Changes in Makefile

586d8702 - selftests/net: Add trace events matching to tcp_ao

Fri, 23 Aug 2024 22:04:58 +0000

selftests/net: Add trace events matching to tcp_aoSetup trace points, add a new ftrace instance in order to not interferewith the rest of the system, filtering by net namespace cookies.Raise a new background thread that parses trace_pipe, matches them withthe list of expected events.Wiring up trace events to selftests provides another insight if there isanything unexpected happining in the tcp-ao code (i.e. key rotation whenit's not expected).Note: in real programs libtraceevent should be used instead of thismanual labor of setting ftrace up and parsing. I'm not using it hereas I don't want to have an .so library dependency that one would have tobring into VM or DUT (Device Under Test). Please, don't copy it overinto any real world programs, that aren't tests.Signed-off-by: Dmitry Safonov <0x7f454c46@gmail.com>Link: https://patch.msgid.link/20240823-tcp-ao-selftests-upd-6-12-v4-8-05623636fe8c@gmail.comSigned-off-by: Jakub Kicinski List of files: /linux-6.15/tools/testing/selftests/net/tcp_ao/Makefile

cc937dad - selftests: centralize -D_GNU_SOURCE= to CFLAGS in lib.mk

Tue, 25 Jun 2024 22:34:45 +0000

selftests: centralize -D_GNU_SOURCE= to CFLAGS in lib.mkCentralize the _GNU_SOURCE definition to CFLAGS in lib.mk. Removeredundant defines from Makefiles that import lib.mk. Convert any usage of"#define _GNU_SOURCE 1" to "#define _GNU_SOURCE".This uses the form "-D_GNU_SOURCE=", which is equivalent to"#define _GNU_SOURCE".Otherwise using "-D_GNU_SOURCE" is equivalent to "-D_GNU_SOURCE=1" and"#define _GNU_SOURCE 1", which is less commonly seen in source code andwould require many changes in selftests to avoid redefinition warnings.Link: https://lkml.kernel.org/r/20240625223454.1586259-2-edliaw@google.comSigned-off-by: Edward Liaw Suggested-by: John Hubbard Acked-by: Shuah Khan Reviewed-by: Muhammad Usama Anjum Cc: Albert Ou Cc: André Almeida Cc: Darren Hart Cc: Dave Hansen Cc: Davidlohr Bueso Cc: David S. Miller Cc: Eric Dumazet Cc: Eric W. Biederman Cc: Fenghua Yu Cc: Ingo Molnar Cc: Jakub Kicinski Cc: Jarkko Sakkinen Cc: Jason Gunthorpe Cc: Kees Cook Cc: Kevin Tian Cc: Palmer Dabbelt Cc: Paolo Abeni Cc: Paolo Bonzini Cc: Paul Walmsley Cc: Peter Zijlstra Cc: Reinette Chatre Cc: Sean Christopherson Cc: Thomas Gleixner Signed-off-by: Andrew Morton List of files: /linux-6.15/tools/testing/selftests/net/tcp_ao/Makefile

e689a876 - selftests/net/tcp-ao: Use LDLIBS instead of LDFLAGS

Wed, 10 Jan 2024 21:34:10 +0000

selftests/net/tcp-ao: Use LDLIBS instead of LDFLAGSThe rules to link selftests are:> $(OUTPUT)/%_ipv4: %.c> $(LINK.c) $^ $(LDLIBS) -o $@>> $(OUTPUT)/%_ipv6: %.c> $(LINK.c) -DIPV6_TEST $^ $(LDLIBS) -o $@The intel test robot uses only selftest's Makefile, not the top linuxMakefile:> make W=1 O=/tmp/kselftest -C tools/testing/selftestsSo, $(LINK.c) is determined by environment, rather than by kernelMakefiles. On my machine (as well as other people that ran tcp-aoselftests) GNU/Make implicit definition does use $(LDFLAGS):> [dima@Mindolluin ~]$ make -p -f/dev/null | grep '^LINK.c\>'> make: *** No targets. Stop.> LINK.c = $(CC) $(CFLAGS) $(CPPFLAGS) $(LDFLAGS) $(TARGET_ARCH)But, according to build robot report, it's not the case for them.While I could just avoid using pre-defined $(LINK.c), it's also used byselftests/lib.mk by default.Anyways, according to GNU/Make documentation [1], I should have used$(LDLIBS) instead of $(LDFLAGS) in the first place, so let's just do it:> LDFLAGS> Extra flags to give to compilers when they are supposed to invoke> the linker, ‘ld’, such as -L. Libraries (-lfoo) should be added> to the LDLIBS variable instead.> LDLIBS> Library flags or names given to compilers when they are supposed> to invoke the linker, ‘ld’. LOADLIBES is a deprecated (but still> supported) alternative to LDLIBS. Non-library linker flags, such> as -L, should go in the LDFLAGS variable.[1]: https://www.gnu.org/software/make/manual/html_node/Implicit-Variables.htmlFixes: cfbab37b3da0 ("selftests/net: Add TCP-AO library")Reported-by: kernel test robot Closes: https://lore.kernel.org/oe-kbuild-all/202401011151.veyYTJzq-lkp@intel.com/Signed-off-by: Dmitry Safonov Acked-by: Paolo Abeni Link: https://lore.kernel.org/r/20240110-tcp_ao-selftests-makefile-v1-1-aa07d043f052@arista.comSigned-off-by: Jakub Kicinski List of files: /linux-6.15/tools/testing/selftests/net/tcp_ao/Makefile

826eb9bc - selftest/tcp-ao: Rectify out-of-tree build

Tue, 19 Dec 2023 02:03:05 +0000

selftest/tcp-ao: Rectify out-of-tree buildTrivial fix for out-of-tree build that I wasn't testing previously:1. Create a directory for library object files, fixes:> gcc lib/kconfig.c -Wall -O2 -g -D_GNU_SOURCE -fno-strict-aliasing -I ../../../../../usr/include/ -iquote /tmp/kselftest/kselftest/net/tcp_ao/lib -I ../../../../include/ -o /tmp/kselftest/kselftest/net/tcp_ao/lib/kconfig.o -c> Assembler messages:> Fatal error: can't create /tmp/kselftest/kselftest/net/tcp_ao/lib/kconfig.o: No such file or directory> make[1]: *** [Makefile:46: /tmp/kselftest/kselftest/net/tcp_ao/lib/kconfig.o] Error 12. Include $(KHDR_INCLUDES) that's exported by selftests/Makefile, fixes:> In file included from lib/kconfig.c:6:> lib/aolib.h:320:45: warning: ‘struct tcp_ao_add’ declared inside parameter list will not be visible outside of this definition or declaration> 320 | extern int test_prepare_key_sockaddr(struct tcp_ao_add *ao, const char *alg,> | ^~~~~~~~~~...3. While at here, clean-up $(KSFT_KHDR_INSTALL): it's not needed anymore since commit f2745dc0ba3d ("selftests: stop using KSFT_KHDR_INSTALL")4. Also, while at here, drop .DEFAULT_GOAL definition: that has a self-explaining comment, that was valid when I made these selftests compile on local v4.19 kernel, but not needed since commit 8ce72dc32578 ("selftests: fix headers_install circular dependency")Fixes: cfbab37b3da0 ("selftests/net: Add TCP-AO library")Reported-by: kernel test robot Closes: https://lore.kernel.org/oe-kbuild-all/202312190645.q76MmHyq-lkp@intel.com/Signed-off-by: Dmitry Safonov Signed-off-by: David S. Miller List of files: /linux-6.15/tools/testing/selftests/net/tcp_ao/Makefile

