app/testpmd: support flow bit-field
[dpdk.git] / app / test-pmd / cmdline_flow.c
index f5aef0f..fc4d824 100644 (file)
 #include <stddef.h>
 #include <stdint.h>
 #include <stdio.h>
+#include <inttypes.h>
+#include <errno.h>
 #include <ctype.h>
 #include <string.h>
 
 #include <rte_common.h>
 #include <rte_ethdev.h>
+#include <rte_byteorder.h>
 #include <cmdline_parse.h>
 #include <rte_flow.h>
 
@@ -50,8 +53,59 @@ enum index {
        ZERO = 0,
        END,
 
+       /* Common tokens. */
+       INTEGER,
+       UNSIGNED,
+       PREFIX,
+       RULE_ID,
+       PORT_ID,
+       GROUP_ID,
+       PRIORITY_LEVEL,
+
        /* Top-level command. */
        FLOW,
+
+       /* Sub-level commands. */
+       VALIDATE,
+       CREATE,
+       DESTROY,
+       FLUSH,
+       QUERY,
+       LIST,
+
+       /* Destroy arguments. */
+       DESTROY_RULE,
+
+       /* Query arguments. */
+       QUERY_ACTION,
+
+       /* List arguments. */
+       LIST_GROUP,
+
+       /* Validate/create arguments. */
+       GROUP,
+       PRIORITY,
+       INGRESS,
+       EGRESS,
+
+       /* Validate/create pattern. */
+       PATTERN,
+       ITEM_PARAM_IS,
+       ITEM_PARAM_SPEC,
+       ITEM_PARAM_LAST,
+       ITEM_PARAM_MASK,
+       ITEM_PARAM_PREFIX,
+       ITEM_NEXT,
+       ITEM_END,
+       ITEM_VOID,
+       ITEM_INVERT,
+
+       /* Validate/create actions. */
+       ACTIONS,
+       ACTION_NEXT,
+       ACTION_END,
+       ACTION_VOID,
+       ACTION_PASSTHRU,
 };
 
 /** Maximum number of subsequent tokens and arguments on the stack. */
@@ -61,12 +115,28 @@ enum index {
 struct context {
        /** Stack of subsequent token lists to process. */
        const enum index *next[CTX_STACK_SIZE];
+       /** Arguments for stacked tokens. */
+       const void *args[CTX_STACK_SIZE];
        enum index curr; /**< Current token index. */
        enum index prev; /**< Index of the last token seen. */
        int next_num; /**< Number of entries in next[]. */
+       int args_num; /**< Number of entries in args[]. */
        uint32_t reparse:1; /**< Start over from the beginning. */
        uint32_t eol:1; /**< EOL has been detected. */
        uint32_t last:1; /**< No more arguments. */
+       uint16_t port; /**< Current port ID (for completions). */
+       uint32_t objdata; /**< Object-specific data. */
+       void *object; /**< Address of current object for relative offsets. */
+       void *objmask; /**< Object a full mask must be written to. */
+};
+
+/** Token argument. */
+struct arg {
+       uint32_t hton:1; /**< Use network byte ordering. */
+       uint32_t sign:1; /**< Value is signed. */
+       uint32_t offset; /**< Relative offset from ctx->object. */
+       uint32_t size; /**< Field size. */
+       const uint8_t *mask; /**< Bit-mask to use instead of offset/size. */
 };
 
 /** Parser token definition. */
@@ -75,11 +145,15 @@ struct token {
        const char *type;
        /** Help displayed during completion (defaults to token name). */
        const char *help;
+       /** Private data used by parser functions. */
+       const void *priv;
        /**
         * Lists of subsequent tokens to push on the stack. Each call to the
         * parser consumes the last entry of that stack.
