new file mode 100644
@@ -0,0 +1,1518 @@
+# BSD LICENSE
+#
+# Copyright(c) 2020 Intel Corporation. All rights reserved.
+# All rights reserved.
+#
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions
+# are met:
+#
+# * Redistributions of source code must retain the above copyright
+# notice, this list of conditions and the following disclaimer.
+# * Redistributions in binary form must reproduce the above copyright
+# notice, this list of conditions and the following disclaimer in
+# the documentation and/or other materials provided with the
+# distribution.
+# * Neither the name of Intel Corporation nor the names of its
+# contributors may be used to endorse or promote products derived
+# from this software without specific prior written permission.
+#
+# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+# A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+# OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+# DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+# THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+import json
+import time
+import re
+import copy
+
+from test_case import TestCase
+from pmd_output import PmdOutput
+from packet import Packet
+from utils import BLUE, RED, GREEN
+import rte_flow_common as rfc
+
+import os
+
+vf1_mac = "00:01:23:45:67:89"
+
+# send packets
+
+MAC_IPV4_PAY_SRC_MAC = {
+ "match": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2", frag=1)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="01:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/UDP()/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="02:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/TCP()/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="ff:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/SCTP()/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="01:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/ICMP()/Raw(load="x"*30)' % vf1_mac
+ ],
+ "unmatch": [
+ 'Ether(src="00:11:22:33:66:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:66", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2", frag=1)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:66:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/UDP()/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:66", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/TCP()/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:32:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/SCTP()/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="01:11:22:33:44:66", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/ICMP()/Raw(load="x"*30)' % vf1_mac
+ ]
+}
+
+MAC_IPV4_PAY_DST_MAC = {
+ "match": [
+ 'Ether(src="00:02:00:00:00:01", dst="00:11:22:33:44:55")/IP(src="192.168.0.1", dst="192.168.0.2")/Raw(load="x"*30)',
+ 'Ether(src="00:02:00:00:00:01", dst="00:11:22:33:44:66")/IP(src="192.168.0.1", dst="192.168.0.2")/UDP()/Raw(load="x"*30)'
+ ],
+ "unmatch": [
+ 'Ether(src="00:02:00:00:00:01", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:02:00:00:00:01", dst="00:11:22:33:66:55")/IP(src="192.168.0.1", dst="192.168.0.2")/Raw(load="x"*30)'
+ ]
+}
+
+MAC_IPV4_PAY_SRC_IP = {
+ "match": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.0", dst="192.168.0.2")/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2",frag=1)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.158", dst="192.168.0.2")/UDP()/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.255", dst="192.168.0.2")/TCP()/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.255", dst="192.168.0.2")/SCTP()/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.255", dst="192.168.0.2")/ICMP()/Raw(load="x"*30)' % vf1_mac
+ ],
+ "unmatch": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.1.1", dst="192.168.0.2")/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.1.1", dst="192.168.0.2",frag=1)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.1.1", dst="192.168.0.2")/UDP()/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.1.1", dst="192.168.0.2")/TCP()/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.1.1", dst="192.168.0.2")/SCTP()/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.1.1", dst="192.168.0.2")/ICMP()/Raw(load="x"*30)' % vf1_mac
+ ]
+}
+
+MAC_IPV4_PAY_DST_IP = {
+ "match": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.0")/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.0",frag=1)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.158")/UDP()/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.255")/TCP()/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.255")/SCTP()/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.255")/ICMP()/Raw(load="x"*30)' % vf1_mac
+ ],
+ "unmatch": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.1.2")/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.1.2",frag=1)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.1.2")/UDP()/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.1.2")/TCP()/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.1.2")/SCTP()/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.1.2")/ICMP()/Raw(load="x"*30)' % vf1_mac
+ ]
+}
+
+MAC_IPV4_PAY_SRC_DST_IP = {
+ "match": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.255", dst="192.168.0.2")/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.255", dst="192.168.0.2",frag=1)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.158", dst="192.168.255.2")/UDP()/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.0", dst="192.168.1.2")/TCP()/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.0", dst="192.168.1.2")/SCTP()/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.0", dst="192.168.1.2")/ICMP()/Raw(load="x"*30)' % vf1_mac
+ ],
+ "unmatch": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.1.1", dst="192.168.0.2")/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.1.1", dst="192.168.0.2",frag=1)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.1.1", dst="192.168.0.2")/UDP()/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.3")/TCP()/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.3")/SCTP()/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.3")/ICMP()/Raw(load="x"*30)' % vf1_mac
+ ]
+}
+
+MAC_IPV4_PAY_SRC_DST_MAC_SRC_DST_IP = {
+ "match": [
+ 'Ether(src="00:11:22:33:44:1b", dst="33:00:00:00:00:02")/IP(src="192.168.0.255", dst="192.168.0.2")/Raw(load="x"*30)',
+ 'Ether(src="00:11:22:33:44:1b", dst="33:00:00:00:00:02")/IP(src="192.168.0.255", dst="192.168.0.2",frag=1)/Raw(load="x"*30)',
+ 'Ether(src="00:11:22:33:44:00", dst="33:00:00:00:00:03")/IP(src="192.168.0.158", dst="192.168.255.2")/UDP()/Raw(load="x"*30)',
+ 'Ether(src="00:11:22:33:44:ff", dst="33:00:00:00:00:02")/IP(src="192.168.0.0", dst="192.168.1.2")/TCP()/Raw(load="x"*30)',
+ 'Ether(src="00:11:22:33:44:ff", dst="33:00:00:00:00:02")/IP(src="192.168.0.0", dst="192.168.1.2")/SCTP()/Raw(load="x"*30)',
+ 'Ether(src="00:11:22:33:44:ff", dst="33:00:00:00:00:02")/IP(src="192.168.0.0", dst="192.168.1.2")/ICMP()/Raw(load="x"*30)'
+ ],
+ "unmatch": [
+ 'Ether(src="00:11:22:33:66:55", dst="33:00:00:00:00:02")/IP(src="192.168.0.1", dst="192.168.0.2")/Raw(load="x"*30)',
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2",frag=1)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="33:00:00:00:00:01")/IP(src="192.168.0.1", dst="192.168.0.2")/UDP()/Raw(load="x"*30)',
+ 'Ether(src="00:11:22:33:44:55", dst="33:00:00:00:00:02")/IP(src="192.168.1.1", dst="192.168.0.2")/TCP()/Raw(load="x"*30)',
+ 'Ether(src="00:11:22:33:44:55", dst="33:00:00:00:00:02")/IP(src="192.168.0.1", dst="192.168.0.3")/SCTP()/Raw(load="x"*30)',
+ 'Ether(src="00:11:22:33:44:55", dst="33:00:00:00:00:02")/IP(src="192.168.0.1", dst="192.168.0.3")/ICMP()/Raw(load="x"*30)'
+ ]
+}
+
+MAC_IPV4_TCP_SRC_MAC = {
+ "match": [
+ 'Ether(src="00:11:22:33:44:54", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/TCP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac
+ ],
+ "unmatch": [
+ 'Ether(src="00:11:22:33:44:57", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/TCP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IPv6()/TCP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/UDP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/Raw(load="x"*30)' % vf1_mac
+ ]
+}
+
+MAC_IPV4_TCP_DST_MAC = {
+ "match": [
+ 'Ether(src="00:02:00:00:00:01", dst="00:11:22:33:44:55")/IP(src="192.168.0.1", dst="192.168.0.2")/TCP(sport=8012,dport=8018)/Raw(load="x"*30)',
+ 'Ether(src="00:02:00:00:00:01", dst="00:11:22:33:44:66")/IP(src="192.168.0.1", dst="192.168.0.2")/TCP(sport=8012,dport=8018)/Raw(load="x"*30)'
+ ],
+ "unmatch": [
+ 'Ether(src="00:02:00:00:00:01", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/TCP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:02:00:00:00:01", dst="00:11:22:33:66:55")/IP(src="192.168.0.1", dst="192.168.0.2")/TCP(sport=8012,dport=8018)/Raw(load="x"*30)'
+ ]
+}
+
+MAC_IPV4_TCP_SRC_IP = {
+ "match": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.0", dst="192.168.0.2")/TCP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac
+ ],
+ "unmatch": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.3", dst="192.168.0.2")/TCP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/UDP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/Raw(load="x"*30)' % vf1_mac
+ ]
+}
+
+MAC_IPV4_TCP_DST_IP = {
+ "match": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.14")/TCP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac
+ ],
+ "unmatch": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.3")/TCP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/SCTP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/Raw(load="x"*30)' % vf1_mac
+ ]
+}
+
+MAC_IPV4_TCP_SRC_PORT = {
+ "match": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP()/TCP(sport=8012)/Raw(load="x"*30)' % vf1_mac
+ ],
+ "unmatch": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP()/TCP(sport=7985)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IPv6()/TCP(sport=8012)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP()/SCTP(sport=8012)/Raw(load="x"*30)' % vf1_mac
+ ]
+}
+
+MAC_IPV4_TCP_DST_PORT = {
+ "match": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP()/TCP(dport=8012)/Raw(load="x"*30)' % vf1_mac
+ ],
+ "unmatch": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP()/TCP(dport=7985)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP()/UDP(dport=8012)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IPv6()/TCP(dport=8012)/Raw(load="x"*30)' % vf1_mac
+ ]
+}
+
+MAC_IPV4_TCP_SRC_DST_IP_SRC_DST_PORT = {
+ "match": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.2", dst="192.168.255.2")/TCP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac
+ ],
+ "unmatch": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.1.1", dst="192.168.0.2")/TCP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.3")/TCP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/TCP(sport=7985,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/TCP(sport=8012,dport=7985)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/UDP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac
+ ]
+}
+
+MAC_IPV4_TCP_SRC_DST_MAC_SRC_DST_IP_SRC_DST_PORT = {
+ "match": [
+ 'Ether(src="00:11:22:33:44:66", dst="33:00:00:00:00:03")/IP(src="192.168.0.2", dst="192.168.255.2")/TCP(sport=8012,dport=8018)/Raw(load="x"*30)'
+ ],
+ "unmatch": [
+ 'Ether(src="00:11:22:33:66:55", dst="33:00:00:00:00:02")/IP(src="192.168.0.1", dst="192.168.0.2")/TCP(sport=8010,dport=8017)/Raw(load="x"*30)',
+ 'Ether(src="00:11:22:33:44:55", dst="33:00:00:00:00:01")/IP(src="192.168.0.1", dst="192.168.0.2")/TCP(sport=8010,dport=8017)/Raw(load="x"*30)',
+ 'Ether(src="00:11:22:33:44:55", dst="33:00:00:00:00:02")/IP(src="192.168.1.1", dst="192.168.0.2")/TCP(sport=8010,dport=8017)/Raw(load="x"*30)',
+ 'Ether(src="00:11:22:33:44:55", dst="33:00:00:00:00:02")/IP(src="192.168.0.1", dst="192.168.0.3")/TCP(sport=8010,dport=8017)/Raw(load="x"*30)',
+ 'Ether(src="00:11:22:33:44:55", dst="33:00:00:00:00:02")/IP(src="192.168.0.1", dst="192.168.0.2")/TCP(sport=7985,dport=8017)/Raw(load="x"*30)',
+ 'Ether(src="00:11:22:33:44:55", dst="33:00:00:00:00:02")/IP(src="192.168.0.1", dst="192.168.0.2")/TCP(sport=8010,dport=7985)/Raw(load="x"*30)',
+ 'Ether(src="00:11:22:33:44:55", dst="33:00:00:00:00:02")/IP(src="192.168.0.1", dst="192.168.0.2")/UDP(sport=8010,dport=8017)/Raw(load="x"*30)'
+ ]
+}
+
+MAC_IPV4_UDP_SRC_MAC = {
+ "match": [
+ 'Ether(src="00:11:22:33:44:54", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/UDP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac
+ ],
+ "unmatch": [
+ 'Ether(src="00:11:22:33:44:57", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/UDP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IPv6()/UDP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/TCP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/Raw(load="x"*30)' % vf1_mac
+ ]
+}
+
+MAC_IPV4_UDP_DST_MAC = {
+ "match": [
+ 'Ether(src="00:02:00:00:00:01", dst="00:11:22:33:44:55")/IP(src="192.168.0.1", dst="192.168.0.2")/UDP(sport=8012,dport=8018)/Raw(load="x"*30)',
+ 'Ether(src="00:02:00:00:00:01", dst="00:11:22:33:44:66")/IP(src="192.168.0.1", dst="192.168.0.2")/UDP(sport=8012,dport=8018)/Raw(load="x"*30)'
+ ],
+ "unmatch": [
+ 'Ether(src="00:02:00:00:00:01", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/UDP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:02:00:00:00:01", dst="00:11:22:33:66:55")/IP(src="192.168.0.1", dst="192.168.0.2")/UDP(sport=8012,dport=8018)/Raw(load="x"*30)'
+ ]
+}
+
+MAC_IPV4_UDP_SRC_IP = {
+ "match": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.0", dst="192.168.0.2")/UDP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac
+ ],
+ "unmatch": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.3", dst="192.168.0.2")/UDP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/TCP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/Raw(load="x"*30)' % vf1_mac
+ ]
+}
+
+MAC_IPV4_UDP_DST_IP = {
+ "match": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.14")/UDP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac
+ ],
+ "unmatch": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.3")/UDP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/SCTP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/Raw(load="x"*30)' % vf1_mac
+ ]
+}
+
+MAC_IPV4_UDP_SRC_PORT = {
+ "match": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP()/UDP(sport=8012)/Raw(load="x"*30)' % vf1_mac
+ ],
+ "unmatch": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP()/UDP(sport=7985)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IPv6()/UDP(sport=8012)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP()/SCTP(sport=8012)/Raw(load="x"*30)' % vf1_mac
+ ]
+}
+
+MAC_IPV4_UDP_DST_PORT = {
+ "match": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP()/UDP(dport=8012)/Raw(load="x"*30)' % vf1_mac
+ ],
+ "unmatch": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP()/UDP(dport=7985)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP()/TCP(dport=8012)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IPv6()/UDP(dport=8012)/Raw(load="x"*30)' % vf1_mac
+ ]
+}
+
+MAC_IPV4_UDP_SRC_DST_IP_SRC_DST_PORT = {
+ "match": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.2", dst="192.168.255.2")/UDP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac
+ ],
+ "unmatch": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.1.1", dst="192.168.0.2")/UDP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.3")/UDP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/UDP(sport=7985,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/UDP(sport=8012,dport=7985)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/TCP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac
+ ]
+}
+
+MAC_IPV4_UDP_SRC_DST_MAC_SRC_DST_IP_SRC_DST_PORT = {
+ "match": [
+ 'Ether(src="00:11:22:33:44:66", dst="33:00:00:00:00:02")/IP(src="192.168.0.2", dst="192.168.255.2")/UDP(sport=8012,dport=8018)/Raw(load="x"*30)'
+ ],
+ "unmatch": [
+ 'Ether(src="00:11:22:33:66:55", dst="33:00:00:00:00:03")/IP(src="192.168.0.1", dst="192.168.0.2")/UDP(sport=8010,dport=8017)/Raw(load="x"*30)',
+ 'Ether(src="00:11:22:33:44:55", dst="33:00:00:00:00:01")/IP(src="192.168.0.1", dst="192.168.0.2")/UDP(sport=8010,dport=8017)/Raw(load="x"*30)',
+ 'Ether(src="00:11:22:33:44:55", dst="33:00:00:00:00:02")/IP(src="192.168.1.1", dst="192.168.0.2")/UDP(sport=8010,dport=8017)/Raw(load="x"*30)',
+ 'Ether(src="00:11:22:33:44:55", dst="33:00:00:00:00:02")/IP(src="192.168.0.1", dst="192.168.0.3")/UDP(sport=8010,dport=8017)/Raw(load="x"*30)',
+ 'Ether(src="00:11:22:33:44:55", dst="33:00:00:00:00:02")/IP(src="192.168.0.1", dst="192.168.0.2")/UDP(sport=7985,dport=8017)/Raw(load="x"*30)',
+ 'Ether(src="00:11:22:33:44:55", dst="33:00:00:00:00:02")/IP(src="192.168.0.1", dst="192.168.0.2")/UDP(sport=8010,dport=7985)/Raw(load="x"*30)'
+ ]
+}
+
+MAC_IPV4_SCTP_SRC_MAC = {
+ "match": [
+ 'Ether(src="00:11:22:33:44:54", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/SCTP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac
+ ],
+ "unmatch": [
+ 'Ether(src="00:11:22:33:44:57", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/SCTP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IPv6()/SCTP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/UDP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/Raw(load="x"*30)' % vf1_mac
+ ]
+}
+
+MAC_IPV4_SCTP_DST_MAC = {
+ "match": [
+ 'Ether(src="00:02:00:00:00:01", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/SCTP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac
+ ],
+ "unmatch": [
+ 'Ether(src="00:02:00:00:00:01", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/UDP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac
+ ]
+}
+
+MAC_IPV4_SCTP_SRC_IP = {
+ "match": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.0", dst="192.168.0.2")/SCTP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac
+ ],
+ "unmatch": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.3", dst="192.168.0.2")/SCTP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/UDP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/Raw(load="x"*30)' % vf1_mac
+ ]
+}
+
+MAC_IPV4_SCTP_DST_IP = {
+ "match": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.14")/SCTP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac
+ ],
+ "unmatch": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.3")/SCTP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/UDP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/Raw(load="x"*30)' % vf1_mac
+ ]
+}
+
+MAC_IPV4_SCTP_SRC_PORT = {
+ "match": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP()/SCTP(sport=8012)/Raw(load="x"*30)' % vf1_mac
+ ],
+ "unmatch": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP()/SCTP(sport=7985)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IPv6()/SCTP(sport=8012)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP()/UDP(sport=8012)/Raw(load="x"*30)' % vf1_mac
+ ]
+}
+
+MAC_IPV4_SCTP_DST_PORT = {
+ "match": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP()/SCTP(dport=8012)/Raw(load="x"*30)' % vf1_mac
+ ],
+ "unmatch": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP()/SCTP(dport=7985)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP()/UDP(dport=8012)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IPv6()/SCTP(dport=8012)/Raw(load="x"*30)' % vf1_mac
+ ]
+}
+
+MAC_IPV4_SCTP_SRC_DST_IP_SRC_DST_PORT = {
