22. ICE DCF Switch Filter Tests¶
22.1. Description¶
This document provides the plan for testing DCF switch filter of Intel® Ethernet 800 Series, including:
- Enable DCF switch filter for IPv4/IPv6 + TCP/UDP/IGMP (comm #1 package)
- Enable DCF switch filter for tunnel: NVGRE (comm #1 package)
- Enable DCF switch filter for PFCP/L2TPv3/AH/ESP/NAT-T-ESP (comm #1 package)
- Enable DCF switch filter for IP/L2 multicast (comm #1 package)
- Enable DCF switch filter for ethertype/UDP port/MAC VLAN/VLAN filter (comm #1 package)
22.1.1. Pattern and input set¶
Packet Types Pattern Input Set IPv4/IPv6 + TCP/UDP/IGMP MAC_PAY [Source MAC], [Dest MAC], [Ether type] MAC_IPV4_FRAG [Dest MAC], [Source IP], [Dest IP], [TTL], [DSCP] MAC_IPV4_PAY [Dest MAC], [Source IP], [Dest IP], [IP protocol], [TTL], [DSCP] MAC_IPV4_UDP_PAY [Dest MAC], [Source IP], [Dest IP], [TTL], [DSCP], [Source Port], [Dest Port] MAC_IPV4_TCP_PAY [Dest MAC], [Source IP], [Dest IP], [TTL], [DSCP], [Source Port], [Dest Port] MAC_IPV4_IGMP [IP protocol] MAC_IPV6_FRAG_srcip_dstip [Source IP], [Dest IP] MAC_IPV6_FRAG_dstip_tc [Dest MAC], [Dest IP], [TC] MAC_IPV6_PAY_srcip_dstip [Source IP], [Dest IP] MAC_IPV6_PAY_dstip_tc [Dest MAC], [Dest IP], [TC] MAC_IPV6_UDP_PAY [Dest MAC], [Dest IP], [TC], [Source Port], [Dest Port] MAC_IPV6_TCP [Dest MAC], [Dest IP], [TC], [Source Port], [Dest Port] tunnel: NVGRE MAC_IPV4_TUN_IPV4_FRAG [Out Dest IP], [VNI/GRE_KEY], [Inner Source IP], [Inner Dest IP] MAC_IPV4_TUN_IPV4_PAY [Out Dest IP], [VNI/GRE_KEY], [Inner Source IP], [Inner Dest IP] MAC_IPV4_TUN_IPV4_UDP_PAY [Out Dest IP], [VNI/GRE_KEY], [Inner Source IP], [Inner Dest IP], [Inner Source Port], [Inner Dest Port] MAC_IPV4_TUN_IPV4_TCP [Out Dest IP], [VNI/GRE_KEY], [Inner Source IP], [Inner Dest IP], [Inner Source Port], [Inner Dest Port] MAC_IPV4_TUN_MAC_IPV4_FRAG [Out Dest IP], [VNI/GRE_KEY], [Inner Dest MAC], [Inner Source IP], [Inner Dest IP] MAC_IPV4_TUN_MAC_IPV4_PAY [Out Dest IP], [VNI/GRE_KEY], [Inner Dest MAC], [Inner Source IP], [Inner Dest IP] MAC_IPV4_TUN_MAC_IPV4_UDP_PAY [Out Dest IP], [VNI/GRE_KEY], [Inner Dest MAC], [Inner Source IP],[Inner Dest IP], [Inner Source Port], [Inner Dest Port] MAC_IPV4_TUN_MAC_IPV4_TCP [Out Dest IP], [VNI/GRE_KEY], [Inner Dest MAC], [Inner Source IP], [Inner Dest IP], [Inner Source Port], [Inner Dest Port] PFCP MAC_IPV4_PFCP_NODE [Dest Port], [S-field] MAC_IPV4_PFCP_SESSION [Dest Port], [S-field] MAC_IPV6_PFCP_NODE [Dest Port], [S-field] MAC_IPV6_PFCP_SESSION [Dest Port], [S-field] multicast IP multicast [Dest IP] L2 multicast [Dest MAC] ethertype filter ethertype filter_PPPOD [Ether type] ethertype filter_PPPOE [Ether type] ethertype filter_IPV6 [Ether type] UDP port filter UDP port filter_DHCP discovery [Source Port], [Dest Port] UDP port filter_DHCP offer [Source Port], [Dest Port] UDP port filter_VXLAN [Dest Port] MAC VLAN filter MAC_VLAN filter [Dest MAC], [VLAN] VLAN filter VLAN filter [VLAN] L2TPv3 MAC_IPV4_L2TPv3 [Source IP], [Dest IP], [Session_id] MAC_IPV6_L2TPv3 [Source IP], [Dest IP], [Session_id] ESP MAC_IPV4_ESP [Source IP], [Dest IP], [SPI] MAC_IPV6_ESP [Source IP], [Dest IP], [SPI] MAC_IPV4_AH [Source IP], [Dest IP], [SPI] MAC_IPV6_AH [Source IP], [Dest IP], [SPI] MAC_IPV4_NAT-T-ESP [Source IP], [Dest IP], [SPI] MAC_IPV6_NAT-T-ESP [Source IP], [Dest IP], [SPI]
Note
- The maximum input set length of a switch rule is 32 bytes, and src ipv6, dst ipv6 account for 32 bytes. Therefore, for ipv6 cases, if need to test fields other than src, dst ip, we create rule by removing src or dst ip in the test plan.
22.1.2. Supported function type¶
- create
- validate
- destroy
- flush
- list
22.1.3. Supported action type¶
- To vf/vsi
22.2. Prerequisites¶
Hardware: Intel® Ethernet 810 Series: E810-XXVDA4/E810-CQ design the cases with 2 ports card.
Software: dpdk: http://dpdk.org/git/dpdk scapy: http://www.secdev.org/projects/scapy/
Copy specific ice package to /lib/firmware/updates/intel/ice/ddp/ice.pkg, then load driver:
rmmod ice insmod ice.ko
Compile DPDK:
CC=gcc meson -Denable_kmods=True -Dlibdir=lib --default-library=static x86_64-native-linuxapp-gcc ninja -C x86_64-native-linuxapp-gcc
Get the pci device id of DUT, for example:
./usertools/dpdk-devbind.py -s 0000:18:00.0 'Device 1593' if=enp24s0f0 drv=ice unused=vfio-pci 0000:18:00.1 'Device 1593' if=enp24s0f1 drv=ice unused=vfio-pci
Generate 4 VFs on PF0 and PF1:
echo 4 > /sys/bus/pci/devices/0000:18:00.0/sriov_numvfs echo 4 > /sys/bus/pci/devices/0000:18:00.1/sriov_numvfs ./usertools/dpdk-devbind.py -s 0000:18:01.0 'Ethernet Adaptive Virtual Function 1889' if=enp24s1 drv=iavf unused=vfio-pci 0000:18:01.1 'Ethernet Adaptive Virtual Function 1889' if=enp24s1f1 drv=iavf unused=vfio-pci 0000:18:01.2 'Ethernet Adaptive Virtual Function 1889' if=enp24s1f2 drv=iavf unused=vfio-pci 0000:18:01.3 'Ethernet Adaptive Virtual Function 1889' if=enp24s1f3 drv=iavf unused=vfio-pci 0000:18:11.0 'Ethernet Adaptive Virtual Function 1889' if=enp24s2 drv=iavf unused=vfio-pci 0000:18:11.1 'Ethernet Adaptive Virtual Function 1889' if=enp24s2f1 drv=iavf unused=vfio-pci 0000:18:11.2 'Ethernet Adaptive Virtual Function 1889' if=enp24s2f2 drv=iavf unused=vfio-pci 0000:18:11.3 'Ethernet Adaptive Virtual Function 1889' if=enp24s2f3 drv=iavf unused=vfio-pci
Set VF0 as trust:
ip link set enp24s0f0 vf 0 trust on ip link set enp24s0f1 vf 0 trust on
Bind VFs to dpdk driver:
modprobe vfio-pci ./usertools/dpdk-devbind.py -b vfio-pci 0000:18:01.0 0000:18:01.1 0000:18:01.2 0000:18:01.3 ./usertools/dpdk-devbind.py -b vfio-pci 0000:18:11.0 0000:18:11.1 0000:18:11.2 0000:18:11.3
Launch dpdk on VF0, VF1 and VF2 of each PF, and VF0 request DCF mode, representing VF1 and VF2:
./x86_64-native-linuxapp-gcc/app/dpdk-testpmd -c 0xf -n 4 \ -a 0000:18:01.0,cap=dcf,representor=[1,2] -a 0000:18:01.1 -a 0000:18:01.2 \ -a 0000:18:11.0,cap=dcf,representor=[1,2] -a 0000:18:11.1 -a 0000:18:01.2 \ -- -i testpmd> set portlist 0,3,4,8,9 testpmd> set promisc 0 off testpmd> set promisc 5 off testpmd> set fwd rxonly testpmd> set verbose 1 testpmd> start testpmd> show port info all
check the VF0 driver of both PF is net_ice_dcf.
on tester side, copy the layer python file to /root:
cp pfcp.py to /root
then import layers when start scapy:
>>> import sys >>> sys.path.append('/root') >>> from pfcp import PFCP >>> from scapy.contrib.igmp import *
22.3. Test case: MAC_PAY¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth src is 00:00:00:00:00:01 dst is 00:11:22:33:44:55 type is 0x0800 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth src is 00:00:00:00:00:01 dst is 00:11:22:33:44:55 type is 0x0800 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth src is 00:00:00:00:00:01 dst is 00:11:22:33:44:55 type is 0x0800 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth src is 00:00:00:00:00:01 dst is 00:11:22:33:44:55 type is 0x0800 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(src="00:00:00:00:00:01",dst="00:11:22:33:44:55")/IP()/Raw("x" *80)],iface="enp27s0f0",count=1)
check port 0 and port 3 receive the packet. send mismatched packets:
sendp([Ether(src="00:00:00:00:00:02",dst="00:11:22:33:44:55")/IP()/Raw("x" *80)],iface="enp27s0f0",count=1) sendp([Ether(src="00:00:00:00:00:01",dst="00:11:22:33:44:54")/IP()/Raw("x" *80)],iface="enp27s0f0",count=1) sendp([Ether(src="00:00:00:00:00:01",dst="00:11:22:33:44:55")/IPv6()/Raw("x" *80)],iface="enp27s0f0",count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.4. Test case: MAC_IPV4_FRAG¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 2 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 2 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 2 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 2 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1",dst="192.168.0.2",tos=4,ttl=2,frag=5)/("X"*480)], iface="enp27s0f0", count=1)
check port 0 and port 3 receive the packet. send mismatched packets:
sendp([Ether(dst="68:05:ca:8d:ed:a3")/IP(src="192.168.0.1",dst="192.168.0.2",tos=4,ttl=2,frag=5)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.4",dst="192.168.0.2",tos=4,ttl=2,frag=5)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1",dst="192.168.0.5",tos=4,ttl=2,frag=5)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1",dst="192.168.0.2",tos=5,ttl=2,frag=5)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1",dst="192.168.0.2",tos=4,ttl=3,frag=5)/("X"*480)], iface="enp27s0f0", count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.5. Test case: MAC_IPV4_PAY¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 proto is 6 tos is 4 ttl is 2 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 proto is 6 tos is 4 ttl is 2 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 proto is 6 tos is 4 ttl is 2 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 proto is 6 tos is 4 ttl is 2 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1",dst="192.168.0.2",tos=4,ttl=2)/TCP()/("X"*480)], iface="enp27s0f0", count=1)
check port 0 and port 3 receive the packet. send mismatched packets:
sendp([Ether(dst="68:05:ca:8d:ed:a3")/IP(src="192.168.0.1",dst="192.168.0.2",tos=4,ttl=2)/TCP()/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.4",dst="192.168.0.2",tos=4,ttl=2)/TCP()/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1",dst="192.168.0.5",tos=4,ttl=2)/TCP()/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1",dst="192.168.0.2",tos=5,ttl=2)/TCP()/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1",dst="192.168.0.2",tos=4,ttl=3)/TCP()/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1",dst="192.168.0.2",tos=4,ttl=2)/UDP()/("X"*480)], iface="enp27s0f0", count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.6. Test case: MAC_IPV4_UDP_PAY¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1",dst="192.168.0.2",tos=4,ttl=3)/UDP(sport=25,dport=23)/("X"*480)], iface="enp27s0f0", count=1)
check port 0 and port 3 receive the packet. send mismatched packets:
sendp([Ether(dst="68:05:ca:8d:ed:a3")/IP(src="192.168.0.1",dst="192.168.0.2",tos=4,ttl=3)/UDP(sport=25,dport=23)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.5",dst="192.168.0.2",tos=4,ttl=3)/UDP(sport=25,dport=23)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1",dst="192.168.0.7",tos=4,ttl=3)/UDP(sport=25,dport=23)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1",dst="192.168.0.2",tos=5,ttl=3)/UDP(sport=25,dport=23)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1",dst="192.168.0.2",tos=4,ttl=9)/UDP(sport=25,dport=23)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1",dst="192.168.0.2",tos=4,ttl=3)/UDP(sport=30,dport=23)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1",dst="192.168.0.2",tos=4,ttl=3)/UDP(sport=25,dport=19)/("X"*480)], iface="enp27s0f0", count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.7. Test case: MAC_IPV4_TCP_PAY¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / tcp src is 25 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / tcp src is 25 dst is 23 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / tcp src is 25 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / tcp src is 25 dst is 23 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1",dst="192.168.0.2",tos=4,ttl=3)/TCP(sport=25,dport=23)/("X"*480)], iface="enp27s0f0", count=1)
check port 0 and port 3 receive the packet. send mismatched packets:
sendp([Ether(dst="68:05:ca:8d:ed:a3")/IP(src="192.168.0.1",dst="192.168.0.2",tos=4,ttl=3)/TCP(sport=25,dport=23)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.5",dst="192.168.0.2",tos=4,ttl=3)/TCP(sport=25,dport=23)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1",dst="192.168.0.7",tos=4,ttl=3)/TCP(sport=25,dport=23)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1",dst="192.168.0.2",tos=5,ttl=3)/TCP(sport=25,dport=23)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1",dst="192.168.0.2",tos=4,ttl=9)/TCP(sport=25,dport=23)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1",dst="192.168.0.2",tos=4,ttl=3)/TCP(sport=30,dport=23)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1",dst="192.168.0.2",tos=4,ttl=3)/TCP(sport=25,dport=19)/("X"*480)], iface="enp27s0f0", count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.8. Test case: MAC_IPV4_IGMP¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv4 proto is 0x02 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth / ipv4 proto is 0x02 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth / ipv4 proto is 0x02 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv4 proto is 0x02 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="00:11:22:33:44:55")/IP()/IGMP()/Raw("X"*480)], iface="enp27s0f0", count=1)
check port 0 and port 3 receive the packet. send mismatched packets:
sendp([Ether(dst="00:11:22:33:44:55")/IP()/TCP()/Raw("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="00:11:22:33:44:55")/IP()/UDP()/Raw("X"*480)], iface="enp27s0f0", count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.9. Test case: MAC_IPV6_srcip_dstip¶
Description: The maximum input set length of a switch rule is 32 bytes. Therefore, if a rule carries src ipv6, dst ipv6, it can not take any other fields.
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv6 src is CDCD:910A:2222:5498:8475:1111:3900:1536 dst is CDCD:910A:2222:5498:8475:1111:3900:2020 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth / ipv6 src is CDCD:910A:2222:5498:8475:1111:3900:1536 dst is CDCD:910A:2222:5498:8475:1111:3900:2020 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth / ipv6 src is CDCD:910A:2222:5498:8475:1111:3900:1536 dst is CDCD:910A:2222:5498:8475:1111:3900:2020 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv6 src is CDCD:910A:2222:5498:8475:1111:3900:1536 dst is CDCD:910A:2222:5498:8475:1111:3900:2020 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="00:11:22:33:44:55")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1536", dst="CDCD:910A:2222:5498:8475:1111:3900:2020")/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="00:11:22:33:44:55")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1536", dst="CDCD:910A:2222:5498:8475:1111:3900:2020")/IPv6ExtHdrFragment()/("X"*480)], iface="enp27s0f0", count=1)
check port 0 and port 3 receive the packets. send mismatched packets:
sendp([Ether(dst="00:11:22:33:44:55")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1537", dst="CDCD:910A:2222:5498:8475:1111:3900:2020")/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="00:11:22:33:44:55")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1536", dst="CDCD:910A:2222:5498:8475:1111:3900:2023")/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="00:11:22:33:44:55")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1537", dst="CDCD:910A:2222:5498:8475:1111:3900:2020")/IPv6ExtHdrFragment()/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="00:11:22:33:44:55")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1536", dst="CDCD:910A:2222:5498:8475:1111:3900:2023")/IPv6ExtHdrFragment()/("X"*480)], iface="enp27s0f0", count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.10. Test case: MAC_IPV6_dstip_tc¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv6 dst is CDCD:910A:2222:5498:8475:1111:3900:2020 tc is 3 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv6 dst is CDCD:910A:2222:5498:8475:1111:3900:2020 tc is 3 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv6 dst is CDCD:910A:2222:5498:8475:1111:3900:2020 tc is 3 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv6 dst is CDCD:910A:2222:5498:8475:1111:3900:2020 tc is 3 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="68:05:ca:8d:ed:a8")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1518", dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1518", dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/IPv6ExtHdrFragment()/("X"*480)], iface="enp27s0f0", count=1)
check port 0 and port 3 receive the packet. send mismatched packets:
sendp([Ether(dst="68:05:ca:8d:ed:a3")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1518", dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1518", dst="CDCD:910A:2222:5498:8475:1111:3900:2023",tc=3)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1518", dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=4)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a3")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1518", dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/IPv6ExtHdrFragment()/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1518", dst="CDCD:910A:2222:5498:8475:1111:3900:2023",tc=3)/IPv6ExtHdrFragment()/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1518", dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=4)/IPv6ExtHdrFragment()/("X"*480)], iface="enp27s0f0", count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.11. Test case: MAC_IPV6_UDP_PAY¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv6 dst is CDCD:910A:2222:5498:8475:1111:3900:2020 tc is 3 / udp src is 25 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv6 dst is CDCD:910A:2222:5498:8475:1111:3900:2020 tc is 3 / udp src is 25 dst is 23 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv6 dst is CDCD:910A:2222:5498:8475:1111:3900:2020 tc is 3 / udp src is 25 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv6 dst is CDCD:910A:2222:5498:8475:1111:3900:2020 tc is 3 / udp src is 25 dst is 23 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="68:05:ca:8d:ed:a8")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1518", dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/UDP(sport=25,dport=23)/("X"*480)], iface="enp27s0f0",count=1)
check port 0 and port 3 receive the packet. send mismatched packets:
sendp([Ether(dst="68:05:ca:8d:ed:a3")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1518", dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/UDP(sport=25,dport=23)/("X"*480)], iface="enp27s0f0",count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1518", dst="CDCD:910A:2222:5498:8475:1111:3900:2023",tc=3)/UDP(sport=25,dport=23)/("X"*480)], iface="enp27s0f0",count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1518", dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=7)/UDP(sport=25,dport=23)/("X"*480)], iface="enp27s0f0",count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1518", dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/UDP(sport=30,dport=23)/("X"*480)], iface="enp27s0f0",count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1518", dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/UDP(sport=25,dport=19)/("X"*480)], iface="enp27s0f0",count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.12. Test case: MAC_IPV6_TCP¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv6 dst is CDCD:910A:2222:5498:8475:1111:3900:2020 tc is 3 / tcp src is 25 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv6 dst is CDCD:910A:2222:5498:8475:1111:3900:2020 tc is 3 / tcp src is 25 dst is 23 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv6 dst is CDCD:910A:2222:5498:8475:1111:3900:2020 tc is 3 / tcp src is 25 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv6 dst is CDCD:910A:2222:5498:8475:1111:3900:2020 tc is 3 / tcp src is 25 dst is 23 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="68:05:ca:8d:ed:a8")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1518", dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/TCP(sport=25,dport=23)/("X"*480)], iface="enp27s0f0", count=1)
check port 0 and port 3 receive the packet. send mismatched packets:
sendp([Ether(dst="68:05:ca:8d:ed:a3")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1518", dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/TCP(sport=25,dport=23)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1518", dst="CDCD:910A:2222:5498:8475:1111:3900:2023",tc=3)/TCP(sport=25,dport=23)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1518", dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=7)/TCP(sport=25,dport=23)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1518", dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/TCP(sport=30,dport=23)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1518", dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/TCP(sport=25,dport=19)/("X"*480)], iface="enp27s0f0", count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.13. Test case: MAC_IPV4_VXLAN_IPV4_FRAG (not support in 20.05)¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3",frag=5)/TCP()/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3",frag=5)/Raw("x"*80)],iface="enp27s0f0",count=1)
check port 0 and port 3 receive the packets. send mismatched packets:
sendp([Ether()/IP(dst="192.168.0.2")/UDP()/VXLAN(vni=2)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3",frag=5)/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=3)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3",frag=5)/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether()/IP(src="192.168.0.4", dst="192.168.0.3",frag=5)/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether()/IP(src="192.168.0.2", dst="192.168.0.5",frag=5)/Raw("x"*80)],iface="enp27s0f0",count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.14. Test case: MAC_IPV4_VXLAN_IPV4_PAY (not support in 20.05)¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/TCP()/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/Raw("x"*80)],iface="enp27s0f0",count=1)
check port 0 and port 3 receive the packets. send mismatched packets:
sendp([Ether()/IP(dst="192.168.0.2")/UDP()/VXLAN(vni=2)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/TCP()/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=3)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/TCP()/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether()/IP(src="192.168.0.4", dst="192.168.0.3")/TCP()/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether()/IP(src="192.168.0.2", dst="192.168.0.5")/TCP()/Raw("x"*80)],iface="enp27s0f0",count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.15. Test case: MAC_IPV4_VXLAN_IPV4_UDP_PAY (not support in 20.05)¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / udp src is 50 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / udp src is 50 dst is 23 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / udp src is 50 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / udp src is 50 dst is 23 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/UDP(sport=50,dport=23) /Raw("x"*80)],iface="enp27s0f0",count=1)
check port 0 and port 3 receive the packets. send mismatched packets:
sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/UDP(sport=20,dport=23) /Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/UDP(sport=50,dport=19) /Raw("x"*80)],iface="enp27s0f0",count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.16. Test case: MAC_IPV4_VXLAN_IPV4_TCP (not support in 20.05)¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / tcp src is 50 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / tcp src is 50 dst is 23 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / tcp src is 50 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / tcp src is 50 dst is 23 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/TCP(sport=50,dport=23)/Raw("x"*80)],iface="enp27s0f0",count=1)
check port 0 and port 3 receive the packets. send mismatched packets:
sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/TCP(sport=29,dport=23)/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/TCP(sport=50,dport=100)/Raw("x"*80)],iface="enp27s0f0",count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.17. Test case: MAC_IPV4_VXLAN_MAC_IPV4_FRAG (not support in 20.05)¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.2", dst="192.168.0.3" ,frag=5)/TCP()/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.2", dst="192.168.0.3" ,frag=5)/Raw("x"*80)],iface="enp27s0f0",count=1)
check port 0 and port 3 receive the packets. send mismatched packets:
sendp([Ether()/IP(dst="192.168.0.2")/UDP()/VXLAN(vni=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.2", dst="192.168.0.3" ,frag=5)/TCP()/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=3)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.2", dst="192.168.0.3" ,frag=5)/TCP()/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether(dst="68:05:ca:8d:ed:a9")/IP(src="192.168.0.2", dst="192.168.0.3" ,frag=5)/TCP()/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.4", dst="192.168.0.3" ,frag=5)/TCP()/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.2", dst="192.168.0.5" ,frag=5)/TCP()/Raw("x"*80)],iface="enp27s0f0",count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.18. Test case: MAC_IPV4_VXLAN_MAC_IPV4_PAY (not support in 20.05)¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.2", dst="192.168.0.3") /TCP()/Raw("x" * 80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.2", dst="192.168.0.3")/Raw("x" * 80)],iface="enp27s0f0",count=1)
check port 0 and port 3 receive the packets. send mismatched packets:
sendp([Ether()/IP(dst="192.168.0.2")/UDP()/VXLAN(vni=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.2", dst="192.168.0.3") /TCP()/Raw("x" * 80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=3)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.2", dst="192.168.0.3") /TCP()/Raw("x" * 80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether(dst="68:05:ca:8d:ed:a9")/IP(src="192.168.0.2", dst="192.168.0.3") /TCP()/Raw("x" * 80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.4", dst="192.168.0.3") /TCP()/Raw("x" * 80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.2", dst="192.168.0.5") /TCP()/Raw("x" * 80)],iface="enp27s0f0",count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.19. Test case: MAC_IPV4_VXLAN_MAC_IPV4_UDP_PAY (not support in 20.05)¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / udp src is 50 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / udp src is 50 dst is 23 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / udp src is 50 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / udp src is 50 dst is 23 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.2", dst="192.168.0.3")/UDP(sport=50,dport=23)/Raw("x" * 80)],iface="enp27s0f0",count=1)
check port 0 and port 3 receive the packets. send mismatched packets:
sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.2", dst="192.168.0.3")/UDP(sport=20,dport=23)/Raw("x" * 80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.2", dst="192.168.0.3")/UDP(sport=50,dport=29)/Raw("x" * 80)],iface="enp27s0f0",count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.20. Test case: MAC_IPV4_VXLAN_MAC_IPV4_TCP (not support in 20.05)¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / tcp src is 25 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / tcp src is 25 dst is 23 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / tcp src is 25 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / udp / vxlan vni is 2 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / tcp src is 25 dst is 23 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.2", dst="192.168.0.3")/TCP(sport=25,dport=23)/Raw("x" * 80)],iface="enp27s0f0",count=1)
check port 0 and port 3 receive the packets. send mismatched packets:
sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.2", dst="192.168.0.3")/TCP(sport=20,dport=23)/Raw("x" * 80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.2", dst="192.168.0.3")/TCP(sport=25,dport=19)/Raw("x" * 80)],iface="enp27s0f0",count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.21. Test case: MAC_IPV4_NVGRE_IPV4_PAY¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 2 / eth / ipv4 src is 192.168.1.2 dst is 192.168.1.3 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 2 / eth / ipv4 src is 192.168.1.2 dst is 192.168.1.3 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 2 / eth / ipv4 src is 192.168.1.2 dst is 192.168.1.3 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 2 / eth / ipv4 src is 192.168.1.2 dst is 192.168.1.3 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=2)/Ether()/IP(src="192.168.1.2", dst="192.168.1.3")/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=2)/Ether()/IP(src="192.168.1.2", dst="192.168.1.3" ,frag=5)/Raw("x"*80)],iface="enp27s0f0",count=1)
check port 0 and port 3 receive the packets. send mismatched packets:
