FAKE_NET_ADDR6
ssh ${REMOTE_SSH} route -n get -inet6 ${${ip}} | fgrep -q 'gateway: ${LOCAL_ADDR6}' # ${ip} LOCAL_ADDR6
.endfor
.for af in inet inet6
ssh ${REMOTE_SSH} netstat -na -f ${af} -p tcp | fgrep ' *.19 '
.endfor
ssh ${REMOTE_SSH} netstat -na -f inet6 -p udp | fgrep ' *.7 '
ssh ${REMOTE_SSH} ${SUDO} pfctl -sr | grep '^anchor "regress" all$$'
ssh ${REMOTE_SSH} ${SUDO} pfctl -si | grep '^Status: Enabled '
.include <bsd.regress.mk>
|
