net: add rte prefix to ether structures
[dpdk.git] / drivers / net / enic / enic_flow.c
index b3172e7..9bddfb9 100644 (file)
  * filter: Partially filled in NIC filter structure.
  * inner_ofst: If zero, this is an outer header. If non-zero, this is
  *   the offset into L5 where the header begins.
+ * l2_proto_off: offset to EtherType eth or vlan header.
+ * l3_proto_off: offset to next protocol field in IPv4 or 6 header.
  */
 struct copy_item_args {
        const struct rte_flow_item *item;
        struct filter_v2 *filter;
        uint8_t *inner_ofst;
+       uint8_t l2_proto_off;
+       uint8_t l3_proto_off;
+       struct enic *enic;
 };
 
 /* functions for copying items into enic filters */
@@ -50,6 +55,8 @@ struct enic_items {
         * versions, it's invalid to start the stack above layer 3.
         */
        const u8 valid_start_item;
+       /* Inner packet version of copy_item. */
+       enic_copy_item_fn *inner_copy_item;
 };
 
 /** Filtering capabilities for various NIC and firmware versions. */
@@ -86,6 +93,12 @@ static enic_copy_item_fn enic_copy_item_udp_v2;
 static enic_copy_item_fn enic_copy_item_tcp_v2;
 static enic_copy_item_fn enic_copy_item_sctp_v2;
 static enic_copy_item_fn enic_copy_item_vxlan_v2;
+static enic_copy_item_fn enic_copy_item_inner_eth_v2;
+static enic_copy_item_fn enic_copy_item_inner_vlan_v2;
+static enic_copy_item_fn enic_copy_item_inner_ipv4_v2;
+static enic_copy_item_fn enic_copy_item_inner_ipv6_v2;
+static enic_copy_item_fn enic_copy_item_inner_udp_v2;
+static enic_copy_item_fn enic_copy_item_inner_tcp_v2;
 static copy_action_fn enic_copy_action_v1;
 static copy_action_fn enic_copy_action_v2;
 
@@ -100,6 +113,7 @@ static const struct enic_items enic_items_v1[] = {
                .prev_items = (const enum rte_flow_item_type[]) {
                               RTE_FLOW_ITEM_TYPE_END,
                },
+               .inner_copy_item = NULL,
        },
        [RTE_FLOW_ITEM_TYPE_UDP] = {
                .copy_item = enic_copy_item_udp_v1,
@@ -108,6 +122,7 @@ static const struct enic_items enic_items_v1[] = {
                               RTE_FLOW_ITEM_TYPE_IPV4,
                               RTE_FLOW_ITEM_TYPE_END,
                },
+               .inner_copy_item = NULL,
        },
        [RTE_FLOW_ITEM_TYPE_TCP] = {
                .copy_item = enic_copy_item_tcp_v1,
@@ -116,6 +131,7 @@ static const struct enic_items enic_items_v1[] = {
                               RTE_FLOW_ITEM_TYPE_IPV4,
                               RTE_FLOW_ITEM_TYPE_END,
                },
+               .inner_copy_item = NULL,
        },
 };
 
@@ -131,6 +147,7 @@ static const struct enic_items enic_items_v2[] = {
                               RTE_FLOW_ITEM_TYPE_UDP,
                               RTE_FLOW_ITEM_TYPE_END,
                },
+               .inner_copy_item = NULL,
        },
        [RTE_FLOW_ITEM_TYPE_ETH] = {
                .copy_item = enic_copy_item_eth_v2,
@@ -139,6 +156,7 @@ static const struct enic_items enic_items_v2[] = {
                               RTE_FLOW_ITEM_TYPE_VXLAN,
                               RTE_FLOW_ITEM_TYPE_END,
                },
+               .inner_copy_item = enic_copy_item_inner_eth_v2,
        },
        [RTE_FLOW_ITEM_TYPE_VLAN] = {
                .copy_item = enic_copy_item_vlan_v2,
@@ -147,6 +165,7 @@ static const struct enic_items enic_items_v2[] = {
                               RTE_FLOW_ITEM_TYPE_ETH,
                               RTE_FLOW_ITEM_TYPE_END,
                },
+               .inner_copy_item = enic_copy_item_inner_vlan_v2,
        },
        [RTE_FLOW_ITEM_TYPE_IPV4] = {
                .copy_item = enic_copy_item_ipv4_v2,
@@ -156,6 +175,7 @@ static const struct enic_items enic_items_v2[] = {
                               RTE_FLOW_ITEM_TYPE_VLAN,
                               RTE_FLOW_ITEM_TYPE_END,
                },
+               .inner_copy_item = enic_copy_item_inner_ipv4_v2,
        },
        [RTE_FLOW_ITEM_TYPE_IPV6] = {
                .copy_item = enic_copy_item_ipv6_v2,
@@ -165,6 +185,7 @@ static const struct enic_items enic_items_v2[] = {
                               RTE_FLOW_ITEM_TYPE_VLAN,
                               RTE_FLOW_ITEM_TYPE_END,
                },
+               .inner_copy_item = enic_copy_item_inner_ipv6_v2,
        },
        [RTE_FLOW_ITEM_TYPE_UDP] = {
                .copy_item = enic_copy_item_udp_v2,
@@ -174,6 +195,7 @@ static const struct enic_items enic_items_v2[] = {
                               RTE_FLOW_ITEM_TYPE_IPV6,
                               RTE_FLOW_ITEM_TYPE_END,
                },
+               .inner_copy_item = enic_copy_item_inner_udp_v2,
        },
        [RTE_FLOW_ITEM_TYPE_TCP] = {
                .copy_item = enic_copy_item_tcp_v2,
@@ -183,6 +205,7 @@ static const struct enic_items enic_items_v2[] = {
                               RTE_FLOW_ITEM_TYPE_IPV6,
                               RTE_FLOW_ITEM_TYPE_END,
                },
+               .inner_copy_item = enic_copy_item_inner_tcp_v2,
        },
        [RTE_FLOW_ITEM_TYPE_SCTP] = {
                .copy_item = enic_copy_item_sctp_v2,
@@ -192,6 +215,7 @@ static const struct enic_items enic_items_v2[] = {
                               RTE_FLOW_ITEM_TYPE_IPV6,
                               RTE_FLOW_ITEM_TYPE_END,
                },
+               .inner_copy_item = NULL,
        },
        [RTE_FLOW_ITEM_TYPE_VXLAN] = {
                .copy_item = enic_copy_item_vxlan_v2,
@@ -200,6 +224,7 @@ static const struct enic_items enic_items_v2[] = {
                               RTE_FLOW_ITEM_TYPE_UDP,
                               RTE_FLOW_ITEM_TYPE_END,
                },
+               .inner_copy_item = NULL,
        },
 };
 
@@ -212,6 +237,7 @@ static const struct enic_items enic_items_v3[] = {
                               RTE_FLOW_ITEM_TYPE_UDP,
                               RTE_FLOW_ITEM_TYPE_END,
                },
+               .inner_copy_item = NULL,
        },
        [RTE_FLOW_ITEM_TYPE_ETH] = {
                .copy_item = enic_copy_item_eth_v2,
@@ -220,6 +246,7 @@ static const struct enic_items enic_items_v3[] = {
                               RTE_FLOW_ITEM_TYPE_VXLAN,
                               RTE_FLOW_ITEM_TYPE_END,
                },
+               .inner_copy_item = enic_copy_item_inner_eth_v2,
        },
        [RTE_FLOW_ITEM_TYPE_VLAN] = {
                .copy_item = enic_copy_item_vlan_v2,
@@ -228,6 +255,7 @@ static const struct enic_items enic_items_v3[] = {
                               RTE_FLOW_ITEM_TYPE_ETH,
                               RTE_FLOW_ITEM_TYPE_END,
                },
+               .inner_copy_item = enic_copy_item_inner_vlan_v2,
        },
        [RTE_FLOW_ITEM_TYPE_IPV4] = {
                .copy_item = enic_copy_item_ipv4_v2,
@@ -237,6 +265,7 @@ static const struct enic_items enic_items_v3[] = {
                               RTE_FLOW_ITEM_TYPE_VLAN,
                               RTE_FLOW_ITEM_TYPE_END,
                },
+               .inner_copy_item = enic_copy_item_inner_ipv4_v2,
        },
        [RTE_FLOW_ITEM_TYPE_IPV6] = {
                .copy_item = enic_copy_item_ipv6_v2,
@@ -246,6 +275,7 @@ static const struct enic_items enic_items_v3[] = {
                               RTE_FLOW_ITEM_TYPE_VLAN,
                               RTE_FLOW_ITEM_TYPE_END,
                },
+               .inner_copy_item = enic_copy_item_inner_ipv6_v2,
        },
        [RTE_FLOW_ITEM_TYPE_UDP] = {
                .copy_item = enic_copy_item_udp_v2,
@@ -255,6 +285,7 @@ static const struct enic_items enic_items_v3[] = {
                               RTE_FLOW_ITEM_TYPE_IPV6,
                               RTE_FLOW_ITEM_TYPE_END,
                },
+               .inner_copy_item = enic_copy_item_inner_udp_v2,
        },
        [RTE_FLOW_ITEM_TYPE_TCP] = {
                .copy_item = enic_copy_item_tcp_v2,
@@ -264,6 +295,7 @@ static const struct enic_items enic_items_v3[] = {
                               RTE_FLOW_ITEM_TYPE_IPV6,
                               RTE_FLOW_ITEM_TYPE_END,
                },
+               .inner_copy_item = enic_copy_item_inner_tcp_v2,
        },
        [RTE_FLOW_ITEM_TYPE_SCTP] = {
                .copy_item = enic_copy_item_sctp_v2,
@@ -273,6 +305,7 @@ static const struct enic_items enic_items_v3[] = {
                               RTE_FLOW_ITEM_TYPE_IPV6,
                               RTE_FLOW_ITEM_TYPE_END,
                },
+               .inner_copy_item = NULL,
        },
        [RTE_FLOW_ITEM_TYPE_VXLAN] = {
                .copy_item = enic_copy_item_vxlan_v2,
@@ -281,6 +314,7 @@ static const struct enic_items enic_items_v3[] = {
                               RTE_FLOW_ITEM_TYPE_UDP,
                               RTE_FLOW_ITEM_TYPE_END,
                },
+               .inner_copy_item = NULL,
        },
 };
 
