tools/testing/selftests/drivers/net/mlxsw/devlink_trap_acl_drops.sh

   1 #!/bin/bash
   2 # SPDX-License-Identifier: GPL-2.0
   3 #
   4 # Test devlink-trap ACL drops functionality over mlxsw.
   5
   6 lib_dir=$(dirname $0)/../../../net/forwarding
   7
   8 ALL_TESTS="
   9         ingress_flow_action_drop_test
  10         egress_flow_action_drop_test
  11 "
  12 NUM_NETIFS=4
  13 source $lib_dir/tc_common.sh
  14 source $lib_dir/lib.sh
  15 source $lib_dir/devlink_lib.sh
  16
  17 h1_create()
  18 {
  19         simple_if_init $h1
  20 }
  21
  22 h1_destroy()
  23 {
  24         simple_if_fini $h1
  25 }
  26
  27 h2_create()
  28 {
  29         simple_if_init $h2
  30 }
  31
  32 h2_destroy()
  33 {
  34         simple_if_fini $h2
  35 }
  36
  37 switch_create()
  38 {
  39         ip link add dev br0 type bridge vlan_filtering 1 mcast_snooping 0
  40
  41         ip link set dev $swp1 master br0
  42         ip link set dev $swp2 master br0
  43
  44         ip link set dev br0 up
  45         ip link set dev $swp1 up
  46         ip link set dev $swp2 up
  47
  48         tc qdisc add dev $swp1 clsact
  49         tc qdisc add dev $swp2 clsact
  50 }
  51
  52 switch_destroy()
  53 {
  54         tc qdisc del dev $swp2 clsact
  55         tc qdisc del dev $swp1 clsact
  56
  57         ip link set dev $swp2 down
  58         ip link set dev $swp1 down
  59
  60         ip link del dev br0
  61 }
  62
  63 setup_prepare()
  64 {
  65         h1=${NETIFS[p1]}
  66         swp1=${NETIFS[p2]}
  67
  68         swp2=${NETIFS[p3]}
  69         h2=${NETIFS[p4]}
  70
  71         h1mac=$(mac_get $h1)
  72         h2mac=$(mac_get $h2)
  73
  74         vrf_prepare
  75
  76         h1_create
  77         h2_create
  78
  79         switch_create
  80 }
  81
  82 cleanup()
  83 {
  84         pre_cleanup
  85
  86         switch_destroy
  87
  88         h2_destroy
  89         h1_destroy
  90
  91         vrf_cleanup
  92 }
  93
  94 ingress_flow_action_drop_test()
  95 {
  96         local mz_pid
  97
  98         tc filter add dev $swp2 egress protocol ip pref 1 handle 101 \
  99                 flower src_mac $h1mac action pass
 100
 101         tc filter add dev $swp1 ingress protocol ip pref 1 handle 101 \
 102                 flower dst_ip 192.0.2.2 action drop
 103
 104         $MZ $h1 -c 0 -p 100 -a $h1mac -b $h2mac -A 192.0.2.1 -B 192.0.2.2 \
 105                 -t ip -d 1msec -q &
 106         mz_pid=$!
 107
 108         RET=0
 109
 110         devlink_trap_drop_test ingress_flow_action_drop $swp2 101
 111
 112         log_test "ingress_flow_action_drop"
 113
 114         tc filter del dev $swp1 ingress protocol ip pref 1 handle 101 flower
 115
 116         devlink_trap_drop_cleanup $mz_pid $swp2 ip 1 101
 117 }
 118
 119 egress_flow_action_drop_test()
 120 {
 121         local mz_pid
 122
 123         tc filter add dev $swp2 egress protocol ip pref 2 handle 102 \
 124                 flower src_mac $h1mac action pass
 125
 126         tc filter add dev $swp2 egress protocol ip pref 1 handle 101 \
 127                 flower dst_ip 192.0.2.2 action drop
 128
 129         $MZ $h1 -c 0 -p 100 -a $h1mac -b $h2mac -A 192.0.2.1 -B 192.0.2.2 \
 130                 -t ip -d 1msec -q &
 131         mz_pid=$!
 132
 133         RET=0
 134
 135         devlink_trap_drop_test egress_flow_action_drop $swp2 102
 136
 137         log_test "egress_flow_action_drop"
 138
 139         tc filter del dev $swp2 egress protocol ip pref 1 handle 101 flower
 140
 141         devlink_trap_drop_cleanup $mz_pid $swp2 ip 2 102
 142 }
 143
 144 trap cleanup EXIT
 145
 146 setup_prepare
 147 setup_wait
 148
 149 tests_run
 150
 151 exit $EXIT_STATUS