FM / forwarding

/usr/src/linux-headers-5.15.0-190/tools/testing/selftests/net/forwarding/

/usr/src/linux-headers-5.15.0-190/tools/testing/selftests/net/forwarding

Name	Size	Mode	Actions
bridge_igmp.sh	15152	0755	edit dl rm
bridge_mld.sh	16563	0755	edit dl rm
bridge_port_isolation.sh	2378	0755	edit dl rm
bridge_sticky_fdb.sh	1159	0755	edit dl rm
bridge_vlan_aware.sh	2524	0755	edit dl rm
bridge_vlan_unaware.sh	1248	0755	edit dl rm
custom_multipath_hash.sh	9993	0755	edit dl rm
devlink_lib.sh	13118	0644	edit dl rm
dual_vxlan_bridge.sh	11439	0755	edit dl rm
ethtool.sh	6745	0755	edit dl rm
ethtool_extended_state.sh	1923	0755	edit dl rm
ethtool_lib.sh	2815	0644	edit dl rm
fib_offload_lib.sh	25157	0644	edit dl rm
gre_custom_multipath_hash.sh	12768	0755	edit dl rm
gre_inner_v4_multipath.sh	7730	0755	edit dl rm
gre_inner_v6_multipath.sh	7843	0755	edit dl rm
gre_multipath.sh	6439	0755	edit dl rm
gre_multipath_nh.sh	9301	0755	edit dl rm
gre_multipath_nh_res.sh	9491	0755	edit dl rm
ip6gre_custom_multipath_hash.sh	13038	0755	edit dl rm
ip6gre_inner_v4_multipath.sh	7956	0755	edit dl rm
ip6gre_inner_v6_multipath.sh	8069	0755	edit dl rm
ip6_forward_instats_vrf.sh	3092	0755	edit dl rm
ipip_flat_gre.sh	838	0755	edit dl rm
ipip_flat_gre_key.sh	860	0755	edit dl rm
ipip_flat_gre_keys.sh	886	0755	edit dl rm
ipip_hier_gre.sh	887	0755	edit dl rm
ipip_hier_gre_key.sh	910	0755	edit dl rm
ipip_hier_gre_keys.sh	938	0755	edit dl rm
ipip_lib.sh	8557	0644	edit dl rm
lib.sh	28668	0644	edit dl rm
loopback.sh	1589	0755	edit dl rm
Makefile	1718	0644	edit dl rm
mirror_gre.sh	3366	0755	edit dl rm
mirror_gre_bound.sh	5929	0755	edit dl rm
mirror_gre_bridge_1d.sh	4504	0755	edit dl rm
mirror_gre_bridge_1d_vlan.sh	2717	0755	edit dl rm
mirror_gre_bridge_1q.sh	4380	0755	edit dl rm
mirror_gre_bridge_1q_lag.sh	7485	0755	edit dl rm
mirror_gre_changes.sh	5824	0755	edit dl rm
mirror_gre_flower.sh	2891	0755	edit dl rm
mirror_gre_lag_lacp.sh	7458	0755	edit dl rm
mirror_gre_lib.sh	2565	0644	edit dl rm
mirror_gre_neigh.sh	2338	0755	edit dl rm
mirror_gre_nh.sh	2974	0755	edit dl rm
mirror_gre_topo_lib.sh	3524	0644	edit dl rm
mirror_gre_vlan.sh	1715	0755	edit dl rm
mirror_gre_vlan_bridge_1q.sh	9117	0755	edit dl rm
mirror_lib.sh	2964	0644	edit dl rm
mirror_topo_lib.sh	2758	0644	edit dl rm
mirror_vlan.sh	2303	0755	edit dl rm
pedit_dsfield.sh	6789	0755	edit dl rm
pedit_l4port.sh	4564	0755	edit dl rm
q_in_vni.sh	10926	0755	edit dl rm
router.sh	6322	0755	edit dl rm
router_bridge.sh	1794	0755	edit dl rm
router_bridge_vlan.sh	2108	0755	edit dl rm
router_broadcast.sh	5142	0755	edit dl rm
router_mpath_nh.sh	9828	0755	edit dl rm
router_mpath_nh_res.sh	10223	0755	edit dl rm
router_multicast.sh	11597	0755	edit dl rm
router_multipath.sh	8449	0755	edit dl rm
router_nh.sh	2627	0755	edit dl rm
router_vid_1.sh	2153	0755	edit dl rm
sch_ets.sh	781	0755	edit dl rm
sch_ets_core.sh	7456	0644	edit dl rm
sch_ets_tests.sh	4044	0644	edit dl rm
sch_red.sh	11358	0755	edit dl rm
sch_tbf_core.sh	5140	0644	edit dl rm
sch_tbf_ets.sh	118	0755	edit dl rm
sch_tbf_etsprio.sh	711	0644	edit dl rm
sch_tbf_prio.sh	118	0755	edit dl rm
sch_tbf_root.sh	422	0755	edit dl rm
skbedit_priority.sh	3901	0755	edit dl rm
tc_actions.sh	6606	0755	edit dl rm
tc_chains.sh	4945	0755	edit dl rm
tc_common.sh	524	0644	edit dl rm
tc_flower.sh	21752	0755	edit dl rm
tc_flower_router.sh	3096	0755	edit dl rm
tc_mpls_l2vpn.sh	5146	0755	edit dl rm
tc_police.sh	12111	0755	edit dl rm
tc_shblocks.sh	2748	0755	edit dl rm
tc_vlan_modify.sh	3246	0755	edit dl rm
vxlan_asymmetric.sh	17978	0755	edit dl rm
vxlan_bridge_1d.sh	21064	0755	edit dl rm
vxlan_bridge_1d_port_8472.sh	172	0755	edit dl rm
vxlan_bridge_1q.sh	24053	0755	edit dl rm
vxlan_bridge_1q_port_8472.sh	172	0755	edit dl rm
vxlan_symmetric.sh	18488	0755	edit dl rm

Edit: /usr/src/linux-headers-5.15.0-190/tools/testing/selftests/net/forwarding/tc_chains.sh (4945B)

#!/bin/bash
# SPDX-License-Identifier: GPL-2.0

ALL_TESTS="unreachable_chain_test gact_goto_chain_test create_destroy_chain \
	   template_filter_fits"
NUM_NETIFS=2
source tc_common.sh
source lib.sh

tcflags="skip_hw"

h1_create()
{
	simple_if_init $h1 192.0.2.1/24
}

h1_destroy()
{
	simple_if_fini $h1 192.0.2.1/24
}

h2_create()
{
	simple_if_init $h2 192.0.2.2/24
	tc qdisc add dev $h2 clsact
}

h2_destroy()
{
	tc qdisc del dev $h2 clsact
	simple_if_fini $h2 192.0.2.2/24
}

unreachable_chain_test()
{
	RET=0

tc filter add dev $h2 ingress chain 1 protocol ip pref 1 handle 1101 \
		flower $tcflags dst_mac $h2mac action drop

$MZ $h1 -c 1 -p 64 -a $h1mac -b $h2mac -A 192.0.2.1 -B 192.0.2.2 \
		-t ip -q

tc_check_packets "dev $h2 ingress" 1101 1
	check_fail $? "matched on filter in unreachable chain"

tc filter del dev $h2 ingress chain 1 protocol ip pref 1 handle 1101 \
		flower

log_test "unreachable chain ($tcflags)"
}

gact_goto_chain_test()
{
	RET=0

tc filter add dev $h2 ingress chain 1 protocol ip pref 1 handle 1101 \
		flower $tcflags dst_mac $h2mac action drop
	tc filter add dev $h2 ingress protocol ip pref 2 handle 102 flower \
		$tcflags dst_mac $h2mac action drop
	tc filter add dev $h2 ingress protocol ip pref 1 handle 101 flower \
		$tcflags dst_mac $h2mac action goto chain 1

