net/virtio: allocate fake mbuf in Rx queue
[dpdk.git] / drivers / net / mlx5 / mlx5_flow_dv.c
index 8c11ac3..223a7d0 100644 (file)
@@ -1345,11 +1345,13 @@ mlx5_flow_field_id_to_modify_info
                        if (data->offset < 32) {
                                info[idx] = (struct field_modify_info){4, 0,
                                                MLX5_MODI_OUT_DMAC_47_16};
-                               mask[idx] = 0xffffffff;
                                if (width < 32) {
-                                       mask[idx] = mask[idx] << (32 - width);
+                                       mask[idx] =
+                                               rte_cpu_to_be_32(0xffffffff >>
+                                                                (32 - width));
                                        width = 0;
                                } else {
+                                       mask[idx] = RTE_BE32(0xffffffff);
                                        width -= 32;
                                }
                                if (!width)
@@ -1358,10 +1360,8 @@ mlx5_flow_field_id_to_modify_info
                        }
                        info[idx] = (struct field_modify_info){2, 4 * idx,
                                                MLX5_MODI_OUT_DMAC_15_0};
-                       mask[idx] = (width) ? 0x0000ffff : 0x0;
-                       if (width < 16)
-                               mask[idx] = (mask[idx] << (16 - width)) &
-                                               0x0000ffff;
+                       mask[idx] = rte_cpu_to_be_32(0x0000ffff >>
+                                                    (16 - width));
                } else {
                        if (data->offset < 32)
                                info[idx++] = (struct field_modify_info){4, 0,
@@ -1375,11 +1375,13 @@ mlx5_flow_field_id_to_modify_info
                        if (data->offset < 32) {
                                info[idx] = (struct field_modify_info){4, 0,
                                                MLX5_MODI_OUT_SMAC_47_16};
-                               mask[idx] = 0xffffffff;
                                if (width < 32) {
-                                       mask[idx] = mask[idx] << (32 - width);
+                                       mask[idx] =
+                                               rte_cpu_to_be_32(0xffffffff >>
+                                                               (32 - width));
                                        width = 0;
                                } else {
+                                       mask[idx] = RTE_BE32(0xffffffff);
                                        width -= 32;
                                }
                                if (!width)
@@ -1388,10 +1390,8 @@ mlx5_flow_field_id_to_modify_info
                        }
                        info[idx] = (struct field_modify_info){2, 4 * idx,
                                                MLX5_MODI_OUT_SMAC_15_0};
-                       mask[idx] = (width) ? 0x0000ffff : 0x0;
-                       if (width < 16)
-                               mask[idx] = (mask[idx] << (16 - width)) &
-                                               0x0000ffff;
+                       mask[idx] = rte_cpu_to_be_32(0x0000ffff >>
+                                                    (16 - width));
                } else {
                        if (data->offset < 32)
                                info[idx++] = (struct field_modify_info){4, 0,
@@ -1406,91 +1406,71 @@ mlx5_flow_field_id_to_modify_info
        case RTE_FLOW_FIELD_VLAN_ID:
                info[idx] = (struct field_modify_info){2, 0,
                                        MLX5_MODI_OUT_FIRST_VID};
-               if (mask) {
-                       mask[idx] = 0x00000fff;
-                       if (width < 12)
-                               mask[idx] = (mask[idx] << (12 - width)) &
-                                               0x00000fff;
-               }
+               if (mask)
+                       mask[idx] = rte_cpu_to_be_32(0x00000fff >>
+                                                    (12 - width));
                break;
        case RTE_FLOW_FIELD_MAC_TYPE:
                info[idx] = (struct field_modify_info){2, 0,
                                        MLX5_MODI_OUT_ETHERTYPE};
-               if (mask) {
-                       mask[idx] = 0x0000ffff;
-                       if (width < 16)
-                               mask[idx] = (mask[idx] << (16 - width)) &
-                                               0x0000ffff;
-               }
+               if (mask)
+                       mask[idx] = rte_cpu_to_be_32(0x0000ffff >>
+                                                    (16 - width));
                break;
        case RTE_FLOW_FIELD_IPV4_DSCP:
                info[idx] = (struct field_modify_info){1, 0,
                                        MLX5_MODI_OUT_IP_DSCP};
-               if (mask) {
-                       mask[idx] = 0x0000003f;
-                       if (width < 6)
-                               mask[idx] = (mask[idx] << (6 - width)) &
-                                               0x0000003f;
-               }
+               if (mask)
+                       mask[idx] = rte_cpu_to_be_32(0x0000003f >>
+                                                    (6 - width));
                break;
        case RTE_FLOW_FIELD_IPV4_TTL:
                info[idx] = (struct field_modify_info){1, 0,
                                        MLX5_MODI_OUT_IPV4_TTL};
-               if (mask) {
-                       mask[idx] = 0x000000ff;
-                       if (width < 8)
-                               mask[idx] = (mask[idx] << (8 - width)) &
-                                               0x000000ff;
-               }
+               if (mask)
+                       mask[idx] = rte_cpu_to_be_32(0x000000ff >>
+                                                    (8 - width));
                break;
        case RTE_FLOW_FIELD_IPV4_SRC:
                info[idx] = (struct field_modify_info){4, 0,
                                        MLX5_MODI_OUT_SIPV4};
-               if (mask) {
-                       mask[idx] = 0xffffffff;
-                       if (width < 32)
