* [LTP] [PATCH v8 1/3] lib/test_net.sh: add tst_ping() to check icmp connectivity
2016-04-27 12:54 [LTP] [PATCH v8 0/3] networking/stress/icmp: add ip xfrm ipsec support Hangbin Liu
@ 2016-04-27 12:54 ` Hangbin Liu
2016-04-27 12:54 ` [LTP] [PATCH v8 2/3] network/stress: add ipsec lib Hangbin Liu
` (2 subsequent siblings)
3 siblings, 0 replies; 6+ messages in thread
From: Hangbin Liu @ 2016-04-27 12:54 UTC (permalink / raw)
To: ltp
Signed-off-by: Hangbin Liu <haliu@redhat.com>
---
testcases/lib/test_net.sh | 30 ++++++++++++++++++++++++++++++
1 file changed, 30 insertions(+)
diff --git a/testcases/lib/test_net.sh b/testcases/lib/test_net.sh
index 418fed3..f391302 100644
--- a/testcases/lib/test_net.sh
+++ b/testcases/lib/test_net.sh
@@ -314,3 +314,33 @@ tst_netload()
return $ret
}
+
+# tst_ping [IFACE] [DST ADDR] [MESSAGE SIZE ARRAY]
+# Check icmp connectivity
+# IFACE: source interface name
+# DST ADDR: destination IPv4 or IPv6 address
+# MESSAGE SIZE ARRAY: message size array
+tst_ping()
+{
+ # The max number of ICMP echo request
+ PING_MAX=${PING_MAX:-"10"}
+
+ local src_iface=${1:-"$(tst_iface)"}
+ local dst_addr=${2:-"$(tst_ipaddr rhost)"}; shift 2
+ local msg_sizes=$@
+ local ret=0
+
+ # ping cmd use 56 as default message size
+ for size in ${msg_sizes:-"56"}; do
+ ping$TST_IPV6 -I $src_iface -c $PING_MAX $dst_addr \
+ -s $size > /dev/null 2>&1
+ ret=$?
+ if [ $ret -eq 0 ]; then
+ tst_resm TINFO "tst_ping IPv${TST_IPV6:-4} msg_size $size pass"
+ else
+ tst_resm TINFO "tst_ping IPv${TST_IPV6:-4} msg_size $size fail"
+ break
+ fi
+ done
+ return $ret
+}
--
2.5.5
^ permalink raw reply related [flat|nested] 6+ messages in thread* [LTP] [PATCH v8 2/3] network/stress: add ipsec lib
2016-04-27 12:54 [LTP] [PATCH v8 0/3] networking/stress/icmp: add ip xfrm ipsec support Hangbin Liu
2016-04-27 12:54 ` [LTP] [PATCH v8 1/3] lib/test_net.sh: add tst_ping() to check icmp connectivity Hangbin Liu
@ 2016-04-27 12:54 ` Hangbin Liu
2016-04-27 12:54 ` [LTP] [PATCH v8 3/3] network/stress/icmp: add icmp-uni-basic to implement all icmp basic stress test Hangbin Liu
2016-04-28 13:51 ` [LTP] [PATCH v8 0/3] networking/stress/icmp: add ip xfrm ipsec support Alexey Kodanev
3 siblings, 0 replies; 6+ messages in thread
From: Hangbin Liu @ 2016-04-27 12:54 UTC (permalink / raw)
To: ltp
Signed-off-by: Hangbin Liu <haliu@redhat.com>
---
testcases/network/stress/ipsec/Makefile | 28 +++++++
testcases/network/stress/ipsec/ipsec_lib.sh | 110 ++++++++++++++++++++++++++++
2 files changed, 138 insertions(+)
create mode 100644 testcases/network/stress/ipsec/Makefile
create mode 100644 testcases/network/stress/ipsec/ipsec_lib.sh
diff --git a/testcases/network/stress/ipsec/Makefile b/testcases/network/stress/ipsec/Makefile
new file mode 100644
index 0000000..43352cc
--- /dev/null
+++ b/testcases/network/stress/ipsec/Makefile
@@ -0,0 +1,28 @@
+#!/bin/sh
+# Copyright (c) 2016 Red Hat Inc., All Rights Reserved.
