selftests: add new tests for vxlan vnifiltering
authorRoopa Prabhu <roopa@nvidia.com>
Tue, 1 Mar 2022 05:04:37 +0000 (05:04 +0000)
committerDavid S. Miller <davem@davemloft.net>
Tue, 1 Mar 2022 08:38:02 +0000 (08:38 +0000)
This patch adds a new test script test_vxlan_vnifiltering.sh
with tests for vni filtering api, various datapath tests.
Also has a test with a mix of traditional, metadata and vni
filtering devices inuse at the same time.

Signed-off-by: Roopa Prabhu <roopa@nvidia.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
tools/testing/selftests/net/test_vxlan_vnifiltering.sh [new file with mode: 0755]

diff --git a/tools/testing/selftests/net/test_vxlan_vnifiltering.sh b/tools/testing/selftests/net/test_vxlan_vnifiltering.sh
new file mode 100755 (executable)
index 0000000..704997f
--- /dev/null
@@ -0,0 +1,579 @@
+#!/bin/bash
+# SPDX-License-Identifier: GPL-2.0
+
+# This test is for checking the VXLAN vni filtering api and
+# datapath.
+# It simulates two hypervisors running two VMs each using four network
+# six namespaces: two for the HVs, four for the VMs. Each VM is
+# connected to a separate bridge. The VM's use overlapping vlans and
+# hence the separate bridge domain. Each vxlan device is a collect
+# metadata device with vni filtering and hence has the ability to
+# terminate configured vni's only.
+
+#  +--------------------------------+     +------------------------------------+
+#  |  vm-11 netns                   |     |  vm-21 netns                       |
+#  |                                |     |                                    |
+#  |+------------+  +-------------+ |     |+-------------+ +----------------+  |
+#  ||veth-11.10  |  |veth-11.20   | |     ||veth-21.10   | | veth-21.20     |  |
+#  ||10.0.10.11/24  |10.0.20.11/24| |     ||10.0.10.21/24| | 10.0.20.21/24  |  |
+#  |+------|-----+  +|------------+ |     |+-----------|-+ +---|------------+  |
+#  |       |         |              |     |            |       |               |
+#  |       |         |              |     |         +------------+             |
+#  |      +------------+            |     |         | veth-21    |             |
+#  |      | veth-11    |            |     |         |            |             |
+#  |      |            |            |     |         +-----|------+             |
+#  |      +-----|------+            |     |               |                    |
+#  |            |                   |     |               |                    |
+#  +------------|-------------------+     +---------------|--------------------+
+#  +------------|-----------------------------------------|-------------------+
+#  |      +-----|------+                            +-----|------+            |
+#  |      |vethhv-11   |                            |vethhv-21   |            |
+#  |      +----|-------+                            +-----|------+            |
+#  |       +---|---+                                  +---|--+                |
+#  |       |  br1  |                                  | br2  |                |
+#  |       +---|---+                                  +---|--+                |
+#  |       +---|----+                                 +---|--+                |
+#  |       |  vxlan1|                                 |vxlan2|                |
+#  |       +--|-----+                                 +--|---+                |
+#  |          |                                          |                    |
+#  |          |         +---------------------+          |                    |
+#  |          |         |veth0                |          |                    |
+#  |          +---------|172.16.0.1/24        -----------+                    |
+#  |                    |2002:fee1::1/64      |                               |
+#  | hv-1 netns         +--------|------------+                               |
+#  +-----------------------------|--------------------------------------------+
+#                                |
+#  +-----------------------------|--------------------------------------------+
+#  | hv-2 netns         +--------|-------------+                              |
+#  |                    | veth0                |                              |
