1 /* SPDX-License-Identifier: BSD-3-Clause
2 * Copyright 2016 6WIND S.A.
3 * Copyright 2016 Mellanox Technologies, Ltd
10 #include <sys/queue.h>
12 #include <rte_common.h>
13 #include <rte_ether.h>
14 #include <ethdev_driver.h>
15 #include <rte_eal_paging.h>
17 #include <rte_cycles.h>
18 #include <rte_flow_driver.h>
19 #include <rte_malloc.h>
22 #include <mlx5_glue.h>
23 #include <mlx5_devx_cmds.h>
25 #include <mlx5_malloc.h>
27 #include "mlx5_defs.h"
29 #include "mlx5_flow.h"
30 #include "mlx5_flow_os.h"
33 #include "mlx5_common_os.h"
34 #include "rte_pmd_mlx5.h"
36 struct tunnel_default_miss_ctx {
40 struct rte_flow_action_rss action_rss;
41 struct rte_flow_action_queue miss_queue;
42 struct rte_flow_action_jump miss_jump;
48 flow_tunnel_add_default_miss(struct rte_eth_dev *dev,
49 struct rte_flow *flow,
50 const struct rte_flow_attr *attr,
51 const struct rte_flow_action *app_actions,
53 struct tunnel_default_miss_ctx *ctx,
54 struct rte_flow_error *error);
55 static struct mlx5_flow_tunnel *
56 mlx5_find_tunnel_id(struct rte_eth_dev *dev, uint32_t id);
58 mlx5_flow_tunnel_free(struct rte_eth_dev *dev, struct mlx5_flow_tunnel *tunnel);
60 tunnel_flow_group_to_flow_table(struct rte_eth_dev *dev,
61 const struct mlx5_flow_tunnel *tunnel,
62 uint32_t group, uint32_t *table,
63 struct rte_flow_error *error);
65 static struct mlx5_flow_workspace *mlx5_flow_push_thread_workspace(void);
66 static void mlx5_flow_pop_thread_workspace(void);
69 /** Device flow drivers. */
70 extern const struct mlx5_flow_driver_ops mlx5_flow_verbs_drv_ops;
72 const struct mlx5_flow_driver_ops mlx5_flow_null_drv_ops;
74 const struct mlx5_flow_driver_ops *flow_drv_ops[] = {
75 [MLX5_FLOW_TYPE_MIN] = &mlx5_flow_null_drv_ops,
76 #if defined(HAVE_IBV_FLOW_DV_SUPPORT) || !defined(HAVE_INFINIBAND_VERBS_H)
77 [MLX5_FLOW_TYPE_DV] = &mlx5_flow_dv_drv_ops,
79 [MLX5_FLOW_TYPE_VERBS] = &mlx5_flow_verbs_drv_ops,
80 [MLX5_FLOW_TYPE_MAX] = &mlx5_flow_null_drv_ops
83 /** Helper macro to build input graph for mlx5_flow_expand_rss(). */
84 #define MLX5_FLOW_EXPAND_RSS_NEXT(...) \
89 /** Node object of input graph for mlx5_flow_expand_rss(). */
90 struct mlx5_flow_expand_node {
91 const int *const next;
93 * List of next node indexes. Index 0 is interpreted as a terminator.
95 const enum rte_flow_item_type type;
96 /**< Pattern item type of current node. */
99 * RSS types bit-field associated with this node
100 * (see ETH_RSS_* definitions).
104 /** Object returned by mlx5_flow_expand_rss(). */
105 struct mlx5_flow_expand_rss {
107 /**< Number of entries @p patterns and @p priorities. */
109 struct rte_flow_item *pattern; /**< Expanded pattern array. */
110 uint32_t priority; /**< Priority offset for each expansion. */
114 static enum rte_flow_item_type
115 mlx5_flow_expand_rss_item_complete(const struct rte_flow_item *item)
117 enum rte_flow_item_type ret = RTE_FLOW_ITEM_TYPE_VOID;
118 uint16_t ether_type = 0;
119 uint16_t ether_type_m;
120 uint8_t ip_next_proto = 0;
121 uint8_t ip_next_proto_m;
123 if (item == NULL || item->spec == NULL)
125 switch (item->type) {
126 case RTE_FLOW_ITEM_TYPE_ETH:
128 ether_type_m = ((const struct rte_flow_item_eth *)
131 ether_type_m = rte_flow_item_eth_mask.type;
132 if (ether_type_m != RTE_BE16(0xFFFF))
134 ether_type = ((const struct rte_flow_item_eth *)
136 if (rte_be_to_cpu_16(ether_type) == RTE_ETHER_TYPE_IPV4)
137 ret = RTE_FLOW_ITEM_TYPE_IPV4;
138 else if (rte_be_to_cpu_16(ether_type) == RTE_ETHER_TYPE_IPV6)
139 ret = RTE_FLOW_ITEM_TYPE_IPV6;
140 else if (rte_be_to_cpu_16(ether_type) == RTE_ETHER_TYPE_VLAN)
141 ret = RTE_FLOW_ITEM_TYPE_VLAN;
143 ret = RTE_FLOW_ITEM_TYPE_END;
145 case RTE_FLOW_ITEM_TYPE_VLAN:
147 ether_type_m = ((const struct rte_flow_item_vlan *)
148 (item->mask))->inner_type;
150 ether_type_m = rte_flow_item_vlan_mask.inner_type;
151 if (ether_type_m != RTE_BE16(0xFFFF))
153 ether_type = ((const struct rte_flow_item_vlan *)
154 (item->spec))->inner_type;
155 if (rte_be_to_cpu_16(ether_type) == RTE_ETHER_TYPE_IPV4)
156 ret = RTE_FLOW_ITEM_TYPE_IPV4;
157 else if (rte_be_to_cpu_16(ether_type) == RTE_ETHER_TYPE_IPV6)
158 ret = RTE_FLOW_ITEM_TYPE_IPV6;
159 else if (rte_be_to_cpu_16(ether_type) == RTE_ETHER_TYPE_VLAN)
160 ret = RTE_FLOW_ITEM_TYPE_VLAN;
162 ret = RTE_FLOW_ITEM_TYPE_END;
164 case RTE_FLOW_ITEM_TYPE_IPV4:
166 ip_next_proto_m = ((const struct rte_flow_item_ipv4 *)
167 (item->mask))->hdr.next_proto_id;
170 rte_flow_item_ipv4_mask.hdr.next_proto_id;
171 if (ip_next_proto_m != 0xFF)
173 ip_next_proto = ((const struct rte_flow_item_ipv4 *)
174 (item->spec))->hdr.next_proto_id;
175 if (ip_next_proto == IPPROTO_UDP)
176 ret = RTE_FLOW_ITEM_TYPE_UDP;
177 else if (ip_next_proto == IPPROTO_TCP)
178 ret = RTE_FLOW_ITEM_TYPE_TCP;
179 else if (ip_next_proto == IPPROTO_IP)
180 ret = RTE_FLOW_ITEM_TYPE_IPV4;
181 else if (ip_next_proto == IPPROTO_IPV6)
182 ret = RTE_FLOW_ITEM_TYPE_IPV6;
184 ret = RTE_FLOW_ITEM_TYPE_END;
186 case RTE_FLOW_ITEM_TYPE_IPV6:
188 ip_next_proto_m = ((const struct rte_flow_item_ipv6 *)
189 (item->mask))->hdr.proto;
192 rte_flow_item_ipv6_mask.hdr.proto;
193 if (ip_next_proto_m != 0xFF)
195 ip_next_proto = ((const struct rte_flow_item_ipv6 *)
196 (item->spec))->hdr.proto;
197 if (ip_next_proto == IPPROTO_UDP)
198 ret = RTE_FLOW_ITEM_TYPE_UDP;
199 else if (ip_next_proto == IPPROTO_TCP)
200 ret = RTE_FLOW_ITEM_TYPE_TCP;
201 else if (ip_next_proto == IPPROTO_IP)
202 ret = RTE_FLOW_ITEM_TYPE_IPV4;
203 else if (ip_next_proto == IPPROTO_IPV6)
204 ret = RTE_FLOW_ITEM_TYPE_IPV6;
206 ret = RTE_FLOW_ITEM_TYPE_END;
209 ret = RTE_FLOW_ITEM_TYPE_VOID;
215 #define MLX5_RSS_EXP_ELT_N 8
218 * Expand RSS flows into several possible flows according to the RSS hash
219 * fields requested and the driver capabilities.
222 * Buffer to store the result expansion.
224 * Buffer size in bytes. If 0, @p buf can be NULL.
228 * RSS types to expand (see ETH_RSS_* definitions).
230 * Input graph to expand @p pattern according to @p types.
231 * @param[in] graph_root_index
232 * Index of root node in @p graph, typically 0.
235 * A positive value representing the size of @p buf in bytes regardless of
236 * @p size on success, a negative errno value otherwise and rte_errno is
237 * set, the following errors are defined:
239 * -E2BIG: graph-depth @p graph is too deep.
242 mlx5_flow_expand_rss(struct mlx5_flow_expand_rss *buf, size_t size,
243 const struct rte_flow_item *pattern, uint64_t types,
244 const struct mlx5_flow_expand_node graph[],
245 int graph_root_index)
247 const struct rte_flow_item *item;
248 const struct mlx5_flow_expand_node *node = &graph[graph_root_index];
249 const int *next_node;
250 const int *stack[MLX5_RSS_EXP_ELT_N];
252 struct rte_flow_item flow_items[MLX5_RSS_EXP_ELT_N];
255 size_t user_pattern_size = 0;
257 const struct mlx5_flow_expand_node *next = NULL;
258 struct rte_flow_item missed_item;
261 const struct rte_flow_item *last_item = NULL;
263 memset(&missed_item, 0, sizeof(missed_item));
264 lsize = offsetof(struct mlx5_flow_expand_rss, entry) +
265 MLX5_RSS_EXP_ELT_N * sizeof(buf->entry[0]);
267 buf->entry[0].priority = 0;
268 buf->entry[0].pattern = (void *)&buf->entry[MLX5_RSS_EXP_ELT_N];
270 addr = buf->entry[0].pattern;
272 for (item = pattern; item->type != RTE_FLOW_ITEM_TYPE_END; item++) {
273 if (item->type != RTE_FLOW_ITEM_TYPE_VOID)
275 for (i = 0; node->next && node->next[i]; ++i) {
276 next = &graph[node->next[i]];
277 if (next->type == item->type)
282 user_pattern_size += sizeof(*item);
284 user_pattern_size += sizeof(*item); /* Handle END item. */
285 lsize += user_pattern_size;
286 /* Copy the user pattern in the first entry of the buffer. */
288 rte_memcpy(addr, pattern, user_pattern_size);
289 addr = (void *)(((uintptr_t)addr) + user_pattern_size);
292 /* Start expanding. */
293 memset(flow_items, 0, sizeof(flow_items));
294 user_pattern_size -= sizeof(*item);
296 * Check if the last valid item has spec set, need complete pattern,
297 * and the pattern can be used for expansion.
299 missed_item.type = mlx5_flow_expand_rss_item_complete(last_item);
300 if (missed_item.type == RTE_FLOW_ITEM_TYPE_END) {
301 /* Item type END indicates expansion is not required. */
304 if (missed_item.type != RTE_FLOW_ITEM_TYPE_VOID) {
307 for (i = 0; node->next && node->next[i]; ++i) {
308 next = &graph[node->next[i]];
309 if (next->type == missed_item.type) {
310 flow_items[0].type = missed_item.type;
311 flow_items[1].type = RTE_FLOW_ITEM_TYPE_END;
317 if (next && missed) {
318 elt = 2; /* missed item + item end. */
320 lsize += elt * sizeof(*item) + user_pattern_size;
321 if ((node->rss_types & types) && lsize <= size) {
322 buf->entry[buf->entries].priority = 1;
323 buf->entry[buf->entries].pattern = addr;
325 rte_memcpy(addr, buf->entry[0].pattern,
327 addr = (void *)(((uintptr_t)addr) + user_pattern_size);
328 rte_memcpy(addr, flow_items, elt * sizeof(*item));
329 addr = (void *)(((uintptr_t)addr) +
330 elt * sizeof(*item));
333 memset(flow_items, 0, sizeof(flow_items));
334 next_node = node->next;
335 stack[stack_pos] = next_node;
336 node = next_node ? &graph[*next_node] : NULL;
338 flow_items[stack_pos].type = node->type;
339 if (node->rss_types & types) {
341 * compute the number of items to copy from the
342 * expansion and copy it.
343 * When the stack_pos is 0, there are 1 element in it,
344 * plus the addition END item.
347 flow_items[stack_pos + 1].type = RTE_FLOW_ITEM_TYPE_END;
348 lsize += elt * sizeof(*item) + user_pattern_size;
350 size_t n = elt * sizeof(*item);
352 buf->entry[buf->entries].priority =
353 stack_pos + 1 + missed;
354 buf->entry[buf->entries].pattern = addr;
356 rte_memcpy(addr, buf->entry[0].pattern,
358 addr = (void *)(((uintptr_t)addr) +
360 rte_memcpy(addr, &missed_item,
361 missed * sizeof(*item));
362 addr = (void *)(((uintptr_t)addr) +
363 missed * sizeof(*item));
364 rte_memcpy(addr, flow_items, n);
365 addr = (void *)(((uintptr_t)addr) + n);
370 next_node = node->next;
371 if (stack_pos++ == MLX5_RSS_EXP_ELT_N) {
375 stack[stack_pos] = next_node;
376 } else if (*(next_node + 1)) {
377 /* Follow up with the next possibility. */
380 /* Move to the next path. */
382 next_node = stack[--stack_pos];
384 stack[stack_pos] = next_node;
386 node = *next_node ? &graph[*next_node] : NULL;
391 enum mlx5_expansion {
393 MLX5_EXPANSION_ROOT_OUTER,
394 MLX5_EXPANSION_ROOT_ETH_VLAN,
395 MLX5_EXPANSION_ROOT_OUTER_ETH_VLAN,
396 MLX5_EXPANSION_OUTER_ETH,
397 MLX5_EXPANSION_OUTER_ETH_VLAN,
398 MLX5_EXPANSION_OUTER_VLAN,
399 MLX5_EXPANSION_OUTER_IPV4,
400 MLX5_EXPANSION_OUTER_IPV4_UDP,
401 MLX5_EXPANSION_OUTER_IPV4_TCP,
402 MLX5_EXPANSION_OUTER_IPV6,
403 MLX5_EXPANSION_OUTER_IPV6_UDP,
404 MLX5_EXPANSION_OUTER_IPV6_TCP,
405 MLX5_EXPANSION_VXLAN,
406 MLX5_EXPANSION_VXLAN_GPE,
410 MLX5_EXPANSION_ETH_VLAN,
413 MLX5_EXPANSION_IPV4_UDP,
414 MLX5_EXPANSION_IPV4_TCP,
416 MLX5_EXPANSION_IPV6_UDP,
417 MLX5_EXPANSION_IPV6_TCP,
420 /** Supported expansion of items. */
421 static const struct mlx5_flow_expand_node mlx5_support_expansion[] = {
422 [MLX5_EXPANSION_ROOT] = {
423 .next = MLX5_FLOW_EXPAND_RSS_NEXT(MLX5_EXPANSION_ETH,
425 MLX5_EXPANSION_IPV6),
426 .type = RTE_FLOW_ITEM_TYPE_END,
428 [MLX5_EXPANSION_ROOT_OUTER] = {
429 .next = MLX5_FLOW_EXPAND_RSS_NEXT(MLX5_EXPANSION_OUTER_ETH,
430 MLX5_EXPANSION_OUTER_IPV4,
431 MLX5_EXPANSION_OUTER_IPV6),
432 .type = RTE_FLOW_ITEM_TYPE_END,
434 [MLX5_EXPANSION_ROOT_ETH_VLAN] = {
435 .next = MLX5_FLOW_EXPAND_RSS_NEXT(MLX5_EXPANSION_ETH_VLAN),
436 .type = RTE_FLOW_ITEM_TYPE_END,
438 [MLX5_EXPANSION_ROOT_OUTER_ETH_VLAN] = {
439 .next = MLX5_FLOW_EXPAND_RSS_NEXT
440 (MLX5_EXPANSION_OUTER_ETH_VLAN),
441 .type = RTE_FLOW_ITEM_TYPE_END,
443 [MLX5_EXPANSION_OUTER_ETH] = {
444 .next = MLX5_FLOW_EXPAND_RSS_NEXT(MLX5_EXPANSION_OUTER_IPV4,
445 MLX5_EXPANSION_OUTER_IPV6,
446 MLX5_EXPANSION_MPLS),
447 .type = RTE_FLOW_ITEM_TYPE_ETH,
450 [MLX5_EXPANSION_OUTER_ETH_VLAN] = {
451 .next = MLX5_FLOW_EXPAND_RSS_NEXT(MLX5_EXPANSION_OUTER_VLAN),
452 .type = RTE_FLOW_ITEM_TYPE_ETH,
455 [MLX5_EXPANSION_OUTER_VLAN] = {
456 .next = MLX5_FLOW_EXPAND_RSS_NEXT(MLX5_EXPANSION_OUTER_IPV4,
457 MLX5_EXPANSION_OUTER_IPV6),
458 .type = RTE_FLOW_ITEM_TYPE_VLAN,
460 [MLX5_EXPANSION_OUTER_IPV4] = {
461 .next = MLX5_FLOW_EXPAND_RSS_NEXT
462 (MLX5_EXPANSION_OUTER_IPV4_UDP,
463 MLX5_EXPANSION_OUTER_IPV4_TCP,
466 MLX5_EXPANSION_IPV6),
467 .type = RTE_FLOW_ITEM_TYPE_IPV4,
468 .rss_types = ETH_RSS_IPV4 | ETH_RSS_FRAG_IPV4 |
469 ETH_RSS_NONFRAG_IPV4_OTHER,
471 [MLX5_EXPANSION_OUTER_IPV4_UDP] = {
472 .next = MLX5_FLOW_EXPAND_RSS_NEXT(MLX5_EXPANSION_VXLAN,
473 MLX5_EXPANSION_VXLAN_GPE),
474 .type = RTE_FLOW_ITEM_TYPE_UDP,
475 .rss_types = ETH_RSS_NONFRAG_IPV4_UDP,
477 [MLX5_EXPANSION_OUTER_IPV4_TCP] = {
478 .type = RTE_FLOW_ITEM_TYPE_TCP,
479 .rss_types = ETH_RSS_NONFRAG_IPV4_TCP,
481 [MLX5_EXPANSION_OUTER_IPV6] = {
482 .next = MLX5_FLOW_EXPAND_RSS_NEXT
483 (MLX5_EXPANSION_OUTER_IPV6_UDP,
484 MLX5_EXPANSION_OUTER_IPV6_TCP,
488 .type = RTE_FLOW_ITEM_TYPE_IPV6,
489 .rss_types = ETH_RSS_IPV6 | ETH_RSS_FRAG_IPV6 |
490 ETH_RSS_NONFRAG_IPV6_OTHER,
492 [MLX5_EXPANSION_OUTER_IPV6_UDP] = {
493 .next = MLX5_FLOW_EXPAND_RSS_NEXT(MLX5_EXPANSION_VXLAN,
494 MLX5_EXPANSION_VXLAN_GPE),
495 .type = RTE_FLOW_ITEM_TYPE_UDP,
496 .rss_types = ETH_RSS_NONFRAG_IPV6_UDP,
498 [MLX5_EXPANSION_OUTER_IPV6_TCP] = {
499 .type = RTE_FLOW_ITEM_TYPE_TCP,
500 .rss_types = ETH_RSS_NONFRAG_IPV6_TCP,
502 [MLX5_EXPANSION_VXLAN] = {
503 .next = MLX5_FLOW_EXPAND_RSS_NEXT(MLX5_EXPANSION_ETH,
505 MLX5_EXPANSION_IPV6),
506 .type = RTE_FLOW_ITEM_TYPE_VXLAN,
508 [MLX5_EXPANSION_VXLAN_GPE] = {
509 .next = MLX5_FLOW_EXPAND_RSS_NEXT(MLX5_EXPANSION_ETH,
511 MLX5_EXPANSION_IPV6),
512 .type = RTE_FLOW_ITEM_TYPE_VXLAN_GPE,
514 [MLX5_EXPANSION_GRE] = {
515 .next = MLX5_FLOW_EXPAND_RSS_NEXT(MLX5_EXPANSION_IPV4,
516 MLX5_EXPANSION_IPV6),
517 .type = RTE_FLOW_ITEM_TYPE_GRE,
519 [MLX5_EXPANSION_MPLS] = {
520 .next = MLX5_FLOW_EXPAND_RSS_NEXT(MLX5_EXPANSION_IPV4,
521 MLX5_EXPANSION_IPV6),
522 .type = RTE_FLOW_ITEM_TYPE_MPLS,
524 [MLX5_EXPANSION_ETH] = {
525 .next = MLX5_FLOW_EXPAND_RSS_NEXT(MLX5_EXPANSION_IPV4,
526 MLX5_EXPANSION_IPV6),
527 .type = RTE_FLOW_ITEM_TYPE_ETH,
529 [MLX5_EXPANSION_ETH_VLAN] = {
530 .next = MLX5_FLOW_EXPAND_RSS_NEXT(MLX5_EXPANSION_VLAN),
531 .type = RTE_FLOW_ITEM_TYPE_ETH,
533 [MLX5_EXPANSION_VLAN] = {
534 .next = MLX5_FLOW_EXPAND_RSS_NEXT(MLX5_EXPANSION_IPV4,
535 MLX5_EXPANSION_IPV6),
536 .type = RTE_FLOW_ITEM_TYPE_VLAN,
538 [MLX5_EXPANSION_IPV4] = {
539 .next = MLX5_FLOW_EXPAND_RSS_NEXT(MLX5_EXPANSION_IPV4_UDP,
540 MLX5_EXPANSION_IPV4_TCP),
541 .type = RTE_FLOW_ITEM_TYPE_IPV4,
542 .rss_types = ETH_RSS_IPV4 | ETH_RSS_FRAG_IPV4 |
543 ETH_RSS_NONFRAG_IPV4_OTHER,
545 [MLX5_EXPANSION_IPV4_UDP] = {
546 .type = RTE_FLOW_ITEM_TYPE_UDP,
547 .rss_types = ETH_RSS_NONFRAG_IPV4_UDP,
549 [MLX5_EXPANSION_IPV4_TCP] = {
550 .type = RTE_FLOW_ITEM_TYPE_TCP,
551 .rss_types = ETH_RSS_NONFRAG_IPV4_TCP,
553 [MLX5_EXPANSION_IPV6] = {
554 .next = MLX5_FLOW_EXPAND_RSS_NEXT(MLX5_EXPANSION_IPV6_UDP,
555 MLX5_EXPANSION_IPV6_TCP),
556 .type = RTE_FLOW_ITEM_TYPE_IPV6,
557 .rss_types = ETH_RSS_IPV6 | ETH_RSS_FRAG_IPV6 |
558 ETH_RSS_NONFRAG_IPV6_OTHER,
560 [MLX5_EXPANSION_IPV6_UDP] = {
561 .type = RTE_FLOW_ITEM_TYPE_UDP,
562 .rss_types = ETH_RSS_NONFRAG_IPV6_UDP,
564 [MLX5_EXPANSION_IPV6_TCP] = {
565 .type = RTE_FLOW_ITEM_TYPE_TCP,
566 .rss_types = ETH_RSS_NONFRAG_IPV6_TCP,
570 static struct rte_flow_action_handle *
571 mlx5_action_handle_create(struct rte_eth_dev *dev,
572 const struct rte_flow_indir_action_conf *conf,
573 const struct rte_flow_action *action,
574 struct rte_flow_error *error);
575 static int mlx5_action_handle_destroy
576 (struct rte_eth_dev *dev,
577 struct rte_flow_action_handle *handle,
578 struct rte_flow_error *error);
579 static int mlx5_action_handle_update
580 (struct rte_eth_dev *dev,
581 struct rte_flow_action_handle *handle,
583 struct rte_flow_error *error);
584 static int mlx5_action_handle_query
585 (struct rte_eth_dev *dev,
586 const struct rte_flow_action_handle *handle,
588 struct rte_flow_error *error);
590 mlx5_flow_tunnel_decap_set(struct rte_eth_dev *dev,
591 struct rte_flow_tunnel *app_tunnel,
592 struct rte_flow_action **actions,
593 uint32_t *num_of_actions,
594 struct rte_flow_error *error);
596 mlx5_flow_tunnel_match(struct rte_eth_dev *dev,
597 struct rte_flow_tunnel *app_tunnel,
598 struct rte_flow_item **items,
599 uint32_t *num_of_items,
600 struct rte_flow_error *error);
602 mlx5_flow_tunnel_item_release(struct rte_eth_dev *dev,
603 struct rte_flow_item *pmd_items,
604 uint32_t num_items, struct rte_flow_error *err);
606 mlx5_flow_tunnel_action_release(struct rte_eth_dev *dev,
607 struct rte_flow_action *pmd_actions,
608 uint32_t num_actions,
609 struct rte_flow_error *err);
611 mlx5_flow_tunnel_get_restore_info(struct rte_eth_dev *dev,
613 struct rte_flow_restore_info *info,
614 struct rte_flow_error *err);
616 static const struct rte_flow_ops mlx5_flow_ops = {
617 .validate = mlx5_flow_validate,
618 .create = mlx5_flow_create,
619 .destroy = mlx5_flow_destroy,
620 .flush = mlx5_flow_flush,
621 .isolate = mlx5_flow_isolate,
622 .query = mlx5_flow_query,
623 .dev_dump = mlx5_flow_dev_dump,
624 .get_aged_flows = mlx5_flow_get_aged_flows,
625 .action_handle_create = mlx5_action_handle_create,
626 .action_handle_destroy = mlx5_action_handle_destroy,
627 .action_handle_update = mlx5_action_handle_update,
628 .action_handle_query = mlx5_action_handle_query,
629 .tunnel_decap_set = mlx5_flow_tunnel_decap_set,
630 .tunnel_match = mlx5_flow_tunnel_match,
631 .tunnel_action_decap_release = mlx5_flow_tunnel_action_release,
632 .tunnel_item_release = mlx5_flow_tunnel_item_release,
633 .get_restore_info = mlx5_flow_tunnel_get_restore_info,
636 /* Tunnel information. */
637 struct mlx5_flow_tunnel_info {
638 uint64_t tunnel; /**< Tunnel bit (see MLX5_FLOW_*). */
639 uint32_t ptype; /**< Tunnel Ptype (see RTE_PTYPE_*). */
642 static struct mlx5_flow_tunnel_info tunnels_info[] = {
644 .tunnel = MLX5_FLOW_LAYER_VXLAN,
645 .ptype = RTE_PTYPE_TUNNEL_VXLAN | RTE_PTYPE_L4_UDP,
648 .tunnel = MLX5_FLOW_LAYER_GENEVE,
649 .ptype = RTE_PTYPE_TUNNEL_GENEVE | RTE_PTYPE_L4_UDP,
652 .tunnel = MLX5_FLOW_LAYER_VXLAN_GPE,
653 .ptype = RTE_PTYPE_TUNNEL_VXLAN_GPE | RTE_PTYPE_L4_UDP,
656 .tunnel = MLX5_FLOW_LAYER_GRE,
657 .ptype = RTE_PTYPE_TUNNEL_GRE,
660 .tunnel = MLX5_FLOW_LAYER_MPLS | MLX5_FLOW_LAYER_OUTER_L4_UDP,
661 .ptype = RTE_PTYPE_TUNNEL_MPLS_IN_UDP | RTE_PTYPE_L4_UDP,
664 .tunnel = MLX5_FLOW_LAYER_MPLS,
665 .ptype = RTE_PTYPE_TUNNEL_MPLS_IN_GRE,
668 .tunnel = MLX5_FLOW_LAYER_NVGRE,
669 .ptype = RTE_PTYPE_TUNNEL_NVGRE,
672 .tunnel = MLX5_FLOW_LAYER_IPIP,
673 .ptype = RTE_PTYPE_TUNNEL_IP,
676 .tunnel = MLX5_FLOW_LAYER_IPV6_ENCAP,
677 .ptype = RTE_PTYPE_TUNNEL_IP,
680 .tunnel = MLX5_FLOW_LAYER_GTP,
681 .ptype = RTE_PTYPE_TUNNEL_GTPU,
688 * Translate tag ID to register.
691 * Pointer to the Ethernet device structure.
693 * The feature that request the register.
695 * The request register ID.
697 * Error description in case of any.
700 * The request register on success, a negative errno
701 * value otherwise and rte_errno is set.
704 mlx5_flow_get_reg_id(struct rte_eth_dev *dev,
705 enum mlx5_feature_name feature,
707 struct rte_flow_error *error)
709 struct mlx5_priv *priv = dev->data->dev_private;
710 struct mlx5_dev_config *config = &priv->config;
711 enum modify_reg start_reg;
712 bool skip_mtr_reg = false;
715 case MLX5_HAIRPIN_RX:
717 case MLX5_HAIRPIN_TX:
719 case MLX5_METADATA_RX:
720 switch (config->dv_xmeta_en) {
721 case MLX5_XMETA_MODE_LEGACY:
723 case MLX5_XMETA_MODE_META16:
725 case MLX5_XMETA_MODE_META32:
729 case MLX5_METADATA_TX:
731 case MLX5_METADATA_FDB:
732 switch (config->dv_xmeta_en) {
733 case MLX5_XMETA_MODE_LEGACY:
735 case MLX5_XMETA_MODE_META16:
737 case MLX5_XMETA_MODE_META32:
742 switch (config->dv_xmeta_en) {
743 case MLX5_XMETA_MODE_LEGACY:
745 case MLX5_XMETA_MODE_META16:
747 case MLX5_XMETA_MODE_META32:
753 * If meter color and meter id share one register, flow match
754 * should use the meter color register for match.
756 if (priv->mtr_reg_share)
757 return priv->mtr_color_reg;
759 return priv->mtr_color_reg != REG_C_2 ? REG_C_2 :
762 case MLX5_ASO_FLOW_HIT: /* Both features use the same REG_C. */
763 MLX5_ASSERT(priv->mtr_color_reg != REG_NON);
764 return priv->mtr_color_reg;
767 * Metadata COPY_MARK register using is in meter suffix sub
768 * flow while with meter. It's safe to share the same register.
770 return priv->mtr_color_reg != REG_C_2 ? REG_C_2 : REG_C_3;
773 * If meter is enable, it will engage the register for color
774 * match and flow match. If meter color match is not using the
775 * REG_C_2, need to skip the REG_C_x be used by meter color
777 * If meter is disable, free to use all available registers.
779 start_reg = priv->mtr_color_reg != REG_C_2 ? REG_C_2 :
780 (priv->mtr_reg_share ? REG_C_3 : REG_C_4);
781 skip_mtr_reg = !!(priv->mtr_en && start_reg == REG_C_2);
782 if (id > (uint32_t)(REG_C_7 - start_reg))
783 return rte_flow_error_set(error, EINVAL,
784 RTE_FLOW_ERROR_TYPE_ITEM,
785 NULL, "invalid tag id");
786 if (config->flow_mreg_c[id + start_reg - REG_C_0] == REG_NON)
787 return rte_flow_error_set(error, ENOTSUP,
788 RTE_FLOW_ERROR_TYPE_ITEM,
789 NULL, "unsupported tag id");
791 * This case means meter is using the REG_C_x great than 2.
792 * Take care not to conflict with meter color REG_C_x.
793 * If the available index REG_C_y >= REG_C_x, skip the
796 if (skip_mtr_reg && config->flow_mreg_c
797 [id + start_reg - REG_C_0] >= priv->mtr_color_reg) {
798 if (id >= (uint32_t)(REG_C_7 - start_reg))
799 return rte_flow_error_set(error, EINVAL,
800 RTE_FLOW_ERROR_TYPE_ITEM,
801 NULL, "invalid tag id");
802 if (config->flow_mreg_c
803 [id + 1 + start_reg - REG_C_0] != REG_NON)
804 return config->flow_mreg_c
805 [id + 1 + start_reg - REG_C_0];
806 return rte_flow_error_set(error, ENOTSUP,
807 RTE_FLOW_ERROR_TYPE_ITEM,
808 NULL, "unsupported tag id");
810 return config->flow_mreg_c[id + start_reg - REG_C_0];
813 return rte_flow_error_set(error, EINVAL,
814 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
815 NULL, "invalid feature name");
819 * Check extensive flow metadata register support.
822 * Pointer to rte_eth_dev structure.
825 * True if device supports extensive flow metadata register, otherwise false.
828 mlx5_flow_ext_mreg_supported(struct rte_eth_dev *dev)
830 struct mlx5_priv *priv = dev->data->dev_private;
831 struct mlx5_dev_config *config = &priv->config;
834 * Having available reg_c can be regarded inclusively as supporting
835 * extensive flow metadata register, which could mean,
836 * - metadata register copy action by modify header.
837 * - 16 modify header actions is supported.
838 * - reg_c's are preserved across different domain (FDB and NIC) on
839 * packet loopback by flow lookup miss.
841 return config->flow_mreg_c[2] != REG_NON;
845 * Get the lowest priority.
848 * Pointer to the Ethernet device structure.
849 * @param[in] attributes
850 * Pointer to device flow rule attributes.
853 * The value of lowest priority of flow.
856 mlx5_get_lowest_priority(struct rte_eth_dev *dev,
857 const struct rte_flow_attr *attr)
859 struct mlx5_priv *priv = dev->data->dev_private;
861 if (!attr->group && !attr->transfer)
862 return priv->config.flow_prio - 2;
863 return MLX5_NON_ROOT_FLOW_MAX_PRIO - 1;
867 * Calculate matcher priority of the flow.
870 * Pointer to the Ethernet device structure.
872 * Pointer to device flow rule attributes.
873 * @param[in] subpriority
874 * The priority based on the items.
876 * The matcher priority of the flow.
879 mlx5_get_matcher_priority(struct rte_eth_dev *dev,
880 const struct rte_flow_attr *attr,
881 uint32_t subpriority)
883 uint16_t priority = (uint16_t)attr->priority;
884 struct mlx5_priv *priv = dev->data->dev_private;
886 if (!attr->group && !attr->transfer) {
887 if (attr->priority == MLX5_FLOW_LOWEST_PRIO_INDICATOR)
888 priority = priv->config.flow_prio - 1;
889 return mlx5_os_flow_adjust_priority(dev, priority, subpriority);
891 if (attr->priority == MLX5_FLOW_LOWEST_PRIO_INDICATOR)
892 priority = MLX5_NON_ROOT_FLOW_MAX_PRIO;
893 return priority * 3 + subpriority;
897 * Verify the @p item specifications (spec, last, mask) are compatible with the
901 * Item specification.
903 * @p item->mask or flow default bit-masks.
904 * @param[in] nic_mask
905 * Bit-masks covering supported fields by the NIC to compare with user mask.
907 * Bit-masks size in bytes.
908 * @param[in] range_accepted
909 * True if range of values is accepted for specific fields, false otherwise.
911 * Pointer to error structure.
914 * 0 on success, a negative errno value otherwise and rte_errno is set.
917 mlx5_flow_item_acceptable(const struct rte_flow_item *item,
919 const uint8_t *nic_mask,
922 struct rte_flow_error *error)
926 MLX5_ASSERT(nic_mask);
927 for (i = 0; i < size; ++i)
928 if ((nic_mask[i] | mask[i]) != nic_mask[i])
929 return rte_flow_error_set(error, ENOTSUP,
930 RTE_FLOW_ERROR_TYPE_ITEM,
932 "mask enables non supported"
934 if (!item->spec && (item->mask || item->last))
935 return rte_flow_error_set(error, EINVAL,
936 RTE_FLOW_ERROR_TYPE_ITEM, item,
937 "mask/last without a spec is not"
939 if (item->spec && item->last && !range_accepted) {
945 for (i = 0; i < size; ++i) {
946 spec[i] = ((const uint8_t *)item->spec)[i] & mask[i];
947 last[i] = ((const uint8_t *)item->last)[i] & mask[i];
949 ret = memcmp(spec, last, size);
951 return rte_flow_error_set(error, EINVAL,
952 RTE_FLOW_ERROR_TYPE_ITEM,
954 "range is not valid");
960 * Adjust the hash fields according to the @p flow information.
962 * @param[in] dev_flow.
963 * Pointer to the mlx5_flow.
965 * 1 when the hash field is for a tunnel item.
966 * @param[in] layer_types
968 * @param[in] hash_fields
972 * The hash fields that should be used.
975 mlx5_flow_hashfields_adjust(struct mlx5_flow_rss_desc *rss_desc,
976 int tunnel __rte_unused, uint64_t layer_types,
977 uint64_t hash_fields)
979 #ifdef HAVE_IBV_DEVICE_TUNNEL_SUPPORT
980 int rss_request_inner = rss_desc->level >= 2;
982 /* Check RSS hash level for tunnel. */
983 if (tunnel && rss_request_inner)
984 hash_fields |= IBV_RX_HASH_INNER;
985 else if (tunnel || rss_request_inner)
988 /* Check if requested layer matches RSS hash fields. */
989 if (!(rss_desc->types & layer_types))
995 * Lookup and set the ptype in the data Rx part. A single Ptype can be used,
996 * if several tunnel rules are used on this queue, the tunnel ptype will be
1000 * Rx queue to update.
1003 flow_rxq_tunnel_ptype_update(struct mlx5_rxq_ctrl *rxq_ctrl)
1006 uint32_t tunnel_ptype = 0;
1008 /* Look up for the ptype to use. */
1009 for (i = 0; i != MLX5_FLOW_TUNNEL; ++i) {
1010 if (!rxq_ctrl->flow_tunnels_n[i])
1012 if (!tunnel_ptype) {
1013 tunnel_ptype = tunnels_info[i].ptype;
1019 rxq_ctrl->rxq.tunnel = tunnel_ptype;
1023 * Set the Rx queue flags (Mark/Flag and Tunnel Ptypes) according to the devive
1027 * Pointer to the Ethernet device structure.
1028 * @param[in] dev_handle
1029 * Pointer to device flow handle structure.
1032 flow_drv_rxq_flags_set(struct rte_eth_dev *dev,
1033 struct mlx5_flow_handle *dev_handle)
1035 struct mlx5_priv *priv = dev->data->dev_private;
1036 const int mark = dev_handle->mark;
1037 const int tunnel = !!(dev_handle->layers & MLX5_FLOW_LAYER_TUNNEL);
1038 struct mlx5_ind_table_obj *ind_tbl = NULL;
1041 if (dev_handle->fate_action == MLX5_FLOW_FATE_QUEUE) {
1042 struct mlx5_hrxq *hrxq;
1044 hrxq = mlx5_ipool_get(priv->sh->ipool[MLX5_IPOOL_HRXQ],
1045 dev_handle->rix_hrxq);
1047 ind_tbl = hrxq->ind_table;
1048 } else if (dev_handle->fate_action == MLX5_FLOW_FATE_SHARED_RSS) {
1049 struct mlx5_shared_action_rss *shared_rss;
1051 shared_rss = mlx5_ipool_get
1052 (priv->sh->ipool[MLX5_IPOOL_RSS_SHARED_ACTIONS],
1053 dev_handle->rix_srss);
1055 ind_tbl = shared_rss->ind_tbl;
1059 for (i = 0; i != ind_tbl->queues_n; ++i) {
1060 int idx = ind_tbl->queues[i];
1061 struct mlx5_rxq_ctrl *rxq_ctrl =
1062 container_of((*priv->rxqs)[idx],
1063 struct mlx5_rxq_ctrl, rxq);
1066 * To support metadata register copy on Tx loopback,
1067 * this must be always enabled (metadata may arive
1068 * from other port - not from local flows only.
1070 if (priv->config.dv_flow_en &&
1071 priv->config.dv_xmeta_en != MLX5_XMETA_MODE_LEGACY &&
1072 mlx5_flow_ext_mreg_supported(dev)) {
1073 rxq_ctrl->rxq.mark = 1;
1074 rxq_ctrl->flow_mark_n = 1;
1076 rxq_ctrl->rxq.mark = 1;
1077 rxq_ctrl->flow_mark_n++;
1082 /* Increase the counter matching the flow. */
1083 for (j = 0; j != MLX5_FLOW_TUNNEL; ++j) {
1084 if ((tunnels_info[j].tunnel &
1085 dev_handle->layers) ==
1086 tunnels_info[j].tunnel) {
1087 rxq_ctrl->flow_tunnels_n[j]++;
1091 flow_rxq_tunnel_ptype_update(rxq_ctrl);
1097 * Set the Rx queue flags (Mark/Flag and Tunnel Ptypes) for a flow
1100 * Pointer to the Ethernet device structure.
1102 * Pointer to flow structure.
1105 flow_rxq_flags_set(struct rte_eth_dev *dev, struct rte_flow *flow)
1107 struct mlx5_priv *priv = dev->data->dev_private;
1108 uint32_t handle_idx;
1109 struct mlx5_flow_handle *dev_handle;
1111 SILIST_FOREACH(priv->sh->ipool[MLX5_IPOOL_MLX5_FLOW], flow->dev_handles,
1112 handle_idx, dev_handle, next)
1113 flow_drv_rxq_flags_set(dev, dev_handle);
1117 * Clear the Rx queue flags (Mark/Flag and Tunnel Ptype) associated with the
1118 * device flow if no other flow uses it with the same kind of request.
1121 * Pointer to Ethernet device.
1122 * @param[in] dev_handle
1123 * Pointer to the device flow handle structure.
1126 flow_drv_rxq_flags_trim(struct rte_eth_dev *dev,
1127 struct mlx5_flow_handle *dev_handle)
1129 struct mlx5_priv *priv = dev->data->dev_private;
1130 const int mark = dev_handle->mark;
1131 const int tunnel = !!(dev_handle->layers & MLX5_FLOW_LAYER_TUNNEL);
1132 struct mlx5_ind_table_obj *ind_tbl = NULL;
1135 if (dev_handle->fate_action == MLX5_FLOW_FATE_QUEUE) {
1136 struct mlx5_hrxq *hrxq;
1138 hrxq = mlx5_ipool_get(priv->sh->ipool[MLX5_IPOOL_HRXQ],
1139 dev_handle->rix_hrxq);
1141 ind_tbl = hrxq->ind_table;
1142 } else if (dev_handle->fate_action == MLX5_FLOW_FATE_SHARED_RSS) {
1143 struct mlx5_shared_action_rss *shared_rss;
1145 shared_rss = mlx5_ipool_get
1146 (priv->sh->ipool[MLX5_IPOOL_RSS_SHARED_ACTIONS],
1147 dev_handle->rix_srss);
1149 ind_tbl = shared_rss->ind_tbl;
1153 MLX5_ASSERT(dev->data->dev_started);
1154 for (i = 0; i != ind_tbl->queues_n; ++i) {
1155 int idx = ind_tbl->queues[i];
1156 struct mlx5_rxq_ctrl *rxq_ctrl =
1157 container_of((*priv->rxqs)[idx],
1158 struct mlx5_rxq_ctrl, rxq);
1160 if (priv->config.dv_flow_en &&
1161 priv->config.dv_xmeta_en != MLX5_XMETA_MODE_LEGACY &&
1162 mlx5_flow_ext_mreg_supported(dev)) {
1163 rxq_ctrl->rxq.mark = 1;
1164 rxq_ctrl->flow_mark_n = 1;
1166 rxq_ctrl->flow_mark_n--;
1167 rxq_ctrl->rxq.mark = !!rxq_ctrl->flow_mark_n;
1172 /* Decrease the counter matching the flow. */
1173 for (j = 0; j != MLX5_FLOW_TUNNEL; ++j) {
1174 if ((tunnels_info[j].tunnel &
1175 dev_handle->layers) ==
1176 tunnels_info[j].tunnel) {
1177 rxq_ctrl->flow_tunnels_n[j]--;
1181 flow_rxq_tunnel_ptype_update(rxq_ctrl);
1187 * Clear the Rx queue flags (Mark/Flag and Tunnel Ptype) associated with the
1188 * @p flow if no other flow uses it with the same kind of request.
1191 * Pointer to Ethernet device.
1193 * Pointer to the flow.
1196 flow_rxq_flags_trim(struct rte_eth_dev *dev, struct rte_flow *flow)
1198 struct mlx5_priv *priv = dev->data->dev_private;
1199 uint32_t handle_idx;
1200 struct mlx5_flow_handle *dev_handle;
1202 SILIST_FOREACH(priv->sh->ipool[MLX5_IPOOL_MLX5_FLOW], flow->dev_handles,
1203 handle_idx, dev_handle, next)
1204 flow_drv_rxq_flags_trim(dev, dev_handle);
1208 * Clear the Mark/Flag and Tunnel ptype information in all Rx queues.
1211 * Pointer to Ethernet device.
1214 flow_rxq_flags_clear(struct rte_eth_dev *dev)
1216 struct mlx5_priv *priv = dev->data->dev_private;
1219 for (i = 0; i != priv->rxqs_n; ++i) {
1220 struct mlx5_rxq_ctrl *rxq_ctrl;
1223 if (!(*priv->rxqs)[i])
1225 rxq_ctrl = container_of((*priv->rxqs)[i],
1226 struct mlx5_rxq_ctrl, rxq);
1227 rxq_ctrl->flow_mark_n = 0;
1228 rxq_ctrl->rxq.mark = 0;
1229 for (j = 0; j != MLX5_FLOW_TUNNEL; ++j)
1230 rxq_ctrl->flow_tunnels_n[j] = 0;
1231 rxq_ctrl->rxq.tunnel = 0;
1236 * Set the Rx queue dynamic metadata (mask and offset) for a flow
1239 * Pointer to the Ethernet device structure.
1242 mlx5_flow_rxq_dynf_metadata_set(struct rte_eth_dev *dev)
1244 struct mlx5_priv *priv = dev->data->dev_private;
1245 struct mlx5_rxq_data *data;
1248 for (i = 0; i != priv->rxqs_n; ++i) {
1249 if (!(*priv->rxqs)[i])
1251 data = (*priv->rxqs)[i];
1252 if (!rte_flow_dynf_metadata_avail()) {
1253 data->dynf_meta = 0;
1254 data->flow_meta_mask = 0;
1255 data->flow_meta_offset = -1;
1256 data->flow_meta_port_mask = 0;
1258 data->dynf_meta = 1;
1259 data->flow_meta_mask = rte_flow_dynf_metadata_mask;
1260 data->flow_meta_offset = rte_flow_dynf_metadata_offs;
1261 data->flow_meta_port_mask = (uint32_t)~0;
1262 if (priv->config.dv_xmeta_en == MLX5_XMETA_MODE_META16)
1263 data->flow_meta_port_mask >>= 16;
1269 * return a pointer to the desired action in the list of actions.
1271 * @param[in] actions
1272 * The list of actions to search the action in.
1274 * The action to find.
1277 * Pointer to the action in the list, if found. NULL otherwise.
1279 const struct rte_flow_action *
1280 mlx5_flow_find_action(const struct rte_flow_action *actions,
1281 enum rte_flow_action_type action)
1283 if (actions == NULL)
1285 for (; actions->type != RTE_FLOW_ACTION_TYPE_END; actions++)
1286 if (actions->type == action)
1292 * Validate the flag action.
1294 * @param[in] action_flags
1295 * Bit-fields that holds the actions detected until now.
1297 * Attributes of flow that includes this action.
1299 * Pointer to error structure.
1302 * 0 on success, a negative errno value otherwise and rte_errno is set.
1305 mlx5_flow_validate_action_flag(uint64_t action_flags,
1306 const struct rte_flow_attr *attr,
1307 struct rte_flow_error *error)
1309 if (action_flags & MLX5_FLOW_ACTION_MARK)
1310 return rte_flow_error_set(error, EINVAL,
1311 RTE_FLOW_ERROR_TYPE_ACTION, NULL,
1312 "can't mark and flag in same flow");
1313 if (action_flags & MLX5_FLOW_ACTION_FLAG)
1314 return rte_flow_error_set(error, EINVAL,
1315 RTE_FLOW_ERROR_TYPE_ACTION, NULL,
1317 " actions in same flow");
1319 return rte_flow_error_set(error, ENOTSUP,
1320 RTE_FLOW_ERROR_TYPE_ATTR_EGRESS, NULL,
1321 "flag action not supported for "
1327 * Validate the mark action.
1330 * Pointer to the queue action.
1331 * @param[in] action_flags
1332 * Bit-fields that holds the actions detected until now.
1334 * Attributes of flow that includes this action.
1336 * Pointer to error structure.
1339 * 0 on success, a negative errno value otherwise and rte_errno is set.
1342 mlx5_flow_validate_action_mark(const struct rte_flow_action *action,
1343 uint64_t action_flags,
1344 const struct rte_flow_attr *attr,
1345 struct rte_flow_error *error)
1347 const struct rte_flow_action_mark *mark = action->conf;
1350 return rte_flow_error_set(error, EINVAL,
1351 RTE_FLOW_ERROR_TYPE_ACTION,
1353 "configuration cannot be null");
1354 if (mark->id >= MLX5_FLOW_MARK_MAX)
1355 return rte_flow_error_set(error, EINVAL,
1356 RTE_FLOW_ERROR_TYPE_ACTION_CONF,
1358 "mark id must in 0 <= id < "
1359 RTE_STR(MLX5_FLOW_MARK_MAX));
1360 if (action_flags & MLX5_FLOW_ACTION_FLAG)
1361 return rte_flow_error_set(error, EINVAL,
1362 RTE_FLOW_ERROR_TYPE_ACTION, NULL,
1363 "can't flag and mark in same flow");
1364 if (action_flags & MLX5_FLOW_ACTION_MARK)
1365 return rte_flow_error_set(error, EINVAL,
1366 RTE_FLOW_ERROR_TYPE_ACTION, NULL,
1367 "can't have 2 mark actions in same"
1370 return rte_flow_error_set(error, ENOTSUP,
1371 RTE_FLOW_ERROR_TYPE_ATTR_EGRESS, NULL,
1372 "mark action not supported for "
1378 * Validate the drop action.
1380 * @param[in] action_flags
1381 * Bit-fields that holds the actions detected until now.
1383 * Attributes of flow that includes this action.
1385 * Pointer to error structure.
1388 * 0 on success, a negative errno value otherwise and rte_errno is set.
1391 mlx5_flow_validate_action_drop(uint64_t action_flags __rte_unused,
1392 const struct rte_flow_attr *attr,
1393 struct rte_flow_error *error)
1396 return rte_flow_error_set(error, ENOTSUP,
1397 RTE_FLOW_ERROR_TYPE_ATTR_EGRESS, NULL,
1398 "drop action not supported for "
1404 * Validate the queue action.
1407 * Pointer to the queue action.
1408 * @param[in] action_flags
1409 * Bit-fields that holds the actions detected until now.
1411 * Pointer to the Ethernet device structure.
1413 * Attributes of flow that includes this action.
1415 * Pointer to error structure.
1418 * 0 on success, a negative errno value otherwise and rte_errno is set.
1421 mlx5_flow_validate_action_queue(const struct rte_flow_action *action,
1422 uint64_t action_flags,
1423 struct rte_eth_dev *dev,
1424 const struct rte_flow_attr *attr,
1425 struct rte_flow_error *error)
1427 struct mlx5_priv *priv = dev->data->dev_private;
1428 const struct rte_flow_action_queue *queue = action->conf;
1430 if (action_flags & MLX5_FLOW_FATE_ACTIONS)
1431 return rte_flow_error_set(error, EINVAL,
1432 RTE_FLOW_ERROR_TYPE_ACTION, NULL,
1433 "can't have 2 fate actions in"
1436 return rte_flow_error_set(error, EINVAL,
1437 RTE_FLOW_ERROR_TYPE_ACTION_CONF,
1438 NULL, "No Rx queues configured");
1439 if (queue->index >= priv->rxqs_n)
1440 return rte_flow_error_set(error, EINVAL,
1441 RTE_FLOW_ERROR_TYPE_ACTION_CONF,
1443 "queue index out of range");
1444 if (!(*priv->rxqs)[queue->index])
1445 return rte_flow_error_set(error, EINVAL,
1446 RTE_FLOW_ERROR_TYPE_ACTION_CONF,
1448 "queue is not configured");
1450 return rte_flow_error_set(error, ENOTSUP,
1451 RTE_FLOW_ERROR_TYPE_ATTR_EGRESS, NULL,
1452 "queue action not supported for "
1458 * Validate the rss action.
1461 * Pointer to the Ethernet device structure.
1463 * Pointer to the queue action.
1465 * Pointer to error structure.
1468 * 0 on success, a negative errno value otherwise and rte_errno is set.
1471 mlx5_validate_action_rss(struct rte_eth_dev *dev,
1472 const struct rte_flow_action *action,
1473 struct rte_flow_error *error)
1475 struct mlx5_priv *priv = dev->data->dev_private;
1476 const struct rte_flow_action_rss *rss = action->conf;
1477 enum mlx5_rxq_type rxq_type = MLX5_RXQ_TYPE_UNDEFINED;
1480 if (rss->func != RTE_ETH_HASH_FUNCTION_DEFAULT &&
1481 rss->func != RTE_ETH_HASH_FUNCTION_TOEPLITZ)
1482 return rte_flow_error_set(error, ENOTSUP,
1483 RTE_FLOW_ERROR_TYPE_ACTION_CONF,
1485 "RSS hash function not supported");
1486 #ifdef HAVE_IBV_DEVICE_TUNNEL_SUPPORT
1491 return rte_flow_error_set(error, ENOTSUP,
1492 RTE_FLOW_ERROR_TYPE_ACTION_CONF,
1494 "tunnel RSS is not supported");
1495 /* allow RSS key_len 0 in case of NULL (default) RSS key. */
1496 if (rss->key_len == 0 && rss->key != NULL)
1497 return rte_flow_error_set(error, ENOTSUP,
1498 RTE_FLOW_ERROR_TYPE_ACTION_CONF,
1500 "RSS hash key length 0");
1501 if (rss->key_len > 0 && rss->key_len < MLX5_RSS_HASH_KEY_LEN)
1502 return rte_flow_error_set(error, ENOTSUP,
1503 RTE_FLOW_ERROR_TYPE_ACTION_CONF,
1505 "RSS hash key too small");
1506 if (rss->key_len > MLX5_RSS_HASH_KEY_LEN)
1507 return rte_flow_error_set(error, ENOTSUP,
1508 RTE_FLOW_ERROR_TYPE_ACTION_CONF,
1510 "RSS hash key too large");
1511 if (rss->queue_num > priv->config.ind_table_max_size)
1512 return rte_flow_error_set(error, ENOTSUP,
1513 RTE_FLOW_ERROR_TYPE_ACTION_CONF,
1515 "number of queues too large");
1516 if (rss->types & MLX5_RSS_HF_MASK)
1517 return rte_flow_error_set(error, ENOTSUP,
1518 RTE_FLOW_ERROR_TYPE_ACTION_CONF,
1520 "some RSS protocols are not"
1522 if ((rss->types & (ETH_RSS_L3_SRC_ONLY | ETH_RSS_L3_DST_ONLY)) &&
1523 !(rss->types & ETH_RSS_IP))
1524 return rte_flow_error_set(error, EINVAL,
1525 RTE_FLOW_ERROR_TYPE_ACTION_CONF, NULL,
1526 "L3 partial RSS requested but L3 RSS"
1527 " type not specified");
1528 if ((rss->types & (ETH_RSS_L4_SRC_ONLY | ETH_RSS_L4_DST_ONLY)) &&
1529 !(rss->types & (ETH_RSS_UDP | ETH_RSS_TCP)))
1530 return rte_flow_error_set(error, EINVAL,
1531 RTE_FLOW_ERROR_TYPE_ACTION_CONF, NULL,
1532 "L4 partial RSS requested but L4 RSS"
1533 " type not specified");
1535 return rte_flow_error_set(error, EINVAL,
1536 RTE_FLOW_ERROR_TYPE_ACTION_CONF,
1537 NULL, "No Rx queues configured");
1538 if (!rss->queue_num)
1539 return rte_flow_error_set(error, EINVAL,
1540 RTE_FLOW_ERROR_TYPE_ACTION_CONF,
1541 NULL, "No queues configured");
1542 for (i = 0; i != rss->queue_num; ++i) {
1543 struct mlx5_rxq_ctrl *rxq_ctrl;
1545 if (rss->queue[i] >= priv->rxqs_n)
1546 return rte_flow_error_set
1548 RTE_FLOW_ERROR_TYPE_ACTION_CONF,
1549 &rss->queue[i], "queue index out of range");
1550 if (!(*priv->rxqs)[rss->queue[i]])
1551 return rte_flow_error_set
1552 (error, EINVAL, RTE_FLOW_ERROR_TYPE_ACTION_CONF,
1553 &rss->queue[i], "queue is not configured");
1554 rxq_ctrl = container_of((*priv->rxqs)[rss->queue[i]],
1555 struct mlx5_rxq_ctrl, rxq);
1557 rxq_type = rxq_ctrl->type;
1558 if (rxq_type != rxq_ctrl->type)
1559 return rte_flow_error_set
1560 (error, ENOTSUP, RTE_FLOW_ERROR_TYPE_ACTION_CONF,
1562 "combining hairpin and regular RSS queues is not supported");
1568 * Validate the rss action.
1571 * Pointer to the queue action.
1572 * @param[in] action_flags
1573 * Bit-fields that holds the actions detected until now.
1575 * Pointer to the Ethernet device structure.
1577 * Attributes of flow that includes this action.
1578 * @param[in] item_flags
1579 * Items that were detected.
1581 * Pointer to error structure.
1584 * 0 on success, a negative errno value otherwise and rte_errno is set.
1587 mlx5_flow_validate_action_rss(const struct rte_flow_action *action,
1588 uint64_t action_flags,
1589 struct rte_eth_dev *dev,
1590 const struct rte_flow_attr *attr,
1591 uint64_t item_flags,
1592 struct rte_flow_error *error)
1594 const struct rte_flow_action_rss *rss = action->conf;
1595 int tunnel = !!(item_flags & MLX5_FLOW_LAYER_TUNNEL);
1598 if (action_flags & MLX5_FLOW_FATE_ACTIONS)
1599 return rte_flow_error_set(error, EINVAL,
1600 RTE_FLOW_ERROR_TYPE_ACTION, NULL,
1601 "can't have 2 fate actions"
1603 ret = mlx5_validate_action_rss(dev, action, error);
1607 return rte_flow_error_set(error, ENOTSUP,
1608 RTE_FLOW_ERROR_TYPE_ATTR_EGRESS, NULL,
1609 "rss action not supported for "
1611 if (rss->level > 1 && !tunnel)
1612 return rte_flow_error_set(error, EINVAL,
1613 RTE_FLOW_ERROR_TYPE_ACTION_CONF, NULL,
1614 "inner RSS is not supported for "
1615 "non-tunnel flows");
1616 if ((item_flags & MLX5_FLOW_LAYER_ECPRI) &&
1617 !(item_flags & MLX5_FLOW_LAYER_INNER_L4_UDP)) {
1618 return rte_flow_error_set(error, EINVAL,
1619 RTE_FLOW_ERROR_TYPE_ACTION_CONF, NULL,
1620 "RSS on eCPRI is not supported now");
1626 * Validate the default miss action.
1628 * @param[in] action_flags
1629 * Bit-fields that holds the actions detected until now.
1631 * Pointer to error structure.
1634 * 0 on success, a negative errno value otherwise and rte_errno is set.
1637 mlx5_flow_validate_action_default_miss(uint64_t action_flags,
1638 const struct rte_flow_attr *attr,
1639 struct rte_flow_error *error)
1641 if (action_flags & MLX5_FLOW_FATE_ACTIONS)
1642 return rte_flow_error_set(error, EINVAL,
1643 RTE_FLOW_ERROR_TYPE_ACTION, NULL,
1644 "can't have 2 fate actions in"
1647 return rte_flow_error_set(error, ENOTSUP,
1648 RTE_FLOW_ERROR_TYPE_ATTR_EGRESS, NULL,
1649 "default miss action not supported "
1652 return rte_flow_error_set(error, ENOTSUP,
1653 RTE_FLOW_ERROR_TYPE_ATTR_GROUP, NULL,
1654 "only group 0 is supported");
1656 return rte_flow_error_set(error, ENOTSUP,
1657 RTE_FLOW_ERROR_TYPE_ATTR_TRANSFER,
1658 NULL, "transfer is not supported");
1663 * Validate the count action.
1666 * Pointer to the Ethernet device structure.
1668 * Attributes of flow that includes this action.
1670 * Pointer to error structure.
1673 * 0 on success, a negative errno value otherwise and rte_errno is set.
1676 mlx5_flow_validate_action_count(struct rte_eth_dev *dev __rte_unused,
1677 const struct rte_flow_attr *attr,
1678 struct rte_flow_error *error)
1681 return rte_flow_error_set(error, ENOTSUP,
1682 RTE_FLOW_ERROR_TYPE_ATTR_EGRESS, NULL,
1683 "count action not supported for "
1689 * Verify the @p attributes will be correctly understood by the NIC and store
1690 * them in the @p flow if everything is correct.
1693 * Pointer to the Ethernet device structure.
1694 * @param[in] attributes
1695 * Pointer to flow attributes
1697 * Pointer to error structure.
1700 * 0 on success, a negative errno value otherwise and rte_errno is set.
1703 mlx5_flow_validate_attributes(struct rte_eth_dev *dev,
1704 const struct rte_flow_attr *attributes,
1705 struct rte_flow_error *error)
1707 struct mlx5_priv *priv = dev->data->dev_private;
1708 uint32_t priority_max = priv->config.flow_prio - 1;
1710 if (attributes->group)
1711 return rte_flow_error_set(error, ENOTSUP,
1712 RTE_FLOW_ERROR_TYPE_ATTR_GROUP,
1713 NULL, "groups is not supported");
1714 if (attributes->priority != MLX5_FLOW_LOWEST_PRIO_INDICATOR &&
1715 attributes->priority >= priority_max)
1716 return rte_flow_error_set(error, ENOTSUP,
1717 RTE_FLOW_ERROR_TYPE_ATTR_PRIORITY,
1718 NULL, "priority out of range");
1719 if (attributes->egress)
1720 return rte_flow_error_set(error, ENOTSUP,
1721 RTE_FLOW_ERROR_TYPE_ATTR_EGRESS, NULL,
1722 "egress is not supported");
1723 if (attributes->transfer && !priv->config.dv_esw_en)
1724 return rte_flow_error_set(error, ENOTSUP,
1725 RTE_FLOW_ERROR_TYPE_ATTR_TRANSFER,
1726 NULL, "transfer is not supported");
1727 if (!attributes->ingress)
1728 return rte_flow_error_set(error, EINVAL,
1729 RTE_FLOW_ERROR_TYPE_ATTR_INGRESS,
1731 "ingress attribute is mandatory");
1736 * Validate ICMP6 item.
1739 * Item specification.
1740 * @param[in] item_flags
1741 * Bit-fields that holds the items detected until now.
1742 * @param[in] ext_vlan_sup
1743 * Whether extended VLAN features are supported or not.
1745 * Pointer to error structure.
1748 * 0 on success, a negative errno value otherwise and rte_errno is set.
1751 mlx5_flow_validate_item_icmp6(const struct rte_flow_item *item,
1752 uint64_t item_flags,
1753 uint8_t target_protocol,
1754 struct rte_flow_error *error)
1756 const struct rte_flow_item_icmp6 *mask = item->mask;
1757 const int tunnel = !!(item_flags & MLX5_FLOW_LAYER_TUNNEL);
1758 const uint64_t l3m = tunnel ? MLX5_FLOW_LAYER_INNER_L3_IPV6 :
1759 MLX5_FLOW_LAYER_OUTER_L3_IPV6;
1760 const uint64_t l4m = tunnel ? MLX5_FLOW_LAYER_INNER_L4 :
1761 MLX5_FLOW_LAYER_OUTER_L4;
1764 if (target_protocol != 0xFF && target_protocol != IPPROTO_ICMPV6)
1765 return rte_flow_error_set(error, EINVAL,
1766 RTE_FLOW_ERROR_TYPE_ITEM, item,
1767 "protocol filtering not compatible"
1768 " with ICMP6 layer");
1769 if (!(item_flags & l3m))
1770 return rte_flow_error_set(error, EINVAL,
1771 RTE_FLOW_ERROR_TYPE_ITEM, item,
1772 "IPv6 is mandatory to filter on"
1774 if (item_flags & l4m)
1775 return rte_flow_error_set(error, EINVAL,
1776 RTE_FLOW_ERROR_TYPE_ITEM, item,
1777 "multiple L4 layers not supported");
1779 mask = &rte_flow_item_icmp6_mask;
1780 ret = mlx5_flow_item_acceptable
1781 (item, (const uint8_t *)mask,
1782 (const uint8_t *)&rte_flow_item_icmp6_mask,
1783 sizeof(struct rte_flow_item_icmp6),
1784 MLX5_ITEM_RANGE_NOT_ACCEPTED, error);
1791 * Validate ICMP item.
1794 * Item specification.
1795 * @param[in] item_flags
1796 * Bit-fields that holds the items detected until now.
1798 * Pointer to error structure.
1801 * 0 on success, a negative errno value otherwise and rte_errno is set.
1804 mlx5_flow_validate_item_icmp(const struct rte_flow_item *item,
1805 uint64_t item_flags,
1806 uint8_t target_protocol,
1807 struct rte_flow_error *error)
1809 const struct rte_flow_item_icmp *mask = item->mask;
1810 const struct rte_flow_item_icmp nic_mask = {
1811 .hdr.icmp_type = 0xff,
1812 .hdr.icmp_code = 0xff,
1813 .hdr.icmp_ident = RTE_BE16(0xffff),
1814 .hdr.icmp_seq_nb = RTE_BE16(0xffff),
1816 const int tunnel = !!(item_flags & MLX5_FLOW_LAYER_TUNNEL);
1817 const uint64_t l3m = tunnel ? MLX5_FLOW_LAYER_INNER_L3_IPV4 :
1818 MLX5_FLOW_LAYER_OUTER_L3_IPV4;
1819 const uint64_t l4m = tunnel ? MLX5_FLOW_LAYER_INNER_L4 :
1820 MLX5_FLOW_LAYER_OUTER_L4;
1823 if (target_protocol != 0xFF && target_protocol != IPPROTO_ICMP)
1824 return rte_flow_error_set(error, EINVAL,
1825 RTE_FLOW_ERROR_TYPE_ITEM, item,
1826 "protocol filtering not compatible"
1827 " with ICMP layer");
1828 if (!(item_flags & l3m))
1829 return rte_flow_error_set(error, EINVAL,
1830 RTE_FLOW_ERROR_TYPE_ITEM, item,
1831 "IPv4 is mandatory to filter"
1833 if (item_flags & l4m)
1834 return rte_flow_error_set(error, EINVAL,
1835 RTE_FLOW_ERROR_TYPE_ITEM, item,
1836 "multiple L4 layers not supported");
1839 ret = mlx5_flow_item_acceptable
1840 (item, (const uint8_t *)mask,
1841 (const uint8_t *)&nic_mask,
1842 sizeof(struct rte_flow_item_icmp),
1843 MLX5_ITEM_RANGE_NOT_ACCEPTED, error);
1850 * Validate Ethernet item.
1853 * Item specification.
1854 * @param[in] item_flags
1855 * Bit-fields that holds the items detected until now.
1857 * Pointer to error structure.
1860 * 0 on success, a negative errno value otherwise and rte_errno is set.
1863 mlx5_flow_validate_item_eth(const struct rte_flow_item *item,
1864 uint64_t item_flags, bool ext_vlan_sup,
1865 struct rte_flow_error *error)
1867 const struct rte_flow_item_eth *mask = item->mask;
1868 const struct rte_flow_item_eth nic_mask = {
1869 .dst.addr_bytes = "\xff\xff\xff\xff\xff\xff",
1870 .src.addr_bytes = "\xff\xff\xff\xff\xff\xff",
1871 .type = RTE_BE16(0xffff),
1872 .has_vlan = ext_vlan_sup ? 1 : 0,
1875 int tunnel = !!(item_flags & MLX5_FLOW_LAYER_TUNNEL);
1876 const uint64_t ethm = tunnel ? MLX5_FLOW_LAYER_INNER_L2 :
1877 MLX5_FLOW_LAYER_OUTER_L2;
1879 if (item_flags & ethm)
1880 return rte_flow_error_set(error, ENOTSUP,
1881 RTE_FLOW_ERROR_TYPE_ITEM, item,
1882 "multiple L2 layers not supported");
1883 if ((!tunnel && (item_flags & MLX5_FLOW_LAYER_OUTER_L3)) ||
1884 (tunnel && (item_flags & MLX5_FLOW_LAYER_INNER_L3)))
1885 return rte_flow_error_set(error, EINVAL,
1886 RTE_FLOW_ERROR_TYPE_ITEM, item,
1887 "L2 layer should not follow "
1889 if ((!tunnel && (item_flags & MLX5_FLOW_LAYER_OUTER_VLAN)) ||
1890 (tunnel && (item_flags & MLX5_FLOW_LAYER_INNER_VLAN)))
1891 return rte_flow_error_set(error, EINVAL,
1892 RTE_FLOW_ERROR_TYPE_ITEM, item,
1893 "L2 layer should not follow VLAN");
1895 mask = &rte_flow_item_eth_mask;
1896 ret = mlx5_flow_item_acceptable(item, (const uint8_t *)mask,
1897 (const uint8_t *)&nic_mask,
1898 sizeof(struct rte_flow_item_eth),
1899 MLX5_ITEM_RANGE_NOT_ACCEPTED, error);
1904 * Validate VLAN item.
1907 * Item specification.
1908 * @param[in] item_flags
1909 * Bit-fields that holds the items detected until now.
1911 * Ethernet device flow is being created on.
1913 * Pointer to error structure.
1916 * 0 on success, a negative errno value otherwise and rte_errno is set.
1919 mlx5_flow_validate_item_vlan(const struct rte_flow_item *item,
1920 uint64_t item_flags,
1921 struct rte_eth_dev *dev,
1922 struct rte_flow_error *error)
1924 const struct rte_flow_item_vlan *spec = item->spec;
1925 const struct rte_flow_item_vlan *mask = item->mask;
1926 const struct rte_flow_item_vlan nic_mask = {
1927 .tci = RTE_BE16(UINT16_MAX),
1928 .inner_type = RTE_BE16(UINT16_MAX),
1930 uint16_t vlan_tag = 0;
1931 const int tunnel = !!(item_flags & MLX5_FLOW_LAYER_TUNNEL);
1933 const uint64_t l34m = tunnel ? (MLX5_FLOW_LAYER_INNER_L3 |
1934 MLX5_FLOW_LAYER_INNER_L4) :
1935 (MLX5_FLOW_LAYER_OUTER_L3 |
1936 MLX5_FLOW_LAYER_OUTER_L4);
1937 const uint64_t vlanm = tunnel ? MLX5_FLOW_LAYER_INNER_VLAN :
1938 MLX5_FLOW_LAYER_OUTER_VLAN;
1940 if (item_flags & vlanm)
1941 return rte_flow_error_set(error, EINVAL,
1942 RTE_FLOW_ERROR_TYPE_ITEM, item,
1943 "multiple VLAN layers not supported");
1944 else if ((item_flags & l34m) != 0)
1945 return rte_flow_error_set(error, EINVAL,
1946 RTE_FLOW_ERROR_TYPE_ITEM, item,
1947 "VLAN cannot follow L3/L4 layer");
1949 mask = &rte_flow_item_vlan_mask;
1950 ret = mlx5_flow_item_acceptable(item, (const uint8_t *)mask,
1951 (const uint8_t *)&nic_mask,
1952 sizeof(struct rte_flow_item_vlan),
1953 MLX5_ITEM_RANGE_NOT_ACCEPTED, error);
1956 if (!tunnel && mask->tci != RTE_BE16(0x0fff)) {
1957 struct mlx5_priv *priv = dev->data->dev_private;
1959 if (priv->vmwa_context) {
1961 * Non-NULL context means we have a virtual machine
1962 * and SR-IOV enabled, we have to create VLAN interface
1963 * to make hypervisor to setup E-Switch vport
1964 * context correctly. We avoid creating the multiple
1965 * VLAN interfaces, so we cannot support VLAN tag mask.
1967 return rte_flow_error_set(error, EINVAL,
1968 RTE_FLOW_ERROR_TYPE_ITEM,
1970 "VLAN tag mask is not"
1971 " supported in virtual"
1976 vlan_tag = spec->tci;
1977 vlan_tag &= mask->tci;
1980 * From verbs perspective an empty VLAN is equivalent
1981 * to a packet without VLAN layer.
1984 return rte_flow_error_set(error, EINVAL,
1985 RTE_FLOW_ERROR_TYPE_ITEM_SPEC,
1987 "VLAN cannot be empty");
1992 * Validate IPV4 item.
1995 * Item specification.
1996 * @param[in] item_flags
1997 * Bit-fields that holds the items detected until now.
1998 * @param[in] last_item
1999 * Previous validated item in the pattern items.
2000 * @param[in] ether_type
2001 * Type in the ethernet layer header (including dot1q).
2002 * @param[in] acc_mask
2003 * Acceptable mask, if NULL default internal default mask
2004 * will be used to check whether item fields are supported.
2005 * @param[in] range_accepted
2006 * True if range of values is accepted for specific fields, false otherwise.
2008 * Pointer to error structure.
2011 * 0 on success, a negative errno value otherwise and rte_errno is set.
2014 mlx5_flow_validate_item_ipv4(const struct rte_flow_item *item,
2015 uint64_t item_flags,
2017 uint16_t ether_type,
2018 const struct rte_flow_item_ipv4 *acc_mask,
2019 bool range_accepted,
2020 struct rte_flow_error *error)
2022 const struct rte_flow_item_ipv4 *mask = item->mask;
2023 const struct rte_flow_item_ipv4 *spec = item->spec;
2024 const struct rte_flow_item_ipv4 nic_mask = {
2026 .src_addr = RTE_BE32(0xffffffff),
2027 .dst_addr = RTE_BE32(0xffffffff),
2028 .type_of_service = 0xff,
2029 .next_proto_id = 0xff,
2032 const int tunnel = !!(item_flags & MLX5_FLOW_LAYER_TUNNEL);
2033 const uint64_t l3m = tunnel ? MLX5_FLOW_LAYER_INNER_L3 :
2034 MLX5_FLOW_LAYER_OUTER_L3;
2035 const uint64_t l4m = tunnel ? MLX5_FLOW_LAYER_INNER_L4 :
2036 MLX5_FLOW_LAYER_OUTER_L4;
2038 uint8_t next_proto = 0xFF;
2039 const uint64_t l2_vlan = (MLX5_FLOW_LAYER_L2 |
2040 MLX5_FLOW_LAYER_OUTER_VLAN |
2041 MLX5_FLOW_LAYER_INNER_VLAN);
2043 if ((last_item & l2_vlan) && ether_type &&
2044 ether_type != RTE_ETHER_TYPE_IPV4)
2045 return rte_flow_error_set(error, EINVAL,
2046 RTE_FLOW_ERROR_TYPE_ITEM, item,
2047 "IPv4 cannot follow L2/VLAN layer "
2048 "which ether type is not IPv4");
2049 if (item_flags & MLX5_FLOW_LAYER_IPIP) {
2051 next_proto = mask->hdr.next_proto_id &
2052 spec->hdr.next_proto_id;
2053 if (next_proto == IPPROTO_IPIP || next_proto == IPPROTO_IPV6)
2054 return rte_flow_error_set(error, EINVAL,
2055 RTE_FLOW_ERROR_TYPE_ITEM,
2060 if (item_flags & MLX5_FLOW_LAYER_IPV6_ENCAP)
2061 return rte_flow_error_set(error, EINVAL,
2062 RTE_FLOW_ERROR_TYPE_ITEM, item,
2063 "wrong tunnel type - IPv6 specified "
2064 "but IPv4 item provided");
2065 if (item_flags & l3m)
2066 return rte_flow_error_set(error, ENOTSUP,
2067 RTE_FLOW_ERROR_TYPE_ITEM, item,
2068 "multiple L3 layers not supported");
2069 else if (item_flags & l4m)
2070 return rte_flow_error_set(error, EINVAL,
2071 RTE_FLOW_ERROR_TYPE_ITEM, item,
2072 "L3 cannot follow an L4 layer.");
2073 else if ((item_flags & MLX5_FLOW_LAYER_NVGRE) &&
2074 !(item_flags & MLX5_FLOW_LAYER_INNER_L2))
2075 return rte_flow_error_set(error, EINVAL,
2076 RTE_FLOW_ERROR_TYPE_ITEM, item,
2077 "L3 cannot follow an NVGRE layer.");
2079 mask = &rte_flow_item_ipv4_mask;
2080 else if (mask->hdr.next_proto_id != 0 &&
2081 mask->hdr.next_proto_id != 0xff)
2082 return rte_flow_error_set(error, EINVAL,
2083 RTE_FLOW_ERROR_TYPE_ITEM_MASK, mask,
2084 "partial mask is not supported"
2086 ret = mlx5_flow_item_acceptable(item, (const uint8_t *)mask,
2087 acc_mask ? (const uint8_t *)acc_mask
2088 : (const uint8_t *)&nic_mask,
2089 sizeof(struct rte_flow_item_ipv4),
2090 range_accepted, error);
2097 * Validate IPV6 item.
2100 * Item specification.
2101 * @param[in] item_flags
2102 * Bit-fields that holds the items detected until now.
2103 * @param[in] last_item
2104 * Previous validated item in the pattern items.
2105 * @param[in] ether_type
2106 * Type in the ethernet layer header (including dot1q).
2107 * @param[in] acc_mask
2108 * Acceptable mask, if NULL default internal default mask
2109 * will be used to check whether item fields are supported.
2111 * Pointer to error structure.
2114 * 0 on success, a negative errno value otherwise and rte_errno is set.
2117 mlx5_flow_validate_item_ipv6(const struct rte_flow_item *item,
2118 uint64_t item_flags,
2120 uint16_t ether_type,
2121 const struct rte_flow_item_ipv6 *acc_mask,
2122 struct rte_flow_error *error)
2124 const struct rte_flow_item_ipv6 *mask = item->mask;
2125 const struct rte_flow_item_ipv6 *spec = item->spec;
2126 const struct rte_flow_item_ipv6 nic_mask = {
2129 "\xff\xff\xff\xff\xff\xff\xff\xff"
2130 "\xff\xff\xff\xff\xff\xff\xff\xff",
2132 "\xff\xff\xff\xff\xff\xff\xff\xff"
2133 "\xff\xff\xff\xff\xff\xff\xff\xff",
2134 .vtc_flow = RTE_BE32(0xffffffff),
2138 const int tunnel = !!(item_flags & MLX5_FLOW_LAYER_TUNNEL);
2139 const uint64_t l3m = tunnel ? MLX5_FLOW_LAYER_INNER_L3 :
2140 MLX5_FLOW_LAYER_OUTER_L3;
2141 const uint64_t l4m = tunnel ? MLX5_FLOW_LAYER_INNER_L4 :
2142 MLX5_FLOW_LAYER_OUTER_L4;
2144 uint8_t next_proto = 0xFF;
2145 const uint64_t l2_vlan = (MLX5_FLOW_LAYER_L2 |
2146 MLX5_FLOW_LAYER_OUTER_VLAN |
2147 MLX5_FLOW_LAYER_INNER_VLAN);
2149 if ((last_item & l2_vlan) && ether_type &&
2150 ether_type != RTE_ETHER_TYPE_IPV6)
2151 return rte_flow_error_set(error, EINVAL,
2152 RTE_FLOW_ERROR_TYPE_ITEM, item,
2153 "IPv6 cannot follow L2/VLAN layer "
2154 "which ether type is not IPv6");
2155 if (mask && mask->hdr.proto == UINT8_MAX && spec)
2156 next_proto = spec->hdr.proto;
2157 if (item_flags & MLX5_FLOW_LAYER_IPV6_ENCAP) {
2158 if (next_proto == IPPROTO_IPIP || next_proto == IPPROTO_IPV6)
2159 return rte_flow_error_set(error, EINVAL,
2160 RTE_FLOW_ERROR_TYPE_ITEM,
2165 if (next_proto == IPPROTO_HOPOPTS ||
2166 next_proto == IPPROTO_ROUTING ||
2167 next_proto == IPPROTO_FRAGMENT ||
2168 next_proto == IPPROTO_ESP ||
2169 next_proto == IPPROTO_AH ||
2170 next_proto == IPPROTO_DSTOPTS)
2171 return rte_flow_error_set(error, EINVAL,
2172 RTE_FLOW_ERROR_TYPE_ITEM, item,
2173 "IPv6 proto (next header) should "
2174 "not be set as extension header");
2175 if (item_flags & MLX5_FLOW_LAYER_IPIP)
2176 return rte_flow_error_set(error, EINVAL,
2177 RTE_FLOW_ERROR_TYPE_ITEM, item,
2178 "wrong tunnel type - IPv4 specified "
2179 "but IPv6 item provided");
2180 if (item_flags & l3m)
2181 return rte_flow_error_set(error, ENOTSUP,
2182 RTE_FLOW_ERROR_TYPE_ITEM, item,
2183 "multiple L3 layers not supported");
2184 else if (item_flags & l4m)
2185 return rte_flow_error_set(error, EINVAL,
2186 RTE_FLOW_ERROR_TYPE_ITEM, item,
2187 "L3 cannot follow an L4 layer.");
2188 else if ((item_flags & MLX5_FLOW_LAYER_NVGRE) &&
2189 !(item_flags & MLX5_FLOW_LAYER_INNER_L2))
2190 return rte_flow_error_set(error, EINVAL,
2191 RTE_FLOW_ERROR_TYPE_ITEM, item,
2192 "L3 cannot follow an NVGRE layer.");
2194 mask = &rte_flow_item_ipv6_mask;
2195 ret = mlx5_flow_item_acceptable(item, (const uint8_t *)mask,
2196 acc_mask ? (const uint8_t *)acc_mask
2197 : (const uint8_t *)&nic_mask,
2198 sizeof(struct rte_flow_item_ipv6),
2199 MLX5_ITEM_RANGE_NOT_ACCEPTED, error);
2206 * Validate UDP item.
2209 * Item specification.
2210 * @param[in] item_flags
2211 * Bit-fields that holds the items detected until now.
2212 * @param[in] target_protocol
2213 * The next protocol in the previous item.
2214 * @param[in] flow_mask
2215 * mlx5 flow-specific (DV, verbs, etc.) supported header fields mask.
2217 * Pointer to error structure.
2220 * 0 on success, a negative errno value otherwise and rte_errno is set.
2223 mlx5_flow_validate_item_udp(const struct rte_flow_item *item,
2224 uint64_t item_flags,
2225 uint8_t target_protocol,
2226 struct rte_flow_error *error)
2228 const struct rte_flow_item_udp *mask = item->mask;
2229 const int tunnel = !!(item_flags & MLX5_FLOW_LAYER_TUNNEL);
2230 const uint64_t l3m = tunnel ? MLX5_FLOW_LAYER_INNER_L3 :
2231 MLX5_FLOW_LAYER_OUTER_L3;
2232 const uint64_t l4m = tunnel ? MLX5_FLOW_LAYER_INNER_L4 :
2233 MLX5_FLOW_LAYER_OUTER_L4;
2236 if (target_protocol != 0xff && target_protocol != IPPROTO_UDP)
2237 return rte_flow_error_set(error, EINVAL,
2238 RTE_FLOW_ERROR_TYPE_ITEM, item,
2239 "protocol filtering not compatible"
2241 if (!(item_flags & l3m))
2242 return rte_flow_error_set(error, EINVAL,
2243 RTE_FLOW_ERROR_TYPE_ITEM, item,
2244 "L3 is mandatory to filter on L4");
2245 if (item_flags & l4m)
2246 return rte_flow_error_set(error, EINVAL,
2247 RTE_FLOW_ERROR_TYPE_ITEM, item,
2248 "multiple L4 layers not supported");
2250 mask = &rte_flow_item_udp_mask;
2251 ret = mlx5_flow_item_acceptable
2252 (item, (const uint8_t *)mask,
2253 (const uint8_t *)&rte_flow_item_udp_mask,
2254 sizeof(struct rte_flow_item_udp), MLX5_ITEM_RANGE_NOT_ACCEPTED,
2262 * Validate TCP item.
2265 * Item specification.
2266 * @param[in] item_flags
2267 * Bit-fields that holds the items detected until now.
2268 * @param[in] target_protocol
2269 * The next protocol in the previous item.
2271 * Pointer to error structure.
2274 * 0 on success, a negative errno value otherwise and rte_errno is set.
2277 mlx5_flow_validate_item_tcp(const struct rte_flow_item *item,
2278 uint64_t item_flags,
2279 uint8_t target_protocol,
2280 const struct rte_flow_item_tcp *flow_mask,
2281 struct rte_flow_error *error)
2283 const struct rte_flow_item_tcp *mask = item->mask;
2284 const int tunnel = !!(item_flags & MLX5_FLOW_LAYER_TUNNEL);
2285 const uint64_t l3m = tunnel ? MLX5_FLOW_LAYER_INNER_L3 :
2286 MLX5_FLOW_LAYER_OUTER_L3;
2287 const uint64_t l4m = tunnel ? MLX5_FLOW_LAYER_INNER_L4 :
2288 MLX5_FLOW_LAYER_OUTER_L4;
2291 MLX5_ASSERT(flow_mask);
2292 if (target_protocol != 0xff && target_protocol != IPPROTO_TCP)
2293 return rte_flow_error_set(error, EINVAL,
2294 RTE_FLOW_ERROR_TYPE_ITEM, item,
2295 "protocol filtering not compatible"
2297 if (!(item_flags & l3m))
2298 return rte_flow_error_set(error, EINVAL,
2299 RTE_FLOW_ERROR_TYPE_ITEM, item,
2300 "L3 is mandatory to filter on L4");
2301 if (item_flags & l4m)
2302 return rte_flow_error_set(error, EINVAL,
2303 RTE_FLOW_ERROR_TYPE_ITEM, item,
2304 "multiple L4 layers not supported");
2306 mask = &rte_flow_item_tcp_mask;
2307 ret = mlx5_flow_item_acceptable
2308 (item, (const uint8_t *)mask,
2309 (const uint8_t *)flow_mask,
2310 sizeof(struct rte_flow_item_tcp), MLX5_ITEM_RANGE_NOT_ACCEPTED,
2318 * Validate VXLAN item.
2321 * Item specification.
2322 * @param[in] item_flags
2323 * Bit-fields that holds the items detected until now.
2324 * @param[in] target_protocol
2325 * The next protocol in the previous item.
2327 * Pointer to error structure.
2330 * 0 on success, a negative errno value otherwise and rte_errno is set.
2333 mlx5_flow_validate_item_vxlan(const struct rte_flow_item *item,
2334 uint64_t item_flags,
2335 struct rte_flow_error *error)
2337 const struct rte_flow_item_vxlan *spec = item->spec;
2338 const struct rte_flow_item_vxlan *mask = item->mask;
2343 } id = { .vlan_id = 0, };
2346 if (item_flags & MLX5_FLOW_LAYER_TUNNEL)
2347 return rte_flow_error_set(error, ENOTSUP,
2348 RTE_FLOW_ERROR_TYPE_ITEM, item,
2349 "multiple tunnel layers not"
2352 * Verify only UDPv4 is present as defined in
2353 * https://tools.ietf.org/html/rfc7348
2355 if (!(item_flags & MLX5_FLOW_LAYER_OUTER_L4_UDP))
2356 return rte_flow_error_set(error, EINVAL,
2357 RTE_FLOW_ERROR_TYPE_ITEM, item,
2358 "no outer UDP layer found");
2360 mask = &rte_flow_item_vxlan_mask;
2361 ret = mlx5_flow_item_acceptable
2362 (item, (const uint8_t *)mask,
2363 (const uint8_t *)&rte_flow_item_vxlan_mask,
2364 sizeof(struct rte_flow_item_vxlan),
2365 MLX5_ITEM_RANGE_NOT_ACCEPTED, error);
2369 memcpy(&id.vni[1], spec->vni, 3);
2370 memcpy(&id.vni[1], mask->vni, 3);
2372 if (!(item_flags & MLX5_FLOW_LAYER_OUTER))
2373 return rte_flow_error_set(error, ENOTSUP,
2374 RTE_FLOW_ERROR_TYPE_ITEM, item,
2375 "VXLAN tunnel must be fully defined");
2380 * Validate VXLAN_GPE item.
2383 * Item specification.
2384 * @param[in] item_flags
2385 * Bit-fields that holds the items detected until now.
2387 * Pointer to the private data structure.
2388 * @param[in] target_protocol
2389 * The next protocol in the previous item.
2391 * Pointer to error structure.
2394 * 0 on success, a negative errno value otherwise and rte_errno is set.
2397 mlx5_flow_validate_item_vxlan_gpe(const struct rte_flow_item *item,
2398 uint64_t item_flags,
2399 struct rte_eth_dev *dev,
2400 struct rte_flow_error *error)
2402 struct mlx5_priv *priv = dev->data->dev_private;
2403 const struct rte_flow_item_vxlan_gpe *spec = item->spec;
2404 const struct rte_flow_item_vxlan_gpe *mask = item->mask;
2409 } id = { .vlan_id = 0, };
2411 if (!priv->config.l3_vxlan_en)
2412 return rte_flow_error_set(error, ENOTSUP,
2413 RTE_FLOW_ERROR_TYPE_ITEM, item,
2414 "L3 VXLAN is not enabled by device"
2415 " parameter and/or not configured in"
2417 if (item_flags & MLX5_FLOW_LAYER_TUNNEL)
2418 return rte_flow_error_set(error, ENOTSUP,
2419 RTE_FLOW_ERROR_TYPE_ITEM, item,
2420 "multiple tunnel layers not"
2423 * Verify only UDPv4 is present as defined in
2424 * https://tools.ietf.org/html/rfc7348
2426 if (!(item_flags & MLX5_FLOW_LAYER_OUTER_L4_UDP))
2427 return rte_flow_error_set(error, EINVAL,
2428 RTE_FLOW_ERROR_TYPE_ITEM, item,
2429 "no outer UDP layer found");
2431 mask = &rte_flow_item_vxlan_gpe_mask;
2432 ret = mlx5_flow_item_acceptable
2433 (item, (const uint8_t *)mask,
2434 (const uint8_t *)&rte_flow_item_vxlan_gpe_mask,
2435 sizeof(struct rte_flow_item_vxlan_gpe),
2436 MLX5_ITEM_RANGE_NOT_ACCEPTED, error);
2441 return rte_flow_error_set(error, ENOTSUP,
2442 RTE_FLOW_ERROR_TYPE_ITEM,
2444 "VxLAN-GPE protocol"
2446 memcpy(&id.vni[1], spec->vni, 3);
2447 memcpy(&id.vni[1], mask->vni, 3);
2449 if (!(item_flags & MLX5_FLOW_LAYER_OUTER))
2450 return rte_flow_error_set(error, ENOTSUP,
2451 RTE_FLOW_ERROR_TYPE_ITEM, item,
2452 "VXLAN-GPE tunnel must be fully"
2457 * Validate GRE Key item.
2460 * Item specification.
2461 * @param[in] item_flags
2462 * Bit flags to mark detected items.
2463 * @param[in] gre_item
2464 * Pointer to gre_item
2466 * Pointer to error structure.
2469 * 0 on success, a negative errno value otherwise and rte_errno is set.
2472 mlx5_flow_validate_item_gre_key(const struct rte_flow_item *item,
2473 uint64_t item_flags,
2474 const struct rte_flow_item *gre_item,
2475 struct rte_flow_error *error)
2477 const rte_be32_t *mask = item->mask;
2479 rte_be32_t gre_key_default_mask = RTE_BE32(UINT32_MAX);
2480 const struct rte_flow_item_gre *gre_spec;
2481 const struct rte_flow_item_gre *gre_mask;
2483 if (item_flags & MLX5_FLOW_LAYER_GRE_KEY)
2484 return rte_flow_error_set(error, ENOTSUP,
2485 RTE_FLOW_ERROR_TYPE_ITEM, item,
2486 "Multiple GRE key not support");
2487 if (!(item_flags & MLX5_FLOW_LAYER_GRE))
2488 return rte_flow_error_set(error, ENOTSUP,
2489 RTE_FLOW_ERROR_TYPE_ITEM, item,
2490 "No preceding GRE header");
2491 if (item_flags & MLX5_FLOW_LAYER_INNER)
2492 return rte_flow_error_set(error, ENOTSUP,
2493 RTE_FLOW_ERROR_TYPE_ITEM, item,
2494 "GRE key following a wrong item");
2495 gre_mask = gre_item->mask;
2497 gre_mask = &rte_flow_item_gre_mask;
2498 gre_spec = gre_item->spec;
2499 if (gre_spec && (gre_mask->c_rsvd0_ver & RTE_BE16(0x2000)) &&
2500 !(gre_spec->c_rsvd0_ver & RTE_BE16(0x2000)))
2501 return rte_flow_error_set(error, EINVAL,
2502 RTE_FLOW_ERROR_TYPE_ITEM, item,
2503 "Key bit must be on");
2506 mask = &gre_key_default_mask;
2507 ret = mlx5_flow_item_acceptable
2508 (item, (const uint8_t *)mask,
2509 (const uint8_t *)&gre_key_default_mask,
2510 sizeof(rte_be32_t), MLX5_ITEM_RANGE_NOT_ACCEPTED, error);
2515 * Validate GRE item.
2518 * Item specification.
2519 * @param[in] item_flags
2520 * Bit flags to mark detected items.
2521 * @param[in] target_protocol
2522 * The next protocol in the previous item.
2524 * Pointer to error structure.
2527 * 0 on success, a negative errno value otherwise and rte_errno is set.
2530 mlx5_flow_validate_item_gre(const struct rte_flow_item *item,
2531 uint64_t item_flags,
2532 uint8_t target_protocol,
2533 struct rte_flow_error *error)
2535 const struct rte_flow_item_gre *spec __rte_unused = item->spec;
2536 const struct rte_flow_item_gre *mask = item->mask;
2538 const struct rte_flow_item_gre nic_mask = {
2539 .c_rsvd0_ver = RTE_BE16(0xB000),
2540 .protocol = RTE_BE16(UINT16_MAX),
2543 if (target_protocol != 0xff && target_protocol != IPPROTO_GRE)
2544 return rte_flow_error_set(error, EINVAL,
2545 RTE_FLOW_ERROR_TYPE_ITEM, item,
2546 "protocol filtering not compatible"
2547 " with this GRE layer");
2548 if (item_flags & MLX5_FLOW_LAYER_TUNNEL)
2549 return rte_flow_error_set(error, ENOTSUP,
2550 RTE_FLOW_ERROR_TYPE_ITEM, item,
2551 "multiple tunnel layers not"
2553 if (!(item_flags & MLX5_FLOW_LAYER_OUTER_L3))
2554 return rte_flow_error_set(error, ENOTSUP,
2555 RTE_FLOW_ERROR_TYPE_ITEM, item,
2556 "L3 Layer is missing");
2558 mask = &rte_flow_item_gre_mask;
2559 ret = mlx5_flow_item_acceptable
2560 (item, (const uint8_t *)mask,
2561 (const uint8_t *)&nic_mask,
2562 sizeof(struct rte_flow_item_gre), MLX5_ITEM_RANGE_NOT_ACCEPTED,
2566 #ifndef HAVE_MLX5DV_DR
2567 #ifndef HAVE_IBV_DEVICE_MPLS_SUPPORT
2568 if (spec && (spec->protocol & mask->protocol))
2569 return rte_flow_error_set(error, ENOTSUP,
2570 RTE_FLOW_ERROR_TYPE_ITEM, item,
2571 "without MPLS support the"
2572 " specification cannot be used for"
2580 * Validate Geneve item.
2583 * Item specification.
2584 * @param[in] itemFlags
2585 * Bit-fields that holds the items detected until now.
2587 * Pointer to the private data structure.
2589 * Pointer to error structure.
2592 * 0 on success, a negative errno value otherwise and rte_errno is set.
2596 mlx5_flow_validate_item_geneve(const struct rte_flow_item *item,
2597 uint64_t item_flags,
2598 struct rte_eth_dev *dev,
2599 struct rte_flow_error *error)
2601 struct mlx5_priv *priv = dev->data->dev_private;
2602 const struct rte_flow_item_geneve *spec = item->spec;
2603 const struct rte_flow_item_geneve *mask = item->mask;
2606 uint8_t opt_len = priv->config.hca_attr.geneve_max_opt_len ?
2607 MLX5_GENEVE_OPT_LEN_1 : MLX5_GENEVE_OPT_LEN_0;
2608 const struct rte_flow_item_geneve nic_mask = {
2609 .ver_opt_len_o_c_rsvd0 = RTE_BE16(0x3f80),
2610 .vni = "\xff\xff\xff",
2611 .protocol = RTE_BE16(UINT16_MAX),
2614 if (!priv->config.hca_attr.tunnel_stateless_geneve_rx)
2615 return rte_flow_error_set(error, ENOTSUP,
2616 RTE_FLOW_ERROR_TYPE_ITEM, item,
2617 "L3 Geneve is not enabled by device"
2618 " parameter and/or not configured in"
2620 if (item_flags & MLX5_FLOW_LAYER_TUNNEL)
2621 return rte_flow_error_set(error, ENOTSUP,
2622 RTE_FLOW_ERROR_TYPE_ITEM, item,
2623 "multiple tunnel layers not"
2626 * Verify only UDPv4 is present as defined in
2627 * https://tools.ietf.org/html/rfc7348
2629 if (!(item_flags & MLX5_FLOW_LAYER_OUTER_L4_UDP))
2630 return rte_flow_error_set(error, EINVAL,
2631 RTE_FLOW_ERROR_TYPE_ITEM, item,
2632 "no outer UDP layer found");
2634 mask = &rte_flow_item_geneve_mask;
2635 ret = mlx5_flow_item_acceptable
2636 (item, (const uint8_t *)mask,
2637 (const uint8_t *)&nic_mask,
2638 sizeof(struct rte_flow_item_geneve),
2639 MLX5_ITEM_RANGE_NOT_ACCEPTED, error);
2643 gbhdr = rte_be_to_cpu_16(spec->ver_opt_len_o_c_rsvd0);
2644 if (MLX5_GENEVE_VER_VAL(gbhdr) ||
2645 MLX5_GENEVE_CRITO_VAL(gbhdr) ||
2646 MLX5_GENEVE_RSVD_VAL(gbhdr) || spec->rsvd1)
2647 return rte_flow_error_set(error, ENOTSUP,
2648 RTE_FLOW_ERROR_TYPE_ITEM,
2650 "Geneve protocol unsupported"
2651 " fields are being used");
2652 if (MLX5_GENEVE_OPTLEN_VAL(gbhdr) > opt_len)
2653 return rte_flow_error_set
2655 RTE_FLOW_ERROR_TYPE_ITEM,
2657 "Unsupported Geneve options length");
2659 if (!(item_flags & MLX5_FLOW_LAYER_OUTER))
2660 return rte_flow_error_set
2662 RTE_FLOW_ERROR_TYPE_ITEM, item,
2663 "Geneve tunnel must be fully defined");
2668 * Validate Geneve TLV option item.
2671 * Item specification.
2672 * @param[in] last_item
2673 * Previous validated item in the pattern items.
2674 * @param[in] geneve_item
2675 * Previous GENEVE item specification.
2677 * Pointer to the rte_eth_dev structure.
2679 * Pointer to error structure.
2682 * 0 on success, a negative errno value otherwise and rte_errno is set.
2685 mlx5_flow_validate_item_geneve_opt(const struct rte_flow_item *item,
2687 const struct rte_flow_item *geneve_item,
2688 struct rte_eth_dev *dev,
2689 struct rte_flow_error *error)
2691 struct mlx5_priv *priv = dev->data->dev_private;
2692 struct mlx5_dev_ctx_shared *sh = priv->sh;
2693 struct mlx5_geneve_tlv_option_resource *geneve_opt_resource;
2694 struct mlx5_hca_attr *hca_attr = &priv->config.hca_attr;
2695 uint8_t data_max_supported =
2696 hca_attr->max_geneve_tlv_option_data_len * 4;
2697 struct mlx5_dev_config *config = &priv->config;
2698 const struct rte_flow_item_geneve *geneve_spec;
2699 const struct rte_flow_item_geneve *geneve_mask;
2700 const struct rte_flow_item_geneve_opt *spec = item->spec;
2701 const struct rte_flow_item_geneve_opt *mask = item->mask;
2703 unsigned int data_len;
2704 uint8_t tlv_option_len;
2705 uint16_t optlen_m, optlen_v;
2706 const struct rte_flow_item_geneve_opt full_mask = {
2707 .option_class = RTE_BE16(0xffff),
2708 .option_type = 0xff,
2713 mask = &rte_flow_item_geneve_opt_mask;
2715 return rte_flow_error_set
2716 (error, ENOTSUP, RTE_FLOW_ERROR_TYPE_ITEM, item,
2717 "Geneve TLV opt class/type/length must be specified");
2718 if ((uint32_t)spec->option_len > MLX5_GENEVE_OPTLEN_MASK)
2719 return rte_flow_error_set
2720 (error, ENOTSUP, RTE_FLOW_ERROR_TYPE_ITEM, item,
2721 "Geneve TLV opt length exceeeds the limit (31)");
2722 /* Check if class type and length masks are full. */
2723 if (full_mask.option_class != mask->option_class ||
2724 full_mask.option_type != mask->option_type ||
2725 full_mask.option_len != (mask->option_len & full_mask.option_len))
2726 return rte_flow_error_set
2727 (error, ENOTSUP, RTE_FLOW_ERROR_TYPE_ITEM, item,
2728 "Geneve TLV opt class/type/length masks must be full");
2729 /* Check if length is supported */
2730 if ((uint32_t)spec->option_len >
2731 config->hca_attr.max_geneve_tlv_option_data_len)
2732 return rte_flow_error_set
2733 (error, ENOTSUP, RTE_FLOW_ERROR_TYPE_ITEM, item,
2734 "Geneve TLV opt length not supported");
2735 if (config->hca_attr.max_geneve_tlv_options > 1)
2737 "max_geneve_tlv_options supports more than 1 option");
2738 /* Check GENEVE item preceding. */
2739 if (!geneve_item || !(last_item & MLX5_FLOW_LAYER_GENEVE))
2740 return rte_flow_error_set
2741 (error, ENOTSUP, RTE_FLOW_ERROR_TYPE_ITEM, item,
2742 "Geneve opt item must be preceded with Geneve item");
2743 geneve_spec = geneve_item->spec;
2744 geneve_mask = geneve_item->mask ? geneve_item->mask :
2745 &rte_flow_item_geneve_mask;
2746 /* Check if GENEVE TLV option size doesn't exceed option length */
2747 if (geneve_spec && (geneve_mask->ver_opt_len_o_c_rsvd0 ||
2748 geneve_spec->ver_opt_len_o_c_rsvd0)) {
2749 tlv_option_len = spec->option_len & mask->option_len;
2750 optlen_v = rte_be_to_cpu_16(geneve_spec->ver_opt_len_o_c_rsvd0);
2751 optlen_v = MLX5_GENEVE_OPTLEN_VAL(optlen_v);
2752 optlen_m = rte_be_to_cpu_16(geneve_mask->ver_opt_len_o_c_rsvd0);
2753 optlen_m = MLX5_GENEVE_OPTLEN_VAL(optlen_m);
2754 if ((optlen_v & optlen_m) <= tlv_option_len)
2755 return rte_flow_error_set
2756 (error, ENOTSUP, RTE_FLOW_ERROR_TYPE_ITEM, item,
2757 "GENEVE TLV option length exceeds optlen");
2759 /* Check if length is 0 or data is 0. */
2760 if (spec->data == NULL || spec->option_len == 0)
2761 return rte_flow_error_set
2762 (error, ENOTSUP, RTE_FLOW_ERROR_TYPE_ITEM, item,
2763 "Geneve TLV opt with zero data/length not supported");
2764 /* Check not all data & mask are 0. */
2765 data_len = spec->option_len * 4;
2766 if (mask->data == NULL) {
2767 for (i = 0; i < data_len; i++)
2771 return rte_flow_error_set(error, ENOTSUP,
2772 RTE_FLOW_ERROR_TYPE_ITEM, item,
2773 "Can't match on Geneve option data 0");
2775 for (i = 0; i < data_len; i++)
2776 if (spec->data[i] & mask->data[i])
2779 return rte_flow_error_set(error, ENOTSUP,
2780 RTE_FLOW_ERROR_TYPE_ITEM, item,
2781 "Can't match on Geneve option data and mask 0");
2782 /* Check data mask supported. */
2783 for (i = data_max_supported; i < data_len ; i++)
2785 return rte_flow_error_set(error, ENOTSUP,
2786 RTE_FLOW_ERROR_TYPE_ITEM, item,
2787 "Data mask is of unsupported size");
2789 /* Check GENEVE option is supported in NIC. */
2790 if (!config->hca_attr.geneve_tlv_opt)
2791 return rte_flow_error_set
2792 (error, ENOTSUP, RTE_FLOW_ERROR_TYPE_ITEM, item,
2793 "Geneve TLV opt not supported");
2794 /* Check if we already have geneve option with different type/class. */
2795 rte_spinlock_lock(&sh->geneve_tlv_opt_sl);
2796 geneve_opt_resource = sh->geneve_tlv_option_resource;
2797 if (geneve_opt_resource != NULL)
2798 if (geneve_opt_resource->option_class != spec->option_class ||
2799 geneve_opt_resource->option_type != spec->option_type ||
2800 geneve_opt_resource->length != spec->option_len) {
2801 rte_spinlock_unlock(&sh->geneve_tlv_opt_sl);
2802 return rte_flow_error_set(error, ENOTSUP,
2803 RTE_FLOW_ERROR_TYPE_ITEM, item,
2804 "Only one Geneve TLV option supported");
2806 rte_spinlock_unlock(&sh->geneve_tlv_opt_sl);
2811 * Validate MPLS item.
2814 * Pointer to the rte_eth_dev structure.
2816 * Item specification.
2817 * @param[in] item_flags
2818 * Bit-fields that holds the items detected until now.
2819 * @param[in] prev_layer
2820 * The protocol layer indicated in previous item.
2822 * Pointer to error structure.
2825 * 0 on success, a negative errno value otherwise and rte_errno is set.
2828 mlx5_flow_validate_item_mpls(struct rte_eth_dev *dev __rte_unused,
2829 const struct rte_flow_item *item __rte_unused,
2830 uint64_t item_flags __rte_unused,
2831 uint64_t prev_layer __rte_unused,
2832 struct rte_flow_error *error)
2834 #ifdef HAVE_IBV_DEVICE_MPLS_SUPPORT
2835 const struct rte_flow_item_mpls *mask = item->mask;
2836 struct mlx5_priv *priv = dev->data->dev_private;
2839 if (!priv->config.mpls_en)
2840 return rte_flow_error_set(error, ENOTSUP,
2841 RTE_FLOW_ERROR_TYPE_ITEM, item,
2842 "MPLS not supported or"
2843 " disabled in firmware"
2845 /* MPLS over IP, UDP, GRE is allowed */
2846 if (!(prev_layer & (MLX5_FLOW_LAYER_OUTER_L3 |
2847 MLX5_FLOW_LAYER_OUTER_L4_UDP |
2848 MLX5_FLOW_LAYER_GRE |
2849 MLX5_FLOW_LAYER_GRE_KEY)))
2850 return rte_flow_error_set(error, EINVAL,
2851 RTE_FLOW_ERROR_TYPE_ITEM, item,
2852 "protocol filtering not compatible"
2853 " with MPLS layer");
2854 /* Multi-tunnel isn't allowed but MPLS over GRE is an exception. */
2855 if ((item_flags & MLX5_FLOW_LAYER_TUNNEL) &&
2856 !(item_flags & MLX5_FLOW_LAYER_GRE))
2857 return rte_flow_error_set(error, ENOTSUP,
2858 RTE_FLOW_ERROR_TYPE_ITEM, item,
2859 "multiple tunnel layers not"
2862 mask = &rte_flow_item_mpls_mask;
2863 ret = mlx5_flow_item_acceptable
2864 (item, (const uint8_t *)mask,
2865 (const uint8_t *)&rte_flow_item_mpls_mask,
2866 sizeof(struct rte_flow_item_mpls),
2867 MLX5_ITEM_RANGE_NOT_ACCEPTED, error);
2872 return rte_flow_error_set(error, ENOTSUP,
2873 RTE_FLOW_ERROR_TYPE_ITEM, item,
2874 "MPLS is not supported by Verbs, please"
2880 * Validate NVGRE item.
