1 /* SPDX-License-Identifier: BSD-3-Clause
2 * Copyright 2018 Mellanox Technologies, Ltd
12 /* ISO C doesn't support unnamed structs/unions, disabling -pedantic. */
14 #pragma GCC diagnostic ignored "-Wpedantic"
16 #include <infiniband/verbs.h>
18 #pragma GCC diagnostic error "-Wpedantic"
21 #include <rte_common.h>
22 #include <rte_ether.h>
23 #include <rte_ethdev_driver.h>
25 #include <rte_flow_driver.h>
26 #include <rte_malloc.h>
31 #include "mlx5_defs.h"
32 #include "mlx5_glue.h"
33 #include "mlx5_flow.h"
35 #include "mlx5_rxtx.h"
37 #ifdef HAVE_IBV_FLOW_DV_SUPPORT
39 #ifndef HAVE_IBV_FLOW_DEVX_COUNTERS
40 #define MLX5DV_FLOW_ACTION_COUNTERS_DEVX 0
43 #ifndef HAVE_MLX5DV_DR_ESWITCH
44 #ifndef MLX5DV_FLOW_TABLE_TYPE_FDB
45 #define MLX5DV_FLOW_TABLE_TYPE_FDB 0
49 #ifndef HAVE_MLX5DV_DR
50 #define MLX5DV_DR_ACTION_FLAGS_ROOT_LEVEL 1
66 * Initialize flow attributes structure according to flow items' types.
69 * Pointer to item specification.
71 * Pointer to flow attributes structure.
74 flow_dv_attr_init(const struct rte_flow_item *item, union flow_dv_attr *attr)
76 for (; item->type != RTE_FLOW_ITEM_TYPE_END; item++) {
78 case RTE_FLOW_ITEM_TYPE_IPV4:
81 case RTE_FLOW_ITEM_TYPE_IPV6:
84 case RTE_FLOW_ITEM_TYPE_UDP:
87 case RTE_FLOW_ITEM_TYPE_TCP:
97 struct field_modify_info {
98 uint32_t size; /* Size of field in protocol header, in bytes. */
99 uint32_t offset; /* Offset of field in protocol header, in bytes. */
100 enum mlx5_modification_field id;
103 struct field_modify_info modify_eth[] = {
104 {4, 0, MLX5_MODI_OUT_DMAC_47_16},
105 {2, 4, MLX5_MODI_OUT_DMAC_15_0},
106 {4, 6, MLX5_MODI_OUT_SMAC_47_16},
107 {2, 10, MLX5_MODI_OUT_SMAC_15_0},
111 struct field_modify_info modify_ipv4[] = {
112 {1, 8, MLX5_MODI_OUT_IPV4_TTL},
113 {4, 12, MLX5_MODI_OUT_SIPV4},
114 {4, 16, MLX5_MODI_OUT_DIPV4},
118 struct field_modify_info modify_ipv6[] = {
119 {1, 7, MLX5_MODI_OUT_IPV6_HOPLIMIT},
120 {4, 8, MLX5_MODI_OUT_SIPV6_127_96},
121 {4, 12, MLX5_MODI_OUT_SIPV6_95_64},
122 {4, 16, MLX5_MODI_OUT_SIPV6_63_32},
123 {4, 20, MLX5_MODI_OUT_SIPV6_31_0},
124 {4, 24, MLX5_MODI_OUT_DIPV6_127_96},
125 {4, 28, MLX5_MODI_OUT_DIPV6_95_64},
126 {4, 32, MLX5_MODI_OUT_DIPV6_63_32},
127 {4, 36, MLX5_MODI_OUT_DIPV6_31_0},
131 struct field_modify_info modify_udp[] = {
132 {2, 0, MLX5_MODI_OUT_UDP_SPORT},
133 {2, 2, MLX5_MODI_OUT_UDP_DPORT},
137 struct field_modify_info modify_tcp[] = {
138 {2, 0, MLX5_MODI_OUT_TCP_SPORT},
139 {2, 2, MLX5_MODI_OUT_TCP_DPORT},
140 {4, 4, MLX5_MODI_OUT_TCP_SEQ_NUM},
141 {4, 8, MLX5_MODI_OUT_TCP_ACK_NUM},
146 mlx5_flow_tunnel_ip_check(const struct rte_flow_item *item, uint64_t *flags)
148 uint8_t next_protocol = 0xFF;
150 if (item->mask != NULL) {
151 switch (item->type) {
152 case RTE_FLOW_ITEM_TYPE_IPV4:
154 ((const struct rte_flow_item_ipv4 *)
155 (item->spec))->hdr.next_proto_id;
157 ((const struct rte_flow_item_ipv4 *)
158 (item->mask))->hdr.next_proto_id;
160 case RTE_FLOW_ITEM_TYPE_IPV6:
162 ((const struct rte_flow_item_ipv6 *)
163 (item->spec))->hdr.proto;
165 ((const struct rte_flow_item_ipv6 *)
166 (item->mask))->hdr.proto;
172 if (next_protocol == IPPROTO_IPIP)
173 *flags |= MLX5_FLOW_LAYER_IPIP;
174 if (next_protocol == IPPROTO_IPV6)
175 *flags |= MLX5_FLOW_LAYER_IPV6_ENCAP;
179 * Acquire the synchronizing object to protect multithreaded access
180 * to shared dv context. Lock occurs only if context is actually
181 * shared, i.e. we have multiport IB device and representors are
185 * Pointer to the rte_eth_dev structure.
188 flow_d_shared_lock(struct rte_eth_dev *dev)
190 struct mlx5_priv *priv = dev->data->dev_private;
191 struct mlx5_ibv_shared *sh = priv->sh;
193 if (sh->dv_refcnt > 1) {
196 ret = pthread_mutex_lock(&sh->dv_mutex);
203 flow_d_shared_unlock(struct rte_eth_dev *dev)
205 struct mlx5_priv *priv = dev->data->dev_private;
206 struct mlx5_ibv_shared *sh = priv->sh;
208 if (sh->dv_refcnt > 1) {
211 ret = pthread_mutex_unlock(&sh->dv_mutex);
218 * Convert modify-header action to DV specification.
221 * Pointer to item specification.
223 * Pointer to field modification information.
224 * @param[in,out] resource
225 * Pointer to the modify-header resource.
227 * Type of modification.
229 * Pointer to the error structure.
232 * 0 on success, a negative errno value otherwise and rte_errno is set.
235 flow_dv_convert_modify_action(struct rte_flow_item *item,
236 struct field_modify_info *field,
237 struct mlx5_flow_dv_modify_hdr_resource *resource,
239 struct rte_flow_error *error)
241 uint32_t i = resource->actions_num;
242 struct mlx5_modification_cmd *actions = resource->actions;
243 const uint8_t *spec = item->spec;
244 const uint8_t *mask = item->mask;
247 while (field->size) {
249 /* Generate modify command for each mask segment. */
250 memcpy(&set, &mask[field->offset], field->size);
252 if (i >= MLX5_MODIFY_NUM)
253 return rte_flow_error_set(error, EINVAL,
254 RTE_FLOW_ERROR_TYPE_ACTION, NULL,
255 "too many items to modify");
256 actions[i].action_type = type;
257 actions[i].field = field->id;
258 actions[i].length = field->size ==
259 4 ? 0 : field->size * 8;
260 rte_memcpy(&actions[i].data[4 - field->size],
261 &spec[field->offset], field->size);
262 actions[i].data0 = rte_cpu_to_be_32(actions[i].data0);
265 if (resource->actions_num != i)
266 resource->actions_num = i;
269 if (!resource->actions_num)
270 return rte_flow_error_set(error, EINVAL,
271 RTE_FLOW_ERROR_TYPE_ACTION, NULL,
272 "invalid modification flow item");
277 * Convert modify-header set IPv4 address action to DV specification.
279 * @param[in,out] resource
280 * Pointer to the modify-header resource.
282 * Pointer to action specification.
284 * Pointer to the error structure.
287 * 0 on success, a negative errno value otherwise and rte_errno is set.
290 flow_dv_convert_action_modify_ipv4
291 (struct mlx5_flow_dv_modify_hdr_resource *resource,
292 const struct rte_flow_action *action,
293 struct rte_flow_error *error)
295 const struct rte_flow_action_set_ipv4 *conf =
296 (const struct rte_flow_action_set_ipv4 *)(action->conf);
297 struct rte_flow_item item = { .type = RTE_FLOW_ITEM_TYPE_IPV4 };
298 struct rte_flow_item_ipv4 ipv4;
299 struct rte_flow_item_ipv4 ipv4_mask;
301 memset(&ipv4, 0, sizeof(ipv4));
302 memset(&ipv4_mask, 0, sizeof(ipv4_mask));
303 if (action->type == RTE_FLOW_ACTION_TYPE_SET_IPV4_SRC) {
304 ipv4.hdr.src_addr = conf->ipv4_addr;
305 ipv4_mask.hdr.src_addr = rte_flow_item_ipv4_mask.hdr.src_addr;
307 ipv4.hdr.dst_addr = conf->ipv4_addr;
308 ipv4_mask.hdr.dst_addr = rte_flow_item_ipv4_mask.hdr.dst_addr;
311 item.mask = &ipv4_mask;
312 return flow_dv_convert_modify_action(&item, modify_ipv4, resource,
313 MLX5_MODIFICATION_TYPE_SET, error);
317 * Convert modify-header set IPv6 address action to DV specification.
319 * @param[in,out] resource
320 * Pointer to the modify-header resource.
322 * Pointer to action specification.
324 * Pointer to the error structure.
327 * 0 on success, a negative errno value otherwise and rte_errno is set.
330 flow_dv_convert_action_modify_ipv6
331 (struct mlx5_flow_dv_modify_hdr_resource *resource,
332 const struct rte_flow_action *action,
333 struct rte_flow_error *error)
335 const struct rte_flow_action_set_ipv6 *conf =
336 (const struct rte_flow_action_set_ipv6 *)(action->conf);
337 struct rte_flow_item item = { .type = RTE_FLOW_ITEM_TYPE_IPV6 };
338 struct rte_flow_item_ipv6 ipv6;
339 struct rte_flow_item_ipv6 ipv6_mask;
341 memset(&ipv6, 0, sizeof(ipv6));
342 memset(&ipv6_mask, 0, sizeof(ipv6_mask));
343 if (action->type == RTE_FLOW_ACTION_TYPE_SET_IPV6_SRC) {
344 memcpy(&ipv6.hdr.src_addr, &conf->ipv6_addr,
345 sizeof(ipv6.hdr.src_addr));
346 memcpy(&ipv6_mask.hdr.src_addr,
347 &rte_flow_item_ipv6_mask.hdr.src_addr,
348 sizeof(ipv6.hdr.src_addr));
350 memcpy(&ipv6.hdr.dst_addr, &conf->ipv6_addr,
351 sizeof(ipv6.hdr.dst_addr));
352 memcpy(&ipv6_mask.hdr.dst_addr,
353 &rte_flow_item_ipv6_mask.hdr.dst_addr,
354 sizeof(ipv6.hdr.dst_addr));
357 item.mask = &ipv6_mask;
358 return flow_dv_convert_modify_action(&item, modify_ipv6, resource,
359 MLX5_MODIFICATION_TYPE_SET, error);
363 * Convert modify-header set MAC address action to DV specification.
365 * @param[in,out] resource
366 * Pointer to the modify-header resource.
368 * Pointer to action specification.
370 * Pointer to the error structure.
373 * 0 on success, a negative errno value otherwise and rte_errno is set.
376 flow_dv_convert_action_modify_mac
377 (struct mlx5_flow_dv_modify_hdr_resource *resource,
378 const struct rte_flow_action *action,
379 struct rte_flow_error *error)
381 const struct rte_flow_action_set_mac *conf =
382 (const struct rte_flow_action_set_mac *)(action->conf);
383 struct rte_flow_item item = { .type = RTE_FLOW_ITEM_TYPE_ETH };
384 struct rte_flow_item_eth eth;
385 struct rte_flow_item_eth eth_mask;
387 memset(ð, 0, sizeof(eth));
388 memset(ð_mask, 0, sizeof(eth_mask));
389 if (action->type == RTE_FLOW_ACTION_TYPE_SET_MAC_SRC) {
390 memcpy(ð.src.addr_bytes, &conf->mac_addr,
391 sizeof(eth.src.addr_bytes));
392 memcpy(ð_mask.src.addr_bytes,
393 &rte_flow_item_eth_mask.src.addr_bytes,
394 sizeof(eth_mask.src.addr_bytes));
396 memcpy(ð.dst.addr_bytes, &conf->mac_addr,
397 sizeof(eth.dst.addr_bytes));
398 memcpy(ð_mask.dst.addr_bytes,
399 &rte_flow_item_eth_mask.dst.addr_bytes,
400 sizeof(eth_mask.dst.addr_bytes));
403 item.mask = ð_mask;
404 return flow_dv_convert_modify_action(&item, modify_eth, resource,
405 MLX5_MODIFICATION_TYPE_SET, error);
409 * Convert modify-header set TP action to DV specification.
411 * @param[in,out] resource
412 * Pointer to the modify-header resource.
414 * Pointer to action specification.
416 * Pointer to rte_flow_item objects list.
418 * Pointer to flow attributes structure.
420 * Pointer to the error structure.
423 * 0 on success, a negative errno value otherwise and rte_errno is set.
426 flow_dv_convert_action_modify_tp
427 (struct mlx5_flow_dv_modify_hdr_resource *resource,
428 const struct rte_flow_action *action,
429 const struct rte_flow_item *items,
430 union flow_dv_attr *attr,
431 struct rte_flow_error *error)
433 const struct rte_flow_action_set_tp *conf =
434 (const struct rte_flow_action_set_tp *)(action->conf);
435 struct rte_flow_item item;
436 struct rte_flow_item_udp udp;
437 struct rte_flow_item_udp udp_mask;
438 struct rte_flow_item_tcp tcp;
439 struct rte_flow_item_tcp tcp_mask;
440 struct field_modify_info *field;
443 flow_dv_attr_init(items, attr);
445 memset(&udp, 0, sizeof(udp));
446 memset(&udp_mask, 0, sizeof(udp_mask));
447 if (action->type == RTE_FLOW_ACTION_TYPE_SET_TP_SRC) {
448 udp.hdr.src_port = conf->port;
449 udp_mask.hdr.src_port =
450 rte_flow_item_udp_mask.hdr.src_port;
452 udp.hdr.dst_port = conf->port;
453 udp_mask.hdr.dst_port =
454 rte_flow_item_udp_mask.hdr.dst_port;
456 item.type = RTE_FLOW_ITEM_TYPE_UDP;
458 item.mask = &udp_mask;
462 memset(&tcp, 0, sizeof(tcp));
463 memset(&tcp_mask, 0, sizeof(tcp_mask));
464 if (action->type == RTE_FLOW_ACTION_TYPE_SET_TP_SRC) {
465 tcp.hdr.src_port = conf->port;
466 tcp_mask.hdr.src_port =
467 rte_flow_item_tcp_mask.hdr.src_port;
469 tcp.hdr.dst_port = conf->port;
470 tcp_mask.hdr.dst_port =
471 rte_flow_item_tcp_mask.hdr.dst_port;
473 item.type = RTE_FLOW_ITEM_TYPE_TCP;
475 item.mask = &tcp_mask;
478 return flow_dv_convert_modify_action(&item, field, resource,
479 MLX5_MODIFICATION_TYPE_SET, error);
483 * Convert modify-header set TTL action to DV specification.
485 * @param[in,out] resource
486 * Pointer to the modify-header resource.
488 * Pointer to action specification.
490 * Pointer to rte_flow_item objects list.
492 * Pointer to flow attributes structure.
494 * Pointer to the error structure.
497 * 0 on success, a negative errno value otherwise and rte_errno is set.
500 flow_dv_convert_action_modify_ttl
501 (struct mlx5_flow_dv_modify_hdr_resource *resource,
502 const struct rte_flow_action *action,
503 const struct rte_flow_item *items,
504 union flow_dv_attr *attr,
505 struct rte_flow_error *error)
507 const struct rte_flow_action_set_ttl *conf =
508 (const struct rte_flow_action_set_ttl *)(action->conf);
509 struct rte_flow_item item;
510 struct rte_flow_item_ipv4 ipv4;
511 struct rte_flow_item_ipv4 ipv4_mask;
512 struct rte_flow_item_ipv6 ipv6;
513 struct rte_flow_item_ipv6 ipv6_mask;
514 struct field_modify_info *field;
517 flow_dv_attr_init(items, attr);
519 memset(&ipv4, 0, sizeof(ipv4));
520 memset(&ipv4_mask, 0, sizeof(ipv4_mask));
521 ipv4.hdr.time_to_live = conf->ttl_value;
522 ipv4_mask.hdr.time_to_live = 0xFF;
523 item.type = RTE_FLOW_ITEM_TYPE_IPV4;
525 item.mask = &ipv4_mask;
529 memset(&ipv6, 0, sizeof(ipv6));
530 memset(&ipv6_mask, 0, sizeof(ipv6_mask));
531 ipv6.hdr.hop_limits = conf->ttl_value;
532 ipv6_mask.hdr.hop_limits = 0xFF;
533 item.type = RTE_FLOW_ITEM_TYPE_IPV6;
535 item.mask = &ipv6_mask;
538 return flow_dv_convert_modify_action(&item, field, resource,
539 MLX5_MODIFICATION_TYPE_SET, error);
543 * Convert modify-header decrement TTL action to DV specification.
545 * @param[in,out] resource
546 * Pointer to the modify-header resource.
548 * Pointer to action specification.
550 * Pointer to rte_flow_item objects list.
552 * Pointer to flow attributes structure.
554 * Pointer to the error structure.
557 * 0 on success, a negative errno value otherwise and rte_errno is set.
560 flow_dv_convert_action_modify_dec_ttl
561 (struct mlx5_flow_dv_modify_hdr_resource *resource,
562 const struct rte_flow_item *items,
563 union flow_dv_attr *attr,
564 struct rte_flow_error *error)
566 struct rte_flow_item item;
567 struct rte_flow_item_ipv4 ipv4;
568 struct rte_flow_item_ipv4 ipv4_mask;
569 struct rte_flow_item_ipv6 ipv6;
570 struct rte_flow_item_ipv6 ipv6_mask;
571 struct field_modify_info *field;
574 flow_dv_attr_init(items, attr);
576 memset(&ipv4, 0, sizeof(ipv4));
577 memset(&ipv4_mask, 0, sizeof(ipv4_mask));
578 ipv4.hdr.time_to_live = 0xFF;
579 ipv4_mask.hdr.time_to_live = 0xFF;
580 item.type = RTE_FLOW_ITEM_TYPE_IPV4;
582 item.mask = &ipv4_mask;
586 memset(&ipv6, 0, sizeof(ipv6));
587 memset(&ipv6_mask, 0, sizeof(ipv6_mask));
588 ipv6.hdr.hop_limits = 0xFF;
589 ipv6_mask.hdr.hop_limits = 0xFF;
590 item.type = RTE_FLOW_ITEM_TYPE_IPV6;
592 item.mask = &ipv6_mask;
595 return flow_dv_convert_modify_action(&item, field, resource,
596 MLX5_MODIFICATION_TYPE_ADD, error);
600 * Convert modify-header increment/decrement TCP Sequence number
601 * to DV specification.
603 * @param[in,out] resource
604 * Pointer to the modify-header resource.
606 * Pointer to action specification.
608 * Pointer to the error structure.
611 * 0 on success, a negative errno value otherwise and rte_errno is set.
614 flow_dv_convert_action_modify_tcp_seq
615 (struct mlx5_flow_dv_modify_hdr_resource *resource,
616 const struct rte_flow_action *action,
617 struct rte_flow_error *error)
619 const rte_be32_t *conf = (const rte_be32_t *)(action->conf);
620 uint64_t value = rte_be_to_cpu_32(*conf);
621 struct rte_flow_item item;
622 struct rte_flow_item_tcp tcp;
623 struct rte_flow_item_tcp tcp_mask;
625 memset(&tcp, 0, sizeof(tcp));
626 memset(&tcp_mask, 0, sizeof(tcp_mask));
627 if (action->type == RTE_FLOW_ACTION_TYPE_DEC_TCP_SEQ)
629 * The HW has no decrement operation, only increment operation.
630 * To simulate decrement X from Y using increment operation
631 * we need to add UINT32_MAX X times to Y.
632 * Each adding of UINT32_MAX decrements Y by 1.
635 tcp.hdr.sent_seq = rte_cpu_to_be_32((uint32_t)value);
636 tcp_mask.hdr.sent_seq = RTE_BE32(UINT32_MAX);
637 item.type = RTE_FLOW_ITEM_TYPE_TCP;
639 item.mask = &tcp_mask;
640 return flow_dv_convert_modify_action(&item, modify_tcp, resource,
641 MLX5_MODIFICATION_TYPE_ADD, error);
645 * Convert modify-header increment/decrement TCP Acknowledgment number
646 * to DV specification.
648 * @param[in,out] resource
649 * Pointer to the modify-header resource.
651 * Pointer to action specification.
653 * Pointer to the error structure.
656 * 0 on success, a negative errno value otherwise and rte_errno is set.
659 flow_dv_convert_action_modify_tcp_ack
660 (struct mlx5_flow_dv_modify_hdr_resource *resource,
661 const struct rte_flow_action *action,
662 struct rte_flow_error *error)
664 const rte_be32_t *conf = (const rte_be32_t *)(action->conf);
665 uint64_t value = rte_be_to_cpu_32(*conf);
666 struct rte_flow_item item;
667 struct rte_flow_item_tcp tcp;
668 struct rte_flow_item_tcp tcp_mask;
670 memset(&tcp, 0, sizeof(tcp));
671 memset(&tcp_mask, 0, sizeof(tcp_mask));
672 if (action->type == RTE_FLOW_ACTION_TYPE_DEC_TCP_ACK)
674 * The HW has no decrement operation, only increment operation.
675 * To simulate decrement X from Y using increment operation
676 * we need to add UINT32_MAX X times to Y.
677 * Each adding of UINT32_MAX decrements Y by 1.
680 tcp.hdr.recv_ack = rte_cpu_to_be_32((uint32_t)value);
681 tcp_mask.hdr.recv_ack = RTE_BE32(UINT32_MAX);
682 item.type = RTE_FLOW_ITEM_TYPE_TCP;
684 item.mask = &tcp_mask;
685 return flow_dv_convert_modify_action(&item, modify_tcp, resource,
686 MLX5_MODIFICATION_TYPE_ADD, error);
690 * Validate META item.
693 * Pointer to the rte_eth_dev structure.
695 * Item specification.
697 * Attributes of flow that includes this item.
699 * Pointer to error structure.
702 * 0 on success, a negative errno value otherwise and rte_errno is set.
705 flow_dv_validate_item_meta(struct rte_eth_dev *dev,
706 const struct rte_flow_item *item,
707 const struct rte_flow_attr *attr,
708 struct rte_flow_error *error)
710 const struct rte_flow_item_meta *spec = item->spec;
711 const struct rte_flow_item_meta *mask = item->mask;
712 const struct rte_flow_item_meta nic_mask = {
713 .data = RTE_BE32(UINT32_MAX)
716 uint64_t offloads = dev->data->dev_conf.txmode.offloads;
718 if (!(offloads & DEV_TX_OFFLOAD_MATCH_METADATA))
719 return rte_flow_error_set(error, EPERM,
720 RTE_FLOW_ERROR_TYPE_ITEM,
722 "match on metadata offload "
723 "configuration is off for this port");
725 return rte_flow_error_set(error, EINVAL,
726 RTE_FLOW_ERROR_TYPE_ITEM_SPEC,
728 "data cannot be empty");
730 return rte_flow_error_set(error, EINVAL,
731 RTE_FLOW_ERROR_TYPE_ITEM_SPEC,
733 "data cannot be zero");
735 mask = &rte_flow_item_meta_mask;
736 ret = mlx5_flow_item_acceptable(item, (const uint8_t *)mask,
737 (const uint8_t *)&nic_mask,
738 sizeof(struct rte_flow_item_meta),
743 return rte_flow_error_set(error, ENOTSUP,
744 RTE_FLOW_ERROR_TYPE_ATTR_INGRESS,
746 "pattern not supported for ingress");
751 * Validate vport item.
754 * Pointer to the rte_eth_dev structure.
756 * Item specification.
758 * Attributes of flow that includes this item.
759 * @param[in] item_flags
760 * Bit-fields that holds the items detected until now.
762 * Pointer to error structure.
765 * 0 on success, a negative errno value otherwise and rte_errno is set.
768 flow_dv_validate_item_port_id(struct rte_eth_dev *dev,
769 const struct rte_flow_item *item,
770 const struct rte_flow_attr *attr,
772 struct rte_flow_error *error)
774 const struct rte_flow_item_port_id *spec = item->spec;
775 const struct rte_flow_item_port_id *mask = item->mask;
776 const struct rte_flow_item_port_id switch_mask = {
779 uint16_t esw_domain_id;
780 uint16_t item_port_esw_domain_id;
784 return rte_flow_error_set(error, EINVAL,
785 RTE_FLOW_ERROR_TYPE_ITEM,
787 "match on port id is valid only"
788 " when transfer flag is enabled");
789 if (item_flags & MLX5_FLOW_ITEM_PORT_ID)
790 return rte_flow_error_set(error, ENOTSUP,
791 RTE_FLOW_ERROR_TYPE_ITEM, item,
792 "multiple source ports are not"
796 if (mask->id != 0xffffffff)
797 return rte_flow_error_set(error, ENOTSUP,
798 RTE_FLOW_ERROR_TYPE_ITEM_MASK,
800 "no support for partial mask on"
802 ret = mlx5_flow_item_acceptable
803 (item, (const uint8_t *)mask,
804 (const uint8_t *)&rte_flow_item_port_id_mask,
805 sizeof(struct rte_flow_item_port_id),
811 ret = mlx5_port_to_eswitch_info(spec->id, &item_port_esw_domain_id,
814 return rte_flow_error_set(error, -ret,
815 RTE_FLOW_ERROR_TYPE_ITEM_SPEC, spec,
816 "failed to obtain E-Switch info for"
818 ret = mlx5_port_to_eswitch_info(dev->data->port_id,
819 &esw_domain_id, NULL);
821 return rte_flow_error_set(error, -ret,
822 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
824 "failed to obtain E-Switch info");
825 if (item_port_esw_domain_id != esw_domain_id)
826 return rte_flow_error_set(error, -ret,
827 RTE_FLOW_ERROR_TYPE_ITEM_SPEC, spec,
828 "cannot match on a port from a"
829 " different E-Switch");
834 * Validate count action.
839 * Pointer to error structure.
842 * 0 on success, a negative errno value otherwise and rte_errno is set.
845 flow_dv_validate_action_count(struct rte_eth_dev *dev,
846 struct rte_flow_error *error)
848 struct mlx5_priv *priv = dev->data->dev_private;
850 if (!priv->config.devx)
852 #ifdef HAVE_IBV_FLOW_DEVX_COUNTERS
856 return rte_flow_error_set
858 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
860 "count action not supported");
864 * Validate the L2 encap action.
866 * @param[in] action_flags
867 * Holds the actions detected until now.
869 * Pointer to the encap action.
871 * Pointer to flow attributes
873 * Pointer to error structure.
876 * 0 on success, a negative errno value otherwise and rte_errno is set.
879 flow_dv_validate_action_l2_encap(uint64_t action_flags,
880 const struct rte_flow_action *action,
881 const struct rte_flow_attr *attr,
882 struct rte_flow_error *error)
885 return rte_flow_error_set(error, EINVAL,
886 RTE_FLOW_ERROR_TYPE_ACTION, action,
887 "configuration cannot be null");
888 if (action_flags & MLX5_FLOW_ACTION_DROP)
889 return rte_flow_error_set(error, EINVAL,
890 RTE_FLOW_ERROR_TYPE_ACTION, NULL,
891 "can't drop and encap in same flow");
892 if (action_flags & (MLX5_FLOW_ENCAP_ACTIONS | MLX5_FLOW_DECAP_ACTIONS))
893 return rte_flow_error_set(error, EINVAL,
894 RTE_FLOW_ERROR_TYPE_ACTION, NULL,
895 "can only have a single encap or"
896 " decap action in a flow");
897 if (!attr->transfer && attr->ingress)
898 return rte_flow_error_set(error, ENOTSUP,
899 RTE_FLOW_ERROR_TYPE_ATTR_INGRESS,
901 "encap action not supported for "
907 * Validate the L2 decap action.
909 * @param[in] action_flags
910 * Holds the actions detected until now.
912 * Pointer to flow attributes
914 * Pointer to error structure.
917 * 0 on success, a negative errno value otherwise and rte_errno is set.
920 flow_dv_validate_action_l2_decap(uint64_t action_flags,
921 const struct rte_flow_attr *attr,
922 struct rte_flow_error *error)
924 if (action_flags & MLX5_FLOW_ACTION_DROP)
925 return rte_flow_error_set(error, EINVAL,
926 RTE_FLOW_ERROR_TYPE_ACTION, NULL,
927 "can't drop and decap in same flow");
928 if (action_flags & (MLX5_FLOW_ENCAP_ACTIONS | MLX5_FLOW_DECAP_ACTIONS))
929 return rte_flow_error_set(error, EINVAL,
930 RTE_FLOW_ERROR_TYPE_ACTION, NULL,
931 "can only have a single encap or"
932 " decap action in a flow");
933 if (action_flags & MLX5_FLOW_MODIFY_HDR_ACTIONS)
934 return rte_flow_error_set(error, EINVAL,
935 RTE_FLOW_ERROR_TYPE_ACTION, NULL,
936 "can't have decap action after"
939 return rte_flow_error_set(error, ENOTSUP,
940 RTE_FLOW_ERROR_TYPE_ATTR_EGRESS,
942 "decap action not supported for "
948 * Validate the raw encap action.
950 * @param[in] action_flags
951 * Holds the actions detected until now.
953 * Pointer to the encap action.
955 * Pointer to flow attributes
957 * Pointer to error structure.
960 * 0 on success, a negative errno value otherwise and rte_errno is set.
963 flow_dv_validate_action_raw_encap(uint64_t action_flags,
964 const struct rte_flow_action *action,
965 const struct rte_flow_attr *attr,
966 struct rte_flow_error *error)
969 return rte_flow_error_set(error, EINVAL,
970 RTE_FLOW_ERROR_TYPE_ACTION, action,
971 "configuration cannot be null");
972 if (action_flags & MLX5_FLOW_ACTION_DROP)
973 return rte_flow_error_set(error, EINVAL,
974 RTE_FLOW_ERROR_TYPE_ACTION, NULL,
975 "can't drop and encap in same flow");
976 if (action_flags & MLX5_FLOW_ENCAP_ACTIONS)
977 return rte_flow_error_set(error, EINVAL,
978 RTE_FLOW_ERROR_TYPE_ACTION, NULL,
979 "can only have a single encap"
980 " action in a flow");
981 /* encap without preceding decap is not supported for ingress */
982 if (!attr->transfer && attr->ingress &&
983 !(action_flags & MLX5_FLOW_ACTION_RAW_DECAP))
984 return rte_flow_error_set(error, ENOTSUP,
985 RTE_FLOW_ERROR_TYPE_ATTR_INGRESS,
987 "encap action not supported for "
993 * Validate the raw decap action.
995 * @param[in] action_flags
996 * Holds the actions detected until now.
998 * Pointer to the encap action.
1000 * Pointer to flow attributes
1002 * Pointer to error structure.
1005 * 0 on success, a negative errno value otherwise and rte_errno is set.
1008 flow_dv_validate_action_raw_decap(uint64_t action_flags,
1009 const struct rte_flow_action *action,
1010 const struct rte_flow_attr *attr,
1011 struct rte_flow_error *error)
1013 if (action_flags & MLX5_FLOW_ACTION_DROP)
1014 return rte_flow_error_set(error, EINVAL,
1015 RTE_FLOW_ERROR_TYPE_ACTION, NULL,
1016 "can't drop and decap in same flow");
1017 if (action_flags & MLX5_FLOW_ENCAP_ACTIONS)
1018 return rte_flow_error_set(error, EINVAL,
1019 RTE_FLOW_ERROR_TYPE_ACTION, NULL,
1020 "can't have encap action before"
1022 if (action_flags & MLX5_FLOW_DECAP_ACTIONS)
1023 return rte_flow_error_set(error, EINVAL,
1024 RTE_FLOW_ERROR_TYPE_ACTION, NULL,
1025 "can only have a single decap"
1026 " action in a flow");
1027 if (action_flags & MLX5_FLOW_MODIFY_HDR_ACTIONS)
1028 return rte_flow_error_set(error, EINVAL,
1029 RTE_FLOW_ERROR_TYPE_ACTION, NULL,
1030 "can't have decap action after"
1032 /* decap action is valid on egress only if it is followed by encap */
1034 for (; action->type != RTE_FLOW_ACTION_TYPE_END &&
1035 action->type != RTE_FLOW_ACTION_TYPE_RAW_ENCAP;
1038 if (action->type != RTE_FLOW_ACTION_TYPE_RAW_ENCAP)
1039 return rte_flow_error_set
1041 RTE_FLOW_ERROR_TYPE_ATTR_EGRESS,
1042 NULL, "decap action not supported"
1049 * Find existing encap/decap resource or create and register a new one.
1051 * @param dev[in, out]
1052 * Pointer to rte_eth_dev structure.
1053 * @param[in, out] resource
1054 * Pointer to encap/decap resource.
1055 * @parm[in, out] dev_flow
1056 * Pointer to the dev_flow.
1058 * pointer to error structure.
1061 * 0 on success otherwise -errno and errno is set.
1064 flow_dv_encap_decap_resource_register
1065 (struct rte_eth_dev *dev,
1066 struct mlx5_flow_dv_encap_decap_resource *resource,
1067 struct mlx5_flow *dev_flow,
1068 struct rte_flow_error *error)
1070 struct mlx5_priv *priv = dev->data->dev_private;
1071 struct mlx5_ibv_shared *sh = priv->sh;
1072 struct mlx5_flow_dv_encap_decap_resource *cache_resource;
1073 struct rte_flow *flow = dev_flow->flow;
1074 struct mlx5dv_dr_domain *domain;
1076 resource->flags = flow->group ? 0 : 1;
1077 if (resource->ft_type == MLX5DV_FLOW_TABLE_TYPE_FDB)
1078 domain = sh->fdb_domain;
1079 else if (resource->ft_type == MLX5DV_FLOW_TABLE_TYPE_NIC_RX)
1080 domain = sh->rx_domain;
1082 domain = sh->tx_domain;
1084 /* Lookup a matching resource from cache. */
1085 LIST_FOREACH(cache_resource, &sh->encaps_decaps, next) {
1086 if (resource->reformat_type == cache_resource->reformat_type &&
1087 resource->ft_type == cache_resource->ft_type &&
1088 resource->flags == cache_resource->flags &&
1089 resource->size == cache_resource->size &&
1090 !memcmp((const void *)resource->buf,
1091 (const void *)cache_resource->buf,
1093 DRV_LOG(DEBUG, "encap/decap resource %p: refcnt %d++",
1094 (void *)cache_resource,
1095 rte_atomic32_read(&cache_resource->refcnt));
1096 rte_atomic32_inc(&cache_resource->refcnt);
1097 dev_flow->dv.encap_decap = cache_resource;
1101 /* Register new encap/decap resource. */
1102 cache_resource = rte_calloc(__func__, 1, sizeof(*cache_resource), 0);
1103 if (!cache_resource)
1104 return rte_flow_error_set(error, ENOMEM,
1105 RTE_FLOW_ERROR_TYPE_UNSPECIFIED, NULL,
1106 "cannot allocate resource memory");
1107 *cache_resource = *resource;
1108 cache_resource->verbs_action =
1109 mlx5_glue->dv_create_flow_action_packet_reformat
1110 (sh->ctx, cache_resource->reformat_type,
1111 cache_resource->ft_type, domain, cache_resource->flags,
1112 cache_resource->size,
1113 (cache_resource->size ? cache_resource->buf : NULL));
1114 if (!cache_resource->verbs_action) {
1115 rte_free(cache_resource);
1116 return rte_flow_error_set(error, ENOMEM,
1117 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
1118 NULL, "cannot create action");
1120 rte_atomic32_init(&cache_resource->refcnt);
1121 rte_atomic32_inc(&cache_resource->refcnt);
1122 LIST_INSERT_HEAD(&sh->encaps_decaps, cache_resource, next);
1123 dev_flow->dv.encap_decap = cache_resource;
1124 DRV_LOG(DEBUG, "new encap/decap resource %p: refcnt %d++",
1125 (void *)cache_resource,
1126 rte_atomic32_read(&cache_resource->refcnt));
1131 * Find existing table jump resource or create and register a new one.
1133 * @param dev[in, out]
1134 * Pointer to rte_eth_dev structure.
1135 * @param[in, out] resource
1136 * Pointer to jump table resource.
1137 * @parm[in, out] dev_flow
1138 * Pointer to the dev_flow.
1140 * pointer to error structure.
1143 * 0 on success otherwise -errno and errno is set.
1146 flow_dv_jump_tbl_resource_register
1147 (struct rte_eth_dev *dev,
1148 struct mlx5_flow_dv_jump_tbl_resource *resource,
1149 struct mlx5_flow *dev_flow,
1150 struct rte_flow_error *error)
1152 struct mlx5_priv *priv = dev->data->dev_private;
1153 struct mlx5_ibv_shared *sh = priv->sh;
1154 struct mlx5_flow_dv_jump_tbl_resource *cache_resource;
1156 /* Lookup a matching resource from cache. */
1157 LIST_FOREACH(cache_resource, &sh->jump_tbl, next) {
1158 if (resource->tbl == cache_resource->tbl) {
1159 DRV_LOG(DEBUG, "jump table resource resource %p: refcnt %d++",
1160 (void *)cache_resource,
1161 rte_atomic32_read(&cache_resource->refcnt));
1162 rte_atomic32_inc(&cache_resource->refcnt);
1163 dev_flow->dv.jump = cache_resource;
1167 /* Register new jump table resource. */
1168 cache_resource = rte_calloc(__func__, 1, sizeof(*cache_resource), 0);
1169 if (!cache_resource)
1170 return rte_flow_error_set(error, ENOMEM,
1171 RTE_FLOW_ERROR_TYPE_UNSPECIFIED, NULL,
1172 "cannot allocate resource memory");
1173 *cache_resource = *resource;
1174 cache_resource->action =
1175 mlx5_glue->dr_create_flow_action_dest_flow_tbl
1176 (resource->tbl->obj);
1177 if (!cache_resource->action) {
1178 rte_free(cache_resource);
1179 return rte_flow_error_set(error, ENOMEM,
1180 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
1181 NULL, "cannot create action");
1183 rte_atomic32_init(&cache_resource->refcnt);
1184 rte_atomic32_inc(&cache_resource->refcnt);
1185 LIST_INSERT_HEAD(&sh->jump_tbl, cache_resource, next);
1186 dev_flow->dv.jump = cache_resource;
1187 DRV_LOG(DEBUG, "new jump table resource %p: refcnt %d++",
1188 (void *)cache_resource,
1189 rte_atomic32_read(&cache_resource->refcnt));
1194 * Find existing table port ID resource or create and register a new one.
1196 * @param dev[in, out]
1197 * Pointer to rte_eth_dev structure.
1198 * @param[in, out] resource
1199 * Pointer to port ID action resource.
1200 * @parm[in, out] dev_flow
1201 * Pointer to the dev_flow.
1203 * pointer to error structure.
1206 * 0 on success otherwise -errno and errno is set.
1209 flow_dv_port_id_action_resource_register
1210 (struct rte_eth_dev *dev,
1211 struct mlx5_flow_dv_port_id_action_resource *resource,
1212 struct mlx5_flow *dev_flow,
1213 struct rte_flow_error *error)
1215 struct mlx5_priv *priv = dev->data->dev_private;
1216 struct mlx5_ibv_shared *sh = priv->sh;
1217 struct mlx5_flow_dv_port_id_action_resource *cache_resource;
1219 /* Lookup a matching resource from cache. */
1220 LIST_FOREACH(cache_resource, &sh->port_id_action_list, next) {
1221 if (resource->port_id == cache_resource->port_id) {
1222 DRV_LOG(DEBUG, "port id action resource resource %p: "
1224 (void *)cache_resource,
1225 rte_atomic32_read(&cache_resource->refcnt));
1226 rte_atomic32_inc(&cache_resource->refcnt);
1227 dev_flow->dv.port_id_action = cache_resource;
1231 /* Register new port id action resource. */
1232 cache_resource = rte_calloc(__func__, 1, sizeof(*cache_resource), 0);
1233 if (!cache_resource)
1234 return rte_flow_error_set(error, ENOMEM,
1235 RTE_FLOW_ERROR_TYPE_UNSPECIFIED, NULL,
1236 "cannot allocate resource memory");
1237 *cache_resource = *resource;
1238 cache_resource->action =
1239 mlx5_glue->dr_create_flow_action_dest_vport
1240 (priv->sh->fdb_domain, resource->port_id);
1241 if (!cache_resource->action) {
1242 rte_free(cache_resource);
1243 return rte_flow_error_set(error, ENOMEM,
1244 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
1245 NULL, "cannot create action");
1247 rte_atomic32_init(&cache_resource->refcnt);
1248 rte_atomic32_inc(&cache_resource->refcnt);
1249 LIST_INSERT_HEAD(&sh->port_id_action_list, cache_resource, next);
1250 dev_flow->dv.port_id_action = cache_resource;
1251 DRV_LOG(DEBUG, "new port id action resource %p: refcnt %d++",
1252 (void *)cache_resource,
1253 rte_atomic32_read(&cache_resource->refcnt));
1258 * Get the size of specific rte_flow_item_type
1260 * @param[in] item_type
1261 * Tested rte_flow_item_type.
1264 * sizeof struct item_type, 0 if void or irrelevant.
1267 flow_dv_get_item_len(const enum rte_flow_item_type item_type)
1271 switch (item_type) {
1272 case RTE_FLOW_ITEM_TYPE_ETH:
1273 retval = sizeof(struct rte_flow_item_eth);
1275 case RTE_FLOW_ITEM_TYPE_VLAN:
1276 retval = sizeof(struct rte_flow_item_vlan);
1278 case RTE_FLOW_ITEM_TYPE_IPV4:
1279 retval = sizeof(struct rte_flow_item_ipv4);
1281 case RTE_FLOW_ITEM_TYPE_IPV6:
1282 retval = sizeof(struct rte_flow_item_ipv6);
1284 case RTE_FLOW_ITEM_TYPE_UDP:
1285 retval = sizeof(struct rte_flow_item_udp);
1287 case RTE_FLOW_ITEM_TYPE_TCP:
1288 retval = sizeof(struct rte_flow_item_tcp);
1290 case RTE_FLOW_ITEM_TYPE_VXLAN:
1291 retval = sizeof(struct rte_flow_item_vxlan);
1293 case RTE_FLOW_ITEM_TYPE_GRE:
1294 retval = sizeof(struct rte_flow_item_gre);
1296 case RTE_FLOW_ITEM_TYPE_NVGRE:
1297 retval = sizeof(struct rte_flow_item_nvgre);
1299 case RTE_FLOW_ITEM_TYPE_VXLAN_GPE:
1300 retval = sizeof(struct rte_flow_item_vxlan_gpe);
1302 case RTE_FLOW_ITEM_TYPE_MPLS:
1303 retval = sizeof(struct rte_flow_item_mpls);
1305 case RTE_FLOW_ITEM_TYPE_VOID: /* Fall through. */
1313 #define MLX5_ENCAP_IPV4_VERSION 0x40
1314 #define MLX5_ENCAP_IPV4_IHL_MIN 0x05
1315 #define MLX5_ENCAP_IPV4_TTL_DEF 0x40
1316 #define MLX5_ENCAP_IPV6_VTC_FLOW 0x60000000
1317 #define MLX5_ENCAP_IPV6_HOP_LIMIT 0xff
1318 #define MLX5_ENCAP_VXLAN_FLAGS 0x08000000
1319 #define MLX5_ENCAP_VXLAN_GPE_FLAGS 0x04
1322 * Convert the encap action data from list of rte_flow_item to raw buffer
1325 * Pointer to rte_flow_item objects list.
1327 * Pointer to the output buffer.
1329 * Pointer to the output buffer size.
1331 * Pointer to the error structure.
1334 * 0 on success, a negative errno value otherwise and rte_errno is set.
