|
 |
d1b728 |
From ec4a91ac53e4dba210daa9bb3af9e09532c86b06 Mon Sep 17 00:00:00 2001
|
|
|
d1b728 |
From: Phil Sutter <phil@nwl.cc>
|
|
|
d1b728 |
Date: Mon, 9 Aug 2021 18:48:58 +0200
|
|
|
d1b728 |
Subject: [PATCH] extensions: hashlimit: Fix tests with HZ=100
|
|
|
d1b728 |
|
|
|
d1b728 |
With the kernel ticking at 100Hz, a limit of 1/day with burst 5 does not
|
|
|
d1b728 |
overflow in kernel, making the test unstable depending on kernel config.
|
|
|
d1b728 |
Change it to not overflow with 1000Hz either by increasing the burst
|
|
|
d1b728 |
value by a factor of 100.
|
|
|
d1b728 |
|
|
|
d1b728 |
Fixes: fcf9f6f25db11 ("extensions: libxt_hashlimit: add unit test")
|
|
|
d1b728 |
Signed-off-by: Phil Sutter <phil@nwl.cc>
|
|
|
d1b728 |
(cherry picked from commit bef9dc575625a98a5e6ed8ca37e49031cdba5937)
|
|
|
d1b728 |
---
|
|
|
d1b728 |
extensions/libxt_hashlimit.t | 6 ++----
|
|
|
d1b728 |
1 file changed, 2 insertions(+), 4 deletions(-)
|
|
|
d1b728 |
|
|
|
d1b728 |
diff --git a/extensions/libxt_hashlimit.t b/extensions/libxt_hashlimit.t
|
|
|
d1b728 |
index ccd0d1e6a2a1a..8369933786f68 100644
|
|
|
d1b728 |
--- a/extensions/libxt_hashlimit.t
|
|
|
d1b728 |
+++ b/extensions/libxt_hashlimit.t
|
|
|
d1b728 |
@@ -3,14 +3,12 @@
|
|
|
d1b728 |
-m hashlimit --hashlimit-above 1000000/sec --hashlimit-burst 5 --hashlimit-name mini1;=;OK
|
|
|
d1b728 |
-m hashlimit --hashlimit-above 1/min --hashlimit-burst 5 --hashlimit-name mini1;=;OK
|
|
|
d1b728 |
-m hashlimit --hashlimit-above 1/hour --hashlimit-burst 5 --hashlimit-name mini1;=;OK
|
|
|
d1b728 |
-# kernel says "xt_hashlimit: overflow, try lower: 864000000/5"
|
|
|
d1b728 |
--m hashlimit --hashlimit-above 1/day --hashlimit-burst 5 --hashlimit-name mini1;;FAIL
|
|
|
d1b728 |
+-m hashlimit --hashlimit-above 1/day --hashlimit-burst 500 --hashlimit-name mini1;=;OK
|
|
|
d1b728 |
-m hashlimit --hashlimit-upto 1/sec --hashlimit-burst 5 --hashlimit-name mini1;=;OK
|
|
|
d1b728 |
-m hashlimit --hashlimit-upto 1000000/sec --hashlimit-burst 5 --hashlimit-name mini1;=;OK
|
|
|
d1b728 |
-m hashlimit --hashlimit-upto 1/min --hashlimit-burst 5 --hashlimit-name mini1;=;OK
|
|
|
d1b728 |
-m hashlimit --hashlimit-upto 1/hour --hashlimit-burst 5 --hashlimit-name mini1;=;OK
|
|
|
d1b728 |
-# kernel says "xt_hashlimit: overflow, try lower: 864000000/5"
|
|
|
d1b728 |
--m hashlimit --hashlimit-upto 1/day --hashlimit-burst 5 --hashlimit-name mini1;;FAIL
|
|
|
d1b728 |
+-m hashlimit --hashlimit-upto 1/day --hashlimit-burst 500 --hashlimit-name mini1;=;OK
|
|
|
d1b728 |
-m hashlimit --hashlimit-upto 1/sec --hashlimit-burst 1 --hashlimit-name mini1 --hashlimit-htable-expire 2000;=;OK
|
|
|
d1b728 |
-m hashlimit --hashlimit-upto 1/sec --hashlimit-burst 1 --hashlimit-mode srcip --hashlimit-name mini1 --hashlimit-htable-expire 2000;=;OK
|
|
|
d1b728 |
-m hashlimit --hashlimit-upto 1/sec --hashlimit-burst 1 --hashlimit-mode dstip --hashlimit-name mini1 --hashlimit-htable-expire 2000;=;OK
|
|
|
d1b728 |
--
|
|
|
d1b728 |
2.33.0
|
|
|
d1b728 |
|