sendp([Ether()/IP(dst="192.168.0.2")/NVGRE(TNI=2)/Ether()/IP(src="192.168.1.2", dst="192.168.1.3")/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=3)/Ether()/IP(src="192.168.1.2", dst="192.168.1.3")/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=2)/Ether()/IP(src="192.168.1.4", dst="192.168.1.3")/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=2)/Ether()/IP(src="192.168.1.2", dst="192.168.1.5")/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.2")/NVGRE(TNI=2)/Ether()/IP(src="192.168.1.2", dst="192.168.1.3" ,frag=5)/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=3)/Ether()/IP(src="192.168.1.2", dst="192.168.1.3" ,frag=5)/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=2)/Ether()/IP(src="192.168.1.4", dst="192.168.1.3" ,frag=5)/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=2)/Ether()/IP(src="192.168.1.2", dst="192.168.1.5" ,frag=5)/Raw("x"*80)],iface="enp27s0f0",count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.22. Test case: MAC_IPV4_NVGRE_IPV4_UDP_PAY¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 0x8 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / udp src is 50 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 0x8 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / udp src is 50 dst is 23 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 0x8 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / udp src is 50 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 0x8 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / udp src is 50 dst is 23 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=0x8)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/UDP(sport=50,dport=23)/Raw("x"*80)], iface="enp27s0f0", count=1)
check port 0 and port 3 receive the packets. send mismatched packets:
sendp([Ether()/IP(dst="192.168.0.2")/NVGRE(TNI=0x8)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/UDP(sport=50,dport=23)/Raw("x"*80)], iface="enp27s0f0", count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=0x3)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/UDP(sport=50,dport=23)/Raw("x"*80)], iface="enp27s0f0", count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=0x8)/Ether()/IP(src="192.168.0.5", dst="192.168.0.3")/UDP(sport=50,dport=23)/Raw("x"*80)], iface="enp27s0f0", count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=0x8)/Ether()/IP(src="192.168.0.2", dst="192.168.0.7")/UDP(sport=50,dport=23)/Raw("x"*80)], iface="enp27s0f0", count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=0x8)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/UDP(sport=20,dport=23)/Raw("x"*80)], iface="enp27s0f0", count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=0x8)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/UDP(sport=50,dport=19)/Raw("x"*80)], iface="enp27s0f0", count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.23. Test case: MAC_IPV4_NVGRE_IPV4_TCP¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 2 / eth / ipv4 src is 192.168.1.2 dst is 192.168.1.3 / tcp src is 25 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 2 / eth / ipv4 src is 192.168.1.2 dst is 192.168.1.3 / tcp src is 25 dst is 23 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 2 / eth / ipv4 src is 192.168.1.2 dst is 192.168.1.3 / tcp src is 25 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 2 / eth / ipv4 src is 192.168.1.2 dst is 192.168.1.3 / tcp src is 25 dst is 23 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=2)/Ether()/IP(src="192.168.1.2", dst="192.168.1.3")/TCP(sport=25,dport=23)/Raw("x"*80)],iface="enp27s0f0",count=1)
check port 0 and port 3 receive the packets. send mismatched packets:
sendp([Ether()/IP(dst="192.168.0.2")/NVGRE(TNI=2)/Ether()/IP(src="192.168.1.2", dst="192.168.1.3")/TCP(sport=25,dport=23)/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=3)/Ether()/IP(src="192.168.1.2", dst="192.168.1.3")/TCP(sport=25,dport=23)/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=2)/Ether()/IP(src="192.168.1.5", dst="192.168.1.3")/TCP(sport=25,dport=23)/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=2)/Ether()/IP(src="192.168.1.2", dst="192.168.1.7")/TCP(sport=25,dport=23)/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=2)/Ether()/IP(src="192.168.1.2", dst="192.168.1.3")/TCP(sport=20,dport=23)/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=2)/Ether()/IP(src="192.168.1.2", dst="192.168.1.3")/TCP(sport=25,dport=39)/Raw("x"*80)],iface="enp27s0f0",count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.24. Test case: MAC_IPV4_NVGRE_MAC_IPV4_PAY¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 2 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.1.2 dst is 192.168.1.3 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 2 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.1.2 dst is 192.168.1.3 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 2 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.1.2 dst is 192.168.1.3 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 2 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.1.2 dst is 192.168.1.3 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.1.2", dst="192.168.1.3")/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.1.2", dst="192.168.1.3" ,frag=5)/Raw("x"*80)],iface="enp27s0f0",count=1)
check port 0 and port 3 receive the packets. send mismatched packets:
sendp([Ether()/IP(dst="192.168.0.2")/NVGRE(TNI=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.1.2", dst="192.168.1.3")/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=3)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.1.2", dst="192.168.1.3")/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=2)/Ether(dst="68:05:ca:8d:ed:a9")/IP(src="192.168.1.2", dst="192.168.1.3")/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.1.4", dst="192.168.1.3")/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.1.2", dst="192.168.1.5")/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.2")/NVGRE(TNI=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.1.2", dst="192.168.1.3" ,frag=5)/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=3)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.1.2", dst="192.168.1.3" ,frag=5)/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=2)/Ether(dst="68:05:ca:8d:ed:a9")/IP(src="192.168.1.2", dst="192.168.1.3" ,frag=5)/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.1.4", dst="192.168.1.3" ,frag=5)/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.1.2", dst="192.168.1.5" ,frag=5)/Raw("x"*80)],iface="enp27s0f0",count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.25. Test case: MAC_IPV4_NVGRE_MAC_IPV4_UDP_PAY¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 0x8 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.1.2 dst is 192.168.1.3 / udp src is 25 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 0x8 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.1.2 dst is 192.168.1.3 / udp src is 25 dst is 23 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 0x8 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.1.2 dst is 192.168.1.3 / udp src is 25 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 0x8 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.1.2 dst is 192.168.1.3 / udp src is 25 dst is 23 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=0x8)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.1.2", dst="192.168.1.3")/UDP(sport=25,dport=23)/Raw("x"*80)], iface="enp27s0f0", count=1)
check port 0 and port 3 receive the packets. send mismatched packets:
sendp([Ether()/IP(dst="192.168.0.2")/NVGRE(TNI=0x8)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.1.2", dst="192.168.1.3")/UDP(sport=25,dport=23)/Raw("x"*80)], iface="enp27s0f0", count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=0x3)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.1.2", dst="192.168.1.3")/UDP(sport=25,dport=23)/Raw("x"*80)], iface="enp27s0f0", count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=0x8)/Ether(dst="68:05:ca:8d:ed:a2")/IP(src="192.168.1.2", dst="192.168.1.3")/UDP(sport=25,dport=23)/Raw("x"*80)], iface="enp27s0f0", count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=0x8)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.1.5", dst="192.168.1.3")/UDP(sport=25,dport=23)/Raw("x"*80)], iface="enp27s0f0", count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=0x8)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.1.2", dst="192.168.1.7")/UDP(sport=25,dport=23)/Raw("x"*80)], iface="enp27s0f0", count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=0x8)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.1.2", dst="192.168.1.3")/UDP(sport=2,dport=23)/Raw("x"*80)], iface="enp27s0f0", count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=0x8)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.1.2", dst="192.168.1.3")/UDP(sport=25,dport=20)/Raw("x"*80)], iface="enp27s0f0", count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.26. Test case: MAC_IPV4_NVGRE_MAC_IPV4_TCP¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 2 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.1.2 dst is 192.168.1.3 / tcp src is 25 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 2 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.1.2 dst is 192.168.1.3 / tcp src is 25 dst is 23 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 2 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.1.2 dst is 192.168.1.3 / tcp src is 25 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 2 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.1.2 dst is 192.168.1.3 / tcp src is 25 dst is 23 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.1.2", dst="192.168.1.3")/TCP(sport=25,dport=23)/Raw("x"*80)],iface="enp27s0f0",count=1)
check port 0 and port 3 receive the packets. send mismatched packets:
sendp([Ether()/IP(dst="192.168.0.2")/NVGRE(TNI=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.1.2", dst="192.168.1.3")/TCP(sport=25,dport=23)/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=3)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.1.2", dst="192.168.1.3")/TCP(sport=25,dport=23)/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=2)/Ether(dst="68:05:ca:8d:ed:a2")/IP(src="192.168.1.2", dst="192.168.1.3")/TCP(sport=25,dport=23)/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.1.5", dst="192.168.1.3")/TCP(sport=25,dport=23)/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.1.2", dst="192.168.1.7")/TCP(sport=25,dport=23)/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.1.2", dst="192.168.1.3")/TCP(sport=1,dport=23)/Raw("x"*80)],iface="enp27s0f0",count=1) sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=2)/Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.1.2", dst="192.168.1.3")/TCP(sport=25,dport=20)/Raw("x"*80)],iface="enp27s0f0",count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.27. Test case: MAC_IPV4_PFCP_NODE¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv4 / udp / pfcp s_field is 0 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth / ipv4 / udp / pfcp s_field is 0 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
DUT create switch filter rules for MAC_IPV4_PFCP_NODE to VF1:
flow create 0 ingress pattern eth / ipv4 / udp / pfcp s_field is 0 / end actions represented_port ethdev_port_id 1 / end flow create 0 ingress pattern eth / ipv4 / udp / pfcp s_field is 0 / end actions port_representor port_id 0 / end
check the rule exists in the list.
testpmd> flow list 0 ID Group Prio Attr Rule 0 0 0 i– ETH IPV4 UDP PFCP => VF
send matched packets:
sendp(Ether(dst="00:11:22:33:44:11")/IP()/UDP(dport=8805)/PFCP(Sfield=0),iface="enp134s0f1")
check port 0 and port 3 receive the packet. send mismatched packets:
sendp(Ether(dst="00:11:22:33:44:11")/IP()/UDP(dport=8805)/PFCP(Sfield=1),iface="enp134s0f1") sendp(Ether(dst="00:11:22:33:44:11")/IPv6()/UDP(dport=8805)/PFCP(Sfield=0),iface="enp134s0f1") sendp(Ether(dst="00:11:22:33:44:11")/IPv6()/UDP(dport=8805)/PFCP(Sfield=1),iface="enp134s0f1")
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.28. Test case: MAC_IPV4_PFCP_SESSION¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv4 / udp / pfcp s_field is 1 / end actions represented_port ethdev_port_id 2 / end testpmd> flow validate 0 ingress pattern eth / ipv4 / udp / pfcp s_field is 1 / end actions represented_port ethdev_port_id 2 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
DUT create switch filter rules for MAC_IPV4_PFCP_SESSION to VF2:
flow create 0 ingress pattern eth / ipv4 / udp / pfcp s_field is 1 / end actions represented_port ethdev_port_id 2 / end flow create 0 ingress pattern eth / ipv4 / udp / pfcp s_field is 1 / end actions represented_port ethdev_port_id 2 / end
check the rule exists in the list.
testpmd> flow list 0 ID Group Prio Attr Rule 0 0 0 i– ETH IPV4 UDP PFCP => VF
send matched packets:
sendp(Ether(dst="00:11:22:33:44:11")/IP()/UDP(dport=8805)/PFCP(Sfield=1),iface="enp134s0f1")
check port 0 and port 4 receive the packet. send mismatched packets:
sendp(Ether(dst="00:11:22:33:44:11")/IP()/UDP(dport=8805)/PFCP(Sfield=0),iface="enp134s0f1") sendp(Ether(dst="00:11:22:33:44:11")/IPv6()/UDP(dport=8805)/PFCP(Sfield=0),iface="enp134s0f1") sendp(Ether(dst="00:11:22:33:44:11")/IPv6()/UDP(dport=8805)/PFCP(Sfield=1),iface="enp134s0f1")
check the packets are not to port 0 and port 4.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 4.
22.29. Test case: MAC_IPV6_PFCP_NODE¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv6 / udp / pfcp s_field is 0 / end actions represented_port ethdev_port_id 3 / end testpmd> flow validate 0 ingress pattern eth / ipv6 / udp / pfcp s_field is 0 / end actions represented_port ethdev_port_id 3 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
DUT create switch filter rules for MAC_IPV6_PFCP_NODE to VF3:
flow create 0 ingress pattern eth / ipv6 / udp / pfcp s_field is 0 / end actions represented_port ethdev_port_id 3 / end flow create 0 ingress pattern eth / ipv6 / udp / pfcp s_field is 0 / end actions represented_port ethdev_port_id 3 / end
check the rule exists in the list.
testpmd> flow list 0 ID Group Prio Attr Rule 0 0 0 i– ETH IPV6 UDP PFCP => VF
send matched packets:
sendp(Ether(dst="00:11:22:33:44:11")/IPv6()/UDP(dport=8805)/PFCP(Sfield=0),iface="enp134s0f1")
check port 0 and port 3 receive the packet. send mismatched packets:
sendp(Ether(dst="00:11:22:33:44:11")/IP()/UDP(dport=8805)/PFCP(Sfield=0),iface="enp134s0f1") sendp(Ether(dst="00:11:22:33:44:11")/IP()/UDP(dport=8805)/PFCP(Sfield=1),iface="enp134s0f1") sendp(Ether(dst="00:11:22:33:44:11")/IPv6()/UDP(dport=8805)/PFCP(Sfield=1),iface="enp134s0f1")
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.30. Test case: MAC_IPV6_PFCP_SESSION¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv6 / udp / pfcp s_field is 1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth / ipv6 / udp / pfcp s_field is 1 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
DUT create switch filter rules for MAC_IPV6_PFCP_SESSION to VF1:
flow create 0 ingress pattern eth / ipv6 / udp / pfcp s_field is 1 / end actions represented_port ethdev_port_id 1 / end flow create 0 ingress pattern eth / ipv6 / udp / pfcp s_field is 1 / end actions port_representor port_id 0 / end
check the rule exists in the list.