@@ -374,7 +408,6 @@ enic_copy_item_ipv4_v1(struct copy_item_args *arg)
 {
        const struct rte_flow_item *item = arg->item;
        struct filter_v2 *enic_filter = arg->filter;
-       uint8_t *inner_ofst = arg->inner_ofst;
        const struct rte_flow_item_ipv4 *spec = item->spec;
        const struct rte_flow_item_ipv4 *mask = item->mask;
        struct filter_ipv4_5tuple *enic_5tup = &enic_filter->u.ipv4;
@@ -385,9 +418,6 @@ enic_copy_item_ipv4_v1(struct copy_item_args *arg)
 
        FLOW_TRACE();
 
-       if (*inner_ofst)
-               return ENOTSUP;
-
        if (!mask)
                mask = &rte_flow_item_ipv4_mask;
 
@@ -416,7 +446,6 @@ enic_copy_item_udp_v1(struct copy_item_args *arg)
 {
        const struct rte_flow_item *item = arg->item;
        struct filter_v2 *enic_filter = arg->filter;
-       uint8_t *inner_ofst = arg->inner_ofst;
        const struct rte_flow_item_udp *spec = item->spec;
        const struct rte_flow_item_udp *mask = item->mask;
        struct filter_ipv4_5tuple *enic_5tup = &enic_filter->u.ipv4;
@@ -427,9 +456,6 @@ enic_copy_item_udp_v1(struct copy_item_args *arg)
 
        FLOW_TRACE();
 
-       if (*inner_ofst)
-               return ENOTSUP;
-
        if (!mask)
                mask = &rte_flow_item_udp_mask;
 
@@ -459,7 +485,6 @@ enic_copy_item_tcp_v1(struct copy_item_args *arg)
 {
        const struct rte_flow_item *item = arg->item;
        struct filter_v2 *enic_filter = arg->filter;
-       uint8_t *inner_ofst = arg->inner_ofst;
        const struct rte_flow_item_tcp *spec = item->spec;
        const struct rte_flow_item_tcp *mask = item->mask;
        struct filter_ipv4_5tuple *enic_5tup = &enic_filter->u.ipv4;
@@ -470,9 +495,6 @@ enic_copy_item_tcp_v1(struct copy_item_args *arg)
 
        FLOW_TRACE();
 
-       if (*inner_ofst)
-               return ENOTSUP;
-
        if (!mask)
                mask = &rte_flow_item_tcp_mask;
 
@@ -497,14 +519,152 @@ enic_copy_item_tcp_v1(struct copy_item_args *arg)
        return 0;
 }
 
+/*
+ * The common 'copy' function for all inner packet patterns. Patterns are
+ * first appended to the L5 pattern buffer. Then, since the NIC filter
+ * API has no special support for inner packet matching at the moment,
+ * we set EtherType and IP proto as necessary.
+ */
+static int
+copy_inner_common(struct filter_generic_1 *gp, uint8_t *inner_ofst,
+                 const void *val, const void *mask, uint8_t val_size,
+                 uint8_t proto_off, uint16_t proto_val, uint8_t proto_size)
+{
+       uint8_t *l5_mask, *l5_val;
+       uint8_t start_off;
+
+       /* No space left in the L5 pattern buffer. */
+       start_off = *inner_ofst;
+       if ((start_off + val_size) > FILTER_GENERIC_1_KEY_LEN)
+               return ENOTSUP;
+       l5_mask = gp->layer[FILTER_GENERIC_1_L5].mask;
+       l5_val = gp->layer[FILTER_GENERIC_1_L5].val;
+       /* Copy the pattern into the L5 buffer. */
+       if (val) {
+               memcpy(l5_mask + start_off, mask, val_size);
+               memcpy(l5_val + start_off, val, val_size);
+       }
+       /* Set the protocol field in the previous header. */
+       if (proto_off) {
+               void *m, *v;
+
+               m = l5_mask + proto_off;
+               v = l5_val + proto_off;
+               if (proto_size == 1) {
+                       *(uint8_t *)m = 0xff;
+                       *(uint8_t *)v = (uint8_t)proto_val;
+               } else if (proto_size == 2) {
+                       *(uint16_t *)m = 0xffff;
+                       *(uint16_t *)v = proto_val;
+               }
+       }
+       /* All inner headers land in L5 buffer even if their spec is null. */
+       *inner_ofst += val_size;
+       return 0;
+}
+
+static int
+enic_copy_item_inner_eth_v2(struct copy_item_args *arg)
+{
+       const void *mask = arg->item->mask;
+       uint8_t *off = arg->inner_ofst;
+
+       FLOW_TRACE();
+       if (!mask)
+               mask = &rte_flow_item_eth_mask;
+       arg->l2_proto_off = *off + offsetof(struct rte_ether_hdr, ether_type);
+       return copy_inner_common(&arg->filter->u.generic_1, off,
+               arg->item->spec, mask, sizeof(struct rte_ether_hdr),
+               0 /* no previous protocol */, 0, 0);
+}
+
+static int
+enic_copy_item_inner_vlan_v2(struct copy_item_args *arg)
+{
+       const void *mask = arg->item->mask;
+       uint8_t *off = arg->inner_ofst;
+       uint8_t eth_type_off;
+
+       FLOW_TRACE();
+       if (!mask)
+               mask = &rte_flow_item_vlan_mask;
+       /* Append vlan header to L5 and set ether type = TPID */
+       eth_type_off = arg->l2_proto_off;
+       arg->l2_proto_off = *off + offsetof(struct rte_vlan_hdr, eth_proto);
+       return copy_inner_common(&arg->filter->u.generic_1, off,
+               arg->item->spec, mask, sizeof(struct rte_vlan_hdr),
+               eth_type_off, rte_cpu_to_be_16(ETHER_TYPE_VLAN), 2);
+}
+
+static int
+enic_copy_item_inner_ipv4_v2(struct copy_item_args *arg)
+{
+       const void *mask = arg->item->mask;
+       uint8_t *off = arg->inner_ofst;
+
+       FLOW_TRACE();
+       if (!mask)
+               mask = &rte_flow_item_ipv4_mask;
+       /* Append ipv4 header to L5 and set ether type = ipv4 */
+       arg->l3_proto_off = *off + offsetof(struct ipv4_hdr, next_proto_id);
+       return copy_inner_common(&arg->filter->u.generic_1, off,
+               arg->item->spec, mask, sizeof(struct ipv4_hdr),
+               arg->l2_proto_off, rte_cpu_to_be_16(ETHER_TYPE_IPv4), 2);
+}
+
+static int
+enic_copy_item_inner_ipv6_v2(struct copy_item_args *arg)
+{
+       const void *mask = arg->item->mask;
+       uint8_t *off = arg->inner_ofst;
+
+       FLOW_TRACE();
+       if (!mask)
+               mask = &rte_flow_item_ipv6_mask;
+       /* Append ipv6 header to L5 and set ether type = ipv6 */
+       arg->l3_proto_off = *off + offsetof(struct ipv6_hdr, proto);
+       return copy_inner_common(&arg->filter->u.generic_1, off,
+               arg->item->spec, mask, sizeof(struct ipv6_hdr),
+               arg->l2_proto_off, rte_cpu_to_be_16(ETHER_TYPE_IPv6), 2);
+}
+
+static int
+enic_copy_item_inner_udp_v2(struct copy_item_args *arg)
+{
+       const void *mask = arg->item->mask;
+       uint8_t *off = arg->inner_ofst;
+
+       FLOW_TRACE();
+       if (!mask)
+               mask = &rte_flow_item_udp_mask;
+       /* Append udp header to L5 and set ip proto = udp */
+       return copy_inner_common(&arg->filter->u.generic_1, off,
+               arg->item->spec, mask, sizeof(struct udp_hdr),
+               arg->l3_proto_off, IPPROTO_UDP, 1);
+}
+
+static int
+enic_copy_item_inner_tcp_v2(struct copy_item_args *arg)
+{
+       const void *mask = arg->item->mask;
+       uint8_t *off = arg->inner_ofst;
+
+       FLOW_TRACE();
+       if (!mask)
+               mask = &rte_flow_item_tcp_mask;
+       /* Append tcp header to L5 and set ip proto = tcp */
+       return copy_inner_common(&arg->filter->u.generic_1, off,
+               arg->item->spec, mask, sizeof(struct tcp_hdr),
+               arg->l3_proto_off, IPPROTO_TCP, 1);
+}
+
 static int
 enic_copy_item_eth_v2(struct copy_item_args *arg)
 {
        const struct rte_flow_item *item = arg->item;
        struct filter_v2 *enic_filter = arg->filter;
-       uint8_t *inner_ofst = arg->inner_ofst;
-       struct ether_hdr enic_spec;
-       struct ether_hdr enic_mask;
+       struct rte_ether_hdr enic_spec;
+       struct rte_ether_hdr enic_mask;
        const struct rte_flow_item_eth *spec = item->spec;
        const struct rte_flow_item_eth *mask = item->mask;
        struct filter_generic_1 *gp = &enic_filter->u.generic_1;
@@ -530,24 +690,11 @@ enic_copy_item_eth_v2(struct copy_item_args *arg)
        enic_spec.ether_type = spec->type;
        enic_mask.ether_type = mask->type;
 
