| [ |
| { |
| "id": "696a", |
| "name": "Add simple ct action", |
| "category": [ |
| "actions", |
| "ct" |
| ], |
| "setup": [ |
| [ |
| "$TC actions flush action ct", |
| 0, |
| 1, |
| 255 |
| ] |
| ], |
| "cmdUnderTest": "$TC actions add action ct index 42", |
| "expExitCode": "0", |
| "verifyCmd": "$TC actions list action ct", |
| "matchPattern": "action order [0-9]*: ct zone 0 pipe.*index 42 ref", |
| "matchCount": "1", |
| "teardown": [ |
| "$TC actions flush action ct" |
| ] |
| }, |
| { |
| "id": "e38c", |
| "name": "Add simple ct action with cookie", |
| "category": [ |
| "actions", |
| "ct" |
| ], |
| "setup": [ |
| [ |
| "$TC actions flush action ct", |
| 0, |
| 1, |
| 255 |
| ] |
| ], |
| "cmdUnderTest": "$TC actions add action ct index 42 cookie deadbeef", |
| "expExitCode": "0", |
| "verifyCmd": "$TC actions list action ct", |
| "matchPattern": "action order [0-9]*: ct zone 0 pipe.*index 42 ref.*cookie deadbeef", |
| "matchCount": "1", |
| "teardown": [ |
| "$TC actions flush action ct" |
| ] |
| }, |
| { |
| "id": "9f20", |
| "name": "Add ct clear action", |
| "category": [ |
| "actions", |
| "ct" |
| ], |
| "setup": [ |
| [ |
| "$TC actions flush action ct", |
| 0, |
| 1, |
| 255 |
| ] |
| ], |
| "cmdUnderTest": "$TC actions add action ct clear index 42", |
| "expExitCode": "0", |
| "verifyCmd": "$TC actions list action ct", |
| "matchPattern": "action order [0-9]*: ct clear pipe.*index 42 ref", |
| "matchCount": "1", |
| "teardown": [ |
| "$TC actions flush action ct" |
| ] |
| }, |
| { |
| "id": "0bc1", |
| "name": "Add ct clear action with cookie of max length", |
| "category": [ |
| "actions", |
| "ct" |
| ], |
| "setup": [ |
| [ |
| "$TC actions flush action ct", |
| 0, |
| 1, |
| 255 |
| ] |
| ], |
| "cmdUnderTest": "$TC actions add action ct clear index 42 cookie aa11bb22cc33dd44ee55ff66aa11b1b2", |
| "expExitCode": "0", |
| "verifyCmd": "$TC actions list action ct", |
| "matchPattern": "action order [0-9]*: ct clear pipe.*index 42 ref.*cookie aa11bb22cc33dd44ee55ff66aa11b1b2", |
| "matchCount": "1", |
| "teardown": [ |
| "$TC actions flush action ct" |
| ] |
| }, |
| { |
| "id": "5bea", |
| "name": "Try ct with zone", |
| "category": [ |
| "actions", |
| "ct" |
| ], |
| "setup": [ |
| [ |
| "$TC actions flush action ct", |
| 0, |
| 1, |
| 255 |
| ] |
| ], |
| "cmdUnderTest": "$TC actions add action ct zone 404 index 42", |
| "expExitCode": "0", |
| "verifyCmd": "$TC actions list action ct", |
| "matchPattern": "action order [0-9]*: ct zone 404 pipe.*index 42 ref", |
| "matchCount": "1", |
| "teardown": [ |
| "$TC actions flush action ct" |
| ] |
| }, |
| { |
| "id": "d5d6", |
| "name": "Try ct with zone, commit", |
| "category": [ |
| "actions", |
| "ct" |
| ], |
| "setup": [ |
| [ |
| "$TC actions flush action ct", |
| 0, |
| 1, |
| 255 |
| ] |
| ], |
| "cmdUnderTest": "$TC actions add action ct zone 404 commit index 42", |
| "expExitCode": "0", |
| "verifyCmd": "$TC actions list action ct", |
| "matchPattern": "action order [0-9]*: ct commit zone 404 pipe.*index 42 ref", |
| "matchCount": "1", |
| "teardown": [ |
| "$TC actions flush action ct" |
| ] |
| }, |
| { |
| "id": "029f", |
| "name": "Try ct with zone, commit, mark", |
| "category": [ |
| "actions", |
| "ct" |
| ], |
| "setup": [ |
| [ |
| "$TC actions flush action ct", |
| 0, |
| 1, |
| 255 |
| ] |
| ], |
| "cmdUnderTest": "$TC actions add action ct zone 404 commit mark 0x42 index 42", |
| "expExitCode": "0", |
| "verifyCmd": "$TC actions list action ct", |
