ethdev: remove legacy flexible filter type support
[dpdk.git] / app / test-pmd / cmdline_flow.c
index 32a9214..3d1dd05 100644 (file)
@@ -50,6 +50,7 @@ enum index {
        PORT_ID,
        GROUP_ID,
        PRIORITY_LEVEL,
+       SHARED_ACTION_ID,
 
        /* Top-level command. */
        SET,
@@ -63,6 +64,7 @@ enum index {
        /* Top-level command. */
        FLOW,
        /* Sub-level commands. */
+       SHARED_ACTION,
        VALIDATE,
        CREATE,
        DESTROY,
@@ -72,6 +74,14 @@ enum index {
        LIST,
        AGED,
        ISOLATE,
+       TUNNEL,
+
+       /* Tunnel arguments. */
+       TUNNEL_CREATE,
+       TUNNEL_CREATE_TYPE,
+       TUNNEL_LIST,
+       TUNNEL_DESTROY,
+       TUNNEL_DESTROY_ID,
 
        /* Destroy arguments. */
        DESTROY_RULE,
@@ -91,6 +101,23 @@ enum index {
        INGRESS,
        EGRESS,
        TRANSFER,
+       TUNNEL_SET,
+       TUNNEL_MATCH,
+
+       /* Shared action arguments */
+       SHARED_ACTION_CREATE,
+       SHARED_ACTION_UPDATE,
+       SHARED_ACTION_DESTROY,
+       SHARED_ACTION_QUERY,
+
+       /* Shared action create arguments */
+       SHARED_ACTION_CREATE_ID,
+       SHARED_ACTION_INGRESS,
+       SHARED_ACTION_EGRESS,
+       SHARED_ACTION_SPEC,
+
+       /* Shared action destroy arguments */
+       SHARED_ACTION_DESTROY_ID,
 
        /* Validate/create pattern. */
        PATTERN,
@@ -124,14 +151,17 @@ enum index {
        ITEM_ETH_DST,
        ITEM_ETH_SRC,
        ITEM_ETH_TYPE,
+       ITEM_ETH_HAS_VLAN,
        ITEM_VLAN,
        ITEM_VLAN_TCI,
        ITEM_VLAN_PCP,
        ITEM_VLAN_DEI,
        ITEM_VLAN_VID,
        ITEM_VLAN_INNER_TYPE,
+       ITEM_VLAN_HAS_MORE_VLAN,
        ITEM_IPV4,
        ITEM_IPV4_TOS,
+       ITEM_IPV4_FRAGMENT_OFFSET,
        ITEM_IPV4_TTL,
        ITEM_IPV4_PROTO,
        ITEM_IPV4_SRC,
@@ -143,6 +173,7 @@ enum index {
        ITEM_IPV6_HOP,
        ITEM_IPV6_SRC,
        ITEM_IPV6_DST,
+       ITEM_IPV6_HAS_FRAG_EXT,
        ITEM_ICMP,
        ITEM_ICMP_TYPE,
        ITEM_ICMP_CODE,
@@ -196,6 +227,9 @@ enum index {
        ITEM_ARP_ETH_IPV4_TPA,
        ITEM_IPV6_EXT,
        ITEM_IPV6_EXT_NEXT_HDR,
+       ITEM_IPV6_FRAG_EXT,
+       ITEM_IPV6_FRAG_EXT_NEXT_HDR,
+       ITEM_IPV6_FRAG_EXT_FRAG_DATA,
        ITEM_ICMP6,
        ITEM_ICMP6_TYPE,
        ITEM_ICMP6_CODE,
@@ -367,6 +401,8 @@ enum index {
        ACTION_SAMPLE_RATIO,
        ACTION_SAMPLE_INDEX,
        ACTION_SAMPLE_INDEX_VALUE,
+       ACTION_SHARED,
+       SHARED_ACTION_ID2PTR,
 };
 
 /** Maximum size for pattern in struct rte_flow_item_raw. */
@@ -678,8 +714,16 @@ struct buffer {
        enum index command; /**< Flow command. */
        portid_t port; /**< Affected port ID. */
        union {
+               struct {
+                       uint32_t *action_id;
+                       uint32_t action_id_n;
+               } sa_destroy; /**< Shared action destroy arguments. */
+               struct {
+                       uint32_t action_id;
+               } sa; /* Shared action query arguments */
                struct {
                        struct rte_flow_attr attr;
+                       struct tunnel_ops tunnel_ops;
                        struct rte_flow_item *pattern;
                        struct rte_flow_action *actions;
                        uint32_t pattern_n;
@@ -734,16 +778,54 @@ struct parse_action_priv {
                .size = s, \
        })
 
+static const enum index next_sa_create_attr[] = {
+       SHARED_ACTION_CREATE_ID,
+       SHARED_ACTION_INGRESS,
+       SHARED_ACTION_EGRESS,
+       SHARED_ACTION_SPEC,
+       ZERO,
+};
+
+static const enum index next_sa_subcmd[] = {
+       SHARED_ACTION_CREATE,
+       SHARED_ACTION_UPDATE,
+       SHARED_ACTION_DESTROY,
+       SHARED_ACTION_QUERY,
+       ZERO,
+};
+
 static const enum index next_vc_attr[] = {
        GROUP,
        PRIORITY,
        INGRESS,
        EGRESS,
        TRANSFER,
+       TUNNEL_SET,
+       TUNNEL_MATCH,
        PATTERN,
        ZERO,
 };
 
+static const enum index tunnel_create_attr[] = {
+       TUNNEL_CREATE,
+       TUNNEL_CREATE_TYPE,
+       END,
+       ZERO,
+};
+
+static const enum index tunnel_destroy_attr[] = {
+       TUNNEL_DESTROY,
+       TUNNEL_DESTROY_ID,
+       END,
+       ZERO,
+};
+
+static const enum index tunnel_list_attr[] = {
+       TUNNEL_LIST,
+       END,
+       ZERO,
+};
+
 static const enum index next_destroy_attr[] = {
        DESTROY_RULE,
        END,
@@ -768,6 +850,12 @@ static const enum index next_aged_attr[] = {
        ZERO,
 };
 
+static const enum index next_sa_destroy_attr[] = {
+       SHARED_ACTION_DESTROY_ID,
+       END,
+       ZERO,
+};
+
 static const enum index item_param[] = {
        ITEM_PARAM_IS,
        ITEM_PARAM_SPEC,
@@ -809,6 +897,7 @@ static const enum index next_item[] = {
        ITEM_VXLAN_GPE,
        ITEM_ARP_ETH_IPV4,
        ITEM_IPV6_EXT,
+       ITEM_IPV6_FRAG_EXT,
        ITEM_ICMP6,
        ITEM_ICMP6_ND_NS,
        ITEM_ICMP6_ND_NA,
@@ -882,6 +971,7 @@ static const enum index item_eth[] = {
        ITEM_ETH_DST,
        ITEM_ETH_SRC,
        ITEM_ETH_TYPE,
+       ITEM_ETH_HAS_VLAN,
        ITEM_NEXT,
        ZERO,
 };
@@ -892,12 +982,14 @@ static const enum index item_vlan[] = {
        ITEM_VLAN_DEI,
        ITEM_VLAN_VID,
        ITEM_VLAN_INNER_TYPE,
+       ITEM_VLAN_HAS_MORE_VLAN,
        ITEM_NEXT,
        ZERO,
 };
 
 static const enum index item_ipv4[] = {
        ITEM_IPV4_TOS,
+       ITEM_IPV4_FRAGMENT_OFFSET,
        ITEM_IPV4_TTL,
        ITEM_IPV4_PROTO,
        ITEM_IPV4_SRC,
@@ -913,6 +1005,7 @@ static const enum index item_ipv6[] = {
        ITEM_IPV6_HOP,
        ITEM_IPV6_SRC,
        ITEM_IPV6_DST,
+       ITEM_IPV6_HAS_FRAG_EXT,
        ITEM_NEXT,
        ZERO,
 };
@@ -1028,6 +1121,13 @@ static const enum index item_ipv6_ext[] = {
        ZERO,
 };
 
+static const enum index item_ipv6_frag_ext[] = {
+       ITEM_IPV6_FRAG_EXT_NEXT_HDR,
+       ITEM_IPV6_FRAG_EXT_FRAG_DATA,
+       ITEM_NEXT,
+       ZERO,
+};
+
 static const enum index item_icmp6[] = {
        ITEM_ICMP6_TYPE,
        ITEM_ICMP6_CODE,
@@ -1219,6 +1319,7 @@ static const enum index next_action[] = {
        ACTION_SET_IPV6_DSCP,
        ACTION_AGE,
        ACTION_SAMPLE,
+       ACTION_SHARED,
        ZERO,
 };
 
@@ -1575,6 +1676,9 @@ static int parse_aged(struct context *, const struct token *,
 static int parse_isolate(struct context *, const struct token *,
                         const char *, unsigned int,
                         void *, unsigned int);
+static int parse_tunnel(struct context *, const struct token *,
+                       const char *, unsigned int,
+                       void *, unsigned int);
 static int parse_int(struct context *, const struct token *,
                     const char *, unsigned int,
                     void *, unsigned int);
@@ -1605,6 +1709,15 @@ static int parse_ipv6_addr(struct context *, const struct token *,
 static int parse_port(struct context *, const struct token *,
                      const char *, unsigned int,
                      void *, unsigned int);
+static int parse_sa(struct context *, const struct token *,
+                   const char *, unsigned int,
+                   void *, unsigned int);
+static int parse_sa_destroy(struct context *ctx, const struct token *token,
+                           const char *str, unsigned int len,
+                           void *buf, unsigned int size);
+static int parse_sa_id2ptr(struct context *ctx, const struct token *token,
+                          const char *str, unsigned int len, void *buf,
+                          unsigned int size);
 static int comp_none(struct context *, const struct token *,
                     unsigned int, char *, unsigned int);
 static int comp_boolean(struct context *, const struct token *,