+ "match": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.2", dst="192.168.255.2")/SCTP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac
+ ],
+ "unmatch": [
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.1.1", dst="192.168.0.2")/SCTP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.3")/SCTP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/SCTP(sport=7985,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/SCTP(sport=8012,dport=7985)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/UDP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac
+ ]
+}
+
+MAC_IPV4_SCTP_SRC_DST_MAC_SRC_DST_IP_SRC_DST_PORT = {
+ "match": [
+ 'Ether(src="00:11:22:33:44:66", dst="%s")/IP(src="192.168.0.2", dst="192.168.255.2")/SCTP(sport=8012,dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ ],
+ "unmatch": [
+ 'Ether(src="00:11:22:33:66:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/SCTP(sport=8010,dport=8017)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.1.1", dst="192.168.0.2")/SCTP(sport=8010,dport=8017)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.3")/SCTP(sport=8010,dport=8017)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/SCTP(sport=7985,dport=8017)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/SCTP(sport=8010,dport=7985)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/UDP(sport=8010,dport=8017)/Raw(load="x"*30)' % vf1_mac
+ ]
+}
+
+# test vectors
+
+tv_mac_ipv4_pay_src_mac = {
+ "name": "test_mac_ipv4_pay_src_mac",
+ "rules": "flow create 0 ingress pattern eth src spec 00:11:22:33:44:55 src mask 00:ff:ff:ff:ff:ff / ipv4 / end actions drop / end",
+ "scapy_str": MAC_IPV4_PAY_SRC_MAC,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_pay_dst_mac = {
+ "name": "test_mac_ipv4_pay_dst_mac",
+ "rules": [
+ "flow create 0 ingress pattern eth dst is 00:11:22:33:44:55 / ipv4 / end actions vf id 1 / end",
+ "flow create 0 ingress pattern eth dst is 00:11:22:33:44:66 / ipv4 / end actions vf id 1 / end",
+ "flow create 0 ingress pattern eth dst is 00:11:22:33:66:55 / ipv4 / end actions vf id 1 / end",
+ "flow create 0 ingress pattern eth dst spec 00:11:22:33:44:55 dst mask ff:ff:ff:ff:ff:00 / ipv4 / end actions drop / end"],
+ "scapy_str": MAC_IPV4_PAY_DST_MAC,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_pay_src_ip = {
+ "name": "test_mac_ipv4_pay_src_ip",
+ "rules": "flow create 0 ingress pattern eth / ipv4 src spec 192.168.0.1 src mask 255.255.255.0 / end actions drop / end",
+ "scapy_str": MAC_IPV4_PAY_SRC_IP,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_pay_dst_ip = {
+ "name": "test_mac_ipv4_pay_dst_ip",
+ "rules": "flow create 0 ingress pattern eth / ipv4 dst spec 192.168.0.2 dst mask 255.255.255.0 / end actions drop / end",
+ "scapy_str": MAC_IPV4_PAY_DST_IP,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_pay_src_dst_ip = {
+ "name": "test_mac_ipv4_pay_src_dst_ip",
+ "rules": "flow create 0 ingress pattern eth / ipv4 src spec 192.168.0.1 src mask 255.255.255.0 dst spec 192.168.0.2 dst mask 255.255.0.255 / end actions drop / end",
+ "scapy_str": MAC_IPV4_PAY_SRC_DST_IP,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_pay_src_dst_mac_src_dst_ip = {
+ "name": "test_mac_ipv4_pay_src_dst_mac_src_dst_ip",
+ "rules": [
+ "flow create 0 ingress pattern eth dst is 33:00:00:00:00:01 / ipv4 / end actions vf id 1 / end",
+ "flow create 0 ingress pattern eth dst is 33:00:00:00:00:02 / ipv4 / end actions vf id 1 / end",
+ "flow create 0 ingress pattern eth dst is 33:00:00:00:00:03 / ipv4 / end actions vf id 1 / end",
+ "flow create 0 ingress pattern eth src spec 00:11:22:33:44:55 src mask ff:ff:ff:ff:ff:00 dst spec 33:00:00:00:00:02 dst mask ff:ff:ff:ff:ff:fe / ipv4 src spec 192.168.0.1 src mask 255.255.255.0 dst spec 192.168.0.2 dst mask 255.255.0.255 / end actions drop / end"],
+ "scapy_str": MAC_IPV4_PAY_SRC_DST_MAC_SRC_DST_IP,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_tcp_src_mac = {
+ "name": "test_mac_ipv4_tcp_src_mac",
+ "rules": "flow create 0 ingress pattern eth src spec 00:11:22:33:44:55 src mask ff:ff:ff:ff:ff:fe / ipv4 / tcp / end actions drop / end",
+ "scapy_str": MAC_IPV4_TCP_SRC_MAC,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_tcp_dst_mac = {
+ "name": "test_mac_ipv4_tcp_dst_mac",
+ "rules": [
+ "flow create 0 ingress pattern eth dst is 00:11:22:33:44:55 / ipv4 / tcp / end actions vf id 1 / end",
+ "flow create 0 ingress pattern eth dst is 00:11:22:33:44:66 / ipv4 / tcp / end actions vf id 1 / end",
+ "flow create 0 ingress pattern eth dst is 00:11:22:33:66:55 / ipv4 / tcp / end actions vf id 1 / end",
+ "flow create 0 ingress pattern eth dst spec 00:11:22:33:44:55 dst mask ff:ff:ff:ff:ff:00 / ipv4 / tcp / end actions drop / end"],
+ "scapy_str": MAC_IPV4_TCP_DST_MAC,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_tcp_src_ip = {
+ "name": "test_mac_ipv4_tcp_src_ip",
+ "rules": "flow create 0 ingress pattern eth / ipv4 src spec 192.168.0.1 src mask 255.255.255.254 / tcp / end actions drop / end",
+ "scapy_str": MAC_IPV4_TCP_SRC_IP,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_tcp_dst_ip = {
+ "name": "test_mac_ipv4_tcp_dst_ip",
+ "rules": "flow create 0 ingress pattern eth / ipv4 dst spec 192.168.0.2 dst mask 255.255.255.243 / tcp / end actions drop / end",
+ "scapy_str": MAC_IPV4_TCP_DST_IP,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_tcp_src_port = {
+ "name": "test_mac_ipv4_tcp_src_port",
+ "rules": "flow create 0 priority 0 ingress pattern eth / ipv4 / tcp src spec 8010 src mask 65520 / end actions drop / end",
+ "scapy_str": MAC_IPV4_TCP_SRC_PORT,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_tcp_dst_port = {
+ "name": "test_mac_ipv4_tcp_dst_port",
+ "rules": "flow create 0 priority 0 ingress pattern eth / ipv4 / tcp dst spec 8010 dst mask 65520 / end actions drop / end",
+ "scapy_str": MAC_IPV4_TCP_DST_PORT,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_tcp_src_dst_ip_src_dst_port = {
+ "name": "test_mac_ipv4_tcp_src_dst_ip_src_dst_port",
+ "rules": "flow create 0 priority 0 ingress pattern eth / ipv4 src spec 192.168.0.1 src mask 255.255.255.0 dst spec 192.168.0.2 dst mask 255.255.0.255 / tcp src spec 8010 src mask 65520 dst spec 8017 dst mask 65520 / end actions drop / end",
+ "scapy_str": MAC_IPV4_TCP_SRC_DST_IP_SRC_DST_PORT,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_tcp_src_dst_mac_src_dst_ip_src_dst_port = {
+ "name": "test_mac_ipv4_tcp_src_dst_mac_src_dst_ip_src_dst_port",
+ "rules": [
+ "flow create 0 ingress pattern eth dst is 33:00:00:00:00:01 / ipv4 / end actions vf id 1 / end",
+ "flow create 0 ingress pattern eth dst is 33:00:00:00:00:02 / ipv4 / end actions vf id 1 / end",
+ "flow create 0 ingress pattern eth dst is 33:00:00:00:00:03 / ipv4 / end actions vf id 1 / end",
+ "flow create 0 priority 0 ingress pattern eth src spec 00:11:22:33:44:55 src mask ff:ff:ff:ff:ff:00 dst spec 33:00:00:00:00:02 dst mask ff:ff:ff:ff:ff:fe / ipv4 src spec 192.168.0.1 src mask 255.255.255.0 dst spec 192.168.0.2 dst mask 255.255.0.255 / tcp src spec 8010 src mask 65520 dst spec 8017 dst mask 65520 / end actions drop / end"],
+ "scapy_str": MAC_IPV4_TCP_SRC_DST_MAC_SRC_DST_IP_SRC_DST_PORT,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_udp_src_mac = {
+ "name": "test_mac_ipv4_udp_src_mac",
+ "rules": "flow create 0 ingress pattern eth src spec 00:11:22:33:44:55 src mask ff:ff:ff:ff:ff:fe / ipv4 / udp / end actions drop / end",
+ "scapy_str": MAC_IPV4_UDP_SRC_MAC,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_udp_dst_mac = {
+ "name": "test_mac_ipv4_udp_dst_mac",
+ "rules": [
+ "flow create 0 ingress pattern eth dst is 00:11:22:33:44:55 / ipv4 / udp / end actions vf id 1 / end",
+ "flow create 0 ingress pattern eth dst is 00:11:22:33:44:66 / ipv4 / udp / end actions vf id 1 / end",
+ "flow create 0 ingress pattern eth dst is 00:11:22:33:66:55 / ipv4 / udp / end actions vf id 1 / end",
+ "flow create 0 ingress pattern eth dst spec 00:11:22:33:44:55 dst mask ff:ff:ff:ff:ff:00 / ipv4 / udp / end actions drop / end"],
+ "scapy_str": MAC_IPV4_UDP_DST_MAC,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_udp_src_ip = {
+ "name": "test_mac_ipv4_udp_src_ip",
+ "rules": "flow create 0 ingress pattern eth / ipv4 src spec 192.168.0.1 src mask 255.255.255.254 / udp / end actions drop / end",
+ "scapy_str": MAC_IPV4_UDP_SRC_IP,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_udp_dst_ip = {
+ "name": "test_mac_ipv4_udp_dst_ip",
+ "rules": "flow create 0 ingress pattern eth / ipv4 dst spec 192.168.0.2 dst mask 255.255.255.243 / udp / end actions drop / end",
+ "scapy_str": MAC_IPV4_UDP_DST_IP,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_udp_src_port = {
+ "name": "test_mac_ipv4_udp_src_port",
+ "rules": "flow create 0 priority 0 ingress pattern eth / ipv4 / udp src spec 8010 src mask 65520 / end actions drop / end",
+ "scapy_str": MAC_IPV4_UDP_SRC_PORT,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_udp_dst_port = {
+ "name": "test_mac_ipv4_udp_dst_port",
+ "rules": "flow create 0 priority 0 ingress pattern eth / ipv4 / udp dst spec 8010 dst mask 65520 / end actions drop / end",
+ "scapy_str": MAC_IPV4_UDP_DST_PORT,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_udp_src_dst_ip_src_dst_port = {
+ "name": "test_mac_ipv4_udp_src_dst_ip_src_dst_port",
+ "rules": "flow create 0 priority 0 ingress pattern eth / ipv4 src spec 192.168.0.1 src mask 255.255.255.0 dst spec 192.168.0.2 dst mask 255.255.0.255 / udp src spec 8010 src mask 65520 dst spec 8017 dst mask 65520 / end actions drop / end",
+ "scapy_str": MAC_IPV4_UDP_SRC_DST_IP_SRC_DST_PORT,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_udp_src_dst_mac_src_dst_ip_src_dst_port = {
+ "name": "test_mac_ipv4_udp_src_dst_mac_src_dst_ip_src_dst_port",
+ "rules": [
