diff mbox series

[v1,1/2] test_plans: add cloud_filter_with_l4_port_test_plan.rst

Message ID 20200817055452.68792-1-guinanx.sun@intel.com (mailing list archive)
State Superseded
Headers show
Series [v1,1/2] test_plans: add cloud_filter_with_l4_port_test_plan.rst | expand

Commit Message

Guinan Sun Aug. 17, 2020, 5:54 a.m. UTC
Enables the cloud filter for IPv4_UDP/IPv4_TCP/IPv4_SCTP
with SRC port only or DST port only.
This supports different filter types for the same packet type.
E.g. one IPv4_UDP rules with SRC port only and another IPv4_UDP rule
with DST port only.

Signed-off-by: Guinan Sun <guinanx.sun@intel.com>
---
 .../cloud_filter_with_l4_port_test_plan.rst   | 631 ++++++++++++++++++
 1 file changed, 631 insertions(+)
 create mode 100644 test_plans/cloud_filter_with_l4_port_test_plan.rst

Comments

Lin, Xueqin Aug. 17, 2020, 6:11 a.m. UTC | #1
Acked-by: Xueqin Lin <Xueqin.lin@intel.com>

> -----Original Message-----
> From: dts <dts-bounces@dpdk.org> On Behalf Of Guinan Sun
> Sent: Monday, August 17, 2020 1:55 PM
> To: dts@dpdk.org
> Cc: Sun, GuinanX <guinanx.sun@intel.com>
> Subject: [dts] [PATCH v1 1/2] test_plans: add
> cloud_filter_with_l4_port_test_plan.rst
> 
> Enables the cloud filter for IPv4_UDP/IPv4_TCP/IPv4_SCTP with SRC port only
> or DST port only.
> This supports different filter types for the same packet type.
> E.g. one IPv4_UDP rules with SRC port only and another IPv4_UDP rule with
> DST port only.
> 
> Signed-off-by: Guinan Sun <guinanx.sun@intel.com>
> ---
>  .../cloud_filter_with_l4_port_test_plan.rst   | 631 ++++++++++++++++++
>  1 file changed, 631 insertions(+)
>  create mode 100644 test_plans/cloud_filter_with_l4_port_test_plan.rst
> 
> diff --git a/test_plans/cloud_filter_with_l4_port_test_plan.rst
> b/test_plans/cloud_filter_with_l4_port_test_plan.rst
> new file mode 100644
> index 0000000..9143dae
> --- /dev/null
> +++ b/test_plans/cloud_filter_with_l4_port_test_plan.rst
> @@ -0,0 +1,631 @@
> +.. Copyright (c) <2020>, Intel Corporation
> +   All rights reserved.
> +
> +   Redistribution and use in source and binary forms, with or without
> +   modification, are permitted provided that the following conditions
> +   are met:
> +
> +   - Redistributions of source code must retain the above copyright
> +     notice, this list of conditions and the following disclaimer.
> +
> +   - Redistributions in binary form must reproduce the above copyright
> +     notice, this list of conditions and the following disclaimer in
> +     the documentation and/or other materials provided with the
> +     distribution.
> +
> +   - Neither the name of Intel Corporation nor the names of its
> +     contributors may be used to endorse or promote products derived
> +     from this software without specific prior written permission.
> +
> +   THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND
> CONTRIBUTORS
> +   "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
> +   LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
> +   FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
> +   COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
> INDIRECT,
> +   INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
> +   (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
> OR
> +   SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
> +   HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
> CONTRACT,
> +   STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
> +   ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
> ADVISED
> +   OF THE POSSIBILITY OF SUCH DAMAGE.
> +
> +===================================
> +Cloud filter with l4 port test plan
> +===================================
> +
> +Prerequisites
> +=============
> +
> +1. Hardware:
> +   Fortville
> +
> +2. software:
> +   dpdk: http://dpdk.org/git/dpdk
> +   scapy: http://www.secdev.org/projects/scapy/
> +
> +3. bind the pf to dpdk driver::
> +
> +    ./usertools/dpdk-devbind.py --force --bind=vfio-pci 0000:81:00.0
> +
> +Test Case 1: ipv4-udp_sport only
> +================================
> +
> +    1. Launch the testpmd::
> +
> +        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --
> disable-rss
> +        testpmd> set fwd rxonly
> +        testpmd> set promisc all off
> +        testpmd> set verbose 1
> +        testpmd> start
> +
> +    2. validate a source port rule::
> +        testpmd> flow validate 0 ingress pattern eth / ipv4 / udp src
> + is 156 / end actions pf / queue index 1 / end
> +
> +        Verify the command can validate::
> +            Flow rule validated
> +
> +    3. create a source port rule::
> +        testpmd> flow create 0 ingress pattern eth / ipv4 / udp src is
> + 156 / end actions pf / queue index 1 / end
> +
> +        testpmd> flow list 0
> +
> +        Verify there are one rule.
> +
> +        send matched packets::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IP()/UDP(sport=156)/Raw('x' * 80)
> +
> +        Verify packets will be received in queue 1.
> +
> +        send no matched packet::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IP()/UDP(sport=111)/Raw('x' * 80)
> +
> +        Verify packets will not be received in queue 1.
> +
> +    4. flush the rule::
> +        testpmd> flow flush 0
> +
> +        send packets match rule 0::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IP()/UDP(sport=156)/Raw('x' * 80)
> +
> +        packets should be in queue 0.
> +
> +Test Case 2: ipv4-udp_dport only
> +================================
> +
> +    1. Launch the testpmd::
> +
> +        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --
> disable-rss
> +        testpmd> set fwd rxonly
> +        testpmd> set promisc all off
> +        testpmd> set verbose 1
> +        testpmd> start
> +
> +    2. validate a destination port rule::
> +        testpmd> flow validate 0 ingress pattern eth / ipv4 / udp dst
> + is 156 / end actions pf / queue index 1 / end
> +
> +        Verify the command can validate::
> +            Flow rule validated
> +
> +    3. create a destination port rule::
> +        testpmd> flow create 0 ingress pattern eth / ipv4 / udp dst is
> + 156 / end actions pf / queue index 1 / end
> +
> +        testpmd> flow list 0
> +
> +        Verify there are one rule.
> +
> +        send matched packets::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IP()/UDP(dport=156)/Raw('x' * 80)
> +
> +        Verify packets will be received in queue 1.
> +
> +        send no matched packet::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IP()/UDP(dport=111)/Raw('x' * 80)
> +
> +        Verify packets will not be received in queue 1.
> +
> +    4. flush the rule::
> +        testpmd> flow flush 0
> +
> +        send packets match rule 0::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IP()/UDP(dport=156)/Raw('x' * 80)
> +
> +        packets should be in queue 0.
> +
> +Test Case 3: ipv4-tcp_sport only
> +================================
> +
> +    1. Launch the testpmd::
> +
> +        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --
> disable-rss
> +        testpmd> set fwd rxonly
> +        testpmd> set promisc all off
> +        testpmd> set verbose 1
> +        testpmd> start
> +
> +    2. validate a source port rule::
> +        testpmd> flow validate 0 ingress pattern eth / ipv4 / tcp src
> + is 156 / end actions pf / queue index 1 / end
> +
> +        Verify the command can validate::
> +            Flow rule validated
> +
> +    3. testpmd> flow create 0 ingress pattern eth / ipv4 / tcp src is
> + 156 / end actions pf / queue index 1 / end
> +
> +        testpmd> flow list 0
> +
> +        Verify there are one rule.
> +
> +        send matched packets::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IP()/TCP(sport=156)/Raw('x' * 80)
> +
> +        Verify packets will be received in queue 1.
> +
> +        send no matched packet::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IP()/TCP(sport=111)/Raw('x' * 80)
> +
> +        Verify packets will not be received in queue 1.
> +
> +    4. flush the rule::
> +        testpmd> flow flush 0
> +
> +        send packets match rule 0::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IP()/TCP(sport=156)/Raw('x' * 80)
> +
> +        packets should be in queue 0.
> +
> +Test Case 4: ipv4-tcp_dport only
> +================================
> +
> +    1. Launch the testpmd::
> +
> +        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --
> disable-rss
> +        testpmd> set fwd rxonly
> +        testpmd> set promisc all off
> +        testpmd> set verbose 1
> +        testpmd> start
> +
> +    3. validate a destination port rule::
> +        testpmd> flow validate 0 ingress pattern eth / ipv4 / tcp dst
> + is 156 / end actions pf / queue index 1 / end
> +
> +        Verify the command can validate::
> +            Flow rule validated
> +
> +    3. create a destination port rule::
> +        testpmd> flow create 0 ingress pattern eth / ipv4 / tcp dst is
> + 156 / end actions pf / queue index 1 / end
> +
> +        testpmd> flow list 0
> +
> +        Verify there are one rule.
> +
> +        send matched packets::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IP()/TCP(dport=156)/Raw('x' * 80)
> +
> +        Verify packets will be received in queue 1.
> +
> +        send no matched packet::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IP()/TCP(dport=111)/Raw('x' * 80)
> +
> +        Verify packets will not be received in queue 1.
> +
> +    4. flush the rule::
> +        testpmd> flow flush 0
> +
> +        send packets match rule 0::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IP()/TCP(dport=156)/Raw('x' * 80)
> +
> +        packets should be in queue 0.
> +
> +Test Case 5: ipv4-sctp_sport only
> +================================
> +
> +    1. Launch the testpmd::
> +
> +        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --
> disable-rss
> +        testpmd> set fwd rxonly
> +        testpmd> set promisc all off
> +        testpmd> set verbose 1
> +        testpmd> start
> +
> +    2. validate a source port rule::
> +        testpmd> flow validate 0 ingress pattern eth / ipv4 / sctp src
> + is 156 / end actions pf / queue index 1 / end
> +
> +        Verify the command can validate::
> +            Flow rule validated
> +
> +    3. create a source port rule::
> +        testpmd> flow create 0 ingress pattern eth / ipv4 / sctp src is
> + 156 / end actions pf / queue index 1 / end
> +
> +        testpmd> flow list 0
> +
> +        Verify there are one rule.
> +
> +        send matched packets::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IP()/SCTP(sport=156)/Raw('x' * 80)
> +
> +        Verify packets will be received in queue 1.
> +
> +        send no matched packet::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IP()/SCTP(sport=111)/Raw('x' * 80)
> +
> +        Verify packets will not be received in queue 1.
> +
> +    4. flush the rule::
> +        testpmd> flow flush 0
> +
> +        send packets match rule 0::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IP()/SCTP(sport=156)/Raw('x' * 80)
> +
> +        packets should be in queue 0.
> +
> +Test Case 6: ipv4-sctp_dport only
> +================================
> +
> +    1. Launch the testpmd::
> +
> +        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --
> disable-rss
> +        testpmd> set fwd rxonly
> +        testpmd> set promisc all off
> +        testpmd> set verbose 1
> +        testpmd> start
> +
> +    2. validate a destination port rule::
> +        testpmd> flow validate 0 ingress pattern eth / ipv4 / sctp dst
> + is 156 / end actions pf / queue index 1 / end
> +
> +        Verify the command can validate::
> +            Flow rule validated
> +
> +    3. create a destination port rule::
> +        testpmd> flow create 0 ingress pattern eth / ipv4 / sctp dst is
> + 156 / end actions pf / queue index 1 / end
> +
> +        testpmd> flow list 0
> +
> +        Verify there are one rule.
> +
> +        send matched packets::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IP()/SCTP(dport=156)/Raw('x' * 80)
> +
> +        Verify packets will be received in queue 1.
> +
> +        send no matched packet::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IP()/SCTP(dport=111)/Raw('x' * 80)
> +
> +        Verify packets will not be received in queue 1.
> +
> +    4. flush the rule::
> +        testpmd> flow flush 0
> +
> +        send packets match rule 0::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IP()/SCTP(dport=156)/Raw('x' * 80)
> +
> +        packets should be in queue 0.
> +
> +Test Case 7: ipv6-udp_sport only
> +================================
> +
> +    1. Launch the testpmd::
> +
> +        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --
> disable-rss
> +        testpmd> set fwd rxonly
> +        testpmd> set promisc all off
> +        testpmd> set verbose 1
> +        testpmd> start
> +
> +    2. validate a source port rule::
> +        testpmd> flow validate 0 ingress pattern eth / ipv6 / udp src
> + is 156 / end actions pf / queue index 1 / end
> +
> +        Verify the command can validate::
> +            Flow rule validated
> +
> +    3. create a source port rule::
> +        testpmd> flow create 0 ingress pattern eth / ipv6 / udp src is
> + 156 / end actions pf / queue index 1 / end
> +
> +        testpmd> flow list 0
> +
> +        Verify there are one rule.
> +
> +        send matched packets::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/UDP(sport=156)/Raw('x' * 80)
> +
> +        Verify packets will be received in queue 1.
> +
> +        send no matched packet::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/UDP(sport=111)/Raw('x' * 80)
> +
> +        Verify packets will not be received in queue 1.
> +
> +    4. flush the rule::
> +        testpmd> flow flush 0
> +
> +        send packets match rule 0::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/UDP(sport=156)/Raw('x' * 80)
> +
> +        packets should be in queue 0.
> +
> +Test Case 8: ipv6-udp_dport only
> +================================
> +
> +    1. Launch the testpmd::
> +
> +        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --
> disable-rss
> +        testpmd> set fwd rxonly
> +        testpmd> set promisc all off
> +        testpmd> set verbose 1
> +        testpmd> start
> +
> +    2. validate a destination port rule::
> +        testpmd> flow validate 0 ingress pattern eth / ipv6 / udp dst
> + is 156 / end actions pf / queue index 1 / end
> +
> +        Verify the command can validate::
> +            Flow rule validated
> +
> +    3. create a destination port rule::
> +        testpmd> flow create 0 ingress pattern eth / ipv6 / udp dst is
> + 156 / end actions pf / queue index 1 / end
> +
> +        testpmd> flow list 0
> +
> +        Verify there are one rule.
> +
> +        send matched packets::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/UDP(dport=156)/Raw('x' * 80)
> +
> +        Verify packets will be received in queue 1.
> +
> +        send no matched packet::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/UDP(dport=111)/Raw('x' * 80)
> +
> +        Verify packets will not be received in queue 1.
> +
> +    4. flush the rule::
> +        testpmd> flow flush 0
> +
> +        send packets match rule 0::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/UDP(dport=156)/Raw('x' * 80)
> +
> +        packets should be in queue 0.
> +
> +Test Case 9: ipv6-tcp_sport only
> +================================
> +
> +    1. Launch the testpmd::
> +
> +        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --
> disable-rss
> +        testpmd> set fwd rxonly
> +        testpmd> set promisc all off
> +        testpmd> set verbose 1
> +        testpmd> start
> +
> +    2. validate a source port rule::
> +        testpmd> flow validate 0 ingress pattern eth / ipv6 / tcp src
> + is 156 / end actions pf / queue index 1 / end
> +
> +        Verify the command can validate::
> +            Flow rule validated
> +
> +    3. testpmd> flow create 0 ingress pattern eth / ipv6 / tcp src is
> + 156 / end actions pf / queue index 1 / end
> +
> +        testpmd> flow list 0
> +
> +        Verify there are one rule.
> +
> +        send matched packets::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/TCP(sport=156)/Raw('x' * 80)
> +
> +        Verify packets will be received in queue 1.
> +
> +        send no matched packet::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/TCP(sport=111)/Raw('x' * 80)
> +
> +        Verify packets will not be received in queue 1.
> +
> +    4. flush the rule::
> +        testpmd> flow flush 0
> +
> +        send packets match rule 0::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/TCP(sport=156)/Raw('x' * 80)
> +
> +        packets should be in queue 0.
> +
> +Test Case 10: ipv6-tcp_dport only
> +================================
> +
> +    1. Launch the testpmd::
> +
> +        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --
> disable-rss
> +        testpmd> set fwd rxonly
> +        testpmd> set promisc all off
> +        testpmd> set verbose 1
> +        testpmd> start
> +
> +    3. validate a destination port rule::
> +        testpmd> flow validate 0 ingress pattern eth / ipv6 / tcp dst
> + is 156 / end actions pf / queue index 1 / end
> +
> +        Verify the command can validate::
> +            Flow rule validated
> +
> +    3. create a destination port rule::
> +        testpmd> flow create 0 ingress pattern eth / ipv6 / tcp dst is
> + 156 / end actions pf / queue index 1 / end
> +
> +        testpmd> flow list 0
> +
> +        Verify there are one rule.
> +
> +        send matched packets::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/TCP(dport=156)/Raw('x' * 80)
> +
> +        Verify packets will be received in queue 1.
> +
> +        send no matched packet::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/TCP(dport=111)/Raw('x' * 80)
> +
> +        Verify packets will not be received in queue 1.
> +
> +    4. flush the rule::
> +        testpmd> flow flush 0
> +
> +        send packets match rule 0::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/TCP(dport=156)/Raw('x' * 80)
> +
> +        packets should be in queue 0.
> +
> +Test Case 11: ipv6-sctp_sport only
> +================================
> +
> +    1. Launch the testpmd::
> +
> +        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --
> disable-rss
> +        testpmd> set fwd rxonly
> +        testpmd> set promisc all off
> +        testpmd> set verbose 1
> +        testpmd> start
> +
> +    2. validate a source port rule::
> +        testpmd> flow validate 0 ingress pattern eth / ipv6 / sctp src
> + is 156 / end actions pf / queue index 1 / end
> +
> +        Verify the command can validate::
> +            Flow rule validated
> +
> +    3. create a source port rule::
> +        testpmd> flow create 0 ingress pattern eth / ipv6 / sctp src is
> + 156 / end actions pf / queue index 1 / end
> +
> +        testpmd> flow list 0
> +
> +        Verify there are one rule.
> +
> +        send matched packets::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/SCTP(sport=156)/Raw('x' * 80)
> +
> +        Verify packets will be received in queue 1.
> +
> +        send no matched packet::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/SCTP(sport=111)/Raw('x' * 80)
> +
> +        Verify packets will not be received in queue 1.
> +
> +    4. flush the rule::
> +        testpmd> flow flush 0
> +
> +        send packets match rule 0::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/SCTP(sport=156)/Raw('x' * 80)
> +
> +        packets should be in queue 0.
> +
> +Test Case 12: ipv6-sctp_dport only
> +================================
> +
> +    1. Launch the testpmd::
> +
> +        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --
> disable-rss
> +        testpmd> set fwd rxonly
> +        testpmd> set promisc all off
> +        testpmd> set verbose 1
> +        testpmd> start
> +
> +    2. validate a destination port rule::
> +        testpmd> flow validate 0 ingress pattern eth / ipv6 / sctp dst
> + is 156 / end actions pf / queue index 1 / end
> +
> +        Verify the command can validate::
> +            Flow rule validated
> +
> +    3. create a destination port rule::
> +        testpmd> flow create 0 ingress pattern eth / ipv6 / sctp dst is
> + 156 / end actions pf / queue index 1 / end
> +
> +        testpmd> flow list 0
> +
> +        Verify there are one rule.
> +
> +        send matched packets::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/SCTP(dport=156)/Raw('x' * 80)
> +
> +        Verify packets will be received in queue 1.
> +
> +        send no matched packet::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/SCTP(dport=111)/Raw('x' * 80)
> +
> +        Verify packets will not be received in queue 1.
> +
> +    4. flush the rule::
> +        testpmd> flow flush 0
> +
> +        send packets match rule 0::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/SCTP(dport=156)/Raw('x' * 80)
> +
> +        packets should be in queue 0.
> +
> +Test Case 13: multi-rule
> +============================================================
> +
> +    1. Launch the testpmd::
> +
> +        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --
> disable-rss
> +        testpmd> set fwd rxonly
> +        testpmd> set promisc all off
> +        testpmd> set verbose 1
> +        testpmd> start
> +
> +    2. create multi-rule with different input set rules::
> +        creat rules::
> +            testpmd> flow create 0 ingress pattern eth / ipv4 / udp src is 11 / end
> actions pf / queue index 1 / end
> +            testpmd> flow create 0 ingress pattern eth / ipv4 / tcp src is 22 / end
> actions pf / queue index 2 / end
> +            testpmd> flow create 0 ingress pattern eth / ipv4 / sctp src is 33 / end
> actions pf / queue index 3 / end
> +            testpmd> flow create 0 ingress pattern eth / ipv4 / udp dst is 44 / end
> actions pf / queue index 4 / end
> +            testpmd> flow create 0 ingress pattern eth / ipv4 / tcp dst is 55 / end
> actions pf / queue index 5 / end
> +            testpmd> flow create 0 ingress pattern eth / ipv4 / sctp
> + dst is 66 / end actions pf / queue index 6 / end
> +
> +        send packets::
> +            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/UDP(sport=11)/Raw('x' * 80)
> +            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/TCP(sport=22)/Raw('x' * 80)
> +            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/SCTP(sport=33)/Raw('x' * 80)
> +            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/UDP(dport=44)/Raw('x' * 80)
> +            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/TCP(dport=55)/Raw('x' * 80)
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IP()/SCTP(dport=66)/Raw('x' * 80)
> +
> +        Verify each packet can match the right queue.
