1# SPDX-License-Identifier: GPL-2.0
2
3TC_POLICE_NUM_NETIFS=2
4
5tc_police_h1_create()
6{
7	simple_if_init $h1
8}
9
10tc_police_h1_destroy()
11{
12	simple_if_fini $h1
13}
14
15tc_police_switch_create()
16{
17	simple_if_init $swp1
18	tc qdisc add dev $swp1 clsact
19}
20
21tc_police_switch_destroy()
22{
23	tc qdisc del dev $swp1 clsact
24	simple_if_fini $swp1
25}
26
27tc_police_addr()
28{
29       local num=$1; shift
30
31       printf "2001:db8:1::%x" $num
32}
33
34tc_police_rules_create()
35{
36	local count=$1; shift
37	local should_fail=$1; shift
38
39	TC_POLICE_BATCH_FILE="$(mktemp)"
40
41	for ((i = 0; i < count; ++i)); do
42		cat >> $TC_POLICE_BATCH_FILE <<-EOF
43			filter add dev $swp1 ingress \
44				prot ipv6 \
45				pref 1000 \
46				flower skip_sw dst_ip $(tc_police_addr $i) \
47				action police rate 10mbit burst 100k \
48				conform-exceed drop/ok
49		EOF
50	done
51
52	tc -b $TC_POLICE_BATCH_FILE
53	check_err_fail $should_fail $? "Rule insertion"
54}
55
56__tc_police_test()
57{
58	local count=$1; shift
59	local should_fail=$1; shift
60
61	tc_police_rules_create $count $should_fail
62
63	offload_count=$(tc -j filter show dev $swp1 ingress |
64			jq "[.[] | select(.options.in_hw == true)] | length")
65	((offload_count == count))
66	check_err_fail $should_fail $? "tc police offload count"
67}
68
69tc_police_test()
70{
71	local count=$1; shift
72	local should_fail=$1; shift
73
74	if ! tc_offload_check $TC_POLICE_NUM_NETIFS; then
75		check_err 1 "Could not test offloaded functionality"
76		return
77	fi
78
79	__tc_police_test $count $should_fail
80}
81
82tc_police_setup_prepare()
83{
84	h1=${NETIFS[p1]}
85	swp1=${NETIFS[p2]}
86
87	vrf_prepare
88
89	tc_police_h1_create
90	tc_police_switch_create
91}
92
93tc_police_cleanup()
94{
95	pre_cleanup
96
97	tc_police_switch_destroy
98	tc_police_h1_destroy
99
100	vrf_cleanup
101}
102