3c3ead55 - selftests/net: Add TCP-AO key-management test

Fri, 15 Dec 2023 02:36:26 +0000

selftests/net: Add TCP-AO key-management testCheck multiple keys on a socket:- rotation on closed socket- current/rnext operations shouldn't be possible on listen sockets- current/rnext key set should be the one, that's used on connect()- key rotations with pseudo-random generated keys- copying matching keys on connect() and on accept()At this moment there are 3 tests that are "expected" to fail: a kernelfix is needed to improve the situation, they are marked XFAIL.Sample output:> # ./key-management_ipv4> 1..120> # 1601[lib/setup.c:239] rand seed 1700526653> TAP version 13> ok 1 closed socket, delete a key: the key was deleted> ok 2 closed socket, delete all keys: the key was deleted> ok 3 closed socket, delete current key: key deletion was prevented> ok 4 closed socket, delete rnext key: key deletion was prevented> ok 5 closed socket, delete a key + set current/rnext: the key was deleted> ok 6 closed socket, force-delete current key: the key was deleted> ok 7 closed socket, force-delete rnext key: the key was deleted> ok 8 closed socket, delete current+rnext key: key deletion was prevented> ok 9 closed socket, add + change current key> ok 10 closed socket, add + change rnext key> ok 11 listen socket, delete a key: the key was deleted> ok 12 listen socket, delete all keys: the key was deleted> ok 13 listen socket, setting current key not allowed> ok 14 listen socket, setting rnext key not allowed> ok 15 # XFAIL listen() after current/rnext keys set: the socket has current/rnext keys: 100:200> ok 16 # XFAIL listen socket, delete current key from before listen(): failed to delete the key 100:100 -16> ok 17 # XFAIL listen socket, delete rnext key from before listen(): failed to delete the key 200:200 -16> ok 18 listen socket, getsockopt(TCP_AO_REPAIR) is restricted> ok 19 listen socket, setsockopt(TCP_AO_REPAIR) is restricted> ok 20 listen socket, delete a key + set current/rnext: key deletion was prevented> ok 21 listen socket, force-delete current key: key deletion was prevented> ok 22 listen socket, force-delete rnext key: key deletion was prevented> ok 23 listen socket, delete a key: the key was deleted> ok 24 listen socket, add + change current key> ok 25 listen socket, add + change rnext key> ok 26 server: Check current/rnext keys unset before connect(): The socket keys are consistent with the expectations> ok 27 client: Check current/rnext keys unset before connect(): current key 19 as expected> ok 28 client: Check current/rnext keys unset before connect(): rnext key 146 as expected> ok 29 server: Check current/rnext keys unset before connect(): server alive> ok 30 server: Check current/rnext keys unset before connect(): passed counters checks> ok 31 client: Check current/rnext keys unset before connect(): The socket keys are consistent with the expectations> ok 32 server: Check current/rnext keys unset before connect(): The socket keys are consistent with the expectations> ok 33 server: Check current/rnext keys unset before connect(): passed counters checks> ok 34 client: Check current/rnext keys unset before connect(): passed counters checks> ok 35 server: Check current/rnext keys set before connect(): The socket keys are consistent with the expectations> ok 36 server: Check current/rnext keys set before connect(): server alive> ok 37 server: Check current/rnext keys set before connect(): passed counters checks> ok 38 client: Check current/rnext keys set before connect(): current key 10 as expected> ok 39 client: Check current/rnext keys set before connect(): rnext key 137 as expected> ok 40 server: Check current/rnext keys set before connect(): The socket keys are consistent with the expectations> ok 41 client: Check current/rnext keys set before connect(): The socket keys are consistent with the expectations> ok 42 client: Check current/rnext keys set before connect(): passed counters checks> ok 43 server: Check current/rnext keys set before connect(): passed counters checks> ok 44 server: Check current != rnext keys set before connect(): The socket keys are consistent with the expectations> ok 45 server: Check current != rnext keys set before connect(): server alive> ok 46 server: Check current != rnext keys set before connect(): passed counters checks> ok 47 client: Check current != rnext keys set before connect(): current key 10 as expected> ok 48 client: Check current != rnext keys set before connect(): rnext key 132 as expected> ok 49 server: Check current != rnext keys set before connect(): The socket keys are consistent with the expectations> ok 50 client: Check current != rnext keys set before connect(): The socket keys are consistent with the expectations> ok 51 client: Check current != rnext keys set before connect(): passed counters checks> ok 52 server: Check current != rnext keys set before connect(): passed counters checks> ok 53 server: Check current flapping back on peer's RnextKey request: The socket keys are consistent with the expectations> ok 54 server: Check current flapping back on peer's RnextKey request: server alive> ok 55 server: Check current flapping back on peer's RnextKey request: passed counters checks> ok 56 client: Check current flapping back on peer's RnextKey request: current key 10 as expected> ok 57 client: Check current flapping back on peer's RnextKey request: rnext key 132 as expected> ok 58 server: Check current flapping back on peer's RnextKey request: The socket keys are consistent with the expectations> ok 59 client: Check current flapping back on peer's RnextKey request: The socket keys are consistent with the expectations> ok 60 server: Check current flapping back on peer's RnextKey request: passed counters checks> ok 61 client: Check current flapping back on peer's RnextKey request: passed counters checks> ok 62 server: Rotate over all different keys: The socket keys are consistent with the expectations> ok 63 server: Rotate over all different keys: server alive> ok 64 server: Rotate over all different keys: passed counters checks> ok 65 server: Rotate over all different keys: current key 128 as expected> ok 66 client: Rotate over all different keys: rnext key 128 as expected> ok 67 server: Rotate over all different keys: current key 129 as expected> ok 68 client: Rotate over all different keys: rnext key 129 as expected> ok 69 server: Rotate over all different keys: current key 130 as expected> ok 70 client: Rotate over all different keys: rnext key 130 as expected> ok 71 server: Rotate over all different keys: current key 131 as expected> ok 72 client: Rotate over all different keys: rnext key 131 as expected> ok 73 server: Rotate over all different keys: current key 132 as expected> ok 74 client: Rotate over all different keys: rnext key 132 as expected> ok 75 server: Rotate over all different keys: current key 133 as expected> ok 76 client: Rotate over all different keys: rnext key 133 as expected> ok 77 server: Rotate over all different keys: current key 134 as expected> ok 78 client: Rotate over all different keys: rnext key 134 as expected> ok 79 server: Rotate over all different keys: current key 135 as expected> ok 80 client: Rotate over all different keys: rnext key 135 as expected> ok 81 server: Rotate over all different keys: current key 136 as expected> ok 82 client: Rotate over all different keys: rnext key 136 as expected> ok 83 server: Rotate over all different keys: current key 137 as expected> ok 84 client: Rotate over all different keys: rnext key 137 as expected> ok 85 server: Rotate over all different keys: current key 138 as expected> ok 86 client: Rotate over all different keys: rnext key 138 as expected> ok 87 server: Rotate over all different keys: current key 139 as expected> ok 88 client: Rotate over all different keys: rnext key 139 as expected> ok 89 server: Rotate over all different keys: current key 140 as expected> ok 90 client: Rotate over all different keys: rnext key 140 as expected> ok 91 server: Rotate over all different keys: current key 141 as expected> ok 92 client: Rotate over all different keys: rnext key 141 as expected> ok 93 server: Rotate over all different keys: current key 142 as expected> ok 94 client: Rotate over all different keys: rnext key 142 as expected> ok 95 server: Rotate over all different keys: current key 143 as expected> ok 96 client: Rotate over all different keys: rnext key 143 as expected> ok 97 server: Rotate over all different keys: current key 144 as expected> ok 98 client: Rotate over all different keys: rnext key 144 as expected> ok 99 server: Rotate over all different keys: current key 145 as expected> ok 100 client: Rotate over all different keys: rnext key 145 as expected> ok 101 server: Rotate over all different keys: current key 146 as expected> ok 102 client: Rotate over all different keys: rnext key 146 as expected> ok 103 server: Rotate over all different keys: current key 127 as expected> ok 104 client: Rotate over all different keys: rnext key 127 as expected> ok 105 client: Rotate over all different keys: current key 0 as expected> ok 106 client: Rotate over all different keys: rnext key 127 as expected> ok 107 server: Rotate over all different keys: The socket keys are consistent with the expectations> ok 108 client: Rotate over all different keys: The socket keys are consistent with the expectations> ok 109 client: Rotate over all different keys: passed counters checks> ok 110 server: Rotate over all different keys: passed counters checks> ok 111 server: Check accept() => established key matching: The socket keys are consistent with the expectations> ok 112 Can't add a key with non-matching ip-address for established sk> ok 113 Can't add a key with non-matching VRF for established sk> ok 114 server: Check accept() => established key matching: server alive> ok 115 server: Check accept() => established key matching: passed counters checks> ok 116 client: Check connect() => established key matching: current key 0 as expected> ok 117 client: Check connect() => established key matching: rnext key 128 as expected> ok 118 client: Check connect() => established key matching: The socket keys are consistent with the expectations> ok 119 server: Check accept() => established key matching: The socket keys are consistent with the expectations> ok 120 server: Check accept() => established key matching: passed counters checks> # Totals: pass:120 fail:0 xfail:0 xpass:0 skip:0 error:0Signed-off-by: Dmitry Safonov Signed-off-by: David S. Miller List of files: /linux-6.15/tools/testing/selftests/net/tcp_ao/Makefile