> +
> +    3. destroy the rule::
> +        testpmd> flow destroy 0 rule 0
> +
> +        send packets match rule 0::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IP()/UDP(sport=11)/Raw('x' * 80)
> +
> +        packets should be in queue 0.
> +
> +    4. flush the rule::
> +        testpmd> flow flush 0
> +
> +        send packets match rule 0::
> +            p =
> + Ether(dst="3C:FD:FE:CF:31:D8")/IP()/TCP(sport=22)/Raw('x' * 80)
> +
> +        packets should be in queue 0.
> +
> +Test Case 3: NEGATIVE_TEST
> +====================================
> +    Prerequisites
> +
> +    1. bind the port to dpdk driver in DUT::
> +
> +        modprobe vfio-pci
> +        usertools/dpdk-devbind.py --force --bind=vfio-pci 0000:81:00.0
> +
> +    2. Launch the testpmd::
> +
> +        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --
> disable-rss
> +        testpmd> set fwd rxonly
> +        testpmd> set promisc all off
> +        testpmd> set verbose 1
> +        testpmd> start
> +
> +1. rules can not create
> +
> +    1) unsupported rules::
> +        create rules::
> +            testpmd> flow create 0 ingress pattern eth / ipv4 / udp src
> + is 156 dst is 156 / end actions pf / queue index 1 / end
> +
> +        Verify rules can not create.
> +
> +    2) conflicted rules::
> +        create one rule::
> +            testpmd> flow create 0 ingress pattern eth / ipv4 / udp src
> + is 156 / end actions pf / queue index 1 / end
> +
> +        create conflicted rules::
> +            testpmd> flow create 0 ingress pattern eth / ipv4 / udp src
> + is 156 / end actions pf / queue index 2 / end
> +
> +        Verify rules can not create.
> \ No newline at end of file
> --
> 2.17.1
diff mbox series

Patch

diff --git a/test_plans/cloud_filter_with_l4_port_test_plan.rst b/test_plans/cloud_filter_with_l4_port_test_plan.rst
new file mode 100644
index 0000000..9143dae
--- /dev/null
+++ b/test_plans/cloud_filter_with_l4_port_test_plan.rst
@@ -0,0 +1,631 @@ 
+.. Copyright (c) <2020>, Intel Corporation
+   All rights reserved.
+
+   Redistribution and use in source and binary forms, with or without
+   modification, are permitted provided that the following conditions
+   are met:
+
+   - Redistributions of source code must retain the above copyright
+     notice, this list of conditions and the following disclaimer.
+
+   - Redistributions in binary form must reproduce the above copyright
+     notice, this list of conditions and the following disclaimer in
+     the documentation and/or other materials provided with the
+     distribution.
+
+   - Neither the name of Intel Corporation nor the names of its
+     contributors may be used to endorse or promote products derived
+     from this software without specific prior written permission.
+
+   THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+   "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+   LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+   FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+   COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
+   INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+   (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+   SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+   HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+   STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+   ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+   OF THE POSSIBILITY OF SUCH DAMAGE.
+
+===================================
+Cloud filter with l4 port test plan
+===================================
+
+Prerequisites
+=============
+
+1. Hardware:
+   Fortville
+  
+2. software: 
+   dpdk: http://dpdk.org/git/dpdk
+   scapy: http://www.secdev.org/projects/scapy/
+
+3. bind the pf to dpdk driver::
+
+    ./usertools/dpdk-devbind.py --force --bind=vfio-pci 0000:81:00.0
+
+Test Case 1: ipv4-udp_sport only
+================================
+
+    1. Launch the testpmd::
+
+        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --disable-rss
+        testpmd> set fwd rxonly
+        testpmd> set promisc all off
+        testpmd> set verbose 1
+        testpmd> start
+
+    2. validate a source port rule::
+        testpmd> flow validate 0 ingress pattern eth / ipv4 / udp src is 156 / end actions pf / queue index 1 / end
+
+        Verify the command can validate::
+            Flow rule validated
+
+    3. create a source port rule::
+        testpmd> flow create 0 ingress pattern eth / ipv4 / udp src is 156 / end actions pf / queue index 1 / end
+
+        testpmd> flow list 0
+
+        Verify there are one rule.
+
+        send matched packets::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/UDP(sport=156)/Raw('x' * 80)
+
+        Verify packets will be received in queue 1.
+
+        send no matched packet::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/UDP(sport=111)/Raw('x' * 80)
+
+        Verify packets will not be received in queue 1.
+
+    4. flush the rule::
+        testpmd> flow flush 0
+
+        send packets match rule 0::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/UDP(sport=156)/Raw('x' * 80)
+
+        packets should be in queue 0.
+
+Test Case 2: ipv4-udp_dport only
+================================
+
+    1. Launch the testpmd::
+
+        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --disable-rss
+        testpmd> set fwd rxonly
+        testpmd> set promisc all off
+        testpmd> set verbose 1
+        testpmd> start
+
+    2. validate a destination port rule::
+        testpmd> flow validate 0 ingress pattern eth / ipv4 / udp dst is 156 / end actions pf / queue index 1 / end
+
+        Verify the command can validate::
+            Flow rule validated
+
+    3. create a destination port rule::
+        testpmd> flow create 0 ingress pattern eth / ipv4 / udp dst is 156 / end actions pf / queue index 1 / end
+
+        testpmd> flow list 0
+
+        Verify there are one rule.