1337 flow_dv_convert_encap_data(const struct rte_flow_item *items, uint8_t *buf,
1338 size_t *size, struct rte_flow_error *error)
1340 struct rte_ether_hdr *eth = NULL;
1341 struct rte_vlan_hdr *vlan = NULL;
1342 struct rte_ipv4_hdr *ipv4 = NULL;
1343 struct rte_ipv6_hdr *ipv6 = NULL;
1344 struct rte_udp_hdr *udp = NULL;
1345 struct rte_vxlan_hdr *vxlan = NULL;
1346 struct rte_vxlan_gpe_hdr *vxlan_gpe = NULL;
1347 struct rte_gre_hdr *gre = NULL;
1349 size_t temp_size = 0;
1352 return rte_flow_error_set(error, EINVAL,
1353 RTE_FLOW_ERROR_TYPE_ACTION,
1354 NULL, "invalid empty data");
1355 for (; items->type != RTE_FLOW_ITEM_TYPE_END; items++) {
1356 len = flow_dv_get_item_len(items->type);
1357 if (len + temp_size > MLX5_ENCAP_MAX_LEN)
1358 return rte_flow_error_set(error, EINVAL,
1359 RTE_FLOW_ERROR_TYPE_ACTION,
1360 (void *)items->type,
1361 "items total size is too big"
1362 " for encap action");
1363 rte_memcpy((void *)&buf[temp_size], items->spec, len);
1364 switch (items->type) {
1365 case RTE_FLOW_ITEM_TYPE_ETH:
1366 eth = (struct rte_ether_hdr *)&buf[temp_size];
1368 case RTE_FLOW_ITEM_TYPE_VLAN:
1369 vlan = (struct rte_vlan_hdr *)&buf[temp_size];
1371 return rte_flow_error_set(error, EINVAL,
1372 RTE_FLOW_ERROR_TYPE_ACTION,
1373 (void *)items->type,
1374 "eth header not found");
1375 if (!eth->ether_type)
1376 eth->ether_type = RTE_BE16(RTE_ETHER_TYPE_VLAN);
1378 case RTE_FLOW_ITEM_TYPE_IPV4:
1379 ipv4 = (struct rte_ipv4_hdr *)&buf[temp_size];
1381 return rte_flow_error_set(error, EINVAL,
1382 RTE_FLOW_ERROR_TYPE_ACTION,
1383 (void *)items->type,
1384 "neither eth nor vlan"
1386 if (vlan && !vlan->eth_proto)
1387 vlan->eth_proto = RTE_BE16(RTE_ETHER_TYPE_IPV4);
1388 else if (eth && !eth->ether_type)
1389 eth->ether_type = RTE_BE16(RTE_ETHER_TYPE_IPV4);
1390 if (!ipv4->version_ihl)
1391 ipv4->version_ihl = MLX5_ENCAP_IPV4_VERSION |
1392 MLX5_ENCAP_IPV4_IHL_MIN;
1393 if (!ipv4->time_to_live)
1394 ipv4->time_to_live = MLX5_ENCAP_IPV4_TTL_DEF;
1396 case RTE_FLOW_ITEM_TYPE_IPV6:
1397 ipv6 = (struct rte_ipv6_hdr *)&buf[temp_size];
1399 return rte_flow_error_set(error, EINVAL,
1400 RTE_FLOW_ERROR_TYPE_ACTION,
1401 (void *)items->type,
1402 "neither eth nor vlan"
1404 if (vlan && !vlan->eth_proto)
1405 vlan->eth_proto = RTE_BE16(RTE_ETHER_TYPE_IPV6);
1406 else if (eth && !eth->ether_type)
1407 eth->ether_type = RTE_BE16(RTE_ETHER_TYPE_IPV6);
1408 if (!ipv6->vtc_flow)
1410 RTE_BE32(MLX5_ENCAP_IPV6_VTC_FLOW);
1411 if (!ipv6->hop_limits)
1412 ipv6->hop_limits = MLX5_ENCAP_IPV6_HOP_LIMIT;
1414 case RTE_FLOW_ITEM_TYPE_UDP:
1415 udp = (struct rte_udp_hdr *)&buf[temp_size];
1417 return rte_flow_error_set(error, EINVAL,
1418 RTE_FLOW_ERROR_TYPE_ACTION,
1419 (void *)items->type,
1420 "ip header not found");
1421 if (ipv4 && !ipv4->next_proto_id)
1422 ipv4->next_proto_id = IPPROTO_UDP;
1423 else if (ipv6 && !ipv6->proto)
1424 ipv6->proto = IPPROTO_UDP;
1426 case RTE_FLOW_ITEM_TYPE_VXLAN:
1427 vxlan = (struct rte_vxlan_hdr *)&buf[temp_size];
1429 return rte_flow_error_set(error, EINVAL,
1430 RTE_FLOW_ERROR_TYPE_ACTION,
1431 (void *)items->type,
1432 "udp header not found");
1434 udp->dst_port = RTE_BE16(MLX5_UDP_PORT_VXLAN);
1435 if (!vxlan->vx_flags)
1437 RTE_BE32(MLX5_ENCAP_VXLAN_FLAGS);
1439 case RTE_FLOW_ITEM_TYPE_VXLAN_GPE:
1440 vxlan_gpe = (struct rte_vxlan_gpe_hdr *)&buf[temp_size];
1442 return rte_flow_error_set(error, EINVAL,
1443 RTE_FLOW_ERROR_TYPE_ACTION,
1444 (void *)items->type,
1445 "udp header not found");
1446 if (!vxlan_gpe->proto)
1447 return rte_flow_error_set(error, EINVAL,
1448 RTE_FLOW_ERROR_TYPE_ACTION,
1449 (void *)items->type,
1450 "next protocol not found");
1453 RTE_BE16(MLX5_UDP_PORT_VXLAN_GPE);
1454 if (!vxlan_gpe->vx_flags)
1455 vxlan_gpe->vx_flags =
1456 MLX5_ENCAP_VXLAN_GPE_FLAGS;
1458 case RTE_FLOW_ITEM_TYPE_GRE:
1459 case RTE_FLOW_ITEM_TYPE_NVGRE:
1460 gre = (struct rte_gre_hdr *)&buf[temp_size];
1462 return rte_flow_error_set(error, EINVAL,
1463 RTE_FLOW_ERROR_TYPE_ACTION,
1464 (void *)items->type,
1465 "next protocol not found");
1467 return rte_flow_error_set(error, EINVAL,
1468 RTE_FLOW_ERROR_TYPE_ACTION,
1469 (void *)items->type,
1470 "ip header not found");
1471 if (ipv4 && !ipv4->next_proto_id)
1472 ipv4->next_proto_id = IPPROTO_GRE;
1473 else if (ipv6 && !ipv6->proto)
1474 ipv6->proto = IPPROTO_GRE;
1476 case RTE_FLOW_ITEM_TYPE_VOID:
1479 return rte_flow_error_set(error, EINVAL,
1480 RTE_FLOW_ERROR_TYPE_ACTION,
1481 (void *)items->type,
1482 "unsupported item type");
1492 flow_dv_zero_encap_udp_csum(void *data, struct rte_flow_error *error)
1494 struct rte_ether_hdr *eth = NULL;
1495 struct rte_vlan_hdr *vlan = NULL;
1496 struct rte_ipv6_hdr *ipv6 = NULL;
1497 struct rte_udp_hdr *udp = NULL;
1501 eth = (struct rte_ether_hdr *)data;
1502 next_hdr = (char *)(eth + 1);
1503 proto = RTE_BE16(eth->ether_type);
1506 while (proto == RTE_ETHER_TYPE_VLAN || proto == RTE_ETHER_TYPE_QINQ) {
1507 next_hdr += sizeof(struct rte_vlan_hdr);
1508 vlan = (struct rte_vlan_hdr *)next_hdr;
1509 proto = RTE_BE16(vlan->eth_proto);
1512 /* HW calculates IPv4 csum. no need to proceed */
1513 if (proto == RTE_ETHER_TYPE_IPV4)
1516 /* non IPv4/IPv6 header. not supported */
1517 if (proto != RTE_ETHER_TYPE_IPV6) {
1518 return rte_flow_error_set(error, ENOTSUP,
1519 RTE_FLOW_ERROR_TYPE_ACTION,
1520 NULL, "Cannot offload non IPv4/IPv6");
1523 ipv6 = (struct rte_ipv6_hdr *)next_hdr;
1525 /* ignore non UDP */
1526 if (ipv6->proto != IPPROTO_UDP)
1529 udp = (struct rte_udp_hdr *)(ipv6 + 1);
1530 udp->dgram_cksum = 0;
1536 * Convert L2 encap action to DV specification.
1539 * Pointer to rte_eth_dev structure.
1541 * Pointer to action structure.
1542 * @param[in, out] dev_flow
1543 * Pointer to the mlx5_flow.
1544 * @param[in] transfer
1545 * Mark if the flow is E-Switch flow.
1547 * Pointer to the error structure.
1550 * 0 on success, a negative errno value otherwise and rte_errno is set.
1553 flow_dv_create_action_l2_encap(struct rte_eth_dev *dev,
1554 const struct rte_flow_action *action,
1555 struct mlx5_flow *dev_flow,
1557 struct rte_flow_error *error)
1559 const struct rte_flow_item *encap_data;
1560 const struct rte_flow_action_raw_encap *raw_encap_data;
1561 struct mlx5_flow_dv_encap_decap_resource res = {
1563 MLX5DV_FLOW_ACTION_PACKET_REFORMAT_TYPE_L2_TO_L2_TUNNEL,
1564 .ft_type = transfer ? MLX5DV_FLOW_TABLE_TYPE_FDB :
1565 MLX5DV_FLOW_TABLE_TYPE_NIC_TX,
1568 if (action->type == RTE_FLOW_ACTION_TYPE_RAW_ENCAP) {
1570 (const struct rte_flow_action_raw_encap *)action->conf;
1571 res.size = raw_encap_data->size;
1572 memcpy(res.buf, raw_encap_data->data, res.size);
1573 if (flow_dv_zero_encap_udp_csum(res.buf, error))
1576 if (action->type == RTE_FLOW_ACTION_TYPE_VXLAN_ENCAP)
1578 ((const struct rte_flow_action_vxlan_encap *)
1579 action->conf)->definition;
1582 ((const struct rte_flow_action_nvgre_encap *)
1583 action->conf)->definition;
1584 if (flow_dv_convert_encap_data(encap_data, res.buf,
1588 if (flow_dv_encap_decap_resource_register(dev, &res, dev_flow, error))
1589 return rte_flow_error_set(error, EINVAL,
1590 RTE_FLOW_ERROR_TYPE_ACTION,
1591 NULL, "can't create L2 encap action");
1596 * Convert L2 decap action to DV specification.
1599 * Pointer to rte_eth_dev structure.
1600 * @param[in, out] dev_flow
1601 * Pointer to the mlx5_flow.
1602 * @param[in] transfer
1603 * Mark if the flow is E-Switch flow.
1605 * Pointer to the error structure.
1608 * 0 on success, a negative errno value otherwise and rte_errno is set.
1611 flow_dv_create_action_l2_decap(struct rte_eth_dev *dev,
1612 struct mlx5_flow *dev_flow,
1614 struct rte_flow_error *error)
1616 struct mlx5_flow_dv_encap_decap_resource res = {
1619 MLX5DV_FLOW_ACTION_PACKET_REFORMAT_TYPE_L2_TUNNEL_TO_L2,
1620 .ft_type = transfer ? MLX5DV_FLOW_TABLE_TYPE_FDB :
1621 MLX5DV_FLOW_TABLE_TYPE_NIC_RX,
1624 if (flow_dv_encap_decap_resource_register(dev, &res, dev_flow, error))
1625 return rte_flow_error_set(error, EINVAL,
1626 RTE_FLOW_ERROR_TYPE_ACTION,
1627 NULL, "can't create L2 decap action");
1632 * Convert raw decap/encap (L3 tunnel) action to DV specification.
1635 * Pointer to rte_eth_dev structure.
1637 * Pointer to action structure.
1638 * @param[in, out] dev_flow
1639 * Pointer to the mlx5_flow.
1641 * Pointer to the flow attributes.
1643 * Pointer to the error structure.
1646 * 0 on success, a negative errno value otherwise and rte_errno is set.
1649 flow_dv_create_action_raw_encap(struct rte_eth_dev *dev,
1650 const struct rte_flow_action *action,
1651 struct mlx5_flow *dev_flow,
1652 const struct rte_flow_attr *attr,
1653 struct rte_flow_error *error)
1655 const struct rte_flow_action_raw_encap *encap_data;
1656 struct mlx5_flow_dv_encap_decap_resource res;
1658 encap_data = (const struct rte_flow_action_raw_encap *)action->conf;
1659 res.size = encap_data->size;
1660 memcpy(res.buf, encap_data->data, res.size);
1661 res.reformat_type = attr->egress ?
1662 MLX5DV_FLOW_ACTION_PACKET_REFORMAT_TYPE_L2_TO_L3_TUNNEL :
1663 MLX5DV_FLOW_ACTION_PACKET_REFORMAT_TYPE_L3_TUNNEL_TO_L2;
1665 res.ft_type = MLX5DV_FLOW_TABLE_TYPE_FDB;
1667 res.ft_type = attr->egress ? MLX5DV_FLOW_TABLE_TYPE_NIC_TX :
1668 MLX5DV_FLOW_TABLE_TYPE_NIC_RX;
1669 if (flow_dv_encap_decap_resource_register(dev, &res, dev_flow, error))
1670 return rte_flow_error_set(error, EINVAL,
1671 RTE_FLOW_ERROR_TYPE_ACTION,
1672 NULL, "can't create encap action");
1677 * Validate the modify-header actions.
1679 * @param[in] action_flags
1680 * Holds the actions detected until now.
1682 * Pointer to the modify action.
1684 * Pointer to error structure.
1687 * 0 on success, a negative errno value otherwise and rte_errno is set.
1690 flow_dv_validate_action_modify_hdr(const uint64_t action_flags,
1691 const struct rte_flow_action *action,
1692 struct rte_flow_error *error)
1694 if (action->type != RTE_FLOW_ACTION_TYPE_DEC_TTL && !action->conf)
1695 return rte_flow_error_set(error, EINVAL,
1696 RTE_FLOW_ERROR_TYPE_ACTION_CONF,
1697 NULL, "action configuration not set");
1698 if (action_flags & MLX5_FLOW_ENCAP_ACTIONS)
1699 return rte_flow_error_set(error, EINVAL,
1700 RTE_FLOW_ERROR_TYPE_ACTION, NULL,
1701 "can't have encap action before"
1707 * Validate the modify-header MAC address actions.
1709 * @param[in] action_flags
1710 * Holds the actions detected until now.
1712 * Pointer to the modify action.
1713 * @param[in] item_flags
1714 * Holds the items detected.
1716 * Pointer to error structure.
1719 * 0 on success, a negative errno value otherwise and rte_errno is set.
1722 flow_dv_validate_action_modify_mac(const uint64_t action_flags,
1723 const struct rte_flow_action *action,
1724 const uint64_t item_flags,
1725 struct rte_flow_error *error)
1729 ret = flow_dv_validate_action_modify_hdr(action_flags, action, error);
1731 if (!(item_flags & MLX5_FLOW_LAYER_L2))
1732 return rte_flow_error_set(error, EINVAL,
1733 RTE_FLOW_ERROR_TYPE_ACTION,
1735 "no L2 item in pattern");
1741 * Validate the modify-header IPv4 address actions.
1743 * @param[in] action_flags
1744 * Holds the actions detected until now.
1746 * Pointer to the modify action.
1747 * @param[in] item_flags
1748 * Holds the items detected.
1750 * Pointer to error structure.
1753 * 0 on success, a negative errno value otherwise and rte_errno is set.
1756 flow_dv_validate_action_modify_ipv4(const uint64_t action_flags,
1757 const struct rte_flow_action *action,
1758 const uint64_t item_flags,
1759 struct rte_flow_error *error)
1763 ret = flow_dv_validate_action_modify_hdr(action_flags, action, error);
1765 if (!(item_flags & MLX5_FLOW_LAYER_L3_IPV4))
1766 return rte_flow_error_set(error, EINVAL,
1767 RTE_FLOW_ERROR_TYPE_ACTION,
1769 "no ipv4 item in pattern");
1775 * Validate the modify-header IPv6 address actions.
1777 * @param[in] action_flags
1778 * Holds the actions detected until now.
1780 * Pointer to the modify action.
1781 * @param[in] item_flags
1782 * Holds the items detected.
1784 * Pointer to error structure.
1787 * 0 on success, a negative errno value otherwise and rte_errno is set.
1790 flow_dv_validate_action_modify_ipv6(const uint64_t action_flags,
1791 const struct rte_flow_action *action,
1792 const uint64_t item_flags,
1793 struct rte_flow_error *error)
1797 ret = flow_dv_validate_action_modify_hdr(action_flags, action, error);
1799 if (!(item_flags & MLX5_FLOW_LAYER_L3_IPV6))
1800 return rte_flow_error_set(error, EINVAL,
1801 RTE_FLOW_ERROR_TYPE_ACTION,
1803 "no ipv6 item in pattern");
1809 * Validate the modify-header TP actions.
1811 * @param[in] action_flags
1812 * Holds the actions detected until now.
1814 * Pointer to the modify action.
1815 * @param[in] item_flags
1816 * Holds the items detected.
1818 * Pointer to error structure.
1821 * 0 on success, a negative errno value otherwise and rte_errno is set.
1824 flow_dv_validate_action_modify_tp(const uint64_t action_flags,
1825 const struct rte_flow_action *action,
1826 const uint64_t item_flags,
1827 struct rte_flow_error *error)
1831 ret = flow_dv_validate_action_modify_hdr(action_flags, action, error);
1833 if (!(item_flags & MLX5_FLOW_LAYER_L4))
1834 return rte_flow_error_set(error, EINVAL,
1835 RTE_FLOW_ERROR_TYPE_ACTION,
1836 NULL, "no transport layer "
1843 * Validate the modify-header actions of increment/decrement
1844 * TCP Sequence-number.
1846 * @param[in] action_flags
1847 * Holds the actions detected until now.
1849 * Pointer to the modify action.
1850 * @param[in] item_flags
1851 * Holds the items detected.
1853 * Pointer to error structure.
1856 * 0 on success, a negative errno value otherwise and rte_errno is set.
1859 flow_dv_validate_action_modify_tcp_seq(const uint64_t action_flags,
1860 const struct rte_flow_action *action,
1861 const uint64_t item_flags,
1862 struct rte_flow_error *error)
1866 ret = flow_dv_validate_action_modify_hdr(action_flags, action, error);
1868 if (!(item_flags & MLX5_FLOW_LAYER_OUTER_L4_TCP))
1869 return rte_flow_error_set(error, EINVAL,
1870 RTE_FLOW_ERROR_TYPE_ACTION,
1871 NULL, "no TCP item in"
1873 if ((action->type == RTE_FLOW_ACTION_TYPE_INC_TCP_SEQ &&
1874 (action_flags & MLX5_FLOW_ACTION_DEC_TCP_SEQ)) ||
1875 (action->type == RTE_FLOW_ACTION_TYPE_DEC_TCP_SEQ &&
1876 (action_flags & MLX5_FLOW_ACTION_INC_TCP_SEQ)))
1877 return rte_flow_error_set(error, EINVAL,
1878 RTE_FLOW_ERROR_TYPE_ACTION,
1880 "cannot decrease and increase"
1881 " TCP sequence number"
1882 " at the same time");
1888 * Validate the modify-header actions of increment/decrement
1889 * TCP Acknowledgment number.
1891 * @param[in] action_flags
1892 * Holds the actions detected until now.
1894 * Pointer to the modify action.
1895 * @param[in] item_flags
1896 * Holds the items detected.
1898 * Pointer to error structure.
1901 * 0 on success, a negative errno value otherwise and rte_errno is set.
1904 flow_dv_validate_action_modify_tcp_ack(const uint64_t action_flags,
1905 const struct rte_flow_action *action,
1906 const uint64_t item_flags,
1907 struct rte_flow_error *error)
1911 ret = flow_dv_validate_action_modify_hdr(action_flags, action, error);
1913 if (!(item_flags & MLX5_FLOW_LAYER_OUTER_L4_TCP))
1914 return rte_flow_error_set(error, EINVAL,
1915 RTE_FLOW_ERROR_TYPE_ACTION,
1916 NULL, "no TCP item in"
1918 if ((action->type == RTE_FLOW_ACTION_TYPE_INC_TCP_ACK &&
1919 (action_flags & MLX5_FLOW_ACTION_DEC_TCP_ACK)) ||
1920 (action->type == RTE_FLOW_ACTION_TYPE_DEC_TCP_ACK &&
1921 (action_flags & MLX5_FLOW_ACTION_INC_TCP_ACK)))
1922 return rte_flow_error_set(error, EINVAL,
1923 RTE_FLOW_ERROR_TYPE_ACTION,
1925 "cannot decrease and increase"
1926 " TCP acknowledgment number"
1927 " at the same time");
1933 * Validate the modify-header TTL actions.
1935 * @param[in] action_flags
1936 * Holds the actions detected until now.
1938 * Pointer to the modify action.
1939 * @param[in] item_flags
1940 * Holds the items detected.
1942 * Pointer to error structure.
1945 * 0 on success, a negative errno value otherwise and rte_errno is set.
1948 flow_dv_validate_action_modify_ttl(const uint64_t action_flags,
1949 const struct rte_flow_action *action,
1950 const uint64_t item_flags,
1951 struct rte_flow_error *error)
1955 ret = flow_dv_validate_action_modify_hdr(action_flags, action, error);
1957 if (!(item_flags & MLX5_FLOW_LAYER_L3))
1958 return rte_flow_error_set(error, EINVAL,
1959 RTE_FLOW_ERROR_TYPE_ACTION,
1961 "no IP protocol in pattern");
1967 * Validate jump action.
1970 * Pointer to the modify action.
1972 * The group of the current flow.
1974 * Pointer to error structure.
1977 * 0 on success, a negative errno value otherwise and rte_errno is set.
1980 flow_dv_validate_action_jump(const struct rte_flow_action *action,
1982 struct rte_flow_error *error)
1984 if (action->type != RTE_FLOW_ACTION_TYPE_JUMP && !action->conf)
1985 return rte_flow_error_set(error, EINVAL,
1986 RTE_FLOW_ERROR_TYPE_ACTION_CONF,
1987 NULL, "action configuration not set");
1988 if (group >= ((const struct rte_flow_action_jump *)action->conf)->group)
1989 return rte_flow_error_set(error, EINVAL,
1990 RTE_FLOW_ERROR_TYPE_ACTION, NULL,
1991 "target group must be higher then"
1992 " the current flow group");
1997 * Validate the port_id action.
2000 * Pointer to rte_eth_dev structure.
2001 * @param[in] action_flags
2002 * Bit-fields that holds the actions detected until now.
2004 * Port_id RTE action structure.
2006 * Attributes of flow that includes this action.
2008 * Pointer to error structure.
2011 * 0 on success, a negative errno value otherwise and rte_errno is set.
2014 flow_dv_validate_action_port_id(struct rte_eth_dev *dev,
2015 uint64_t action_flags,
2016 const struct rte_flow_action *action,
2017 const struct rte_flow_attr *attr,
2018 struct rte_flow_error *error)
2020 const struct rte_flow_action_port_id *port_id;
2022 uint16_t esw_domain_id;
2023 uint16_t act_port_domain_id;
2026 if (!attr->transfer)
2027 return rte_flow_error_set(error, ENOTSUP,
2028 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
2030 "port id action is valid in transfer"
2032 if (!action || !action->conf)
2033 return rte_flow_error_set(error, ENOTSUP,
2034 RTE_FLOW_ERROR_TYPE_ACTION_CONF,
2036 "port id action parameters must be"
2038 if (action_flags & (MLX5_FLOW_FATE_ACTIONS |
2039 MLX5_FLOW_FATE_ESWITCH_ACTIONS))
2040 return rte_flow_error_set(error, EINVAL,
2041 RTE_FLOW_ERROR_TYPE_ACTION, NULL,
2042 "can have only one fate actions in"
2044 ret = mlx5_port_to_eswitch_info(dev->data->port_id,
2045 &esw_domain_id, NULL);
2047 return rte_flow_error_set(error, -ret,
2048 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
2050 "failed to obtain E-Switch info");
2051 port_id = action->conf;
2052 port = port_id->original ? dev->data->port_id : port_id->id;
2053 ret = mlx5_port_to_eswitch_info(port, &act_port_domain_id, NULL);
2055 return rte_flow_error_set
2057 RTE_FLOW_ERROR_TYPE_ACTION_CONF, port_id,
2058 "failed to obtain E-Switch port id for port");
2059 if (act_port_domain_id != esw_domain_id)
2060 return rte_flow_error_set
2062 RTE_FLOW_ERROR_TYPE_ACTION, NULL,
2063 "port does not belong to"
2064 " E-Switch being configured");
2069 * Find existing modify-header resource or create and register a new one.
2071 * @param dev[in, out]
2072 * Pointer to rte_eth_dev structure.
2073 * @param[in, out] resource
2074 * Pointer to modify-header resource.
2075 * @parm[in, out] dev_flow
2076 * Pointer to the dev_flow.
2078 * pointer to error structure.
2081 * 0 on success otherwise -errno and errno is set.