-                               mask[idx] = mask[idx] << (32 - width);
-               }
+               if (mask)
+                       mask[idx] = rte_cpu_to_be_32(0xffffffff >>
+                                                    (32 - width));
                break;
        case RTE_FLOW_FIELD_IPV4_DST:
                info[idx] = (struct field_modify_info){4, 0,
                                        MLX5_MODI_OUT_DIPV4};
-               if (mask) {
-                       mask[idx] = 0xffffffff;
-                       if (width < 32)
-                               mask[idx] = mask[idx] << (32 - width);
-               }
+               if (mask)
+                       mask[idx] = rte_cpu_to_be_32(0xffffffff >>
+                                                    (32 - width));
                break;
        case RTE_FLOW_FIELD_IPV6_DSCP:
                info[idx] = (struct field_modify_info){1, 0,
                                        MLX5_MODI_OUT_IP_DSCP};
-               if (mask) {
-                       mask[idx] = 0x0000003f;
-                       if (width < 6)
-                               mask[idx] = (mask[idx] << (6 - width)) &
-                                               0x0000003f;
-               }
+               if (mask)
+                       mask[idx] = rte_cpu_to_be_32(0x0000003f >>
+                                                    (6 - width));
                break;
        case RTE_FLOW_FIELD_IPV6_HOPLIMIT:
                info[idx] = (struct field_modify_info){1, 0,
                                        MLX5_MODI_OUT_IPV6_HOPLIMIT};
-               if (mask) {
-                       mask[idx] = 0x000000ff;
-                       if (width < 8)
-                               mask[idx] = (mask[idx] << (8 - width)) &
-                                               0x000000ff;
-               }
+               if (mask)
+                       mask[idx] = rte_cpu_to_be_32(0x000000ff >>
+                                                    (8 - width));
                break;
        case RTE_FLOW_FIELD_IPV6_SRC:
                if (mask) {
                        if (data->offset < 32) {
                                info[idx] = (struct field_modify_info){4, 0,
                                                MLX5_MODI_OUT_SIPV6_127_96};
-                               mask[idx] = 0xffffffff;
                                if (width < 32) {
-                                       mask[idx] = mask[idx] << (32 - width);
+                                       mask[idx] =
+                                               rte_cpu_to_be_32(0xffffffff >>
+                                                                (32 - width));
                                        width = 0;
                                } else {
+                                       mask[idx] = RTE_BE32(0xffffffff);
                                        width -= 32;
                                }
                                if (!width)
@@ -1501,11 +1481,13 @@ mlx5_flow_field_id_to_modify_info
                                info[idx] = (struct field_modify_info){4,
                                                4 * idx,
                                                MLX5_MODI_OUT_SIPV6_95_64};
-                               mask[idx] = 0xffffffff;
                                if (width < 32) {
-                                       mask[idx] = mask[idx] << (32 - width);
+                                       mask[idx] =
+                                               rte_cpu_to_be_32(0xffffffff >>
+                                                                (32 - width));
                                        width = 0;
                                } else {
+                                       mask[idx] = RTE_BE32(0xffffffff);
                                        width -= 32;
                                }
                                if (!width)
@@ -1516,11 +1498,13 @@ mlx5_flow_field_id_to_modify_info
                                info[idx] = (struct field_modify_info){4,
                                                8 * idx,
                                                MLX5_MODI_OUT_SIPV6_63_32};
-                               mask[idx] = 0xffffffff;
                                if (width < 32) {
-                                       mask[idx] = mask[idx] << (32 - width);
+                                       mask[idx] =
+                                               rte_cpu_to_be_32(0xffffffff >>
+                                                                (32 - width));
                                        width = 0;
                                } else {
+                                       mask[idx] = RTE_BE32(0xffffffff);
                                        width -= 32;
                                }
                                if (!width)
@@ -1529,9 +1513,8 @@ mlx5_flow_field_id_to_modify_info
                        }
                        info[idx] = (struct field_modify_info){4, 12 * idx,
                                                MLX5_MODI_OUT_SIPV6_31_0};
-                       mask[idx] = 0xffffffff;
-                       if (width < 32)
-                               mask[idx] = mask[idx] << (32 - width);
+                       mask[idx] = rte_cpu_to_be_32(0xffffffff >>
+                                                    (32 - width));
                } else {
                        if (data->offset < 32)
                                info[idx++] = (struct field_modify_info){4, 0,
@@ -1552,11 +1535,13 @@ mlx5_flow_field_id_to_modify_info
                        if (data->offset < 32) {
                                info[idx] = (struct field_modify_info){4, 0,
                                                MLX5_MODI_OUT_DIPV6_127_96};
-                               mask[idx] = 0xffffffff;
                                if (width < 32) {
-                                       mask[idx] = mask[idx] << (32 - width);
+                                       mask[idx] =
+                                               rte_cpu_to_be_32(0xffffffff >>
+                                                                (32 - width));
                                        width = 0;
                                } else {
