tools/testing/selftests/net/test_neigh.sh - third_party/linux - Git at Google


            
            #!/bin/bash

            
            # SPDX-License-Identifier: GPL-2.0


            source lib.sh

            
            TESTS="

            
            	extern_valid_ipv4

            
            	extern_valid_ipv6

            
            "

            
            VERBOSE=0


            ################################################################################

            
            # Utilities


            run_cmd()

            
            {

            
            	local cmd="$1"

            
            	local out

            
            	local stderr="2>/dev/null"


            	if [ "$VERBOSE" = "1" ]; then

            
            		echo "COMMAND: $cmd"

            
            		stderr=

            
            	fi


            	out=$(eval "$cmd" "$stderr")

            
            	rc=$?

            
            	if [ "$VERBOSE" -eq 1 ] && [ -n "$out" ]; then

            
            		echo "    $out"

            
            	fi


            	return $rc

            
            }


            ################################################################################

            
            # Setup


            setup()

            
            {

            
            	set -e


            	setup_ns ns1 ns2


            	ip -n "$ns1" link add veth0 type veth peer name veth1 netns "$ns2"

            
            	ip -n "$ns1" link set dev veth0 up

            
            	ip -n "$ns2" link set dev veth1 up


            	ip -n "$ns1" address add 192.0.2.1/24 dev veth0

            
            	ip -n "$ns1" address add 2001:db8:1::1/64 dev veth0 nodad

            
            	ip -n "$ns2" address add 192.0.2.2/24 dev veth1

            
            	ip -n "$ns2" address add 2001:db8:1::2/64 dev veth1 nodad


            	ip netns exec "$ns1" sysctl -qw net.ipv6.conf.all.keep_addr_on_down=1

            
            	ip netns exec "$ns2" sysctl -qw net.ipv6.conf.all.keep_addr_on_down=1


            	sleep 5


            	set +e

            
            }


            exit_cleanup_all()

            
            {

            
            	cleanup_all_ns

            
            	exit "${EXIT_STATUS}"

            
            }


            get_periodic_gc_runs()

            
            {

            
            	local ns=$1

            
            	local tbl_name=$2


            	ip -n "$ns" -j -s ntable show name "$tbl_name" | \

            
            		jq '.[] | select(has("periodic_gc_runs")) | .["periodic_gc_runs"]'

            
            }


            ################################################################################

            
            # Tests


            extern_valid_common()

            
            {

            
            	local af_str=$1; shift

            
            	local ip_addr=$1; shift

            
            	local tbl_name=$1; shift

            
            	local subnet=$1; shift

            
            	local mac


            	mac=$(ip -n "$ns2" -j link show dev veth1 | jq -r '.[]["address"]')


            	RET=0


            	# Check that simple addition works.

            
            	run_cmd "ip -n $ns1 neigh add $ip_addr lladdr $mac nud stale dev veth0 extern_valid"

            
            	run_cmd "ip -n $ns1 neigh get $ip_addr dev veth0 | grep \"extern_valid\""

            
            	check_err $? "No \"extern_valid\" flag after addition"


            	log_test "$af_str \"extern_valid\" flag: Add entry"


            	RET=0


            	# Check that an entry cannot be added with "extern_valid" flag and an

            
            	# invalid state.

            
            	run_cmd "ip -n $ns1 neigh flush dev veth0"

            
            	run_cmd "ip -n $ns1 neigh add $ip_addr nud none dev veth0 extern_valid"

            
            	check_fail $? "Managed to add an entry with \"extern_valid\" flag and an invalid state"


            	log_test "$af_str \"extern_valid\" flag: Add with an invalid state"


            	RET=0


            	# Check that entry cannot be added with both "extern_valid" flag and

            
            	# "use" / "managed" flag.

            
            	run_cmd "ip -n $ns1 neigh flush dev veth0"

            
            	run_cmd "ip -n $ns1 neigh add $ip_addr lladdr $mac nud stale dev veth0 extern_valid use"

            
            	check_fail $? "Managed to add an entry with \"extern_valid\" flag and \"use\" flag"


            	log_test "$af_str \"extern_valid\" flag: Add with \"use\" flag"


            	RET=0


            	# Check that "extern_valid" flag can be toggled using replace.

            
            	run_cmd "ip -n $ns1 neigh flush dev veth0"

            
            	run_cmd "ip -n $ns1 neigh add $ip_addr lladdr $mac nud stale dev veth0"

            
            	run_cmd "ip -n $ns1 neigh replace $ip_addr lladdr $mac nud stale dev veth0 extern_valid"

            
            	run_cmd "ip -n $ns1 neigh get $ip_addr dev veth0 | grep \"extern_valid\""

            
            	check_err $? "Did not manage to set \"extern_valid\" flag with replace"

            
            	run_cmd "ip -n $ns1 neigh replace $ip_addr lladdr $mac nud stale dev veth0"

