blob: 09db315a885524e596be51d799bc53d819937133 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
|
#!/bin/bash
# NFT_TEST_SKIP(NFT_TEST_SKIP_slow)
set -e
RULESET="table ip t {
map sourcemap {
type ipv4_addr : verdict
timeout 3s
elements = { 100.123.10.2 : jump c }
}
chain c {
}
}"
$NFT -f - <<< "$RULESET"
# again, since it is addition, not creation, it is successful
$NFT -f - <<< "$RULESET"
# wait for elements to expire
sleep 5
# flush it to check for refcount leak
$NFT flush ruleset
#
# again with stateful objects
#
RULESET="table ip t {
counter c {}
map sourcemap {
type ipv4_addr : counter
timeout 3s
elements = { 100.123.10.2 : \"c\" }
}
}"
$NFT -f - <<< "$RULESET"
# again, since it is addition, not creation, it is successful
$NFT -f - <<< "$RULESET"
# flush it to check for refcount leak
# wait for elements to expire
sleep 5
$NFT flush ruleset
|