+                                       mask[idx] = RTE_BE32(0xffffffff);
                                        width -= 32;
                                }
                                if (!width)
@@ -1567,11 +1552,13 @@ mlx5_flow_field_id_to_modify_info
                                info[idx] = (struct field_modify_info){4,
                                                4 * idx,
                                                MLX5_MODI_OUT_DIPV6_95_64};
-                               mask[idx] = 0xffffffff;
                                if (width < 32) {
-                                       mask[idx] = mask[idx] << (32 - width);
+                                       mask[idx] =
+                                               rte_cpu_to_be_32(0xffffffff >>
+                                                                (32 - width));
                                        width = 0;
                                } else {
+                                       mask[idx] = RTE_BE32(0xffffffff);
                                        width -= 32;
                                }
                                if (!width)
@@ -1582,11 +1569,13 @@ mlx5_flow_field_id_to_modify_info
                                info[idx] = (struct field_modify_info){4,
                                                8 * idx,
                                                MLX5_MODI_OUT_DIPV6_63_32};
-                               mask[idx] = 0xffffffff;
                                if (width < 32) {
-                                       mask[idx] = mask[idx] << (32 - width);
+                                       mask[idx] =
+                                               rte_cpu_to_be_32(0xffffffff >>
+                                                                (32 - width));
                                        width = 0;
                                } else {
+                                       mask[idx] = RTE_BE32(0xffffffff);
                                        width -= 32;
                                }
                                if (!width)
@@ -1595,9 +1584,8 @@ mlx5_flow_field_id_to_modify_info
                        }
                        info[idx] = (struct field_modify_info){4, 12 * idx,
                                                MLX5_MODI_OUT_DIPV6_31_0};
-                       mask[idx] = 0xffffffff;
-                       if (width < 32)
-                               mask[idx] = mask[idx] << (32 - width);
+                       mask[idx] = rte_cpu_to_be_32(0xffffffff >>
+                                                    (32 - width));
                } else {
                        if (data->offset < 32)
                                info[idx++] = (struct field_modify_info){4, 0,
@@ -1616,70 +1604,51 @@ mlx5_flow_field_id_to_modify_info
        case RTE_FLOW_FIELD_TCP_PORT_SRC:
                info[idx] = (struct field_modify_info){2, 0,
                                        MLX5_MODI_OUT_TCP_SPORT};
-               if (mask) {
-                       mask[idx] = 0x0000ffff;
-                       if (width < 16)
-                               mask[idx] = (mask[idx] << (16 - width)) &
-                                               0x0000ffff;
-               }
+               if (mask)
+                       mask[idx] = rte_cpu_to_be_32(0x0000ffff >>
+                                                    (16 - width));
                break;
        case RTE_FLOW_FIELD_TCP_PORT_DST:
                info[idx] = (struct field_modify_info){2, 0,
                                        MLX5_MODI_OUT_TCP_DPORT};
-               if (mask) {
-                       mask[idx] = 0x0000ffff;
-                       if (width < 16)
-                               mask[idx] = (mask[idx] << (16 - width)) &
-                                               0x0000ffff;
-               }
+               if (mask)
+                       mask[idx] = rte_cpu_to_be_32(0x0000ffff >>
+                                                    (16 - width));
                break;
        case RTE_FLOW_FIELD_TCP_SEQ_NUM:
                info[idx] = (struct field_modify_info){4, 0,
                                        MLX5_MODI_OUT_TCP_SEQ_NUM};
-               if (mask) {
-                       mask[idx] = 0xffffffff;
-                       if (width < 32)
-                               mask[idx] = (mask[idx] << (32 - width));
-               }
+               if (mask)
+                       mask[idx] = rte_cpu_to_be_32(0xffffffff >>
+                                                    (32 - width));
                break;
        case RTE_FLOW_FIELD_TCP_ACK_NUM:
                info[idx] = (struct field_modify_info){4, 0,
                                        MLX5_MODI_OUT_TCP_ACK_NUM};
-               if (mask) {
-                       mask[idx] = 0xffffffff;
-                       if (width < 32)
-                               mask[idx] = (mask[idx] << (32 - width));
-               }
+               if (mask)
+                       mask[idx] = rte_cpu_to_be_32(0xffffffff >>
+                                                    (32 - width));
                break;
        case RTE_FLOW_FIELD_TCP_FLAGS:
                info[idx] = (struct field_modify_info){1, 0,
-                                       MLX5_MODI_IN_TCP_FLAGS};
-               if (mask) {
-                       mask[idx] = 0x0000003f;
-                       if (width < 6)
-                               mask[idx] = (mask[idx] << (6 - width)) &
-                                               0x0000003f;
-               }
+                                       MLX5_MODI_OUT_TCP_FLAGS};
+               if (mask)
+                       mask[idx] = rte_cpu_to_be_32(0x0000003f >>
+                                                    (6 - width));
                break;
        case RTE_FLOW_FIELD_UDP_PORT_SRC:
                info[idx] = (struct field_modify_info){2, 0,
                                        MLX5_MODI_OUT_UDP_SPORT};
-               if (mask) {
-                       mask[idx] = 0x0000ffff;
-                       if (width < 16)
-                               mask[idx] = (mask[idx] << (16 - width)) &
-                                               0x0000ffff;
