blob: 0cd965f76d0e31a69a472388e45dbef5bccdf9cb (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
|
#!/bin/bash
# NFT_TEST_SKIP(NFT_TEST_SKIP_slow)
set -e
dumpfile=$(dirname $0)/dumps/$(basename $0).nft
$NFT -f $dumpfile
port=23
for i in $(seq 1 100) ; do
timeout=$((RANDOM%5))
timeout=$((timeout+1))
j=1
batched="{ $port timeout 3s : jump other_input "
batched_addr="{ 10.0.$((i%256)).$j . $port timeout ${timeout}s : jump other_input "
port=$((port + 1))
for j in $(seq 2 400); do
timeout=$((RANDOM%5))
timeout=$((timeout+1))
batched="$batched, $port timeout ${timeout}s : jump other_input "
batched_addr="$batched_addr, 10.0.$((i%256)).$((j%256)) . $port timeout ${timeout}s : jump other_input "
port=$((port + 1))
done
fail_addr="$batched_addr, 1.2.3.4 . 23 timeout 5m : jump other_input,
1.2.3.4 . 23 timeout 3m : jump other_input }"
fail="$batched, 23 timeout 1m : jump other_input, 23 : jump other_input }"
batched="$batched }"
batched_addr="$batched_addr }"
if [ $i -gt 90 ]; then
# must fail, we create and $fail/$fail_addr contain one element twice.
$NFT create element inet filter portmap "$fail" && exit 111
$NFT create element inet filter portaddrmap "$fail_addr" && exit 112
fi
$NFT add element inet filter portmap "$batched"
$NFT add element inet filter portaddrmap "$batched_addr"
done
if [ "$NFT_TEST_HAVE_catchall_element" = n ] ; then
echo "Partial test due to NFT_TEST_HAVE_catchall_element=n."
else
$NFT add element inet filter portaddrmap { "* timeout 2s : drop" }
$NFT add element inet filter portmap { "* timeout 3s : drop" }
fi
# wait for elements to time out
sleep 5
|
