[V2,3/4] tests/cvl_fdir:add esp flow test case
Commit Message
add 21.08 new feature testcase,this feature support esp flow to match outer ip header.
take ip src/dst and spi for inputset,add 4 new cases in cvl_fdir test suite.
Signed-off-by: Zhimin Huang <zhiminx.huang@intel.com>
---
tests/TestSuite_cvl_fdir.py | 336 ++++++++++++++++++++++++++++++++++++
1 file changed, 336 insertions(+)
Comments
> -----Original Message-----
> From: Huang, ZhiminX <zhiminx.huang@intel.com>
> Sent: Wednesday, September 15, 2021 2:12 AM
> To: dts@dpdk.org
> Cc: Lin, Xueqin <xueqin.lin@intel.com>; Huang, ZhiminX
> <zhiminx.huang@intel.com>
> Subject: [dts] [PATCH V2 3/4] tests/cvl_fdir:add esp flow test case
>
> add 21.08 new feature testcase,this feature support esp flow to match outer
> ip header.
> take ip src/dst and spi for inputset,add 4 new cases in cvl_fdir test suite.
>
> Signed-off-by: Zhimin Huang <zhiminx.huang@intel.com>
Acked-by: Xueqin Lin <xueqin.lin@intel.com>
> ---
> tests/TestSuite_cvl_fdir.py | 336 ++++++++++++++++++++++++++++++++++++
> 1 file changed, 336 insertions(+)
>
> diff --git a/tests/TestSuite_cvl_fdir.py b/tests/TestSuite_cvl_fdir.py index
> 0c3a1917..9cf3c352 100644
> --- a/tests/TestSuite_cvl_fdir.py
> +++ b/tests/TestSuite_cvl_fdir.py
> @@ -334,6 +334,50 @@ L2_Ethertype = [
> 'Ether(dst="00:11:22:33:44:55",type=0x88f7)/"\\x00\\x02"',
> 'Ether(dst="00:11:22:33:44:55",type=0x8847)']
>
> +MAC_IPV4_ESP = {
> + "matched": [
> +
> "Ether(dst='00:11:22:33:44:55')/IP(src='192.168.0.20',dst='192.168.0.21',prot
> o=50)/ESP(spi=7)/Raw('x'*480)",
> + ],
> + "unmatched": [
> +
> "Ether(dst='00:11:22:33:44:55')/IP(src='192.168.0.22',dst='192.168.0.21',prot
> o=50)/ESP(spi=7)/Raw('x'*480)",
> +
> "Ether(dst='00:11:22:33:44:55')/IP(src='192.168.0.20',dst='192.168.0.11',prot
> o=50)/ESP(spi=7)/Raw('x'*480)",
> +
> "Ether(dst='00:11:22:33:44:55')/IP(src='192.168.0.20',dst='192.168.0.21',prot
> o=50)/ESP(spi=17)/Raw('x'*480)",
> + ]
> +}
> +
> +MAC_IPV6_ESP = {
> + "matched": [
> +
> "Ether(dst='00:11:22:33:44:55')/IPv6(src='2001::1',dst='2001::2',nh=50)/ESP(s
> pi=7)/Raw('x'*480)",
> + ],
> + "unmatched": [
> +
> "Ether(dst='00:11:22:33:44:55')/IPv6(src='1111:2222:3333:4444:5555:6666:77
> 77:8888',dst='2001::2',nh=50)/ESP(spi=7)/Raw('x'*480)",
> +
> "Ether(dst='00:11:22:33:44:55')/IPv6(src='2001::1',dst='1111:2222:3333:4444:
> 5555:6666:7777:9999',nh=50)/ESP(spi=7)/Raw('x'*480)",
> +
> "Ether(dst='00:11:22:33:44:55')/IPv6(src='2001::1',dst='2001::2',nh=50)/ESP(s
> pi=17)/Raw('x'*480)",
> + ]
> +}
> +
> +MAC_IPV4_NAT_T_ESP = {
> + "matched": [
> +
> "Ether(dst='00:11:22:33:44:55')/IP(src='192.168.0.20',dst='192.168.0.21')/UD
> P(dport=4500)/ESP(spi=7)/Raw('x'*480)",
> + ],
> + "unmatched": [
> +
> "Ether(dst='00:11:22:33:44:55')/IP(src='192.168.0.22',dst='192.168.0.21')/UD
> P(dport=4500)/ESP(spi=7)/Raw('x'*480)",
> +
> "Ether(dst='00:11:22:33:44:55')/IP(src='192.168.0.20',dst='192.168.0.11')/UD
> P(dport=4500)/ESP(spi=7)/Raw('x'*480)",
> +
> "Ether(dst='00:11:22:33:44:55')/IP(src='192.168.0.20',dst='192.168.0.21')/UD
> P(dport=4500)/ESP(spi=77)/Raw('x'*480)",
> + ]
> +}
> +
> +MAC_IPV6_NAT_T_ESP = {
> + "matched": [
> +
> "Ether(dst='00:11:22:33:44:55')/IPv6(src='2001::1',dst='2001::2')/UDP(dport=
> 4500)/ESP(spi=7)/Raw('x'*480)",
> + ],
> + "unmatched": [
> +
> "Ether(dst='00:11:22:33:44:55')/IPv6(src='2001::8',dst='2001::2')/UDP(dport=
> 4500)/ESP(spi=7)/Raw('x'*480)",
> +
> "Ether(dst='00:11:22:33:44:55')/IPv6(src='2001::1',dst='2001::9')/UDP(dport=
> 4500)/ESP(spi=7)/Raw('x'*480)",
> +
> "Ether(dst='00:11:22:33:44:55')/IPv6(src='2001::1',dst='2001::2')/UDP(dport=
> 4500)/ESP(spi=77)/Raw('x'*480)",
> + ]
> +}
> +
> tv_mac_ipv4_pay_queue_index = {
> "name": "test_mac_ipv4_pay_queue_index",
> "rule": "flow create 0 ingress pattern eth dst is 00:11:22:33:44:55 / ipv4 src
