selftests: netfilter: nft_tproxy.sh: add tcp tests

Browse source

The TPROXY functionality is widely used, however, there are only mptcp
selftests covering this feature.

The selftests represent the most common scenarios and can also be used
as selfdocumentation of the feature.

UDP and TCP testcases are split in different files because of the
different nature of the protocols, specially due to the challenges that
present to reliable test UDP due to the connectionless nature of the
protocol. UDP only covers the scenarios involving the prerouting hook.

The UDP tests are signfinicantly slower than the TCP ones, hence they
use a larger timeout, it takes 20 seconds to run the full UDP suite
on a 48 vCPU Intel(R) Xeon(R) CPU @2.60GHz.

Signed-off-by: Antonio Ojea <aojea@google.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Antonio Ojea 2024-09-12 06:17:54 +00:00 • committed by Pablo Neira Ayuso

parent a57856c0bb

commit 7e37e0eacd

4 changed files with 623 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

2

tools/testing/selftests/net/netfilter/Makefile

View file

1

tools/testing/selftests/net/netfilter/config

View file

358

tools/testing/selftests/net/netfilter/nft_tproxy_tcp.sh Executable file

View file

262

tools/testing/selftests/net/netfilter/nft_tproxy_udp.sh Executable file

View file