30aa6af5eb1011f8aad261d87022258a5c201344
[dpdk.git] / drivers / net / softnic / rte_eth_softnic_flow.c
1 /* SPDX-License-Identifier: BSD-3-Clause
2  * Copyright(c) 2018 Intel Corporation
3  */
4 #include <stdint.h>
5 #include <stdlib.h>
6 #include <string.h>
7
8 #include <rte_common.h>
9 #include <rte_byteorder.h>
10 #include <rte_malloc.h>
11 #include <rte_string_fns.h>
12 #include <rte_flow.h>
13 #include <rte_flow_driver.h>
14 #include <rte_tailq.h>
15
16 #include "rte_eth_softnic_internals.h"
17 #include "rte_eth_softnic.h"
18
19 #define rte_htons rte_cpu_to_be_16
20 #define rte_htonl rte_cpu_to_be_32
21
22 #define rte_ntohs rte_be_to_cpu_16
23 #define rte_ntohl rte_be_to_cpu_32
24
25 static struct rte_flow *
26 softnic_flow_find(struct softnic_table *table,
27         struct softnic_table_rule_match *rule_match)
28 {
29         struct rte_flow *flow;
30
31         TAILQ_FOREACH(flow, &table->flows, node)
32                 if (memcmp(&flow->match, rule_match, sizeof(*rule_match)) == 0)
33                         return flow;
34
35         return NULL;
36 }
37
38 int
39 flow_attr_map_set(struct pmd_internals *softnic,
40                 uint32_t group_id,
41                 int ingress,
42                 const char *pipeline_name,
43                 uint32_t table_id)
44 {
45         struct pipeline *pipeline;
46         struct flow_attr_map *map;
47
48         if (group_id >= SOFTNIC_FLOW_MAX_GROUPS ||
49                         pipeline_name == NULL)
50                 return -1;
51
52         pipeline = softnic_pipeline_find(softnic, pipeline_name);
53         if (pipeline == NULL ||
54                         table_id >= pipeline->n_tables)
55                 return -1;
56
57         map = (ingress) ? &softnic->flow.ingress_map[group_id] :
58                 &softnic->flow.egress_map[group_id];
59         strcpy(map->pipeline_name, pipeline_name);
60         map->table_id = table_id;
61         map->valid = 1;
62
63         return 0;
64 }
65
66 struct flow_attr_map *
67 flow_attr_map_get(struct pmd_internals *softnic,
68                 uint32_t group_id,
69                 int ingress)
70 {
71         if (group_id >= SOFTNIC_FLOW_MAX_GROUPS)
72                 return NULL;
73
74         return (ingress) ? &softnic->flow.ingress_map[group_id] :
75                 &softnic->flow.egress_map[group_id];
76 }
77
78 static int
79 flow_pipeline_table_get(struct pmd_internals *softnic,
80                 const struct rte_flow_attr *attr,
81                 const char **pipeline_name,
82                 uint32_t *table_id,
83                 struct rte_flow_error *error)
84 {
85         struct flow_attr_map *map;
86
87         if (attr == NULL)
88                 return rte_flow_error_set(error,
89                                 EINVAL,
90                                 RTE_FLOW_ERROR_TYPE_ATTR,
91                                 NULL,
92                                 "Null attr");
93
94         if (!attr->ingress && !attr->egress)
95                 return rte_flow_error_set(error,
96                                 EINVAL,
97                                 RTE_FLOW_ERROR_TYPE_ATTR_INGRESS,
98                                 attr,
99                                 "Ingress/egress not specified");
100
101         if (attr->ingress && attr->egress)
102                 return rte_flow_error_set(error,
103                                 EINVAL,
104                                 RTE_FLOW_ERROR_TYPE_ATTR_INGRESS,
105                                 attr,
106                                 "Setting both ingress and egress is not allowed");
107
108         map = flow_attr_map_get(softnic,
109                         attr->group,
110                         attr->ingress);
111         if (map == NULL ||
112                         map->valid == 0)
113                 return rte_flow_error_set(error,
114                                 EINVAL,
115                                 RTE_FLOW_ERROR_TYPE_ATTR_GROUP,
116                                 attr,
117                                 "Invalid group ID");
118
119         if (pipeline_name)
120                 *pipeline_name = map->pipeline_name;
121
122         if (table_id)
123                 *table_id = map->table_id;
124
125         return 0;
126 }
127
128 union flow_item {
129         uint8_t raw[TABLE_RULE_MATCH_SIZE_MAX];
130         struct rte_flow_item_eth eth;
131         struct rte_flow_item_vlan vlan;
132         struct rte_flow_item_ipv4 ipv4;
133         struct rte_flow_item_ipv6 ipv6;
134         struct rte_flow_item_icmp icmp;
135         struct rte_flow_item_udp udp;
136         struct rte_flow_item_tcp tcp;
137         struct rte_flow_item_sctp sctp;
138         struct rte_flow_item_vxlan vxlan;
139         struct rte_flow_item_e_tag e_tag;
140         struct rte_flow_item_nvgre nvgre;
141         struct rte_flow_item_mpls mpls;
142         struct rte_flow_item_gre gre;
143         struct rte_flow_item_gtp gtp;
144         struct rte_flow_item_esp esp;
145         struct rte_flow_item_geneve geneve;
146         struct rte_flow_item_vxlan_gpe vxlan_gpe;
147         struct rte_flow_item_arp_eth_ipv4 arp_eth_ipv4;
148         struct rte_flow_item_ipv6_ext ipv6_ext;
149         struct rte_flow_item_icmp6 icmp6;
150         struct rte_flow_item_icmp6_nd_ns icmp6_nd_ns;
151         struct rte_flow_item_icmp6_nd_na icmp6_nd_na;
152         struct rte_flow_item_icmp6_nd_opt icmp6_nd_opt;
153         struct rte_flow_item_icmp6_nd_opt_sla_eth icmp6_nd_opt_sla_eth;
154         struct rte_flow_item_icmp6_nd_opt_tla_eth icmp6_nd_opt_tla_eth;
155 };
156
157 static const union flow_item flow_item_raw_mask;
158
159 static int
160 flow_item_is_proto(enum rte_flow_item_type type,
161         const void **mask,
162         size_t *size)
163 {
164         switch (type) {
165         case RTE_FLOW_ITEM_TYPE_RAW:
166                 *mask = &flow_item_raw_mask;
167                 *size = sizeof(flow_item_raw_mask);
168                 return 1; /* TRUE */
169
170         case RTE_FLOW_ITEM_TYPE_ETH:
171                 *mask = &rte_flow_item_eth_mask;
172                 *size = sizeof(struct rte_flow_item_eth);
173                 return 1; /* TRUE */
174
175         case RTE_FLOW_ITEM_TYPE_VLAN:
176                 *mask = &rte_flow_item_vlan_mask;
177                 *size = sizeof(struct rte_flow_item_vlan);
178                 return 1;
179
180         case RTE_FLOW_ITEM_TYPE_IPV4:
181                 *mask = &rte_flow_item_ipv4_mask;
182                 *size = sizeof(struct rte_flow_item_ipv4);
183                 return 1;
184
185         case RTE_FLOW_ITEM_TYPE_IPV6:
186                 *mask = &rte_flow_item_ipv6_mask;
187                 *size = sizeof(struct rte_flow_item_ipv6);
188                 return 1;
189
190         case RTE_FLOW_ITEM_TYPE_ICMP:
191                 *mask = &rte_flow_item_icmp_mask;
192                 *size = sizeof(struct rte_flow_item_icmp);
193                 return 1;
194
195         case RTE_FLOW_ITEM_TYPE_UDP:
196                 *mask = &rte_flow_item_udp_mask;
197                 *size = sizeof(struct rte_flow_item_udp);
198                 return 1;
199
200         case RTE_FLOW_ITEM_TYPE_TCP:
201                 *mask = &rte_flow_item_tcp_mask;
202                 *size = sizeof(struct rte_flow_item_tcp);
203                 return 1;
204
205         case RTE_FLOW_ITEM_TYPE_SCTP:
206                 *mask = &rte_flow_item_sctp_mask;
207                 *size = sizeof(struct rte_flow_item_sctp);
208                 return 1;
209
210         case RTE_FLOW_ITEM_TYPE_VXLAN:
211                 *mask = &rte_flow_item_vxlan_mask;
212                 *size = sizeof(struct rte_flow_item_vxlan);
213                 return 1;
214
215         case RTE_FLOW_ITEM_TYPE_E_TAG:
216                 *mask = &rte_flow_item_e_tag_mask;
217                 *size = sizeof(struct rte_flow_item_e_tag);
218                 return 1;
219
220         case RTE_FLOW_ITEM_TYPE_NVGRE:
221                 *mask = &rte_flow_item_nvgre_mask;
222                 *size = sizeof(struct rte_flow_item_nvgre);
223                 return 1;
224
225         case RTE_FLOW_ITEM_TYPE_MPLS:
226                 *mask = &rte_flow_item_mpls_mask;
227                 *size = sizeof(struct rte_flow_item_mpls);
228                 return 1;
229
230         case RTE_FLOW_ITEM_TYPE_GRE:
231                 *mask = &rte_flow_item_gre_mask;
232                 *size = sizeof(struct rte_flow_item_gre);
233                 return 1;
234
235         case RTE_FLOW_ITEM_TYPE_GTP:
236         case RTE_FLOW_ITEM_TYPE_GTPC:
237         case RTE_FLOW_ITEM_TYPE_GTPU:
238                 *mask = &rte_flow_item_gtp_mask;
239                 *size = sizeof(struct rte_flow_item_gtp);
240                 return 1;
241
242         case RTE_FLOW_ITEM_TYPE_ESP:
243                 *mask = &rte_flow_item_esp_mask;
244                 *size = sizeof(struct rte_flow_item_esp);
245                 return 1;
246
247         case RTE_FLOW_ITEM_TYPE_GENEVE:
248                 *mask = &rte_flow_item_geneve_mask;
249                 *size = sizeof(struct rte_flow_item_geneve);
250                 return 1;
251
252         case RTE_FLOW_ITEM_TYPE_VXLAN_GPE:
253                 *mask = &rte_flow_item_vxlan_gpe_mask;
254                 *size = sizeof(struct rte_flow_item_vxlan_gpe);
