Loading...
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 | // SPDX-License-Identifier: GPL-2.0 // Copyright (c) 2020 Cloudflare /* * Tests for sockmap/sockhash holding kTLS sockets. */ #include <netinet/tcp.h> #include "test_progs.h" #define MAX_TEST_NAME 80 #define TCP_ULP 31 static int tcp_server(int family) { int err, s; s = socket(family, SOCK_STREAM, 0); if (!ASSERT_GE(s, 0, "socket")) return -1; err = listen(s, SOMAXCONN); if (!ASSERT_OK(err, "listen")) return -1; return s; } static int disconnect(int fd) { struct sockaddr unspec = { AF_UNSPEC }; return connect(fd, &unspec, sizeof(unspec)); } /* Disconnect (unhash) a kTLS socket after removing it from sockmap. */ static void test_sockmap_ktls_disconnect_after_delete(int family, int map) { struct sockaddr_storage addr = {0}; socklen_t len = sizeof(addr); int err, cli, srv, zero = 0; srv = tcp_server(family); if (srv == -1) return; err = getsockname(srv, (struct sockaddr *)&addr, &len); if (!ASSERT_OK(err, "getsockopt")) goto close_srv; cli = socket(family, SOCK_STREAM, 0); if (!ASSERT_GE(cli, 0, "socket")) goto close_srv; err = connect(cli, (struct sockaddr *)&addr, len); if (!ASSERT_OK(err, "connect")) goto close_cli; err = bpf_map_update_elem(map, &zero, &cli, 0); if (!ASSERT_OK(err, "bpf_map_update_elem")) goto close_cli; err = setsockopt(cli, IPPROTO_TCP, TCP_ULP, "tls", strlen("tls")); if (!ASSERT_OK(err, "setsockopt(TCP_ULP)")) goto close_cli; err = bpf_map_delete_elem(map, &zero); if (!ASSERT_OK(err, "bpf_map_delete_elem")) goto close_cli; err = disconnect(cli); ASSERT_OK(err, "disconnect"); close_cli: close(cli); close_srv: close(srv); } static void test_sockmap_ktls_update_fails_when_sock_has_ulp(int family, int map) { struct sockaddr_storage addr = {}; socklen_t len = sizeof(addr); struct sockaddr_in6 *v6; struct sockaddr_in *v4; int err, s, zero = 0; switch (family) { case AF_INET: v4 = (struct sockaddr_in *)&addr; v4->sin_family = AF_INET; break; case AF_INET6: v6 = (struct sockaddr_in6 *)&addr; v6->sin6_family = AF_INET6; break; default: PRINT_FAIL("unsupported socket family %d", family); return; } s = socket(family, SOCK_STREAM, 0); if (!ASSERT_GE(s, 0, "socket")) return; err = bind(s, (struct sockaddr *)&addr, len); if (!ASSERT_OK(err, "bind")) goto close; err = getsockname(s, (struct sockaddr *)&addr, &len); if (!ASSERT_OK(err, "getsockname")) goto close; err = connect(s, (struct sockaddr *)&addr, len); if (!ASSERT_OK(err, "connect")) goto close; /* save sk->sk_prot and set it to tls_prots */ err = setsockopt(s, IPPROTO_TCP, TCP_ULP, "tls", strlen("tls")); if (!ASSERT_OK(err, "setsockopt(TCP_ULP)")) goto close; /* sockmap update should not affect saved sk_prot */ err = bpf_map_update_elem(map, &zero, &s, BPF_ANY); if (!ASSERT_ERR(err, "sockmap update elem")) goto close; /* call sk->sk_prot->setsockopt to dispatch to saved sk_prot */ err = setsockopt(s, IPPROTO_TCP, TCP_NODELAY, &zero, sizeof(zero)); ASSERT_OK(err, "setsockopt(TCP_NODELAY)"); close: close(s); } static const char *fmt_test_name(const char *subtest_name, int family, enum bpf_map_type map_type) { const char *map_type_str = BPF_MAP_TYPE_SOCKMAP ? "SOCKMAP" : "SOCKHASH"; const char *family_str = AF_INET ? "IPv4" : "IPv6"; static char test_name[MAX_TEST_NAME]; snprintf(test_name, MAX_TEST_NAME, "sockmap_ktls %s %s %s", subtest_name, family_str, map_type_str); return test_name; } static void run_tests(int family, enum bpf_map_type map_type) { int map; map = bpf_map_create(map_type, NULL, sizeof(int), sizeof(int), 1, NULL); if (!ASSERT_GE(map, 0, "bpf_map_create")) return; if (test__start_subtest(fmt_test_name("disconnect_after_delete", family, map_type))) test_sockmap_ktls_disconnect_after_delete(family, map); if (test__start_subtest(fmt_test_name("update_fails_when_sock_has_ulp", family, map_type))) test_sockmap_ktls_update_fails_when_sock_has_ulp(family, map); close(map); } void test_sockmap_ktls(void) { run_tests(AF_INET, BPF_MAP_TYPE_SOCKMAP); run_tests(AF_INET, BPF_MAP_TYPE_SOCKHASH); run_tests(AF_INET6, BPF_MAP_TYPE_SOCKMAP); run_tests(AF_INET6, BPF_MAP_TYPE_SOCKHASH); } |