| "matchPattern": "action order [0-9]*: ct commit mark 66 zone 404 pipe.*index 42 ref", |
| "matchCount": "1", |
| "teardown": [ |
| "$TC actions flush action ct" |
| ] |
| }, |
| { |
| "id": "a58d", |
| "name": "Try ct with zone, commit, mark, nat", |
| "category": [ |
| "actions", |
| "ct" |
| ], |
| "setup": [ |
| [ |
| "$TC actions flush action ct", |
| 0, |
| 1, |
| 255 |
| ] |
| ], |
| "cmdUnderTest": "$TC actions add action ct zone 404 commit mark 0x42 nat src addr 5.5.5.7 index 42", |
| "expExitCode": "0", |
| "verifyCmd": "$TC actions list action ct", |
| "matchPattern": "action order [0-9]*: ct commit mark 66 zone 404 nat src addr 5.5.5.7 pipe.*index 42 ref", |
| "matchCount": "1", |
| "teardown": [ |
| "$TC actions flush action ct" |
| ] |
| }, |
| { |
| "id": "901b", |
| "name": "Try ct with full nat ipv4 range syntax", |
| "category": [ |
| "actions", |
| "ct" |
| ], |
| "setup": [ |
| [ |
| "$TC actions flush action ct", |
| 0, |
| 1, |
| 255 |
| ] |
| ], |
| "cmdUnderTest": "$TC actions add action ct commit nat src addr 5.5.5.7-5.5.6.0 port 1000-2000 index 44", |
| "expExitCode": "0", |
| "verifyCmd": "$TC actions list action ct", |
| "matchPattern": "action order [0-9]*: ct commit zone 0 nat src addr 5.5.5.7-5.5.6.0 port 1000-2000 pipe.*index 44 ref", |
| "matchCount": "1", |
| "teardown": [ |
| "$TC actions flush action ct" |
| ] |
| }, |
| { |
| "id": "072b", |
| "name": "Try ct with full nat ipv6 syntax", |
| "category": [ |
| "actions", |
| "ct" |
| ], |
| "setup": [ |
| [ |
| "$TC actions flush action ct", |
| 0, |
| 1, |
| 255 |
| ] |
| ], |
| "cmdUnderTest": "$TC actions add action ct commit nat src addr 2001::1 port 1000-2000 index 44", |
| "expExitCode": "0", |
| "verifyCmd": "$TC actions list action ct", |
| "matchPattern": "action order [0-9]*: ct commit zone 0 nat src addr 2001::1 port 1000-2000 pipe.*index 44 ref", |
| "matchCount": "1", |
| "teardown": [ |
| "$TC actions flush action ct" |
| ] |
| }, |
| { |
| "id": "3420", |
| "name": "Try ct with full nat ipv6 range syntax", |
| "category": [ |
| "actions", |
| "ct" |
| ], |
| "setup": [ |
| [ |
| "$TC actions flush action ct", |
| 0, |
| 1, |
| 255 |
| ] |
| ], |
| "cmdUnderTest": "$TC actions add action ct commit nat src addr 2001::1-2001::10 port 1000-2000 index 44", |
| "expExitCode": "0", |
| "verifyCmd": "$TC actions list action ct", |
| "matchPattern": "action order [0-9]*: ct commit zone 0 nat src addr 2001::1-2001::10 port 1000-2000 pipe.*index 44 ref", |
| "matchCount": "1", |
| "teardown": [ |
| "$TC actions flush action ct" |
| ] |
| }, |
| { |
| "id": "4470", |
| "name": "Try ct with full nat ipv6 range syntax + force", |
| "category": [ |
| "actions", |
| "ct" |
| ], |
| "setup": [ |
| [ |
| "$TC actions flush action ct", |
| 0, |
| 1, |
| 255 |
| ] |
| ], |
| "cmdUnderTest": "$TC actions add action ct commit force nat src addr 2001::1-2001::10 port 1000-2000 index 44", |
| "expExitCode": "0", |
| "verifyCmd": "$TC actions list action ct", |
| "matchPattern": "action order [0-9]*: ct commit force zone 0 nat src addr 2001::1-2001::10 port 1000-2000 pipe.*index 44 ref", |
| "matchCount": "1", |
| "teardown": [ |
| "$TC actions flush action ct" |
| ] |
| }, |
| { |
| "id": "5d88", |
| "name": "Try ct with label", |
| "category": [ |
| "actions", |
| "ct" |
| ], |
| "setup": [ |
| [ |
| "$TC actions flush action ct", |
| 0, |
| 1, |
| 255 |
| ] |
| ], |
| "cmdUnderTest": "$TC actions add action ct label 123123 index 44", |
| "expExitCode": "0", |
| "verifyCmd": "$TC actions list action ct", |
