tools/testing/selftests/net/forwarding/lib.sh | 14 +++++ .../selftests/net/forwarding/tc_flower.sh | 52 ++++++++++++++++++- 2 files changed, 65 insertions(+), 1 deletion(-)
From: Li Shuang <shuali@redhat.com>
Add test cases to tc_flower.sh to validate generic matching on ERSPAN
options. Both ERSPAN Type II and Type III are covered.
Also add check_tc_erspan_support() to verify whether tc supports
erspan_opts.
Signed-off-by: Li Shuang <shuali@redhat.com>
---
tools/testing/selftests/net/forwarding/lib.sh | 14 +++++
.../selftests/net/forwarding/tc_flower.sh | 52 ++++++++++++++++++-
2 files changed, 65 insertions(+), 1 deletion(-)
diff --git a/tools/testing/selftests/net/forwarding/lib.sh b/tools/testing/selftests/net/forwarding/lib.sh
index 9308b2f77fed..890b3374dacd 100644
--- a/tools/testing/selftests/net/forwarding/lib.sh
+++ b/tools/testing/selftests/net/forwarding/lib.sh
@@ -142,6 +142,20 @@ check_tc_version()
fi
}
+check_tc_erspan_support()
+{
+ local dev=$1; shift
+
+ tc filter add dev $dev ingress pref 1 handle 1 flower \
+ erspan_opts 1:0:0:0 &> /dev/null
+ if [[ $? -ne 0 ]]; then
+ echo "SKIP: iproute2 too old; tc is missing erspan support"
+ return $ksft_skip
+ fi
+ tc filter del dev $dev ingress pref 1 handle 1 flower \
+ erspan_opts 1:0:0:0 &> /dev/null
+}
+
# Old versions of tc don't understand "mpls_uc"
check_tc_mpls_support()
{
diff --git a/tools/testing/selftests/net/forwarding/tc_flower.sh b/tools/testing/selftests/net/forwarding/tc_flower.sh
index b1daad19b01e..b58909a93112 100755
--- a/tools/testing/selftests/net/forwarding/tc_flower.sh
+++ b/tools/testing/selftests/net/forwarding/tc_flower.sh
@@ -6,7 +6,7 @@ ALL_TESTS="match_dst_mac_test match_src_mac_test match_dst_ip_test \
match_ip_tos_test match_indev_test match_ip_ttl_test
match_mpls_label_test \
match_mpls_tc_test match_mpls_bos_test match_mpls_ttl_test \
- match_mpls_lse_test"
+ match_mpls_lse_test match_erspan_opts_test"
NUM_NETIFS=2
source tc_common.sh
source lib.sh
@@ -676,6 +676,56 @@ match_mpls_lse_test()
log_test "mpls lse match ($tcflags)"
}
+match_erspan_opts_test()
+{
+ RET=0
+
+ check_tc_erspan_support $h2 || return 0
+
+ # h1 erspan setup
+ tunnel_create erspan1 erspan 192.0.2.1 192.0.2.2 dev $h1 seq key 1001 \
+ tos C ttl 64 erspan_ver 1 erspan 6789 # ERSPAN Type II
+ tunnel_create erspan2 erspan 192.0.2.1 192.0.2.2 dev $h1 seq key 1002 \
+ tos C ttl 64 erspan_ver 2 erspan_dir egress erspan_hwid 63 \
+ # ERSPAN Type III
+ ip link set dev erspan1 master v$h1
+ ip link set dev erspan2 master v$h1
+ # h2 erspan setup
+ ip link add ep-ex type erspan ttl 64 external # To collect tunnel info
+ ip link set ep-ex up
+ ip link set dev ep-ex master v$h2
+ tc qdisc add dev ep-ex clsact
+
+ # ERSPAN Type II [decap direction]
+ tc filter add dev ep-ex ingress protocol ip handle 101 flower \
+ $tcflags enc_src_ip 192.0.2.1 enc_dst_ip 192.0.2.2 \
+ enc_key_id 1001 erspan_opts 1:6789:0:0 \
+ action drop
+ # ERSPAN Type III [decap direction]
+ tc filter add dev ep-ex ingress protocol ip handle 102 flower \
+ $tcflags enc_src_ip 192.0.2.1 enc_dst_ip 192.0.2.2 \
+ enc_key_id 1002 erspan_opts 2:0:1:63 action drop
+
+ ep1mac=$(mac_get erspan1)
+ $MZ erspan1 -c 1 -p 64 -a $ep1mac -b $h2mac -t ip -q
+ tc_check_packets "dev ep-ex ingress" 101 1
+ check_err $? "ERSPAN Type II"
+
+ ep2mac=$(mac_get erspan2)
+ $MZ erspan2 -c 1 -p 64 -a $ep1mac -b $h2mac -t ip -q
+ tc_check_packets "dev ep-ex ingress" 102 1
+ check_err $? "ERSPAN Type III"
+
+ # h2 erspan cleanup
+ tc qdisc del dev ep-ex clsact
+ tunnel_destroy ep-ex
+ # h1 erspan cleanup
+ tunnel_destroy erspan2 # ERSPAN Type III
+ tunnel_destroy erspan1 # ERSPAN Type II
+
+ log_test "erspan_opts match ($tcflags)"
+}
+
setup_prepare()
{
h1=${NETIFS[p1]}
--
2.50.1On Fri, Jul 18, 2025 at 10:16 AM <shuali@redhat.com> wrote:
>
> From: Li Shuang <shuali@redhat.com>
>
> Add test cases to tc_flower.sh to validate generic matching on ERSPAN
> options. Both ERSPAN Type II and Type III are covered.
>
> Also add check_tc_erspan_support() to verify whether tc supports
> erspan_opts.
>
> Signed-off-by: Li Shuang <shuali@redhat.com>
> ---
> tools/testing/selftests/net/forwarding/lib.sh | 14 +++++
> .../selftests/net/forwarding/tc_flower.sh | 52 ++++++++++++++++++-
> 2 files changed, 65 insertions(+), 1 deletion(-)
>
> diff --git a/tools/testing/selftests/net/forwarding/lib.sh b/tools/testing/selftests/net/forwarding/lib.sh
> index 9308b2f77fed..890b3374dacd 100644
> --- a/tools/testing/selftests/net/forwarding/lib.sh
> +++ b/tools/testing/selftests/net/forwarding/lib.sh
> @@ -142,6 +142,20 @@ check_tc_version()
> fi
> }
>
> +check_tc_erspan_support()
> +{
> + local dev=$1; shift
> +
> + tc filter add dev $dev ingress pref 1 handle 1 flower \
> + erspan_opts 1:0:0:0 &> /dev/null
> + if [[ $? -ne 0 ]]; then
> + echo "SKIP: iproute2 too old; tc is missing erspan support"
> + return $ksft_skip
> + fi
> + tc filter del dev $dev ingress pref 1 handle 1 flower \
> + erspan_opts 1:0:0:0 &> /dev/null
> +}
> +
> # Old versions of tc don't understand "mpls_uc"
> check_tc_mpls_support()
> {
> diff --git a/tools/testing/selftests/net/forwarding/tc_flower.sh b/tools/testing/selftests/net/forwarding/tc_flower.sh
> index b1daad19b01e..b58909a93112 100755
> --- a/tools/testing/selftests/net/forwarding/tc_flower.sh
> +++ b/tools/testing/selftests/net/forwarding/tc_flower.sh
> @@ -6,7 +6,7 @@ ALL_TESTS="match_dst_mac_test match_src_mac_test match_dst_ip_test \
> match_ip_tos_test match_indev_test match_ip_ttl_test
> match_mpls_label_test \
> match_mpls_tc_test match_mpls_bos_test match_mpls_ttl_test \
> - match_mpls_lse_test"
> + match_mpls_lse_test match_erspan_opts_test"
> NUM_NETIFS=2
> source tc_common.sh
> source lib.sh
> @@ -676,6 +676,56 @@ match_mpls_lse_test()
> log_test "mpls lse match ($tcflags)"
> }
>
> +match_erspan_opts_test()
> +{
> + RET=0
> +
> + check_tc_erspan_support $h2 || return 0
> +
> + # h1 erspan setup
> + tunnel_create erspan1 erspan 192.0.2.1 192.0.2.2 dev $h1 seq key 1001 \
> + tos C ttl 64 erspan_ver 1 erspan 6789 # ERSPAN Type II
> + tunnel_create erspan2 erspan 192.0.2.1 192.0.2.2 dev $h1 seq key 1002 \
> + tos C ttl 64 erspan_ver 2 erspan_dir egress erspan_hwid 63 \
> + # ERSPAN Type III
> + ip link set dev erspan1 master v$h1
> + ip link set dev erspan2 master v$h1
> + # h2 erspan setup
> + ip link add ep-ex type erspan ttl 64 external # To collect tunnel info
> + ip link set ep-ex up
> + ip link set dev ep-ex master v$h2
> + tc qdisc add dev ep-ex clsact
> +
> + # ERSPAN Type II [decap direction]
> + tc filter add dev ep-ex ingress protocol ip handle 101 flower \
> + $tcflags enc_src_ip 192.0.2.1 enc_dst_ip 192.0.2.2 \
> + enc_key_id 1001 erspan_opts 1:6789:0:0 \
> + action drop
> + # ERSPAN Type III [decap direction]
> + tc filter add dev ep-ex ingress protocol ip handle 102 flower \
> + $tcflags enc_src_ip 192.0.2.1 enc_dst_ip 192.0.2.2 \
> + enc_key_id 1002 erspan_opts 2:0:1:63 action drop
> +
> + ep1mac=$(mac_get erspan1)
> + $MZ erspan1 -c 1 -p 64 -a $ep1mac -b $h2mac -t ip -q
> + tc_check_packets "dev ep-ex ingress" 101 1
> + check_err $? "ERSPAN Type II"
> +
> + ep2mac=$(mac_get erspan2)
> + $MZ erspan2 -c 1 -p 64 -a $ep1mac -b $h2mac -t ip -q
> + tc_check_packets "dev ep-ex ingress" 102 1
> + check_err $? "ERSPAN Type III"
> +
> + # h2 erspan cleanup
> + tc qdisc del dev ep-ex clsact
> + tunnel_destroy ep-ex
> + # h1 erspan cleanup
> + tunnel_destroy erspan2 # ERSPAN Type III
> + tunnel_destroy erspan1 # ERSPAN Type II
> +
> + log_test "erspan_opts match ($tcflags)"
> +}
> +
> setup_prepare()
> {
> h1=${NETIFS[p1]}
> --
> 2.50.1
>
Reviewed-by: Xin Long <lucien.xin@gmail.com>
It would be great to also add test cases for matching VXLAN and
GENEVE options in tc flower in the future.
Thanks.
© 2016 - 2025 Red Hat, Inc.