net/forwarding/tc_actions.sh

2 # SPDX-License-Identifier: GPL-2.0
60 	local protocol=$2
66 	tc filter add dev $h2 ingress protocol ip pref 1 handle 101 flower \
69 	$MZ $h1 -c 1 -p 64 -a $h1mac -b $h2mac -A 192.0.2.1 -B 192.0.2.2 \
70 		-t ip -q
75 	tc filter add dev $swp1 ingress protocol $protocol pref 1 handle 101 \
79 	$MZ $h1 -c 1 -p 64 -a $h1mac -b $h2mac -A 192.0.2.1 -B 192.0.2.2 \
80 		-t ip -q
85 	tc filter del dev $swp1 ingress protocol $protocol pref 1 handle 101 \
87 	tc filter del dev $h2 ingress protocol ip pref 1 handle 101 flower
96 	tc filter add dev $swp1 ingress protocol ip pref 2 handle 102 flower \
99 	$MZ $h1 -c 1 -p 64 -a $h1mac -b $h2mac -A 192.0.2.1 -B 192.0.2.2 \
100 		-t ip -q
105 	tc filter add dev $swp1 ingress protocol ip pref 1 handle 101 flower \
108 	$MZ $h1 -c 1 -p 64 -a $h1mac -b $h2mac -A 192.0.2.1 -B 192.0.2.2 \
109 		-t ip -q
117 	tc filter del dev $swp1 ingress protocol ip pref 2 handle 102 flower
118 	tc filter del dev $swp1 ingress protocol ip pref 1 handle 101 flower
131 	tc filter add dev $swp1 ingress protocol ip pref 1 handle 101 flower \
133 	tc filter add dev $swp1 ingress protocol ip pref 3 handle 103 flower \
137 	$MZ $h1 -c 1 -p 64 -a $h1mac -b $h2mac -A 192.0.2.1 -B 192.0.2.2 \
138 		-t ip -q
143 	tc filter add dev $swp1 ingress protocol ip pref 2 handle 102 flower \
146 	$MZ $h1 -c 1 -p 64 -a $h1mac -b $h2mac -A 192.0.2.1 -B 192.0.2.2 \
147 		-t ip -q
155 	tc filter del dev $swp1 ingress protocol ip pref 3 handle 103 flower
156 	tc filter del dev $swp1 ingress protocol ip pref 2 handle 102 flower
157 	tc filter del dev $swp1 ingress protocol ip pref 1 handle 101 flower
166 	tc filter add dev $h1 protocol ip pref 100 handle 100 egress flower \
173 	tc filter add dev $swp1 protocol ip pref 11 handle 111 ingress flower \
175 	tc filter add dev $swp1 protocol ip pref 12 handle 112 ingress flower \
178 	$MZ $h1 -c 1 -p 64 -a $h1mac -b $h2mac -A 192.0.2.1 -B 192.0.2.2 \
179 		-t icmp "ping,id=42,seq=10" -q
189 	ping 192.0.2.2 -I$h1 -c1 -w1 -q 1>/dev/null 2>&1
198 	tc filter del dev $h1 egress protocol ip pref 100 handle 100 flower
199 	tc filter del dev $swp1 ingress protocol ip pref 11 handle 111 flower
200 	tc filter del dev $swp1 ingress protocol ip pref 12 handle 112 flower
211 	tc filter add dev $h1 protocol ip pref 100 handle 100 egress flower \
219 	tc filter add dev $h1 protocol ip pref 101 handle 101 egress flower \
222 	tc filter add dev $h1 protocol ip pref 102 handle 102 ingress flower \
226 	ip vrf exec v$h1 ncat --recv-only -w10 -l -p 12345 -o $mirred_e2i_tf2 &
228 	ip vrf exec v$h1 ncat -w1 --send-only 192.0.2.2 12345 <$mirred_e2i_tf1
229 	wait -n $rpid
230 	cmp -s $mirred_e2i_tf1 $mirred_e2i_tf2
233 	$MZ $h1 -c 10 -p 64 -a $h1mac -b $h1mac -A 192.0.2.1 -B 192.0.2.1 \
234 		-t icmp "ping,id=42,seq=5" -q
240 	tc filter del dev $h1 egress protocol ip pref 100 handle 100 flower
241 	tc filter del dev $h1 egress protocol ip pref 101 handle 101 flower
242 	tc filter del dev $h1 ingress protocol ip pref 102 handle 102 flower
244 	rm -f $mirred_e2i_tf1 $mirred_e2i_tf2
252 		action vlan push id 100 protocol 0x8100 action goto chain 5
257 	$MZ $h1 -c 1 -p 64 -a $h1mac -b $h2mac -A 192.0.2.1 -B 192.0.2.2 \
258 		-t ip -Q 10 -q
261 	check_err $? "No double-vlan packets received"
273 		action vlan push id 10 protocol 0x8100 \
274 		pipe action vlan push id 100 protocol 0x8100 action goto chain 5
279 	$MZ $h1 -c 1 -p 64 -a $h1mac -b $h2mac -A 192.0.2.1 -B 192.0.2.2 \
280 		-t ip -q
283 	check_err $? "No double-vlan packets received"
329 	for tf in $mirred_e2i_tf1 $mirred_e2i_tf2; do rm -f $tf; done
355 if [[ $? -ne 0 ]]; then