blob: fbdb57931ed09f371afa0fa5e40be61c7434afdc (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
|
#!/bin/bash
set -e
RULESET="table ip foo {
set inflows {
type ipv4_addr . inet_service . ifname . ipv4_addr . inet_service
flags dynamic
elements = { 10.1.0.3 . 39466 . \"veth1\" . 10.3.0.99 . 5201 counter packets 0 bytes 0 }
}
set inflows6 {
type ipv6_addr . inet_service . ifname . ipv6_addr . inet_service
flags dynamic
}
set inflows_ratelimit {
type ipv4_addr . inet_service . ifname . ipv4_addr . inet_service
flags dynamic
elements = { 10.1.0.3 . 39466 . \"veth1\" . 10.3.0.99 . 5201 limit rate 1/second counter packets 0 bytes 0 }
}
}"
$NFT -f - <<< "$RULESET"
# inflows_ratelimit will be dumped without 'limit rate .. counter' on old kernels.
if [ "$NFT_TEST_HAVE_set_with_two_expressions" = n ]; then
echo "Partial test due to NFT_TEST_HAVE_set_with_two_expressions=n."
exit 77
fi
|