         */
        const enum index *const *next;
+       /** Arguments stack for subsequent tokens that need them. */
+       const struct arg *const *args;
        /**
         * Token-processing callback, returns -1 in case of error, the
         * length of the matched string otherwise. If NULL, attempts to
@@ -112,15 +186,166 @@ struct token {
 /** Static initializer for a NEXT() entry. */
 #define NEXT_ENTRY(...) (const enum index []){ __VA_ARGS__, ZERO, }
 
+/** Static initializer for the args field. */
+#define ARGS(...) (const struct arg *const []){ __VA_ARGS__, NULL, }
+
+/** Static initializer for ARGS() to target a field. */
+#define ARGS_ENTRY(s, f) \
+       (&(const struct arg){ \
+               .offset = offsetof(s, f), \
+               .size = sizeof(((s *)0)->f), \
+       })
+
+/** Static initializer for ARGS() to target a bit-field. */
+#define ARGS_ENTRY_BF(s, f, b) \
+       (&(const struct arg){ \
+               .size = sizeof(s), \
+               .mask = (const void *)&(const s){ .f = (1 << (b)) - 1 }, \
+       })
+
+/** Static initializer for ARGS() to target a pointer. */
+#define ARGS_ENTRY_PTR(s, f) \
+       (&(const struct arg){ \
+               .size = sizeof(*((s *)0)->f), \
+       })
+
 /** Parser output buffer layout expected by cmd_flow_parsed(). */
 struct buffer {
        enum index command; /**< Flow command. */
        uint16_t port; /**< Affected port ID. */
+       union {
+               struct {
+                       struct rte_flow_attr attr;
+                       struct rte_flow_item *pattern;
+                       struct rte_flow_action *actions;
+                       uint32_t pattern_n;
+                       uint32_t actions_n;
+                       uint8_t *data;
+               } vc; /**< Validate/create arguments. */
+               struct {
+                       uint32_t *rule;
+                       uint32_t rule_n;
+               } destroy; /**< Destroy arguments. */
+               struct {
+                       uint32_t rule;
+                       enum rte_flow_action_type action;
+               } query; /**< Query arguments. */
+               struct {
+                       uint32_t *group;
+                       uint32_t group_n;
+               } list; /**< List arguments. */
+       } args; /**< Command arguments. */
+};
+
+/** Private data for pattern items. */
+struct parse_item_priv {
+       enum rte_flow_item_type type; /**< Item type. */
+       uint32_t size; /**< Size of item specification structure. */
+};
+
+#define PRIV_ITEM(t, s) \
+       (&(const struct parse_item_priv){ \
+               .type = RTE_FLOW_ITEM_TYPE_ ## t, \
+               .size = s, \
+       })
+
+/** Private data for actions. */
+struct parse_action_priv {
+       enum rte_flow_action_type type; /**< Action type. */
+       uint32_t size; /**< Size of action configuration structure. */
+};
+
+#define PRIV_ACTION(t, s) \
+       (&(const struct parse_action_priv){ \
+               .type = RTE_FLOW_ACTION_TYPE_ ## t, \
+               .size = s, \
+       })
+
+static const enum index next_vc_attr[] = {
+       GROUP,
+       PRIORITY,
+       INGRESS,
+       EGRESS,
+       PATTERN,
+       ZERO,
+};
+
+static const enum index next_destroy_attr[] = {
+       DESTROY_RULE,
+       END,
+       ZERO,
+};
+
+static const enum index next_list_attr[] = {
+       LIST_GROUP,
+       END,
+       ZERO,
+};
+
+__rte_unused
+static const enum index item_param[] = {
+       ITEM_PARAM_IS,
+       ITEM_PARAM_SPEC,
+       ITEM_PARAM_LAST,
+       ITEM_PARAM_MASK,
+       ITEM_PARAM_PREFIX,
+       ZERO,
+};
+
+static const enum index next_item[] = {
+       ITEM_END,
+       ITEM_VOID,
+       ITEM_INVERT,
+       ZERO,
+};
+
+static const enum index next_action[] = {
+       ACTION_END,
+       ACTION_VOID,
+       ACTION_PASSTHRU,
+       ZERO,
 };
 
 static int parse_init(struct context *, const struct token *,
                      const char *, unsigned int,
                      void *, unsigned int);
+static int parse_vc(struct context *, const struct token *,
+                   const char *, unsigned int,
+                   void *, unsigned int);
+static int parse_vc_spec(struct context *, const struct token *,
+                        const char *, unsigned int, void *, unsigned int);
+static int parse_destroy(struct context *, const struct token *,
+                        const char *, unsigned int,
+                        void *, unsigned int);
+static int parse_flush(struct context *, const struct token *,
+                      const char *, unsigned int,
+                      void *, unsigned int);
+static int parse_query(struct context *, const struct token *,
+                      const char *, unsigned int,
+                      void *, unsigned int);
+static int parse_action(struct context *, const struct token *,
+                       const char *, unsigned int,
+                       void *, unsigned int);
+static int parse_list(struct context *, const struct token *,
+                     const char *, unsigned int,
+                     void *, unsigned int);
+static int parse_int(struct context *, const struct token *,
+                    const char *, unsigned int,
+                    void *, unsigned int);
+static int parse_prefix(struct context *, const struct token *,
+                       const char *, unsigned int,
+                       void *, unsigned int);
+static int parse_port(struct context *, const struct token *,
+                     const char *, unsigned int,
+                     void *, unsigned int);
+static int comp_none(struct context *, const struct token *,
+                    unsigned int, char *, unsigned int);