2883 * Item specification.
2884 * @param[in] item_flags
2885 * Bit flags to mark detected items.
2886 * @param[in] target_protocol
2887 * The next protocol in the previous item.
2889 * Pointer to error structure.
2892 * 0 on success, a negative errno value otherwise and rte_errno is set.
2895 mlx5_flow_validate_item_nvgre(const struct rte_flow_item *item,
2896 uint64_t item_flags,
2897 uint8_t target_protocol,
2898 struct rte_flow_error *error)
2900 const struct rte_flow_item_nvgre *mask = item->mask;
2903 if (target_protocol != 0xff && target_protocol != IPPROTO_GRE)
2904 return rte_flow_error_set(error, EINVAL,
2905 RTE_FLOW_ERROR_TYPE_ITEM, item,
2906 "protocol filtering not compatible"
2907 " with this GRE layer");
2908 if (item_flags & MLX5_FLOW_LAYER_TUNNEL)
2909 return rte_flow_error_set(error, ENOTSUP,
2910 RTE_FLOW_ERROR_TYPE_ITEM, item,
2911 "multiple tunnel layers not"
2913 if (!(item_flags & MLX5_FLOW_LAYER_OUTER_L3))
2914 return rte_flow_error_set(error, ENOTSUP,
2915 RTE_FLOW_ERROR_TYPE_ITEM, item,
2916 "L3 Layer is missing");
2918 mask = &rte_flow_item_nvgre_mask;
2919 ret = mlx5_flow_item_acceptable
2920 (item, (const uint8_t *)mask,
2921 (const uint8_t *)&rte_flow_item_nvgre_mask,
2922 sizeof(struct rte_flow_item_nvgre),
2923 MLX5_ITEM_RANGE_NOT_ACCEPTED, error);
2930 * Validate eCPRI item.
2933 * Item specification.
2934 * @param[in] item_flags
2935 * Bit-fields that holds the items detected until now.
2936 * @param[in] last_item
2937 * Previous validated item in the pattern items.
2938 * @param[in] ether_type
2939 * Type in the ethernet layer header (including dot1q).
2940 * @param[in] acc_mask
2941 * Acceptable mask, if NULL default internal default mask
2942 * will be used to check whether item fields are supported.
2944 * Pointer to error structure.
2947 * 0 on success, a negative errno value otherwise and rte_errno is set.
2950 mlx5_flow_validate_item_ecpri(const struct rte_flow_item *item,
2951 uint64_t item_flags,
2953 uint16_t ether_type,
2954 const struct rte_flow_item_ecpri *acc_mask,
2955 struct rte_flow_error *error)
2957 const struct rte_flow_item_ecpri *mask = item->mask;
2958 const struct rte_flow_item_ecpri nic_mask = {
2962 RTE_BE32(((const struct rte_ecpri_common_hdr) {
2966 .dummy[0] = 0xFFFFFFFF,
2969 const uint64_t outer_l2_vlan = (MLX5_FLOW_LAYER_OUTER_L2 |
2970 MLX5_FLOW_LAYER_OUTER_VLAN);
2971 struct rte_flow_item_ecpri mask_lo;
2973 if (!(last_item & outer_l2_vlan) &&
2974 last_item != MLX5_FLOW_LAYER_OUTER_L4_UDP)
2975 return rte_flow_error_set(error, EINVAL,
2976 RTE_FLOW_ERROR_TYPE_ITEM, item,
2977 "eCPRI can only follow L2/VLAN layer or UDP layer");
2978 if ((last_item & outer_l2_vlan) && ether_type &&
2979 ether_type != RTE_ETHER_TYPE_ECPRI)
2980 return rte_flow_error_set(error, EINVAL,
2981 RTE_FLOW_ERROR_TYPE_ITEM, item,
2982 "eCPRI cannot follow L2/VLAN layer which ether type is not 0xAEFE");
2983 if (item_flags & MLX5_FLOW_LAYER_TUNNEL)
2984 return rte_flow_error_set(error, EINVAL,
2985 RTE_FLOW_ERROR_TYPE_ITEM, item,
2986 "eCPRI with tunnel is not supported right now");
2987 if (item_flags & MLX5_FLOW_LAYER_OUTER_L3)
2988 return rte_flow_error_set(error, ENOTSUP,
2989 RTE_FLOW_ERROR_TYPE_ITEM, item,
2990 "multiple L3 layers not supported");
2991 else if (item_flags & MLX5_FLOW_LAYER_OUTER_L4_TCP)
2992 return rte_flow_error_set(error, EINVAL,
2993 RTE_FLOW_ERROR_TYPE_ITEM, item,
2994 "eCPRI cannot coexist with a TCP layer");
2995 /* In specification, eCPRI could be over UDP layer. */
2996 else if (item_flags & MLX5_FLOW_LAYER_OUTER_L4_UDP)
2997 return rte_flow_error_set(error, EINVAL,
2998 RTE_FLOW_ERROR_TYPE_ITEM, item,
2999 "eCPRI over UDP layer is not yet supported right now");
3000 /* Mask for type field in common header could be zero. */
3002 mask = &rte_flow_item_ecpri_mask;
3003 mask_lo.hdr.common.u32 = rte_be_to_cpu_32(mask->hdr.common.u32);
3004 /* Input mask is in big-endian format. */
3005 if (mask_lo.hdr.common.type != 0 && mask_lo.hdr.common.type != 0xff)
3006 return rte_flow_error_set(error, EINVAL,
3007 RTE_FLOW_ERROR_TYPE_ITEM_MASK, mask,
3008 "partial mask is not supported for protocol");
3009 else if (mask_lo.hdr.common.type == 0 && mask->hdr.dummy[0] != 0)
3010 return rte_flow_error_set(error, EINVAL,
3011 RTE_FLOW_ERROR_TYPE_ITEM_MASK, mask,
3012 "message header mask must be after a type mask");
3013 return mlx5_flow_item_acceptable(item, (const uint8_t *)mask,
3014 acc_mask ? (const uint8_t *)acc_mask
3015 : (const uint8_t *)&nic_mask,
3016 sizeof(struct rte_flow_item_ecpri),
3017 MLX5_ITEM_RANGE_NOT_ACCEPTED, error);
3021 * Release resource related QUEUE/RSS action split.
3024 * Pointer to Ethernet device.
3026 * Flow to release id's from.
3029 flow_mreg_split_qrss_release(struct rte_eth_dev *dev,
3030 struct rte_flow *flow)
3032 struct mlx5_priv *priv = dev->data->dev_private;
3033 uint32_t handle_idx;
3034 struct mlx5_flow_handle *dev_handle;
3036 SILIST_FOREACH(priv->sh->ipool[MLX5_IPOOL_MLX5_FLOW], flow->dev_handles,
3037 handle_idx, dev_handle, next)
3038 if (dev_handle->split_flow_id &&
3039 !dev_handle->is_meter_flow_id)
3040 mlx5_ipool_free(priv->sh->ipool
3041 [MLX5_IPOOL_RSS_EXPANTION_FLOW_ID],
3042 dev_handle->split_flow_id);
3046 flow_null_validate(struct rte_eth_dev *dev __rte_unused,
3047 const struct rte_flow_attr *attr __rte_unused,
3048 const struct rte_flow_item items[] __rte_unused,
3049 const struct rte_flow_action actions[] __rte_unused,
3050 bool external __rte_unused,
3051 int hairpin __rte_unused,
3052 struct rte_flow_error *error)
3054 return rte_flow_error_set(error, ENOTSUP,
3055 RTE_FLOW_ERROR_TYPE_UNSPECIFIED, NULL, NULL);
3058 static struct mlx5_flow *
3059 flow_null_prepare(struct rte_eth_dev *dev __rte_unused,
3060 const struct rte_flow_attr *attr __rte_unused,
3061 const struct rte_flow_item items[] __rte_unused,
3062 const struct rte_flow_action actions[] __rte_unused,
3063 struct rte_flow_error *error)
3065 rte_flow_error_set(error, ENOTSUP,
3066 RTE_FLOW_ERROR_TYPE_UNSPECIFIED, NULL, NULL);
3071 flow_null_translate(struct rte_eth_dev *dev __rte_unused,
3072 struct mlx5_flow *dev_flow __rte_unused,
3073 const struct rte_flow_attr *attr __rte_unused,
3074 const struct rte_flow_item items[] __rte_unused,
3075 const struct rte_flow_action actions[] __rte_unused,
3076 struct rte_flow_error *error)
3078 return rte_flow_error_set(error, ENOTSUP,
3079 RTE_FLOW_ERROR_TYPE_UNSPECIFIED, NULL, NULL);
3083 flow_null_apply(struct rte_eth_dev *dev __rte_unused,
3084 struct rte_flow *flow __rte_unused,
3085 struct rte_flow_error *error)
3087 return rte_flow_error_set(error, ENOTSUP,
3088 RTE_FLOW_ERROR_TYPE_UNSPECIFIED, NULL, NULL);
3092 flow_null_remove(struct rte_eth_dev *dev __rte_unused,
3093 struct rte_flow *flow __rte_unused)
3098 flow_null_destroy(struct rte_eth_dev *dev __rte_unused,
3099 struct rte_flow *flow __rte_unused)
3104 flow_null_query(struct rte_eth_dev *dev __rte_unused,
3105 struct rte_flow *flow __rte_unused,
3106 const struct rte_flow_action *actions __rte_unused,
3107 void *data __rte_unused,
3108 struct rte_flow_error *error)
3110 return rte_flow_error_set(error, ENOTSUP,
3111 RTE_FLOW_ERROR_TYPE_UNSPECIFIED, NULL, NULL);
3115 flow_null_sync_domain(struct rte_eth_dev *dev __rte_unused,
3116 uint32_t domains __rte_unused,
3117 uint32_t flags __rte_unused)
3122 /* Void driver to protect from null pointer reference. */
3123 const struct mlx5_flow_driver_ops mlx5_flow_null_drv_ops = {
3124 .validate = flow_null_validate,
3125 .prepare = flow_null_prepare,
3126 .translate = flow_null_translate,
3127 .apply = flow_null_apply,
3128 .remove = flow_null_remove,
3129 .destroy = flow_null_destroy,
3130 .query = flow_null_query,
3131 .sync_domain = flow_null_sync_domain,
3135 * Select flow driver type according to flow attributes and device
3139 * Pointer to the dev structure.
3141 * Pointer to the flow attributes.
3144 * flow driver type, MLX5_FLOW_TYPE_MAX otherwise.
3146 static enum mlx5_flow_drv_type
3147 flow_get_drv_type(struct rte_eth_dev *dev, const struct rte_flow_attr *attr)
3149 struct mlx5_priv *priv = dev->data->dev_private;
3150 /* The OS can determine first a specific flow type (DV, VERBS) */
3151 enum mlx5_flow_drv_type type = mlx5_flow_os_get_type();
3153 if (type != MLX5_FLOW_TYPE_MAX)
3155 /* If no OS specific type - continue with DV/VERBS selection */
3156 if (attr->transfer && priv->config.dv_esw_en)
3157 type = MLX5_FLOW_TYPE_DV;
3158 if (!attr->transfer)
3159 type = priv->config.dv_flow_en ? MLX5_FLOW_TYPE_DV :
3160 MLX5_FLOW_TYPE_VERBS;
3164 #define flow_get_drv_ops(type) flow_drv_ops[type]
3167 * Flow driver validation API. This abstracts calling driver specific functions.
3168 * The type of flow driver is determined according to flow attributes.
3171 * Pointer to the dev structure.
3173 * Pointer to the flow attributes.
3175 * Pointer to the list of items.
3176 * @param[in] actions
3177 * Pointer to the list of actions.
3178 * @param[in] external
3179 * This flow rule is created by request external to PMD.
3180 * @param[in] hairpin
3181 * Number of hairpin TX actions, 0 means classic flow.
3183 * Pointer to the error structure.
3186 * 0 on success, a negative errno value otherwise and rte_errno is set.
3189 flow_drv_validate(struct rte_eth_dev *dev,
3190 const struct rte_flow_attr *attr,
3191 const struct rte_flow_item items[],
3192 const struct rte_flow_action actions[],
3193 bool external, int hairpin, struct rte_flow_error *error)
3195 const struct mlx5_flow_driver_ops *fops;
3196 enum mlx5_flow_drv_type type = flow_get_drv_type(dev, attr);
3198 fops = flow_get_drv_ops(type);
3199 return fops->validate(dev, attr, items, actions, external,
3204 * Flow driver preparation API. This abstracts calling driver specific
3205 * functions. Parent flow (rte_flow) should have driver type (drv_type). It
3206 * calculates the size of memory required for device flow, allocates the memory,
3207 * initializes the device flow and returns the pointer.
3210 * This function initializes device flow structure such as dv or verbs in
3211 * struct mlx5_flow. However, it is caller's responsibility to initialize the
3212 * rest. For example, adding returning device flow to flow->dev_flow list and
3213 * setting backward reference to the flow should be done out of this function.
3214 * layers field is not filled either.
3217 * Pointer to the dev structure.
3219 * Pointer to the flow attributes.
3221 * Pointer to the list of items.
3222 * @param[in] actions
3223 * Pointer to the list of actions.
3224 * @param[in] flow_idx
3225 * This memory pool index to the flow.
3227 * Pointer to the error structure.
3230 * Pointer to device flow on success, otherwise NULL and rte_errno is set.
3232 static inline struct mlx5_flow *
3233 flow_drv_prepare(struct rte_eth_dev *dev,
3234 const struct rte_flow *flow,
3235 const struct rte_flow_attr *attr,
3236 const struct rte_flow_item items[],
3237 const struct rte_flow_action actions[],
3239 struct rte_flow_error *error)
3241 const struct mlx5_flow_driver_ops *fops;
3242 enum mlx5_flow_drv_type type = flow->drv_type;
3243 struct mlx5_flow *mlx5_flow = NULL;
3245 MLX5_ASSERT(type > MLX5_FLOW_TYPE_MIN && type < MLX5_FLOW_TYPE_MAX);
3246 fops = flow_get_drv_ops(type);
3247 mlx5_flow = fops->prepare(dev, attr, items, actions, error);
3249 mlx5_flow->flow_idx = flow_idx;
3254 * Flow driver translation API. This abstracts calling driver specific
3255 * functions. Parent flow (rte_flow) should have driver type (drv_type). It
3256 * translates a generic flow into a driver flow. flow_drv_prepare() must
3260 * dev_flow->layers could be filled as a result of parsing during translation
3261 * if needed by flow_drv_apply(). dev_flow->flow->actions can also be filled
3262 * if necessary. As a flow can have multiple dev_flows by RSS flow expansion,
3263 * flow->actions could be overwritten even though all the expanded dev_flows
3264 * have the same actions.
3267 * Pointer to the rte dev structure.
3268 * @param[in, out] dev_flow
3269 * Pointer to the mlx5 flow.
3271 * Pointer to the flow attributes.
3273 * Pointer to the list of items.
3274 * @param[in] actions
3275 * Pointer to the list of actions.
3277 * Pointer to the error structure.
3280 * 0 on success, a negative errno value otherwise and rte_errno is set.
3283 flow_drv_translate(struct rte_eth_dev *dev, struct mlx5_flow *dev_flow,
3284 const struct rte_flow_attr *attr,
3285 const struct rte_flow_item items[],
3286 const struct rte_flow_action actions[],
3287 struct rte_flow_error *error)
3289 const struct mlx5_flow_driver_ops *fops;
3290 enum mlx5_flow_drv_type type = dev_flow->flow->drv_type;
3292 MLX5_ASSERT(type > MLX5_FLOW_TYPE_MIN && type < MLX5_FLOW_TYPE_MAX);
3293 fops = flow_get_drv_ops(type);
3294 return fops->translate(dev, dev_flow, attr, items, actions, error);
3298 * Flow driver apply API. This abstracts calling driver specific functions.
3299 * Parent flow (rte_flow) should have driver type (drv_type). It applies
3300 * translated driver flows on to device. flow_drv_translate() must precede.
3303 * Pointer to Ethernet device structure.
3304 * @param[in, out] flow
3305 * Pointer to flow structure.
3307 * Pointer to error structure.
3310 * 0 on success, a negative errno value otherwise and rte_errno is set.
3313 flow_drv_apply(struct rte_eth_dev *dev, struct rte_flow *flow,
3314 struct rte_flow_error *error)
3316 const struct mlx5_flow_driver_ops *fops;
3317 enum mlx5_flow_drv_type type = flow->drv_type;
3319 MLX5_ASSERT(type > MLX5_FLOW_TYPE_MIN && type < MLX5_FLOW_TYPE_MAX);
3320 fops = flow_get_drv_ops(type);
3321 return fops->apply(dev, flow, error);
3325 * Flow driver destroy API. This abstracts calling driver specific functions.
3326 * Parent flow (rte_flow) should have driver type (drv_type). It removes a flow
3327 * on device and releases resources of the flow.
3330 * Pointer to Ethernet device.
3331 * @param[in, out] flow
3332 * Pointer to flow structure.
3335 flow_drv_destroy(struct rte_eth_dev *dev, struct rte_flow *flow)
3337 const struct mlx5_flow_driver_ops *fops;
3338 enum mlx5_flow_drv_type type = flow->drv_type;
3340 flow_mreg_split_qrss_release(dev, flow);
3341 MLX5_ASSERT(type > MLX5_FLOW_TYPE_MIN && type < MLX5_FLOW_TYPE_MAX);
3342 fops = flow_get_drv_ops(type);
3343 fops->destroy(dev, flow);
3347 * Get RSS action from the action list.
3349 * @param[in] actions
3350 * Pointer to the list of actions.
3353 * Pointer to the RSS action if exist, else return NULL.
3355 static const struct rte_flow_action_rss*
3356 flow_get_rss_action(const struct rte_flow_action actions[])
3358 const struct rte_flow_action_rss *rss = NULL;
3360 for (; actions->type != RTE_FLOW_ACTION_TYPE_END; actions++) {
3361 switch (actions->type) {
3362 case RTE_FLOW_ACTION_TYPE_RSS:
3363 rss = actions->conf;
3365 case RTE_FLOW_ACTION_TYPE_SAMPLE:
3367 const struct rte_flow_action_sample *sample =
3369 const struct rte_flow_action *act = sample->actions;
3370 for (; act->type != RTE_FLOW_ACTION_TYPE_END; act++)
3371 if (act->type == RTE_FLOW_ACTION_TYPE_RSS)
3383 * Get ASO age action by index.
3386 * Pointer to the Ethernet device structure.
3387 * @param[in] age_idx
3388 * Index to the ASO age action.
3391 * The specified ASO age action.
3393 struct mlx5_aso_age_action*
3394 flow_aso_age_get_by_idx(struct rte_eth_dev *dev, uint32_t age_idx)
3396 uint16_t pool_idx = age_idx & UINT16_MAX;
3397 uint16_t offset = (age_idx >> 16) & UINT16_MAX;
3398 struct mlx5_priv *priv = dev->data->dev_private;
3399 struct mlx5_aso_age_mng *mng = priv->sh->aso_age_mng;
3400 struct mlx5_aso_age_pool *pool = mng->pools[pool_idx];
3402 return &pool->actions[offset - 1];
3405 /* maps indirect action to translated direct in some actions array */
3406 struct mlx5_translated_action_handle {
3407 struct rte_flow_action_handle *action; /**< Indirect action handle. */
3408 int index; /**< Index in related array of rte_flow_action. */
3412 * Translates actions of type RTE_FLOW_ACTION_TYPE_INDIRECT to related
3413 * direct action if translation possible.
3414 * This functionality used to run same execution path for both direct and
3415 * indirect actions on flow create. All necessary preparations for indirect
3416 * action handling should be performed on *handle* actions list returned
3420 * Pointer to Ethernet device.
3421 * @param[in] actions
3422 * List of actions to translate.
3423 * @param[out] handle
3424 * List to store translated indirect action object handles.
3425 * @param[in, out] indir_n
3426 * Size of *handle* array. On return should be updated with number of
3427 * indirect actions retrieved from the *actions* list.
3428 * @param[out] translated_actions
3429 * List of actions where all indirect actions were translated to direct
3430 * if possible. NULL if no translation took place.
3432 * Pointer to the error structure.
3435 * 0 on success, a negative errno value otherwise and rte_errno is set.
3438 flow_action_handles_translate(struct rte_eth_dev *dev,
3439 const struct rte_flow_action actions[],
3440 struct mlx5_translated_action_handle *handle,
3442 struct rte_flow_action **translated_actions,
3443 struct rte_flow_error *error)
3445 struct mlx5_priv *priv = dev->data->dev_private;
3446 struct rte_flow_action *translated = NULL;
3447 size_t actions_size;
3450 struct mlx5_translated_action_handle *handle_end = NULL;
3452 for (n = 0; actions[n].type != RTE_FLOW_ACTION_TYPE_END; n++) {
3453 if (actions[n].type != RTE_FLOW_ACTION_TYPE_INDIRECT)
3455 if (copied_n == *indir_n) {
3456 return rte_flow_error_set
3457 (error, EINVAL, RTE_FLOW_ERROR_TYPE_ACTION_NUM,
3458 NULL, "too many shared actions");
3460 rte_memcpy(&handle[copied_n].action, &actions[n].conf,
3461 sizeof(actions[n].conf));
3462 handle[copied_n].index = n;
3466 *indir_n = copied_n;
3469 actions_size = sizeof(struct rte_flow_action) * n;
3470 translated = mlx5_malloc(MLX5_MEM_ZERO, actions_size, 0, SOCKET_ID_ANY);
3475 memcpy(translated, actions, actions_size);
3476 for (handle_end = handle + copied_n; handle < handle_end; handle++) {
3477 struct mlx5_shared_action_rss *shared_rss;
3478 uint32_t act_idx = (uint32_t)(uintptr_t)handle->action;
3479 uint32_t type = act_idx >> MLX5_INDIRECT_ACTION_TYPE_OFFSET;
3480 uint32_t idx = act_idx &
3481 ((1u << MLX5_INDIRECT_ACTION_TYPE_OFFSET) - 1);
3484 case MLX5_INDIRECT_ACTION_TYPE_RSS:
3485 shared_rss = mlx5_ipool_get
3486 (priv->sh->ipool[MLX5_IPOOL_RSS_SHARED_ACTIONS], idx);
3487 translated[handle->index].type =
3488 RTE_FLOW_ACTION_TYPE_RSS;
3489 translated[handle->index].conf =
3490 &shared_rss->origin;
3492 case MLX5_INDIRECT_ACTION_TYPE_AGE:
3493 if (priv->sh->flow_hit_aso_en) {
3494 translated[handle->index].type =
3495 (enum rte_flow_action_type)
3496 MLX5_RTE_FLOW_ACTION_TYPE_AGE;
3497 translated[handle->index].conf =
3498 (void *)(uintptr_t)idx;
3503 mlx5_free(translated);
3504 return rte_flow_error_set
3505 (error, EINVAL, RTE_FLOW_ERROR_TYPE_ACTION,
3506 NULL, "invalid indirect action type");
3509 *translated_actions = translated;
3514 * Get Shared RSS action from the action list.
3517 * Pointer to Ethernet device.
3519 * Pointer to the list of actions.
3520 * @param[in] shared_n
3521 * Actions list length.
3524 * The MLX5 RSS action ID if exists, otherwise return 0.
3527 flow_get_shared_rss_action(struct rte_eth_dev *dev,
3528 struct mlx5_translated_action_handle *handle,
3531 struct mlx5_translated_action_handle *handle_end;
3532 struct mlx5_priv *priv = dev->data->dev_private;
3533 struct mlx5_shared_action_rss *shared_rss;
3536 for (handle_end = handle + shared_n; handle < handle_end; handle++) {
3537 uint32_t act_idx = (uint32_t)(uintptr_t)handle->action;
3538 uint32_t type = act_idx >> MLX5_INDIRECT_ACTION_TYPE_OFFSET;
3539 uint32_t idx = act_idx &
3540 ((1u << MLX5_INDIRECT_ACTION_TYPE_OFFSET) - 1);
3542 case MLX5_INDIRECT_ACTION_TYPE_RSS:
3543 shared_rss = mlx5_ipool_get
3544 (priv->sh->ipool[MLX5_IPOOL_RSS_SHARED_ACTIONS],
3546 __atomic_add_fetch(&shared_rss->refcnt, 1,
3557 find_graph_root(const struct rte_flow_item pattern[], uint32_t rss_level)
3559 const struct rte_flow_item *item;
3560 unsigned int has_vlan = 0;
3562 for (item = pattern; item->type != RTE_FLOW_ITEM_TYPE_END; item++) {
3563 if (item->type == RTE_FLOW_ITEM_TYPE_VLAN) {
3569 return rss_level < 2 ? MLX5_EXPANSION_ROOT_ETH_VLAN :
3570 MLX5_EXPANSION_ROOT_OUTER_ETH_VLAN;
3571 return rss_level < 2 ? MLX5_EXPANSION_ROOT :
3572 MLX5_EXPANSION_ROOT_OUTER;
3576 * Get layer flags from the prefix flow.
3578 * Some flows may be split to several subflows, the prefix subflow gets the
3579 * match items and the suffix sub flow gets the actions.
3580 * Some actions need the user defined match item flags to get the detail for
3582 * This function helps the suffix flow to get the item layer flags from prefix
3585 * @param[in] dev_flow
3586 * Pointer the created preifx subflow.
3589 * The layers get from prefix subflow.
3591 static inline uint64_t
3592 flow_get_prefix_layer_flags(struct mlx5_flow *dev_flow)
3594 uint64_t layers = 0;
3597 * Layers bits could be localization, but usually the compiler will
3598 * help to do the optimization work for source code.
3599 * If no decap actions, use the layers directly.
3601 if (!(dev_flow->act_flags & MLX5_FLOW_ACTION_DECAP))
3602 return dev_flow->handle->layers;
3603 /* Convert L3 layers with decap action. */
3604 if (dev_flow->handle->layers & MLX5_FLOW_LAYER_INNER_L3_IPV4)
3605 layers |= MLX5_FLOW_LAYER_OUTER_L3_IPV4;
3606 else if (dev_flow->handle->layers & MLX5_FLOW_LAYER_INNER_L3_IPV6)
3607 layers |= MLX5_FLOW_LAYER_OUTER_L3_IPV6;
3608 /* Convert L4 layers with decap action. */
3609 if (dev_flow->handle->layers & MLX5_FLOW_LAYER_INNER_L4_TCP)
3610 layers |= MLX5_FLOW_LAYER_OUTER_L4_TCP;
3611 else if (dev_flow->handle->layers & MLX5_FLOW_LAYER_INNER_L4_UDP)
3612 layers |= MLX5_FLOW_LAYER_OUTER_L4_UDP;
3617 * Get metadata split action information.
3619 * @param[in] actions
3620 * Pointer to the list of actions.
3622 * Pointer to the return pointer.
3623 * @param[out] qrss_type
3624 * Pointer to the action type to return. RTE_FLOW_ACTION_TYPE_END is returned
3625 * if no QUEUE/RSS is found.
3626 * @param[out] encap_idx
3627 * Pointer to the index of the encap action if exists, otherwise the last
3631 * Total number of actions.
3634 flow_parse_metadata_split_actions_info(const struct rte_flow_action actions[],
3635 const struct rte_flow_action **qrss,
3638 const struct rte_flow_action_raw_encap *raw_encap;
3640 int raw_decap_idx = -1;
3643 for (; actions->type != RTE_FLOW_ACTION_TYPE_END; actions++) {
3644 switch (actions->type) {
3645 case RTE_FLOW_ACTION_TYPE_VXLAN_ENCAP:
3646 case RTE_FLOW_ACTION_TYPE_NVGRE_ENCAP:
3647 *encap_idx = actions_n;
3649 case RTE_FLOW_ACTION_TYPE_RAW_DECAP:
3650 raw_decap_idx = actions_n;
3652 case RTE_FLOW_ACTION_TYPE_RAW_ENCAP:
3653 raw_encap = actions->conf;
3654 if (raw_encap->size > MLX5_ENCAPSULATION_DECISION_SIZE)
3655 *encap_idx = raw_decap_idx != -1 ?
3656 raw_decap_idx : actions_n;
3658 case RTE_FLOW_ACTION_TYPE_QUEUE:
3659 case RTE_FLOW_ACTION_TYPE_RSS:
3667 if (*encap_idx == -1)
3668 *encap_idx = actions_n;
3669 /* Count RTE_FLOW_ACTION_TYPE_END. */
3670 return actions_n + 1;
3674 * Check meter action from the action list.
3676 * @param[in] actions
3677 * Pointer to the list of actions.
3678 * @param[out] has_mtr
3679 * Pointer to the meter exist flag.
3680 * @param[out] meter_id
3681 * Pointer to the meter id.
3684 * Total number of actions.
3687 flow_check_meter_action(const struct rte_flow_action actions[],
3691 const struct rte_flow_action_meter *mtr = NULL;
3694 MLX5_ASSERT(has_mtr);
3696 for (; actions->type != RTE_FLOW_ACTION_TYPE_END; actions++) {
3697 switch (actions->type) {
3698 case RTE_FLOW_ACTION_TYPE_METER:
3699 mtr = actions->conf;
3700 *meter_id = mtr->mtr_id;
3708 /* Count RTE_FLOW_ACTION_TYPE_END. */
3709 return actions_n + 1;
3713 * Check if the flow should be split due to hairpin.
3714 * The reason for the split is that in current HW we can't
3715 * support encap and push-vlan on Rx, so if a flow contains
3716 * these actions we move it to Tx.
3719 * Pointer to Ethernet device.
3721 * Flow rule attributes.
3722 * @param[in] actions
3723 * Associated actions (list terminated by the END action).
3726 * > 0 the number of actions and the flow should be split,
3727 * 0 when no split required.
3730 flow_check_hairpin_split(struct rte_eth_dev *dev,
3731 const struct rte_flow_attr *attr,
3732 const struct rte_flow_action actions[])
3734 int queue_action = 0;
3737 const struct rte_flow_action_queue *queue;
3738 const struct rte_flow_action_rss *rss;
3739 const struct rte_flow_action_raw_encap *raw_encap;
3740 const struct rte_eth_hairpin_conf *conf;
3744 for (; actions->type != RTE_FLOW_ACTION_TYPE_END; actions++) {
3745 switch (actions->type) {
3746 case RTE_FLOW_ACTION_TYPE_QUEUE:
3747 queue = actions->conf;
3750 conf = mlx5_rxq_get_hairpin_conf(dev, queue->index);
3751 if (conf == NULL || conf->tx_explicit != 0)
3756 case RTE_FLOW_ACTION_TYPE_RSS:
3757 rss = actions->conf;
3758 if (rss == NULL || rss->queue_num == 0)
3760 conf = mlx5_rxq_get_hairpin_conf(dev, rss->queue[0]);
3761 if (conf == NULL || conf->tx_explicit != 0)
3766 case RTE_FLOW_ACTION_TYPE_VXLAN_ENCAP:
3767 case RTE_FLOW_ACTION_TYPE_NVGRE_ENCAP:
3768 case RTE_FLOW_ACTION_TYPE_OF_PUSH_VLAN:
3769 case RTE_FLOW_ACTION_TYPE_OF_SET_VLAN_VID:
3770 case RTE_FLOW_ACTION_TYPE_OF_SET_VLAN_PCP:
3774 case RTE_FLOW_ACTION_TYPE_RAW_ENCAP:
3775 raw_encap = actions->conf;
3776 if (raw_encap->size > MLX5_ENCAPSULATION_DECISION_SIZE)
3785 if (split && queue_action)
3790 /* Declare flow create/destroy prototype in advance. */
3792 flow_list_create(struct rte_eth_dev *dev, uint32_t *list,
3793 const struct rte_flow_attr *attr,
3794 const struct rte_flow_item items[],
3795 const struct rte_flow_action actions[],
3796 bool external, struct rte_flow_error *error);
3799 flow_list_destroy(struct rte_eth_dev *dev, uint32_t *list,
3803 flow_dv_mreg_match_cb(struct mlx5_hlist *list __rte_unused,
3804 struct mlx5_hlist_entry *entry,
3805 uint64_t key, void *cb_ctx __rte_unused)
3807 struct mlx5_flow_mreg_copy_resource *mcp_res =
3808 container_of(entry, typeof(*mcp_res), hlist_ent);
3810 return mcp_res->mark_id != key;
3813 struct mlx5_hlist_entry *
3814 flow_dv_mreg_create_cb(struct mlx5_hlist *list, uint64_t key,
3817 struct rte_eth_dev *dev = list->ctx;
3818 struct mlx5_priv *priv = dev->data->dev_private;
3819 struct mlx5_flow_cb_ctx *ctx = cb_ctx;
3820 struct mlx5_flow_mreg_copy_resource *mcp_res;
3821 struct rte_flow_error *error = ctx->error;
3824 uint32_t mark_id = key;
3825 struct rte_flow_attr attr = {
3826 .group = MLX5_FLOW_MREG_CP_TABLE_GROUP,
3829 struct mlx5_rte_flow_item_tag tag_spec = {
3832 struct rte_flow_item items[] = {
3833 [1] = { .type = RTE_FLOW_ITEM_TYPE_END, },
3835 struct rte_flow_action_mark ftag = {
3838 struct mlx5_flow_action_copy_mreg cp_mreg = {
3842 struct rte_flow_action_jump jump = {
3843 .group = MLX5_FLOW_MREG_ACT_TABLE_GROUP,
3845 struct rte_flow_action actions[] = {
3846 [3] = { .type = RTE_FLOW_ACTION_TYPE_END, },
3849 /* Fill the register fileds in the flow. */
3850 ret = mlx5_flow_get_reg_id(dev, MLX5_FLOW_MARK, 0, error);
3854 ret = mlx5_flow_get_reg_id(dev, MLX5_METADATA_RX, 0, error);
3858 /* Provide the full width of FLAG specific value. */
3859 if (mark_id == (priv->sh->dv_regc0_mask & MLX5_FLOW_MARK_DEFAULT))
3860 tag_spec.data = MLX5_FLOW_MARK_DEFAULT;
3861 /* Build a new flow. */
3862 if (mark_id != MLX5_DEFAULT_COPY_ID) {
3863 items[0] = (struct rte_flow_item){
3864 .type = (enum rte_flow_item_type)
3865 MLX5_RTE_FLOW_ITEM_TYPE_TAG,
3868 items[1] = (struct rte_flow_item){
3869 .type = RTE_FLOW_ITEM_TYPE_END,
3871 actions[0] = (struct rte_flow_action){
3872 .type = (enum rte_flow_action_type)
3873 MLX5_RTE_FLOW_ACTION_TYPE_MARK,
3876 actions[1] = (struct rte_flow_action){
3877 .type = (enum rte_flow_action_type)
3878 MLX5_RTE_FLOW_ACTION_TYPE_COPY_MREG,
3881 actions[2] = (struct rte_flow_action){
3882 .type = RTE_FLOW_ACTION_TYPE_JUMP,
3885 actions[3] = (struct rte_flow_action){
3886 .type = RTE_FLOW_ACTION_TYPE_END,
3889 /* Default rule, wildcard match. */
3890 attr.priority = MLX5_FLOW_LOWEST_PRIO_INDICATOR;
3891 items[0] = (struct rte_flow_item){
3892 .type = RTE_FLOW_ITEM_TYPE_END,
3894 actions[0] = (struct rte_flow_action){
3895 .type = (enum rte_flow_action_type)
3896 MLX5_RTE_FLOW_ACTION_TYPE_COPY_MREG,
3899 actions[1] = (struct rte_flow_action){
3900 .type = RTE_FLOW_ACTION_TYPE_JUMP,
3903 actions[2] = (struct rte_flow_action){
3904 .type = RTE_FLOW_ACTION_TYPE_END,
3907 /* Build a new entry. */
3908 mcp_res = mlx5_ipool_zmalloc(priv->sh->ipool[MLX5_IPOOL_MCP], &idx);
3914 mcp_res->mark_id = mark_id;
3916 * The copy Flows are not included in any list. There
3917 * ones are referenced from other Flows and can not
3918 * be applied, removed, deleted in ardbitrary order
3919 * by list traversing.
