[dts] [PATCH V1] tests/macsec_for_ixgbe: new automation according to TP

[Xie Wei <weix.xie@intel.com>]

new automation according to test plan

Signed-off-by: Xie Wei <weix.xie@intel.com>
---
 tests/TestSuite_macsec_for_ixgbe.py | 487 ++++++++++++++++++++++++++++
 1 file changed, 487 insertions(+)
 create mode 100644 tests/TestSuite_macsec_for_ixgbe.py

diff --git a/tests/TestSuite_macsec_for_ixgbe.py b/tests/TestSuite_macsec_for_ixgbe.py
new file mode 100644
index 0000000..bb6d072
--- /dev/null
+++ b/tests/TestSuite_macsec_for_ixgbe.py
@@ -0,0 +1,487 @@
+# BSD LICENSE
+#
+# Copyright (c) <2017>, Intel Corporation. All rights reserved.
+#
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions
+# are met:
+#
+#   * Redistributions of source code must retain the above copyright
+#     notice, this list of conditions and the following disclaimer.
+#   * Redistributions in binary form must reproduce the above copyright
+#     notice, this list of conditions and the following disclaimer in
+#     the documentation and/or other materials provided with the
+#     distribution.
+#   * Neither the name of Intel Corporation nor the names of its
+#     contributors may be used to endorse or promote products derived
+#     from this software without specific prior written permission.
+#
+# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+# A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+# OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+# DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+# THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+import re
+import time
+import os
+
+from test_case import TestCase
+from dut import Dut
+from pktgen import PacketGeneratorHelper
+from settings import HEADER_SIZE
+from pmd_output import PmdOutput
+from packet import Packet
+
+class TestMacsecForIxgbe(TestCase):
+    def set_up_all(self):
+        """
+        Prerequisite steps for each test suite.
+        """
+        self.dut_ports = self.dut.get_ports(self.nic)
+        self.verify(len(self.dut_ports) >= 2, "Insufficient ports")
+        self.session_sec = self.dut.new_session()
+        self.pci0 = self.dut.ports_info[self.dut_ports[1]]['pci']
+        self.pci1 = self.dut.ports_info[self.dut_ports[0]]['pci']
+        self.mac0 = self.dut.get_mac_address(self.dut_ports[0])
+        self.mac1 = self.dut.get_mac_address(self.dut_ports[1])
+        self.core_list = self.dut.get_core_list('1S/4C/1T')
+
+        if self.logger.log_path.startswith(os.sep):
+            self.output_path = self.logger.log_path
+        else:
+            cur_path = os.path.dirname(os.path.dirname(os.path.realpath(__file__)))
+            self.output_path = os.sep.join([cur_path, self.logger.log_path])
+        # create an instance to set stream field setting
+        self.pktgen_helper = PacketGeneratorHelper()
+
+
+    def set_up(self):
+        """
+        Run before each test case.
+        """
+        self.ol_flags = 1
+
+    def testpmd_rx(self):
+        eal_params = self.dut.create_eal_parameters(cores=self.core_list[0:2], ports=[self.pci0], prefix='rx')
+        cmd_rx = self.target + '/app/testpmd ' + eal_params + '--socket-mem 1024,0 -- -i --port-topology=chained'
+        return self.dut.send_expect(cmd_rx, "testpmd", 120)
+
+    def testpmd_tx(self):
+        eal_params = self.dut.create_eal_parameters(cores=self.core_list[2:4], ports=[self.pci1], prefix='tx')
+        cmd_tx = self.target + '/app/testpmd ' + eal_params + '--socket-mem 1024,0 -- -i --port-topology=chained'
+        return self.session_sec.send_expect(cmd_tx, "testpmd", 120)
+
+    def show_xstats(self):
+        time.sleep(0.1)
+        self.session_sec.send_expect("stop", "testpmd>", 2)
+        out_out = self.session_sec.send_expect("show port xstats 0", "testpmd>")
+        out_pkts_encrypted = int(re.compile('out_pkts_encrypted:\s+(.*?)\s+?').findall(out_out, re.S)[0])