255                 return 1;
256
257         case RTE_FLOW_ITEM_TYPE_ARP_ETH_IPV4:
258                 *mask = &rte_flow_item_arp_eth_ipv4_mask;
259                 *size = sizeof(struct rte_flow_item_arp_eth_ipv4);
260                 return 1;
261
262         case RTE_FLOW_ITEM_TYPE_IPV6_EXT:
263                 *mask = &rte_flow_item_ipv6_ext_mask;
264                 *size = sizeof(struct rte_flow_item_ipv6_ext);
265                 return 1;
266
267         case RTE_FLOW_ITEM_TYPE_ICMP6:
268                 *mask = &rte_flow_item_icmp6_mask;
269                 *size = sizeof(struct rte_flow_item_icmp6);
270                 return 1;
271
272         case RTE_FLOW_ITEM_TYPE_ICMP6_ND_NS:
273                 *mask = &rte_flow_item_icmp6_nd_ns_mask;
274                 *size = sizeof(struct rte_flow_item_icmp6_nd_ns);
275                 return 1;
276
277         case RTE_FLOW_ITEM_TYPE_ICMP6_ND_NA:
278                 *mask = &rte_flow_item_icmp6_nd_na_mask;
279                 *size = sizeof(struct rte_flow_item_icmp6_nd_na);
280                 return 1;
281
282         case RTE_FLOW_ITEM_TYPE_ICMP6_ND_OPT:
283                 *mask = &rte_flow_item_icmp6_nd_opt_mask;
284                 *size = sizeof(struct rte_flow_item_icmp6_nd_opt);
285                 return 1;
286
287         case RTE_FLOW_ITEM_TYPE_ICMP6_ND_OPT_SLA_ETH:
288                 *mask = &rte_flow_item_icmp6_nd_opt_sla_eth_mask;
289                 *size = sizeof(struct rte_flow_item_icmp6_nd_opt_sla_eth);
290                 return 1;
291
292         case RTE_FLOW_ITEM_TYPE_ICMP6_ND_OPT_TLA_ETH:
293                 *mask = &rte_flow_item_icmp6_nd_opt_tla_eth_mask;
294                 *size = sizeof(struct rte_flow_item_icmp6_nd_opt_tla_eth);
295                 return 1;
296
297         default: return 0; /* FALSE */
298         }
299 }
300
301 static int
302 flow_item_raw_preprocess(const struct rte_flow_item *item,
303         union flow_item *item_spec,
304         union flow_item *item_mask,
305         size_t *item_size,
306         int *item_disabled,
307         struct rte_flow_error *error)
308 {
309         const struct rte_flow_item_raw *item_raw_spec = item->spec;
310         const struct rte_flow_item_raw *item_raw_mask = item->mask;
311         const uint8_t *pattern;
312         const uint8_t *pattern_mask;
313         uint8_t *spec = (uint8_t *)item_spec;
314         uint8_t *mask = (uint8_t *)item_mask;
315         size_t pattern_length, pattern_offset, i;
316         int disabled;
317
318         if (!item->spec)
319                 return rte_flow_error_set(error,
320                         ENOTSUP,
321                         RTE_FLOW_ERROR_TYPE_ITEM,
322                         item,
323                         "RAW: Null specification");
324
325         if (item->last)
326                 return rte_flow_error_set(error,
327                         ENOTSUP,
328                         RTE_FLOW_ERROR_TYPE_ITEM,
329                         item,
330                         "RAW: Range not allowed (last must be NULL)");
331
332         if (item_raw_spec->relative == 0)
333                 return rte_flow_error_set(error,
334                         ENOTSUP,
335                         RTE_FLOW_ERROR_TYPE_ITEM,
336                         item,
337                         "RAW: Absolute offset not supported");
338
339         if (item_raw_spec->search)
340                 return rte_flow_error_set(error,
341                         ENOTSUP,
342                         RTE_FLOW_ERROR_TYPE_ITEM,
343                         item,
344                         "RAW: Search not supported");
345
346         if (item_raw_spec->offset < 0)
347                 return rte_flow_error_set(error,
348                         ENOTSUP, RTE_FLOW_ERROR_TYPE_ITEM,
349                         item,
350                         "RAW: Negative offset not supported");
351
352         if (item_raw_spec->length == 0)
353                 return rte_flow_error_set(error,
354                         ENOTSUP,
355                         RTE_FLOW_ERROR_TYPE_ITEM,
356                         item,
357                         "RAW: Zero pattern length");
358
359         if (item_raw_spec->offset + item_raw_spec->length >
360                 TABLE_RULE_MATCH_SIZE_MAX)
361                 return rte_flow_error_set(error,
362                         ENOTSUP,
363                         RTE_FLOW_ERROR_TYPE_ITEM,
364                         item,
365                         "RAW: Item too big");
366
367         if (!item_raw_spec->pattern && item_raw_mask && item_raw_mask->pattern)
368                 return rte_flow_error_set(error,
369                         ENOTSUP,
370                         RTE_FLOW_ERROR_TYPE_ITEM,
371                         item,
372                         "RAW: Non-NULL pattern mask not allowed with NULL pattern");
373
374         pattern = item_raw_spec->pattern;
375         pattern_mask = (item_raw_mask) ? item_raw_mask->pattern : NULL;
376         pattern_length = (size_t)item_raw_spec->length;
377         pattern_offset = (size_t)item_raw_spec->offset;
378
379         disabled = 0;
380         if (pattern_mask == NULL)
381                 disabled = 1;
382         else
383                 for (i = 0; i < pattern_length; i++)
384                         if ((pattern)[i])
385                                 disabled = 1;
386
387         memset(spec, 0, TABLE_RULE_MATCH_SIZE_MAX);
388         if (pattern)
389                 memcpy(&spec[pattern_offset], pattern, pattern_length);
390
391         memset(mask, 0, TABLE_RULE_MATCH_SIZE_MAX);
392         if (pattern_mask)
393                 memcpy(&mask[pattern_offset], pattern_mask, pattern_length);
394
395         *item_size = pattern_offset + pattern_length;
396         *item_disabled = disabled;
397
398         return 0;
399 }
400
401 static int
402 flow_item_proto_preprocess(const struct rte_flow_item *item,
403         union flow_item *item_spec,
404         union flow_item *item_mask,
405         size_t *item_size,
406         int *item_disabled,
407         struct rte_flow_error *error)
408 {
409         const void *mask_default;
410         uint8_t *spec = (uint8_t *)item_spec;
411         uint8_t *mask = (uint8_t *)item_mask;
412         size_t size, i;
413
414         if (!flow_item_is_proto(item->type, &mask_default, &size))
415                 return rte_flow_error_set(error,
416                         ENOTSUP,
417                         RTE_FLOW_ERROR_TYPE_ITEM,
418                         item,
419                         "Item type not supported");
420
421         if (item->type == RTE_FLOW_ITEM_TYPE_RAW)
422                 return flow_item_raw_preprocess(item,
423                         item_spec,
424                         item_mask,
425                         item_size,
426                         item_disabled,
427                         error);
428
429         /* spec */
430         if (!item->spec) {
431                 /* If spec is NULL, then last and mask also have to be NULL. */
432                 if (item->last || item->mask)
433                         return rte_flow_error_set(error,
434                                 EINVAL,
435                                 RTE_FLOW_ERROR_TYPE_ITEM,
436                                 item,
437                                 "Invalid item (NULL spec with non-NULL last or mask)");
438
439                 memset(item_spec, 0, size);
440                 memset(item_mask, 0, size);
441                 *item_size = size;
442                 *item_disabled = 1; /* TRUE */
443                 return 0;
444         }
445
446         memcpy(spec, item->spec, size);
447         *item_size = size;
448
449         /* mask */
450         if (item->mask)
451                 memcpy(mask, item->mask, size);
452         else
453                 memcpy(mask, mask_default, size);
454
455         /* disabled */
456         for (i = 0; i < size; i++)
457                 if (mask[i])
458                         break;
459         *item_disabled = (i == size) ? 1 : 0;
460
461         /* Apply mask over spec. */
462         for (i = 0; i < size; i++)
463                 spec[i] &= mask[i];
464
465         /* last */
466         if (item->last) {
467                 uint8_t last[size];
468
469                 /* init last */
470                 memcpy(last, item->last, size);
471                 for (i = 0; i < size; i++)
472                         last[i] &= mask[i];
473
474                 /* check for range */
475                 for (i = 0; i < size; i++)
476                         if (last[i] != spec[i])
477                                 return rte_flow_error_set(error,
478                                         ENOTSUP,
479                                         RTE_FLOW_ERROR_TYPE_ITEM,
480                                         item,
481                                         "Range not supported");
482         }
483
484         return 0;
485 }
486
487 /***
488  * Skip disabled protocol items and VOID items
489  * until any of the mutually exclusive conditions
490  * from the list below takes place:
491  *    (A) A protocol present in the proto_mask
492  *        is met (either ENABLED or DISABLED);
493  *    (B) A protocol NOT present in the proto_mask is met in ENABLED state;
494  *    (C) The END item is met.