+static int comp_action(struct context *, const struct token *,
+                      unsigned int, char *, unsigned int);
+static int comp_port(struct context *, const struct token *,
+                    unsigned int, char *, unsigned int);
+static int comp_rule_id(struct context *, const struct token *,
+                       unsigned int, char *, unsigned int);
 
 /** Token definitions. */
 static const struct token token_list[] = {
@@ -135,15 +360,389 @@ static const struct token token_list[] = {
                .type = "RETURN",
                .help = "command may end here",
        },
+       /* Common tokens. */
+       [INTEGER] = {
+               .name = "{int}",
+               .type = "INTEGER",
+               .help = "integer value",
+               .call = parse_int,
+               .comp = comp_none,
+       },
+       [UNSIGNED] = {
+               .name = "{unsigned}",
+               .type = "UNSIGNED",
+               .help = "unsigned integer value",
+               .call = parse_int,
+               .comp = comp_none,
+       },
+       [PREFIX] = {
+               .name = "{prefix}",
+               .type = "PREFIX",
+               .help = "prefix length for bit-mask",
+               .call = parse_prefix,
+               .comp = comp_none,
+       },
+       [RULE_ID] = {
+               .name = "{rule id}",
+               .type = "RULE ID",
+               .help = "rule identifier",
+               .call = parse_int,
+               .comp = comp_rule_id,
+       },
+       [PORT_ID] = {
+               .name = "{port_id}",
+               .type = "PORT ID",
+               .help = "port identifier",
+               .call = parse_port,
+               .comp = comp_port,
+       },
+       [GROUP_ID] = {
+               .name = "{group_id}",
+               .type = "GROUP ID",
+               .help = "group identifier",
+               .call = parse_int,
+               .comp = comp_none,
+       },
+       [PRIORITY_LEVEL] = {
+               .name = "{level}",
+               .type = "PRIORITY",
+               .help = "priority level",
+               .call = parse_int,
+               .comp = comp_none,
+       },
        /* Top-level command. */
        [FLOW] = {
                .name = "flow",
                .type = "{command} {port_id} [{arg} [...]]",
                .help = "manage ingress/egress flow rules",
+               .next = NEXT(NEXT_ENTRY
+                            (VALIDATE,
+                             CREATE,
+                             DESTROY,
+                             FLUSH,
+                             LIST,
+                             QUERY)),
                .call = parse_init,
        },
+       /* Sub-level commands. */
+       [VALIDATE] = {
+               .name = "validate",
+               .help = "check whether a flow rule can be created",
+               .next = NEXT(next_vc_attr, NEXT_ENTRY(PORT_ID)),
+               .args = ARGS(ARGS_ENTRY(struct buffer, port)),
+               .call = parse_vc,
+       },
+       [CREATE] = {
+               .name = "create",
+               .help = "create a flow rule",
+               .next = NEXT(next_vc_attr, NEXT_ENTRY(PORT_ID)),
+               .args = ARGS(ARGS_ENTRY(struct buffer, port)),
+               .call = parse_vc,
+       },
+       [DESTROY] = {
+               .name = "destroy",
+               .help = "destroy specific flow rules",
+               .next = NEXT(NEXT_ENTRY(DESTROY_RULE), NEXT_ENTRY(PORT_ID)),
+               .args = ARGS(ARGS_ENTRY(struct buffer, port)),
+               .call = parse_destroy,
+       },
+       [FLUSH] = {
+               .name = "flush",
+               .help = "destroy all flow rules",
+               .next = NEXT(NEXT_ENTRY(PORT_ID)),
+               .args = ARGS(ARGS_ENTRY(struct buffer, port)),
+               .call = parse_flush,
+       },
+       [QUERY] = {
+               .name = "query",
+               .help = "query an existing flow rule",
+               .next = NEXT(NEXT_ENTRY(QUERY_ACTION),
+                            NEXT_ENTRY(RULE_ID),
+                            NEXT_ENTRY(PORT_ID)),
+               .args = ARGS(ARGS_ENTRY(struct buffer, args.query.action),
+                            ARGS_ENTRY(struct buffer, args.query.rule),
+                            ARGS_ENTRY(struct buffer, port)),
+               .call = parse_query,
+       },
+       [LIST] = {
+               .name = "list",
+               .help = "list existing flow rules",
+               .next = NEXT(next_list_attr, NEXT_ENTRY(PORT_ID)),
+               .args = ARGS(ARGS_ENTRY(struct buffer, port)),
+               .call = parse_list,
+       },
+       /* Destroy arguments. */
+       [DESTROY_RULE] = {
+               .name = "rule",
+               .help = "specify a rule identifier",
+               .next = NEXT(next_destroy_attr, NEXT_ENTRY(RULE_ID)),
+               .args = ARGS(ARGS_ENTRY_PTR(struct buffer, args.destroy.rule)),
+               .call = parse_destroy,
+       },
+       /* Query arguments. */
+       [QUERY_ACTION] = {
+               .name = "{action}",
+               .type = "ACTION",
+               .help = "action to query, must be part of the rule",
+               .call = parse_action,
+               .comp = comp_action,
+       },
+       /* List arguments. */
+       [LIST_GROUP] = {
+               .name = "group",
+               .help = "specify a group",
+               .next = NEXT(next_list_attr, NEXT_ENTRY(GROUP_ID)),
+               .args = ARGS(ARGS_ENTRY_PTR(struct buffer, args.list.group)),
+               .call = parse_list,
+       },
+       /* Validate/create attributes. */
+       [GROUP] = {
+               .name = "group",