+        out_octets_encrypted = int(re.compile('out_octets_encrypted:\s+(.*?)\s+?').findall(out_out, re.S)[0])
+        out_pkts_protected = int(re.compile('out_pkts_protected:\s+(.*?)\s+?').findall(out_out, re.S)[0])
+        out_octets_protected = int(re.compile('out_octets_protected:\s+(.*?)\s+?').findall(out_out, re.S)[0])
+        tx_good_packets = int(re.compile('tx_good_packets:\s+(.*?)\s+?').findall(out_out, re.S)[0])
+        if self.ol_flags == 0:
+            pkts_content = self.dut.get_session_output(timeout=2)
+
+        self.dut.send_expect("stop", "testpmd>", 2)
+        out_in = self.dut.send_expect("show port xstats 0", "testpmd>")
+        rx_good_packets = int(re.compile('rx_good_packets:\s+(.*?)\s+?').findall(out_in, re.S)[0])
+        in_pkts_ok = int(re.compile('in_pkts_ok:\s+(.*?)\s+?').findall(out_in, re.S)[0])
+        in_octets_decrypted = int(re.compile('in_octets_decrypted:\s+(.*?)\s+?').findall(out_in, re.S)[0])
+        in_octets_validated = int(re.compile('in_octets_validated:\s+(.*?)\s+?').findall(out_in, re.S)[0])
+        in_pkts_late = int(re.compile('in_pkts_late:\s+(.*?)\s+?').findall(out_in, re.S)[0])
+        in_pkts_notvalid = int(re.compile('in_pkts_notvalid:\s+(.*?)\s+?').findall(out_in, re.S)[0])
+        in_pkts_nosci = int(re.compile('in_pkts_nosci:\s+(.*?)\s+?').findall(out_in, re.S)[0])
+        in_pkts_notusingsa = int(re.compile('in_pkts_notusingsa:\s+(.*?)\s+?').findall(out_in, re.S)[0])
+
+        list_1 = ['out_pkts_encrypted', 'out_octets_encrypted', 'out_pkts_protected', 'out_octets_protected', 'tx_good_packets', 'rx_good_packets',
+                    'in_pkts_ok', 'in_octets_decrypted', 'in_octets_validated', 'in_pkts_late', 'in_pkts_notvalid', 'in_pkts_nosci', 'in_pkts_notusingsa']
+        list_2 = [out_pkts_encrypted, out_octets_encrypted, out_pkts_protected, out_octets_protected, tx_good_packets, rx_good_packets,
+                    in_pkts_ok, in_octets_decrypted, in_octets_validated, in_pkts_late, in_pkts_notvalid, in_pkts_nosci, in_pkts_notusingsa]
+        result_dict = dict(zip(list_1, list_2))
+        print result_dict
+
+        if self.ol_flags == 0:
+            return result_dict, pkts_content
+        return result_dict
+
+    def clear_port_xstats(self):
+        self.dut.send_expect("clear port xstats 0", "testpmd>")
+        self.session_sec.send_expect("clear port xstats 0", "testpmd>")
+
+    def set_macsec_rx_port(self, encrypt_rx, replay_rx):
+        # rx port
+        self.dut.send_expect("port stop 0", "testpmd>", 2)
+        self.dut.send_expect("set macsec offload 0 on encrypt %s replay-protect %s" % (encrypt_rx, replay_rx), "testpmd>")
+        self.dut.send_expect("port start 0", "testpmd>", 2)
+        self.dut.send_expect("set macsec sc rx 0 %s 0" % self.mac0, "testpmd>")
+        self.dut.send_expect("set macsec sa rx 0 0 0 0 00112200000000000000000000000000", "testpmd>")
+        self.dut.send_expect("set macsec sc tx 0 %s 0" % self.mac1, "testpmd>")
+        self.dut.send_expect("set macsec sa tx 0 0 0 0 00112200000000000000000000000000", "testpmd>")
+        self.dut.send_expect("set fwd rxonly", "testpmd>")
+        self.dut.send_expect("set promisc all on", "testpmd>")
+        if self.ol_flags == 0:
+            self.dut.send_expect("set verbose 1", "testpmd>")
+        self.dut.send_expect("start", "testpmd>", 2)
+
+    def set_macsec_tx_port(self, encrypt_tx, replay_tx):
+        # tx port
+        self.session_sec.send_expect("port stop 0", "testpmd>", 2)
+        self.session_sec.send_expect("set macsec offload 0 on encrypt %s replay-protect %s" % (encrypt_tx, replay_tx), "testpmd>")
+        self.session_sec.send_expect("port start 0", "testpmd>", 2)
+        self.session_sec.send_expect("set macsec sc tx 0 %s 0" % self.mac0, "testpmd>")