2084 flow_dv_modify_hdr_resource_register
2085 (struct rte_eth_dev *dev,
2086 struct mlx5_flow_dv_modify_hdr_resource *resource,
2087 struct mlx5_flow *dev_flow,
2088 struct rte_flow_error *error)
2090 struct mlx5_priv *priv = dev->data->dev_private;
2091 struct mlx5_ibv_shared *sh = priv->sh;
2092 struct mlx5_flow_dv_modify_hdr_resource *cache_resource;
2093 struct mlx5dv_dr_domain *ns;
2095 if (resource->ft_type == MLX5DV_FLOW_TABLE_TYPE_FDB)
2096 ns = sh->fdb_domain;
2097 else if (resource->ft_type == MLX5DV_FLOW_TABLE_TYPE_NIC_TX)
2102 dev_flow->flow->group ? 0 : MLX5DV_DR_ACTION_FLAGS_ROOT_LEVEL;
2103 /* Lookup a matching resource from cache. */
2104 LIST_FOREACH(cache_resource, &sh->modify_cmds, next) {
2105 if (resource->ft_type == cache_resource->ft_type &&
2106 resource->actions_num == cache_resource->actions_num &&
2107 resource->flags == cache_resource->flags &&
2108 !memcmp((const void *)resource->actions,
2109 (const void *)cache_resource->actions,
2110 (resource->actions_num *
2111 sizeof(resource->actions[0])))) {
2112 DRV_LOG(DEBUG, "modify-header resource %p: refcnt %d++",
2113 (void *)cache_resource,
2114 rte_atomic32_read(&cache_resource->refcnt));
2115 rte_atomic32_inc(&cache_resource->refcnt);
2116 dev_flow->dv.modify_hdr = cache_resource;
2120 /* Register new modify-header resource. */
2121 cache_resource = rte_calloc(__func__, 1, sizeof(*cache_resource), 0);
2122 if (!cache_resource)
2123 return rte_flow_error_set(error, ENOMEM,
2124 RTE_FLOW_ERROR_TYPE_UNSPECIFIED, NULL,
2125 "cannot allocate resource memory");
2126 *cache_resource = *resource;
2127 cache_resource->verbs_action =
2128 mlx5_glue->dv_create_flow_action_modify_header
2129 (sh->ctx, cache_resource->ft_type,
2130 ns, cache_resource->flags,
2131 cache_resource->actions_num *
2132 sizeof(cache_resource->actions[0]),
2133 (uint64_t *)cache_resource->actions);
2134 if (!cache_resource->verbs_action) {
2135 rte_free(cache_resource);
2136 return rte_flow_error_set(error, ENOMEM,
2137 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
2138 NULL, "cannot create action");
2140 rte_atomic32_init(&cache_resource->refcnt);
2141 rte_atomic32_inc(&cache_resource->refcnt);
2142 LIST_INSERT_HEAD(&sh->modify_cmds, cache_resource, next);
2143 dev_flow->dv.modify_hdr = cache_resource;
2144 DRV_LOG(DEBUG, "new modify-header resource %p: refcnt %d++",
2145 (void *)cache_resource,
2146 rte_atomic32_read(&cache_resource->refcnt));
2150 #define MLX5_CNT_CONTAINER_SIZE 64
2151 #define MLX5_CNT_CONTAINER(priv, batch) (&(priv)->sh->cmng.ccont[batch])
2154 * Get a pool by a counter.
2157 * Pointer to the counter.
2162 static struct mlx5_flow_counter_pool *
2163 flow_dv_counter_pool_get(struct mlx5_flow_counter *cnt)
2166 cnt -= cnt->dcs->id % MLX5_COUNTERS_PER_POOL;
2167 return (struct mlx5_flow_counter_pool *)cnt - 1;
2173 * Get a pool by devx counter ID.
2176 * Pointer to the counter container.
2178 * The counter devx ID.
2181 * The counter pool pointer if exists, NULL otherwise,
2183 static struct mlx5_flow_counter_pool *
2184 flow_dv_find_pool_by_id(struct mlx5_pools_container *cont, int id)
2186 struct mlx5_flow_counter_pool *pool;
2188 TAILQ_FOREACH(pool, &cont->pool_list, next) {
2189 int base = (pool->min_dcs->id / MLX5_COUNTERS_PER_POOL) *
2190 MLX5_COUNTERS_PER_POOL;
2192 if (id >= base && id < base + MLX5_COUNTERS_PER_POOL)
2199 * Allocate a new memory for the counter values wrapped by all the needed
2203 * Pointer to the Ethernet device structure.
2205 * The raw memory areas - each one for MLX5_COUNTERS_PER_POOL counters.
2208 * The new memory management pointer on success, otherwise NULL and rte_errno
2211 static struct mlx5_counter_stats_mem_mng *
2212 flow_dv_create_counter_stat_mem_mng(struct rte_eth_dev *dev, int raws_n)
2214 struct mlx5_ibv_shared *sh = ((struct mlx5_priv *)
2215 (dev->data->dev_private))->sh;
2216 struct mlx5dv_pd dv_pd;
2217 struct mlx5dv_obj dv_obj;
2218 struct mlx5_devx_mkey_attr mkey_attr;
2219 struct mlx5_counter_stats_mem_mng *mem_mng;
2220 volatile struct flow_counter_stats *raw_data;
2221 int size = (sizeof(struct flow_counter_stats) *
2222 MLX5_COUNTERS_PER_POOL +
2223 sizeof(struct mlx5_counter_stats_raw)) * raws_n +
2224 sizeof(struct mlx5_counter_stats_mem_mng);
2225 uint8_t *mem = rte_calloc(__func__, 1, size, sysconf(_SC_PAGESIZE));
2232 mem_mng = (struct mlx5_counter_stats_mem_mng *)(mem + size) - 1;
2233 size = sizeof(*raw_data) * MLX5_COUNTERS_PER_POOL * raws_n;
2234 mem_mng->umem = mlx5_glue->devx_umem_reg(sh->ctx, mem, size,
2235 IBV_ACCESS_LOCAL_WRITE);
2236 if (!mem_mng->umem) {
2241 dv_obj.pd.in = sh->pd;
2242 dv_obj.pd.out = &dv_pd;
2243 mlx5_glue->dv_init_obj(&dv_obj, MLX5DV_OBJ_PD);
2244 mkey_attr.addr = (uintptr_t)mem;
2245 mkey_attr.size = size;
2246 mkey_attr.umem_id = mem_mng->umem->umem_id;
2247 mkey_attr.pd = dv_pd.pdn;
2248 mem_mng->dm = mlx5_devx_cmd_mkey_create(sh->ctx, &mkey_attr);
2250 mlx5_glue->devx_umem_dereg(mem_mng->umem);
2255 mem_mng->raws = (struct mlx5_counter_stats_raw *)(mem + size);
2256 raw_data = (volatile struct flow_counter_stats *)mem;
2257 for (i = 0; i < raws_n; ++i) {
2258 mem_mng->raws[i].mem_mng = mem_mng;
2259 mem_mng->raws[i].data = raw_data + i * MLX5_COUNTERS_PER_POOL;
2261 LIST_INSERT_HEAD(&sh->cmng.mem_mngs, mem_mng, next);
2266 * Prepare a counter container.
2269 * Pointer to the Ethernet device structure.
2271 * Whether the pool is for counter that was allocated by batch command.
2274 * The container pointer on success, otherwise NULL and rte_errno is set.
2276 static struct mlx5_pools_container *
2277 flow_dv_container_prepare(struct rte_eth_dev *dev, uint32_t batch)
2279 struct mlx5_priv *priv = dev->data->dev_private;
2280 struct mlx5_pools_container *cont = MLX5_CNT_CONTAINER(priv, batch);
2281 struct mlx5_counter_stats_mem_mng *mem_mng;
2282 uint32_t size = MLX5_CNT_CONTAINER_SIZE;
2283 uint32_t mem_size = sizeof(struct mlx5_flow_counter_pool *) * size;
2285 cont->pools = rte_calloc(__func__, 1, mem_size, 0);
2290 mem_mng = flow_dv_create_counter_stat_mem_mng(dev, size);
2292 rte_free(cont->pools);
2296 TAILQ_INIT(&cont->pool_list);
2297 cont->init_mem_mng = mem_mng;
2302 * Query a devx flow counter.
2305 * Pointer to the Ethernet device structure.
2307 * Pointer to the flow counter.
2309 * The statistics value of packets.
2311 * The statistics value of bytes.
2314 * 0 on success, otherwise a negative errno value and rte_errno is set.
2317 _flow_dv_query_count(struct rte_eth_dev *dev __rte_unused,
2318 struct mlx5_flow_counter *cnt, uint64_t *pkts,
2321 struct mlx5_flow_counter_pool *pool =
2322 flow_dv_counter_pool_get(cnt);
2323 uint16_t offset = pool->min_dcs->id % MLX5_COUNTERS_PER_POOL;
2324 int ret = mlx5_devx_cmd_flow_counter_query
2325 (pool->min_dcs, 0, MLX5_COUNTERS_PER_POOL - offset, NULL,
2326 NULL, pool->raw->mem_mng->dm->id,
2327 (void *)(uintptr_t)(pool->raw->data +
2331 DRV_LOG(ERR, "Failed to trigger synchronous"
2332 " query for dcs ID %d\n",
2336 offset = cnt - &pool->counters_raw[0];
2337 *pkts = rte_be_to_cpu_64(pool->raw->data[offset].hits);
2338 *bytes = rte_be_to_cpu_64(pool->raw->data[offset].bytes);
2343 * Create and initialize a new counter pool.
2346 * Pointer to the Ethernet device structure.
2348 * The devX counter handle.
2350 * Whether the pool is for counter that was allocated by batch command.
2353 * A new pool pointer on success, NULL otherwise and rte_errno is set.
2355 static struct mlx5_flow_counter_pool *
2356 flow_dv_pool_create(struct rte_eth_dev *dev, struct mlx5_devx_obj *dcs,
2359 struct mlx5_priv *priv = dev->data->dev_private;
2360 struct mlx5_flow_counter_pool *pool;
2361 struct mlx5_pools_container *cont = MLX5_CNT_CONTAINER(priv, batch);
2365 cont = flow_dv_container_prepare(dev, batch);
2368 } else if (cont->n == cont->n_valid) {
2369 DRV_LOG(ERR, "No space in container to allocate a new pool\n");
2373 size = sizeof(*pool) + MLX5_COUNTERS_PER_POOL *
2374 sizeof(struct mlx5_flow_counter);
2375 pool = rte_calloc(__func__, 1, size, 0);
2380 pool->min_dcs = dcs;
2381 pool->raw = cont->init_mem_mng->raws + cont->n_valid;
2382 TAILQ_INIT(&pool->counters);
2383 TAILQ_INSERT_TAIL(&cont->pool_list, pool, next);
2384 cont->pools[cont->n_valid] = pool;
2390 * Prepare a new counter and/or a new counter pool.
2393 * Pointer to the Ethernet device structure.
2394 * @param[out] cnt_free
2395 * Where to put the pointer of a new counter.
2397 * Whether the pool is for counter that was allocated by batch command.
2400 * The free counter pool pointer and @p cnt_free is set on success,
2401 * NULL otherwise and rte_errno is set.
2403 static struct mlx5_flow_counter_pool *
2404 flow_dv_counter_pool_prepare(struct rte_eth_dev *dev,
2405 struct mlx5_flow_counter **cnt_free,
2408 struct mlx5_priv *priv = dev->data->dev_private;
2409 struct mlx5_flow_counter_pool *pool;
2410 struct mlx5_devx_obj *dcs = NULL;
2411 struct mlx5_flow_counter *cnt;
2415 /* bulk_bitmap must be 0 for single counter allocation. */
2416 dcs = mlx5_devx_cmd_flow_counter_alloc(priv->sh->ctx, 0);
2419 pool = flow_dv_find_pool_by_id(MLX5_CNT_CONTAINER(priv, batch),
2422 pool = flow_dv_pool_create(dev, dcs, batch);
2424 mlx5_devx_cmd_destroy(dcs);
2427 } else if (dcs->id < pool->min_dcs->id) {
2428 pool->min_dcs->id = dcs->id;
2430 cnt = &pool->counters_raw[dcs->id % MLX5_COUNTERS_PER_POOL];
2431 TAILQ_INSERT_HEAD(&pool->counters, cnt, next);
2436 /* bulk_bitmap is in 128 counters units. */
2437 if (priv->config.hca_attr.flow_counter_bulk_alloc_bitmap & 0x4)
2438 dcs = mlx5_devx_cmd_flow_counter_alloc(priv->sh->ctx, 0x4);
2440 rte_errno = ENODATA;
2443 pool = flow_dv_pool_create(dev, dcs, batch);
2445 mlx5_devx_cmd_destroy(dcs);
2448 for (i = 0; i < MLX5_COUNTERS_PER_POOL; ++i) {
2449 cnt = &pool->counters_raw[i];
2451 TAILQ_INSERT_HEAD(&pool->counters, cnt, next);
2453 *cnt_free = &pool->counters_raw[0];
2458 * Search for existed shared counter.
2461 * Pointer to the relevant counter pool container.
2463 * The shared counter ID to search.
2466 * NULL if not existed, otherwise pointer to the shared counter.
2468 static struct mlx5_flow_counter *
2469 flow_dv_counter_shared_search(struct mlx5_pools_container *cont,
2472 static struct mlx5_flow_counter *cnt;
2473 struct mlx5_flow_counter_pool *pool;
2476 TAILQ_FOREACH(pool, &cont->pool_list, next) {
2477 for (i = 0; i < MLX5_COUNTERS_PER_POOL; ++i) {
2478 cnt = &pool->counters_raw[i];
2479 if (cnt->ref_cnt && cnt->shared && cnt->id == id)
2487 * Allocate a flow counter.
2490 * Pointer to the Ethernet device structure.
2492 * Indicate if this counter is shared with other flows.
2494 * Counter identifier.
2496 * Counter flow group.
2499 * pointer to flow counter on success, NULL otherwise and rte_errno is set.
2501 static struct mlx5_flow_counter *
2502 flow_dv_counter_alloc(struct rte_eth_dev *dev, uint32_t shared, uint32_t id,
2505 struct mlx5_priv *priv = dev->data->dev_private;
2506 struct mlx5_flow_counter_pool *pool = NULL;
2507 struct mlx5_flow_counter *cnt_free = NULL;
2509 * Currently group 0 flow counter cannot be assigned to a flow if it is
2510 * not the first one in the batch counter allocation, so it is better
2511 * to allocate counters one by one for these flows in a separate
2513 * A counter can be shared between different groups so need to take
2514 * shared counters from the single container.
2516 uint32_t batch = (group && !shared) ? 1 : 0;
2517 struct mlx5_pools_container *cont = MLX5_CNT_CONTAINER(priv, batch);
2519 if (!priv->config.devx) {
2520 rte_errno = ENOTSUP;
2524 cnt_free = flow_dv_counter_shared_search(cont, id);
2526 if (cnt_free->ref_cnt + 1 == 0) {
2530 cnt_free->ref_cnt++;
2534 /* Pools which has a free counters are in the start. */
2535 pool = TAILQ_FIRST(&cont->pool_list);
2537 cnt_free = TAILQ_FIRST(&pool->counters);
2539 pool = flow_dv_counter_pool_prepare(dev, &cnt_free, batch);
2543 cnt_free->batch = batch;
2544 /* Create a DV counter action only in the first time usage. */
2545 if (!cnt_free->action) {
2547 struct mlx5_devx_obj *dcs;
2550 offset = cnt_free - &pool->counters_raw[0];
2551 dcs = pool->min_dcs;
2554 dcs = cnt_free->dcs;
2556 cnt_free->action = mlx5_glue->dv_create_flow_action_counter
2558 if (!cnt_free->action) {
2563 /* Update the counter reset values. */
2564 if (_flow_dv_query_count(dev, cnt_free, &cnt_free->hits,
2567 cnt_free->shared = shared;
2568 cnt_free->ref_cnt = 1;
2570 TAILQ_REMOVE(&pool->counters, cnt_free, next);
2571 if (TAILQ_EMPTY(&pool->counters)) {
2572 /* Move the pool to the end of the container pool list. */
2573 TAILQ_REMOVE(&cont->pool_list, pool, next);
2574 TAILQ_INSERT_TAIL(&cont->pool_list, pool, next);
2580 * Release a flow counter.
2583 * Pointer to the Ethernet device structure.
2584 * @param[in] counter
2585 * Pointer to the counter handler.
2588 flow_dv_counter_release(struct rte_eth_dev *dev __rte_unused,
2589 struct mlx5_flow_counter *counter)
2593 if (--counter->ref_cnt == 0) {
2594 struct mlx5_flow_counter_pool *pool =
2595 flow_dv_counter_pool_get(counter);
2597 /* Put the counter in the end - the earliest one. */
2598 TAILQ_INSERT_TAIL(&pool->counters, counter, next);
2603 * Verify the @p attributes will be correctly understood by the NIC and store
2604 * them in the @p flow if everything is correct.
2607 * Pointer to dev struct.
2608 * @param[in] attributes
2609 * Pointer to flow attributes
2611 * Pointer to error structure.
2614 * 0 on success, a negative errno value otherwise and rte_errno is set.
2617 flow_dv_validate_attributes(struct rte_eth_dev *dev,
2618 const struct rte_flow_attr *attributes,
2619 struct rte_flow_error *error)
2621 struct mlx5_priv *priv = dev->data->dev_private;
2622 uint32_t priority_max = priv->config.flow_prio - 1;
2624 #ifndef HAVE_MLX5DV_DR
2625 if (attributes->group)
2626 return rte_flow_error_set(error, ENOTSUP,
2627 RTE_FLOW_ERROR_TYPE_ATTR_GROUP,
2629 "groups is not supported");
2631 if (attributes->priority != MLX5_FLOW_PRIO_RSVD &&
2632 attributes->priority >= priority_max)
2633 return rte_flow_error_set(error, ENOTSUP,
2634 RTE_FLOW_ERROR_TYPE_ATTR_PRIORITY,
2636 "priority out of range");
2637 if (attributes->transfer) {
2638 if (!priv->config.dv_esw_en)
2639 return rte_flow_error_set
2641 RTE_FLOW_ERROR_TYPE_UNSPECIFIED, NULL,
2642 "E-Switch dr is not supported");
2643 if (!(priv->representor || priv->master))
2644 return rte_flow_error_set
2645 (error, EINVAL, RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
2646 NULL, "E-Switch configurationd can only be"
2647 " done by a master or a representor device");
2648 if (attributes->egress)
2649 return rte_flow_error_set
2651 RTE_FLOW_ERROR_TYPE_ATTR_EGRESS, attributes,
2652 "egress is not supported");
2653 if (attributes->group >= MLX5_MAX_TABLES_FDB)
2654 return rte_flow_error_set
2656 RTE_FLOW_ERROR_TYPE_ATTR_TRANSFER,
2657 NULL, "group must be smaller than "
2658 RTE_STR(MLX5_MAX_FDB_TABLES));
2660 if (!(attributes->egress ^ attributes->ingress))
2661 return rte_flow_error_set(error, ENOTSUP,
2662 RTE_FLOW_ERROR_TYPE_ATTR, NULL,
2663 "must specify exactly one of "
2664 "ingress or egress");
2669 * Internal validation function. For validating both actions and items.
2672 * Pointer to the rte_eth_dev structure.
2674 * Pointer to the flow attributes.
2676 * Pointer to the list of items.
2677 * @param[in] actions
2678 * Pointer to the list of actions.
2680 * Pointer to the error structure.
2683 * 0 on success, a negative errno value otherwise and rte_errno is set.
2686 flow_dv_validate(struct rte_eth_dev *dev, const struct rte_flow_attr *attr,
2687 const struct rte_flow_item items[],
2688 const struct rte_flow_action actions[],
2689 struct rte_flow_error *error)
2692 uint64_t action_flags = 0;
2693 uint64_t item_flags = 0;
2694 uint64_t last_item = 0;
2695 uint8_t next_protocol = 0xff;
2697 const struct rte_flow_item *gre_item = NULL;
2698 struct rte_flow_item_tcp nic_tcp_mask = {
2701 .src_port = RTE_BE16(UINT16_MAX),
2702 .dst_port = RTE_BE16(UINT16_MAX),
2708 ret = flow_dv_validate_attributes(dev, attr, error);
2711 for (; items->type != RTE_FLOW_ITEM_TYPE_END; items++) {
2712 int tunnel = !!(item_flags & MLX5_FLOW_LAYER_TUNNEL);
2713 switch (items->type) {
2714 case RTE_FLOW_ITEM_TYPE_VOID:
2716 case RTE_FLOW_ITEM_TYPE_PORT_ID:
2717 ret = flow_dv_validate_item_port_id
2718 (dev, items, attr, item_flags, error);
2721 last_item |= MLX5_FLOW_ITEM_PORT_ID;
2723 case RTE_FLOW_ITEM_TYPE_ETH:
2724 ret = mlx5_flow_validate_item_eth(items, item_flags,
2728 last_item = tunnel ? MLX5_FLOW_LAYER_INNER_L2 :
2729 MLX5_FLOW_LAYER_OUTER_L2;
2731 case RTE_FLOW_ITEM_TYPE_VLAN:
2732 ret = mlx5_flow_validate_item_vlan(items, item_flags,
2736 last_item = tunnel ? MLX5_FLOW_LAYER_INNER_VLAN :
2737 MLX5_FLOW_LAYER_OUTER_VLAN;
2739 case RTE_FLOW_ITEM_TYPE_IPV4:
2740 ret = mlx5_flow_validate_item_ipv4(items, item_flags,
2744 last_item = tunnel ? MLX5_FLOW_LAYER_INNER_L3_IPV4 :
2745 MLX5_FLOW_LAYER_OUTER_L3_IPV4;
2746 if (items->mask != NULL &&
2747 ((const struct rte_flow_item_ipv4 *)
2748 items->mask)->hdr.next_proto_id) {
2750 ((const struct rte_flow_item_ipv4 *)
2751 (items->spec))->hdr.next_proto_id;
2753 ((const struct rte_flow_item_ipv4 *)
2754 (items->mask))->hdr.next_proto_id;
2756 /* Reset for inner layer. */
2757 next_protocol = 0xff;
2759 mlx5_flow_tunnel_ip_check(items, &last_item);
2761 case RTE_FLOW_ITEM_TYPE_IPV6:
2762 ret = mlx5_flow_validate_item_ipv6(items, item_flags,
2766 last_item = tunnel ? MLX5_FLOW_LAYER_INNER_L3_IPV6 :
2767 MLX5_FLOW_LAYER_OUTER_L3_IPV6;
2768 if (items->mask != NULL &&
2769 ((const struct rte_flow_item_ipv6 *)
2770 items->mask)->hdr.proto) {
2772 ((const struct rte_flow_item_ipv6 *)
2773 items->spec)->hdr.proto;
2775 ((const struct rte_flow_item_ipv6 *)
2776 items->mask)->hdr.proto;
2778 /* Reset for inner layer. */
2779 next_protocol = 0xff;
2781 mlx5_flow_tunnel_ip_check(items, &last_item);
2783 case RTE_FLOW_ITEM_TYPE_TCP:
2784 ret = mlx5_flow_validate_item_tcp
2791 last_item = tunnel ? MLX5_FLOW_LAYER_INNER_L4_TCP :
2792 MLX5_FLOW_LAYER_OUTER_L4_TCP;
2794 case RTE_FLOW_ITEM_TYPE_UDP:
2795 ret = mlx5_flow_validate_item_udp(items, item_flags,
2800 last_item = tunnel ? MLX5_FLOW_LAYER_INNER_L4_UDP :
2801 MLX5_FLOW_LAYER_OUTER_L4_UDP;
2803 case RTE_FLOW_ITEM_TYPE_GRE:
2804 case RTE_FLOW_ITEM_TYPE_NVGRE:
2805 ret = mlx5_flow_validate_item_gre(items, item_flags,
2806 next_protocol, error);
2810 last_item = MLX5_FLOW_LAYER_GRE;
2812 case RTE_FLOW_ITEM_TYPE_GRE_KEY:
2813 ret = mlx5_flow_validate_item_gre_key
2814 (items, item_flags, gre_item, error);
2817 item_flags |= MLX5_FLOW_LAYER_GRE_KEY;
2819 case RTE_FLOW_ITEM_TYPE_VXLAN:
2820 ret = mlx5_flow_validate_item_vxlan(items, item_flags,
2824 last_item = MLX5_FLOW_LAYER_VXLAN;
2826 case RTE_FLOW_ITEM_TYPE_VXLAN_GPE:
2827 ret = mlx5_flow_validate_item_vxlan_gpe(items,
2832 last_item = MLX5_FLOW_LAYER_VXLAN_GPE;
2834 case RTE_FLOW_ITEM_TYPE_MPLS:
2835 ret = mlx5_flow_validate_item_mpls(dev, items,
2840 last_item = MLX5_FLOW_LAYER_MPLS;
2842 case RTE_FLOW_ITEM_TYPE_META:
2843 ret = flow_dv_validate_item_meta(dev, items, attr,
2847 last_item = MLX5_FLOW_ITEM_METADATA;
2849 case RTE_FLOW_ITEM_TYPE_ICMP:
2850 ret = mlx5_flow_validate_item_icmp(items, item_flags,
2855 item_flags |= MLX5_FLOW_LAYER_ICMP;
2857 case RTE_FLOW_ITEM_TYPE_ICMP6:
2858 ret = mlx5_flow_validate_item_icmp6(items, item_flags,
2863 item_flags |= MLX5_FLOW_LAYER_ICMP6;
2866 return rte_flow_error_set(error, ENOTSUP,
2867 RTE_FLOW_ERROR_TYPE_ITEM,
2868 NULL, "item not supported");
2870 item_flags |= last_item;
2872 for (; actions->type != RTE_FLOW_ACTION_TYPE_END; actions++) {
2873 if (actions_n == MLX5_DV_MAX_NUMBER_OF_ACTIONS)
2874 return rte_flow_error_set(error, ENOTSUP,
2875 RTE_FLOW_ERROR_TYPE_ACTION,
2876 actions, "too many actions");
2877 switch (actions->type) {
2878 case RTE_FLOW_ACTION_TYPE_VOID:
2880 case RTE_FLOW_ACTION_TYPE_PORT_ID:
2881 ret = flow_dv_validate_action_port_id(dev,
2888 action_flags |= MLX5_FLOW_ACTION_PORT_ID;
2891 case RTE_FLOW_ACTION_TYPE_FLAG:
2892 ret = mlx5_flow_validate_action_flag(action_flags,
2896 action_flags |= MLX5_FLOW_ACTION_FLAG;
2899 case RTE_FLOW_ACTION_TYPE_MARK:
2900 ret = mlx5_flow_validate_action_mark(actions,
2905 action_flags |= MLX5_FLOW_ACTION_MARK;
2908 case RTE_FLOW_ACTION_TYPE_DROP:
2909 ret = mlx5_flow_validate_action_drop(action_flags,
2913 action_flags |= MLX5_FLOW_ACTION_DROP;
2916 case RTE_FLOW_ACTION_TYPE_QUEUE:
2917 ret = mlx5_flow_validate_action_queue(actions,
2922 action_flags |= MLX5_FLOW_ACTION_QUEUE;
2925 case RTE_FLOW_ACTION_TYPE_RSS:
2926 ret = mlx5_flow_validate_action_rss(actions,
2932 action_flags |= MLX5_FLOW_ACTION_RSS;
2935 case RTE_FLOW_ACTION_TYPE_COUNT:
2936 ret = flow_dv_validate_action_count(dev, error);
2939 action_flags |= MLX5_FLOW_ACTION_COUNT;
2942 case RTE_FLOW_ACTION_TYPE_VXLAN_ENCAP:
2943 case RTE_FLOW_ACTION_TYPE_NVGRE_ENCAP:
