Home | History | Annotate | Line # | Download | only in libnpftest 
      1 /*
      2  * NPF state tracking tests.
      3  *
      4  * Public Domain.
      5  */
      6 
      7 #ifdef _KERNEL
      8 #include <sys/types.h>
      9 #include <sys/kmem.h>
     10 #endif
     11 
     12 #include "npf_impl.h"
     13 #include "npf_test.h"
     14 
     15 typedef struct {
     16 	int		tcpfl;		/* TCP flags. */
     17 	int		tlen;		/* TCP data length. */
     18 	uint32_t	seq;		/* SEQ number. */
     19 	uint32_t	ack;		/* ACK number. */
     20 	uint32_t	win;		/* TCP Window. */
     21 	int		flags;		/* Direction et al. */
     22 } tcp_meta_t;
     23 
     24 #define	S	TH_SYN
     25 #define	A	TH_ACK
     26 #define	F	TH_FIN
     27 #define	OUT	0x1
     28 #define	IN	0x2
     29 #define	ERR	0x4
     30 #define	CLEAR	.flags = 0
     31 
     32 static const tcp_meta_t packet_sequence[] = {
     33 	/*
     34 	 *	TCP data	SEQ	ACK		WIN
     35 	 */
     36 
     37 	/* Out of order ACK. */
     38 	{ S,	0,		9999,	0,		4096,	OUT	},
     39 	{ S|A,	0,		9,	10000,		2048,	IN	},
     40 	{ A,	0,		10000,	10,		4096,	OUT	},
     41 	/* --- */
     42 	{ A,	0,		10,	10000,		2048,	IN	},
     43 	{ A,	1000,		10000,	10,		4096,	OUT	},
     44 	{ A,	1000,		11000,	10,		4096,	OUT	},
     45 	{ A,	0,		10,	12000,		2048,	IN	},
     46 	{ A,	0,		10,	13000,		2048,	IN	},
     47 	{ A,	1000,		12000,	10,		4096,	OUT	},
     48 	{ A,	0,		10,	11000,		1048,	IN	},
     49 	/* --- */
     50 	{ A,	1000,		14000,	10,		4096,	OUT	},
     51 	{ A,	0,		10,	13000,		2048,	IN	},
     52 	{ CLEAR },
     53 
     54 	/* Retransmission after out of order ACK and missing ACK. */
     55 	{ S,	0,		9999,	0,		1000,	OUT	},
     56 	{ S|A,	0,		9,	10000,		4000,	IN	},
     57 	{ A,	0,		10000,	10,		1000,	OUT	},
     58 	/* --- */
     59 	{ A,	1000,		10000,	10,		1000,	OUT	},
     60 	{ A,	0,		10,	11000,		4000,	IN	},
     61 	{ A,	1000,		11000,	10,		1000,	OUT	},
     62 	{ A,	1000,		12000,	10,		1000,	OUT	},
     63 	{ A,	1000,		13000,	10,		1000,	OUT	},
     64 	{ A,	1000,		14000,	10,		1000,	OUT	},
     65 	/* --- Assume the first was delayed; second was lost after us. */
     66 	{ A,	0,		10,	15000,		4000,	IN	},
     67 	{ A,	0,		10,	15000,		2000,	IN	},
     68 	/* --- */
     69 	{ A,	1000,		12000,	10,		1000,	OUT	},
     70 	{ CLEAR },
     71 
     72 	/* FIN exchange with retransmit. */
     73 	{ S,	0,		999,	0,		1000,	OUT	},
     74 	{ S|A,	0,		9,	1000,		2000,	IN	},
     75 	{ A,	0,		1000,	10,		1000,	OUT	},
     76 	/* --- */
     77 	{ F,	0,		10,	1000,		2000,	IN	},
     78 	{ F,	0,		1000,	10,		1000,	OUT	},
     79 	{ A,	0,		1000,	11,		1000,	OUT	},
     80 	/* --- */
     81 	{ F,	0,		1000,	11,		1000,	OUT	},
     82 	{ F,	0,		1000,	11,		1000,	OUT	},
     83 	{ A,	0,		11,	1001,		2000,	OUT	},
     84 	{ CLEAR },
     85 