+        self.session_sec.send_expect("set macsec sa tx 0 0 0 0 00112200000000000000000000000000", "testpmd>")
+        self.session_sec.send_expect("set macsec sc rx 0 %s 0" % self.mac1, "testpmd>")
+        self.session_sec.send_expect("set macsec sa rx 0 0 0 0 00112200000000000000000000000000", "testpmd>")
+        self.session_sec.send_expect("set fwd txonly", "testpmd>")
+        self.session_sec.send_expect("start", "testpmd>", 2)
+
+    def packets_receive_num(self):
+        time.sleep(0.1)
+        self.session_sec.send_expect("stop", "testpmd>", 2)
+        self.dut.send_expect("stop", "testpmd>", 2)
+        out = self.dut.send_expect("show port stats 0", "testpmd>")
+        packet_number = re.compile('RX-packets:\s+(.*?)\s+?').findall(out, re.S)
+        return packet_number
+
+    def set_macsec_rx_diff_param(self, pi, idx, an, pn, key):
+        # rx port
+        self.dut.send_expect("set macsec sc rx 0 %s %s" % (self.mac0, pi), "testpmd>")
+        self.dut.send_expect("set macsec sa rx 0 %s %s %s %s" % (idx, an, pn, key), "testpmd>")
+        self.dut.send_expect("set macsec sc tx 0 %s %s" % (self.mac1, pi), "testpmd>")
+        self.dut.send_expect("set macsec sa tx 0 %s %s %s %s" % (idx, an, pn, key), "testpmd>")
+        self.dut.send_expect("set fwd rxonly", "testpmd>")
+        self.dut.send_expect("set promisc all on", "testpmd>")
+        self.dut.send_expect("start", "testpmd>", 2)
+
+    def set_macsec_tx_diff_param(self, pi, idx, an, pn, key):
+        # tx port
+        self.session_sec.send_expect("set macsec sc tx 0 %s %s" % (self.mac0, pi), "testpmd>")
+        self.session_sec.send_expect("set macsec sa tx 0 %s %s %s %s" % (idx, an, pn, key), "testpmd>")
+        self.session_sec.send_expect("set macsec sc rx 0 %s %s" % (self.mac1, pi), "testpmd>")
+        self.session_sec.send_expect("set macsec sa rx 0 %s %s %s %s" % (idx, an, pn, key), "testpmd>")
+        self.session_sec.send_expect("set fwd txonly", "testpmd>")
+        self.session_sec.send_expect("start", "testpmd>", 2)
+
+    def check_MACsec_pkts_receive(self):
+        xstats = self.show_xstats()
+        self.verify(xstats.get('out_pkts_protected') == 0
+                    and xstats.get('out_pkts_encrypted') == xstats.get('in_pkts_ok') == xstats.get('tx_good_packets') == xstats.get('rx_good_packets')
+                    and xstats.get('in_pkts_ok') != 0
+                    and xstats.get('out_octets_encrypted') == xstats.get('in_octets_decrypted')
+                    and xstats.get('out_octets_encrypted') != 0
+                    and xstats.get('out_octets_protected') == xstats.get('in_octets_validated')
+                    and xstats.get('out_octets_protected') != 0, "MACsec pkts receive failed")
+
+    def test_MACsec_pkts_tx_and_rx(self):
+        """
+        MACsec packets send and receive
+        """
+        self.testpmd_rx()
+        self.set_macsec_rx_port('on', 'on')
+        self.testpmd_tx()
+        self.set_macsec_tx_port('on', 'on')
+        self.check_MACsec_pkts_receive()
+
+    def test_MACsec_encrypt_off_and_replay_protect_off(self):
+        """
+        encrypt on/off, replay-protect on/off
+        """
+        self.testpmd_rx()
+        self.set_macsec_rx_port('on', 'on')
+        self.testpmd_tx()
+        self.set_macsec_tx_port('off', 'on')
+        xstats = self.show_xstats()
+        self.verify(xstats.get('out_pkts_encrypted') == 0
+                    and xstats.get('out_pkts_protected') == xstats.get('in_pkts_ok') == xstats.get('tx_good_packets') == xstats.get('rx_good_packets')
+                    and xstats.get('in_pkts_ok') != 0
+                    and xstats.get('out_octets_encrypted') == 0 and xstats.get('in_octets_decrypted') == 0
+                    and xstats.get('out_octets_protected') == xstats.get('in_octets_validated')
+                    and xstats.get('out_pkts_protected') != 0, "failed")
+        self.tear_down()
+
+        self.testpmd_rx()
+        self.set_macsec_rx_port('on', 'on')
+        self.testpmd_tx()
+        self.set_macsec_tx_port('on', 'off')
+        self.check_MACsec_pkts_receive()
+
+    def test_MACsec_tx_and_rx_with_different_param(self):
+        """
+        MACsec packets send and receive with different parameters
+        """
+        # rx side
+        self.testpmd_rx()
+        self.dut.send_expect("port stop 0", "testpmd>", 2)
+        self.dut.send_expect("set macsec offload 0 on encrypt on replay-protect on", "testpmd>")
+        self.dut.send_expect("port start 0", "testpmd>", 2)
+        # tx side
+        self.testpmd_tx()
+        self.session_sec.send_expect("port stop 0", "testpmd>", 2)
+        self.session_sec.send_expect("set macsec offload 0 on encrypt on replay-protect on", "testpmd>")
+        self.session_sec.send_expect("port start 0", "testpmd>", 2)
+
+        # subcase1:set different index on rx and tx port
+        for i in [1, 2]:
+            if i == 2:
+                result = self.dut.send_expect("set macsec sa rx 0 %s 0 0 00112200000000000000000000000000" % i, "testpmd>")
+                self.verify("invalid" in result, "set idx to 2 failed")
+                break
+            else:
+                self.set_macsec_rx_diff_param(0, i, 0, 0, '00112200000000000000000000000000')
+                self.set_macsec_tx_diff_param(0, i, 0, 0, '00112200000000000000000000000000')
+                self.check_MACsec_pkts_receive()
+                self.clear_port_xstats()
+
+        # subcase2:set different an on rx and tx port
+        for i in range(1, 5):
+            if i == 4:
+                result = self.dut.send_expect("set macsec sa rx 0 0 %s 0 00112200000000000000000000000000" % i, "testpmd>")
+                self.verify("invalid" in result, "set an to 4 failed")
+                break
+            else:
+                self.set_macsec_rx_diff_param(0, 0, i, 0, '00112200000000000000000000000000')
+                self.set_macsec_tx_diff_param(0, 0, i, 0, '00112200000000000000000000000000')
+                self.check_MACsec_pkts_receive()
+                self.clear_port_xstats()
+        self.tear_down()
+
+        # subcase3:set different pn on rx and tx port
+        for i in ['0xffffffed', '0xffffffee', '0xffffffef', '0xfffffff0', '0xffffffec', '0x100000000']:
+            # rx side
+            self.testpmd_rx()
+            self.dut.send_expect("port stop 0", "testpmd>", 2)
+            self.dut.send_expect("set macsec offload 0 on encrypt on replay-protect on", "testpmd>")
+            self.dut.send_expect("port start 0", "testpmd>", 2)
+            # tx side
+            self.testpmd_tx()
+            self.session_sec.send_expect("port stop 0", "testpmd>", 2)
+            self.session_sec.send_expect("set macsec offload 0 on encrypt on replay-protect on", "testpmd>")
+            self.session_sec.send_expect("port start 0", "testpmd>", 2)
+            if i == '0x100000000':
+                result = self.dut.send_expect("set macsec sa rx 0 0 0 %s 00112200000000000000000000000000" % i, "testpmd>")
+                self.verify("Bad arguments" in result, "set pn to 0x100000000 failed")
+                break
+            else:
+                self.set_macsec_rx_diff_param(0, 0, 0, i, '00112200000000000000000000000000')
+                self.set_macsec_tx_diff_param(0, 0, 0, i, '00112200000000000000000000000000')
+                pkt_num = self.packets_receive_num()
+                if i == '0xffffffec':
+                    self.verify(int(pkt_num[0]) == 4, "Rx port can't receive four pkts")
+                    self.clear_port_xstats()
+                else:
+                    self.verify(int(pkt_num[0]) == 3, "Rx port can't receive three pkts")
+                    self.tear_down()
+