+               .help = "specify a group",
+               .next = NEXT(next_vc_attr, NEXT_ENTRY(GROUP_ID)),
+               .args = ARGS(ARGS_ENTRY(struct rte_flow_attr, group)),
+               .call = parse_vc,
+       },
+       [PRIORITY] = {
+               .name = "priority",
+               .help = "specify a priority level",
+               .next = NEXT(next_vc_attr, NEXT_ENTRY(PRIORITY_LEVEL)),
+               .args = ARGS(ARGS_ENTRY(struct rte_flow_attr, priority)),
+               .call = parse_vc,
+       },
+       [INGRESS] = {
+               .name = "ingress",
+               .help = "affect rule to ingress",
+               .next = NEXT(next_vc_attr),
+               .call = parse_vc,
+       },
+       [EGRESS] = {
+               .name = "egress",
+               .help = "affect rule to egress",
+               .next = NEXT(next_vc_attr),
+               .call = parse_vc,
+       },
+       /* Validate/create pattern. */
+       [PATTERN] = {
+               .name = "pattern",
+               .help = "submit a list of pattern items",
+               .next = NEXT(next_item),
+               .call = parse_vc,
+       },
+       [ITEM_PARAM_IS] = {
+               .name = "is",
+               .help = "match value perfectly (with full bit-mask)",
+               .call = parse_vc_spec,
+       },
+       [ITEM_PARAM_SPEC] = {
+               .name = "spec",
+               .help = "match value according to configured bit-mask",
+               .call = parse_vc_spec,
+       },
+       [ITEM_PARAM_LAST] = {
+               .name = "last",
+               .help = "specify upper bound to establish a range",
+               .call = parse_vc_spec,
+       },
+       [ITEM_PARAM_MASK] = {
+               .name = "mask",
+               .help = "specify bit-mask with relevant bits set to one",
+               .call = parse_vc_spec,
+       },
+       [ITEM_PARAM_PREFIX] = {
+               .name = "prefix",
+               .help = "generate bit-mask from a prefix length",
+               .call = parse_vc_spec,
+       },
+       [ITEM_NEXT] = {
+               .name = "/",
+               .help = "specify next pattern item",
+               .next = NEXT(next_item),
+       },
+       [ITEM_END] = {
+               .name = "end",
+               .help = "end list of pattern items",
+               .priv = PRIV_ITEM(END, 0),
+               .next = NEXT(NEXT_ENTRY(ACTIONS)),
+               .call = parse_vc,
+       },
+       [ITEM_VOID] = {
+               .name = "void",
+               .help = "no-op pattern item",
+               .priv = PRIV_ITEM(VOID, 0),
+               .next = NEXT(NEXT_ENTRY(ITEM_NEXT)),
+               .call = parse_vc,
+       },
+       [ITEM_INVERT] = {
+               .name = "invert",
+               .help = "perform actions when pattern does not match",
+               .priv = PRIV_ITEM(INVERT, 0),
+               .next = NEXT(NEXT_ENTRY(ITEM_NEXT)),
+               .call = parse_vc,
+       },
+       /* Validate/create actions. */
+       [ACTIONS] = {
+               .name = "actions",
+               .help = "submit a list of associated actions",
+               .next = NEXT(next_action),
+               .call = parse_vc,
+       },
+       [ACTION_NEXT] = {
+               .name = "/",
+               .help = "specify next action",
+               .next = NEXT(next_action),
+       },
+       [ACTION_END] = {
+               .name = "end",
+               .help = "end list of actions",
+               .priv = PRIV_ACTION(END, 0),
+               .call = parse_vc,
+       },
+       [ACTION_VOID] = {
+               .name = "void",
+               .help = "no-op action",
+               .priv = PRIV_ACTION(VOID, 0),
+               .next = NEXT(NEXT_ENTRY(ACTION_NEXT)),
+               .call = parse_vc,
+       },
+       [ACTION_PASSTHRU] = {
+               .name = "passthru",
+               .help = "let subsequent rule process matched packets",
+               .priv = PRIV_ACTION(PASSTHRU, 0),
+               .next = NEXT(NEXT_ENTRY(ACTION_NEXT)),
+               .call = parse_vc,
+       },
 };
 
+/** Remove and return last entry from argument stack. */
+static const struct arg *
+pop_args(struct context *ctx)
+{
+       return ctx->args_num ? ctx->args[--ctx->args_num] : NULL;
+}
+
+/** Add entry on top of the argument stack. */
+static int
+push_args(struct context *ctx, const struct arg *arg)
+{
+       if (ctx->args_num == CTX_STACK_SIZE)
+               return -1;
+       ctx->args[ctx->args_num++] = arg;
+       return 0;
+}
+
+/** Spread value into buffer according to bit-mask. */
+static size_t
+arg_entry_bf_fill(void *dst, uintmax_t val, const struct arg *arg)
+{
+       uint32_t i = arg->size;
+       uint32_t end = 0;
+       int sub = 1;
+       int add = 0;
+       size_t len = 0;
+
+       if (!arg->mask)
+               return 0;
+#if RTE_BYTE_ORDER == RTE_LITTLE_ENDIAN
+       if (!arg->hton) {
+               i = 0;
+               end = arg->size;
+               sub = 0;
+               add = 1;
+       }
+#endif
+       while (i != end) {
+               unsigned int shift = 0;
+               uint8_t *buf = (uint8_t *)dst + arg->offset + (i -= sub);
+
+               for (shift = 0; arg->mask[i] >> shift; ++shift) {
+                       if (!(arg->mask[i] & (1 << shift)))
+                               continue;
+                       ++len;
+                       if (!dst)
+                               continue;
+                       *buf &= ~(1 << shift);
+                       *buf |= (val & 1) << shift;
+                       val >>= 1;
+               }
+               i += add;
+       }
+       return len;
+}
+
+/**
+ * Parse a prefix length and generate a bit-mask.