+ "flow create 0 ingress pattern eth dst is 33:00:00:00:00:01 / ipv4 / udp / end actions vf id 1 / end",
+ "flow create 0 ingress pattern eth dst is 33:00:00:00:00:02 / ipv4 / udp / end actions vf id 1 / end",
+ "flow create 0 ingress pattern eth dst is 33:00:00:00:00:03 / ipv4 / udp / end actions vf id 1 / end",
+ "flow create 0 priority 0 ingress pattern eth src spec 00:11:22:33:44:55 src mask ff:ff:ff:ff:ff:00 dst spec 33:00:00:00:00:03 dst mask ff:ff:ff:ff:ff:fe / ipv4 src spec 192.168.0.1 src mask 255.255.255.0 dst spec 192.168.0.2 dst mask 255.255.0.255 / udp src spec 8010 src mask 65520 dst spec 8017 dst mask 65520 / end actions drop / end"],
+ "scapy_str": MAC_IPV4_UDP_SRC_DST_MAC_SRC_DST_IP_SRC_DST_PORT,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_sctp_src_mac = {
+ "name": "test_mac_ipv4_sctp_src_mac",
+ "rules": "flow create 0 ingress pattern eth src spec 00:11:22:33:44:55 src mask ff:ff:ff:ff:ff:fe / ipv4 / sctp / end actions drop / end",
+ "scapy_str": MAC_IPV4_SCTP_SRC_MAC,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_sctp_dst_mac = {
+ "name": "test_mac_ipv4_sctp_dst_mac",
+ "rules": [
+ "flow create 0 ingress pattern eth dst spec %s dst mask ff:ff:ff:ff:ff:00 / ipv4 / sctp / end actions drop / end" % vf1_mac],
+ "scapy_str": MAC_IPV4_SCTP_DST_MAC,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_sctp_src_ip = {
+ "name": "test_mac_ipv4_sctp_src_ip",
+ "rules": "flow create 0 ingress pattern eth / ipv4 src spec 192.168.0.1 src mask 255.255.255.254 / sctp / end actions drop / end",
+ "scapy_str": MAC_IPV4_SCTP_SRC_IP,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_sctp_dst_ip = {
+ "name": "test_mac_ipv4_sctp_dst_ip",
+ "rules": "flow create 0 ingress pattern eth / ipv4 dst spec 192.168.0.2 dst mask 255.255.255.243 / sctp / end actions drop / end",
+ "scapy_str": MAC_IPV4_SCTP_DST_IP,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_sctp_src_port = {
+ "name": "test_mac_ipv4_sctp_src_port",
+ "rules": "flow create 0 priority 0 ingress pattern eth / ipv4 / sctp src spec 8010 src mask 65520 / end actions drop / end",
+ "scapy_str": MAC_IPV4_SCTP_SRC_PORT,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_sctp_dst_port = {
+ "name": "test_mac_ipv4_sctp_dst_port",
+ "rules": "flow create 0 priority 0 ingress pattern eth / ipv4 / sctp dst spec 8010 dst mask 65520 / end actions drop / end",
+ "scapy_str": MAC_IPV4_SCTP_DST_PORT,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_sctp_src_dst_ip_src_dst_port = {
+ "name": "test_mac_ipv4_sctp_src_dst_ip_src_dst_port",
+ "rules": "flow create 0 priority 0 ingress pattern eth / ipv4 src spec 192.168.0.1 src mask 255.255.255.0 dst spec 192.168.0.2 dst mask 255.255.0.255 / sctp src spec 8010 src mask 65520 dst spec 8017 dst mask 65520 / end actions drop / end",
+ "scapy_str": MAC_IPV4_SCTP_SRC_DST_IP_SRC_DST_PORT,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+tv_mac_ipv4_sctp_src_dst_mac_src_dst_ip_src_dst_port = {
+ "name": "test_mac_ipv4_sctp_src_dst_mac_src_dst_ip_src_dst_port",
+ "rules": [
+ "flow create 0 priority 0 ingress pattern eth src spec 00:11:22:33:44:55 src mask ff:ff:ff:ff:ff:00 dst spec %s dst mask ff:ff:ff:ff:ff:fe / ipv4 src spec 192.168.0.1 src mask 255.255.255.0 dst spec 192.168.0.2 dst mask 255.255.0.255 / sctp src spec 8010 src mask 65520 dst spec 8017 dst mask 65520 / end actions drop / end" % vf1_mac],
+ "scapy_str": MAC_IPV4_SCTP_SRC_DST_MAC_SRC_DST_IP_SRC_DST_PORT,
+ "check_param": {"port_id": 1, "drop": 1}
+}
+
+
+vectors_ipv4_pay_4ports = [tv_mac_ipv4_pay_src_ip, tv_mac_ipv4_pay_dst_ip, tv_mac_ipv4_pay_src_dst_ip]
+
+vectors_ipv4_pay_2ports = [tv_mac_ipv4_pay_src_mac, tv_mac_ipv4_pay_dst_mac, tv_mac_ipv4_pay_src_ip, tv_mac_ipv4_pay_dst_ip, tv_mac_ipv4_pay_src_dst_mac_src_dst_ip]
+
+vectors_ipv4_tcp_4ports = [tv_mac_ipv4_tcp_src_ip, tv_mac_ipv4_tcp_dst_ip,
+ tv_mac_ipv4_tcp_src_port,tv_mac_ipv4_tcp_dst_port,
+ tv_mac_ipv4_tcp_src_dst_ip_src_dst_port]
+
+vectors_ipv4_tcp_2ports = [tv_mac_ipv4_tcp_src_mac, tv_mac_ipv4_tcp_dst_mac,
+ tv_mac_ipv4_tcp_src_ip, tv_mac_ipv4_tcp_dst_ip,
+ tv_mac_ipv4_tcp_src_port,tv_mac_ipv4_tcp_dst_port,
+ tv_mac_ipv4_tcp_src_dst_mac_src_dst_ip_src_dst_port]
+
+vectors_ipv4_udp_4ports = [tv_mac_ipv4_udp_src_ip, tv_mac_ipv4_udp_dst_ip,
+ tv_mac_ipv4_udp_src_port,tv_mac_ipv4_udp_dst_port,
+ tv_mac_ipv4_udp_src_dst_ip_src_dst_port]
+
+vectors_ipv4_udp_2ports = [tv_mac_ipv4_udp_src_mac, tv_mac_ipv4_udp_dst_mac,
+ tv_mac_ipv4_udp_src_ip, tv_mac_ipv4_udp_dst_ip,
+ tv_mac_ipv4_udp_src_port,tv_mac_ipv4_udp_dst_port,
+ tv_mac_ipv4_udp_src_dst_mac_src_dst_ip_src_dst_port]
+
+vectors_ipv4_sctp_4ports = [tv_mac_ipv4_sctp_src_ip, tv_mac_ipv4_sctp_dst_ip,
+ tv_mac_ipv4_sctp_src_port,tv_mac_ipv4_sctp_dst_port,
+ tv_mac_ipv4_sctp_src_dst_ip_src_dst_port]
+
+vectors_ipv4_sctp_2ports = [tv_mac_ipv4_sctp_src_mac, tv_mac_ipv4_sctp_dst_mac,
+ tv_mac_ipv4_sctp_src_ip, tv_mac_ipv4_sctp_dst_ip,
+ tv_mac_ipv4_sctp_src_port,tv_mac_ipv4_sctp_dst_port,
+ tv_mac_ipv4_sctp_src_dst_mac_src_dst_ip_src_dst_port]
+
+
+class CVLDCFACLFilterTest(TestCase):
+
+ def bind_nics_driver(self, ports, driver=""):
+ # modprobe vfio driver
+ if driver == "vfio-pci":
+ for port in ports:
+ netdev = self.dut.ports_info[port]['port']
+ driver = netdev.get_nic_driver()
+ if driver != 'vfio-pci':
+ netdev.bind_driver(driver='vfio-pci')
+
+ elif driver == "igb_uio":
+ # igb_uio should insmod as default, no need to check
+ for port in ports:
+ netdev = self.dut.ports_info[port]['port']
+ driver = netdev.get_nic_driver()
+ if driver != 'igb_uio':
+ netdev.bind_driver(driver='igb_uio')
+ else:
+ for port in ports:
+ netdev = self.dut.ports_info[port]['port']
+ driver_now = netdev.get_nic_driver()
+ if driver == "":
+ driver = netdev.default_driver
+ if driver != driver_now:
+ netdev.bind_driver(driver=driver)
+
+ def set_up_all(self):
+ """
+ Run at the start of each test suite.
+ """
+ self.verify(self.nic in ["columbiaville_25g","columbiaville_100g"], "nic is not CVL")
+ self.dut_ports = self.dut.get_ports(self.nic)
+ # Verify that enough ports are available
+ self.verify(len(self.dut_ports) >= 2, "Insufficient ports")
+ localPort0 = self.tester.get_local_port(self.dut_ports[0])
+ self.tester_iface0 = self.tester.get_interface(localPort0)
+ self.pf0_intf = self.dut.ports_info[self.dut_ports[0]]['intf']
+ self.pf1_intf = self.dut.ports_info[self.dut_ports[1]]['intf']
+ self.dut.send_expect("ifconfig %s up" % self.tester_iface0, "# ")
+ self.pkt = Packet()
+ self.pmd_output = PmdOutput(self.dut)
+ self.testpmd_status = "close"
+ #bind pf to kernel
+ self.bind_nics_driver(self.dut_ports, driver="ice")
+ #move comms package to package folder
+ self.suite_config = rfc.get_suite_config(self)
+ comms_package_location = self.suite_config["comms_package_file_location"]
+ package_location = self.suite_config["package_file_location"]
+ self.dut.send_expect("cp %s %s" % (comms_package_location, package_location), "# ")
+ self.re_load_ice_driver()
+ #set vf driver
+ self.vf_driver = 'vfio-pci'
+ self.dut.send_expect("modprobe uio", "# ")
+ self.path = self.dut.apps_name['test-pmd']
+ self.setup_1pf_vfs_env()
+ self.dut.send_expect("ifconfig %s up" % self.tester_iface0, "# ", 15)
+
+ self.src_file_dir = 'dep/'
+ self.dut_file_dir = '/tmp/'
+
+ def setup_1pf_vfs_env(self, pf_port=0, driver='default'):
+
+ self.used_dut_port_0 = self.dut_ports[pf_port]
+ #get PF interface name
+ out = self.dut.send_expect('ethtool -i %s' % self.pf0_intf, '#')
+ #generate 4 VFs on PF
+ self.dut.generate_sriov_vfs_by_port(self.used_dut_port_0, 4, driver=driver)
+ self.sriov_vfs_port_0 = self.dut.ports_info[self.used_dut_port_0]['vfs_port']
+ self.vf0_pci = self.sriov_vfs_port_0[0].pci
+ self.vf1_pci = self.sriov_vfs_port_0[1].pci
+ #set VF0 as trust
+ self.dut.send_expect('ip link set %s vf 0 trust on' % self.pf0_intf, '#')
+ #set VF1 mac address
+ self.dut.send_expect("ip link set %s vf 1 mac %s" % (self.pf0_intf, vf1_mac), "# ")
+ #bind VFs to dpdk driver
+ for port in self.sriov_vfs_port_0:
+ port.bind_driver(self.vf_driver)
+ time.sleep(15)
+
+ def re_load_ice_driver(self):
+ """
+ remove and reload the ice driver
+ """
+ ice_driver_file_location = self.suite_config["ice_driver_file_location"]
+ self.dut.send_expect("rmmod ice", "# ", 60)
+ self.dut.send_expect("insmod %s" % ice_driver_file_location, "# ", 60)
+ self.dut.send_expect("ifconfig %s up" % self.pf0_intf, "# ", 15)
+ self.dut.send_expect("ifconfig %s up" % self.tester_iface0, "# ", 15)
+
+ def set_up(self):
+ """
+ Run before each test case.
+ """
+
+ def create_testpmd_command(self, param):
+ """
+ Create testpmd command
+ """
+ #Prepare testpmd EAL and parameters
+ all_eal_param = self.dut.create_eal_parameters(cores='1S/4C/1T',ports=[self.vf0_pci, self.vf1_pci], port_options={self.vf0_pci:"cap=dcf"})
+ command = self.path + all_eal_param + "--log-level='ice,7'" + " -- -i" + param
+ return command
+
+ def launch_testpmd(self, param=""):
+ """
+ launch testpmd with the command
+ """
+ time.sleep(5)
+ command = self.create_testpmd_command(param)
+ out = self.dut.send_expect(command, "testpmd> ", 20)
+ self.testpmd_status = "running"
+ self.dut.send_expect("set portlist 1", "testpmd> ", 15)
+ self.dut.send_expect("set fwd rxonly", "testpmd> ", 15)
+ self.dut.send_expect("set verbose 1", "testpmd> ", 15)
+ self.pmd_output.execute_cmd("start")
+ return out
+
+ def send_packets(self, packets):
+ self.pkt.update_pkt(packets)
+ tx_port = self.tester_iface0
+ self.pkt.send_pkt(crb=self.tester, tx_port=tx_port)
+
+ def send_pkts_getouput(self, pkts):
+ """
+ if pkt_info is True, we need to get packet infomation to check the RSS hash and FDIR.
+ if pkt_info is False, we just need to get the packet number and queue number.
+ """
+ self.send_packets(pkts)
+ time.sleep(1)
+ out_info = self.dut.get_session_output(timeout=1)
+ out_pkt = self.pmd_output.execute_cmd("stop", timeout=15)
+ out = out_info + out_pkt
+ self.pmd_output.execute_cmd("start")
+ return out
+
+ def create_acl_filter_rule(self, rules, session_name="", check_stats=True):
+ """
+ create acl filter rules
+ """
+ if session_name == "":
+ session_name = self.dut
+ p = re.compile(r"Flow rule #(\d+) created")
+ rule_list = []
+ acl_rule = "Succeeded to create (4) flow"
+ if isinstance(rules, list):
+ for rule in rules:
+ out = session_name.send_expect(rule, "testpmd> ")
+ if acl_rule in out:
+ m = p.search(out)
+ if m:
+ rule_list.append(m.group(1))
+ else:
+ rule_list.append(False)
+ else:
+ out = session_name.send_expect(rules, "testpmd> ")
+ if acl_rule in out:
+ m = p.search(out)
+ if m:
+ rule_list.append(m.group(1))
+ else:
+ rule_list.append(False)
+
+ if check_stats:
+ self.verify(all(rule_list), "some rules not created successfully, result %s, rule %s" % (rule_list, rules))
+ else:
+ self.verify(not any(rule_list), "all rules should create failed, result %s" % rule_list)
+ return rule_list
+
+ def create_other_filter_rule(self, rules, session_name="", check_stats=True):
+ """
+ create switch or fdir filter rules
+ """
+ if session_name == "":
+ session_name = self.dut
+ p = re.compile(r"Flow rule #(\d+) created")
+ rule_list = []
+ if isinstance(rules, list):
+ for rule in rules:
+ out = session_name.send_expect(rule, "testpmd> ")
+ m = p.search(out)
+ if m:
+ rule_list.append(m.group(1))
+ else:
+ rule_list.append(False)
+
+ else:
+ out = session_name.send_expect(rules, "testpmd> ")
+ m = p.search(out)
+ if m:
+ rule_list.append(m.group(1))
+ else:
+ rule_list.append(False)
+ if check_stats:
+ self.verify(all(rule_list), "some rules not created successfully, result %s, rule %s" % (rule_list, rules))
+ else:
+ self.verify(not any(rule_list), "all rules should create failed, result %s" % rule_list)
+ return rule_list
+
+ def check_filter_rule_list(self, port_id, rule_list, session_name="", need_verify=True):
+ """
+ check the rules in list identical to ones in rule_list
+ """
+ if session_name == "":
+ session_name = self.dut
+ out = session_name.send_expect("flow list %d" % port_id, "testpmd> ", 15)
+ p = re.compile(r"ID\s+Group\s+Prio\s+Attr\s+Rule")
+ m = p.search(out)
+ if not m:
+ result = []
+ else:
+ p_spec = re.compile("^(\d+)\s")
+ out_lines = out.splitlines()
+ res = filter(bool, map(p_spec.match, out_lines))
+ result = [i.group(1) for i in res]
+ if need_verify:
+ self.verify(result == rule_list,
+ "the rule list is not the same. expect %s, result %s" % (rule_list, result))
+ else:
+ return result
+
+ def destroy_acl_filter_rule(self, port_id, rule_list, session_name="", need_verify=True):
+ if session_name == "":
+ session_name = self.dut
+ p = re.compile(r"Flow rule #(\d+) destroyed")
+ destroy_list = []
+ if isinstance(rule_list, list):
+ for i in rule_list:
+ out = session_name.send_expect("flow destroy %s rule %s" % (port_id, i), "testpmd> ", 15)
+ m = p.search(out)
+ if m:
+ destroy_list.append(m.group(1))
+ else:
+ destroy_list.append(False)
+ else:
+ out = session_name.send_expect("flow destroy %s rule %s" % (port_id, rule_list), "testpmd> ", 15)
+ m = p.search(out)
+ if m:
+ destroy_list.append(m.group(1))
+ else:
+ destroy_list.append(False)
+ rule_list = [rule_list]
+ if need_verify:
+ self.verify(destroy_list == rule_list, "flow rule destroy failed, expect %s result %s" % (rule_list, destroy_list))
+ else:
+ return destroy_list
+
+ def common_process(self, vectors, launch_testpmd=True):
+
+ if launch_testpmd:
+ #launch testpmd
+ self.launch_testpmd()
+
+ test_results = {}
+ for test_vector in vectors:
+ try:
+ self.dut.send_expect("flow flush 0", "testpmd> ", 120)
+
+ #create a rule
+ rule_list = self.create_acl_filter_rule(test_vector["rules"])
+ # send and check match packets
+ out1 = self.send_pkts_getouput(pkts=test_vector["scapy_str"]["match"])
+ rfc.check_drop(out1, pkt_num=len(test_vector["scapy_str"]["match"]), check_param=test_vector["check_param"])
+ # send and check mismatch packets
+ out2 = self.send_pkts_getouput(pkts=test_vector["scapy_str"]["unmatch"])
+ rfc.check_drop(out2, pkt_num=len(test_vector["scapy_str"]["unmatch"]), check_param=test_vector["check_param"],
+ stats=False)
+ #destroy rule
+ self.destroy_acl_filter_rule(0, rule_list)
+ #send matched packets and check
+ out3 = self.send_pkts_getouput(pkts=test_vector["scapy_str"]["match"])
+ rfc.check_drop(out3, pkt_num=len(test_vector["scapy_str"]["match"]), check_param=test_vector["check_param"],
+ stats=False)
+ test_results[test_vector["name"]] = True
+ print((GREEN("case passed: %s" % test_vector["name"])))
+ except Exception as e:
+ print((RED(e)))
+ test_results[test_vector["name"]] = False
+ continue
+ failed_cases = []
+ for k, v in list(test_results.items()):
+ if not v:
+ failed_cases.append(k)
+ self.verify(all(test_results.values()), "{} failed.".format(failed_cases))
+
+ def test_mac_ipv4(self):
+ if self.nic == "columbiaville_25g":
+ self.common_process(vectors_ipv4_pay_4ports)
+ else:
+ self.common_process(vectors_ipv4_pay_2ports)
+
+ def test_mac_ipv4_tcp(self):
+ if self.nic == "columbiaville_25g":
+ self.common_process(vectors_ipv4_tcp_4ports)
+ else:
+ self.common_process(vectors_ipv4_tcp_2ports)
+
+ def test_mac_ipv4_udp(self):
+ if self.nic == "columbiaville_25g":
+ self.common_process(vectors_ipv4_udp_4ports)
+ else:
+ self.common_process(vectors_ipv4_udp_2ports)
+
+ def test_mac_ipv4_sctp(self):
+ if self.nic == "columbiaville_25g":
+ self.common_process(vectors_ipv4_sctp_4ports)
+ else:
+ self.common_process(vectors_ipv4_sctp_2ports)
+
+ def test_negative(self):
+ """
+ negative cases
+ """
+ out_testpmd = self.launch_testpmd()
+ self.check_dcf_status(out_testpmd, stats=True)
+ rules = {
+ "inconsistent spec and mask" : [
+ "flow create 0 ingress pattern eth / ipv4 src spec 192.168.0.1 dst mask 255.255.255.0 / end actions drop / end",
+ "flow create 0 ingress pattern eth / ipv4 / tcp src spec 8010 dst mask 65520 / end actions drop / end"],
+ "only spec/mask" : [
+ "flow create 0 ingress pattern eth / ipv4 src spec 192.168.0.1 / end actions drop / end",
+ "flow create 0 ingress pattern eth / ipv4 src mask 255.255.255.0 / end actions drop / end",
+ "flow create 0 ingress pattern eth src spec 00:11:22:33:44:55 / ipv4 / tcp / end actions drop / end",
+ "flow create 0 ingress pattern eth src mask ff:ff:ff:ff:ff:00 / ipv4 / tcp / end actions drop / end",
+ "flow create 0 ingress pattern eth / ipv4 / tcp src spec 8010 / end actions drop / end",
+ "flow create 0 ingress pattern eth / ipv4 / tcp src mask 65520 / end actions drop / end"],
+ "all 0 mask" : [
+ "flow create 0 ingress pattern eth / ipv4 src spec 192.168.0.1 src mask 0.0.0.0 / end actions drop / end",
+ "flow create 0 ingress pattern eth / ipv4 / tcp dst spec 8010 dst mask 0 / end actions drop / end",
+ "flow create 0 ingress pattern eth src spec 00:11:22:33:44:55 src mask 00:00:00:00:00:00 / ipv4 / tcp / end actions drop / end"],
+ "acl rules" : [
+ "flow create 0 ingress pattern eth / ipv4 src spec 192.168.0.1 src mask 255.255.255.0 dst spec 192.168.0.2 dst mask 0.0.0.0 / end actions drop / end",
+ "flow create 0 ingress pattern eth / ipv4 / tcp src spec 8010 src mask 65520 dst spec 8017 dst mask 0 / end actions drop / end",
+ "flow create 0 ingress pattern eth src spec 00:11:22:33:44:55 src mask ff:ff:ff:ff:ff:00 dst spec 00:11:22:33:44:55 dst mask 00:00:00:00:00:00 / ipv4 / tcp / end actions drop / end"],
+ "full mask" : [
+ "flow create 0 ingress pattern eth / ipv4 src spec 192.168.0.1 src mask 255.255.255.255 dst spec 192.168.0.2 dst mask 255.255.255.255 / end actions drop / end",
+ "flow create 0 ingress pattern eth / ipv4 src spec 192.168.1.1 src mask 255.255.255.255 dst spec 192.168.1.2 dst mask 255.255.255.255 / tcp src spec 8010 src mask 65535 dst spec 8017 dst mask 65535 / end actions drop / end",
+ "flow create 0 ingress pattern eth / ipv4 src spec 192.168.2.1 src mask 255.255.255.255 dst spec 192.168.2.2 dst mask 255.255.255.0 / udp src spec 8010 src mask 65520 dst spec 8017 dst mask 65535 / end actions drop / end",
+ "flow create 0 ingress pattern eth / ipv4 src spec 192.168.2.1 src mask 255.255.255.255 dst spec 192.168.2.2 dst mask 255.255.255.255 / sctp src spec 8012 src mask 65535 dst spec 8018 dst mask 65535 / end actions drop / end"],
+ }
+ # all the rules failed to be created
+ self.create_acl_filter_rule(rules["only spec/mask"], check_stats=False)
+ self.check_filter_rule_list(0, [])
+ self.create_acl_filter_rule(rules["all 0 mask"], check_stats=False)
+ self.check_filter_rule_list(0, [])
+ # full mask rules are created as switch rules
+ self.create_acl_filter_rule(rules["full mask"], check_stats=False)
+ self.dut.send_expect("flow flush 0", "testpmd> ", 15)
+ # inconsistent spec and mask rules
+ rule_list1 = self.create_acl_filter_rule(rules["inconsistent spec and mask"], check_stats=True)
+ self.check_filter_rule_list(0, rule_list1)
+ packet1 = [
+ 'Ether(dst="%s")/IP(src="192.168.1.1",dst="0.0.0.0")/("X"*480)' % vf1_mac,
+ 'Ether(dst="%s")/IP(src="192.168.0.1",dst="192.168.0.2")/TCP(sport=22,dport=0)/("X"*480)' % vf1_mac]
+ out1 = self.send_pkts_getouput(pkts=packet1)
+ rfc.check_drop(out1, pkt_num=2, check_param={"port_id": 1, "drop": 1}, stats=True)
+ self.dut.send_expect("flow flush 0", "testpmd> ", 15)
+ # acl rules combined "0" mask and not "0" mask
+ rule_list2 = self.create_acl_filter_rule(rules["acl rules"], check_stats=True)
+ self.check_filter_rule_list(0, rule_list2)
+ packet2 = [
+ 'Ether(dst="%s")/IP(src="192.168.0.1",dst="192.168.1.2")/("X"*480)' % vf1_mac,
+ 'Ether(dst="%s")/IP(src="192.168.1.1",dst="192.168.0.2")/TCP(sport=8012,dport=23)/("X"*480)' % vf1_mac,
+ 'Ether(src="00:11:22:33:44:55",dst="%s")/IP(src="192.168.1.1",dst="192.168.0.2")/TCP(sport=22,dport=23)/("X"*480)' % vf1_mac]
+ out2 = self.send_pkts_getouput(pkts=packet2)
+ rfc.check_drop(out2, pkt_num=3, check_param={"port_id": 1, "drop": 1}, stats=True)
+
+ def test_max_entry_num_combined_pattern(self):
+ """
+ the max ACL entry number combined two patterns.
+ """
+ src_file = 'max_entry_num'
+ flows=open(self.src_file_dir + src_file,mode='w')
+ count=0
+ for i in range(64):
+ flows.write('flow create 0 ingress pattern eth / ipv4 src spec 192.168.0.%d src mask 255.255.255.0 / end actions drop / end \n' % i)
+ count=count+1
+ for i in range(256):
+ flows.write('flow create 0 ingress pattern eth / ipv4 src spec 192.168.0.%d src mask 255.255.255.254 / tcp / end actions drop / end \n' % i)
+ count=count+1
+ flows.close()
+ self.verify(count == 320, "failed to config 320 acl rules.")
+ self.dut.session.copy_file_to(self.src_file_dir + src_file, self.dut_file_dir)
+
+ # start testpmd with creating 512 ACL rules
+ param = " --cmdline-file=%s" % (self.dut_file_dir + src_file)
+ out_testpmd = self.launch_testpmd(param)
+ self.check_dcf_status(out_testpmd, stats=True)
+ rule_list = self.dut.send_expect("flow list 0", "testpmd> ", 15)
+ self.verify("319" in rule_list, "320 rules failed to be created")
+
+ # create one more ACl rule failed, it is created as a switch rule.
+ rule = "flow create 0 ingress pattern eth / ipv4 src spec 192.168.2.255 src mask 255.255.255.254 / tcp / end actions drop / end"
+ self.create_acl_filter_rule(rule, check_stats=False)
+
+ # delete one ACL rule, create the rule again, it is created as an ACL rule successfully.
+ self.dut.send_expect("flow destroy 0 rule 319", "testpmd> ", 15)
+ rule_list = self.dut.send_expect("flow list 0", "testpmd> ", 15)
+ self.verify("319" not in rule_list, "rule 319 is not deleted")
+ self.create_acl_filter_rule(rule, check_stats=True)
+ # delete the switch rule
+ self.dut.send_expect("flow destroy 0 rule 320", "testpmd> ", 15)
+ # send and check match packets
+ packet = 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.2.255", dst="192.168.0.2")/TCP(sport=22, dport=23)/Raw(load="x"*30)' % vf1_mac
+ out1 = self.send_pkts_getouput(pkts=packet)
+ rfc.check_drop(out1, pkt_num=1, check_param={"port_id": 1, "drop": 1}, stats=True)
+
+ # delete all rules, send and check match packets
+ self.dut.send_expect("flow flush 0", "testpmd> ", 15)
+ out1 = self.send_pkts_getouput(pkts=packet)
+ rfc.check_drop(out1, pkt_num=1, check_param={"port_id": 1, "drop": 1}, stats=False)
+
+ def test_max_entry_num(self):
+ """
+ the default entry number is 512
+ """
+ src_file = 'max_entry_num'
+ flows=open(self.src_file_dir + src_file,mode='w')
+ count=0
+ for i in range(256):
+ flows.write('flow create 0 ingress pattern eth / ipv4 src spec 192.168.0.%d src mask 255.255.255.254 / tcp / end actions drop / end \n' % i)
+ count=count+1
+ for j in range(255):
+ flows.write('flow create 0 ingress pattern eth / ipv4 src spec 192.168.1.%d src mask 255.255.255.254 / tcp / end actions drop / end \n' % j)
+ count=count+1
+ flows.close()
+ self.verify(count == 511, "failed to config 511 acl rules.")
+ self.dut.session.copy_file_to(self.src_file_dir + src_file, self.dut_file_dir)
+
+ # start testpmd with creating 512 ACL rules
+ param = " --cmdline-file=%s" % (self.dut_file_dir + src_file)
+ out_testpmd = self.launch_testpmd(param)
+ self.check_dcf_status(out_testpmd, stats=True)
+ rule_list = self.dut.send_expect("flow list 0", "testpmd> ", 15)
+ self.verify("510" in rule_list, "511 rules failed to be created")
+
+ # create a switch rule
+ rule = "flow create 0 ingress pattern eth / ipv4 src spec 192.168.1.255 src mask 255.255.255.255 / tcp / end actions drop / end"
+ self.create_other_filter_rule(rule, check_stats=True)
+
+ # create the 512 ACl rule
+ rule1 = "flow create 0 ingress pattern eth / ipv4 src spec 192.168.2.255 src mask 255.255.255.254 / tcp / end actions drop / end"
+ self.create_acl_filter_rule(rule1, check_stats=True)
+ rule_list = self.dut.send_expect("flow list 0", "testpmd> ", 15)
+ self.verify("512" in rule_list, "the last ACL rule failed to be created")
+
+ # send and check match packets
+ packet1 = 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.2.255", dst="192.168.0.2")/TCP(sport=22, dport=23)/Raw(load="x"*30)' % vf1_mac
+ out1 = self.send_pkts_getouput(pkts=packet1)
+ rfc.check_drop(out1, pkt_num=1, check_param={"port_id": 1, "drop": 1}, stats=True)
+
+ # create one more ACl rule
+ rule2 = "flow create 0 ingress pattern eth / ipv4 src spec 192.168.3.255 src mask 255.255.255.254 / tcp / end actions drop / end"
+ self.create_acl_filter_rule(rule2, check_stats=False)
+ # send and check match packets
+ packet2 = 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.3.255", dst="192.168.0.2")/TCP(sport=22, dport=23)/Raw(load="x"*30)' % vf1_mac
+ out2 = self.send_pkts_getouput(pkts=packet2)
+ rfc.check_drop(out2, pkt_num=1, check_param={"port_id": 1, "drop": 1}, stats=False)
+
+ # delete one rule, create the rule again, successfully.
+ self.dut.send_expect("flow destroy 0 rule 512", "testpmd> ", 15)
+ rule_list = self.dut.send_expect("flow list 0", "testpmd> ", 15)
+ self.verify("512" not in rule_list, "rule 512 is not deleted")
+ self.create_acl_filter_rule(rule2, check_stats=True)
+ # send and check match packets
+ out3 = self.send_pkts_getouput(pkts=packet2)
+ rfc.check_drop(out3, pkt_num=1, check_param={"port_id": 1, "drop": 1}, stats=True)
+
+ # delete all rules, send and check match packets
+ self.dut.send_expect("flow flush 0", "testpmd> ", 15)
+ out4 = self.send_pkts_getouput(pkts=packet2)
+ rfc.check_drop(out4, pkt_num=1, check_param={"port_id": 1, "drop": 1}, stats=False)
+
+ def test_max_entry_num_ipv4_other(self):
+ """
+ create ipv4-other rules, 128 rules can be created at most.
+ """
+ src_file = 'max_entry_num_ipv4_other'
+ flows=open(self.src_file_dir + src_file,mode='w')
+ count=0
+ for i in range(127):
+ flows.write('flow create 0 ingress pattern eth / ipv4 src spec 192.168.1.1 src mask 255.255.255.254 dst spec 192.168.0.%d dst mask 255.255.255.254 / end actions drop / end \n' % i)
+ count=count+1
+ flows.close()
+ self.verify(count == 127, "failed to config 127 acl rules.")
+ self.dut.session.copy_file_to(self.src_file_dir + src_file, self.dut_file_dir)
+
+ # start testpmd with creating 128 ACL rules
+ param = " --cmdline-file=%s" % (self.dut_file_dir + src_file)
+ out_testpmd = self.launch_testpmd(param)
+ self.check_dcf_status(out_testpmd, stats=True)
+ rule_list = self.dut.send_expect("flow list 0", "testpmd> ", 15)
+ self.verify("126" in rule_list, "127 rules failed to be created")
+
+ # create one switch rule
+ rule = "flow create 0 ingress pattern eth / ipv4 src spec 192.168.1.1 src mask 255.255.255.254 dst spec 192.168.2.100 dst mask 255.255.255.255 / end actions drop / end"
+ self.create_other_filter_rule(rule, check_stats=True)
+
+ # create the 128th ACl rule
+ rule1 = "flow create 0 ingress pattern eth / ipv4 src spec 192.168.1.1 src mask 255.255.255.254 dst spec 192.168.0.127 dst mask 255.255.255.254 / end actions drop / end"
+ self.create_acl_filter_rule(rule1, check_stats=True)
+
+ # create one more ACl rule
+ rule2 = "flow create 0 ingress pattern eth / ipv4 src spec 192.168.1.1 src mask 255.255.255.254 dst spec 192.168.1.128 dst mask 255.255.255.254 / end actions drop / end"
+ self.create_acl_filter_rule(rule2, check_stats=False)
+
+ # delete one rule, create the rule again, successfully.
+ self.dut.send_expect("flow destroy 0 rule 128", "testpmd> ", 15)
+ rule_list = self.dut.send_expect("flow list 0", "testpmd> ", 15)
+ self.verify("128" not in rule_list, "rule 128 is not deleted")
+ self.create_acl_filter_rule(rule2, check_stats=True)
+ # delete switch rule
+ self.dut.send_expect("flow destroy 0 rule 129", "testpmd> ", 15)
+ rule_list = self.dut.send_expect("flow list 0", "testpmd> ", 15)
+ self.verify("129" not in rule_list, "rule 129 is not deleted")
+
+ # send and check match packets
+ packet = 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.1.1", dst="192.168.1.128")/Raw(load="x"*30)' % vf1_mac
+ out1 = self.send_pkts_getouput(pkts=packet)
+ rfc.check_drop(out1, pkt_num=1, check_param={"port_id": 1, "drop": 1}, stats=True)
+
+ # delete all rules, send and check match packets
+ self.dut.send_expect("flow flush 0", "testpmd> ", 60)
+ out1 = self.send_pkts_getouput(pkts=packet)
+ rfc.check_drop(out1, pkt_num=1, check_param={"port_id": 1, "drop": 1}, stats=False)
+
+ def test_multirules_diff_pattern_inputset(self):
+ """
+ create rules with different patterns or inputset step by step.