495  */
496 static int
497 flow_item_skip_disabled_protos(const struct rte_flow_item **item,
498         uint64_t proto_mask,
499         size_t *length,
500         struct rte_flow_error *error)
501 {
502         size_t len = 0;
503
504         for ( ; (*item)->type != RTE_FLOW_ITEM_TYPE_END; (*item)++) {
505                 union flow_item spec, mask;
506                 size_t size;
507                 int disabled = 0, status;
508
509                 if ((*item)->type == RTE_FLOW_ITEM_TYPE_VOID)
510                         continue;
511
512                 status = flow_item_proto_preprocess(*item,
513                                 &spec,
514                                 &mask,
515                                 &size,
516                                 &disabled,
517                                 error);
518                 if (status)
519                         return status;
520
521                 if ((proto_mask & (1LLU << (*item)->type)) ||
522                                 !disabled)
523                         break;
524
525                 len += size;
526         }
527
528         if (length)
529                 *length = len;
530
531         return 0;
532 }
533
534 #define FLOW_ITEM_PROTO_IP \
535         ((1LLU << RTE_FLOW_ITEM_TYPE_IPV4) | \
536          (1LLU << RTE_FLOW_ITEM_TYPE_IPV6))
537
538 static void
539 flow_item_skip_void(const struct rte_flow_item **item)
540 {
541         for ( ; ; (*item)++)
542                 if ((*item)->type != RTE_FLOW_ITEM_TYPE_VOID)
543                         return;
544 }
545
546 #define IP_PROTOCOL_TCP 0x06
547 #define IP_PROTOCOL_UDP 0x11
548 #define IP_PROTOCOL_SCTP 0x84
549
550 static int
551 mask_to_depth(uint64_t mask,
552                 uint32_t *depth)
553 {
554         uint64_t n;
555
556         if (mask == UINT64_MAX) {
557                 if (depth)
558                         *depth = 64;
559
560                 return 0;
561         }
562
563         mask = ~mask;
564
565         if (mask & (mask + 1))
566                 return -1;
567
568         n = __builtin_popcountll(mask);
569         if (depth)
570                 *depth = (uint32_t)(64 - n);
571
572         return 0;
573 }
574
575 static int
576 ipv4_mask_to_depth(uint32_t mask,
577                 uint32_t *depth)
578 {
579         uint32_t d;
580         int status;
581
582         status = mask_to_depth(mask | (UINT64_MAX << 32), &d);
583         if (status)
584                 return status;
585
586         d -= 32;
587         if (depth)
588                 *depth = d;
589
590         return 0;
591 }
592
593 static int
594 ipv6_mask_to_depth(uint8_t *mask,
595         uint32_t *depth)
596 {
597         uint64_t *m = (uint64_t *)mask;
598         uint64_t m0 = rte_be_to_cpu_64(m[0]);
599         uint64_t m1 = rte_be_to_cpu_64(m[1]);
600         uint32_t d0, d1;
601         int status;
602
603         status = mask_to_depth(m0, &d0);
604         if (status)
605                 return status;
606
607         status = mask_to_depth(m1, &d1);
608         if (status)
609                 return status;
610
611         if (d0 < 64 && d1)
612                 return -1;
613
614         if (depth)
615                 *depth = d0 + d1;
616
617         return 0;
618 }
619
620 static int
621 port_mask_to_range(uint16_t port,
622         uint16_t port_mask,
623         uint16_t *port0,
624         uint16_t *port1)
625 {
626         int status;
627         uint16_t p0, p1;
628
629         status = mask_to_depth(port_mask | (UINT64_MAX << 16), NULL);
630         if (status)
631                 return -1;
632
633         p0 = port & port_mask;
634         p1 = p0 | ~port_mask;
635
636         if (port0)
637                 *port0 = p0;
638
639         if (port1)
640                 *port1 = p1;
641
642         return 0;
643 }
644
645 static int
646 flow_rule_match_acl_get(struct pmd_internals *softnic __rte_unused,
647                 struct pipeline *pipeline __rte_unused,
648                 struct softnic_table *table __rte_unused,
649                 const struct rte_flow_attr *attr,
650                 const struct rte_flow_item *item,
651                 struct softnic_table_rule_match *rule_match,
652                 struct rte_flow_error *error)
653 {
654         union flow_item spec, mask;
655         size_t size, length = 0;
656         int disabled = 0, status;
657         uint8_t ip_proto, ip_proto_mask;
658
659         memset(rule_match, 0, sizeof(*rule_match));
660         rule_match->match_type = TABLE_ACL;
661         rule_match->match.acl.priority = attr->priority;
662
663         /* VOID or disabled protos only, if any. */
664         status = flow_item_skip_disabled_protos(&item,
665                         FLOW_ITEM_PROTO_IP, &length, error);
666         if (status)
667                 return status;
668
669         /* IP only. */
670         status = flow_item_proto_preprocess(item, &spec, &mask,
671                         &size, &disabled, error);
672         if (status)
673                 return status;
674
675         switch (item->type) {
676         case RTE_FLOW_ITEM_TYPE_IPV4:
677         {
678                 uint32_t sa_depth, da_depth;
679
680                 status = ipv4_mask_to_depth(rte_ntohl(mask.ipv4.hdr.src_addr),
681                                 &sa_depth);
682                 if (status)
683                         return rte_flow_error_set(error,
684                                 EINVAL,
685                                 RTE_FLOW_ERROR_TYPE_ITEM,
686                                 item,
687                                 "ACL: Illegal IPv4 header source address mask");
688
689                 status = ipv4_mask_to_depth(rte_ntohl(mask.ipv4.hdr.dst_addr),
690                                 &da_depth);
691                 if (status)
692                         return rte_flow_error_set(error,
693                                 EINVAL,
694                                 RTE_FLOW_ERROR_TYPE_ITEM,
695                                 item,
696                                 "ACL: Illegal IPv4 header destination address mask");
697
698                 ip_proto = spec.ipv4.hdr.next_proto_id;
699                 ip_proto_mask = mask.ipv4.hdr.next_proto_id;
700
701                 rule_match->match.acl.ip_version = 1;
702                 rule_match->match.acl.ipv4.sa =
703                         rte_ntohl(spec.ipv4.hdr.src_addr);
704                 rule_match->match.acl.ipv4.da =
705                         rte_ntohl(spec.ipv4.hdr.dst_addr);
706                 rule_match->match.acl.sa_depth = sa_depth;
707                 rule_match->match.acl.da_depth = da_depth;
708                 rule_match->match.acl.proto = ip_proto;
709                 rule_match->match.acl.proto_mask = ip_proto_mask;
710                 break;
711         } /* RTE_FLOW_ITEM_TYPE_IPV4 */
712
713         case RTE_FLOW_ITEM_TYPE_IPV6:
714         {
715                 uint32_t sa_depth, da_depth;
716
717                 status = ipv6_mask_to_depth(mask.ipv6.hdr.src_addr, &sa_depth);
718                 if (status)
719                         return rte_flow_error_set(error,
720                                 EINVAL,
721                                 RTE_FLOW_ERROR_TYPE_ITEM,
722                                 item,
723                                 "ACL: Illegal IPv6 header source address mask");
724
725                 status = ipv6_mask_to_depth(mask.ipv6.hdr.dst_addr, &da_depth);
726                 if (status)
727                         return rte_flow_error_set(error,
728                                 EINVAL,
729                                 RTE_FLOW_ERROR_TYPE_ITEM,
730                                 item,
731                                 "ACL: Illegal IPv6 header destination address mask");
732
733                 ip_proto = spec.ipv6.hdr.proto;
734                 ip_proto_mask = mask.ipv6.hdr.proto;
735
736                 rule_match->match.acl.ip_version = 0;
737                 memcpy(rule_match->match.acl.ipv6.sa,
738                         spec.ipv6.hdr.src_addr,
739                         sizeof(spec.ipv6.hdr.src_addr));
740                 memcpy(rule_match->match.acl.ipv6.da,
741                         spec.ipv6.hdr.dst_addr,
742                         sizeof(spec.ipv6.hdr.dst_addr));
743                 rule_match->match.acl.sa_depth = sa_depth;
744                 rule_match->match.acl.da_depth = da_depth;
745                 rule_match->match.acl.proto = ip_proto;
746                 rule_match->match.acl.proto_mask = ip_proto_mask;
747                 break;