-               }
+               if (mask)
+                       mask[idx] = rte_cpu_to_be_32(0x0000ffff >>
+                                                    (16 - width));
                break;
        case RTE_FLOW_FIELD_UDP_PORT_DST:
                info[idx] = (struct field_modify_info){2, 0,
                                        MLX5_MODI_OUT_UDP_DPORT};
-               if (mask) {
-                       mask[idx] = 0x0000ffff;
-                       if (width < 16)
-                               mask[idx] = (mask[idx] << (16 - width)) &
-                                               0x0000ffff;
-               }
+               if (mask)
+                       mask[idx] = rte_cpu_to_be_32(0x0000ffff >>
+                                                    (16 - width));
                break;
        case RTE_FLOW_FIELD_VXLAN_VNI:
                /* not supported yet */
@@ -1690,11 +1659,9 @@ mlx5_flow_field_id_to_modify_info
        case RTE_FLOW_FIELD_GTP_TEID:
                info[idx] = (struct field_modify_info){4, 0,
                                        MLX5_MODI_GTP_TEID};
-               if (mask) {
-                       mask[idx] = 0xffffffff;
-                       if (width < 32)
-                               mask[idx] = mask[idx] << (32 - width);
-               }
+               if (mask)
+                       mask[idx] = rte_cpu_to_be_32(0xffffffff >>
+                                                    (32 - width));
                break;
        case RTE_FLOW_FIELD_TAG:
                {
@@ -1706,11 +1673,10 @@ mlx5_flow_field_id_to_modify_info
                        MLX5_ASSERT((unsigned int)reg < RTE_DIM(reg_to_field));
                        info[idx] = (struct field_modify_info){4, 0,
                                                reg_to_field[reg]};
-                       if (mask) {
-                               mask[idx] = 0xffffffff;
-                               if (width < 32)
-                                       mask[idx] = mask[idx] << (32 - width);
-                       }
+                       if (mask)
+                               mask[idx] =
+                                       rte_cpu_to_be_32(0xffffffff >>
+                                                        (32 - width));
                }
                break;
        case RTE_FLOW_FIELD_MARK:
@@ -1723,11 +1689,10 @@ mlx5_flow_field_id_to_modify_info
                        MLX5_ASSERT((unsigned int)reg < RTE_DIM(reg_to_field));
                        info[idx] = (struct field_modify_info){4, 0,
                                                reg_to_field[reg]};
-                       if (mask) {
-                               mask[idx] = 0xffffffff;
-                               if (width < 32)
-                                       mask[idx] = mask[idx] << (32 - width);
-                       }
+                       if (mask)
+                               mask[idx] =
+                                       rte_cpu_to_be_32(0xffffffff >>
+                                                        (32 - width));
                }
                break;
        case RTE_FLOW_FIELD_META:
@@ -1739,11 +1704,10 @@ mlx5_flow_field_id_to_modify_info
                        MLX5_ASSERT((unsigned int)reg < RTE_DIM(reg_to_field));
                        info[idx] = (struct field_modify_info){4, 0,
                                                reg_to_field[reg]};
-                       if (mask) {
-                               mask[idx] = 0xffffffff;
-                               if (width < 32)
-                                       mask[idx] = mask[idx] << (32 - width);
-                       }
+                       if (mask)
+                               mask[idx] =
+                                       rte_cpu_to_be_32(0xffffffff >>
+                                                        (32 - width));
                }
                break;
        case RTE_FLOW_FIELD_POINTER:
@@ -1751,7 +1715,7 @@ mlx5_flow_field_id_to_modify_info
                        if (mask[idx]) {
                                memcpy(&value[idx],
                                        (void *)(uintptr_t)data->value, 32);
-                               value[idx] = RTE_BE32(value[idx]);
+                               value[idx] = rte_cpu_to_be_32(value[idx]);
                                break;
                        }
                }
@@ -1759,7 +1723,8 @@ mlx5_flow_field_id_to_modify_info
        case RTE_FLOW_FIELD_VALUE:
                for (idx = 0; idx < MLX5_ACT_MAX_MOD_FIELDS; idx++) {
                        if (mask[idx]) {
-                               value[idx] = RTE_BE32((uint32_t)data->value);
+                               value[idx] =
+                                       rte_cpu_to_be_32((uint32_t)data->value);
                                break;
                        }
                }
@@ -1960,13 +1925,20 @@ flow_dv_validate_item_meta(struct rte_eth_dev *dev __rte_unused,
                                          "isn't supported");
                if (reg != REG_A)
                        nic_mask.data = priv->sh->dv_meta_mask;
-       } else if (attr->transfer) {
-               return rte_flow_error_set(error, ENOTSUP,
+       } else {
+               if (attr->transfer)
+                       return rte_flow_error_set(error, ENOTSUP,
                                        RTE_FLOW_ERROR_TYPE_ITEM, item,
                                        "extended metadata feature "
                                        "should be enabled when "
                                        "meta item is requested "
                                        "with e-switch mode ");
+               if (attr->ingress)
+                       return rte_flow_error_set(error, ENOTSUP,
+                                       RTE_FLOW_ERROR_TYPE_ITEM, item,
+                                       "match on metadata for ingress "
+                                       "is not supported in legacy "
+                                       "metadata mode");
        }
        if (!mask)
                mask = &rte_flow_item_meta_mask;
@@ -3118,6 +3090,8 @@ flow_dv_validate_action_set_tag(struct rte_eth_dev *dev,
  *
  * @param[in] dev
  *   Pointer to rte_eth_dev structure.