3921 mcp_res->rix_flow = flow_list_create(dev, NULL, &attr, items,
3922 actions, false, error);
3923 if (!mcp_res->rix_flow) {
3924 mlx5_ipool_free(priv->sh->ipool[MLX5_IPOOL_MCP], idx);
3927 return &mcp_res->hlist_ent;
3931 * Add a flow of copying flow metadata registers in RX_CP_TBL.
3933 * As mark_id is unique, if there's already a registered flow for the mark_id,
3934 * return by increasing the reference counter of the resource. Otherwise, create
3935 * the resource (mcp_res) and flow.
3938 * - If ingress port is ANY and reg_c[1] is mark_id,
3939 * flow_tag := mark_id, reg_b := reg_c[0] and jump to RX_ACT_TBL.
3941 * For default flow (zero mark_id), flow is like,
3942 * - If ingress port is ANY,
3943 * reg_b := reg_c[0] and jump to RX_ACT_TBL.
3946 * Pointer to Ethernet device.
3948 * ID of MARK action, zero means default flow for META.
3950 * Perform verbose error reporting if not NULL.
3953 * Associated resource on success, NULL otherwise and rte_errno is set.
3955 static struct mlx5_flow_mreg_copy_resource *
3956 flow_mreg_add_copy_action(struct rte_eth_dev *dev, uint32_t mark_id,
3957 struct rte_flow_error *error)
3959 struct mlx5_priv *priv = dev->data->dev_private;
3960 struct mlx5_hlist_entry *entry;
3961 struct mlx5_flow_cb_ctx ctx = {
3966 /* Check if already registered. */
3967 MLX5_ASSERT(priv->mreg_cp_tbl);
3968 entry = mlx5_hlist_register(priv->mreg_cp_tbl, mark_id, &ctx);
3971 return container_of(entry, struct mlx5_flow_mreg_copy_resource,
3976 flow_dv_mreg_remove_cb(struct mlx5_hlist *list, struct mlx5_hlist_entry *entry)
3978 struct mlx5_flow_mreg_copy_resource *mcp_res =
3979 container_of(entry, typeof(*mcp_res), hlist_ent);
3980 struct rte_eth_dev *dev = list->ctx;
3981 struct mlx5_priv *priv = dev->data->dev_private;
3983 MLX5_ASSERT(mcp_res->rix_flow);
3984 flow_list_destroy(dev, NULL, mcp_res->rix_flow);
3985 mlx5_ipool_free(priv->sh->ipool[MLX5_IPOOL_MCP], mcp_res->idx);
3989 * Release flow in RX_CP_TBL.
3992 * Pointer to Ethernet device.
3994 * Parent flow for wich copying is provided.
3997 flow_mreg_del_copy_action(struct rte_eth_dev *dev,
3998 struct rte_flow *flow)
4000 struct mlx5_flow_mreg_copy_resource *mcp_res;
4001 struct mlx5_priv *priv = dev->data->dev_private;
4003 if (!flow->rix_mreg_copy)
4005 mcp_res = mlx5_ipool_get(priv->sh->ipool[MLX5_IPOOL_MCP],
4006 flow->rix_mreg_copy);
4007 if (!mcp_res || !priv->mreg_cp_tbl)
4009 MLX5_ASSERT(mcp_res->rix_flow);
4010 mlx5_hlist_unregister(priv->mreg_cp_tbl, &mcp_res->hlist_ent);
4011 flow->rix_mreg_copy = 0;
4015 * Remove the default copy action from RX_CP_TBL.
4017 * This functions is called in the mlx5_dev_start(). No thread safe
4021 * Pointer to Ethernet device.
4024 flow_mreg_del_default_copy_action(struct rte_eth_dev *dev)
4026 struct mlx5_hlist_entry *entry;
4027 struct mlx5_priv *priv = dev->data->dev_private;
4029 /* Check if default flow is registered. */
4030 if (!priv->mreg_cp_tbl)
4032 entry = mlx5_hlist_lookup(priv->mreg_cp_tbl,
4033 MLX5_DEFAULT_COPY_ID, NULL);
4036 mlx5_hlist_unregister(priv->mreg_cp_tbl, entry);
4040 * Add the default copy action in in RX_CP_TBL.
4042 * This functions is called in the mlx5_dev_start(). No thread safe
4046 * Pointer to Ethernet device.
4048 * Perform verbose error reporting if not NULL.
4051 * 0 for success, negative value otherwise and rte_errno is set.
4054 flow_mreg_add_default_copy_action(struct rte_eth_dev *dev,
4055 struct rte_flow_error *error)
4057 struct mlx5_priv *priv = dev->data->dev_private;
4058 struct mlx5_flow_mreg_copy_resource *mcp_res;
4060 /* Check whether extensive metadata feature is engaged. */
4061 if (!priv->config.dv_flow_en ||
4062 priv->config.dv_xmeta_en == MLX5_XMETA_MODE_LEGACY ||
4063 !mlx5_flow_ext_mreg_supported(dev) ||
4064 !priv->sh->dv_regc0_mask)
4067 * Add default mreg copy flow may be called multiple time, but
4068 * only be called once in stop. Avoid register it twice.
4070 if (mlx5_hlist_lookup(priv->mreg_cp_tbl, MLX5_DEFAULT_COPY_ID, NULL))
4072 mcp_res = flow_mreg_add_copy_action(dev, MLX5_DEFAULT_COPY_ID, error);
4079 * Add a flow of copying flow metadata registers in RX_CP_TBL.
4081 * All the flow having Q/RSS action should be split by
4082 * flow_mreg_split_qrss_prep() to pass by RX_CP_TBL. A flow in the RX_CP_TBL
4083 * performs the following,
4084 * - CQE->flow_tag := reg_c[1] (MARK)
4085 * - CQE->flow_table_metadata (reg_b) := reg_c[0] (META)
4086 * As CQE's flow_tag is not a register, it can't be simply copied from reg_c[1]
4087 * but there should be a flow per each MARK ID set by MARK action.
4089 * For the aforementioned reason, if there's a MARK action in flow's action
4090 * list, a corresponding flow should be added to the RX_CP_TBL in order to copy
4091 * the MARK ID to CQE's flow_tag like,
4092 * - If reg_c[1] is mark_id,
4093 * flow_tag := mark_id, reg_b := reg_c[0] and jump to RX_ACT_TBL.
4095 * For SET_META action which stores value in reg_c[0], as the destination is
4096 * also a flow metadata register (reg_b), adding a default flow is enough. Zero
4097 * MARK ID means the default flow. The default flow looks like,
4098 * - For all flow, reg_b := reg_c[0] and jump to RX_ACT_TBL.
4101 * Pointer to Ethernet device.
4103 * Pointer to flow structure.
4104 * @param[in] actions
4105 * Pointer to the list of actions.
4107 * Perform verbose error reporting if not NULL.
4110 * 0 on success, negative value otherwise and rte_errno is set.
4113 flow_mreg_update_copy_table(struct rte_eth_dev *dev,
4114 struct rte_flow *flow,
4115 const struct rte_flow_action *actions,
4116 struct rte_flow_error *error)
4118 struct mlx5_priv *priv = dev->data->dev_private;
4119 struct mlx5_dev_config *config = &priv->config;
4120 struct mlx5_flow_mreg_copy_resource *mcp_res;
4121 const struct rte_flow_action_mark *mark;
4123 /* Check whether extensive metadata feature is engaged. */
4124 if (!config->dv_flow_en ||
4125 config->dv_xmeta_en == MLX5_XMETA_MODE_LEGACY ||
4126 !mlx5_flow_ext_mreg_supported(dev) ||
4127 !priv->sh->dv_regc0_mask)
4129 /* Find MARK action. */
4130 for (; actions->type != RTE_FLOW_ACTION_TYPE_END; actions++) {
4131 switch (actions->type) {
4132 case RTE_FLOW_ACTION_TYPE_FLAG:
4133 mcp_res = flow_mreg_add_copy_action
4134 (dev, MLX5_FLOW_MARK_DEFAULT, error);
4137 flow->rix_mreg_copy = mcp_res->idx;
4139 case RTE_FLOW_ACTION_TYPE_MARK:
4140 mark = (const struct rte_flow_action_mark *)
4143 flow_mreg_add_copy_action(dev, mark->id, error);
4146 flow->rix_mreg_copy = mcp_res->idx;
4155 #define MLX5_MAX_SPLIT_ACTIONS 24
4156 #define MLX5_MAX_SPLIT_ITEMS 24
4159 * Split the hairpin flow.
4160 * Since HW can't support encap and push-vlan on Rx, we move these
4162 * If the count action is after the encap then we also
4163 * move the count action. in this case the count will also measure
4167 * Pointer to Ethernet device.
4168 * @param[in] actions
4169 * Associated actions (list terminated by the END action).
4170 * @param[out] actions_rx
4172 * @param[out] actions_tx
4174 * @param[out] pattern_tx
4175 * The pattern items for the Tx flow.
4176 * @param[out] flow_id
4177 * The flow ID connected to this flow.
4183 flow_hairpin_split(struct rte_eth_dev *dev,
4184 const struct rte_flow_action actions[],
4185 struct rte_flow_action actions_rx[],
4186 struct rte_flow_action actions_tx[],
4187 struct rte_flow_item pattern_tx[],
4190 const struct rte_flow_action_raw_encap *raw_encap;
4191 const struct rte_flow_action_raw_decap *raw_decap;
4192 struct mlx5_rte_flow_action_set_tag *set_tag;
4193 struct rte_flow_action *tag_action;
4194 struct mlx5_rte_flow_item_tag *tag_item;
4195 struct rte_flow_item *item;
4199 for (; actions->type != RTE_FLOW_ACTION_TYPE_END; actions++) {
4200 switch (actions->type) {
4201 case RTE_FLOW_ACTION_TYPE_VXLAN_ENCAP:
4202 case RTE_FLOW_ACTION_TYPE_NVGRE_ENCAP:
4203 case RTE_FLOW_ACTION_TYPE_OF_PUSH_VLAN:
4204 case RTE_FLOW_ACTION_TYPE_OF_SET_VLAN_VID:
4205 case RTE_FLOW_ACTION_TYPE_OF_SET_VLAN_PCP:
4206 rte_memcpy(actions_tx, actions,
4207 sizeof(struct rte_flow_action));
4210 case RTE_FLOW_ACTION_TYPE_COUNT:
4212 rte_memcpy(actions_tx, actions,
4213 sizeof(struct rte_flow_action));
4216 rte_memcpy(actions_rx, actions,
4217 sizeof(struct rte_flow_action));
4221 case RTE_FLOW_ACTION_TYPE_RAW_ENCAP:
4222 raw_encap = actions->conf;
4223 if (raw_encap->size > MLX5_ENCAPSULATION_DECISION_SIZE) {
4224 memcpy(actions_tx, actions,
4225 sizeof(struct rte_flow_action));
4229 rte_memcpy(actions_rx, actions,
4230 sizeof(struct rte_flow_action));
4234 case RTE_FLOW_ACTION_TYPE_RAW_DECAP:
4235 raw_decap = actions->conf;
4236 if (raw_decap->size < MLX5_ENCAPSULATION_DECISION_SIZE) {
4237 memcpy(actions_tx, actions,
4238 sizeof(struct rte_flow_action));
4241 rte_memcpy(actions_rx, actions,
4242 sizeof(struct rte_flow_action));
4247 rte_memcpy(actions_rx, actions,
4248 sizeof(struct rte_flow_action));
4253 /* Add set meta action and end action for the Rx flow. */
4254 tag_action = actions_rx;
4255 tag_action->type = (enum rte_flow_action_type)
4256 MLX5_RTE_FLOW_ACTION_TYPE_TAG;
4258 rte_memcpy(actions_rx, actions, sizeof(struct rte_flow_action));
4260 set_tag = (void *)actions_rx;
4261 set_tag->id = mlx5_flow_get_reg_id(dev, MLX5_HAIRPIN_RX, 0, NULL);
4262 MLX5_ASSERT(set_tag->id > REG_NON);
4263 set_tag->data = flow_id;
4264 tag_action->conf = set_tag;
4265 /* Create Tx item list. */
4266 rte_memcpy(actions_tx, actions, sizeof(struct rte_flow_action));
4267 addr = (void *)&pattern_tx[2];
4269 item->type = (enum rte_flow_item_type)
4270 MLX5_RTE_FLOW_ITEM_TYPE_TAG;
4271 tag_item = (void *)addr;
4272 tag_item->data = flow_id;
4273 tag_item->id = mlx5_flow_get_reg_id(dev, MLX5_HAIRPIN_TX, 0, NULL);
4274 MLX5_ASSERT(set_tag->id > REG_NON);
4275 item->spec = tag_item;
4276 addr += sizeof(struct mlx5_rte_flow_item_tag);
4277 tag_item = (void *)addr;
4278 tag_item->data = UINT32_MAX;
4279 tag_item->id = UINT16_MAX;
4280 item->mask = tag_item;
4283 item->type = RTE_FLOW_ITEM_TYPE_END;
4288 * The last stage of splitting chain, just creates the subflow
4289 * without any modification.
4292 * Pointer to Ethernet device.
4294 * Parent flow structure pointer.
4295 * @param[in, out] sub_flow
4296 * Pointer to return the created subflow, may be NULL.
4298 * Flow rule attributes.
4300 * Pattern specification (list terminated by the END pattern item).
4301 * @param[in] actions
4302 * Associated actions (list terminated by the END action).
4303 * @param[in] flow_split_info
4304 * Pointer to flow split info structure.
4306 * Perform verbose error reporting if not NULL.
4308 * 0 on success, negative value otherwise
4311 flow_create_split_inner(struct rte_eth_dev *dev,
4312 struct rte_flow *flow,
4313 struct mlx5_flow **sub_flow,
4314 const struct rte_flow_attr *attr,
4315 const struct rte_flow_item items[],
4316 const struct rte_flow_action actions[],
4317 struct mlx5_flow_split_info *flow_split_info,
4318 struct rte_flow_error *error)
4320 struct mlx5_flow *dev_flow;
4322 dev_flow = flow_drv_prepare(dev, flow, attr, items, actions,
4323 flow_split_info->flow_idx, error);
4326 dev_flow->flow = flow;
4327 dev_flow->external = flow_split_info->external;
4328 dev_flow->skip_scale = flow_split_info->skip_scale;
4329 /* Subflow object was created, we must include one in the list. */
4330 SILIST_INSERT(&flow->dev_handles, dev_flow->handle_idx,
4331 dev_flow->handle, next);
4333 * If dev_flow is as one of the suffix flow, some actions in suffix
4334 * flow may need some user defined item layer flags, and pass the
4335 * Metadate rxq mark flag to suffix flow as well.
4337 if (flow_split_info->prefix_layers)
4338 dev_flow->handle->layers = flow_split_info->prefix_layers;
4339 if (flow_split_info->prefix_mark)
4340 dev_flow->handle->mark = 1;
4342 *sub_flow = dev_flow;
4343 return flow_drv_translate(dev, dev_flow, attr, items, actions, error);
4347 * Split the meter flow.
4349 * As meter flow will split to three sub flow, other than meter
4350 * action, the other actions make sense to only meter accepts
4351 * the packet. If it need to be dropped, no other additional
4352 * actions should be take.
4354 * One kind of special action which decapsulates the L3 tunnel
4355 * header will be in the prefix sub flow, as not to take the
4356 * L3 tunnel header into account.
4359 * Pointer to Ethernet device.
4361 * Pointer to flow meter structure.
4363 * Pattern specification (list terminated by the END pattern item).
4364 * @param[out] sfx_items
4365 * Suffix flow match items (list terminated by the END pattern item).
4366 * @param[in] actions
4367 * Associated actions (list terminated by the END action).
4368 * @param[out] actions_sfx
4369 * Suffix flow actions.
4370 * @param[out] actions_pre
4371 * Prefix flow actions.
4372 * @param[out] pattern_sfx
4373 * The pattern items for the suffix flow.
4374 * @param[out] tag_sfx
4375 * Pointer to suffix flow tag.
4377 * Perform verbose error reporting if not NULL.
4380 * The flow id, 0 otherwise and rte_errno is set.
4383 flow_meter_split_prep(struct rte_eth_dev *dev,
4384 struct mlx5_flow_meter *fm,
4385 const struct rte_flow_item items[],
4386 struct rte_flow_item sfx_items[],
4387 const struct rte_flow_action actions[],
4388 struct rte_flow_action actions_sfx[],
4389 struct rte_flow_action actions_pre[],
4390 struct rte_flow_error *error)
4392 struct mlx5_priv *priv = dev->data->dev_private;
4393 struct rte_flow_action *tag_action = NULL;
4394 struct rte_flow_item *tag_item;
4395 struct mlx5_rte_flow_action_set_tag *set_tag;
4396 const struct rte_flow_action_raw_encap *raw_encap;
4397 const struct rte_flow_action_raw_decap *raw_decap;
4398 struct mlx5_rte_flow_item_tag *tag_item_spec;
4399 struct mlx5_rte_flow_item_tag *tag_item_mask;
4400 uint32_t tag_id = 0;
4401 bool copy_vlan = false;
4402 uint8_t mtr_id_offset = priv->mtr_reg_share ? MLX5_MTR_COLOR_BITS : 0;
4403 uint8_t mtr_reg_bits = priv->mtr_reg_share ?
4404 MLX5_MTR_IDLE_BITS_IN_COLOR_REG : MLX5_REG_BITS;
4405 uint32_t flow_id = 0;
4406 uint32_t flow_id_reversed = 0;
4407 uint8_t flow_id_bits = 0;
4410 /* Prepare the actions for prefix and suffix flow. */
4411 for (; actions->type != RTE_FLOW_ACTION_TYPE_END; actions++) {
4412 struct rte_flow_action **action_cur = NULL;
4414 switch (actions->type) {
4415 case RTE_FLOW_ACTION_TYPE_METER:
4416 /* Add the extra tag action first. */
4417 tag_action = actions_pre++;
4418 action_cur = &actions_pre;
4420 case RTE_FLOW_ACTION_TYPE_VXLAN_DECAP:
4421 case RTE_FLOW_ACTION_TYPE_NVGRE_DECAP:
4422 action_cur = &actions_pre;
4424 case RTE_FLOW_ACTION_TYPE_RAW_ENCAP:
4425 raw_encap = actions->conf;
4426 if (raw_encap->size < MLX5_ENCAPSULATION_DECISION_SIZE)
4427 action_cur = &actions_pre;
4429 case RTE_FLOW_ACTION_TYPE_RAW_DECAP:
4430 raw_decap = actions->conf;
4431 if (raw_decap->size > MLX5_ENCAPSULATION_DECISION_SIZE)
4432 action_cur = &actions_pre;
4434 case RTE_FLOW_ACTION_TYPE_OF_PUSH_VLAN:
4435 case RTE_FLOW_ACTION_TYPE_OF_SET_VLAN_VID:
4442 action_cur = &actions_sfx;
4443 memcpy(*action_cur, actions, sizeof(struct rte_flow_action));
4446 /* Add end action to the actions. */
4447 actions_sfx->type = RTE_FLOW_ACTION_TYPE_END;
4448 actions_pre->type = RTE_FLOW_ACTION_TYPE_END;
4450 mlx5_ipool_malloc(fm->flow_ipool, &tag_id);
4452 return rte_flow_error_set(error, ENOMEM,
4453 RTE_FLOW_ERROR_TYPE_UNSPECIFIED, NULL,
4454 "Failed to allocate meter flow id.");
4455 flow_id = tag_id - 1;
4456 flow_id_bits = MLX5_REG_BITS - __builtin_clz(flow_id);
4457 flow_id_bits = flow_id_bits ? flow_id_bits : 1;
4458 if ((flow_id_bits + priv->max_mtr_bits) > mtr_reg_bits) {
4459 mlx5_ipool_free(fm->flow_ipool, tag_id);
4460 return rte_flow_error_set(error, EINVAL,
4461 RTE_FLOW_ERROR_TYPE_UNSPECIFIED, NULL,
4462 "Meter flow id exceeds max limit.");
4464 if (flow_id_bits > priv->max_mtr_flow_bits)
4465 priv->max_mtr_flow_bits = flow_id_bits;
4466 /* Prepare the suffix subflow items. */
4467 tag_item = sfx_items++;
4468 for (; items->type != RTE_FLOW_ITEM_TYPE_END; items++) {
4469 int item_type = items->type;
4471 switch (item_type) {
4472 case RTE_FLOW_ITEM_TYPE_PORT_ID:
4473 memcpy(sfx_items, items, sizeof(*sfx_items));
4476 case RTE_FLOW_ITEM_TYPE_VLAN:
4478 memcpy(sfx_items, items, sizeof(*sfx_items));
4480 * Convert to internal match item, it is used
4481 * for vlan push and set vid.
4483 sfx_items->type = (enum rte_flow_item_type)
4484 MLX5_RTE_FLOW_ITEM_TYPE_VLAN;
4492 sfx_items->type = RTE_FLOW_ITEM_TYPE_END;
4494 /* Build tag actions and items for meter_id/meter flow_id. */
4496 set_tag = (struct mlx5_rte_flow_action_set_tag *)actions_pre;
4497 tag_item_spec = (struct mlx5_rte_flow_item_tag *)sfx_items;
4498 tag_item_mask = tag_item_spec + 1;
4500 * The color Reg bits used by flow_id are growing from
4501 * msb to lsb, so must do bit reverse for flow_id val in RegC.
4503 for (shift = 0; shift < flow_id_bits; shift++)
4504 flow_id_reversed = (flow_id_reversed << 1) |
4505 ((flow_id >> shift) & 0x1);
4506 /* Both flow_id and meter_id share the same register. */
4507 set_tag->id = mlx5_flow_get_reg_id(dev, MLX5_MTR_ID, 0, error);
4509 (fm->idx | (flow_id_reversed << (mtr_reg_bits - flow_id_bits)))
4511 tag_item_spec->id = set_tag->id;
4512 tag_item_spec->data = set_tag->data;
4513 tag_item_mask->data = UINT32_MAX << mtr_id_offset;
4514 tag_action->type = (enum rte_flow_action_type)
4515 MLX5_RTE_FLOW_ACTION_TYPE_TAG;
4516 tag_action->conf = set_tag;
4517 tag_item->type = (enum rte_flow_item_type)
4518 MLX5_RTE_FLOW_ITEM_TYPE_TAG;
4519 tag_item->spec = tag_item_spec;
4520 tag_item->last = NULL;
4521 tag_item->mask = tag_item_mask;
4526 * Split action list having QUEUE/RSS for metadata register copy.
4528 * Once Q/RSS action is detected in user's action list, the flow action
4529 * should be split in order to copy metadata registers, which will happen in
4531 * - CQE->flow_tag := reg_c[1] (MARK)
4532 * - CQE->flow_table_metadata (reg_b) := reg_c[0] (META)
4533 * The Q/RSS action will be performed on RX_ACT_TBL after passing by RX_CP_TBL.
4534 * This is because the last action of each flow must be a terminal action
4535 * (QUEUE, RSS or DROP).
4537 * Flow ID must be allocated to identify actions in the RX_ACT_TBL and it is
4538 * stored and kept in the mlx5_flow structure per each sub_flow.
4540 * The Q/RSS action is replaced with,
4541 * - SET_TAG, setting the allocated flow ID to reg_c[2].
4542 * And the following JUMP action is added at the end,
4543 * - JUMP, to RX_CP_TBL.
4545 * A flow to perform remained Q/RSS action will be created in RX_ACT_TBL by
4546 * flow_create_split_metadata() routine. The flow will look like,
4547 * - If flow ID matches (reg_c[2]), perform Q/RSS.
4550 * Pointer to Ethernet device.
4551 * @param[out] split_actions
4552 * Pointer to store split actions to jump to CP_TBL.
4553 * @param[in] actions
4554 * Pointer to the list of original flow actions.
4556 * Pointer to the Q/RSS action.
4557 * @param[in] actions_n
4558 * Number of original actions.
4560 * Perform verbose error reporting if not NULL.
4563 * non-zero unique flow_id on success, otherwise 0 and
4564 * error/rte_error are set.
4567 flow_mreg_split_qrss_prep(struct rte_eth_dev *dev,
4568 struct rte_flow_action *split_actions,
4569 const struct rte_flow_action *actions,
4570 const struct rte_flow_action *qrss,
4571 int actions_n, struct rte_flow_error *error)
4573 struct mlx5_priv *priv = dev->data->dev_private;
4574 struct mlx5_rte_flow_action_set_tag *set_tag;
4575 struct rte_flow_action_jump *jump;
4576 const int qrss_idx = qrss - actions;
4577 uint32_t flow_id = 0;
4581 * Given actions will be split
4582 * - Replace QUEUE/RSS action with SET_TAG to set flow ID.
4583 * - Add jump to mreg CP_TBL.
4584 * As a result, there will be one more action.
4587 memcpy(split_actions, actions, sizeof(*split_actions) * actions_n);
4588 set_tag = (void *)(split_actions + actions_n);
4590 * If tag action is not set to void(it means we are not the meter
4591 * suffix flow), add the tag action. Since meter suffix flow already
4592 * has the tag added.
4594 if (split_actions[qrss_idx].type != RTE_FLOW_ACTION_TYPE_VOID) {
4596 * Allocate the new subflow ID. This one is unique within
4597 * device and not shared with representors. Otherwise,
4598 * we would have to resolve multi-thread access synch
4599 * issue. Each flow on the shared device is appended
4600 * with source vport identifier, so the resulting
4601 * flows will be unique in the shared (by master and
4602 * representors) domain even if they have coinciding
4605 mlx5_ipool_malloc(priv->sh->ipool
4606 [MLX5_IPOOL_RSS_EXPANTION_FLOW_ID], &flow_id);
4608 return rte_flow_error_set(error, ENOMEM,
4609 RTE_FLOW_ERROR_TYPE_ACTION,
4610 NULL, "can't allocate id "
4611 "for split Q/RSS subflow");
4612 /* Internal SET_TAG action to set flow ID. */
4613 *set_tag = (struct mlx5_rte_flow_action_set_tag){
4616 ret = mlx5_flow_get_reg_id(dev, MLX5_COPY_MARK, 0, error);
4620 /* Construct new actions array. */
4621 /* Replace QUEUE/RSS action. */
4622 split_actions[qrss_idx] = (struct rte_flow_action){
4623 .type = (enum rte_flow_action_type)
4624 MLX5_RTE_FLOW_ACTION_TYPE_TAG,
4628 /* JUMP action to jump to mreg copy table (CP_TBL). */
4629 jump = (void *)(set_tag + 1);
4630 *jump = (struct rte_flow_action_jump){
4631 .group = MLX5_FLOW_MREG_CP_TABLE_GROUP,
4633 split_actions[actions_n - 2] = (struct rte_flow_action){
4634 .type = RTE_FLOW_ACTION_TYPE_JUMP,
4637 split_actions[actions_n - 1] = (struct rte_flow_action){
4638 .type = RTE_FLOW_ACTION_TYPE_END,
4644 * Extend the given action list for Tx metadata copy.
4646 * Copy the given action list to the ext_actions and add flow metadata register
4647 * copy action in order to copy reg_a set by WQE to reg_c[0].
4649 * @param[out] ext_actions
4650 * Pointer to the extended action list.
4651 * @param[in] actions
4652 * Pointer to the list of actions.
4653 * @param[in] actions_n
4654 * Number of actions in the list.
4656 * Perform verbose error reporting if not NULL.
4657 * @param[in] encap_idx
4658 * The encap action inndex.
4661 * 0 on success, negative value otherwise
4664 flow_mreg_tx_copy_prep(struct rte_eth_dev *dev,
4665 struct rte_flow_action *ext_actions,
4666 const struct rte_flow_action *actions,
4667 int actions_n, struct rte_flow_error *error,
4670 struct mlx5_flow_action_copy_mreg *cp_mreg =
4671 (struct mlx5_flow_action_copy_mreg *)
4672 (ext_actions + actions_n + 1);
4675 ret = mlx5_flow_get_reg_id(dev, MLX5_METADATA_RX, 0, error);
4679 ret = mlx5_flow_get_reg_id(dev, MLX5_METADATA_TX, 0, error);
4684 memcpy(ext_actions, actions, sizeof(*ext_actions) * encap_idx);
4685 if (encap_idx == actions_n - 1) {
4686 ext_actions[actions_n - 1] = (struct rte_flow_action){
4687 .type = (enum rte_flow_action_type)
4688 MLX5_RTE_FLOW_ACTION_TYPE_COPY_MREG,
4691 ext_actions[actions_n] = (struct rte_flow_action){
4692 .type = RTE_FLOW_ACTION_TYPE_END,
4695 ext_actions[encap_idx] = (struct rte_flow_action){
4696 .type = (enum rte_flow_action_type)
4697 MLX5_RTE_FLOW_ACTION_TYPE_COPY_MREG,
4700 memcpy(ext_actions + encap_idx + 1, actions + encap_idx,
4701 sizeof(*ext_actions) * (actions_n - encap_idx));
4707 * Check the match action from the action list.
4709 * @param[in] actions
4710 * Pointer to the list of actions.
4712 * Flow rule attributes.
4714 * The action to be check if exist.
4715 * @param[out] match_action_pos
4716 * Pointer to the position of the matched action if exists, otherwise is -1.
4717 * @param[out] qrss_action_pos
4718 * Pointer to the position of the Queue/RSS action if exists, otherwise is -1.
4719 * @param[out] modify_after_mirror
4720 * Pointer to the flag of modify action after FDB mirroring.
4723 * > 0 the total number of actions.
4724 * 0 if not found match action in action list.
4727 flow_check_match_action(const struct rte_flow_action actions[],
4728 const struct rte_flow_attr *attr,
4729 enum rte_flow_action_type action,
4730 int *match_action_pos, int *qrss_action_pos,
4731 int *modify_after_mirror)
4733 const struct rte_flow_action_sample *sample;
4740 *match_action_pos = -1;
4741 *qrss_action_pos = -1;
4742 for (; actions->type != RTE_FLOW_ACTION_TYPE_END; actions++) {
4743 if (actions->type == action) {
4745 *match_action_pos = actions_n;
4747 switch (actions->type) {
4748 case RTE_FLOW_ACTION_TYPE_QUEUE:
4749 case RTE_FLOW_ACTION_TYPE_RSS:
4750 *qrss_action_pos = actions_n;
4752 case RTE_FLOW_ACTION_TYPE_SAMPLE:
4753 sample = actions->conf;
4754 ratio = sample->ratio;
4755 sub_type = ((const struct rte_flow_action *)
4756 (sample->actions))->type;
4757 if (ratio == 1 && attr->transfer)
4760 case RTE_FLOW_ACTION_TYPE_SET_MAC_SRC:
4761 case RTE_FLOW_ACTION_TYPE_SET_MAC_DST:
4762 case RTE_FLOW_ACTION_TYPE_SET_IPV4_SRC:
4763 case RTE_FLOW_ACTION_TYPE_SET_IPV4_DST:
4764 case RTE_FLOW_ACTION_TYPE_SET_IPV6_SRC:
4765 case RTE_FLOW_ACTION_TYPE_SET_IPV6_DST:
4766 case RTE_FLOW_ACTION_TYPE_SET_TP_SRC:
4767 case RTE_FLOW_ACTION_TYPE_SET_TP_DST:
4768 case RTE_FLOW_ACTION_TYPE_DEC_TTL:
4769 case RTE_FLOW_ACTION_TYPE_SET_TTL:
4770 case RTE_FLOW_ACTION_TYPE_INC_TCP_SEQ:
4771 case RTE_FLOW_ACTION_TYPE_DEC_TCP_SEQ:
4772 case RTE_FLOW_ACTION_TYPE_INC_TCP_ACK:
4773 case RTE_FLOW_ACTION_TYPE_DEC_TCP_ACK:
4774 case RTE_FLOW_ACTION_TYPE_SET_IPV4_DSCP:
4775 case RTE_FLOW_ACTION_TYPE_SET_IPV6_DSCP:
4776 case RTE_FLOW_ACTION_TYPE_FLAG:
4777 case RTE_FLOW_ACTION_TYPE_MARK:
4778 case RTE_FLOW_ACTION_TYPE_SET_META:
4779 case RTE_FLOW_ACTION_TYPE_SET_TAG:
4780 case RTE_FLOW_ACTION_TYPE_OF_POP_VLAN:
4781 case RTE_FLOW_ACTION_TYPE_OF_PUSH_VLAN:
4782 case RTE_FLOW_ACTION_TYPE_OF_SET_VLAN_VID:
4783 case RTE_FLOW_ACTION_TYPE_OF_SET_VLAN_PCP:
4784 case RTE_FLOW_ACTION_TYPE_VXLAN_DECAP:
4785 case RTE_FLOW_ACTION_TYPE_NVGRE_DECAP:
4786 case RTE_FLOW_ACTION_TYPE_RAW_DECAP:
4787 case RTE_FLOW_ACTION_TYPE_MODIFY_FIELD:
4789 *modify_after_mirror = 1;
4796 if (flag && fdb_mirror && !*modify_after_mirror) {
4797 /* FDB mirroring uses the destination array to implement
4798 * instead of FLOW_SAMPLER object.
4800 if (sub_type != RTE_FLOW_ACTION_TYPE_END)
4803 /* Count RTE_FLOW_ACTION_TYPE_END. */
4804 return flag ? actions_n + 1 : 0;
4807 #define SAMPLE_SUFFIX_ITEM 2
4810 * Split the sample flow.
4812 * As sample flow will split to two sub flow, sample flow with
4813 * sample action, the other actions will move to new suffix flow.
4815 * Also add unique tag id with tag action in the sample flow,
4816 * the same tag id will be as match in the suffix flow.
4819 * Pointer to Ethernet device.
4820 * @param[in] add_tag
4821 * Add extra tag action flag.
4822 * @param[out] sfx_items
4823 * Suffix flow match items (list terminated by the END pattern item).
4824 * @param[in] actions
4825 * Associated actions (list terminated by the END action).
4826 * @param[out] actions_sfx
4827 * Suffix flow actions.
4828 * @param[out] actions_pre
4829 * Prefix flow actions.
4830 * @param[in] actions_n
4831 * The total number of actions.
4832 * @param[in] sample_action_pos
4833 * The sample action position.
4834 * @param[in] qrss_action_pos
4835 * The Queue/RSS action position.
4836 * @param[in] jump_table
4837 * Add extra jump action flag.
4839 * Perform verbose error reporting if not NULL.
4842 * 0 on success, or unique flow_id, a negative errno value
4843 * otherwise and rte_errno is set.
4846 flow_sample_split_prep(struct rte_eth_dev *dev,
4848 struct rte_flow_item sfx_items[],
4849 const struct rte_flow_action actions[],
4850 struct rte_flow_action actions_sfx[],
4851 struct rte_flow_action actions_pre[],
4853 int sample_action_pos,
4854 int qrss_action_pos,
4856 struct rte_flow_error *error)
4858 struct mlx5_priv *priv = dev->data->dev_private;
4859 struct mlx5_rte_flow_action_set_tag *set_tag;
4860 struct mlx5_rte_flow_item_tag *tag_spec;
4861 struct mlx5_rte_flow_item_tag *tag_mask;
4862 struct rte_flow_action_jump *jump_action;
4863 uint32_t tag_id = 0;
4865 int append_index = 0;
4868 if (sample_action_pos < 0)
4869 return rte_flow_error_set(error, EINVAL,
4870 RTE_FLOW_ERROR_TYPE_ACTION,
4871 NULL, "invalid position of sample "
4873 /* Prepare the actions for prefix and suffix flow. */
4874 if (qrss_action_pos >= 0 && qrss_action_pos < sample_action_pos) {
4875 index = qrss_action_pos;
4876 /* Put the preceding the Queue/RSS action into prefix flow. */
4878 memcpy(actions_pre, actions,
4879 sizeof(struct rte_flow_action) * index);
4880 /* Put others preceding the sample action into prefix flow. */
4881 if (sample_action_pos > index + 1)
4882 memcpy(actions_pre + index, actions + index + 1,
4883 sizeof(struct rte_flow_action) *
4884 (sample_action_pos - index - 1));
4885 index = sample_action_pos - 1;
4886 /* Put Queue/RSS action into Suffix flow. */
4887 memcpy(actions_sfx, actions + qrss_action_pos,
4888 sizeof(struct rte_flow_action));
4891 index = sample_action_pos;
4893 memcpy(actions_pre, actions,
4894 sizeof(struct rte_flow_action) * index);
4896 /* For CX5, add an extra tag action for NIC-RX and E-Switch ingress.