@@ -1745,13 +1858,21 @@ static const struct token token_list[] = {
                .call = parse_int,
                .comp = comp_none,
        },
+       [SHARED_ACTION_ID] = {
+               .name = "{shared_action_id}",
+               .type = "SHARED_ACTION_ID",
+               .help = "shared action id",
+               .call = parse_int,
+               .comp = comp_none,
+       },
        /* Top-level command. */
        [FLOW] = {
                .name = "flow",
                .type = "{command} {port_id} [{arg} [...]]",
                .help = "manage ingress/egress flow rules",
                .next = NEXT(NEXT_ENTRY
-                            (VALIDATE,
+                            (SHARED_ACTION,
+                             VALIDATE,
                              CREATE,
                              DESTROY,
                              FLUSH,
@@ -1759,10 +1880,48 @@ static const struct token token_list[] = {
                              LIST,
                              AGED,
                              QUERY,
-                             ISOLATE)),
+                             ISOLATE,
+                             TUNNEL)),
                .call = parse_init,
        },
+       /* Top-level command. */
+       [SHARED_ACTION] = {
+               .name = "shared_action",
+               .type = "{command} {port_id} [{arg} [...]]",
+               .help = "manage shared actions",
+               .next = NEXT(next_sa_subcmd, NEXT_ENTRY(PORT_ID)),
+               .args = ARGS(ARGS_ENTRY(struct buffer, port)),
+               .call = parse_sa,
+       },
        /* Sub-level commands. */
+       [SHARED_ACTION_CREATE] = {
+               .name = "create",
+               .help = "create shared action",
+               .next = NEXT(next_sa_create_attr),
+               .call = parse_sa,
+       },
+       [SHARED_ACTION_UPDATE] = {
+               .name = "update",
+               .help = "update shared action",
+               .next = NEXT(NEXT_ENTRY(SHARED_ACTION_SPEC),
+                            NEXT_ENTRY(SHARED_ACTION_ID)),
+               .args = ARGS(ARGS_ENTRY(struct buffer, args.vc.attr.group)),
+               .call = parse_sa,
+       },
+       [SHARED_ACTION_DESTROY] = {
+               .name = "destroy",
+               .help = "destroy shared action",
+               .next = NEXT(NEXT_ENTRY(SHARED_ACTION_DESTROY_ID)),
+               .args = ARGS(ARGS_ENTRY(struct buffer, port)),
+               .call = parse_sa_destroy,
+       },
+       [SHARED_ACTION_QUERY] = {
+               .name = "query",
+               .help = "query shared action",
+               .next = NEXT(NEXT_ENTRY(END), NEXT_ENTRY(SHARED_ACTION_ID)),
+               .args = ARGS(ARGS_ENTRY(struct buffer, args.sa.action_id)),
+               .call = parse_sa,
+       },
        [VALIDATE] = {
                .name = "validate",
                .help = "check whether a flow rule can be created",
@@ -1833,6 +1992,49 @@ static const struct token token_list[] = {
                             ARGS_ENTRY(struct buffer, port)),
                .call = parse_isolate,
        },
+       [TUNNEL] = {
+               .name = "tunnel",
+               .help = "new tunnel API",
+               .next = NEXT(NEXT_ENTRY
+                            (TUNNEL_CREATE, TUNNEL_LIST, TUNNEL_DESTROY)),
+               .call = parse_tunnel,
+       },
+       /* Tunnel arguments. */
+       [TUNNEL_CREATE] = {
+               .name = "create",
+               .help = "create new tunnel object",
+               .next = NEXT(tunnel_create_attr, NEXT_ENTRY(PORT_ID)),
+               .args = ARGS(ARGS_ENTRY(struct buffer, port)),
+               .call = parse_tunnel,
+       },
+       [TUNNEL_CREATE_TYPE] = {
+               .name = "type",
+               .help = "create new tunnel",
+               .next = NEXT(tunnel_create_attr, NEXT_ENTRY(FILE_PATH)),