+ * @param[in] action
+ *   Pointer to the action structure.
  * @param[in] action_flags
  *   Holds the actions detected until now.
  * @param[out] error
@@ -3128,17 +3102,25 @@ flow_dv_validate_action_set_tag(struct rte_eth_dev *dev,
  */
 static int
 flow_dv_validate_action_count(struct rte_eth_dev *dev,
+                             const struct rte_flow_action *action,
                              uint64_t action_flags,
                              struct rte_flow_error *error)
 {
        struct mlx5_priv *priv = dev->data->dev_private;
+       const struct rte_flow_action_count *count;
 
+       if (!priv->config.devx)
+               goto notsup_err;
        if (action_flags & MLX5_FLOW_ACTION_COUNT)
                return rte_flow_error_set(error, EINVAL,
                                          RTE_FLOW_ERROR_TYPE_ACTION, NULL,
                                          "duplicate count actions set");
-       if (!priv->config.devx)
-               goto notsup_err;
+       count = (const struct rte_flow_action_count *)action->conf;
+       if (count && count->shared && (action_flags & MLX5_FLOW_ACTION_AGE) &&
+           !priv->sh->flow_hit_aso_en)
+               return rte_flow_error_set(error, EINVAL,
+                                         RTE_FLOW_ERROR_TYPE_ACTION, NULL,
+                                         "old age and shared count combination is not supported");
 #ifdef HAVE_IBV_FLOW_DEVX_COUNTERS
        return 0;
 #endif
@@ -3595,6 +3577,7 @@ flow_dv_port_id_create_cb(struct mlx5_cache_list *list,
                                   "cannot create action");
                return NULL;
        }
+       cache->idx = idx;
        return &cache->entry;
 }
 
@@ -3686,6 +3669,7 @@ flow_dv_push_vlan_create_cb(struct mlx5_cache_list *list,
                                   "cannot create push vlan action");
                return NULL;
        }
+       cache->idx = idx;
        return &cache->entry;
 }
 
@@ -4558,13 +4542,14 @@ mlx5_flow_item_field_width(enum rte_flow_field_id field)
 
 /**
  * Validate the generic modify field actions.
- *
+ * @param[in] dev
+ *   Pointer to the rte_eth_dev structure.
  * @param[in] action_flags
  *   Holds the actions detected until now.
  * @param[in] action
  *   Pointer to the modify action.
- * @param[in] item_flags
- *   Holds the items detected.
+ * @param[in] attr
+ *   Pointer to the flow attributes.
  * @param[out] error
  *   Pointer to error structure.
  *
@@ -4573,11 +4558,15 @@ mlx5_flow_item_field_width(enum rte_flow_field_id field)
  *   a negative errno value otherwise and rte_errno is set.
  */
 static int
-flow_dv_validate_action_modify_field(const uint64_t action_flags,
+flow_dv_validate_action_modify_field(struct rte_eth_dev *dev,
+                                  const uint64_t action_flags,
                                   const struct rte_flow_action *action,
+                                  const struct rte_flow_attr *attr,
                                   struct rte_flow_error *error)
 {
        int ret = 0;
+       struct mlx5_priv *priv = dev->data->dev_private;
+       struct mlx5_dev_config *config = &priv->config;
        const struct rte_flow_action_modify_field *action_modify_field =
                action->conf;
        uint32_t dst_width =
@@ -4589,9 +4578,22 @@ flow_dv_validate_action_modify_field(const uint64_t action_flags,
        if (ret)
                return ret;
 
+       if (action_modify_field->width == 0)
+               return rte_flow_error_set(error, EINVAL,
+                                       RTE_FLOW_ERROR_TYPE_ACTION,
+                                       NULL,
+                                       "no bits are requested to be modified");
+       else if (action_modify_field->width > dst_width ||
+                action_modify_field->width > src_width)
+               return rte_flow_error_set(error, EINVAL,
+                                       RTE_FLOW_ERROR_TYPE_ACTION,
+                                       NULL,
+                                       "cannot modify more bits than"
+                                       " the width of a field");
        if (action_modify_field->dst.field != RTE_FLOW_FIELD_VALUE &&
            action_modify_field->dst.field != RTE_FLOW_FIELD_POINTER) {
-               if (action_modify_field->dst.offset >= dst_width ||
+               if ((action_modify_field->dst.offset +
+                    action_modify_field->width > dst_width) ||
                    (action_modify_field->dst.offset % 32))