+
+        send matched packets::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/UDP(dport=156)/Raw('x' * 80)
+
+        Verify packets will be received in queue 1.
+
+        send no matched packet::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/UDP(dport=111)/Raw('x' * 80)
+
+        Verify packets will not be received in queue 1.
+
+    4. flush the rule::
+        testpmd> flow flush 0
+
+        send packets match rule 0::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/UDP(dport=156)/Raw('x' * 80)
+
+        packets should be in queue 0.
+
+Test Case 3: ipv4-tcp_sport only
+================================
+
+    1. Launch the testpmd::
+
+        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --disable-rss
+        testpmd> set fwd rxonly
+        testpmd> set promisc all off
+        testpmd> set verbose 1
+        testpmd> start
+
+    2. validate a source port rule::
+        testpmd> flow validate 0 ingress pattern eth / ipv4 / tcp src is 156 / end actions pf / queue index 1 / end
+
+        Verify the command can validate::
+            Flow rule validated
+
+    3. testpmd> flow create 0 ingress pattern eth / ipv4 / tcp src is 156 / end actions pf / queue index 1 / end
+
+        testpmd> flow list 0
+
+        Verify there are one rule.
+
+        send matched packets::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/TCP(sport=156)/Raw('x' * 80)
+
+        Verify packets will be received in queue 1.
+
+        send no matched packet::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/TCP(sport=111)/Raw('x' * 80)
+
+        Verify packets will not be received in queue 1.
+
+    4. flush the rule::
+        testpmd> flow flush 0
+
+        send packets match rule 0::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/TCP(sport=156)/Raw('x' * 80)
+
+        packets should be in queue 0.
+
+Test Case 4: ipv4-tcp_dport only
+================================
+
+    1. Launch the testpmd::
+
+        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --disable-rss
+        testpmd> set fwd rxonly
+        testpmd> set promisc all off
+        testpmd> set verbose 1
+        testpmd> start
+
+    3. validate a destination port rule::
+        testpmd> flow validate 0 ingress pattern eth / ipv4 / tcp dst is 156 / end actions pf / queue index 1 / end
+
+        Verify the command can validate::
+            Flow rule validated
+
+    3. create a destination port rule::
+        testpmd> flow create 0 ingress pattern eth / ipv4 / tcp dst is 156 / end actions pf / queue index 1 / end
+
+        testpmd> flow list 0
+
+        Verify there are one rule.
+
+        send matched packets::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/TCP(dport=156)/Raw('x' * 80)
+
+        Verify packets will be received in queue 1.
+
+        send no matched packet::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/TCP(dport=111)/Raw('x' * 80)
+
+        Verify packets will not be received in queue 1.
+
+    4. flush the rule::
+        testpmd> flow flush 0
+
+        send packets match rule 0::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/TCP(dport=156)/Raw('x' * 80)
+
+        packets should be in queue 0.
+
+Test Case 5: ipv4-sctp_sport only
+================================
+
+    1. Launch the testpmd::
+
+        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --disable-rss
+        testpmd> set fwd rxonly
+        testpmd> set promisc all off
+        testpmd> set verbose 1
+        testpmd> start
+
+    2. validate a source port rule::
+        testpmd> flow validate 0 ingress pattern eth / ipv4 / sctp src is 156 / end actions pf / queue index 1 / end
+
+        Verify the command can validate::
+            Flow rule validated
+
+    3. create a source port rule::
+        testpmd> flow create 0 ingress pattern eth / ipv4 / sctp src is 156 / end actions pf / queue index 1 / end
+
+        testpmd> flow list 0
+
+        Verify there are one rule.
+
+        send matched packets::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/SCTP(sport=156)/Raw('x' * 80)
+
+        Verify packets will be received in queue 1.
+
+        send no matched packet::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/SCTP(sport=111)/Raw('x' * 80)
+
+        Verify packets will not be received in queue 1.
+
+    4. flush the rule::
+        testpmd> flow flush 0
+
+        send packets match rule 0::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/SCTP(sport=156)/Raw('x' * 80)
+
+        packets should be in queue 0.
+
+Test Case 6: ipv4-sctp_dport only
+================================
+
+    1. Launch the testpmd::
+
+        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --disable-rss
+        testpmd> set fwd rxonly
+        testpmd> set promisc all off
+        testpmd> set verbose 1
+        testpmd> start
+
+    2. validate a destination port rule::
+        testpmd> flow validate 0 ingress pattern eth / ipv4 / sctp dst is 156 / end actions pf / queue index 1 / end
+
+        Verify the command can validate::
+            Flow rule validated
+
+    3. create a destination port rule::
+        testpmd> flow create 0 ingress pattern eth / ipv4 / sctp dst is 156 / end actions pf / queue index 1 / end
+
+        testpmd> flow list 0
+
+        Verify there are one rule.
+
+        send matched packets::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/SCTP(dport=156)/Raw('x' * 80)
+
+        Verify packets will be received in queue 1.
+
+        send no matched packet::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/SCTP(dport=111)/Raw('x' * 80)
+
+        Verify packets will not be received in queue 1.
