tools/testing/selftests/drivers/net/hw/ipsec_vxlan.py

Source file repositories/reference/linux-study-clean/tools/testing/selftests/drivers/net/hw/ipsec_vxlan.py

File Facts

System
Linux kernel
Corpus path
tools/testing/selftests/drivers/net/hw/ipsec_vxlan.py
Extension
.py
Size
7397 bytes
Lines
205
Domain
Support Tooling And Documentation
Bucket
tools
Inferred role
Support Tooling And Documentation: tools
Status
atlas-only

Why This File Exists

Repository support layer: documentation, build tooling, samples, user-space helper tools, generated initramfs support, licenses, and validation utilities.

Dependency Surface

Detected Declarations

Annotated Snippet

#!/usr/bin/env python3
# SPDX-License-Identifier: GPL-2.0
"""Traffic test for VXLAN + IPsec crypto-offload."""

import os

from lib.py import ksft_run, ksft_exit, ksft_eq, ksft_ge
from lib.py import ksft_variants, KsftNamedVariant, KsftSkipEx
from lib.py import CmdExitFailure, NetDrvEpEnv, cmd, defer, ethtool, ip
from lib.py import Iperf3Runner

# Inner tunnel addresses - TEST-NET-2 (RFC 5737) / doc prefix (RFC 3849)
INNER_V4_LOCAL = "198.51.100.1"
INNER_V4_REMOTE = "198.51.100.2"
INNER_V6_LOCAL = "2001:db8:100::1"
INNER_V6_REMOTE = "2001:db8:100::2"

# ESP parameters
SPI_OUT = "0x1000"
SPI_IN = "0x1001"
# 128-bit key + 32-bit salt = 20 bytes hex, 128-bit ICV
ESP_AEAD = "aead 'rfc4106(gcm(aes))' 0x" + "01" * 20 + " 128"


def xfrm(args, host=None):
    """Runs 'ip xfrm' via shell to preserve parentheses in algo names."""
    cmd(f"ip xfrm {args}", shell=True, host=host)


def check_xfrm_offload_support():
    """Skips if iproute2 lacks xfrm offload support."""
    out = cmd("ip xfrm state help", fail=False)
    if "offload" not in out.stdout + out.stderr:
        raise KsftSkipEx("iproute2 too old, missing xfrm offload")


def check_esp_hw_offload(cfg):
    """Skips if device lacks esp-hw-offload support."""
    check_xfrm_offload_support()
    try:
        feat = ethtool(f"-k {cfg.ifname}", json=True)[0]
    except (CmdExitFailure, IndexError) as e:
        raise KsftSkipEx(f"can't query features: {e}") from e
    if not feat.get("esp-hw-offload", {}).get("active"):
        raise KsftSkipEx("Device does not support esp-hw-offload")


def get_tx_drops(cfg):
    """Returns TX dropped counter from the physical device."""
    stats = ip("-s -s link show dev " + cfg.ifname, json=True)[0]
    return stats["stats64"]["tx"]["dropped"]


def setup_vxlan_ipsec(cfg, outer_ipver, inner_ipver):
    """Sets up VXLAN tunnel with IPsec transport-mode crypto-offload."""
    vxlan_name = f"vx{os.getpid()}"
    local_addr = cfg.addr_v[outer_ipver]
    remote_addr = cfg.remote_addr_v[outer_ipver]

    if inner_ipver == "4":
        inner_local = f"{INNER_V4_LOCAL}/24"
        inner_remote = f"{INNER_V4_REMOTE}/24"
        addr_extra = ""
    else:
        inner_local = f"{INNER_V6_LOCAL}/64"
        inner_remote = f"{INNER_V6_REMOTE}/64"
        addr_extra = " nodad"

    if outer_ipver == "6":
        vxlan_opts = "udp6zerocsumtx udp6zerocsumrx"

Annotation

Implementation Notes