// SPDX-License-Identifier: GPL-2.0 #include <assert.h> #include <bpf/bpf.h> #include <linux/filter.h> #include <stdio.h> #include <stdlib.h> #include <sys/sysinfo.h> #include "bpf_util.h" #include "cgroup_helpers.h" #include "testing_helpers.h" char bpf_log_buf[BPF_LOG_BUF_SIZE]; #define TEST_CGROUP "/test-bpf-cgroup-storage-buf/" int main(int argc, char **argv) { struct bpf_insn prog[] = { BPF_LD_MAP_FD(BPF_REG_1, 0), /* percpu map fd */ BPF_MOV64_IMM(BPF_REG_2, 0), /* flags, not used */ BPF_RAW_INSN(BPF_JMP | BPF_CALL, 0, 0, 0, BPF_FUNC_get_local_storage), BPF_LDX_MEM(BPF_DW, BPF_REG_3, BPF_REG_0, 0), BPF_ALU64_IMM(BPF_ADD, BPF_REG_3, 0x1), BPF_STX_MEM(BPF_DW, BPF_REG_0, BPF_REG_3, 0), BPF_LD_MAP_FD(BPF_REG_1, 0), /* map fd */ BPF_MOV64_IMM(BPF_REG_2, 0), /* flags, not used */ BPF_RAW_INSN(BPF_JMP | BPF_CALL, 0, 0, 0, BPF_FUNC_get_local_storage), BPF_MOV64_IMM(BPF_REG_1, 1), BPF_ATOMIC_OP(BPF_DW, BPF_ADD, BPF_REG_0, BPF_REG_1, 0), BPF_LDX_MEM(BPF_DW, BPF_REG_1, BPF_REG_0, 0), BPF_ALU64_IMM(BPF_AND, BPF_REG_1, 0x1), BPF_MOV64_REG(BPF_REG_0, BPF_REG_1), BPF_EXIT_INSN(), }; size_t insns_cnt = ARRAY_SIZE(prog); int error = EXIT_FAILURE; int map_fd, percpu_map_fd, prog_fd, cgroup_fd; struct bpf_cgroup_storage_key key; unsigned long long value; unsigned long long *percpu_value; int cpu, nproc; nproc = bpf_num_possible_cpus(); percpu_value = malloc(sizeof(*percpu_value) * nproc); if (!percpu_value) { printf("Not enough memory for per-cpu area (%d cpus)\n", nproc); goto err; } /* Use libbpf 1.0 API mode */ libbpf_set_strict_mode(LIBBPF_STRICT_ALL); map_fd = bpf_map_create(BPF_MAP_TYPE_CGROUP_STORAGE, NULL, sizeof(key), sizeof(value), 0, NULL); if (map_fd < 0) { printf("Failed to create map: %s\n", strerror(errno)); goto out; } percpu_map_fd = bpf_map_create(BPF_MAP_TYPE_PERCPU_CGROUP_STORAGE, NULL, sizeof(key), sizeof(value), 0, NULL); if (percpu_map_fd < 0) { printf("Failed to create map: %s\n", strerror(errno)); goto out; } prog[0].imm = percpu_map_fd; prog[7].imm = map_fd; prog_fd = bpf_test_load_program(BPF_PROG_TYPE_CGROUP_SKB, prog, insns_cnt, "GPL", 0, bpf_log_buf, BPF_LOG_BUF_SIZE); if (prog_fd < 0) { printf("Failed to load bpf program: %s\n", bpf_log_buf); goto out; } cgroup_fd = cgroup_setup_and_join(TEST_CGROUP); /* Attach the bpf program */ if (bpf_prog_attach(prog_fd, cgroup_fd, BPF_CGROUP_INET_EGRESS, 0)) { printf("Failed to attach bpf program\n"); goto err; } if (bpf_map_get_next_key(map_fd, NULL, &key)) { printf("Failed to get the first key in cgroup storage\n"); goto err; } if (bpf_map_lookup_elem(map_fd, &key, &value)) { printf("Failed to lookup cgroup storage 0\n"); goto err; } for (cpu = 0; cpu < nproc; cpu++) percpu_value[cpu] = 1000; if (bpf_map_update_elem(percpu_map_fd, &key, percpu_value, 0)) { printf("Failed to update the data in the cgroup storage\n"); goto err; } /* Every second packet should be dropped */ assert(system("ping localhost -c 1 -W 1 -q > /dev/null") == 0); assert(system("ping localhost -c 1 -W 1 -q > /dev/null")); assert(system("ping localhost -c 1 -W 1 -q > /dev/null") == 0); /* Check the counter in the cgroup local storage */ if (bpf_map_lookup_elem(map_fd, &key, &value)) { printf("Failed to lookup cgroup storage\n"); goto err; } if (value != 3) { printf("Unexpected data in the cgroup storage: %llu\n", value); goto err; } /* Bump the counter in the cgroup local storage */ value++; if (bpf_map_update_elem(map_fd, &key, &value, 0)) { printf("Failed to update the data in the cgroup storage\n"); goto err; } /* Every second packet should be dropped */ assert(system("ping localhost -c 1 -W 1 -q > /dev/null") == 0); assert(system("ping localhost -c 1 -W 1 -q > /dev/null")); assert(system("ping localhost -c 1 -W 1 -q > /dev/null") == 0); /* Check the final value of the counter in the cgroup local storage */ if (bpf_map_lookup_elem(map_fd, &key, &value)) { printf("Failed to lookup the cgroup storage\n"); goto err; } if (value != 7) { printf("Unexpected data in the cgroup storage: %llu\n", value); goto err; } /* Check the final value of the counter in the percpu local storage */ for (cpu = 0; cpu < nproc; cpu++) percpu_value[cpu] = 0; if (bpf_map_lookup_elem(percpu_map_fd, &key, percpu_value)) { printf("Failed to lookup the per-cpu cgroup storage\n"); goto err; } value = 0; for (cpu = 0; cpu < nproc; cpu++) value += percpu_value[cpu]; if (value != nproc * 1000 + 6) { printf("Unexpected data in the per-cpu cgroup storage\n"); goto err; } error = 0; printf("test_cgroup_storage:PASS\n"); err: cleanup_cgroup_environment(); free(percpu_value); out: return error; }