12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091
// SPDX-License-Identifier: GPL-2.0 // Copyright (c) 2020 Facebook #include <test_progs.h> #include "network_helpers.h" #include "cgroup_skb_sk_lookup_kern.skel.h" static void run_lookup_test(__u16 *g_serv_port, int out_sk) { int serv_sk = -1, in_sk = -1, serv_in_sk = -1, err; struct sockaddr_in6 addr = {}; socklen_t addr_len = sizeof(addr); __u32 duration = 0; serv_sk = start_server(AF_INET6, SOCK_STREAM, NULL, 0, 0); if (CHECK(serv_sk < 0, "start_server", "failed to start server\n")) return; err = getsockname(serv_sk, (struct sockaddr *)&addr, &addr_len); if (CHECK(err, "getsockname", "errno %d\n", errno)) goto cleanup; *g_serv_port = addr.sin6_port; /* Client outside of test cgroup should fail to connect by timeout. */ err = connect_fd_to_fd(out_sk, serv_sk, 1000); if (CHECK(!err || errno != EINPROGRESS, "connect_fd_to_fd", "unexpected result err %d errno %d\n", err, errno)) goto cleanup; /* Client inside test cgroup should connect just fine. */ in_sk = connect_to_fd(serv_sk, 0); if (CHECK(in_sk < 0, "connect_to_fd", "errno %d\n", errno)) goto cleanup; serv_in_sk = accept(serv_sk, NULL, NULL); if (CHECK(serv_in_sk < 0, "accept", "errno %d\n", errno)) goto cleanup; cleanup: close(serv_in_sk); close(in_sk); close(serv_sk); } static void run_cgroup_bpf_test(const char *cg_path, int out_sk) { struct cgroup_skb_sk_lookup_kern *skel; struct bpf_link *link; __u32 duration = 0; int cgfd = -1; skel = cgroup_skb_sk_lookup_kern__open_and_load(); if (CHECK(!skel, "skel_open_load", "open_load failed\n")) return; cgfd = test__join_cgroup(cg_path); if (CHECK(cgfd < 0, "cgroup_join", "cgroup setup failed\n")) goto cleanup; link = bpf_program__attach_cgroup(skel->progs.ingress_lookup, cgfd); if (!ASSERT_OK_PTR(link, "cgroup_attach")) goto cleanup; run_lookup_test(&skel->bss->g_serv_port, out_sk); bpf_link__destroy(link); cleanup: close(cgfd); cgroup_skb_sk_lookup_kern__destroy(skel); } void test_cgroup_skb_sk_lookup(void) { const char *cg_path = "/foo"; int out_sk; /* Create a socket before joining testing cgroup so that its cgroup id * differs from that of testing cgroup. Moving selftests process to * testing cgroup won't change cgroup id of an already created socket. */ out_sk = socket(AF_INET6, SOCK_STREAM, 0); if (CHECK_FAIL(out_sk < 0)) return; run_cgroup_bpf_test(cg_path, out_sk); close(out_sk); }