ci: Test LAN TCP/UDP + IPv4/IPv6

daeuniverse · Dec 31, 2023 · 50795a1 · 50795a1
1 parent 33b0af0
commit 50795a1
Showing 1 changed file with 118 additions and 0 deletions.
diff --git a/.github/workflows/kernel-test.yml b/.github/workflows/kernel-test.yml
@@ -214,3 +214,121 @@ jobs:
               echo "Ingore failure until https://github.com/daeuniverse/dae/issues/387 is resolved"
               true
             fi
+
+      - name: Setup LAN
+        uses: cilium/little-vm-helper@908ab1ff8a596a03cd5221a1f8602dc44c3f906d # v0.0.12
+        with:
+          provision: 'false'
+          cmd: |
+            set -ex
+            cd /host
+
+            docker restart -t0 dae
+            docker exec dae apt install -y iproute2 iptables iputils-ping
+
+            cat >lan.bash <<!
+            set -ex
+
+            ip net a dae
+            ip l a dae-veth type veth peer name dae-veth-peer
+            ip l s dae-veth-peer up
+            ip l s dae-veth netns dae
+            ip net e dae ip l s dae-veth up
+            ip r a 10.0.0.1 dev dae-veth-peer
+            ip net e dae ip a a 10.0.0.1 dev dae-veth
+            ip net e dae ip r a 169.254.0.1 dev dae-veth
+            ip net e dae ip r a default via 169.254.0.1 dev dae-veth
+
+            sysctl net.ipv6.conf.dae-veth-peer.disable_ipv6=0
+            ip -6 r a fd00:ffff::1 dev dae-veth-peer
+            ip -6 a a fe80::ecee:eeff:feee:eeee dev dae-veth-peer
+            ip net e dae ip -6 a a fd00:ffff::1 dev dae-veth
+            ip net e dae ip -6 r r default via fe80::ecee:eeff:feee:eeee dev dae-veth
+
+            sysctl net.ipv4.conf.dae-veth-peer.proxy_arp=1
+            sysctl net.ipv4.conf.dae-veth-peer.rp_filter=2
+            iptables-legacy -t nat -A POSTROUTING -s 10.0.0.1/32 -j MASQUERADE
+            !
+            docker exec dae bash /host/lan.bash
+
+            docker exec dae ping -c1 10.0.0.1
+            docker exec dae ip net e dae curl 1.0.0.1
+            docker exec dae ping -c1 fd00:ffff::1
+
+            docker exec dae sysctl net.ipv4.conf.dae-veth-peer.send_redirects=0
+            docker exec dae sysctl net.ipv6.conf.dae-veth-peer.forwarding=1
+
+            vmess_link=$(base64 -w0 vmess.json)
+            cat > ./conf.dae <<!
+            global {
+                tproxy_port: 12345
+                log_level: trace
+
+                lan_interface: dae-veth-peer
+                wan_interface: auto
+                allow_insecure: false
+            }
+
+            node {
+                local: 'vmess://\$vmess_link'
+            }
+
+            group {
+                proxy {
+                    policy: min_moving_avg
+                }
+            }
+
+            routing {
+                pname(dae) -> direct
+                fallback: proxy
+            }
+            !
+
+            chmod 600 ./conf.dae
+            nohup docker exec dae /host/dae/dae run -c /host/conf.dae &> dae.log &
+            sleep 10s
+            cat dae.log
+
+      - name: Check LAN IPv4 TCP
+        uses: cilium/little-vm-helper@908ab1ff8a596a03cd5221a1f8602dc44c3f906d # v0.0.12
+        with:
+          provision: 'false'
+          cmd: |
+            set -ex
+
+            docker exec dae ip net e dae curl 1.0.0.1
+            cat /host/dae.log | grep -F -- '-> 1.0.0.1:80'
+            cat /host/v2ray.access.log | grep -q 'accepted tcp:1.0.0.1:80'
+
+      - name: Check LAN IPv4 UDP
+        uses: cilium/little-vm-helper@908ab1ff8a596a03cd5221a1f8602dc44c3f906d # v0.0.12
+        with:
+          provision: 'false'
+          cmd: |
+            set -ex
+
+            docker exec dae ip net e dae dig @8.8.4.4 one.one.one.one
+            cat /host/dae.log | grep -F -- '-> 8.8.4.4:80'
+            cat /host/v2ray.access.log | grep -q 'accepted udp:8.8.4.4:53'
+
+      - name: Check LAN IPv6 TCP
+        uses: cilium/little-vm-helper@908ab1ff8a596a03cd5221a1f8602dc44c3f906d # v0.0.12
+        with:
+          provision: 'false'
+          cmd: |
+            set -ex
+
+            docker exec dae ip net e dae nc -v -w1 2606:4700:4700::1001 80 &> /host/nc.log
+            cat /host/nc.log | grep -q 'succeeded!'
+            cat /host/dae.log | grep -F -- '-> [2606:4700:4700::1001]:80'
+
+      - name: Check LAN IPv6 UDP
+        uses: cilium/little-vm-helper@908ab1ff8a596a03cd5221a1f8602dc44c3f906d # v0.0.12
+        with:
+          provision: 'false'
+          cmd: |
+            set -ex
+
+            docker exec dae ip net e dae dig @2001:4860:4860::8844 one.one.one.one
+            cat /host/dae.log | grep -F -- '-> [2001:4860:4860::8844]:53'