xdp-forward: Add selftest for flowtable mode

Signed-off-by: Lorenzo Bianconi <[email protected]>

lib/testing/test_runner.sh

@@ -25,7 +25,7 @@ ALL_TESTS=""
 VERBOSE_TESTS=${V:-0}
 NUM_NS=2
 
-NEEDED_TOOLS="capinfos ethtool ip ping sed tc tcpdump timeout nc tshark"
+NEEDED_TOOLS="capinfos ethtool ip ping sed tc tcpdump timeout nc tshark nft"
 
 if [ -f "$TEST_CONFIG" ]; then
     source "$TEST_CONFIG"

xdp-forward/tests/test-xdp-forward.sh

@@ -1,6 +1,6 @@
 XDP_LOADER=${XDP_LOADER:-./xdp-loader}
 XDP_FORWARD=${XDP_FORWARD:-./xdp-forward}
-ALL_TESTS="test_ping test_load test_fwd_full test_fwd_direct"
+ALL_TESTS="test_ping test_load test_fwd_full test_fwd_direct test_flowtable"
 
 
 test_ping()
@@ -52,8 +52,62 @@ test_fwd_direct()
     check_run $XDP_FORWARD unload ${NS_NAMES[@]}
 }
 
+test_flowtable()
+{
+    # veth NAPI GRO support added this symbol; forwarding won't work without it
+    skip_if_missing_kernel_symbol veth_set_features
+    # check if bpf flowtable lookup is available
+    skip_if_missing_kernel_symbol bpf_xdp_flow_lookup
+
+    # disable {tx,rx} checksum offload since it is not currently suported
+    # by XDP_REDIRECT
+    for n in ${NS_NAMES[@]}; do
+        ip netns exec $n ethtool -K veth0 tx-checksumming off rx-checksumming off
+        ethtool -K $n tx-checksumming off rx-checksumming off
+    done
+
+    # create data to send via tcp
+    local infile="$(mktemp)"
+    dd if=/dev/urandom of="${infile}" bs=8192 count=32 status=none
+
+    # create flowtable configuration
+    check_run nft -f /dev/stdin <<EOF
+table inet filter {
+    flowtable ft {
+        hook ingress priority filter
+        devices = { ${NS_NAMES[0]}, ${NS_NAMES[-1]} }
+    }
+    chain forward {
+        type filter hook forward priority filter
+        meta l4proto { tcp } flow add @ft
+    }
+}
+EOF
+    # wait a bit to configure nft
+    sleep 2
+
+    check_run $XDP_FORWARD load -f flowtable ${NS_NAMES[0]}
+
+    PID=$(start_background_ns_devnull "nc -4 -l --no-shutdown 10000")
+    check_run ip netns exec ${NS_NAMES[0]} nc -w 1 -4 ${ALL_INSIDE_IP4[-1]} 10000 < ${infile}
+    stop_background $PID
+
+    PID=$(start_background_ns_devnull "nc -6 -l --no-shutdown 10000")
+    check_run ip netns exec ${NS_NAMES[0]} nc -w 1 -6 ${ALL_INSIDE_IP6[-1]} 10000 < ${infile}
+    stop_background $PID
+
+    check_run $XDP_FORWARD unload ${NS_NAMES[0]}
+    check_run nft flush ruleset
+    rm -f ${infile}
+}
+
 cleanup_tests()
 {
+    # enable {tx,rx} checksum offload
+    for n in ${NS_NAMES[@]}; do
+        ip netns exec $n ethtool -K veth0 tx-checksumming on rx-checksumming on
+        ethtool -K $n tx-checksumming on rx-checksumming on
+    done
     $XDP_FORWARD unload ${NS_NAMES[@]} >/dev/null 2>&1
     $XDP_LOADER unload $NS --all >/dev/null 2>&1
 }