4897 * For CX6DX and above, metadata registers Cx preserve their value,
4898 * add an extra tag action for NIC-RX and E-Switch Domain.
4901 /* Prepare the prefix tag action. */
4903 set_tag = (void *)(actions_pre + actions_n + append_index);
4904 ret = mlx5_flow_get_reg_id(dev, MLX5_APP_TAG, 0, error);
4908 mlx5_ipool_malloc(priv->sh->ipool
4909 [MLX5_IPOOL_RSS_EXPANTION_FLOW_ID], &tag_id);
4910 set_tag->data = tag_id;
4911 /* Prepare the suffix subflow items. */
4912 tag_spec = (void *)(sfx_items + SAMPLE_SUFFIX_ITEM);
4913 tag_spec->data = tag_id;
4914 tag_spec->id = set_tag->id;
4915 tag_mask = tag_spec + 1;
4916 tag_mask->data = UINT32_MAX;
4917 sfx_items[0] = (struct rte_flow_item){
4918 .type = (enum rte_flow_item_type)
4919 MLX5_RTE_FLOW_ITEM_TYPE_TAG,
4924 sfx_items[1] = (struct rte_flow_item){
4925 .type = (enum rte_flow_item_type)
4926 RTE_FLOW_ITEM_TYPE_END,
4928 /* Prepare the tag action in prefix subflow. */
4929 actions_pre[index++] =
4930 (struct rte_flow_action){
4931 .type = (enum rte_flow_action_type)
4932 MLX5_RTE_FLOW_ACTION_TYPE_TAG,
4936 memcpy(actions_pre + index, actions + sample_action_pos,
4937 sizeof(struct rte_flow_action));
4939 /* For the modify action after the sample action in E-Switch mirroring,
4940 * Add the extra jump action in prefix subflow and jump into the next
4941 * table, then do the modify action in the new table.
4944 /* Prepare the prefix jump action. */
4946 jump_action = (void *)(actions_pre + actions_n + append_index);
4947 jump_action->group = jump_table;
4948 actions_pre[index++] =
4949 (struct rte_flow_action){
4950 .type = (enum rte_flow_action_type)
4951 RTE_FLOW_ACTION_TYPE_JUMP,
4952 .conf = jump_action,
4955 actions_pre[index] = (struct rte_flow_action){
4956 .type = (enum rte_flow_action_type)
4957 RTE_FLOW_ACTION_TYPE_END,
4959 /* Put the actions after sample into Suffix flow. */
4960 memcpy(actions_sfx, actions + sample_action_pos + 1,
4961 sizeof(struct rte_flow_action) *
4962 (actions_n - sample_action_pos - 1));
4967 * The splitting for metadata feature.
4969 * - Q/RSS action on NIC Rx should be split in order to pass by
4970 * the mreg copy table (RX_CP_TBL) and then it jumps to the
4971 * action table (RX_ACT_TBL) which has the split Q/RSS action.
4973 * - All the actions on NIC Tx should have a mreg copy action to
4974 * copy reg_a from WQE to reg_c[0].
4977 * Pointer to Ethernet device.
4979 * Parent flow structure pointer.
4981 * Flow rule attributes.
4983 * Pattern specification (list terminated by the END pattern item).
4984 * @param[in] actions
4985 * Associated actions (list terminated by the END action).
4986 * @param[in] flow_split_info
4987 * Pointer to flow split info structure.
4989 * Perform verbose error reporting if not NULL.
4991 * 0 on success, negative value otherwise
4994 flow_create_split_metadata(struct rte_eth_dev *dev,
4995 struct rte_flow *flow,
4996 const struct rte_flow_attr *attr,
4997 const struct rte_flow_item items[],
4998 const struct rte_flow_action actions[],
4999 struct mlx5_flow_split_info *flow_split_info,
5000 struct rte_flow_error *error)
5002 struct mlx5_priv *priv = dev->data->dev_private;
5003 struct mlx5_dev_config *config = &priv->config;
5004 const struct rte_flow_action *qrss = NULL;
5005 struct rte_flow_action *ext_actions = NULL;
5006 struct mlx5_flow *dev_flow = NULL;
5007 uint32_t qrss_id = 0;
5014 /* Check whether extensive metadata feature is engaged. */
5015 if (!config->dv_flow_en ||
5016 config->dv_xmeta_en == MLX5_XMETA_MODE_LEGACY ||
5017 !mlx5_flow_ext_mreg_supported(dev))
5018 return flow_create_split_inner(dev, flow, NULL, attr, items,
5019 actions, flow_split_info, error);
5020 actions_n = flow_parse_metadata_split_actions_info(actions, &qrss,
5023 /* Exclude hairpin flows from splitting. */
5024 if (qrss->type == RTE_FLOW_ACTION_TYPE_QUEUE) {
5025 const struct rte_flow_action_queue *queue;
5028 if (mlx5_rxq_get_type(dev, queue->index) ==
5029 MLX5_RXQ_TYPE_HAIRPIN)
5031 } else if (qrss->type == RTE_FLOW_ACTION_TYPE_RSS) {
5032 const struct rte_flow_action_rss *rss;
5035 if (mlx5_rxq_get_type(dev, rss->queue[0]) ==
5036 MLX5_RXQ_TYPE_HAIRPIN)
5041 /* Check if it is in meter suffix table. */
5042 mtr_sfx = attr->group == (attr->transfer ?
5043 (MLX5_FLOW_TABLE_LEVEL_SUFFIX - 1) :
5044 MLX5_FLOW_TABLE_LEVEL_SUFFIX);
5046 * Q/RSS action on NIC Rx should be split in order to pass by
5047 * the mreg copy table (RX_CP_TBL) and then it jumps to the
5048 * action table (RX_ACT_TBL) which has the split Q/RSS action.
5050 act_size = sizeof(struct rte_flow_action) * (actions_n + 1) +
5051 sizeof(struct rte_flow_action_set_tag) +
5052 sizeof(struct rte_flow_action_jump);
5053 ext_actions = mlx5_malloc(MLX5_MEM_ZERO, act_size, 0,
5056 return rte_flow_error_set(error, ENOMEM,
5057 RTE_FLOW_ERROR_TYPE_ACTION,
5058 NULL, "no memory to split "
5061 * If we are the suffix flow of meter, tag already exist.
5062 * Set the tag action to void.
5065 ext_actions[qrss - actions].type =
5066 RTE_FLOW_ACTION_TYPE_VOID;
5068 ext_actions[qrss - actions].type =
5069 (enum rte_flow_action_type)
5070 MLX5_RTE_FLOW_ACTION_TYPE_TAG;
5072 * Create the new actions list with removed Q/RSS action
5073 * and appended set tag and jump to register copy table
5074 * (RX_CP_TBL). We should preallocate unique tag ID here
5075 * in advance, because it is needed for set tag action.
5077 qrss_id = flow_mreg_split_qrss_prep(dev, ext_actions, actions,
5078 qrss, actions_n, error);
5079 if (!mtr_sfx && !qrss_id) {
5083 } else if (attr->egress && !attr->transfer) {
5085 * All the actions on NIC Tx should have a metadata register
5086 * copy action to copy reg_a from WQE to reg_c[meta]
5088 act_size = sizeof(struct rte_flow_action) * (actions_n + 1) +
5089 sizeof(struct mlx5_flow_action_copy_mreg);
5090 ext_actions = mlx5_malloc(MLX5_MEM_ZERO, act_size, 0,
5093 return rte_flow_error_set(error, ENOMEM,
5094 RTE_FLOW_ERROR_TYPE_ACTION,
5095 NULL, "no memory to split "
5097 /* Create the action list appended with copy register. */
5098 ret = flow_mreg_tx_copy_prep(dev, ext_actions, actions,
5099 actions_n, error, encap_idx);
5103 /* Add the unmodified original or prefix subflow. */
5104 ret = flow_create_split_inner(dev, flow, &dev_flow, attr,
5105 items, ext_actions ? ext_actions :
5106 actions, flow_split_info, error);
5109 MLX5_ASSERT(dev_flow);
5111 const struct rte_flow_attr q_attr = {
5112 .group = MLX5_FLOW_MREG_ACT_TABLE_GROUP,
5115 /* Internal PMD action to set register. */
5116 struct mlx5_rte_flow_item_tag q_tag_spec = {
5120 struct rte_flow_item q_items[] = {
5122 .type = (enum rte_flow_item_type)
5123 MLX5_RTE_FLOW_ITEM_TYPE_TAG,
5124 .spec = &q_tag_spec,
5129 .type = RTE_FLOW_ITEM_TYPE_END,
5132 struct rte_flow_action q_actions[] = {
5138 .type = RTE_FLOW_ACTION_TYPE_END,
5141 uint64_t layers = flow_get_prefix_layer_flags(dev_flow);
5144 * Configure the tag item only if there is no meter subflow.
5145 * Since tag is already marked in the meter suffix subflow
5146 * we can just use the meter suffix items as is.
5149 /* Not meter subflow. */
5150 MLX5_ASSERT(!mtr_sfx);
5152 * Put unique id in prefix flow due to it is destroyed
5153 * after suffix flow and id will be freed after there
5154 * is no actual flows with this id and identifier
5155 * reallocation becomes possible (for example, for
5156 * other flows in other threads).
5158 dev_flow->handle->split_flow_id = qrss_id;
5159 ret = mlx5_flow_get_reg_id(dev, MLX5_COPY_MARK, 0,
5163 q_tag_spec.id = ret;
5166 /* Add suffix subflow to execute Q/RSS. */
5167 flow_split_info->prefix_layers = layers;
5168 flow_split_info->prefix_mark = 0;
5169 ret = flow_create_split_inner(dev, flow, &dev_flow,
5170 &q_attr, mtr_sfx ? items :
5172 flow_split_info, error);
5175 /* qrss ID should be freed if failed. */
5177 MLX5_ASSERT(dev_flow);
5182 * We do not destroy the partially created sub_flows in case of error.
5183 * These ones are included into parent flow list and will be destroyed
5184 * by flow_drv_destroy.
5186 mlx5_ipool_free(priv->sh->ipool[MLX5_IPOOL_RSS_EXPANTION_FLOW_ID],
5188 mlx5_free(ext_actions);
5193 * The splitting for meter feature.
5195 * - The meter flow will be split to two flows as prefix and
5196 * suffix flow. The packets make sense only it pass the prefix
5199 * - Reg_C_5 is used for the packet to match betweend prefix and
5203 * Pointer to Ethernet device.
5205 * Parent flow structure pointer.
5207 * Flow rule attributes.
5209 * Pattern specification (list terminated by the END pattern item).
5210 * @param[in] actions
5211 * Associated actions (list terminated by the END action).
5212 * @param[in] flow_split_info
5213 * Pointer to flow split info structure.
5215 * Perform verbose error reporting if not NULL.
5217 * 0 on success, negative value otherwise
5220 flow_create_split_meter(struct rte_eth_dev *dev,
5221 struct rte_flow *flow,
5222 const struct rte_flow_attr *attr,
5223 const struct rte_flow_item items[],
5224 const struct rte_flow_action actions[],
5225 struct mlx5_flow_split_info *flow_split_info,
5226 struct rte_flow_error *error)
5228 struct mlx5_priv *priv = dev->data->dev_private;
5229 struct mlx5_flow_workspace *wks = mlx5_flow_get_thread_workspace();
5230 struct rte_flow_action *sfx_actions = NULL;
5231 struct rte_flow_action *pre_actions = NULL;
5232 struct rte_flow_item *sfx_items = NULL;
5233 struct mlx5_flow *dev_flow = NULL;
5234 struct rte_flow_attr sfx_attr = *attr;
5235 struct mlx5_flow_meter *fm = NULL;
5236 bool has_mtr = false;
5238 uint32_t mtr_tag_id = 0;
5245 actions_n = flow_check_meter_action(actions, &has_mtr,
5249 fm = mlx5_ipool_get(priv->sh->ipool[MLX5_IPOOL_MTR],
5252 return rte_flow_error_set(error, EINVAL,
5253 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
5254 NULL, "Meter not found.");
5256 fm = mlx5_flow_meter_find(priv, meter_id);
5258 return rte_flow_error_set(error, EINVAL,
5259 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
5260 NULL, "Meter not found.");
5261 ret = mlx5_flow_meter_attach(priv, fm,
5265 flow->meter = fm->idx;
5268 /* The prefix actions: meter, decap, encap, tag, end. */
5269 act_size = sizeof(struct rte_flow_action) * (actions_n + 5) +
5270 sizeof(struct mlx5_rte_flow_action_set_tag);
5271 /* The suffix items: tag, vlan, port id, end. */
5272 #define METER_SUFFIX_ITEM 4
5273 item_size = sizeof(struct rte_flow_item) * METER_SUFFIX_ITEM +
5274 sizeof(struct mlx5_rte_flow_item_tag) * 2;
5275 sfx_actions = mlx5_malloc(MLX5_MEM_ZERO, (act_size + item_size),
5278 return rte_flow_error_set(error, ENOMEM,
5279 RTE_FLOW_ERROR_TYPE_ACTION,
5280 NULL, "no memory to split "
5282 sfx_items = (struct rte_flow_item *)((char *)sfx_actions +
5284 pre_actions = sfx_actions + actions_n;
5285 mtr_tag_id = flow_meter_split_prep(dev, fm, items, sfx_items,
5286 actions, sfx_actions,
5287 pre_actions, error);
5292 /* Add the prefix subflow. */
5293 flow_split_info->prefix_mark = 0;
5294 ret = flow_create_split_inner(dev, flow, &dev_flow,
5295 attr, items, pre_actions,
5296 flow_split_info, error);
5298 mlx5_ipool_free(fm->flow_ipool, mtr_tag_id);
5302 dev_flow->handle->split_flow_id = mtr_tag_id;
5303 dev_flow->handle->is_meter_flow_id = 1;
5304 /* Setting the sfx group atrr. */
5305 sfx_attr.group = sfx_attr.transfer ?
5306 (MLX5_FLOW_TABLE_LEVEL_SUFFIX - 1) :
5307 MLX5_FLOW_TABLE_LEVEL_SUFFIX;
5308 flow_split_info->prefix_layers =
5309 flow_get_prefix_layer_flags(dev_flow);
5310 flow_split_info->prefix_mark = dev_flow->handle->mark;
5312 /* Add the prefix subflow. */
5313 ret = flow_create_split_metadata(dev, flow,
5314 &sfx_attr, sfx_items ?
5316 sfx_actions ? sfx_actions : actions,
5317 flow_split_info, error);
5320 mlx5_free(sfx_actions);
5325 * The splitting for sample feature.
5327 * Once Sample action is detected in the action list, the flow actions should
5328 * be split into prefix sub flow and suffix sub flow.
5330 * The original items remain in the prefix sub flow, all actions preceding the
5331 * sample action and the sample action itself will be copied to the prefix
5332 * sub flow, the actions following the sample action will be copied to the
5333 * suffix sub flow, Queue action always be located in the suffix sub flow.
5335 * In order to make the packet from prefix sub flow matches with suffix sub
5336 * flow, an extra tag action be added into prefix sub flow, and the suffix sub
5337 * flow uses tag item with the unique flow id.
5340 * Pointer to Ethernet device.
5342 * Parent flow structure pointer.
5344 * Flow rule attributes.
5346 * Pattern specification (list terminated by the END pattern item).
5347 * @param[in] actions
5348 * Associated actions (list terminated by the END action).
5349 * @param[in] flow_split_info
5350 * Pointer to flow split info structure.
5352 * Perform verbose error reporting if not NULL.
5354 * 0 on success, negative value otherwise
5357 flow_create_split_sample(struct rte_eth_dev *dev,
5358 struct rte_flow *flow,
5359 const struct rte_flow_attr *attr,
5360 const struct rte_flow_item items[],
5361 const struct rte_flow_action actions[],
5362 struct mlx5_flow_split_info *flow_split_info,
5363 struct rte_flow_error *error)
5365 struct mlx5_priv *priv = dev->data->dev_private;
5366 struct rte_flow_action *sfx_actions = NULL;
5367 struct rte_flow_action *pre_actions = NULL;
5368 struct rte_flow_item *sfx_items = NULL;
5369 struct mlx5_flow *dev_flow = NULL;
5370 struct rte_flow_attr sfx_attr = *attr;
5371 #ifdef HAVE_IBV_FLOW_DV_SUPPORT
5372 struct mlx5_flow_dv_sample_resource *sample_res;
5373 struct mlx5_flow_tbl_data_entry *sfx_tbl_data;
5374 struct mlx5_flow_tbl_resource *sfx_tbl;
5378 uint32_t fdb_tx = 0;
5381 int sample_action_pos;
5382 int qrss_action_pos;
5384 int modify_after_mirror = 0;
5385 uint16_t jump_table = 0;
5386 const uint32_t next_ft_step = 1;
5389 if (priv->sampler_en)
5390 actions_n = flow_check_match_action(actions, attr,
5391 RTE_FLOW_ACTION_TYPE_SAMPLE,
5392 &sample_action_pos, &qrss_action_pos,
5393 &modify_after_mirror);
5395 /* The prefix actions must includes sample, tag, end. */
5396 act_size = sizeof(struct rte_flow_action) * (actions_n * 2 + 1)
5397 + sizeof(struct mlx5_rte_flow_action_set_tag);
5398 item_size = sizeof(struct rte_flow_item) * SAMPLE_SUFFIX_ITEM +
5399 sizeof(struct mlx5_rte_flow_item_tag) * 2;
5400 sfx_actions = mlx5_malloc(MLX5_MEM_ZERO, (act_size +
5401 item_size), 0, SOCKET_ID_ANY);
5403 return rte_flow_error_set(error, ENOMEM,
5404 RTE_FLOW_ERROR_TYPE_ACTION,
5405 NULL, "no memory to split "
5407 /* The representor_id is -1 for uplink. */
5408 fdb_tx = (attr->transfer && priv->representor_id != -1);
5410 * When reg_c_preserve is set, metadata registers Cx preserve
5411 * their value even through packet duplication.
5413 add_tag = (!fdb_tx || priv->config.hca_attr.reg_c_preserve);
5415 sfx_items = (struct rte_flow_item *)((char *)sfx_actions
5417 if (modify_after_mirror)
5418 jump_table = attr->group * MLX5_FLOW_TABLE_FACTOR +
5420 pre_actions = sfx_actions + actions_n;
5421 tag_id = flow_sample_split_prep(dev, add_tag, sfx_items,
5422 actions, sfx_actions,
5423 pre_actions, actions_n,
5425 qrss_action_pos, jump_table,
5427 if (tag_id < 0 || (add_tag && !tag_id)) {
5431 if (modify_after_mirror)
5432 flow_split_info->skip_scale =
5433 1 << MLX5_SCALE_JUMP_FLOW_GROUP_BIT;
5434 /* Add the prefix subflow. */
5435 ret = flow_create_split_inner(dev, flow, &dev_flow, attr,
5437 flow_split_info, error);
5442 dev_flow->handle->split_flow_id = tag_id;
5443 #ifdef HAVE_IBV_FLOW_DV_SUPPORT
5444 if (!modify_after_mirror) {
5445 /* Set the sfx group attr. */
5446 sample_res = (struct mlx5_flow_dv_sample_resource *)
5447 dev_flow->dv.sample_res;
5448 sfx_tbl = (struct mlx5_flow_tbl_resource *)
5449 sample_res->normal_path_tbl;
5450 sfx_tbl_data = container_of(sfx_tbl,
5451 struct mlx5_flow_tbl_data_entry,
5453 sfx_attr.group = sfx_attr.transfer ?
5454 (sfx_tbl_data->table_id - 1) :
5455 sfx_tbl_data->table_id;
5457 MLX5_ASSERT(attr->transfer);
5458 sfx_attr.group = jump_table;
5460 flow_split_info->prefix_layers =
5461 flow_get_prefix_layer_flags(dev_flow);
5462 flow_split_info->prefix_mark = dev_flow->handle->mark;
5463 /* Suffix group level already be scaled with factor, set
5464 * MLX5_SCALE_FLOW_GROUP_BIT of skip_scale to 1 to avoid scale
5465 * again in translation.
5467 flow_split_info->skip_scale = 1 << MLX5_SCALE_FLOW_GROUP_BIT;
5470 /* Add the suffix subflow. */
5471 ret = flow_create_split_meter(dev, flow, &sfx_attr,
5472 sfx_items ? sfx_items : items,
5473 sfx_actions ? sfx_actions : actions,
5474 flow_split_info, error);
5477 mlx5_free(sfx_actions);
5482 * Split the flow to subflow set. The splitters might be linked
5483 * in the chain, like this:
5484 * flow_create_split_outer() calls:
5485 * flow_create_split_meter() calls:
5486 * flow_create_split_metadata(meter_subflow_0) calls:
5487 * flow_create_split_inner(metadata_subflow_0)
5488 * flow_create_split_inner(metadata_subflow_1)
5489 * flow_create_split_inner(metadata_subflow_2)
5490 * flow_create_split_metadata(meter_subflow_1) calls:
5491 * flow_create_split_inner(metadata_subflow_0)
5492 * flow_create_split_inner(metadata_subflow_1)
5493 * flow_create_split_inner(metadata_subflow_2)
5495 * This provide flexible way to add new levels of flow splitting.
5496 * The all of successfully created subflows are included to the
5497 * parent flow dev_flow list.
5500 * Pointer to Ethernet device.
5502 * Parent flow structure pointer.
5504 * Flow rule attributes.
5506 * Pattern specification (list terminated by the END pattern item).
5507 * @param[in] actions
5508 * Associated actions (list terminated by the END action).
5509 * @param[in] flow_split_info
5510 * Pointer to flow split info structure.
5512 * Perform verbose error reporting if not NULL.
5514 * 0 on success, negative value otherwise
5517 flow_create_split_outer(struct rte_eth_dev *dev,
5518 struct rte_flow *flow,
5519 const struct rte_flow_attr *attr,
5520 const struct rte_flow_item items[],
5521 const struct rte_flow_action actions[],
5522 struct mlx5_flow_split_info *flow_split_info,
5523 struct rte_flow_error *error)
5527 ret = flow_create_split_sample(dev, flow, attr, items,
5528 actions, flow_split_info, error);
5529 MLX5_ASSERT(ret <= 0);
5533 static struct mlx5_flow_tunnel *
5534 flow_tunnel_from_rule(struct rte_eth_dev *dev,
5535 const struct rte_flow_attr *attr,
5536 const struct rte_flow_item items[],
5537 const struct rte_flow_action actions[])
5539 struct mlx5_flow_tunnel *tunnel;
5541 #pragma GCC diagnostic push
5542 #pragma GCC diagnostic ignored "-Wcast-qual"
5543 if (is_flow_tunnel_match_rule(dev, attr, items, actions))
5544 tunnel = (struct mlx5_flow_tunnel *)items[0].spec;
5545 else if (is_flow_tunnel_steer_rule(dev, attr, items, actions))
5546 tunnel = (struct mlx5_flow_tunnel *)actions[0].conf;
5549 #pragma GCC diagnostic pop
5555 * Adjust flow RSS workspace if needed.
5558 * Pointer to thread flow work space.
5560 * Pointer to RSS descriptor.
5561 * @param[in] nrssq_num
5562 * New RSS queue number.
5565 * 0 on success, -1 otherwise and rte_errno is set.
5568 flow_rss_workspace_adjust(struct mlx5_flow_workspace *wks,
5569 struct mlx5_flow_rss_desc *rss_desc,
5572 if (likely(nrssq_num <= wks->rssq_num))
5574 rss_desc->queue = realloc(rss_desc->queue,
5575 sizeof(*rss_desc->queue) * RTE_ALIGN(nrssq_num, 2));
5576 if (!rss_desc->queue) {
5580 wks->rssq_num = RTE_ALIGN(nrssq_num, 2);
5585 * Create a flow and add it to @p list.
5588 * Pointer to Ethernet device.
5590 * Pointer to a TAILQ flow list. If this parameter NULL,
5591 * no list insertion occurred, flow is just created,
5592 * this is caller's responsibility to track the
5595 * Flow rule attributes.
5597 * Pattern specification (list terminated by the END pattern item).
5598 * @param[in] actions
5599 * Associated actions (list terminated by the END action).
5600 * @param[in] external
5601 * This flow rule is created by request external to PMD.
5603 * Perform verbose error reporting if not NULL.
5606 * A flow index on success, 0 otherwise and rte_errno is set.
5609 flow_list_create(struct rte_eth_dev *dev, uint32_t *list,
5610 const struct rte_flow_attr *attr,
5611 const struct rte_flow_item items[],
5612 const struct rte_flow_action original_actions[],
5613 bool external, struct rte_flow_error *error)
5615 struct mlx5_priv *priv = dev->data->dev_private;
5616 struct rte_flow *flow = NULL;
5617 struct mlx5_flow *dev_flow;
5618 const struct rte_flow_action_rss *rss = NULL;
5619 struct mlx5_translated_action_handle
5620 indir_actions[MLX5_MAX_INDIRECT_ACTIONS];
5621 int indir_actions_n = MLX5_MAX_INDIRECT_ACTIONS;
5623 struct mlx5_flow_expand_rss buf;
5624 uint8_t buffer[2048];
5627 struct rte_flow_action actions[MLX5_MAX_SPLIT_ACTIONS];
5628 uint8_t buffer[2048];
5631 struct rte_flow_action actions[MLX5_MAX_SPLIT_ACTIONS];
5632 uint8_t buffer[2048];
5633 } actions_hairpin_tx;
5635 struct rte_flow_item items[MLX5_MAX_SPLIT_ITEMS];
5636 uint8_t buffer[2048];
5638 struct mlx5_flow_expand_rss *buf = &expand_buffer.buf;
5639 struct mlx5_flow_rss_desc *rss_desc;
5640 const struct rte_flow_action *p_actions_rx;
5644 struct rte_flow_attr attr_tx = { .priority = 0 };
5645 const struct rte_flow_action *actions;
5646 struct rte_flow_action *translated_actions = NULL;
5647 struct mlx5_flow_tunnel *tunnel;
5648 struct tunnel_default_miss_ctx default_miss_ctx = { 0, };
5649 struct mlx5_flow_workspace *wks = mlx5_flow_push_thread_workspace();
5650 struct mlx5_flow_split_info flow_split_info = {
5651 .external = !!external,
5660 rss_desc = &wks->rss_desc;
5661 ret = flow_action_handles_translate(dev, original_actions,
5664 &translated_actions, error);
5666 MLX5_ASSERT(translated_actions == NULL);
5669 actions = translated_actions ? translated_actions : original_actions;
5670 p_actions_rx = actions;
5671 hairpin_flow = flow_check_hairpin_split(dev, attr, actions);
5672 ret = flow_drv_validate(dev, attr, items, p_actions_rx,
5673 external, hairpin_flow, error);
5675 goto error_before_hairpin_split;
5676 flow = mlx5_ipool_zmalloc(priv->sh->ipool[MLX5_IPOOL_RTE_FLOW], &idx);
5679 goto error_before_hairpin_split;
5681 if (hairpin_flow > 0) {
5682 if (hairpin_flow > MLX5_MAX_SPLIT_ACTIONS) {
5684 goto error_before_hairpin_split;
5686 flow_hairpin_split(dev, actions, actions_rx.actions,
5687 actions_hairpin_tx.actions, items_tx.items,
5689 p_actions_rx = actions_rx.actions;
5691 flow_split_info.flow_idx = idx;
5692 flow->drv_type = flow_get_drv_type(dev, attr);
5693 MLX5_ASSERT(flow->drv_type > MLX5_FLOW_TYPE_MIN &&
5694 flow->drv_type < MLX5_FLOW_TYPE_MAX);
5695 memset(rss_desc, 0, offsetof(struct mlx5_flow_rss_desc, queue));
5696 /* RSS Action only works on NIC RX domain */
5697 if (attr->ingress && !attr->transfer)
5698 rss = flow_get_rss_action(p_actions_rx);
5700 if (flow_rss_workspace_adjust(wks, rss_desc, rss->queue_num))
5703 * The following information is required by
5704 * mlx5_flow_hashfields_adjust() in advance.
5706 rss_desc->level = rss->level;
5707 /* RSS type 0 indicates default RSS type (ETH_RSS_IP). */
5708 rss_desc->types = !rss->types ? ETH_RSS_IP : rss->types;
5710 flow->dev_handles = 0;
5711 if (rss && rss->types) {
5712 unsigned int graph_root;
5714 graph_root = find_graph_root(items, rss->level);
5715 ret = mlx5_flow_expand_rss(buf, sizeof(expand_buffer.buffer),
5717 mlx5_support_expansion, graph_root);
5718 MLX5_ASSERT(ret > 0 &&
5719 (unsigned int)ret < sizeof(expand_buffer.buffer));
5722 buf->entry[0].pattern = (void *)(uintptr_t)items;
5724 rss_desc->shared_rss = flow_get_shared_rss_action(dev, indir_actions,
5726 for (i = 0; i < buf->entries; ++i) {
5727 /* Initialize flow split data. */
5728 flow_split_info.prefix_layers = 0;
5729 flow_split_info.prefix_mark = 0;
5730 flow_split_info.skip_scale = 0;
5732 * The splitter may create multiple dev_flows,
5733 * depending on configuration. In the simplest
5734 * case it just creates unmodified original flow.
5736 ret = flow_create_split_outer(dev, flow, attr,
5737 buf->entry[i].pattern,
5738 p_actions_rx, &flow_split_info,
5742 if (is_flow_tunnel_steer_rule(dev, attr,
5743 buf->entry[i].pattern,
5745 ret = flow_tunnel_add_default_miss(dev, flow, attr,
5751 mlx5_free(default_miss_ctx.queue);
5756 /* Create the tx flow. */
5758 attr_tx.group = MLX5_HAIRPIN_TX_TABLE;
5759 attr_tx.ingress = 0;
5761 dev_flow = flow_drv_prepare(dev, flow, &attr_tx, items_tx.items,
5762 actions_hairpin_tx.actions,
5766 dev_flow->flow = flow;
5767 dev_flow->external = 0;
5768 SILIST_INSERT(&flow->dev_handles, dev_flow->handle_idx,
5769 dev_flow->handle, next);
5770 ret = flow_drv_translate(dev, dev_flow, &attr_tx,
5772 actions_hairpin_tx.actions, error);
5777 * Update the metadata register copy table. If extensive
5778 * metadata feature is enabled and registers are supported
5779 * we might create the extra rte_flow for each unique
5780 * MARK/FLAG action ID.
5782 * The table is updated for ingress Flows only, because
5783 * the egress Flows belong to the different device and
5784 * copy table should be updated in peer NIC Rx domain.
5786 if (attr->ingress &&
5787 (external || attr->group != MLX5_FLOW_MREG_CP_TABLE_GROUP)) {
5788 ret = flow_mreg_update_copy_table(dev, flow, actions, error);
5793 * If the flow is external (from application) OR device is started,
5794 * OR mreg discover, then apply immediately.
5796 if (external || dev->data->dev_started ||
5797 (attr->group == MLX5_FLOW_MREG_CP_TABLE_GROUP &&
5798 attr->priority == MLX5_FLOW_LOWEST_PRIO_INDICATOR)) {
5799 ret = flow_drv_apply(dev, flow, error);
5804 rte_spinlock_lock(&priv->flow_list_lock);
5805 ILIST_INSERT(priv->sh->ipool[MLX5_IPOOL_RTE_FLOW], list, idx,
5807 rte_spinlock_unlock(&priv->flow_list_lock);
5809 flow_rxq_flags_set(dev, flow);
5810 rte_free(translated_actions);
5811 tunnel = flow_tunnel_from_rule(dev, attr, items, actions);
5814 flow->tunnel_id = tunnel->tunnel_id;
5815 __atomic_add_fetch(&tunnel->refctn, 1, __ATOMIC_RELAXED);
5816 mlx5_free(default_miss_ctx.queue);
5818 mlx5_flow_pop_thread_workspace();
5822 ret = rte_errno; /* Save rte_errno before cleanup. */
5823 flow_mreg_del_copy_action(dev, flow);
5824 flow_drv_destroy(dev, flow);
5825 if (rss_desc->shared_rss)
5826 __atomic_sub_fetch(&((struct mlx5_shared_action_rss *)
5828 (priv->sh->ipool[MLX5_IPOOL_RSS_SHARED_ACTIONS],
5829 rss_desc->shared_rss))->refcnt, 1, __ATOMIC_RELAXED);
5830 mlx5_ipool_free(priv->sh->ipool[MLX5_IPOOL_RTE_FLOW], idx);
5831 rte_errno = ret; /* Restore rte_errno. */
5834 mlx5_flow_pop_thread_workspace();
5835 error_before_hairpin_split:
5836 rte_free(translated_actions);
5841 * Create a dedicated flow rule on e-switch table 0 (root table), to direct all
5842 * incoming packets to table 1.
5844 * Other flow rules, requested for group n, will be created in
5845 * e-switch table n+1.
5846 * Jump action to e-switch group n will be created to group n+1.
5848 * Used when working in switchdev mode, to utilise advantages of table 1
5852 * Pointer to Ethernet device.
5855 * Pointer to flow on success, NULL otherwise and rte_errno is set.
5858 mlx5_flow_create_esw_table_zero_flow(struct rte_eth_dev *dev)
5860 const struct rte_flow_attr attr = {
5867 const struct rte_flow_item pattern = {
5868 .type = RTE_FLOW_ITEM_TYPE_END,
5870 struct rte_flow_action_jump jump = {
5873 const struct rte_flow_action actions[] = {
5875 .type = RTE_FLOW_ACTION_TYPE_JUMP,
5879 .type = RTE_FLOW_ACTION_TYPE_END,
5882 struct mlx5_priv *priv = dev->data->dev_private;
5883 struct rte_flow_error error;
5885 return (void *)(uintptr_t)flow_list_create(dev, &priv->ctrl_flows,
5887 actions, false, &error);
5891 * Validate a flow supported by the NIC.
5893 * @see rte_flow_validate()
5897 mlx5_flow_validate(struct rte_eth_dev *dev,
5898 const struct rte_flow_attr *attr,
5899 const struct rte_flow_item items[],
5900 const struct rte_flow_action original_actions[],
5901 struct rte_flow_error *error)
5904 struct mlx5_translated_action_handle
5905 indir_actions[MLX5_MAX_INDIRECT_ACTIONS];
5906 int indir_actions_n = MLX5_MAX_INDIRECT_ACTIONS;
5907 const struct rte_flow_action *actions;
5908 struct rte_flow_action *translated_actions = NULL;
5909 int ret = flow_action_handles_translate(dev, original_actions,
5912 &translated_actions, error);
5916 actions = translated_actions ? translated_actions : original_actions;
5917 hairpin_flow = flow_check_hairpin_split(dev, attr, actions);
5918 ret = flow_drv_validate(dev, attr, items, actions,
5919 true, hairpin_flow, error);
5920 rte_free(translated_actions);
5927 * @see rte_flow_create()
5931 mlx5_flow_create(struct rte_eth_dev *dev,
5932 const struct rte_flow_attr *attr,
5933 const struct rte_flow_item items[],
5934 const struct rte_flow_action actions[],
5935 struct rte_flow_error *error)
5937 struct mlx5_priv *priv = dev->data->dev_private;
5940 * If the device is not started yet, it is not allowed to created a
5941 * flow from application. PMD default flows and traffic control flows
5944 if (unlikely(!dev->data->dev_started)) {
5945 DRV_LOG(DEBUG, "port %u is not started when "
5946 "inserting a flow", dev->data->port_id);
5947 rte_flow_error_set(error, ENODEV,
5948 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
5950 "port not started");
5954 return (void *)(uintptr_t)flow_list_create(dev, &priv->flows,
5955 attr, items, actions, true, error);
5959 * Destroy a flow in a list.
5962 * Pointer to Ethernet device.
5964 * Pointer to the Indexed flow list. If this parameter NULL,
5965 * there is no flow removal from the list. Be noted that as
5966 * flow is add to the indexed list, memory of the indexed
5967 * list points to maybe changed as flow destroyed.
5968 * @param[in] flow_idx
5969 * Index of flow to destroy.
5972 flow_list_destroy(struct rte_eth_dev *dev, uint32_t *list,
5975 struct mlx5_priv *priv = dev->data->dev_private;
5976 struct rte_flow *flow = mlx5_ipool_get(priv->sh->ipool
5977 [MLX5_IPOOL_RTE_FLOW], flow_idx);
5982 * Update RX queue flags only if port is started, otherwise it is
5985 if (dev->data->dev_started)
5986 flow_rxq_flags_trim(dev, flow);
5987 flow_drv_destroy(dev, flow);
5989 rte_spinlock_lock(&priv->flow_list_lock);
5990 ILIST_REMOVE(priv->sh->ipool[MLX5_IPOOL_RTE_FLOW], list,
5991 flow_idx, flow, next);
5992 rte_spinlock_unlock(&priv->flow_list_lock);
5995 struct mlx5_flow_tunnel *tunnel;
5997 tunnel = mlx5_find_tunnel_id(dev, flow->tunnel_id);
5999 if (!__atomic_sub_fetch(&tunnel->refctn, 1, __ATOMIC_RELAXED))
6000 mlx5_flow_tunnel_free(dev, tunnel);
6002 flow_mreg_del_copy_action(dev, flow);
6003 mlx5_ipool_free(priv->sh->ipool[MLX5_IPOOL_RTE_FLOW], flow_idx);
6007 * Destroy all flows.
6010 * Pointer to Ethernet device.
6012 * Pointer to the Indexed flow list.
6014 * If flushing is called avtively.
6017 mlx5_flow_list_flush(struct rte_eth_dev *dev, uint32_t *list, bool active)
6019 uint32_t num_flushed = 0;
6022 flow_list_destroy(dev, list, *list);
6026 DRV_LOG(INFO, "port %u: %u flows flushed before stopping",
6027 dev->data->port_id, num_flushed);
6032 * Stop all default actions for flows.
6035 * Pointer to Ethernet device.
6038 mlx5_flow_stop_default(struct rte_eth_dev *dev)
6040 flow_mreg_del_default_copy_action(dev);
6041 flow_rxq_flags_clear(dev);
6045 * Start all default actions for flows.
6048 * Pointer to Ethernet device.
6050 * 0 on success, a negative errno value otherwise and rte_errno is set.
6053 mlx5_flow_start_default(struct rte_eth_dev *dev)
6055 struct rte_flow_error error;
6057 /* Make sure default copy action (reg_c[0] -> reg_b) is created. */
6058 return flow_mreg_add_default_copy_action(dev, &error);
6062 * Release key of thread specific flow workspace data.
6065 flow_release_workspace(void *data)
6067 struct mlx5_flow_workspace *wks = data;
6068 struct mlx5_flow_workspace *next;
6072 free(wks->rss_desc.queue);
6079 * Get thread specific current flow workspace.
6081 * @return pointer to thread specific flow workspace data, NULL on error.
6083 struct mlx5_flow_workspace*
6084 mlx5_flow_get_thread_workspace(void)
6086 struct mlx5_flow_workspace *data;
6088 data = mlx5_flow_os_get_specific_workspace();
6089 MLX5_ASSERT(data && data->inuse);
6090 if (!data || !data->inuse)
6091 DRV_LOG(ERR, "flow workspace not initialized.");
6096 * Allocate and init new flow workspace.
6098 * @return pointer to flow workspace data, NULL on error.
6100 static struct mlx5_flow_workspace*
6101 flow_alloc_thread_workspace(void)
6103 struct mlx5_flow_workspace *data = calloc(1, sizeof(*data));
6106 DRV_LOG(ERR, "Failed to allocate flow workspace "
6110 data->rss_desc.queue = calloc(1,
6111 sizeof(uint16_t) * MLX5_RSSQ_DEFAULT_NUM);
6112 if (!data->rss_desc.queue)
6114 data->rssq_num = MLX5_RSSQ_DEFAULT_NUM;
6117 if (data->rss_desc.queue)
6118 free(data->rss_desc.queue);
6124 * Get new thread specific flow workspace.
6126 * If current workspace inuse, create new one and set as current.
6128 * @return pointer to thread specific flow workspace data, NULL on error.
6130 static struct mlx5_flow_workspace*
6131 mlx5_flow_push_thread_workspace(void)
6133 struct mlx5_flow_workspace *curr;
6134 struct mlx5_flow_workspace *data;
6136 curr = mlx5_flow_os_get_specific_workspace();
6138 data = flow_alloc_thread_workspace();
6141 } else if (!curr->inuse) {
6143 } else if (curr->next) {
6146 data = flow_alloc_thread_workspace();
6154 /* Set as current workspace */
6155 if (mlx5_flow_os_set_specific_workspace(data))
6156 DRV_LOG(ERR, "Failed to set flow workspace to thread.");
6161 * Close current thread specific flow workspace.
6163 * If previous workspace available, set it as current.
6165 * @return pointer to thread specific flow workspace data, NULL on error.
6168 mlx5_flow_pop_thread_workspace(void)
6170 struct mlx5_flow_workspace *data = mlx5_flow_get_thread_workspace();
6175 DRV_LOG(ERR, "Failed to close unused flow workspace.");
6181 if (mlx5_flow_os_set_specific_workspace(data->prev))
6182 DRV_LOG(ERR, "Failed to set flow workspace to thread.");
6186 * Verify the flow list is empty
6189 * Pointer to Ethernet device.
6191 * @return the number of flows not released.
6194 mlx5_flow_verify(struct rte_eth_dev *dev)
6196 struct mlx5_priv *priv = dev->data->dev_private;
6197 struct rte_flow *flow;
6201 ILIST_FOREACH(priv->sh->ipool[MLX5_IPOOL_RTE_FLOW], priv->flows, idx,
6203 DRV_LOG(DEBUG, "port %u flow %p still referenced",
6204 dev->data->port_id, (void *)flow);
6211 * Enable default hairpin egress flow.
6214 * Pointer to Ethernet device.
6219 * 0 on success, a negative errno value otherwise and rte_errno is set.
6222 mlx5_ctrl_flow_source_queue(struct rte_eth_dev *dev,
6225 struct mlx5_priv *priv = dev->data->dev_private;
6226 const struct rte_flow_attr attr = {
6230 struct mlx5_rte_flow_item_tx_queue queue_spec = {
6233 struct mlx5_rte_flow_item_tx_queue queue_mask = {
6234 .queue = UINT32_MAX,
6236 struct rte_flow_item items[] = {
6238 .type = (enum rte_flow_item_type)
6239 MLX5_RTE_FLOW_ITEM_TYPE_TX_QUEUE,
6240 .spec = &queue_spec,
6242 .mask = &queue_mask,
6245 .type = RTE_FLOW_ITEM_TYPE_END,
6248 struct rte_flow_action_jump jump = {
6249 .group = MLX5_HAIRPIN_TX_TABLE,
6251 struct rte_flow_action actions[2];
6253 struct rte_flow_error error;
6255 actions[0].type = RTE_FLOW_ACTION_TYPE_JUMP;
6256 actions[0].conf = &jump;
6257 actions[1].type = RTE_FLOW_ACTION_TYPE_END;
6258 flow_idx = flow_list_create(dev, &priv->ctrl_flows,
6259 &attr, items, actions, false, &error);
6262 "Failed to create ctrl flow: rte_errno(%d),"
6263 " type(%d), message(%s)",
6264 rte_errno, error.type,
6265 error.message ? error.message : " (no stated reason)");
6272 * Enable a control flow configured from the control plane.
6275 * Pointer to Ethernet device.
6277 * An Ethernet flow spec to apply.
6279 * An Ethernet flow mask to apply.
6281 * A VLAN flow spec to apply.
6283 * A VLAN flow mask to apply.
6286 * 0 on success, a negative errno value otherwise and rte_errno is set.
6289 mlx5_ctrl_flow_vlan(struct rte_eth_dev *dev,
6290 struct rte_flow_item_eth *eth_spec,
6291 struct rte_flow_item_eth *eth_mask,
6292 struct rte_flow_item_vlan *vlan_spec,
6293 struct rte_flow_item_vlan *vlan_mask)
6295 struct mlx5_priv *priv = dev->data->dev_private;
6296 const struct rte_flow_attr attr = {
6298 .priority = MLX5_FLOW_LOWEST_PRIO_INDICATOR,
6300 struct rte_flow_item items[] = {
6302 .type = RTE_FLOW_ITEM_TYPE_ETH,
6308 .type = (vlan_spec) ? RTE_FLOW_ITEM_TYPE_VLAN :
6309 RTE_FLOW_ITEM_TYPE_END,
6315 .type = RTE_FLOW_ITEM_TYPE_END,
6318 uint16_t queue[priv->reta_idx_n];
6319 struct rte_flow_action_rss action_rss = {
6320 .func = RTE_ETH_HASH_FUNCTION_DEFAULT,
6322 .types = priv->rss_conf.rss_hf,
6323 .key_len = priv->rss_conf.rss_key_len,
6324 .queue_num = priv->reta_idx_n,
6325 .key = priv->rss_conf.rss_key,
6328 struct rte_flow_action actions[] = {
6330 .type = RTE_FLOW_ACTION_TYPE_RSS,
6331 .conf = &action_rss,
6334 .type = RTE_FLOW_ACTION_TYPE_END,
6338 struct rte_flow_error error;
6341 if (!priv->reta_idx_n || !priv->rxqs_n) {
6344 if (!(dev->data->dev_conf.rxmode.mq_mode & ETH_MQ_RX_RSS_FLAG))
6345 action_rss.types = 0;
6346 for (i = 0; i != priv->reta_idx_n; ++i)
6347 queue[i] = (*priv->reta_idx)[i];
6348 flow_idx = flow_list_create(dev, &priv->ctrl_flows,
6349 &attr, items, actions, false, &error);
6356 * Enable a flow control configured from the control plane.
6359 * Pointer to Ethernet device.
6361 * An Ethernet flow spec to apply.
6363 * An Ethernet flow mask to apply.
6366 * 0 on success, a negative errno value otherwise and rte_errno is set.
6369 mlx5_ctrl_flow(struct rte_eth_dev *dev,
6370 struct rte_flow_item_eth *eth_spec,
6371 struct rte_flow_item_eth *eth_mask)
6373 return mlx5_ctrl_flow_vlan(dev, eth_spec, eth_mask, NULL, NULL);
6377 * Create default miss flow rule matching lacp traffic
6380 * Pointer to Ethernet device.
6382 * An Ethernet flow spec to apply.
6385 * 0 on success, a negative errno value otherwise and rte_errno is set.
6388 mlx5_flow_lacp_miss(struct rte_eth_dev *dev)
6390 struct mlx5_priv *priv = dev->data->dev_private;
6392 * The LACP matching is done by only using ether type since using
6393 * a multicast dst mac causes kernel to give low priority to this flow.
6395 static const struct rte_flow_item_eth lacp_spec = {
6396 .type = RTE_BE16(0x8809),
6398 static const struct rte_flow_item_eth lacp_mask = {
6401 const struct rte_flow_attr attr = {
6404 struct rte_flow_item items[] = {
6406 .type = RTE_FLOW_ITEM_TYPE_ETH,
6411 .type = RTE_FLOW_ITEM_TYPE_END,
6414 struct rte_flow_action actions[] = {
6416 .type = (enum rte_flow_action_type)
6417 MLX5_RTE_FLOW_ACTION_TYPE_DEFAULT_MISS,
6420 .type = RTE_FLOW_ACTION_TYPE_END,
6423 struct rte_flow_error error;
6424 uint32_t flow_idx = flow_list_create(dev, &priv->ctrl_flows,
6425 &attr, items, actions, false, &error);
6435 * @see rte_flow_destroy()
6439 mlx5_flow_destroy(struct rte_eth_dev *dev,
6440 struct rte_flow *flow,
6441 struct rte_flow_error *error __rte_unused)
6443 struct mlx5_priv *priv = dev->data->dev_private;
6445 flow_list_destroy(dev, &priv->flows, (uintptr_t)(void *)flow);
6450 * Destroy all flows.
6452 * @see rte_flow_flush()
6456 mlx5_flow_flush(struct rte_eth_dev *dev,
6457 struct rte_flow_error *error __rte_unused)
6459 struct mlx5_priv *priv = dev->data->dev_private;
6461 mlx5_flow_list_flush(dev, &priv->flows, false);
6468 * @see rte_flow_isolate()
6472 mlx5_flow_isolate(struct rte_eth_dev *dev,
6474 struct rte_flow_error *error)
6476 struct mlx5_priv *priv = dev->data->dev_private;
6478 if (dev->data->dev_started) {
6479 rte_flow_error_set(error, EBUSY,
6480 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
6482 "port must be stopped first");
6485 priv->isolated = !!enable;
6487 dev->dev_ops = &mlx5_dev_ops_isolate;
6489 dev->dev_ops = &mlx5_dev_ops;
6491 dev->rx_descriptor_status = mlx5_rx_descriptor_status;
6492 dev->tx_descriptor_status = mlx5_tx_descriptor_status;
6500 * @see rte_flow_query()
6504 flow_drv_query(struct rte_eth_dev *dev,
6506 const struct rte_flow_action *actions,
6508 struct rte_flow_error *error)
6510 struct mlx5_priv *priv = dev->data->dev_private;
6511 const struct mlx5_flow_driver_ops *fops;
6512 struct rte_flow *flow = mlx5_ipool_get(priv->sh->ipool
6513 [MLX5_IPOOL_RTE_FLOW],
6515 enum mlx5_flow_drv_type ftype;
6518 return rte_flow_error_set(error, ENOENT,
6519 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
6521 "invalid flow handle");
6523 ftype = flow->drv_type;
6524 MLX5_ASSERT(ftype > MLX5_FLOW_TYPE_MIN && ftype < MLX5_FLOW_TYPE_MAX);
6525 fops = flow_get_drv_ops(ftype);
6527 return fops->query(dev, flow, actions, data, error);
6533 * @see rte_flow_query()
6537 mlx5_flow_query(struct rte_eth_dev *dev,
6538 struct rte_flow *flow,
6539 const struct rte_flow_action *actions,
6541 struct rte_flow_error *error)
6545 ret = flow_drv_query(dev, (uintptr_t)(void *)flow, actions, data,
6553 * Get rte_flow callbacks.
6556 * Pointer to Ethernet device structure.
6558 * Pointer to operation-specific structure.
6563 mlx5_flow_ops_get(struct rte_eth_dev *dev __rte_unused,
6564 const struct rte_flow_ops **ops)
6566 *ops = &mlx5_flow_ops;
6571 * Create the needed meter and suffix tables.
6574 * Pointer to Ethernet device.
6577 * Pointer to table set on success, NULL otherwise.
6579 struct mlx5_meter_domains_infos *
6580 mlx5_flow_create_mtr_tbls(struct rte_eth_dev *dev)
6582 const struct mlx5_flow_driver_ops *fops;
6584 fops = flow_get_drv_ops(MLX5_FLOW_TYPE_DV);
6585 return fops->create_mtr_tbls(dev);
6589 * Destroy the meter table set.
6592 * Pointer to Ethernet device.
6594 * Pointer to the meter table set.
6600 mlx5_flow_destroy_mtr_tbls(struct rte_eth_dev *dev,
6601 struct mlx5_meter_domains_infos *tbls)
6603 const struct mlx5_flow_driver_ops *fops;
6605 fops = flow_get_drv_ops(MLX5_FLOW_TYPE_DV);
6606 return fops->destroy_mtr_tbls(dev, tbls);
6610 * Prepare policer rules.
6613 * Pointer to Ethernet device.
6615 * Pointer to flow meter structure.
6617 * Pointer to flow attributes.
6620 * 0 on success, -1 otherwise.
6623 mlx5_flow_prepare_policer_rules(struct rte_eth_dev *dev,
6624 struct mlx5_flow_meter *fm,
6625 const struct rte_flow_attr *attr)
6627 const struct mlx5_flow_driver_ops *fops;
6629 fops = flow_get_drv_ops(MLX5_FLOW_TYPE_DV);
6630 return fops->prepare_policer_rules(dev, fm, attr);
6634 * Destroy policer rules.
6637 * Pointer to flow meter structure.
6639 * Pointer to flow attributes.
6642 * 0 on success, -1 otherwise.
6645 mlx5_flow_destroy_policer_rules(struct rte_eth_dev *dev,
6646 struct mlx5_flow_meter *fm,
6647 const struct rte_flow_attr *attr)
6649 const struct mlx5_flow_driver_ops *fops;
6651 fops = flow_get_drv_ops(MLX5_FLOW_TYPE_DV);
6652 return fops->destroy_policer_rules(dev, fm, attr);
6656 * Allocate a counter.
6659 * Pointer to Ethernet device structure.
6662 * Index to allocated counter on success, 0 otherwise.
6665 mlx5_counter_alloc(struct rte_eth_dev *dev)
6667 const struct mlx5_flow_driver_ops *fops;
6668 struct rte_flow_attr attr = { .transfer = 0 };
6670 if (flow_get_drv_type(dev, &attr) == MLX5_FLOW_TYPE_DV) {
6671 fops = flow_get_drv_ops(MLX5_FLOW_TYPE_DV);
6672 return fops->counter_alloc(dev);
6675 "port %u counter allocate is not supported.",
6676 dev->data->port_id);
6684 * Pointer to Ethernet device structure.
6686 * Index to counter to be free.
6689 mlx5_counter_free(struct rte_eth_dev *dev, uint32_t cnt)
6691 const struct mlx5_flow_driver_ops *fops;
6692 struct rte_flow_attr attr = { .transfer = 0 };
6694 if (flow_get_drv_type(dev, &attr) == MLX5_FLOW_TYPE_DV) {
6695 fops = flow_get_drv_ops(MLX5_FLOW_TYPE_DV);
6696 fops->counter_free(dev, cnt);
6700 "port %u counter free is not supported.",
6701 dev->data->port_id);
6705 * Query counter statistics.
6708 * Pointer to Ethernet device structure.
6710 * Index to counter to query.
6712 * Set to clear counter statistics.
6714 * The counter hits packets number to save.
6716 * The counter hits bytes number to save.
6719 * 0 on success, a negative errno value otherwise.
6722 mlx5_counter_query(struct rte_eth_dev *dev, uint32_t cnt,
6723 bool clear, uint64_t *pkts, uint64_t *bytes)
6725 const struct mlx5_flow_driver_ops *fops;
6726 struct rte_flow_attr attr = { .transfer = 0 };
6728 if (flow_get_drv_type(dev, &attr) == MLX5_FLOW_TYPE_DV) {
6729 fops = flow_get_drv_ops(MLX5_FLOW_TYPE_DV);
6730 return fops->counter_query(dev, cnt, clear, pkts, bytes);
6733 "port %u counter query is not supported.",
6734 dev->data->port_id);
6739 * Allocate a new memory for the counter values wrapped by all the needed
6743 * Pointer to mlx5_dev_ctx_shared object.
6746 * 0 on success, a negative errno value otherwise.
6749 mlx5_flow_create_counter_stat_mem_mng(struct mlx5_dev_ctx_shared *sh)
6751 struct mlx5_devx_mkey_attr mkey_attr;
6752 struct mlx5_counter_stats_mem_mng *mem_mng;
6753 volatile struct flow_counter_stats *raw_data;
6754 int raws_n = MLX5_CNT_CONTAINER_RESIZE + MLX5_MAX_PENDING_QUERIES;
6755 int size = (sizeof(struct flow_counter_stats) *
6756 MLX5_COUNTERS_PER_POOL +
6757 sizeof(struct mlx5_counter_stats_raw)) * raws_n +
6758 sizeof(struct mlx5_counter_stats_mem_mng);
6759 size_t pgsize = rte_mem_page_size();
6763 if (pgsize == (size_t)-1) {
6764 DRV_LOG(ERR, "Failed to get mem page size");
6768 mem = mlx5_malloc(MLX5_MEM_ZERO, size, pgsize, SOCKET_ID_ANY);
6773 mem_mng = (struct mlx5_counter_stats_mem_mng *)(mem + size) - 1;
6774 size = sizeof(*raw_data) * MLX5_COUNTERS_PER_POOL * raws_n;
6775 mem_mng->umem = mlx5_os_umem_reg(sh->ctx, mem, size,
6776 IBV_ACCESS_LOCAL_WRITE);
6777 if (!mem_mng->umem) {
6782 mkey_attr.addr = (uintptr_t)mem;
6783 mkey_attr.size = size;
6784 mkey_attr.umem_id = mlx5_os_get_umem_id(mem_mng->umem);
6785 mkey_attr.pd = sh->pdn;
6786 mkey_attr.log_entity_size = 0;
6787 mkey_attr.pg_access = 0;
6788 mkey_attr.klm_array = NULL;
6789 mkey_attr.klm_num = 0;
6790 mkey_attr.relaxed_ordering_write = sh->cmng.relaxed_ordering_write;
6791 mkey_attr.relaxed_ordering_read = sh->cmng.relaxed_ordering_read;
6792 mem_mng->dm = mlx5_devx_cmd_mkey_create(sh->ctx, &mkey_attr);
6794 mlx5_os_umem_dereg(mem_mng->umem);
6799 mem_mng->raws = (struct mlx5_counter_stats_raw *)(mem + size);
6800 raw_data = (volatile struct flow_counter_stats *)mem;
6801 for (i = 0; i < raws_n; ++i) {
6802 mem_mng->raws[i].mem_mng = mem_mng;
6803 mem_mng->raws[i].data = raw_data + i * MLX5_COUNTERS_PER_POOL;
6805 for (i = 0; i < MLX5_MAX_PENDING_QUERIES; ++i)
6806 LIST_INSERT_HEAD(&sh->cmng.free_stat_raws,
6807 mem_mng->raws + MLX5_CNT_CONTAINER_RESIZE + i,
6809 LIST_INSERT_HEAD(&sh->cmng.mem_mngs, mem_mng, next);
6810 sh->cmng.mem_mng = mem_mng;
6815 * Set the statistic memory to the new counter pool.
6818 * Pointer to mlx5_dev_ctx_shared object.
6820 * Pointer to the pool to set the statistic memory.
6823 * 0 on success, a negative errno value otherwise.
6826 mlx5_flow_set_counter_stat_mem(struct mlx5_dev_ctx_shared *sh,
6827 struct mlx5_flow_counter_pool *pool)
6829 struct mlx5_flow_counter_mng *cmng = &sh->cmng;
6830 /* Resize statistic memory once used out. */
6831 if (!(pool->index % MLX5_CNT_CONTAINER_RESIZE) &&
6832 mlx5_flow_create_counter_stat_mem_mng(sh)) {
6833 DRV_LOG(ERR, "Cannot resize counter stat mem.");
6836 rte_spinlock_lock(&pool->sl);
6837 pool->raw = cmng->mem_mng->raws + pool->index %
6838 MLX5_CNT_CONTAINER_RESIZE;
6839 rte_spinlock_unlock(&pool->sl);
6840 pool->raw_hw = NULL;
6844 #define MLX5_POOL_QUERY_FREQ_US 1000000
6847 * Set the periodic procedure for triggering asynchronous batch queries for all
6848 * the counter pools.
6851 * Pointer to mlx5_dev_ctx_shared object.
6854 mlx5_set_query_alarm(struct mlx5_dev_ctx_shared *sh)
6856 uint32_t pools_n, us;
6858 pools_n = __atomic_load_n(&sh->cmng.n_valid, __ATOMIC_RELAXED);
6859 us = MLX5_POOL_QUERY_FREQ_US / pools_n;
6860 DRV_LOG(DEBUG, "Set alarm for %u pools each %u us", pools_n, us);
6861 if (rte_eal_alarm_set(us, mlx5_flow_query_alarm, sh)) {
6862 sh->cmng.query_thread_on = 0;
6863 DRV_LOG(ERR, "Cannot reinitialize query alarm");
6865 sh->cmng.query_thread_on = 1;
6870 * The periodic procedure for triggering asynchronous batch queries for all the
6871 * counter pools. This function is probably called by the host thread.
6874 * The parameter for the alarm process.
6877 mlx5_flow_query_alarm(void *arg)
6879 struct mlx5_dev_ctx_shared *sh = arg;
6881 uint16_t pool_index = sh->cmng.pool_index;
6882 struct mlx5_flow_counter_mng *cmng = &sh->cmng;
6883 struct mlx5_flow_counter_pool *pool;
6886 if (sh->cmng.pending_queries >= MLX5_MAX_PENDING_QUERIES)
6888 rte_spinlock_lock(&cmng->pool_update_sl);
6889 pool = cmng->pools[pool_index];
6890 n_valid = cmng->n_valid;
6891 rte_spinlock_unlock(&cmng->pool_update_sl);
6892 /* Set the statistic memory to the new created pool. */
6893 if ((!pool->raw && mlx5_flow_set_counter_stat_mem(sh, pool)))
6896 /* There is a pool query in progress. */
6899 LIST_FIRST(&sh->cmng.free_stat_raws);
6901 /* No free counter statistics raw memory. */
6904 * Identify the counters released between query trigger and query
6905 * handle more efficiently. The counter released in this gap period
6906 * should wait for a new round of query as the new arrived packets
6907 * will not be taken into account.
6910 ret = mlx5_devx_cmd_flow_counter_query(pool->min_dcs, 0,
6911 MLX5_COUNTERS_PER_POOL,
6913 pool->raw_hw->mem_mng->dm->id,
6917 (uint64_t)(uintptr_t)pool);
6919 DRV_LOG(ERR, "Failed to trigger asynchronous query for dcs ID"
6920 " %d", pool->min_dcs->id);
6921 pool->raw_hw = NULL;
6924 LIST_REMOVE(pool->raw_hw, next);
6925 sh->cmng.pending_queries++;
6927 if (pool_index >= n_valid)
6930 sh->cmng.pool_index = pool_index;
6931 mlx5_set_query_alarm(sh);
6935 * Check and callback event for new aged flow in the counter pool
6938 * Pointer to mlx5_dev_ctx_shared object.
6940 * Pointer to Current counter pool.
6943 mlx5_flow_aging_check(struct mlx5_dev_ctx_shared *sh,
6944 struct mlx5_flow_counter_pool *pool)
6946 struct mlx5_priv *priv;
6947 struct mlx5_flow_counter *cnt;
6948 struct mlx5_age_info *age_info;
6949 struct mlx5_age_param *age_param;
6950 struct mlx5_counter_stats_raw *cur = pool->raw_hw;
6951 struct mlx5_counter_stats_raw *prev = pool->raw;
6952 const uint64_t curr_time = MLX5_CURR_TIME_SEC;
6953 const uint32_t time_delta = curr_time - pool->time_of_last_age_check;
6954 uint16_t expected = AGE_CANDIDATE;
6957 pool->time_of_last_age_check = curr_time;
6958 for (i = 0; i < MLX5_COUNTERS_PER_POOL; ++i) {
6959 cnt = MLX5_POOL_GET_CNT(pool, i);
6960 age_param = MLX5_CNT_TO_AGE(cnt);
6961 if (__atomic_load_n(&age_param->state,
6962 __ATOMIC_RELAXED) != AGE_CANDIDATE)
6964 if (cur->data[i].hits != prev->data[i].hits) {
6965 __atomic_store_n(&age_param->sec_since_last_hit, 0,
6969 if (__atomic_add_fetch(&age_param->sec_since_last_hit,
6971 __ATOMIC_RELAXED) <= age_param->timeout)
6974 * Hold the lock first, or if between the
6975 * state AGE_TMOUT and tailq operation the
6976 * release happened, the release procedure
6977 * may delete a non-existent tailq node.
6979 priv = rte_eth_devices[age_param->port_id].data->dev_private;
6980 age_info = GET_PORT_AGE_INFO(priv);
6981 rte_spinlock_lock(&age_info->aged_sl);
6982 if (__atomic_compare_exchange_n(&age_param->state, &expected,
6985 __ATOMIC_RELAXED)) {
6986 TAILQ_INSERT_TAIL(&age_info->aged_counters, cnt, next);
6987 MLX5_AGE_SET(age_info, MLX5_AGE_EVENT_NEW);
6989 rte_spinlock_unlock(&age_info->aged_sl);
6991 mlx5_age_event_prepare(sh);
6995 * Handler for the HW respond about ready values from an asynchronous batch
6996 * query. This function is probably called by the host thread.
6999 * The pointer to the shared device context.
7000 * @param[in] async_id
7001 * The Devx async ID.
7003 * The status of the completion.
7006 mlx5_flow_async_pool_query_handle(struct mlx5_dev_ctx_shared *sh,
7007 uint64_t async_id, int status)
7009 struct mlx5_flow_counter_pool *pool =
7010 (struct mlx5_flow_counter_pool *)(uintptr_t)async_id;
7011 struct mlx5_counter_stats_raw *raw_to_free;
7012 uint8_t query_gen = pool->query_gen ^ 1;
7013 struct mlx5_flow_counter_mng *cmng = &sh->cmng;
7014 enum mlx5_counter_type cnt_type =
7015 pool->is_aged ? MLX5_COUNTER_TYPE_AGE :
7016 MLX5_COUNTER_TYPE_ORIGIN;
7018 if (unlikely(status)) {
7019 raw_to_free = pool->raw_hw;
7021 raw_to_free = pool->raw;
7023 mlx5_flow_aging_check(sh, pool);
7024 rte_spinlock_lock(&pool->sl);
7025 pool->raw = pool->raw_hw;
7026 rte_spinlock_unlock(&pool->sl);
7027 /* Be sure the new raw counters data is updated in memory. */
7029 if (!TAILQ_EMPTY(&pool->counters[query_gen])) {
7030 rte_spinlock_lock(&cmng->csl[cnt_type]);
7031 TAILQ_CONCAT(&cmng->counters[cnt_type],
7032 &pool->counters[query_gen], next);
7033 rte_spinlock_unlock(&cmng->csl[cnt_type]);
7036 LIST_INSERT_HEAD(&sh->cmng.free_stat_raws, raw_to_free, next);
7037 pool->raw_hw = NULL;
7038 sh->cmng.pending_queries--;
7042 flow_group_to_table(uint32_t port_id, uint32_t group, uint32_t *table,
7043 const struct flow_grp_info *grp_info,
7044 struct rte_flow_error *error)
7046 if (grp_info->transfer && grp_info->external &&
7047 grp_info->fdb_def_rule) {
7048 if (group == UINT32_MAX)
7049 return rte_flow_error_set
7051 RTE_FLOW_ERROR_TYPE_ATTR_GROUP,
7053 "group index not supported");
7058 DRV_LOG(DEBUG, "port %u group=%#x table=%#x", port_id, group, *table);
7063 * Translate the rte_flow group index to HW table value.
7065 * If tunnel offload is disabled, all group ids converted to flow table
7066 * id using the standard method.
7067 * If tunnel offload is enabled, group id can be converted using the
7068 * standard or tunnel conversion method. Group conversion method
7069 * selection depends on flags in `grp_info` parameter:
7070 * - Internal (grp_info.external == 0) groups conversion uses the
7072 * - Group ids in JUMP action converted with the tunnel conversion.
7073 * - Group id in rule attribute conversion depends on a rule type and
7075 * ** non zero group attributes converted with the tunnel method
7076 * ** zero group attribute in non-tunnel rule is converted using the
7077 * standard method - there's only one root table
7078 * ** zero group attribute in steer tunnel rule is converted with the
7079 * standard method - single root table
7080 * ** zero group attribute in match tunnel rule is a special OvS
7081 * case: that value is used for portability reasons. That group
7082 * id is converted with the tunnel conversion method.
7087 * PMD tunnel offload object
7089 * rte_flow group index value.
7092 * @param[in] grp_info
7093 * flags used for conversion
7095 * Pointer to error structure.
7098 * 0 on success, a negative errno value otherwise and rte_errno is set.
7101 mlx5_flow_group_to_table(struct rte_eth_dev *dev,
7102 const struct mlx5_flow_tunnel *tunnel,
7103 uint32_t group, uint32_t *table,
7104 const struct flow_grp_info *grp_info,
7105 struct rte_flow_error *error)
7108 bool standard_translation;
7110 if (!grp_info->skip_scale && grp_info->external &&
7111 group < MLX5_MAX_TABLES_EXTERNAL)
7112 group *= MLX5_FLOW_TABLE_FACTOR;
7113 if (is_tunnel_offload_active(dev)) {
7114 standard_translation = !grp_info->external ||
7115 grp_info->std_tbl_fix;
7117 standard_translation = true;
7120 "port %u group=%u transfer=%d external=%d fdb_def_rule=%d translate=%s",
7121 dev->data->port_id, group, grp_info->transfer,
7122 grp_info->external, grp_info->fdb_def_rule,
7123 standard_translation ? "STANDARD" : "TUNNEL");
7124 if (standard_translation)
7125 ret = flow_group_to_table(dev->data->port_id, group, table,
7128 ret = tunnel_flow_group_to_flow_table(dev, tunnel, group,
7135 * Discover availability of metadata reg_c's.
7137 * Iteratively use test flows to check availability.
7140 * Pointer to the Ethernet device structure.
7143 * 0 on success, a negative errno value otherwise and rte_errno is set.
7146 mlx5_flow_discover_mreg_c(struct rte_eth_dev *dev)
7148 struct mlx5_priv *priv = dev->data->dev_private;
7149 struct mlx5_dev_config *config = &priv->config;
7150 enum modify_reg idx;
7153 /* reg_c[0] and reg_c[1] are reserved. */
7154 config->flow_mreg_c[n++] = REG_C_0;
7155 config->flow_mreg_c[n++] = REG_C_1;
7156 /* Discover availability of other reg_c's. */
7157 for (idx = REG_C_2; idx <= REG_C_7; ++idx) {
7158 struct rte_flow_attr attr = {
7159 .group = MLX5_FLOW_MREG_CP_TABLE_GROUP,
7160 .priority = MLX5_FLOW_LOWEST_PRIO_INDICATOR,
7163 struct rte_flow_item items[] = {
7165 .type = RTE_FLOW_ITEM_TYPE_END,
7168 struct rte_flow_action actions[] = {
7170 .type = (enum rte_flow_action_type)
7171 MLX5_RTE_FLOW_ACTION_TYPE_COPY_MREG,
7172 .conf = &(struct mlx5_flow_action_copy_mreg){
7178 .type = RTE_FLOW_ACTION_TYPE_JUMP,
7179 .conf = &(struct rte_flow_action_jump){
7180 .group = MLX5_FLOW_MREG_ACT_TABLE_GROUP,
7184 .type = RTE_FLOW_ACTION_TYPE_END,
7188 struct rte_flow *flow;
7189 struct rte_flow_error error;
7191 if (!config->dv_flow_en)
7193 /* Create internal flow, validation skips copy action. */
7194 flow_idx = flow_list_create(dev, NULL, &attr, items,
7195 actions, false, &error);
7196 flow = mlx5_ipool_get(priv->sh->ipool[MLX5_IPOOL_RTE_FLOW],
7200 config->flow_mreg_c[n++] = idx;
7201 flow_list_destroy(dev, NULL, flow_idx);
7203 for (; n < MLX5_MREG_C_NUM; ++n)
7204 config->flow_mreg_c[n] = REG_NON;
7209 * Dump flow raw hw data to file
7212 * The pointer to Ethernet device.
7214 * A pointer to a file for output.
7216 * Perform verbose error reporting if not NULL. PMDs initialize this
7217 * structure in case of error only.
7219 * 0 on success, a nagative value otherwise.
7222 mlx5_flow_dev_dump(struct rte_eth_dev *dev, struct rte_flow *flow_idx,
7224 struct rte_flow_error *error __rte_unused)
7226 struct mlx5_priv *priv = dev->data->dev_private;
7227 struct mlx5_dev_ctx_shared *sh = priv->sh;
7228 uint32_t handle_idx;
7230 struct mlx5_flow_handle *dh;
7231 struct rte_flow *flow;
7233 if (!priv->config.dv_flow_en) {
7234 if (fputs("device dv flow disabled\n", file) <= 0)
7241 return mlx5_devx_cmd_flow_dump(sh->fdb_domain,
7243 sh->tx_domain, file);
7245 flow = mlx5_ipool_get(priv->sh->ipool
7246 [MLX5_IPOOL_RTE_FLOW], (uintptr_t)(void *)flow_idx);
7250 handle_idx = flow->dev_handles;
7251 while (handle_idx) {
7252 dh = mlx5_ipool_get(priv->sh->ipool[MLX5_IPOOL_MLX5_FLOW],
7257 ret = mlx5_devx_cmd_flow_single_dump(dh->drv_flow,
7262 handle_idx = dh->next.next;
7268 * Get aged-out flows.
