Resguardo inicial

This commit is contained in:
lastdragon
2026-09-06 12:53:21 -06:00
parent 662efe3c2a
commit ad2088d178
94853 changed files with 43200404 additions and 0 deletions
@@ -0,0 +1,253 @@
#!/bin/bash
# SPDX-License-Identifier: GPL-2.0
# Copyright 2022 NXP
# The script is mostly generic, with the exception of the
# ethtool per-TC counter names ("rx_green_prio_${tc}")
WAIT_TIME=1
NUM_NETIFS=4
STABLE_MAC_ADDRS=yes
NETIF_CREATE=no
lib_dir=$(dirname $0)/../../../net/forwarding
source $lib_dir/tc_common.sh
source $lib_dir/lib.sh
require_command dcb
h1=${NETIFS[p1]}
swp1=${NETIFS[p2]}
swp2=${NETIFS[p3]}
h2=${NETIFS[p4]}
H1_IPV4="192.0.2.1"
H2_IPV4="192.0.2.2"
H1_IPV6="2001:db8:1::1"
H2_IPV6="2001:db8:1::2"
h1_create()
{
simple_if_init $h1 $H1_IPV4/24 $H1_IPV6/64
}
h1_destroy()
{
simple_if_fini $h1 $H1_IPV4/24 $H1_IPV6/64
}
h2_create()
{
simple_if_init $h2 $H2_IPV4/24 $H2_IPV6/64
}
h2_destroy()
{
simple_if_fini $h2 $H2_IPV4/24 $H2_IPV6/64
}
h1_vlan_create()
{
local vid=$1
vlan_create $h1 $vid
simple_if_init $h1.$vid $H1_IPV4/24 $H1_IPV6/64
ip link set $h1.$vid type vlan \
egress-qos-map 0:0 1:1 2:2 3:3 4:4 5:5 6:6 7:7 \
ingress-qos-map 0:0 1:1 2:2 3:3 4:4 5:5 6:6 7:7
}
h1_vlan_destroy()
{
local vid=$1
simple_if_fini $h1.$vid $H1_IPV4/24 $H1_IPV6/64
vlan_destroy $h1 $vid
}
h2_vlan_create()
{
local vid=$1
vlan_create $h2 $vid
simple_if_init $h2.$vid $H2_IPV4/24 $H2_IPV6/64
ip link set $h2.$vid type vlan \
egress-qos-map 0:0 1:1 2:2 3:3 4:4 5:5 6:6 7:7 \
ingress-qos-map 0:0 1:1 2:2 3:3 4:4 5:5 6:6 7:7
}
h2_vlan_destroy()
{
local vid=$1
simple_if_fini $h2.$vid $H2_IPV4/24 $H2_IPV6/64
vlan_destroy $h2 $vid
}
vlans_prepare()
{
h1_vlan_create 100
h2_vlan_create 100
tc qdisc add dev ${h1}.100 clsact
tc filter add dev ${h1}.100 egress protocol ipv4 \
flower ip_proto icmp action skbedit priority 3
tc filter add dev ${h1}.100 egress protocol ipv6 \
flower ip_proto icmpv6 action skbedit priority 3
}
vlans_destroy()
{
tc qdisc del dev ${h1}.100 clsact
h1_vlan_destroy 100
h2_vlan_destroy 100
}
switch_create()
{
ip link set ${swp1} up
ip link set ${swp2} up
# Ports should trust VLAN PCP even with vlan_filtering=0
ip link add br0 type bridge
ip link set ${swp1} master br0
ip link set ${swp2} master br0
ip link set br0 up
}
switch_destroy()
{
ip link del br0
}
setup_prepare()
{
vrf_prepare
h1_create
h2_create
switch_create
}
cleanup()
{
pre_cleanup
h2_destroy
h1_destroy
switch_destroy
vrf_cleanup
}
dscp_cs_to_tos()
{
local dscp_cs=$1
# https://datatracker.ietf.org/doc/html/rfc2474
# 4.2.2.1 The Class Selector Codepoints
echo $((${dscp_cs} << 5))
