Difference between revisions of "VPP/Pure L3 Between Namespaces with /32s"
From fd.io
< VPP
(→Verify) |
(→Setup) |
||
Line 7: | Line 7: | ||
#Create namespace | #Create namespace | ||
sudo ip netns add ${HNAME} | sudo ip netns add ${HNAME} | ||
+ | |||
+ | # Create link and add it to namespace | ||
sudo ip link add name vpp2${HNAME} type veth peer name ${HNAME} | sudo ip link add name vpp2${HNAME} type veth peer name ${HNAME} | ||
sudo ip link set ${HNAME} netns ${HNAME} | sudo ip link set ${HNAME} netns ${HNAME} | ||
sudo ip link | sudo ip link | ||
sudo ip netns exec ${HNAME} ip link | sudo ip netns exec ${HNAME} ip link | ||
+ | |||
+ | # Capture Namespace Mac address | ||
MACADDR=$(sudo ip netns exec ${HNAME} ip link show dev ${HNAME} | grep link | awk '{print $2}') | MACADDR=$(sudo ip netns exec ${HNAME} ip link show dev ${HNAME} | grep link | awk '{print $2}') | ||
echo "MACADDR: ${MACADDR}" | echo "MACADDR: ${MACADDR}" | ||
+ | |||
+ | # Fire up a tcpdump on interface in namespace | ||
sudo ip netns exec ${HNAME} tcpdump -i ${HNAME} -w /tmp/tcpdump-${HNAME}.libpcap & | sudo ip netns exec ${HNAME} tcpdump -i ${HNAME} -w /tmp/tcpdump-${HNAME}.libpcap & | ||
+ | |||
+ | # Configure IP address on interface in namspace | ||
sudo ip netns exec ${HNAME} ip addr add ${IP}/32 dev ${HNAME} | sudo ip netns exec ${HNAME} ip addr add ${IP}/32 dev ${HNAME} | ||
sudo ip netns exec ${HNAME} ip addr show ${HNAME} | sudo ip netns exec ${HNAME} ip addr show ${HNAME} | ||
+ | |||
+ | # Bring up link in namespace | ||
sudo ip link set dev vpp2${HNAME} up | sudo ip link set dev vpp2${HNAME} up | ||
+ | |||
+ | # Create host interface in vpp attached to other end of veth pair | ||
sudo vppctl create host-interface name vpp2${HNAME} | sudo vppctl create host-interface name vpp2${HNAME} | ||
sudo vppctl show hardware | sudo vppctl show hardware | ||
+ | |||
+ | # Turn on trace | ||
sudo vppctl trace add af-packet-input 100 | sudo vppctl trace add af-packet-input 100 | ||
+ | |||
+ | # Configure route in vpp to namespace /32 | ||
sudo vppctl ip route add ${IP}/32 via ${IP} host-vpp2${HNAME} | sudo vppctl ip route add ${IP}/32 via ${IP} host-vpp2${HNAME} | ||
sudo vppctl show ip fib ${IP}/32 | sudo vppctl show ip fib ${IP}/32 | ||
+ | |||
+ | # Assign 127.0.0.* IP to vpp interface. This is done to force interface into IP mode | ||
sudo vppctl set interface ip address host-vpp2${HNAME} 127.0.0.$((${INDEX}+1))/32 | sudo vppctl set interface ip address host-vpp2${HNAME} 127.0.0.$((${INDEX}+1))/32 | ||
sudo vppctl set ip arp host-vpp2${HNAME} ${IP} ${MACADDR} | sudo vppctl set ip arp host-vpp2${HNAME} ${IP} ${MACADDR} | ||
sudo vppctl set int state host-vpp2${HNAME} up | sudo vppctl set int state host-vpp2${HNAME} up | ||
+ | |||
+ | # Capture VPP side mac address | ||
VPP_MACADDRESS=$(sudo vppctl show hardware host-vpp2${HNAME} | grep "Ethernet address" | awk '{print $3}') | VPP_MACADDRESS=$(sudo vppctl show hardware host-vpp2${HNAME} | grep "Ethernet address" | awk '{print $3}') | ||
+ | |||
+ | # Staticly peg up arp entry for vpp side of interface associated to GW address | ||
sudo ip netns exec ${HNAME} ip neigh add ${IPGW} lladdr ${VPP_MACADDRESS} dev ${HNAME} | sudo ip netns exec ${HNAME} ip neigh add ${IPGW} lladdr ${VPP_MACADDRESS} dev ${HNAME} | ||
+ | |||
+ | # Turn up link in namespace | ||
sudo ip netns exec ${HNAME} ip link set dev ${HNAME} up | sudo ip netns exec ${HNAME} ip link set dev ${HNAME} up | ||
