diff options
| author |   Florian Westphal <fw@strlen.de> | 2019-05-21 13:24:34 +0200 |
|---|---|---|
| committer |   Pablo Neira Ayuso <pablo@netfilter.org> | 2019-05-22 10:56:11 +0200 |
| commit | 2de03b45236f3af1800755614fd434d347adf046 (patch) | |
| tree | af23bcda60b6d577fc5c568e532e3884a88a808c /tools/testing/selftests/netfilter/Makefile | |
| parent | netfilter: nft_flow_offload: IPCB is only valid for ipv4 family (diff) | |
| download | wireguard-linux-2de03b45236f3af1800755614fd434d347adf046.tar.xz wireguard-linux-2de03b45236f3af1800755614fd434d347adf046.zip | |
selftests: netfilter: add flowtable test script
Exercises 3 cases:
1. no pmtu discovery (need to frag)
2. no PMTUd + NAT (don't flag packets as invalid from conntrack)
3. PMTU + NAT (need to send icmp error)
The first two cases make sure we handle fragments correctly, i.e.
pass them to classic forwarding path.
Third case checks we offload everything (in the test case,
PMTUd will kick in so all packets should be within link mtu).
Nftables rules will filter packets that are supposed to be
handled by the fast-path.
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tools/testing/selftests/netfilter/Makefile')
| -rw-r--r-- | tools/testing/selftests/netfilter/Makefile | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/tools/testing/selftests/netfilter/Makefile b/tools/testing/selftests/netfilter/Makefile index 3e6d1bcc2894..4144984ebee5 100644 --- a/tools/testing/selftests/netfilter/Makefile +++ b/tools/testing/selftests/netfilter/Makefile @@ -2,6 +2,6 @@ # Makefile for netfilter selftests TEST_PROGS := nft_trans_stress.sh nft_nat.sh bridge_brouter.sh \ - conntrack_icmp_related.sh + conntrack_icmp_related.sh nft_flowtable.sh include ../lib.mk |