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License as
+# published by the Free Software Foundation; either version 2 of
+# the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it would be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, see <http://www.gnu.org/licenses/>.
+#
+# Author: Hangbin Liu <haliu@redhat.com>
+#
+#######################################################################
+
+
+top_srcdir ?= ../../../..
+
+include $(top_srcdir)/include/mk/env_pre.mk
+
+INSTALL_TARGETS := *.sh
+
+include $(top_srcdir)/include/mk/generic_leaf_target.mk
diff --git a/testcases/network/stress/ipsec/ipsec_lib.sh b/testcases/network/stress/ipsec/ipsec_lib.sh
new file mode 100644
index 0000000..434f5c9
--- /dev/null
+++ b/testcases/network/stress/ipsec/ipsec_lib.sh
@@ -0,0 +1,110 @@
+#!/bin/sh
+# Copyright (c) 2016 Red Hat Inc., All Rights Reserved.
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License as
+# published by the Free Software Foundation; either version 2 of
+# the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it would be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, see <http://www.gnu.org/licenses/>.
+#
+# Author: Hangbin Liu <haliu@redhat.com>
+#
+#######################################################################
+
+. test_net.sh
+
+# tst_ipsec_cleanup: flush ipsec state and policy rules
+tst_ipsec_cleanup()
+{
+ ROD ip xfrm state flush
+ ROD ip xfrm policy flush
+ tst_rhost_run -s -c "ip xfrm state flush && ip xfrm policy flush"
+}
+
+# tst_ipsec target protocol mode spi src_addr dst_addr: config ipsec with
+# supplied protocol and mode.
+#
+# target: target of the configuration host ( lhost / rhost )
+# protocol: ah / esp / ipcomp
+# mode: transport / tunnel
+# spi: the first spi value
+# src_addr: source IP address
+# dst_addr: destination IP address
+tst_ipsec()
+{
+ if [ $# -ne 6 ]; then
+ tst_brkm TCONF "tst_ipsec parameter mismatch"
+ fi
+ tst_check_cmds hexdump
+
+ local target=$1
+ local protocol=$2
+ local mode=$3
+ local spi=$4
+ local src=$5
+ local dst=$6
+
+ # Encryption algorithm
+ local EALGO="des3_ede"
+ local EALGO_KEY=0x$(printf _I_want_to_have_chicken_ | hexdump -ve '/1 "%x"')
+
+ # Authentication algorithm
+ local AALGO="sha1"
+ local AALGO_KEY=0x$(printf beef_fish_pork_salad | hexdump -ve '/1 "%x"')
+
+ # Compression algorithm
+ local CALGO="deflate"
+ # Algorithm options for each protocol
+ local algo_line=
+ local proto=
+ case $protocol in
+ ah)
+ algo_line="auth $AALGO $AALGO_KEY"
+ proto="ah"
+ ;;
+ esp)
+ algo_line="enc $EALGO $EALGO_KEY auth $AALGO $AALGO_KEY"
+ proto="esp"
+ ;;
+ ipcomp)
+ algo_line="comp $CALGO"
+ proto="comp"
+ ;;
+ *)
+ tst_brkm TCONF "tst_ipsec protocol mismatch"
+ ;;
+ esac
+
+ if [ $target = lhost ]; then
+ local spi_1="0x$spi"
+ local spi_2="0x$(( $spi + 1 ))"
+ ROD ip xfrm state add src $src dst $dst spi $spi_1 proto $proto \
+ $algo_line mode $mode sel src $src dst $dst
+ ROD ip xfrm state add src $dst dst $src spi $spi_2 proto $proto \
