selftest: tc_flower: add testcase for 'ip_flags'

Signed-off-by: Davide Caratti <dcaratti@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

diff --git a/tools/testing/selftests/net/forwarding/tc_flower.sh b/tools/testing/selftests/net/forwarding/tc_flower.sh
index 032b882adfc02a315bf5c99ebc3d02cc28efb1f7..0c54059f1875c7ea227efbbfb3288d7c93ee6374 100755 (executable)
--- a/tools/testing/selftests/net/forwarding/tc_flower.sh
+++ b/tools/testing/selftests/net/forwarding/tc_flower.sh
@@ -149,6 +149,74 @@ match_src_ip_test()
        log_test "src_ip match ($tcflags)"
 }
 
+match_ip_flags_test()
+{
+       RET=0
+
+       tc filter add dev $h2 ingress protocol ip pref 1 handle 101 flower \
+               $tcflags ip_flags frag action continue
+       tc filter add dev $h2 ingress protocol ip pref 2 handle 102 flower \
+               $tcflags ip_flags firstfrag action continue
+       tc filter add dev $h2 ingress protocol ip pref 3 handle 103 flower \
+               $tcflags ip_flags nofirstfrag action continue
+       tc filter add dev $h2 ingress protocol ip pref 4 handle 104 flower \
+               $tcflags ip_flags nofrag action drop
+
+       $MZ $h1 -c 1 -p 1000 -a $h1mac -b $h2mac -A 192.0.2.1 -B 192.0.2.2 \
+               -t ip "frag=0" -q
+
+       tc_check_packets "dev $h2 ingress" 101 1
+       check_fail $? "Matched on wrong frag filter (nofrag)"
+
+       tc_check_packets "dev $h2 ingress" 102 1
+       check_fail $? "Matched on wrong firstfrag filter (nofrag)"
+
+       tc_check_packets "dev $h2 ingress" 103 1
+       check_err $? "Did not match on nofirstfrag filter (nofrag) "
+
+       tc_check_packets "dev $h2 ingress" 104 1
+       check_err $? "Did not match on nofrag filter (nofrag)"
+
+       $MZ $h1 -c 1 -p 1000 -a $h1mac -b $h2mac -A 192.0.2.1 -B 192.0.2.2 \
+               -t ip "frag=0,mf" -q
+
+       tc_check_packets "dev $h2 ingress" 101 1
+       check_err $? "Did not match on frag filter (1stfrag)"
+
+       tc_check_packets "dev $h2 ingress" 102 1
+       check_err $? "Did not match fistfrag filter (1stfrag)"
+
+       tc_check_packets "dev $h2 ingress" 103 1
+       check_err $? "Matched on wrong nofirstfrag filter (1stfrag)"
+
+       tc_check_packets "dev $h2 ingress" 104 1
+       check_err $? "Match on wrong nofrag filter (1stfrag)"
+
+       $MZ $h1 -c 1 -p 1000 -a $h1mac -b $h2mac -A 192.0.2.1 -B 192.0.2.2 \
+               -t ip "frag=256,mf" -q
+       $MZ $h1 -c 1 -p 1000 -a $h1mac -b $h2mac -A 192.0.2.1 -B 192.0.2.2 \
+               -t ip "frag=256" -q
+
+       tc_check_packets "dev $h2 ingress" 101 3
+       check_err $? "Did not match on frag filter (no1stfrag)"
+
+       tc_check_packets "dev $h2 ingress" 102 1
+       check_err $? "Matched on wrong firstfrag filter (no1stfrag)"
+
+       tc_check_packets "dev $h2 ingress" 103 3
+       check_err $? "Did not match on nofirstfrag filter (no1stfrag)"
+
+       tc_check_packets "dev $h2 ingress" 104 1
+       check_err $? "Matched on nofrag filter (no1stfrag)"
+
+       tc filter del dev $h2 ingress protocol ip pref 1 handle 101 flower
+       tc filter del dev $h2 ingress protocol ip pref 2 handle 102 flower
+       tc filter del dev $h2 ingress protocol ip pref 3 handle 103 flower
+       tc filter del dev $h2 ingress protocol ip pref 4 handle 104 flower
+
+       log_test "ip_flags match ($tcflags)"
+}
+
 setup_prepare()
 {
        h1=${NETIFS[p1]}
@@ -181,6 +249,7 @@ match_dst_mac_test
 match_src_mac_test
 match_dst_ip_test
 match_src_ip_test
+match_ip_flags_test
 
 tc_offload_check
 if [[ $? -ne 0 ]]; then
@@ -191,6 +260,7 @@ else
        match_src_mac_test
        match_dst_ip_test
        match_src_ip_test
+       match_ip_flags_test
 fi
 
 exit $EXIT_STATUS