+        # subcase4:set different key on rx and tx port
+        for i in ['00000000000000000000000000000000', 'ffffffffffffffffffffffffffffffff']:
+            self.set_macsec_rx_diff_param(0, 0, 0, 0, i)
+            self.set_macsec_tx_diff_param(0, 0, 0, 0, i)
+            self.check_MACsec_pkts_receive()
+            self.clear_port_xstats()
+
+        # subcase5:set different pi on rx and tx port
+        for i in [1, '0xffff', '0x10000']:
+            if i == '0x10000':
+                result = self.dut.send_expect("set macsec sc rx 0 %s %s" % (self.mac0, i), "testpmd>")
+                self.verify("Bad arguments" in result, "set pi to 0x10000 failed")
+                break
+            else:
+                self.set_macsec_rx_diff_param(i, 0, 0, 0, '0112200000000000000000000000000')
+                self.set_macsec_tx_diff_param(i, 0, 0, 0, '0112200000000000000000000000000')
+                pkt_num = self.packets_receive_num()
+                self.verify(int(pkt_num[0]) == 0, "MACsec pkts can't be received")
+
+    def test_MACsec_pkts_send_and_normal_receive(self):
+        """
+        Disable MACsec offload on rx port,enable MACsec offload on tx port
+        """
+        self.ol_flags = 0
+        # rx port
+        self.testpmd_rx()
+        self.dut.send_expect("port stop 0", "testpmd>", 2)
+        self.dut.send_expect("set macsec offload 0 off", "testpmd>")
+        self.dut.send_expect("port start 0", "testpmd>", 2)
+        self.dut.send_expect("set fwd rxonly", "testpmd>")
+        self.dut.send_expect("set promisc all on", "testpmd>")
+        self.dut.send_expect("set verbose 1", "testpmd>")
+        self.dut.send_expect("start", "testpmd>", 2)
+
+        # tx port
+        self.testpmd_tx()
+        self.set_macsec_tx_port('on', 'on')
+        xstats, pkts_content = self.show_xstats()
+        self.verify("L2_ETHER" in pkts_content
+                    and "L3_IPV4" not in pkts_content
+                    and "L4_UDP" not in pkts_content, "The received packets are not encrypted")
+        self.verify(xstats.get('in_octets_decrypted') == 0 and xstats.get('in_octets_validated') == 0,
+                    "Error:in_octets_decrypted and in_octets_validated increase")
+
+    def test_normal_pkts_send_and_MACsec_receive(self):
+        """
+        Enable MACsec offload on rx port,disable MACsec offload on tx port
+        """
+        # rx port
+        self.ol_flags = 0
+        self.testpmd_rx()
+        self.set_macsec_rx_port('on', 'on')
+
+        # tx port
+        self.testpmd_tx()
+        self.session_sec.send_expect("port stop 0", "testpmd>", 2)
+        self.session_sec.send_expect("set macsec offload 0 off", "testpmd>")
+        self.session_sec.send_expect("port start 0", "testpmd>", 2)
+        self.session_sec.send_expect("set fwd txonly", "testpmd>")
+        self.session_sec.send_expect("start", "testpmd>", 2)
+
+        xstats, pkts_content= self.show_xstats()
+        self.verify("L2_ETHER L3_IPV4 L4_UDP" in pkts_content, "The received packets are encrypted")
+        self.verify(xstats.get('in_octets_decrypted') == 0 and xstats.get('out_pkts_encrypted') == 0,
+                    "Error:in_octets_decrypted and out_pkts_encrypted increase")
+
+    def test_MACsec_tx_and_rx_with_wrong_param(self):
+        """
+        MACsec packets send and receive with wrong parameters
+        """
+        # rx side
+        self.testpmd_rx()
+        self.dut.send_expect("port stop 0", "testpmd>", 2)
+        self.dut.send_expect("set macsec offload 0 on encrypt on replay-protect on", "testpmd>")
+        self.dut.send_expect("port start 0", "testpmd>", 2)
+        # tx side
+        self.testpmd_tx()
+        self.session_sec.send_expect("port stop 0", "testpmd>", 2)
+        self.session_sec.send_expect("set macsec offload 0 on encrypt on replay-protect on", "testpmd>")
