selftests: tc: Add basic mpls_* matching support for tc-flower

Add tests in tc_flower.sh for mpls_label, mpls_tc, mpls_bos and
mpls_ttl. For each keyword, test the minimal and maximal values.

Selectively skip these new mpls tests for tc versions that don't
support them.

Signed-off-by: Guillaume Nault <gnault@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

diff --git a/tools/testing/selftests/net/forwarding/config b/tools/testing/selftests/net/forwarding/config
index 10e9a3321ae1bc176b43640534f533cdf9d9d835..a4bd1b0873035e35558d1c8f51a0b38bb777ca7b 100644 (file)
--- a/tools/testing/selftests/net/forwarding/config
+++ b/tools/testing/selftests/net/forwarding/config
@@ -10,6 +10,7 @@ CONFIG_NET_ACT_MIRRED=m
 CONFIG_NET_ACT_MPLS=m
 CONFIG_NET_ACT_VLAN=m
 CONFIG_NET_CLS_FLOWER=m
+CONFIG_NET_CLS_MATCHALL=m
 CONFIG_NET_SCH_INGRESS=m
 CONFIG_NET_ACT_GACT=m
 CONFIG_VETH=m

diff --git a/tools/testing/selftests/net/forwarding/lib.sh b/tools/testing/selftests/net/forwarding/lib.sh
index 40b3a86a62cf4b7438be7fb61a6d458604c68b40..043a417651f2446d3375855a72e729433904b4ef 100644 (file)
--- a/tools/testing/selftests/net/forwarding/lib.sh
+++ b/tools/testing/selftests/net/forwarding/lib.sh
@@ -42,6 +42,21 @@ check_tc_version()
        fi
 }
 
+# Old versions of tc don't understand "mpls_uc"
+check_tc_mpls_support()
+{
+       local dev=$1; shift
+
+       tc filter add dev $dev ingress protocol mpls_uc pref 1 handle 1 \
+               matchall action pipe &> /dev/null
+       if [[ $? -ne 0 ]]; then
+               echo "SKIP: iproute2 too old; tc is missing MPLS support"
+               return 1
+       fi
+       tc filter del dev $dev ingress protocol mpls_uc pref 1 handle 1 \
+               matchall
+}
+
 check_tc_shblock_support()
 {
        tc filter help 2>&1 | grep block &> /dev/null

diff --git a/tools/testing/selftests/net/forwarding/tc_flower.sh b/tools/testing/selftests/net/forwarding/tc_flower.sh
index 058c746ee3006e6961367a26973d03e52b6175bf..7833e770c6ede2b17884a9de2f34ca48c4618711 100755 (executable)
--- a/tools/testing/selftests/net/forwarding/tc_flower.sh
+++ b/tools/testing/selftests/net/forwarding/tc_flower.sh
@@ -3,7 +3,8 @@
 
 ALL_TESTS="match_dst_mac_test match_src_mac_test match_dst_ip_test \
        match_src_ip_test match_ip_flags_test match_pcp_test match_vlan_test \
-       match_ip_tos_test match_indev_test"
+       match_ip_tos_test match_indev_test match_mpls_label_test \
+       match_mpls_tc_test match_mpls_bos_test match_mpls_ttl_test"
 NUM_NETIFS=2
 source tc_common.sh
 source lib.sh
@@ -334,6 +335,175 @@ match_indev_test()
        log_test "indev match ($tcflags)"
 }
 
