| #!/bin/bash |
| # SPDX-License-Identifier: GPL-2.0 |
| # |
| # Test devlink-trap ACL drops functionality over mlxsw. |
| |
| lib_dir=$(dirname $0)/../../../net/forwarding |
| |
| ALL_TESTS=" |
| ingress_flow_action_drop_test |
| egress_flow_action_drop_test |
| " |
| NUM_NETIFS=4 |
| source $lib_dir/tc_common.sh |
| source $lib_dir/lib.sh |
| source $lib_dir/devlink_lib.sh |
| |
| h1_create() |
| { |
| simple_if_init $h1 |
| } |
| |
| h1_destroy() |
| { |
| simple_if_fini $h1 |
| } |
| |
| h2_create() |
| { |
| simple_if_init $h2 |
| } |
| |
| h2_destroy() |
| { |
| simple_if_fini $h2 |
| } |
| |
| switch_create() |
| { |
| ip link add dev br0 type bridge vlan_filtering 1 mcast_snooping 0 |
| |
| ip link set dev $swp1 master br0 |
| ip link set dev $swp2 master br0 |
| |
| ip link set dev br0 up |
| ip link set dev $swp1 up |
| ip link set dev $swp2 up |
| |
| tc qdisc add dev $swp1 clsact |
| tc qdisc add dev $swp2 clsact |
| } |
| |
| switch_destroy() |
| { |
| tc qdisc del dev $swp2 clsact |
| tc qdisc del dev $swp1 clsact |
| |
| ip link set dev $swp2 down |
| ip link set dev $swp1 down |
| |
| ip link del dev br0 |
| } |
| |
| setup_prepare() |
| { |
| h1=${NETIFS[p1]} |
| swp1=${NETIFS[p2]} |
| |
| swp2=${NETIFS[p3]} |
| h2=${NETIFS[p4]} |
| |
| h1mac=$(mac_get $h1) |
| h2mac=$(mac_get $h2) |
| |
| vrf_prepare |
| |
| h1_create |
| h2_create |
| |
| switch_create |
| } |
| |
| cleanup() |
| { |
| pre_cleanup |
| |
| switch_destroy |
| |
| h2_destroy |
| h1_destroy |
| |
| vrf_cleanup |
| } |
| |
| ingress_flow_action_drop_test() |
| { |
| local mz_pid |
| |
| tc filter add dev $swp2 egress protocol ip pref 1 handle 101 \ |
| flower src_mac $h1mac action pass |
| |
| tc filter add dev $swp1 ingress protocol ip pref 1 handle 101 \ |
| flower dst_ip 192.0.2.2 action drop |
| |
| $MZ $h1 -c 0 -p 100 -a $h1mac -b $h2mac -A 192.0.2.1 -B 192.0.2.2 \ |
| -t ip -d 1msec -q & |
| mz_pid=$! |
| |
| RET=0 |
| |
| devlink_trap_drop_test ingress_flow_action_drop $swp2 101 |
| |
| log_test "ingress_flow_action_drop" |
| |
| tc filter del dev $swp1 ingress protocol ip pref 1 handle 101 flower |
| |
| devlink_trap_drop_cleanup $mz_pid $swp2 ip 1 101 |
| } |
| |
| egress_flow_action_drop_test() |
| { |
| local mz_pid |
| |
| tc filter add dev $swp2 egress protocol ip pref 2 handle 102 \ |
| flower src_mac $h1mac action pass |
| |
| tc filter add dev $swp2 egress protocol ip pref 1 handle 101 \ |
| flower dst_ip 192.0.2.2 action drop |
| |
| $MZ $h1 -c 0 -p 100 -a $h1mac -b $h2mac -A 192.0.2.1 -B 192.0.2.2 \ |
| -t ip -d 1msec -q & |
| mz_pid=$! |
| |
| RET=0 |
| |
| devlink_trap_drop_test egress_flow_action_drop $swp2 102 |
| |
| log_test "egress_flow_action_drop" |
| |
| tc filter del dev $swp2 egress protocol ip pref 1 handle 101 flower |
| |
| devlink_trap_drop_cleanup $mz_pid $swp2 ip 2 102 |
| } |
| |
| trap cleanup EXIT |
| |
| setup_prepare |
| setup_wait |
| |
| tests_run |
| |
| exit $EXIT_STATUS |
