[PATCH v1 net-next 2/4] selftests: netfilter: Set gc_thresh[123] for gw netns in nft_nat_zones.sh.
flat view
COOLING5d
SUPERSEDED
From: Kuniyuki Iwashima <kuniyu@google.com>
Date: 2026-10-12 19:45:35
Subsystem:
kernel selftest framework, netfilter, networking [general], the rest · Maintainers:
Shuah Khan, Shuah Khan, Pablo Neira Ayuso, Florian Westphal, "David S. Miller", Eric Dumazet, Jakub Kicinski, Paolo Abeni, Linus Torvalds
Revision v1 of 2 in this series.
Revisions (2)
- v1 current
- v2 [diff vs current]
Since commit cda2962b6e2b ("neighbour: Namespacify neigh_tables."),
net.ipv[46].neigh.default.gc_thresh[123] are per-netns attributes.
Let's update nft_nat_zones.sh.
Note that the number of neighbour entries does not even reach the
default gc_thresh1 (128) with the default maxclients=100, and the
raised thresholds are only needed for gw netns when maxclients is
manually increased (e.g., 2000 as mentioned in the comment).
Signed-off-by: Kuniyuki Iwashima <kuniyu@google.com>
---
Cc: Pablo Neira Ayuso <pablo@netfilter.org>
Cc: Florian Westphal <fw@strlen.de>
Cc: Phil Sutter <phil@nwl.cc>
---
.../selftests/net/netfilter/nft_nat_zones.sh | 34 +++++--------------
1 file changed, 8 insertions(+), 26 deletions(-)
diff --git a/tools/testing/selftests/net/netfilter/nft_nat_zones.sh b/tools/testing/selftests/net/netfilter/nft_nat_zones.sh
index 9f200f80253a..d935c967dd13 100755
--- a/tools/testing/selftests/net/netfilter/nft_nat_zones.sh
+++ b/tools/testing/selftests/net/netfilter/nft_nat_zones.sh@@ -31,25 +31,6 @@ ret=0 # NAT Gateway is supposed to do port reallocation for each of the # connections. -v4gc1=$(sysctl -n net.ipv4.neigh.default.gc_thresh1 2>/dev/null) -v4gc2=$(sysctl -n net.ipv4.neigh.default.gc_thresh2 2>/dev/null) -v4gc3=$(sysctl -n net.ipv4.neigh.default.gc_thresh3 2>/dev/null) -v6gc1=$(sysctl -n net.ipv6.neigh.default.gc_thresh1 2>/dev/null) -v6gc2=$(sysctl -n net.ipv6.neigh.default.gc_thresh2 2>/dev/null) -v6gc3=$(sysctl -n net.ipv6.neigh.default.gc_thresh3 2>/dev/null) - -cleanup() -{ - cleanup_all_ns - - sysctl -q net.ipv4.neigh.default.gc_thresh1="$v4gc1" 2>/dev/null - sysctl -q net.ipv4.neigh.default.gc_thresh2="$v4gc2" 2>/dev/null - sysctl -q net.ipv4.neigh.default.gc_thresh3="$v4gc3" 2>/dev/null - sysctl -q net.ipv6.neigh.default.gc_thresh1="$v6gc1" 2>/dev/null - sysctl -q net.ipv6.neigh.default.gc_thresh2="$v6gc2" 2>/dev/null - sysctl -q net.ipv6.neigh.default.gc_thresh3="$v6gc3" 2>/dev/null -} - checktool "nft --version" echo "run test without nft tool" checktool "conntrack -V" "run test without conntrack tool"
@@ -59,18 +40,19 @@ fi setup_ns gw srv -trap cleanup EXIT +trap cleanup_all_ns EXIT ip link add veth0 netns "$gw" type veth peer name eth0 netns "$srv" ip -net "$gw" link set veth0 up ip -net "$srv" link set eth0 up -sysctl -q net.ipv6.neigh.default.gc_thresh1=512 2>/dev/null -sysctl -q net.ipv6.neigh.default.gc_thresh2=1024 2>/dev/null -sysctl -q net.ipv6.neigh.default.gc_thresh3=4096 2>/dev/null -sysctl -q net.ipv4.neigh.default.gc_thresh1=512 2>/dev/null -sysctl -q net.ipv4.neigh.default.gc_thresh2=1024 2>/dev/null -sysctl -q net.ipv4.neigh.default.gc_thresh3=4096 2>/dev/null +ip netns exec "$gw" sysctl -q \ + net.ipv6.neigh.default.gc_thresh1=512 \ + net.ipv6.neigh.default.gc_thresh2=1024 \ + net.ipv6.neigh.default.gc_thresh3=4096 \ + net.ipv4.neigh.default.gc_thresh1=512 \ + net.ipv4.neigh.default.gc_thresh2=1024 \ + net.ipv4.neigh.default.gc_thresh3=4096 2>/dev/null for i in $(seq 1 "$maxclients");do setup_ns "cl$i"
--
2.56.0.385.gd3acb90ef8-goog