[backend] Update backend acl template and unit tests

[neethajohn]

Why I did it

Backend acl load is failing since IN_PORTS qualifier is no longer supported. Changing the template to match only on vlan since the only the vlan ports are bound to the DATAACL for backend (https://github.com/sonic-net/sonic-buildimage/blob/master/src/sonic-config-engine/minigraph.py#L1346)

Work item tracking

• Microsoft ADO: 27172619

How to verify it

Unit test to validate the template rendering
Tested on 202305 branch. Acl loaded successfully after this change.

admin@str2-7050qx-32s-acs-02:~$ sudo systemctl restart backend-acl.service 
admin@str2-7050qx-32s-acs-02:/usr/share/sonic/templates$ show acl rule
Table    Rule          Priority    Action    Match             Status
-------  ------------  ----------  --------  ----------------  --------
DATAACL  RULE_1        9999        FORWARD   ETHER_TYPE: 2048  Active
                                             VLAN_ID: 1000
DATAACL  RULE_2        9998        FORWARD   ETHER_TYPE: 2048  Active
                                             VLAN_ID: 1100
DATAACL  DEFAULT_RULE  1           DROP      ETHER_TYPE: 2048  Active

Cannot test on internal branch since the slim image is too big to load on 7050qx and this change is only applicable to 7050qx.

Which release branch to backport (provide reason below if selected)

• 201811
• 201911
• 202006
• 202012
• 202106
• 202111
• 202205
• 202211
• 202305

Tested branch (Please provide the tested image version)

20230531.24 with the patch

[bingwang-ms]

I noticed there are two vlans in some Backend T0 devices. The change may break this scenario.

~$ show acl rule DATAACL
Table    Rule                Priority    Action    Match
-------  ------------------  ----------  --------  ---------------------------------------------------------------------------
DATAACL  RULE_1              9999        FORWARD   ETHER_TYPE: 2048
                                                   IN_PORTS: Ethernet32,Ethernet36,Ethernet40,Ethernet44,Ethernet48,Ethernet52
                                                   VLAN_ID: 1008
DATAACL  RULE_2              9998        FORWARD   ETHER_TYPE: 2048
                                                   IN_PORTS: Ethernet12,Ethernet16,Ethernet8
                                                   VLAN_ID: 1108
DATAACL  DEFAULT_RULE        1           DROP      ETHER_TYPE: 2048

[bingwang-ms]

Discussed offline, the behavior is not changed even in two-vlan scenario. In two-vlan scenario, the packets with both vlan_ids are accepted, but it will be dropped on the ports with different VLAN_ID.

[neethajohn]

@yxieca , please help merge

[mssonicbld]

Cherry-pick PR to 202311: #18685

[mssonicbld]

Cherry-pick PR to 202305: #18686