7271 * Pointer to the Ethernet device structure.
7272 * @param[in] context
7273 * The address of an array of pointers to the aged-out flows contexts.
7274 * @param[in] nb_countexts
7275 * The length of context array pointers.
7277 * Perform verbose error reporting if not NULL. Initialized in case of
7281 * how many contexts get in success, otherwise negative errno value.
7282 * if nb_contexts is 0, return the amount of all aged contexts.
7283 * if nb_contexts is not 0 , return the amount of aged flows reported
7284 * in the context array.
7287 mlx5_flow_get_aged_flows(struct rte_eth_dev *dev, void **contexts,
7288 uint32_t nb_contexts, struct rte_flow_error *error)
7290 const struct mlx5_flow_driver_ops *fops;
7291 struct rte_flow_attr attr = { .transfer = 0 };
7293 if (flow_get_drv_type(dev, &attr) == MLX5_FLOW_TYPE_DV) {
7294 fops = flow_get_drv_ops(MLX5_FLOW_TYPE_DV);
7295 return fops->get_aged_flows(dev, contexts, nb_contexts,
7299 "port %u get aged flows is not supported.",
7300 dev->data->port_id);
7304 /* Wrapper for driver action_validate op callback */
7306 flow_drv_action_validate(struct rte_eth_dev *dev,
7307 const struct rte_flow_indir_action_conf *conf,
7308 const struct rte_flow_action *action,
7309 const struct mlx5_flow_driver_ops *fops,
7310 struct rte_flow_error *error)
7312 static const char err_msg[] = "indirect action validation unsupported";
7314 if (!fops->action_validate) {
7315 DRV_LOG(ERR, "port %u %s.", dev->data->port_id, err_msg);
7316 rte_flow_error_set(error, ENOTSUP, RTE_FLOW_ERROR_TYPE_ACTION,
7320 return fops->action_validate(dev, conf, action, error);
7324 * Destroys the shared action by handle.
7327 * Pointer to Ethernet device structure.
7329 * Handle for the indirect action object to be destroyed.
7331 * Perform verbose error reporting if not NULL. PMDs initialize this
7332 * structure in case of error only.
7335 * 0 on success, a negative errno value otherwise and rte_errno is set.
7337 * @note: wrapper for driver action_create op callback.
7340 mlx5_action_handle_destroy(struct rte_eth_dev *dev,
7341 struct rte_flow_action_handle *handle,
7342 struct rte_flow_error *error)
7344 static const char err_msg[] = "indirect action destruction unsupported";
7345 struct rte_flow_attr attr = { .transfer = 0 };
7346 const struct mlx5_flow_driver_ops *fops =
7347 flow_get_drv_ops(flow_get_drv_type(dev, &attr));
7349 if (!fops->action_destroy) {
7350 DRV_LOG(ERR, "port %u %s.", dev->data->port_id, err_msg);
7351 rte_flow_error_set(error, ENOTSUP, RTE_FLOW_ERROR_TYPE_ACTION,
7355 return fops->action_destroy(dev, handle, error);
7358 /* Wrapper for driver action_destroy op callback */
7360 flow_drv_action_update(struct rte_eth_dev *dev,
7361 struct rte_flow_action_handle *handle,
7363 const struct mlx5_flow_driver_ops *fops,
7364 struct rte_flow_error *error)
7366 static const char err_msg[] = "indirect action update unsupported";
7368 if (!fops->action_update) {
7369 DRV_LOG(ERR, "port %u %s.", dev->data->port_id, err_msg);
7370 rte_flow_error_set(error, ENOTSUP, RTE_FLOW_ERROR_TYPE_ACTION,
7374 return fops->action_update(dev, handle, update, error);
7377 /* Wrapper for driver action_destroy op callback */
7379 flow_drv_action_query(struct rte_eth_dev *dev,
7380 const struct rte_flow_action_handle *handle,
7382 const struct mlx5_flow_driver_ops *fops,
7383 struct rte_flow_error *error)
7385 static const char err_msg[] = "indirect action query unsupported";
7387 if (!fops->action_query) {
7388 DRV_LOG(ERR, "port %u %s.", dev->data->port_id, err_msg);
7389 rte_flow_error_set(error, ENOTSUP, RTE_FLOW_ERROR_TYPE_ACTION,
7393 return fops->action_query(dev, handle, data, error);
7397 * Create indirect action for reuse in multiple flow rules.
7400 * Pointer to Ethernet device structure.
7402 * Pointer to indirect action object configuration.
7404 * Action configuration for indirect action object creation.
7406 * Perform verbose error reporting if not NULL. PMDs initialize this
7407 * structure in case of error only.
7409 * A valid handle in case of success, NULL otherwise and rte_errno is set.
7411 static struct rte_flow_action_handle *
7412 mlx5_action_handle_create(struct rte_eth_dev *dev,
7413 const struct rte_flow_indir_action_conf *conf,
7414 const struct rte_flow_action *action,
7415 struct rte_flow_error *error)
7417 static const char err_msg[] = "indirect action creation unsupported";
7418 struct rte_flow_attr attr = { .transfer = 0 };
7419 const struct mlx5_flow_driver_ops *fops =
7420 flow_get_drv_ops(flow_get_drv_type(dev, &attr));
7422 if (flow_drv_action_validate(dev, conf, action, fops, error))
7424 if (!fops->action_create) {
7425 DRV_LOG(ERR, "port %u %s.", dev->data->port_id, err_msg);
7426 rte_flow_error_set(error, ENOTSUP, RTE_FLOW_ERROR_TYPE_ACTION,
7430 return fops->action_create(dev, conf, action, error);
7434 * Updates inplace the indirect action configuration pointed by *handle*
7435 * with the configuration provided as *update* argument.
7436 * The update of the indirect action configuration effects all flow rules
7437 * reusing the action via handle.
7440 * Pointer to Ethernet device structure.
7442 * Handle for the indirect action to be updated.
7444 * Action specification used to modify the action pointed by handle.
7445 * *update* could be of same type with the action pointed by the *handle*
7446 * handle argument, or some other structures like a wrapper, depending on
7447 * the indirect action type.
7449 * Perform verbose error reporting if not NULL. PMDs initialize this
7450 * structure in case of error only.
7453 * 0 on success, a negative errno value otherwise and rte_errno is set.
7456 mlx5_action_handle_update(struct rte_eth_dev *dev,
7457 struct rte_flow_action_handle *handle,
7459 struct rte_flow_error *error)
7461 struct rte_flow_attr attr = { .transfer = 0 };
7462 const struct mlx5_flow_driver_ops *fops =
7463 flow_get_drv_ops(flow_get_drv_type(dev, &attr));
7466 ret = flow_drv_action_validate(dev, NULL,
7467 (const struct rte_flow_action *)update, fops, error);
7470 return flow_drv_action_update(dev, handle, update, fops,
7475 * Query the indirect action by handle.
7477 * This function allows retrieving action-specific data such as counters.
7478 * Data is gathered by special action which may be present/referenced in
7479 * more than one flow rule definition.
7481 * see @RTE_FLOW_ACTION_TYPE_COUNT
7484 * Pointer to Ethernet device structure.
7486 * Handle for the indirect action to query.
7487 * @param[in, out] data
7488 * Pointer to storage for the associated query data type.
7490 * Perform verbose error reporting if not NULL. PMDs initialize this
7491 * structure in case of error only.
7494 * 0 on success, a negative errno value otherwise and rte_errno is set.
7497 mlx5_action_handle_query(struct rte_eth_dev *dev,
7498 const struct rte_flow_action_handle *handle,
7500 struct rte_flow_error *error)
7502 struct rte_flow_attr attr = { .transfer = 0 };
7503 const struct mlx5_flow_driver_ops *fops =
7504 flow_get_drv_ops(flow_get_drv_type(dev, &attr));
7506 return flow_drv_action_query(dev, handle, data, fops, error);
7510 * Destroy all indirect actions (shared RSS).
7513 * Pointer to Ethernet device.
7516 * 0 on success, a negative errno value otherwise and rte_errno is set.
7519 mlx5_action_handle_flush(struct rte_eth_dev *dev)
7521 struct rte_flow_error error;
7522 struct mlx5_priv *priv = dev->data->dev_private;
7523 struct mlx5_shared_action_rss *shared_rss;
7527 ILIST_FOREACH(priv->sh->ipool[MLX5_IPOOL_RSS_SHARED_ACTIONS],
7528 priv->rss_shared_actions, idx, shared_rss, next) {
7529 ret |= mlx5_action_handle_destroy(dev,
7530 (struct rte_flow_action_handle *)(uintptr_t)idx, &error);
7535 #ifndef HAVE_MLX5DV_DR
7536 #define MLX5_DOMAIN_SYNC_FLOW ((1 << 0) | (1 << 1))
7538 #define MLX5_DOMAIN_SYNC_FLOW \
7539 (MLX5DV_DR_DOMAIN_SYNC_FLAGS_SW | MLX5DV_DR_DOMAIN_SYNC_FLAGS_HW)
7542 int rte_pmd_mlx5_sync_flow(uint16_t port_id, uint32_t domains)
7544 struct rte_eth_dev *dev = &rte_eth_devices[port_id];
7545 const struct mlx5_flow_driver_ops *fops;
7547 struct rte_flow_attr attr = { .transfer = 0 };
7549 fops = flow_get_drv_ops(flow_get_drv_type(dev, &attr));
7550 ret = fops->sync_domain(dev, domains, MLX5_DOMAIN_SYNC_FLOW);
7557 * tunnel offload functionalilty is defined for DV environment only
7559 #ifdef HAVE_IBV_FLOW_DV_SUPPORT
7561 union tunnel_offload_mark {
7564 uint32_t app_reserve:8;
7565 uint32_t table_id:15;
7566 uint32_t transfer:1;
7567 uint32_t _unused_:8;
7572 mlx5_access_tunnel_offload_db
7573 (struct rte_eth_dev *dev,
7574 bool (*match)(struct rte_eth_dev *,
7575 struct mlx5_flow_tunnel *, const void *),
7576 void (*hit)(struct rte_eth_dev *, struct mlx5_flow_tunnel *, void *),
7577 void (*miss)(struct rte_eth_dev *, void *),
7578 void *ctx, bool lock_op);
7581 flow_tunnel_add_default_miss(struct rte_eth_dev *dev,
7582 struct rte_flow *flow,
7583 const struct rte_flow_attr *attr,
7584 const struct rte_flow_action *app_actions,
7586 struct tunnel_default_miss_ctx *ctx,
7587 struct rte_flow_error *error)
7589 struct mlx5_priv *priv = dev->data->dev_private;
7590 struct mlx5_flow *dev_flow;
7591 struct rte_flow_attr miss_attr = *attr;
7592 const struct mlx5_flow_tunnel *tunnel = app_actions[0].conf;
7593 const struct rte_flow_item miss_items[2] = {
7595 .type = RTE_FLOW_ITEM_TYPE_ETH,
7601 .type = RTE_FLOW_ITEM_TYPE_END,
7607 union tunnel_offload_mark mark_id;
7608 struct rte_flow_action_mark miss_mark;
7609 struct rte_flow_action miss_actions[3] = {
7610 [0] = { .type = RTE_FLOW_ACTION_TYPE_MARK, .conf = &miss_mark },
7611 [2] = { .type = RTE_FLOW_ACTION_TYPE_END, .conf = NULL }
7613 const struct rte_flow_action_jump *jump_data;
7614 uint32_t i, flow_table = 0; /* prevent compilation warning */
7615 struct flow_grp_info grp_info = {
7617 .transfer = attr->transfer,
7618 .fdb_def_rule = !!priv->fdb_def_rule,
7623 if (!attr->transfer) {
7626 miss_actions[1].type = RTE_FLOW_ACTION_TYPE_RSS;
7627 q_size = priv->reta_idx_n * sizeof(ctx->queue[0]);
7628 ctx->queue = mlx5_malloc(MLX5_MEM_SYS | MLX5_MEM_ZERO, q_size,
7631 return rte_flow_error_set
7633 RTE_FLOW_ERROR_TYPE_ACTION_CONF,
7634 NULL, "invalid default miss RSS");
7635 ctx->action_rss.func = RTE_ETH_HASH_FUNCTION_DEFAULT,
7636 ctx->action_rss.level = 0,
7637 ctx->action_rss.types = priv->rss_conf.rss_hf,
7638 ctx->action_rss.key_len = priv->rss_conf.rss_key_len,
7639 ctx->action_rss.queue_num = priv->reta_idx_n,
7640 ctx->action_rss.key = priv->rss_conf.rss_key,
7641 ctx->action_rss.queue = ctx->queue;
7642 if (!priv->reta_idx_n || !priv->rxqs_n)
7643 return rte_flow_error_set
7645 RTE_FLOW_ERROR_TYPE_ACTION_CONF,
7646 NULL, "invalid port configuration");
7647 if (!(dev->data->dev_conf.rxmode.mq_mode & ETH_MQ_RX_RSS_FLAG))
7648 ctx->action_rss.types = 0;
7649 for (i = 0; i != priv->reta_idx_n; ++i)
7650 ctx->queue[i] = (*priv->reta_idx)[i];
7652 miss_actions[1].type = RTE_FLOW_ACTION_TYPE_JUMP;
7653 ctx->miss_jump.group = MLX5_TNL_MISS_FDB_JUMP_GRP;
7655 miss_actions[1].conf = (typeof(miss_actions[1].conf))ctx->raw;
7656 for (; app_actions->type != RTE_FLOW_ACTION_TYPE_JUMP; app_actions++);
7657 jump_data = app_actions->conf;
7658 miss_attr.priority = MLX5_TNL_MISS_RULE_PRIORITY;
7659 miss_attr.group = jump_data->group;
7660 ret = mlx5_flow_group_to_table(dev, tunnel, jump_data->group,
7661 &flow_table, &grp_info, error);
7663 return rte_flow_error_set(error, EINVAL,
7664 RTE_FLOW_ERROR_TYPE_ACTION_CONF,
7665 NULL, "invalid tunnel id");
7666 mark_id.app_reserve = 0;
7667 mark_id.table_id = tunnel_flow_tbl_to_id(flow_table);
7668 mark_id.transfer = !!attr->transfer;
7669 mark_id._unused_ = 0;
7670 miss_mark.id = mark_id.val;
7671 dev_flow = flow_drv_prepare(dev, flow, &miss_attr,
7672 miss_items, miss_actions, flow_idx, error);
7675 dev_flow->flow = flow;
7676 dev_flow->external = true;
7677 dev_flow->tunnel = tunnel;
7678 /* Subflow object was created, we must include one in the list. */
7679 SILIST_INSERT(&flow->dev_handles, dev_flow->handle_idx,
7680 dev_flow->handle, next);
7682 "port %u tunnel type=%d id=%u miss rule priority=%u group=%u",
7683 dev->data->port_id, tunnel->app_tunnel.type,
7684 tunnel->tunnel_id, miss_attr.priority, miss_attr.group);
7685 ret = flow_drv_translate(dev, dev_flow, &miss_attr, miss_items,
7686 miss_actions, error);
7688 ret = flow_mreg_update_copy_table(dev, flow, miss_actions,
7694 static const struct mlx5_flow_tbl_data_entry *
7695 tunnel_mark_decode(struct rte_eth_dev *dev, uint32_t mark)
7697 struct mlx5_priv *priv = dev->data->dev_private;
7698 struct mlx5_dev_ctx_shared *sh = priv->sh;
7699 struct mlx5_hlist_entry *he;
7700 union tunnel_offload_mark mbits = { .val = mark };
7701 union mlx5_flow_tbl_key table_key = {
7703 .table_id = tunnel_id_to_flow_tbl(mbits.table_id),
7705 .domain = !!mbits.transfer,
7709 he = mlx5_hlist_lookup(sh->flow_tbls, table_key.v64, NULL);
7711 container_of(he, struct mlx5_flow_tbl_data_entry, entry) : NULL;
7715 mlx5_flow_tunnel_grp2tbl_remove_cb(struct mlx5_hlist *list,
7716 struct mlx5_hlist_entry *entry)
7718 struct mlx5_dev_ctx_shared *sh = list->ctx;
7719 struct tunnel_tbl_entry *tte = container_of(entry, typeof(*tte), hash);
7721 mlx5_ipool_free(sh->ipool[MLX5_IPOOL_TNL_TBL_ID],
7722 tunnel_flow_tbl_to_id(tte->flow_table));
7727 mlx5_flow_tunnel_grp2tbl_match_cb(struct mlx5_hlist *list __rte_unused,
7728 struct mlx5_hlist_entry *entry,
7729 uint64_t key, void *cb_ctx __rte_unused)
7731 union tunnel_tbl_key tbl = {
7734 struct tunnel_tbl_entry *tte = container_of(entry, typeof(*tte), hash);
7736 return tbl.tunnel_id != tte->tunnel_id || tbl.group != tte->group;
7739 static struct mlx5_hlist_entry *
7740 mlx5_flow_tunnel_grp2tbl_create_cb(struct mlx5_hlist *list, uint64_t key,
7741 void *ctx __rte_unused)
7743 struct mlx5_dev_ctx_shared *sh = list->ctx;
7744 struct tunnel_tbl_entry *tte;
7745 union tunnel_tbl_key tbl = {
7749 tte = mlx5_malloc(MLX5_MEM_SYS | MLX5_MEM_ZERO,
7754 mlx5_ipool_malloc(sh->ipool[MLX5_IPOOL_TNL_TBL_ID],
7756 if (tte->flow_table >= MLX5_MAX_TABLES) {
7757 DRV_LOG(ERR, "Tunnel TBL ID %d exceed max limit.",
7759 mlx5_ipool_free(sh->ipool[MLX5_IPOOL_TNL_TBL_ID],
7762 } else if (!tte->flow_table) {
7765 tte->flow_table = tunnel_id_to_flow_tbl(tte->flow_table);
7766 tte->tunnel_id = tbl.tunnel_id;
7767 tte->group = tbl.group;
7776 tunnel_flow_group_to_flow_table(struct rte_eth_dev *dev,
7777 const struct mlx5_flow_tunnel *tunnel,
7778 uint32_t group, uint32_t *table,
7779 struct rte_flow_error *error)
7781 struct mlx5_hlist_entry *he;
7782 struct tunnel_tbl_entry *tte;
7783 union tunnel_tbl_key key = {
7784 .tunnel_id = tunnel ? tunnel->tunnel_id : 0,
7787 struct mlx5_flow_tunnel_hub *thub = mlx5_tunnel_hub(dev);
7788 struct mlx5_hlist *group_hash;
7790 group_hash = tunnel ? tunnel->groups : thub->groups;
7791 he = mlx5_hlist_register(group_hash, key.val, NULL);
7793 return rte_flow_error_set(error, EINVAL,
7794 RTE_FLOW_ERROR_TYPE_ATTR_GROUP,
7796 "tunnel group index not supported");
7797 tte = container_of(he, typeof(*tte), hash);
7798 *table = tte->flow_table;
7799 DRV_LOG(DEBUG, "port %u tunnel %u group=%#x table=%#x",
7800 dev->data->port_id, key.tunnel_id, group, *table);
7805 mlx5_flow_tunnel_free(struct rte_eth_dev *dev,
7806 struct mlx5_flow_tunnel *tunnel)
7808 struct mlx5_priv *priv = dev->data->dev_private;
7809 struct mlx5_indexed_pool *ipool;
7811 DRV_LOG(DEBUG, "port %u release pmd tunnel id=0x%x",
7812 dev->data->port_id, tunnel->tunnel_id);
7813 LIST_REMOVE(tunnel, chain);
7814 mlx5_hlist_destroy(tunnel->groups);
7815 ipool = priv->sh->ipool[MLX5_IPOOL_TUNNEL_ID];
7816 mlx5_ipool_free(ipool, tunnel->tunnel_id);
7820 mlx5_access_tunnel_offload_db
7821 (struct rte_eth_dev *dev,
7822 bool (*match)(struct rte_eth_dev *,
7823 struct mlx5_flow_tunnel *, const void *),
7824 void (*hit)(struct rte_eth_dev *, struct mlx5_flow_tunnel *, void *),
7825 void (*miss)(struct rte_eth_dev *, void *),
7826 void *ctx, bool lock_op)
7828 bool verdict = false;
7829 struct mlx5_flow_tunnel_hub *thub = mlx5_tunnel_hub(dev);
7830 struct mlx5_flow_tunnel *tunnel;
7832 rte_spinlock_lock(&thub->sl);
7833 LIST_FOREACH(tunnel, &thub->tunnels, chain) {
7834 verdict = match(dev, tunnel, (const void *)ctx);
7839 rte_spinlock_unlock(&thub->sl);
7841 hit(dev, tunnel, ctx);
7842 if (!verdict && miss)
7845 rte_spinlock_unlock(&thub->sl);
7850 struct tunnel_db_find_tunnel_id_ctx {
7852 struct mlx5_flow_tunnel *tunnel;
7856 find_tunnel_id_match(struct rte_eth_dev *dev,
7857 struct mlx5_flow_tunnel *tunnel, const void *x)
7859 const struct tunnel_db_find_tunnel_id_ctx *ctx = x;
7862 return tunnel->tunnel_id == ctx->tunnel_id;
7866 find_tunnel_id_hit(struct rte_eth_dev *dev,
7867 struct mlx5_flow_tunnel *tunnel, void *x)
7869 struct tunnel_db_find_tunnel_id_ctx *ctx = x;
7871 ctx->tunnel = tunnel;
7874 static struct mlx5_flow_tunnel *
7875 mlx5_find_tunnel_id(struct rte_eth_dev *dev, uint32_t id)
7877 struct tunnel_db_find_tunnel_id_ctx ctx = {
7881 mlx5_access_tunnel_offload_db(dev, find_tunnel_id_match,
7882 find_tunnel_id_hit, NULL, &ctx, true);
7887 static struct mlx5_flow_tunnel *
7888 mlx5_flow_tunnel_allocate(struct rte_eth_dev *dev,
7889 const struct rte_flow_tunnel *app_tunnel)
7891 struct mlx5_priv *priv = dev->data->dev_private;
7892 struct mlx5_indexed_pool *ipool;
7893 struct mlx5_flow_tunnel *tunnel;
7896 ipool = priv->sh->ipool[MLX5_IPOOL_TUNNEL_ID];
7897 tunnel = mlx5_ipool_zmalloc(ipool, &id);
7900 if (id >= MLX5_MAX_TUNNELS) {
7901 mlx5_ipool_free(ipool, id);
7902 DRV_LOG(ERR, "Tunnel ID %d exceed max limit.", id);
7905 tunnel->groups = mlx5_hlist_create("tunnel groups", 1024, 0, 0,
7906 mlx5_flow_tunnel_grp2tbl_create_cb,
7907 mlx5_flow_tunnel_grp2tbl_match_cb,
7908 mlx5_flow_tunnel_grp2tbl_remove_cb);
7909 if (!tunnel->groups) {
7910 mlx5_ipool_free(ipool, id);
7913 tunnel->groups->ctx = priv->sh;
7914 /* initiate new PMD tunnel */
7915 memcpy(&tunnel->app_tunnel, app_tunnel, sizeof(*app_tunnel));
7916 tunnel->tunnel_id = id;
7917 tunnel->action.type = (typeof(tunnel->action.type))
7918 MLX5_RTE_FLOW_ACTION_TYPE_TUNNEL_SET;
7919 tunnel->action.conf = tunnel;
7920 tunnel->item.type = (typeof(tunnel->item.type))
7921 MLX5_RTE_FLOW_ITEM_TYPE_TUNNEL;
7922 tunnel->item.spec = tunnel;
7923 tunnel->item.last = NULL;
7924 tunnel->item.mask = NULL;
7926 DRV_LOG(DEBUG, "port %u new pmd tunnel id=0x%x",
7927 dev->data->port_id, tunnel->tunnel_id);
7932 struct tunnel_db_get_tunnel_ctx {
7933 const struct rte_flow_tunnel *app_tunnel;
7934 struct mlx5_flow_tunnel *tunnel;
7937 static bool get_tunnel_match(struct rte_eth_dev *dev,
7938 struct mlx5_flow_tunnel *tunnel, const void *x)
7940 const struct tunnel_db_get_tunnel_ctx *ctx = x;
7943 return !memcmp(ctx->app_tunnel, &tunnel->app_tunnel,
7944 sizeof(*ctx->app_tunnel));
7947 static void get_tunnel_hit(struct rte_eth_dev *dev,
7948 struct mlx5_flow_tunnel *tunnel, void *x)
7950 /* called under tunnel spinlock protection */
7951 struct tunnel_db_get_tunnel_ctx *ctx = x;
7955 ctx->tunnel = tunnel;
7958 static void get_tunnel_miss(struct rte_eth_dev *dev, void *x)
7960 /* called under tunnel spinlock protection */
7961 struct mlx5_flow_tunnel_hub *thub = mlx5_tunnel_hub(dev);
7962 struct tunnel_db_get_tunnel_ctx *ctx = x;
7964 rte_spinlock_unlock(&thub->sl);
7965 ctx->tunnel = mlx5_flow_tunnel_allocate(dev, ctx->app_tunnel);
7966 rte_spinlock_lock(&thub->sl);
7968 ctx->tunnel->refctn = 1;
7969 LIST_INSERT_HEAD(&thub->tunnels, ctx->tunnel, chain);
7975 mlx5_get_flow_tunnel(struct rte_eth_dev *dev,
7976 const struct rte_flow_tunnel *app_tunnel,
7977 struct mlx5_flow_tunnel **tunnel)
7979 struct tunnel_db_get_tunnel_ctx ctx = {
7980 .app_tunnel = app_tunnel,
7983 mlx5_access_tunnel_offload_db(dev, get_tunnel_match, get_tunnel_hit,
7984 get_tunnel_miss, &ctx, true);
7985 *tunnel = ctx.tunnel;
7986 return ctx.tunnel ? 0 : -ENOMEM;
7989 void mlx5_release_tunnel_hub(struct mlx5_dev_ctx_shared *sh, uint16_t port_id)
7991 struct mlx5_flow_tunnel_hub *thub = sh->tunnel_hub;
7995 if (!LIST_EMPTY(&thub->tunnels))
7996 DRV_LOG(WARNING, "port %u tunnels present", port_id);
7997 mlx5_hlist_destroy(thub->groups);
8001 int mlx5_alloc_tunnel_hub(struct mlx5_dev_ctx_shared *sh)
8004 struct mlx5_flow_tunnel_hub *thub;
8006 thub = mlx5_malloc(MLX5_MEM_SYS | MLX5_MEM_ZERO, sizeof(*thub),
8010 LIST_INIT(&thub->tunnels);
8011 rte_spinlock_init(&thub->sl);
8012 thub->groups = mlx5_hlist_create("flow groups",
8013 rte_align32pow2(MLX5_MAX_TABLES), 0,
8014 0, mlx5_flow_tunnel_grp2tbl_create_cb,
8015 mlx5_flow_tunnel_grp2tbl_match_cb,
8016 mlx5_flow_tunnel_grp2tbl_remove_cb);
8017 if (!thub->groups) {
8021 thub->groups->ctx = sh;
8022 sh->tunnel_hub = thub;
8028 mlx5_hlist_destroy(thub->groups);
8035 mlx5_flow_tunnel_validate(struct rte_eth_dev *dev,
8036 struct rte_flow_tunnel *tunnel,
8037 const char *err_msg)
8040 if (!is_tunnel_offload_active(dev)) {
8041 err_msg = "tunnel offload was not activated";
8043 } else if (!tunnel) {
8044 err_msg = "no application tunnel";
8048 switch (tunnel->type) {
8050 err_msg = "unsupported tunnel type";
8052 case RTE_FLOW_ITEM_TYPE_VXLAN:
8061 mlx5_flow_tunnel_decap_set(struct rte_eth_dev *dev,
8062 struct rte_flow_tunnel *app_tunnel,
8063 struct rte_flow_action **actions,
8064 uint32_t *num_of_actions,
8065 struct rte_flow_error *error)
8068 struct mlx5_flow_tunnel *tunnel;
8069 const char *err_msg = NULL;
8070 bool verdict = mlx5_flow_tunnel_validate(dev, app_tunnel, err_msg);
8073 return rte_flow_error_set(error, EINVAL,
8074 RTE_FLOW_ERROR_TYPE_ACTION_CONF, NULL,
8076 ret = mlx5_get_flow_tunnel(dev, app_tunnel, &tunnel);
8078 return rte_flow_error_set(error, ret,
8079 RTE_FLOW_ERROR_TYPE_ACTION_CONF, NULL,
8080 "failed to initialize pmd tunnel");
8082 *actions = &tunnel->action;
8083 *num_of_actions = 1;
8088 mlx5_flow_tunnel_match(struct rte_eth_dev *dev,
8089 struct rte_flow_tunnel *app_tunnel,
8090 struct rte_flow_item **items,
8091 uint32_t *num_of_items,
8092 struct rte_flow_error *error)
8095 struct mlx5_flow_tunnel *tunnel;
8096 const char *err_msg = NULL;
8097 bool verdict = mlx5_flow_tunnel_validate(dev, app_tunnel, err_msg);
8100 return rte_flow_error_set(error, EINVAL,
8101 RTE_FLOW_ERROR_TYPE_HANDLE, NULL,
8103 ret = mlx5_get_flow_tunnel(dev, app_tunnel, &tunnel);
8105 return rte_flow_error_set(error, ret,
8106 RTE_FLOW_ERROR_TYPE_HANDLE, NULL,
8107 "failed to initialize pmd tunnel");
8109 *items = &tunnel->item;
8114 struct tunnel_db_element_release_ctx {
8115 struct rte_flow_item *items;
8116 struct rte_flow_action *actions;
8117 uint32_t num_elements;
8118 struct rte_flow_error *error;
8123 tunnel_element_release_match(struct rte_eth_dev *dev,
8124 struct mlx5_flow_tunnel *tunnel, const void *x)
8126 const struct tunnel_db_element_release_ctx *ctx = x;
8129 if (ctx->num_elements != 1)
8131 else if (ctx->items)
8132 return ctx->items == &tunnel->item;
8133 else if (ctx->actions)
8134 return ctx->actions == &tunnel->action;
8140 tunnel_element_release_hit(struct rte_eth_dev *dev,
8141 struct mlx5_flow_tunnel *tunnel, void *x)
8143 struct tunnel_db_element_release_ctx *ctx = x;
8145 if (!__atomic_sub_fetch(&tunnel->refctn, 1, __ATOMIC_RELAXED))
8146 mlx5_flow_tunnel_free(dev, tunnel);
8150 tunnel_element_release_miss(struct rte_eth_dev *dev, void *x)
8152 struct tunnel_db_element_release_ctx *ctx = x;
8154 ctx->ret = rte_flow_error_set(ctx->error, EINVAL,
8155 RTE_FLOW_ERROR_TYPE_HANDLE, NULL,
8156 "invalid argument");
8160 mlx5_flow_tunnel_item_release(struct rte_eth_dev *dev,
8161 struct rte_flow_item *pmd_items,
8162 uint32_t num_items, struct rte_flow_error *err)
8164 struct tunnel_db_element_release_ctx ctx = {
8167 .num_elements = num_items,
8171 mlx5_access_tunnel_offload_db(dev, tunnel_element_release_match,
8172 tunnel_element_release_hit,
8173 tunnel_element_release_miss, &ctx, false);
8179 mlx5_flow_tunnel_action_release(struct rte_eth_dev *dev,
8180 struct rte_flow_action *pmd_actions,
8181 uint32_t num_actions, struct rte_flow_error *err)
8183 struct tunnel_db_element_release_ctx ctx = {
8185 .actions = pmd_actions,
8186 .num_elements = num_actions,
8190 mlx5_access_tunnel_offload_db(dev, tunnel_element_release_match,
8191 tunnel_element_release_hit,
8192 tunnel_element_release_miss, &ctx, false);
8198 mlx5_flow_tunnel_get_restore_info(struct rte_eth_dev *dev,
8200 struct rte_flow_restore_info *info,
8201 struct rte_flow_error *err)
8203 uint64_t ol_flags = m->ol_flags;
8204 const struct mlx5_flow_tbl_data_entry *tble;
8205 const uint64_t mask = PKT_RX_FDIR | PKT_RX_FDIR_ID;
8207 if (!is_tunnel_offload_active(dev)) {
8212 if ((ol_flags & mask) != mask)
8214 tble = tunnel_mark_decode(dev, m->hash.fdir.hi);
8216 DRV_LOG(DEBUG, "port %u invalid miss tunnel mark %#x",
8217 dev->data->port_id, m->hash.fdir.hi);
8220 MLX5_ASSERT(tble->tunnel);
8221 memcpy(&info->tunnel, &tble->tunnel->app_tunnel, sizeof(info->tunnel));
8222 info->group_id = tble->group_id;
8223 info->flags = RTE_FLOW_RESTORE_INFO_TUNNEL |
8224 RTE_FLOW_RESTORE_INFO_GROUP_ID |
8225 RTE_FLOW_RESTORE_INFO_ENCAPSULATED;
8230 return rte_flow_error_set(err, EINVAL,
8231 RTE_FLOW_ERROR_TYPE_UNSPECIFIED, NULL,
8232 "failed to get restore info");
8235 #else /* HAVE_IBV_FLOW_DV_SUPPORT */
8237 mlx5_flow_tunnel_decap_set(__rte_unused struct rte_eth_dev *dev,
8238 __rte_unused struct rte_flow_tunnel *app_tunnel,
8239 __rte_unused struct rte_flow_action **actions,
8240 __rte_unused uint32_t *num_of_actions,
8241 __rte_unused struct rte_flow_error *error)
8247 mlx5_flow_tunnel_match(__rte_unused struct rte_eth_dev *dev,
8248 __rte_unused struct rte_flow_tunnel *app_tunnel,
8249 __rte_unused struct rte_flow_item **items,
8250 __rte_unused uint32_t *num_of_items,
8251 __rte_unused struct rte_flow_error *error)
8257 mlx5_flow_tunnel_item_release(__rte_unused struct rte_eth_dev *dev,
8258 __rte_unused struct rte_flow_item *pmd_items,
8259 __rte_unused uint32_t num_items,
8260 __rte_unused struct rte_flow_error *err)
8266 mlx5_flow_tunnel_action_release(__rte_unused struct rte_eth_dev *dev,
8267 __rte_unused struct rte_flow_action *pmd_action,
8268 __rte_unused uint32_t num_actions,
8269 __rte_unused struct rte_flow_error *err)
8275 mlx5_flow_tunnel_get_restore_info(__rte_unused struct rte_eth_dev *dev,
8276 __rte_unused struct rte_mbuf *m,
8277 __rte_unused struct rte_flow_restore_info *i,
8278 __rte_unused struct rte_flow_error *err)
8284 flow_tunnel_add_default_miss(__rte_unused struct rte_eth_dev *dev,
8285 __rte_unused struct rte_flow *flow,
8286 __rte_unused const struct rte_flow_attr *attr,
8287 __rte_unused const struct rte_flow_action *actions,
8288 __rte_unused uint32_t flow_idx,
8289 __rte_unused struct tunnel_default_miss_ctx *ctx,
8290 __rte_unused struct rte_flow_error *error)
8295 static struct mlx5_flow_tunnel *
8296 mlx5_find_tunnel_id(__rte_unused struct rte_eth_dev *dev,
8297 __rte_unused uint32_t id)
8303 mlx5_flow_tunnel_free(__rte_unused struct rte_eth_dev *dev,
8304 __rte_unused struct mlx5_flow_tunnel *tunnel)
8309 tunnel_flow_group_to_flow_table(__rte_unused struct rte_eth_dev *dev,
8310 __rte_unused const struct mlx5_flow_tunnel *t,
8311 __rte_unused uint32_t group,
8312 __rte_unused uint32_t *table,
8313 struct rte_flow_error *error)
8315 return rte_flow_error_set(error, ENOTSUP,
8316 RTE_FLOW_ERROR_TYPE_UNSPECIFIED, NULL,
8317 "tunnel offload requires DV support");
8321 mlx5_release_tunnel_hub(__rte_unused struct mlx5_dev_ctx_shared *sh,
8322 __rte_unused uint16_t port_id)
8325 #endif /* HAVE_IBV_FLOW_DV_SUPPORT */