}
run_test()
{
local test_name=$1; shift
local if_name=$1; shift
local tc=$1; shift
local tos=$1; shift
local counter_name="rx_green_prio_${tc}"
local ipv4_before
local ipv4_after
local ipv6_before
local ipv6_after
ipv4_before=$(ethtool_stats_get ${swp1} "${counter_name}")
ping_do ${if_name} $H2_IPV4 "-Q ${tos}"
ipv4_after=$(ethtool_stats_get ${swp1} "${counter_name}")
if [ $((${ipv4_after} - ${ipv4_before})) -lt ${PING_COUNT} ]; then
RET=1
else
RET=0
fi
log_test "IPv4 ${test_name}"
ipv6_before=$(ethtool_stats_get ${swp1} "${counter_name}")
ping_do ${if_name} $H2_IPV6 "-Q ${tos}"
ipv6_after=$(ethtool_stats_get ${swp1} "${counter_name}")
if [ $((${ipv6_after} - ${ipv6_before})) -lt ${PING_COUNT} ]; then
RET=1
else
RET=0
fi
log_test "IPv6 ${test_name}"
}
port_default_prio_get()
{
local if_name=$1
local prio
prio="$(dcb -j app show dev ${if_name} default-prio | \
jq '.default_prio[]')"
if [ -z "${prio}" ]; then
prio=0
fi
echo ${prio}
}
test_port_default()
{
local orig=$(port_default_prio_get ${swp1})
local dmac=$(mac_get ${h2})
dcb app replace dev ${swp1} default-prio 5
run_test "Port-default QoS classification" ${h1} 5 0
dcb app replace dev ${swp1} default-prio ${orig}
}
test_vlan_pcp()
{
vlans_prepare
run_test "Trusted VLAN PCP QoS classification" ${h1}.100 3 0
vlans_destroy
}
test_ip_dscp()
{
local port_default=$(port_default_prio_get ${swp1})
local tos=$(dscp_cs_to_tos 4)
dcb app add dev ${swp1} dscp-prio CS4:4
run_test "Trusted DSCP QoS classification" ${h1} 4 ${tos}
dcb app del dev ${swp1} dscp-prio CS4:4
vlans_prepare
run_test "Untrusted DSCP QoS classification follows VLAN PCP" \
${h1}.100 3 ${tos}
vlans_destroy
run_test "Untrusted DSCP QoS classification follows port default" \
${h1} ${port_default} ${tos}
}
trap cleanup EXIT
ALL_TESTS="
test_port_default
test_vlan_pcp
test_ip_dscp
"
setup_prepare
setup_wait
tests_run
exit $EXIT_STATUS
@@ -0,0 +1,323 @@
#!/bin/bash
# SPDX-License-Identifier: GPL-2.0
# Copyright 2021-2022 NXP
# Note: On LS1028A, in lack of enough user ports, this setup requires patching
# the device tree to use the second CPU port as a user port
WAIT_TIME=1
NUM_NETIFS=4
STABLE_MAC_ADDRS=yes
NETIF_CREATE=no
lib_dir=$(dirname $0)/../../../net/forwarding
source $lib_dir/tc_common.sh
source $lib_dir/lib.sh
source $lib_dir/tsn_lib.sh
UDS_ADDRESS_H1="/var/run/ptp4l_h1"
UDS_ADDRESS_SWP1="/var/run/ptp4l_swp1"
# Tunables
NUM_PKTS=1000
STREAM_VID=100
STREAM_PRIO=6
# Use a conservative cycle of 10 ms to allow the test to still pass when the
# kernel has some extra overhead like lockdep etc
CYCLE_TIME_NS=10000000
# Create two Gate Control List entries, one OPEN and one CLOSE, of equal
# durations
GATE_DURATION_NS=$((${CYCLE_TIME_NS} / 2))
# Give 2/3 of the cycle time to user space and 1/3 to the kernel
FUDGE_FACTOR=$((${CYCLE_TIME_NS} / 3))
# Shift the isochron base time by half the gate time, so that packets are
# always received by swp1 close to the middle of the time slot, to minimize
# inaccuracies due to network sync
SHIFT_TIME_NS=$((${GATE_DURATION_NS} / 2))
h1=${NETIFS[p1]}
swp1=${NETIFS[p2]}
swp2=${NETIFS[p3]}
h2=${NETIFS[p4]}
H1_IPV4="192.0.2.1"
H2_IPV4="192.0.2.2"
H1_IPV6="2001:db8:1::1"
H2_IPV6="2001:db8:1::2"
# Chain number exported by the ocelot driver for
# Per-Stream Filtering and Policing filters
PSFP()
{
echo 30000
}
psfp_chain_create()
{
local if_name=$1
tc qdisc add dev $if_name clsact
tc filter add dev $if_name ingress chain 0 pref 49152 flower \
skip_sw action goto chain $(PSFP)
}
psfp_chain_destroy()
{
local if_name=$1
tc qdisc del dev $if_name clsact
}
psfp_filter_check()
{
local expected=$1
local packets=""
local drops=""
local stats=""
stats=$(tc -j -s filter show dev ${swp1} ingress chain $(PSFP) pref 1)
packets=$(echo ${stats} | jq ".[1].options.actions[].stats.packets")
drops=$(echo ${stats} | jq ".[1].options.actions[].stats.drops")
if ! [ "${packets}" = "${expected}" ]; then
printf "Expected filter to match on %d packets but matched on %d instead\n" \
"${expected}" "${packets}"
fi
echo "Hardware filter reports ${drops} drops"
}
h1_create()
{
simple_if_init $h1 $H1_IPV4/24 $H1_IPV6/64
}
h1_destroy()
{
simple_if_fini $h1 $H1_IPV4/24 $H1_IPV6/64
}
h2_create()
{
simple_if_init $h2 $H2_IPV4/24 $H2_IPV6/64
}
h2_destroy()
{
simple_if_fini $h2 $H2_IPV4/24 $H2_IPV6/64
}
switch_create()
{
local h2_mac_addr=$(mac_get $h2)
ip link set ${swp1} up
ip link set ${swp2} up
ip link add br0 type bridge vlan_filtering 1
ip link set ${swp1} master br0
ip link set ${swp2} master br0
ip link set br0 up
bridge vlan add dev ${swp2} vid ${STREAM_VID}
bridge vlan add dev ${swp1} vid ${STREAM_VID}
# PSFP on Ocelot requires the filter to also be added to the bridge
# FDB, and not be removed
bridge fdb add dev ${swp2} \
${h2_mac_addr} vlan ${STREAM_VID} static master
psfp_chain_create ${swp1}
tc filter add dev ${swp1} ingress chain $(PSFP) pref 1 \
protocol 802.1Q flower skip_sw \
dst_mac ${h2_mac_addr} vlan_id ${STREAM_VID} \
action gate base-time 0.000000000 \
sched-entry OPEN ${GATE_DURATION_NS} -1 -1 \
sched-entry CLOSE ${GATE_DURATION_NS} -1 -1
}
switch_destroy()
{
psfp_chain_destroy ${swp1}
ip link del br0
}
txtime_setup()
{
local if_name=$1
tc qdisc add dev ${if_name} clsact
# Classify PTP on TC 7 and isochron on TC 6
tc filter add dev ${if_name} egress protocol 0x88f7 \
flower action skbedit priority 7
tc filter add dev ${if_name} egress protocol 802.1Q \
flower vlan_ethtype 0xdead action skbedit priority 6
tc qdisc add dev ${if_name} handle 100: parent root mqprio num_tc 8 \
queues 1@0 1@1 1@2 1@3 1@4 1@5 1@6 1@7 \
map 0 1 2 3 4 5 6 7 \
hw 1
# Set up TC 6 for SO_TXTIME. tc-mqprio queues count from 1.
tc qdisc replace dev ${if_name} parent 100:$((${STREAM_PRIO} + 1)) etf \
clockid CLOCK_TAI offload delta ${FUDGE_FACTOR}
}
txtime_cleanup()
{
local if_name=$1
tc qdisc del dev ${if_name} root
tc qdisc del dev ${if_name} clsact
}
setup_prepare()
{
vrf_prepare
h1_create
h2_create
switch_create
txtime_setup ${h1}
# Set up swp1 as a master PHC for h1, synchronized to the local
# CLOCK_REALTIME.
phc2sys_start ${UDS_ADDRESS_SWP1}
# Assumption true for LS1028A: h1 and h2 use the same PHC. So by
# synchronizing h1 to swp1 via PTP, h2 is also implicitly synchronized
# to swp1 (and both to CLOCK_REALTIME).
ptp4l_start ${h1} true ${UDS_ADDRESS_H1}
ptp4l_start ${swp1} false ${UDS_ADDRESS_SWP1}
# Make sure there are no filter matches at the beginning of the test
psfp_filter_check 0
}
cleanup()
{
pre_cleanup
ptp4l_stop ${swp1}
ptp4l_stop ${h1}
phc2sys_stop
isochron_recv_stop
txtime_cleanup ${h1}
h2_destroy
h1_destroy
switch_destroy
vrf_cleanup
}
debug_incorrectly_dropped_packets()
{
local isochron_dat=$1
local dropped_seqids
local seqid
echo "Packets incorrectly dropped:"
dropped_seqids=$(isochron report \
--input-file "${isochron_dat}" \
--printf-format "%u RX hw %T\n" \
--printf-args "qR" | \
grep 'RX hw 0.000000000' | \
awk '{print $1}')
for seqid in ${dropped_seqids}; do
isochron report \
--input-file "${isochron_dat}" \
--start ${seqid} --stop ${seqid} \
--printf-format "seqid %u scheduled for %T, HW TX timestamp %T\n" \
--printf-args "qST"
done
}
debug_incorrectly_received_packets()
{
local isochron_dat=$1
echo "Packets incorrectly received:"
isochron report \
--input-file "${isochron_dat}" \
--printf-format "seqid %u scheduled for %T, HW TX timestamp %T, HW RX timestamp %T\n" \
--printf-args "qSTR" |
grep -v 'HW RX timestamp 0.000000000'
}
run_test()
{
local base_time=$1
local expected=$2
local test_name=$3
local debug=$4
local isochron_dat="$(mktemp)"
local extra_args=""
local received
isochron_do \
"${h1}" \
"${h2}" \
"${UDS_ADDRESS_H1}" \
"" \
"${base_time}" \
"${CYCLE_TIME_NS}" \
"${SHIFT_TIME_NS}" \
"${GATE_DURATION_NS}" \
"${NUM_PKTS}" \
"${STREAM_VID}" \
"${STREAM_PRIO}" \
"" \
"${isochron_dat}"
received=$(isochron_report_num_received "${isochron_dat}")
if [ "${received}" = "${expected}" ]; then
RET=0
else
RET=1
echo "Expected isochron to receive ${expected} packets but received ${received}"
fi
log_test "${test_name}"
if [ "$RET" = "1" ]; then
${debug} "${isochron_dat}"
fi
rm ${isochron_dat} 2> /dev/null
}
test_gate_in_band()
{
# Send packets in-band with the OPEN gate entry
run_test 0.000000000 ${NUM_PKTS} "In band" \
debug_incorrectly_dropped_packets
psfp_filter_check ${NUM_PKTS}
}
test_gate_out_of_band()
{
# Send packets in-band with the CLOSE gate entry
run_test 0.005000000 0 "Out of band" \
debug_incorrectly_received_packets
psfp_filter_check $((2 * ${NUM_PKTS}))
}
trap cleanup EXIT
ALL_TESTS="
test_gate_in_band
test_gate_out_of_band
"
setup_prepare
setup_wait
tests_run
exit $EXIT_STATUS
@@ -0,0 +1,352 @@
#!/bin/bash
# SPDX-License-Identifier: GPL-2.0
# Copyright 2020 NXP
WAIT_TIME=1
NUM_NETIFS=4
STABLE_MAC_ADDRS=yes
lib_dir=$(dirname $0)/../../../net/forwarding
source $lib_dir/tc_common.sh
source $lib_dir/lib.sh
require_command tcpdump
h1=${NETIFS[p1]}
swp1=${NETIFS[p2]}
swp2=${NETIFS[p3]}
h2=${NETIFS[p4]}
# Helpers to map a VCAP IS1 and VCAP IS2 lookup and policy to a chain number
# used by the kernel driver. The numbers are:
# VCAP IS1 lookup 0: 10000
# VCAP IS1 lookup 1: 11000
# VCAP IS1 lookup 2: 12000
# VCAP IS2 lookup 0 policy 0: 20000
# VCAP IS2 lookup 0 policy 1: 20001
# VCAP IS2 lookup 0 policy 255: 20255
# VCAP IS2 lookup 1 policy 0: 21000
# VCAP IS2 lookup 1 policy 1: 21001
# VCAP IS2 lookup 1 policy 255: 21255
IS1()
{
local lookup=$1
echo $((10000 + 1000 * lookup))
}
IS2()
{
local lookup=$1
local pag=$2
echo $((20000 + 1000 * lookup + pag))
}
ES0()
{
echo 0
}
# The Ocelot switches have a fixed ingress pipeline composed of:
#
# +----------------------------------------------+ +-----------------------------------------+
# | VCAP IS1 | | VCAP IS2 |
# | | | |
# | +----------+ +----------+ +----------+ | | +----------+ +----------+ |
# | | Lookup 0 | | Lookup 1 | | Lookup 2 | | --+------> PAG 0: | Lookup 0 | -> | Lookup 1 | |
# | +----------+ -> +----------+ -> +----------+ | | | +----------+ +----------+ |
# | |key&action| |key&action| |key&action| | | | |key&action| |key&action| |
# | |key&action| |key&action| |key&action| | | | | .. | | .. | |
# | | .. | | .. | | .. | | | | +----------+ +----------+ |
# | +----------+ +----------+ +----------+ | | | |
# | selects PAG | | | +----------+ +----------+ |
# +----------------------------------------------+ +------> PAG 1: | Lookup 0 | -> | Lookup 1 | |
# | | +----------+ +----------+ |
# | | |key&action| |key&action| |
# | | | .. | | .. | |
# | | +----------+ +----------+ |
# | | ... |
# | | |
# | | +----------+ +----------+ |
# +----> PAG 254: | Lookup 0 | -> | Lookup 1 | |
# | | +----------+ +----------+ |
# | | |key&action| |key&action| |
# | | | .. | | .. | |
# | | +----------+ +----------+ |
# | | |
# | | +----------+ +----------+ |
# +----> PAG 255: | Lookup 0 | -> | Lookup 1 | |
# | +----------+ +----------+ |
# | |key&action| |key&action| |
# | | .. | | .. | |
# | +----------+ +----------+ |
# +-----------------------------------------+
#
# Both the VCAP IS1 (Ingress Stage 1) and IS2 (Ingress Stage 2) are indexed
# (looked up) multiple times: IS1 3 times, and IS2 2 times. Each filter
# (key and action pair) can be configured to only match during the first, or
# second, etc, lookup.
#
# During one TCAM lookup, the filter processing stops at the first entry that
# matches, then the pipeline jumps to the next lookup.
# The driver maps each individual lookup of each individual ingress TCAM to a
# separate chain number. For correct rule offloading, it is mandatory that each
# filter installed in one TCAM is terminated by a non-optional GOTO action to
# the next lookup from the fixed pipeline.
#
# A chain can only be used if there is a GOTO action correctly set up from the
# prior lookup in the processing pipeline. Setting up all chains is not
# mandatory.
# NOTE: VCAP IS1 currently uses only S1_NORMAL half keys and VCAP IS2
# dynamically chooses between MAC_ETYPE, ARP, IP4_TCP_UDP, IP4_OTHER, which are
# all half keys as well.
create_tcam_skeleton()
{
local eth=$1
tc qdisc add dev $eth clsact
# VCAP IS1 is the Ingress Classification TCAM and can offload the
# following actions:
# - skbedit priority
# - vlan pop
# - vlan modify
# - goto (only in lookup 2, the last IS1 lookup)
tc filter add dev $eth ingress chain 0 pref 49152 flower \
skip_sw action goto chain $(IS1 0)
tc filter add dev $eth ingress chain $(IS1 0) pref 49152 \
flower skip_sw action goto chain $(IS1 1)
tc filter add dev $eth ingress chain $(IS1 1) pref 49152 \
flower skip_sw action goto chain $(IS1 2)
tc filter add dev $eth ingress chain $(IS1 2) pref 49152 \
flower skip_sw action goto chain $(IS2 0 0)
# VCAP IS2 is the Security Enforcement ingress TCAM and can offload the
# following actions:
# - trap
# - drop
# - police
# The two VCAP IS2 lookups can be segmented into up to 256 groups of
# rules, called Policies. A Policy is selected through the Policy
# Association Group (PAG) action of VCAP IS1 (which is the
# GOTO offload).
tc filter add dev $eth ingress chain $(IS2 0 0) pref 49152 \
flower skip_sw action goto chain $(IS2 1 0)
}
setup_prepare()
{
ip link set $swp1 up
ip link set $swp2 up
ip link set $h2 up
ip link set $h1 up
create_tcam_skeleton $swp1
ip link add br0 type bridge
ip link set $swp1 master br0
ip link set $swp2 master br0
ip link set br0 up
ip link add link $h1 name $h1.100 type vlan id 100
ip link set $h1.100 up
ip link add link $h1 name $h1.200 type vlan id 200
ip link set $h1.200 up
tc filter add dev $swp1 ingress chain $(IS1 1) pref 1 \
protocol 802.1Q flower skip_sw vlan_id 100 \
action vlan pop \
action goto chain $(IS1 2)
tc filter add dev $swp1 egress chain $(ES0) pref 1 \
flower skip_sw indev $swp2 \
action vlan push protocol 802.1Q id 100
tc filter add dev $swp1 ingress chain $(IS1 0) pref 2 \
protocol ipv4 flower skip_sw src_ip 10.1.1.2 \
action skbedit priority 7 \
action goto chain $(IS1 1)
tc filter add dev $swp1 ingress chain $(IS2 0 0) pref 1 \
protocol ipv4 flower skip_sw ip_proto udp dst_port 5201 \
action police rate 50mbit burst 64k conform-exceed drop/pipe \
action goto chain $(IS2 1 0)
}
cleanup()
{
ip link del $h1.200
ip link del $h1.100
tc qdisc del dev $swp1 clsact
ip link del br0
}
test_vlan_pop()
{
local h1_mac=$(mac_get $h1)
local h2_mac=$(mac_get $h2)
RET=0
tcpdump_start $h2
# Work around Mausezahn VLAN builder bug
# (https://github.com/netsniff-ng/netsniff-ng/issues/225) by using
# an 8021q upper
$MZ $h1.100 -q -c 1 -p 64 -a $h1_mac -b $h2_mac -t ip
sleep 1
tcpdump_stop $h2
tcpdump_show $h2 | grep -q "$h1_mac > $h2_mac, ethertype IPv4"
check_err "$?" "untagged reception"
tcpdump_cleanup $h2
log_test "VLAN pop"
}
test_vlan_push()
{
local h1_mac=$(mac_get $h1)
local h2_mac=$(mac_get $h2)
RET=0
tcpdump_start $h1.100
$MZ $h2 -q -c 1 -p 64 -a $h2_mac -b $h1_mac -t ip
sleep 1
tcpdump_stop $h1.100
tcpdump_show $h1.100 | grep -q "$h2_mac > $h1_mac"
check_err "$?" "tagged reception"
tcpdump_cleanup $h1.100
log_test "VLAN push"
}
test_vlan_ingress_modify()
{
local h1_mac=$(mac_get $h1)
local h2_mac=$(mac_get $h2)
RET=0
ip link set br0 type bridge vlan_filtering 1
bridge vlan add dev $swp1 vid 200
bridge vlan add dev $swp1 vid 300
bridge vlan add dev $swp2 vid 300
tc filter add dev $swp1 ingress chain $(IS1 2) pref 3 \
protocol 802.1Q flower skip_sw vlan_id 200 src_mac $h1_mac \
action vlan modify id 300 \
action goto chain $(IS2 0 0)
tcpdump_start $h2
$MZ $h1.200 -q -c 1 -p 64 -a $h1_mac -b $h2_mac -t ip
sleep 1
tcpdump_stop $h2
tcpdump_show $h2 | grep -q "$h1_mac > $h2_mac, .* vlan 300"
check_err "$?" "tagged reception"
tcpdump_cleanup $h2
tc filter del dev $swp1 ingress chain $(IS1 2) pref 3
bridge vlan del dev $swp1 vid 200
bridge vlan del dev $swp1 vid 300
bridge vlan del dev $swp2 vid 300
ip link set br0 type bridge vlan_filtering 0
log_test "Ingress VLAN modification"
}
test_vlan_egress_modify()
{
local h1_mac=$(mac_get $h1)
local h2_mac=$(mac_get $h2)
RET=0
tc qdisc add dev $swp2 clsact
ip link set br0 type bridge vlan_filtering 1
bridge vlan add dev $swp1 vid 200
bridge vlan add dev $swp2 vid 200
tc filter add dev $swp2 egress chain $(ES0) pref 3 \
protocol 802.1Q flower skip_sw vlan_id 200 vlan_prio 0 \
action vlan modify id 300 priority 7
tcpdump_start $h2
$MZ $h1.200 -q -c 1 -p 64 -a $h1_mac -b $h2_mac -t ip
sleep 1
tcpdump_stop $h2
tcpdump_show $h2 | grep -q "$h1_mac > $h2_mac, .* vlan 300"
check_err "$?" "tagged reception"
tcpdump_cleanup $h2
tc filter del dev $swp2 egress chain $(ES0) pref 3
tc qdisc del dev $swp2 clsact
bridge vlan del dev $swp1 vid 200
bridge vlan del dev $swp2 vid 200
ip link set br0 type bridge vlan_filtering 0
log_test "Egress VLAN modification"
}
test_skbedit_priority()
{
local h1_mac=$(mac_get $h1)
local h2_mac=$(mac_get $h2)
local num_pkts=100
before=$(ethtool_stats_get $swp1 'rx_green_prio_7')
$MZ $h1 -q -c $num_pkts -p 64 -a $h1_mac -b $h2_mac -t ip -A 10.1.1.2
after=$(ethtool_stats_get $swp1 'rx_green_prio_7')
if [ $((after - before)) = $num_pkts ]; then
RET=0
else
RET=1
fi
log_test "Frame prioritization"
}
trap cleanup EXIT
ALL_TESTS="
test_vlan_pop
test_vlan_push
test_vlan_ingress_modify
test_vlan_egress_modify
test_skbedit_priority
"
setup_prepare
setup_wait
tests_run
exit $EXIT_STATUS