| "matchPattern": "action order [0-9]*: ct zone 0 label 12312300000000000000000000000000 pipe.*index 44 ref", |
| "matchCount": "1", |
| "teardown": [ |
| "$TC actions flush action ct" |
| ] |
| }, |
| { |
| "id": "04d4", |
| "name": "Try ct with label with mask", |
| "category": [ |
| "actions", |
| "ct" |
| ], |
| "setup": [ |
| [ |
| "$TC actions flush action ct", |
| 0, |
| 1, |
| 255 |
| ] |
| ], |
| "cmdUnderTest": "$TC actions add action ct label 12312300000000000000000000000001/ffffffff000000000000000000000001 index 44", |
| "expExitCode": "0", |
| "verifyCmd": "$TC actions list action ct", |
| "matchPattern": "action order [0-9]*: ct zone 0 label 12312300000000000000000000000001/ffffffff000000000000000000000001 pipe.*index 44 ref", |
| "matchCount": "1", |
| "teardown": [ |
| "$TC actions flush action ct" |
| ] |
| }, |
| { |
| "id": "9751", |
| "name": "Try ct with mark + mask", |
| "category": [ |
| "actions", |
| "ct" |
| ], |
| "setup": [ |
| [ |
| "$TC actions flush action ct", |
| 0, |
| 1, |
| 255 |
| ] |
| ], |
| "cmdUnderTest": "$TC actions add action ct mark 0x42/0xf0 index 42", |
| "expExitCode": "0", |
| "verifyCmd": "$TC actions list action ct", |
| "matchPattern": "action order [0-9]*: ct mark 66/0xf0 zone 0 pipe.*index 42 ref", |
| "matchCount": "1", |
| "teardown": [ |
| "$TC actions flush action ct" |
| ] |
| }, |
| { |
| "id": "2faa", |
| "name": "Try ct with mark + mask and cookie", |
| "category": [ |
| "actions", |
| "ct" |
| ], |
| "setup": [ |
| [ |
| "$TC actions flush action ct", |
| 0, |
| 1, |
| 255 |
| ] |
| ], |
| "cmdUnderTest": "$TC actions add action ct mark 0x42/0xf0 index 42 cookie aa11bb22cc33dd44ee55ff66aa11b1b2", |
| "expExitCode": "0", |
| "verifyCmd": "$TC actions list action ct", |
| "matchPattern": "action order [0-9]*: ct mark 66/0xf0 zone 0 pipe.*index 42 ref.*cookie aa11bb22cc33dd44ee55ff66aa11b1b2", |
| "matchCount": "1", |
| "teardown": [ |
| "$TC actions flush action ct" |
| ] |
| }, |
| { |
| "id": "3991", |
| "name": "Add simple ct action with no_percpu flag", |
| "category": [ |
| "actions", |
| "ct" |
| ], |
| "setup": [ |
| [ |
| "$TC actions flush action ct", |
| 0, |
| 1, |
| 255 |
| ] |
| ], |
| "cmdUnderTest": "$TC actions add action ct no_percpu", |
| "expExitCode": "0", |
| "verifyCmd": "$TC actions list action ct", |
| "matchPattern": "action order [0-9]*: ct zone 0 pipe.*no_percpu", |
| "matchCount": "1", |
| "teardown": [ |
| "$TC actions flush action ct" |
| ] |
| }, |
| { |
| "id": "3992", |
| "name": "Add ct action triggering DNAT tuple conflict", |
| "category": [ |
| "actions", |
| "ct", |
| "scapy" |
| ], |
| "plugins": { |
| "requires": [ |
| "nsPlugin", |
| "scapyPlugin" |
| ] |
| }, |
| "setup": [ |
| [ |
| "$TC qdisc del dev $DEV1 ingress", |
| 0, |
| 1, |
| 2, |
| 255 |
| ], |
| "$TC qdisc add dev $DEV1 ingress" |
| ], |
| "cmdUnderTest": "$TC filter add dev $DEV1 ingress protocol ip prio 1 flower ct_state -trk action ct commit nat dst addr 20.0.0.1 port 10 pipe action drop", |
| "scapy": [ |
| { |
| "iface": "$DEV0", |
| "count": 1, |
| "packet": "Ether(type=0x800)/IP(src='10.0.0.10',dst='10.0.0.10')/TCP(sport=5000,dport=10)" |
| }, |
| { |
| "iface": "$DEV0", |
| "count": 1, |
| "packet": "Ether(type=0x800)/IP(src='10.0.0.10',dst='10.0.0.20')/TCP(sport=5000,dport=10)" |
| } |
| ], |
| "expExitCode": "0", |
| "verifyCmd": "cat /proc/net/nf_conntrack", |
| "matchPattern": "dst=10.0.0.20", |
| "matchCount": "1", |
| "teardown": [ |
| "$TC qdisc del dev $DEV1 ingress" |
| ] |
| } |
| ] |