From patchwork Mon Sep 5 18:50:18 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Jiale, SongX" X-Patchwork-Id: 115890 Return-Path: X-Original-To: patchwork@inbox.dpdk.org Delivered-To: patchwork@inbox.dpdk.org Received: from mails.dpdk.org (mails.dpdk.org [217.70.189.124]) by inbox.dpdk.org (Postfix) with ESMTP id 6B77CA054F; Mon, 5 Sep 2022 12:54:31 +0200 (CEST) Received: from [217.70.189.124] (localhost [127.0.0.1]) by mails.dpdk.org (Postfix) with ESMTP id 6307340697; Mon, 5 Sep 2022 12:54:31 +0200 (CEST) Received: from mga05.intel.com (mga05.intel.com [192.55.52.43]) by mails.dpdk.org (Postfix) with ESMTP id CB8C4400D6 for ; Mon, 5 Sep 2022 12:54:29 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1662375270; x=1693911270; h=from:to:cc:subject:date:message-id:mime-version: content-transfer-encoding; bh=9JQayLUGDhlj7pC1UhnYiWv/ZXnE0UPLswFE1/8WslA=; b=BuVBx4EQ2Kdnf2Uphf8hw6Ek4mmNP46qDTCxyNQCyNzgIwpWUYQwu+j3 mG71fAISjKD9ZkmiS02BQuZK7vWPi+csxIOU+go/PbKEQtg6UViz4jq5s a+Q+Uro3aRUbxI1PFD196/B5JBlvqUrfBC7FUyxc/hPqkSQI3y8O82072 1S7smO9j7WJ8clZWqLx4sPesnEW+b54vkEEfjD5OTvby1aymHXMGaH7bi KRDRwoNxZnUdgqJn9StbbZaDa1vlGj4zML1CXk+AlRGNIQVwuLF4YLena Tdvrfxp0kDtXXM6yS4L4dY3XOCeGmuMNhUc/6puKD8SAue9nm/x7WVd67 g==; X-IronPort-AV: E=McAfee;i="6500,9779,10460"; a="382661702" X-IronPort-AV: E=Sophos;i="5.93,291,1654585200"; d="scan'208";a="382661702" Received: from orsmga007.jf.intel.com ([10.7.209.58]) by fmsmga105.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 05 Sep 2022 03:50:36 -0700 X-IronPort-AV: E=Sophos;i="5.93,291,1654585200"; d="scan'208";a="609643238" Received: from unknown (HELO localhost.localdomain) ([10.239.252.20]) by orsmga007-auth.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 05 Sep 2022 03:50:31 -0700 From: Jiale Song To: dts@dpdk.org Cc: Jiale Song Subject: [dts] [PATCH V2 1/2] test_plans/ice_dcf_switch_filter: add case Date: Mon, 5 Sep 2022 18:50:18 +0000 Message-Id: <20220905185019.3717016-1-songx.jiale@intel.com> X-Mailer: git-send-email 2.25.1 MIME-Version: 1.0 X-BeenThere: dts@dpdk.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: test suite reviews and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dts-bounces@dpdk.org add case to test l4 mask. Signed-off-by: Jiale Song --- .../ice_dcf_switch_filter_test_plan.rst | 352 ++++++++++++++++++ 1 file changed, 352 insertions(+) diff --git a/test_plans/ice_dcf_switch_filter_test_plan.rst b/test_plans/ice_dcf_switch_filter_test_plan.rst index 0d38c218..ed836b67 100644 --- a/test_plans/ice_dcf_switch_filter_test_plan.rst +++ b/test_plans/ice_dcf_switch_filter_test_plan.rst @@ -3582,3 +3582,355 @@ Subcase 8: DCF DROP blend PACKAGES check the rules not exist in the list. send matched packets, check port can receive the packet. + +Subcase 9: MAC_IPV4_TCP + L4 MASK + drop +----------------------------------------- +1. validate a rule:: + + testpmd> flow validate 0 priority 0 ingress pattern eth / ipv4 / tcp src spec 2345 src mask 0x0f0f / end actions drop / end + + get the message:: + + Flow rule validated + + check the flow list:: + + testpmd> flow list 0 + + check the rule not exists in the list. + +2. create MAC_IPV4_L2TP_PAY rule:: + + testpmd> flow create 0 priority 0 ingress pattern eth / ipv4 / tcp src spec 2345 src mask 0x0f0f / end actions drop / end + testpmd> flow list 0 + + check the rule exists in the list. + +3. send matched packets:: + + sendp([Ether(dst={vf1_mac})/IP()/TCP(sport=2313,dport=23)/Raw("x"*80)], iface="enp27s0f0", count=1) + + check port 1 can't receive the packet. + +4. send mismatched packets:: + + sendp([Ether(dst={vf1_mac})/IP(src="192.168.0.2",dst="192.168.0.3",tos=4)/TCP(sport=2344,dport=23)/Raw("x"*80)], iface="enp27s0f0", count=1) + sendp([Ether(dst={vf1_mac})/IP(src="192.168.0.2",dst="192.168.0.3",tos=4)/TCP(sport=2601,dport=23)/Raw("x"*80)], iface="enp27s0f0", count=1) + + check