2944 ret = flow_dv_validate_action_l2_encap(action_flags,
2949 action_flags |= actions->type ==
2950 RTE_FLOW_ACTION_TYPE_VXLAN_ENCAP ?
2951 MLX5_FLOW_ACTION_VXLAN_ENCAP :
2952 MLX5_FLOW_ACTION_NVGRE_ENCAP;
2955 case RTE_FLOW_ACTION_TYPE_VXLAN_DECAP:
2956 case RTE_FLOW_ACTION_TYPE_NVGRE_DECAP:
2957 ret = flow_dv_validate_action_l2_decap(action_flags,
2961 action_flags |= actions->type ==
2962 RTE_FLOW_ACTION_TYPE_VXLAN_DECAP ?
2963 MLX5_FLOW_ACTION_VXLAN_DECAP :
2964 MLX5_FLOW_ACTION_NVGRE_DECAP;
2967 case RTE_FLOW_ACTION_TYPE_RAW_ENCAP:
2968 ret = flow_dv_validate_action_raw_encap(action_flags,
2973 action_flags |= MLX5_FLOW_ACTION_RAW_ENCAP;
2976 case RTE_FLOW_ACTION_TYPE_RAW_DECAP:
2977 ret = flow_dv_validate_action_raw_decap(action_flags,
2982 action_flags |= MLX5_FLOW_ACTION_RAW_DECAP;
2985 case RTE_FLOW_ACTION_TYPE_SET_MAC_SRC:
2986 case RTE_FLOW_ACTION_TYPE_SET_MAC_DST:
2987 ret = flow_dv_validate_action_modify_mac(action_flags,
2993 /* Count all modify-header actions as one action. */
2994 if (!(action_flags & MLX5_FLOW_MODIFY_HDR_ACTIONS))
2996 action_flags |= actions->type ==
2997 RTE_FLOW_ACTION_TYPE_SET_MAC_SRC ?
2998 MLX5_FLOW_ACTION_SET_MAC_SRC :
2999 MLX5_FLOW_ACTION_SET_MAC_DST;
3002 case RTE_FLOW_ACTION_TYPE_SET_IPV4_SRC:
3003 case RTE_FLOW_ACTION_TYPE_SET_IPV4_DST:
3004 ret = flow_dv_validate_action_modify_ipv4(action_flags,
3010 /* Count all modify-header actions as one action. */
3011 if (!(action_flags & MLX5_FLOW_MODIFY_HDR_ACTIONS))
3013 action_flags |= actions->type ==
3014 RTE_FLOW_ACTION_TYPE_SET_IPV4_SRC ?
3015 MLX5_FLOW_ACTION_SET_IPV4_SRC :
3016 MLX5_FLOW_ACTION_SET_IPV4_DST;
3018 case RTE_FLOW_ACTION_TYPE_SET_IPV6_SRC:
3019 case RTE_FLOW_ACTION_TYPE_SET_IPV6_DST:
3020 ret = flow_dv_validate_action_modify_ipv6(action_flags,
3026 /* Count all modify-header actions as one action. */
3027 if (!(action_flags & MLX5_FLOW_MODIFY_HDR_ACTIONS))
3029 action_flags |= actions->type ==
3030 RTE_FLOW_ACTION_TYPE_SET_IPV6_SRC ?
3031 MLX5_FLOW_ACTION_SET_IPV6_SRC :
3032 MLX5_FLOW_ACTION_SET_IPV6_DST;
3034 case RTE_FLOW_ACTION_TYPE_SET_TP_SRC:
3035 case RTE_FLOW_ACTION_TYPE_SET_TP_DST:
3036 ret = flow_dv_validate_action_modify_tp(action_flags,
3042 /* Count all modify-header actions as one action. */
3043 if (!(action_flags & MLX5_FLOW_MODIFY_HDR_ACTIONS))
3045 action_flags |= actions->type ==
3046 RTE_FLOW_ACTION_TYPE_SET_TP_SRC ?
3047 MLX5_FLOW_ACTION_SET_TP_SRC :
3048 MLX5_FLOW_ACTION_SET_TP_DST;
3050 case RTE_FLOW_ACTION_TYPE_DEC_TTL:
3051 case RTE_FLOW_ACTION_TYPE_SET_TTL:
3052 ret = flow_dv_validate_action_modify_ttl(action_flags,
3058 /* Count all modify-header actions as one action. */
3059 if (!(action_flags & MLX5_FLOW_MODIFY_HDR_ACTIONS))
3061 action_flags |= actions->type ==
3062 RTE_FLOW_ACTION_TYPE_SET_TTL ?
3063 MLX5_FLOW_ACTION_SET_TTL :
3064 MLX5_FLOW_ACTION_DEC_TTL;
3066 case RTE_FLOW_ACTION_TYPE_JUMP:
3067 ret = flow_dv_validate_action_jump(actions,
3068 attr->group, error);
3072 action_flags |= MLX5_FLOW_ACTION_JUMP;
3074 case RTE_FLOW_ACTION_TYPE_INC_TCP_SEQ:
3075 case RTE_FLOW_ACTION_TYPE_DEC_TCP_SEQ:
3076 ret = flow_dv_validate_action_modify_tcp_seq
3083 /* Count all modify-header actions as one action. */
3084 if (!(action_flags & MLX5_FLOW_MODIFY_HDR_ACTIONS))
3086 action_flags |= actions->type ==
3087 RTE_FLOW_ACTION_TYPE_INC_TCP_SEQ ?
3088 MLX5_FLOW_ACTION_INC_TCP_SEQ :
3089 MLX5_FLOW_ACTION_DEC_TCP_SEQ;
3091 case RTE_FLOW_ACTION_TYPE_INC_TCP_ACK:
3092 case RTE_FLOW_ACTION_TYPE_DEC_TCP_ACK:
3093 ret = flow_dv_validate_action_modify_tcp_ack
3100 /* Count all modify-header actions as one action. */
3101 if (!(action_flags & MLX5_FLOW_MODIFY_HDR_ACTIONS))
3103 action_flags |= actions->type ==
3104 RTE_FLOW_ACTION_TYPE_INC_TCP_ACK ?
3105 MLX5_FLOW_ACTION_INC_TCP_ACK :
3106 MLX5_FLOW_ACTION_DEC_TCP_ACK;
3109 return rte_flow_error_set(error, ENOTSUP,
3110 RTE_FLOW_ERROR_TYPE_ACTION,
3112 "action not supported");
3115 /* Eswitch has few restrictions on using items and actions */
3116 if (attr->transfer) {
3117 if (action_flags & MLX5_FLOW_ACTION_FLAG)
3118 return rte_flow_error_set(error, ENOTSUP,
3119 RTE_FLOW_ERROR_TYPE_ACTION,
3121 "unsupported action FLAG");
3122 if (action_flags & MLX5_FLOW_ACTION_MARK)
3123 return rte_flow_error_set(error, ENOTSUP,
3124 RTE_FLOW_ERROR_TYPE_ACTION,
3126 "unsupported action MARK");
3127 if (action_flags & MLX5_FLOW_ACTION_QUEUE)
3128 return rte_flow_error_set(error, ENOTSUP,
3129 RTE_FLOW_ERROR_TYPE_ACTION,
3131 "unsupported action QUEUE");
3132 if (action_flags & MLX5_FLOW_ACTION_RSS)
3133 return rte_flow_error_set(error, ENOTSUP,
3134 RTE_FLOW_ERROR_TYPE_ACTION,
3136 "unsupported action RSS");
3137 if (!(action_flags & MLX5_FLOW_FATE_ESWITCH_ACTIONS))
3138 return rte_flow_error_set(error, EINVAL,
3139 RTE_FLOW_ERROR_TYPE_ACTION,
3141 "no fate action is found");
3143 if (!(action_flags & MLX5_FLOW_FATE_ACTIONS) && attr->ingress)
3144 return rte_flow_error_set(error, EINVAL,
3145 RTE_FLOW_ERROR_TYPE_ACTION,
3147 "no fate action is found");
3153 * Internal preparation function. Allocates the DV flow size,
3154 * this size is constant.
3157 * Pointer to the flow attributes.
3159 * Pointer to the list of items.
3160 * @param[in] actions
3161 * Pointer to the list of actions.
3163 * Pointer to the error structure.
3166 * Pointer to mlx5_flow object on success,
3167 * otherwise NULL and rte_errno is set.
3169 static struct mlx5_flow *
3170 flow_dv_prepare(const struct rte_flow_attr *attr __rte_unused,
3171 const struct rte_flow_item items[] __rte_unused,
3172 const struct rte_flow_action actions[] __rte_unused,
3173 struct rte_flow_error *error)
3175 uint32_t size = sizeof(struct mlx5_flow);
3176 struct mlx5_flow *flow;
3178 flow = rte_calloc(__func__, 1, size, 0);
3180 rte_flow_error_set(error, ENOMEM,
3181 RTE_FLOW_ERROR_TYPE_UNSPECIFIED, NULL,
3182 "not enough memory to create flow");
3185 flow->dv.value.size = MLX5_ST_SZ_BYTES(fte_match_param);
3191 * Sanity check for match mask and value. Similar to check_valid_spec() in
3192 * kernel driver. If unmasked bit is present in value, it returns failure.
3195 * pointer to match mask buffer.
3196 * @param match_value
3197 * pointer to match value buffer.
3200 * 0 if valid, -EINVAL otherwise.
3203 flow_dv_check_valid_spec(void *match_mask, void *match_value)
3205 uint8_t *m = match_mask;
3206 uint8_t *v = match_value;
3209 for (i = 0; i < MLX5_ST_SZ_BYTES(fte_match_param); ++i) {
3212 "match_value differs from match_criteria"
3213 " %p[%u] != %p[%u]",
3214 match_value, i, match_mask, i);
3223 * Add Ethernet item to matcher and to the value.
3225 * @param[in, out] matcher
3227 * @param[in, out] key
3228 * Flow matcher value.
3230 * Flow pattern to translate.
3232 * Item is inner pattern.
3235 flow_dv_translate_item_eth(void *matcher, void *key,
3236 const struct rte_flow_item *item, int inner)
3238 const struct rte_flow_item_eth *eth_m = item->mask;
3239 const struct rte_flow_item_eth *eth_v = item->spec;
3240 const struct rte_flow_item_eth nic_mask = {
3241 .dst.addr_bytes = "\xff\xff\xff\xff\xff\xff",
3242 .src.addr_bytes = "\xff\xff\xff\xff\xff\xff",
3243 .type = RTE_BE16(0xffff),
3255 headers_m = MLX5_ADDR_OF(fte_match_param, matcher,
3257 headers_v = MLX5_ADDR_OF(fte_match_param, key, inner_headers);
3259 headers_m = MLX5_ADDR_OF(fte_match_param, matcher,
3261 headers_v = MLX5_ADDR_OF(fte_match_param, key, outer_headers);
3263 memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_m, dmac_47_16),
3264 ð_m->dst, sizeof(eth_m->dst));
3265 /* The value must be in the range of the mask. */
3266 l24_v = MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v, dmac_47_16);
3267 for (i = 0; i < sizeof(eth_m->dst); ++i)
3268 l24_v[i] = eth_m->dst.addr_bytes[i] & eth_v->dst.addr_bytes[i];
3269 memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_m, smac_47_16),
3270 ð_m->src, sizeof(eth_m->src));
3271 l24_v = MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v, smac_47_16);
3272 /* The value must be in the range of the mask. */
3273 for (i = 0; i < sizeof(eth_m->dst); ++i)
3274 l24_v[i] = eth_m->src.addr_bytes[i] & eth_v->src.addr_bytes[i];
3275 MLX5_SET(fte_match_set_lyr_2_4, headers_m, ethertype,
3276 rte_be_to_cpu_16(eth_m->type));
3277 l24_v = MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v, ethertype);
3278 *(uint16_t *)(l24_v) = eth_m->type & eth_v->type;
3282 * Add VLAN item to matcher and to the value.
3284 * @param[in, out] matcher
3286 * @param[in, out] key
3287 * Flow matcher value.
3289 * Flow pattern to translate.
3291 * Item is inner pattern.
3294 flow_dv_translate_item_vlan(void *matcher, void *key,
3295 const struct rte_flow_item *item,
3298 const struct rte_flow_item_vlan *vlan_m = item->mask;
3299 const struct rte_flow_item_vlan *vlan_v = item->spec;
3300 const struct rte_flow_item_vlan nic_mask = {
3301 .tci = RTE_BE16(0x0fff),
3302 .inner_type = RTE_BE16(0xffff),
3314 headers_m = MLX5_ADDR_OF(fte_match_param, matcher,
3316 headers_v = MLX5_ADDR_OF(fte_match_param, key, inner_headers);
3318 headers_m = MLX5_ADDR_OF(fte_match_param, matcher,
3320 headers_v = MLX5_ADDR_OF(fte_match_param, key, outer_headers);
3322 tci_m = rte_be_to_cpu_16(vlan_m->tci);
3323 tci_v = rte_be_to_cpu_16(vlan_m->tci & vlan_v->tci);
3324 MLX5_SET(fte_match_set_lyr_2_4, headers_m, cvlan_tag, 1);
3325 MLX5_SET(fte_match_set_lyr_2_4, headers_v, cvlan_tag, 1);
3326 MLX5_SET(fte_match_set_lyr_2_4, headers_m, first_vid, tci_m);
3327 MLX5_SET(fte_match_set_lyr_2_4, headers_v, first_vid, tci_v);
3328 MLX5_SET(fte_match_set_lyr_2_4, headers_m, first_cfi, tci_m >> 12);
3329 MLX5_SET(fte_match_set_lyr_2_4, headers_v, first_cfi, tci_v >> 12);
3330 MLX5_SET(fte_match_set_lyr_2_4, headers_m, first_prio, tci_m >> 13);
3331 MLX5_SET(fte_match_set_lyr_2_4, headers_v, first_prio, tci_v >> 13);
3335 * Add IPV4 item to matcher and to the value.
3337 * @param[in, out] matcher
3339 * @param[in, out] key
3340 * Flow matcher value.
3342 * Flow pattern to translate.
3344 * Item is inner pattern.
3346 * The group to insert the rule.
3349 flow_dv_translate_item_ipv4(void *matcher, void *key,
3350 const struct rte_flow_item *item,
3351 int inner, uint32_t group)
3353 const struct rte_flow_item_ipv4 *ipv4_m = item->mask;
3354 const struct rte_flow_item_ipv4 *ipv4_v = item->spec;
3355 const struct rte_flow_item_ipv4 nic_mask = {
3357 .src_addr = RTE_BE32(0xffffffff),
3358 .dst_addr = RTE_BE32(0xffffffff),
3359 .type_of_service = 0xff,
3360 .next_proto_id = 0xff,
3370 headers_m = MLX5_ADDR_OF(fte_match_param, matcher,
3372 headers_v = MLX5_ADDR_OF(fte_match_param, key, inner_headers);
3374 headers_m = MLX5_ADDR_OF(fte_match_param, matcher,
3376 headers_v = MLX5_ADDR_OF(fte_match_param, key, outer_headers);
3379 MLX5_SET(fte_match_set_lyr_2_4, headers_m, ip_version, 0xf);
3381 MLX5_SET(fte_match_set_lyr_2_4, headers_m, ip_version, 0x4);
3382 MLX5_SET(fte_match_set_lyr_2_4, headers_v, ip_version, 4);
3387 l24_m = MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_m,
3388 dst_ipv4_dst_ipv6.ipv4_layout.ipv4);
3389 l24_v = MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
3390 dst_ipv4_dst_ipv6.ipv4_layout.ipv4);
3391 *(uint32_t *)l24_m = ipv4_m->hdr.dst_addr;
3392 *(uint32_t *)l24_v = ipv4_m->hdr.dst_addr & ipv4_v->hdr.dst_addr;
3393 l24_m = MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_m,
3394 src_ipv4_src_ipv6.ipv4_layout.ipv4);
3395 l24_v = MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
3396 src_ipv4_src_ipv6.ipv4_layout.ipv4);
3397 *(uint32_t *)l24_m = ipv4_m->hdr.src_addr;
3398 *(uint32_t *)l24_v = ipv4_m->hdr.src_addr & ipv4_v->hdr.src_addr;
3399 tos = ipv4_m->hdr.type_of_service & ipv4_v->hdr.type_of_service;
3400 MLX5_SET(fte_match_set_lyr_2_4, headers_m, ip_ecn,
3401 ipv4_m->hdr.type_of_service);
3402 MLX5_SET(fte_match_set_lyr_2_4, headers_v, ip_ecn, tos);
3403 MLX5_SET(fte_match_set_lyr_2_4, headers_m, ip_dscp,
3404 ipv4_m->hdr.type_of_service >> 2);
3405 MLX5_SET(fte_match_set_lyr_2_4, headers_v, ip_dscp, tos >> 2);
3406 MLX5_SET(fte_match_set_lyr_2_4, headers_m, ip_protocol,
3407 ipv4_m->hdr.next_proto_id);
3408 MLX5_SET(fte_match_set_lyr_2_4, headers_v, ip_protocol,
3409 ipv4_v->hdr.next_proto_id & ipv4_m->hdr.next_proto_id);
3413 * Add IPV6 item to matcher and to the value.
3415 * @param[in, out] matcher
3417 * @param[in, out] key
3418 * Flow matcher value.
3420 * Flow pattern to translate.
3422 * Item is inner pattern.
3424 * The group to insert the rule.
3427 flow_dv_translate_item_ipv6(void *matcher, void *key,
3428 const struct rte_flow_item *item,
3429 int inner, uint32_t group)
3431 const struct rte_flow_item_ipv6 *ipv6_m = item->mask;
3432 const struct rte_flow_item_ipv6 *ipv6_v = item->spec;
3433 const struct rte_flow_item_ipv6 nic_mask = {
3436 "\xff\xff\xff\xff\xff\xff\xff\xff"
3437 "\xff\xff\xff\xff\xff\xff\xff\xff",
3439 "\xff\xff\xff\xff\xff\xff\xff\xff"
3440 "\xff\xff\xff\xff\xff\xff\xff\xff",
3441 .vtc_flow = RTE_BE32(0xffffffff),
3448 void *misc_m = MLX5_ADDR_OF(fte_match_param, matcher, misc_parameters);
3449 void *misc_v = MLX5_ADDR_OF(fte_match_param, key, misc_parameters);
3458 headers_m = MLX5_ADDR_OF(fte_match_param, matcher,
3460 headers_v = MLX5_ADDR_OF(fte_match_param, key, inner_headers);
3462 headers_m = MLX5_ADDR_OF(fte_match_param, matcher,
3464 headers_v = MLX5_ADDR_OF(fte_match_param, key, outer_headers);
3467 MLX5_SET(fte_match_set_lyr_2_4, headers_m, ip_version, 0xf);
3469 MLX5_SET(fte_match_set_lyr_2_4, headers_m, ip_version, 0x6);
3470 MLX5_SET(fte_match_set_lyr_2_4, headers_v, ip_version, 6);
3475 size = sizeof(ipv6_m->hdr.dst_addr);
3476 l24_m = MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_m,
3477 dst_ipv4_dst_ipv6.ipv6_layout.ipv6);
3478 l24_v = MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
3479 dst_ipv4_dst_ipv6.ipv6_layout.ipv6);
3480 memcpy(l24_m, ipv6_m->hdr.dst_addr, size);
3481 for (i = 0; i < size; ++i)
3482 l24_v[i] = l24_m[i] & ipv6_v->hdr.dst_addr[i];
3483 l24_m = MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_m,
3484 src_ipv4_src_ipv6.ipv6_layout.ipv6);
3485 l24_v = MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
3486 src_ipv4_src_ipv6.ipv6_layout.ipv6);
3487 memcpy(l24_m, ipv6_m->hdr.src_addr, size);
3488 for (i = 0; i < size; ++i)
3489 l24_v[i] = l24_m[i] & ipv6_v->hdr.src_addr[i];
3491 vtc_m = rte_be_to_cpu_32(ipv6_m->hdr.vtc_flow);
3492 vtc_v = rte_be_to_cpu_32(ipv6_m->hdr.vtc_flow & ipv6_v->hdr.vtc_flow);
3493 MLX5_SET(fte_match_set_lyr_2_4, headers_m, ip_ecn, vtc_m >> 20);
3494 MLX5_SET(fte_match_set_lyr_2_4, headers_v, ip_ecn, vtc_v >> 20);
3495 MLX5_SET(fte_match_set_lyr_2_4, headers_m, ip_dscp, vtc_m >> 22);
3496 MLX5_SET(fte_match_set_lyr_2_4, headers_v, ip_dscp, vtc_v >> 22);
3499 MLX5_SET(fte_match_set_misc, misc_m, inner_ipv6_flow_label,
3501 MLX5_SET(fte_match_set_misc, misc_v, inner_ipv6_flow_label,
3504 MLX5_SET(fte_match_set_misc, misc_m, outer_ipv6_flow_label,
3506 MLX5_SET(fte_match_set_misc, misc_v, outer_ipv6_flow_label,
3510 MLX5_SET(fte_match_set_lyr_2_4, headers_m, ip_protocol,
3512 MLX5_SET(fte_match_set_lyr_2_4, headers_v, ip_protocol,
3513 ipv6_v->hdr.proto & ipv6_m->hdr.proto);
3517 * Add TCP item to matcher and to the value.