+#  |             +------| 172.16.0.2/24        |---+                          |
+#  |             |      | 2002:fee1::2/64      |   |                          |
+#  |             |      |                      |   |                          |
+#  |             |      +----------------------+   |         -                |
+#  |             |                                 |                          |
+#  |           +-|-------+                +--------|-+                        |
+#  |           | vxlan1  |                |  vxlan2  |                        |
+#  |           +----|----+                +---|------+                        |
+#  |             +--|--+                    +-|---+                           |
+#  |             | br1 |                    | br2 |                           |
+#  |             +--|--+                    +--|--+                           |
+#  |          +-----|-------+             +----|-------+                      |
+#  |          | vethhv-12   |             |vethhv-22   |                      |
+#  |          +------|------+             +-------|----+                      |
+#  +-----------------|----------------------------|---------------------------+
+#                    |                            |
+#  +-----------------|-----------------+ +--------|---------------------------+
+#  |         +-------|---+             | |     +--|---------+                 |
+#  |         | veth-12   |             | |     |veth-22     |                 |
+#  |         +-|--------|+             | |     +--|--------|+                 |
+#  |           |        |              | |        |        |                  |
+#  |+----------|--+ +---|-----------+  | |+-------|-----+ +|---------------+  |
+#  ||veth-12.10   | |veth-12.20     |  | ||veth-22.10   | |veth-22.20      |  |
+#  ||10.0.10.12/24| |10.0.20.12/24  |  | ||10.0.10.22/24| |10.0.20.22/24   |  |
+#  |+-------------+ +---------------+  | |+-------------+ +----------------+  |
+#  |                                   | |                                    |
+#  |                                   | |                                    |
+#  | vm-12 netns                       | |vm-22 netns                         |
+#  +-----------------------------------+ +------------------------------------+
+#
+#
+# This test tests the new vxlan vnifiltering api
+
+ret=0
+# Kselftest framework requirement - SKIP code is 4.
+ksft_skip=4
+
+# all tests in this script. Can be overridden with -t option
+TESTS="
+       vxlan_vnifilter_api
+       vxlan_vnifilter_datapath
+       vxlan_vnifilter_datapath_pervni
+       vxlan_vnifilter_datapath_mgroup
+       vxlan_vnifilter_datapath_mgroup_pervni
+       vxlan_vnifilter_metadata_and_traditional_mix
+"
+VERBOSE=0
+PAUSE_ON_FAIL=no
+PAUSE=no
+
+which ping6 > /dev/null 2>&1 && ping6=$(which ping6) || ping6=$(which ping)
+
+log_test()
+{
+       local rc=$1
+       local expected=$2
+       local msg="$3"
+
+       if [ ${rc} -eq ${expected} ]; then
+               printf "    TEST: %-60s  [ OK ]\n" "${msg}"
+               nsuccess=$((nsuccess+1))
+       else
+               ret=1
+               nfail=$((nfail+1))
+               printf "    TEST: %-60s  [FAIL]\n" "${msg}"
+               if [ "${PAUSE_ON_FAIL}" = "yes" ]; then
+               echo
+                       echo "hit enter to continue, 'q' to quit"
+                       read a
+                       [ "$a" = "q" ] && exit 1
+               fi
+       fi
+
+       if [ "${PAUSE}" = "yes" ]; then
+               echo
+               echo "hit enter to continue, 'q' to quit"
+               read a
+               [ "$a" = "q" ] && exit 1
+       fi
+}
+
+run_cmd()
+{
+       local cmd="$1"
+       local out
+       local stderr="2>/dev/null"
+
+       if [ "$VERBOSE" = "1" ]; then
+               printf "COMMAND: $cmd\n"
+               stderr=
+       fi
+
+       out=$(eval $cmd $stderr)
+       rc=$?
+       if [ "$VERBOSE" = "1" -a -n "$out" ]; then
+               echo "    $out"
+       fi
+
+       return $rc
+}
+
+check_hv_connectivity() {
+       ip netns exec hv-1 ping -c 1 -W 1 $1 &>/dev/null
+       sleep 1
+       ip netns exec hv-1 ping -c 1 -W 1 $2 &>/dev/null
+
+       return $?
