1 #!/bin/bash
2 # SPDX-License-Identifier: GPL-2.0
3 #
4 # Test devlink-trap ACL drops functionality over mlxsw.
5
6 lib_dir=$(dirname $0)/../../../net/forwarding
7
8 ALL_TESTS="
9 ingress_flow_action_drop_test
10 egress_flow_action_drop_test
11 "
12 NUM_NETIFS=4
13 source $lib_dir/tc_common.sh
14 source $lib_dir/lib.sh
15 source $lib_dir/devlink_lib.sh
16
17 h1_create()
18 {
19 simple_if_init $h1
20 }
21
22 h1_destroy()
23 {
24 simple_if_fini $h1
25 }
26
27 h2_create()
28 {
29 simple_if_init $h2
30 }
31
32 h2_destroy()
33 {
34 simple_if_fini $h2
35 }
36
37 switch_create()
38 {
39 ip link add dev br0 type bridge vlan_filtering 1 mcast_snooping 0
40
41 ip link set dev $swp1 master br0
42 ip link set dev $swp2 master br0
43
44 ip link set dev br0 up
45 ip link set dev $swp1 up
46 ip link set dev $swp2 up
47
48 tc qdisc add dev $swp1 clsact
49 tc qdisc add dev $swp2 clsact
50 }
51
52 switch_destroy()
53 {
54 tc qdisc del dev $swp2 clsact
55 tc qdisc del dev $swp1 clsact
56
57 ip link set dev $swp2 down
58 ip link set dev $swp1 down
59
60 ip link del dev br0
61 }
62
63 setup_prepare()
64 {
65 h1=${NETIFS[p1]}
66 swp1=${NETIFS[p2]}
67
68 swp2=${NETIFS[p3]}
69 h2=${NETIFS[p4]}
70
71 h1mac=$(mac_get $h1)
72 h2mac=$(mac_get $h2)
73
74 vrf_prepare
75
76 h1_create
77 h2_create
78
79 switch_create
80 }
81
82 cleanup()
83 {
84 pre_cleanup
85
86 switch_destroy
87
88 h2_destroy
89 h1_destroy
90
91 vrf_cleanup
92 }
93
94 ingress_flow_action_drop_test()
95 {
96 local mz_pid
97
98 tc filter add dev $swp2 egress protocol ip pref 1 handle 101 \
99 flower src_mac $h1mac action pass
100
101 tc filter add dev $swp1 ingress protocol ip pref 1 handle 101 \
102 flower dst_ip 192.0.2.2 action drop
103
104 $MZ $h1 -c 0 -p 100 -a $h1mac -b $h2mac -A 192.0.2.1 -B 192.0.2.2 \
105 -t ip -d 1msec -q &
106 mz_pid=$!
107
108 RET=0
109
110 devlink_trap_drop_test ingress_flow_action_drop $swp2 101
111
112 log_test "ingress_flow_action_drop"
113
114 tc filter del dev $swp1 ingress protocol ip pref 1 handle 101 flower
115
116 devlink_trap_drop_cleanup $mz_pid $swp2 ip 1 101
117 }
118
119 egress_flow_action_drop_test()
120 {
121 local mz_pid
122
123 tc filter add dev $swp2 egress protocol ip pref 2 handle 102 \
124 flower src_mac $h1mac action pass
125
126 tc filter add dev $swp2 egress protocol ip pref 1 handle 101 \
127 flower dst_ip 192.0.2.2 action drop
128
129 $MZ $h1 -c 0 -p 100 -a $h1mac -b $h2mac -A 192.0.2.1 -B 192.0.2.2 \
130 -t ip -d 1msec -q &
131 mz_pid=$!
132
133 RET=0
134
135 devlink_trap_drop_test egress_flow_action_drop $swp2 102
136
137 log_test "egress_flow_action_drop"
138
139 tc filter del dev $swp2 egress protocol ip pref 1 handle 101 flower
140
141 devlink_trap_drop_cleanup $mz_pid $swp2 ip 2 102
142 }
143
144 trap cleanup EXIT
145
146 setup_prepare
147 setup_wait
148
149 tests_run
150
151 exit $EXIT_STATUS
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.