8c4e8dd0 - selftests/net: Add TCP-AO selfconnect/simultaneous connect test

Fri, 15 Dec 2023 02:36:25 +0000

selftests/net: Add TCP-AO selfconnect/simultaneous connect testCheck that a rare functionality of TCP named self-connect works withTCP-AO. This "under the cover" also checks TCP simultaneous connect(TCP_SYN_RECV socket state), which would be harder to check other ways.In order to verify that it's indeed TCP simultaneous connect, checkthe counters TCPChallengeACK and TCPSYNChallenge.Sample of the output:> # ./self-connect_ipv6> 1..4> # 1738[lib/setup.c:254] rand seed 1696451931> TAP version 13> ok 1 self-connect(same keyids): connect TCPAOGood 0 => 24> ok 2 self-connect(different keyids): connect TCPAOGood 26 => 50> ok 3 self-connect(restore): connect TCPAOGood 52 => 97> ok 4 self-connect(restore, different keyids): connect TCPAOGood 99 => 144> # Totals: pass:4 fail:0 xfail:0 xpass:0 skip:0 error:0Signed-off-by: Dmitry Safonov Signed-off-by: David S. Miller List of files: /linux-6.15/tools/testing/selftests/net/tcp_ao/Makefile

c6df7b23 - selftests/net: Add TCP-AO RST test

Fri, 15 Dec 2023 02:36:24 +0000

selftests/net: Add TCP-AO RST testCheck that both active and passive reset works and correctly signsegments with TCP-AO or don't send RSTs if not possible to sign.A listening socket with backlog = 0 gets one connection in acceptqueue, another in syn queue. Once the server/listener socket isforcibly closed, client sockets aren't connected to anything.In regular situation they would receive RST on any segment, butwith TCP-AO as there's no listener, no AO-key and unknown ISNs,no RST should be sent.And "passive" reset, where RST is sent on reply for some segment(tcp_v{4,6}_send_reset()) - there use TCP_REPAIR to corrupt SEQ numbers,which later results in TCP-AO signed RST, which will be verified andclient socket will get EPIPE.No TCPAORequired/TCPAOBad segments are expected during these tests.Sample of the output:> # ./rst_ipv4> 1..15> # 1462[lib/setup.c:254] rand seed 1686611171> TAP version 13> ok 1 servered 1000 bytes> ok 2 Verified established tcp connection> ok 3 sk[0] = 7, connection was reset> ok 4 sk[1] = 8, connection was reset> ok 5 sk[2] = 9> ok 6 MKT counters are good on server> ok 7 Verified established tcp connection> ok 8 client connection broken post-seq-adjust> ok 9 client connection was reset> ok 10 No segments without AO sign (server)> ok 11 Signed AO segments (server): 0 => 30> ok 12 No segments with bad AO sign (server)> ok 13 No segments without AO sign (client)> ok 14 Signed AO segments (client): 0 => 30> ok 15 No segments with bad AO sign (client)> # Totals: pass:15 fail:0 xfail:0 xpass:0 skip:0 error:0Signed-off-by: Dmitry Safonov Signed-off-by: David S. Miller List of files: /linux-6.15/tools/testing/selftests/net/tcp_ao/Makefile

0d16eae5 - selftests/net: Add SEQ number extension test

Fri, 15 Dec 2023 02:36:23 +0000

selftests/net: Add SEQ number extension testCheck that on SEQ number wraparound there is no disruption or TCPAOBadsegments produced.Sample of expected output:> # ./seq-ext_ipv4> 1..7> # 1436[lib/setup.c:254] rand seed 1686611079> TAP version 13> ok 1 server alive> ok 2 post-migrate connection alive> ok 3 TCPAOGood counter increased 1002 => 3002> ok 4 TCPAOGood counter increased 1003 => 3003> ok 5 TCPAOBad counter didn't increase> ok 6 TCPAOBad counter didn't increase> ok 7 SEQ extension incremented: 1/1999, 1/998999> # Totals: pass:7 fail:0 xfail:0 xpass:0 skip:0 error:0Signed-off-by: Dmitry Safonov Signed-off-by: David S. Miller List of files: /linux-6.15/tools/testing/selftests/net/tcp_ao/Makefile