+ """
+ out_testpmd = self.launch_testpmd()
+ self.check_dcf_status(out_testpmd, stats=True)
+ rules = [
+ 'flow create 0 ingress pattern eth / ipv4 src spec 192.168.0.1 src mask 255.255.255.0 / end actions drop / end',
+ 'flow create 0 ingress pattern eth / ipv4 src spec 192.168.0.1 src mask 255.255.0.255 / end actions drop / end',
+ 'flow create 0 ingress pattern eth / ipv4 src spec 192.168.1.1 src mask 255.255.255.0 / end actions drop / end',
+ 'flow create 0 ingress pattern eth / ipv4 dst spec 192.168.0.1 dst mask 255.255.255.0 / end actions drop / end',
+ 'flow create 0 ingress pattern eth / ipv4 src spec 192.168.2.3 src mask 255.255.0.255 / udp / end actions drop / end'
+ ]
+ packets = [
+ 'Ether(dst="%s")/IP(src="192.168.0.3", dst="192.168.0.2")/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(dst="%s")/IP(src="192.168.3.1", dst="192.168.0.2")/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(dst="%s")/IP(src="192.168.1.3", dst="192.168.0.2")/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(dst="%s")/IP(src="192.168.3.3", dst="192.168.0.2")/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(dst="%s")/IP(src="192.168.3.3", dst="192.168.1.2")/UDP(sport=8012, dport=8018)/Raw(load="x"*30)' % vf1_mac
+ ]
+
+ self.create_acl_filter_rule(rules[0], check_stats=True)
+ out_drop = self.send_pkts_getouput(pkts=packets[0])
+ rfc.check_drop(out_drop, pkt_num=1, check_param={"port_id": 1, "drop": 1}, stats=True)
+ out_receive = self.send_pkts_getouput(pkts=packets[1:5])
+ rfc.check_drop(out_receive, pkt_num=4, check_param={"port_id": 1, "drop": 1}, stats=False)
+
+ # same input set field, same spec, different mask.
+ self.create_acl_filter_rule(rules[1], check_stats=True)
+ out_drop = self.send_pkts_getouput(pkts=packets[0:2])
+ rfc.check_drop(out_drop, pkt_num=2, check_param={"port_id": 1, "drop": 1}, stats=True)
+ out_receive = self.send_pkts_getouput(pkts=packets[2:5])
+ rfc.check_drop(out_receive, pkt_num=3, check_param={"port_id": 1, "drop": 1}, stats=False)
+
+ # same input set field, different spec, same mask.
+ self.create_acl_filter_rule(rules[2], check_stats=True)
+ out_drop = self.send_pkts_getouput(pkts=packets[0:3])
+ rfc.check_drop(out_drop, pkt_num=3, check_param={"port_id": 1, "drop": 1}, stats=True)
+ out_receive = self.send_pkts_getouput(pkts=packets[3:5])
+ rfc.check_drop(out_receive, pkt_num=2, check_param={"port_id": 1, "drop": 1}, stats=False)
+
+ # same pattern, different input set field.
+ self.create_acl_filter_rule(rules[3], check_stats=True)
+ out_drop = self.send_pkts_getouput(pkts=packets[0:4])
+ rfc.check_drop(out_drop, pkt_num=4, check_param={"port_id": 1, "drop": 1}, stats=True)
+ out_receive = self.send_pkts_getouput(pkts=packets[4])
+ rfc.check_drop(out_receive, pkt_num=1, check_param={"port_id": 1, "drop": 1}, stats=False)
+
+ # different pattern, same input set field.
+ self.create_acl_filter_rule(rules[4], check_stats=True)
+ out_drop = self.send_pkts_getouput(pkts=packets[0:5])
+ rfc.check_drop(out_drop, pkt_num=5, check_param={"port_id": 1, "drop": 1}, stats=True)
+
+ def test_multirules_all_pattern(self):
+ """
+ create multirules for all patterns
+ """
+ out_testpmd = self.launch_testpmd()
+ self.check_dcf_status(out_testpmd, stats=True)
+ rules = [
+ 'flow create 0 ingress pattern eth / ipv4 src spec 192.168.0.1 src mask 255.255.255.0 / end actions drop / end',
+ 'flow create 0 ingress pattern eth / ipv4 dst spec 192.168.0.2 dst mask 255.255.255.0 / end actions drop / end',
+ 'flow create 0 ingress pattern eth / ipv4 src spec 192.168.0.1 src mask 255.255.255.0 dst spec 192.168.0.2 dst mask 255.255.0.255 / end actions drop / end',
+ 'flow create 0 ingress pattern eth / ipv4 / tcp src spec 8010 src mask 65520 / end actions drop / end',
+ 'flow create 0 ingress pattern eth / ipv4 / tcp dst spec 8017 dst mask 65520 / end actions drop / end',
+ 'flow create 0 ingress pattern eth / ipv4 src spec 192.168.0.1 src mask 255.255.255.254 / tcp / end actions drop / end',
+ 'flow create 0 ingress pattern eth / ipv4 dst spec 192.168.0.2 dst mask 255.255.255.254 / tcp / end actions drop / end',
+ 'flow create 0 ingress pattern eth / ipv4 src spec 192.168.0.1 src mask 255.255.255.0 dst spec 192.168.0.2 dst mask 255.255.0.255 / tcp src spec 8010 src mask 65520 dst spec 8017 dst mask 65520 / end actions drop / end',
+ 'flow create 0 ingress pattern eth / ipv4 / udp src spec 8017 src mask 65520 / end actions drop / end',
+ 'flow create 0 ingress pattern eth / ipv4 / udp dst spec 8010 dst mask 65520 / end actions drop / end',
+ 'flow create 0 ingress pattern eth / ipv4 src spec 192.168.0.1 src mask 255.255.254.255 / udp / end actions drop / end',
+ 'flow create 0 ingress pattern eth / ipv4 dst spec 192.168.0.2 dst mask 255.255.254.255 / udp / end actions drop / end',
+ 'flow create 0 ingress pattern eth / ipv4 src spec 192.168.0.1 src mask 255.255.255.0 dst spec 192.168.0.2 dst mask 255.255.0.255 / udp src spec 8017 src mask 65520 dst spec 8010 dst mask 65520 / end actions drop / end',
+ 'flow create 0 ingress pattern eth / ipv4 src spec 192.168.0.1 src mask 255.255.255.254 / sctp / end actions drop / end',
+ 'flow create 0 ingress pattern eth / ipv4 dst spec 192.168.0.2 dst mask 255.255.255.254 / sctp / end actions drop / end',
+ 'flow create 0 ingress pattern eth / ipv4 / sctp src spec 8010 src mask 65520 / end actions drop / end',
+ 'flow create 0 ingress pattern eth / ipv4 / sctp dst spec 8010 dst mask 65520 / end actions drop / end',
+ 'flow create 0 ingress pattern eth / ipv4 src spec 192.168.0.1 src mask 255.255.255.0 dst spec 192.168.0.2 dst mask 255.255.0.255 / sctp src spec 8010 src mask 65520 dst spec 8017 dst mask 65520 / end actions drop / end'
+ ]
+ rule_list = self.create_acl_filter_rule(rules, check_stats=True)
+ self.check_filter_rule_list(0, rule_list)
+ packets = {
+ "drop": [
+ 'Ether(dst="%s")/IP(src="192.168.0.3", dst="192.168.0.2")/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(dst="%s")/IP(src="192.168.0.1", dst="192.168.0.2")/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(dst="%s")/IP(src="192.168.0.1", dst="192.168.1.2")/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(dst="%s")/IP(src="192.168.1.1", dst="192.168.1.2")/TCP(sport=8012, dport=7985)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(dst="%s")/IP(src="192.168.1.1", dst="192.168.1.2")/TCP(sport=7985, dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(dst="%s")/IP(src="192.168.0.0", dst="192.168.1.2")/TCP(sport=7984, dport=7985)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(dst="%s")/IP(src="192.168.1.1", dst="192.168.0.3")/TCP(sport=7984, dport=7985)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(dst="%s")/IP(src="192.168.0.3", dst="192.168.1.2")/TCP(sport=8012, dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(dst="%s")/IP(src="192.168.1.1", dst="192.168.1.2")/UDP(sport=8017, dport=7985)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(dst="%s")/IP(src="192.168.1.1", dst="192.168.1.2")/UDP(sport=7985, dport=8012)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(dst="%s")/IP(src="192.168.1.1", dst="192.168.0.3")/UDP(sport=7984, dport=7985)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(dst="%s")/IP(src="192.168.0.3", dst="192.168.1.2")/UDP(sport=7984, dport=7985)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(dst="%s")/IP(src="192.168.0.3", dst="192.168.1.2")/UDP(sport=8018, dport=8012)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(dst="%s")/IP(src="192.168.0.0", dst="192.168.0.3")/UDP(sport=8012, dport=8018)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(dst="%s")/IP(src="192.168.1.1", dst="192.168.1.2")/SCTP(sport=8012, dport=7985)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(dst="%s")/IP(src="192.168.1.1", dst="192.168.1.2")/SCTP(sport=7985, dport=8012)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(dst="%s")/IP(src="192.168.1.1", dst="192.168.0.3")/SCTP(sport=7984, dport=7985)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(dst="%s")/IP(src="192.168.0.1", dst="192.168.1.2")/SCTP(sport=7984, dport=7985)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(dst="%s")/IP(src="192.168.0.3", dst="192.168.1.2")/SCTP(sport=8012, dport=8018)/Raw(load="x"*30)' % vf1_mac],
+ "receive": [
+ 'Ether(dst="%s")/IP(src="192.168.1.1", dst="192.168.1.2")/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(dst="%s")/IP(src="192.168.1.1", dst="192.168.1.2")/TCP(sport=8018, dport=8012)/Raw(load="x"*30)' % vf1_mac,
+ 'Ether(dst="%s")/IP(src="192.168.1.0", dst="192.168.1.3")/SCTP(sport=8017, dport=8018)/Raw(load="x"*30)' % vf1_mac]
+ }
+ out_drop = self.send_pkts_getouput(pkts=packets["drop"])
+ rfc.check_drop(out_drop, pkt_num=len(packets["drop"]), check_param={"port_id": 1, "drop": 1}, stats=True)
+ out_receive = self.send_pkts_getouput(pkts=packets["receive"])
+ rfc.check_drop(out_receive, pkt_num=len(packets["receive"]), check_param={"port_id": 1, "drop": 1}, stats=False)
+
+ def test_multi_rteflow_rules(self):
+ """
+ create switch, acl and fdir rules simultaneously.