+               .args = ARGS(ARGS_ENTRY(struct tunnel_ops, type)),
+               .call = parse_tunnel,
+       },
+       [TUNNEL_DESTROY] = {
+               .name = "destroy",
+               .help = "destroy tunel",
+               .next = NEXT(tunnel_destroy_attr, NEXT_ENTRY(PORT_ID)),
+               .args = ARGS(ARGS_ENTRY(struct buffer, port)),
+               .call = parse_tunnel,
+       },
+       [TUNNEL_DESTROY_ID] = {
+               .name = "id",
+               .help = "tunnel identifier to testroy",
+               .next = NEXT(tunnel_destroy_attr, NEXT_ENTRY(UNSIGNED)),
+               .args = ARGS(ARGS_ENTRY(struct tunnel_ops, id)),
+               .call = parse_tunnel,
+       },
+       [TUNNEL_LIST] = {
+               .name = "list",
+               .help = "list existing tunnels",
+               .next = NEXT(tunnel_list_attr, NEXT_ENTRY(PORT_ID)),
+               .args = ARGS(ARGS_ENTRY(struct buffer, port)),
+               .call = parse_tunnel,
+       },
        /* Destroy arguments. */
        [DESTROY_RULE] = {
                .name = "rule",
@@ -1896,6 +2098,20 @@ static const struct token token_list[] = {
                .next = NEXT(next_vc_attr),
                .call = parse_vc,
        },
+       [TUNNEL_SET] = {
+               .name = "tunnel_set",
+               .help = "tunnel steer rule",
+               .next = NEXT(next_vc_attr, NEXT_ENTRY(UNSIGNED)),
+               .args = ARGS(ARGS_ENTRY(struct tunnel_ops, id)),
+               .call = parse_vc,
+       },
+       [TUNNEL_MATCH] = {
+               .name = "tunnel_match",
+               .help = "tunnel match rule",
+               .next = NEXT(next_vc_attr, NEXT_ENTRY(UNSIGNED)),
+               .args = ARGS(ARGS_ENTRY(struct tunnel_ops, id)),
+               .call = parse_vc,
+       },
        /* Validate/create pattern. */
        [PATTERN] = {
                .name = "pattern",
@@ -2099,6 +2315,13 @@ static const struct token token_list[] = {
                .next = NEXT(item_eth, NEXT_ENTRY(UNSIGNED), item_param),
                .args = ARGS(ARGS_ENTRY_HTON(struct rte_flow_item_eth, type)),
        },
+       [ITEM_ETH_HAS_VLAN] = {
+               .name = "has_vlan",
+               .help = "packet header contains VLAN",
+               .next = NEXT(item_eth, NEXT_ENTRY(UNSIGNED), item_param),
+               .args = ARGS(ARGS_ENTRY_BF(struct rte_flow_item_eth,
+                                          has_vlan, 1)),
+       },
        [ITEM_VLAN] = {
                .name = "vlan",
                .help = "match 802.1Q/ad VLAN tag",
@@ -2140,6 +2363,13 @@ static const struct token token_list[] = {
                .args = ARGS(ARGS_ENTRY_HTON(struct rte_flow_item_vlan,
                                             inner_type)),
        },
+       [ITEM_VLAN_HAS_MORE_VLAN] = {
+               .name = "has_more_vlan",
+               .help = "packet header contains another VLAN",
+               .next = NEXT(item_vlan, NEXT_ENTRY(UNSIGNED), item_param),
+               .args = ARGS(ARGS_ENTRY_BF(struct rte_flow_item_vlan,
+                                          has_more_vlan, 1)),
+       },
        [ITEM_IPV4] = {
                .name = "ipv4",
                .help = "match IPv4 header",
@@ -2154,6 +2384,13 @@ static const struct token token_list[] = {
                .args = ARGS(ARGS_ENTRY_HTON(struct rte_flow_item_ipv4,
                                             hdr.type_of_service)),
        },
+       [ITEM_IPV4_FRAGMENT_OFFSET] = {
+               .name = "fragment_offset",
+               .help = "fragmentation flags and fragment offset",
+               .next = NEXT(item_ipv4, NEXT_ENTRY(UNSIGNED), item_param),
+               .args = ARGS(ARGS_ENTRY_HTON(struct rte_flow_item_ipv4,
+                                            hdr.fragment_offset)),
+       },
        [ITEM_IPV4_TTL] = {
                .name = "ttl",
                .help = "time to live",
