![Martin KaFai Lau](/assets/img/avatar_default.png)
The test creates two netns, ns1 and ns2. The host (the default netns) has an ipip or ip6tnl dev configured for tunneling traffic to the ns2. ping VIPS from ns1 <----> host <--tunnel--> ns2 (VIPs at loopback) The test is to have ns1 pinging VIPs configured at the loopback interface in ns2. The VIPs are 10.10.1.102 and 2401:face::66 (which are configured at lo@ns2). [Note: 0x66 => 102]. At ns1, the VIPs are routed _via_ the host. At the host, bpf programs are installed at the veth to redirect packets from a veth to the ipip/ip6tnl. The test is configured in a way so that both ingress and egress can be tested. At ns2, the ipip/ip6tnl dev is configured with the local and remote address specified. The return path is routed to the dev ipip/ip6tnl. During egress test, the host also locally tests pinging the VIPs to ensure that bpf_redirect at egress also works for the direct egress (i.e. not forwarding from dev ve1 to ve2). Acked-by: Alexei Starovoitov <ast@fb.com> Signed-off-by: Martin KaFai Lau <kafai@fb.com> Signed-off-by: David S. Miller <davem@davemloft.net>
74 lines
1.5 KiB
C
74 lines
1.5 KiB
C
/* Copyright (c) 2016 Facebook
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of version 2 of the GNU General Public
|
|
* License as published by the Free Software Foundation.
|
|
*/
|
|
#include <linux/unistd.h>
|
|
#include <linux/bpf.h>
|
|
|
|
#include <stdlib.h>
|
|
#include <stdio.h>
|
|
#include <unistd.h>
|
|
#include <string.h>
|
|
#include <errno.h>
|
|
|
|
#include "libbpf.h"
|
|
|
|
static void usage(void)
|
|
{
|
|
printf("Usage: tc_l2_ipip_redirect [...]\n");
|
|
printf(" -U <file> Update an already pinned BPF array\n");
|
|
printf(" -i <ifindex> Interface index\n");
|
|
printf(" -h Display this help\n");
|
|
}
|
|
|
|
int main(int argc, char **argv)
|
|
{
|
|
const char *pinned_file = NULL;
|
|
int ifindex = -1;
|
|
int array_key = 0;
|
|
int array_fd = -1;
|
|
int ret = -1;
|
|
int opt;
|
|
|
|
while ((opt = getopt(argc, argv, "F:U:i:")) != -1) {
|
|
switch (opt) {
|
|
/* General args */
|
|
case 'U':
|
|
pinned_file = optarg;
|
|
break;
|
|
case 'i':
|
|
ifindex = atoi(optarg);
|
|
break;
|
|
default:
|
|
usage();
|
|
goto out;
|
|
}
|
|
}
|
|
|
|
if (ifindex < 0 || !pinned_file) {
|
|
usage();
|
|
goto out;
|
|
}
|
|
|
|
array_fd = bpf_obj_get(pinned_file);
|
|
if (array_fd < 0) {
|
|
fprintf(stderr, "bpf_obj_get(%s): %s(%d)\n",
|
|
pinned_file, strerror(errno), errno);
|
|
goto out;
|
|
}
|
|
|
|
/* bpf_tunnel_key.remote_ipv4 expects host byte orders */
|
|
ret = bpf_update_elem(array_fd, &array_key, &ifindex, 0);
|
|
if (ret) {
|
|
perror("bpf_update_elem");
|
|
goto out;
|
|
}
|
|
|
|
out:
|
|
if (array_fd != -1)
|
|
close(array_fd);
|
|
return ret;
|
|
}
|