+ *
+ * Last argument (ctx->args) is retrieved to determine mask size, storage
+ * location and whether the result must use network byte ordering.
+ */
+static int
+parse_prefix(struct context *ctx, const struct token *token,
+            const char *str, unsigned int len,
+            void *buf, unsigned int size)
+{
+       const struct arg *arg = pop_args(ctx);
+       static const uint8_t conv[] = "\x00\x80\xc0\xe0\xf0\xf8\xfc\xfe\xff";
+       char *end;
+       uintmax_t u;
+       unsigned int bytes;
+       unsigned int extra;
+
+       (void)token;
+       /* Argument is expected. */
+       if (!arg)
+               return -1;
+       errno = 0;
+       u = strtoumax(str, &end, 0);
+       if (errno || (size_t)(end - str) != len)
+               goto error;
+       if (arg->mask) {
+               uintmax_t v = 0;
+
+               extra = arg_entry_bf_fill(NULL, 0, arg);
+               if (u > extra)
+                       goto error;
+               if (!ctx->object)
+                       return len;
+               extra -= u;
+               while (u--)
+                       (v <<= 1, v |= 1);
+               v <<= extra;
+               if (!arg_entry_bf_fill(ctx->object, v, arg) ||
+                   !arg_entry_bf_fill(ctx->objmask, -1, arg))
+                       goto error;
+               return len;
+       }
+       bytes = u / 8;
+       extra = u % 8;
+       size = arg->size;
+       if (bytes > size || bytes + !!extra > size)
+               goto error;
+       if (!ctx->object)
+               return len;
+       buf = (uint8_t *)ctx->object + arg->offset;
+#if RTE_BYTE_ORDER == RTE_LITTLE_ENDIAN
+       if (!arg->hton) {
+               memset((uint8_t *)buf + size - bytes, 0xff, bytes);
+               memset(buf, 0x00, size - bytes);
+               if (extra)
+                       ((uint8_t *)buf)[size - bytes - 1] = conv[extra];
+       } else
+#endif
+       {
+               memset(buf, 0xff, bytes);
+               memset((uint8_t *)buf + bytes, 0x00, size - bytes);
+               if (extra)
+                       ((uint8_t *)buf)[bytes] = conv[extra];
+       }
+       if (ctx->objmask)
+               memset((uint8_t *)ctx->objmask + arg->offset, 0xff, size);
+       return len;
+error:
+       push_args(ctx, arg);
+       return -1;
+}
+
 /** Default parsing function for token name matching. */
 static int
 parse_default(struct context *ctx, const struct token *token,
@@ -178,9 +777,501 @@ parse_init(struct context *ctx, const struct token *token,
        /* Initialize buffer. */
        memset(out, 0x00, sizeof(*out));
        memset((uint8_t *)out + sizeof(*out), 0x22, size - sizeof(*out));
+       ctx->objdata = 0;
+       ctx->object = out;
+       ctx->objmask = NULL;
+       return len;
+}
+
+/** Parse tokens for validate/create commands. */
+static int
+parse_vc(struct context *ctx, const struct token *token,
+        const char *str, unsigned int len,
+        void *buf, unsigned int size)
+{
+       struct buffer *out = buf;
+       uint8_t *data;
+       uint32_t data_size;
+
+       /* Token name must match. */
+       if (parse_default(ctx, token, str, len, NULL, 0) < 0)
+               return -1;
+       /* Nothing else to do if there is no buffer. */
+       if (!out)
+               return len;
+       if (!out->command) {
+               if (ctx->curr != VALIDATE && ctx->curr != CREATE)
+                       return -1;
+               if (sizeof(*out) > size)
+                       return -1;
+               out->command = ctx->curr;
+               ctx->objdata = 0;
+               ctx->object = out;
+               ctx->objmask = NULL;
+               out->args.vc.data = (uint8_t *)out + size;
+               return len;
+       }
+       ctx->objdata = 0;
+       ctx->object = &out->args.vc.attr;
+       ctx->objmask = NULL;
+       switch (ctx->curr) {
+       case GROUP:
+       case PRIORITY:
+               return len;
+       case INGRESS:
+               out->args.vc.attr.ingress = 1;
+               return len;
+       case EGRESS:
+               out->args.vc.attr.egress = 1;
+               return len;
+       case PATTERN:
+               out->args.vc.pattern =
+                       (void *)RTE_ALIGN_CEIL((uintptr_t)(out + 1),
+                                              sizeof(double));
+               ctx->object = out->args.vc.pattern;
+               ctx->objmask = NULL;
+               return len;
+       case ACTIONS:
+               out->args.vc.actions =
+                       (void *)RTE_ALIGN_CEIL((uintptr_t)
+                                              (out->args.vc.pattern +
+                                               out->args.vc.pattern_n),
+                                              sizeof(double));
+               ctx->object = out->args.vc.actions;
+               ctx->objmask = NULL;
+               return len;
