Martin KaFai Lau
de9c8d848d
selftests/bpf: S/iptables/iptables-legacy/ in the bpf_nf and xdp_synproxy test
...
The recent vm image in CI has reported error in selftests that use
the iptables command. Manu Bretelle has pointed out the difference
in the recent vm image that the iptables is sym-linked to the iptables-nft.
With this knowledge, I can also reproduce the CI error by manually running
with the 'iptables-nft'.
This patch is to replace the iptables command with iptables-legacy
to unblock the CI tests.
Signed-off-by: Martin KaFai Lau <martin.lau@kernel.org >
Signed-off-by: Andrii Nakryiko <andrii@kernel.org >
Acked-by: David Vernet <void@manifault.com >
Link: https://lore.kernel.org/bpf/20221012221235.3529719-1-martin.lau@linux.dev
2022-10-13 08:03:04 -07:00
Lorenzo Bianconi
b06b45e82b
selftests/bpf: add tests for bpf_ct_set_nat_info kfunc
...
Introduce self-tests for bpf_ct_set_nat_info kfunc used to set the
source or destination nat addresses/ports.
Signed-off-by: Lorenzo Bianconi <lorenzo@kernel.org >
Link: https://lore.kernel.org/r/803e33294e247744d466943105879414344d3235.1663778601.git.lorenzo@kernel.org
Signed-off-by: Alexei Starovoitov <ast@kernel.org >
2022-09-21 19:25:26 -07:00
Lorenzo Bianconi
f7c946f288
selftests/bpf: fix ct status check in bpf_nf selftests
...
Check properly the connection tracking entry status configured running
bpf_ct_change_status kfunc.
Remove unnecessary IPS_CONFIRMED status configuration since it is
already done during entry allocation.
Fixes: 6eb7fba007 ("selftests/bpf: Add tests for new nf_conntrack kfuncs")
Signed-off-by: Lorenzo Bianconi <lorenzo@kernel.org >
Acked-by: Song Liu <song@kernel.org >
Link: https://lore.kernel.org/r/813a5161a71911378dfac8770ec890428e4998aa.1662623574.git.lorenzo@kernel.org
Signed-off-by: Alexei Starovoitov <ast@kernel.org >
2022-09-10 17:40:46 -07:00
Daniel Xu
e2d75e954c
selftests/bpf: Add tests for writing to nf_conn:mark
...
Add a simple extension to the existing selftest to write to
nf_conn:mark. Also add a failure test for writing to unsupported field.
Signed-off-by: Daniel Xu <dxu@dxuuu.xyz >
Link: https://lore.kernel.org/r/f78966b81b9349d2b8ebb4cee2caf15cb6b38ee2.1662568410.git.dxu@dxuuu.xyz
Signed-off-by: Alexei Starovoitov <ast@kernel.org >
2022-09-10 17:27:32 -07:00
Daniel Xu
99799de2cb
selftests/bpf: Add connmark read test
...
Test that the prog can read from the connection mark. This test is nice
because it ensures progs can interact with netfilter subsystem
correctly.
Signed-off-by: Daniel Xu <dxu@dxuuu.xyz >
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net >
Acked-by: Kumar Kartikeya Dwivedi <memxor@gmail.com >
Link: https://lore.kernel.org/bpf/d3bc620a491e4c626c20d80631063922cbe13e2b.1660254747.git.dxu@dxuuu.xyz
2022-08-15 20:53:25 +02:00
Daniel Xu
e81fbd4c1b
selftests/bpf: Add existing connection bpf_*_ct_lookup() test
...
Add a test where we do a conntrack lookup on an existing connection.
This is nice because it's a more realistic test than artifically
creating a ct entry and looking it up afterwards.
Signed-off-by: Daniel Xu <dxu@dxuuu.xyz >
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net >
Acked-by: Kumar Kartikeya Dwivedi <memxor@gmail.com >
Link: https://lore.kernel.org/bpf/de5a617832f38f8b5631cc87e2a836da7c94d497.1660254747.git.dxu@dxuuu.xyz
2022-08-15 20:53:24 +02:00
Kumar Kartikeya Dwivedi
c6f420ac9d
selftests/bpf: Add negative tests for new nf_conntrack kfuncs
...
Test cases we care about and ensure improper usage is caught and
rejected by the verifier.
Signed-off-by: Kumar Kartikeya Dwivedi <memxor@gmail.com >
Link: https://lore.kernel.org/r/20220721134245.2450-13-memxor@gmail.com
Signed-off-by: Alexei Starovoitov <ast@kernel.org >
2022-07-21 21:03:17 -07:00
Lorenzo Bianconi
6eb7fba007
selftests/bpf: Add tests for new nf_conntrack kfuncs
...
Introduce selftests for the following kfunc helpers:
- bpf_xdp_ct_alloc
- bpf_skb_ct_alloc
- bpf_ct_insert_entry
- bpf_ct_set_timeout
- bpf_ct_change_timeout
- bpf_ct_set_status
- bpf_ct_change_status
Signed-off-by: Lorenzo Bianconi <lorenzo@kernel.org >
Signed-off-by: Kumar Kartikeya Dwivedi <memxor@gmail.com >
Link: https://lore.kernel.org/r/20220721134245.2450-12-memxor@gmail.com
Signed-off-by: Alexei Starovoitov <ast@kernel.org >
2022-07-21 21:03:17 -07:00
Delyan Kratunov
04fcb5f9a1
selftests/bpf: Migrate from bpf_prog_test_run
...
bpf_prog_test_run is being deprecated in favor of the OPTS-based
bpf_prog_test_run_opts.
We end up unable to use CHECK in most cases, so replace usages with
ASSERT_* calls.
Signed-off-by: Delyan Kratunov <delyank@fb.com >
Signed-off-by: Andrii Nakryiko <andrii@kernel.org >
Link: https://lore.kernel.org/bpf/20220202235423.1097270-2-delyank@fb.com
2022-02-02 22:31:18 -08:00
Kumar Kartikeya Dwivedi
87091063df
selftests/bpf: Add test for unstable CT lookup API
...
This tests that we return errors as documented, and also that the kfunc
calls work from both XDP and TC hooks.
Signed-off-by: Kumar Kartikeya Dwivedi <memxor@gmail.com >
Link: https://lore.kernel.org/r/20220114163953.1455836-8-memxor@gmail.com
Signed-off-by: Alexei Starovoitov <ast@kernel.org >
2022-01-18 14:26:42 -08:00