3715d32d - selftests/net: Add TCP_REPAIR TCP-AO tests

Fri, 15 Dec 2023 02:36:22 +0000

selftests/net: Add TCP_REPAIR TCP-AO testsThe test plan is:1. check that TCP-AO connection may be restored on another socket2. check restore with wrong send/recv ISN (checking that they are part of MAC generation)3. check restore with wrong SEQ number extension (checking that high bytes of it taken into MAC generation)Sample output expected:> # ./restore_ipv4> 1..20> # 1412[lib/setup.c:254] rand seed 1686610825> TAP version 13> ok 1 TCP-AO migrate to another socket: server alive> ok 2 TCP-AO migrate to another socket: post-migrate connection is alive> ok 3 TCP-AO migrate to another socket: counter TCPAOGood increased 23 => 44> ok 4 TCP-AO migrate to another socket: counter TCPAOGood increased 22 => 42> ok 5 TCP-AO with wrong send ISN: server couldn't serve> ok 6 TCP-AO with wrong send ISN: post-migrate connection is broken> ok 7 TCP-AO with wrong send ISN: counter TCPAOBad increased 0 => 4> ok 8 TCP-AO with wrong send ISN: counter TCPAOBad increased 0 => 3> ok 9 TCP-AO with wrong receive ISN: server couldn't serve> ok 10 TCP-AO with wrong receive ISN: post-migrate connection is broken> ok 11 TCP-AO with wrong receive ISN: counter TCPAOBad increased 4 => 8> ok 12 TCP-AO with wrong receive ISN: counter TCPAOBad increased 5 => 10> ok 13 TCP-AO with wrong send SEQ ext number: server couldn't serve> ok 14 TCP-AO with wrong send SEQ ext number: post-migrate connection is broken> ok 15 TCP-AO with wrong send SEQ ext number: counter TCPAOBad increased 9 => 10> ok 16 TCP-AO with wrong send SEQ ext number: counter TCPAOBad increased 11 => 19> ok 17 TCP-AO with wrong receive SEQ ext number: post-migrate connection is broken> ok 18 TCP-AO with wrong receive SEQ ext number: server couldn't serve> ok 19 TCP-AO with wrong receive SEQ ext number: counter TCPAOBad increased 10 => 18> ok 20 TCP-AO with wrong receive SEQ ext number: counter TCPAOBad increased 20 => 23> # Totals: pass:20 fail:0 xfail:0 xpass:0 skip:0 error:0Signed-off-by: Dmitry Safonov Signed-off-by: David S. Miller List of files: /linux-6.15/tools/testing/selftests/net/tcp_ao/Makefile

d1066c9c - selftests/net: Add test/benchmark for removing MKTs

Fri, 15 Dec 2023 02:36:21 +0000

selftests/net: Add test/benchmark for removing MKTsSample output:> 1..36> # 1106[lib/setup.c:207] rand seed 1660754406> TAP version 13> ok 1 Worst case connect 512 keys: min=0ms max=1ms mean=0.583329ms stddev=0.076376> ok 2 Connect random-search 512 keys: min=0ms max=1ms mean=0.53412ms stddev=0.0516779> ok 3 Worst case delete 512 keys: min=2ms max=11ms mean=6.04139ms stddev=0.245792> ok 4 Add a new key 512 keys: min=0ms max=13ms mean=0.673415ms stddev=0.0820618> ok 5 Remove random-search 512 keys: min=5ms max=9ms mean=6.65969ms stddev=0.258064> ok 6 Remove async 512 keys: min=0ms max=0ms mean=0.041825ms stddev=0.0204512> ok 7 Worst case connect 1024 keys: min=0ms max=2ms mean=0.520357ms stddev=0.0721358> ok 8 Connect random-search 1024 keys: min=0ms max=2ms mean=0.535312ms stddev=0.0517355> ok 9 Worst case delete 1024 keys: min=5ms max=9ms mean=8.27219ms stddev=0.287614> ok 10 Add a new key 1024 keys: min=0ms max=1ms mean=0.688121ms stddev=0.0829531> ok 11 Remove random-search 1024 keys: min=5ms max=9ms mean=8.37649ms stddev=0.289422> ok 12 Remove async 1024 keys: min=0ms max=0ms mean=0.0457096ms stddev=0.0213798> ok 13 Worst case connect 2048 keys: min=0ms max=2ms mean=0.748804ms stddev=0.0865335> ok 14 Connect random-search 2048 keys: min=0ms max=2ms mean=0.782993ms stddev=0.0625697> ok 15 Worst case delete 2048 keys: min=5ms max=10ms mean=8.23106ms stddev=0.286898> ok 16 Add a new key 2048 keys: min=0ms max=1ms mean=0.812988ms stddev=0.0901658> ok 17 Remove random-search 2048 keys: min=8ms max=9ms mean=8.84949ms stddev=0.297481> ok 18 Remove async 2048 keys: min=0ms max=0ms mean=0.0297223ms stddev=0.0172402> ok 19 Worst case connect 4096 keys: min=1ms max=5ms mean=1.53352ms stddev=0.123836> ok 20 Connect random-search 4096 keys: min=1ms max=5ms mean=1.52226ms stddev=0.0872429> ok 21 Worst case delete 4096 keys: min=5ms max=9ms mean=8.25874ms stddev=0.28738> ok 22 Add a new key 4096 keys: min=0ms max=3ms mean=1.67382ms stddev=0.129376> ok 23 Remove random-search 4096 keys: min=5ms max=10ms mean=8.26178ms stddev=0.287433> ok 24 Remove async 4096 keys: min=0ms max=0ms mean=0.0340009ms stddev=0.0184393> ok 25 Worst case connect 8192 keys: min=2ms max=4ms mean=2.86208ms stddev=0.169177> ok 26 Connect random-search 8192 keys: min=2ms max=4ms mean=2.87592ms stddev=0.119915> ok 27 Worst case delete 8192 keys: min=6ms max=11ms mean=7.55291ms stddev=0.274826> ok 28 Add a new key 8192 keys: min=1ms max=5ms mean=2.56797ms stddev=0.160249> ok 29 Remove random-search 8192 keys: min=5ms max=10ms mean=7.14002ms stddev=0.267208> ok 30 Remove async 8192 keys: min=0ms max=0ms mean=0.0320066ms stddev=0.0178904> ok 31 Worst case connect 16384 keys: min=5ms max=6ms mean=5.55334ms stddev=0.235655> ok 32 Connect random-search 16384 keys: min=5ms max=6ms mean=5.52614ms stddev=0.166225> ok 33 Worst case delete 16384 keys: min=5ms max=11ms mean=7.39109ms stddev=0.271866> ok 34 Add a new key 16384 keys: min=2ms max=4ms mean=3.35799ms stddev=0.183248> ok 35 Remove random-search 16384 keys: min=5ms max=8ms mean=6.86078ms stddev=0.261931> ok 36 Remove async 16384 keys: min=0ms max=0ms mean=0.0302384ms stddev=0.0173892> # Totals: pass:36 fail:0 xfail:0 xpass:0 skip:0 error:0>From the output it's visible that the current simplified approach withlinked-list of MKTs scales quite fine even for thousands of keys.And that also means that the majority of the time for delete is eaten bysynchronize_rcu() [which I can confirm separately by tracing].Signed-off-by: Dmitry Safonov Signed-off-by: David S. Miller List of files: /linux-6.15/tools/testing/selftests/net/tcp_ao/Makefile