+       default:
+               if (!token->priv)
+                       return -1;
+               break;
+       }
+       if (!out->args.vc.actions) {
+               const struct parse_item_priv *priv = token->priv;
+               struct rte_flow_item *item =
+                       out->args.vc.pattern + out->args.vc.pattern_n;
+
+               data_size = priv->size * 3; /* spec, last, mask */
+               data = (void *)RTE_ALIGN_FLOOR((uintptr_t)
+                                              (out->args.vc.data - data_size),
+                                              sizeof(double));
+               if ((uint8_t *)item + sizeof(*item) > data)
+                       return -1;
+               *item = (struct rte_flow_item){
+                       .type = priv->type,
+               };
+               ++out->args.vc.pattern_n;
+               ctx->object = item;
+               ctx->objmask = NULL;
+       } else {
+               const struct parse_action_priv *priv = token->priv;
+               struct rte_flow_action *action =
+                       out->args.vc.actions + out->args.vc.actions_n;
+
+               data_size = priv->size; /* configuration */
+               data = (void *)RTE_ALIGN_FLOOR((uintptr_t)
+                                              (out->args.vc.data - data_size),
+                                              sizeof(double));
+               if ((uint8_t *)action + sizeof(*action) > data)
+                       return -1;
+               *action = (struct rte_flow_action){
+                       .type = priv->type,
+               };
+               ++out->args.vc.actions_n;
+               ctx->object = action;
+               ctx->objmask = NULL;
+       }
+       memset(data, 0, data_size);
+       out->args.vc.data = data;
+       ctx->objdata = data_size;
        return len;
 }
 
+/** Parse pattern item parameter type. */
+static int
+parse_vc_spec(struct context *ctx, const struct token *token,
+             const char *str, unsigned int len,
+             void *buf, unsigned int size)
+{
+       struct buffer *out = buf;
+       struct rte_flow_item *item;
+       uint32_t data_size;
+       int index;
+       int objmask = 0;
+
+       (void)size;
+       /* Token name must match. */
+       if (parse_default(ctx, token, str, len, NULL, 0) < 0)
+               return -1;
+       /* Parse parameter types. */
+       switch (ctx->curr) {
+       case ITEM_PARAM_IS:
+               index = 0;
+               objmask = 1;
+               break;
+       case ITEM_PARAM_SPEC:
+               index = 0;
+               break;
+       case ITEM_PARAM_LAST:
+               index = 1;
+               break;
+       case ITEM_PARAM_PREFIX:
+               /* Modify next token to expect a prefix. */
+               if (ctx->next_num < 2)
+                       return -1;
+               ctx->next[ctx->next_num - 2] = NEXT_ENTRY(PREFIX);
+               /* Fall through. */
+       case ITEM_PARAM_MASK:
+               index = 2;
+               break;
+       default:
+               return -1;
+       }
+       /* Nothing else to do if there is no buffer. */
+       if (!out)
+               return len;
+       if (!out->args.vc.pattern_n)
+               return -1;
+       item = &out->args.vc.pattern[out->args.vc.pattern_n - 1];
+       data_size = ctx->objdata / 3; /* spec, last, mask */
+       /* Point to selected object. */
+       ctx->object = out->args.vc.data + (data_size * index);
+       if (objmask) {
+               ctx->objmask = out->args.vc.data + (data_size * 2); /* mask */
+               item->mask = ctx->objmask;
+       } else
+               ctx->objmask = NULL;
+       /* Update relevant item pointer. */
+       *((const void **[]){ &item->spec, &item->last, &item->mask })[index] =
+               ctx->object;
+       return len;
+}
+
+/** Parse tokens for destroy command. */
+static int
+parse_destroy(struct context *ctx, const struct token *token,
+             const char *str, unsigned int len,
+             void *buf, unsigned int size)
+{
+       struct buffer *out = buf;
+
+       /* Token name must match. */
+       if (parse_default(ctx, token, str, len, NULL, 0) < 0)
+               return -1;
+       /* Nothing else to do if there is no buffer. */
+       if (!out)
+               return len;
+       if (!out->command) {
+               if (ctx->curr != DESTROY)
+                       return -1;
+               if (sizeof(*out) > size)
+                       return -1;
+               out->command = ctx->curr;
+               ctx->objdata = 0;
+               ctx->object = out;
+               ctx->objmask = NULL;
+               out->args.destroy.rule =
+                       (void *)RTE_ALIGN_CEIL((uintptr_t)(out + 1),
+                                              sizeof(double));
+               return len;
+       }