748         } /* RTE_FLOW_ITEM_TYPE_IPV6 */
749
750         default:
751                 return rte_flow_error_set(error,
752                         ENOTSUP,
753                         RTE_FLOW_ERROR_TYPE_ITEM,
754                         item,
755                         "ACL: IP protocol required");
756         } /* switch */
757
758         if (ip_proto_mask != UINT8_MAX)
759                 return rte_flow_error_set(error,
760                         EINVAL,
761                         RTE_FLOW_ERROR_TYPE_ITEM,
762                         item,
763                         "ACL: Illegal IP protocol mask");
764
765         item++;
766
767         /* VOID only, if any. */
768         flow_item_skip_void(&item);
769
770         /* TCP/UDP/SCTP only. */
771         status = flow_item_proto_preprocess(item, &spec, &mask,
772                         &size, &disabled, error);
773         if (status)
774                 return status;
775
776         switch (item->type) {
777         case RTE_FLOW_ITEM_TYPE_TCP:
778         {
779                 uint16_t sp0, sp1, dp0, dp1;
780
781                 if (ip_proto != IP_PROTOCOL_TCP)
782                         return rte_flow_error_set(error,
783                                 EINVAL,
784                                 RTE_FLOW_ERROR_TYPE_ITEM,
785                                 item,
786                                 "ACL: Item type is TCP, but IP protocol is not");
787
788                 status = port_mask_to_range(rte_ntohs(spec.tcp.hdr.src_port),
789                                 rte_ntohs(mask.tcp.hdr.src_port),
790                                 &sp0,
791                                 &sp1);
792
793                 if (status)
794                         return rte_flow_error_set(error,
795                                 EINVAL,
796                                 RTE_FLOW_ERROR_TYPE_ITEM,
797                                 item,
798                                 "ACL: Illegal TCP source port mask");
799
800                 status = port_mask_to_range(rte_ntohs(spec.tcp.hdr.dst_port),
801                                 rte_ntohs(mask.tcp.hdr.dst_port),
802                                 &dp0,
803                                 &dp1);
804
805                 if (status)
806                         return rte_flow_error_set(error,
807                                 EINVAL,
808                                 RTE_FLOW_ERROR_TYPE_ITEM,
809                                 item,
810                                 "ACL: Illegal TCP destination port mask");
811
812                 rule_match->match.acl.sp0 = sp0;
813                 rule_match->match.acl.sp1 = sp1;
814                 rule_match->match.acl.dp0 = dp0;
815                 rule_match->match.acl.dp1 = dp1;
816
817                 break;
818         } /* RTE_FLOW_ITEM_TYPE_TCP */
819
820         case RTE_FLOW_ITEM_TYPE_UDP:
821         {
822                 uint16_t sp0, sp1, dp0, dp1;
823
824                 if (ip_proto != IP_PROTOCOL_UDP)
825                         return rte_flow_error_set(error,
826                                 EINVAL,
827                                 RTE_FLOW_ERROR_TYPE_ITEM,
828                                 item,
829                                 "ACL: Item type is UDP, but IP protocol is not");
830
831                 status = port_mask_to_range(rte_ntohs(spec.udp.hdr.src_port),
832                         rte_ntohs(mask.udp.hdr.src_port),
833                         &sp0,
834                         &sp1);
835                 if (status)
836                         return rte_flow_error_set(error,
837                                 EINVAL,
838                                 RTE_FLOW_ERROR_TYPE_ITEM,
839                                 item,
840                                 "ACL: Illegal UDP source port mask");
841
842                 status = port_mask_to_range(rte_ntohs(spec.udp.hdr.dst_port),
843                         rte_ntohs(mask.udp.hdr.dst_port),
844                         &dp0,
845                         &dp1);
846                 if (status)
847                         return rte_flow_error_set(error,
848                                 EINVAL,
849                                 RTE_FLOW_ERROR_TYPE_ITEM,
850                                 item,
851                                 "ACL: Illegal UDP destination port mask");
852
853                 rule_match->match.acl.sp0 = sp0;
854                 rule_match->match.acl.sp1 = sp1;
855                 rule_match->match.acl.dp0 = dp0;
856                 rule_match->match.acl.dp1 = dp1;
857
858                 break;
859         } /* RTE_FLOW_ITEM_TYPE_UDP */
860
861         case RTE_FLOW_ITEM_TYPE_SCTP:
862         {
863                 uint16_t sp0, sp1, dp0, dp1;
864
865                 if (ip_proto != IP_PROTOCOL_SCTP)
866                         return rte_flow_error_set(error,
867                                 EINVAL,
868                                 RTE_FLOW_ERROR_TYPE_ITEM,
869                                 item,
870                                 "ACL: Item type is SCTP, but IP protocol is not");
871
872                 status = port_mask_to_range(rte_ntohs(spec.sctp.hdr.src_port),
873                         rte_ntohs(mask.sctp.hdr.src_port),
874                         &sp0,
875                         &sp1);
876
877                 if (status)
878                         return rte_flow_error_set(error,
879                                 EINVAL,
880                                 RTE_FLOW_ERROR_TYPE_ITEM,
881                                 item,
882                                 "ACL: Illegal SCTP source port mask");
883
884                 status = port_mask_to_range(rte_ntohs(spec.sctp.hdr.dst_port),
885                         rte_ntohs(mask.sctp.hdr.dst_port),
886                         &dp0,
887                         &dp1);
888                 if (status)
889                         return rte_flow_error_set(error,
890                                 EINVAL,
891                                 RTE_FLOW_ERROR_TYPE_ITEM,
892                                 item,
893                                 "ACL: Illegal SCTP destination port mask");
894
895                 rule_match->match.acl.sp0 = sp0;
896                 rule_match->match.acl.sp1 = sp1;
897                 rule_match->match.acl.dp0 = dp0;
898                 rule_match->match.acl.dp1 = dp1;
899
900                 break;
901         } /* RTE_FLOW_ITEM_TYPE_SCTP */
902
903         default:
904                 return rte_flow_error_set(error,
905                         ENOTSUP,
906                         RTE_FLOW_ERROR_TYPE_ITEM,
907                         item,
908                         "ACL: TCP/UDP/SCTP required");
909         } /* switch */
910
911         item++;
912
913         /* VOID or disabled protos only, if any. */
914         status = flow_item_skip_disabled_protos(&item, 0, NULL, error);
915         if (status)
916                 return status;
917
918         /* END only. */
919         if (item->type != RTE_FLOW_ITEM_TYPE_END)
920                 return rte_flow_error_set(error,
921                         EINVAL,
922                         RTE_FLOW_ERROR_TYPE_ITEM,
923                         item,
924                         "ACL: Expecting END item");
925
926         return 0;
927 }
928
929 /***
930  * Both *tmask* and *fmask* are byte arrays of size *tsize* and *fsize*
931  * respectively.
932  * They are located within a larger buffer at offsets *toffset* and *foffset*
933  * respectivelly. Both *tmask* and *fmask* represent bitmasks for the larger
934  * buffer.
935  * Question: are the two masks equivalent?
936  *
937  * Notes:
938  * 1. Offset basically indicates that the first offset bytes in the buffer
939  *    are "don't care", so offset is equivalent to pre-pending an "all-zeros"
940  *    array of *offset* bytes to the *mask*.
941  * 2. Each *mask* might contain a number of zero bytes at the beginning or
942  *    at the end.
943  * 3. Bytes in the larger buffer after the end of the *mask* are also considered
944  *    "don't care", so they are equivalent to appending an "all-zeros" array of
945  *    bytes to the *mask*.
946  *
947  * Example:
948  * Buffer = [xx xx xx xx xx xx xx xx], buffer size = 8 bytes
949  * tmask = [00 22 00 33 00], toffset = 2, tsize = 5
950  *    => buffer mask = [00 00 00 22 00 33 00 00]
951  * fmask = [22 00 33], foffset = 3, fsize = 3 =>
952  *    => buffer mask = [00 00 00 22 00 33 00 00]
953  * Therefore, the tmask and fmask from this example are equivalent.