     86 	/* Out of window. */
     87 	{ S,	0,		9,	0,		8760,	OUT	},
     88 	{ S|A,	0,		9999,	10,		1000,	IN	},
     89 	{ A,	0,		10,	10000,		8760,	OUT	},
     90 	/* --- */
     91 	{ A,	1460,		10000,	10,		1000,	IN	},
     92 	{ A,	1460,		11460,	10,		1000,	IN	},
     93 	{ A,	0,		10,	12920,		8760,	OUT	},
     94 	{ A,	1460,		12920,	10,		1000,	IN	},
     95 	{ A,	0,		10,	14380,		8760,	OUT	},
     96 	{ A,	1460,		17300,	10,		1000,	IN	},
     97 	{ A,	0,		10,	14380,		8760,	OUT	},
     98 	{ A,	1460,		18760,	10,		1000,	IN	},
     99 	{ A,	0,		10,	14380,		8760,	OUT	},
    100 	{ A,	1460,		20220,	10,		1000,	IN	},
    101 	{ A,	0,		10,	14380,		8760,	OUT	},
    102 	{ A,	1460,		21680,	10,		1000,	IN	},
    103 	{ A,	0,		10,	14380,		8760,	OUT	},
    104 	/* --- */
    105 	{ A,	1460,		14380,	10,		1000,	IN	},
    106 	{ A,	1460,		23140,	10,		1000,	IN|ERR	},
    107 	{ CLEAR },
    108 
    109 };
    110 
    111 #undef S
    112 #undef A
    113 #undef F
    114 
    115 static struct mbuf *
    116 construct_packet(const tcp_meta_t *p)
    117 {
    118 	struct mbuf *m = mbuf_construct(IPPROTO_TCP);
    119 	struct ip *ip;
    120 	struct tcphdr *th;
    121 
    122 	th = mbuf_return_hdrs(m, false, &ip);
    123 
    124 	/* Imitate TCP payload, set TCP sequence numbers, flags and window. */
    125 	ip->ip_len = htons(sizeof(struct ip) + sizeof(struct tcphdr) + p->tlen);
    126 	th->th_seq = htonl(p->seq);
    127 	th->th_ack = htonl(p->ack);
    128 	th->th_flags = p->tcpfl;
    129 	th->th_win = htons(p->win);
    130 	return m;
    131 }
    132 
    133 static bool
    134 process_packet(const int i, npf_state_t *nst, bool *snew)
    135 {
    136 	const tcp_meta_t *p = &packet_sequence[i];
    137 	npf_cache_t *npc;
    138 	int ret;
    139 
    140 	if (p->flags == 0) {
    141 		npf_state_destroy(nst);
    142 		*snew = true;
    143 		return true;
    144 	}
    145 
    146 	npc = get_cached_pkt(construct_packet(p), NULL, NPF_RULE_LAYER_3);
    147 	if (*snew) {
    148 		ret = npf_state_init(npc, nst);
    149 		KASSERT(ret == true);
    150 		*snew = false;
    151 	}
    152 	ret = npf_state_inspect(npc, nst,
    153 	    (p->flags == OUT) ? NPF_FLOW_FORW : NPF_FLOW_BACK);
    154 	put_cached_pkt(npc);
    155 
    156 	return ret ? true : (p->flags & ERR) != 0;
    157 }
    158 
    159 bool
    160 npf_state_test(bool verbose)
    161 {
    162 	npf_state_t nst;
    163 	bool snew = true;
    164 	bool ok = true;
    165 
    166 	for (unsigned i = 0; i < __arraycount(packet_sequence); i++) {
    167 		if (process_packet(i, &nst, &snew)) {
    168 			continue;
    169 		}
    170 		if (verbose) {
    171 			printf("Failed on packet %d, state dump:\n", i);
    172 			npf_state_dump(&nst);
    173 		}
    174 		ok = false;
    175 	}
    176 	return ok;
    177 }
    178