+}
+
+check_vm_connectivity() {
+       run_cmd "ip netns exec vm-11 ping -c 1 -W 1 10.0.10.12"
+       log_test $? 0 "VM connectivity over $1 (ipv4 default rdst)"
+
+       run_cmd "ip netns exec vm-21 ping -c 1 -W 1 10.0.10.22"
+       log_test $? 0 "VM connectivity over $1 (ipv6 default rdst)"
+}
+
+cleanup() {
+       ip link del veth-hv-1 2>/dev/null || true
+       ip link del vethhv-11 vethhv-12 vethhv-21 vethhv-22 2>/dev/null || true
+
+       for ns in hv-1 hv-2 vm-11 vm-21 vm-12 vm-22 vm-31 vm-32; do
+               ip netns del $ns 2>/dev/null || true
+       done
+}
+
+trap cleanup EXIT
+
+setup-hv-networking() {
+       hv=$1
+       local1=$2
+       mask1=$3
+       local2=$4
+       mask2=$5
+
+       ip netns add hv-$hv
+       ip link set veth-hv-$hv netns hv-$hv
+       ip -netns hv-$hv link set veth-hv-$hv name veth0
+       ip -netns hv-$hv addr add $local1/$mask1 dev veth0
+       ip -netns hv-$hv addr add $local2/$mask2 dev veth0
+       ip -netns hv-$hv link set veth0 up
+}
+
+# Setups a "VM" simulated by a netns an a veth pair
+# example: setup-vm <hvid> <vmid> <brid> <VATTRS> <mcast_for_bum>
+# VATTRS = comma separated "<vlan>-<v[46]>-<localip>-<remoteip>-<VTYPE>-<vxlandstport>"
+# VTYPE = vxlan device type. "default = traditional device, metadata = metadata device
+#         vnifilter = vnifiltering device,
+#         vnifilterg = vnifiltering device with per vni group/remote"
+# example:
+#     setup-vm 1 11 1 \
+#         10-v4-172.16.0.1-239.1.1.100-vnifilterg,20-v4-172.16.0.1-239.1.1.100-vnifilterg 1
+#
+setup-vm() {
+       hvid=$1
+       vmid=$2
+       brid=$3
+       vattrs=$4
+       mcast=$5
+       lastvxlandev=""
+
+       # create bridge
+       ip -netns hv-$hvid link add br$brid type bridge vlan_filtering 1 vlan_default_pvid 0 \
+               mcast_snooping 0
+       ip -netns hv-$hvid link set br$brid up
+
+       # create vm namespace and interfaces and connect to hypervisor
+       # namespace
+       ip netns add vm-$vmid
+       hvvethif="vethhv-$vmid"
+       vmvethif="veth-$vmid"
+       ip link add $hvvethif type veth peer name $vmvethif
+       ip link set $hvvethif netns hv-$hvid
+       ip link set $vmvethif netns vm-$vmid
+       ip -netns hv-$hvid link set $hvvethif up
+       ip -netns vm-$vmid link set $vmvethif up
+       ip -netns hv-$hvid link set $hvvethif master br$brid
+
+       # configure VM vlan/vni filtering on hypervisor
+       for vmap in $(echo $vattrs | cut -d "," -f1- --output-delimiter=' ')
+       do
+       local vid=$(echo $vmap | awk -F'-' '{print ($1)}')
+       local family=$(echo $vmap | awk -F'-' '{print ($2)}')
+       local localip=$(echo $vmap | awk -F'-' '{print ($3)}')
+       local group=$(echo $vmap | awk -F'-' '{print ($4)}')
+       local vtype=$(echo $vmap | awk -F'-' '{print ($5)}')
+       local port=$(echo $vmap | awk -F'-' '{print ($6)}')
+
+       ip -netns vm-$vmid link add name $vmvethif.$vid link $vmvethif type vlan id $vid
+       ip -netns vm-$vmid addr add 10.0.$vid.$vmid/24 dev $vmvethif.$vid
+       ip -netns vm-$vmid link set $vmvethif.$vid up
+
+       tid=$vid
+       vxlandev="vxlan$brid"
+       vxlandevflags=""
+
+       if [[ -n $vtype && $vtype == "metadata" ]]; then
+          vxlandevflags="$vxlandevflags external"
+       elif [[ -n $vtype && $vtype == "vnifilter" || $vtype == "vnifilterg" ]]; then
+          vxlandevflags="$vxlandevflags external vnifilter"
+          tid=$((vid+brid))
+       else
+          vxlandevflags="$vxlandevflags id $tid"
+          vxlandev="vxlan$tid"
+       fi
+
+       if [[ -n $vtype && $vtype != "vnifilterg" ]]; then
+          if [[ -n "$group" && "$group" != "null" ]]; then
+             if [ $mcast -eq 1 ]; then
+                vxlandevflags="$vxlandevflags group $group"
+             else
+                vxlandevflags="$vxlandevflags remote $group"
+             fi
+          fi
+       fi
+
+       if [[ -n "$port" && "$port" != "default" ]]; then
+             vxlandevflags="$vxlandevflags dstport $port"
+       fi
+
+       # create vxlan device
+       if [ "$vxlandev" != "$lastvxlandev" ]; then
+            ip -netns hv-$hvid link add $vxlandev type vxlan local $localip $vxlandevflags dev veth0 2>/dev/null
+            ip -netns hv-$hvid link set $vxlandev master br$brid
+            ip -netns hv-$hvid link set $vxlandev up
+            lastvxlandev=$vxlandev
+       fi
+
+       # add vlan
+       bridge -netns hv-$hvid vlan add vid $vid dev $hvvethif
+       bridge -netns hv-$hvid vlan add vid $vid pvid dev $vxlandev
+
+       # Add bridge vni filter for tx
+       if [[ -n $vtype && $vtype == "metadata" || $vtype == "vnifilter" || $vtype == "vnifilterg" ]]; then
+          bridge -netns hv-$hvid link set dev $vxlandev vlan_tunnel on
+          bridge -netns hv-$hvid vlan add dev $vxlandev vid $vid tunnel_info id $tid
+       fi
+
+       if [[ -n $vtype && $vtype == "metadata" ]]; then
+          bridge -netns hv-$hvid fdb add 00:00:00:00:00:00 dev $vxlandev \
+                                                               src_vni $tid vni $tid dst $group self
+       elif [[ -n $vtype && $vtype == "vnifilter" ]]; then
+          # Add per vni rx filter with 'bridge vni' api
+          bridge -netns hv-$hvid vni add dev $vxlandev vni $tid
+       elif [[ -n $vtype && $vtype == "vnifilterg" ]]; then
+          # Add per vni group config with 'bridge vni' api
+          if [ -n "$group" ]; then
+             if [ "$family" == "v4" ]; then
+                if [ $mcast -eq 1 ]; then
+                   bridge -netns hv-$hvid vni add dev $vxlandev vni $tid group $group
+                else
+                   bridge -netns hv-$hvid vni add dev $vxlandev vni $tid remote $group
+                fi
+             else
+                if [ $mcast -eq 1 ]; then
+                   bridge -netns hv-$hvid vni add dev $vxlandev vni $tid group6 $group
+                else
+                   bridge -netns hv-$hvid vni add dev $vxlandev vni $tid remote6 $group
+                fi
+             fi
+          fi
+       fi
+       done
+}
+
+setup_vnifilter_api()
+{
+       ip link add veth-host type veth peer name veth-testns
+       ip netns add testns
+       ip link set veth-testns netns testns
+}
+
+cleanup_vnifilter_api()
+{
+       ip link del veth-host 2>/dev/null || true
+       ip netns del testns 2>/dev/null || true