testpmd> flow list 0 ID Group Prio Attr Rule 0 0 0 i– ETH IPV6 UDP PFCP => VF
send matched packets:
sendp(Ether(dst="00:11:22:33:44:11")/IPv6()/UDP(dport=8805)/PFCP(Sfield=1),iface="enp134s0f1")
check port 0 and port 3 receive the packet. send mismatched packets:
sendp(Ether(dst="00:11:22:33:44:11")/IP()/UDP(dport=8805)/PFCP(Sfield=0),iface="enp134s0f1") sendp(Ether(dst="00:11:22:33:44:11")/IP()/UDP(dport=8805)/PFCP(Sfield=1),iface="enp134s0f1") sendp(Ether(dst="00:11:22:33:44:11")/IPv6()/UDP(dport=8805)/PFCP(Sfield=0),iface="enp134s0f1")
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.31. Test case: IP multicast¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv4 dst spec 224.0.0.0 dst mask 240.0.0.0 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth / ipv4 dst spec 224.0.0.0 dst mask 240.0.0.0 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth / ipv4 dst spec 224.0.0.0 dst mask 240.0.0.0 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv4 dst spec 224.0.0.0 dst mask 240.0.0.0 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether()/IP(dst="239.0.0.0")/TCP()/Raw("x"*80)], iface="enp27s0f0", count=1)
check port 0 and port 3 receive the packets. send mismatched packets:
sendp([Ether()/IP(dst="128.0.0.0")/TCP()/Raw("x"*80)], iface="enp27s0f0", count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.32. Test case: L2 multicast¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth dst spec 01:00:5e:00:00:00 dst mask ff:ff:ff:80:00:00 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth dst spec 01:00:5e:00:00:00 dst mask ff:ff:ff:80:00:00 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth dst spec 01:00:5e:00:00:00 dst mask ff:ff:ff:80:00:00 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth dst spec 01:00:5e:00:00:00 dst mask ff:ff:ff:80:00:00 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="01:00:5e:7f:00:00")/IP()/TCP()/Raw("x"*80)], iface="enp27s0f0", count=1)
check port 0 and port 3 receive the packets. send mismatched packets:
sendp([Ether(dst="01:00:5e:ff:00:00")/IP()/TCP()/Raw("x"*80)], iface="enp27s0f0", count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.33. Test case: ethertype filter_PPPOD¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth type is 0x8863 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth type is 0x8863 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth type is 0x8863 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth type is 0x8863 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="00:11:22:33:44:55")/PPPoED()/PPP()/IP()/Raw("x" *80)],iface="enp27s0f0",count=1)
check port 0 and port 3 receive the packets. send mismatched packets:
sendp([Ether(dst="00:11:22:33:44:55")/PPPoE()/PPP()/IP()/Raw("x" *80)],iface="enp27s0f0",count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.34. Test case: ethertype filter_PPPOE¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth type is 0x8864 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth type is 0x8864 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth type is 0x8864 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth type is 0x8864 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="00:11:22:33:44:55")/PPPoE()/PPP()/IP()/Raw("x"*80)],iface="enp27s0f0",count=1)
check port 0 and port 3 receive the packets. send mismatched packets:
sendp([Ether(dst="00:11:22:33:44:55")/PPPoED()/PPP()/IP()/Raw("x"*80)],iface="enp27s0f0",count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.35. Test case: ethertype filter_IPV6¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth type is 0x86dd / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth type is 0x86dd / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth type is 0x86dd / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth type is 0x86dd / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="00:11:22:33:44:55")/IPv6(dst="CDCD:910A:2222:5498:8475:1111:3900:2020", tc=3)/TCP(dport=23)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="00:11:22:33:44:55",type=0x8100)/Dot1Q(vlan=1,type=0x86dd)/IPv6(dst="CDCD:910A:2222:5498:8475:1111:3900:2020", tc=3)/TCP(dport=23)/("X"*480)], iface="enp27s0f0", count=1)
check port 0 and port 3 receive the packets. send mismatched packets:
sendp([Ether(dst="00:11:22:33:44:55")/IP()/TCP(dport=23)/("X"*480)], iface="enp27s0f0", count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.36. Test case: UDP port filter_DHCP discovery¶
Description: The udp port used by DHCP server is 67, and 68 by DHCP client. Therefore, for DHCP discovery packets, the udp srcport is 68 and the dstport is 67.
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv4 / udp src is 68 dst is 67 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth / ipv4 / udp src is 68 dst is 67 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth / ipv4 / udp src is 68 dst is 67 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv4 / udp src is 68 dst is 67 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="00:11:22:33:44:55")/IP()/UDP(sport=68,dport=67)/BOOTP(chaddr="3c:fd:fe:b2:43:90")/DHCP(options=[("message-type","discover"),"end"])/Raw("X"*480)], iface="enp27s0f0", count=1)
check port 0 and port 3 receive the packets. send mismatched packets:
sendp([Ether(dst="00:11:22:33:44:55")/IP()/UDP(sport=63,dport=67)/BOOTP(chaddr="3c:fd:fe:b2:43:90")/DHCP(options=[("message-type","discover"),"end"])/Raw("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="00:11:22:33:44:55")/IP()/UDP(sport=68,dport=69)/BOOTP(chaddr="3c:fd:fe:b2:43:90")/DHCP(options=[("message-type","discover"),"end"])/Raw("X"*480)], iface="enp27s0f0", count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.37. Test case: UDP port filter_DHCP offer¶
Description: For DHCP offer packets, the udp srcport is 67 and the dstport is 68.
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv4 / udp src is 67 dst is 68 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth / ipv4 / udp src is 67 dst is 68 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth / ipv4 / udp src is 67 dst is 68 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv4 / udp src is 67 dst is 68 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="00:11:22:33:44:55")/IP()/UDP(sport=67,dport=68)/BOOTP(chaddr="3c:fd:fe:b2:43:90",yiaddr="192.168.1.0")/DHCP(options=[("message-type","offer"),"end"])/Raw("X"*480)], iface="enp27s0f0", count=1)
check port 0 and port 3 receive the packets. send mismatched packets:
sendp([Ether(dst="00:11:22:33:44:55")/IP()/UDP(sport=63,dport=68)/BOOTP(chaddr="3c:fd:fe:b2:43:90",yiaddr="192.168.1.0")/DHCP(options=[("message-type","offer"),"end"])/Raw("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="00:11:22:33:44:55")/IP()/UDP(sport=67,dport=63)/BOOTP(chaddr="3c:fd:fe:b2:43:90",yiaddr="192.168.1.0")/DHCP(options=[("message-type","offer"),"end"])/Raw("X"*480)], iface="enp27s0f0", count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.38. Test case: UDP port filter_VXLAN¶
Description: The UDP dst port number used by VXLAN is 4789.
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv4 / udp dst is 4789 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth / ipv4 / udp dst is 4789 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth / ipv4 / udp dst is 4789 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv4 / udp dst is 4789 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether()/IP(dst="192.168.0.1")/UDP()/VXLAN(vni=2)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3",frag=5)/TCP()/Raw("x"*80)],iface="enp27s0f0",count=1)
check port 0 and port 3 receive the packets. send mismatched packets:
sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=2)/Ether()/IP(src="192.168.1.2", dst="192.168.1.3")/TCP()/Raw("x"*80)],iface="enp27s0f0",count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.39. Test case: MAC_VLAN filter¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth dst is 00:11:22:33:44:55 / vlan tci is 1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth dst is 00:11:22:33:44:55 / vlan tci is 1 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth dst is 00:11:22:33:44:55 / vlan tci is 1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth dst is 00:11:22:33:44:55 / vlan tci is 1 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="00:11:22:33:44:55",type=0x8100)/Dot1Q(vlan=1)/IP(src="192.168.0.1",dst="192.168.0.2",tos=4,ttl=2)/TCP()/Raw("X"*480)],iface="enp27s0f0",count=1)
check port 0 and port 3 receive the packets. send mismatched packets:
sendp([Ether(dst="00:11:22:33:44:54",type=0x8100)/Dot1Q(vlan=1)/IP(src="192.168.0.1",dst="192.168.0.2",tos=4,ttl=2)/TCP()/Raw("X"*480)],iface="enp27s0f0",count=1) sendp([Ether(dst="00:11:22:33:44:55",type=0x8100)/Dot1Q(vlan=2)/IP(src="192.168.0.1",dst="192.168.0.2",tos=4,ttl=2)/TCP()/Raw("X"*480)],iface="enp27s0f0",count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.40. Test case: VLAN filter¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth / vlan tci is 1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth / vlan tci is 1 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 ingress pattern eth / vlan tci is 1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / vlan tci is 1 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="00:11:22:33:44:55",type=0x8100)/Dot1Q(vlan=1)/IP(src="192.168.0.1",dst="192.168.0.2",tos=4,ttl=2)/TCP()/Raw("X"*480)],iface="enp27s0f0",count=1)
check port 0 and port 3 receive the packets. send mismatched packets:
sendp([Ether(dst="00:11:22:33:44:55",type=0x8100)/Dot1Q(vlan=2)/IP(src="192.168.0.1",dst="192.168.0.2",tos=4,ttl=2)/TCP()/Raw("X"*480)],iface="enp27s0f0",count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.41. Test case: MAC_IPV4_L2TPv3¶
validate a rule:
testpmd> flow validate 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.2 / l2tpv3oip session_id is 1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.2 / l2tpv3oip session_id is 1 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.2 / l2tpv3oip session_id is 1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.2 / l2tpv3oip session_id is 1 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst='00:11:22:33:44:12')/IP(src='192.168.0.2', proto=115)/L2TP('\x00\x00\x00\x01')/('X'*480)], iface="enp27s0f0", count=1)
check port 0 and port 3 receive the packet. send mismatched packets:
sendp([Ether(dst='00:11:22:33:44:12')/IP(src='192.168.0.2', proto=115)/L2TP('\x00\x00\x00\x02')/('X'*480)], iface="enp27s0f0", count=1) sendp([Ether(dst='00:11:22:33:44:12')/IP(src='192.168.1.2', proto=115)/L2TP('\x00\x00\x00\x01')/('X'*480)], iface="enp27s0f0", count=1) sendp([Ether(dst='00:11:22:33:44:12')/IP(dst='192.168.0.2', proto=115)/L2TP('\x00\x00\x00\x01')/('X'*480)], iface="enp27s0f0", count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.42. Test case: MAC_IPV6_L2TPv3¶
validate a rule:
testpmd> flow validate 0 priority 0 ingress pattern eth / ipv6 dst is 1111:2222:3333:4444:5555:6666:7777:8888 / l2tpv3oip session_id is 1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 priority 0 ingress pattern eth / ipv6 dst is 1111:2222:3333:4444:5555:6666:7777:8888 / l2tpv3oip session_id is 1 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 priority 0 ingress pattern eth / ipv6 dst is 1111:2222:3333:4444:5555:6666:7777:8888 / l2tpv3oip session_id is 1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 priority 0 ingress pattern eth / ipv6 dst is 1111:2222:3333:4444:5555:6666:7777:8888 / l2tpv3oip session_id is 1 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst='00:11:22:33:44:13')/IPv6(dst='1111:2222:3333:4444:5555:6666:7777:8888', nh=115)/L2TP('\x00\x00\x00\x01')/('X'*480)], iface="enp27s0f0", count=1)
check port 0 and port 3 receive the packet. send mismatched packets:
sendp([Ether(dst='00:11:22:33:44:13')/IPv6(dst='1111:2222:3333:4444:5555:6666:7777:8888', nh=115)/L2TP('\x00\x00\x00\x02')/('X'*480)], iface="enp27s0f0", count=1) sendp([Ether(dst='00:11:22:33:44:13')/IPv6(dst='1111:2222:3333:4444:5555:6666:7777:9999', nh=115)/L2TP('\x00\x00\x00\x01')/('X'*480)], iface="enp27s0f0", count=1) sendp([Ether(dst='00:11:22:33:44:13')/IPv6(src='1111:2222:3333:4444:5555:6666:7777:8888', nh=115)/L2TP('\x00\x00\x00\x01')/('X'*480)], iface="enp27s0f0", count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.43. Test case: MAC_IPV4_ESP¶
validate a rule:
testpmd> flow validate 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.2 / esp spi is 1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.2 / esp spi is 1 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.2 / esp spi is 1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.2 / esp spi is 1 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="00:11:22:33:44:13")/IP(src="192.168.0.2", proto=50)/ESP(spi=1)/("X"*480)], iface="enp27s0f0", count=1)
check port 0 and port 3 receive the packet. send mismatched packets:
sendp([Ether(dst="00:11:22:33:44:13")/IP(src="192.168.0.2", proto=50)/ESP(spi=2)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="00:11:22:33:44:13")/IP(src="192.168.1.2", proto=50)/ESP(spi=1)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="00:11:22:33:44:13")/IP(dst="192.168.0.2", proto=50)/ESP(spi=1)/("X"*480)], iface="enp27s0f0", count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.44. Test case: MAC_IPV6_ESP¶
validate a rule:
testpmd> flow validate 0 priority 0 ingress pattern eth / ipv6 dst is 1111:2222:3333:4444:5555:6666:7777:8888 / esp spi is 1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 priority 0 ingress pattern eth / ipv6 dst is 1111:2222:3333:4444:5555:6666:7777:8888 / esp spi is 1 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 priority 0 ingress pattern eth / ipv6 dst is 1111:2222:3333:4444:5555:6666:7777:8888 / esp spi is 1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 priority 0 ingress pattern eth / ipv6 dst is 1111:2222:3333:4444:5555:6666:7777:8888 / esp spi is 1 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="00:11:22:33:44:13")/IPv6(dst="1111:2222:3333:4444:5555:6666:7777:8888", nh=50)/ESP(spi=1)/("X"*480)], iface="enp27s0f0", count=1)
check port 0 and port 3 receive the packet. send mismatched packets:
sendp([Ether(dst="00:11:22:33:44:13")/IPv6(dst="1111:2222:3333:4444:5555:6666:7777:8888", nh=50)/ESP(spi=2)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="00:11:22:33:44:13")/IPv6(dst="1111:2222:3333:4444:5555:6666:7777:9999", nh=50)/ESP(spi=1)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="00:11:22:33:44:13")/IPv6(src="1111:2222:3333:4444:5555:6666:7777:8888", nh=50)/ESP(spi=1)/("X"*480)], iface="enp27s0f0", count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.45. Test case: MAC_IPV4_AH¶
validate a rule:
testpmd> flow validate 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.2 / ah spi is 1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.2 / ah spi is 1 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.2 / ah spi is 1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.2 / ah spi is 1 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="00:11:22:33:44:13")/IP(src="192.168.0.2", proto=51)/AH(spi=1)/("X"*480)], iface="enp27s0f0", count=1)
check port 0 and port 3 receive the packet. send mismatched packets:
sendp([Ether(dst="00:11:22:33:44:13")/IP(src="192.168.0.2", proto=51)/AH(spi=2)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="00:11:22:33:44:13")/IP(src="192.168.1.2", proto=51)/AH(spi=1)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="00:11:22:33:44:13")/IP(dst="192.168.0.2", proto=51)/AH(spi=1)/("X"*480)], iface="enp27s0f0", count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.46. Test case: MAC_IPV6_AH¶
validate a rule:
testpmd> flow validate 0 priority 0 ingress pattern eth / ipv6 dst is 1111:2222:3333:4444:5555:6666:7777:8888 / ah spi is 1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 priority 0 ingress pattern eth / ipv6 dst is 1111:2222:3333:4444:5555:6666:7777:8888 / ah spi is 1 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 priority 0 ingress pattern eth / ipv6 dst is 1111:2222:3333:4444:5555:6666:7777:8888 / ah spi is 1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 priority 0 ingress pattern eth / ipv6 dst is 1111:2222:3333:4444:5555:6666:7777:8888 / ah spi is 1 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="00:11:22:33:44:13")/IPv6(dst="1111:2222:3333:4444:5555:6666:7777:8888", nh=51)/AH(spi=1)/("X"*480)], iface="enp27s0f0", count=1)
check port 0 and port 3 receive the packet. send mismatched packets:
sendp([Ether(dst="00:11:22:33:44:13")/IPv6(dst="1111:2222:3333:4444:5555:6666:7777:8888", nh=51)/AH(spi=2)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="00:11:22:33:44:13")/IPv6(dst="1111:2222:3333:4444:5555:6666:7777:9999", nh=51)/AH(spi=1)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="00:11:22:33:44:13")/IPv6(src="1111:2222:3333:4444:5555:6666:7777:8888", nh=51)/AH(spi=1)/("X"*480)], iface="enp27s0f0", count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.47. Test case: MAC_IPV4_NAT-T-ESP¶
validate a rule:
testpmd> flow validate 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.2 / udp / esp spi is 1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.2 / udp / esp spi is 1 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.2 / udp / esp spi is 1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.2 / udp / esp spi is 1 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="00:11:22:33:44:13")/IP(src="192.168.0.2")/UDP(dport=4500)/ESP(spi=1)/("X"*480)], iface="enp27s0f0", count=1)
check port 0 and port 3 receive the packet. send mismatched packets:
sendp([Ether(dst="00:11:22:33:44:13")/IP(src="192.168.0.2")/UDP(dport=4500)/ESP(spi=2)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="00:11:22:33:44:13")/IP(src="192.168.1.2")/UDP(dport=4500)/ESP(spi=1)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="00:11:22:33:44:13")/IP(dst="192.168.0.2")/UDP(dport=4500)/ESP(spi=1)/("X"*480)], iface="enp27s0f0", count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.48. Test case: MAC_IPV6_NAT-T-ESP¶
validate a rule:
testpmd> flow validate 0 priority 0 ingress pattern eth / ipv6 dst is 1111:2222:3333:4444:5555:6666:7777:8888 / udp / esp spi is 1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 priority 0 ingress pattern eth / ipv6 dst is 1111:2222:3333:4444:5555:6666:7777:8888 / udp / esp spi is 1 / end actions port_representor port_id 0 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create a rule:
testpmd> flow create 0 priority 0 ingress pattern eth / ipv6 dst is 1111:2222:3333:4444:5555:6666:7777:8888 / udp / esp spi is 1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 priority 0 ingress pattern eth / ipv6 dst is 1111:2222:3333:4444:5555:6666:7777:8888 / udp / esp spi is 1 / end actions port_representor port_id 0 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="00:11:22:33:44:13")/IPv6(dst="1111:2222:3333:4444:5555:6666:7777:8888")/UDP(dport=4500)/ESP(spi=1)/("X"*480)], iface="enp27s0f0", count=1)
check port 0 and port 3 receive the packet. send mismatched packets:
sendp([Ether(dst="00:11:22:33:44:13")/IPv6(dst="1111:2222:3333:4444:5555:6666:7777:8888")/UDP(dport=4500)/ESP(spi=2)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="00:11:22:33:44:13")/IPv6(dst="1111:2222:3333:4444:5555:6666:7777:9999")/UDP(dport=4500)/ESP(spi=1)/("X"*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="00:11:22:33:44:13")/IPv6(src="1111:2222:3333:4444:5555:6666:7777:8888")/UDP(dport=4500)/ESP(spi=1)/("X"*480)], iface="enp27s0f0", count=1)
check the packets are not to port 0 and port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 0 and port 3.