+        self.session_sec.send_expect("port start 0", "testpmd>", 2)
+
+        # subcase1:set different pn on rx and tx port
+        self.set_macsec_rx_diff_param(0, 0, 0, 2, '00112200000000000000000000000000')
+        self.set_macsec_tx_diff_param(0, 0, 0, 0, '00112200000000000000000000000000')
+        xstats = self.show_xstats()
+        self.verify(xstats.get('out_pkts_encrypted') == xstats.get('in_pkts_ok') + xstats.get('in_pkts_late')
+                    and xstats.get('out_octets_encrypted') == xstats.get('in_octets_decrypted'), "subcase1:failed")
+        self.clear_port_xstats()
+        # Rx port can receive the packets until the pn equals the pn of tx port
+        self.set_macsec_rx_diff_param(0, 0, 0, 2, '00112200000000000000000000000000')
+        self.set_macsec_tx_diff_param(0, 0, 0, 2, '00112200000000000000000000000000')
+        self.check_MACsec_pkts_receive()
+        self.clear_port_xstats()
+
+        # subcase2:set different keys on rx and tx port
+        self.set_macsec_rx_diff_param(0, 0, 0, 0, '00000000000000000000000000000000')
+        self.set_macsec_tx_diff_param(0, 0, 0, 0, '00112200000000000000000000000000')
+        xstats = self.show_xstats()
+        self.verify(xstats.get('in_pkts_ok') == 0
+                    and xstats.get('out_pkts_encrypted') == xstats.get('in_pkts_notvalid')
+                    and xstats.get('out_octets_encrypted') == xstats.get('in_octets_decrypted'), "subcase2:failed")
+        pkt_num = self.packets_receive_num()
+        self.verify(int(pkt_num[0]) == 0, "Rx port can't receive pkts")
+        self.clear_port_xstats()
+
+        # subcase3:set different pi on rx and tx port
+        self.set_macsec_rx_diff_param(1, 0, 0, 0, '0112200000000000000000000000000')
+        self.set_macsec_tx_diff_param(0, 0, 0, 0, '0112200000000000000000000000000')
+        xstats = self.show_xstats()
+        self.verify(xstats.get('in_pkts_ok') == 0 and xstats.get('out_pkts_encrypted') == xstats.get('in_pkts_nosci')
+                    and xstats.get('out_octets_encrypted') == xstats.get('in_octets_decrypted'), "subcase3:failed")
+        self.clear_port_xstats()
+
+        # subcase4:set different an on rx and tx port
+        self.set_macsec_rx_diff_param(0, 0, 0, 0, '00112200000000000000000000000000')
+        self.set_macsec_tx_diff_param(0, 0, 1, 0, '00112200000000000000000000000000')
+        xstats = self.show_xstats()
+        self.verify(xstats.get('in_pkts_ok') == 0 and xstats.get('out_pkts_encrypted') == xstats.get('in_pkts_notusingsa')
+                    and xstats.get('out_octets_encrypted') == xstats.get('in_octets_decrypted'), "subcase4:failed")
+        self.clear_port_xstats()
+
+        # subcase5:set different index on rx and tx port
+        self.set_macsec_rx_diff_param(0, 0, 0, 0, '00112200000000000000000000000000')
+        self.set_macsec_tx_diff_param(0, 1, 0, 0, '00112200000000000000000000000000')
+        xstats = self.show_xstats()
+        self.verify(xstats.get('out_pkts_encrypted') == xstats.get('in_pkts_ok')
+                    and xstats.get('out_octets_encrypted') == xstats.get('in_octets_decrypted'), "subcase5:failed")
+
+    def start_testpmd(self):
+        eal_params = self.dut.create_eal_parameters(cores=self.core_list[0:2])
+        cmd = self.target + '/app/testpmd ' + eal_params + '--socket-mem 1024,0 -- -i --port-topology=chained'
+        self.dut.send_expect(cmd, "testpmd", 120)
+        self.dut.send_expect("port stop 0", "testpmd>", 2)
+        self.dut.send_expect("set macsec offload 0 on encrypt on replay-protect on", "testpmd>")
+        self.dut.send_expect("port start 0", "testpmd>", 2)
+        self.dut.send_expect("set fwd mac", "testpmd>", 2)
+        self.dut.send_expect("start", "testpmd>", 2)
+
+    def test_packet_length(self):
+        """
+        On IXIA side, start IXIA port6 transmit, start the IXIA capture.