+ """
+ param = " --rxq=16 --txq=16"
+ out_testpmd = self.launch_testpmd(param)
+ self.check_dcf_status(out_testpmd, stats=True)
+ rules = {
+ "switch": [
+ "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.1 dst is 192.168.0.20 / tcp / end actions vf id 1 / end",
+ "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.2 dst is 192.168.0.20 / tcp / end actions vf id 1 / end",
+ "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.3 dst is 192.168.0.20 / tcp / end actions vf id 1 / end",
+ "flow create 0 ingress pattern eth / ipv4 src is 192.168.0.4 dst is 192.168.0.20 / tcp / end actions vf id 1 / end"],
+ "acl": [
+ "flow create 0 ingress pattern eth / ipv4 src spec 192.168.0.2 src mask 255.255.255.254 / tcp / end actions drop / end",
+ "flow create 0 ingress pattern eth / ipv4 dst spec 192.168.0.21 dst mask 255.255.0.255 / tcp / end actions drop / end"],
+ "fdir": [
+ "flow create 1 ingress pattern eth / ipv4 src is 192.168.0.1 dst is 192.168.0.20 / tcp src is 22 dst is 23 / end actions queue index 3 / mark / end",
+ "flow create 1 ingress pattern eth / ipv4 src is 192.168.0.2 dst is 192.168.0.20 / tcp src is 22 dst is 23 / end actions queue index 3 / mark / end",
+ "flow create 1 ingress pattern eth / ipv4 src is 192.168.1.1 dst is 192.168.0.20 / tcp src is 22 dst is 23 / end actions queue index 3 / mark / end"]
+ }
+ switch_rule_list = self.create_other_filter_rule(rules["switch"], check_stats=True)
+ self.check_filter_rule_list(0, switch_rule_list)
+ acl_rule_list = self.create_acl_filter_rule(rules["acl"], check_stats=True)
+ self.check_filter_rule_list(0, switch_rule_list+acl_rule_list)
+ fdir_rule_list = self.create_other_filter_rule(rules["fdir"], check_stats=True)
+ self.check_filter_rule_list(1, fdir_rule_list)
+
+ packets = {
+ "drop": [
+ 'Ether(src="00:11:22:33:44:55", dst="00:01:23:45:67:88")/IP(src="192.168.0.2", dst="192.168.0.20")/TCP(sport=22,dport=23)/Raw(load="x"*30)',
+ 'Ether(src="00:11:22:33:44:55", dst="00:01:23:45:67:88")/IP(src="192.168.0.3", dst="192.168.0.20")/TCP(sport=22,dport=23)/Raw(load="x"*30)',
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.1.1", dst="192.168.0.21")/TCP(sport=22,dport=23)/Raw(load="x"*30)' % vf1_mac],
+ "mark": [
+ 'Ether(src="00:11:22:33:44:55", dst="00:01:23:45:67:88")/IP(src="192.168.0.1", dst="192.168.0.20")/TCP(sport=22,dport=23)/Raw(load="x"*30)',
+ 'Ether(src="00:11:22:33:44:55", dst="%s")/IP(src="192.168.1.1", dst="192.168.0.20")/TCP(sport=22,dport=23)/Raw(load="x"*30)' % vf1_mac],
+ "rss": [
+ 'Ether(src="00:11:22:33:44:55", dst="00:01:23:45:67:88")/IP(src="192.168.0.1", dst="192.168.0.20")/TCP(sport=32,dport=33)/Raw(load="x"*30)',
+ 'Ether(src="00:11:22:33:44:55", dst="00:01:23:45:67:88")/IP(src="192.168.0.4", dst="192.168.0.20")/TCP(sport=22,dport=23)/Raw(load="x"*30)'],
+ "noreceived": 'Ether(src="00:11:22:33:44:55", dst="00:01:23:45:67:88")/IP(src="192.168.1.1", dst="192.168.0.20")/TCP(sport=22,dport=23)/Raw(load="x"*30)'
+ }
+
+ out_drop = self.send_pkts_getouput(pkts=packets["drop"])
+ rfc.check_drop(out_drop, pkt_num=len(packets["drop"]), check_param={"port_id": 1, "drop": 1}, stats=True)
+
+ out_mark = self.send_pkts_getouput(pkts=packets["mark"])
+ rfc.check_iavf_fdir_mark(out_mark, pkt_num=len(packets["mark"]), check_param={"port_id": 1, "queue": 3, "mark_id": 0})
+
+ out_rss = self.send_pkts_getouput(pkts=packets["rss"])
+ rfc.check_iavf_fdir_mark(out_rss, pkt_num=len(packets["rss"]), check_param={"port_id": 1, "passthru": 1})
+
+ out_noreceived = self.send_pkts_getouput(pkts=packets["noreceived"])
+ rfc.check_iavf_fdir_mark(out_noreceived, pkt_num=0, check_param={"port_id": 1, "passthru": 1})
+
+ self.dut.send_expect("flow destroy 0 rule 4", "testpmd> ", 15)
+
+ packets = {
+ "mark": 'Ether(src="00:11:22:33:44:55", dst="00:01:23:45:67:88")/IP(src="192.168.0.2", dst="192.168.0.20")/TCP(sport=22,dport=23)/Raw(load="x"*30)',
+ "rss": 'Ether(src="00:11:22:33:44:55", dst="00:01:23:45:67:88")/IP(src="192.168.0.3", dst="192.168.0.20")/TCP(sport=22,dport=23)/Raw(load="x"*30)'
+ }
+
+ out_mark = self.send_pkts_getouput(pkts=packets["mark"])
+ rfc.check_iavf_fdir_mark(out_mark, pkt_num=1, check_param={"port_id": 1, "queue": 3, "mark_id": 0})
+
+ out_rss = self.send_pkts_getouput(pkts=packets["rss"])
+ rfc.check_iavf_fdir_mark(out_rss, pkt_num=1, check_param={"port_id": 1, "passthru": 1})
+
+ def check_dcf_status(self, out_testpmd, stats=True):
+ """
+ check if request for DCF is accepted.
+ """
+ if stats:
+ self.verify("Failed to init DCF parent adapter" not in out_testpmd, "request for DCF is rejected.")
+ out_portinfo = self.dut.send_expect("show port info 0", "testpmd> ", 15)
+ self.verify("net_ice_dcf" in out_portinfo, "request for DCF is rejected.")
+ else:
+ self.verify("Failed to init DCF parent adapter" in out_testpmd, "request for DCF is accepted.")
+ out_portinfo = self.dut.send_expect("show port info 0", "testpmd> ", 15)
+ self.verify("net_ice_dcf" not in out_portinfo, "request for DCF is accepted.")
+ def quit_testpmd(self):
+ """
+ quit testpmd
+ """
+ if self.testpmd_status != "close":
+ # destroy all flow rules on DCF
+ self.dut.send_expect("flow flush 0", "testpmd> ", 15)
+ self.dut.send_expect("clear port stats all", "testpmd> ", 15)
+ self.dut.send_expect("quit", "#", 30)
+ #kill all DPDK application
+ self.dut.kill_all()
+ self.testpmd_status = "close"
+
+ def test_mutually_exclusive(self):
+ """
+ DCF mode and any ACL filters (not added by DCF) shall be mutually exclusive
+ """
+ self.dut.kill_all()
+ self.session_secondary = self.dut.new_session()
+
+ # add ACL rule by kernel, reject request for DCF functionality
+ self.add_acl_rule_not_by_dcf(self.pf0_intf, stats=True)
+ out_testpmd = self.launch_testpmd()
+ self.check_dcf_status(out_testpmd, stats=False)
+ self.quit_testpmd()
+ self.delete_acl_rule_not_added_by_dcf()
+ out_testpmd = self.launch_testpmd()
+ self.check_dcf_status(out_testpmd, stats=True)
+ self.quit_testpmd()
+
+ # add ACL rule by kernel, accept request for DCF functionality of another PF
+ self.add_acl_rule_not_by_dcf(self.pf1_intf, stats=True)
+ out_testpmd = self.launch_testpmd()
+ self.check_dcf_status(out_testpmd, stats=True)
+ self.quit_testpmd()
+ self.delete_acl_rule_not_added_by_dcf()
+
+ # ACL DCF mode is active, add ACL filters by way of host based configuration is rejected
+ out_testpmd = self.launch_testpmd()
+ self.check_dcf_status(out_testpmd, stats=True)
+ self.add_acl_rule_not_by_dcf(self.pf0_intf, stats=False)
+ self.quit_testpmd()
+ self.add_acl_rule_not_by_dcf(self.pf0_intf, stats=True)
+ self.delete_acl_rule_not_added_by_dcf()
+
+ # ACL DCF mode is active, add ACL filters by way of host based configuration on another PF successfully
+ out_testpmd = self.launch_testpmd()
+ self.check_dcf_status(out_testpmd, stats=True)
+ self.add_acl_rule_not_by_dcf(self.pf1_intf, stats=True)
+ self.quit_testpmd()
+ self.delete_acl_rule_not_added_by_dcf()
+
+ def add_acl_rule_not_by_dcf(self, pf, stats=True):
+ """
+ use secondary session
+ add acl rule by kernel command
+ """
+ if stats:
+ self.session_secondary.send_expect("ethtool -N %s flow-type tcp4 src-ip 192.168.10.0 m 0.255.255.255 dst-port 8000 m 0x00ff action -1" % pf, "# ")
+ else:
+ error_info = "rmgr: Cannot insert RX class rule: No such file or directory"
+ self.session_secondary.send_expect("ethtool -N %s flow-type tcp4 src-ip 192.168.10.0 m 0.255.255.255 dst-port 8000 m 0x00ff action -1" % pf, error_info)
+
+
+ def delete_acl_rule_not_added_by_dcf(self):
+ """
+ delete all the acl rule added not by DCF
+ """
+ out_pf0 = self.dut.send_expect("ethtool -n %s" % (self.pf0_intf), "# ")
+ out_pf1 = self.dut.send_expect("ethtool -n %s" % (self.pf1_intf), "# ")
+
+ p = re.compile(r"Filter: (\d+)")
+ m0 = p.search(out_pf0)
+ m1 = p.search(out_pf1)
+ if m0:
+ self.dut.send_expect("ethtool -N %s delete %d" % (self.pf0_intf, int(m0.group(1))), "# ")
+ self.dut.send_expect("ethtool -n %s" % (self.pf0_intf), "Total 0 rules")
+ if m1:
+ self.dut.send_expect("ethtool -N %s delete %d" % (self.pf1_intf, int(m1.group(1))), "# ")
+ self.dut.send_expect("ethtool -n %s" % (self.pf1_intf), "Total 0 rules")
+
+ def tear_down(self):
+ """
+ Run after each test case.
+ """
+ self.quit_testpmd()
+ if getattr(self, 'session_secondary', None):
+ self.dut.close_session(self.session_secondary)
+ self.delete_acl_rule_not_added_by_dcf()
+
+ def tear_down_all(self):
+ """
+ Run after each test suite.
+ """
+ self.dut.kill_all()