22.49. Test Case: multirules test¶
22.49.1. Subcase 1: add existing rules but with different vfs¶
Launch dpdk on VF0, VF1 and VF2, and VF0 request DCF mode, representing VF1, VF2:
./x86_64-native-linuxapp-gcc/app/dpdk-testpmd -c 0xf -n 4 -a 0000:18:01.0,cap=dcf,representor=[1,2] -a 0000:18:01.1 -a 0000:18:01.2 -- -i testpmd> set portlist 0,3,4 testpmd> set promisc 0 off testpmd> set fwd rxonly testpmd> set verbose 1 testpmd> start
create rules with same pattern items but to different vfs:
testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions port_representor port_id 0 / end testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions represented_port ethdev_port_id 2 / end testpmd> flow list 0
check both rules exist in the list.
send matched packets:
sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1",dst="192.168.0.2",tos=4,ttl=3)/UDP(sport=25,dport=23)/("X"*480)], iface="ens786f0", count=1)
check port 0, port 3 and 4 receive the packet.
destroy the rule 0, and send the matched packets:
testpmd> flow destroy 0 rule 0 testpmd> flow list 0
check only rule 1 and rule 2 exists in the list. send the same matched packets, check only port 3 and port 4 receives the packets.
destroy rule 1, send the matched packets:
testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check only rule 2 exists in the list. send the same matched packets, check only port 4 receives the packets.
destroy rule 2, send the matched packets:
testpmd> flow destroy 0 rule 2 testpmd> flow list 0
check no rule exists in the list send the same matched packets, check the packets are not to port 0 or port 3 or 4.
22.49.2. Subcase 2: add existing rules with the same vfs¶
create two indentical rules:
testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions represented_port ethdev_port_id 1 / end
check the first rule is created successfully, and the second one can not be created successfully, and testpmd provide a friendly output, showing:
ice_flow_create(): Failed to create flow port_flow_complain(): Caught PMD error type 2 (flow rule (handle)): switch filter create flow fail: Invalid argument
check the rule list:
testpmd> flow list 0
check only the first rule exists in the list.
22.49.3. Subcase 3: add two rules with one rule’s input set included in the other¶
Launch dpdk on VF0, VF1 and VF2, and VF0 request DCF mode, representing VF1 and VF2:
./x86_64-native-linuxapp-gcc/app/dpdk-testpmd -c 0xf -n 4 -a 0000:18:01.0,cap=dcf,representor=[1,2] -a 0000:18:01.1 -a 0000:18:01.2 -- -i testpmd> set portlist 3,4 testpmd> set fwd rxonly testpmd> set verbose 1 testpmd> start
create rules with one rule’s input set included in the other:
testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 / end actions represented_port ethdev_port_id 2 / end testpmd> flow list 0
check both rules exist in the list.
send a packet p0 that matches both rules:
sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1",dst="192.168.0.2")/("X"*480)], iface="ens786f0", count=1)
check both port 3 and 4 receive the packet. send a packet that only matches the rule 0 but not rule 1:
sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1",dst="192.168.0.3")/("X"*480)], iface="ens786f0", count=1)
check only port 3 receives the packet.
destroy the rule 0, and send the packet p0:
testpmd> flow destroy 0 rule 0 testpmd> flow list 0
check only rule 1 exists in the list. send the matched packet p0, check only port 4 receives the packet.
destroy rule 1, send the packet p0:
testpmd> flow destroy 0 rule 1 testpmd> flow list 0
check no rule exists in the list. send the matched packet p0, check the packet are not to port 3 and 4.
22.49.4. Subcase 4: different input set, same vf id¶
DUT create switch filter rules for MAC_IPV4_PFCP_SESSION and MAC_IPV4_PFCP_NODE to VF1:
testpmd> flow create 0 ingress pattern eth / ipv4 / udp / pfcp s_field is 0 / end actions represented_port ethdev_port_id 1 / end Flow rule #0 created testpmd> flow create 0 ingress pattern eth / ipv4 / udp / pfcp s_field is 1 / end actions represented_port ethdev_port_id 1 / end Flow rule #1 created
check the rule exists in the list.
testpmd> flow list 0 ID Group Prio Attr Rule 0 0 0 i– ETH IPV4 UDP PFCP => VF 1 0 0 i– ETH IPV4 UDP PFCP => VF
send matched packets:
sendp(Ether(dst="00:11:22:33:44:11")/IP()/UDP(dport=8805)/PFCP(Sfield=0),iface="enp134s0f1") sendp(Ether(dst="00:11:22:33:44:11")/IP()/UDP(dport=8805)/PFCP(Sfield=1),iface="enp134s0f1")
check port 3 receive the two packets. send mismatched packets:
sendp(Ether(dst="00:11:22:33:44:11")/IPv6()/UDP(dport=8805)/PFCP(Sfield=1),iface="enp134s0f1") sendp(Ether(dst="00:11:22:33:44:11")/IPv6()/UDP(dport=8805)/PFCP(Sfield=0),iface="enp134s0f1")
check the packets are not to port 3.
verify rules can be destroyed:
testpmd> flow flush 0 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 3.
22.49.5. Subcase 5: different input set, different vf id¶
DUT create switch filter rules for MAC_IPV4_PFCP_SESSION and MAC_IPV4_PFCP_NODE to VF1:
testpmd> flow create 0 ingress pattern eth / ipv4 / udp / pfcp s_field is 0 / end actions represented_port ethdev_port_id 1 / end Flow rule #0 created testpmd> flow create 0 ingress pattern eth / ipv4 / udp / pfcp s_field is 1 / end actions represented_port ethdev_port_id 2 / end Flow rule #1 created
check the rule exists in the list.
testpmd> flow list 0 ID Group Prio Attr Rule 0 0 0 i– ETH IPV4 UDP PFCP => VF 1 0 0 i– ETH IPV4 UDP PFCP => VF
send matched packets:
sendp(Ether(dst="00:11:22:33:44:11")/IP()/UDP(dport=8805)/PFCP(Sfield=0),iface="enp134s0f1") sendp(Ether(dst="00:11:22:33:44:11")/IP()/UDP(dport=8805)/PFCP(Sfield=1),iface="enp134s0f1")
check port 3 receive the first packet, port 4 receive the second packet. send mismatched packets:
sendp(Ether(dst="00:11:22:33:44:11")/IPv6()/UDP(dport=8805)/PFCP(Sfield=1),iface="enp134s0f1") sendp(Ether(dst="00:11:22:33:44:11")/IPv6()/UDP(dport=8805)/PFCP(Sfield=0),iface="enp134s0f1")
check the packets are not to port 3 or port 4.
verify rules can be destroyed:
testpmd> flow flush 0 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 3 or port 4.
22.50. Test case: test forwarding with single vf¶
Description: This case is used to test the packets that match switch filter rules can be received and forwarded when there is one vf for forwarding, and no packets are dropped.
set the forwarding mode to mac:
testpmd> set fwd mac
create a rule with input set [Source IP], [Dest IP]:
testpmd> flow create 0 ingress pattern eth / ipv4 src is 192.168.0.1 dst is 192.168.0.2 / end actions represented_port ethdev_port_id 1 / end testpmd> flow list 0
check the rule exists in the list
send matched packets:
sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1",dst="192.168.0.2")/("X"*480)], iface="ens786f0", count=1)
check port 3 receives the packet and forward it, and no packets are dropped:
testpmd> stop ---------------------- Forward statistics for port 3 ---------------------- RX-packets: 1 RX-dropped: 0 RX-total: 1 TX-packets: 1 TX-dropped: 0 TX-total: 1 ---------------------------------------------------------------------------- +++++++++++++++ Accumulated forward statistics for all ports+++++++++++++++ RX-packets: 1 RX-dropped: 0 RX-total: 1 TX-packets: 1 TX-dropped: 0 TX-total: 1 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
check the RX-packets and TX-packets of port 3 are both 1, and the TX-dropped in “Accumulated forward statistics for all ports” is 0.
22.51. Test case: test forwarding with multi vfs¶
Description: This case is used to test the packets that match switch filter rules can be received and forwarded when there are multi vfs for forwarding, and no packets are dropped.
Launch dpdk on VF0, VF1 and VF2, and VF0 request DCF mode, representing VF1 and VF2:
./x86_64-native-linuxapp-gcc/app/dpdk-testpmd -c 0xf -n 4 -a 0000:18:01.0,cap=dcf,representor=[1,2] -a 0000:18:01.1 -a 0000:18:01.2 -- -i testpmd> set portlist 3,4 testpmd> set fwd mac testpmd> set verbose 1 testpmd> start
create a rule with input set [Source IP], [Dest IP]:
testpmd> flow create 0 ingress pattern eth / ipv4 src is 192.168.0.1 dst is 192.168.0.2 / end actions represented_port ethdev_port_id 1 / end testpmd> flow list 0
check the rule exists in the list
send matched packets:
sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1",dst="192.168.0.2")/("X"*480)], iface="ens786f0", count=1)
check port 3 receives the packet, and forward it to port 4, and no packets are dropped:
testpmd> stop ---------------------- Forward statistics for port 3 ---------------------- RX-packets: 1 RX-dropped: 0 RX-total: 1 TX-packets: 0 TX-dropped: 0 TX-total: 0 ---------------------------------------------------------------------------- ---------------------- Forward statistics for port 4 ---------------------- RX-packets: 0 RX-dropped: 0 RX-total: 0 TX-packets: 1 TX-dropped: 0 TX-total: 1 ---------------------------------------------------------------------------- +++++++++++++++ Accumulated forward statistics for all ports+++++++++++++++ RX-packets: 1 RX-dropped: 0 RX-total: 1 TX-packets: 1 TX-dropped: 0 TX-total: 1 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
check the RX-packets of port 3 is 1, the TX-packets of port 4 is 1, and the TX-dropped in “Accumulated forward statistics for all ports” is 0.
22.52. Test case: Max vfs¶
Description: This case is used to test when all VFs on a PF are used, switch filter rules can work. This case is designed based on 4*25G NIC.
Query the maximum number of VF that can be created by each PF:
cat /sys/bus/pci/devices/0000\:18\:00.0/sriov_totalvfs
here sriov_totalvfs is 64.
generate 64 VFs on PF:
echo 64 > /sys/bus/pci/devices/0000:18:00.0/sriov_numvfs
Get the interface name of the VFs, for example:
./usertools/dpdk-devbind.py -s 0000:18:01.1 'Ethernet Adaptive Virtual Function 1889' if=enp24s1f1 drv=iavf unused=igb_uio
Start the 64 VFs in the kernel, for example:
ifconfig enp24s1f1 up
Set VF0 as trust:
ip link set enp24s0f0 vf 0 trust on
bind VF0 to dpdk driver:
./usertools/dpdk-devbind.py -b vfio-pci 0000:18:01.0
launch dpdk on VF0, and request DCF mode, representing VF1 to VF63:
./x86_64-native-linuxapp-gcc/app/dpdk-testpmd -c 0xf -n 4 \ -a 0000:18:01.0,cap=dcf,representor=[1-63] \ -- -i
set a switch rule to each VF from DCF, totally 63 rules:
testpmd> flow create 0 ingress pattern eth / ipv4 src is 192.168.0.1 / tcp / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv4 src is 192.168.0.2 / tcp / end actions represented_port ethdev_port_id 2 / end testpmd> flow create 0 ingress pattern eth / ipv4 src is 192.168.0.3 / tcp / end actions represented_port ethdev_port_id 3 / end ...... testpmd> flow create 0 ingress pattern eth / ipv4 src is 192.168.0.63 / tcp / end actions represented_port ethdev_port_id 63 / end testpmd> flow list 0
check the rules exist in the list.
send matched packets:
sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1")/TCP()/Raw("X"*480)], iface="ens786f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.2")/TCP()/Raw("X"*480)], iface="ens786f0", count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.3")/TCP()/Raw("X"*480)], iface="ens786f0", count=1) ...... sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.63")/TCP()/Raw("X"*480)], iface="ens786f0", count=1)
check the VF 1-63 each receives a packet in kernel, for example:
ifconfig enp24s1f1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet6 fe80::fc5e:4aff:fe55:824b prefixlen 64 scopeid 0x20<link> ether fe:5e:4a:55:82:4b txqueuelen 1000 (Ethernet) RX packets 1 bytes 538 (538.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 7 bytes 490 (490.0 B) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 the "RX packets" number is 1.
send mismatched packets:
sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.64")/TCP()/Raw("X"*480)], iface="ens786f0", count=1)
check the packets are not to any VF.
verify rules can be destroyed:
testpmd> flow flush 0 testpmd> flow list 0
check the rules not exist in the list. send matched packets, check the packets are not to any VF.
22.53. Test case: max field vectors¶
Description: 48 field vectors can be used on a Intel® Ethernet 800 Series nic. This case is used to test when field vectors are run out of, then creating a rule, testpmd will not hang and provide a friendly output.
create the following nvgre rules:
testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 0x8 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / udp src is 50 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.2 / nvgre tni is 0x8 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / udp src is 50 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.3 / nvgre tni is 0x8 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / udp dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow list 0
check the rules exist in the list.
the three rules have run out of field vectors, and continue to create the following rule:
testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.10 / nvgre tni is 0x8 / eth dst is 68:05:ca:8d:ed:a1 / ipv4 src is 192.168.1.2 dst is 192.168.1.3 / udp src is 25 dst is 23 / end actions represented_port ethdev_port_id 1 / end
check the rule can not be created successfully, and testpmd provide a friendly output, showing:
ice_flow_create(): Failed to create flow port_flow_complain(): Caught PMD error type 2 (flow rule (handle)): switch filter create flow fail: Invalid argument
check the rule list:
testpmd> flow list 0
check the rule in step 2 not exists in the list.
send 3 matched packets:
sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=0x8)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/UDP(sport=50,dport=23)/Raw("x"*80)],iface="ens786f0",count=1) sendp([Ether()/IP(dst="192.168.0.2")/NVGRE(TNI=0x8)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/UDP(sport=50,dport=23)/Raw("x"*80)],iface="ens786f0",count=1) sendp([Ether()/IP(dst="192.168.0.3")/NVGRE(TNI=0x8)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/UDP(sport=50,dport=23)/Raw("x"*80)],iface="ens786f0",count=1)
check port 3 receives the packets send mismatched packets:
sendp([Ether()/IP(dst="192.168.0.5")/NVGRE(TNI=0x8)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/UDP(sport=50,dport=23)/Raw("x"*80)],iface="ens786f0",count=1)
check the packets are not to port 3.
verify rules can be destroyed:
testpmd> flow flush 0 testpmd> flow list 0
check the rules not exist in the list. send matched packets, check the packets are not to port 3.
22.54. Test case: negative cases¶
Note: some of the error messages may be different.
22.54.1. Subcase 1: can not create to vf rule on a representor¶
create rule on representor 1 which is at port 1:
testpmd> flow create 1 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions represented_port ethdev_port_id 1 / end
Failed to create flow, report message:
Failed to create parser engine.: Invalid argument
check the flow list:
testpmd> flow list 1
there is no rule listed.
22.54.2. Subcase 2: can not create to vf rule on a vf¶
create rule on vf 1 which is at port 3:
testpmd> flow create 3 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions represented_port ethdev_port_id 1 / end
Failed to create flow, report message:
Failed to create parser engine.: Invalid argument
check the flow list:
testpmd> flow list 3
there is no rule listed.
22.54.3. Subcase 3: can not create to vf rule to a vf¶
create rule on vf 0 which is at port 0, to vf 1 which is at port 3:
testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions represented_port ethdev_port_id 3 / end
Failed to create flow, report message:
Failed to create parser engine.: Invalid argument
check the flow list:
testpmd> flow list 0
there is no rule listed.
22.54.4. Subcase 4: can not create to vf rule to self dcf¶
create rule on vf 0 which is at port 0, to vf 1 which is at port 3:
testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions represented_port ethdev_port_id 0 / end
Failed to create flow, report message:
Failed to create parser engine.: Invalid argument
check the flow list:
testpmd> flow list 0
there is no rule listed.
22.54.5. Subcase 5: can not create to vf rule to another dcf¶
create rule on vf 0 which is at port 0, to vf 1 which is at port 3:
testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions represented_port ethdev_port_id 5 / end
Failed to create flow, report message:
Failed to create parser engine.: Invalid argument
check the flow list:
testpmd> flow list 0
there is no rule listed.
22.54.6. Subcase 6: can not create to vf rule to a representor of another pf¶
create rule on vf 0 of pf 0 which is at port 0, to representor 1 of pf 1 which is at port 6:
testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions represented_port ethdev_port_id 6 / end
Failed to create flow, report message:
Failed to create parser engine.: Invalid argument
check the flow list:
testpmd> flow list 0
there is no rule listed.
22.54.7. Subcase 7: can not create vf original rule on a representor¶
create rule on representor 1 which is at port 1:
testpmd> flow create 1 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions port_representor port_id 1 / end
Failed to create flow, report message:
Failed to create parser engine.: Invalid argument
check the flow list:
testpmd> flow list 1
there is no rule listed.
22.54.8. Subcase 8: can not create vf original rule on a vf¶
create rule on vf 1 which is at port 3:
testpmd> flow create 3 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions port_representor port_id 1 / end
Failed to create flow, report message:
Failed to create parser engine.: Invalid argument
check the flow list:
testpmd> flow list 3
there is no rule listed.
22.54.9. Subcase 9: can not create vf original rule to a vf¶
create rule on vf 0 which is at port 0, to vf 1 which is at port 3:
testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions port_representor port_id 3 / end
Failed to create flow, report message:
Failed to create parser engine.: Invalid argument
check the flow list:
testpmd> flow list 0
there is no rule listed.
22.54.10. Subcase 10: can not create vf original rule to a representor¶
create rule on vf 0 which is at port 0, to vf 1 which is at port 3:
testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions port_representor port_id 1 / end
Failed to create flow, report message:
Failed to create parser engine.: Invalid argument
check the flow list:
testpmd> flow list 0
there is no rule listed.
22.54.11. Subcase 11: can not create vf original rule to another dcf¶
create rule on vf 0 which is at port 0, to vf 1 which is at port 3:
testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions port_representor port_id 5 / end
Failed to create flow, report message:
Failed to create parser engine.: Invalid argument
check the flow list:
testpmd> flow list 0
there is no rule listed.
22.54.12. Subcase 12: unsupported pattern in os default package¶
load os default package and launch testpmd as step 3-8 in Prerequisites.
create unsupported pattern in os default package:
testpmd> flow create 0 ingress pattern eth dst is 00:11:22:33:44:55 / pppoes seid is 3 / pppoe_proto_id is 0x0021 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv4 / udp / pfcp s_field is 0 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv4 src is 192.168.0.2 / l2tpv3oip session_id is 1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv4 src is 192.168.0.2 / esp spi is 1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv4 src is 192.168.0.2 / ah spi is 1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow create 0 ingress pattern eth / ipv4 src is 192.168.0.2 / udp / esp spi is 1 / end actions represented_port ethdev_port_id 1 / end
Failed to create flow, report message:
Invalid input pattern: Invalid argument
check the rule list:
testpmd> flow list 0
check the rule not exists in the list.
22.54.13. Subcase 13: unsupported input set¶
create an nvgre rule with unsupported input set field [inner tos]:
testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 2 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.1.2 dst is 192.168.1.3 tos is 4 / end actions represented_port ethdev_port_id 1 / end
Failed to create flow, report message:
Invalid input set: Invalid argument
check the rule list:
testpmd> flow list 0
check the rule not exists in the list.
22.54.14. Subcase 14: duplicated rules¶
create a rule:
testpmd> flow create 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is 192.168.0.21 ttl is 2 tos is 4 / end actions represented_port ethdev_port_id 1 / end testpmd> flow list 0
check the rule exists in the list.
create the same rule again, Failed to create flow, report message:
switch filter create flow fail: Invalid argument
check the flow list:
testpmd> flow list 0
check only the first rule exists in the list.
22.54.15. Subcase 15: void action¶
create a rule with void action:
testpmd> flow create 0 ingress pattern eth / ipv4 / udp src is 25 dst is 23 / end actions end
Failed to create flow, report message:
NULL action.: Invalid argument
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
22.54.16. Subcase 16: unsupported action¶
create a rule with void action:
testpmd> flow create 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is 192.168.0.21 ttl is 2 tos is 4 / end actions mark id 1 / end
Failed to create flow, report message:
Invalid action type: Invalid argument
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
22.54.17. Subcase 17: deprecated action¶
create a rule with void action:
testpmd> flow create 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is 192.168.0.21 ttl is 2 tos is 4 / end actions vf id 1 / end
Failed to create flow, report message:
Invalid action type: Invalid argument
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
22.54.18. Subcase 18: invalid port id¶
create a rule with invalid port id 10:
testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / tcp src is 25 dst is 23 / end actions represented_port ethdev_port_id 20 / end
Failed to create flow, report message:
ice_flow_create(): Failed to create flow port_flow_complain(): Caught PMD error type 16 (specific action): cause: 0x7fff2c460900, Invalid ethdev_port_id: Invalid argument
check the rule list:
testpmd> flow list 0
check the rule not exists in the list.
22.54.19. Subcase 19: void input set value¶
create a rule with void input set value:
testpmd> flow create 0 ingress pattern eth / ipv4 / end actions represented_port ethdev_port_id 1 / end
Failed to create flow, report message:
Invalid input set: Invalid argument
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
22.54.20. Subcase 20: delete a non-existing rule¶
check the rule list:
testpmd> flow list 0
check no rule exists in the list.
destroy the rule 0:
testpmd> flow destroy 0 rule 0
check no error reports.
flush rules:
testpmd> flow flush 0
check no error reports.
22.54.21. Subcase 21: add long switch rule¶
Description: A recipe has 5 words, one of which is reserved for switch ID, so a recipe can use 4 words, and a maximum of 5 recipes can be chained, one of which is reserved. Therefore, a rule can use up to 4*4*2 = 32 bytes. This case is used to test that a rule whose input set is longer than 32 bytes can not be created successfully, and will not affect the creation of other rules.
create a rule with input set length longer than 32 bytes:
testpmd> flow create 0 ingress pattern eth / ipv6 src is CDCD:910A:2222:5498:8475:1111:3900:1536 dst is CDCD:910A:2222:5498:8475:1111:3900:2022 tc is 3 / end actions represented_port ethdev_port_id 1 / end
Failed to create flow, report message:
Invalid input set: Invalid argument
check the rule list:
testpmd> flow list 0
check the rule not exists in the list.
create a MAC_IPV6_UDP_PAY rule:
testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv6 dst is CDCD:910A:2222:5498:8475:1111:3900:2020 tc is 3 / udp src is 25 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="68:05:ca:8d:ed:a8")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1518", dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/UDP(sport=25,dport=23)/("X"*480)], iface="ens786f0",count=1)
check port 3 receive the packet. send mismatched packets:
sendp([Ether(dst="68:05:ca:8d:ed:a8")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1518", dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/UDP(sport=30,dport=23)/("X"*480)], iface="ens786f0",count=1) sendp([Ether(dst="68:05:ca:8d:ed:a8")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1518", dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/UDP(sport=25,dport=19)/("X"*480)], iface="ens786f0",count=1)
check the packets are not to port 3.
verify rules can be destroyed:
testpmd> flow destroy 0 rule 0 testpmd> flow list 0
check the rule not exists in the list. send matched packets, check the packets are not to port 3.
22.55. Test case: negative validation¶
Note: some of the error messages may be different.
22.55.1. Subcase 1: can not create to vf rule on a representor¶
validate rule on representor 1 which is at port 1:
testpmd> flow validate 1 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions represented_port ethdev_port_id 1 / end
get the error message:
Failed to create parser engine.: Invalid argument
list the rule:
testpmd> flow list 1
there is no rule listed.
22.55.2. Subcase 2: can not create to vf rule on a vf¶
validate rule on representor 1 which is at port 3:
testpmd> flow validate 3 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions represented_port ethdev_port_id 1 / end
get the error message:
Failed to create parser engine.: Invalid argument
list the rule:
testpmd> flow list 3
there is no rule listed.
22.55.3. Subcase 3: can not create to vf rule to a vf¶
validate rule on vf 0 which is at port 0, to vf 1 which is at port 3:
testpmd> flow validate 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions represented_port ethdev_port_id 3 / end
get the error message:
Failed to create parser engine.: Invalid argument
list the rule:
testpmd> flow list 0
there is no rule listed.
22.55.4. Subcase 4: can not create to vf rule to self dcf¶
validate rule on vf 0 which is at port 0, to vf 1 which is at port 3:
testpmd> flow validate 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions represented_port ethdev_port_id 0 / end
get the error message:
Failed to create parser engine.: Invalid argument
list the rule:
testpmd> flow list 0
there is no rule listed.
22.55.5. Subcase 5: can not create to vf rule to another dcf¶
validate rule on vf 0 which is at port 0, to vf 1 which is at port 3:
testpmd> flow validate 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions represented_port ethdev_port_id 5 / end
get the error message:
Failed to create parser engine.: Invalid argument
list the rule:
testpmd> flow list 0
there is no rule listed.
22.55.6. Subcase 6: can not create to vf rule to a representor of another pf¶
validate rule on vf 0 of pf 0 which is at port 0, to representor 1 of pf 1 which is at port 6:
testpmd> flow validate 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions represented_port ethdev_port_id 6 / end
get the error message:
Failed to create parser engine.: Invalid argument
list the rule:
testpmd> flow list 0
there is no rule listed.
