From: Todd Freed <toddfreed@meta.com>
To: <netdev@vger.kernel.org>, <toddfreed@meta.com>
Cc: "David S. Miller" <davem@davemloft.net>,
"Andrew Lunn" <andrew+netdev@lunn.ch>,
"Björn Töpel" <bjorn@kernel.org>,
bpf@vger.kernel.org, "Daniel Borkmann" <daniel@iogearbox.net>,
"Daniel Zahka" <daniel.zahka@gmail.com>,
"Donald Hunter" <donald.hunter@gmail.com>,
"Eric Dumazet" <edumazet@kernel.org>,
"Jakub Kicinski" <kuba@kernel.org>,
"Jamal Hadi Salim" <jhs@mojatatu.com>,
"Jiri Pirko" <jiri@resnulli.us>,
"John Fastabend" <john.fastabend@gmail.com>,
linux-doc@vger.kernel.org, linux-kernel@vger.kernel.org,
linux-kselftest@vger.kernel.org, linux-rdma@vger.kernel.org,
"Martin KaFai Lau" <martin.lau@linux.dev>,
"Paolo Abeni" <pabeni@redhat.com>,
"Saeed Mahameed" <saeedm@nvidia.com>,
"Simon Horman" <horms@kernel.org>,
"Tariq Toukan" <tariqt@nvidia.com>,
"Wei Wang" <weiwan@google.com>,
"Willem de Bruijn" <willemdebruijn.kernel@gmail.com>
Subject: [PATCH net-next v1 14/15] selftests: tc-testing: add tests for the psp action
Date: Tue, 10 Nov 2026 16:55:32 -0800 [thread overview]
Message-ID: <20261111005533.6436-15-toddfreed@meta.com> (raw)
In-Reply-To: <20261111005533.6436-1-toddfreed@meta.com>
Add / replace / delete / flush psp decap actions, check that encap
without an association, associations which don't exist, and decap with
an association are rejected, and add flower filters matching on
psp_spi, psp_ver and psp_dev, out of range psp_ver and psp_dev
rejected.
Creating associations takes the PSP netlink family and a PSP device,
the drv-net psp.py test covers actions using them.
The tests need a tc with the psp action and the flower psp_* keys; they
skip without it (dependsOn).
Signed-off-by: Todd Freed <toddfreed@meta.com>
---
tools/testing/selftests/tc-testing/config | 2 +
.../tc-testing/tc-tests/actions/psp.json | 459 ++++++++++++++++++
tools/testing/selftests/tc-testing/tdc.sh | 1 +
3 files changed, 462 insertions(+)
create mode 100644 tools/testing/selftests/tc-testing/tc-tests/actions/psp.json
diff --git a/tools/testing/selftests/tc-testing/config b/tools/testing/selftests/tc-testing/config
index 0e5618be0335..7828161cc3c8 100644
--- a/tools/testing/selftests/tc-testing/config
+++ b/tools/testing/selftests/tc-testing/config
@@ -101,6 +101,8 @@ CONFIG_NET_ACT_TUNNEL_KEY=m
CONFIG_NET_ACT_CT=m
CONFIG_NET_ACT_MPLS=m
CONFIG_NET_ACT_GATE=m
+CONFIG_INET_PSP=y
+CONFIG_NET_ACT_PSP=m
CONFIG_NET_IFE_SKBMARK=m
CONFIG_NET_IFE_SKBPRIO=m
CONFIG_NET_IFE_SKBTCINDEX=m
diff --git a/tools/testing/selftests/tc-testing/tc-tests/actions/psp.json b/tools/testing/selftests/tc-testing/tc-tests/actions/psp.json
new file mode 100644
index 000000000000..990e8bd1ce9a
--- /dev/null
+++ b/tools/testing/selftests/tc-testing/tc-tests/actions/psp.json
@@ -0,0 +1,459 @@
+[
+ {
+ "id": "8357",
+ "name": "Add psp decap action",
+ "category": [
+ "actions",
+ "psp"
+ ],
+ "dependsOn": "$TC actions add action psp help 2>&1 | grep -q decap",
+ "plugins": {
+ "requires": "nsPlugin"
+ },
+ "setup": [
+ [
+ "$TC actions flush action psp",
+ 0,
+ 1,
+ 255
+ ]
+ ],
+ "cmdUnderTest": "$TC actions add action psp decap index 1",
+ "expExitCode": "0",
+ "verifyCmd": "$TC actions get action psp index 1",