+
+    4. flush the rule::
+        testpmd> flow flush 0
+
+        send packets match rule 0::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/SCTP(dport=156)/Raw('x' * 80)
+
+        packets should be in queue 0.
+
+Test Case 7: ipv6-udp_sport only
+================================
+
+    1. Launch the testpmd::
+
+        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --disable-rss
+        testpmd> set fwd rxonly
+        testpmd> set promisc all off
+        testpmd> set verbose 1
+        testpmd> start
+
+    2. validate a source port rule::
+        testpmd> flow validate 0 ingress pattern eth / ipv6 / udp src is 156 / end actions pf / queue index 1 / end
+
+        Verify the command can validate::
+            Flow rule validated
+
+    3. create a source port rule::
+        testpmd> flow create 0 ingress pattern eth / ipv6 / udp src is 156 / end actions pf / queue index 1 / end
+
+        testpmd> flow list 0
+
+        Verify there are one rule.
+
+        send matched packets::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/UDP(sport=156)/Raw('x' * 80)
+
+        Verify packets will be received in queue 1.
+
+        send no matched packet::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/UDP(sport=111)/Raw('x' * 80)
+
+        Verify packets will not be received in queue 1.
+
+    4. flush the rule::
+        testpmd> flow flush 0
+
+        send packets match rule 0::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/UDP(sport=156)/Raw('x' * 80)
+
+        packets should be in queue 0.
+
+Test Case 8: ipv6-udp_dport only
+================================
+
+    1. Launch the testpmd::
+
+        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --disable-rss
+        testpmd> set fwd rxonly
+        testpmd> set promisc all off
+        testpmd> set verbose 1
+        testpmd> start
+
+    2. validate a destination port rule::
+        testpmd> flow validate 0 ingress pattern eth / ipv6 / udp dst is 156 / end actions pf / queue index 1 / end
+
+        Verify the command can validate::
+            Flow rule validated
+
+    3. create a destination port rule::
+        testpmd> flow create 0 ingress pattern eth / ipv6 / udp dst is 156 / end actions pf / queue index 1 / end
+
+        testpmd> flow list 0
+
+        Verify there are one rule.
+
+        send matched packets::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/UDP(dport=156)/Raw('x' * 80)
+
+        Verify packets will be received in queue 1.
+
+        send no matched packet::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/UDP(dport=111)/Raw('x' * 80)
+
+        Verify packets will not be received in queue 1.
+
+    4. flush the rule::
+        testpmd> flow flush 0
+
+        send packets match rule 0::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/UDP(dport=156)/Raw('x' * 80)
+
+        packets should be in queue 0.
+
+Test Case 9: ipv6-tcp_sport only
+================================
+
+    1. Launch the testpmd::
+
+        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --disable-rss
+        testpmd> set fwd rxonly
+        testpmd> set promisc all off
+        testpmd> set verbose 1
+        testpmd> start
+
+    2. validate a source port rule::
+        testpmd> flow validate 0 ingress pattern eth / ipv6 / tcp src is 156 / end actions pf / queue index 1 / end
+
+        Verify the command can validate::
+            Flow rule validated
+
+    3. testpmd> flow create 0 ingress pattern eth / ipv6 / tcp src is 156 / end actions pf / queue index 1 / end
+
+        testpmd> flow list 0
+
+        Verify there are one rule.
+
+        send matched packets::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/TCP(sport=156)/Raw('x' * 80)
+
+        Verify packets will be received in queue 1.
+
+        send no matched packet::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/TCP(sport=111)/Raw('x' * 80)
+
+        Verify packets will not be received in queue 1.
+
+    4. flush the rule::
+        testpmd> flow flush 0
+
+        send packets match rule 0::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/TCP(sport=156)/Raw('x' * 80)
+
+        packets should be in queue 0.
+
+Test Case 10: ipv6-tcp_dport only
+================================
+
+    1. Launch the testpmd::
+
+        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --disable-rss
+        testpmd> set fwd rxonly
+        testpmd> set promisc all off
+        testpmd> set verbose 1
+        testpmd> start
+
+    3. validate a destination port rule::
+        testpmd> flow validate 0 ingress pattern eth / ipv6 / tcp dst is 156 / end actions pf / queue index 1 / end
+
+        Verify the command can validate::
+            Flow rule validated
+
+    3. create a destination port rule::
+        testpmd> flow create 0 ingress pattern eth / ipv6 / tcp dst is 156 / end actions pf / queue index 1 / end
+
+        testpmd> flow list 0
+
+        Verify there are one rule.
+
+        send matched packets::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/TCP(dport=156)/Raw('x' * 80)
+
+        Verify packets will be received in queue 1.
+
+        send no matched packet::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/TCP(dport=111)/Raw('x' * 80)
+
+        Verify packets will not be received in queue 1.
+
+    4. flush the rule::
+        testpmd> flow flush 0
+
+        send packets match rule 0::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/TCP(dport=156)/Raw('x' * 80)
+
+        packets should be in queue 0.
