On Mon, Mar 23, 2020 at 05:34:30PM +0100, Florian Westphal wrote:
> Add a test case to check nf queue infrastructure.
> Could be extended in the future to also cover serialization of
> conntrack, uid and secctx attributes in nfqueue.
>
> For now, this checks that 'queue bypass' works, that a queue rule with
> no bypass option blocks traffic and that userspace receives the expected
> number of packets.
> For this we add two queues and hook all of
> prerouting/input/forward/output/postrouting.
>
> Packets get queued twice with a dummy base chain in between:
> This passes with current nf tree, but reverting
> commit 946c0d8e6ed4 ("netfilter: nf_queue: fix reinject verdict handling")
> makes this trip (it processes 30 instead of expected 20 packets).
Applied, thanks.