+}
+
+# tests vxlan filtering api
+vxlan_vnifilter_api()
+{
+       hv1addr1="172.16.0.1"
+       hv2addr1="172.16.0.2"
+       hv1addr2="2002:fee1::1"
+       hv2addr2="2002:fee1::2"
+       localip="172.16.0.1"
+       group="239.1.1.101"
+
+       cleanup_vnifilter_api &>/dev/null
+       setup_vnifilter_api
+
+       # Duplicate vni test
+       # create non-vnifiltering traditional vni device
+       run_cmd "ip -netns testns link add vxlan100 type vxlan id 100 local $localip dev veth-testns dstport 4789"
+       log_test $? 0 "Create traditional vxlan device"
+
+       # create vni filtering device
+       run_cmd "ip -netns testns link add vxlan-ext1 type vxlan vnifilter local $localip dev veth-testns dstport 4789"
+       log_test $? 1 "Cannot create vnifilter device without external flag"
+
+       run_cmd "ip -netns testns link add vxlan-ext1 type vxlan external vnifilter local $localip dev veth-testns dstport 4789"
+       log_test $? 0 "Creating external vxlan device with vnifilter flag"
+
+       run_cmd "bridge -netns testns vni add dev vxlan-ext1 vni 100"
+       log_test $? 0 "Cannot set in-use vni id on vnifiltering device"
+
+       run_cmd "bridge -netns testns vni add dev vxlan-ext1 vni 200"
+       log_test $? 0 "Set new vni id on vnifiltering device"
+
+       run_cmd "ip -netns testns link add vxlan-ext2 type vxlan external vnifilter local $localip dev veth-testns dstport 4789"
+       log_test $? 0 "Create second external vxlan device with vnifilter flag"
+
+       run_cmd "bridge -netns testns vni add dev vxlan-ext2 vni 200"
+       log_test $? 255 "Cannot set in-use vni id on vnifiltering device"
+
+       run_cmd "bridge -netns testns vni add dev vxlan-ext2 vni 300"
+       log_test $? 0 "Set new vni id on vnifiltering device"
+
+       # check in bridge vni show
+       run_cmd "bridge -netns testns vni add dev vxlan-ext2 vni 300"
+       log_test $? 0 "Update vni id on vnifiltering device"
+
+       run_cmd "bridge -netns testns vni add dev vxlan-ext2 vni 400"
+       log_test $? 0 "Add new vni id on vnifiltering device"
+
+       # add multicast group per vni
+       run_cmd "bridge -netns testns vni add dev vxlan-ext1 vni 200 group $group"
+       log_test $? 0 "Set multicast group on existing vni"
+
+       # add multicast group per vni
+       run_cmd "bridge -netns testns vni add dev vxlan-ext2 vni 300 group $group"
+       log_test $? 0 "Set multicast group on existing vni"
+
+       # set vnifilter on an existing external vxlan device
+       run_cmd "ip -netns testns link set dev vxlan-ext1 type vxlan external vnifilter"
+       log_test $? 2 "Cannot set vnifilter flag on a device"
+
+       # change vxlan vnifilter flag
+       run_cmd "ip -netns testns link set dev vxlan-ext1 type vxlan external novnifilter"
+       log_test $? 2 "Cannot unset vnifilter flag on a device"
+}
+
+# Sanity test vnifilter datapath
+# vnifilter vnis inherit BUM group from
+# vxlan device
+vxlan_vnifilter_datapath()
+{
+       hv1addr1="172.16.0.1"
+       hv2addr1="172.16.0.2"
+       hv1addr2="2002:fee1::1"
+       hv2addr2="2002:fee1::2"
+
+       ip link add veth-hv-1 type veth peer name veth-hv-2