@@ -2233,6 +2470,13 @@ static const struct token token_list[] = {
                .args = ARGS(ARGS_ENTRY_HTON(struct rte_flow_item_ipv6,
                                             hdr.dst_addr)),
        },
+       [ITEM_IPV6_HAS_FRAG_EXT] = {
+               .name = "has_frag_ext",
+               .help = "fragment packet attribute",
+               .next = NEXT(item_ipv6, NEXT_ENTRY(UNSIGNED), item_param),
+               .args = ARGS(ARGS_ENTRY_BF(struct rte_flow_item_ipv6,
+                                          has_frag_ext, 1)),
+       },
        [ITEM_ICMP] = {
                .name = "icmp",
                .help = "match ICMP header",
@@ -2617,6 +2861,30 @@ static const struct token token_list[] = {
                .args = ARGS(ARGS_ENTRY_HTON(struct rte_flow_item_ipv6_ext,
                                             next_hdr)),
        },
+       [ITEM_IPV6_FRAG_EXT] = {
+               .name = "ipv6_frag_ext",
+               .help = "match presence of IPv6 fragment extension header",
+               .priv = PRIV_ITEM(IPV6_FRAG_EXT,
+                               sizeof(struct rte_flow_item_ipv6_frag_ext)),
+               .next = NEXT(item_ipv6_frag_ext),
+               .call = parse_vc,
+       },
+       [ITEM_IPV6_FRAG_EXT_NEXT_HDR] = {
+               .name = "next_hdr",
+               .help = "next header",
+               .next = NEXT(item_ipv6_frag_ext, NEXT_ENTRY(UNSIGNED),
+                            item_param),
+               .args = ARGS(ARGS_ENTRY(struct rte_flow_item_ipv6_frag_ext,
+                                       hdr.next_header)),
+       },
+       [ITEM_IPV6_FRAG_EXT_FRAG_DATA] = {
+               .name = "frag_data",
+               .help = "Fragment flags and offset",
+               .next = NEXT(item_ipv6_frag_ext, NEXT_ENTRY(UNSIGNED),
+                            item_param),
+               .args = ARGS(ARGS_ENTRY_HTON(struct rte_flow_item_ipv6_frag_ext,
+                                            hdr.frag_data)),
+       },
        [ITEM_ICMP6] = {
                .name = "icmp6",
                .help = "match any ICMPv6 header",
@@ -3966,6 +4234,57 @@ static const struct token token_list[] = {
                .call = parse_vc_action_sample_index,
                .comp = comp_set_sample_index,
        },
+       /* Shared action destroy arguments. */
+       [SHARED_ACTION_DESTROY_ID] = {
+               .name = "action_id",
+               .help = "specify a shared action id to destroy",
+               .next = NEXT(next_sa_destroy_attr,
+                            NEXT_ENTRY(SHARED_ACTION_ID)),
+               .args = ARGS(ARGS_ENTRY_PTR(struct buffer,
+                                           args.sa_destroy.action_id)),
+               .call = parse_sa_destroy,
+       },
+       /* Shared action create arguments. */
+       [SHARED_ACTION_CREATE_ID] = {
+               .name = "action_id",
+               .help = "specify a shared action id to create",
+               .next = NEXT(next_sa_create_attr,
+                            NEXT_ENTRY(SHARED_ACTION_ID)),
+               .args = ARGS(ARGS_ENTRY(struct buffer, args.vc.attr.group)),
+       },
+       [ACTION_SHARED] = {
+               .name = "shared",
+               .help = "apply shared action by id",
+               .priv = PRIV_ACTION(SHARED, 0),
+               .next = NEXT(NEXT_ENTRY(SHARED_ACTION_ID2PTR)),
+               .args = ARGS(ARGS_ENTRY_ARB(0, sizeof(uint32_t))),
+               .call = parse_vc,
+       },
+       [SHARED_ACTION_ID2PTR] = {
+               .name = "{action_id}",
+               .type = "SHARED_ACTION_ID",
+               .help = "shared action id",
+               .next = NEXT(NEXT_ENTRY(ACTION_NEXT)),
+               .call = parse_sa_id2ptr,
+               .comp = comp_none,
+       },
+       [SHARED_ACTION_INGRESS] = {
+               .name = "ingress",
+               .help = "affect rule to ingress",