            
            	run_cmd "ip -n $ns1 neigh get $ip_addr dev veth0 | grep \"extern_valid\""

            
            	check_fail $? "Did not manage to clear \"extern_valid\" flag with replace"


            	log_test "$af_str \"extern_valid\" flag: Replace entry"


            	RET=0


            	# Check that an existing "extern_valid" entry can be marked as

            
            	# "managed".

            
            	run_cmd "ip -n $ns1 neigh flush dev veth0"

            
            	run_cmd "ip -n $ns1 neigh add $ip_addr lladdr $mac nud stale dev veth0 extern_valid"

            
            	run_cmd "ip -n $ns1 neigh replace $ip_addr lladdr $mac nud stale dev veth0 extern_valid managed"

            
            	check_err $? "Did not manage to add \"managed\" flag to an existing \"extern_valid\" entry"


            	log_test "$af_str \"extern_valid\" flag: Replace entry with \"managed\" flag"


            	RET=0


            	# Check that entry cannot be replaced with "extern_valid" flag and an

            
            	# invalid state.

            
            	run_cmd "ip -n $ns1 neigh flush dev veth0"

            
            	run_cmd "ip -n $ns1 neigh add $ip_addr lladdr $mac nud stale dev veth0 extern_valid"

            
            	run_cmd "ip -n $ns1 neigh replace $ip_addr nud none dev veth0 extern_valid"

            
            	check_fail $? "Managed to replace an entry with \"extern_valid\" flag and an invalid state"


            	log_test "$af_str \"extern_valid\" flag: Replace with an invalid state"


            	RET=0


            	# Check that an "extern_valid" entry is flushed when the interface is

            
            	# put administratively down.

            
            	run_cmd "ip -n $ns1 neigh flush dev veth0"

            
            	run_cmd "ip -n $ns1 neigh add $ip_addr lladdr $mac nud stale dev veth0 extern_valid"

            
            	run_cmd "ip -n $ns1 link set dev veth0 down"

            
            	run_cmd "ip -n $ns1 link set dev veth0 up"

            
            	run_cmd "ip -n $ns1 neigh get $ip_addr dev veth0"

            
            	check_fail $? "\"extern_valid\" entry not flushed upon interface down"


            	log_test "$af_str \"extern_valid\" flag: Interface down"


            	RET=0


            	# Check that an "extern_valid" entry is not flushed when the interface

            
            	# loses its carrier.

            
            	run_cmd "ip -n $ns1 neigh flush dev veth0"

            
            	run_cmd "ip -n $ns1 neigh add $ip_addr lladdr $mac nud stale dev veth0 extern_valid"

            
            	run_cmd "ip -n $ns2 link set dev veth1 down"

            
            	run_cmd "ip -n $ns2 link set dev veth1 up"

            
            	run_cmd "sleep 2"

            
            	run_cmd "ip -n $ns1 neigh get $ip_addr dev veth0"

            
            	check_err $? "\"extern_valid\" entry flushed upon carrier down"


            	log_test "$af_str \"extern_valid\" flag: Carrier down"


            	RET=0


            	# Check that when entry transitions to "reachable" state it maintains

            
            	# the "extern_valid" flag. Wait "delay_probe" seconds for ARP request /

            
            	# NS to be sent.

            
            	local delay_probe


            	delay_probe=$(ip -n "$ns1" -j ntable show dev veth0 name "$tbl_name" | jq '.[]["delay_probe"]')

            
            	run_cmd "ip -n $ns1 neigh flush dev veth0"

            
            	run_cmd "ip -n $ns1 neigh add $ip_addr lladdr $mac nud stale dev veth0 extern_valid"

            
            	run_cmd "ip -n $ns1 neigh replace $ip_addr lladdr $mac nud stale dev veth0 extern_valid use"

            
            	run_cmd "sleep $((delay_probe / 1000 + 2))"

            
            	run_cmd "ip -n $ns1 neigh get $ip_addr dev veth0 | grep \"REACHABLE\""

            
            	check_err $? "Entry did not transition to \"reachable\" state"

            
            	run_cmd "ip -n $ns1 neigh get $ip_addr dev veth0 | grep \"extern_valid\""

            
            	check_err $? "Entry did not maintain \"extern_valid\" flag after transition to \"reachable\" state"


            	log_test "$af_str \"extern_valid\" flag: Transition to \"reachable\" state"


            	RET=0


            	# Drop all packets, trigger resolution and check that entry goes back

            
            	# to "stale" state instead of "failed".

            
            	local mcast_reprobes

            
            	local retrans_time

            
            	local ucast_probes

            
            	local app_probes

            
            	local probes

            
            	local delay


            	run_cmd "ip -n $ns1 neigh flush dev veth0"

            
            	run_cmd "tc -n $ns2 qdisc add dev veth1 clsact"

            
            	run_cmd "tc -n $ns2 filter add dev veth1 ingress proto all matchall action drop"

            
            	run_cmd "ip -n $ns1 neigh add $ip_addr lladdr $mac nud stale dev veth0 extern_valid"

            
            	run_cmd "ip -n $ns1 neigh replace $ip_addr lladdr $mac nud stale dev veth0 extern_valid use"

            
            	retrans_time=$(ip -n "$ns1" -j ntable show dev veth0 name "$tbl_name" | jq '.[]["retrans"]')

            
            	ucast_probes=$(ip -n "$ns1" -j ntable show dev veth0 name "$tbl_name" | jq '.[]["ucast_probes"]')

            
            	app_probes=$(ip -n "$ns1" -j ntable show dev veth0 name "$tbl_name" | jq '.[]["app_probes"]')

            
            	mcast_reprobes=$(ip -n "$ns1" -j ntable show dev veth0 name "$tbl_name" | jq '.[]["mcast_reprobes"]')

            
            	delay=$((delay_probe + (ucast_probes + app_probes + mcast_reprobes) * retrans_time))

            
            	run_cmd "sleep $((delay / 1000 + 2))"

            
            	run_cmd "ip -n $ns1 neigh get $ip_addr dev veth0 | grep \"STALE\""

            
            	check_err $? "Entry did not return to \"stale\" state"

            
            	run_cmd "ip -n $ns1 neigh get $ip_addr dev veth0 | grep \"extern_valid\""

            
            	check_err $? "Entry did not maintain \"extern_valid\" flag after returning to \"stale\" state"

            
            	probes=$(ip -n "$ns1" -j -s neigh get "$ip_addr" dev veth0 | jq '.[]["probes"]')

            
            	if [[ $probes -eq 0 ]]; then

            
            		check_err 1 "No probes were sent"

            
            	fi


            	log_test "$af_str \"extern_valid\" flag: Transition back to \"stale\" state"


            	run_cmd "tc -n $ns2 qdisc del dev veth1 clsact"


            	RET=0


            	# Forced garbage collection runs whenever the number of entries is

            
            	# larger than "thresh3" and deletes stale entries that have not been

            
            	# updated in the last 5 seconds.

            
            	#

            
            	# Check that an "extern_valid" entry survives a forced garbage

            
            	# collection. Add an entry, wait 5 seconds and add more entries than

            
            	# "thresh3" so that forced garbage collection will run.

            
            	local forced_gc_runs_t0

            
            	local forced_gc_runs_t1

            
            	local orig_thresh1

            
            	local orig_thresh2

            
            	local orig_thresh3


            	run_cmd "ip -n $ns1 neigh flush dev veth0"

            
            	orig_thresh1=$(ip -n "$ns1" -j ntable show name "$tbl_name" | \

            
            			jq '.[] | select(has("thresh1")) | .["thresh1"]')

            
            	orig_thresh2=$(ip -n "$ns1" -j ntable show name "$tbl_name" | \

            
            			jq '.[] | select(has("thresh2")) | .["thresh2"]')

            
            	orig_thresh3=$(ip -n "$ns1" -j ntable show name "$tbl_name" | \

            
            			jq '.[] | select(has("thresh3")) | .["thresh3"]')

            
            	run_cmd "ip -n $ns1 ntable change name $tbl_name thresh3 10 thresh2 9 thresh1 8"

            
            	run_cmd "ip -n $ns1 neigh add $ip_addr lladdr $mac nud stale dev veth0 extern_valid"

            
            	run_cmd "ip -n $ns1 neigh add ${subnet}3 lladdr $mac nud stale dev veth0"

            
            	run_cmd "sleep 5"

            
            	forced_gc_runs_t0=$(ip -n "$ns1" -j -s ntable show name "$tbl_name" | \

            
            				jq '.[] | select(has("forced_gc_runs")) | .["forced_gc_runs"]')

            
            	for i in {1..20}; do

            
            		run_cmd "ip -n $ns1 neigh add ${subnet}$((i + 4)) nud none dev veth0"

            
            	done

            
            	forced_gc_runs_t1=$(ip -n "$ns1" -j -s ntable show name "$tbl_name" | \

            
            				jq '.[] | select(has("forced_gc_runs")) | .["forced_gc_runs"]')

            
            	if [[ $forced_gc_runs_t1 -eq $forced_gc_runs_t0 ]]; then

            
            		check_err 1 "Forced garbage collection did not run"

            
            	fi

            
            	run_cmd "ip -n $ns1 neigh get $ip_addr dev veth0 | grep \"extern_valid\""

            
            	check_err $? "Entry with \"extern_valid\" flag did not survive forced garbage collection"

            
            	run_cmd "ip -n $ns1 neigh get ${subnet}3 dev veth0"

            
            	check_fail $? "Entry without \"extern_valid\" flag survived forced garbage collection"


            	log_test "$af_str \"extern_valid\" flag: Forced garbage collection"


            	run_cmd "ip -n $ns1 ntable change name $tbl_name \

            
            		thresh3 $orig_thresh3 thresh2 $orig_thresh2 thresh1 $orig_thresh1"


            	RET=0


            	# Periodic garbage collection runs every "base_reachable"/2 seconds and

            
            	# if the number of entries is larger than "thresh1", then it deletes

            
            	# stale entries that have not been used in the last "gc_stale" seconds.

            
            	#

            
            	# Check that an "extern_valid" entry survives a periodic garbage

            
            	# collection. Add an "extern_valid" entry, add more than "thresh1"

            
            	# regular entries, wait "base_reachable" (longer than "gc_stale")

            
            	# seconds and check that the "extern_valid" entry was not deleted.

            
            	local periodic_gc_runs_t0

            
            	local periodic_gc_runs_t1

            
            	local orig_base_reachable

            
            	local base_reachable=10000

            
            	local orig_gc_stale

            
            	local timeout


            	run_cmd "ip -n $ns1 neigh flush dev veth0"

            
            	orig_thresh1=$(ip -n "$ns1" -j ntable show name "$tbl_name" | \

            
            			jq '.[] | select(has("thresh1")) | .["thresh1"]')

            
            	orig_base_reachable=$(ip -n "$ns1" -j ntable show name "$tbl_name" | \

            
            				jq '.[] | select(has("thresh1")) | .["base_reachable"]')

            
            	run_cmd "ip -n $ns1 ntable change name $tbl_name thresh1 10 base_reachable $base_reachable"

            
            	orig_gc_stale=$(ip -n "$ns1" -j ntable show name "$tbl_name" dev veth0 | \

            
            			jq '.[]["gc_stale"]')

            
            	run_cmd "ip -n $ns1 ntable change name $tbl_name dev veth0 gc_stale 1000"

            
            	run_cmd "ip -n $ns1 neigh add $ip_addr lladdr $mac nud stale dev veth0 extern_valid"

            
            	run_cmd "ip -n $ns1 neigh add ${subnet}3 lladdr $mac nud stale dev veth0"

            
            	# Wait up to neigh_set_reach_time(BASE_REACHABLE_TIME) (~45s) + 5s

            
            	# for the new interval to take effect, see neigh_table_init().

            
            	timeout=$(((orig_base_reachable / 1000) * 3 / 2 + 5))

            
            	slowwait_for_counter "$timeout" 1 get_periodic_gc_runs "$ns1" "$tbl_name" >/dev/null

            
            	for i in {1..20}; do

            
            		run_cmd "ip -n $ns1 neigh add ${subnet}$((i + 4)) nud none dev veth0"

            
            	done

            
            	periodic_gc_runs_t0=$(get_periodic_gc_runs "$ns1" "$tbl_name")

            
            	# Wait up to BASE_REACHABLE_TIME / 2 + 5s, see neigh_periodic_work().

            
            	timeout=$(((base_reachable / 1000) / 2 + 5))

            
            	slowwait_for_counter "$timeout" 1 get_periodic_gc_runs "$ns1" "$tbl_name" >/dev/null

            
            	periodic_gc_runs_t1=$(get_periodic_gc_runs "$ns1" "$tbl_name")

            
            	[[ $periodic_gc_runs_t1 -ne $periodic_gc_runs_t0 ]]

            
            	check_err $? "Periodic garbage collection did not run"

            
            	run_cmd "ip -n $ns1 neigh get $ip_addr dev veth0 | grep \"extern_valid\""

            
            	check_err $? "Entry with \"extern_valid\" flag did not survive periodic garbage collection"

            
            	run_cmd "ip -n $ns1 neigh get ${subnet}3 dev veth0"

            
            	check_fail $? "Entry without \"extern_valid\" flag survived periodic garbage collection"


            	log_test "$af_str \"extern_valid\" flag: Periodic garbage collection"


            	run_cmd "ip -n $ns1 ntable change name $tbl_name dev veth0 gc_stale $orig_gc_stale"

            
            	run_cmd "ip -n $ns1 ntable change name $tbl_name \

            
            		thresh1 $orig_thresh1 base_reachable $orig_base_reachable"

            
            }


            extern_valid_ipv4()

            
            {

            
            	extern_valid_common "IPv4" 192.0.2.2 "arp_cache" 192.0.2.

            
            }


            extern_valid_ipv6()

            
            {

            
            	extern_valid_common "IPv6" 2001:db8:1::2 "ndisc_cache" 2001:db8:1::

            
            }


            ################################################################################

            
            # Usage


            usage()

            
            {

            
            	cat <<EOF

            
            usage: ${0##*/} OPTS


                    -t <test>   Test(s) to run (default: all)

            
                                (options: $TESTS)

            
                    -p          Pause on fail

            
                    -v          Verbose mode (show commands and output)

            
            EOF

            
            }


            ################################################################################

            
            # Main


            while getopts ":t:pvh" opt; do

            
            	case $opt in

            
            		t) TESTS=$OPTARG;;

            
            		p) PAUSE_ON_FAIL=yes;;

            
            		v) VERBOSE=$((VERBOSE + 1));;

            
            		h) usage; exit 0;;

            
            		*) usage; exit 1;;

            
            	esac

            
            done


            require_command jq


            if ! ip neigh help 2>&1 | grep -q "extern_valid"; then

            
            	echo "SKIP: iproute2 ip too old, missing \"extern_valid\" support"

            
            	exit "$ksft_skip"

            
            fi


            trap exit_cleanup_all EXIT


            for t in $TESTS

            
            do

            
            	setup; $t; cleanup_all_ns;

            
            done
	#!/bin/bash
	# SPDX-License-Identifier: GPL-2.0

	source lib.sh
	TESTS="
	extern_valid_ipv4
	extern_valid_ipv6
	"
	VERBOSE=0

	################################################################################
	# Utilities

	run_cmd()
	{
	local cmd="$1"
	local out
	local stderr="2>/dev/null"

	if [ "$VERBOSE" = "1" ]; then
	echo "COMMAND: $cmd"
	stderr=
	fi

	out=$(eval "$cmd" "$stderr")
	rc=$?
	if [ "$VERBOSE" -eq 1 ] && [ -n "$out" ]; then
	echo " $out"
	fi

	return $rc
	}

	################################################################################
	# Setup

	setup()
	{
	set -e

	setup_ns ns1 ns2

	ip -n "$ns1" link add veth0 type veth peer name veth1 netns "$ns2"
	ip -n "$ns1" link set dev veth0 up
	ip -n "$ns2" link set dev veth1 up

	ip -n "$ns1" address add 192.0.2.1/24 dev veth0
	ip -n "$ns1" address add 2001:db8:1::1/64 dev veth0 nodad
	ip -n "$ns2" address add 192.0.2.2/24 dev veth1
	ip -n "$ns2" address add 2001:db8:1::2/64 dev veth1 nodad

	ip netns exec "$ns1" sysctl -qw net.ipv6.conf.all.keep_addr_on_down=1
	ip netns exec "$ns2" sysctl -qw net.ipv6.conf.all.keep_addr_on_down=1

	sleep 5

	set +e
	}

	exit_cleanup_all()
	{
	cleanup_all_ns
	exit "${EXIT_STATUS}"
	}

	get_periodic_gc_runs()
	{
	local ns=$1
	local tbl_name=$2

	ip -n "$ns" -j -s ntable show name "$tbl_name" \| \
	jq '.[] \| select(has("periodic_gc_runs")) \| .["periodic_gc_runs"]'
	}

	################################################################################
	# Tests

	extern_valid_common()
	{
	local af_str=$1; shift
	local ip_addr=$1; shift
	local tbl_name=$1; shift
	local subnet=$1; shift
	local mac

	mac=$(ip -n "$ns2" -j link show dev veth1 \| jq -r '.[]["address"]')

	RET=0

	# Check that simple addition works.
	run_cmd "ip -n $ns1 neigh add $ip_addr lladdr $mac nud stale dev veth0 extern_valid"
	run_cmd "ip -n $ns1 neigh get $ip_addr dev veth0 \| grep \"extern_valid\""
	check_err $? "No \"extern_valid\" flag after addition"

	log_test "$af_str \"extern_valid\" flag: Add entry"

	RET=0

	# Check that an entry cannot be added with "extern_valid" flag and an
	# invalid state.
	run_cmd "ip -n $ns1 neigh flush dev veth0"
	run_cmd "ip -n $ns1 neigh add $ip_addr nud none dev veth0 extern_valid"
	check_fail $? "Managed to add an entry with \"extern_valid\" flag and an invalid state"

	log_test "$af_str \"extern_valid\" flag: Add with an invalid state"

	RET=0

	# Check that entry cannot be added with both "extern_valid" flag and
	# "use" / "managed" flag.
	run_cmd "ip -n $ns1 neigh flush dev veth0"
	run_cmd "ip -n $ns1 neigh add $ip_addr lladdr $mac nud stale dev veth0 extern_valid use"
	check_fail $? "Managed to add an entry with \"extern_valid\" flag and \"use\" flag"

	log_test "$af_str \"extern_valid\" flag: Add with \"use\" flag"

	RET=0

	# Check that "extern_valid" flag can be toggled using replace.
	run_cmd "ip -n $ns1 neigh flush dev veth0"
	run_cmd "ip -n $ns1 neigh add $ip_addr lladdr $mac nud stale dev veth0"
	run_cmd "ip -n $ns1 neigh replace $ip_addr lladdr $mac nud stale dev veth0 extern_valid"
	run_cmd "ip -n $ns1 neigh get $ip_addr dev veth0 \| grep \"extern_valid\""
	check_err $? "Did not manage to set \"extern_valid\" flag with replace"
	run_cmd "ip -n $ns1 neigh replace $ip_addr lladdr $mac nud stale dev veth0"
	run_cmd "ip -n $ns1 neigh get $ip_addr dev veth0 \| grep \"extern_valid\""
	check_fail $? "Did not manage to clear \"extern_valid\" flag with replace"

	log_test "$af_str \"extern_valid\" flag: Replace entry"

	RET=0

	# Check that an existing "extern_valid" entry can be marked as
	# "managed".
	run_cmd "ip -n $ns1 neigh flush dev veth0"
	run_cmd "ip -n $ns1 neigh add $ip_addr lladdr $mac nud stale dev veth0 extern_valid"
	run_cmd "ip -n $ns1 neigh replace $ip_addr lladdr $mac nud stale dev veth0 extern_valid managed"
	check_err $? "Did not manage to add \"managed\" flag to an existing \"extern_valid\" entry"

	log_test "$af_str \"extern_valid\" flag: Replace entry with \"managed\" flag"

	RET=0

	# Check that entry cannot be replaced with "extern_valid" flag and an
	# invalid state.
	run_cmd "ip -n $ns1 neigh flush dev veth0"
	run_cmd "ip -n $ns1 neigh add $ip_addr lladdr $mac nud stale dev veth0 extern_valid"
	run_cmd "ip -n $ns1 neigh replace $ip_addr nud none dev veth0 extern_valid"
	check_fail $? "Managed to replace an entry with \"extern_valid\" flag and an invalid state"

	log_test "$af_str \"extern_valid\" flag: Replace with an invalid state"

	RET=0

	# Check that an "extern_valid" entry is flushed when the interface is
	# put administratively down.
	run_cmd "ip -n $ns1 neigh flush dev veth0"
	run_cmd "ip -n $ns1 neigh add $ip_addr lladdr $mac nud stale dev veth0 extern_valid"
	run_cmd "ip -n $ns1 link set dev veth0 down"
	run_cmd "ip -n $ns1 link set dev veth0 up"
	run_cmd "ip -n $ns1 neigh get $ip_addr dev veth0"
	check_fail $? "\"extern_valid\" entry not flushed upon interface down"

	log_test "$af_str \"extern_valid\" flag: Interface down"

	RET=0

	# Check that an "extern_valid" entry is not flushed when the interface
	# loses its carrier.
	run_cmd "ip -n $ns1 neigh flush dev veth0"
	run_cmd "ip -n $ns1 neigh add $ip_addr lladdr $mac nud stale dev veth0 extern_valid"
	run_cmd "ip -n $ns2 link set dev veth1 down"
	run_cmd "ip -n $ns2 link set dev veth1 up"
	run_cmd "sleep 2"
	run_cmd "ip -n $ns1 neigh get $ip_addr dev veth0"
	check_err $? "\"extern_valid\" entry flushed upon carrier down"

	log_test "$af_str \"extern_valid\" flag: Carrier down"

	RET=0

	# Check that when entry transitions to "reachable" state it maintains
	# the "extern_valid" flag. Wait "delay_probe" seconds for ARP request /
	# NS to be sent.
	local delay_probe

	delay_probe=$(ip -n "$ns1" -j ntable show dev veth0 name "$tbl_name" \| jq '.[]["delay_probe"]')
	run_cmd "ip -n $ns1 neigh flush dev veth0"
	run_cmd "ip -n $ns1 neigh add $ip_addr lladdr $mac nud stale dev veth0 extern_valid"
	run_cmd "ip -n $ns1 neigh replace $ip_addr lladdr $mac nud stale dev veth0 extern_valid use"
	run_cmd "sleep $((delay_probe / 1000 + 2))"
	run_cmd "ip -n $ns1 neigh get $ip_addr dev veth0 \| grep \"REACHABLE\""
	check_err $? "Entry did not transition to \"reachable\" state"
	run_cmd "ip -n $ns1 neigh get $ip_addr dev veth0 \| grep \"extern_valid\""
	check_err $? "Entry did not maintain \"extern_valid\" flag after transition to \"reachable\" state"

	log_test "$af_str \"extern_valid\" flag: Transition to \"reachable\" state"