3519 * @param[in, out] matcher
3521 * @param[in, out] key
3522 * Flow matcher value.
3524 * Flow pattern to translate.
3526 * Item is inner pattern.
3529 flow_dv_translate_item_tcp(void *matcher, void *key,
3530 const struct rte_flow_item *item,
3533 const struct rte_flow_item_tcp *tcp_m = item->mask;
3534 const struct rte_flow_item_tcp *tcp_v = item->spec;
3539 headers_m = MLX5_ADDR_OF(fte_match_param, matcher,
3541 headers_v = MLX5_ADDR_OF(fte_match_param, key, inner_headers);
3543 headers_m = MLX5_ADDR_OF(fte_match_param, matcher,
3545 headers_v = MLX5_ADDR_OF(fte_match_param, key, outer_headers);
3547 MLX5_SET(fte_match_set_lyr_2_4, headers_m, ip_protocol, 0xff);
3548 MLX5_SET(fte_match_set_lyr_2_4, headers_v, ip_protocol, IPPROTO_TCP);
3552 tcp_m = &rte_flow_item_tcp_mask;
3553 MLX5_SET(fte_match_set_lyr_2_4, headers_m, tcp_sport,
3554 rte_be_to_cpu_16(tcp_m->hdr.src_port));
3555 MLX5_SET(fte_match_set_lyr_2_4, headers_v, tcp_sport,
3556 rte_be_to_cpu_16(tcp_v->hdr.src_port & tcp_m->hdr.src_port));
3557 MLX5_SET(fte_match_set_lyr_2_4, headers_m, tcp_dport,
3558 rte_be_to_cpu_16(tcp_m->hdr.dst_port));
3559 MLX5_SET(fte_match_set_lyr_2_4, headers_v, tcp_dport,
3560 rte_be_to_cpu_16(tcp_v->hdr.dst_port & tcp_m->hdr.dst_port));
3561 MLX5_SET(fte_match_set_lyr_2_4, headers_m, tcp_flags,
3562 tcp_m->hdr.tcp_flags);
3563 MLX5_SET(fte_match_set_lyr_2_4, headers_v, tcp_flags,
3564 (tcp_v->hdr.tcp_flags & tcp_m->hdr.tcp_flags));
3568 * Add UDP item to matcher and to the value.
3570 * @param[in, out] matcher
3572 * @param[in, out] key
3573 * Flow matcher value.
3575 * Flow pattern to translate.
3577 * Item is inner pattern.
3580 flow_dv_translate_item_udp(void *matcher, void *key,
3581 const struct rte_flow_item *item,
3584 const struct rte_flow_item_udp *udp_m = item->mask;
3585 const struct rte_flow_item_udp *udp_v = item->spec;
3590 headers_m = MLX5_ADDR_OF(fte_match_param, matcher,
3592 headers_v = MLX5_ADDR_OF(fte_match_param, key, inner_headers);
3594 headers_m = MLX5_ADDR_OF(fte_match_param, matcher,
3596 headers_v = MLX5_ADDR_OF(fte_match_param, key, outer_headers);
3598 MLX5_SET(fte_match_set_lyr_2_4, headers_m, ip_protocol, 0xff);
3599 MLX5_SET(fte_match_set_lyr_2_4, headers_v, ip_protocol, IPPROTO_UDP);
3603 udp_m = &rte_flow_item_udp_mask;
3604 MLX5_SET(fte_match_set_lyr_2_4, headers_m, udp_sport,
3605 rte_be_to_cpu_16(udp_m->hdr.src_port));
3606 MLX5_SET(fte_match_set_lyr_2_4, headers_v, udp_sport,
3607 rte_be_to_cpu_16(udp_v->hdr.src_port & udp_m->hdr.src_port));
3608 MLX5_SET(fte_match_set_lyr_2_4, headers_m, udp_dport,
3609 rte_be_to_cpu_16(udp_m->hdr.dst_port));
3610 MLX5_SET(fte_match_set_lyr_2_4, headers_v, udp_dport,
3611 rte_be_to_cpu_16(udp_v->hdr.dst_port & udp_m->hdr.dst_port));
3615 * Add GRE optional Key item to matcher and to the value.
3617 * @param[in, out] matcher
3619 * @param[in, out] key
3620 * Flow matcher value.
3622 * Flow pattern to translate.
3624 * Item is inner pattern.
3627 flow_dv_translate_item_gre_key(void *matcher, void *key,
3628 const struct rte_flow_item *item)
3630 const rte_be32_t *key_m = item->mask;
3631 const rte_be32_t *key_v = item->spec;
3632 void *misc_m = MLX5_ADDR_OF(fte_match_param, matcher, misc_parameters);
3633 void *misc_v = MLX5_ADDR_OF(fte_match_param, key, misc_parameters);
3634 rte_be32_t gre_key_default_mask = RTE_BE32(UINT32_MAX);
3639 key_m = &gre_key_default_mask;
3640 /* GRE K bit must be on and should already be validated */
3641 MLX5_SET(fte_match_set_misc, misc_m, gre_k_present, 1);
3642 MLX5_SET(fte_match_set_misc, misc_v, gre_k_present, 1);
3643 MLX5_SET(fte_match_set_misc, misc_m, gre_key_h,
3644 rte_be_to_cpu_32(*key_m) >> 8);
3645 MLX5_SET(fte_match_set_misc, misc_v, gre_key_h,
3646 rte_be_to_cpu_32((*key_v) & (*key_m)) >> 8);
3647 MLX5_SET(fte_match_set_misc, misc_m, gre_key_l,
3648 rte_be_to_cpu_32(*key_m) & 0xFF);
3649 MLX5_SET(fte_match_set_misc, misc_v, gre_key_l,
3650 rte_be_to_cpu_32((*key_v) & (*key_m)) & 0xFF);
3654 * Add GRE item to matcher and to the value.
3656 * @param[in, out] matcher
3658 * @param[in, out] key
3659 * Flow matcher value.
3661 * Flow pattern to translate.
3663 * Item is inner pattern.
3666 flow_dv_translate_item_gre(void *matcher, void *key,
3667 const struct rte_flow_item *item,
3670 const struct rte_flow_item_gre *gre_m = item->mask;
3671 const struct rte_flow_item_gre *gre_v = item->spec;
3674 void *misc_m = MLX5_ADDR_OF(fte_match_param, matcher, misc_parameters);
3675 void *misc_v = MLX5_ADDR_OF(fte_match_param, key, misc_parameters);
3682 uint16_t s_present:1;
3683 uint16_t k_present:1;
3684 uint16_t rsvd_bit1:1;
3685 uint16_t c_present:1;
3689 } gre_crks_rsvd0_ver_m, gre_crks_rsvd0_ver_v;
3692 headers_m = MLX5_ADDR_OF(fte_match_param, matcher,
3694 headers_v = MLX5_ADDR_OF(fte_match_param, key, inner_headers);
3696 headers_m = MLX5_ADDR_OF(fte_match_param, matcher,
3698 headers_v = MLX5_ADDR_OF(fte_match_param, key, outer_headers);
3700 MLX5_SET(fte_match_set_lyr_2_4, headers_m, ip_protocol, 0xff);
3701 MLX5_SET(fte_match_set_lyr_2_4, headers_v, ip_protocol, IPPROTO_GRE);
3705 gre_m = &rte_flow_item_gre_mask;
3706 MLX5_SET(fte_match_set_misc, misc_m, gre_protocol,
3707 rte_be_to_cpu_16(gre_m->protocol));
3708 MLX5_SET(fte_match_set_misc, misc_v, gre_protocol,
3709 rte_be_to_cpu_16(gre_v->protocol & gre_m->protocol));
3710 gre_crks_rsvd0_ver_m.value = rte_be_to_cpu_16(gre_m->c_rsvd0_ver);
3711 gre_crks_rsvd0_ver_v.value = rte_be_to_cpu_16(gre_v->c_rsvd0_ver);
3712 MLX5_SET(fte_match_set_misc, misc_m, gre_c_present,
3713 gre_crks_rsvd0_ver_m.c_present);
3714 MLX5_SET(fte_match_set_misc, misc_v, gre_c_present,
3715 gre_crks_rsvd0_ver_v.c_present &
3716 gre_crks_rsvd0_ver_m.c_present);
3717 MLX5_SET(fte_match_set_misc, misc_m, gre_k_present,
3718 gre_crks_rsvd0_ver_m.k_present);
3719 MLX5_SET(fte_match_set_misc, misc_v, gre_k_present,
3720 gre_crks_rsvd0_ver_v.k_present &
3721 gre_crks_rsvd0_ver_m.k_present);
3722 MLX5_SET(fte_match_set_misc, misc_m, gre_s_present,
3723 gre_crks_rsvd0_ver_m.s_present);
3724 MLX5_SET(fte_match_set_misc, misc_v, gre_s_present,
3725 gre_crks_rsvd0_ver_v.s_present &
3726 gre_crks_rsvd0_ver_m.s_present);
3730 * Add NVGRE item to matcher and to the value.
3732 * @param[in, out] matcher
3734 * @param[in, out] key
3735 * Flow matcher value.
3737 * Flow pattern to translate.
3739 * Item is inner pattern.
3742 flow_dv_translate_item_nvgre(void *matcher, void *key,
3743 const struct rte_flow_item *item,
3746 const struct rte_flow_item_nvgre *nvgre_m = item->mask;
3747 const struct rte_flow_item_nvgre *nvgre_v = item->spec;
3748 void *misc_m = MLX5_ADDR_OF(fte_match_param, matcher, misc_parameters);
3749 void *misc_v = MLX5_ADDR_OF(fte_match_param, key, misc_parameters);
3750 const char *tni_flow_id_m = (const char *)nvgre_m->tni;
3751 const char *tni_flow_id_v = (const char *)nvgre_v->tni;
3757 flow_dv_translate_item_gre(matcher, key, item, inner);
3761 nvgre_m = &rte_flow_item_nvgre_mask;
3762 size = sizeof(nvgre_m->tni) + sizeof(nvgre_m->flow_id);
3763 gre_key_m = MLX5_ADDR_OF(fte_match_set_misc, misc_m, gre_key_h);
3764 gre_key_v = MLX5_ADDR_OF(fte_match_set_misc, misc_v, gre_key_h);
3765 memcpy(gre_key_m, tni_flow_id_m, size);
3766 for (i = 0; i < size; ++i)
3767 gre_key_v[i] = gre_key_m[i] & tni_flow_id_v[i];
3771 * Add VXLAN item to matcher and to the value.
3773 * @param[in, out] matcher
3775 * @param[in, out] key
3776 * Flow matcher value.
3778 * Flow pattern to translate.
3780 * Item is inner pattern.
3783 flow_dv_translate_item_vxlan(void *matcher, void *key,
3784 const struct rte_flow_item *item,
3787 const struct rte_flow_item_vxlan *vxlan_m = item->mask;
3788 const struct rte_flow_item_vxlan *vxlan_v = item->spec;
3791 void *misc_m = MLX5_ADDR_OF(fte_match_param, matcher, misc_parameters);
3792 void *misc_v = MLX5_ADDR_OF(fte_match_param, key, misc_parameters);
3800 headers_m = MLX5_ADDR_OF(fte_match_param, matcher,
3802 headers_v = MLX5_ADDR_OF(fte_match_param, key, inner_headers);
3804 headers_m = MLX5_ADDR_OF(fte_match_param, matcher,
3806 headers_v = MLX5_ADDR_OF(fte_match_param, key, outer_headers);
3808 dport = item->type == RTE_FLOW_ITEM_TYPE_VXLAN ?
3809 MLX5_UDP_PORT_VXLAN : MLX5_UDP_PORT_VXLAN_GPE;
3810 if (!MLX5_GET16(fte_match_set_lyr_2_4, headers_v, udp_dport)) {
3811 MLX5_SET(fte_match_set_lyr_2_4, headers_m, udp_dport, 0xFFFF);
3812 MLX5_SET(fte_match_set_lyr_2_4, headers_v, udp_dport, dport);
3817 vxlan_m = &rte_flow_item_vxlan_mask;
3818 size = sizeof(vxlan_m->vni);
3819 vni_m = MLX5_ADDR_OF(fte_match_set_misc, misc_m, vxlan_vni);
3820 vni_v = MLX5_ADDR_OF(fte_match_set_misc, misc_v, vxlan_vni);
3821 memcpy(vni_m, vxlan_m->vni, size);
3822 for (i = 0; i < size; ++i)
3823 vni_v[i] = vni_m[i] & vxlan_v->vni[i];
3827 * Add MPLS item to matcher and to the value.
3829 * @param[in, out] matcher
3831 * @param[in, out] key
3832 * Flow matcher value.
3834 * Flow pattern to translate.
3835 * @param[in] prev_layer
3836 * The protocol layer indicated in previous item.
3838 * Item is inner pattern.
3841 flow_dv_translate_item_mpls(void *matcher, void *key,
3842 const struct rte_flow_item *item,
3843 uint64_t prev_layer,
3846 const uint32_t *in_mpls_m = item->mask;
3847 const uint32_t *in_mpls_v = item->spec;
3848 uint32_t *out_mpls_m = 0;
3849 uint32_t *out_mpls_v = 0;
3850 void *misc_m = MLX5_ADDR_OF(fte_match_param, matcher, misc_parameters);
3851 void *misc_v = MLX5_ADDR_OF(fte_match_param, key, misc_parameters);
3852 void *misc2_m = MLX5_ADDR_OF(fte_match_param, matcher,
3854 void *misc2_v = MLX5_ADDR_OF(fte_match_param, key, misc_parameters_2);
3855 void *headers_m = MLX5_ADDR_OF(fte_match_param, matcher, outer_headers);
3856 void *headers_v = MLX5_ADDR_OF(fte_match_param, key, outer_headers);
3858 switch (prev_layer) {
3859 case MLX5_FLOW_LAYER_OUTER_L4_UDP:
3860 MLX5_SET(fte_match_set_lyr_2_4, headers_m, udp_dport, 0xffff);
3861 MLX5_SET(fte_match_set_lyr_2_4, headers_v, udp_dport,
3862 MLX5_UDP_PORT_MPLS);
3864 case MLX5_FLOW_LAYER_GRE:
3865 MLX5_SET(fte_match_set_misc, misc_m, gre_protocol, 0xffff);
3866 MLX5_SET(fte_match_set_misc, misc_v, gre_protocol,
3867 RTE_ETHER_TYPE_MPLS);
3870 MLX5_SET(fte_match_set_lyr_2_4, headers_m, ip_protocol, 0xff);
3871 MLX5_SET(fte_match_set_lyr_2_4, headers_v, ip_protocol,
3878 in_mpls_m = (const uint32_t *)&rte_flow_item_mpls_mask;
3879 switch (prev_layer) {
3880 case MLX5_FLOW_LAYER_OUTER_L4_UDP:
3882 (uint32_t *)MLX5_ADDR_OF(fte_match_set_misc2, misc2_m,
3883 outer_first_mpls_over_udp);
3885 (uint32_t *)MLX5_ADDR_OF(fte_match_set_misc2, misc2_v,
3886 outer_first_mpls_over_udp);
3888 case MLX5_FLOW_LAYER_GRE:
3890 (uint32_t *)MLX5_ADDR_OF(fte_match_set_misc2, misc2_m,
3891 outer_first_mpls_over_gre);
3893 (uint32_t *)MLX5_ADDR_OF(fte_match_set_misc2, misc2_v,
3894 outer_first_mpls_over_gre);
3897 /* Inner MPLS not over GRE is not supported. */
3900 (uint32_t *)MLX5_ADDR_OF(fte_match_set_misc2,
3904 (uint32_t *)MLX5_ADDR_OF(fte_match_set_misc2,
3910 if (out_mpls_m && out_mpls_v) {
3911 *out_mpls_m = *in_mpls_m;
3912 *out_mpls_v = *in_mpls_v & *in_mpls_m;
3917 * Add META item to matcher
3919 * @param[in, out] matcher
3921 * @param[in, out] key
3922 * Flow matcher value.
3924 * Flow pattern to translate.
3926 * Item is inner pattern.
3929 flow_dv_translate_item_meta(void *matcher, void *key,
3930 const struct rte_flow_item *item)
3932 const struct rte_flow_item_meta *meta_m;
3933 const struct rte_flow_item_meta *meta_v;
3935 MLX5_ADDR_OF(fte_match_param, matcher, misc_parameters_2);
3937 MLX5_ADDR_OF(fte_match_param, key, misc_parameters_2);
3939 meta_m = (const void *)item->mask;
3941 meta_m = &rte_flow_item_meta_mask;
3942 meta_v = (const void *)item->spec;
3944 MLX5_SET(fte_match_set_misc2, misc2_m, metadata_reg_a,
3945 rte_be_to_cpu_32(meta_m->data));
3946 MLX5_SET(fte_match_set_misc2, misc2_v, metadata_reg_a,
3947 rte_be_to_cpu_32(meta_v->data & meta_m->data));
3952 * Add source vport match to the specified matcher.
3954 * @param[in, out] matcher
3956 * @param[in, out] key
3957 * Flow matcher value.
3959 * Source vport value to match
3964 flow_dv_translate_item_source_vport(void *matcher, void *key,
3965 int16_t port, uint16_t mask)
3967 void *misc_m = MLX5_ADDR_OF(fte_match_param, matcher, misc_parameters);
3968 void *misc_v = MLX5_ADDR_OF(fte_match_param, key, misc_parameters);
3970 MLX5_SET(fte_match_set_misc, misc_m, source_port, mask);
3971 MLX5_SET(fte_match_set_misc, misc_v, source_port, port);
3975 * Translate port-id item to eswitch match on port-id.
3978 * The devich to configure through.
3979 * @param[in, out] matcher
3981 * @param[in, out] key
3982 * Flow matcher value.
3984 * Flow pattern to translate.
3987 * 0 on success, a negative errno value otherwise.
3990 flow_dv_translate_item_port_id(struct rte_eth_dev *dev, void *matcher,
3991 void *key, const struct rte_flow_item *item)
3993 const struct rte_flow_item_port_id *pid_m = item ? item->mask : NULL;
3994 const struct rte_flow_item_port_id *pid_v = item ? item->spec : NULL;
3995 uint16_t mask, val, id;
3998 mask = pid_m ? pid_m->id : 0xffff;
3999 id = pid_v ? pid_v->id : dev->data->port_id;
4000 ret = mlx5_port_to_eswitch_info(id, NULL, &val);
4003 flow_dv_translate_item_source_vport(matcher, key, val, mask);
4008 * Add ICMP6 item to matcher and to the value.
4010 * @param[in, out] matcher
4012 * @param[in, out] key
4013 * Flow matcher value.
4015 * Flow pattern to translate.
4017 * Item is inner pattern.
4020 flow_dv_translate_item_icmp6(void *matcher, void *key,
4021 const struct rte_flow_item *item,
4024 const struct rte_flow_item_icmp6 *icmp6_m = item->mask;
4025 const struct rte_flow_item_icmp6 *icmp6_v = item->spec;
4028 void *misc3_m = MLX5_ADDR_OF(fte_match_param, matcher,
4030 void *misc3_v = MLX5_ADDR_OF(fte_match_param, key, misc_parameters_3);
4032 headers_m = MLX5_ADDR_OF(fte_match_param, matcher,
4034 headers_v = MLX5_ADDR_OF(fte_match_param, key, inner_headers);
4036 headers_m = MLX5_ADDR_OF(fte_match_param, matcher,
4038 headers_v = MLX5_ADDR_OF(fte_match_param, key, outer_headers);
4040 MLX5_SET(fte_match_set_lyr_2_4, headers_m, ip_protocol, 0xFF);
4041 MLX5_SET(fte_match_set_lyr_2_4, headers_v, ip_protocol, IPPROTO_ICMPV6);
4045 icmp6_m = &rte_flow_item_icmp6_mask;
4046 MLX5_SET(fte_match_set_misc3, misc3_m, icmpv6_type, icmp6_m->type);
4047 MLX5_SET(fte_match_set_misc3, misc3_v, icmpv6_type,
4048 icmp6_v->type & icmp6_m->type);
4049 MLX5_SET(fte_match_set_misc3, misc3_m, icmpv6_code, icmp6_m->code);
4050 MLX5_SET(fte_match_set_misc3, misc3_v, icmpv6_code,
4051 icmp6_v->code & icmp6_m->code);
4055 * Add ICMP item to matcher and to the value.
4057 * @param[in, out] matcher
4059 * @param[in, out] key
4060 * Flow matcher value.
4062 * Flow pattern to translate.
4064 * Item is inner pattern.
4067 flow_dv_translate_item_icmp(void *matcher, void *key,
4068 const struct rte_flow_item *item,
4071 const struct rte_flow_item_icmp *icmp_m = item->mask;
4072 const struct rte_flow_item_icmp *icmp_v = item->spec;
4075 void *misc3_m = MLX5_ADDR_OF(fte_match_param, matcher,
4077 void *misc3_v = MLX5_ADDR_OF(fte_match_param, key, misc_parameters_3);
4079 headers_m = MLX5_ADDR_OF(fte_match_param, matcher,
4081 headers_v = MLX5_ADDR_OF(fte_match_param, key, inner_headers);
4083 headers_m = MLX5_ADDR_OF(fte_match_param, matcher,
4085 headers_v = MLX5_ADDR_OF(fte_match_param, key, outer_headers);
4087 MLX5_SET(fte_match_set_lyr_2_4, headers_m, ip_protocol, 0xFF);
4088 MLX5_SET(fte_match_set_lyr_2_4, headers_v, ip_protocol, IPPROTO_ICMP);
4092 icmp_m = &rte_flow_item_icmp_mask;
4093 MLX5_SET(fte_match_set_misc3, misc3_m, icmp_type,
4094 icmp_m->hdr.icmp_type);
4095 MLX5_SET(fte_match_set_misc3, misc3_v, icmp_type,
4096 icmp_v->hdr.icmp_type & icmp_m->hdr.icmp_type);
4097 MLX5_SET(fte_match_set_misc3, misc3_m, icmp_code,
4098 icmp_m->hdr.icmp_code);
4099 MLX5_SET(fte_match_set_misc3, misc3_v, icmp_code,
4100 icmp_v->hdr.icmp_code & icmp_m->hdr.icmp_code);
4103 static uint32_t matcher_zero[MLX5_ST_SZ_DW(fte_match_param)] = { 0 };
4105 #define HEADER_IS_ZERO(match_criteria, headers) \
4106 !(memcmp(MLX5_ADDR_OF(fte_match_param, match_criteria, headers), \
4107 matcher_zero, MLX5_FLD_SZ_BYTES(fte_match_param, headers))) \
4110 * Calculate flow matcher enable bitmap.
