netdev - Re: [PATCH net-next 00/12] mlxsw: spectrum

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: <20181216.152511.1070172463315251122.davem@davemloft.net>
Date:   Sun, 16 Dec 2018 15:25:11 -0800 (PST)
From:   David Miller <davem@...emloft.net>
To:     idosch@...lanox.com
Cc:     netdev@...r.kernel.org, jiri@...lanox.com, nird@...lanox.com,
        mlxsw@...lanox.com
Subject: Re: [PATCH net-next 00/12] mlxsw: spectrum_acl: Add Bloom filter
 support

From: Ido Schimmel <idosch@...lanox.com>
Date: Sun, 16 Dec 2018 08:49:23 +0000

> Nir says:
> 
> Spectrum-2 uses Bloom filter to reduce the number of lookups in the
> algorithmic TCAM (A-TCAM). HW performs multiple exact match lookups in a
> given region using a key composed of { packet & mask, mask ID, region ID }.
> The masks which are used in a region are called rule patterns or RP.
> When such multiple masks are used, the A-TCAM region uses an eRP
> (extended RP) table that describes which rule patterns are in use and
> defines the order of the lookup. When eRP table is used in a region, one
> way to reduce the number of the lookups is to consult a Bloom filter
> before doing the lookup.
> 
> A Bloom filter is a space-efficient probabilistic data structure, on
> which a query returns either "possibly in set" or "definitely not in
> set". HW can skip a lookup if a query on the Bloom filter results a
> "definitely not set" response. The mlxsw driver implements a "counting
> filter" and when either a new entry is marked or the last entry is
> removed it will update the HW. Update of this counting filter occurs
> when rule is configured or deleted from a region.
 ...

As usual, great work and a high quality patch series with test cases
and everything from the mlxsw team.

Series applied, thank you.