Skip to content

Commit 3715d32

Browse files
0x7f454c46davem330
0x7f454c46
authored and
davem330
committed
selftests/net: Add TCP_REPAIR TCP-AO tests
The test plan is: 1. check that TCP-AO connection may be restored on another socket 2. check restore with wrong send/recv ISN (checking that they are part of MAC generation) 3. check restore with wrong SEQ number extension (checking that high bytes of it taken into MAC generation) Sample output expected: > # ./restore_ipv4 > 1..20 > # 1412[lib/setup.c:254] rand seed 1686610825 > TAP version 13 > ok 1 TCP-AO migrate to another socket: server alive > ok 2 TCP-AO migrate to another socket: post-migrate connection is alive > ok 3 TCP-AO migrate to another socket: counter TCPAOGood increased 23 => 44 > ok 4 TCP-AO migrate to another socket: counter TCPAOGood increased 22 => 42 > ok 5 TCP-AO with wrong send ISN: server couldn't serve > ok 6 TCP-AO with wrong send ISN: post-migrate connection is broken > ok 7 TCP-AO with wrong send ISN: counter TCPAOBad increased 0 => 4 > ok 8 TCP-AO with wrong send ISN: counter TCPAOBad increased 0 => 3 > ok 9 TCP-AO with wrong receive ISN: server couldn't serve > ok 10 TCP-AO with wrong receive ISN: post-migrate connection is broken > ok 11 TCP-AO with wrong receive ISN: counter TCPAOBad increased 4 => 8 > ok 12 TCP-AO with wrong receive ISN: counter TCPAOBad increased 5 => 10 > ok 13 TCP-AO with wrong send SEQ ext number: server couldn't serve > ok 14 TCP-AO with wrong send SEQ ext number: post-migrate connection is broken > ok 15 TCP-AO with wrong send SEQ ext number: counter TCPAOBad increased 9 => 10 > ok 16 TCP-AO with wrong send SEQ ext number: counter TCPAOBad increased 11 => 19 > ok 17 TCP-AO with wrong receive SEQ ext number: post-migrate connection is broken > ok 18 TCP-AO with wrong receive SEQ ext number: server couldn't serve > ok 19 TCP-AO with wrong receive SEQ ext number: counter TCPAOBad increased 10 => 18 > ok 20 TCP-AO with wrong receive SEQ ext number: counter TCPAOBad increased 20 => 23 > # Totals: pass:20 fail:0 xfail:0 xpass:0 skip:0 error:0 Signed-off-by: Dmitry Safonov <[email protected]> Signed-off-by: David S. Miller <[email protected]>
1 parent d1066c9 commit 3715d32

File tree

2 files changed

+237
-0
lines changed

2 files changed

+237
-0
lines changed

‎tools/testing/selftests/net/tcp_ao/Makefile

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,7 @@ TEST_BOTH_AF := bench-lookups
33
TEST_BOTH_AF += connect
44
TEST_BOTH_AF += connect-deny
55
TEST_BOTH_AF += icmps-accept icmps-discard
6+
TEST_BOTH_AF += restore
67
TEST_BOTH_AF += setsockopt-closed
78
TEST_BOTH_AF += unsigned-md5
89