+
+Test Case 11: ipv6-sctp_sport only
+================================
+
+    1. Launch the testpmd::
+
+        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --disable-rss
+        testpmd> set fwd rxonly
+        testpmd> set promisc all off
+        testpmd> set verbose 1
+        testpmd> start
+
+    2. validate a source port rule::
+        testpmd> flow validate 0 ingress pattern eth / ipv6 / sctp src is 156 / end actions pf / queue index 1 / end
+
+        Verify the command can validate::
+            Flow rule validated
+
+    3. create a source port rule::
+        testpmd> flow create 0 ingress pattern eth / ipv6 / sctp src is 156 / end actions pf / queue index 1 / end
+
+        testpmd> flow list 0
+
+        Verify there are one rule.
+
+        send matched packets::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/SCTP(sport=156)/Raw('x' * 80)
+
+        Verify packets will be received in queue 1.
+
+        send no matched packet::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/SCTP(sport=111)/Raw('x' * 80)
+
+        Verify packets will not be received in queue 1.
+
+    4. flush the rule::
+        testpmd> flow flush 0
+
+        send packets match rule 0::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/SCTP(sport=156)/Raw('x' * 80)
+
+        packets should be in queue 0.
+
+Test Case 12: ipv6-sctp_dport only
+================================
+
+    1. Launch the testpmd::
+
+        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --disable-rss
+        testpmd> set fwd rxonly
+        testpmd> set promisc all off
+        testpmd> set verbose 1
+        testpmd> start
+
+    2. validate a destination port rule::
+        testpmd> flow validate 0 ingress pattern eth / ipv6 / sctp dst is 156 / end actions pf / queue index 1 / end
+
+        Verify the command can validate::
+            Flow rule validated
+
+    3. create a destination port rule::
+        testpmd> flow create 0 ingress pattern eth / ipv6 / sctp dst is 156 / end actions pf / queue index 1 / end
+
+        testpmd> flow list 0
+
+        Verify there are one rule.
+
+        send matched packets::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/SCTP(dport=156)/Raw('x' * 80)
+
+        Verify packets will be received in queue 1.
+
+        send no matched packet::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/SCTP(dport=111)/Raw('x' * 80)
+
+        Verify packets will not be received in queue 1.
+
+    4. flush the rule::
+        testpmd> flow flush 0
+
+        send packets match rule 0::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IPv6()/SCTP(dport=156)/Raw('x' * 80)
+
+        packets should be in queue 0.
+
+Test Case 13: multi-rule
+============================================================
+
+    1. Launch the testpmd::
+
+        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --disable-rss
+        testpmd> set fwd rxonly
+        testpmd> set promisc all off
+        testpmd> set verbose 1
+        testpmd> start
+
+    2. create multi-rule with different input set rules::
+        creat rules::
+            testpmd> flow create 0 ingress pattern eth / ipv4 / udp src is 11 / end actions pf / queue index 1 / end
+            testpmd> flow create 0 ingress pattern eth / ipv4 / tcp src is 22 / end actions pf / queue index 2 / end
+            testpmd> flow create 0 ingress pattern eth / ipv4 / sctp src is 33 / end actions pf / queue index 3 / end
+            testpmd> flow create 0 ingress pattern eth / ipv4 / udp dst is 44 / end actions pf / queue index 4 / end
+            testpmd> flow create 0 ingress pattern eth / ipv4 / tcp dst is 55 / end actions pf / queue index 5 / end
+            testpmd> flow create 0 ingress pattern eth / ipv4 / sctp dst is 66 / end actions pf / queue index 6 / end
+
+        send packets::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/UDP(sport=11)/Raw('x' * 80)
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/TCP(sport=22)/Raw('x' * 80)
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/SCTP(sport=33)/Raw('x' * 80)
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/UDP(dport=44)/Raw('x' * 80)
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/TCP(dport=55)/Raw('x' * 80)
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/SCTP(dport=66)/Raw('x' * 80)
+
+        Verify each packet can match the right queue.
+
+    3. destroy the rule::
+        testpmd> flow destroy 0 rule 0
+
+        send packets match rule 0::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/UDP(sport=11)/Raw('x' * 80)
+
+        packets should be in queue 0.
+
+    4. flush the rule::
+        testpmd> flow flush 0
+
+        send packets match rule 0::
+            p = Ether(dst="3C:FD:FE:CF:31:D8")/IP()/TCP(sport=22)/Raw('x' * 80)
+
+        packets should be in queue 0.
+
+Test Case 3: NEGATIVE_TEST
+====================================
+    Prerequisites
+
+    1. bind the port to dpdk driver in DUT::
+
+        modprobe vfio-pci
+        usertools/dpdk-devbind.py --force --bind=vfio-pci 0000:81:00.0
+
+    2. Launch the testpmd::
+
+        ./testpmd -l 0-3 -n 4 -w 81:00.0 --file-prefix=test -- -i --rxq=16 --txq=16 --disable-rss
+        testpmd> set fwd rxonly
+        testpmd> set promisc all off
+        testpmd> set verbose 1
+        testpmd> start
+
+1. rules can not create
+
+    1) unsupported rules::
+        create rules::
+            testpmd> flow create 0 ingress pattern eth / ipv4 / udp src is 156 dst is 156 / end actions pf / queue index 1 / end
+
+        Verify rules can not create.
+
+    2) conflicted rules::
+        create one rule::
+            testpmd> flow create 0 ingress pattern eth / ipv4 / udp src is 156 / end actions pf / queue index 1 / end
+
+        create conflicted rules::
+            testpmd> flow create 0 ingress pattern eth / ipv4 / udp src is 156 / end actions pf / queue index 2 / end
+
+        Verify rules can not create.
\ No newline at end of file