-       if (*inner_ofst == 0) {
-               /* outer header */
-               memcpy(gp->layer[FILTER_GENERIC_1_L2].mask, &enic_mask,
-                      sizeof(struct ether_hdr));
-               memcpy(gp->layer[FILTER_GENERIC_1_L2].val, &enic_spec,
-                      sizeof(struct ether_hdr));
-       } else {
-               /* inner header */
-               if ((*inner_ofst + sizeof(struct ether_hdr)) >
-                    FILTER_GENERIC_1_KEY_LEN)
-                       return ENOTSUP;
-               /* Offset into L5 where inner Ethernet header goes */
-               memcpy(&gp->layer[FILTER_GENERIC_1_L5].mask[*inner_ofst],
-                      &enic_mask, sizeof(struct ether_hdr));
-               memcpy(&gp->layer[FILTER_GENERIC_1_L5].val[*inner_ofst],
-                      &enic_spec, sizeof(struct ether_hdr));
-               *inner_ofst += sizeof(struct ether_hdr);
-       }
+       /* outer header */
+       memcpy(gp->layer[FILTER_GENERIC_1_L2].mask, &enic_mask,
+              sizeof(struct rte_ether_hdr));
+       memcpy(gp->layer[FILTER_GENERIC_1_L2].val, &enic_spec,
+              sizeof(struct rte_ether_hdr));
        return 0;
 }
 
@@ -556,10 +703,11 @@ enic_copy_item_vlan_v2(struct copy_item_args *arg)
 {
        const struct rte_flow_item *item = arg->item;
        struct filter_v2 *enic_filter = arg->filter;
-       uint8_t *inner_ofst = arg->inner_ofst;
        const struct rte_flow_item_vlan *spec = item->spec;
        const struct rte_flow_item_vlan *mask = item->mask;
        struct filter_generic_1 *gp = &enic_filter->u.generic_1;
+       struct rte_ether_hdr *eth_mask;
+       struct rte_ether_hdr *eth_val;
 
        FLOW_TRACE();
 
@@ -570,36 +718,35 @@ enic_copy_item_vlan_v2(struct copy_item_args *arg)
        if (!mask)
                mask = &rte_flow_item_vlan_mask;
 
-       if (*inner_ofst == 0) {
-               struct ether_hdr *eth_mask =
-                       (void *)gp->layer[FILTER_GENERIC_1_L2].mask;
-               struct ether_hdr *eth_val =
-                       (void *)gp->layer[FILTER_GENERIC_1_L2].val;
-
-               /* Outer TPID cannot be matched */
-               if (eth_mask->ether_type)
-                       return ENOTSUP;
-               /*
-                * When packet matching, the VIC always compares vlan-stripped
-                * L2, regardless of vlan stripping settings. So, the inner type
-                * from vlan becomes the ether type of the eth header.
-                */
+       eth_mask = (void *)gp->layer[FILTER_GENERIC_1_L2].mask;
+       eth_val = (void *)gp->layer[FILTER_GENERIC_1_L2].val;
+       /* Outer TPID cannot be matched */
+       if (eth_mask->ether_type)
+               return ENOTSUP;
+       /*
+        * For recent models:
+        * When packet matching, the VIC always compares vlan-stripped
+        * L2, regardless of vlan stripping settings. So, the inner type
+        * from vlan becomes the ether type of the eth header.
+        *
+        * Older models w/o hardware vxlan parser have a different
+        * behavior when vlan stripping is disabled. In this case,
+        * vlan tag remains in the L2 buffer.
+        */
+       if (!arg->enic->vxlan && !arg->enic->ig_vlan_strip_en) {
+               struct rte_vlan_hdr *vlan;
+
+               vlan = (struct rte_vlan_hdr *)(eth_mask + 1);
+               vlan->eth_proto = mask->inner_type;
+               vlan = (struct rte_vlan_hdr *)(eth_val + 1);
+               vlan->eth_proto = spec->inner_type;
+       } else {
                eth_mask->ether_type = mask->inner_type;
                eth_val->ether_type = spec->inner_type;
-               /* For TCI, use the vlan mask/val fields (little endian). */
-               gp->mask_vlan = rte_be_to_cpu_16(mask->tci);
-               gp->val_vlan = rte_be_to_cpu_16(spec->tci);
-       } else {
-               /* Inner header. Mask/Val start at *inner_ofst into L5 */
-               if ((*inner_ofst + sizeof(struct vlan_hdr)) >
-                    FILTER_GENERIC_1_KEY_LEN)
-                       return ENOTSUP;
-               memcpy(&gp->layer[FILTER_GENERIC_1_L5].mask[*inner_ofst],
-                      mask, sizeof(struct vlan_hdr));
-               memcpy(&gp->layer[FILTER_GENERIC_1_L5].val[*inner_ofst],
-                      spec, sizeof(struct vlan_hdr));
-               *inner_ofst += sizeof(struct vlan_hdr);
        }
+       /* For TCI, use the vlan mask/val fields (little endian). */
+       gp->mask_vlan = rte_be_to_cpu_16(mask->tci);
+       gp->val_vlan = rte_be_to_cpu_16(spec->tci);
        return 0;
 }
 