+               .next = NEXT(next_sa_create_attr),
+               .call = parse_sa,
+       },
+       [SHARED_ACTION_EGRESS] = {
+               .name = "egress",
+               .help = "affect rule to egress",
+               .next = NEXT(next_sa_create_attr),
+               .call = parse_sa,
+       },
+       [SHARED_ACTION_SPEC] = {
+               .name = "action",
+               .help = "specify action to share",
+               .next = NEXT(next_action),
+       },
 };
 
 /** Remove and return last entry from argument stack. */
@@ -4150,6 +4469,97 @@ parse_init(struct context *ctx, const struct token *token,
        return len;
 }
 
+/** Parse tokens for shared action commands. */
+static int
+parse_sa(struct context *ctx, const struct token *token,
+        const char *str, unsigned int len,
+        void *buf, unsigned int size)
+{
+       struct buffer *out = buf;
+
+       /* Token name must match. */
+       if (parse_default(ctx, token, str, len, NULL, 0) < 0)
+               return -1;
+       /* Nothing else to do if there is no buffer. */
+       if (!out)
+               return len;
+       if (!out->command) {
+               if (ctx->curr != SHARED_ACTION)
+                       return -1;
+               if (sizeof(*out) > size)
+                       return -1;
+               out->command = ctx->curr;
+               ctx->objdata = 0;
+               ctx->object = out;
+               ctx->objmask = NULL;
+               out->args.vc.data = (uint8_t *)out + size;
+               return len;
+       }
+       switch (ctx->curr) {
+       case SHARED_ACTION_CREATE:
+       case SHARED_ACTION_UPDATE:
+               out->args.vc.actions =
+                       (void *)RTE_ALIGN_CEIL((uintptr_t)(out + 1),
+                                              sizeof(double));
+               out->args.vc.attr.group = UINT32_MAX;
+               /* fallthrough */
+       case SHARED_ACTION_QUERY:
+               out->command = ctx->curr;
+               ctx->objdata = 0;
+               ctx->object = out;
+               ctx->objmask = NULL;
+               return len;
+       case SHARED_ACTION_EGRESS:
+               out->args.vc.attr.egress = 1;
+               return len;
+       case SHARED_ACTION_INGRESS:
+               out->args.vc.attr.ingress = 1;
+               return len;
+       default:
+               return -1;
+       }
+}
+
+
+/** Parse tokens for shared action destroy command. */
+static int
+parse_sa_destroy(struct context *ctx, const struct token *token,
+                const char *str, unsigned int len,
+                void *buf, unsigned int size)
+{
+       struct buffer *out = buf;
+       uint32_t *action_id;
+
+       /* Token name must match. */
+       if (parse_default(ctx, token, str, len, NULL, 0) < 0)
+               return -1;
+       /* Nothing else to do if there is no buffer. */
+       if (!out)
+               return len;
+       if (!out->command || out->command == SHARED_ACTION) {
+               if (ctx->curr != SHARED_ACTION_DESTROY)
+                       return -1;
+               if (sizeof(*out) > size)
+                       return -1;
+               out->command = ctx->curr;
+               ctx->objdata = 0;
+               ctx->object = out;
+               ctx->objmask = NULL;
+               out->args.sa_destroy.action_id =
+                       (void *)RTE_ALIGN_CEIL((uintptr_t)(out + 1),
+                                              sizeof(double));
+               return len;
+       }
+       action_id = out->args.sa_destroy.action_id
+                   + out->args.sa_destroy.action_id_n++;
+       if ((uint8_t *)action_id > (uint8_t *)out + size)
+               return -1;
+       ctx->objdata = 0;
+       ctx->object = action_id;
+       ctx->objmask = NULL;
+       return len;
+}
+
 /** Parse tokens for validate/create commands. */
 static int
