tools/testing/selftests/net/netfilter/conntrack_sctp_collision.sh

Source file repositories/reference/linux-study-clean/tools/testing/selftests/net/netfilter/conntrack_sctp_collision.sh

File Facts

System
Linux kernel
Corpus path
tools/testing/selftests/net/netfilter/conntrack_sctp_collision.sh
Extension
.sh
Size
3201 bytes
Lines
88
Domain
Support Tooling And Documentation
Bucket
tools
Inferred role
Support Tooling And Documentation: tools
Status
atlas-only

Why This File Exists

Repository support layer: documentation, build tooling, samples, user-space helper tools, generated initramfs support, licenses, and validation utilities.

Dependency Surface

Detected Declarations

Annotated Snippet

#!/bin/bash
# SPDX-License-Identifier: GPL-2.0
#
# Testing For SCTP COLLISION SCENARIO as Below:
#
#   14:35:47.655279 IP CLIENT_IP.PORT > SERVER_IP.PORT: sctp (1) [INIT] [init tag: 2017837359]
#   14:35:48.353250 IP SERVER_IP.PORT > CLIENT_IP.PORT: sctp (1) [INIT] [init tag: 1187206187]
#   14:35:48.353275 IP CLIENT_IP.PORT > SERVER_IP.PORT: sctp (1) [INIT ACK] [init tag: 2017837359]
#   14:35:48.353283 IP SERVER_IP.PORT > CLIENT_IP.PORT: sctp (1) [COOKIE ECHO]
#   14:35:48.353977 IP CLIENT_IP.PORT > SERVER_IP.PORT: sctp (1) [COOKIE ACK]
#   14:35:48.855335 IP SERVER_IP.PORT > CLIENT_IP.PORT: sctp (1) [INIT ACK] [init tag: 164579970]
#
# TOPO: SERVER_NS (link0)<--->(link1) ROUTER_NS (link2)<--->(link3) CLIENT_NS

source lib.sh

CLIENT_IP="198.51.200.1"
CLIENT_PORT=1234

SERVER_IP="198.51.100.1"
SERVER_PORT=1234

CLIENT_GW="198.51.200.2"
SERVER_GW="198.51.100.2"

# setup the topo
setup() {
	setup_ns CLIENT_NS SERVER_NS ROUTER_NS
	ip -n "$SERVER_NS" link add link0 type veth peer name link1 netns "$ROUTER_NS"
	ip -n "$CLIENT_NS" link add link3 type veth peer name link2 netns "$ROUTER_NS"

	ip -n "$SERVER_NS" link set link0 up
	ip -n "$SERVER_NS" addr add $SERVER_IP/24 dev link0
	ip -n "$SERVER_NS" route add $CLIENT_IP dev link0 via $SERVER_GW

	ip -n "$ROUTER_NS" link set link1 up
	ip -n "$ROUTER_NS" link set link2 up
	ip -n "$ROUTER_NS" addr add $SERVER_GW/24 dev link1
	ip -n "$ROUTER_NS" addr add $CLIENT_GW/24 dev link2
	ip net exec "$ROUTER_NS" sysctl -wq net.ipv4.ip_forward=1

	ip -n "$CLIENT_NS" link set link3 up
	ip -n "$CLIENT_NS" addr add $CLIENT_IP/24 dev link3
	ip -n "$CLIENT_NS" route add $SERVER_IP dev link3 via $CLIENT_GW

	# simulate the delay on OVS upcall by setting up a delay for INIT_ACK with
	# tc on $SERVER_NS side
	tc -n "$SERVER_NS" qdisc add dev link0 root handle 1: htb r2q 64
	tc -n "$SERVER_NS" class add dev link0 parent 1: classid 1:1 htb rate 100mbit
	tc -n "$SERVER_NS" filter add dev link0 parent 1: protocol ip u32 match ip protocol 132 \
		0xff match u8 2 0xff at 32 flowid 1:1
	if ! tc -n "$SERVER_NS" qdisc add dev link0 parent 1:1 handle 10: netem delay 1200ms; then
		echo "SKIP: Cannot add netem qdisc"
		exit $ksft_skip
	fi

	# simulate the ctstate check on OVS nf_conntrack
	ip net exec "$ROUTER_NS" iptables -A FORWARD -m state --state INVALID,UNTRACKED -j DROP
	ip net exec "$ROUTER_NS" iptables -A INPUT -p sctp -j DROP

	# use a smaller number for assoc's max_retrans to reproduce the issue
	modprobe -q sctp
	ip net exec "$CLIENT_NS" sysctl -wq net.sctp.association_max_retrans=3
}

cleanup() {
	ip net exec "$CLIENT_NS" pkill sctp_collision >/dev/null 2>&1
	ip net exec "$SERVER_NS" pkill sctp_collision >/dev/null 2>&1
	cleanup_all_ns
}

Annotation

Implementation Notes