954  */
955 static int
956 hash_key_mask_is_same(uint8_t *tmask,
957         size_t toffset,
958         size_t tsize,
959         uint8_t *fmask,
960         size_t foffset,
961         size_t fsize,
962         size_t *toffset_plus,
963         size_t *foffset_plus)
964 {
965         size_t tpos; /* Position of first non-zero byte in the tmask buffer. */
966         size_t fpos; /* Position of first non-zero byte in the fmask buffer. */
967
968         /* Compute tpos and fpos. */
969         for (tpos = 0; tmask[tpos] == 0; tpos++)
970                 ;
971         for (fpos = 0; fmask[fpos] == 0; fpos++)
972                 ;
973
974         if (toffset + tpos != foffset + fpos)
975                 return 0; /* FALSE */
976
977         tsize -= tpos;
978         fsize -= fpos;
979
980         if (tsize < fsize) {
981                 size_t i;
982
983                 for (i = 0; i < tsize; i++)
984                         if (tmask[tpos + i] != fmask[fpos + i])
985                                 return 0; /* FALSE */
986
987                 for ( ; i < fsize; i++)
988                         if (fmask[fpos + i])
989                                 return 0; /* FALSE */
990         } else {
991                 size_t i;
992
993                 for (i = 0; i < fsize; i++)
994                         if (tmask[tpos + i] != fmask[fpos + i])
995                                 return 0; /* FALSE */
996
997                 for ( ; i < tsize; i++)
998                         if (tmask[tpos + i])
999                                 return 0; /* FALSE */
1000         }
1001
1002         if (toffset_plus)
1003                 *toffset_plus = tpos;
1004
1005         if (foffset_plus)
1006                 *foffset_plus = fpos;
1007
1008         return 1; /* TRUE */
1009 }
1010
1011 static int
1012 flow_rule_match_hash_get(struct pmd_internals *softnic __rte_unused,
1013         struct pipeline *pipeline __rte_unused,
1014         struct softnic_table *table,
1015         const struct rte_flow_attr *attr __rte_unused,
1016         const struct rte_flow_item *item,
1017         struct softnic_table_rule_match *rule_match,
1018         struct rte_flow_error *error)
1019 {
1020         struct softnic_table_rule_match_hash key, key_mask;
1021         struct softnic_table_hash_params *params = &table->params.match.hash;
1022         size_t offset = 0, length = 0, tpos, fpos;
1023         int status;
1024
1025         memset(&key, 0, sizeof(key));
1026         memset(&key_mask, 0, sizeof(key_mask));
1027
1028         /* VOID or disabled protos only, if any. */
1029         status = flow_item_skip_disabled_protos(&item, 0, &offset, error);
1030         if (status)
1031                 return status;
1032
1033         if (item->type == RTE_FLOW_ITEM_TYPE_END)
1034                 return rte_flow_error_set(error,
1035                         EINVAL,
1036                         RTE_FLOW_ERROR_TYPE_ITEM,
1037                         item,
1038                         "HASH: END detected too early");
1039
1040         /* VOID or any protocols (enabled or disabled). */
1041         for ( ; item->type != RTE_FLOW_ITEM_TYPE_END; item++) {
1042                 union flow_item spec, mask;
1043                 size_t size;
1044                 int disabled, status;
1045
1046                 if (item->type == RTE_FLOW_ITEM_TYPE_VOID)
1047                         continue;
1048
1049                 status = flow_item_proto_preprocess(item,
1050                         &spec,
1051                         &mask,
1052                         &size,
1053                         &disabled,
1054                         error);
1055                 if (status)
1056                         return status;
1057
1058                 if (length + size > sizeof(key)) {
1059                         if (disabled)
1060                                 break;
1061
1062                         return rte_flow_error_set(error,
1063                                 ENOTSUP,
1064                                 RTE_FLOW_ERROR_TYPE_ITEM,
1065                                 item,
1066                                 "HASH: Item too big");
1067                 }
1068
1069                 memcpy(&key.key[length], &spec, size);
1070                 memcpy(&key_mask.key[length], &mask, size);
1071                 length += size;
1072         }
1073
1074         if (item->type != RTE_FLOW_ITEM_TYPE_END) {
1075                 /* VOID or disabled protos only, if any. */
1076                 status = flow_item_skip_disabled_protos(&item, 0, NULL, error);
1077                 if (status)
1078                         return status;
1079
1080                 /* END only. */
1081                 if (item->type != RTE_FLOW_ITEM_TYPE_END)
1082                         return rte_flow_error_set(error,
1083                                 EINVAL,
1084                                 RTE_FLOW_ERROR_TYPE_ITEM,
1085                                 item,
1086                                 "HASH: Expecting END item");
1087         }
1088
1089         /* Compare flow key mask against table key mask. */
1090         offset += sizeof(struct rte_mbuf) + RTE_PKTMBUF_HEADROOM;
1091
1092         if (!hash_key_mask_is_same(params->key_mask,
1093                 params->key_offset,
1094                 params->key_size,
1095                 key_mask.key,
1096                 offset,
1097                 length,
1098                 &tpos,
1099                 &fpos))
1100                 return rte_flow_error_set(error,
1101                         EINVAL,
1102                         RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
1103                         NULL,
1104                         "HASH: Item list is not observing the match format");
1105
1106         /* Rule match. */
1107         memset(rule_match, 0, sizeof(*rule_match));
1108         rule_match->match_type = TABLE_HASH;
1109         memcpy(&rule_match->match.hash.key[tpos],
1110                 &key.key[fpos],
1111                 RTE_MIN(sizeof(rule_match->match.hash.key) - tpos,
1112                         length - fpos));
1113
1114         return 0;
1115 }
1116
1117 static int
1118 flow_rule_match_get(struct pmd_internals *softnic,
1119                 struct pipeline *pipeline,
1120                 struct softnic_table *table,
1121                 const struct rte_flow_attr *attr,
1122                 const struct rte_flow_item *item,
1123                 struct softnic_table_rule_match *rule_match,
1124                 struct rte_flow_error *error)
1125 {
1126         switch (table->params.match_type) {
1127         case TABLE_ACL:
1128                 return flow_rule_match_acl_get(softnic,
1129                         pipeline,
1130                         table,
1131                         attr,
1132                         item,
1133                         rule_match,
1134                         error);
1135
1136                 /* FALLTHROUGH */
1137
1138         case TABLE_HASH:
1139                 return flow_rule_match_hash_get(softnic,
1140                         pipeline,
1141                         table,
1142                         attr,
1143                         item,
1144                         rule_match,
1145                         error);
1146
1147                 /* FALLTHROUGH */
1148
1149         default:
1150                 return rte_flow_error_set(error,
1151                         ENOTSUP,
1152                         RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
1153                         NULL,
1154                         "Unsupported pipeline table match type");
1155         }
1156 }
1157
1158 static int
1159 flow_rule_action_get(struct pmd_internals *softnic,
1160         struct pipeline *pipeline,
1161         struct softnic_table *table,
1162         const struct rte_flow_attr *attr,
1163         const struct rte_flow_action *action,
1164         struct softnic_table_rule_action *rule_action,
1165         struct rte_flow_error *error)
1166 {
1167         struct softnic_table_action_profile *profile;
1168         struct softnic_table_action_profile_params *params;
1169         int n_jump_queue_rss_drop = 0;
1170         int n_count = 0;
1171
1172         profile = softnic_table_action_profile_find(softnic,
1173                 table->params.action_profile_name);
1174         if (profile == NULL)
1175                 return rte_flow_error_set(error,
1176                         EINVAL,
1177                         RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
1178                         action,
1179                         "JUMP: Table action profile");
1180
1181         params = &profile->params;
1182
1183         for ( ; action->type != RTE_FLOW_ACTION_TYPE_END; action++) {
1184                 if (action->type == RTE_FLOW_ACTION_TYPE_VOID)
1185                         continue;
1186
1187                 switch (action->type) {
1188                 case RTE_FLOW_ACTION_TYPE_JUMP:
1189                 {
1190                         const struct rte_flow_action_jump *conf = action->conf;
1191                         struct flow_attr_map *map;
1192
1193                         if (conf == NULL)
1194                                 return rte_flow_error_set(error,
1195                                         EINVAL,
1196                                         RTE_FLOW_ERROR_TYPE_ACTION,
1197                                         action,
1198                                         "JUMP: Null configuration");
1199
1200                         if (n_jump_queue_rss_drop)
1201                                 return rte_flow_error_set(error,
1202                                         EINVAL,
1203                                         RTE_FLOW_ERROR_TYPE_ACTION,
1204                                         action,
1205                                         "Only one termination action is"
1206                                         " allowed per flow");
1207
1208                         if ((params->action_mask &
1209                                 (1LLU << RTE_TABLE_ACTION_FWD)) == 0)
1210                                 return rte_flow_error_set(error,
1211                                         EINVAL,
1212                                         RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
1213                                         NULL,
1214                                         "JUMP action not enabled for this table");
1215
1216                         n_jump_queue_rss_drop = 1;
1217
1218                         map = flow_attr_map_get(softnic,
1219                                 conf->group,
1220                                 attr->ingress);
1221                         if (map == NULL || map->valid == 0)
1222                                 return rte_flow_error_set(error,
1223                                         EINVAL,
1224                                         RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
1225                                         NULL,
1226                                         "JUMP: Invalid group mapping");
1227
1228                         if (strcmp(pipeline->name, map->pipeline_name) != 0)
1229                                 return rte_flow_error_set(error,
1230                                         ENOTSUP,
1231                                         RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
1232                                         NULL,
1233                                         "JUMP: Jump to table in different pipeline");
1234
1235                         /* RTE_TABLE_ACTION_FWD */
1236                         rule_action->fwd.action = RTE_PIPELINE_ACTION_TABLE;
1237                         rule_action->fwd.id = map->table_id;
1238                         rule_action->action_mask |= 1 << RTE_TABLE_ACTION_FWD;
1239                         break;
