-
Notifications
You must be signed in to change notification settings - Fork 10
Commit b42fc02
CKI Backport Bot
selftests: netfilter: nft_fib.sh: add type and oif tests with and without VRFs
JIRA: https://issues.redhat.com/browse/RHEL-88574
commit 996d62e
Author: Florian Westphal <fw@strlen.de>
Date: Wed May 21 11:38:49 2025 +0200
selftests: netfilter: nft_fib.sh: add type and oif tests with and without VRFs
Replace the existing VRF test with a more comprehensive one.
It tests following combinations:
- fib type (returns address type, e.g. unicast)
- fib oif (route output interface index
- both with and without 'iif' keyword (changes result, e.g.
'fib daddr type local' will be true when the destination address
is configured on the local machine, but
'fib daddr . iif type local' will only be true when the destination
address is configured on the incoming interface.
Add all types of addresses to test with for both ipv4 and ipv6:
- local address on the incoming interface
- local address on another interface
- local address on another interface thats part of a vrf
- address on another host
The ruleset stores obtained results from 'fib' in nftables sets and
then queries the sets to check that it has the expected results.
Perform one pass while packets are coming in on interface NOT part of
a VRF and then again when it was added and make sure fib returns the
expected routes and address types for the various addresses in the
setup.
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: CKI Backport Bot <cki-ci-bot+cki-gitlab-backport-bot@redhat.com>1 parent 9c6621b commit b42fc02Copy full SHA for b42fc02
File tree
Expand file treeCollapse file tree
1 file changed
+365
-27
lines changedOpen diff view settings
Filter options
- tools/testing/selftests/net/netfilter
Expand file treeCollapse file tree
1 file changed
+365
-27
lines changedOpen diff view settings
0 commit comments