niansa-misc/linux
1
0
Fork 0
mirror of synced 2025-03-06 20:59:54 +01:00
Code Issues Projects Releases Packages Wiki Activity

selftests: forwarding: Add test case for traffic redirection from a locked port

Browse source 
Check that traffic can be redirected from a locked bridge port and that
it does not create locked FDB entries.

Cc: Hans J. Schultz <netdev@kapio-technology.com>
Signed-off-by: Ido Schimmel <idosch@nvidia.com>
Reviewed-by: Petr Machata <petrm@nvidia.com>
Signed-off-by: Petr Machata <petrm@nvidia.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
Ido Schimmel 2023-08-11 17:13:58 +02:00 • committed by David S. Miller
parent 9793a5a9c4
commit 38c43a1ce7
1 changed files with 36 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

36
tools/testing/selftests/net/forwarding/bridge_locked_port.sh
View file

@ -9,6 +9,7 @@ ALL_TESTS="
locked_port_mab_roam locked_port_mab_roam
locked_port_mab_config locked_port_mab_config
locked_port_mab_flush locked_port_mab_flush
locked_port_mab_redirect
" "
NUM_NETIFS=4 NUM_NETIFS=4
@ -319,6 +320,41 @@ locked_port_mab_flush()
log_test "Locked port MAB FDB flush" log_test "Locked port MAB FDB flush"
} }
# Check that traffic can be redirected from a locked bridge port and that it
# does not create locked FDB entries.
locked_port_mab_redirect()
{
RET=0
check_port_mab_support || return 0
bridge link set dev $swp1 learning on locked on mab on
tc qdisc add dev $swp1 clsact
tc filter add dev $swp1 ingress protocol all pref 1 handle 101 flower \
action mirred egress redirect dev $swp2
ping_do $h1 192.0.2.2
check_err $? "Ping did not work with redirection"
bridge fdb get `mac_get $h1` br br0 vlan 1 2> /dev/null | \
grep "dev $swp1" | grep -q "locked"
check_fail $? "Locked entry created for redirected traffic"
tc filter del dev $swp1 ingress protocol all pref 1 handle 101 flower
ping_do $h1 192.0.2.2
check_fail $? "Ping worked without redirection"
bridge fdb get `mac_get $h1` br br0 vlan 1 2> /dev/null | \
grep "dev $swp1" | grep -q "locked"
check_err $? "Locked entry not created after deleting filter"
bridge fdb del `mac_get $h1` vlan 1 dev $swp1 master
tc qdisc del dev $swp1 clsact
bridge link set dev $swp1 learning off locked off mab off
log_test "Locked port MAB redirect"
}
trap cleanup EXIT trap cleanup EXIT
setup_prepare setup_prepare