+ "matchPattern": "action order [0-9]+: psp decap pipe.*index 1 ref",
+ "matchCount": "1",
+ "teardown": [
+ "$TC actions flush action psp"
+ ]
+ },
+ {
+ "id": "7676",
+ "name": "Add psp decap action with drop control",
+ "category": [
+ "actions",
+ "psp"
+ ],
+ "dependsOn": "$TC actions add action psp help 2>&1 | grep -q decap",
+ "plugins": {
+ "requires": "nsPlugin"
+ },
+ "setup": [
+ [
+ "$TC actions flush action psp",
+ 0,
+ 1,
+ 255
+ ]
+ ],
+ "cmdUnderTest": "$TC actions add action psp decap drop index 2",
+ "expExitCode": "0",
+ "verifyCmd": "$TC actions get action psp index 2",
+ "matchPattern": "action order [0-9]+: psp decap drop.*index 2 ref",
+ "matchCount": "1",
+ "teardown": [
+ "$TC actions flush action psp"
+ ]
+ },
+ {
+ "id": "9a26",
+ "name": "Add psp decap action without index",
+ "category": [
+ "actions",
+ "psp"
+ ],
+ "dependsOn": "$TC actions add action psp help 2>&1 | grep -q decap",
+ "plugins": {
+ "requires": "nsPlugin"
+ },
+ "setup": [
+ [
+ "$TC actions flush action psp",
+ 0,
+ 1,
+ 255
+ ]
+ ],
+ "cmdUnderTest": "$TC actions add action psp decap",
+ "expExitCode": "0",
+ "verifyCmd": "$TC actions list action psp",
+ "matchPattern": "action order [0-9]+: psp decap pipe",
+ "matchCount": "1",
+ "teardown": [
+ "$TC actions flush action psp"
+ ]
+ },
+ {
+ "id": "156e",
+ "name": "Replace psp decap action",
+ "category": [
+ "actions",
+ "psp"
+ ],
+ "dependsOn": "$TC actions add action psp help 2>&1 | grep -q decap",
+ "plugins": {
+ "requires": "nsPlugin"
+ },
+ "setup": [
+ [
+ "$TC actions flush action psp",
+ 0,
+ 1,
+ 255
+ ],
+ "$TC actions add action psp decap index 3"
+ ],
+ "cmdUnderTest": "$TC actions replace action psp decap pass index 3",
+ "expExitCode": "0",
+ "verifyCmd": "$TC actions get action psp index 3",
+ "matchPattern": "action order [0-9]+: psp decap pass.*index 3 ref",
+ "matchCount": "1",
+ "teardown": [
+ "$TC actions flush action psp"
+ ]
+ },
+ {
+ "id": "006b",
+ "name": "Add psp action with an existing index",
+ "category": [
+ "actions",
+ "psp"
+ ],
+ "dependsOn": "$TC actions add action psp help 2>&1 | grep -q decap",
+ "plugins": {
+ "requires": "nsPlugin"
+ },
+ "setup": [
+ [
+ "$TC actions flush action psp",
+ 0,
+ 1,
+ 255
+ ],
+ "$TC actions add action psp decap index 4"
+ ],
+ "cmdUnderTest": "$TC actions add action psp decap pass index 4",
+ "expExitCode": "255",
+ "verifyCmd": "$TC actions get action psp index 4",
+ "matchPattern": "action order [0-9]+: psp decap pipe.*index 4 ref",
+ "matchCount": "1",
+ "teardown": [
+ "$TC actions flush action psp"
+ ]
+ },
+ {
+ "id": "3f41",
+ "name": "Delete psp action",
+ "category": [
+ "actions",
+ "psp"
+ ],
+ "dependsOn": "$TC actions add action psp help 2>&1 | grep -q decap",
+ "plugins": {
+ "requires": "nsPlugin"
+ },
+ "setup": [
+ [
+ "$TC actions flush action psp",
+ 0,
+ 1,
+ 255
+ ],
+ "$TC actions add action psp decap index 5"
+ ],
+ "cmdUnderTest": "$TC actions del action psp index 5",
+ "expExitCode": "0",
+ "verifyCmd": "$TC actions list action psp",
+ "matchPattern": "action order [0-9]+: psp",
+ "matchCount": "0",
+ "teardown": [
+ "$TC actions flush action psp"
+ ]
+ },
+ {
+ "id": "2b21",
+ "name": "Flush psp actions",
+ "category": [