port 1 can receive the packet. + +5. verify rules can be destroyed:: + + testpmd> flow flush 0 + testpmd> flow list 0 + + check the rules not exist in the list. + send matched packets, check port 1 can receive the packet. + +Subcase 10: MAC_IPV6_UDP + L4 MASK + drop +------------------------------------------ +1. validate a rule:: + + testpmd> flow validate 0 priority 0 ingress pattern eth / ipv6 / udp dst spec 3333 dst mask 0x0ff0 / end actions drop / end + + get the message:: + + Flow rule validated + + check the flow list:: + + testpmd> flow list 0 + + check the rule not exists in the list. + +2. create MAC_IPV4_L2TP_PAY rule:: + + testpmd> flow create 0 priority 0 ingress pattern eth / ipv6 / udp dst spec 3333 dst mask 0x0ff0 / end actions drop / end + testpmd> flow list 0 + + check the rule exists in the list. + +3. send matched packets:: + + sendp([Ether(dst={vf1_mac})/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1515",dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/UDP(sport=10,dport=3328)/Raw("x"*80)], iface="enp27s0f0", count=1) + + check port 1 can't receive the packet. + +4. send mismatched packets:: + + sendp([Ether(dst={vf1_mac})/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1515",dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/UDP(sport=50,dport=3077)/Raw("x"*80)], iface="enp27s0f0", count=1) + sendp([Ether(dst={vf1_mac})/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1515",dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/UDP(sport=50,dport=3349)/Raw("x"*80)], iface="enp27s0f0", count=1) + + check port 1 can receive the packet. + +5. verify rules can be destroyed:: + + testpmd> flow flush 0 + testpmd> flow list 0 + + check the rules not exist in the list. + send matched packets, check port 1 can receive the packet. + +Subcase 11: MAC_IPV4_UDP_VXLAN_MAC_IPV4_TCP + L4 MASK + drop +------------------------------------------------------------- +1. validate a rule:: + + testpmd> rx_vxlan_port add 4789 0 + testpmd> flow validate 0 priority 0 ingress pattern eth / ipv4 / udp / vxlan / eth / ipv4 / tcp src spec 32 src mask 0x0f / end actions drop / end + + get the message:: + + Flow rule validated + + check the flow list:: + + testpmd> flow list 0 + + check the rule not exists in the list. + +2. create MAC_IPV4_L2TP_PAY rule:: + + testpmd> flow create 0 priority 0 ingress pattern eth / ipv4 / udp / vxlan / eth / ipv4 / tcp src spec 32 src mask 0x0f / end actions drop / end + testpmd> flow list 0 + + check the rule exists in the list. + +3. send matched packets:: + + sendp([Ether(dst={vf1_mac})/IP()/UDP()/VXLAN()/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/TCP(sport=16,dport=22)/Raw("x"*80)], iface="enp27s0f0", count=1) + + check port 1 can't receive the packet. + +4. send mismatched packets:: + + sendp([Ether(dst={vf1_mac})/IP()/UDP()/VXLAN()/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/TCP(sport=33,dport=22)/Raw("x"*80)], iface="enp27s0f0", count=1) + + check port 1 can receive the packet. + +5. verify rules can be destroyed:: + + testpmd> flow flush 0 + testpmd> flow list 0 + + check the rules not exist in the list. + send matched packets, check port 1 can receive the packet. + +Subcase 12: MAC_IPV4_NVGRE_MAC_IPV4_TCP + L4 MASK + drop +--------------------------------------------------------- +1. validate a rule:: + + testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 0x8 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / tcp dst spec 1280 dst mask 0x00ff / end actions drop / end + + get the message:: + + Flow rule validated + + check the flow list:: + + testpmd> flow list 0 + + check the rule not exists in the list. + +2. create MAC_IPV4_L2TP_PAY