 parse_vc(struct context *ctx, const struct token *token,
@@ -4179,12 +4589,28 @@ parse_vc(struct context *ctx, const struct token *token,
                return len;
        }
        ctx->objdata = 0;
-       ctx->object = &out->args.vc.attr;
+       switch (ctx->curr) {
+       default:
+               ctx->object = &out->args.vc.attr;
+               break;
+       case TUNNEL_SET:
+       case TUNNEL_MATCH:
+               ctx->object = &out->args.vc.tunnel_ops;
+               break;
+       }
        ctx->objmask = NULL;
        switch (ctx->curr) {
        case GROUP:
        case PRIORITY:
                return len;
+       case TUNNEL_SET:
+               out->args.vc.tunnel_ops.enabled = 1;
+               out->args.vc.tunnel_ops.actions = 1;
+               return len;
+       case TUNNEL_MATCH:
+               out->args.vc.tunnel_ops.enabled = 1;
+               out->args.vc.tunnel_ops.items = 1;
+               return len;
        case INGRESS:
                out->args.vc.attr.ingress = 1;
                return len;
@@ -4424,30 +4850,15 @@ parse_vc_action_rss(struct context *ctx, const struct token *token,
                        .func = RTE_ETH_HASH_FUNCTION_DEFAULT,
                        .level = 0,
                        .types = rss_hf,
-                       .key_len = sizeof(action_rss_data->key),
+                       .key_len = 0,
                        .queue_num = RTE_MIN(nb_rxq, ACTION_RSS_QUEUE_NUM),
-                       .key = action_rss_data->key,
+                       .key = NULL,
                        .queue = action_rss_data->queue,
                },
-               .key = "testpmd's default RSS hash key, "
-                       "override it for better balancing",
                .queue = { 0 },
        };
        for (i = 0; i < action_rss_data->conf.queue_num; ++i)
                action_rss_data->queue[i] = i;
-       if (!port_id_is_invalid(ctx->port, DISABLED_WARN) &&
-           ctx->port != (portid_t)RTE_PORT_ALL) {
-               struct rte_eth_dev_info info;
-               int ret2;
-
-               ret2 = rte_eth_dev_info_get(ctx->port, &info);
-               if (ret2 != 0)
-                       return ret2;
-
-               action_rss_data->conf.key_len =
-                       RTE_MIN(sizeof(action_rss_data->key),
-                               info.hash_key_size);
-       }
        action->conf = &action_rss_data->conf;
        return ret;
 }
@@ -5792,6 +6203,47 @@ parse_isolate(struct context *ctx, const struct token *token,
        return len;
 }
 
+static int
+parse_tunnel(struct context *ctx, const struct token *token,
+            const char *str, unsigned int len,
+            void *buf, unsigned int size)
+{
+       struct buffer *out = buf;
+
+       /* Token name must match. */
+       if (parse_default(ctx, token, str, len, NULL, 0) < 0)
+               return -1;
+       /* Nothing else to do if there is no buffer. */
+       if (!out)
+               return len;
+       if (!out->command) {
+               if (ctx->curr != TUNNEL)
+                       return -1;
+               if (sizeof(*out) > size)
+                       return -1;
+               out->command = ctx->curr;
+               ctx->objdata = 0;
+               ctx->object = out;
+               ctx->objmask = NULL;
+       } else {
+               switch (ctx->curr) {
+               default:
+                       break;
+               case TUNNEL_CREATE:
+               case TUNNEL_DESTROY:
+               case TUNNEL_LIST:
+                       out->command = ctx->curr;
+                       break;
+               case TUNNEL_CREATE_TYPE:
+               case TUNNEL_DESTROY_ID:
+                       ctx->object = &out->args.vc.tunnel_ops;
+                       break;
+               }
+       }
+
+       return len;
+}
+
 /**
  * Parse signed/unsigned integers 8 to 64-bit long.