> is 192.168.0.20 dst is 192.168.0.21 proto is 255 ttl is 2 tos is 4 / end actions
> queue index 1 / end", @@ -2148,6 +2192,282 @@ vectors_l2_ethertype =
> [tv_l2_ethertype_queue_index,
> tv_l2_ethertype_mark_rss,
> tv_l2_ethertype_mark]
>
> +tv_mac_ipv4_esp_queue_index = {
> + "name": "tv_mac_ipv4_esp_queue_index",
> + "rule": "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is
> 192.168.0.21 / esp spi is 7 / end actions queue index 13 / mark id 7 / end",
> + "scapy_str": {"match": MAC_IPV4_ESP['matched'],
> + "unmatched": MAC_IPV4_ESP['unmatched'],
> + },
> + "check_func": rfc.check_mark,
> + "check_param": {"port_id": 0, "mark_id": 7, "queue": 13} }
> +
> +tv_mac_ipv4_esp_queue_group = {
> + "name": "tv_mac_ipv4_esp_queue_group",
> + "rule": "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is
> 192.168.0.21 / esp spi is 7 / end actions rss queues 1 2 3 4 end / mark id 6 /
> end",
> + "scapy_str": {"match": MAC_IPV4_ESP['matched'],
> + "unmatched": MAC_IPV4_ESP['unmatched'],
> + },
> + "check_func": rfc.check_mark,
> + "check_param": {"port_id": 0, "mark_id": 6, "queue": [1, 2, 3, 4]}
> +}
> +
> +tv_mac_ipv4_esp_passthru = {
> + "name": "tv_mac_ipv4_esp_passthru",
> + "rule": "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is
> 192.168.0.21 / esp spi is 7 / end actions passthru / mark id 1 / end",
> + "scapy_str": {"match": MAC_IPV4_ESP['matched'],
> + "unmatched": MAC_IPV4_ESP['unmatched'],
> + },
> + "check_func": rfc.check_mark,
> + "check_param": {"port_id": 0, "rss": True, "mark_id": 1} }
> +
> +tv_mac_ipv4_esp_drop = {
> + "name": "tv_mac_ipv4_esp_drop",
> + "rule": "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is
> 192.168.0.21 / esp spi is 7 / end actions drop / end",
> + "scapy_str": {"match": MAC_IPV4_ESP['matched'],
> + "unmatched": MAC_IPV4_ESP['unmatched'],
> + },
> + "check_func": rfc.check_mark,
> + "check_param": {"port_id": 0, "drop": 1} }
> +
> +tv_mac_ipv4_esp_mark_rss = {
> + "name": "tv_mac_ipv4_esp_mark_rss",
> + "rule": "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is
> 192.168.0.21 / esp spi is 7 / end actions mark id 2 / rss / end",
> + "scapy_str": {"match": MAC_IPV4_ESP['matched'],
> + "unmatched": MAC_IPV4_ESP['unmatched'],
> + },
> + "check_func": rfc.check_mark,
> + "check_param": {"port_id": 0, "mark_id": 2, "rss": True} }
> +
> +tv_mac_ipv4_esp_mark = {
> + "name": "tv_mac_ipv4_esp_mark",
> + "rule": "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is
> 192.168.0.21 / esp spi is 7 / end actions mark id 15 / end",
> + "scapy_str": {"match": MAC_IPV4_ESP['matched'],
> + "unmatched": MAC_IPV4_ESP['unmatched'],
> + },
> + "check_func": rfc.check_mark,
> + "check_param": {"port_id": 0, "mark_id": 15} }
> +
> +vectors_mac_ipv4_esp = [
> + tv_mac_ipv4_esp_queue_index,
> + tv_mac_ipv4_esp_queue_group,
> + tv_mac_ipv4_esp_passthru,
> + tv_mac_ipv4_esp_drop,
> + tv_mac_ipv4_esp_mark_rss,
> + tv_mac_ipv4_esp_mark,
> +]
> +
> +tv_mac_ipv6_esp_queue_index = {
> + "name": "tv_mac_ipv6_esp_queue_index",
> + "rule": "flow create 0 ingress pattern eth / ipv6 src is 2001::1 dst is 2001::2
> / esp spi is 7 / end actions queue index 13 / mark id 7 / end",
> + "scapy_str": {"match": MAC_IPV6_ESP['matched'],
> + "unmatched": MAC_IPV6_ESP['unmatched'],
> + },
> + "check_func": rfc.check_mark,
> + "check_param": {"port_id": 0, "mark_id": 7, "queue": 13} }
> +
> +tv_mac_ipv6_esp_queue_group = {
> + "name": "tv_mac_ipv6_esp_queue_group",
> + "rule": "flow create 0 ingress pattern eth / ipv6 src is 2001::1 dst is 2001::2
> / esp spi is 7 / end actions rss queues 1 2 3 4 end / mark id 6 / end",
> + "scapy_str": {"match": MAC_IPV6_ESP['matched'],
> + "unmatched": MAC_IPV6_ESP['unmatched'],
> + },
> + "check_func": rfc.check_mark,
> + "check_param": {"port_id": 0, "mark_id": 6, "queue": [1, 2, 3, 4]}