rule:: + + testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 0x8 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / tcp dst spec 1280 dst mask 0x00ff / end actions drop / end + testpmd> flow list 0 + + check the rule exists in the list. + +3. send matched packets:: + + sendp([Ether(dst={vf1_mac})/IP(dst="192.168.0.1")/NVGRE(TNI=0x8)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/TCP(sport=50,dport=1536)/Raw("x"*80)], iface="enp27s0f0", count=1) + + check port 1 can't receive the packet. + +4. send mismatched packets:: + + sendp([Ether(dst={vf1_mac})/IP(dst="192.168.0.1")/NVGRE(TNI=0x8)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/TCP(sport=50,dport=1281)/Raw("x"*80)], iface="enp27s0f0", count=1) + + check port 1 can receive the packet. + +5. verify rules can be destroyed:: + + testpmd> flow flush 0 + testpmd> flow list 0 + + check the rules not exist in the list. + send matched packets, check port 1 can receive the packet. + +Test case: IPv4/IPv6 + TCP/UDP + L4 MASK +======================================== +Subcase 1: MAC_IPV4_UDP + L4 MASK + single vf +---------------------------------------------- +1. validate a rule:: + + testpmd> flow validate 0 priority 0 ingress pattern eth / ipv4 / udp src spec 2152 src mask 0xff00 dst spec 1281 dst mask 0x00ff / end actions vf id 1 / end + + get the message:: + + Flow rule validated + + check the flow list:: + + testpmd> flow list 0 + + check the rule not exists in the list. + +2. create MAC_IPV4_L2TP_PAY rule:: + + testpmd> flow create 0 priority 0 ingress pattern eth / ipv4 / udp src spec 2152 src mask 0xff00 dst spec 1281 dst mask 0x00ff / end actions vf id 1 / end + testpmd> flow list 0 + + check the rule exists in the list. + +3. send matched packets:: + + sendp([Ether(dst="00:11:22:33:44:66")/IP(src="192.168.0.2",dst="192.168.0.3",tos=4)/UDP(sport=2048,dport=1)/Raw("x"*80)], iface="enp27s0f0", count=1) + + check port 1 receive the packet. + +4. send mismatched packets:: + + sendp([Ether(dst="00:11:22:33:44:66")/IP(src="192.168.0.2",dst="192.168.0.3",tos=4)/UDP(sport=2047,dport=2)/Raw("x"*80)], iface="enp27s0f0", count=1) + sendp([Ether(dst="00:11:22:33:44:66")/IP(src="192.168.0.2",dst="192.168.0.3",tos=4)/UDP(sport=2058,dport=3586)/Raw("x"*80)], iface="enp27s0f0", count=1) + + check port 1 can not receive the packet. + +5. verify rules can be destroyed:: + + testpmd> flow flush 0 + testpmd> flow list 0 + + check the rules not exist in the list. + send matched packets, check port 1 can not receive the packet. + +Subcase 2: MAC_IPV6_TCP + L4 MASK + single vf +---------------------------------------------- +1. validate a rule:: + + testpmd> flow validate 0 priority 0 ingress pattern eth / ipv6 / tcp dst spec 3333 dst mask 0x0ff0 / end actions vf id 1 / end + + get the message:: + + Flow rule validated + + check the flow list:: + + testpmd> flow list 0 + + check the rule not exists in the list. + +2. create MAC_IPV4_L2TP_PAY rule:: + + testpmd> flow create 0 priority 0 ingress pattern eth / ipv6 / tcp dst spec 3333 dst mask 0x0ff0 / end actions vf id 1 / end + testpmd> flow list 0 + + check the rule exists in the list. + +3. send matched packets:: + + sendp([Ether(dst="00:11:22:33:44:66")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1515",dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/TCP(sport=10,dport=3328)/Raw("x"*80)], iface="enp27s0f0", count=1) + + check port 1 receive the packet. + +4. send mismatched packets:: + + sendp([Ether(dst="00:11:22:33:44:66")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1515",dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/TCP(sport=50,dport=3077)/Raw("x"*80)], iface="enp27s0f0", count=1) + sendp([Ether(dst="00:11:22:33:44:66")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1515",dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/TCP(sport=50,dport=3349)/Raw("x"*80)], iface="enp27s0f0", count=1) + + check