$MZ $h1 -c 1 -p 64 -a $h1mac -b $h2mac -A 192.0.2.1 -B 192.0.2.2 \
		-t ip -q

tc_check_packets "dev $h2 ingress" 102 1
	check_fail $? "Matched on a wrong filter"

tc_check_packets "dev $h2 ingress" 101 1
	check_err $? "Did not match on correct filter with goto chain action"

tc_check_packets "dev $h2 ingress" 1101 1
	check_err $? "Did not match on correct filter in chain 1"

tc filter del dev $h2 ingress protocol ip pref 1 handle 101 flower
	tc filter del dev $h2 ingress protocol ip pref 2 handle 102 flower
	tc filter del dev $h2 ingress chain 1 protocol ip pref 1 handle 1101 \
		flower

log_test "gact goto chain ($tcflags)"
}

create_destroy_chain()
{
	RET=0

tc chain add dev $h2 ingress
	check_err $? "Failed to create default chain"

output="$(tc -j chain get dev $h2 ingress)"
	check_err $? "Failed to get default chain"

echo $output | jq -e ".[] | select(.chain == 0)" &> /dev/null
	check_err $? "Unexpected output for default chain"

tc chain add dev $h2 ingress chain 1
	check_err $? "Failed to create chain 1"

output="$(tc -j chain get dev $h2 ingress chain 1)"
	check_err $? "Failed to get chain 1"

echo $output | jq -e ".[] | select(.chain == 1)" &> /dev/null
	check_err $? "Unexpected output for chain 1"

output="$(tc -j chain show dev $h2 ingress)"
	check_err $? "Failed to dump chains"

echo $output | jq -e ".[] | select(.chain == 0)" &> /dev/null
	check_err $? "Can't find default chain in dump"

echo $output | jq -e ".[] | select(.chain == 1)" &> /dev/null
	check_err $? "Can't find chain 1 in dump"

tc chain del dev $h2 ingress
	check_err $? "Failed to destroy default chain"

tc chain del dev $h2 ingress chain 1
	check_err $? "Failed to destroy chain 1"

log_test "create destroy chain"
}

template_filter_fits()
{
	RET=0

tc chain add dev $h2 ingress protocol ip \
		flower dst_mac 00:00:00:00:00:00/FF:FF:FF:FF:FF:FF &> /dev/null
	tc chain add dev $h2 ingress chain 1 protocol ip \
		flower src_mac 00:00:00:00:00:00/FF:FF:FF:FF:FF:FF &> /dev/null

tc filter add dev $h2 ingress protocol ip pref 1 handle 1101 \
		flower dst_mac $h2mac action drop
	check_err $? "Failed to insert filter which fits template"

tc filter add dev $h2 ingress protocol ip pref 1 handle 1102 \
		flower src_mac $h2mac action drop &> /dev/null
	check_fail $? "Incorrectly succeeded to insert filter which does not template"

tc filter add dev $h2 ingress chain 1 protocol ip pref 1 handle 1101 \
		flower src_mac $h2mac action drop
	check_err $? "Failed to insert filter which fits template"

tc filter add dev $h2 ingress chain 1 protocol ip pref 1 handle 1102 \
		flower dst_mac $h2mac action drop &> /dev/null
	check_fail $? "Incorrectly succeeded to insert filter which does not template"

tc filter del dev $h2 ingress chain 1 protocol ip pref 1 handle 1102 \
		flower &> /dev/null
	tc filter del dev $h2 ingress chain 1 protocol ip pref 1 handle 1101 \
		flower &> /dev/null

tc filter del dev $h2 ingress protocol ip pref 1 handle 1102 \
		flower &> /dev/null
	tc filter del dev $h2 ingress protocol ip pref 1 handle 1101 \
		flower &> /dev/null

tc chain del dev $h2 ingress chain 1
	tc chain del dev $h2 ingress

log_test "template filter fits"
}

setup_prepare()
{
	h1=${NETIFS[p1]}
	h2=${NETIFS[p2]}
	h1mac=$(mac_get $h1)
	h2mac=$(mac_get $h2)

vrf_prepare

h1_create
	h2_create
}

cleanup()
{
	pre_cleanup

h2_destroy
	h1_destroy

vrf_cleanup
}

check_tc_chain_support

trap cleanup EXIT

setup_prepare
setup_wait

tests_run

tc_offload_check
if [[ $? -ne 0 ]]; then
	log_info "Could not test offloaded functionality"
else
	tcflags="skip_sw"
	tests_run
fi

exit $EXIT_STATUS

cmd: