summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPablo Neira Ayuso <pablo@netfilter.org>2025-07-28 22:15:16 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2025-07-29 03:53:17 +0200
commit0795c1bed1ea41993442c54390dfff73cbe0562a (patch)
treecf3018bd75c68ea77495b8e894eb23c0d1d1d4b8
parentcc32d8f4fb8227f71886686d0db29b04e9b883ed (diff)
Revert "evaluate: translate meter into dynamic set"
This reverts commit b8f8ddfff7335d3a8bebf5d85085974ae36f4099. Only tests/shell, since translation of meter to dynamic set is not available in 1.0.6.y
-rwxr-xr-xtests/shell/testcases/sets/0022type_selective_flush_02
-rwxr-xr-xtests/shell/testcases/sets/0038meter_list_07
-rw-r--r--tests/shell/testcases/sets/dumps/0022type_selective_flush_0.json-nft35
-rw-r--r--tests/shell/testcases/sets/dumps/0022type_selective_flush_0.nft8
-rw-r--r--tests/shell/testcases/sets/dumps/0038meter_list_0.json-nft35
-rw-r--r--tests/shell/testcases/sets/dumps/0038meter_list_0.nft8
6 files changed, 24 insertions, 71 deletions
diff --git a/tests/shell/testcases/sets/0022type_selective_flush_0 b/tests/shell/testcases/sets/0022type_selective_flush_0
index 48f6875b..6062913b 100755
--- a/tests/shell/testcases/sets/0022type_selective_flush_0
+++ b/tests/shell/testcases/sets/0022type_selective_flush_0
@@ -16,7 +16,7 @@ $NFT -f - <<< "$RULESET"
# Commands that should be invalid
declare -a cmds=(
- "flush set t m"
+ "flush set t m" "flush set t f"
"flush map t s" "flush map t f"
"flush meter t s" "flush meter t m"
)
diff --git a/tests/shell/testcases/sets/0038meter_list_0 b/tests/shell/testcases/sets/0038meter_list_0
index 7c37c1d8..e9e0f6fb 100755
--- a/tests/shell/testcases/sets/0038meter_list_0
+++ b/tests/shell/testcases/sets/0038meter_list_0
@@ -14,12 +14,7 @@ RULESET="
"
expected_output="table ip t {
- set s {
- type ipv4_addr
- size 256
- flags dynamic,timeout
- }
- set m {
+ meter m {
type ipv4_addr
size 128
flags dynamic
diff --git a/tests/shell/testcases/sets/dumps/0022type_selective_flush_0.json-nft b/tests/shell/testcases/sets/dumps/0022type_selective_flush_0.json-nft
index c6171392..ce391a6c 100644
--- a/tests/shell/testcases/sets/dumps/0022type_selective_flush_0.json-nft
+++ b/tests/shell/testcases/sets/dumps/0022type_selective_flush_0.json-nft
@@ -42,19 +42,6 @@
}
},
{
- "set": {
- "family": "ip",
- "name": "f",
- "table": "t",
- "type": "ipv4_addr",
- "handle": 0,
- "size": 1024,
- "flags": [
- "dynamic"
- ]
- }
- },
- {
"rule": {
"family": "ip",
"table": "t",
@@ -74,24 +61,22 @@
}
},
{
- "set": {
- "op": "add",
- "elem": {
+ "meter": {
+ "key": {
"payload": {
"protocol": "ip",
"field": "saddr"
}
},
- "set": "@f",
- "stmt": [
- {
- "limit": {
- "rate": 10,
- "burst": 5,
- "per": "second"
- }
+ "stmt": {
+ "limit": {
+ "rate": 10,
+ "burst": 5,
+ "per": "second"
}
- ]
+ },
+ "size": 1024,
+ "name": "f"
}
}
]
diff --git a/tests/shell/testcases/sets/dumps/0022type_selective_flush_0.nft b/tests/shell/testcases/sets/dumps/0022type_selective_flush_0.nft
index 38987ded..0a4cb0a5 100644
--- a/tests/shell/testcases/sets/dumps/0022type_selective_flush_0.nft
+++ b/tests/shell/testcases/sets/dumps/0022type_selective_flush_0.nft
@@ -7,13 +7,7 @@ table ip t {
type ipv4_addr : inet_service
}
- set f {
- type ipv4_addr
- size 1024
- flags dynamic
- }
-
chain c {
- tcp dport 80 add @f { ip saddr limit rate 10/second burst 5 packets }
+ tcp dport 80 meter f size 1024 { ip saddr limit rate 10/second burst 5 packets }
}
}
diff --git a/tests/shell/testcases/sets/dumps/0038meter_list_0.json-nft b/tests/shell/testcases/sets/dumps/0038meter_list_0.json-nft
index 5b13f59a..40b86f82 100644
--- a/tests/shell/testcases/sets/dumps/0038meter_list_0.json-nft
+++ b/tests/shell/testcases/sets/dumps/0038meter_list_0.json-nft
@@ -37,19 +37,6 @@
}
},
{
- "set": {
- "family": "ip",
- "name": "m",
- "table": "t",
- "type": "ipv4_addr",
- "handle": 0,
- "size": 128,
- "flags": [
- "dynamic"
- ]
- }
- },
- {
"rule": {
"family": "ip",
"table": "t",
@@ -69,24 +56,22 @@
}
},
{
- "set": {
- "op": "add",
- "elem": {
+ "meter": {
+ "key": {
"payload": {
"protocol": "ip",
"field": "saddr"
}
},
- "set": "@m",
- "stmt": [
- {
- "limit": {
- "rate": 10,
- "burst": 5,
- "per": "second"
- }
+ "stmt": {
+ "limit": {
+ "rate": 10,
+ "burst": 5,
+ "per": "second"
}
- ]
+ },
+ "size": 128,
+ "name": "m"
}
}
]
diff --git a/tests/shell/testcases/sets/dumps/0038meter_list_0.nft b/tests/shell/testcases/sets/dumps/0038meter_list_0.nft
index 8037dfa5..f274086b 100644
--- a/tests/shell/testcases/sets/dumps/0038meter_list_0.nft
+++ b/tests/shell/testcases/sets/dumps/0038meter_list_0.nft
@@ -5,13 +5,7 @@ table ip t {
flags dynamic,timeout
}
- set m {
- type ipv4_addr
- size 128
- flags dynamic
- }
-
chain c {
- tcp dport 80 add @m { ip saddr limit rate 10/second burst 5 packets }
+ tcp dport 80 meter m size 128 { ip saddr limit rate 10/second burst 5 packets }
}
}