1#!/bin/bash 2# SPDX-License-Identifier: GPL-2.0 3 4# Test for resource limit of offloaded flower rules. The test adds a given 5# number of flower matches for different IPv6 addresses, then check the offload 6# indication for all of the tc flower rules. This file contains functions to set 7# up a testing topology and run the test, and is meant to be sourced from a test 8# script that calls the testing routine with a given number of rules. 9 10TC_FLOWER_NUM_NETIFS=2 11 12tc_flower_h1_create() 13{ 14 simple_if_init $h1 15 tc qdisc add dev $h1 clsact 16} 17 18tc_flower_h1_destroy() 19{ 20 tc qdisc del dev $h1 clsact 21 simple_if_fini $h1 22} 23 24tc_flower_h2_create() 25{ 26 simple_if_init $h2 27 tc qdisc add dev $h2 clsact 28} 29 30tc_flower_h2_destroy() 31{ 32 tc qdisc del dev $h2 clsact 33 simple_if_fini $h2 34} 35 36tc_flower_setup_prepare() 37{ 38 h1=${NETIFS[p1]} 39 h2=${NETIFS[p2]} 40 41 vrf_prepare 42 43 tc_flower_h1_create 44 tc_flower_h2_create 45} 46 47tc_flower_cleanup() 48{ 49 pre_cleanup 50 51 tc_flower_h2_destroy 52 tc_flower_h1_destroy 53 54 vrf_cleanup 55 56 if [[ -v TC_FLOWER_BATCH_FILE ]]; then 57 rm -f $TC_FLOWER_BATCH_FILE 58 fi 59} 60 61tc_flower_addr() 62{ 63 local num=$1; shift 64 65 printf "2001:db8:1::%x" $num 66} 67 68tc_flower_rules_create() 69{ 70 local count=$1; shift 71 local should_fail=$1; shift 72 73 TC_FLOWER_BATCH_FILE="$(mktemp)" 74 75 for ((i = 0; i < count; ++i)); do 76 cat >> $TC_FLOWER_BATCH_FILE <<-EOF 77 filter add dev $h2 ingress \ 78 prot ipv6 \ 79 pref 1000 \ 80 handle 42$i \ 81 flower $tcflags dst_ip $(tc_flower_addr $i) \ 82 action drop 83 EOF 84 done 85 86 tc -b $TC_FLOWER_BATCH_FILE 87 check_err_fail $should_fail $? "Rule insertion" 88} 89 90__tc_flower_test() 91{ 92 local count=$1; shift 93 local should_fail=$1; shift 94 local last=$((count - 1)) 95 96 tc_flower_rules_create $count $should_fail 97 98 offload_count=$(tc -j -s filter show dev $h2 ingress | 99 jq -r '[ .[] | select(.kind == "flower") | 100 .options | .in_hw ]' | jq .[] | wc -l) 101 [[ $((offload_count - 1)) -eq $count ]] 102 check_err_fail $should_fail $? "Attempt to offload $count rules (actual result $((offload_count - 1)))" 103} 104 105tc_flower_test() 106{ 107 local count=$1; shift 108 local should_fail=$1; shift 109 110 # We use lower 16 bits of IPv6 address for match. Also there are only 16 111 # bits of rule priority space. 112 if ((count > 65536)); then 113 check_err 1 "Invalid count of $count. At most 65536 rules supported" 114 return 115 fi 116 117 if ! tc_offload_check $TC_FLOWER_NUM_NETIFS; then 118 check_err 1 "Could not test offloaded functionality" 119 return 120 fi 121 122 tcflags="skip_sw" 123 __tc_flower_test $count $should_fail 124} 125 126tc_flower_traffic_test() 127{ 128 local count=$1; shift 129 local i; 130 131 for ((i = count - 1; i > 0; i /= 2)); do 132 $MZ -6 $h1 -c 1 -d 20msec -p 100 -a own -b $(mac_get $h2) \ 133 -A $(tc_flower_addr 0) -B $(tc_flower_addr $i) \ 134 -q -t udp sp=54321,dp=12345 135 done 136 for ((i = count - 1; i > 0; i /= 2)); do 137 tc_check_packets "dev $h2 ingress" 42$i 1 138 check_err $? "Traffic not seen at rule #$i" 139 done 140} 141