ffff9c9cb4
Currently, the test takes about 626 seconds to complete because of an inefficient use of the device's TCAM. Reduce the runtime to 202 seconds by inserting all the flower filters with the same preference and mask, but with a different key. In particular, this reduces the deletion of the qdisc (which triggers the deletion of all the filters) from 66 seconds to 0.2 seconds. This prevents various netlink requests from user space applications (e.g., systemd-networkd) from timing-out because RTNL is not held for too long anymore. Signed-off-by: Ido Schimmel <idosch@mellanox.com> Reviewed-by: Jiri Pirko <jiri@mellanox.com> Signed-off-by: David S. Miller <davem@davemloft.net>
101 lines
1.6 KiB
Bash
101 lines
1.6 KiB
Bash
# SPDX-License-Identifier: GPL-2.0
|
|
|
|
TC_POLICE_NUM_NETIFS=2
|
|
|
|
tc_police_h1_create()
|
|
{
|
|
simple_if_init $h1
|
|
}
|
|
|
|
tc_police_h1_destroy()
|
|
{
|
|
simple_if_fini $h1
|
|
}
|
|
|
|
tc_police_switch_create()
|
|
{
|
|
simple_if_init $swp1
|
|
tc qdisc add dev $swp1 clsact
|
|
}
|
|
|
|
tc_police_switch_destroy()
|
|
{
|
|
tc qdisc del dev $swp1 clsact
|
|
simple_if_fini $swp1
|
|
}
|
|
|
|
tc_police_addr()
|
|
{
|
|
local num=$1; shift
|
|
|
|
printf "2001:db8:1::%x" $num
|
|
}
|
|
|
|
tc_police_rules_create()
|
|
{
|
|
local count=$1; shift
|
|
local should_fail=$1; shift
|
|
|
|
TC_POLICE_BATCH_FILE="$(mktemp)"
|
|
|
|
for ((i = 0; i < count; ++i)); do
|
|
cat >> $TC_POLICE_BATCH_FILE <<-EOF
|
|
filter add dev $swp1 ingress \
|
|
prot ipv6 \
|
|
pref 1000 \
|
|
flower skip_sw dst_ip $(tc_police_addr $i) \
|
|
action police rate 10mbit burst 100k \
|
|
conform-exceed drop/ok
|
|
EOF
|
|
done
|
|
|
|
tc -b $TC_POLICE_BATCH_FILE
|
|
check_err_fail $should_fail $? "Rule insertion"
|
|
}
|
|
|
|
__tc_police_test()
|
|
{
|
|
local count=$1; shift
|
|
local should_fail=$1; shift
|
|
|
|
tc_police_rules_create $count $should_fail
|
|
|
|
offload_count=$(tc filter show dev $swp1 ingress | grep in_hw | wc -l)
|
|
((offload_count == count))
|
|
check_err_fail $should_fail $? "tc police offload count"
|
|
}
|
|
|
|
tc_police_test()
|
|
{
|
|
local count=$1; shift
|
|
local should_fail=$1; shift
|
|
|
|
if ! tc_offload_check $TC_POLICE_NUM_NETIFS; then
|
|
check_err 1 "Could not test offloaded functionality"
|
|
return
|
|
fi
|
|
|
|
__tc_police_test $count $should_fail
|
|
}
|
|
|
|
tc_police_setup_prepare()
|
|
{
|
|
h1=${NETIFS[p1]}
|
|
swp1=${NETIFS[p2]}
|
|
|
|
vrf_prepare
|
|
|
|
tc_police_h1_create
|
|
tc_police_switch_create
|
|
}
|
|
|
|
tc_police_cleanup()
|
|
{
|
|
pre_cleanup
|
|
|
|
tc_police_switch_destroy
|
|
tc_police_h1_destroy
|
|
|
|
vrf_cleanup
|
|
}
|