                        return rte_flow_error_set(error, EINVAL,
                                                RTE_FLOW_ERROR_TYPE_ACTION,
@@ -4607,7 +4609,13 @@ flow_dv_validate_action_modify_field(const uint64_t action_flags,
        }
        if (action_modify_field->src.field != RTE_FLOW_FIELD_VALUE &&
            action_modify_field->src.field != RTE_FLOW_FIELD_POINTER) {
-               if (action_modify_field->src.offset >= src_width ||
+               if (!attr->transfer && !attr->group)
+                       return rte_flow_error_set(error, ENOTSUP,
+                                       RTE_FLOW_ERROR_TYPE_ACTION,
+                                       NULL, "modify field action "
+                                       "is not supported for group 0");
+               if ((action_modify_field->src.offset +
+                    action_modify_field->width > src_width) ||
                    (action_modify_field->src.offset % 32))
                        return rte_flow_error_set(error, EINVAL,
                                                RTE_FLOW_ERROR_TYPE_ACTION,
@@ -4621,11 +4629,6 @@ flow_dv_validate_action_modify_field(const uint64_t action_flags,
                                                NULL,
                                                "cannot copy from inner headers");
        }
-       if (action_modify_field->width == 0)
-               return rte_flow_error_set(error, EINVAL,
-                                               RTE_FLOW_ERROR_TYPE_ACTION,
-                                               NULL,
-                                               "width is required for modify action");
        if (action_modify_field->dst.field ==
            action_modify_field->src.field)
                return rte_flow_error_set(error, EINVAL,
@@ -4647,6 +4650,36 @@ flow_dv_validate_action_modify_field(const uint64_t action_flags,
                                NULL,
                                "modifications of an arbitrary"
                                " place in a packet is not supported");
+       if (action_modify_field->dst.field == RTE_FLOW_FIELD_VLAN_TYPE ||
+           action_modify_field->src.field == RTE_FLOW_FIELD_VLAN_TYPE)
+               return rte_flow_error_set(error, EINVAL,
+                               RTE_FLOW_ERROR_TYPE_ACTION,
+                               NULL,
+                               "modifications of the 802.1Q Tag"
+                               " Identifier is not supported");
+       if (action_modify_field->dst.field == RTE_FLOW_FIELD_VXLAN_VNI ||
+           action_modify_field->src.field == RTE_FLOW_FIELD_VXLAN_VNI)
+               return rte_flow_error_set(error, EINVAL,
+                               RTE_FLOW_ERROR_TYPE_ACTION,
+                               NULL,
+                               "modifications of the VXLAN Network"
+                               " Identifier is not supported");
+       if (action_modify_field->dst.field == RTE_FLOW_FIELD_GENEVE_VNI ||
+           action_modify_field->src.field == RTE_FLOW_FIELD_GENEVE_VNI)
+               return rte_flow_error_set(error, EINVAL,
+                               RTE_FLOW_ERROR_TYPE_ACTION,
+                               NULL,
+                               "modifications of the GENEVE Network"
+                               " Identifier is not supported");
+       if (action_modify_field->dst.field == RTE_FLOW_FIELD_MARK ||
+           action_modify_field->src.field == RTE_FLOW_FIELD_MARK) {
+               if (config->dv_xmeta_en == MLX5_XMETA_MODE_LEGACY ||
+                   !mlx5_flow_ext_mreg_supported(dev))
+                       return rte_flow_error_set(error, ENOTSUP,
+                                       RTE_FLOW_ERROR_TYPE_ACTION, action,
+                                       "cannot modify mark without extended"
+                                       " metadata register support");
+       }
        if (action_modify_field->operation != RTE_FLOW_MODIFY_SET)
                return rte_flow_error_set(error, EINVAL,
                                RTE_FLOW_ERROR_TYPE_ACTION,
@@ -5081,6 +5114,10 @@ flow_dv_modify_create_cb(struct mlx5_hlist *list, uint64_t key __rte_unused,
  *   Pointer to the RSS action.
  * @param[out] sample_rss
  *   Pointer to the RSS action in sample action list.
+ * @param[out] count
+ *   Pointer to the COUNT action in sample action list.
+ * @param[out] fdb_mirror_limit
+ *   Pointer to the FDB mirror limitation flag.
  * @param[out] error
  *   Pointer to error structure.