+ "actions",
+ "psp"
+ ],
+ "dependsOn": "$TC actions add action psp help 2>&1 | grep -q decap",
+ "plugins": {
+ "requires": "nsPlugin"
+ },
+ "setup": [
+ [
+ "$TC actions flush action psp",
+ 0,
+ 1,
+ 255
+ ],
+ "$TC actions add action psp decap index 6",
+ "$TC actions add action psp decap drop index 7"
+ ],
+ "cmdUnderTest": "$TC actions flush action psp",
+ "expExitCode": "0",
+ "verifyCmd": "$TC actions list action psp",
+ "matchPattern": "action order [0-9]+: psp",
+ "matchCount": "0",
+ "teardown": [
+ "$TC actions flush action psp"
+ ]
+ },
+ {
+ "id": "2d50",
+ "name": "Add psp action without encap or decap",
+ "category": [
+ "actions",
+ "psp"
+ ],
+ "dependsOn": "$TC actions add action psp help 2>&1 | grep -q decap",
+ "plugins": {
+ "requires": "nsPlugin"
+ },
+ "setup": [
+ [
+ "$TC actions flush action psp",
+ 0,
+ 1,
+ 255
+ ]
+ ],
+ "cmdUnderTest": "$TC actions add action psp index 12",
+ "expExitCode": "255",
+ "verifyCmd": "$TC actions list action psp",
+ "matchPattern": "action order [0-9]+: psp",
+ "matchCount": "0",
+ "teardown": [
+ "$TC actions flush action psp"
+ ]
+ },
+ {
+ "id": "cab5",
+ "name": "Add psp encap action without assoc, with index",
+ "category": [
+ "actions",
+ "psp"
+ ],
+ "dependsOn": "$TC actions add action psp help 2>&1 | grep -q decap",
+ "plugins": {
+ "requires": "nsPlugin"
+ },
+ "setup": [
+ [
+ "$TC actions flush action psp",
+ 0,
+ 1,
+ 255
+ ]
+ ],
+ "cmdUnderTest": "$TC actions add action psp encap index 8",
+ "expExitCode": "255",
+ "verifyCmd": "$TC actions list action psp",
+ "matchPattern": "action order [0-9]+: psp",
+ "matchCount": "0",
+ "teardown": [
+ "$TC actions flush action psp"
+ ]
+ },
+ {
+ "id": "3203",
+ "name": "Add psp encap action with an unknown assoc",
+ "category": [
+ "actions",
+ "psp"
+ ],
+ "dependsOn": "$TC actions add action psp help 2>&1 | grep -q decap",
+ "plugins": {
+ "requires": "nsPlugin"
+ },
+ "setup": [
+ [
+ "$TC actions flush action psp",
+ 0,
+ 1,
+ 255
+ ]
+ ],
+ "cmdUnderTest": "$TC actions add action psp encap assoc 4294967295 index 9",
+ "expExitCode": "255",
+ "verifyCmd": "$TC actions list action psp",
+ "matchPattern": "action order [0-9]+: psp",
+ "matchCount": "0",
+ "teardown": [
+ "$TC actions flush action psp"
+ ]
+ },
+ {
+ "id": "0c17",
+ "name": "Reject psp decap action with an assoc",
+ "category": [
+ "actions",
+ "psp"
+ ],
+ "dependsOn": "$TC actions add action psp help 2>&1 | grep -q decap",
+ "plugins": {
+ "requires": "nsPlugin"
+ },
+ "setup": [
+ [
+ "$TC actions flush action psp",
+ 0,
+ 1,
+ 255
+ ]
+ ],
+ "cmdUnderTest": "$TC actions add action psp decap assoc 1 index 10",
+ "expExitCode": "255",
+ "verifyCmd": "$TC actions list action psp",
+ "matchPattern": "action order [0-9]+: psp",
+ "matchCount": "0",
+ "teardown": [
+ "$TC actions flush action psp"
+ ]
+ },
+ {
+ "id": "a744",
+ "name": "Add flower psp_spi filter with psp decap",
+ "category": [
+ "actions",
+ "psp",
+ "filter"
+ ],
+ "dependsOn": "$TC filter add flower help 2>&1 | grep -q psp_spi",
+ "plugins": {
+ "requires": "nsPlugin"
+ },
+ "setup": [
+ "$TC qdisc add dev $DEV1 ingress"
+ ],
+ "cmdUnderTest": "$TC filter add dev $DEV1 ingress protocol ip pref 1 flower psp_spi 0x1234 action psp decap",