port 1 can not receive the packet. + +5. verify rules can be destroyed:: + + testpmd> flow flush 0 + testpmd> flow list 0 + + check the rules not exist in the list. + send matched packets, check port 1 can not receive the packet. + +Subcase 3: MAC_IPV4_UDP_VXLAN_MAC_IPV4_UDP + L4 MASK + single vf +----------------------------------------------------------------- +1. validate a rule:: + + testpmd> rx_vxlan_port add 4789 0 + testpmd> flow validate 0 priority 0 ingress pattern eth / ipv4 / udp / vxlan / eth / ipv4 / udp src spec 32 src mask 0x0f / end actions vf id 1 / end + + get the message:: + + Flow rule validated + + check the flow list:: + + testpmd> flow list 0 + + check the rule not exists in the list. + +2. create MAC_IPV4_L2TP_PAY rule:: + + testpmd> flow create 0 priority 0 ingress pattern eth / ipv4 / udp / vxlan / eth / ipv4 / udp src spec 32 src mask 0x0f / end actions vf id 1 / end + testpmd> flow list 0 + + check the rule exists in the list. + +3. send matched packets:: + + sendp([Ether(dst="00:11:22:33:44:66")/IP()/UDP()/VXLAN()/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/UDP(sport=16,dport=22)/Raw("x"*80)], iface="enp27s0f0", count=1) + + check port 1 receive the packet. + +4. send mismatched packets:: + + sendp([Ether(dst="00:11:22:33:44:66")/IP()/UDP()/VXLAN()/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/UDP(sport=33,dport=22)/Raw("x"*80)], iface="enp27s0f0", count=1) + + check port 1 can not receive the packet. + +5. verify rules can be destroyed:: + + testpmd> flow flush 0 + testpmd> flow list 0 + + check the rules not exist in the list. + send matched packets, check port 1 can not receive the packet. + +Subcase 4: MAC_IPV4_NVGRE_MAC_IPV4_UDP + L4 MASK + single vf +------------------------------------------------------------- +1. validate a rule:: + + testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 0x8 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / udp src spec 1280 src mask 0x00ff / end actions vf id 1 / end + + get the message:: + + Flow rule validated + + check the flow list:: + + testpmd> flow list 0 + + check the rule not exists in the list. + +2. create MAC_IPV4_L2TP_PAY rule:: + + testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 0x8 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / udp src spec 1280 src mask 0x00ff / end actions vf id 1 / end + testpmd> flow list 0 + + check the rule exists in the list. + +3. send matched packets:: + + sendp([Ether(dst="00:11:22:33:44:66")/IP(dst="192.168.0.1")/NVGRE(TNI=0x8)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/UDP(sport=1536)/Raw("x"*80)], iface="enp27s0f0", count=1) + + check port 1 receive the packet. + +4. send mismatched packets:: + + sendp([Ether(dst="00:11:22:33:44:66")/IP(dst="192.168.0.1")/NVGRE(TNI=0x8)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/UDP(sport=1281)/Raw("x"*80)], iface="enp27s0f0", count=1) + + check port 1 can not receive the packet. + +5. verify rules can be destroyed:: + + testpmd> flow flush 0 + testpmd> flow list 0 + + check the rules not exist in the list. + send matched packets, check port 1 can not receive the packet. \ No newline at end of file From patchwork Mon Sep 5 18:50:19 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Jiale, SongX" X-Patchwork-Id: 115889 Return-Path: X-Original-To: patchwork@inbox.dpdk.org Delivered-To: patchwork@inbox.dpdk.org Received: from mails.dpdk.org (mails.dpdk.org [217.70.189.124]) by inbox.dpdk.org (Postfix) with ESMTP id 5119FA054F; Mon, 5 Sep 2022 12:53:55 +0200 (CEST) Received: from [217.70.189.124] (localhost [127.0.0.1]) by mails.dpdk.org (Postfix) with ESMTP id 3506840695; Mon, 5 Sep 2022 12:53:55 +0200 (CEST) Received: from mga04.intel.com (mga04.intel.com [192.55.52.120]) by mails.dpdk.org (Postfix) with ESMTP id 9B6DF400D6 for ; Mon, 5 Sep 2022 12:53:52 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1662375233; x=1693911233; h=from:to:cc:subject:date:message-id:in-reply-to: references:mime-version:content-transfer-encoding; bh=TNxYgXVRho8PwO3volCzdmnRDaJsP2HK4iebqe4aNqQ=; b=fyuFW4LAAYkBM6mo5dhxU38qYHvnBtrVUa5Bf2ebdkmWVnFZC1l8379t fG9e4UdCHTbZ8H0ZycKW8a+w8mXNoQ3HTQSksNsENvCxu2N4dC8ev91+2 wOJJfk9lmGauZ4eGKkzO+6Az2w18MEyHd70dJE/PlDbD/7j2rj24mjcFc U4RDZ79qmKYe7sjFCpMeZ0i9vETWfE71/ww24H9NHGmG/QyN0U5DnD2VO A81n7sOJqCUcJag5DwxXjsIybmLpk8VAMUi49ng4RasX8hOSG6gYVv33o X/31Zx4DeOzCarwUxvaK5sqJcnn6OT452/bZpUmEXvpPZ5WFewx/o8gxS A==; X-IronPort-AV: E=McAfee;i="6500,9779,10460"; a="295101864" X-IronPort-AV: E=Sophos;i="5.93,291,1654585200"; d="scan'208";a="295101864" Received: from orsmga007.jf.intel.com ([10.7.209.58]) by fmsmga104.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 05 Sep 2022 03:50:38 -0700 X-IronPort-AV: E=Sophos;i="5.93,291,1654585200"; d="scan'208";a="609643247" Received: from unknown (HELO localhost.localdomain) ([10.239.252.20]) by orsmga007-auth.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 05 Sep 2022 03:50:32 -0700 From: Jiale Song To: dts@dpdk.org Cc: Jiale Song Subject: [dts] [PATCH V2 2/2] tests/ice_dcf_switch_filter: add case Date: Mon, 5 Sep 2022 18:50:19 +0000 Message-Id: <20220905185019.3717016-2-songx.jiale@intel.com> X-Mailer: git-send-email 2.25.1 In-Reply-To: <20220905185019.3717016-1-songx.jiale@intel.com> References: <20220905185019.3717016-1-songx.jiale@intel.com> MIME-Version: 1.0 X-BeenThere: dts@dpdk.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: test suite reviews and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dts-bounces@dpdk.org 1. add case to test l4 mask. 2. delete the method of reloading ice. Signed-off-by: Jiale Song --- tests/TestSuite_ice_dcf_switch_filter.py | 294 ++++++++++++++++++++++- 1 file changed, 288 insertions(+), 6 deletions(-) diff --git a/tests/TestSuite_ice_dcf_switch_filter.py b/tests/TestSuite_ice_dcf_switch_filter.py index 3c647be6..7b28f52d 100644 --- a/tests/TestSuite_ice_dcf_switch_filter.py +++ b/tests/TestSuite_ice_dcf_switch_filter.py @@ -1388,6 +1388,145 @@ tv_add_two_rules_with_different_input_set_different_vf_id = { }, } +# l4 mask +# ipv4/ipv6 + udp/tcp +mac_ipv4_udp_l4_mask_scapy_str = { + "matched": [ + 'Ether(dst="00:11:22:33:44:66")/IP(src="192.168.0.2",dst="192.168.0.3",tos=4)/UDP(sport=2048,dport=1)/Raw("x"*80)', + ], + "mismatched": [ + 'Ether(dst="00:11:22:33:44:66")/IP(src="192.168.0.2",dst="192.168.0.3",tos=4)/UDP(sport=2047,dport=2)/Raw("x"*80)', + 'Ether(dst="00:11:22:33:44:66")/IP(src="192.168.0.2",dst="192.168.0.3",tos=4)/UDP(sport=2058,dport=3586)/Raw("x"*80)', + ], +} +tv_mac_ipv4_udp_l4_mask_in_single_vf_01 = { + "name": "tv_mac_ipv4_udp_l4_mask_in_single_vf_01", + "rte_flow_pattern": "flow create 0 priority 0 ingress pattern eth / ipv4 / udp src spec 2152 src mask 0xff00 dst spec 1281 dst mask 0x00ff / end actions vf id 1 / end", + "matched": { + "scapy_str": mac_ipv4_udp_l4_mask_scapy_str["matched"], + "check_func": { + "func": rfc.check_vf_rx_packets_number, + "param": {"expect_port": 1, "expect_queues": "null"}, + }, + "expect_results": { + "expect_pkts": len(mac_ipv4_udp_l4_mask_scapy_str["matched"]) + }, + }, + "mismatched": { + "scapy_str": mac_ipv4_udp_l4_mask_scapy_str["mismatched"], + "check_func": { + "func": rfc.check_vf_rx_packets_number, + "param": {"expect_port": 1, "expect_queues": "null"}, + }, + "expect_results": {"expect_pkts": 0}, + }, +} + +mac_ipv6_udp_l4_mask_scapy_str = { + "matched": [ + 