From patchwork Mon Oct 16 19:32:18 2017 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Harsha Sharma X-Patchwork-Id: 826480 X-Patchwork-Delegate: pablo@netfilter.org Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Authentication-Results: ozlabs.org; spf=none (mailfrom) smtp.mailfrom=vger.kernel.org (client-ip=209.132.180.67; helo=vger.kernel.org; envelope-from=netfilter-devel-owner@vger.kernel.org; receiver=) Authentication-Results: ozlabs.org; dkim=fail reason="signature verification failed" (2048-bit key; unprotected) header.d=gmail.com header.i=@gmail.com header.b="S3BZ9y8F"; dkim-atps=neutral Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by ozlabs.org (Postfix) with ESMTP id 3yG7n907n6z9sRq for ; Tue, 17 Oct 2017 06:34:36 +1100 (AEDT) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1755413AbdJPTeg (ORCPT ); Mon, 16 Oct 2017 15:34:36 -0400 Received: from mail-pf0-f194.google.com ([209.85.192.194]:45134 "EHLO mail-pf0-f194.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1754998AbdJPTef (ORCPT ); Mon, 16 Oct 2017 15:34:35 -0400 Received: by mail-pf0-f194.google.com with SMTP id d28so16547830pfe.2 for ; Mon, 16 Oct 2017 12:34:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id; bh=dcngCzlUUI0jt7hveGkft0oeB5VntP3X+LrOtGcglCk=; b=S3BZ9y8Fj0YaDiaQWV6GlqLVL0MAIjVniVCAWFvn+GnB0bmZIK5QGzx0Ldd6g3GGR1 F30u2ifDQSASmih5STTjEjMA7V3R099oT6yRodmHDZr773Tx28QKwZvHdrZB4wjbK6Eb jr81HNGB8/XEd0w1NnguXtnIfUwuVArXTU0nwQf+0ADxzVKvH3SIAGM9pgw7ktVEnIVR LZP5CUyqJoufPkFvcI4O4sq0xJPhP6eHVgolrYGSw5pwaWeOUWyz51cNj1SkMKO5dj+d VFl+SIR20jGHpG5FGDeap3yg6gahFNbOpe4fW0vEuS9MpRg5CjS1OqCkqHKgLs+iIM+2 G06Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id; bh=dcngCzlUUI0jt7hveGkft0oeB5VntP3X+LrOtGcglCk=; b=aFQOOEHBrSGllMxzuLrbewZ3NLerLfR7rATWRROdN/c8L22nEij/TQMlQ7CjYB+C3y Dvt4A8xHTt3bRu4vT+278Ej2yjMfXokV5k/u2IxmF1hQ1NGfMrO343/qQjW7NTgfMlAM T9QaOY/dVxxRta8d/Wdv2npauJ7g2UshKNDofSKxh1l7jCWe/IpdWVFACqet3lyT97yx UsBw0gvpk+tfHce2pVMpmAACqyfofaLrBYZPwLhOt05jk5HryeefCMoya5FtpsuJTG/E gx+jd/5GmxH0pK/919u5eZoX1AWj6mQSYD+vp9fGM5L07RgaNN+XhAHEHrxX8TaI0VHg 10Kw== X-Gm-Message-State: AMCzsaUXMfNdu/JIQ3TAbnZQ/5MkEJIf1FmfWIwusRtxFfcgPVmGsBqc GrMf2pjOnQkLNo3TpJS5dWM= X-Google-Smtp-Source: AOwi7QCWZG3kfu9ixnyu8LFAWtRE4XRV8BJnSIxay9p/9VHDKA1SP5bm1lRPMIOkoIA/zDPjqowIAw== X-Received: by 10.99.114.81 with SMTP id c17mr9115585pgn.43.1508182474864; Mon, 16 Oct 2017 12:34:34 -0700 (PDT) Received: from localhost.localdomain ([103.37.201.122]) by smtp.gmail.com with ESMTPSA id h70sm17970759pfc.51.2017.10.16.12.34.32 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 16 Oct 2017 12:34:34 -0700 (PDT) From: Harsha Sharma To: pablo@netfilter.org Cc: netfilter-devel@vger.kernel.org, outreachy-kernel@googlegroups.com, Harsha Sharma Subject: [PATCH] tests: add regression tests for xtables-translate Date: Tue, 17 Oct 2017 01:02:18 +0530 Message-Id: <20171016193218.8197-1-harshasharmaiitr@gmail.com> X-Mailer: git-send-email 2.11.0 Sender: netfilter-devel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: netfilter-devel@vger.kernel.org This test suite is intended to detect regressions in the translation infrastructure. The script checks if ip[6]tables-translate produces the expected output, otherwise it prints the wrong translation and the expected one. ** Arguments --all # Show also passed tests [test] # Run only the specified test file ** Test files structure Test files are located under extensions directory. Every file contains tests about specific extension translations. A test file name must end with ".txlate". Inside the files, every single test is defined by two consecutive lines: ip[6]tables-translate command and expected result. One blank line is left between tests by convention. e.g. $ cat extensions/libxt_cpu.txlate iptables-translate -A INPUT -p tcp --dport 80 -m cpu --cpu 0 -j ACCEPT nft add rule ip filter INPUT tcp dport 80 cpu 0 counter accept iptables-translate -A INPUT -p tcp --dport 80 -m cpu ! --cpu 1 -j ACCEPT nft add rule ip filter INPUT tcp dport 80 cpu != 1 counter accept Signed-off-by: Harsha Sharma --- extensions/libxt_TOS.txlate | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) create mode 100644 extensions/libxt_TOS.txlate diff --git a/extensions/libxt_TOS.txlate b/extensions/libxt_TOS.txlate new file mode 100644 index 00000000..6d55eb24 --- /dev/null +++ b/extensions/libxt_TOS.txlate @@ -0,0 +1,25 @@ +ip6tables-translate -A INPUT -j TOS --set-tos 0x1f +nft add rule ip6 filter INPUT counter ip6 dscp set 0x07 + +ip6tables-translate -A INPUT -j TOS --set-tos 0xff +nft add rule ip6 filter INPUT counter ip6 dscp set 0x3f + +ip6tables-translate -A INPUT -j TOS --set-tos Minimize-Delay +nft add rule ip6 filter INPUT counter ip6 dscp set 0x04 + +ip6tables-translate -A INPUT -j TOS --set-tos Minimize-Cost +nft add rule ip6 filter INPUT counter ip6 dscp set 0x00 + +ip6tables-translate -A INPUT -j TOS --set-tos Normal-Service +nft add rule ip6 filter INPUT counter ip6 dscp set 0x00 + +ip6tables-translate -A INPUT -j TOS --and-tos 0x12 +nft add rule ip6 filter INPUT counter ip6 dscp set 0x00 + +ip6tables-translate -A INPUT -j TOS --or-tos 0x12 +nft add rule ip6 filter INPUT counter ip6 dscp set 0x04 + +ip6tables-translate -A INPUT -j TOS --xor-tos 0x12 +nft add rule ip6 filter INPUT counter ip6 dscp set 0x04 + +