6f0c472a - selftests/net: Add TCP-AO + TCP-MD5 + no sign listen socket tests

Fri, 15 Dec 2023 02:36:20 +0000

selftests/net: Add TCP-AO + TCP-MD5 + no sign listen socket testsThe test plan was (most of tests have all 3 client types):1. TCP-AO listen (INADDR_ANY)2. TCP-MD5 listen (INADDR_ANY)3. non-signed listen (INADDR_ANY)4. TCP-AO + TCP-MD5 listen (prefix)5. TCP-AO subprefix add failure [checked in setsockopt-closed.c]6. TCP-AO out of prefix connect [checked in connect-deny.c]7. TCP-AO + TCP-MD5 on connect()8. TCP-AO intersect with TCP-MD5 failure9. Established TCP-AO: add TCP-MD5 key10. Established TCP-MD5: add TCP-AO key11. Established non-signed: add TCP-AO keyOutput produced:> # ./unsigned-md5_ipv6> 1..72> # 1592[lib/setup.c:239] rand seed 1697567046> TAP version 13> ok 1 AO server (INADDR_ANY): AO client: counter TCPAOGood increased 0 => 2> ok 2 AO server (INADDR_ANY): AO client: connected> ok 3 AO server (INADDR_ANY): MD5 client> ok 4 AO server (INADDR_ANY): MD5 client: counter TCPMD5Unexpected increased 0 => 1> ok 5 AO server (INADDR_ANY): no sign client: counter TCPAORequired increased 0 => 1> ok 6 AO server (INADDR_ANY): unsigned client> ok 7 AO server (AO_REQUIRED): AO client: connected> ok 8 AO server (AO_REQUIRED): AO client: counter TCPAOGood increased 4 => 6> ok 9 AO server (AO_REQUIRED): unsigned client> ok 10 AO server (AO_REQUIRED): unsigned client: counter TCPAORequired increased 1 => 2> ok 11 MD5 server (INADDR_ANY): AO client: counter TCPAOKeyNotFound increased 0 => 1> ok 12 MD5 server (INADDR_ANY): AO client> ok 13 MD5 server (INADDR_ANY): MD5 client: connected> ok 14 MD5 server (INADDR_ANY): MD5 client: no counter checks> ok 15 MD5 server (INADDR_ANY): no sign client> ok 16 MD5 server (INADDR_ANY): no sign client: counter TCPMD5NotFound increased 0 => 1> ok 17 no sign server: AO client> ok 18 no sign server: AO client: counter TCPAOKeyNotFound increased 1 => 2> ok 19 no sign server: MD5 client> ok 20 no sign server: MD5 client: counter TCPMD5Unexpected increased 1 => 2> ok 21 no sign server: no sign client: connected> ok 22 no sign server: no sign client: counter CurrEstab increased 0 => 1> ok 23 AO+MD5 server: AO client (matching): connected> ok 24 AO+MD5 server: AO client (matching): counter TCPAOGood increased 8 => 10> ok 25 AO+MD5 server: AO client (misconfig, matching MD5)> ok 26 AO+MD5 server: AO client (misconfig, matching MD5): counter TCPAOKeyNotFound increased 2 => 3> ok 27 AO+MD5 server: AO client (misconfig, non-matching): counter TCPAOKeyNotFound increased 3 => 4> ok 28 AO+MD5 server: AO client (misconfig, non-matching)> ok 29 AO+MD5 server: MD5 client (matching): connected> ok 30 AO+MD5 server: MD5 client (matching): no counter checks> ok 31 AO+MD5 server: MD5 client (misconfig, matching AO)> ok 32 AO+MD5 server: MD5 client (misconfig, matching AO): counter TCPMD5Unexpected increased 2 => 3> ok 33 AO+MD5 server: MD5 client (misconfig, non-matching)> ok 34 AO+MD5 server: MD5 client (misconfig, non-matching): counter TCPMD5Unexpected increased 3 => 4> ok 35 AO+MD5 server: no sign client (unmatched): connected> ok 36 AO+MD5 server: no sign client (unmatched): counter CurrEstab increased 0 => 1> ok 37 AO+MD5 server: no sign client (misconfig, matching AO)> ok 38 AO+MD5 server: no sign client (misconfig, matching AO): counter TCPAORequired increased 2 => 3> ok 39 AO+MD5 server: no sign client (misconfig, matching MD5)> ok 40 AO+MD5 server: no sign client (misconfig, matching MD5): counter TCPMD5NotFound increased 1 => 2> ok 41 AO+MD5 server: client with both [TCP-MD5] and TCP-AO keys: connect() was prevented> ok 42 AO+MD5 server: client with both [TCP-MD5] and TCP-AO keys: no counter checks> ok 43 AO+MD5 server: client with both TCP-MD5 and [TCP-AO] keys: connect() was prevented> ok 44 AO+MD5 server: client with both TCP-MD5 and [TCP-AO] keys: no counter checks> ok 45 TCP-AO established: add TCP-MD5 key: postfailed as expected> ok 46 TCP-AO established: add TCP-MD5 key: counter TCPAOGood increased 12 => 14> ok 47 TCP-MD5 established: add TCP-AO key: postfailed as expected> ok 48 TCP-MD5 established: add TCP-AO key: no counter checks> ok 49 non-signed established: add TCP-AO key: postfailed as expected> ok 50 non-signed established: add TCP-AO key: counter CurrEstab increased 0 => 1> ok 51 TCP-AO key intersects with existing TCP-MD5 key: prefailed as expected: Key was rejected by service> ok 52 TCP-MD5 key intersects with existing TCP-AO key: prefailed as expected: Key was rejected by service> ok 53 TCP-MD5 key + TCP-AO required: prefailed as expected: Key was rejected by service> ok 54 TCP-AO required on socket + TCP-MD5 key: prefailed as expected: Key was rejected by service> ok 55 VRF: TCP-AO key (no l3index) + TCP-MD5 key (no l3index): prefailed as expected: Key was rejected by service> ok 56 VRF: TCP-MD5 key (no l3index) + TCP-AO key (no l3index): prefailed as expected: Key was rejected by service> ok 57 VRF: TCP-AO key (no l3index) + TCP-MD5 key (l3index=0): prefailed as expected: Key was rejected by service> ok 58 VRF: TCP-MD5 key (l3index=0) + TCP-AO key (no l3index): prefailed as expected: Key was rejected by service> ok 59 VRF: TCP-AO key (no l3index) + TCP-MD5 key (l3index=N): prefailed as expected: Key was rejected by service> ok 60 VRF: TCP-MD5 key (l3index=N) + TCP-AO key (no l3index): prefailed as expected: Key was rejected by service> ok 61 VRF: TCP-AO key (l3index=0) + TCP-MD5 key (no l3index): prefailed as expected: Key was rejected by service> ok 62 VRF: TCP-MD5 key (no l3index) + TCP-AO key (l3index=0): prefailed as expected: Key was rejected by service> ok 63 VRF: TCP-AO key (l3index=0) + TCP-MD5 key (l3index=0): prefailed as expected: Key was rejected by service> ok 64 VRF: TCP-MD5 key (l3index=0) + TCP-AO key (l3index=0): prefailed as expected: Key was rejected by service> ok 65 VRF: TCP-AO key (l3index=0) + TCP-MD5 key (l3index=N)> ok 66 VRF: TCP-MD5 key (l3index=N) + TCP-AO key (l3index=0)> ok 67 VRF: TCP-AO key (l3index=N) + TCP-MD5 key (no l3index): prefailed as expected: Key was rejected by service> ok 68 VRF: TCP-MD5 key (no l3index) + TCP-AO key (l3index=N): prefailed as expected: Key was rejected by service> ok 69 VRF: TCP-AO key (l3index=N) + TCP-MD5 key (l3index=0)> ok 70 VRF: TCP-MD5 key (l3index=0) + TCP-AO key (l3index=N)> ok 71 VRF: TCP-AO key (l3index=N) + TCP-MD5 key (l3index=N): prefailed as expected: Key was rejected by service> ok 72 VRF: TCP-MD5 key (l3index=N) + TCP-AO key (l3index=N): prefailed as expected: Key was rejected by service> # Totals: pass:72 fail:0 xfail:0 xpass:0 skip:0 error:0Signed-off-by: Dmitry Safonov Signed-off-by: David S. Miller List of files: /linux-6.15/tools/testing/selftests/net/tcp_ao/Makefile

