From a8260c056a69aaca33d6604079ebac3d07d2551c Mon Sep 17 00:00:00 2001 From: Florian Westphal Date: Wed, 2 Aug 2023 15:54:28 +0200 Subject: tests: add dynmap datapath add/delete test case Signed-off-by: Florian Westphal --- tests/shell/testcases/maps/typeof_maps_add_delete | 35 +++++++++++++++++++++++ 1 file changed, 35 insertions(+) create mode 100755 tests/shell/testcases/maps/typeof_maps_add_delete (limited to 'tests/shell/testcases/maps/typeof_maps_add_delete') diff --git a/tests/shell/testcases/maps/typeof_maps_add_delete b/tests/shell/testcases/maps/typeof_maps_add_delete new file mode 100755 index 00000000..341de538 --- /dev/null +++ b/tests/shell/testcases/maps/typeof_maps_add_delete @@ -0,0 +1,35 @@ +#!/bin/bash + +EXPECTED='table ip dynset { + map dynmark { + typeof ip daddr : meta mark + counter + size 64 + timeout 5m + } + + chain test_ping { + ip saddr @dynmark counter comment "should not increment" + ip saddr != @dynmark add @dynmark { ip saddr : 0x1 } counter + ip saddr @dynmark counter comment "should increment" + ip saddr @dynmark delete @dynmark { ip saddr : 0x1 } + ip saddr @dynmark counter comment "delete should be instant but might fail under memory pressure" + } + + chain input { + type filter hook input priority 0; policy accept; + + add @dynmark { 10.2.3.4 timeout 1s : 0x2 } comment "also check timeout-gc" + meta l4proto icmp ip daddr 127.0.0.42 jump test_ping + } +}' + +set -e +$NFT -f - <<< $EXPECTED +$NFT list ruleset + +ip link set lo up +ping -c 1 127.0.0.42 + +# wait so that 10.2.3.4 times out. +sleep 2 -- cgit v1.2.3