22.55.7. Subcase 7: can not create vf original rule on a representor¶
validate rule on representor 1 which is at port 1:
testpmd> flow validate 1 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions port_representor port_id 1 / end
Failed to create flow, report message:
Failed to create parser engine.: Invalid argument
check the flow list:
testpmd> flow list 1
there is no rule listed.
22.55.8. Subcase 8: can not create vf original rule on a vf¶
validate rule on vf 1 which is at port 3:
testpmd> flow validate 3 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions port_representor port_id 1 / end
Failed to create flow, report message:
Failed to create parser engine.: Invalid argument
check the flow list:
testpmd> flow list 3
there is no rule listed.
22.55.9. Subcase 9: can not create vf original rule to a vf¶
validate rule on vf 0 which is at port 0, to vf 1 which is at port 3:
testpmd> flow validate 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions port_representor port_id 3 / end
Failed to create flow, report message:
Failed to create parser engine.: Invalid argument
check the flow list:
testpmd> flow list 0
there is no rule listed.
22.55.10. Subcase 10: can not create vf original rule to a representor¶
validate rule on vf 0 which is at port 0, to vf 1 which is at port 3:
testpmd> flow validate 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions port_representor port_id 1 / end
Failed to create flow, report message:
Failed to create parser engine.: Invalid argument
check the flow list:
testpmd> flow list 0
there is no rule listed.
22.55.11. Subcase 11: can not create vf original rule to another dcf¶
validate rule on vf 0 which is at port 0, to vf 1 which is at port 3:
testpmd> flow validate 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions port_representor port_id 5 / end
Failed to create flow, report message:
Failed to create parser engine.: Invalid argument
check the flow list:
testpmd> flow list 0
there is no rule listed.
22.55.12. Subcase 12: unsupported patterns in os default¶
load os default package and launch testpmd as step 3-8 in Prerequisites.
validate unsupported patterns in os default:
testpmd> flow validate 0 ingress pattern eth dst is 00:11:22:33:44:55 / pppoes seid is 3 / pppoe_proto_id is 0x0021 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 ingress pattern eth / ipv4 / udp / pfcp s_field is 0 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.2 / l2tpv3oip session_id is 1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.2 / esp spi is 1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.2 / ah spi is 1 / end actions represented_port ethdev_port_id 1 / end testpmd> flow validate 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.2 / udp / esp spi is 1 / end actions represented_port ethdev_port_id 1 / end
get the error message:
Invalid input pattern: Invalid argument
check the rule list:
testpmd> flow list 0
check the rule not exists in the list.
22.55.13. Subcase 13: unsupported input set¶
validate an nvgre rule with unsupported input set field [inner tos]:
testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 2 / eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.1.2 dst is 192.168.1.3 tos is 4 / end actions represented_port ethdev_port_id 1 / end
get the error message:
Invalid input set: Invalid argument
check the rule list:
testpmd> flow list 0
check the rule not exists in the list.
22.55.14. Subcase 14: void action¶
validate a rule with void action:
testpmd> flow validate 0 ingress pattern eth / ipv4 / udp src is 25 dst is 23 / end actions end
Failed to create flow, report message:
NULL action.: Invalid argument
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
22.55.15. Subcase 15: unsupported action¶
validate a rule with void action:
testpmd> flow validate 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is 192.168.0.21 ttl is 2 tos is 4 / end actions mark id 1 / end
Failed to create flow, report message:
Invalid action type: Invalid argument
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
22.55.16. Subcase 16: deprecated action¶
validate a rule with deprecated action:
testpmd> flow validate 0 ingress pattern eth / ipv4 src is 192.168.0.20 dst is 192.168.0.21 ttl is 2 tos is 4 / end actions vf id 1 / end
Failed to create flow, report message:
Invalid action type: Invalid argument
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
22.55.17. Subcase 17: void input set value¶
validate a rule with void input set value:
testpmd> flow validate 0 ingress pattern eth / ipv4 / end actions represented_port ethdev_port_id 1 / end
get the error message:
Invalid input set: Invalid argument
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
22.55.18. Subcase 18: invalid port id¶
validate a rule with invalid port id 10:
testpmd> flow validate 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / tcp src is 25 dst is 23 / end actions represented_port ethdev_port_id 10 / end
get the error message:
Invalid port id: Invalid argument
check the rule list:
testpmd> flow list 0
check the rule not exists in the list.
22.55.19. Subcase 19: long switch rule¶
validate a rule with input set length longer than 32 bytes:
testpmd> flow validate 0 ingress pattern eth / ipv6 src is CDCD:910A:2222:5498:8475:1111:3900:1536 dst is CDCD:910A:2222:5498:8475:1111:3900:2022 tc is 3 / end actions represented_port ethdev_port_id 1 / end
get the error message:
Invalid input set: Invalid argument
check the rule list:
testpmd> flow list 0
check the rule not exists in the list.
22.56. Test case: Stress test¶
22.56.1. Subcase 1: DCF stop/DCF start¶
create MAC_IPV4_UDP_PAY rule:
testpmd> flow create 0 ingress pattern eth dst is 68:05:ca:8d:ed:a8 / ipv4 src is 192.168.0.1 dst is 192.168.0.2 tos is 4 ttl is 3 / udp src is 25 dst is 23 / end actions represented_port ethdev_port_id 1 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="68:05:ca:8d:ed:a8")/IP(src="192.168.0.1",dst="192.168.0.2",tos=4,ttl=3)/UDP(sport=25,dport=23)/("X"*480)], iface="ens786f0", count=1)
check port 3 receive the packet.
stop the DCF, then start the DCF:
tetspmd> port stop 0 testpmd> port start 0
send matched packets, port 3 can’t receive the packets.
22.57. Test case: Drop action test¶
22.57.1. Subcase 1: DCF DROP IPV4 SRC PACKAGES¶
validate a rule:
testpmd> flow validate 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.1 / end actions drop / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create MAC_IPV4_SRC_ADDR rule:
testpmd> flow create 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.1 / end actions drop / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether()/IP(src="192.168.0.1")/Raw("x"*80)],iface="enp27s0f0")
check port can’t receive the packet.
send mismatched packets:
sendp([Ether()/IP(src="192.168.0.2")/Raw("x"*80)],iface="enp27s0f0")
check port can receive the packet.
verify rules can be destroyed:
testpmd> flow flush 0 testpmd> flow list 0
check the rules not exist in the list. send matched packets, check port can receive the packet.
22.57.2. Subcase 2: DCF DROP IPV4 SRC SPEC MASK PACKAGES¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv4 dst spec 224.0.0.0 dst mask 255.255.255.255 / end actions drop / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create MAC_IPV4_SRC_SPEC_PAY rule:
testpmd> flow create 0 ingress pattern eth / ipv4 dst spec 224.0.0.0 dst mask 255.255.255.255 / end actions drop / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="00:11:22:33:44:55")/IP(dst="224.0.0.0")/TCP()/Raw("x"*80)],iface="enp27s0f0")
check port can’t receive the packet.
send mismatched packets:
sendp([Ether(dst="00:11:22:33:44:55")/IP(dst="128.0.0.0")/TCP()/Raw("x"*80)],iface="enp27s0f0")
check port can receive the packet.
verify rules can be destroyed:
testpmd> flow flush 0 testpmd> flow list 0
check the rules not exist in the list. send matched packets, check port can receive the packet.
22.57.3. Subcase 3: DCF DROP NVGRE PACKAGES¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 2 / eth / ipv4 src is 192.168.1.2 dst is 192.168.1.3 / end actions drop / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create MAC_IPV4_NVGRE_PAY rule:
testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 2 / eth / ipv4 src is 192.168.1.2 dst is 192.168.1.3 / end actions drop / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=2)/Ether()/IP(src="192.168.1.2", dst="192.168.1.3")/Raw("x"*80)],iface="enp27s0f0")
check port can’t receive the packet.
send mismatched packets:
sendp([Ether()/IP(dst="192.168.0.1")/NVGRE(TNI=1)/Ether()/IP(src="192.168.1.2", dst="192.168.1.3")/Raw("x"*80)],iface="enp27s0f0")
check port can receive the packet.
verify rules can be destroyed:
testpmd> flow flush 0 testpmd> flow list 0
check the rules not exist in the list. send matched packets, check port can receive the packet.
22.57.4. Subcase 4: DCF DROP PPOES PACKAGES¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth dst is 00:11:22:33:44:55 / vlan tci is 1 / pppoes seid is 3 / pppoe_proto_id is 0x0021 / end actions drop / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create MAC_IPV4_PPOES_PAY rule:
testpmd> flow create 0 ingress pattern eth dst is 00:11:22:33:44:55 / vlan tci is 1 / pppoes seid is 3 / pppoe_proto_id is 0x0021 / end actions drop / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="00:11:22:33:44:55",type=0x8100)/Dot1Q(vlan=1,type=0x8864)/PPPoE(sessionid=3)/PPP(b'\\x00\\x21')/IP()/Raw("x" * 80)],iface="enp27s0f0")
check port can’t receive the packet.
send mismatched packets:
sendp([Ether(dst="00:11:22:33:44:55",type=0x8100)/Dot1Q(vlan=1,type=0x8864)/PPPoE(sessionid=2)/PPP(b'\\x00\\x21')/IP()/Raw("x" * 80)],iface="enp27s0f0")
check port can receive the packet.
verify rules can be destroyed:
testpmd> flow flush 0 testpmd> flow list 0
check the rules not exist in the list. send matched packets, check port can receive the packet.
22.57.5. Subcase 5: DCF DROP PFCP PACKAGES¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv4 / udp / pfcp s_field is 0 / end actions drop / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create MAC_IPV4_PFCP rule:
testpmd> flow create 0 ingress pattern eth / ipv4 / udp / pfcp s_field is 0 / end actions drop / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp(Ether(dst="00:11:22:33:44:11")/IP()/UDP(dport=8805)/PFCP(S=0),iface="enp27s0f0")
check port can’t receive the packet.
send mismatched packets:
sendp(Ether(dst="00:11:22:33:44:11")/IP()/UDP(dport=8805)/PFCP(S=1),iface="enp27s0f0")
check port can receive the packet.
verify rules can be destroyed:
testpmd> flow flush 0 testpmd> flow list 0
check the rules not exist in the list. send matched packets, check port can receive the packet.
22.57.6. Subcase 6: DCF DROP VLAN PACKAGES¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth dst is 00:11:22:33:44:55 / vlan tci is 1 / end actions drop / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create MAC_VLAN rule:
testpmd> flow create 0 ingress pattern eth dst is 00:11:22:33:44:55 / vlan tci is 1 / end actions drop / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="00:11:22:33:44:55",type=0x8100)/Dot1Q(vlan=1)/IP(src="192.168.0.1",dst="192.168.0.2",tos=4,ttl=2)/TCP()/Raw("X"*80)],iface="enp27s0f0")
check port can’t receive the packet.
send mismatched packets:
sendp([Ether(dst="00:11:22:33:44:55",type=0x8100)/Dot1Q(vlan=2)/IP(src="192.168.0.1",dst="192.168.0.2",tos=4,ttl=2)/TCP()/Raw("X"*80)],iface="enp27s0f0")
check port can receive the packet.
verify rules can be destroyed:
testpmd> flow flush 0 testpmd> flow list 0
check the rules not exist in the list. send matched packets, check port can receive the packet.
22.57.7. Subcase 7: DCF DROP L2TP PACKAGES¶
validate a rule:
testpmd> flow validate 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.2 / l2tpv3oip session_id is 1 / end actions drop / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create MAC_IPV4_L2TP_PAY rule:
testpmd> flow create 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.2 / l2tpv3oip session_id is 1 / end actions drop / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst='00:11:22:33:44:12')/IP(src='192.168.0.2', proto=115)/L2TP(b'\\x00\\x00\\x00\\x01')/('X'*480)], iface="enp27s0f0", count=1)
check port can’t receive the packet.
send mismatched packets:
sendp([Ether(dst='00:11:22:33:44:12')/IP(src='192.168.0.2', proto=115)/L2TP(b'\\x00\\x00\\x00\\x02')/('X'*480)], iface="enp27s0f0", count=1)
check port can receive the packet.
verify rules can be destroyed:
testpmd> flow flush 0 testpmd> flow list 0
check the rules not exist in the list. send matched packets, check port can receive the packet.
22.57.8. Subcase 8: DCF DROP ESP PACKAGES¶
validate a rule:
testpmd> flow validate 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.2 / esp spi is 1 / end actions drop / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create MAC_IPV4_ESP_PAY rule:
testpmd> flow create 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.2 / esp spi is 1 / end actions drop / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="00:11:22:33:44:13")/IP(src="192.168.0.2", proto=50)/ESP(spi=1)/("X"*80)], iface="enp27s0f0")
check port can’t receive the packet.
send mismatched packets:
sendp([Ether(dst="00:11:22:33:44:13")/IP(src="192.168.0.2", proto=50)/ESP(spi=2)/("X"*80)], iface="enp27s0f0")
check port can receive the packet.
verify rules can be destroyed:
testpmd> flow flush 0 testpmd> flow list 0
check the rules not exist in the list. send matched packets, check port can receive the packet.