+# Unfortunately, mausezahn can't build MPLS headers when used in L2
+# mode, so we have this function to build Label Stack Entries.
+mpls_lse()
+{
+       local label=$1
+       local tc=$2
+       local bos=$3
+       local ttl=$4
+
+       printf "%02x %02x %02x %02x"                        \
+               $((label >> 12))                            \
+               $((label >> 4 & 0xff))                      \
+               $((((label & 0xf) << 4) + (tc << 1) + bos)) \
+               $ttl
+}
+
+match_mpls_label_test()
+{
+       local ethtype="88 47"; readonly ethtype
+       local pkt
+
+       RET=0
+
+       check_tc_mpls_support $h2 || return 0
+
+       tc filter add dev $h2 ingress protocol mpls_uc pref 1 handle 101 \
+               flower $tcflags mpls_label 0 action drop
+       tc filter add dev $h2 ingress protocol mpls_uc pref 2 handle 102 \
+               flower $tcflags mpls_label 1048575 action drop
+
+       pkt="$ethtype $(mpls_lse 1048575 0 1 255)"
+       $MZ $h1 -c 1 -p 64 -a $h1mac -b $h2mac "$pkt" -q
+
+       tc_check_packets "dev $h2 ingress" 101 1
+       check_fail $? "Matched on a wrong filter (1048575)"
+
+       tc_check_packets "dev $h2 ingress" 102 1
+       check_err $? "Did not match on correct filter (1048575)"
+
+       pkt="$ethtype $(mpls_lse 0 0 1 255)"
+       $MZ $h1 -c 1 -p 64 -a $h1mac -b $h2mac "$pkt" -q
+
+       tc_check_packets "dev $h2 ingress" 102 2
+       check_fail $? "Matched on a wrong filter (0)"
+
+       tc_check_packets "dev $h2 ingress" 101 1
+       check_err $? "Did not match on correct filter (0)"
+
+       tc filter del dev $h2 ingress protocol mpls_uc pref 2 handle 102 flower
+       tc filter del dev $h2 ingress protocol mpls_uc pref 1 handle 101 flower
+
+       log_test "mpls_label match ($tcflags)"
+}
+
+match_mpls_tc_test()
+{
+       local ethtype="88 47"; readonly ethtype
+       local pkt
+
+       RET=0
+
+       check_tc_mpls_support $h2 || return 0
+
+       tc filter add dev $h2 ingress protocol mpls_uc pref 1 handle 101 \
+               flower $tcflags mpls_tc 0 action drop
+       tc filter add dev $h2 ingress protocol mpls_uc pref 2 handle 102 \
+               flower $tcflags mpls_tc 7 action drop
+
+       pkt="$ethtype $(mpls_lse 0 7 1 255)"
+       $MZ $h1 -c 1 -p 64 -a $h1mac -b $h2mac "$pkt" -q
+
+       tc_check_packets "dev $h2 ingress" 101 1
+       check_fail $? "Matched on a wrong filter (7)"
+
+       tc_check_packets "dev $h2 ingress" 102 1
+       check_err $? "Did not match on correct filter (7)"
+
+       pkt="$ethtype $(mpls_lse 0 0 1 255)"
+       $MZ $h1 -c 1 -p 64 -a $h1mac -b $h2mac "$pkt" -q
+
+       tc_check_packets "dev $h2 ingress" 102 2
+       check_fail $? "Matched on a wrong filter (0)"
+
+       tc_check_packets "dev $h2 ingress" 101 1
+       check_err $? "Did not match on correct filter (0)"
+
+       tc filter del dev $h2 ingress protocol mpls_uc pref 2 handle 102 flower
+       tc filter del dev $h2 ingress protocol mpls_uc pref 1 handle 101 flower
+
+       log_test "mpls_tc match ($tcflags)"
+}
+
+match_mpls_bos_test()
+{
+       local ethtype="88 47"; readonly ethtype
+       local pkt
+
+       RET=0
+
+       check_tc_mpls_support $h2 || return 0
+
+       tc filter add dev $h2 ingress protocol mpls_uc pref 1 handle 101 \
+               flower $tcflags mpls_bos 0 action drop
+       tc filter add dev $h2 ingress protocol mpls_uc pref 2 handle 102 \
+               flower $tcflags mpls_bos 1 action drop
+
+       pkt="$ethtype $(mpls_lse 0 0 1 255)"
+       $MZ $h1 -c 1 -p 64 -a $h1mac -b $h2mac "$pkt" -q
+
+       tc_check_packets "dev $h2 ingress" 101 1
+       check_fail $? "Matched on a wrong filter (1)"
+
+       tc_check_packets "dev $h2 ingress" 102 1
+       check_err $? "Did not match on correct filter (1)"
+
+       # Need to add a second label to properly mark the Bottom of Stack
+       pkt="$ethtype $(mpls_lse 0 0 0 255) $(mpls_lse 0 0 1 255)"
+       $MZ $h1 -c 1 -p 64 -a $h1mac -b $h2mac "$pkt" -q
+
+       tc_check_packets "dev $h2 ingress" 102 2
+       check_fail $? "Matched on a wrong filter (0)"
+
+       tc_check_packets "dev $h2 ingress" 101 1
+       check_err $? "Did not match on correct filter (0)"
+
+       tc filter del dev $h2 ingress protocol mpls_uc pref 2 handle 102 flower
+       tc filter del dev $h2 ingress protocol mpls_uc pref 1 handle 101 flower
+
+       log_test "mpls_bos match ($tcflags)"
+}
+
+match_mpls_ttl_test()
+{
+       local ethtype="88 47"; readonly ethtype
+       local pkt
+
+       RET=0
+
+       check_tc_mpls_support $h2 || return 0
+
+       tc filter add dev $h2 ingress protocol mpls_uc pref 1 handle 101 \
+               flower $tcflags mpls_ttl 0 action drop
+       tc filter add dev $h2 ingress protocol mpls_uc pref 2 handle 102 \
+               flower $tcflags mpls_ttl 255 action drop
+
+       pkt="$ethtype $(mpls_lse 0 0 1 255)"
+       $MZ $h1 -c 1 -p 64 -a $h1mac -b $h2mac "$pkt" -q
+
+       tc_check_packets "dev $h2 ingress" 101 1
+       check_fail $? "Matched on a wrong filter (255)"
+
+       tc_check_packets "dev $h2 ingress" 102 1
+       check_err $? "Did not match on correct filter (255)"
+
+       pkt="$ethtype $(mpls_lse 0 0 1 0)"
+       $MZ $h1 -c 1 -p 64 -a $h1mac -b $h2mac "$pkt" -q
+
+       tc_check_packets "dev $h2 ingress" 102 2
+       check_fail $? "Matched on a wrong filter (0)"
+
+       tc_check_packets "dev $h2 ingress" 101 1
+       check_err $? "Did not match on correct filter (0)"
+
+       tc filter del dev $h2 ingress protocol mpls_uc pref 2 handle 102 flower
+       tc filter del dev $h2 ingress protocol mpls_uc pref 1 handle 101 flower
+
+       log_test "mpls_ttl match ($tcflags)"
+}
+
 setup_prepare()
 {
        h1=${NETIFS[p1]}