> +}
> +
> +tv_mac_ipv6_esp_passthru = {
> + "name": "tv_mac_ipv6_esp_passthru",
> + "rule": "flow create 0 ingress pattern eth / ipv6 src is 2001::1 dst is 2001::2
> / esp spi is 7 / end actions passthru / mark id 1 / end",
> + "scapy_str": {"match": MAC_IPV6_ESP['matched'],
> + "unmatched": MAC_IPV6_ESP['unmatched'],
> + },
> + "check_func": rfc.check_mark,
> + "check_param": {"port_id": 0, "rss": True, "mark_id": 1} }
> +
> +tv_mac_ipv6_esp_drop = {
> + "name": "tv_mac_ipv6_esp_drop",
> + "rule": "flow create 0 ingress pattern eth / ipv6 src is 2001::1 dst is 2001::2
> / esp spi is 7 / end actions drop / end",
> + "scapy_str": {"match": MAC_IPV6_ESP['matched'],
> + "unmatched": MAC_IPV6_ESP['unmatched'],
> + },
> + "check_func": rfc.check_mark,
> + "check_param": {"port_id": 0, "drop": 1} }
> +
> +tv_mac_ipv6_esp_mark_rss = {
> + "name": "tv_mac_ipv6_esp_mark_rss",
> + "rule": "flow create 0 ingress pattern eth / ipv6 src is 2001::1 dst is 2001::2
> / esp spi is 7 / end actions mark / rss / end",
> + "scapy_str": {"match": MAC_IPV6_ESP['matched'],
> + "unmatched": MAC_IPV6_ESP['unmatched'],
> + },
> + "check_func": rfc.check_mark,
> + "check_param": {"port_id": 0, "mark_id": 0, "rss": True} }
> +
> +tv_mac_ipv6_esp_mark = {
> + "name": "tv_mac_ipv6_esp_mark",
> + "rule": "flow create 0 ingress pattern eth / ipv6 src is 2001::1 dst is 2001::2
> / esp spi is 7 / end actions mark id 15 / end",
> + "scapy_str": {"match": MAC_IPV6_ESP['matched'],
> + "unmatched": MAC_IPV6_ESP['unmatched'],
> + },
> + "check_func": rfc.check_mark,
> + "check_param": {"port_id": 0, "mark_id": 15} }
> +
> +vectors_mac_ipv6_esp = [
> + tv_mac_ipv6_esp_queue_index,
> + tv_mac_ipv6_esp_queue_group,
> + tv_mac_ipv6_esp_passthru,
> + tv_mac_ipv6_esp_drop,
> + tv_mac_ipv6_esp_mark_rss,
> + tv_mac_ipv6_esp_mark,
> +]
> +
> +tv_mac_ipv4_nat_t_esp_queue_index = {
> + "name": "tv_mac_ipv4_nat_t_esp_queue_index",
> + "rule": "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is
> 192.168.0.21 / udp / esp spi is 7 / end actions queue index 13 / mark id 7 /
> end",
> + "scapy_str": {"match": MAC_IPV4_NAT_T_ESP['matched'],
> + "unmatched": MAC_IPV4_NAT_T_ESP['unmatched'],
> + },
> + "check_func": rfc.check_mark,
> + "check_param": {"port_id": 0, "mark_id": 7, "queue": 13} }
> +
> +tv_mac_ipv4_nat_t_esp_queue_group = {
> + "name": "tv_mac_ipv4_nat_t_esp_queue_group",
> + "rule": "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is
> 192.168.0.21 / udp / esp spi is 7 / end actions rss queues 1 2 3 4 end / mark
> id 6 / end",
> + "scapy_str": {"match": MAC_IPV4_NAT_T_ESP['matched'],
> + "unmatched": MAC_IPV4_NAT_T_ESP['unmatched'],
> + },
> + "check_func": rfc.check_mark,
> + "check_param": {"port_id": 0, "mark_id": 6, "queue": [1, 2, 3, 4]}
> +}
> +
> +tv_mac_ipv4_nat_t_esp_passthru = {
> + "name": "tv_mac_ipv4_nat_t_esp_passthru",
> + "rule": "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is
> 192.168.0.21 / udp / esp spi is 7 / end actions passthru / mark id 1 / end",
> + "scapy_str": {"match": MAC_IPV4_NAT_T_ESP['matched'],
> + "unmatched": MAC_IPV4_NAT_T_ESP['unmatched'],
> + },
> + "check_func": rfc.check_mark,
> + "check_param": {"port_id": 0, "rss": True, "mark_id": 1} }
> +
> +tv_mac_ipv4_nat_t_esp_drop = {
> + "name": "tv_mac_ipv4_nat_t_esp_drop",
> + "rule": "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is
> 192.168.0.21 / udp / esp spi is 7 / end actions drop / end",
> + "scapy_str": {"match": MAC_IPV4_NAT_T_ESP['matched'],
> + "unmatched": MAC_IPV4_NAT_T_ESP['unmatched'],
> + },
> + "check_func": rfc.check_mark,
> + "check_param": {"port_id": 0, "drop": 1} }
> +
> +tv_mac_ipv4_nat_t_esp_mark_rss = {
> + "name": "tv_mac_ipv4_nat_t_esp_mark_rss",
> + "rule": "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is
> 192.168.0.21 / udp / esp spi is 7 / end actions mark id 2 / rss / end",