1240                 } /* RTE_FLOW_ACTION_TYPE_JUMP */
1241
1242                 case RTE_FLOW_ACTION_TYPE_QUEUE:
1243                 {
1244                         char name[NAME_SIZE];
1245                         struct rte_eth_dev *dev;
1246                         const struct rte_flow_action_queue *conf = action->conf;
1247                         uint32_t port_id;
1248                         int status;
1249
1250                         if (conf == NULL)
1251                                 return rte_flow_error_set(error,
1252                                         EINVAL,
1253                                         RTE_FLOW_ERROR_TYPE_ACTION,
1254                                         action,
1255                                         "QUEUE: Null configuration");
1256
1257                         if (n_jump_queue_rss_drop)
1258                                 return rte_flow_error_set(error,
1259                                         EINVAL,
1260                                         RTE_FLOW_ERROR_TYPE_ACTION,
1261                                         action,
1262                                         "Only one termination action is allowed"
1263                                         " per flow");
1264
1265                         if ((params->action_mask &
1266                                 (1LLU << RTE_TABLE_ACTION_FWD)) == 0)
1267                                 return rte_flow_error_set(error,
1268                                         EINVAL,
1269                                         RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
1270                                         NULL,
1271                                         "QUEUE action not enabled for this table");
1272
1273                         n_jump_queue_rss_drop = 1;
1274
1275                         dev = ETHDEV(softnic);
1276                         if (dev == NULL ||
1277                                 conf->index >= dev->data->nb_rx_queues)
1278                                 return rte_flow_error_set(error,
1279                                         EINVAL,
1280                                         RTE_FLOW_ERROR_TYPE_ACTION,
1281                                         action,
1282                                         "QUEUE: Invalid RX queue ID");
1283
1284                         sprintf(name, "RXQ%u", (uint32_t)conf->index);
1285
1286                         status = softnic_pipeline_port_out_find(softnic,
1287                                 pipeline->name,
1288                                 name,
1289                                 &port_id);
1290                         if (status)
1291                                 return rte_flow_error_set(error,
1292                                         ENOTSUP,
1293                                         RTE_FLOW_ERROR_TYPE_ACTION,
1294                                         action,
1295                                         "QUEUE: RX queue not accessible from this pipeline");
1296
1297                         /* RTE_TABLE_ACTION_FWD */
1298                         rule_action->fwd.action = RTE_PIPELINE_ACTION_PORT;
1299                         rule_action->fwd.id = port_id;
1300                         rule_action->action_mask |= 1 << RTE_TABLE_ACTION_FWD;
1301                         break;
1302                 } /*RTE_FLOW_ACTION_TYPE_QUEUE */
1303
1304                 case RTE_FLOW_ACTION_TYPE_RSS:
1305                 {
1306                         const struct rte_flow_action_rss *conf = action->conf;
1307                         uint32_t i;
1308
1309                         if (conf == NULL)
1310                                 return rte_flow_error_set(error,
1311                                         EINVAL,
1312                                         RTE_FLOW_ERROR_TYPE_ACTION,
1313                                         action,
1314                                         "RSS: Null configuration");
1315
1316                         if (!rte_is_power_of_2(conf->queue_num))
1317                                 return rte_flow_error_set(error,
1318                                         EINVAL,
1319                                         RTE_FLOW_ERROR_TYPE_ACTION_CONF,
1320                                         conf,
1321                                         "RSS: Number of queues must be a power of 2");
1322
1323                         if (conf->queue_num > RTE_DIM(rule_action->lb.out))
1324                                 return rte_flow_error_set(error,
1325                                         EINVAL,
1326                                         RTE_FLOW_ERROR_TYPE_ACTION_CONF,
1327                                         conf,
1328                                         "RSS: Number of queues too big");
1329
1330                         if (n_jump_queue_rss_drop)
1331                                 return rte_flow_error_set(error,
1332                                         EINVAL,
1333                                         RTE_FLOW_ERROR_TYPE_ACTION,
1334                                         action,
1335                                         "Only one termination action is allowed per flow");
1336
1337                         if (((params->action_mask &
1338                                 (1LLU << RTE_TABLE_ACTION_FWD)) == 0) ||
1339                                 ((params->action_mask &
1340                                 (1LLU << RTE_TABLE_ACTION_LB)) == 0))
1341                                 return rte_flow_error_set(error,
1342                                         ENOTSUP,
1343                                         RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
1344                                         NULL,
1345                                         "RSS action not supported by this table");
1346
1347                         if (params->lb.out_offset !=
1348                                 pipeline->params.offset_port_id)
1349                                 return rte_flow_error_set(error,
1350                                         EINVAL,
1351                                         RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
1352                                         NULL,
1353                                         "RSS action not supported by this pipeline");
1354
1355                         n_jump_queue_rss_drop = 1;
1356
1357                         /* RTE_TABLE_ACTION_LB */
1358                         for (i = 0; i < conf->queue_num; i++) {
1359                                 char name[NAME_SIZE];
1360                                 struct rte_eth_dev *dev;
1361                                 uint32_t port_id;
1362                                 int status;
1363
1364                                 dev = ETHDEV(softnic);
1365                                 if (dev == NULL ||
1366                                         conf->queue[i] >=
1367                                                 dev->data->nb_rx_queues)
1368                                         return rte_flow_error_set(error,
1369                                                 EINVAL,
1370                                                 RTE_FLOW_ERROR_TYPE_ACTION,
1371                                                 action,
1372                                                 "RSS: Invalid RX queue ID");
1373
1374                                 sprintf(name, "RXQ%u",
1375                                         (uint32_t)conf->queue[i]);
1376
1377                                 status = softnic_pipeline_port_out_find(softnic,
1378                                         pipeline->name,
1379                                         name,
1380                                         &port_id);
1381                                 if (status)
1382                                         return rte_flow_error_set(error,
1383                                                 ENOTSUP,
1384                                                 RTE_FLOW_ERROR_TYPE_ACTION,
1385                                                 action,
1386                                                 "RSS: RX queue not accessible from this pipeline");
1387
1388                                 rule_action->lb.out[i] = port_id;
1389                         }
1390
1391                         for ( ; i < RTE_DIM(rule_action->lb.out); i++)
1392                                 rule_action->lb.out[i] =
1393                                 rule_action->lb.out[i % conf->queue_num];
1394
1395                         rule_action->action_mask |= 1 << RTE_TABLE_ACTION_LB;
1396
1397                         /* RTE_TABLE_ACTION_FWD */
1398                         rule_action->fwd.action = RTE_PIPELINE_ACTION_PORT_META;
1399                         rule_action->action_mask |= 1 << RTE_TABLE_ACTION_FWD;
1400                         break;
1401                 } /* RTE_FLOW_ACTION_TYPE_RSS */
1402
1403                 case RTE_FLOW_ACTION_TYPE_DROP:
1404                 {
1405                         const void *conf = action->conf;
1406
1407                         if (conf != NULL)
1408                                 return rte_flow_error_set(error,
1409                                         EINVAL,
1410                                         RTE_FLOW_ERROR_TYPE_ACTION,
1411                                         action,
1412                                         "DROP: No configuration required");
1413
1414                         if (n_jump_queue_rss_drop)
1415                                 return rte_flow_error_set(error,
1416                                         EINVAL,
1417                                         RTE_FLOW_ERROR_TYPE_ACTION,
1418                                         action,
1419                                         "Only one termination action is allowed per flow");
1420                         if ((params->action_mask &
1421                                 (1LLU << RTE_TABLE_ACTION_FWD)) == 0)
1422                                 return rte_flow_error_set(error,
1423                                         ENOTSUP,
1424                                         RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
1425                                         NULL,
1426                                         "DROP action not supported by this table");
1427
1428                         n_jump_queue_rss_drop = 1;
1429
1430                         /* RTE_TABLE_ACTION_FWD */
1431                         rule_action->fwd.action = RTE_PIPELINE_ACTION_DROP;
1432                         rule_action->action_mask |= 1 << RTE_TABLE_ACTION_FWD;
1433                         break;
1434                 } /* RTE_FLOW_ACTION_TYPE_DROP */
1435
1436                 case RTE_FLOW_ACTION_TYPE_COUNT:
1437                 {
1438                         const struct rte_flow_action_count *conf = action->conf;
1439
1440                         if (conf == NULL)
1441                                 return rte_flow_error_set(error,
1442                                         EINVAL,
1443                                         RTE_FLOW_ERROR_TYPE_ACTION,
1444                                         action,
1445                                         "COUNT: Null configuration");
1446
1447                         if (conf->shared)
1448                                 return rte_flow_error_set(error,
1449                                         ENOTSUP,
1450                                         RTE_FLOW_ERROR_TYPE_ACTION_CONF,
1451                                         conf,
1452                                         "COUNT: Shared counters not supported");
1453
1454                         if (n_count)
1455                                 return rte_flow_error_set(error,
1456                                         ENOTSUP,
1457                                         RTE_FLOW_ERROR_TYPE_ACTION,