22.57.9. Subcase 8: DCF DROP blend PACKAGES¶
validate a rule:
testpmd> flow validate 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.1 / end actions drop / end testpmd> flow validate 0 ingress pattern eth / ipv4 dst spec 224.0.0.0 dst mask 255.255.255.255 / end actions drop / end testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 2 / eth / ipv4 src is 192.168.1.2 dst is 192.168.1.3 / end actions drop / end testpmd> flow validate 0 ingress pattern eth dst is 00:11:22:33:44:55 / vlan tci is 1 / pppoes seid is 3 / pppoe_proto_id is 0x0021 / end actions drop / end testpmd> flow validate 0 ingress pattern eth / ipv4 / udp / pfcp s_field is 0 / end actions drop / end testpmd> flow validate 0 ingress pattern eth dst is 00:11:22:33:44:55 / vlan tci is 1 / end actions drop / end testpmd> flow validate 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.4 / l2tpv3oip session_id is 1 / end actions drop / end testpmd> flow validate 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.5 / esp spi is 1 / end actions drop / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create rule:
testpmd> flow create 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.1 / end actions drop / end testpmd> flow create 0 ingress pattern eth / ipv4 dst spec 224.0.0.0 dst mask 255.255.255.255 / end actions drop / end testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 2 / eth / ipv4 src is 192.168.1.2 dst is 192.168.1.3 / end actions drop / end testpmd> flow create 0 ingress pattern eth dst is 00:11:22:33:44:55 / vlan tci is 1 / pppoes seid is 3 / pppoe_proto_id is 0x0021 / end actions drop / end testpmd> flow create 0 ingress pattern eth / ipv4 / udp / pfcp s_field is 0 / end actions drop / end testpmd> flow create 0 ingress pattern eth dst is 00:11:22:33:44:55 / vlan tci is 1 / end actions drop / end testpmd> flow create 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.4 / l2tpv3oip session_id is 1 / end actions drop / end testpmd> flow create 0 priority 0 ingress pattern eth / ipv4 src is 192.168.0.5 / esp spi is 1 / end actions drop / end
check the rule exists in the list.
send matched packets:
sendp([Ether()/IP(src="192.168.0.1")/Raw("x"*80)],iface="enp27s0f0") sendp([Ether(dst="00:11:22:33:44:55")/IP(dst="224.0.0.0")/TCP()/Raw("x"*80)],iface="enp27s0f0") sendp([Ether()/IP(dst="192.168.0.3")/NVGRE(TNI=2)/Ether()/IP(src="192.168.1.2", dst="192.168.1.3")/Raw("x"*80)],iface="enp27s0f0") sendp([Ether(dst="00:11:22:33:44:55",type=0x8100)/Dot1Q(vlan=1,type=0x8864)/PPPoE(sessionid=3)/PPP(b'\\x00\\x21')/IP()/Raw("x" * 80)],iface="enp27s0f0") sendp(Ether(dst="00:11:22:33:44:11")/IP()/UDP(dport=8805)/PFCP(S=0),iface="enp27s0f0") sendp([Ether(dst="00:11:22:33:44:55",type=0x8100)/Dot1Q(vlan=1)/IP(src="192.168.0.1",dst="192.168.0.2",tos=4,ttl=2)/TCP()/Raw("X"*80)],iface="enp27s0f0") sendp([Ether(dst='00:11:22:33:44:12')/IP(src='192.168.0.4', proto=115)/L2TP(b'\\x00\\x00\\x00\\x01')/('X'*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="00:11:22:33:44:13")/IP(src="192.168.0.5", proto=50)/ESP(spi=1)/("X"*80)], iface="enp27s0f0")
check port can’t receive the packet.
send mismatched packets:
sendp([Ether()/IP(src="192.168.0.6")/Raw("x"*80)],iface="enp27s0f0") sendp([Ether(dst="00:11:22:33:44:55")/IP(dst="128.0.0.0")/TCP()/Raw("x"*80)],iface="enp27s0f0") sendp([Ether()/IP(dst="192.168.0.8")/NVGRE(TNI=1)/Ether()/IP(src="192.168.1.2", dst="192.168.1.3")/Raw("x"*80)],iface="enp27s0f0") sendp([Ether(dst="00:11:22:33:44:55",type=0x8100)/Dot1Q(vlan=1,type=0x8864)/PPPoE(sessionid=2)/PPP(b'\\x00\\x21')/IP()/Raw("x" * 80)],iface="enp27s0f0") sendp(Ether(dst="00:11:22:33:44:11")/IP()/UDP(dport=8805)/PFCP(S=1),iface="enp27s0f0") sendp([Ether(dst="00:11:22:33:44:55",type=0x8100)/Dot1Q(vlan=2)/IP(src="192.168.0.9",dst="192.168.0.2",tos=4,ttl=2)/TCP()/Raw("X"*80)],iface="enp27s0f0") sendp([Ether(dst='00:11:22:33:44:12')/IP(src='192.168.0.10', proto=115)/L2TP(b'\\x00\\x00\\x00\\x02')/('X'*480)], iface="enp27s0f0", count=1) sendp([Ether(dst="00:11:22:33:44:13")/IP(src="192.168.0.11", proto=50)/ESP(spi=2)/("X"*80)], iface="enp27s0f0")
check port can receive the packet.
verify rules can be destroyed:
testpmd> flow flush 0 testpmd> flow list 0
check the rules not exist in the list. send matched packets, check port can receive the packet.
22.57.10. Subcase 9: MAC_IPV4_TCP + L4 MASK + drop¶
validate a rule:
testpmd> flow validate 0 priority 0 ingress pattern eth / ipv4 / tcp src spec 2345 src mask 0x0f0f / end actions drop / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create MAC_IPV4_L2TP_PAY rule:
testpmd> flow create 0 priority 0 ingress pattern eth / ipv4 / tcp src spec 2345 src mask 0x0f0f / end actions drop / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst={vf1_mac})/IP()/TCP(sport=2313,dport=23)/Raw("x"*80)], iface="enp27s0f0", count=1)
check port 1 can’t receive the packet.
send mismatched packets:
sendp([Ether(dst={vf1_mac})/IP()/TCP(sport=2344,dport=23)/Raw("x"*80)], iface="enp27s0f0", count=1)
check port 1 can receive the packet.
verify rules can be destroyed:
testpmd> flow flush 0 testpmd> flow list 0
check the rules not exist in the list. send matched packets, check port 1 can receive the packet.
22.57.11. Subcase 10: MAC_IPV6_UDP + L4 MASK + drop¶
validate a rule:
testpmd> flow validate 0 priority 0 ingress pattern eth / ipv6 / udp dst spec 3333 dst mask 0x0ff0 / end actions drop / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create MAC_IPV4_L2TP_PAY rule:
testpmd> flow create 0 priority 0 ingress pattern eth / ipv6 / udp dst spec 3333 dst mask 0x0ff0 / end actions drop / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst={vf1_mac})/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1515",dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/UDP(sport=10,dport=3328)/Raw("x"*80)], iface="enp27s0f0", count=1)
check port 1 can’t receive the packet.
send mismatched packets:
sendp([Ether(dst={vf1_mac})/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1515",dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/UDP(sport=10,dport=3077)/Raw("x"*80)], iface="enp27s0f0", count=1)
check port 1 can receive the packet.
verify rules can be destroyed:
testpmd> flow flush 0 testpmd> flow list 0
check the rules not exist in the list. send matched packets, check port 1 can receive the packet.
22.57.12. Subcase 11: MAC_IPV4_UDP_VXLAN_MAC_IPV4_TCP + L4 MASK + drop¶
validate a rule:
testpmd> rx_vxlan_port add 4789 0 testpmd> flow validate 0 priority 0 ingress pattern eth / ipv4 / udp / vxlan / eth / ipv4 / tcp src spec 32 src mask 0x0f / end actions drop / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create MAC_IPV4_L2TP_PAY rule:
testpmd> flow create 0 priority 0 ingress pattern eth / ipv4 / udp / vxlan / eth / ipv4 / tcp src spec 32 src mask 0x0f / end actions drop / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst={vf1_mac})/IP()/UDP()/VXLAN()/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/TCP(sport=16,dport=22)/Raw("x"*80)], iface="enp27s0f0", count=1)
check port 1 can’t receive the packet.
send mismatched packets:
sendp([Ether(dst={vf1_mac})/IP()/UDP()/VXLAN()/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/TCP(sport=33,dport=22)/Raw("x"*80)], iface="enp27s0f0", count=1)
check port 1 can receive the packet.
verify rules can be destroyed:
testpmd> flow flush 0 testpmd> flow list 0
check the rules not exist in the list. send matched packets, check port 1 can receive the packet.
22.57.13. Subcase 12: MAC_IPV4_NVGRE_MAC_IPV4_TCP + L4 MASK + drop¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 0x8 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / tcp dst spec 1280 dst mask 0x00ff / end actions drop / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create MAC_IPV4_L2TP_PAY rule:
testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 0x8 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / tcp dst spec 1280 dst mask 0x00ff / end actions drop / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst={vf1_mac})/IP(dst="192.168.0.1")/NVGRE(TNI=0x8)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/TCP(sport=50,dport=1536)/Raw("x"*80)], iface="enp27s0f0", count=1)
check port 1 can’t receive the packet.
send mismatched packets:
sendp([Ether(dst={vf1_mac})/IP(dst="192.168.0.1")/NVGRE(TNI=0x8)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/TCP(sport=50,dport=1281)/Raw("x"*80)], iface="enp27s0f0", count=1)
check port 1 can receive the packet.
verify rules can be destroyed:
testpmd> flow flush 0 testpmd> flow list 0
check the rules not exist in the list. send matched packets, check port 1 can receive the packet.
22.58. Test case: IPv4/IPv6 + TCP/UDP + L4 MASK¶
22.58.1. Subcase 1: MAC_IPV4_UDP + L4 MASK + single vf¶
validate a rule:
testpmd> flow validate 0 priority 0 ingress pattern eth / ipv4 / udp src spec 2152 src mask 0xff00 dst spec 1281 dst mask 0x00ff / end actions represented_port ethdev_port_id 1 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create MAC_IPV4_L2TP_PAY rule:
testpmd> flow create 0 priority 0 ingress pattern eth / ipv4 / udp src spec 2152 src mask 0xff00 dst spec 1281 dst mask 0x00ff / end actions represented_port ethdev_port_id 1 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="00:11:22:33:44:66")/IP(src="192.168.0.2",dst="192.168.0.3",tos=4)/UDP(sport=2048,dport=1)/Raw("x"*80)], iface="enp27s0f0", count=1)
check port 1 receive the packet.
send mismatched packets:
sendp([Ether(dst="00:11:22:33:44:66")/IP(src="192.168.0.2",dst="192.168.0.3",tos=4)/UDP(sport=2152,dport=2)/Raw("x"*80)], iface="enp27s0f0", count=1) sendp([Ether(dst="00:11:22:33:44:66")/IP(src="192.168.0.2",dst="192.168.0.3",tos=4)/UDP(sport=2408,dport=1281)/Raw("x"*80)], iface="enp27s0f0", count=1)
check port 1 can not receive the packet.
verify rules can be destroyed:
testpmd> flow flush 0 testpmd> flow list 0
check the rules not exist in the list. send matched packets, check port 1 can not receive the packet.
22.58.2. Subcase 2: MAC_IPV6_TCP + L4 MASK + single vf¶
validate a rule:
testpmd> flow validate 0 priority 0 ingress pattern eth / ipv6 / tcp dst spec 3333 dst mask 0x0ff0 / end actions represented_port ethdev_port_id 1 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create MAC_IPV4_L2TP_PAY rule:
testpmd> flow create 0 priority 0 ingress pattern eth / ipv6 / tcp dst spec 3333 dst mask 0x0ff0 / end actions represented_port ethdev_port_id 1 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="00:11:22:33:44:66")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1515",dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/TCP(sport=10,dport=3328)/Raw("x"*80)], iface="enp27s0f0", count=1)
check port 1 receive the packet.
send mismatched packets:
sendp([Ether(dst="00:11:22:33:44:66")/IPv6(src="CDCD:910A:2222:5498:8475:1111:3900:1515",dst="CDCD:910A:2222:5498:8475:1111:3900:2020",tc=3)/TCP(sport=10,dport=3077)/Raw("x"*80)], iface="enp27s0f0", count=1)
check port 1 can not receive the packet.
verify rules can be destroyed:
testpmd> flow flush 0 testpmd> flow list 0
check the rules not exist in the list. send matched packets, check port 1 can not receive the packet.
22.58.3. Subcase 3: MAC_IPV4_UDP_VXLAN_MAC_IPV4_UDP + L4 MASK + single vf¶
validate a rule:
testpmd> rx_vxlan_port add 4789 0 testpmd> flow validate 0 priority 0 ingress pattern eth / ipv4 / udp / vxlan / eth / ipv4 / udp src spec 32 src mask 0x0f / end actions represented_port ethdev_port_id 1 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create MAC_IPV4_L2TP_PAY rule:
testpmd> flow create 0 priority 0 ingress pattern eth / ipv4 / udp / vxlan / eth / ipv4 / udp src spec 32 src mask 0x0f / end actions represented_port ethdev_port_id 1 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="00:11:22:33:44:66")/IP()/UDP()/VXLAN()/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/UDP(sport=16,dport=22)/Raw("x"*80)], iface="enp27s0f0", count=1)
check port 1 receive the packet.
send mismatched packets:
sendp([Ether(dst="00:11:22:33:44:66")/IP()/UDP()/VXLAN()/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/UDP(sport=33,dport=22)/Raw("x"*80)], iface="enp27s0f0", count=1)
check port 1 can not receive the packet.
verify rules can be destroyed:
testpmd> flow flush 0 testpmd> flow list 0
check the rules not exist in the list. send matched packets, check port 1 can not receive the packet.
22.58.4. Subcase 4: MAC_IPV4_NVGRE_MAC_IPV4_UDP + L4 MASK + single vf¶
validate a rule:
testpmd> flow validate 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 0x8 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / udp src spec 1280 src mask 0x00ff / end actions represented_port ethdev_port_id 1 / end
get the message:
Flow rule validated
check the flow list:
testpmd> flow list 0
check the rule not exists in the list.
create MAC_IPV4_L2TP_PAY rule:
testpmd> flow create 0 ingress pattern eth / ipv4 dst is 192.168.0.1 / nvgre tni is 0x8 / eth / ipv4 src is 192.168.0.2 dst is 192.168.0.3 / udp src spec 1280 src mask 0x00ff / end actions represented_port ethdev_port_id 1 / end testpmd> flow list 0
check the rule exists in the list.
send matched packets:
sendp([Ether(dst="00:11:22:33:44:66")/IP(dst="192.168.0.1")/NVGRE(TNI=0x8)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/UDP(sport=1536)/Raw("x"*80)], iface="enp27s0f0", count=1)
check port 1 receive the packet.
send mismatched packets:
sendp([Ether(dst="00:11:22:33:44:66")/IP(dst="192.168.0.1")/NVGRE(TNI=0x8)/Ether()/IP(src="192.168.0.2", dst="192.168.0.3")/UDP(sport=1281)/Raw("x"*80)], iface="enp27s0f0", count=1)
check port 1 can not receive the packet.
verify rules can be destroyed:
testpmd> flow flush 0 testpmd> flow list 0
check the rules not exist in the list. send matched packets, check port 1 can not receive the packet.