> + "scapy_str": {"match": MAC_IPV4_NAT_T_ESP['matched'],
> + "unmatched": MAC_IPV4_NAT_T_ESP['unmatched'],
> + },
> + "check_func": rfc.check_mark,
> + "check_param": {"port_id": 0, "mark_id": 2, "rss": True} }
> +
> +tv_mac_ipv4_nat_t_esp_mark = {
> + "name": "tv_mac_ipv4_nat_t_esp_mark",
> + "rule": "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is
> 192.168.0.21 / udp / esp spi is 7 / end actions mark id 15 / end",
> + "scapy_str": {"match": MAC_IPV4_NAT_T_ESP['matched'],
> + "unmatched": MAC_IPV4_NAT_T_ESP['unmatched'],
> + },
> + "check_func": rfc.check_mark,
> + "check_param": {"port_id": 0, "mark_id": 15} }
> +
> +vectors_mac_ipv4_nat_t_esp = [
> + tv_mac_ipv4_nat_t_esp_queue_index,
> + tv_mac_ipv4_nat_t_esp_queue_group,
> + tv_mac_ipv4_nat_t_esp_passthru,
> + tv_mac_ipv4_nat_t_esp_drop,
> + tv_mac_ipv4_nat_t_esp_mark_rss,
> + tv_mac_ipv4_nat_t_esp_mark,
> +]
> +
> +tv_mac_ipv6_nat_t_esp_queue_index = {
> + "name": "tv_mac_ipv6_nat_t_esp_queue_index",
> + "rule": "flow create 0 ingress pattern eth / ipv6 src is 2001::1 dst is 2001::2
> / udp / esp spi is 7 / end actions queue index 13 / mark id 7 / end",
> + "scapy_str": {"match": MAC_IPV6_NAT_T_ESP['matched'],
> + "unmatched": MAC_IPV6_NAT_T_ESP['unmatched'],
> + },
> + "check_func": rfc.check_mark,
> + "check_param": {"port_id": 0, "mark_id": 7, "queue": 13} }
> +
> +tv_mac_ipv6_nat_t_esp_queue_group = {
> + "name": "tv_mac_ipv6_nat_t_esp_queue_group",
> + "rule": "flow create 0 ingress pattern eth / ipv6 src is 2001::1 dst is 2001::2
> / udp / esp spi is 7 / end actions rss queues 1 2 3 4 end / mark id 6 / end",
> + "scapy_str": {"match": MAC_IPV6_NAT_T_ESP['matched'],
> + "unmatched": MAC_IPV6_NAT_T_ESP['unmatched'],
> + },
> + "check_func": rfc.check_mark,
> + "check_param": {"port_id": 0, "mark_id": 6, "queue": [1, 2, 3, 4]}
> +}
> +
> +tv_mac_ipv6_nat_t_esp_passthru = {
> + "name": "tv_mac_ipv6_nat_t_esp_passthru",
> + "rule": "flow create 0 ingress pattern eth / ipv6 src is 2001::1 dst is 2001::2
> / udp / esp spi is 7 / end actions passthru / mark id 1 / end",
> + "scapy_str": {"match": MAC_IPV6_NAT_T_ESP['matched'],
> + "unmatched": MAC_IPV6_NAT_T_ESP['unmatched'],
> + },
> + "check_func": rfc.check_mark,
> + "check_param": {"port_id": 0, "rss": True, "mark_id": 1} }
> +
> +tv_mac_ipv6_nat_t_esp_drop = {
> + "name": "tv_mac_ipv6_nat_t_esp_drop",
> + "rule": "flow create 0 ingress pattern eth / ipv6 src is 2001::1 dst is 2001::2
> / udp / esp spi is 7 / end actions drop / end",
> + "scapy_str": {"match": MAC_IPV6_NAT_T_ESP['matched'],
> + "unmatched": MAC_IPV6_NAT_T_ESP['unmatched'],
> + },
> + "check_func": rfc.check_mark,
> + "check_param": {"port_id": 0, "drop": 1} }
> +
> +tv_mac_ipv6_nat_t_esp_mark_rss = {
> + "name": "tv_mac_ipv6_nat_t_esp_mark_rss",
> + "rule": "flow create 0 ingress pattern eth / ipv6 src is 2001::1 dst is 2001::2
> / udp / esp spi is 7 / end actions mark id 2 / rss / end",
> + "scapy_str": {"match": MAC_IPV6_NAT_T_ESP['matched'],
> + "unmatched": MAC_IPV6_NAT_T_ESP['unmatched'],
> + },
> + "check_func": rfc.check_mark,
> + "check_param": {"port_id": 0, "mark_id": 2, "rss": True} }
> +
> +tv_mac_ipv6_nat_t_esp_mark = {
> + "name": "tv_mac_ipv6_nat_t_esp_mark",
> + "rule": "flow create 0 ingress pattern eth / ipv6 src is 2001::1 dst is 2001::2
> / udp / esp spi is 7 / end actions mark id 15 / end",
> + "scapy_str": {"match": MAC_IPV6_NAT_T_ESP['matched'],
> + "unmatched": MAC_IPV6_NAT_T_ESP['unmatched'],
> + },
> + "check_func": rfc.check_mark,
> + "check_param": {"port_id": 0, "mark_id": 15} }
> +
> +vectors_mac_ipv6_nat_t_esp = [
> + tv_mac_ipv6_nat_t_esp_queue_index,
> + tv_mac_ipv6_nat_t_esp_queue_group,
> + tv_mac_ipv6_nat_t_esp_passthru,
> + tv_mac_ipv6_nat_t_esp_drop,
> + tv_mac_ipv6_nat_t_esp_mark_rss,
> + tv_mac_ipv6_nat_t_esp_mark,
> +]
> +
> class TestCVLFdir(TestCase):
>
> def query_count(self, hits_set, hits, port_id=0, rule_id=0):
> @@ -3183,6 +3503,22 @@ class TestCVLFdir(TestCase):
> def test_l2_ethertype(self):
> self._multirules_process(vectors_l2_ethertype)
>
> + @skip_unsupported_pkg('os default')
> + def test_mac_ipv4_esp(self):
> + self._rte_flow_validate(vectors_mac_ipv4_esp)
> +
> + @skip_unsupported_pkg('os default')
> + def test_mac_ipv6_esp(self):
> + self._rte_flow_validate(vectors_mac_ipv6_esp)
> +
> + @skip_unsupported_pkg('os default')
> + def test_mac_ipv4_nat_t_esp(self):
> + self._rte_flow_validate(vectors_mac_ipv4_nat_t_esp)
> +
> + @skip_unsupported_pkg('os default')
> + def test_mac_ipv6_nat_t_esp(self):
> + self._rte_flow_validate(vectors_mac_ipv6_nat_t_esp)
> +
> def test_unsupported_ethertype(self):
> rule = ['flow create 0 ingress pattern eth type is 0x0800 / end actions
> queue index 1 / end',
> 'flow create 0 ingress pattern eth type is 0x86dd / end actions
> queue index 1 / end']
> --
> 2.17.1
@@ -334,6 +334,50 @@ L2_Ethertype = [
'Ether(dst="00:11:22:33:44:55",type=0x88f7)/"\\x00\\x02"',
'Ether(dst="00:11:22:33:44:55",type=0x8847)']
+MAC_IPV4_ESP = {
+ "matched": [
+ "Ether(dst='00:11:22:33:44:55')/IP(src='192.168.0.20',dst='192.168.0.21',proto=50)/ESP(spi=7)/Raw('x'*480)",
+ ],
+ "unmatched": [
+ "Ether(dst='00:11:22:33:44:55')/IP(src='192.168.0.22',dst='192.168.0.21',proto=50)/ESP(spi=7)/Raw('x'*480)",
+ "Ether(dst='00:11:22:33:44:55')/IP(src='192.168.0.20',dst='192.168.0.11',proto=50)/ESP(spi=7)/Raw('x'*480)",
+ "Ether(dst='00:11:22:33:44:55')/IP(src='192.168.0.20',dst='192.168.0.21',proto=50)/ESP(spi=17)/Raw('x'*480)",
+ ]
+}
+
+MAC_IPV6_ESP = {
+ "matched": [
+ "Ether(dst='00:11:22:33:44:55')/IPv6(src='2001::1',dst='2001::2',nh=50)/ESP(spi=7)/Raw('x'*480)",
+ ],
+ "unmatched": [
+ "Ether(dst='00:11:22:33:44:55')/IPv6(src='1111:2222:3333:4444:5555:6666:7777:8888',dst='2001::2',nh=50)/ESP(spi=7)/Raw('x'*480)",
+ "Ether(dst='00:11:22:33:44:55')/IPv6(src='2001::1',dst='1111:2222:3333:4444:5555:6666:7777:9999',nh=50)/ESP(spi=7)/Raw('x'*480)",
+ "Ether(dst='00:11:22:33:44:55')/IPv6(src='2001::1',dst='2001::2',nh=50)/ESP(spi=17)/Raw('x'*480)",
+ ]
+}
+
+MAC_IPV4_NAT_T_ESP = {
+ "matched": [
+ "Ether(dst='00:11:22:33:44:55')/IP(src='192.168.0.20',dst='192.168.0.21')/UDP(dport=4500)/ESP(spi=7)/Raw('x'*480)",
+ ],
+ "unmatched": [
+ "Ether(dst='00:11:22:33:44:55')/IP(src='192.168.0.22',dst='192.168.0.21')/UDP(dport=4500)/ESP(spi=7)/Raw('x'*480)",
+ "Ether(dst='00:11:22:33:44:55')/IP(src='192.168.0.20',dst='192.168.0.11')/UDP(dport=4500)/ESP(spi=7)/Raw('x'*480)",
+ "Ether(dst='00:11:22:33:44:55')/IP(src='192.168.0.20',dst='192.168.0.21')/UDP(dport=4500)/ESP(spi=77)/Raw('x'*480)",
+ ]
+}
+
+MAC_IPV6_NAT_T_ESP = {
+ "matched": [
+ "Ether(dst='00:11:22:33:44:55')/IPv6(src='2001::1',dst='2001::2')/UDP(dport=4500)/ESP(spi=7)/Raw('x'*480)",
+ ],
+ "unmatched": [
+ "Ether(dst='00:11:22:33:44:55')/IPv6(src='2001::8',dst='2001::2')/UDP(dport=4500)/ESP(spi=7)/Raw('x'*480)",
+ "Ether(dst='00:11:22:33:44:55')/IPv6(src='2001::1',dst='2001::9')/UDP(dport=4500)/ESP(spi=7)/Raw('x'*480)",
+ "Ether(dst='00:11:22:33:44:55')/IPv6(src='2001::1',dst='2001::2')/UDP(dport=4500)/ESP(spi=77)/Raw('x'*480)",
+ ]
+}
+
tv_mac_ipv4_pay_queue_index = {
"name": "test_mac_ipv4_pay_queue_index",
"rule": "flow create 0 ingress pattern eth dst is 00:11:22:33:44:55 / ipv4 src is 192.168.0.20 dst is 192.168.0.21 proto is 255 ttl is 2 tos is 4 / end actions queue index 1 / end",
@@ -2148,6 +2192,282 @@ vectors_l2_ethertype = [tv_l2_ethertype_queue_index,
tv_l2_ethertype_mark_rss,
tv_l2_ethertype_mark]
+tv_mac_ipv4_esp_queue_index = {
+ "name": "tv_mac_ipv4_esp_queue_index",
+ "rule": "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is 192.168.0.21 / esp spi is 7 / end actions queue index 13 / mark id 7 / end",