1458                                         action,
1459                                         "Only one COUNT action per flow");
1460
1461                         if ((params->action_mask &
1462                                 (1LLU << RTE_TABLE_ACTION_STATS)) == 0)
1463                                 return rte_flow_error_set(error,
1464                                         ENOTSUP,
1465                                         RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
1466                                         NULL,
1467                                         "COUNT action not supported by this table");
1468
1469                         n_count = 1;
1470
1471                         /* RTE_TABLE_ACTION_STATS */
1472                         rule_action->stats.n_packets = 0;
1473                         rule_action->stats.n_bytes = 0;
1474                         rule_action->action_mask |= 1 << RTE_TABLE_ACTION_STATS;
1475                         break;
1476                 } /* RTE_FLOW_ACTION_TYPE_COUNT */
1477
1478                 case RTE_FLOW_ACTION_TYPE_METER:
1479                 {
1480                         const struct rte_flow_action_meter *conf = action->conf;
1481                         struct softnic_mtr_meter_profile *mp;
1482                         struct softnic_mtr *m;
1483                         uint32_t table_id = table - pipeline->table;
1484                         uint32_t meter_profile_id;
1485                         int status;
1486
1487                         if ((params->action_mask & (1LLU << RTE_TABLE_ACTION_MTR)) == 0)
1488                                 return rte_flow_error_set(error,
1489                                         EINVAL,
1490                                         RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
1491                                         NULL,
1492                                         "METER: Table action not supported");
1493
1494                         if (params->mtr.n_tc != 1)
1495                                 return rte_flow_error_set(error,
1496                                         EINVAL,
1497                                         RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
1498                                         NULL,
1499                                         "METER: Multiple TCs not supported");
1500
1501                         if (conf == NULL)
1502                                 return rte_flow_error_set(error,
1503                                         EINVAL,
1504                                         RTE_FLOW_ERROR_TYPE_ACTION,
1505                                         action,
1506                                         "METER: Null configuration");
1507
1508                         m = softnic_mtr_find(softnic, conf->mtr_id);
1509
1510                         if (m == NULL)
1511                                 return rte_flow_error_set(error,
1512                                         EINVAL,
1513                                         RTE_FLOW_ERROR_TYPE_ACTION_CONF,
1514                                         NULL,
1515                                         "METER: Invalid meter ID");
1516
1517                         if (m->flow)
1518                                 return rte_flow_error_set(error,
1519                                         EINVAL,
1520                                         RTE_FLOW_ERROR_TYPE_ACTION_CONF,
1521                                         NULL,
1522                                         "METER: Meter already attached to a flow");
1523
1524                         meter_profile_id = m->params.meter_profile_id;
1525                         mp = softnic_mtr_meter_profile_find(softnic, meter_profile_id);
1526
1527                         /* Add meter profile to pipeline table */
1528                         if (!softnic_pipeline_table_meter_profile_find(table,
1529                                         meter_profile_id)) {
1530                                 struct rte_table_action_meter_profile profile;
1531
1532                                 memset(&profile, 0, sizeof(profile));
1533                                 profile.alg = RTE_TABLE_ACTION_METER_TRTCM;
1534                                 profile.trtcm.cir = mp->params.trtcm_rfc2698.cir;
1535                                 profile.trtcm.pir = mp->params.trtcm_rfc2698.pir;
1536                                 profile.trtcm.cbs = mp->params.trtcm_rfc2698.cbs;
1537                                 profile.trtcm.pbs = mp->params.trtcm_rfc2698.pbs;
1538
1539                                 status = softnic_pipeline_table_mtr_profile_add(softnic,
1540                                                 pipeline->name,
1541                                                 table_id,
1542                                                 meter_profile_id,
1543                                                 &profile);
1544                                 if (status) {
1545                                         rte_flow_error_set(error,
1546                                                 EINVAL,
1547                                                 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
1548                                                 NULL,
1549                                                 "METER: Table meter profile add failed");
1550                                         return -1;
1551                                 }
1552                         }
1553
1554                         /* RTE_TABLE_ACTION_METER */
1555                         rule_action->mtr.mtr[0].meter_profile_id = meter_profile_id;
1556                         rule_action->mtr.mtr[0].policer[e_RTE_METER_GREEN] =
1557                                 (enum rte_table_action_policer)m->params.action[RTE_MTR_GREEN];
1558                         rule_action->mtr.mtr[0].policer[e_RTE_METER_YELLOW] =
1559                                 (enum rte_table_action_policer)m->params.action[RTE_MTR_YELLOW];
1560                         rule_action->mtr.mtr[0].policer[e_RTE_METER_RED] =
1561                                 (enum rte_table_action_policer)m->params.action[RTE_MTR_RED];
1562                         rule_action->mtr.tc_mask = 1;
1563                         rule_action->action_mask |= 1 << RTE_TABLE_ACTION_MTR;
1564                         break;
1565                 } /* RTE_FLOW_ACTION_TYPE_METER */
1566
1567                 default:
1568                         return -ENOTSUP;
1569                 }
1570         }
1571
1572         if (n_jump_queue_rss_drop == 0)
1573                 return rte_flow_error_set(error,
1574                         EINVAL,
1575                         RTE_FLOW_ERROR_TYPE_ACTION,
1576                         action,
1577                         "Flow does not have any terminating action");
1578
1579         return 0;
1580 }
1581
1582 static int
1583 pmd_flow_validate(struct rte_eth_dev *dev,
1584                 const struct rte_flow_attr *attr,
1585                 const struct rte_flow_item item[],
1586                 const struct rte_flow_action action[],
1587                 struct rte_flow_error *error)
1588 {
1589         struct softnic_table_rule_match rule_match;
1590         struct softnic_table_rule_action rule_action;
1591
1592         struct pmd_internals *softnic = dev->data->dev_private;
1593         struct pipeline *pipeline;
1594         struct softnic_table *table;
1595         const char *pipeline_name = NULL;
1596         uint32_t table_id = 0;
1597         int status;
1598
1599         /* Check input parameters. */
1600         if (attr == NULL)
1601                 return rte_flow_error_set(error,
1602                                 EINVAL,
1603                                 RTE_FLOW_ERROR_TYPE_ATTR,
1604                                 NULL, "Null attr");
1605
1606         if (item == NULL)
1607                 return rte_flow_error_set(error,
1608                                 EINVAL,
1609                                 RTE_FLOW_ERROR_TYPE_ITEM,
1610                                 NULL,
1611                                 "Null item");
1612
1613         if (action == NULL)
1614                 return rte_flow_error_set(error,
1615                                 EINVAL,
1616                                 RTE_FLOW_ERROR_TYPE_ACTION,
1617                                 NULL,
1618                                 "Null action");
1619
1620         /* Identify the pipeline table to add this flow to. */
1621         status = flow_pipeline_table_get(softnic, attr, &pipeline_name,
1622                                         &table_id, error);
1623         if (status)
1624                 return status;
1625
1626         pipeline = softnic_pipeline_find(softnic, pipeline_name);
1627         if (pipeline == NULL)
1628                 return rte_flow_error_set(error,
1629                                 EINVAL,
1630                                 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
1631                                 NULL,
1632                                 "Invalid pipeline name");
1633
1634         if (table_id >= pipeline->n_tables)
1635                 return rte_flow_error_set(error,
1636                                 EINVAL,
1637                                 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
1638                                 NULL,
1639                                 "Invalid pipeline table ID");
1640
1641         table = &pipeline->table[table_id];
1642
1643         /* Rule match. */
1644         memset(&rule_match, 0, sizeof(rule_match));
1645         status = flow_rule_match_get(softnic,
1646                         pipeline,
1647                         table,
1648                         attr,
1649                         item,
1650                         &rule_match,
1651                         error);
1652         if (status)
1653                 return status;
1654
1655         /* Rule action. */
1656         memset(&rule_action, 0, sizeof(rule_action));
1657         status = flow_rule_action_get(softnic,
1658                 pipeline,
1659                 table,
1660                 attr,
1661                 action,
1662                 &rule_action,
1663                 error);
1664         if (status)
1665                 return status;
1666
1667         return 0;
1668 }
1669
1670 static struct softnic_mtr *
1671 flow_action_meter_get(struct pmd_internals *softnic,
1672         const struct rte_flow_action *action)
1673 {
1674         for ( ; action->type != RTE_FLOW_ACTION_TYPE_END; action++)
1675                 if (action->type == RTE_FLOW_ACTION_TYPE_METER) {
1676                         const struct rte_flow_action_meter *conf = action->conf;
1677
1678                         if (conf == NULL)
1679                                 return NULL;
1680
1681                         return softnic_mtr_find(softnic, conf->mtr_id);
1682                 }
1683
1684         return NULL;
1685 }
1686
1687 static void
1688 flow_meter_owner_reset(struct pmd_internals *softnic,
1689         struct rte_flow *flow)
1690 {
1691         struct softnic_mtr_list *ml = &softnic->mtr.mtrs;
1692         struct softnic_mtr *m;
1693
1694         TAILQ_FOREACH(m, ml, node)
1695                 if (m->flow == flow) {
1696                         m->flow = NULL;
1697                         break;
1698                 }
1699 }
1700
1701 static void
1702 flow_meter_owner_set(struct pmd_internals *softnic,
1703         struct rte_flow *flow,
1704         struct softnic_mtr *mtr)
1705 {
1706         /* Reset current flow meter  */
1707         flow_meter_owner_reset(softnic, flow);
1708
1709         /* Set new flow meter */
1710         mtr->flow = flow;
1711 }
1712
1713 static int
1714 is_meter_action_enable(struct pmd_internals *softnic,
1715         struct softnic_table *table)
