tc_flower_scale.sh

  1#!/bin/bash
  2# SPDX-License-Identifier: GPL-2.0
  3
  4# Test for resource limit of offloaded flower rules. The test adds a given
  5# number of flower matches for different IPv6 addresses, then check the offload
  6# indication for all of the tc flower rules. This file contains functions to set
  7# up a testing topology and run the test, and is meant to be sourced from a test
  8# script that calls the testing routine with a given number of rules.
  9
 10TC_FLOWER_NUM_NETIFS=2
 11
 12tc_flower_h1_create()
 13{
 14	simple_if_init $h1
 15	tc qdisc add dev $h1 clsact
 16}
 17
 18tc_flower_h1_destroy()
 19{
 20	tc qdisc del dev $h1 clsact
 21	simple_if_fini $h1
 22}
 23
 24tc_flower_h2_create()
 25{
 26	simple_if_init $h2
 27	tc qdisc add dev $h2 clsact
 28}
 29
 30tc_flower_h2_destroy()
 31{
 32	tc qdisc del dev $h2 clsact
 33	simple_if_fini $h2
 34}
 35
 36tc_flower_setup_prepare()
 37{
 38	h1=${NETIFS[p1]}
 39	h2=${NETIFS[p2]}
 40
 41	vrf_prepare
 42
 43	tc_flower_h1_create
 44	tc_flower_h2_create
 45}
 46
 47tc_flower_cleanup()
 48{
 49	pre_cleanup
 50
 51	tc_flower_h2_destroy
 52	tc_flower_h1_destroy
 53
 54	vrf_cleanup
 55
 56	if [[ -v TC_FLOWER_BATCH_FILE ]]; then
 57		rm -f $TC_FLOWER_BATCH_FILE
 58	fi
 59}
 60
 61tc_flower_addr()
 62{
 63	local num=$1; shift
 64
 65	printf "2001:db8:1::%x" $num
 66}
 67
 68tc_flower_rules_create()
 69{
 70	local count=$1; shift
 71	local should_fail=$1; shift
 72
 73	TC_FLOWER_BATCH_FILE="$(mktemp)"
 74
 75	for ((i = 0; i < count; ++i)); do
 76		cat >> $TC_FLOWER_BATCH_FILE <<-EOF
 77			filter add dev $h2 ingress \
 78				prot ipv6 \
 79				pref 1000 \
 80				handle 42$i \
 81				flower $tcflags dst_ip $(tc_flower_addr $i) \
 82				action drop
 83		EOF
 84	done
 85
 86	tc -b $TC_FLOWER_BATCH_FILE
 87	check_err_fail $should_fail $? "Rule insertion"
 88}
 89
 90__tc_flower_test()
 91{
 92	local count=$1; shift
 93	local should_fail=$1; shift
 94	local last=$((count - 1))
 95
 96	tc_flower_rules_create $count $should_fail
 97
 98	offload_count=$(tc -j -s filter show dev $h2 ingress    |
 99			jq -r '[ .[] | select(.kind == "flower") |
100			.options | .in_hw ]' | jq .[] | wc -l)
101	[[ $((offload_count - 1)) -eq $count ]]
102	check_err_fail $should_fail $? "Attempt to offload $count rules (actual result $((offload_count - 1)))"
103}
104
105tc_flower_test()
106{
107	local count=$1; shift
108	local should_fail=$1; shift
109
110	# We use lower 16 bits of IPv6 address for match. Also there are only 16
111	# bits of rule priority space.
112	if ((count > 65536)); then
113		check_err 1 "Invalid count of $count. At most 65536 rules supported"
114		return
115	fi
116
117	if ! tc_offload_check $TC_FLOWER_NUM_NETIFS; then
118		check_err 1 "Could not test offloaded functionality"
119		return
120	fi
121
122	tcflags="skip_sw"
123	__tc_flower_test $count $should_fail
124}
125
126tc_flower_traffic_test()
127{
128	local count=$1; shift
129	local i;
130
131	for ((i = count - 1; i > 0; i /= 2)); do
132		$MZ -6 $h1 -c 1 -d 20msec -p 100 -a own -b $(mac_get $h2) \
133		    -A $(tc_flower_addr 0) -B $(tc_flower_addr $i) \
134		    -q -t udp sp=54321,dp=12345
135	done
136	for ((i = count - 1; i > 0; i /= 2)); do
137		tc_check_packets "dev $h2 ingress" 42$i 1
138		check_err $? "Traffic not seen at rule #$i"
139	done
140}