+ "expExitCode": "0",
+ "verifyCmd": "$TC filter show dev $DEV1 ingress",
+ "matchPattern": "psp_spi 0x1234.*psp decap pipe",
+ "matchCount": "1",
+ "teardown": [
+ "$TC qdisc del dev $DEV1 ingress"
+ ]
+ },
+ {
+ "id": "be4e",
+ "name": "Add flower psp_spi filter with mask",
+ "category": [
+ "actions",
+ "psp",
+ "filter"
+ ],
+ "dependsOn": "$TC filter add flower help 2>&1 | grep -q psp_spi",
+ "plugins": {
+ "requires": "nsPlugin"
+ },
+ "setup": [
+ "$TC qdisc add dev $DEV1 ingress"
+ ],
+ "cmdUnderTest": "$TC filter add dev $DEV1 ingress protocol ipv6 pref 1 flower psp_spi 0x80001234/0x8000ffff action drop",
+ "expExitCode": "0",
+ "verifyCmd": "$TC filter show dev $DEV1 ingress",
+ "matchPattern": "psp_spi 0x80001234/0x8000ffff",
+ "matchCount": "1",
+ "teardown": [
+ "$TC qdisc del dev $DEV1 ingress"
+ ]
+ },
+ {
+ "id": "4e1f",
+ "name": "Add flower psp_spi, psp_ver and psp_dev filter with psp decap",
+ "category": [
+ "actions",
+ "psp",
+ "filter"
+ ],
+ "dependsOn": "$TC filter add flower help 2>&1 | grep -q psp_spi",
+ "plugins": {
+ "requires": "nsPlugin"
+ },
+ "setup": [
+ "$TC qdisc add dev $DEV1 ingress"
+ ],
+ "cmdUnderTest": "$TC filter add dev $DEV1 ingress protocol ip pref 1 flower psp_spi 0x1234 psp_ver 1 psp_dev 7 action psp decap",
+ "expExitCode": "0",
+ "verifyCmd": "$TC filter show dev $DEV1 ingress",
+ "matchPattern": "psp_spi 0x1234.*psp_ver 1.*psp_dev 7.*psp decap pipe",
+ "matchCount": "1",
+ "teardown": [
+ "$TC qdisc del dev $DEV1 ingress"
+ ]
+ },
+ {
+ "id": "7c3a",
+ "name": "Add flower psp_ver 0 filter",
+ "category": [
+ "actions",
+ "psp",
+ "filter"
+ ],
+ "dependsOn": "$TC filter add flower help 2>&1 | grep -q psp_spi",
+ "plugins": {
+ "requires": "nsPlugin"
+ },
+ "setup": [
+ "$TC qdisc add dev $DEV1 ingress"
+ ],
+ "cmdUnderTest": "$TC filter add dev $DEV1 ingress protocol ipv6 pref 1 flower psp_ver 0 action drop",
+ "expExitCode": "0",
+ "verifyCmd": "$TC filter show dev $DEV1 ingress",
+ "matchPattern": "psp_ver 0",
+ "matchCount": "1",
+ "teardown": [
+ "$TC qdisc del dev $DEV1 ingress"
+ ]
+ },
+ {
+ "id": "b58d",
+ "name": "Add flower psp_ver filter with an invalid version",
+ "category": [
+ "actions",
+ "psp",
+ "filter"
+ ],
+ "dependsOn": "$TC filter add flower help 2>&1 | grep -q psp_spi",
+ "plugins": {
+ "requires": "nsPlugin"
+ },
+ "setup": [
+ "$TC qdisc add dev $DEV1 ingress"
+ ],
+ "cmdUnderTest": "$TC filter add dev $DEV1 ingress protocol ip pref 1 flower psp_ver 16 action drop",
+ "expExitCode": "2",
+ "verifyCmd": "$TC filter show dev $DEV1 ingress",
+ "matchPattern": "psp_ver",
+ "matchCount": "0",
+ "teardown": [
+ "$TC qdisc del dev $DEV1 ingress"
+ ]
+ },
+ {
+ "id": "2f96",
+ "name": "Add flower psp_dev filter with an invalid device",
+ "category": [
+ "actions",
+ "psp",
+ "filter"
+ ],
+ "dependsOn": "$TC filter add flower help 2>&1 | grep -q psp_spi",
+ "plugins": {
+ "requires": "nsPlugin"
+ },
+ "setup": [
+ "$TC qdisc add dev $DEV1 ingress"
+ ],
+ "cmdUnderTest": "$TC filter add dev $DEV1 ingress protocol ip pref 1 flower psp_dev 65536 action drop",
+ "expExitCode": "2",
+ "verifyCmd": "$TC filter show dev $DEV1 ingress",
+ "matchPattern": "psp_dev",
