Commit 9c5b6d4e authored by Florian Westphal's avatar Florian Westphal Committed by Steffen Klassert
Browse files

selftests: add xfrm policy insertion speed test script 



Nothing special, just test how long insertion of x policies takes.
This should ideally show linear insertion speeds.

Do not run this by default, it has little value, but it can be useful to
check for insertion speed chahnges when altering the xfrm policy db
implementation.

Signed-off-by: default avatarFlorian Westphal <fw@strlen.de>
Signed-off-by: default avatarSteffen Klassert <steffen.klassert@secunet.com>
parent 54f2f78d

tools/testing/selftests/net/Makefile

+1 −1
Original line number Diff line number Diff line
@@ -56,7 +56,7 @@ TEST_PROGS += ip_local_port_range.sh 
TEST_PROGS += rps_default_mask.sh

TEST_PROGS += big_tcp.sh

TEST_PROGS += netns-sysctl.sh

TEST_PROGS_EXTENDED := toeplitz_client.sh toeplitz.sh

TEST_PROGS_EXTENDED := toeplitz_client.sh toeplitz.sh xfrm_policy_add_speed.sh

TEST_GEN_FILES =  socket nettest

TEST_GEN_FILES += psock_fanout psock_tpacket msg_zerocopy reuseport_addr_any

TEST_GEN_FILES += tcp_mmap tcp_inq psock_snd txring_overwrite

tools/testing/selftests/net/xfrm_policy_add_speed.sh

0 → 100755
+83 −0
Original line number Diff line number Diff line 
#!/bin/bash

# SPDX-License-Identifier: GPL-2.0

#

source lib.sh



timeout=4m

ret=0

tmp=$(mktemp)

cleanup() {

	cleanup_all_ns

	rm -f "$tmp"

}



trap cleanup EXIT



maxpolicies=100000

[ "$KSFT_MACHINE_SLOW" = "yes" ] && maxpolicies=10000



do_dummies4() {

	local dir="$1"

	local max="$2"



	local policies

	local pfx

	pfx=30

	policies=0



	ip netns exec "$ns" ip xfrm policy flush



	for i in $(seq 1 100);do

		local s

		local d

		for j in $(seq 1 255);do

			s=$((i+0))

			d=$((i+100))



			for a in $(seq 1 8 255); do

				policies=$((policies+1))

				[ "$policies" -gt "$max" ] && return

				echo xfrm policy add src 10.$s.$j.0/30 dst 10.$d.$j.$a/$pfx dir $dir action block

			done

			for a in $(seq 1 8 255); do

				policies=$((policies+1))

				[ "$policies" -gt "$max" ] && return

				echo xfrm policy add src 10.$s.$j.$a/30 dst 10.$d.$j.0/$pfx dir $dir action block

			done

		done

	done

}



setup_ns ns



do_bench()

{

	local max="$1"



	start=$(date +%s%3N)

	do_dummies4 "out" "$max" > "$tmp"

	if ! timeout "$timeout" ip netns exec "$ns" ip -batch "$tmp";then

		echo "WARNING: policy insertion cancelled after $timeout"

		ret=1

	fi

	stop=$(date +%s%3N)



	result=$((stop-start))



	policies=$(wc -l < "$tmp")

	printf "Inserted %-06s policies in $result ms\n" $policies



	have=$(ip netns exec "$ns" ip xfrm policy show | grep "action block" | wc -l)

	if [ "$have" -ne "$policies" ]; then

		echo "WARNING: mismatch, have $have policies, expected $policies"

		ret=1

	fi

}



p=100

while [ $p -le "$maxpolicies" ]; do

	do_bench "$p"

	p="${p}0"

done



exit $ret