+       if (((uint8_t *)(out->args.destroy.rule + out->args.destroy.rule_n) +
+            sizeof(*out->args.destroy.rule)) > (uint8_t *)out + size)
+               return -1;
+       ctx->objdata = 0;
+       ctx->object = out->args.destroy.rule + out->args.destroy.rule_n++;
+       ctx->objmask = NULL;
+       return len;
+}
+
+/** Parse tokens for flush command. */
+static int
+parse_flush(struct context *ctx, const struct token *token,
+           const char *str, unsigned int len,
+           void *buf, unsigned int size)
+{
+       struct buffer *out = buf;
+
+       /* Token name must match. */
+       if (parse_default(ctx, token, str, len, NULL, 0) < 0)
+               return -1;
+       /* Nothing else to do if there is no buffer. */
+       if (!out)
+               return len;
+       if (!out->command) {
+               if (ctx->curr != FLUSH)
+                       return -1;
+               if (sizeof(*out) > size)
+                       return -1;
+               out->command = ctx->curr;
+               ctx->objdata = 0;
+               ctx->object = out;
+               ctx->objmask = NULL;
+       }
+       return len;
+}
+
+/** Parse tokens for query command. */
+static int
+parse_query(struct context *ctx, const struct token *token,
+           const char *str, unsigned int len,
+           void *buf, unsigned int size)
+{
+       struct buffer *out = buf;
+
+       /* Token name must match. */
+       if (parse_default(ctx, token, str, len, NULL, 0) < 0)
+               return -1;
+       /* Nothing else to do if there is no buffer. */
+       if (!out)
+               return len;
+       if (!out->command) {
+               if (ctx->curr != QUERY)
+                       return -1;
+               if (sizeof(*out) > size)
+                       return -1;
+               out->command = ctx->curr;
+               ctx->objdata = 0;
+               ctx->object = out;
+               ctx->objmask = NULL;
+       }
+       return len;
+}
+
+/** Parse action names. */
+static int
+parse_action(struct context *ctx, const struct token *token,
+            const char *str, unsigned int len,
+            void *buf, unsigned int size)
+{
+       struct buffer *out = buf;
+       const struct arg *arg = pop_args(ctx);
+       unsigned int i;
+
+       (void)size;
+       /* Argument is expected. */
+       if (!arg)
+               return -1;
+       /* Parse action name. */
+       for (i = 0; next_action[i]; ++i) {
+               const struct parse_action_priv *priv;
+
+               token = &token_list[next_action[i]];
+               if (strncmp(token->name, str, len))
+                       continue;
+               priv = token->priv;
+               if (!priv)
+                       goto error;
+               if (out)
+                       memcpy((uint8_t *)ctx->object + arg->offset,
+                              &priv->type,
+                              arg->size);
+               return len;
+       }
+error:
+       push_args(ctx, arg);
+       return -1;
+}
+
+/** Parse tokens for list command. */
+static int
+parse_list(struct context *ctx, const struct token *token,
+          const char *str, unsigned int len,
+          void *buf, unsigned int size)
+{
+       struct buffer *out = buf;
+
+       /* Token name must match. */
+       if (parse_default(ctx, token, str, len, NULL, 0) < 0)
+               return -1;
+       /* Nothing else to do if there is no buffer. */
+       if (!out)
+               return len;
+       if (!out->command) {
+               if (ctx->curr != LIST)
+                       return -1;
+               if (sizeof(*out) > size)
+                       return -1;
+               out->command = ctx->curr;
+               ctx->objdata = 0;
+               ctx->object = out;
+               ctx->objmask = NULL;
+               out->args.list.group =
+                       (void *)RTE_ALIGN_CEIL((uintptr_t)(out + 1),
+                                              sizeof(double));
+               return len;
+       }
+       if (((uint8_t *)(out->args.list.group + out->args.list.group_n) +
+            sizeof(*out->args.list.group)) > (uint8_t *)out + size)
+               return -1;
+       ctx->objdata = 0;
+       ctx->object = out->args.list.group + out->args.list.group_n++;
+       ctx->objmask = NULL;
+       return len;
+}
+
+/**
+ * Parse signed/unsigned integers 8 to 64-bit long.
+ *
+ * Last argument (ctx->args) is retrieved to determine integer type and
+ * storage location.
+ */
+static int
+parse_int(struct context *ctx, const struct token *token,
+         const char *str, unsigned int len,
+         void *buf, unsigned int size)
+{
+       const struct arg *arg = pop_args(ctx);
+       uintmax_t u;
+       char *end;
+
+       (void)token;
+       /* Argument is expected. */
+       if (!arg)
+               return -1;
+       errno = 0;
+       u = arg->sign ?
