selftests/netfilter/bridge_netfilter.sh

28 ip -Version > /dev/null 2>&1
30 	echo "SKIP: Could not run test without ip tool"
35   eval ip netns add \$ns$i
39   for i in $(seq 0 4); do eval ip netns del \$ns$i;done
49 	ip netns exec $fromns ping -c 1 -q $dstip > /dev/null
52 		ip netns exec ${ns0} nft list ruleset
63 		ip netns exec $fromns ping -q -f -b -c 1 -q $dstip > /dev/null 2>&1
66 			ip netns exec ${ns0} nft list ruleset
71 ip link add veth1 netns ${ns0} type veth peer name eth0 netns ${ns1}
77 ip link add veth2 netns ${ns0} type veth peer name eth0 netns $ns2
78 ip link add veth3 netns ${ns0} type veth peer name eth0 netns $ns3
79 ip link add veth4 netns ${ns0} type veth peer name eth0 netns $ns4
81 ip -net ${ns0} link set lo up
84   ip -net ${ns0} link set veth$i up
87 ip -net ${ns0} link add br0 type bridge stp_state 0 forward_delay 0 nf_call_iptables 1 nf_call_ip6tables 1 nf_call_arptables 1
95   ip -net ${ns0} link set veth$i master br0
100 ip -net ${ns0} link add link br0 name macvlan0 type macvlan mode private
101 ip -net ${ns0} link set macvlan0 address ${MACVLAN_ADDR}
102 ip -net ${ns0} link set macvlan0 up
103 ip -net ${ns0} addr add 10.23.0.1/24 dev macvlan0
107 ip -net ${ns0} link add link veth4 name macvlan4 type macvlan mode vepa
108 ip -net ${ns0} link set macvlan4 address ${MACVLAN_ADDR}
109 ip -net ${ns0} link set macvlan4 up
113 ip -net ${ns0} link set macvlan4 master br0
115 ip -net ${ns0} link set br0 up
116 ip -net ${ns0} addr add 10.0.0.1/24 dev br0
117 ip netns exec ${ns0} sysctl -q net.bridge.bridge-nf-call-iptables=1
125 ip netns exec ${ns0} sysctl -q net.ipv4.icmp_echo_ignore_broadcasts=0
130 ip netns exec ${ns0} nft -f - <<EOF
131 table ip filter {
142 		meta pkttype broadcast ip protocol icmp counter drop
152   eval ip -net \$ns$i link set lo up
153   eval ip -net \$ns$i link set eth0 up
156   eval ip -net \$ns$i addr add 10.0.0.1$i/24 dev eth0
159 ip -net ${ns3} addr add 10.23.0.13/24 dev eth0
160 ip -net ${ns4} addr add 10.23.0.14/24 dev eth0