[
{
"id": "696a",
"name": "Add simple ct action",
"category": [
"actions",
"ct"
],
"setup": [
[
"$TC actions flush action ct",
0,
1,
255
]
],
"cmdUnderTest": "$TC actions add action ct index 42",
"expExitCode": "0",
"verifyCmd": "$TC actions list action ct",
"matchPattern": "action order [0-9]*: ct zone 0 pipe.*index 42 ref",
"matchCount": "1",
"teardown": [
"$TC actions flush action ct"
]
},
{
"id": "e38c",
"name": "Add simple ct action with cookie",
"category": [
"actions",
"ct"
],
"setup": [
[
"$TC actions flush action ct",
0,
1,
255
]
],
"cmdUnderTest": "$TC actions add action ct index 42 cookie deadbeef",
"expExitCode": "0",
"verifyCmd": "$TC actions list action ct",
"matchPattern": "action order [0-9]*: ct zone 0 pipe.*index 42 ref.*cookie deadbeef",
"matchCount": "1",
"teardown": [
"$TC actions flush action ct"
]
},
{
"id": "9f20",
"name": "Add ct clear action",
"category": [
"actions",
"ct"
],
"setup": [
[
"$TC actions flush action ct",
0,
1,
255
]
],
"cmdUnderTest": "$TC actions add action ct clear index 42",
"expExitCode": "0",
"verifyCmd": "$TC actions list action ct",
"matchPattern": "action order [0-9]*: ct clear pipe.*index 42 ref",
"matchCount": "1",
"teardown": [
"$TC actions flush action ct"
]
},
{
"id": "0bc1",
"name": "Add ct clear action with cookie of max length",
"category": [
"actions",
"ct"
],
"setup": [
[
"$TC actions flush action ct",
0,
1,
255
]
],
"cmdUnderTest": "$TC actions add action ct clear index 42 cookie aa11bb22cc33dd44ee55ff66aa11b1b2",
"expExitCode": "0",
"verifyCmd": "$TC actions list action ct",
"matchPattern": "action order [0-9]*: ct clear pipe.*index 42 ref.*cookie aa11bb22cc33dd44ee55ff66aa11b1b2",
"matchCount": "1",
"teardown": [
"$TC actions flush action ct"
]
},
{
"id": "5bea",
"name": "Try ct with zone",
"category": [
"actions",
"ct"
],
"setup": [
[
"$TC actions flush action ct",
0,
1,
255
]
],
"cmdUnderTest": "$TC actions add action ct zone 404 index 42",
"expExitCode": "0",
"verifyCmd": "$TC actions list action ct",
"matchPattern": "action order [0-9]*: ct zone 404 pipe.*index 42 ref",
"matchCount": "1",
"teardown": [
"$TC actions flush action ct"
]
},
{
"id": "d5d6",
"name": "Try ct with zone, commit",
"category": [
"actions",
"ct"
],
"setup": [
[
"$TC actions flush action ct",
0,
1,
255
]
],
"cmdUnderTest": "$TC actions add action ct zone 404 commit index 42",
"expExitCode": "0",
"verifyCmd": "$TC actions list action ct",
"matchPattern": "action order [0-9]*: ct commit zone 404 pipe.*index 42 ref",
"matchCount": "1",
"teardown": [
"$TC actions flush action ct"
]
},
{
"id": "029f",
"name": "Try ct with zone, commit, mark",
"category": [
"actions",
"ct"
],
"setup": [
[
"$TC actions flush action ct",
0,
1,
255
]
],
"cmdUnderTest": "$TC actions add action ct zone 404 commit mark 0x42 index 42",
"expExitCode": "0",
"verifyCmd": "$TC actions list action ct",
"matchPattern": "action order [0-9]*: ct commit mark 66 zone 404 pipe.*index 42 ref",
"matchCount": "1",
"teardown": [
"$TC actions flush action ct"
]
},
{
"id": "a58d",
"name": "Try ct with zone, commit, mark, nat",
"category": [
"actions",
"ct"
],
"setup": [
[
"$TC actions flush action ct",
0,
1,
255
]
],
"cmdUnderTest": "$TC actions add action ct zone 404 commit mark 0x42 nat src addr 5.5.5.7 index 42",
"expExitCode": "0",
"verifyCmd": "$TC actions list action ct",
"matchPattern": "action order [0-9]*: ct commit mark 66 zone 404 nat src addr 5.5.5.7 pipe.*index 42 ref",
"matchCount": "1",
"teardown": [
"$TC actions flush action ct"
]
},
{
"id": "901b",
"name": "Try ct with full nat ipv4 range syntax",
"category": [
"actions",
"ct"
],
"setup": [
[
"$TC actions flush action ct",
0,
1,
255
]
],
"cmdUnderTest": "$TC actions add action ct commit nat src addr 5.5.5.7-5.5.6.0 port 1000-2000 index 44",
"expExitCode": "0",
"verifyCmd": "$TC actions list action ct",
"matchPattern": "action order [0-9]*: ct commit zone 0 nat src addr 5.5.5.7-5.5.6.0 port 1000-2000 pipe.*index 44 ref",
"matchCount": "1",
"teardown": [
"$TC actions flush action ct"
]
},
{
"id": "072b",
"name": "Try ct with full nat ipv6 syntax",
"category": [
"actions",
"ct"
],
"setup": [
[
"$TC actions flush action ct",
0,
1,
255
]
],
"cmdUnderTest": "$TC actions add action ct commit nat src addr 2001::1 port 1000-2000 index 44",
"expExitCode": "0",
"verifyCmd": "$TC actions list action ct",