+       setup-hv-networking 1 $hv1addr1 24 $hv1addr2 64 $hv2addr1 $hv2addr2
+       setup-hv-networking 2 $hv2addr1 24 $hv2addr2 64 $hv1addr1 $hv1addr2
+
+        check_hv_connectivity hv2addr1 hv2addr2
+
+       setup-vm 1 11 1 10-v4-$hv1addr1-$hv2addr1-vnifilter,20-v4-$hv1addr1-$hv2addr1-vnifilter 0
+       setup-vm 1 21 2 10-v6-$hv1addr2-$hv2addr2-vnifilter,20-v6-$hv1addr2-$hv2addr2-vnifilter 0
+
+       setup-vm 2 12 1 10-v4-$hv2addr1-$hv1addr1-vnifilter,20-v4-$hv2addr1-$hv1addr1-vnifilter 0
+       setup-vm 2 22 2 10-v6-$hv2addr2-$hv1addr2-vnifilter,20-v6-$hv2addr2-$hv1addr2-vnifilter 0
+
+        check_vm_connectivity "vnifiltering vxlan"
+}
+
+# Sanity test vnifilter datapath
+# with vnifilter per vni configured BUM
+# group/remote
+vxlan_vnifilter_datapath_pervni()
+{
+       hv1addr1="172.16.0.1"
+       hv2addr1="172.16.0.2"
+       hv1addr2="2002:fee1::1"
+       hv2addr2="2002:fee1::2"
+
+       ip link add veth-hv-1 type veth peer name veth-hv-2
+       setup-hv-networking 1 $hv1addr1 24 $hv1addr2 64
+       setup-hv-networking 2 $hv2addr1 24 $hv2addr2 64
+
+        check_hv_connectivity hv2addr1 hv2addr2
+
+       setup-vm 1 11 1 10-v4-$hv1addr1-$hv2addr1-vnifilterg,20-v4-$hv1addr1-$hv2addr1-vnifilterg 0
+       setup-vm 1 21 2 10-v6-$hv1addr2-$hv2addr2-vnifilterg,20-v6-$hv1addr2-$hv2addr2-vnifilterg 0
+
+       setup-vm 2 12 1 10-v4-$hv2addr1-$hv1addr1-vnifilterg,20-v4-$hv2addr1-$hv1addr1-vnifilterg 0
+       setup-vm 2 22 2 10-v6-$hv2addr2-$hv1addr2-vnifilterg,20-v6-$hv2addr2-$hv1addr2-vnifilterg 0
+
+        check_vm_connectivity "vnifiltering vxlan pervni remote"
+}
+
+
+vxlan_vnifilter_datapath_mgroup()
+{
+       hv1addr1="172.16.0.1"
+       hv2addr1="172.16.0.2"
+       hv1addr2="2002:fee1::1"
+       hv2addr2="2002:fee1::2"
+        group="239.1.1.100"
+        group6="ff07::1"
+
+       ip link add veth-hv-1 type veth peer name veth-hv-2
+       setup-hv-networking 1 $hv1addr1 24 $hv1addr2 64
+       setup-hv-networking 2 $hv2addr1 24 $hv2addr2 64
+
+        check_hv_connectivity hv2addr1 hv2addr2
+
+       setup-vm 1 11 1 10-v4-$hv1addr1-$group-vnifilter,20-v4-$hv1addr1-$group-vnifilter 1
+       setup-vm 1 21 2 "10-v6-$hv1addr2-$group6-vnifilter,20-v6-$hv1addr2-$group6-vnifilter" 1
+
+        setup-vm 2 12 1 10-v4-$hv2addr1-$group-vnifilter,20-v4-$hv2addr1-$group-vnifilter 1
+        setup-vm 2 22 2 10-v6-$hv2addr2-$group6-vnifilter,20-v6-$hv2addr2-$group6-vnifilter 1
+
+        check_vm_connectivity "vnifiltering vxlan mgroup"
+}
+
+vxlan_vnifilter_datapath_mgroup_pervni()
+{
+       hv1addr1="172.16.0.1"
+       hv2addr1="172.16.0.2"
+       hv1addr2="2002:fee1::1"
+       hv2addr2="2002:fee1::2"
+        group="239.1.1.100"
+        group6="ff07::1"
+
+       ip link add veth-hv-1 type veth peer name veth-hv-2
+       setup-hv-networking 1 $hv1addr1 24 $hv1addr2 64
+       setup-hv-networking 2 $hv2addr1 24 $hv2addr2 64
+
+        check_hv_connectivity hv2addr1 hv2addr2
+
+       setup-vm 1 11 1 10-v4-$hv1addr1-$group-vnifilterg,20-v4-$hv1addr1-$group-vnifilterg 1
+       setup-vm 1 21 2 10-v6-$hv1addr2-$group6-vnifilterg,20-v6-$hv1addr2-$group6-vnifilterg 1
+
+        setup-vm 2 12 1 10-v4-$hv2addr1-$group-vnifilterg,20-v4-$hv2addr1-$group-vnifilterg 1
+        setup-vm 2 22 2 10-v6-$hv2addr2-$group6-vnifilterg,20-v6-$hv2addr2-$group6-vnifilterg 1
+
+        check_vm_connectivity "vnifiltering vxlan pervni mgroup"
+}
+
+vxlan_vnifilter_metadata_and_traditional_mix()
+{
+       hv1addr1="172.16.0.1"
+       hv2addr1="172.16.0.2"
+       hv1addr2="2002:fee1::1"
+       hv2addr2="2002:fee1::2"
+
+       ip link add veth-hv-1 type veth peer name veth-hv-2
+       setup-hv-networking 1 $hv1addr1 24 $hv1addr2 64
+       setup-hv-networking 2 $hv2addr1 24 $hv2addr2 64
+
+        check_hv_connectivity hv2addr1 hv2addr2
+
+       setup-vm 1 11 1 10-v4-$hv1addr1-$hv2addr1-vnifilter,20-v4-$hv1addr1-$hv2addr1-vnifilter 0
+       setup-vm 1 21 2 10-v6-$hv1addr2-$hv2addr2-vnifilter,20-v6-$hv1addr2-$hv2addr2-vnifilter 0
+       setup-vm 1 31 3 30-v4-$hv1addr1-$hv2addr1-default-4790,40-v6-$hv1addr2-$hv2addr2-default-4790,50-v4-$hv1addr1-$hv2addr1-metadata-4791 0
+
+
+       setup-vm 2 12 1 10-v4-$hv2addr1-$hv1addr1-vnifilter,20-v4-$hv2addr1-$hv1addr1-vnifilter 0
+       setup-vm 2 22 2 10-v6-$hv2addr2-$hv1addr2-vnifilter,20-v6-$hv2addr2-$hv1addr2-vnifilter 0
+       setup-vm 2 32 3 30-v4-$hv2addr1-$hv1addr1-default-4790,40-v6-$hv2addr2-$hv1addr2-default-4790,50-v4-$hv2addr1-$hv1addr1-metadata-4791 0
+
+        check_vm_connectivity "vnifiltering vxlan pervni remote mix"
+
+       # check VM connectivity over traditional/non-vxlan filtering vxlan devices
+       run_cmd "ip netns exec vm-31 ping -c 1 -W 1 10.0.30.32"
+        log_test $? 0 "VM connectivity over traditional vxlan (ipv4 default rdst)"
+
+       run_cmd "ip netns exec vm-31 ping -c 1 -W 1 10.0.40.32"
+        log_test $? 0 "VM connectivity over traditional vxlan (ipv6 default rdst)"
+
+       run_cmd "ip netns exec vm-31 ping -c 1 -W 1 10.0.50.32"
+        log_test $? 0 "VM connectivity over metadata nonfiltering vxlan (ipv4 default rdst)"
+}
+
+while getopts :t:pP46hv o
+do
+       case $o in
+               t) TESTS=$OPTARG;;
+               p) PAUSE_ON_FAIL=yes;;
+               P) PAUSE=yes;;
+               v) VERBOSE=$(($VERBOSE + 1));;
+               h) usage; exit 0;;
+               *) usage; exit 1;;
+       esac
+done
+
+# make sure we don't pause twice
+[ "${PAUSE}" = "yes" ] && PAUSE_ON_FAIL=no
+
+if [ "$(id -u)" -ne 0 ];then
+       echo "SKIP: Need root privileges"
+       exit $ksft_skip;
+fi
+
+if [ ! -x "$(command -v ip)" ]; then
+       echo "SKIP: Could not run test without ip tool"
+       exit $ksft_skip
+fi
+
+ip link help vxlan 2>&1 | grep -q "vnifilter"
+if [ $? -ne 0 ]; then
+   echo "SKIP: iproute2 too old, missing vxlan dev vnifilter setting"
+   sync
+   exit $ksft_skip
+fi
+
+bridge vni help 2>&1 | grep -q "Usage: bridge vni"
+if [ $? -ne 0 ]; then
+   echo "SKIP: iproute2 bridge lacks vxlan vnifiltering support"
+   exit $ksft_skip
+fi
+
+# start clean
+cleanup &> /dev/null
+
+for t in $TESTS
+do
+       case $t in
+       none) setup; exit 0;;
+       *) $t; cleanup;;
+       esac
+done
+
+if [ "$TESTS" != "none" ]; then
+       printf "\nTests passed: %3d\n" ${nsuccess}
+       printf "Tests failed: %3d\n"   ${nfail}
+fi
+
+exit $ret