Add device traffic counters and ambiguous MAC detection

2026-08-07 14:29:51 +03:00
parent 3157e9e8f7
commit e774486b99
15 changed files with 528 additions and 7 deletions
@@ -16,6 +16,12 @@ test('gateway keeps direct forwarding active while TProxy interception is switch
  assert.match(entrypoint, /-A "\$TPROXY_CHAIN" -i 'br-\+' -j RETURN/);
  assert.doesNotMatch(entrypoint, /-A PREROUTING -j "\$TPROXY_CHAIN"/);
  assert.doesNotMatch(entrypoint, /TPROXY_BYPASS_SOURCE_CIDRS|DIRECT_BYPASS_CACHE|ipset/);
+  assert.match(entrypoint, /-t raw -I PREROUTING 1 -j "\$TRAFFIC_UPLOAD_CHAIN"/);
+  assert.match(entrypoint, /-t mangle -I POSTROUTING 1 -j "\$TRAFFIC_DOWNLOAD_CHAIN"/);
+  assert.match(entrypoint, /setup_tproxy\s+if ! setup_device_traffic/);
+  assert.match(entrypoint, /if ! setup_device_traffic; then[\s\S]*VPN routing remains active/);
+  assert.match(entrypoint, /export TRAFFIC_UPLOAD_CHAIN TRAFFIC_DOWNLOAD_CHAIN BYPASS_CIDRS/);
+  assert.match(entrypoint, /ipt_traffic\(\) \{\s+iptables -w 1/);
 });

 test('control bypasses host routing while dataplane owns it', () => {