  *
@@ -5095,6 +5132,8 @@ flow_dv_validate_action_sample(uint64_t *action_flags,
                               uint64_t item_flags,
                               const struct rte_flow_action_rss *rss,
                               const struct rte_flow_action_rss **sample_rss,
+                              const struct rte_flow_action_count **count,
+                              int *fdb_mirror_limit,
                               struct rte_flow_error *error)
 {
        struct mlx5_priv *priv = dev->data->dev_private;
@@ -5189,16 +5228,13 @@ flow_dv_validate_action_sample(uint64_t *action_flags,
                        ++actions_n;
                        break;
                case RTE_FLOW_ACTION_TYPE_COUNT:
-                       if (*action_flags & MLX5_FLOW_ACTION_COUNT)
-                               return rte_flow_error_set(error, EINVAL,
-                                               RTE_FLOW_ERROR_TYPE_ACTION,
-                                               action,
-                                               "duplicate count action set");
-                       ret = flow_dv_validate_action_count(dev,
-                                                           sub_action_flags,
-                                                           error);
+                       ret = flow_dv_validate_action_count
+                               (dev, act,
+                                *action_flags | sub_action_flags,
+                                error);
                        if (ret < 0)
                                return ret;
+                       *count = act->conf;
                        sub_action_flags |= MLX5_FLOW_ACTION_COUNT;
                        *action_flags |= MLX5_FLOW_ACTION_COUNT;
                        ++actions_n;
@@ -5269,6 +5305,9 @@ flow_dv_validate_action_sample(uint64_t *action_flags,
                                                  NULL,
                                                  "E-Switch must has a dest "
                                                  "port for mirroring");
+               if (!priv->config.hca_attr.reg_c_preserve &&
+                    priv->representor_id != -1)
+                       *fdb_mirror_limit = 1;
        }
        /* Continue validation for Xcap actions.*/
        if ((sub_action_flags & MLX5_FLOW_XCAP_ACTIONS) &&
@@ -6010,6 +6049,8 @@ flow_dv_validate(struct rte_eth_dev *dev, const struct rte_flow_attr *attr,
        uint16_t ether_type = 0;
        int actions_n = 0;
        uint8_t item_ipv6_proto = 0;
+       int fdb_mirror_limit = 0;
+       int modify_after_mirror = 0;
        const struct rte_flow_item *geneve_item = NULL;
        const struct rte_flow_item *gre_item = NULL;
        const struct rte_flow_item *gtp_item = NULL;
@@ -6017,6 +6058,8 @@ flow_dv_validate(struct rte_eth_dev *dev, const struct rte_flow_attr *attr,
        const struct rte_flow_action_raw_encap *encap;
        const struct rte_flow_action_rss *rss = NULL;
        const struct rte_flow_action_rss *sample_rss = NULL;
+       const struct rte_flow_action_count *count = NULL;
+       const struct rte_flow_action_count *sample_count = NULL;
        const struct rte_flow_item_tcp nic_tcp_mask = {
                .hdr = {
                        .tcp_flags = 0xFF,
@@ -6429,6 +6472,9 @@ flow_dv_validate(struct rte_eth_dev *dev, const struct rte_flow_attr *attr,
                                        ++actions_n;
                                action_flags |= MLX5_FLOW_ACTION_FLAG |
                                                MLX5_FLOW_ACTION_MARK_EXT;
+                               if (action_flags & MLX5_FLOW_ACTION_SAMPLE)
+                                       modify_after_mirror = 1;
+
                        } else {
                                action_flags |= MLX5_FLOW_ACTION_FLAG;
                                ++actions_n;
@@ -6448,6 +6494,8 @@ flow_dv_validate(struct rte_eth_dev *dev, const struct rte_flow_attr *attr,
                                        ++actions_n;
                                action_flags |= MLX5_FLOW_ACTION_MARK |
                                                MLX5_FLOW_ACTION_MARK_EXT;
+                               if (action_flags & MLX5_FLOW_ACTION_SAMPLE)
+                                       modify_after_mirror = 1;
                        } else {
                                action_flags |= MLX5_FLOW_ACTION_MARK;
                                ++actions_n;
@@ -6463,6 +6511,8 @@ flow_dv_validate(struct rte_eth_dev *dev, const struct rte_flow_attr *attr,
                        /* Count all modify-header actions as one action. */
                        if (!(action_flags & MLX5_FLOW_MODIFY_HDR_ACTIONS))
                                ++actions_n;
+                       if (action_flags & MLX5_FLOW_ACTION_SAMPLE)
+                               modify_after_mirror = 1;
                        action_flags |= MLX5_FLOW_ACTION_SET_META;
                        rw_act_num += MLX5_ACT_NUM_SET_META;
                        break;
@@ -6475,6 +6525,8 @@ flow_dv_validate(struct rte_eth_dev *dev, const struct rte_flow_attr *attr,
                        /* Count all modify-header actions as one action. */
                        if (!(action_flags & MLX5_FLOW_MODIFY_HDR_ACTIONS))
                                ++actions_n;
+                       if (action_flags & MLX5_FLOW_ACTION_SAMPLE)
+                               modify_after_mirror = 1;
                        action_flags |= MLX5_FLOW_ACTION_SET_TAG;
                        rw_act_num += MLX5_ACT_NUM_SET_TAG;
                        break;
@@ -6528,10 +6580,12 @@ flow_dv_validate(struct rte_eth_dev *dev, const struct rte_flow_attr *attr,
                        ++actions_n;
                        break;
                case RTE_FLOW_ACTION_TYPE_COUNT:
-                       ret = flow_dv_validate_action_count(dev, action_flags,
+                       ret = flow_dv_validate_action_count(dev, actions,
+                                                           action_flags,
                                                            error);
                        if (ret < 0)
                                return ret;
+                       count = actions->conf;
                        action_flags |= MLX5_FLOW_ACTION_COUNT;
                        ++actions_n;
                        break;
@@ -6635,6 +6689,8 @@ flow_dv_validate(struct rte_eth_dev *dev, const struct rte_flow_attr *attr,
                                        RTE_FLOW_ACTION_TYPE_SET_MAC_SRC ?
                                                MLX5_FLOW_ACTION_SET_MAC_SRC :
                                                MLX5_FLOW_ACTION_SET_MAC_DST;
+                       if (action_flags & MLX5_FLOW_ACTION_SAMPLE)
+                               modify_after_mirror = 1;
                        /*
                         * Even if the source and destination MAC addresses have
                         * overlap in the header with 4B alignment, the convert
@@ -6655,6 +6711,8 @@ flow_dv_validate(struct rte_eth_dev *dev, const struct rte_flow_attr *attr,
                        /* Count all modify-header actions as one action. */
                        if (!(action_flags & MLX5_FLOW_MODIFY_HDR_ACTIONS))
                                ++actions_n;
+                       if (action_flags & MLX5_FLOW_ACTION_SAMPLE)
+                               modify_after_mirror = 1;
                        action_flags |= actions->type ==
                                        RTE_FLOW_ACTION_TYPE_SET_IPV4_SRC ?