  *
@@ -6287,6 +6739,32 @@ parse_port(struct context *ctx, const struct token *token,
        return ret;
 }
 
+static int
+parse_sa_id2ptr(struct context *ctx, const struct token *token,
+               const char *str, unsigned int len,
+               void *buf, unsigned int size)
+{
+       struct rte_flow_action *action = ctx->object;
+       uint32_t id;
+       int ret;
+
+       (void)buf;
+       (void)size;
+       ctx->objdata = 0;
+       ctx->object = &id;
+       ctx->objmask = NULL;
+       ret = parse_int(ctx, token, str, len, ctx->object, sizeof(id));
+       ctx->object = action;
+       if (ret != (int)len)
+               return ret;
+       /* set shared action */
+       if (action) {
+               action->conf = port_shared_action_get_by_id(ctx->port, id);
+               ret = (action->conf) ? ret : -1;
+       }
+       return ret;
+}
+
 /** Parse set command, initialize output buffer for subsequent tokens. */
 static int
 parse_set_raw_encap_decap(struct context *ctx, const struct token *token,
@@ -6783,13 +7261,36 @@ static void
 cmd_flow_parsed(const struct buffer *in)
 {
        switch (in->command) {
+       case SHARED_ACTION_CREATE:
+               port_shared_action_create(
+                               in->port, in->args.vc.attr.group,
+                               &((const struct rte_flow_shared_action_conf) {
+                                       .ingress = in->args.vc.attr.ingress,
+                                       .egress = in->args.vc.attr.egress,
+                               }),
+                               in->args.vc.actions);
+               break;
+       case SHARED_ACTION_DESTROY:
+               port_shared_action_destroy(in->port,
+                                          in->args.sa_destroy.action_id_n,
+                                          in->args.sa_destroy.action_id);
+               break;
+       case SHARED_ACTION_UPDATE:
+               port_shared_action_update(in->port, in->args.vc.attr.group,
+                                         in->args.vc.actions);
+               break;
+       case SHARED_ACTION_QUERY:
+               port_shared_action_query(in->port, in->args.sa.action_id);
+               break;
        case VALIDATE:
                port_flow_validate(in->port, &in->args.vc.attr,
-                                  in->args.vc.pattern, in->args.vc.actions);
+                                  in->args.vc.pattern, in->args.vc.actions,
+                                  &in->args.vc.tunnel_ops);
                break;
        case CREATE:
                port_flow_create(in->port, &in->args.vc.attr,
-                                in->args.vc.pattern, in->args.vc.actions);
+                                in->args.vc.pattern, in->args.vc.actions,
+                                &in->args.vc.tunnel_ops);
                break;
        case DESTROY:
                port_flow_destroy(in->port, in->args.destroy.rule_n,
@@ -6815,6 +7316,15 @@ cmd_flow_parsed(const struct buffer *in)
        case AGED:
                port_flow_aged(in->port, in->args.aged.destroy);
                break;
+       case TUNNEL_CREATE:
+               port_flow_tunnel_create(in->port, &in->args.vc.tunnel_ops);
+               break;
+       case TUNNEL_DESTROY:
+               port_flow_tunnel_destroy(in->port, in->args.vc.tunnel_ops.id);
+               break;
+       case TUNNEL_LIST:
+               port_flow_tunnel_list(in->port);
+               break;
        default:
                break;
        }