+ "matchCount": "0",
+ "teardown": [
+ "$TC qdisc del dev $DEV1 ingress"
+ ]
+ }
+]
diff --git a/tools/testing/selftests/tc-testing/tdc.sh b/tools/testing/selftests/tc-testing/tdc.sh
index 25cdc256287d..433af92364ac 100755
--- a/tools/testing/selftests/tc-testing/tdc.sh
+++ b/tools/testing/selftests/tc-testing/tdc.sh
@@ -24,6 +24,7 @@ try_modprobe act_mpls
try_modprobe act_nat
try_modprobe act_pedit
try_modprobe act_police
+try_modprobe act_psp
try_modprobe act_sample
try_modprobe act_simple
try_modprobe act_skbedit
--
2.53.0-Meta
next prev parent reply other threads:[~2026-11-11 0:56 UTC|newest]
Thread overview: 16+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-11-11 0:55 [PATCH net-next v1 00/15] psp: introduce socket-less associations Todd Freed
2026-11-11 0:55 ` [PATCH net-next v1 01/15] psp: get netns from net_device instead of sock Todd Freed
2026-11-11 0:55 ` [PATCH net-next v1 02/15] psp: take the psp nexthdr from the packet on encap Todd Freed
2026-11-11 0:55 ` [PATCH net-next v1 03/15] psp: declare psp_assoc_set_tx() in psp.h Todd Freed
2026-11-11 0:55 ` [PATCH net-next v1 04/15] psp: add support for socket-less psp associations Todd Freed
2026-11-11 0:55 ` [PATCH net-next v1 05/15] net: add METADATA_PSP dst to carry a psp association on an skb Todd Freed
2026-11-11 0:55 ` [PATCH net-next v1 06/15] net/sched: act_mirred: don't send decrypted skbs from egress to ingress Todd Freed
2026-11-11 0:55 ` [PATCH net-next v1 07/15] bpf: don't redirect " Todd Freed
2026-11-11 0:55 ` [PATCH net-next v1 08/15] psp: only give time-wait sockets of psp connections a validator Todd Freed
2026-11-11 0:55 ` [PATCH net-next v1 09/15] net/sched: add act_psp for psp transport mode Todd Freed
2026-11-11 0:55 ` [PATCH net-next v1 10/15] net/sched: flower: add psp_spi, psp_ver, and psp_dev matches Todd Freed
2026-11-11 0:55 ` [PATCH net-next v1 11/15] selftests: drv-net: psp: test socket-less associations and the tc psp action Todd Freed
2026-11-11 0:55 ` [PATCH net-next v1 12/15] selftests: drv-net: psp: test that software encap on ingress drops Todd Freed
2026-11-11 0:55 ` [PATCH net-next v1 13/15] selftests: tc-testing: run dependsOn probes outside the test namespace Todd Freed
2026-11-11 0:55 ` Todd Freed [this message]
2026-11-11 0:55 ` [PATCH net-next v1 15/15] Documentation: networking: psp: document socket-less associations Todd Freed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20261111005533.6436-15-toddfreed@meta.com \
--to=toddfreed@meta.com \
--cc=andrew+netdev@lunn.ch \
--cc=bjorn@kernel.org \
--cc=bpf@vger.kernel.org \
--cc=daniel.zahka@gmail.com \
--cc=daniel@iogearbox.net \
--cc=davem@davemloft.net \
--cc=donald.hunter@gmail.com \
--cc=edumazet@kernel.org \
--cc=horms@kernel.org \
--cc=jhs@mojatatu.com \
--cc=jiri@resnulli.us \
--cc=john.fastabend@gmail.com \
--cc=kuba@kernel.org \
--cc=linux-doc@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-kselftest@vger.kernel.org \
--cc=linux-rdma@vger.kernel.org \
--cc=martin.lau@linux.dev \
--cc=netdev@vger.kernel.org \
--cc=pabeni@redhat.com \
--cc=saeedm@nvidia.com \
--cc=tariqt@nvidia.com \
--cc=weiwan@google.com \
--cc=willemdebruijn.kernel@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®