{"id":2233030,"url":"http://patchwork.ozlabs.org/api/1.2/patches/2233030/?format=json","web_url":"http://patchwork.ozlabs.org/project/netfilter-devel/patch/20260505-b4-flowtable-sw-accel-ip6ip-v1-4-9ac39ccc9ea9@kernel.org/","project":{"id":26,"url":"http://patchwork.ozlabs.org/api/1.2/projects/26/?format=json","name":"Netfilter Development","link_name":"netfilter-devel","list_id":"netfilter-devel.vger.kernel.org","list_email":"netfilter-devel@vger.kernel.org","web_url":null,"scm_url":null,"webscm_url":null,"list_archive_url":"","list_archive_url_format":"","commit_url_format":""},"msgid":"<20260505-b4-flowtable-sw-accel-ip6ip-v1-4-9ac39ccc9ea9@kernel.org>","list_archive_url":null,"date":"2026-05-05T14:49:26","name":"[nf-next,4/4] selftests: netfilter: nft_flowtable.sh: Add IPv4 over IPv6 flowtable selftest","commit_ref":null,"pull_url":null,"state":"new","archived":false,"hash":"f002110a7fe74a086d783cd7c0c44aae560ae557","submitter":{"id":76007,"url":"http://patchwork.ozlabs.org/api/1.2/people/76007/?format=json","name":"Lorenzo Bianconi","email":"lorenzo@kernel.org"},"delegate":null,"mbox":"http://patchwork.ozlabs.org/project/netfilter-devel/patch/20260505-b4-flowtable-sw-accel-ip6ip-v1-4-9ac39ccc9ea9@kernel.org/mbox/","series":[{"id":502850,"url":"http://patchwork.ozlabs.org/api/1.2/series/502850/?format=json","web_url":"http://patchwork.ozlabs.org/project/netfilter-devel/list/?series=502850","date":"2026-05-05T14:49:22","name":"Add IPv4 over IPv6 flowtable SW acceleration","version":1,"mbox":"http://patchwork.ozlabs.org/series/502850/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/patches/2233030/comments/","check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/2233030/checks/","tags":{},"related":[],"headers":{"Return-Path":"\n ","X-Original-To":["incoming@patchwork.ozlabs.org","netfilter-devel@vger.kernel.org"],"Delivered-To":"patchwork-incoming@legolas.ozlabs.org","Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=kernel.org header.i=@kernel.org header.a=rsa-sha256\n header.s=k20201202 header.b=FxVtxuku;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=vger.kernel.org\n (client-ip=172.105.105.114; helo=tor.lore.kernel.org;\n envelope-from=netfilter-devel+bounces-12445-incoming=patchwork.ozlabs.org@vger.kernel.org;\n receiver=patchwork.ozlabs.org)","smtp.subspace.kernel.org;\n\tdkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org\n header.b=\"FxVtxuku\"","smtp.subspace.kernel.org;\n arc=none smtp.client-ip=10.30.226.201"],"Received":["from tor.lore.kernel.org (tor.lore.kernel.org [172.105.105.114])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g91fs6kD1z1yJV\n\tfor ; Wed, 06 May 2026 00:51:17 +1000 (AEST)","from smtp.subspace.kernel.org (conduit.subspace.kernel.org\n [100.90.174.1])\n\tby tor.lore.kernel.org (Postfix) with ESMTP id E10A73074AFA\n\tfor ; Tue, 5 May 2026 14:50:14 +0000 (UTC)","from localhost.localdomain (localhost.localdomain [127.0.0.1])\n\tby smtp.subspace.kernel.org (Postfix) with ESMTP id 5765D480DC3;\n\tTue, 5 May 2026 14:50:08 +0000 (UTC)","from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org\n [10.30.226.201])\n\t(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))\n\t(No client certificate requested)\n\tby smtp.subspace.kernel.org (Postfix) with ESMTPS id D6AFC36495D;\n\tTue, 5 May 2026 14:50:07 +0000 (UTC)","by smtp.kernel.org (Postfix) with ESMTPSA id 26D6BC2BCF5;\n\tTue, 5 May 2026 14:50:06 +0000 (UTC)"],"ARC-Seal":"i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116;\n\tt=1777992607; cv=none;\n b=GrwY/UJPjB1/n4k1dtPI29/gnl9otXPxOCb27HbEqmGTv4y1BTXymnvNHOHgSJ8+La6HP2TQ3Kh4CtXkuYUKRb4SI5Xx4owZdw1dmnClFjoKPBVAtLPObfgOg6Cf+GpBEFYwoFEWROihmwRfN9P+5K119XQ24CgoDwCjZbIYMsk=","ARC-Message-Signature":"i=1; a=rsa-sha256; d=subspace.kernel.org;\n\ts=arc-20240116; t=1777992607; c=relaxed/simple;\n\tbh=3ZPHgJUJ+F1jDAjlmGng3iYAAGgk6pserxwVK3Vie+A=;\n\th=From:Date:Subject:MIME-Version:Content-Type:Message-Id:References:\n\t In-Reply-To:To:Cc;\n b=K1Whqkt4RK9tx0S7edmAVdkXa62uagm9oReGUphagV6E/3yHDBTOGKqOw97Z2LCGcGQPC9lZXEdmW+Fkx8SMtAiu/rEILwer8gkFtjykNYoQURWdBpCHj4YJxCvMRmBTuh3lNK84Tt0bVcRIiY5hD6zr/eGV3z1ZB8bnOtUqRz8=","ARC-Authentication-Results":"i=1; smtp.subspace.kernel.org;\n dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org\n header.b=FxVtxuku; arc=none smtp.client-ip=10.30.226.201","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org;\n\ts=k20201202; t=1777992607;\n\tbh=3ZPHgJUJ+F1jDAjlmGng3iYAAGgk6pserxwVK3Vie+A=;\n\th=From:Date:Subject:References:In-Reply-To:To:Cc:From;\n\tb=FxVtxukuMwqI1K18z0mLjqbsUTyQm3hgwOSeoez32kgT4E2HBu0Y5TNG+urszbQvH\n\t mv+gN5DRApDtFbxHcbBYTCCgkB+rzh3+Ii0mEIWBqIGd717qbpl1BHj+nNJLKMo4GW\n\t 8R6+nOav5bpsGaDAyGY90rAbMWCcBUhOyvFm81tNGhl5U7QUyTJseSwFZ6Xmpjw6FY\n\t Tqjg+Ggky3/whxDb7B+TQPfot5HdDF+DNhhAdokdOcQHdtN3CWdX1gK2DZjWNtJEYA\n\t skIe2TDwZOwFfNMTHqapklgjA2dyOrMGeOnI0SYAP5bRrCon9hoKd3EkrO6xfLF4Yu\n\t WpeADmEVoPq6A==","From":"Lorenzo Bianconi ","Date":"Tue, 05 May 2026 16:49:26 +0200","Subject":"[PATCH nf-next 4/4] selftests: netfilter: nft_flowtable.sh: Add\n IPv4 over IPv6 flowtable selftest","Precedence":"bulk","X-Mailing-List":"netfilter-devel@vger.kernel.org","List-Id":"","List-Subscribe":"","List-Unsubscribe":"","MIME-Version":"1.0","Content-Type":"text/plain; charset=\"utf-8\"","Content-Transfer-Encoding":"7bit","Message-Id":"\n <20260505-b4-flowtable-sw-accel-ip6ip-v1-4-9ac39ccc9ea9@kernel.org>","References":"\n <20260505-b4-flowtable-sw-accel-ip6ip-v1-0-9ac39ccc9ea9@kernel.org>","In-Reply-To":"\n <20260505-b4-flowtable-sw-accel-ip6ip-v1-0-9ac39ccc9ea9@kernel.org>","To":"Andrew Lunn ,\n \"David S. Miller\" , Eric Dumazet ,\n Jakub Kicinski , Paolo Abeni ,\n Felix Fietkau , Matthias Brugger ,\n AngeloGioacchino Del Regno ,\n Simon Horman , David Ahern ,\n Ido Schimmel , Pablo Neira Ayuso ,\n Florian Westphal , Phil Sutter ,\n Shuah Khan ","Cc":"linux-arm-kernel@lists.infradead.org,\n linux-mediatek@lists.infradead.org, netdev@vger.kernel.org,\n netfilter-devel@vger.kernel.org, coreteam@netfilter.org,\n linux-kselftest@vger.kernel.org, Lorenzo Bianconi ","X-Mailer":"b4 0.14.3"},"content":"Similar to IPIP and IP6IP6, introduce specific selftest for IPv4 over IPv6\nflowtable sw acceleration in nft_flowtable.sh\n\nSigned-off-by: Lorenzo Bianconi \n---\n .../selftests/net/netfilter/nft_flowtable.sh | 26 ++++++++++++++++++++++\n 1 file changed, 26 insertions(+)","diff":"diff --git a/tools/testing/selftests/net/netfilter/nft_flowtable.sh b/tools/testing/selftests/net/netfilter/nft_flowtable.sh\nindex 7a34ef468975..d9995549f8a6 100755\n--- a/tools/testing/selftests/net/netfilter/nft_flowtable.sh\n+++ b/tools/testing/selftests/net/netfilter/nft_flowtable.sh\n@@ -594,7 +594,9 @@ ip netns exec \"$nsr1\" sysctl net.ipv4.conf.tun0.forwarding=1 > /dev/null\n \n ip -net \"$nsr1\" link add name tun6 type ip6tnl local fee1:2::1 remote fee1:2::2\n ip -net \"$nsr1\" link set tun6 up\n+ip -net \"$nsr1\" addr add 192.168.210.1/24 dev tun6\n ip -net \"$nsr1\" addr add fee1:3::1/64 dev tun6 nodad\n+ip netns exec \"$nsr1\" sysctl net.ipv4.conf.tun6.forwarding=1 > /dev/null\n \n ip -net \"$nsr2\" link add name tun0 type ipip local 192.168.10.2 remote 192.168.10.1\n ip -net \"$nsr2\" link set tun0 up\n@@ -603,7 +605,9 @@ ip netns exec \"$nsr2\" sysctl net.ipv4.conf.tun0.forwarding=1 > /dev/null\n \n ip -net \"$nsr2\" link add name tun6 type ip6tnl local fee1:2::2 remote fee1:2::1 || ret=1\n ip -net \"$nsr2\" link set tun6 up\n+ip -net \"$nsr2\" addr add 192.168.210.2/24 dev tun6\n ip -net \"$nsr2\" addr add fee1:3::2/64 dev tun6 nodad\n+ip netns exec \"$nsr2\" sysctl net.ipv4.conf.tun6.forwarding=1 > /dev/null\n \n ip -net \"$nsr1\" route change default via 192.168.100.2\n ip -net \"$nsr2\" route change default via 192.168.100.1\n@@ -636,6 +640,15 @@ else\n \tret=1\n fi\n \n+ip -net \"$nsr1\" route change default via 192.168.210.2\n+ip -net \"$nsr2\" route change default via 192.168.210.1\n+\n+if ! test_tcp_forwarding_nat \"$ns1\" \"$ns2\" 1 \"IP6IP4 tunnel\"; then\n+\techo \"FAIL: flow offload for ns1/ns2 with IP6IP4 tunnel\" 1>&2\n+\tip netns exec \"$nsr1\" nft list ruleset\n+\tret=1\n+fi\n+\n # Create vlan tagged devices for IPIP traffic.\n ip -net \"$nsr1\" link add link veth1 name veth1.10 type vlan id 10\n ip -net \"$nsr1\" link set veth1.10 up\n@@ -653,7 +666,9 @@ ip netns exec \"$nsr1\" nft -a insert rule inet filter forward 'meta oif tun0.10 a\n \n ip -net \"$nsr1\" link add name tun6.10 type ip6tnl local fee1:4::1 remote fee1:4::2\n ip -net \"$nsr1\" link set tun6.10 up\n+ip -net \"$nsr1\" addr add 192.168.220.1/24 dev tun6.10\n ip -net \"$nsr1\" addr add fee1:5::1/64 dev tun6.10 nodad\n+ip netns exec \"$nsr1\" sysctl net.ipv4.conf.tun6/10.forwarding=1 > /dev/null\n ip -6 -net \"$nsr1\" route delete default\n ip -6 -net \"$nsr1\" route add default via fee1:5::2\n ip netns exec \"$nsr1\" nft -a insert rule inet filter forward 'meta oif tun6.10 accept'\n@@ -672,7 +687,9 @@ ip netns exec \"$nsr2\" sysctl net.ipv4.conf.tun0/10.forwarding=1 > /dev/null\n \n ip -net \"$nsr2\" link add name tun6.10 type ip6tnl local fee1:4::2 remote fee1:4::1 || ret=1\n ip -net \"$nsr2\" link set tun6.10 up\n+ip -net \"$nsr2\" addr add 192.168.220.2/24 dev tun6.10\n ip -net \"$nsr2\" addr add fee1:5::2/64 dev tun6.10 nodad\n+ip netns exec \"$nsr2\" sysctl net.ipv4.conf.tun6/10.forwarding=1 > /dev/null\n ip -6 -net \"$nsr2\" route delete default\n ip -6 -net \"$nsr2\" route add default via fee1:5::1\n \n@@ -690,6 +707,15 @@ else\n \tret=1\n fi\n \n+ip -net \"$nsr1\" route change default via 192.168.220.2\n+ip -net \"$nsr2\" route change default via 192.168.220.1\n+\n+if ! test_tcp_forwarding_nat \"$ns1\" \"$ns2\" 1 \"IP6IP4 tunnel over vlan\"; then\n+\techo \"FAIL: flow offload for ns1/ns2 with IP6IP4 tunnel over vlan\" 1>&2\n+\tip netns exec \"$nsr1\" nft list ruleset\n+\tret=1\n+fi\n+\n # Restore the previous configuration\n ip -net \"$nsr1\" route change default via 192.168.10.2\n ip -net \"$nsr2\" route change default via 192.168.10.1\n","prefixes":["nf-next","4/4"]}