diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2025-05-20 01:17:39 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2025-05-20 13:42:23 +0200 |
| commit | bce58907df15a51322a78b6cd154255f6edf9a3c (patch) | |
| tree | b7b4671b07cdccd14b129b46ed13ce65093fce10 | |
| parent | 690f19eadde5cb607ec3d8d471c86d558c7229bd (diff) | |
tests: shell: skip egress in netdev chain release path test
Update test to skip egress coverage if kernel does not support it.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
| -rwxr-xr-x | tests/shell/testcases/chains/netdev_chain_dev_addremove | 18 |
1 files changed, 11 insertions, 7 deletions
diff --git a/tests/shell/testcases/chains/netdev_chain_dev_addremove b/tests/shell/testcases/chains/netdev_chain_dev_addremove index 6103e82b..43bf2275 100755 --- a/tests/shell/testcases/chains/netdev_chain_dev_addremove +++ b/tests/shell/testcases/chains/netdev_chain_dev_addremove @@ -17,18 +17,22 @@ trap 'iface_cleanup' EXIT load_rules() { -$NFT -f - <<EOF -add table netdev nm-mlag-dummy0 + if [ "$NFT_TEST_HAVE_netdev_egress" != n ]; then + EGRESS="add chain netdev nm-mlag-dummy0 tx-snoop-source-mac { type filter hook egress devices = { dummy0 } priority filter; policy accept; } +add rule netdev nm-mlag-dummy0 tx-snoop-source-mac update @macset-tagged { ether saddr . vlan id timeout 5s } return +add rule netdev nm-mlag-dummy0 tx-snoop-source-mac update @macset-untagged { ether saddr timeout 5s }" + fi + +RULESET="add table netdev nm-mlag-dummy0 add set netdev nm-mlag-dummy0 macset-tagged { typeof ether saddr . vlan id; size 65535; flags dynamic,timeout; } add set netdev nm-mlag-dummy0 macset-untagged { typeof ether saddr; size 65535; flags dynamic,timeout; } -add chain netdev nm-mlag-dummy0 tx-snoop-source-mac { type filter hook egress devices = { dummy0 } priority filter; policy accept; } -add rule netdev nm-mlag-dummy0 tx-snoop-source-mac update @macset-tagged { ether saddr . vlan id timeout 5s } return -add rule netdev nm-mlag-dummy0 tx-snoop-source-mac update @macset-untagged { ether saddr timeout 5s } +$EGRESS add chain netdev nm-mlag-dummy0 rx-drop-looped-packets { type filter hook ingress devices = { dummy0 } priority filter; policy accept; } add rule netdev nm-mlag-dummy0 rx-drop-looped-packets ether saddr . vlan id @macset-tagged drop add rule netdev nm-mlag-dummy0 rx-drop-looped-packets ether type 8021q return -add rule netdev nm-mlag-dummy0 rx-drop-looped-packets ether saddr @macset-untagged drop -EOF +add rule netdev nm-mlag-dummy0 rx-drop-looped-packets ether saddr @macset-untagged drop" + + $NFT -f - <<< $RULESET } for i in $(seq 1 500);do |