'Ether(dst="00:11:22:33:44:66")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1515",dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/TCP(sport=10,dport=3328)/Raw("x"*80)', + ], + "mismatched": [ + 'Ether(dst="00:11:22:33:44:66")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1515",dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/TCP(sport=50,dport=3077)/Raw("x"*80)', + 'Ether(dst="00:11:22:33:44:66")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1515",dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/TCP(sport=50,dport=3349)/Raw("x"*80)', + ], +} +tv_mac_ipv6_tcp_l4_mask_in_single_vf_02 = { + "name": "tv_mac_ipv6_tcp_l4_mask_in_single_vf_02", + "rte_flow_pattern": "flow create 0 priority 0 ingress pattern eth / ipv6 / tcp dst spec 3333 dst mask 0x0ff0 / end actions vf id 1 / end", + "matched": { + "scapy_str": mac_ipv6_udp_l4_mask_scapy_str["matched"], + "check_func": { + "func": rfc.check_vf_rx_packets_number, + "param": {"expect_port": 1, "expect_queues": "null"}, + }, + "expect_results": { + "expect_pkts": len(mac_ipv6_udp_l4_mask_scapy_str["matched"]) + }, + }, + "mismatched": { + "scapy_str": mac_ipv6_udp_l4_mask_scapy_str["mismatched"], + "check_func": { + "func": rfc.check_vf_rx_packets_number, + "param": {"expect_port": 1, "expect_queues": "null"}, + }, + "expect_results": {"expect_pkts": 0}, + }, +} + +# test vxlan l4 mask +mac_ipv4_udp_vxlan_eth_ipv4_udp_l4_mask_scapy_str = { + "matched": [ + 'Ether(dst="00:11:22:33:44:66")/IP()/UDP()/VXLAN()/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/UDP(sport=16,dport=22)/Raw("x"*80)', + ], + "mismatched": [ + 'Ether(dst="00:11:22:33:44:66")/IP()/UDP()/VXLAN()/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/UDP(sport=33,dport=22)/Raw("x"*80)' + ], +} +tv_mac_ipv4_udp_vxlan_eth_ipv4_udp_l4_mask_in_single_vf_03 = { + "name": "tv_mac_ipv4_udp_vxlan_eth_ipv4_udp_l4_mask_in_single_vf_03", + "rte_flow_pattern": "flow create 0 priority 0 ingress pattern eth / ipv4 / udp / vxlan / eth / ipv4 / udp src spec 32 src mask 0x0f / end actions vf id 1 / end", + "matched": { + "scapy_str": mac_ipv4_udp_vxlan_eth_ipv4_udp_l4_mask_scapy_str["matched"], + "check_func": { + "func": rfc.check_vf_rx_packets_number, + "param": {"expect_port": 1, "expect_queues": "null"}, + }, + "expect_results": { + "expect_pkts": len( + mac_ipv4_udp_vxlan_eth_ipv4_udp_l4_mask_scapy_str["matched"] + ) + }, + }, + "mismatched": { + "scapy_str": mac_ipv4_udp_vxlan_eth_ipv4_udp_l4_mask_scapy_str["mismatched"], + "check_func": { + "func": rfc.check_vf_rx_packets_number, + "param": {"expect_port": 1, "expect_queues": "null"}, + }, + "expect_results": {"expect_pkts": 0}, + }, +} + +# test nvgre l4 mask +mac_ipv4_nvgre_eth_ipv4_udp_l4_mask_scapy_str = { + "matched": [ + 'Ether(dst="00:11:22:33:44:66")/IP(dst="192.168.0.1")/NVGRE(TNI=0x8)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/UDP(sport=1536)/Raw("x"*80)', + ], + "mismatched": [ + 'Ether(dst="00:11:22:33:44:66")/IP(dst="192.168.0.1")/NVGRE(TNI=0x8)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/UDP(sport=1281)/Raw("x"*80)', + ], +} +tv_mac_ipv4_nvgre_eth_ipv4_udp_l4_mask_in_single_vf_04 = { + "name": "tv_mac_ipv4_nvgre_eth_ipv4_udp_l4_mask_in_single_vf_04", + "rte_flow_pattern": "flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 0x8 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / udp src spec 1280 src mask 0x00ff / end actions vf id 1 / end", + "matched": { + "scapy_str": mac_ipv4_nvgre_eth_ipv4_udp_l4_mask_scapy_str["matched"], + "check_func": { + "func": rfc.check_vf_rx_packets_number, + "param": {"expect_port": 1, "expect_queues": "null"}, + }, + "expect_results": { + "expect_pkts": len(mac_ipv4_nvgre_eth_ipv4_udp_l4_mask_scapy_str["matched"]) + }, + }, + "mismatched": { + "scapy_str": mac_ipv4_nvgre_eth_ipv4_udp_l4_mask_scapy_str["mismatched"], + "check_func": { + "func": rfc.check_vf_rx_packets_number, + "param": {"expect_port": 