+ "scapy_str": {"match": MAC_IPV4_ESP['matched'],
+ "unmatched": MAC_IPV4_ESP['unmatched'],
+ },
+ "check_func": rfc.check_mark,
+ "check_param": {"port_id": 0, "mark_id": 7, "queue": 13}
+}
+
+tv_mac_ipv4_esp_queue_group = {
+ "name": "tv_mac_ipv4_esp_queue_group",
+ "rule": "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is 192.168.0.21 / esp spi is 7 / end actions rss queues 1 2 3 4 end / mark id 6 / end",
+ "scapy_str": {"match": MAC_IPV4_ESP['matched'],
+ "unmatched": MAC_IPV4_ESP['unmatched'],
+ },
+ "check_func": rfc.check_mark,
+ "check_param": {"port_id": 0, "mark_id": 6, "queue": [1, 2, 3, 4]}
+}
+
+tv_mac_ipv4_esp_passthru = {
+ "name": "tv_mac_ipv4_esp_passthru",
+ "rule": "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is 192.168.0.21 / esp spi is 7 / end actions passthru / mark id 1 / end",
+ "scapy_str": {"match": MAC_IPV4_ESP['matched'],
+ "unmatched": MAC_IPV4_ESP['unmatched'],
+ },
+ "check_func": rfc.check_mark,
+ "check_param": {"port_id": 0, "rss": True, "mark_id": 1}
+}
+
+tv_mac_ipv4_esp_drop = {
+ "name": "tv_mac_ipv4_esp_drop",
+ "rule": "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is 192.168.0.21 / esp spi is 7 / end actions drop / end",
+ "scapy_str": {"match": MAC_IPV4_ESP['matched'],
+ "unmatched": MAC_IPV4_ESP['unmatched'],
+ },
+ "check_func": rfc.check_mark,
+ "check_param": {"port_id": 0, "drop": 1}
+}
+
+tv_mac_ipv4_esp_mark_rss = {
+ "name": "tv_mac_ipv4_esp_mark_rss",
+ "rule": "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is 192.168.0.21 / esp spi is 7 / end actions mark id 2 / rss / end",
+ "scapy_str": {"match": MAC_IPV4_ESP['matched'],
+ "unmatched": MAC_IPV4_ESP['unmatched'],
+ },
+ "check_func": rfc.check_mark,
+ "check_param": {"port_id": 0, "mark_id": 2, "rss": True}
+}
+
+tv_mac_ipv4_esp_mark = {
+ "name": "tv_mac_ipv4_esp_mark",
+ "rule": "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is 192.168.0.21 / esp spi is 7 / end actions mark id 15 / end",
+ "scapy_str": {"match": MAC_IPV4_ESP['matched'],
+ "unmatched": MAC_IPV4_ESP['unmatched'],
+ },
+ "check_func": rfc.check_mark,
+ "check_param": {"port_id": 0, "mark_id": 15}
+}
+
+vectors_mac_ipv4_esp = [
+ tv_mac_ipv4_esp_queue_index,
+ tv_mac_ipv4_esp_queue_group,
+ tv_mac_ipv4_esp_passthru,
+ tv_mac_ipv4_esp_drop,
+ tv_mac_ipv4_esp_mark_rss,
+ tv_mac_ipv4_esp_mark,
+]
+
+tv_mac_ipv6_esp_queue_index = {
+ "name": "tv_mac_ipv6_esp_queue_index",
+ "rule": "flow create 0 ingress pattern eth / ipv6 src is 2001::1 dst is 2001::2 / esp spi is 7 / end actions queue index 13 / mark id 7 / end",
+ "scapy_str": {"match": MAC_IPV6_ESP['matched'],
+ "unmatched": MAC_IPV6_ESP['unmatched'],
+ },
+ "check_func": rfc.check_mark,
+ "check_param": {"port_id": 0, "mark_id": 7, "queue": 13}
+}
+
+tv_mac_ipv6_esp_queue_group = {
+ "name": "tv_mac_ipv6_esp_queue_group",
+ "rule": "flow create 0 ingress pattern eth / ipv6 src is 2001::1 dst is 2001::2 / esp spi is 7 / end actions rss queues 1 2 3 4 end / mark id 6 / end",
+ "scapy_str": {"match": MAC_IPV6_ESP['matched'],
+ "unmatched": MAC_IPV6_ESP['unmatched'],
+ },
+ "check_func": rfc.check_mark,
+ "check_param": {"port_id": 0, "mark_id": 6, "queue": [1, 2, 3, 4]}
+}
+
+tv_mac_ipv6_esp_passthru = {
+ "name": "tv_mac_ipv6_esp_passthru",
+ "rule": "flow create 0 ingress pattern eth / ipv6 src is 2001::1 dst is 2001::2 / esp spi is 7 / end actions passthru / mark id 1 / end",
+ "scapy_str": {"match": MAC_IPV6_ESP['matched'],
+ "unmatched": MAC_IPV6_ESP['unmatched'],
+ },
+ "check_func": rfc.check_mark,
+ "check_param": {"port_id": 0, "rss": True, "mark_id": 1}
+}
+
+tv_mac_ipv6_esp_drop = {
+ "name": "tv_mac_ipv6_esp_drop",
+ "rule": "flow create 0 ingress pattern eth / ipv6 src is 2001::1 dst is 2001::2 / esp spi is 7 / end actions drop / end",
