From 5c6dd17a373a2c56e57f02426d66a79af7faa19c Mon Sep 17 00:00:00 2001 From: Neale Ranns Date: Thu, 17 Feb 2022 09:08:47 +0000 Subject: ip: rate-limit the sending of ICMP error messages Type: improvement For error conditions, such as TTL expired, dest unreach, etc, Rate limit the sending of ICMP error messages. The rate limiting is done based on src,dst IP address of the received packet. the rate limit has been chosen, somewhat arbitrarily, to be 1e-3. This is the same limit as the ARP throttling. Signed-off-by: Neale Ranns Change-Id: I4a0b791cde8c941a9bf37de6aa5da56779d3cef4 --- test/test_nat44_ei.py | 10 ++-------- 1 file changed, 2 insertions(+), 8 deletions(-) (limited to 'test/test_nat44_ei.py') diff --git a/test/test_nat44_ei.py b/test/test_nat44_ei.py index c1b82ac2dc3..aafd345f43f 100644 --- a/test/test_nat44_ei.py +++ b/test/test_nat44_ei.py @@ -1056,12 +1056,9 @@ class TestNAT44EI(MethodHolder): # Client side - generate traffic pkts = self.create_stream_in(self.pg0, self.pg1, ttl=1) - self.pg0.add_stream(pkts) - self.pg_enable_capture(self.pg_interfaces) - self.pg_start() + capture = self.send_and_expect_some(self.pg0, pkts, self.pg0) # Client side - verify ICMP type 11 packets - capture = self.pg0.get_capture(len(pkts)) self.verify_capture_in_with_icmp_errors(capture, self.pg0) def test_dynamic_icmp_errors_out2in_ttl_1(self): @@ -1086,12 +1083,9 @@ class TestNAT44EI(MethodHolder): capture = self.pg1.get_capture(len(pkts)) self.verify_capture_out(capture) pkts = self.create_stream_out(self.pg1, ttl=1) - self.pg1.add_stream(pkts) - self.pg_enable_capture(self.pg_interfaces) - self.pg_start() + capture = self.send_and_expect_some(self.pg1, pkts, self.pg1) # Server side - verify ICMP type 11 packets - capture = self.pg1.get_capture(len(pkts)) self.verify_capture_out_with_icmp_errors(capture, src_ip=self.pg1.local_ip4) -- cgit 1.2.3-korg