b2666053 - selftests/net: Add test for TCP-AO add setsockopt() command

Fri, 15 Dec 2023 02:36:19 +0000

selftests/net: Add test for TCP-AO add setsockopt() commandVerify corner-cases for UAPI.Sample output:> # ./setsockopt-closed_ipv4> 1..120> # 1657[lib/setup.c:254] rand seed 1681938184> TAP version 13> ok 1 AO add: minimum size> ok 2 AO add: extended size> ok 3 AO add: null optval> ok 4 AO del: minimum size> ok 5 AO del: extended size> ok 6 AO del: null optval> ok 7 AO set info: minimum size> ok 8 AO set info: extended size> ok 9 AO info get: : extended size> ok 10 AO set info: null optval> ok 11 AO get info: minimum size> ok 12 AO get info: extended size> ok 13 AO get info: null optval> ok 14 AO get info: null optlen> ok 15 AO get keys: minimum size> ok 16 AO get keys: extended size> ok 17 AO get keys: null optval> ok 18 AO get keys: null optlen> ok 19 key add: too big keylen> ok 20 key add: using reserved padding> ok 21 key add: using reserved2 padding> ok 22 key add: wrong address family> ok 23 key add: port (unsupported)> ok 24 key add: no prefix, addr> ok 25 key add: no prefix, any addr> ok 26 key add: prefix, any addr> ok 27 key add: too big prefix> ok 28 key add: too short prefix> ok 29 key add: bad key flags> ok 30 key add: add current key on a listen socket> ok 31 key add: add rnext key on a listen socket> ok 32 key add: add current+rnext key on a listen socket> ok 33 key add: add key and set as current> ok 34 key add: add key and set as rnext> ok 35 key add: add key and set as current+rnext> ok 36 key add: ifindex without TCP_AO_KEYF_IFNINDEX> ok 37 key add: non-existent VRF> ok 38 optmem limit was hit on adding 69 key> ok 39 key add: maclen bigger than TCP hdr> ok 40 key add: bad algo> ok 41 key del: using reserved padding> ok 42 key del: using reserved2 padding> ok 43 key del: del and set current key on a listen socket> ok 44 key del: del and set rnext key on a listen socket> ok 45 key del: del and set current+rnext key on a listen socket> ok 46 key del: bad key flags> ok 47 key del: ifindex without TCP_AO_KEYF_IFNINDEX> ok 48 key del: non-existent VRF> ok 49 key del: set non-exising current key> ok 50 key del: set non-existing rnext key> ok 51 key del: set non-existing current+rnext key> ok 52 key del: set current key> ok 53 key del: set rnext key> ok 54 key del: set current+rnext key> ok 55 key del: set as current key to be removed> ok 56 key del: set as rnext key to be removed> ok 57 key del: set as current+rnext key to be removed> ok 58 key del: async on non-listen> ok 59 key del: non-existing sndid> ok 60 key del: non-existing rcvid> ok 61 key del: incorrect addr> ok 62 key del: correct key delete> ok 63 AO info set: set current key on a listen socket> ok 64 AO info set: set rnext key on a listen socket> ok 65 AO info set: set current+rnext key on a listen socket> ok 66 AO info set: using reserved padding> ok 67 AO info set: using reserved2 padding> ok 68 AO info set: accept_icmps> ok 69 AO info get: accept_icmps> ok 70 AO info set: ao required> ok 71 AO info get: ao required> ok 72 AO info set: ao required with MD5 key> ok 73 AO info set: set non-existing current key> ok 74 AO info set: set non-existing rnext key> ok 75 AO info set: set non-existing current+rnext key> ok 76 AO info set: set current key> ok 77 AO info get: set current key> ok 78 AO info set: set rnext key> ok 79 AO info get: set rnext key> ok 80 AO info set: set current+rnext key> ok 81 AO info get: set current+rnext key> ok 82 AO info set: set counters> ok 83 AO info get: set counters> ok 84 AO info set: no-op> ok 85 AO info get: no-op> ok 86 get keys: no ao_info> ok 87 get keys: proper tcp_ao_get_mkts()> ok 88 get keys: set out-only pkt_good counter> ok 89 get keys: set out-only pkt_bad counter> ok 90 get keys: bad keyflags> ok 91 get keys: ifindex without TCP_AO_KEYF_IFNINDEX> ok 92 get keys: using reserved field> ok 93 get keys: no prefix, addr> ok 94 get keys: no prefix, any addr> ok 95 get keys: prefix, any addr> ok 96 get keys: too big prefix> ok 97 get keys: too short prefix> ok 98 get keys: prefix + addr> ok 99 get keys: get_all + prefix> ok 100 get keys: get_all + addr> ok 101 get keys: get_all + sndid> ok 102 get keys: get_all + rcvid> ok 103 get keys: current + prefix> ok 104 get keys: current + addr> ok 105 get keys: current + sndid> ok 106 get keys: current + rcvid> ok 107 get keys: rnext + prefix> ok 108 get keys: rnext + addr> ok 109 get keys: rnext + sndid> ok 110 get keys: rnext + rcvid> ok 111 get keys: get_all + current> ok 112 get keys: get_all + rnext> ok 113 get keys: current + rnext> ok 114 key add: duplicate: full copy> ok 115 key add: duplicate: any addr key on the socket> ok 116 key add: duplicate: add any addr key> ok 117 key add: duplicate: add any addr for the same subnet> ok 118 key add: duplicate: full copy of a key> ok 119 key add: duplicate: RecvID differs> ok 120 key add: duplicate: SendID differs> # Totals: pass:120 fail:0 xfail:0 xpass:0 skip:0 error:0Signed-off-by: Dmitry Safonov Signed-off-by: David S. Miller List of files: /linux-6.15/tools/testing/selftests/net/tcp_ao/Makefile

ed9d09b3 - selftests/net: Add a test for TCP-AO keys matching

Fri, 15 Dec 2023 02:36:18 +0000

selftests/net: Add a test for TCP-AO keys matchingAdd TCP-AO tests on connect()/accept() pair.SNMP counters exposed by kernel are very useful here to verify theexpected behavior of TCP-AO.Expected output for ipv4 version:> # ./connect-deny_ipv4> 1..19> # 1702[lib/setup.c:254] rand seed 1680553689> TAP version 13> ok 1 Non-AO server + AO client> ok 2 Non-AO server + AO client: counter TCPAOKeyNotFound increased 0 => 1> ok 3 AO server + Non-AO client> ok 4 AO server + Non-AO client: counter TCPAORequired increased 0 => 1> ok 5 Wrong password> ok 6 Wrong password: counter TCPAOBad increased 0 => 1> ok 7 Wrong rcv id> ok 8 Wrong rcv id: counter TCPAOKeyNotFound increased 1 => 2> ok 9 Wrong snd id> ok 10 Wrong snd id: counter TCPAOGood increased 0 => 1> ok 11 Server: Wrong addr: counter TCPAOKeyNotFound increased 2 => 3> ok 12 Server: Wrong addr> ok 13 Client: Wrong addr: connect() was prevented> ok 14 rcv id != snd id: connected> ok 15 rcv id != snd id: counter TCPAOGood increased 1 => 3> ok 16 Server: prefix match: connected> ok 17 Server: prefix match: counter TCPAOGood increased 4 => 6> ok 18 Client: prefix match: connected> ok 19 Client: prefix match: counter TCPAOGood increased 7 => 9> # Totals: pass:19 fail:0 xfail:0 xpass:0 skip:0 error:0Expected output for ipv6 version:> # ./connect-deny_ipv6> 1..19> # 1725[lib/setup.c:254] rand seed 1680553711> TAP version 13> ok 1 Non-AO server + AO client> ok 2 Non-AO server + AO client: counter TCPAOKeyNotFound increased 0 => 1> ok 3 AO server + Non-AO client: counter TCPAORequired increased 0 => 1> ok 4 AO server + Non-AO client> ok 5 Wrong password: counter TCPAOBad increased 0 => 1> ok 6 Wrong password> ok 7 Wrong rcv id: counter TCPAOKeyNotFound increased 1 => 2> ok 8 Wrong rcv id> ok 9 Wrong snd id: counter TCPAOGood increased 0 => 1> ok 10 Wrong snd id> ok 11 Server: Wrong addr> ok 12 Server: Wrong addr: counter TCPAOKeyNotFound increased 2 => 3> ok 13 Client: Wrong addr: connect() was prevented> ok 14 rcv id != snd id: connected> ok 15 rcv id != snd id: counter TCPAOGood increased 1 => 3> ok 16 Server: prefix match: connected> ok 17 Server: prefix match: counter TCPAOGood increased 5 => 7> ok 18 Client: prefix match: connected> ok 19 Client: prefix match: counter TCPAOGood increased 8 => 10> # Totals: pass:19 fail:0 xfail:0 xpass:0 skip:0 error:0Signed-off-by: Dmitry Safonov Signed-off-by: David S. Miller List of files: /linux-6.15/tools/testing/selftests/net/tcp_ao/Makefile

d11301f6 - selftests/net: Add TCP-AO ICMPs accept test

Fri, 15 Dec 2023 02:36:17 +0000

selftests/net: Add TCP-AO ICMPs accept testReverse to icmps-discard test: the server accepts ICMPs, usingTCP_AO_CMDF_ACCEPT_ICMP and it is expected to fail under ICMPflood from client. Test that the default pre-TCP-AO behaviour functionswhen TCP_AO_CMDF_ACCEPT_ICMP is set.Expected output for ipv4 version (in case it receives ICMP_PROT_UNREACH):> # ./icmps-accept_ipv4> 1..3> # 3209[lib/setup.c:166] rand seed 1642623870> TAP version 13> # 3209[lib/proc.c:207] Snmp6 Ip6InReceives: 0 => 1> # 3209[lib/proc.c:207] Snmp6 Ip6InNoRoutes: 0 => 1> # 3209[lib/proc.c:207] Snmp6 Ip6InOctets: 0 => 76> # 3209[lib/proc.c:207] Snmp6 Ip6InNoECTPkts: 0 => 1> # 3209[lib/proc.c:207] Tcp InSegs: 3 => 23> # 3209[lib/proc.c:207] Tcp OutSegs: 2 => 22> # 3209[lib/proc.c:207] IcmpMsg InType3: 0 => 4> # 3209[lib/proc.c:207] Icmp InMsgs: 0 => 4> # 3209[lib/proc.c:207] Icmp InDestUnreachs: 0 => 4> # 3209[lib/proc.c:207] Ip InReceives: 3 => 27> # 3209[lib/proc.c:207] Ip InDelivers: 3 => 27> # 3209[lib/proc.c:207] Ip OutRequests: 2 => 22> # 3209[lib/proc.c:207] IpExt InOctets: 288 => 3420> # 3209[lib/proc.c:207] IpExt OutOctets: 124 => 3244> # 3209[lib/proc.c:207] IpExt InNoECTPkts: 3 => 25> # 3209[lib/proc.c:207] TcpExt TCPPureAcks: 1 => 2> # 3209[lib/proc.c:207] TcpExt TCPOrigDataSent: 0 => 20> # 3209[lib/proc.c:207] TcpExt TCPDelivered: 0 => 19> # 3209[lib/proc.c:207] TcpExt TCPAOGood: 3 => 23> ok 1 InDestUnreachs delivered 4> ok 2 server failed with -92: Protocol not available> ok 3 TCPAODroppedIcmps counter didn't change: 0 >= 0> # Totals: pass:3 fail:0 xfail:0 xpass:0 skip:0 error:0Expected output for ipv6 version (in case it receives ADM_PROHIBITED):> # ./icmps-accept_ipv6> 1..3> # 3277[lib/setup.c:166] rand seed 1642624035> TAP version 13> # 3277[lib/proc.c:207] Snmp6 Ip6InReceives: 6 => 31> # 3277[lib/proc.c:207] Snmp6 Ip6InDelivers: 4 => 29> # 3277[lib/proc.c:207] Snmp6 Ip6OutRequests: 4 => 24> # 3277[lib/proc.c:207] Snmp6 Ip6InOctets: 592 => 4492> # 3277[lib/proc.c:207] Snmp6 Ip6OutOctets: 332 => 3852> # 3277[lib/proc.c:207] Snmp6 Ip6InNoECTPkts: 6 => 31> # 3277[lib/proc.c:207] Snmp6 Icmp6InMsgs: 1 => 6> # 3277[lib/proc.c:207] Snmp6 Icmp6InDestUnreachs: 0 => 5> # 3277[lib/proc.c:207] Snmp6 Icmp6InType1: 0 => 5> # 3277[lib/proc.c:207] Tcp InSegs: 3 => 23> # 3277[lib/proc.c:207] Tcp OutSegs: 2 => 22> # 3277[lib/proc.c:207] TcpExt TCPPureAcks: 1 => 2> # 3277[lib/proc.c:207] TcpExt TCPOrigDataSent: 0 => 20> # 3277[lib/proc.c:207] TcpExt TCPDelivered: 0 => 19> # 3277[lib/proc.c:207] TcpExt TCPAOGood: 3 => 23> ok 1 Icmp6InDestUnreachs delivered 5> ok 2 server failed with -13: Permission denied> ok 3 TCPAODroppedIcmps counter didn't change: 0 >= 0> # Totals: pass:3 fail:0 xfail:0 xpass:0 skip:0 error:0With some luck the server may fail with ECONNREFUSED (depending on whaticmp packet was delivered firstly).For the kernel error handlers see: tab_unreach[] and icmp_err_convert[].Signed-off-by: Dmitry Safonov Signed-off-by: David S. Miller List of files: /linux-6.15/tools/testing/selftests/net/tcp_ao/Makefile