1716 {
1717         struct softnic_table_action_profile *profile =
1718                 softnic_table_action_profile_find(softnic,
1719                         table->params.action_profile_name);
1720         struct softnic_table_action_profile_params *params = &profile->params;
1721
1722         return (params->action_mask & (1LLU << RTE_TABLE_ACTION_MTR)) ? 1 : 0;
1723 }
1724
1725 static struct rte_flow *
1726 pmd_flow_create(struct rte_eth_dev *dev,
1727         const struct rte_flow_attr *attr,
1728         const struct rte_flow_item item[],
1729         const struct rte_flow_action action[],
1730         struct rte_flow_error *error)
1731 {
1732         struct softnic_table_rule_match rule_match;
1733         struct softnic_table_rule_action rule_action;
1734         void *rule_data;
1735
1736         struct pmd_internals *softnic = dev->data->dev_private;
1737         struct pipeline *pipeline;
1738         struct softnic_table *table;
1739         struct rte_flow *flow;
1740         struct softnic_mtr *mtr;
1741         const char *pipeline_name = NULL;
1742         uint32_t table_id = 0;
1743         int new_flow, status;
1744
1745         /* Check input parameters. */
1746         if (attr == NULL) {
1747                 rte_flow_error_set(error,
1748                         EINVAL,
1749                         RTE_FLOW_ERROR_TYPE_ATTR,
1750                         NULL,
1751                         "Null attr");
1752                 return NULL;
1753         }
1754
1755         if (item == NULL) {
1756                 rte_flow_error_set(error,
1757                         EINVAL,
1758                         RTE_FLOW_ERROR_TYPE_ITEM,
1759                         NULL,
1760                         "Null item");
1761                 return NULL;
1762         }
1763
1764         if (action == NULL) {
1765                 rte_flow_error_set(error,
1766                         EINVAL,
1767                         RTE_FLOW_ERROR_TYPE_ACTION,
1768                         NULL,
1769                         "Null action");
1770                 return NULL;
1771         }
1772
1773         /* Identify the pipeline table to add this flow to. */
1774         status = flow_pipeline_table_get(softnic, attr, &pipeline_name,
1775                                         &table_id, error);
1776         if (status)
1777                 return NULL;
1778
1779         pipeline = softnic_pipeline_find(softnic, pipeline_name);
1780         if (pipeline == NULL) {
1781                 rte_flow_error_set(error,
1782                         EINVAL,
1783                         RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
1784                         NULL,
1785                         "Invalid pipeline name");
1786                 return NULL;
1787         }
1788
1789         if (table_id >= pipeline->n_tables) {
1790                 rte_flow_error_set(error,
1791                         EINVAL,
1792                         RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
1793                         NULL,
1794                         "Invalid pipeline table ID");
1795                 return NULL;
1796         }
1797
1798         table = &pipeline->table[table_id];
1799
1800         /* Rule match. */
1801         memset(&rule_match, 0, sizeof(rule_match));
1802         status = flow_rule_match_get(softnic,
1803                 pipeline,
1804                 table,
1805                 attr,
1806                 item,
1807                 &rule_match,
1808                 error);
1809         if (status)
1810                 return NULL;
1811
1812         /* Rule action. */
1813         memset(&rule_action, 0, sizeof(rule_action));
1814         status = flow_rule_action_get(softnic,
1815                 pipeline,
1816                 table,
1817                 attr,
1818                 action,
1819                 &rule_action,
1820                 error);
1821         if (status)
1822                 return NULL;
1823
1824         /* Flow find/allocate. */
1825         new_flow = 0;
1826         flow = softnic_flow_find(table, &rule_match);
1827         if (flow == NULL) {
1828                 new_flow = 1;
1829                 flow = calloc(1, sizeof(struct rte_flow));
1830                 if (flow == NULL) {
1831                         rte_flow_error_set(error,
1832                                 ENOMEM,
1833                                 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
1834                                 NULL,
1835                                 "Not enough memory for new flow");
1836                         return NULL;
1837                 }
1838         }
1839
1840         /* Rule add. */
1841         status = softnic_pipeline_table_rule_add(softnic,
1842                 pipeline_name,
1843                 table_id,
1844                 &rule_match,
1845                 &rule_action,
1846                 &rule_data);
1847         if (status) {
1848                 if (new_flow)
1849                         free(flow);
1850
1851                 rte_flow_error_set(error,
1852                         EINVAL,
1853                         RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
1854                         NULL,
1855                         "Pipeline table rule add failed");
1856                 return NULL;
1857         }
1858
1859         /* Flow fill in. */
1860         memcpy(&flow->match, &rule_match, sizeof(rule_match));
1861         memcpy(&flow->action, &rule_action, sizeof(rule_action));
1862         flow->data = rule_data;
1863         flow->pipeline = pipeline;
1864         flow->table_id = table_id;
1865
1866         mtr = flow_action_meter_get(softnic, action);
1867         if (mtr)
1868                 flow_meter_owner_set(softnic, flow, mtr);
1869
1870         /* Flow add to list. */
1871         if (new_flow)
1872                 TAILQ_INSERT_TAIL(&table->flows, flow, node);
1873
1874         return flow;
1875 }
1876
1877 static int
1878 pmd_flow_destroy(struct rte_eth_dev *dev,
1879         struct rte_flow *flow,
1880         struct rte_flow_error *error)
1881 {
1882         struct pmd_internals *softnic = dev->data->dev_private;
1883         struct softnic_table *table;
1884         int status;
1885
1886         /* Check input parameters. */
1887         if (flow == NULL)
1888                 return rte_flow_error_set(error,
1889                         EINVAL,
1890                         RTE_FLOW_ERROR_TYPE_HANDLE,
1891                         NULL,
1892                         "Null flow");
1893
1894         table = &flow->pipeline->table[flow->table_id];
1895
1896         /* Rule delete. */
1897         status = softnic_pipeline_table_rule_delete(softnic,
1898                 flow->pipeline->name,
1899                 flow->table_id,
1900                 &flow->match);
1901         if (status)
1902                 return rte_flow_error_set(error,
1903                         EINVAL,
1904                         RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
1905                         NULL,
1906                         "Pipeline table rule delete failed");
1907
1908         /* Update dependencies */
1909         if (is_meter_action_enable(softnic, table))
1910                 flow_meter_owner_reset(softnic, flow);
1911
1912         /* Flow delete. */
1913         TAILQ_REMOVE(&table->flows, flow, node);
1914         free(flow);
1915
1916         return 0;
1917 }
1918
1919 static int
1920 pmd_flow_flush(struct rte_eth_dev *dev,
1921         struct rte_flow_error *error)
1922 {
1923         struct pmd_internals *softnic = dev->data->dev_private;
1924         struct pipeline *pipeline;
1925         int fail_to_del_rule = 0;
1926         uint32_t i;
1927
1928         TAILQ_FOREACH(pipeline, &softnic->pipeline_list, node) {
1929                 /* Remove all the flows added to the tables. */
1930                 for (i = 0; i < pipeline->n_tables; i++) {
1931                         struct softnic_table *table = &pipeline->table[i];
1932                         struct rte_flow *flow;
1933                         void *temp;
1934                         int status;
1935
1936                         TAILQ_FOREACH_SAFE(flow, &table->flows, node, temp) {
1937                                 /* Rule delete. */
1938                                 status = softnic_pipeline_table_rule_delete
1939                                                 (softnic,
1940                                                 pipeline->name,
1941                                                 i,
1942                                                 &flow->match);
1943                                 if (status)
1944                                         fail_to_del_rule = 1;
1945                                 /* Update dependencies */
1946                                 if (is_meter_action_enable(softnic, table))
1947                                         flow_meter_owner_reset(softnic, flow);
1948
1949                                 /* Flow delete. */
1950                                 TAILQ_REMOVE(&table->flows, flow, node);
1951                                 free(flow);
1952                         }
1953                 }
1954         }
1955
1956         if (fail_to_del_rule)
1957                 return rte_flow_error_set(error,
1958                         EINVAL,
1959                         RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
1960                         NULL,
1961                         "Some of the rules could not be deleted");
1962
1963         return 0;
1964 }
1965
1966 static int
1967 pmd_flow_query(struct rte_eth_dev *dev __rte_unused,
1968         struct rte_flow *flow,
1969         const struct rte_flow_action *action __rte_unused,
1970         void *data,
1971         struct rte_flow_error *error)
1972 {
1973         struct rte_table_action_stats_counters stats;
1974         struct softnic_table *table;
1975         struct rte_flow_query_count *flow_stats = data;
1976         int status;
1977
1978         /* Check input parameters. */
1979         if (flow == NULL)
1980                 return rte_flow_error_set(error,
1981                         EINVAL,
1982                         RTE_FLOW_ERROR_TYPE_HANDLE,
1983                         NULL,
1984                         "Null flow");
1985
1986         if (data == NULL)
1987                 return rte_flow_error_set(error,
1988                         EINVAL,
1989                         RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
1990                         NULL,
1991                         "Null data");
1992
1993         table = &flow->pipeline->table[flow->table_id];
1994
1995         /* Rule stats read. */
1996         status = rte_table_action_stats_read(table->a,
1997                 flow->data,
1998                 &stats,
1999                 flow_stats->reset);
2000         if (status)
2001                 return rte_flow_error_set(error,
2002                         EINVAL,
2003                         RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
2004                         NULL,
2005                         "Pipeline table rule stats read failed");
2006
2007         /* Fill in flow stats. */
2008         flow_stats->hits_set =
2009                 (table->ap->params.stats.n_packets_enabled) ? 1 : 0;
2010         flow_stats->bytes_set =
2011                 (table->ap->params.stats.n_bytes_enabled) ? 1 : 0;
2012         flow_stats->hits = stats.n_packets;
2013         flow_stats->bytes = stats.n_bytes;
2014
2015         return 0;
2016 }
2017
2018 const struct rte_flow_ops pmd_flow_ops = {
2019         .validate = pmd_flow_validate,
2020         .create = pmd_flow_create,
2021         .destroy = pmd_flow_destroy,
2022         .flush = pmd_flow_flush,
2023         .query = pmd_flow_query,
2024         .isolate = NULL,
2025 };