	RET=0

	# Drop all packets, trigger resolution and check that entry goes back
	# to "stale" state instead of "failed".
	local mcast_reprobes
	local retrans_time
	local ucast_probes
	local app_probes
	local probes
	local delay

	run_cmd "ip -n $ns1 neigh flush dev veth0"
	run_cmd "tc -n $ns2 qdisc add dev veth1 clsact"
	run_cmd "tc -n $ns2 filter add dev veth1 ingress proto all matchall action drop"
	run_cmd "ip -n $ns1 neigh add $ip_addr lladdr $mac nud stale dev veth0 extern_valid"
	run_cmd "ip -n $ns1 neigh replace $ip_addr lladdr $mac nud stale dev veth0 extern_valid use"
	retrans_time=$(ip -n "$ns1" -j ntable show dev veth0 name "$tbl_name" \| jq '.[]["retrans"]')
	ucast_probes=$(ip -n "$ns1" -j ntable show dev veth0 name "$tbl_name" \| jq '.[]["ucast_probes"]')
	app_probes=$(ip -n "$ns1" -j ntable show dev veth0 name "$tbl_name" \| jq '.[]["app_probes"]')
	mcast_reprobes=$(ip -n "$ns1" -j ntable show dev veth0 name "$tbl_name" \| jq '.[]["mcast_reprobes"]')
	delay=$((delay_probe + (ucast_probes + app_probes + mcast_reprobes) * retrans_time))
	run_cmd "sleep $((delay / 1000 + 2))"
	run_cmd "ip -n $ns1 neigh get $ip_addr dev veth0 \| grep \"STALE\""
	check_err $? "Entry did not return to \"stale\" state"
	run_cmd "ip -n $ns1 neigh get $ip_addr dev veth0 \| grep \"extern_valid\""
	check_err $? "Entry did not maintain \"extern_valid\" flag after returning to \"stale\" state"
	probes=$(ip -n "$ns1" -j -s neigh get "$ip_addr" dev veth0 \| jq '.[]["probes"]')
	if [[ $probes -eq 0 ]]; then
	check_err 1 "No probes were sent"
	fi

	log_test "$af_str \"extern_valid\" flag: Transition back to \"stale\" state"

	run_cmd "tc -n $ns2 qdisc del dev veth1 clsact"

	RET=0

	# Forced garbage collection runs whenever the number of entries is
	# larger than "thresh3" and deletes stale entries that have not been
	# updated in the last 5 seconds.
	#
	# Check that an "extern_valid" entry survives a forced garbage
	# collection. Add an entry, wait 5 seconds and add more entries than
	# "thresh3" so that forced garbage collection will run.
	local forced_gc_runs_t0
	local forced_gc_runs_t1
	local orig_thresh1
	local orig_thresh2
	local orig_thresh3

	run_cmd "ip -n $ns1 neigh flush dev veth0"
	orig_thresh1=$(ip -n "$ns1" -j ntable show name "$tbl_name" \| \
	jq '.[] \| select(has("thresh1")) \| .["thresh1"]')
	orig_thresh2=$(ip -n "$ns1" -j ntable show name "$tbl_name" \| \
	jq '.[] \| select(has("thresh2")) \| .["thresh2"]')
	orig_thresh3=$(ip -n "$ns1" -j ntable show name "$tbl_name" \| \
	jq '.[] \| select(has("thresh3")) \| .["thresh3"]')
	run_cmd "ip -n $ns1 ntable change name $tbl_name thresh3 10 thresh2 9 thresh1 8"
	run_cmd "ip -n $ns1 neigh add $ip_addr lladdr $mac nud stale dev veth0 extern_valid"
	run_cmd "ip -n $ns1 neigh add ${subnet}3 lladdr $mac nud stale dev veth0"
	run_cmd "sleep 5"
	forced_gc_runs_t0=$(ip -n "$ns1" -j -s ntable show name "$tbl_name" \| \
	jq '.[] \| select(has("forced_gc_runs")) \| .["forced_gc_runs"]')
	for i in {1..20}; do
	run_cmd "ip -n $ns1 neigh add ${subnet}$((i + 4)) nud none dev veth0"
	done
	forced_gc_runs_t1=$(ip -n "$ns1" -j -s ntable show name "$tbl_name" \| \
	jq '.[] \| select(has("forced_gc_runs")) \| .["forced_gc_runs"]')
	if [[ $forced_gc_runs_t1 -eq $forced_gc_runs_t0 ]]; then
	check_err 1 "Forced garbage collection did not run"
	fi
	run_cmd "ip -n $ns1 neigh get $ip_addr dev veth0 \| grep \"extern_valid\""
	check_err $? "Entry with \"extern_valid\" flag did not survive forced garbage collection"
	run_cmd "ip -n $ns1 neigh get ${subnet}3 dev veth0"
	check_fail $? "Entry without \"extern_valid\" flag survived forced garbage collection"

	log_test "$af_str \"extern_valid\" flag: Forced garbage collection"

	run_cmd "ip -n $ns1 ntable change name $tbl_name \
	thresh3 $orig_thresh3 thresh2 $orig_thresh2 thresh1 $orig_thresh1"

