Skip to content

[Nexthop][m4340nhp] Fix ACL tests and trap ACLs on split-ACL DNX ASICs - #1887

Open
marif-nexthop wants to merge 1 commit into
meta:mainfrom
nexthop-ai:marif.fboss-dnx-split-acl-tests
Open

marif-nexthop wants to merge 1 commit into
meta:mainfrom
nexthop-ai:marif.fboss-dnx-split-acl-tests

Conversation

@marif-nexthop

Copy link
Copy Markdown
Contributor

Pre-submission checklist

  • I've ran the linters locally and fixed lint errors related to the files I modified in this PR. You can install the linters by running pip install -r requirements-dev.txt && pre-commit install
  • pre-commit run

Summary

With ACL table groups, Qumran4D and Jericho4 split the default ingress ACL into an IPv4 table and an IPv6 table. This PR fits the trap ACL helpers and AclEmptyCodeIcmp to that split.

  • addTrapPacketAcl() puts IPv6 prefix and L4 port trap entries in the IPv6 table on these ASICs. The IPv4 table does not carry the IPv6 qualifiers.
  • AclEmptyCodeIcmp gives its ICMPv6 entry the IPv6 ether type on every ASIC that takes an ether type, and looks the entry up in the IPv6 table on these ASICs.
  • isAclEntrySame throws FbossError when the table or the entry is missing, instead of dereferencing a null handle.

Test Plan

Tested on a m4340nhp device. AgentHwAclQualifierTest.AclEmptyCodeIcmp crashed in isAclEntrySame before this change and passes on cold and warm boot with it.

@marif-nexthop
marif-nexthop requested a review from a team as a code owner October 31, 2026 02:23
@github-actions github-actions Bot added nexthop project:m4340nhp FBOSS project: m4340nhp labels Oct 31, 2026
@meta-cla meta-cla Bot added the CLA Signed label Oct 31, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant