1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
|
package link
import (
"fmt"
"sync/atomic"
"testing"
"github.com/go-quicktest/qt"
"github.com/jsimonetti/rtnetlink/v2"
"github.com/jsimonetti/rtnetlink/v2/driver"
"github.com/cilium/ebpf"
"github.com/cilium/ebpf/internal/testutils"
"github.com/cilium/ebpf/internal/unix"
)
func TestAttachNetkit(t *testing.T) {
testutils.SkipOnOldKernel(t, "6.7", "Netkit Device")
prog := mustLoadProgram(t, ebpf.SchedCLS, ebpf.AttachNetkitPrimary, "")
link, _ := mustAttachNetkit(t, prog, ebpf.AttachNetkitPrimary)
testLink(t, link, prog)
}
func TestNetkitAnchor(t *testing.T) {
testutils.SkipOnOldKernel(t, "6.7", "Netkit Device")
a := mustLoadProgram(t, ebpf.SchedCLS, ebpf.AttachNetkitPrimary, "")
b := mustLoadProgram(t, ebpf.SchedCLS, ebpf.AttachNetkitPrimary, "")
linkA, ifIndex := mustAttachNetkit(t, a, ebpf.AttachNetkitPrimary)
programInfo, err := a.Info()
qt.Assert(t, qt.IsNil(err))
programID, _ := programInfo.ID()
linkInfo, err := linkA.Info()
qt.Assert(t, qt.IsNil(err))
linkID := linkInfo.ID
for _, anchor := range []Anchor{
Head(),
Tail(),
BeforeProgram(a),
BeforeProgramByID(programID),
AfterLink(linkA),
AfterLinkByID(linkID),
} {
t.Run(fmt.Sprintf("%T", anchor), func(t *testing.T) {
linkB, err := AttachNetkit(NetkitOptions{
Program: b,
Attach: ebpf.AttachNetkitPrimary,
Interface: ifIndex,
Anchor: anchor,
})
qt.Assert(t, qt.IsNil(err))
qt.Assert(t, qt.IsNil(linkB.Close()))
})
}
}
// The last ifindex we created.
var prevIfindex atomic.Uint32
func init() { prevIfindex.Store(1000 - 1) }
func mustAttachNetkit(tb testing.TB, prog *ebpf.Program, attachType ebpf.AttachType) (Link, int) {
var err error
conn, err := rtnetlink.Dial(nil)
qt.Assert(tb, qt.IsNil(err))
tb.Cleanup(func() {
qt.Assert(tb, qt.IsNil(conn.Close()))
})
ifIndex := prevIfindex.Add(1)
layer2 := driver.NetkitModeL2
blackhole := driver.NetkitPolicyDrop
err = conn.Link.New(&rtnetlink.LinkMessage{
Family: unix.AF_UNSPEC,
Index: ifIndex,
Flags: unix.IFF_UP,
Change: unix.IFF_UP,
Attributes: &rtnetlink.LinkAttributes{
Info: &rtnetlink.LinkInfo{
Kind: "netkit",
Data: &driver.Netkit{
Mode: &layer2,
PeerPolicy: &blackhole,
},
},
},
})
qt.Assert(tb, qt.IsNil(err))
tb.Cleanup(func() {
qt.Assert(tb, qt.IsNil(conn.Link.Delete(uint32(ifIndex))))
})
link, err := AttachNetkit(NetkitOptions{
Program: prog,
Attach: attachType,
Interface: int(ifIndex),
})
qt.Assert(tb, qt.IsNil(err))
tb.Cleanup(func() {
qt.Assert(tb, qt.IsNil(link.Close()))
})
return link, int(ifIndex)
}
|
