net/mlxsw/tc_restrictions.sh

2 # SPDX-License-Identifier: GPL-2.0
41 	# It is forbidden in mlxsw driver to have mixed-bound
44 	tc qdisc add dev $swp1 ingress_block 22 clsact
47 	tc filter add block 22 protocol ip pref 1 handle 101 flower \
49 	check_err $? "Failed to add drop rule to ingress bound block"
51 	tc qdisc add dev $swp2 ingress_block 22 clsact
56 	tc qdisc add dev $swp2 egress_block 22 clsact
61 	tc qdisc add dev $swp2 egress_block 22 clsact
64 	tc filter add block 22 protocol ip pref 1 handle 101 flower \
66 	check_fail $? "Incorrect success to add drop rule to mixed bound block"
70 	tc qdisc add dev $swp1 egress_block 22 clsact
73 	tc filter add block 22 protocol ip pref 1 handle 101 flower \
75 	check_err $? "Failed to add drop rule to egress bound shared block"
89 	# It is forbidden in mlxsw driver to have mirred redirect on
90 	# egress-bound block.
92 	tc qdisc add dev $swp1 ingress_block 22 clsact
95 	tc filter add block 22 protocol ip pref 1 handle 101 flower \
98 	check_err $? "Failed to add redirect rule to ingress bound block"
100 	tc qdisc add dev $swp2 ingress_block 22 clsact
105 	tc qdisc add dev $swp2 egress_block 22 clsact
110 	tc qdisc add dev $swp2 egress_block 22 clsact
113 	tc filter add block 22 protocol ip pref 1 handle 101 flower \
116 	check_fail $? "Incorrect success to add redirect rule to mixed bound block"
120 	tc qdisc add dev $swp1 egress_block 22 clsact
123 	tc filter add block 22 protocol ip pref 1 handle 101 flower \
126 	check_fail $? "Incorrect success to add redirect rule to egress bound shared block"
130 	tc filter add block 22 protocol ip pref 1 handle 101 flower \
133 	check_fail $? "Incorrect success to add redirect rule to egress bound block"
147 	tc qdisc add dev $swp1 clsact
149 	tc filter add dev $swp1 ingress protocol ip pref 1 handle 101 flower \
152 	check_err $? "Failed to add rule with single mirror action"
156 	tc filter add dev $swp1 ingress protocol ip pref 1 handle 101 flower \
160 	check_fail $? "Incorrect success to add rule with two mirror actions"
172 	# bound on egress. Spectrum-1 specific restriction
175 	tc qdisc add dev $swp1 clsact
177 	tc filter add dev $swp1 ingress protocol all pref 1 handle 101 \
179 	check_err $? "Failed to add rule with sample action on ingress"
183 	tc filter add dev $swp1 egress protocol all pref 1 handle 101 \
185 	check_fail $? "Incorrect success to add rule with sample action on egress"
199 	# On ingress, all matchall-mirror and matchall-sample
202 	tc qdisc add dev $swp1 clsact
204 	tc filter add dev $swp1 ingress protocol ip pref 10 handle 101 flower \
207 	tc filter add dev $swp1 ingress protocol all pref 9 handle 102 \
209 	check_err $? "Failed to add matchall rule in front of a flower rule"
213 	tc filter add dev $swp1 ingress protocol all pref 11 handle 102 \
215 	check_fail $? "Incorrect success to add matchall rule behind a flower rule"
219 	tc filter add dev $swp1 ingress protocol all pref 9 handle 102 \
222 	tc filter add dev $swp1 ingress protocol ip pref 10 handle 101 flower \
224 	check_err $? "Failed to add flower rule behind a matchall rule"
228 	tc filter add dev $swp1 ingress protocol ip pref 8 handle 101 flower \
230 	check_fail $? "Incorrect success to add flower rule in front of a matchall rule"
254 	# On egress, all matchall-mirror rules have to be behind the flower rules
256 	tc qdisc add dev $swp1 clsact
258 	tc filter add dev $swp1 egress protocol ip pref 10 handle 101 flower \
261 	tc filter add dev $swp1 egress protocol all pref 11 handle 102 \
263 	check_err $? "Failed to add matchall rule in front of a flower rule"
267 	tc filter add dev $swp1 egress protocol all pref 9 handle 102 \
269 	check_fail $? "Incorrect success to add matchall rule behind a flower rule"
273 	tc filter add dev $swp1 egress protocol all pref 11 handle 102 \
276 	tc filter add dev $swp1 egress protocol ip pref 10 handle 101 flower \
278 	check_err $? "Failed to add flower rule behind a matchall rule"
282 	tc filter add dev $swp1 egress protocol ip pref 12 handle 101 flower \
284 	check_fail $? "Incorrect success to add flower rule in front of a matchall rule"
300 	tc qdisc add dev $swp1 clsact
302 	tc filter add dev $swp1 ingress pref 1 proto ip handle 101 \
305 	check_fail $? "Incorrect success to add matchall rule with protocol match"
316 	tc qdisc add dev $swp1 clsact
318 	tc filter add dev $swp1 ingress pref 1 proto ip handle 101 \
320 		action police rate 0.5kbit burst 1m conform-exceed drop/ok
321 	check_fail $? "Incorrect success to add police action with too low rate"
323 	tc filter add dev $swp1 ingress pref 1 proto ip handle 101 \
325 		action police rate 2.5tbit burst 1g conform-exceed drop/ok
326 	check_fail $? "Incorrect success to add police action with too high rate"
328 	tc filter add dev $swp1 ingress pref 1 proto ip handle 101 \
330 		action police rate 1.5kbit burst 1m conform-exceed drop/ok
331 	check_err $? "Failed to add police action with low rate"
335 	tc filter add dev $swp1 ingress pref 1 proto ip handle 101 \
337 		action police rate 1.9tbit burst 1g conform-exceed drop/ok
338 	check_err $? "Failed to add police action with high rate"
342 	tc filter add dev $swp1 ingress pref 1 proto ip handle 101 \
344 		action police rate 1.5kbit burst 512b conform-exceed drop/ok
345 	check_fail $? "Incorrect success to add police action with too low burst size"
347 	tc filter add dev $swp1 ingress pref 1 proto ip handle 101 \
349 		action police rate 1.5kbit burst 2k conform-exceed drop/ok
350 	check_err $? "Failed to add police action with low burst size"
366 	tc qdisc add dev $swp1 clsact
368 	tc filter add dev $swp1 ingress protocol ip pref 1 handle 101 \
370 		action police rate 100mbit burst 100k conform-exceed drop/ok
371 	check_err $? "Failed to add rule with single police action"
375 	tc filter add dev $swp1 ingress protocol ip pref 1 handle 101 \
377 		action police rate 100mbit burst 100k conform-exceed drop/pipe \
378 		action police rate 200mbit burst 200k conform-exceed drop/ok
379 	check_fail $? "Incorrect success to add rule with two police actions"