‎tools/testing/selftests/net/tcp_ao/restore.c

Lines changed: 236 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,236 @@
1+
// SPDX-License-Identifier: GPL-2.0
2+
/* Author: Dmitry Safonov <[email protected]> */
3+
/* This is over-simplified TCP_REPAIR for TCP_ESTABLISHED sockets
4+
* It tests that TCP-AO enabled connection can be restored.
5+
* For the proper socket repair see:
6+
* https://github.com/checkpoint-restore/criu/blob/criu-dev/soccr/soccr.h
7+
*/
8+
#include <inttypes.h>
9+
#include "aolib.h"
10+
11+
const size_t nr_packets = 20;
12+
const size_t msg_len = 100;
13+
const size_t quota = nr_packets * msg_len;
14+
#define fault(type) (inj == FAULT_ ## type)
15+
16+
static void try_server_run(const char *tst_name, unsigned int port,
17+
fault_t inj, test_cnt cnt_expected)
18+
{
19+
const char *cnt_name = "TCPAOGood";
20+
struct tcp_ao_counters ao1, ao2;
21+
uint64_t before_cnt, after_cnt;
22+
int sk, lsk;
23+
time_t timeout;
24+
ssize_t bytes;
25+
26+
if (fault(TIMEOUT))
27+
cnt_name = "TCPAOBad";
28+
lsk = test_listen_socket(this_ip_addr, port, 1);
29+
30+
if (test_add_key(lsk, DEFAULT_TEST_PASSWORD, this_ip_dest, -1, 100, 100))
31+
test_error("setsockopt(TCP_AO_ADD_KEY)");
32+
synchronize_threads(); /* 1: MKT added => connect() */
33+
34+
if (test_wait_fd(lsk, TEST_TIMEOUT_SEC, 0))
35+
test_error("test_wait_fd()");
36+
37+
sk = accept(lsk, NULL, NULL);
38+
if (sk < 0)
39+
test_error("accept()");
40+
41+
synchronize_threads(); /* 2: accepted => send data */
42+
close(lsk);
43+
44+
bytes = test_server_run(sk, quota, TEST_TIMEOUT_SEC);
45+
if (bytes != quota) {
46+
test_fail("%s: server served: %zd", tst_name, bytes);
47+
goto out;
48+
}
49+
50+
before_cnt = netstat_get_one(cnt_name, NULL);
51+
if (test_get_tcp_ao_counters(sk, &ao1))
52+
test_error("test_get_tcp_ao_counters()");
53+
54+
timeout = fault(TIMEOUT) ? TEST_RETRANSMIT_SEC : TEST_TIMEOUT_SEC;
55+
bytes = test_server_run(sk, quota, timeout);
56+
if (fault(TIMEOUT)) {
57+
if (bytes > 0)
58+
test_fail("%s: server served: %zd", tst_name, bytes);
59+
else
60+
test_ok("%s: server couldn't serve", tst_name);
61+
} else {
62+
if (bytes != quota)
63+
test_fail("%s: server served: %zd", tst_name, bytes);
64+
else
65+
test_ok("%s: server alive", tst_name);
66+
}
67+
if (test_get_tcp_ao_counters(sk, &ao2))
68+
test_error("test_get_tcp_ao_counters()");
69+
after_cnt = netstat_get_one(cnt_name, NULL);
70+
71+
test_tcp_ao_counters_cmp(tst_name, &ao1, &ao2, cnt_expected);
72+
73+
if (after_cnt <= before_cnt) {
74+
test_fail("%s: %s counter did not increase: %zu <= %zu",
75+
tst_name, cnt_name, after_cnt, before_cnt);
76+
} else {
77+
test_ok("%s: counter %s increased %zu => %zu",
78+
tst_name, cnt_name, before_cnt, after_cnt);
79+
}
80+
81+
/*
82+
* Before close() as that will send FIN and move the peer in TCP_CLOSE
83+
* and that will prevent reading AO counters from the peer's socket.
84+
*/
85+
synchronize_threads(); /* 3: verified => closed */
86+
out:
87+
close(sk);
88+
}
89+
90+
static void *server_fn(void *arg)
91+
{
92+
unsigned int port = test_server_port;
93+
94+
try_server_run("TCP-AO migrate to another socket", port++,
95+
0, TEST_CNT_GOOD);
96+
try_server_run("TCP-AO with wrong send ISN", port++,
97+
FAULT_TIMEOUT, TEST_CNT_BAD);
98+
try_server_run("TCP-AO with wrong receive ISN", port++,
99+
FAULT_TIMEOUT, TEST_CNT_BAD);
100+
try_server_run("TCP-AO with wrong send SEQ ext number", port++,
101+
FAULT_TIMEOUT, TEST_CNT_BAD);
102+
try_server_run("TCP-AO with wrong receive SEQ ext number", port++,
103+
FAULT_TIMEOUT, TEST_CNT_NS_BAD | TEST_CNT_GOOD);
104+
105+
synchronize_threads(); /* don't race to exit: client exits */
106+
return NULL;
107+
}
108+
109+
static void test_get_sk_checkpoint(unsigned int server_port, sockaddr_af *saddr,
110+
struct tcp_sock_state *img,
111+
struct tcp_ao_repair *ao_img)
112+
{
113+
int sk;
114+
115+
sk = socket(test_family, SOCK_STREAM, IPPROTO_TCP);
116+
if (sk < 0)
117+
test_error("socket()");
118+
119+
if (test_add_key(sk, DEFAULT_TEST_PASSWORD, this_ip_dest, -1, 100, 100))
120+
test_error("setsockopt(TCP_AO_ADD_KEY)");