@@ -608,40 +755,27 @@ enic_copy_item_ipv4_v2(struct copy_item_args *arg)
 {
        const struct rte_flow_item *item = arg->item;
        struct filter_v2 *enic_filter = arg->filter;
-       uint8_t *inner_ofst = arg->inner_ofst;
        const struct rte_flow_item_ipv4 *spec = item->spec;
        const struct rte_flow_item_ipv4 *mask = item->mask;
        struct filter_generic_1 *gp = &enic_filter->u.generic_1;
 
        FLOW_TRACE();
 
-       if (*inner_ofst == 0) {
-               /* Match IPv4 */
-               gp->mask_flags |= FILTER_GENERIC_1_IPV4;
-               gp->val_flags |= FILTER_GENERIC_1_IPV4;
+       /* Match IPv4 */
+       gp->mask_flags |= FILTER_GENERIC_1_IPV4;
+       gp->val_flags |= FILTER_GENERIC_1_IPV4;
 
-               /* Match all if no spec */
-               if (!spec)
-                       return 0;
+       /* Match all if no spec */
+       if (!spec)
+               return 0;
 
-               if (!mask)
-                       mask = &rte_flow_item_ipv4_mask;
+       if (!mask)
+               mask = &rte_flow_item_ipv4_mask;
 
-               memcpy(gp->layer[FILTER_GENERIC_1_L3].mask, &mask->hdr,
-                      sizeof(struct ipv4_hdr));
-               memcpy(gp->layer[FILTER_GENERIC_1_L3].val, &spec->hdr,
-                      sizeof(struct ipv4_hdr));
-       } else {
-               /* Inner IPv4 header. Mask/Val start at *inner_ofst into L5 */
-               if ((*inner_ofst + sizeof(struct ipv4_hdr)) >
-                    FILTER_GENERIC_1_KEY_LEN)
-                       return ENOTSUP;
-               memcpy(&gp->layer[FILTER_GENERIC_1_L5].mask[*inner_ofst],
-                      mask, sizeof(struct ipv4_hdr));
-               memcpy(&gp->layer[FILTER_GENERIC_1_L5].val[*inner_ofst],
-                      spec, sizeof(struct ipv4_hdr));
-               *inner_ofst += sizeof(struct ipv4_hdr);
-       }
+       memcpy(gp->layer[FILTER_GENERIC_1_L3].mask, &mask->hdr,
+              sizeof(struct ipv4_hdr));
+       memcpy(gp->layer[FILTER_GENERIC_1_L3].val, &spec->hdr,
+              sizeof(struct ipv4_hdr));
        return 0;
 }
 
@@ -650,7 +784,6 @@ enic_copy_item_ipv6_v2(struct copy_item_args *arg)
 {
        const struct rte_flow_item *item = arg->item;
        struct filter_v2 *enic_filter = arg->filter;
-       uint8_t *inner_ofst = arg->inner_ofst;
        const struct rte_flow_item_ipv6 *spec = item->spec;
        const struct rte_flow_item_ipv6 *mask = item->mask;
        struct filter_generic_1 *gp = &enic_filter->u.generic_1;
@@ -668,22 +801,10 @@ enic_copy_item_ipv6_v2(struct copy_item_args *arg)
        if (!mask)
                mask = &rte_flow_item_ipv6_mask;
 
