Uploaded image for project: 'csit'
  1. csit
  2. CSIT-753 Security ACL mac-ip bindings perf tests
  3. CSIT-778

Add mac-ip binding acl L2Bdbasemaclrn perf tests

XMLWordPrintable

    • Icon: Sub-task Sub-task
    • Resolution: Unresolved
    • Icon: High High
    • 1710, CSIT 1710
    • None
    • None

      HLD of tests:

       

      config aces:
        - only permit, only inbound
       
       1. macip_acl1
       
          macip_acl_add ipv4 permit ip 30.30.30.1/32 mac 00:01:02:03:04:05 mask ff:ff:ff:ff:ff:ff, ipv4 permit ip 10.0.0.0/24 mac tg_if1_mac mask ff:ff:ff:ff:ff:ff, ipv4 permit ip 20.0.0.0/24 mac tg_if2_mac mask ff:ff:ff:ff:ff:ff
        
       2. macip_acl10
         
          macip_acl_add ipv4 permit ip 30.30.30.1/32 mac 00:01:02:03:04:05 mask 00:00:00:00:00:00, ip 30.30.30.2/32 mac 00:01:02:03:04:06 mask 00:00:00:00:00:00, ..., ip 30.30.30.10/32 mac 00:01:02:03:04:0e mask 00:00:00:00:00:00, ipv4 permit ip 10.0.0.0/24 mac tg_if1_mac mask ff:ff:ff:ff:ff:ff, ipv4 permit ip 20.0.0.0/24 mac tg_if2_mac mask ff:ff:ff:ff:ff:ff
       
       3. macip_acl50
         
          macip_acl_add ipv4 permit ip 30.30.30.1/32 mac 00:01:02:03:04:05 mask 00:00:00:00:00:00, ip 30.30.30.2/32 mac 00:01:02:03:04:06 mask 00:00:00:00:00:00, ..., ip 30.30.30.50/32 mac 00:01:02:03:36:0e mask 00:00:00:00:00:00, ipv4 permit ip 10.0.0.0/24 mac tg_if1_mac mask ff:ff:ff:ff:ff:ff, ipv4 permit ip 20.0.0.0/24 mac tg_if2_mac mask ff:ff:ff:ff:ff:ff
       
       
      config flows:
        - use only src ips to generate flows
       
       1. 100
       
          use 100 src ips: 10.0.0.2 - 10.0.0.101, 20.0.0.2 - 20.0.0.101
          => macip_acl_add ipv4 ... ipv4 permit ip 10.0.0.0/24 mac tg_if1_mac mask ff:ff:ff:ff:ff:ff, ipv4 permit ip 20.0.0.0/24 mac tg_if2_mac mask ff:ff:ff:ff:ff:ff
       
       2. 10k
       
          use 10 000 src ips: 10.0.0.2 - 10.0.39.17, 20.0.0.2 - 20.0.39.17
          => macip_acl_add ipv4 ... ipv4 permit ip 10.0.0.0/18 mac tg_if1_mac mask ff:ff:ff:ff:ff:ff, ipv4 permit ip 20.0.0.0/18 mac tg_if2_mac mask ff:ff:ff:ff:ff:ff
       
       3. 100k
       
          use 100 000 src ips: 10.0.0.2 - 10.1.134.161, 20.0.0.2 - 20.1.134.161
          => macip_acl_add ipv4 ... ipv4 permit ip 10.0.0.0/15 mac tg_if1_mac mask ff:ff:ff:ff:ff:ff, ipv4 permit ip 20.0.0.0/15 mac tg_if2_mac mask ff:ff:ff:ff:ff:ff
       
      l2bd only
      1t1c, 2t2c and 4t4c variants with 64B packets

            jgelety Jan Gelety
            jgelety Jan Gelety
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: