71 lines
1.8 KiB
C
71 lines
1.8 KiB
C
|
// SPDX-License-Identifier: GPL-2.0
|
||
|
|
#include <test_progs.h>
|
||
|
|
#include "udp_limit.skel.h"
|
||
|
|
|
||
|
|
#include <sys/types.h>
|
||
|
|
#include <sys/socket.h>
|
||
|
|
|
||
|
|
void test_udp_limit(void)
|
||
|
|
{
|
||
|
|
struct udp_limit *skel;
|
||
|
|
int fd1 = -1, fd2 = -1;
|
||
|
|
int cgroup_fd;
|
||
|
|
|
||
|
|
cgroup_fd = test__join_cgroup("/udp_limit");
|
||
|
|
if (!ASSERT_GE(cgroup_fd, 0, "cg-join"))
|
||
|
|
return;
|
||
|
|
|
||
|
|
skel = udp_limit__open_and_load();
|
||
|
|
if (!ASSERT_OK_PTR(skel, "skel-load"))
|
||
|
|
goto close_cgroup_fd;
|
||
|
|
|
||
|
|
skel->links.sock = bpf_program__attach_cgroup(skel->progs.sock, cgroup_fd);
|
||
|
|
if (!ASSERT_OK_PTR(skel->links.sock, "cg_attach_sock"))
|
||
|
|
goto close_skeleton;
|
||
|
|
skel->links.sock_release = bpf_program__attach_cgroup(skel->progs.sock_release, cgroup_fd);
|
||
|
|
if (!ASSERT_OK_PTR(skel->links.sock_release, "cg_attach_sock_release"))
|
||
|
|
goto close_skeleton;
|
||
|
|
|
||
|
|
/* BPF program enforces a single UDP socket per cgroup,
|
||
|
|
* verify that.
|
||
|
|
*/
|
||
|
|
fd1 = socket(AF_INET, SOCK_DGRAM, 0);
|
||
|
|
if (!ASSERT_GE(fd1, 0, "socket(fd1)"))
|
||
|
|
goto close_skeleton;
|
||
|
|
|
||
|
|
fd2 = socket(AF_INET, SOCK_DGRAM, 0);
|
||
|
|
if (!ASSERT_LT(fd2, 0, "socket(fd2)"))
|
||
|
|
goto close_skeleton;
|
||
|
|
|
||
|
|
/* We can reopen again after close. */
|
||
|
|
close(fd1);
|
||
|
|
fd1 = -1;
|
||
|
|
|
||
|
|
fd1 = socket(AF_INET, SOCK_DGRAM, 0);
|
||
|
|
if (!ASSERT_GE(fd1, 0, "socket(fd1-again)"))
|
||
|
|
goto close_skeleton;
|
||
|
|
|
||
|
|
/* Make sure the program was invoked the expected
|
||
|
|
* number of times:
|
||
|
|
* - open fd1 - BPF_CGROUP_INET_SOCK_CREATE
|
||
|
|
* - attempt to openfd2 - BPF_CGROUP_INET_SOCK_CREATE
|
||
|
|
* - close fd1 - BPF_CGROUP_INET_SOCK_RELEASE
|
||
|
|
* - open fd1 again - BPF_CGROUP_INET_SOCK_CREATE
|
||
|
|
*/
|
||
|
|
if (!ASSERT_EQ(skel->bss->invocations, 4, "bss-invocations"))
|
||
|
|
goto close_skeleton;
|
||
|
|
|
||
|
|
/* We should still have a single socket in use */
|
||
|
|
if (!ASSERT_EQ(skel->bss->in_use, 1, "bss-in_use"))
|
||
|
|
goto close_skeleton;
|
||
|
|
|
||
|
|
close_skeleton:
|
||
|
|
if (fd1 >= 0)
|
||
|
|
close(fd1);
|
||
|
|
if (fd2 >= 0)
|
||
|
|
close(fd2);
|
||
|
|
udp_limit__destroy(skel);
|
||
|
|
close_cgroup_fd:
|
||
|
|
close(cgroup_fd);
|
||
|
|
}
|