Skip to content

Commit 07e5c75

Browse files
jpirkodavem330
jpirko
authored and
davem330
committed
selftests: forwarding: Introduce tc flower matching tests
Add first part of flower tests. This patch only contains dst/src ip/mac matching. Signed-off-by: Jiri Pirko <[email protected]> Signed-off-by: Ido Schimmel <[email protected]> Signed-off-by: David S. Miller <[email protected]>
1 parent 781fe63 commit 07e5c75

File tree

2 files changed

+219
-0
lines changed

2 files changed

+219
-0
lines changed

‎tools/testing/selftests/net/forwarding/tc_common.sh

Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
#!/bin/bash
2+
# SPDX-License-Identifier: GPL-2.0
3+
4+
tc_check_packets()
5+
{
6+
local id=$1
7+
local handle=$2
8+
local count=$3
9+
local ret
10+
11+
output="$(tc -j -s filter show $id)"
12+
# workaround the jq bug which causes jq to return 0 in case input is ""
13+
ret=$?
14+
if [[ $ret -ne 0 ]]; then
15+
return $ret
16+
fi
17+
echo $output | \
18+
jq -e ".[] \
19+
| select(.options.handle == $handle) \
20+
| select(.options.actions[0].stats.packets == $count)" \
21+
&> /dev/null
22+
return $?
23+
}