+ $algo_line mode $mode sel src $dst dst $src
+
+ ROD ip xfrm policy add src $src dst $dst dir out tmpl src $src \
+ dst $dst proto $proto mode $mode
+ ROD ip xfrm policy add src $dst dst $src dir in tmpl src $dst \
+ dst $src proto $proto mode $mode level use
+ elif [ $target = rhost ]; then
+ local spi_1="0x$(( $spi + 1 ))"
+ local spi_2="0x$spi"
+ tst_rhost_run -s -c "ip xfrm state add src $src dst $dst spi $spi_1 \
+ proto $proto $algo_line mode $mode sel src $src dst $dst"
+ tst_rhost_run -s -c "ip xfrm state add src $dst dst $src spi $spi_2 \
+ proto $proto $algo_line mode $mode sel src $dst dst $src"
+
+ tst_rhost_run -s -c "ip xfrm policy add src $src dst $dst dir out \
+ tmpl src $src dst $dst proto $proto mode $mode"
+ tst_rhost_run -s -c "ip xfrm policy add src $dst dst $src dir in \
+ tmpl src $dst dst $src proto $proto mode $mode level use"
+ fi
+}
--
2.5.5
^ permalink raw reply related [flat|nested] 6+ messages in thread* [LTP] [PATCH v8 3/3] network/stress/icmp: add icmp-uni-basic to implement all icmp basic stress test
2016-04-27 12:54 [LTP] [PATCH v8 0/3] networking/stress/icmp: add ip xfrm ipsec support Hangbin Liu
2016-04-27 12:54 ` [LTP] [PATCH v8 1/3] lib/test_net.sh: add tst_ping() to check icmp connectivity Hangbin Liu
2016-04-27 12:54 ` [LTP] [PATCH v8 2/3] network/stress: add ipsec lib Hangbin Liu
@ 2016-04-27 12:54 ` Hangbin Liu
2016-04-28 13:51 ` [LTP] [PATCH v8 0/3] networking/stress/icmp: add ip xfrm ipsec support Alexey Kodanev
3 siblings, 0 replies; 6+ messages in thread
From: Hangbin Liu @ 2016-04-27 12:54 UTC (permalink / raw)
To: ltp
Add icmp-uni-basic to implement the test case and define each test case in
"runtest/" and use parameters. Also use ip xfrm instead of setkey for ipsec
testing.
Signed-off-by: Hangbin Liu <haliu@redhat.com>
---
runtest/network_stress.icmp | 46 +++++++++-----
testcases/network/stress/icmp/Makefile | 3 +
testcases/network/stress/icmp/icmp-uni-basic | 90 ++++++++++++++++++++++++++++
3 files changed, 125 insertions(+), 14 deletions(-)
create mode 100755 testcases/network/stress/icmp/icmp-uni-basic
diff --git a/runtest/network_stress.icmp b/runtest/network_stress.icmp
index 29b52d1..ba30200 100644
--- a/runtest/network_stress.icmp
+++ b/runtest/network_stress.icmp
@@ -2,21 +2,39 @@
# Stress test for TCP/IP protocol stack (ICMP)
#
-icmp4-uni-basic01 icmp4-uni-basic01
-icmp4-uni-basic02 icmp4-uni-basic02
-icmp4-uni-basic03 icmp4-uni-basic03
-icmp4-uni-basic04 icmp4-uni-basic04
-icmp4-uni-basic05 icmp4-uni-basic05
-icmp4-uni-basic06 icmp4-uni-basic06
-icmp4-uni-basic07 icmp4-uni-basic07
+# MAX_LENGTH(65535) - IP(20) - ICMP(8) = MAX_SIZE(65507)
+icmp4-uni-basic01 icmp-uni-basic -s "10 100 1000 10000 65507"
+# MAX_LENGTH(65535) - IP(20) - AH(24) - ICMP(8) = MAX_SIZE(65483)
+icmp4-uni-basic02 icmp-uni-basic -p ah -m transport -s "10 100 1000 10000 65483"
+# MAX_LENGTH(65535) - IP(20) - AH(24) - Tunnel(IPv4 20) - ICMP(8) = MAX_SIZE(65463)
+icmp4-uni-basic03 icmp-uni-basic -p ah -m tunnel -s "10 100 1000 10000 65463"