	RET=0

	# Periodic garbage collection runs every "base_reachable"/2 seconds and
	# if the number of entries is larger than "thresh1", then it deletes
	# stale entries that have not been used in the last "gc_stale" seconds.
	#
	# Check that an "extern_valid" entry survives a periodic garbage
	# collection. Add an "extern_valid" entry, add more than "thresh1"
	# regular entries, wait "base_reachable" (longer than "gc_stale")
	# seconds and check that the "extern_valid" entry was not deleted.
	local periodic_gc_runs_t0
	local periodic_gc_runs_t1
	local orig_base_reachable
	local base_reachable=10000
	local orig_gc_stale
	local timeout

	run_cmd "ip -n $ns1 neigh flush dev veth0"
	orig_thresh1=$(ip -n "$ns1" -j ntable show name "$tbl_name" \| \
	jq '.[] \| select(has("thresh1")) \| .["thresh1"]')
	orig_base_reachable=$(ip -n "$ns1" -j ntable show name "$tbl_name" \| \
	jq '.[] \| select(has("thresh1")) \| .["base_reachable"]')
	run_cmd "ip -n $ns1 ntable change name $tbl_name thresh1 10 base_reachable $base_reachable"
	orig_gc_stale=$(ip -n "$ns1" -j ntable show name "$tbl_name" dev veth0 \| \
	jq '.[]["gc_stale"]')
	run_cmd "ip -n $ns1 ntable change name $tbl_name dev veth0 gc_stale 1000"
	run_cmd "ip -n $ns1 neigh add $ip_addr lladdr $mac nud stale dev veth0 extern_valid"
	run_cmd "ip -n $ns1 neigh add ${subnet}3 lladdr $mac nud stale dev veth0"
	# Wait up to neigh_set_reach_time(BASE_REACHABLE_TIME) (~45s) + 5s
	# for the new interval to take effect, see neigh_table_init().
	timeout=$(((orig_base_reachable / 1000) * 3 / 2 + 5))
	slowwait_for_counter "$timeout" 1 get_periodic_gc_runs "$ns1" "$tbl_name" >/dev/null
	for i in {1..20}; do
	run_cmd "ip -n $ns1 neigh add ${subnet}$((i + 4)) nud none dev veth0"
	done
	periodic_gc_runs_t0=$(get_periodic_gc_runs "$ns1" "$tbl_name")
	# Wait up to BASE_REACHABLE_TIME / 2 + 5s, see neigh_periodic_work().
	timeout=$(((base_reachable / 1000) / 2 + 5))
	slowwait_for_counter "$timeout" 1 get_periodic_gc_runs "$ns1" "$tbl_name" >/dev/null
	periodic_gc_runs_t1=$(get_periodic_gc_runs "$ns1" "$tbl_name")
	[[ $periodic_gc_runs_t1 -ne $periodic_gc_runs_t0 ]]
	check_err $? "Periodic garbage collection did not run"
	run_cmd "ip -n $ns1 neigh get $ip_addr dev veth0 \| grep \"extern_valid\""
	check_err $? "Entry with \"extern_valid\" flag did not survive periodic garbage collection"
	run_cmd "ip -n $ns1 neigh get ${subnet}3 dev veth0"
	check_fail $? "Entry without \"extern_valid\" flag survived periodic garbage collection"

	log_test "$af_str \"extern_valid\" flag: Periodic garbage collection"

	run_cmd "ip -n $ns1 ntable change name $tbl_name dev veth0 gc_stale $orig_gc_stale"
	run_cmd "ip -n $ns1 ntable change name $tbl_name \
	thresh1 $orig_thresh1 base_reachable $orig_base_reachable"
	}

	extern_valid_ipv4()
	{
	extern_valid_common "IPv4" 192.0.2.2 "arp_cache" 192.0.2.
	}

	extern_valid_ipv6()
	{
	extern_valid_common "IPv6" 2001:db8:1::2 "ndisc_cache" 2001:db8:1::
	}

	################################################################################
	# Usage

	usage()
	{
	cat <<EOF
	usage: ${0##*/} OPTS

	-t <test> Test(s) to run (default: all)
	(options: $TESTS)
	-p Pause on fail
	-v Verbose mode (show commands and output)
	EOF
	}

	################################################################################
	# Main

	while getopts ":t:pvh" opt; do
	case $opt in
	t) TESTS=$OPTARG;;
	p) PAUSE_ON_FAIL=yes;;
	v) VERBOSE=$((VERBOSE + 1));;
	h) usage; exit 0;;
	*) usage; exit 1;;
	esac
	done

	require_command jq

	if ! ip neigh help 2>&1 \| grep -q "extern_valid"; then
	echo "SKIP: iproute2 ip too old, missing \"extern_valid\" support"
	exit "$ksft_skip"
	fi

	trap exit_cleanup_all EXIT

	for t in $TESTS
	do
	setup; $t; cleanup_all_ns;
	done