+        View the IXIA port5 captured packet, the protocol is MACsec, the EtherType
+        is 0x88E5, and the packet length is 96bytes, while the normal packet length
+        is 64bytes.
+        """
+        self.tester_itf_0 = self.tester.get_interface(self.dut_ports[0])
+        self.tester_itf_1 = self.tester.get_interface(self.dut_ports[1])
+        self.start_testpmd()
+        # start tcpdump
+        self.tester.send_expect("rm -rf ./tcpdump_test.cap", "#")
+        self.tester.send_expect("tcpdump -i %s ether src %s -w ./tcpdump_test.cap 2> /dev/null& " % (self.tester_itf_0, self.mac0), "#")
+        p = Packet()
+        pkt = 'Ether(dst="%s", src="02:00:00:00:00:01")/IP()/UDP()/("X"*22)' % self.mac1
+        p.append_pkt(pkt)
+        p.send_pkt(self.tester, tx_port=self.tester_itf_1, count=10, timeout=3)
+        # get tcpdump package
+        self.tester.send_expect("killall tcpdump", "#")
+        out = self.tester.send_expect("tcpdump -nn -e -v -r ./tcpdump_test.cap", "#", 120)
+        self.verify("length 96" in out and "0x88e5" in out, "the EtherType isn't 0x88E5, and the packet length isn't 96bytes")
+
+    def test_perf_Tx_linerate(self):
+        """
+        performance test
+        """
+        frame_size = 64
+        self.table_header = ['Frame Size', 'Mpps', '% linerate']
+        self.result_table_create(self.table_header)
+        txPort = self.tester.get_local_port(self.dut_ports[1])
+        rxPort = self.tester.get_local_port(self.dut_ports[0])
+        self.start_testpmd()
+        # prepare traffic generator input
+        flow = 'Ether(dst="%s", src="02:00:00:00:00:01")/IP()/UDP()/("X"*18)' % self.mac1
+        pcap = os.sep.join([self.output_path, "test.pcap"])
+        self.tester.scapy_append('wrpcap("%s", [%s])' % (pcap, flow))
+        self.tester.scapy_execute()
+        tgenInput = []
+        pcap = os.sep.join([self.output_path, "test.pcap"])
+        tgenInput.append((txPort, rxPort, pcap))
+
+        # clear streams before add new streams
+        self.tester.pktgen.clear_streams()
+        # run packet generator
+        streams = self.pktgen_helper.prepare_stream_from_tginput(tgenInput, 100, None, self.tester.pktgen)
+        _, pps = self.tester.pktgen.measure_throughput(stream_ids=streams)
+        self.verify(pps > 0, "No traffic detected")
+        pps /= 1000000.0
+        rate = (pps * 100) / self.wirespeed(self.nic, frame_size, 1)
+        self.result_table_add([96, pps, rate])
+        self.result_table_print()
+        self.verify(rate >= 70, "performance test failed")
+
+    def tear_down(self):
+        """
+        Run after each test case.
+        """
+        self.session_sec.send_expect("quit", "#")
+        self.dut.send_expect("quit", "#")
+
+    def tear_down_all(self):
+        """
+        Run after each test suite.
+        """
+        self.dut.kill_all()
+        self.dut.close_session(self.session_sec)
-- 
2.17.2