+# MAX_LENGTH(65535) - IP(20) - ESP (37) - ICMP(8) = MAX_SIZE(65470)
+# ESP Header has pad payload, so the ESP length is variable
+icmp4-uni-basic04 icmp-uni-basic -p esp -m transport -s "10 100 1000 10000 65470"
+# MAX_LENGTH(65535) - IP(20) - ESP (37) - Tunnel(20) - ICMP(8) = MAX_SIZE(65450)
+icmp4-uni-basic05 icmp-uni-basic -p esp -m tunnel -s "10 100 1000 10000 65450"
+# Same message size but different content will result in different data size
+# after compression. So we just use a large enough message size(65000) for testing
+icmp4-uni-basic06 icmp-uni-basic -p ipcomp -m transport -s "10 100 1000 10000 65000"
+icmp4-uni-basic07 icmp-uni-basic -p ipcomp -m tunnel -s "10 100 1000 10000 65000"
-icmp6-uni-basic01 icmp6-uni-basic01
-icmp6-uni-basic02 icmp6-uni-basic02
-icmp6-uni-basic03 icmp6-uni-basic03
-icmp6-uni-basic04 icmp6-uni-basic04
-icmp6-uni-basic05 icmp6-uni-basic05
-icmp6-uni-basic06 icmp6-uni-basic06
-icmp6-uni-basic07 icmp6-uni-basic07
+# MAX_LENGTH(65535) - ICMP(8) = MAX_SIZE(65527)
+icmp6-uni-basic01 icmp-uni-basic -6 -s "10 100 1000 10000 65527"
+# MAX_LENGTH(65535) - AH(24) - ICMP(8) = MAX_SIZE(65503)
+icmp6-uni-basic02 icmp-uni-basic -6 -p ah -m transport -s "10 100 1000 10000 65503"
+# MAX_LENGTH(65535) - ICMP(8) = MAX_SIZE(65527)
+# When receive, we drop the tunnel header first and only leave the inside IPv6
+# Header and icmp message. That's why we can have so large message size.
+icmp6-uni-basic03 icmp-uni-basic -6 -p ah -m tunnel -s "10 100 1000 10000 65527"
+# MAX_LENGTH(65535) - ESP (33) - ICMP(8) = MAX_SIZE(65494)
+# ESP Header has pad payload, so the ESP length is variable
+icmp6-uni-basic04 icmp-uni-basic -6 -p esp -m transport -s "10 100 1000 10000 65494"
+# MAX_LENGTH(65535) - ICMP(8) = MAX_SIZE(65527)
+icmp6-uni-basic05 icmp-uni-basic -6 -p esp -m tunnel -s "10 100 1000 10000 65527"
+# Same message size but different content will result in different data size
+# after compression. So we just use a large enough message size(65000) for testing
+icmp6-uni-basic06 icmp-uni-basic -6 -p ipcomp -m transport -s "10 100 1000 10000 65000"
+icmp6-uni-basic07 icmp-uni-basic -6 -p ipcomp -m tunnel -s "10 100 1000 10000 65000"
icmp4-multi-diffip01 icmp4-multi-diffip01
icmp4-multi-diffip02 icmp4-multi-diffip02
diff --git a/testcases/network/stress/icmp/Makefile b/testcases/network/stress/icmp/Makefile
index 0dad1d1..9310aa1 100644
--- a/testcases/network/stress/icmp/Makefile
+++ b/testcases/network/stress/icmp/Makefile
@@ -23,4 +23,7 @@
top_srcdir ?= ../../../..
include $(top_srcdir)/include/mk/env_pre.mk
+
+INSTALL_TARGETS := icmp*
+
include $(top_srcdir)/include/mk/generic_trunk_target.mk
diff --git a/testcases/network/stress/icmp/icmp-uni-basic b/testcases/network/stress/icmp/icmp-uni-basic
new file mode 100755
index 0000000..cbb1fa9
--- /dev/null
+++ b/testcases/network/stress/icmp/icmp-uni-basic
@@ -0,0 +1,90 @@
+#!/bin/sh
+# Copyright (c) 2016 Red Hat Inc., All Rights Reserved.