121+
122+
synchronize_threads(); /* 1: MKT added => connect() */
123+
if (test_connect_socket(sk, this_ip_dest, server_port) <= 0)
124+
test_error("failed to connect()");
125+
126+
synchronize_threads(); /* 2: accepted => send data */
127+
if (test_client_verify(sk, msg_len, nr_packets, TEST_TIMEOUT_SEC))
128+
test_fail("pre-migrate verify failed");
129+
130+
test_enable_repair(sk);
131+
test_sock_checkpoint(sk, img, saddr);
132+
test_ao_checkpoint(sk, ao_img);
133+
test_kill_sk(sk);
134+
}
135+
136+
static void test_sk_restore(const char *tst_name, unsigned int server_port,
137+
sockaddr_af *saddr, struct tcp_sock_state *img,
138+
struct tcp_ao_repair *ao_img,
139+
fault_t inj, test_cnt cnt_expected)
140+
{
141+
const char *cnt_name = "TCPAOGood";
142+
struct tcp_ao_counters ao1, ao2;
143+
uint64_t before_cnt, after_cnt;
144+
time_t timeout;
145+
int sk;
146+
147+
if (fault(TIMEOUT))
148+
cnt_name = "TCPAOBad";
149+
150+
before_cnt = netstat_get_one(cnt_name, NULL);
151+
sk = socket(test_family, SOCK_STREAM, IPPROTO_TCP);
152+
if (sk < 0)
153+
test_error("socket()");
154+
155+
test_enable_repair(sk);
156+
test_sock_restore(sk, img, saddr, this_ip_dest, server_port);
157+
if (test_add_repaired_key(sk, DEFAULT_TEST_PASSWORD, 0, this_ip_dest, -1, 100, 100))
158+
test_error("setsockopt(TCP_AO_ADD_KEY)");
159+
test_ao_restore(sk, ao_img);
160+
161+
if (test_get_tcp_ao_counters(sk, &ao1))
162+
test_error("test_get_tcp_ao_counters()");
163+
164+
test_disable_repair(sk);
165+
test_sock_state_free(img);
166+
167+
timeout = fault(TIMEOUT) ? TEST_RETRANSMIT_SEC : TEST_TIMEOUT_SEC;
168+
if (test_client_verify(sk, msg_len, nr_packets, timeout)) {
169+
if (fault(TIMEOUT))
170+
test_ok("%s: post-migrate connection is broken", tst_name);
171+
else
172+
test_fail("%s: post-migrate connection is working", tst_name);
173+
} else {
174+
if (fault(TIMEOUT))
175+
test_fail("%s: post-migrate connection still working", tst_name);
176+
else
177+
test_ok("%s: post-migrate connection is alive", tst_name);
178+
}
179+
if (test_get_tcp_ao_counters(sk, &ao2))
180+
test_error("test_get_tcp_ao_counters()");
181+
after_cnt = netstat_get_one(cnt_name, NULL);
182+
183+
test_tcp_ao_counters_cmp(tst_name, &ao1, &ao2, cnt_expected);
184+
185+
if (after_cnt <= before_cnt) {
186+
test_fail("%s: %s counter did not increase: %zu <= %zu",
187+
tst_name, cnt_name, after_cnt, before_cnt);
188+
} else {
189+
test_ok("%s: counter %s increased %zu => %zu",
190+
tst_name, cnt_name, before_cnt, after_cnt);
191+
}
192+
synchronize_threads(); /* 3: verified => closed */
193+
close(sk);
194+
}
195+
196+
static void *client_fn(void *arg)
197+
{
198+
unsigned int port = test_server_port;
199+
struct tcp_sock_state tcp_img;
200+
struct tcp_ao_repair ao_img;
201+
sockaddr_af saddr;
202+
203+
test_get_sk_checkpoint(port, &saddr, &tcp_img, &ao_img);
204+
test_sk_restore("TCP-AO migrate to another socket", port++,
205+
&saddr, &tcp_img, &ao_img, 0, TEST_CNT_GOOD);
206+
207+
test_get_sk_checkpoint(port, &saddr, &tcp_img, &ao_img);
208+
ao_img.snt_isn += 1;
209+
test_sk_restore("TCP-AO with wrong send ISN", port++,
210+
&saddr, &tcp_img, &ao_img, FAULT_TIMEOUT, TEST_CNT_BAD);
211+
212+
test_get_sk_checkpoint(port, &saddr, &tcp_img, &ao_img);
213+
ao_img.rcv_isn += 1;
214+
test_sk_restore("TCP-AO with wrong receive ISN", port++,
215+
&saddr, &tcp_img, &ao_img, FAULT_TIMEOUT, TEST_CNT_BAD);
216+
217+
test_get_sk_checkpoint(port, &saddr, &tcp_img, &ao_img);
218+
ao_img.snd_sne += 1;
219+
test_sk_restore("TCP-AO with wrong send SEQ ext number", port++,
220+
&saddr, &tcp_img, &ao_img, FAULT_TIMEOUT,
221+
TEST_CNT_NS_BAD | TEST_CNT_GOOD);
222+
223+
test_get_sk_checkpoint(port, &saddr, &tcp_img, &ao_img);
224+
ao_img.rcv_sne += 1;
225+
test_sk_restore("TCP-AO with wrong receive SEQ ext number", port++,
226+
&saddr, &tcp_img, &ao_img, FAULT_TIMEOUT,
227+
TEST_CNT_NS_GOOD | TEST_CNT_BAD);
228+
229+
return NULL;
230+
}
231+
232+
int main(int argc, char *argv[])
233+
{
234+
test_init(20, server_fn, client_fn);
235+
return 0;
236+
}

0 commit comments

Comments
 (0)