4112 * @param match_criteria
4113 * Pointer to flow matcher criteria.
4116 * Bitmap of enabled fields.
4119 flow_dv_matcher_enable(uint32_t *match_criteria)
4121 uint8_t match_criteria_enable;
4123 match_criteria_enable =
4124 (!HEADER_IS_ZERO(match_criteria, outer_headers)) <<
4125 MLX5_MATCH_CRITERIA_ENABLE_OUTER_BIT;
4126 match_criteria_enable |=
4127 (!HEADER_IS_ZERO(match_criteria, misc_parameters)) <<
4128 MLX5_MATCH_CRITERIA_ENABLE_MISC_BIT;
4129 match_criteria_enable |=
4130 (!HEADER_IS_ZERO(match_criteria, inner_headers)) <<
4131 MLX5_MATCH_CRITERIA_ENABLE_INNER_BIT;
4132 match_criteria_enable |=
4133 (!HEADER_IS_ZERO(match_criteria, misc_parameters_2)) <<
4134 MLX5_MATCH_CRITERIA_ENABLE_MISC2_BIT;
4135 #ifdef HAVE_MLX5DV_DR
4136 match_criteria_enable |=
4137 (!HEADER_IS_ZERO(match_criteria, misc_parameters_3)) <<
4138 MLX5_MATCH_CRITERIA_ENABLE_MISC3_BIT;
4140 return match_criteria_enable;
4147 * @param dev[in, out]
4148 * Pointer to rte_eth_dev structure.
4149 * @param[in] table_id
4152 * Direction of the table.
4153 * @param[in] transfer
4154 * E-Switch or NIC flow.
4156 * pointer to error structure.
4159 * Returns tables resource based on the index, NULL in case of failed.
4161 static struct mlx5_flow_tbl_resource *
4162 flow_dv_tbl_resource_get(struct rte_eth_dev *dev,
4163 uint32_t table_id, uint8_t egress,
4165 struct rte_flow_error *error)
4167 struct mlx5_priv *priv = dev->data->dev_private;
4168 struct mlx5_ibv_shared *sh = priv->sh;
4169 struct mlx5_flow_tbl_resource *tbl;
4171 #ifdef HAVE_MLX5DV_DR
4173 tbl = &sh->fdb_tbl[table_id];
4175 tbl->obj = mlx5_glue->dr_create_flow_tbl
4176 (sh->fdb_domain, table_id);
4177 } else if (egress) {
4178 tbl = &sh->tx_tbl[table_id];
4180 tbl->obj = mlx5_glue->dr_create_flow_tbl
4181 (sh->tx_domain, table_id);
4183 tbl = &sh->rx_tbl[table_id];
4185 tbl->obj = mlx5_glue->dr_create_flow_tbl
4186 (sh->rx_domain, table_id);
4189 rte_flow_error_set(error, ENOMEM,
4190 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
4191 NULL, "cannot create table");
4194 rte_atomic32_inc(&tbl->refcnt);
4200 return &sh->fdb_tbl[table_id];
4202 return &sh->tx_tbl[table_id];
4204 return &sh->rx_tbl[table_id];
4209 * Release a flow table.
4212 * Table resource to be released.
4215 * Returns 0 if table was released, else return 1;
4218 flow_dv_tbl_resource_release(struct mlx5_flow_tbl_resource *tbl)
4222 if (rte_atomic32_dec_and_test(&tbl->refcnt)) {
4223 mlx5_glue->dr_destroy_flow_tbl(tbl->obj);
4231 * Register the flow matcher.
4233 * @param dev[in, out]
4234 * Pointer to rte_eth_dev structure.
4235 * @param[in, out] matcher
4236 * Pointer to flow matcher.
4237 * @parm[in, out] dev_flow
4238 * Pointer to the dev_flow.
4240 * pointer to error structure.
4243 * 0 on success otherwise -errno and errno is set.
4246 flow_dv_matcher_register(struct rte_eth_dev *dev,
4247 struct mlx5_flow_dv_matcher *matcher,
4248 struct mlx5_flow *dev_flow,
4249 struct rte_flow_error *error)
4251 struct mlx5_priv *priv = dev->data->dev_private;
4252 struct mlx5_ibv_shared *sh = priv->sh;
4253 struct mlx5_flow_dv_matcher *cache_matcher;
4254 struct mlx5dv_flow_matcher_attr dv_attr = {
4255 .type = IBV_FLOW_ATTR_NORMAL,
4256 .match_mask = (void *)&matcher->mask,
4258 struct mlx5_flow_tbl_resource *tbl = NULL;
4260 /* Lookup from cache. */
4261 LIST_FOREACH(cache_matcher, &sh->matchers, next) {
4262 if (matcher->crc == cache_matcher->crc &&
4263 matcher->priority == cache_matcher->priority &&
4264 matcher->egress == cache_matcher->egress &&
4265 matcher->group == cache_matcher->group &&
4266 matcher->transfer == cache_matcher->transfer &&
4267 !memcmp((const void *)matcher->mask.buf,
4268 (const void *)cache_matcher->mask.buf,
4269 cache_matcher->mask.size)) {
4271 "priority %hd use %s matcher %p: refcnt %d++",
4272 cache_matcher->priority,
4273 cache_matcher->egress ? "tx" : "rx",
4274 (void *)cache_matcher,
4275 rte_atomic32_read(&cache_matcher->refcnt));
4276 rte_atomic32_inc(&cache_matcher->refcnt);
4277 dev_flow->dv.matcher = cache_matcher;
4281 /* Register new matcher. */
4282 cache_matcher = rte_calloc(__func__, 1, sizeof(*cache_matcher), 0);
4284 return rte_flow_error_set(error, ENOMEM,
4285 RTE_FLOW_ERROR_TYPE_UNSPECIFIED, NULL,
4286 "cannot allocate matcher memory");
4287 tbl = flow_dv_tbl_resource_get(dev, matcher->group * MLX5_GROUP_FACTOR,
4288 matcher->egress, matcher->transfer,
4291 rte_free(cache_matcher);
4292 return rte_flow_error_set(error, ENOMEM,
4293 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
4294 NULL, "cannot create table");
4296 *cache_matcher = *matcher;
4297 dv_attr.match_criteria_enable =
4298 flow_dv_matcher_enable(cache_matcher->mask.buf);
4299 dv_attr.priority = matcher->priority;
4300 if (matcher->egress)
4301 dv_attr.flags |= IBV_FLOW_ATTR_FLAGS_EGRESS;
4302 cache_matcher->matcher_object =
4303 mlx5_glue->dv_create_flow_matcher(sh->ctx, &dv_attr, tbl->obj);
4304 if (!cache_matcher->matcher_object) {
4305 rte_free(cache_matcher);
4306 #ifdef HAVE_MLX5DV_DR
4307 flow_dv_tbl_resource_release(tbl);
4309 return rte_flow_error_set(error, ENOMEM,
4310 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
4311 NULL, "cannot create matcher");
4313 rte_atomic32_inc(&cache_matcher->refcnt);
4314 LIST_INSERT_HEAD(&sh->matchers, cache_matcher, next);
4315 dev_flow->dv.matcher = cache_matcher;
4316 DRV_LOG(DEBUG, "priority %hd new %s matcher %p: refcnt %d",
4317 cache_matcher->priority,
4318 cache_matcher->egress ? "tx" : "rx", (void *)cache_matcher,
4319 rte_atomic32_read(&cache_matcher->refcnt));
4320 rte_atomic32_inc(&tbl->refcnt);
4325 * Find existing tag resource or create and register a new one.
4327 * @param dev[in, out]
4328 * Pointer to rte_eth_dev structure.
4329 * @param[in, out] resource
4330 * Pointer to tag resource.
4331 * @parm[in, out] dev_flow
4332 * Pointer to the dev_flow.
4334 * pointer to error structure.
4337 * 0 on success otherwise -errno and errno is set.
4340 flow_dv_tag_resource_register
4341 (struct rte_eth_dev *dev,
4342 struct mlx5_flow_dv_tag_resource *resource,
4343 struct mlx5_flow *dev_flow,
4344 struct rte_flow_error *error)
4346 struct mlx5_priv *priv = dev->data->dev_private;
4347 struct mlx5_ibv_shared *sh = priv->sh;
4348 struct mlx5_flow_dv_tag_resource *cache_resource;
4350 /* Lookup a matching resource from cache. */
4351 LIST_FOREACH(cache_resource, &sh->tags, next) {
4352 if (resource->tag == cache_resource->tag) {
4353 DRV_LOG(DEBUG, "tag resource %p: refcnt %d++",
4354 (void *)cache_resource,
4355 rte_atomic32_read(&cache_resource->refcnt));
4356 rte_atomic32_inc(&cache_resource->refcnt);
4357 dev_flow->flow->tag_resource = cache_resource;
4361 /* Register new resource. */
4362 cache_resource = rte_calloc(__func__, 1, sizeof(*cache_resource), 0);
4363 if (!cache_resource)
4364 return rte_flow_error_set(error, ENOMEM,
4365 RTE_FLOW_ERROR_TYPE_UNSPECIFIED, NULL,
4366 "cannot allocate resource memory");
4367 *cache_resource = *resource;
4368 cache_resource->action = mlx5_glue->dv_create_flow_action_tag
4370 if (!cache_resource->action) {
4371 rte_free(cache_resource);
4372 return rte_flow_error_set(error, ENOMEM,
4373 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
4374 NULL, "cannot create action");
4376 rte_atomic32_init(&cache_resource->refcnt);
4377 rte_atomic32_inc(&cache_resource->refcnt);
4378 LIST_INSERT_HEAD(&sh->tags, cache_resource, next);
4379 dev_flow->flow->tag_resource = cache_resource;
4380 DRV_LOG(DEBUG, "new tag resource %p: refcnt %d++",
4381 (void *)cache_resource,
4382 rte_atomic32_read(&cache_resource->refcnt));
4390 * Pointer to Ethernet device.
4392 * Pointer to mlx5_flow.
4395 * 1 while a reference on it exists, 0 when freed.
4398 flow_dv_tag_release(struct rte_eth_dev *dev,
4399 struct mlx5_flow_dv_tag_resource *tag)
4402 DRV_LOG(DEBUG, "port %u tag %p: refcnt %d--",
4403 dev->data->port_id, (void *)tag,
4404 rte_atomic32_read(&tag->refcnt));
4405 if (rte_atomic32_dec_and_test(&tag->refcnt)) {
4406 claim_zero(mlx5_glue->destroy_flow_action(tag->action));
4407 LIST_REMOVE(tag, next);
4408 DRV_LOG(DEBUG, "port %u tag %p: removed",
4409 dev->data->port_id, (void *)tag);
4417 * Translate port ID action to vport.
4420 * Pointer to rte_eth_dev structure.
4422 * Pointer to the port ID action.
4423 * @param[out] dst_port_id
4424 * The target port ID.
4426 * Pointer to the error structure.
4429 * 0 on success, a negative errno value otherwise and rte_errno is set.
4432 flow_dv_translate_action_port_id(struct rte_eth_dev *dev,
4433 const struct rte_flow_action *action,
4434 uint32_t *dst_port_id,
4435 struct rte_flow_error *error)
4440 const struct rte_flow_action_port_id *conf =
4441 (const struct rte_flow_action_port_id *)action->conf;
4443 port = conf->original ? dev->data->port_id : conf->id;
4444 ret = mlx5_port_to_eswitch_info(port, NULL, &port_id);
4446 return rte_flow_error_set(error, -ret,
4447 RTE_FLOW_ERROR_TYPE_ACTION,
4449 "No eswitch info was found for port");
4450 *dst_port_id = port_id;
4455 * Fill the flow with DV spec.
4458 * Pointer to rte_eth_dev structure.
4459 * @param[in, out] dev_flow
4460 * Pointer to the sub flow.
4462 * Pointer to the flow attributes.
4464 * Pointer to the list of items.
4465 * @param[in] actions
4466 * Pointer to the list of actions.
4468 * Pointer to the error structure.
4471 * 0 on success, a negative errno value otherwise and rte_errno is set.
4474 flow_dv_translate(struct rte_eth_dev *dev,
4475 struct mlx5_flow *dev_flow,
4476 const struct rte_flow_attr *attr,
4477 const struct rte_flow_item items[],
4478 const struct rte_flow_action actions[],
4479 struct rte_flow_error *error)
4481 struct mlx5_priv *priv = dev->data->dev_private;
4482 struct rte_flow *flow = dev_flow->flow;
4483 uint64_t item_flags = 0;
4484 uint64_t last_item = 0;
4485 uint64_t action_flags = 0;
4486 uint64_t priority = attr->priority;
4487 struct mlx5_flow_dv_matcher matcher = {
4489 .size = sizeof(matcher.mask.buf),
4493 bool actions_end = false;
4494 struct mlx5_flow_dv_modify_hdr_resource res = {
4495 .ft_type = attr->egress ? MLX5DV_FLOW_TABLE_TYPE_NIC_TX :
4496 MLX5DV_FLOW_TABLE_TYPE_NIC_RX
4498 union flow_dv_attr flow_attr = { .attr = 0 };
4499 struct mlx5_flow_dv_tag_resource tag_resource;
4500 uint32_t modify_action_position = UINT32_MAX;
4501 void *match_mask = matcher.mask.buf;
4502 void *match_value = dev_flow->dv.value.buf;
4504 flow->group = attr->group;
4506 res.ft_type = MLX5DV_FLOW_TABLE_TYPE_FDB;
4507 if (priority == MLX5_FLOW_PRIO_RSVD)
4508 priority = priv->config.flow_prio - 1;
4509 for (; !actions_end ; actions++) {
4510 const struct rte_flow_action_queue *queue;
4511 const struct rte_flow_action_rss *rss;
4512 const struct rte_flow_action *action = actions;
4513 const struct rte_flow_action_count *count = action->conf;
4514 const uint8_t *rss_key;
4515 const struct rte_flow_action_jump *jump_data;
4516 struct mlx5_flow_dv_jump_tbl_resource jump_tbl_resource;
4517 struct mlx5_flow_tbl_resource *tbl;
4518 uint32_t port_id = 0;
4519 struct mlx5_flow_dv_port_id_action_resource port_id_resource;
4521 switch (actions->type) {
4522 case RTE_FLOW_ACTION_TYPE_VOID:
4524 case RTE_FLOW_ACTION_TYPE_PORT_ID:
4525 if (flow_dv_translate_action_port_id(dev, action,
4528 port_id_resource.port_id = port_id;
4529 if (flow_dv_port_id_action_resource_register
4530 (dev, &port_id_resource, dev_flow, error))
4532 dev_flow->dv.actions[actions_n++] =
4533 dev_flow->dv.port_id_action->action;
4534 action_flags |= MLX5_FLOW_ACTION_PORT_ID;
4536 case RTE_FLOW_ACTION_TYPE_FLAG:
4538 mlx5_flow_mark_set(MLX5_FLOW_MARK_DEFAULT);
4539 if (!flow->tag_resource)
4540 if (flow_dv_tag_resource_register
4541 (dev, &tag_resource, dev_flow, error))
4543 dev_flow->dv.actions[actions_n++] =
4544 flow->tag_resource->action;
4545 action_flags |= MLX5_FLOW_ACTION_FLAG;
4547 case RTE_FLOW_ACTION_TYPE_MARK:
4548 tag_resource.tag = mlx5_flow_mark_set
4549 (((const struct rte_flow_action_mark *)
4550 (actions->conf))->id);
4551 if (!flow->tag_resource)
4552 if (flow_dv_tag_resource_register
4553 (dev, &tag_resource, dev_flow, error))
4555 dev_flow->dv.actions[actions_n++] =
4556 flow->tag_resource->action;
4557 action_flags |= MLX5_FLOW_ACTION_MARK;
4559 case RTE_FLOW_ACTION_TYPE_DROP:
4560 action_flags |= MLX5_FLOW_ACTION_DROP;
4562 case RTE_FLOW_ACTION_TYPE_QUEUE:
4563 queue = actions->conf;
4564 flow->rss.queue_num = 1;
4565 (*flow->queue)[0] = queue->index;
4566 action_flags |= MLX5_FLOW_ACTION_QUEUE;
4568 case RTE_FLOW_ACTION_TYPE_RSS:
4569 rss = actions->conf;
4571 memcpy((*flow->queue), rss->queue,
4572 rss->queue_num * sizeof(uint16_t));
4573 flow->rss.queue_num = rss->queue_num;
4574 /* NULL RSS key indicates default RSS key. */
4575 rss_key = !rss->key ? rss_hash_default_key : rss->key;
4576 memcpy(flow->key, rss_key, MLX5_RSS_HASH_KEY_LEN);
4577 /* RSS type 0 indicates default RSS type ETH_RSS_IP. */
4578 flow->rss.types = !rss->types ? ETH_RSS_IP : rss->types;
4579 flow->rss.level = rss->level;
4580 action_flags |= MLX5_FLOW_ACTION_RSS;
4582 case RTE_FLOW_ACTION_TYPE_COUNT:
4583 if (!priv->config.devx) {
4584 rte_errno = ENOTSUP;
4587 flow->counter = flow_dv_counter_alloc(dev,
4591 if (flow->counter == NULL)
4593 dev_flow->dv.actions[actions_n++] =
4594 flow->counter->action;
4595 action_flags |= MLX5_FLOW_ACTION_COUNT;
4598 if (rte_errno == ENOTSUP)
4599 return rte_flow_error_set
4601 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
4603 "count action not supported");
4605 return rte_flow_error_set
4607 RTE_FLOW_ERROR_TYPE_ACTION,
4609 "cannot create counter"
4611 case RTE_FLOW_ACTION_TYPE_VXLAN_ENCAP:
4612 case RTE_FLOW_ACTION_TYPE_NVGRE_ENCAP:
4613 if (flow_dv_create_action_l2_encap(dev, actions,
4618 dev_flow->dv.actions[actions_n++] =
4619 dev_flow->dv.encap_decap->verbs_action;
4620 action_flags |= actions->type ==
4621 RTE_FLOW_ACTION_TYPE_VXLAN_ENCAP ?
4622 MLX5_FLOW_ACTION_VXLAN_ENCAP :
4623 MLX5_FLOW_ACTION_NVGRE_ENCAP;
4625 case RTE_FLOW_ACTION_TYPE_VXLAN_DECAP:
4626 case RTE_FLOW_ACTION_TYPE_NVGRE_DECAP:
4627 if (flow_dv_create_action_l2_decap(dev, dev_flow,
4631 dev_flow->dv.actions[actions_n++] =
4632 dev_flow->dv.encap_decap->verbs_action;
4633 action_flags |= actions->type ==
4634 RTE_FLOW_ACTION_TYPE_VXLAN_DECAP ?
4635 MLX5_FLOW_ACTION_VXLAN_DECAP :
4636 MLX5_FLOW_ACTION_NVGRE_DECAP;
4638 case RTE_FLOW_ACTION_TYPE_RAW_ENCAP:
4639 /* Handle encap with preceding decap. */
4640 if (action_flags & MLX5_FLOW_ACTION_RAW_DECAP) {
4641 if (flow_dv_create_action_raw_encap
4642 (dev, actions, dev_flow, attr, error))
4644 dev_flow->dv.actions[actions_n++] =
4645 dev_flow->dv.encap_decap->verbs_action;
4647 /* Handle encap without preceding decap. */
4648 if (flow_dv_create_action_l2_encap
4649 (dev, actions, dev_flow, attr->transfer,
4652 dev_flow->dv.actions[actions_n++] =
4653 dev_flow->dv.encap_decap->verbs_action;
4655 action_flags |= MLX5_FLOW_ACTION_RAW_ENCAP;
4657 case RTE_FLOW_ACTION_TYPE_RAW_DECAP:
4658 /* Check if this decap is followed by encap. */
4659 for (; action->type != RTE_FLOW_ACTION_TYPE_END &&
4660 action->type != RTE_FLOW_ACTION_TYPE_RAW_ENCAP;
4663 /* Handle decap only if it isn't followed by encap. */
4664 if (action->type != RTE_FLOW_ACTION_TYPE_RAW_ENCAP) {
4665 if (flow_dv_create_action_l2_decap
4666 (dev, dev_flow, attr->transfer, error))
4668 dev_flow->dv.actions[actions_n++] =
4669 dev_flow->dv.encap_decap->verbs_action;
4671 /* If decap is followed by encap, handle it at encap. */
4672 action_flags |= MLX5_FLOW_ACTION_RAW_DECAP;
4674 case RTE_FLOW_ACTION_TYPE_JUMP:
4675 jump_data = action->conf;
4676 tbl = flow_dv_tbl_resource_get(dev, jump_data->group *
4679 attr->transfer, error);
4681 return rte_flow_error_set
4683 RTE_FLOW_ERROR_TYPE_ACTION,
4685 "cannot create jump action.");
4686 jump_tbl_resource.tbl = tbl;
4687 if (flow_dv_jump_tbl_resource_register
4688 (dev, &jump_tbl_resource, dev_flow, error)) {
4689 flow_dv_tbl_resource_release(tbl);
4690 return rte_flow_error_set
4692 RTE_FLOW_ERROR_TYPE_ACTION,
4694 "cannot create jump action.");
4696 dev_flow->dv.actions[actions_n++] =
4697 dev_flow->dv.jump->action;
4698 action_flags |= MLX5_FLOW_ACTION_JUMP;
4700 case RTE_FLOW_ACTION_TYPE_SET_MAC_SRC:
4701 case RTE_FLOW_ACTION_TYPE_SET_MAC_DST:
4702 if (flow_dv_convert_action_modify_mac(&res, actions,
4705 action_flags |= actions->type ==
4706 RTE_FLOW_ACTION_TYPE_SET_MAC_SRC ?
4707 MLX5_FLOW_ACTION_SET_MAC_SRC :
4708 MLX5_FLOW_ACTION_SET_MAC_DST;
4710 case RTE_FLOW_ACTION_TYPE_SET_IPV4_SRC:
4711 case RTE_FLOW_ACTION_TYPE_SET_IPV4_DST:
4712 if (flow_dv_convert_action_modify_ipv4(&res, actions,
4715 action_flags |= actions->type ==
4716 RTE_FLOW_ACTION_TYPE_SET_IPV4_SRC ?
4717 MLX5_FLOW_ACTION_SET_IPV4_SRC :
4718 MLX5_FLOW_ACTION_SET_IPV4_DST;
4720 case RTE_FLOW_ACTION_TYPE_SET_IPV6_SRC:
4721 case RTE_FLOW_ACTION_TYPE_SET_IPV6_DST:
4722 if (flow_dv_convert_action_modify_ipv6(&res, actions,
4725 action_flags |= actions->type ==
4726 RTE_FLOW_ACTION_TYPE_SET_IPV6_SRC ?
4727 MLX5_FLOW_ACTION_SET_IPV6_SRC :
4728 MLX5_FLOW_ACTION_SET_IPV6_DST;
4730 case RTE_FLOW_ACTION_TYPE_SET_TP_SRC:
4731 case RTE_FLOW_ACTION_TYPE_SET_TP_DST:
