linux-kernel - Re: [PATCH net-next v2] net: prestera: flower template support

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Thu, 16 Dec 2021 08:08:49 -0800
From:   Jakub Kicinski <kuba@...nel.org>
To:     Volodymyr Mytnyk <volodymyr.mytnyk@...ision.eu>
Cc:     netdev@...r.kernel.org, jhs@...atatu.com, mickeyr@...vell.com,
        serhiy.pshyk@...ision.eu, taras.chornyi@...ision.eu,
        Volodymyr Mytnyk <vmytnyk@...vell.com>,
        Taras Chornyi <tchornyi@...vell.com>,
        "David S. Miller" <davem@...emloft.net>,
        linux-kernel@...r.kernel.org
Subject: Re: [PATCH net-next v2] net: prestera: flower template support

On Wed, 15 Dec 2021 12:07:30 +0200 Volodymyr Mytnyk wrote:
> From: Volodymyr Mytnyk <vmytnyk@...vell.com>
> 
> Add user template explicit support. At this moment, max
> TCAM rule size is utilized for all rules, doesn't matter
> which and how much flower matches are provided by user. It
> means that some of TCAM space is wasted, which impacts
> the number of filters that can be offloaded.
> 
> Introducing the template, allows to have more HW offloaded
> filters by specifying the template explicitly.
> 
> Example:
>   tc qd add dev PORT clsact
>   tc chain add dev PORT ingress protocol ip \
>     flower dst_ip 0.0.0.0/16
>   tc filter add dev PORT ingress protocol ip \
>     flower skip_sw dst_ip 1.2.3.4/16 action drop
> 
> NOTE: chain 0 is the default chain id for "tc chain" & "tc filter"
>       command, so it is omitted in the example above.
> 
> This patch adds only template support for default chain 0 suppoerted
> by prestera driver at this moment. Chains are not supported yet,
> and will be added later.
> 
> Signed-off-by: Volodymyr Mytnyk <vmytnyk@...vell.com>

This was applied to net-next.