Re: [PATCH bpf-next v8 4/5] bpf: Add selftests for raw syncookie helpers

On Fri, Apr 29, 2022 at 4:16 AM Maxim Mikityanskiy maximmi@nvidia.com wrote:

•   SYS("iptables -t raw -I PREROUTING \
  

•       -i tmp1 -p tcp -m tcp --syn --dport 8080 -j CT --notrack");
  

•   SYS("iptables -t filter -A INPUT \
  

•       -i tmp1 -p tcp -m tcp --dport 8080 -m state --state INVALID,UNTRACKED \
  

•       -j SYNPROXY --sack-perm --timestamp --wscale 7 --mss 1460");
  

•   SYS("iptables -t filter -A INPUT \
  

•       -i tmp1 -m state --state INVALID -j DROP");
  

•   ctrl_file = SYS_OUT("./xdp_synproxy --iface tmp1 --ports 8080 --single \
  

•                       --mss4 1460 --mss6 1440 --wscale 7 --ttl 64");
  

That doesn't work for test_progs-no_alu32. sh: line 1: ./xdp_synproxy: No such file or directory https://github.com/kernel-patches/bpf/runs/6227226675?check_suite_focus=true...

and going to be fragile in general. Could you launch it as a kthread or fork it like other tests are doing ?