+ "scapy_str": {"match": MAC_IPV6_ESP['matched'],
+ "unmatched": MAC_IPV6_ESP['unmatched'],
+ },
+ "check_func": rfc.check_mark,
+ "check_param": {"port_id": 0, "drop": 1}
+}
+
+tv_mac_ipv6_esp_mark_rss = {
+ "name": "tv_mac_ipv6_esp_mark_rss",
+ "rule": "flow create 0 ingress pattern eth / ipv6 src is 2001::1 dst is 2001::2 / esp spi is 7 / end actions mark / rss / end",
+ "scapy_str": {"match": MAC_IPV6_ESP['matched'],
+ "unmatched": MAC_IPV6_ESP['unmatched'],
+ },
+ "check_func": rfc.check_mark,
+ "check_param": {"port_id": 0, "mark_id": 0, "rss": True}
+}
+
+tv_mac_ipv6_esp_mark = {
+ "name": "tv_mac_ipv6_esp_mark",
+ "rule": "flow create 0 ingress pattern eth / ipv6 src is 2001::1 dst is 2001::2 / esp spi is 7 / end actions mark id 15 / end",
+ "scapy_str": {"match": MAC_IPV6_ESP['matched'],
+ "unmatched": MAC_IPV6_ESP['unmatched'],
+ },
+ "check_func": rfc.check_mark,
+ "check_param": {"port_id": 0, "mark_id": 15}
+}
+
+vectors_mac_ipv6_esp = [
+ tv_mac_ipv6_esp_queue_index,
+ tv_mac_ipv6_esp_queue_group,
+ tv_mac_ipv6_esp_passthru,
+ tv_mac_ipv6_esp_drop,
+ tv_mac_ipv6_esp_mark_rss,
+ tv_mac_ipv6_esp_mark,
+]
+
+tv_mac_ipv4_nat_t_esp_queue_index = {
+ "name": "tv_mac_ipv4_nat_t_esp_queue_index",
+ "rule": "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is 192.168.0.21 / udp / esp spi is 7 / end actions queue index 13 / mark id 7 / end",
+ "scapy_str": {"match": MAC_IPV4_NAT_T_ESP['matched'],
+ "unmatched": MAC_IPV4_NAT_T_ESP['unmatched'],
+ },
+ "check_func": rfc.check_mark,
+ "check_param": {"port_id": 0, "mark_id": 7, "queue": 13}
+}
+
+tv_mac_ipv4_nat_t_esp_queue_group = {
+ "name": "tv_mac_ipv4_nat_t_esp_queue_group",
+ "rule": "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is 192.168.0.21 / udp / esp spi is 7 / end actions rss queues 1 2 3 4 end / mark id 6 / end",
+ "scapy_str": {"match": MAC_IPV4_NAT_T_ESP['matched'],
+ "unmatched": MAC_IPV4_NAT_T_ESP['unmatched'],
+ },
+ "check_func": rfc.check_mark,
+ "check_param": {"port_id": 0, "mark_id": 6, "queue": [1, 2, 3, 4]}
+}
+
+tv_mac_ipv4_nat_t_esp_passthru = {
+ "name": "tv_mac_ipv4_nat_t_esp_passthru",
+ "rule": "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is 192.168.0.21 / udp / esp spi is 7 / end actions passthru / mark id 1 / end",
+ "scapy_str": {"match": MAC_IPV4_NAT_T_ESP['matched'],
+ "unmatched": MAC_IPV4_NAT_T_ESP['unmatched'],
+ },
+ "check_func": rfc.check_mark,
+ "check_param": {"port_id": 0, "rss": True, "mark_id": 1}
+}
+
+tv_mac_ipv4_nat_t_esp_drop = {
+ "name": "tv_mac_ipv4_nat_t_esp_drop",
+ "rule": "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is 192.168.0.21 / udp / esp spi is 7 / end actions drop / end",
+ "scapy_str": {"match": MAC_IPV4_NAT_T_ESP['matched'],
+ "unmatched": MAC_IPV4_NAT_T_ESP['unmatched'],
+ },
+ "check_func": rfc.check_mark,
+ "check_param": {"port_id": 0, "drop": 1}
+}
+
+tv_mac_ipv4_nat_t_esp_mark_rss = {
+ "name": "tv_mac_ipv4_nat_t_esp_mark_rss",
+ "rule": "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is 192.168.0.21 / udp / esp spi is 7 / end actions mark id 2 / rss / end",
+ "scapy_str": {"match": MAC_IPV4_NAT_T_ESP['matched'],
+ "unmatched": MAC_IPV4_NAT_T_ESP['unmatched'],
+ },
+ "check_func": rfc.check_mark,
+ "check_param": {"port_id": 0, "mark_id": 2, "rss": True}
+}
+
+tv_mac_ipv4_nat_t_esp_mark = {
+ "name": "tv_mac_ipv4_nat_t_esp_mark",
+ "rule": "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is 192.168.0.21 / udp / esp spi is 7 / end actions mark id 15 / end",
+ "scapy_str": {"match": MAC_IPV4_NAT_T_ESP['matched'],
+ "unmatched": MAC_IPV4_NAT_T_ESP['unmatched'],
+ },
+ "check_func": rfc.check_mark,
+ "check_param": {"port_id": 0, "mark_id": 15}
+}
+
+vectors_mac_ipv4_nat_t_esp = [
+ tv_mac_ipv4_nat_t_esp_queue_index,
+ tv_mac_ipv4_nat_t_esp_queue_group,
+ tv_mac_ipv4_nat_t_esp_passthru,
+ tv_mac_ipv4_nat_t_esp_drop,
+ tv_mac_ipv4_nat_t_esp_mark_rss,
+ tv_mac_ipv4_nat_t_esp_mark,
+]
+
+tv_mac_ipv6_nat_t_esp_queue_index = {
+ "name": "tv_mac_ipv6_nat_t_esp_queue_index",
+ "rule": "flow create 0 ingress pattern eth / ipv6 src is 2001::1 dst is 2001::2 / udp / esp spi is 7 / end actions queue index 13 / mark id 7 / end",
+ "scapy_str": {"match": MAC_IPV6_NAT_T_ESP['matched'],
+ "unmatched": MAC_IPV6_NAT_T_ESP['unmatched'],
+ },
+ "check_func": rfc.check_mark,
+ "check_param": {"port_id": 0, "mark_id": 7, "queue": 13}
+}
+
+tv_mac_ipv6_nat_t_esp_queue_group = {
+ "name": "tv_mac_ipv6_nat_t_esp_queue_group",
+ "rule": "flow create 0 ingress pattern eth / ipv6 src is 2001::1 dst is 2001::2 / udp / esp spi is 7 / end actions rss queues 1 2 3 4 end / mark id 6 / end",
+ "scapy_str": {"match": MAC_IPV6_NAT_T_ESP['matched'],
+ "unmatched": MAC_IPV6_NAT_T_ESP['unmatched'],
+ },
+ "check_func": rfc.check_mark,
+ "check_param": {"port_id": 0, "mark_id": 6, "queue": [1, 2, 3, 4]}
+}
+
+tv_mac_ipv6_nat_t_esp_passthru = {
+ "name": "tv_mac_ipv6_nat_t_esp_passthru",
+ "rule": "flow create 0 ingress pattern eth / ipv6 src is 2001::1 dst is 2001::2 / udp / esp spi is 7 / end actions passthru / mark id 1 / end",
+ "scapy_str": {"match": MAC_IPV6_NAT_T_ESP['matched'],
+ "unmatched": MAC_IPV6_NAT_T_ESP['unmatched'],
+ },
+ "check_func": rfc.check_mark,
+ "check_param": {"port_id": 0, "rss": True, "mark_id": 1}
+}
+
+tv_mac_ipv6_nat_t_esp_drop = {
+ "name": "tv_mac_ipv6_nat_t_esp_drop",
+ "rule": "flow create 0 ingress pattern eth / ipv6 src is 2001::1 dst is 2001::2 / udp / esp spi is 7 / end actions drop / end",
+ "scapy_str": {"match": MAC_IPV6_NAT_T_ESP['matched'],
+ "unmatched": MAC_IPV6_NAT_T_ESP['unmatched'],
+ },
+ "check_func": rfc.check_mark,
+ "check_param": {"port_id": 0, "drop": 1}
+}
+
+tv_mac_ipv6_nat_t_esp_mark_rss = {
+ "name": "tv_mac_ipv6_nat_t_esp_mark_rss",
+ "rule": "flow create 0 ingress pattern eth / ipv6 src is 2001::1 dst is 2001::2 / udp / esp spi is 7 / end actions mark id 2 / rss / end",
+ "scapy_str": {"match": MAC_IPV6_NAT_T_ESP['matched'],
+ "unmatched": MAC_IPV6_NAT_T_ESP['unmatched'],
+ },
+ "check_func": rfc.check_mark,
+ "check_param": {"port_id": 0, "mark_id": 2, "rss": True}
+}
+
+tv_mac_ipv6_nat_t_esp_mark = {
+ "name": "tv_mac_ipv6_nat_t_esp_mark",
+ "rule": "flow create 0 ingress pattern eth / ipv6 src is 2001::1 dst is 2001::2 / udp / esp spi is 7 / end actions mark id 15 / end",
+ "scapy_str": {"match": MAC_IPV6_NAT_T_ESP['matched'],
+ "unmatched": MAC_IPV6_NAT_T_ESP['unmatched'],
+ },
+ "check_func": rfc.check_mark,
+ "check_param": {"port_id": 0, "mark_id": 15}
+}
+
+vectors_mac_ipv6_nat_t_esp = [
+ tv_mac_ipv6_nat_t_esp_queue_index,
+ tv_mac_ipv6_nat_t_esp_queue_group,
+ tv_mac_ipv6_nat_t_esp_passthru,
+ tv_mac_ipv6_nat_t_esp_drop,
+ tv_mac_ipv6_nat_t_esp_mark_rss,
+ tv_mac_ipv6_nat_t_esp_mark,
+]
+
class TestCVLFdir(TestCase):
def query_count(self, hits_set, hits, port_id=0, rule_id=0):
@@ -3183,6 +3503,22 @@ class TestCVLFdir(TestCase):
def test_l2_ethertype(self):
self._multirules_process(vectors_l2_ethertype)
+ @skip_unsupported_pkg('os default')
+ def test_mac_ipv4_esp(self):
+ self._rte_flow_validate(vectors_mac_ipv4_esp)
+
+ @skip_unsupported_pkg('os default')
+ def test_mac_ipv6_esp(self):
+ self._rte_flow_validate(vectors_mac_ipv6_esp)
+
+ @skip_unsupported_pkg('os default')
+ def test_mac_ipv4_nat_t_esp(self):
+ self._rte_flow_validate(vectors_mac_ipv4_nat_t_esp)
+
+ @skip_unsupported_pkg('os default')
+ def test_mac_ipv6_nat_t_esp(self):
+ self._rte_flow_validate(vectors_mac_ipv6_nat_t_esp)
+
def test_unsupported_ethertype(self):
rule = ['flow create 0 ingress pattern eth type is 0x0800 / end actions queue index 1 / end',
'flow create 0 ingress pattern eth type is 0x86dd / end actions queue index 1 / end']