+ | |||
+ | # Configure route to GW IP in namespace | ||
sudo ip netns exec ${HNAME} ip route add ${IPGW} dev ${HNAME} scope link | sudo ip netns exec ${HNAME} ip route add ${IPGW} dev ${HNAME} scope link | ||
+ | |||
+ | # Configure default route in namespace to GW | ||
sudo ip netns exec ${HNAME} ip route add default via ${IPGW} dev ${HNAME} | sudo ip netns exec ${HNAME} ip route add default via ${IPGW} dev ${HNAME} | ||
sudo ip netns exec ${HNAME} ip route | sudo ip netns exec ${HNAME} ip route |
Revision as of 01:36, 29 August 2017
Setup
INDECES=(1 2) for i in ${INDECES[@]} do INDEX=${i};HNAME=host${INDEX};IP=10.10.1.$((${INDEX}+1));IPGW=10.10.1.1 #Create namespace sudo ip netns add ${HNAME} # Create link and add it to namespace sudo ip link add name vpp2${HNAME} type veth peer name ${HNAME} sudo ip link set ${HNAME} netns ${HNAME} sudo ip link sudo ip netns exec ${HNAME} ip link # Capture Namespace Mac address MACADDR=$(sudo ip netns exec ${HNAME} ip link show dev ${HNAME} | grep link | awk '{print $2}') echo "MACADDR: ${MACADDR}" # Fire up a tcpdump on interface in namespace sudo ip netns exec ${HNAME} tcpdump -i ${HNAME} -w /tmp/tcpdump-${HNAME}.libpcap & # Configure IP address on interface in namspace sudo ip netns exec ${HNAME} ip addr add ${IP}/32 dev ${HNAME} sudo ip netns exec ${HNAME} ip addr show ${HNAME} # Bring up link in namespace sudo ip link set dev vpp2${HNAME} up # Create host interface in vpp attached to other end of veth pair sudo vppctl create host-interface name vpp2${HNAME} sudo vppctl show hardware # Turn on trace sudo vppctl trace add af-packet-input 100 # Configure route in vpp to namespace /32 sudo vppctl ip route add ${IP}/32 via ${IP} host-vpp2${HNAME} sudo vppctl show ip fib ${IP}/32 # Assign 127.0.0.* IP to vpp interface. This is done to force interface into IP mode sudo vppctl set interface ip address host-vpp2${HNAME} 127.0.0.$((${INDEX}+1))/32 sudo vppctl set ip arp host-vpp2${HNAME} ${IP} ${MACADDR} sudo vppctl set int state host-vpp2${HNAME} up # Capture VPP side mac address VPP_MACADDRESS=$(sudo vppctl show hardware host-vpp2${HNAME} | grep "Ethernet address" | awk '{print $3}') # Staticly peg up arp entry for vpp side of interface associated to GW address sudo ip netns exec ${HNAME} ip neigh add ${IPGW} lladdr ${VPP_MACADDRESS} dev ${HNAME} # Turn up link in namespace sudo ip netns exec ${HNAME} ip link set dev ${HNAME} up # Configure route to GW IP in namespace sudo ip netns exec ${HNAME} ip route add ${IPGW} dev ${HNAME} scope link # Configure default route in namespace to GW sudo ip netns exec ${HNAME} ip route add default via ${IPGW} dev ${HNAME} sudo ip netns exec ${HNAME} ip route done
Verify
for i in ${INDECES[@]} do INDEX=${i};HNAME=host${INDEX};IP=10.10.1.$((${INDEX}+1));IPGW=10.10.1.1 for j in ${INDECES[@]} do PINGIP=10.10.1.$((${j}+1)) PINGHNAME=host${j} if [ ${PINGIP} != ${IP} ]; then echo "Pinging from ${HNAME} to ${PINGHNAME} " sudo ip netns exec ${HNAME} ping -c 1 10.10.1.$((${j}+1)) fi done done sudo vppctl show trace for i in ${INDECES[@]} do INDEX=${i};HNAME=host${INDEX};IP=10.10.1.$((${INDEX}+1));IPGW=10.10.1.1 sudo tcpdump -r /tmp/tcpdump-${HNAME}.libpcap -e done
Cleanup
sudo ip netns exec ${HNAME} ip link del dev ${HNAME} ps -ef | grep /tmp/tcpdump-${HNAME}.libpcap | awk '{print $2}' | xargs sudo kill sudo service vpp restart