‎tools/testing/selftests/net/forwarding/tc_flower.sh

Lines changed: 196 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,196 @@
1+
#!/bin/bash
2+
# SPDX-License-Identifier: GPL-2.0
3+
4+
NUM_NETIFS=2
5+
source lib.sh
6+
source tc_common.sh
7+
8+
tcflags="skip_hw"
9+
10+
h1_create()
11+
{
12+
simple_if_init $h1 192.0.2.1/24 198.51.100.1/24
13+
}
14+
15+
h1_destroy()
16+
{
17+
simple_if_fini $h1 192.0.2.1/24 198.51.100.1/24
18+
}
19+
20+
h2_create()
21+
{
22+
simple_if_init $h2 192.0.2.2/24 198.51.100.2/24
23+
tc qdisc add dev $h2 clsact
24+
}
25+
26+
h2_destroy()
27+
{
28+
tc qdisc del dev $h2 clsact
29+
simple_if_fini $h2 192.0.2.2/24 198.51.100.2/24
30+
}
31+
32+
match_dst_mac_test()
33+
{
34+
local dummy_mac=de:ad:be:ef:aa:aa
35+
36+
RET=0
37+
38+
tc filter add dev $h2 ingress protocol ip pref 1 handle 101 flower \
39+
$tcflags dst_mac $dummy_mac action drop
40+
tc filter add dev $h2 ingress protocol ip pref 2 handle 102 flower \
41+
$tcflags dst_mac $h2mac action drop
42+
43+
$MZ $h1 -c 1 -p 64 -a $h1mac -b $h2mac -A 192.0.2.1 -B 192.0.2.2 \
44+
-t ip -q
45+
46+
tc_check_packets "dev $h2 ingress" 101 1
47+
check_fail $? "Matched on a wrong filter"
48+
49+
tc_check_packets "dev $h2 ingress" 102 1
50+
check_err $? "Did not match on correct filter"
51+
52+
tc filter del dev $h2 ingress protocol ip pref 1 handle 101 flower
53+
tc filter del dev $h2 ingress protocol ip pref 2 handle 102 flower
54+
55+
log_test "dst_mac match ($tcflags)"
56+
}
57+
58+
match_src_mac_test()
59+
{
60+
local dummy_mac=de:ad:be:ef:aa:aa
61+
62+
RET=0
63+
64+
tc filter add dev $h2 ingress protocol ip pref 1 handle 101 flower \
65+
$tcflags src_mac $dummy_mac action drop
66+
tc filter add dev $h2 ingress protocol ip pref 2 handle 102 flower \
67+
$tcflags src_mac $h1mac action drop
68+
69+
$MZ $h1 -c 1 -p 64 -a $h1mac -b $h2mac -A 192.0.2.1 -B 192.0.2.2 \
70+
-t ip -q
71+
72+
tc_check_packets "dev $h2 ingress" 101 1
73+
check_fail $? "Matched on a wrong filter"
74+
75+
tc_check_packets "dev $h2 ingress" 102 1
76+
check_err $? "Did not match on correct filter"
77+
78+
tc filter del dev $h2 ingress protocol ip pref 1 handle 101 flower
79+
tc filter del dev $h2 ingress protocol ip pref 2 handle 102 flower
80+
81+
log_test "src_mac match ($tcflags)"
82+
}
83+
84+
match_dst_ip_test()
85+
{
86+
RET=0
87+
88+
tc filter add dev $h2 ingress protocol ip pref 1 handle 101 flower \
89+
$tcflags dst_ip 198.51.100.2 action drop
90+
tc filter add dev $h2 ingress protocol ip pref 2 handle 102 flower \
91+
$tcflags dst_ip 192.0.2.2 action drop
92+
tc filter add dev $h2 ingress protocol ip pref 3 handle 103 flower \
93+
$tcflags dst_ip 192.0.2.0/24 action drop
94+
95+
$MZ $h1 -c 1 -p 64 -a $h1mac -b $h2mac -A 192.0.2.1 -B 192.0.2.2 \
96+
-t ip -q
97+
98+
tc_check_packets "dev $h2 ingress" 101 1
99+
check_fail $? "Matched on a wrong filter"
100+
101+
tc_check_packets "dev $h2 ingress" 102 1
102+
check_err $? "Did not match on correct filter"
103+
104+
tc filter del dev $h2 ingress protocol ip pref 2 handle 102 flower
105+
106+
$MZ $h1 -c 1 -p 64 -a $h1mac -b $h2mac -A 192.0.2.1 -B 192.0.2.2 \
107+
-t ip -q
108+
109+
tc_check_packets "dev $h2 ingress" 103 1
110+
check_err $? "Did not match on correct filter with mask"
111+
112+
tc filter del dev $h2 ingress protocol ip pref 1 handle 101 flower
113+
tc filter del dev $h2 ingress protocol ip pref 3 handle 103 flower
114+
115+
log_test "dst_ip match ($tcflags)"
116+
}
117+
118+
match_src_ip_test()
119+
{
120+
RET=0
121+
122+
tc filter add dev $h2 ingress protocol ip pref 1 handle 101 flower \
123+
$tcflags src_ip 198.51.100.1 action drop
124+
tc filter add dev $h2 ingress protocol ip pref 2 handle 102 flower \
125+
$tcflags src_ip 192.0.2.1 action drop
126+
tc filter add dev $h2 ingress protocol ip pref 3 handle 103 flower \
127+
$tcflags src_ip 192.0.2.0/24 action drop
128+
129+
$MZ $h1 -c 1 -p 64 -a $h1mac -b $h2mac -A 192.0.2.1 -B 192.0.2.2 \
130+
-t ip -q
131+
132+
tc_check_packets "dev $h2 ingress" 101 1
133+
check_fail $? "Matched on a wrong filter"
134+
135+
tc_check_packets "dev $h2 ingress" 102 1
136+
check_err $? "Did not match on correct filter"
137+
138+
tc filter del dev $h2 ingress protocol ip pref 2 handle 102 flower
139+
140+
$MZ $h1 -c 1 -p 64 -a $h1mac -b $h2mac -A 192.0.2.1 -B 192.0.2.2 \
141+
-t ip -q
142+
143+
tc_check_packets "dev $h2 ingress" 103 1
144+
check_err $? "Did not match on correct filter with mask"
145+
146+
tc filter del dev $h2 ingress protocol ip pref 1 handle 101 flower
147+
tc filter del dev $h2 ingress protocol ip pref 3 handle 103 flower
148+
149+
log_test "src_ip match ($tcflags)"
150+
}
151+
152+
setup_prepare()
153+
{
154+
h1=${NETIFS[p1]}
155+
h2=${NETIFS[p2]}
156+
h1mac=$(mac_get $h1)
157+
h2mac=$(mac_get $h2)
158+
159+
vrf_prepare
160+
161+
h1_create
162+
h2_create
163+
}
164+
165+
cleanup()
166+
{
167+
pre_cleanup
168+
169+
h2_destroy
170+
h1_destroy
171+
172+
vrf_cleanup
173+
}
174+
175+
trap cleanup EXIT
176+
177+
setup_prepare
178+
setup_wait
179+
180+
match_dst_mac_test
181+
match_src_mac_test
182+
match_dst_ip_test
183+
match_src_ip_test
184+
185+
tc_offload_check
186+
if [[ $? -ne 0 ]]; then
187+
log_info "Could not test offloaded functionality"
188+
else
189+
tcflags="skip_sw"
190+
match_dst_mac_test
191+
match_src_mac_test
192+
match_dst_ip_test
193+
match_src_ip_test
194+
fi
195+
196+
exit $EXIT_STATUS

0 commit comments

Comments
 (0)