a8fcf8ca - selftests/net: Verify that TCP-AO complies with ignoring ICMPs

Fri, 15 Dec 2023 02:36:16 +0000

selftests/net: Verify that TCP-AO complies with ignoring ICMPsHand-crafted ICMP packets are sent to the server, the server checks forhard/soft errors and fails if any.Expected output for ipv4 version:> # ./icmps-discard_ipv4> 1..3> # 3164[lib/setup.c:166] rand seed 1642623745> TAP version 13> # 3164[lib/proc.c:207] Snmp6 Ip6InReceives: 0 => 1> # 3164[lib/proc.c:207] Snmp6 Ip6InNoRoutes: 0 => 1> # 3164[lib/proc.c:207] Snmp6 Ip6InOctets: 0 => 76> # 3164[lib/proc.c:207] Snmp6 Ip6InNoECTPkts: 0 => 1> # 3164[lib/proc.c:207] Tcp InSegs: 2 => 203> # 3164[lib/proc.c:207] Tcp OutSegs: 1 => 202> # 3164[lib/proc.c:207] IcmpMsg InType3: 0 => 543> # 3164[lib/proc.c:207] Icmp InMsgs: 0 => 543> # 3164[lib/proc.c:207] Icmp InDestUnreachs: 0 => 543> # 3164[lib/proc.c:207] Ip InReceives: 2 => 746> # 3164[lib/proc.c:207] Ip InDelivers: 2 => 746> # 3164[lib/proc.c:207] Ip OutRequests: 1 => 202> # 3164[lib/proc.c:207] IpExt InOctets: 132 => 61684> # 3164[lib/proc.c:207] IpExt OutOctets: 68 => 31324> # 3164[lib/proc.c:207] IpExt InNoECTPkts: 2 => 744> # 3164[lib/proc.c:207] TcpExt TCPPureAcks: 1 => 2> # 3164[lib/proc.c:207] TcpExt TCPOrigDataSent: 0 => 200> # 3164[lib/proc.c:207] TcpExt TCPDelivered: 0 => 199> # 3164[lib/proc.c:207] TcpExt TCPAOGood: 2 => 203> # 3164[lib/proc.c:207] TcpExt TCPAODroppedIcmps: 0 => 541> ok 1 InDestUnreachs delivered 543> ok 2 Server survived 20000 bytes of traffic> ok 3 ICMPs ignored 541> # Totals: pass:3 fail:0 xfail:0 xpass:0 skip:0 error:0Expected output for ipv6 version:> # ./icmps-discard_ipv6> 1..3> # 3186[lib/setup.c:166] rand seed 1642623803> TAP version 13> # 3186[lib/proc.c:207] Snmp6 Ip6InReceives: 4 => 568> # 3186[lib/proc.c:207] Snmp6 Ip6InDelivers: 3 => 564> # 3186[lib/proc.c:207] Snmp6 Ip6OutRequests: 2 => 204> # 3186[lib/proc.c:207] Snmp6 Ip6InMcastPkts: 1 => 4> # 3186[lib/proc.c:207] Snmp6 Ip6OutMcastPkts: 0 => 1> # 3186[lib/proc.c:207] Snmp6 Ip6InOctets: 320 => 70420> # 3186[lib/proc.c:207] Snmp6 Ip6OutOctets: 160 => 35512> # 3186[lib/proc.c:207] Snmp6 Ip6InMcastOctets: 72 => 336> # 3186[lib/proc.c:207] Snmp6 Ip6OutMcastOctets: 0 => 76> # 3186[lib/proc.c:207] Snmp6 Ip6InNoECTPkts: 4 => 568> # 3186[lib/proc.c:207] Snmp6 Icmp6InMsgs: 1 => 361> # 3186[lib/proc.c:207] Snmp6 Icmp6OutMsgs: 1 => 2> # 3186[lib/proc.c:207] Snmp6 Icmp6InDestUnreachs: 0 => 360> # 3186[lib/proc.c:207] Snmp6 Icmp6OutMLDv2Reports: 0 => 1> # 3186[lib/proc.c:207] Snmp6 Icmp6InType1: 0 => 360> # 3186[lib/proc.c:207] Snmp6 Icmp6OutType143: 0 => 1> # 3186[lib/proc.c:207] Tcp InSegs: 2 => 203> # 3186[lib/proc.c:207] Tcp OutSegs: 1 => 202> # 3186[lib/proc.c:207] TcpExt TCPPureAcks: 1 => 2> # 3186[lib/proc.c:207] TcpExt TCPOrigDataSent: 0 => 200> # 3186[lib/proc.c:207] TcpExt TCPDelivered: 0 => 199> # 3186[lib/proc.c:207] TcpExt TCPAOGood: 2 => 203> # 3186[lib/proc.c:207] TcpExt TCPAODroppedIcmps: 0 => 360> ok 1 Icmp6InDestUnreachs delivered 360> ok 2 Server survived 20000 bytes of traffic> ok 3 ICMPs ignored 360> # Totals: pass:3 fail:0 xfail:0 xpass:0 skip:0 error:0Signed-off-by: Dmitry Safonov Signed-off-by: David S. Miller List of files: /linux-6.15/tools/testing/selftests/net/tcp_ao/Makefile

cfbab37b - selftests/net: Add TCP-AO library

Fri, 15 Dec 2023 02:36:15 +0000

selftests/net: Add TCP-AO libraryProvide functions to create selftests dedicated to TCP-AO.They can run in parallel, as they use temporary net namespaces.They can be very specific to the feature being tested.This will allow to create a lot of TCP-AO tests, without complicatingone binary with many --options and to create scenarios, that arehard to put in bash script that uses one binary.Signed-off-by: Dmitry Safonov Signed-off-by: David S. Miller List of files: /linux-6.15/tools/testing/selftests/net/tcp_ao/Makefile