-       if (*inner_ofst == 0) {
-               memcpy(gp->layer[FILTER_GENERIC_1_L3].mask, &mask->hdr,
-                      sizeof(struct ipv6_hdr));
-               memcpy(gp->layer[FILTER_GENERIC_1_L3].val, &spec->hdr,
-                      sizeof(struct ipv6_hdr));
-       } else {
-               /* Inner IPv6 header. Mask/Val start at *inner_ofst into L5 */
-               if ((*inner_ofst + sizeof(struct ipv6_hdr)) >
-                    FILTER_GENERIC_1_KEY_LEN)
-                       return ENOTSUP;
-               memcpy(&gp->layer[FILTER_GENERIC_1_L5].mask[*inner_ofst],
-                      mask, sizeof(struct ipv6_hdr));
-               memcpy(&gp->layer[FILTER_GENERIC_1_L5].val[*inner_ofst],
-                      spec, sizeof(struct ipv6_hdr));
-               *inner_ofst += sizeof(struct ipv6_hdr);
-       }
+       memcpy(gp->layer[FILTER_GENERIC_1_L3].mask, &mask->hdr,
+              sizeof(struct ipv6_hdr));
+       memcpy(gp->layer[FILTER_GENERIC_1_L3].val, &spec->hdr,
+              sizeof(struct ipv6_hdr));
        return 0;
 }
 
@@ -692,7 +813,6 @@ enic_copy_item_udp_v2(struct copy_item_args *arg)
 {
        const struct rte_flow_item *item = arg->item;
        struct filter_v2 *enic_filter = arg->filter;
-       uint8_t *inner_ofst = arg->inner_ofst;
        const struct rte_flow_item_udp *spec = item->spec;
        const struct rte_flow_item_udp *mask = item->mask;
        struct filter_generic_1 *gp = &enic_filter->u.generic_1;
@@ -710,22 +830,10 @@ enic_copy_item_udp_v2(struct copy_item_args *arg)
        if (!mask)
                mask = &rte_flow_item_udp_mask;
 
-       if (*inner_ofst == 0) {
-               memcpy(gp->layer[FILTER_GENERIC_1_L4].mask, &mask->hdr,
-                      sizeof(struct udp_hdr));
-               memcpy(gp->layer[FILTER_GENERIC_1_L4].val, &spec->hdr,
-                      sizeof(struct udp_hdr));
-       } else {
-               /* Inner IPv6 header. Mask/Val start at *inner_ofst into L5 */
-               if ((*inner_ofst + sizeof(struct udp_hdr)) >
-                    FILTER_GENERIC_1_KEY_LEN)
-                       return ENOTSUP;
-               memcpy(&gp->layer[FILTER_GENERIC_1_L5].mask[*inner_ofst],
-                      mask, sizeof(struct udp_hdr));
-               memcpy(&gp->layer[FILTER_GENERIC_1_L5].val[*inner_ofst],
-                      spec, sizeof(struct udp_hdr));
-               *inner_ofst += sizeof(struct udp_hdr);
-       }
+       memcpy(gp->layer[FILTER_GENERIC_1_L4].mask, &mask->hdr,
+              sizeof(struct udp_hdr));
+       memcpy(gp->layer[FILTER_GENERIC_1_L4].val, &spec->hdr,
+              sizeof(struct udp_hdr));
        return 0;
 }
 
@@ -734,7 +842,6 @@ enic_copy_item_tcp_v2(struct copy_item_args *arg)
 {
        const struct rte_flow_item *item = arg->item;
        struct filter_v2 *enic_filter = arg->filter;
-       uint8_t *inner_ofst = arg->inner_ofst;
        const struct rte_flow_item_tcp *spec = item->spec;
        const struct rte_flow_item_tcp *mask = item->mask;
        struct filter_generic_1 *gp = &enic_filter->u.generic_1;
@@ -752,22 +859,10 @@ enic_copy_item_tcp_v2(struct copy_item_args *arg)
        if (!mask)
                return ENOTSUP;
 
-       if (*inner_ofst == 0) {
-               memcpy(gp->layer[FILTER_GENERIC_1_L4].mask, &mask->hdr,
-                      sizeof(struct tcp_hdr));
-               memcpy(gp->layer[FILTER_GENERIC_1_L4].val, &spec->hdr,
-                      sizeof(struct tcp_hdr));
-       } else {
-               /* Inner IPv6 header. Mask/Val start at *inner_ofst into L5 */
-               if ((*inner_ofst + sizeof(struct tcp_hdr)) >
-                    FILTER_GENERIC_1_KEY_LEN)
-                       return ENOTSUP;
-               memcpy(&gp->layer[FILTER_GENERIC_1_L5].mask[*inner_ofst],
-                      mask, sizeof(struct tcp_hdr));
-               memcpy(&gp->layer[FILTER_GENERIC_1_L5].val[*inner_ofst],
-                      spec, sizeof(struct tcp_hdr));
-               *inner_ofst += sizeof(struct tcp_hdr);
-       }
+       memcpy(gp->layer[FILTER_GENERIC_1_L4].mask, &mask->hdr,
+              sizeof(struct tcp_hdr));
+       memcpy(gp->layer[FILTER_GENERIC_1_L4].val, &spec->hdr,
+              sizeof(struct tcp_hdr));
        return 0;
 }
 
