|
85 | 85 | curl -vvv -sS --fail --connect-timeout "1" -o /dev/null http://[2606:4700:4700::1001]:8080 || true |
86 | 86 | expected-output-pattern: '(kfree_skb_reason|kfree_skb\b).*\[2606:4700:4700::1001\]:8080' |
87 | 87 |
|
| 88 | + - name: Test advanced IPv4 |
| 89 | + uses: ./.github/actions/pwru-test |
| 90 | + with: |
| 91 | + test-name: advanced-ipv4 |
| 92 | + pwru-pcap-filter: 'tcp[tcpflags] = tcp-syn' |
| 93 | + traffic-setup: | |
| 94 | + iptables -I OUTPUT 1 -m tcp --proto tcp --dst 1.0.0.2/32 --dport 8080 -j DROP |
| 95 | + curl -vvv -sS --fail --connect-timeout "1" -o /dev/null http://1.0.0.2:8080 || true |
| 96 | + expected-output-pattern: '(kfree_skb_reason|kfree_skb\b).*1.0.0.2:8080' |
| 97 | + |
| 98 | + - name: Test advanced IPv6 |
| 99 | + uses: ./.github/actions/pwru-test |
| 100 | + with: |
| 101 | + test-name: advanced-ipv6 |
| 102 | + pwru-pcap-filter: 'ip6[53] & 0x3f = 0x2' |
| 103 | + traffic-setup: | |
| 104 | + ip6tables -I OUTPUT 1 -m tcp --proto tcp --dst 2606:4700:4700::1002 --dport 8080 -j DROP |
| 105 | + curl -vvv -sS --fail --connect-timeout "1" -o /dev/null http://[2606:4700:4700::1002]:8080 || true |
| 106 | + expected-output-pattern: '(kfree_skb_reason|kfree_skb\b).*\[2606:4700:4700::1002\]:8080' |
| 107 | + |
| 108 | + - name: Test pcap filter using stack |
| 109 | + uses: ./.github/actions/pwru-test |
| 110 | + with: |
| 111 | + test-name: pcap-filter-stack |
| 112 | + pwru-pcap-filter: '(((ip[2:2] - ((ip[0]&0xf)<<2)) - ((tcp[12]&0xf0)>>2)) != 0)' |
| 113 | + traffic-setup: curl -vvv -sS --fail --connect-timeout "1" -o /dev/null http://1.1.1.1 || true |
| 114 | + expected-output-pattern: '1.1.1.1:80' |
| 115 | + |
| 116 | + - name: Test --filter-track-skb |
| 117 | + # DNAT |
| 118 | + uses: ./.github/actions/pwru-test |
| 119 | + with: |
| 120 | + test-name: filter-track-skb |
| 121 | + pwru-flags: --filter-track-skb |
| 122 | + pwru-pcap-filter: dst host 10.10.20.99 |
| 123 | + traffic-setup: | |
| 124 | + iptables -t nat -I OUTPUT 1 -d 10.10.20.99/32 -j DNAT --to-destination 10.10.14.2 |
| 125 | + curl -vvv -sS --fail --connect-timeout "1" -o /dev/null http://10.10.20.99:80 || true |
| 126 | + expected-output-pattern: '10.10.14.2:80' |
| 127 | + |
88 | 128 | - name: Fetch artifacts |
89 | 129 | if: ${{ !success() }} |
90 | 130 | uses: cilium/little-vm-helper@908ab1ff8a596a03cd5221a1f8602dc44c3f906d |
|
0 commit comments