"matchPattern": "action order [0-9]*: ct commit zone 0 nat src addr 2001::1 port 1000-2000 pipe.*index 44 ref",
"matchCount": "1",
"teardown": [
"$TC actions flush action ct"
]
},
{
"id": "3420",
"name": "Try ct with full nat ipv6 range syntax",
"category": [
"actions",
"ct"
],
"setup": [
[
"$TC actions flush action ct",
0,
1,
255
]
],
"cmdUnderTest": "$TC actions add action ct commit nat src addr 2001::1-2001::10 port 1000-2000 index 44",
"expExitCode": "0",
"verifyCmd": "$TC actions list action ct",
"matchPattern": "action order [0-9]*: ct commit zone 0 nat src addr 2001::1-2001::10 port 1000-2000 pipe.*index 44 ref",
"matchCount": "1",
"teardown": [
"$TC actions flush action ct"
]
},
{
"id": "4470",
"name": "Try ct with full nat ipv6 range syntax + force",
"category": [
"actions",
"ct"
],
"setup": [
[
"$TC actions flush action ct",
0,
1,
255
]
],
"cmdUnderTest": "$TC actions add action ct commit force nat src addr 2001::1-2001::10 port 1000-2000 index 44",
"expExitCode": "0",
"verifyCmd": "$TC actions list action ct",
"matchPattern": "action order [0-9]*: ct commit force zone 0 nat src addr 2001::1-2001::10 port 1000-2000 pipe.*index 44 ref",
"matchCount": "1",
"teardown": [
"$TC actions flush action ct"
]
},
{
"id": "5d88",
"name": "Try ct with label",
"category": [
"actions",
"ct"
],
"setup": [
[
"$TC actions flush action ct",
0,
1,
255
]
],
"cmdUnderTest": "$TC actions add action ct label 123123 index 44",
"expExitCode": "0",
"verifyCmd": "$TC actions list action ct",
"matchPattern": "action order [0-9]*: ct zone 0 label 12312300000000000000000000000000 pipe.*index 44 ref",
"matchCount": "1",
"teardown": [
"$TC actions flush action ct"
]
},
{
"id": "04d4",
"name": "Try ct with label with mask",
"category": [
"actions",
"ct"
],
"setup": [
[
"$TC actions flush action ct",
0,
1,
255
]
],
"cmdUnderTest": "$TC actions add action ct label 12312300000000000000000000000001/ffffffff000000000000000000000001 index 44",
"expExitCode": "0",
"verifyCmd": "$TC actions list action ct",
"matchPattern": "action order [0-9]*: ct zone 0 label 12312300000000000000000000000001/ffffffff000000000000000000000001 pipe.*index 44 ref",
"matchCount": "1",
"teardown": [
"$TC actions flush action ct"
]
},
{
"id": "9751",
"name": "Try ct with mark + mask",
"category": [
"actions",
"ct"
],
"setup": [
[
"$TC actions flush action ct",
0,
1,
255
]
],
"cmdUnderTest": "$TC actions add action ct mark 0x42/0xf0 index 42",
"expExitCode": "0",
"verifyCmd": "$TC actions list action ct",
"matchPattern": "action order [0-9]*: ct mark 66/0xf0 zone 0 pipe.*index 42 ref",
"matchCount": "1",
"teardown": [
"$TC actions flush action ct"
]
},
{
"id": "2faa",
"name": "Try ct with mark + mask and cookie",
"category": [
"actions",
"ct"
],
"setup": [
[
"$TC actions flush action ct",
0,
1,
255
]
],
"cmdUnderTest": "$TC actions add action ct mark 0x42/0xf0 index 42 cookie aa11bb22cc33dd44ee55ff66aa11b1b2",
"expExitCode": "0",
"verifyCmd": "$TC actions list action ct",
"matchPattern": "action order [0-9]*: ct mark 66/0xf0 zone 0 pipe.*index 42 ref.*cookie aa11bb22cc33dd44ee55ff66aa11b1b2",
"matchCount": "1",
"teardown": [
"$TC actions flush action ct"
]
},
{
"id": "3991",
"name": "Add simple ct action with no_percpu flag",
"category": [
"actions",
"ct"
],
"setup": [
[
"$TC actions flush action ct",
0,
1,
255
]
],
"cmdUnderTest": "$TC actions add action ct no_percpu",
"expExitCode": "0",
"verifyCmd": "$TC actions list action ct",
"matchPattern": "action order [0-9]*: ct zone 0 pipe.*no_percpu",
"matchCount": "1",
"teardown": [
"$TC actions flush action ct"
]
},
{
"id": "3992",
"name": "Add ct action triggering DNAT tuple conflict",
"category": [
"actions",
"ct",
"scapy"
],
"plugins": {
"requires": [
"nsPlugin",
"scapyPlugin"
]
},
"setup": [
[
"$TC qdisc del dev $DEV1 ingress",
0,
1,
2,
255
],
"$TC qdisc add dev $DEV1 ingress"
],
"cmdUnderTest": "$TC filter add dev $DEV1 ingress protocol ip prio 1 flower ct_state -trk action ct commit nat dst addr 20.0.0.1 port 10 pipe action drop",
"scapy": [
{
"iface": "$DEV0",
"count": 1,
"packet": "Ether(type=0x800)/IP(src='10.0.0.10',dst='10.0.0.10')/TCP(sport=5000,dport=10)"
},
{
"iface": "$DEV0",
"count": 1,
"packet": "Ether(type=0x800)/IP(src='10.0.0.10',dst='10.0.0.20')/TCP(sport=5000,dport=10)"
}
],
"expExitCode": "0",
"verifyCmd": "cat /proc/net/nf_conntrack",
"matchPattern": "dst=10.0.0.20",
"matchCount": "1",
"teardown": [
"$TC qdisc del dev $DEV1 ingress"
]
}
]