@@ -776,7 +871,6 @@ enic_copy_item_sctp_v2(struct copy_item_args *arg)
 {
        const struct rte_flow_item *item = arg->item;
        struct filter_v2 *enic_filter = arg->filter;
-       uint8_t *inner_ofst = arg->inner_ofst;
        const struct rte_flow_item_sctp *spec = item->spec;
        const struct rte_flow_item_sctp *mask = item->mask;
        struct filter_generic_1 *gp = &enic_filter->u.generic_1;
@@ -785,9 +879,6 @@ enic_copy_item_sctp_v2(struct copy_item_args *arg)
 
        FLOW_TRACE();
 
-       if (*inner_ofst)
-               return ENOTSUP;
-
        /*
         * The NIC filter API has no flags for "match sctp", so explicitly set
         * the protocol number in the IP pattern.
@@ -838,9 +929,6 @@ enic_copy_item_vxlan_v2(struct copy_item_args *arg)
 
        FLOW_TRACE();
 
-       if (*inner_ofst)
-               return EINVAL;
-
        /*
         * The NIC filter API has no flags for "match vxlan". Set UDP port to
         * avoid false positives.
@@ -859,11 +947,11 @@ enic_copy_item_vxlan_v2(struct copy_item_args *arg)
                mask = &rte_flow_item_vxlan_mask;
 
        memcpy(gp->layer[FILTER_GENERIC_1_L5].mask, mask,
-              sizeof(struct vxlan_hdr));
+              sizeof(struct rte_vxlan_hdr));
        memcpy(gp->layer[FILTER_GENERIC_1_L5].val, spec,
-              sizeof(struct vxlan_hdr));
+              sizeof(struct rte_vxlan_hdr));
 
-       *inner_ofst = sizeof(struct vxlan_hdr);
+       *inner_ofst = sizeof(struct rte_vxlan_hdr);
        return 0;
 }
 
@@ -894,7 +982,8 @@ enic_copy_item_raw_v2(struct copy_item_args *arg)
        if (!spec->relative || spec->offset != 0 || spec->search || spec->limit)
                return EINVAL;
        /* Need non-null pattern that fits within the NIC's filter pattern */
-       if (spec->length == 0 || spec->length > FILTER_GENERIC_1_KEY_LEN ||
+       if (spec->length == 0 ||
+           spec->length + sizeof(struct udp_hdr) > FILTER_GENERIC_1_KEY_LEN ||
            !spec->pattern || !mask->pattern)
                return EINVAL;
        /*
@@ -962,7 +1051,7 @@ fixup_l5_layer(struct enic *enic, struct filter_generic_1 *gp,
        if (!(inner_ofst > 0 && enic->vxlan))
                return;
        FLOW_TRACE();
-       vxlan = sizeof(struct vxlan_hdr);
+       vxlan = sizeof(struct rte_vxlan_hdr);
        memcpy(gp->layer[FILTER_GENERIC_1_L4].mask + sizeof(struct udp_hdr),
               gp->layer[FILTER_GENERIC_1_L5].mask, vxlan);
        memcpy(gp->layer[FILTER_GENERIC_1_L4].val + sizeof(struct udp_hdr),
@@ -1000,6 +1089,7 @@ enic_copy_filter(const struct rte_flow_item pattern[],
        enum rte_flow_item_type prev_item;
        const struct enic_items *item_info;
        struct copy_item_args args;
+       enic_copy_item_fn *copy_fn;
        u8 is_first_item = 1;
 
        FLOW_TRACE();
@@ -1008,6 +1098,7 @@ enic_copy_filter(const struct rte_flow_item pattern[],
 
        args.filter = enic_filter;
        args.inner_ofst = &inner_ofst;
+       args.enic = enic;
        for (; item->type != RTE_FLOW_ITEM_TYPE_END; item++) {
                /* Get info about how to validate and copy the item. If NULL
                 * is returned the nic does not support the item.
@@ -1017,7 +1108,8 @@ enic_copy_filter(const struct rte_flow_item pattern[],
 
                item_info = &cap->item_info[item->type];
                if (item->type > cap->max_item_type ||
-                   item_info->copy_item == NULL) {
+                   item_info->copy_item == NULL ||
+                   (inner_ofst > 0 && item_info->inner_copy_item == NULL)) {
                        rte_flow_error_set(error, ENOTSUP,
                                RTE_FLOW_ERROR_TYPE_ITEM,
                                NULL, "Unsupported item.");
@@ -1029,7 +1121,9 @@ enic_copy_filter(const struct rte_flow_item pattern[],
                        goto stacking_error;
 
                args.item = item;
-               ret = item_info->copy_item(&args);
+               copy_fn = inner_ofst > 0 ? item_info->inner_copy_item :
+                       item_info->copy_item;
+               ret = copy_fn(&args);
                if (ret)
                        goto item_not_supported;
                prev_item = item->type;