1, "expect_queues": "null"}, + }, + "expect_results": {"expect_pkts": 0}, + }, +} + +tvs_l4_mask = [ + tv_mac_ipv4_udp_l4_mask_in_single_vf_01, + tv_mac_ipv6_tcp_l4_mask_in_single_vf_02, + tv_mac_ipv4_udp_vxlan_eth_ipv4_udp_l4_mask_in_single_vf_03, + tv_mac_ipv4_nvgre_eth_ipv4_udp_l4_mask_in_single_vf_04, +] + tv_mac_ipv4_drop = { "name": "tv_mac_ipv4_drop", "rte_flow_pattern": "flow create 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.1 / end actions drop / end", @@ -1632,6 +1771,134 @@ tv_mac_blend_pkg_drop = { }, } +vf1_mac = "00:11:22:33:44:55" +mac_ipv4_tcp_l4_mask_scapy_str = { + "matched": [ + 'Ether(dst="%s")/IP()/TCP(sport=2313,dport=23)/Raw("x"*80)' % vf1_mac, + ], + "mismatched": [ + 'Ether(dst="%s")/IP(src="192.168.0.2",dst="192.168.0.3",tos=4)/TCP(sport=2344,dport=23)/Raw("x"*80)' + % vf1_mac, + 'Ether(dst="%s")/IP(src="192.168.0.2",dst="192.168.0.3",tos=4)/TCP(sport=2601,dport=23)/Raw("x"*80)' + % vf1_mac, + ], +} +tv_mac_ipv4_tcp_l4_mask_drop = { + "name": "tv_mac_ipv4_tcp_l4_mask_drop", + "rte_flow_pattern": "flow create 0 priority 0 ingress pattern eth / ipv4 / tcp src spec 2345 src mask 0x0f0f / end actions drop / end", + "matched": { + "scapy_str": mac_ipv4_tcp_l4_mask_scapy_str["matched"], + "check_func": { + "func": rfc.check_vf_rx_packets_number, + "param": {"expect_port": 1, "expect_queues": "null"}, + }, + "expect_results": {"expect_pkts": 0}, + }, + "mismatched": { + "scapy_str": mac_ipv4_tcp_l4_mask_scapy_str["mismatched"], + "check_func": { + "func": rfc.check_vf_rx_packets_number, + "param": {"expect_port": 1, "expect_queues": "null"}, + }, + "expect_results": {"expect_pkts": 2}, + }, +} + +mac_ipv6_tcp_l4_mask_scapy_str = { + "matched": [ + 'Ether(dst="%s")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1515",dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/UDP(sport=10,dport=3328)/Raw("x"*80)' + % vf1_mac, + ], + "mismatched": [ + 'Ether(dst="%s")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1515",dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/UDP(sport=50,dport=3077)/Raw("x"*80)' + % vf1_mac, + 'Ether(dst="%s")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1515",dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/UDP(sport=50,dport=3349)/Raw("x"*80)' + % vf1_mac, + ], +} +tv_mac_ipv6_udp_l4_mask_drop = { + "name": "tv_mac_ipv6_udp_l4_mask_drop", + "rte_flow_pattern": "flow create 0 priority 0 ingress pattern eth / ipv6 / udp dst spec 3333 dst mask 0x0ff0 / end actions drop / end", + "matched": { + "scapy_str": mac_ipv6_tcp_l4_mask_scapy_str["matched"], + "check_func": { + "func": rfc.check_vf_rx_packets_number, + "param": {"expect_port": 1, "expect_queues": "null"}, + }, + "expect_results": {"expect_pkts": 0}, + }, + "mismatched": { + "scapy_str": mac_ipv6_tcp_l4_mask_scapy_str["mismatched"], + "check_func": { + "func": rfc.check_vf_rx_packets_number, + "param": {"expect_port": 1, "expect_queues": "null"}, + }, + "expect_results": {"expect_pkts": 2}, + }, +} + +mac_ipv4_udp_vxlan_eth_ipv4_tcp_l4_mask_scapy_str = { + "matched": [ + 'Ether(dst="%s")/IP()/UDP()/VXLAN()/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/TCP(sport=16,dport=22)/Raw("x"*80)' + % vf1_mac, + ], + "mismatched": [ + 'Ether(dst="%s")/IP()/UDP()/VXLAN()/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/TCP(sport=33,dport=22)/Raw("x"*80)' + % vf1_mac, + ], +} +tv_mac_ipv4_udp_vxlan_eth_ipv4_tcp_l4_mask_drop = { + "name": "tv_mac_ipv4_udp_vxlan_eth_ipv4_tcp_l4_mask_drop", + "rte_flow_pattern": "flow create 0 priority 0 ingress pattern eth / ipv4 / udp / vxlan / eth / ipv4 / tcp src spec 32 src mask 0x0f / end actions drop / end", + "matched": { + "scapy_str": mac_ipv4_udp_vxlan_eth_ipv4_tcp_l4_mask_scapy_str["matched"], + "check_func": { + "func": rfc.check_vf_rx_packets_number, + "param": {"expect_port": 1, "expect_queues": "null"}, + }, + "expect_results": {"expect_pkts": 0}, + }, + "mismatched": { + "scapy_str": mac_ipv4_udp_vxlan_eth_ipv4_tcp_l4_mask_scapy_str["mismatched"], + "check_func": { + "func": rfc.check_vf_rx_packets_number, + "param": {"expect_port": 1, "expect_queues": "null"}, + }, + "expect_results": {"expect_pkts": 1}, + }, +} + +mac_ipv4_nvgre_eth_ipv4_tcp_l4_mask_scapy_str = { + "matched": [ + 'Ether(dst="%s")/IP(dst="192.168.0.1")/NVGRE(TNI=0x8)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/TCP(sport=50,dport=1536)/Raw("x"*80)' + % vf1_mac, + ], + "mismatched": [ + 'Ether(dst="%s")/IP(dst="192.168.0.1")/NVGRE(TNI=0x8)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/TCP(sport=50,dport=1281)/Raw("x"*80)' + % vf1_mac, + ], +} +tv_mac_ipv4_nvgre_eth_ipv4_tcp_l4_mask_drop = { + "name": "tv_mac_ipv4_nvgre_eth_ipv4_tcp_l4_mask_drop", + "rte_flow_pattern": "flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 0x8 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / tcp dst spec 1280 dst mask 0x00ff / end actions drop / end", + "matched": { + "scapy_str": mac_ipv4_nvgre_eth_ipv4_tcp_l4_mask_scapy_str["matched"], + "check_func": { + "func": rfc.check_vf_rx_packets_number, + "param": {"expect_port": 1, "expect_queues": "null"}, + }, + "expect_results": {"expect_pkts": 0}, + }, + "mismatched": { + "scapy_str": mac_ipv4_nvgre_eth_ipv4_tcp_l4_mask_scapy_str["mismatched"], + "check_func": { + "func": rfc.check_vf_rx_packets_number, + "param": {"expect_port": 1, "expect_queues": "null"}, + }, + "expect_results": {"expect_pkts": 1}, + }, +} + sv_mac_test_drop_action = [ tv_mac_ipv4_drop, tv_mac_ipv4_mask_drop, @@ -1642,6 +1909,10 @@ sv_mac_test_drop_action = [ tv_mac_l2tp_drop, tv_mac_esp_drop, tv_mac_blend_pkg_drop, + tv_mac_ipv4_tcp_l4_mask_drop, + tv_mac_ipv6_udp_l4_mask_drop, + tv_mac_ipv4_udp_vxlan_eth_ipv4_tcp_l4_mask_drop, + tv_mac_ipv4_nvgre_eth_ipv4_tcp_l4_mask_drop, ] @@ -1718,15 +1989,11 @@ class ICEDCFSwitchFilterTest(TestCase): port.bind_driver(self.vf_driver) time.sleep(5) - def reload_ice(self): - self.dut.send_expect("rmmod ice", "# ", 15) - self.dut.send_expect("modprobe ice", "# ", 15) - def set_up(self): """ Run before each test case. """ - self.reload_ice() + pass def create_testpmd_command(self): """ @@ -1748,8 +2015,8 @@ class ICEDCFSwitchFilterTest(TestCase): launch testpmd with the command """ command = self.create_testpmd_command() - out = self.dut.send_expect(command, "testpmd> ", 15) self.testpmd_status = "running" + out = self.dut.send_expect(command, "testpmd> ", 30) self.dut.send_expect("set portlist 1", "testpmd> ", 15) self.dut.send_expect("set fwd rxonly", "testpmd> ", 15) self.dut.send_expect("set verbose 1", "testpmd> ", 15) @@ -2640,6 +2907,7 @@ class ICEDCFSwitchFilterTest(TestCase): 'ip link set %s vf 1 mac "00:11:22:33:44:55"' % self.pf0_intf, "# " ) self.launch_testpmd() + self.dut.send_expect("rx_vxlan_port add 4789 0", "testpmd> ") for pattern in sv_mac_test_drop_action: # validate a rule self.validate_switch_filter_rule(pattern["rte_flow_pattern"]) @@ -2666,6 +2934,20 @@ class ICEDCFSwitchFilterTest(TestCase): self.dut.send_expect("flow flush 0", "testpmd> ", 15) self.dut.send_expect("clear port stats all", "testpmd> ", 15) + # l4 mask + def test_l4_mask(self): + self.setup_1pf_vfs_env() + self.dut.send_expect( + "ip link set %s vf 1 mac 00:11:22:33:44:55" % self.pf0_intf, "# " + ) + self.launch_testpmd() + self.dut.send_expect("rx_vxlan_port add 4789 0", "testpmd> ") + try: + for sub_case in tvs_l4_mask: + self._rte_flow_validate_pattern(sub_case, launch_testpmd=False) + except Exception as ex: + raise ex + def tear_down(self): """ Run after each test case.