4732 if (flow_dv_convert_action_modify_tp(&res, actions,
4736 action_flags |= actions->type ==
4737 RTE_FLOW_ACTION_TYPE_SET_TP_SRC ?
4738 MLX5_FLOW_ACTION_SET_TP_SRC :
4739 MLX5_FLOW_ACTION_SET_TP_DST;
4741 case RTE_FLOW_ACTION_TYPE_DEC_TTL:
4742 if (flow_dv_convert_action_modify_dec_ttl(&res, items,
4746 action_flags |= MLX5_FLOW_ACTION_DEC_TTL;
4748 case RTE_FLOW_ACTION_TYPE_SET_TTL:
4749 if (flow_dv_convert_action_modify_ttl(&res, actions,
4753 action_flags |= MLX5_FLOW_ACTION_SET_TTL;
4755 case RTE_FLOW_ACTION_TYPE_INC_TCP_SEQ:
4756 case RTE_FLOW_ACTION_TYPE_DEC_TCP_SEQ:
4757 if (flow_dv_convert_action_modify_tcp_seq(&res, actions,
4760 action_flags |= actions->type ==
4761 RTE_FLOW_ACTION_TYPE_INC_TCP_SEQ ?
4762 MLX5_FLOW_ACTION_INC_TCP_SEQ :
4763 MLX5_FLOW_ACTION_DEC_TCP_SEQ;
4766 case RTE_FLOW_ACTION_TYPE_INC_TCP_ACK:
4767 case RTE_FLOW_ACTION_TYPE_DEC_TCP_ACK:
4768 if (flow_dv_convert_action_modify_tcp_ack(&res, actions,
4771 action_flags |= actions->type ==
4772 RTE_FLOW_ACTION_TYPE_INC_TCP_ACK ?
4773 MLX5_FLOW_ACTION_INC_TCP_ACK :
4774 MLX5_FLOW_ACTION_DEC_TCP_ACK;
4776 case RTE_FLOW_ACTION_TYPE_END:
4778 if (action_flags & MLX5_FLOW_MODIFY_HDR_ACTIONS) {
4779 /* create modify action if needed. */
4780 if (flow_dv_modify_hdr_resource_register
4785 dev_flow->dv.actions[modify_action_position] =
4786 dev_flow->dv.modify_hdr->verbs_action;
4792 if ((action_flags & MLX5_FLOW_MODIFY_HDR_ACTIONS) &&
4793 modify_action_position == UINT32_MAX)
4794 modify_action_position = actions_n++;
4796 dev_flow->dv.actions_n = actions_n;
4797 flow->actions = action_flags;
4798 for (; items->type != RTE_FLOW_ITEM_TYPE_END; items++) {
4799 int tunnel = !!(item_flags & MLX5_FLOW_LAYER_TUNNEL);
4801 switch (items->type) {
4802 case RTE_FLOW_ITEM_TYPE_PORT_ID:
4803 flow_dv_translate_item_port_id(dev, match_mask,
4804 match_value, items);
4805 last_item = MLX5_FLOW_ITEM_PORT_ID;
4807 case RTE_FLOW_ITEM_TYPE_ETH:
4808 flow_dv_translate_item_eth(match_mask, match_value,
4810 matcher.priority = MLX5_PRIORITY_MAP_L2;
4811 last_item = tunnel ? MLX5_FLOW_LAYER_INNER_L2 :
4812 MLX5_FLOW_LAYER_OUTER_L2;
4814 case RTE_FLOW_ITEM_TYPE_VLAN:
4815 flow_dv_translate_item_vlan(match_mask, match_value,
4817 matcher.priority = MLX5_PRIORITY_MAP_L2;
4818 last_item = tunnel ? (MLX5_FLOW_LAYER_INNER_L2 |
4819 MLX5_FLOW_LAYER_INNER_VLAN) :
4820 (MLX5_FLOW_LAYER_OUTER_L2 |
4821 MLX5_FLOW_LAYER_OUTER_VLAN);
4823 case RTE_FLOW_ITEM_TYPE_IPV4:
4824 flow_dv_translate_item_ipv4(match_mask, match_value,
4825 items, tunnel, attr->group);
4826 matcher.priority = MLX5_PRIORITY_MAP_L3;
4827 dev_flow->dv.hash_fields |=
4828 mlx5_flow_hashfields_adjust
4830 MLX5_IPV4_LAYER_TYPES,
4831 MLX5_IPV4_IBV_RX_HASH);
4832 last_item = tunnel ? MLX5_FLOW_LAYER_INNER_L3_IPV4 :
4833 MLX5_FLOW_LAYER_OUTER_L3_IPV4;
4834 mlx5_flow_tunnel_ip_check(items, &last_item);
4836 case RTE_FLOW_ITEM_TYPE_IPV6:
4837 flow_dv_translate_item_ipv6(match_mask, match_value,
4838 items, tunnel, attr->group);
4839 matcher.priority = MLX5_PRIORITY_MAP_L3;
4840 dev_flow->dv.hash_fields |=
4841 mlx5_flow_hashfields_adjust
4843 MLX5_IPV6_LAYER_TYPES,
4844 MLX5_IPV6_IBV_RX_HASH);
4845 last_item = tunnel ? MLX5_FLOW_LAYER_INNER_L3_IPV6 :
4846 MLX5_FLOW_LAYER_OUTER_L3_IPV6;
4847 mlx5_flow_tunnel_ip_check(items, &last_item);
4849 case RTE_FLOW_ITEM_TYPE_TCP:
4850 flow_dv_translate_item_tcp(match_mask, match_value,
4852 matcher.priority = MLX5_PRIORITY_MAP_L4;
4853 dev_flow->dv.hash_fields |=
4854 mlx5_flow_hashfields_adjust
4855 (dev_flow, tunnel, ETH_RSS_TCP,
4856 IBV_RX_HASH_SRC_PORT_TCP |
4857 IBV_RX_HASH_DST_PORT_TCP);
4858 last_item = tunnel ? MLX5_FLOW_LAYER_INNER_L4_TCP :
4859 MLX5_FLOW_LAYER_OUTER_L4_TCP;
4861 case RTE_FLOW_ITEM_TYPE_UDP:
4862 flow_dv_translate_item_udp(match_mask, match_value,
4864 matcher.priority = MLX5_PRIORITY_MAP_L4;
4865 dev_flow->dv.hash_fields |=
4866 mlx5_flow_hashfields_adjust
4867 (dev_flow, tunnel, ETH_RSS_UDP,
4868 IBV_RX_HASH_SRC_PORT_UDP |
4869 IBV_RX_HASH_DST_PORT_UDP);
4870 last_item = tunnel ? MLX5_FLOW_LAYER_INNER_L4_UDP :
4871 MLX5_FLOW_LAYER_OUTER_L4_UDP;
4873 case RTE_FLOW_ITEM_TYPE_GRE:
4874 flow_dv_translate_item_gre(match_mask, match_value,
4876 last_item = MLX5_FLOW_LAYER_GRE;
4878 case RTE_FLOW_ITEM_TYPE_GRE_KEY:
4879 flow_dv_translate_item_gre_key(match_mask,
4880 match_value, items);
4881 item_flags |= MLX5_FLOW_LAYER_GRE_KEY;
4883 case RTE_FLOW_ITEM_TYPE_NVGRE:
4884 flow_dv_translate_item_nvgre(match_mask, match_value,
4886 last_item = MLX5_FLOW_LAYER_GRE;
4888 case RTE_FLOW_ITEM_TYPE_VXLAN:
4889 flow_dv_translate_item_vxlan(match_mask, match_value,
4891 last_item = MLX5_FLOW_LAYER_VXLAN;
4893 case RTE_FLOW_ITEM_TYPE_VXLAN_GPE:
4894 flow_dv_translate_item_vxlan(match_mask, match_value,
4896 last_item = MLX5_FLOW_LAYER_VXLAN_GPE;
4898 case RTE_FLOW_ITEM_TYPE_MPLS:
4899 flow_dv_translate_item_mpls(match_mask, match_value,
4900 items, last_item, tunnel);
4901 last_item = MLX5_FLOW_LAYER_MPLS;
4903 case RTE_FLOW_ITEM_TYPE_META:
4904 flow_dv_translate_item_meta(match_mask, match_value,
4906 last_item = MLX5_FLOW_ITEM_METADATA;
4908 case RTE_FLOW_ITEM_TYPE_ICMP:
4909 flow_dv_translate_item_icmp(match_mask, match_value,
4911 item_flags |= MLX5_FLOW_LAYER_ICMP;
4913 case RTE_FLOW_ITEM_TYPE_ICMP6:
4914 flow_dv_translate_item_icmp6(match_mask, match_value,
4916 item_flags |= MLX5_FLOW_LAYER_ICMP6;
4921 item_flags |= last_item;
4924 * In case of ingress traffic when E-Switch mode is enabled,
4925 * we have two cases where we need to set the source port manually.
4926 * The first one, is in case of Nic steering rule, and the second is
4927 * E-Switch rule where no port_id item was found. In both cases
4928 * the source port is set according the current port in use.
4930 if ((attr->ingress && !(item_flags & MLX5_FLOW_ITEM_PORT_ID)) &&
4931 (priv->representor || priv->master)) {
4932 if (flow_dv_translate_item_port_id(dev, match_mask,
4936 assert(!flow_dv_check_valid_spec(matcher.mask.buf,
4937 dev_flow->dv.value.buf));
4938 dev_flow->layers = item_flags;
4939 /* Register matcher. */
4940 matcher.crc = rte_raw_cksum((const void *)matcher.mask.buf,
4942 matcher.priority = mlx5_flow_adjust_priority(dev, priority,
4944 matcher.egress = attr->egress;
4945 matcher.group = attr->group;
4946 matcher.transfer = attr->transfer;
4947 if (flow_dv_matcher_register(dev, &matcher, dev_flow, error))
4953 * Apply the flow to the NIC.
4956 * Pointer to the Ethernet device structure.
4957 * @param[in, out] flow
4958 * Pointer to flow structure.
4960 * Pointer to error structure.
4963 * 0 on success, a negative errno value otherwise and rte_errno is set.
4966 flow_dv_apply(struct rte_eth_dev *dev, struct rte_flow *flow,
4967 struct rte_flow_error *error)
4969 struct mlx5_flow_dv *dv;
4970 struct mlx5_flow *dev_flow;
4971 struct mlx5_priv *priv = dev->data->dev_private;
4975 LIST_FOREACH(dev_flow, &flow->dev_flows, next) {
4978 if (flow->actions & MLX5_FLOW_ACTION_DROP) {
4979 if (flow->transfer) {
4980 dv->actions[n++] = priv->sh->esw_drop_action;
4982 dv->hrxq = mlx5_hrxq_drop_new(dev);
4986 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
4988 "cannot get drop hash queue");
4991 dv->actions[n++] = dv->hrxq->action;
4993 } else if (flow->actions &
4994 (MLX5_FLOW_ACTION_QUEUE | MLX5_FLOW_ACTION_RSS)) {
4995 struct mlx5_hrxq *hrxq;
4997 hrxq = mlx5_hrxq_get(dev, flow->key,
4998 MLX5_RSS_HASH_KEY_LEN,
5001 flow->rss.queue_num);
5003 hrxq = mlx5_hrxq_new
5004 (dev, flow->key, MLX5_RSS_HASH_KEY_LEN,
5005 dv->hash_fields, (*flow->queue),
5006 flow->rss.queue_num,
5007 !!(dev_flow->layers &
5008 MLX5_FLOW_LAYER_TUNNEL));
5012 RTE_FLOW_ERROR_TYPE_UNSPECIFIED, NULL,
5013 "cannot get hash queue");
5017 dv->actions[n++] = dv->hrxq->action;
5020 mlx5_glue->dv_create_flow(dv->matcher->matcher_object,
5021 (void *)&dv->value, n,
5024 rte_flow_error_set(error, errno,
5025 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
5027 "hardware refuses to create flow");
5033 err = rte_errno; /* Save rte_errno before cleanup. */
5034 LIST_FOREACH(dev_flow, &flow->dev_flows, next) {
5035 struct mlx5_flow_dv *dv = &dev_flow->dv;
5037 if (flow->actions & MLX5_FLOW_ACTION_DROP)
5038 mlx5_hrxq_drop_release(dev);
5040 mlx5_hrxq_release(dev, dv->hrxq);
5044 rte_errno = err; /* Restore rte_errno. */
5049 * Release the flow matcher.
5052 * Pointer to Ethernet device.
5054 * Pointer to mlx5_flow.
5057 * 1 while a reference on it exists, 0 when freed.
5060 flow_dv_matcher_release(struct rte_eth_dev *dev,
5061 struct mlx5_flow *flow)
5063 struct mlx5_flow_dv_matcher *matcher = flow->dv.matcher;
5064 struct mlx5_priv *priv = dev->data->dev_private;
5065 struct mlx5_ibv_shared *sh = priv->sh;
5066 struct mlx5_flow_tbl_resource *tbl;
5068 assert(matcher->matcher_object);
5069 DRV_LOG(DEBUG, "port %u matcher %p: refcnt %d--",
5070 dev->data->port_id, (void *)matcher,
5071 rte_atomic32_read(&matcher->refcnt));
5072 if (rte_atomic32_dec_and_test(&matcher->refcnt)) {
5073 claim_zero(mlx5_glue->dv_destroy_flow_matcher
5074 (matcher->matcher_object));
5075 LIST_REMOVE(matcher, next);
5076 if (matcher->egress)
5077 tbl = &sh->tx_tbl[matcher->group];
5079 tbl = &sh->rx_tbl[matcher->group];
5080 flow_dv_tbl_resource_release(tbl);
5082 DRV_LOG(DEBUG, "port %u matcher %p: removed",
5083 dev->data->port_id, (void *)matcher);
5090 * Release an encap/decap resource.
5093 * Pointer to mlx5_flow.
5096 * 1 while a reference on it exists, 0 when freed.
5099 flow_dv_encap_decap_resource_release(struct mlx5_flow *flow)
5101 struct mlx5_flow_dv_encap_decap_resource *cache_resource =
5102 flow->dv.encap_decap;
5104 assert(cache_resource->verbs_action);
5105 DRV_LOG(DEBUG, "encap/decap resource %p: refcnt %d--",
5106 (void *)cache_resource,
5107 rte_atomic32_read(&cache_resource->refcnt));
5108 if (rte_atomic32_dec_and_test(&cache_resource->refcnt)) {
5109 claim_zero(mlx5_glue->destroy_flow_action
5110 (cache_resource->verbs_action));
5111 LIST_REMOVE(cache_resource, next);
5112 rte_free(cache_resource);
5113 DRV_LOG(DEBUG, "encap/decap resource %p: removed",
5114 (void *)cache_resource);
5121 * Release an jump to table action resource.
5124 * Pointer to mlx5_flow.
5127 * 1 while a reference on it exists, 0 when freed.
5130 flow_dv_jump_tbl_resource_release(struct mlx5_flow *flow)
5132 struct mlx5_flow_dv_jump_tbl_resource *cache_resource =
5135 assert(cache_resource->action);
5136 DRV_LOG(DEBUG, "jump table resource %p: refcnt %d--",
5137 (void *)cache_resource,
5138 rte_atomic32_read(&cache_resource->refcnt));
5139 if (rte_atomic32_dec_and_test(&cache_resource->refcnt)) {
5140 claim_zero(mlx5_glue->destroy_flow_action
5141 (cache_resource->action));
5142 LIST_REMOVE(cache_resource, next);
5143 flow_dv_tbl_resource_release(cache_resource->tbl);
5144 rte_free(cache_resource);
5145 DRV_LOG(DEBUG, "jump table resource %p: removed",
5146 (void *)cache_resource);
5153 * Release a modify-header resource.
5156 * Pointer to mlx5_flow.
5159 * 1 while a reference on it exists, 0 when freed.
5162 flow_dv_modify_hdr_resource_release(struct mlx5_flow *flow)
5164 struct mlx5_flow_dv_modify_hdr_resource *cache_resource =
5165 flow->dv.modify_hdr;
5167 assert(cache_resource->verbs_action);
5168 DRV_LOG(DEBUG, "modify-header resource %p: refcnt %d--",
5169 (void *)cache_resource,
5170 rte_atomic32_read(&cache_resource->refcnt));
5171 if (rte_atomic32_dec_and_test(&cache_resource->refcnt)) {
5172 claim_zero(mlx5_glue->destroy_flow_action
5173 (cache_resource->verbs_action));
5174 LIST_REMOVE(cache_resource, next);
5175 rte_free(cache_resource);
5176 DRV_LOG(DEBUG, "modify-header resource %p: removed",
5177 (void *)cache_resource);
5184 * Release port ID action resource.
5187 * Pointer to mlx5_flow.
5190 * 1 while a reference on it exists, 0 when freed.
5193 flow_dv_port_id_action_resource_release(struct mlx5_flow *flow)
5195 struct mlx5_flow_dv_port_id_action_resource *cache_resource =
5196 flow->dv.port_id_action;
5198 assert(cache_resource->action);
5199 DRV_LOG(DEBUG, "port ID action resource %p: refcnt %d--",
5200 (void *)cache_resource,
5201 rte_atomic32_read(&cache_resource->refcnt));
5202 if (rte_atomic32_dec_and_test(&cache_resource->refcnt)) {
5203 claim_zero(mlx5_glue->destroy_flow_action
5204 (cache_resource->action));
5205 LIST_REMOVE(cache_resource, next);
5206 rte_free(cache_resource);
5207 DRV_LOG(DEBUG, "port id action resource %p: removed",
5208 (void *)cache_resource);
5215 * Remove the flow from the NIC but keeps it in memory.
5218 * Pointer to Ethernet device.
5219 * @param[in, out] flow
5220 * Pointer to flow structure.
5223 flow_dv_remove(struct rte_eth_dev *dev, struct rte_flow *flow)
5225 struct mlx5_flow_dv *dv;
5226 struct mlx5_flow *dev_flow;
5230 LIST_FOREACH(dev_flow, &flow->dev_flows, next) {
5233 claim_zero(mlx5_glue->dv_destroy_flow(dv->flow));
5237 if (flow->actions & MLX5_FLOW_ACTION_DROP)
5238 mlx5_hrxq_drop_release(dev);
5240 mlx5_hrxq_release(dev, dv->hrxq);
5247 * Remove the flow from the NIC and the memory.
5250 * Pointer to the Ethernet device structure.
5251 * @param[in, out] flow
5252 * Pointer to flow structure.
5255 flow_dv_destroy(struct rte_eth_dev *dev, struct rte_flow *flow)
5257 struct mlx5_flow *dev_flow;
5261 flow_dv_remove(dev, flow);
5262 if (flow->counter) {
5263 flow_dv_counter_release(dev, flow->counter);
5264 flow->counter = NULL;
5266 if (flow->tag_resource) {
5267 flow_dv_tag_release(dev, flow->tag_resource);
5268 flow->tag_resource = NULL;
5270 while (!LIST_EMPTY(&flow->dev_flows)) {
5271 dev_flow = LIST_FIRST(&flow->dev_flows);
5272 LIST_REMOVE(dev_flow, next);
5273 if (dev_flow->dv.matcher)
5274 flow_dv_matcher_release(dev, dev_flow);
5275 if (dev_flow->dv.encap_decap)
5276 flow_dv_encap_decap_resource_release(dev_flow);
5277 if (dev_flow->dv.modify_hdr)
5278 flow_dv_modify_hdr_resource_release(dev_flow);
5279 if (dev_flow->dv.jump)
5280 flow_dv_jump_tbl_resource_release(dev_flow);
5281 if (dev_flow->dv.port_id_action)
5282 flow_dv_port_id_action_resource_release(dev_flow);
5288 * Query a dv flow rule for its statistics via devx.
5291 * Pointer to Ethernet device.
5293 * Pointer to the sub flow.
5295 * data retrieved by the query.
5297 * Perform verbose error reporting if not NULL.
5300 * 0 on success, a negative errno value otherwise and rte_errno is set.
5303 flow_dv_query_count(struct rte_eth_dev *dev, struct rte_flow *flow,
5304 void *data, struct rte_flow_error *error)
5306 struct mlx5_priv *priv = dev->data->dev_private;
5307 struct rte_flow_query_count *qc = data;
5309 if (!priv->config.devx)
5310 return rte_flow_error_set(error, ENOTSUP,
5311 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
5313 "counters are not supported");
5314 if (flow->counter) {
5315 uint64_t pkts, bytes;
5316 int err = _flow_dv_query_count(dev, flow->counter, &pkts,
5320 return rte_flow_error_set(error, -err,
5321 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
5322 NULL, "cannot read counters");
5325 qc->hits = pkts - flow->counter->hits;
5326 qc->bytes = bytes - flow->counter->bytes;
5328 flow->counter->hits = pkts;
5329 flow->counter->bytes = bytes;
5333 return rte_flow_error_set(error, EINVAL,
5334 RTE_FLOW_ERROR_TYPE_UNSPECIFIED,
5336 "counters are not available");
5342 * @see rte_flow_query()
5346 flow_dv_query(struct rte_eth_dev *dev,
5347 struct rte_flow *flow __rte_unused,
5348 const struct rte_flow_action *actions __rte_unused,
5349 void *data __rte_unused,
5350 struct rte_flow_error *error __rte_unused)
5354 for (; actions->type != RTE_FLOW_ACTION_TYPE_END; actions++) {
5355 switch (actions->type) {
5356 case RTE_FLOW_ACTION_TYPE_VOID:
5358 case RTE_FLOW_ACTION_TYPE_COUNT:
5359 ret = flow_dv_query_count(dev, flow, data, error);
5362 return rte_flow_error_set(error, ENOTSUP,
5363 RTE_FLOW_ERROR_TYPE_ACTION,
5365 "action not supported");
5372 * Mutex-protected thunk to flow_dv_translate().
5375 flow_d_translate(struct rte_eth_dev *dev,
5376 struct mlx5_flow *dev_flow,
5377 const struct rte_flow_attr *attr,
5378 const struct rte_flow_item items[],
5379 const struct rte_flow_action actions[],
5380 struct rte_flow_error *error)
5384 flow_d_shared_lock(dev);
5385 ret = flow_dv_translate(dev, dev_flow, attr, items, actions, error);
5386 flow_d_shared_unlock(dev);
5391 * Mutex-protected thunk to flow_dv_apply().
5394 flow_d_apply(struct rte_eth_dev *dev,
5395 struct rte_flow *flow,
5396 struct rte_flow_error *error)
5400 flow_d_shared_lock(dev);
5401 ret = flow_dv_apply(dev, flow, error);
5402 flow_d_shared_unlock(dev);
5407 * Mutex-protected thunk to flow_dv_remove().
5410 flow_d_remove(struct rte_eth_dev *dev, struct rte_flow *flow)
5412 flow_d_shared_lock(dev);
5413 flow_dv_remove(dev, flow);
5414 flow_d_shared_unlock(dev);
5418 * Mutex-protected thunk to flow_dv_destroy().
5421 flow_d_destroy(struct rte_eth_dev *dev, struct rte_flow *flow)
5423 flow_d_shared_lock(dev);
5424 flow_dv_destroy(dev, flow);
5425 flow_d_shared_unlock(dev);
5428 const struct mlx5_flow_driver_ops mlx5_flow_dv_drv_ops = {
5429 .validate = flow_dv_validate,
5430 .prepare = flow_dv_prepare,
5431 .translate = flow_d_translate,
5432 .apply = flow_d_apply,
5433 .remove = flow_d_remove,
5434 .destroy = flow_d_destroy,
5435 .query = flow_dv_query,
5438 #endif /* HAVE_IBV_FLOW_DV_SUPPORT */