+               (uintmax_t)strtoimax(str, &end, 0) :
+               strtoumax(str, &end, 0);
+       if (errno || (size_t)(end - str) != len)
+               goto error;
+       if (!ctx->object)
+               return len;
+       if (arg->mask) {
+               if (!arg_entry_bf_fill(ctx->object, u, arg) ||
+                   !arg_entry_bf_fill(ctx->objmask, -1, arg))
+                       goto error;
+               return len;
+       }
+       buf = (uint8_t *)ctx->object + arg->offset;
+       size = arg->size;
+objmask:
+       switch (size) {
+       case sizeof(uint8_t):
+               *(uint8_t *)buf = u;
+               break;
+       case sizeof(uint16_t):
+               *(uint16_t *)buf = arg->hton ? rte_cpu_to_be_16(u) : u;
+               break;
+       case sizeof(uint32_t):
+               *(uint32_t *)buf = arg->hton ? rte_cpu_to_be_32(u) : u;
+               break;
+       case sizeof(uint64_t):
+               *(uint64_t *)buf = arg->hton ? rte_cpu_to_be_64(u) : u;
+               break;
+       default:
+               goto error;
+       }
+       if (ctx->objmask && buf != (uint8_t *)ctx->objmask + arg->offset) {
+               u = -1;
+               buf = (uint8_t *)ctx->objmask + arg->offset;
+               goto objmask;
+       }
+       return len;
+error:
+       push_args(ctx, arg);
+       return -1;
+}
+
+/** Parse port and update context. */
+static int
+parse_port(struct context *ctx, const struct token *token,
+          const char *str, unsigned int len,
+          void *buf, unsigned int size)
+{
+       struct buffer *out = &(struct buffer){ .port = 0 };
+       int ret;
+
+       if (buf)
+               out = buf;
+       else {
+               ctx->objdata = 0;
+               ctx->object = out;
+               ctx->objmask = NULL;
+               size = sizeof(*out);
+       }
+       ret = parse_int(ctx, token, str, len, out, size);
+       if (ret >= 0)
+               ctx->port = out->port;
+       if (!buf)
+               ctx->object = NULL;
+       return ret;
+}
+
+/** No completion. */
+static int
+comp_none(struct context *ctx, const struct token *token,
+         unsigned int ent, char *buf, unsigned int size)
+{
+       (void)ctx;
+       (void)token;
+       (void)ent;
+       (void)buf;
+       (void)size;
+       return 0;
+}
+
+/** Complete action names. */
+static int
+comp_action(struct context *ctx, const struct token *token,
+           unsigned int ent, char *buf, unsigned int size)
+{
+       unsigned int i;
+
+       (void)ctx;
+       (void)token;
+       for (i = 0; next_action[i]; ++i)
+               if (buf && i == ent)
+                       return snprintf(buf, size, "%s",
+                                       token_list[next_action[i]].name);
+       if (buf)
+               return -1;
+       return i;
+}
+
+/** Complete available ports. */
+static int
+comp_port(struct context *ctx, const struct token *token,
+         unsigned int ent, char *buf, unsigned int size)
+{
+       unsigned int i = 0;
+       portid_t p;
+
+       (void)ctx;
+       (void)token;
+       FOREACH_PORT(p, ports) {
+               if (buf && i == ent)
+                       return snprintf(buf, size, "%u", p);
+               ++i;
+       }
+       if (buf)
+               return -1;
+       return i;
+}
+
+/** Complete available rule IDs. */
+static int
+comp_rule_id(struct context *ctx, const struct token *token,
+            unsigned int ent, char *buf, unsigned int size)
+{
+       unsigned int i = 0;
+       struct rte_port *port;
+       struct port_flow *pf;
+
+       (void)token;
+       if (port_id_is_invalid(ctx->port, DISABLED_WARN) ||
+           ctx->port == (uint16_t)RTE_PORT_ALL)
+               return -1;
+       port = &ports[ctx->port];
+       for (pf = port->flow_list; pf != NULL; pf = pf->next) {
+               if (buf && i == ent)
+                       return snprintf(buf, size, "%u", pf->id);
+               ++i;
+       }
+       if (buf)
+               return -1;
+       return i;
+}
+
 /** Internal context. */
 static struct context cmd_flow_context;
 
@@ -195,9 +1286,14 @@ cmd_flow_context_init(struct context *ctx)
        ctx->curr = ZERO;
        ctx->prev = ZERO;
        ctx->next_num = 0;
+       ctx->args_num = 0;
        ctx->reparse = 0;
        ctx->eol = 0;
        ctx->last = 0;
+       ctx->port = 0;
+       ctx->objdata = 0;
+       ctx->object = NULL;
+       ctx->objmask = NULL;
 }
 
 /** Parse a token (cmdline API). */
@@ -270,6 +1366,13 @@ cmd_flow_parse(cmdline_parse_token_hdr_t *hdr, const char *src, void *result,
                                return -1;
                        ctx->next[ctx->next_num++] = token->next[i];
                }
+       /* Push arguments if any. */
+       if (token->args)
+               for (i = 0; token->args[i]; ++i) {
+                       if (ctx->args_num == RTE_DIM(ctx->args))
+                               return -1;
+                       ctx->args[ctx->args_num++] = token->args[i];
+               }
        return len;
 }
 
@@ -413,6 +1516,29 @@ static void
 cmd_flow_parsed(const struct buffer *in)
 {
        switch (in->command) {
+       case VALIDATE:
+               port_flow_validate(in->port, &in->args.vc.attr,
+                                  in->args.vc.pattern, in->args.vc.actions);
+               break;
+       case CREATE:
+               port_flow_create(in->port, &in->args.vc.attr,
+                                in->args.vc.pattern, in->args.vc.actions);
+               break;
+       case DESTROY:
+               port_flow_destroy(in->port, in->args.destroy.rule_n,
+                                 in->args.destroy.rule);
+               break;
+       case FLUSH:
+               port_flow_flush(in->port);
+               break;
+       case QUERY:
+               port_flow_query(in->port, in->args.query.rule,
+                               in->args.query.action);
+               break;
+       case LIST:
+               port_flow_list(in->port, in->args.list.group_n,
+                              in->args.list.group);
+               break;
        default:
                break;
        }