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License as
+# published by the Free Software Foundation; either version 2 of
+# the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it would be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, see <http://www.gnu.org/licenses/>.
+#
+# Author: Hangbin Liu <haliu@redhat.com>
+#
+################################################################################
+TCID=${TCID:-icmp-uni-basic}
+TST_TOTAL=1
+TST_COUNT=1
+TST_CLEANUP="tst_ipsec_cleanup"
+
+. ipsec_lib.sh
+
+while getopts "hl:m:p:s:S:6" opt; do
+ case "$opt" in
+ h)
+ echo "Usage:"
+ echo "h help"
+ echo "l n n is the number of test link when tests run"
+ echo "m x x is ipsec mode, could be transport / tunnel"
+ echo "p x x is ipsec protocol, could be ah / esp / ipcomp"
+ echo "s x x is icmp messge size array"
+ echo "S n n is IPsec SPI value"
+ echo "6 run over IPv6"
+ exit 0
+ ;;
+ l) LINK_NUM=$OPTARG ;;
+ m) IPSEC_MODE=$OPTARG ;;
+ p) IPSEC_PROTO=$OPTARG ;;
+ s) ICMP_SIZE_ARRAY=$OPTARG ;;
+ S) SPI=$OPTARG ;;
+ 6) # skip, test_net library already processed it
+ ;;
+ *) tst_brkm TBROK "unknown option: $opt" ;;
+ esac
+done
+
+SPI=${SPI:-1000}
+LINK_NUM=${LINK_NUM:-0}
+DO_IPSEC=${DO_IPSEC:-false}
+ICMP_SIZE_ARRAY=${ICMP_SIZE_ARRAY:-"10 100 1000 10000 65507"}
+[ -n "$IPSEC_MODE" -a -n "$IPSEC_PROTO" ] && DO_IPSEC=true || DO_IPSEC=false
+
+# Test description
+tst_resm TINFO "Verify that the kernel is not crashed with receiving and sending various size of ICMP message with the following conditions"
+tst_resm TINFO "- Version of IP is IPv${TST_IPV6:-4}"
+tst_resm TINFO "- Size of packets are ( $ICMP_SIZE_ARRAY )"
+
+if $DO_IPSEC; then
+ case $IPSEC_PROTO in
+ ah) tst_resm TINFO "- IPsec [ AH / $IPSEC_MODE ]" ;;
+ esp) tst_resm TINFO "- IPsec [ ESP / $IPSEC_MODE ]" ;;
+ ipcomp) tst_resm TINFO "- IPcomp [ $IPSEC_MODE ]" ;;
+ esac
+fi
+
+# name of interface of the local/remote host
+lhost_ifname=$(tst_iface lhost $LINK_NUM)
+rhost_ifname=$(tst_iface rhost $LINK_NUM)
+
+lhost_addr=$(tst_ipaddr)
+rhost_addr=$(tst_ipaddr rhost)
+
+# Configure SAD/SPD
+if $DO_IPSEC ; then
+ tst_ipsec lhost $IPSEC_PROTO $IPSEC_MODE $SPI $lhost_addr $rhost_addr
+ tst_ipsec rhost $IPSEC_PROTO $IPSEC_MODE $SPI $rhost_addr $lhost_addr
+fi
+
+tst_ping $lhost_ifname $rhost_addr $ICMP_SIZE_ARRAY
+if [ $? -ne 0 ]; then
+ tst_resm TFAIL "Check IPv${TST_IPV6:-4} $IPSEC_PROTO $IPSEC_MODE connectivity"
+else
+ tst_resm TPASS "Check IPv${TST_IPV6:-4} $IPSEC_PROTO $IPSEC_MODE connectivity"
+fi
+
+tst_exit
--
2.5.5
^ permalink raw reply related [flat|nested] 6+ messages in thread* [LTP] [PATCH v8 0/3] networking/stress/icmp: add ip xfrm ipsec support
2016-04-27 12:54 [LTP] [PATCH v8 0/3] networking/stress/icmp: add ip xfrm ipsec support Hangbin Liu
` (2 preceding siblings ...)
2016-04-27 12:54 ` [LTP] [PATCH v8 3/3] network/stress/icmp: add icmp-uni-basic to implement all icmp basic stress test Hangbin Liu
@ 2016-04-28 13:51 ` Alexey Kodanev
2016-04-29 2:05 ` Hangbin Liu
3 siblings, 1 reply; 6+ messages in thread
From: Alexey Kodanev @ 2016-04-28 13:51 UTC (permalink / raw)
To: ltp
Hi,
On 04/27/2016 03:54 PM, Hangbin Liu wrote:
> As we know, most of the network stress tests have IPsec testing, and we use
> setkey for configuration. But setkey[1] hasn't updated for a long time. And
> some distros, RHEL7 for example, even don't have ipset-tools package. On
> other hand, iproute2 is recommend for network configuration. And ip xfrm is
> more powerful than setkey. So let's use ip xfrm for ipsec testing.
>
> [1] http://ipsec-tools.sourceforge.net/
>
> Change from V7:
> 1. correct array typo
> 2. use shift instead of bashism
Patch-set applied, thank you.
Also made some cosmetic changes:
* reworded that really lengthy message with "Verify that kernel ...." in
icmp-basic-uni,
* added suffix ".sh" to icmp-uni-basic,
* some lines were over 80 chars, changed them too where possible,
* added copyright line from the previous version of uni-basic tests,
* removed old uni-basic directory.
Thanks,
Alexey
^ permalink raw reply [flat|nested] 6+ messages in thread* [LTP] [PATCH v8 0/3] networking/stress/icmp: add ip xfrm ipsec support
2016-04-28 13:51 ` [LTP] [PATCH v8 0/3] networking/stress/icmp: add ip xfrm ipsec support Alexey Kodanev
@ 2016-04-29 2:05 ` Hangbin Liu
0 siblings, 0 replies; 6+ messages in thread
From: Hangbin Liu @ 2016-04-29 2:05 UTC (permalink / raw)
To: ltp
Hi Alexey,
Thanks for your patient reviews and cosmetic changes.
Best Regards
Hangbin
On Thu, Apr 28, 2016 at 04:51:14PM +0300, Alexey Kodanev wrote:
> Hi,
> On 04/27/2016 03:54 PM, Hangbin Liu wrote:
> >As we know, most of the network stress tests have IPsec testing, and we use
> >setkey for configuration. But setkey[1] hasn't updated for a long time. And
> >some distros, RHEL7 for example, even don't have ipset-tools package. On
> >other hand, iproute2 is recommend for network configuration. And ip xfrm is
> >more powerful than setkey. So let's use ip xfrm for ipsec testing.
> >
> >[1] http://ipsec-tools.sourceforge.net/
> >
> >Change from V7:
> >1. correct array typo
> >2. use shift instead of bashism
> Patch-set applied, thank you.
>
> Also made some cosmetic changes:
>
> * reworded that really lengthy message with "Verify that kernel ...." in
> icmp-basic-uni,
> * added suffix ".sh" to icmp-uni-basic,
> * some lines were over 80 chars, changed them too where possible,
> * added copyright line from the previous version of uni-basic tests,
> * removed old uni-basic directory.
>
> Thanks,
> Alexey
^ permalink raw reply [flat|nested] 6+ messages in thread