                                                MLX5_FLOW_ACTION_SET_IPV4_SRC :
@@ -6678,6 +6736,8 @@ flow_dv_validate(struct rte_eth_dev *dev, const struct rte_flow_attr *attr,
                        /* Count all modify-header actions as one action. */
                        if (!(action_flags & MLX5_FLOW_MODIFY_HDR_ACTIONS))
                                ++actions_n;
+                       if (action_flags & MLX5_FLOW_ACTION_SAMPLE)
+                               modify_after_mirror = 1;
                        action_flags |= actions->type ==
                                        RTE_FLOW_ACTION_TYPE_SET_IPV6_SRC ?
                                                MLX5_FLOW_ACTION_SET_IPV6_SRC :
@@ -6695,6 +6755,8 @@ flow_dv_validate(struct rte_eth_dev *dev, const struct rte_flow_attr *attr,
                        /* Count all modify-header actions as one action. */
                        if (!(action_flags & MLX5_FLOW_MODIFY_HDR_ACTIONS))
                                ++actions_n;
+                       if (action_flags & MLX5_FLOW_ACTION_SAMPLE)
+                               modify_after_mirror = 1;
                        action_flags |= actions->type ==
                                        RTE_FLOW_ACTION_TYPE_SET_TP_SRC ?
                                                MLX5_FLOW_ACTION_SET_TP_SRC :
@@ -6712,6 +6774,8 @@ flow_dv_validate(struct rte_eth_dev *dev, const struct rte_flow_attr *attr,
                        /* Count all modify-header actions as one action. */
                        if (!(action_flags & MLX5_FLOW_MODIFY_HDR_ACTIONS))
                                ++actions_n;
+                       if (action_flags & MLX5_FLOW_ACTION_SAMPLE)
+                               modify_after_mirror = 1;
                        action_flags |= actions->type ==
                                        RTE_FLOW_ACTION_TYPE_SET_TTL ?
                                                MLX5_FLOW_ACTION_SET_TTL :
@@ -6725,6 +6789,12 @@ flow_dv_validate(struct rte_eth_dev *dev, const struct rte_flow_attr *attr,
                                                           error);
                        if (ret)
                                return ret;
+                       if ((action_flags & MLX5_FLOW_ACTION_SAMPLE) &&
+                           fdb_mirror_limit)
+                               return rte_flow_error_set(error, EINVAL,
+                                                 RTE_FLOW_ERROR_TYPE_ACTION,
+                                                 NULL,
+                                                 "sample and jump action combination is not supported");
                        ++actions_n;
                        action_flags |= MLX5_FLOW_ACTION_JUMP;
                        break;
@@ -6740,6 +6810,8 @@ flow_dv_validate(struct rte_eth_dev *dev, const struct rte_flow_attr *attr,
                        /* Count all modify-header actions as one action. */
                        if (!(action_flags & MLX5_FLOW_MODIFY_HDR_ACTIONS))
                                ++actions_n;
+                       if (action_flags & MLX5_FLOW_ACTION_SAMPLE)
+                               modify_after_mirror = 1;
                        action_flags |= actions->type ==
                                        RTE_FLOW_ACTION_TYPE_INC_TCP_SEQ ?
                                                MLX5_FLOW_ACTION_INC_TCP_SEQ :
@@ -6758,6 +6830,8 @@ flow_dv_validate(struct rte_eth_dev *dev, const struct rte_flow_attr *attr,
                        /* Count all modify-header actions as one action. */
                        if (!(action_flags & MLX5_FLOW_MODIFY_HDR_ACTIONS))
                                ++actions_n;
+                       if (action_flags & MLX5_FLOW_ACTION_SAMPLE)
+                               modify_after_mirror = 1;
                        action_flags |= actions->type ==
                                        RTE_FLOW_ACTION_TYPE_INC_TCP_ACK ?
                                                MLX5_FLOW_ACTION_INC_TCP_ACK :
@@ -6797,6 +6871,24 @@ flow_dv_validate(struct rte_eth_dev *dev, const struct rte_flow_attr *attr,
                                                          error);
                        if (ret < 0)
                                return ret;
+                       /*
+                        * Validate the regular AGE action (using counter)
+                        * mutual exclusion with share counter actions.
+                        */
+                       if (!priv->sh->flow_hit_aso_en) {
+                               if (count && count->shared)
+                                       return rte_flow_error_set
+                                               (error, EINVAL,
+                                               RTE_FLOW_ERROR_TYPE_ACTION,
+                                               NULL,
+                                               "old age and shared count combination is not supported");
+                               if (sample_count)
+                                       return rte_flow_error_set
+                                               (error, EINVAL,
+                                               RTE_FLOW_ERROR_TYPE_ACTION,
+                                               NULL,
+                                               "old age action and count must be in the same sub flow");
+                       }
                        action_flags |= MLX5_FLOW_ACTION_AGE;
                        ++actions_n;
                        break;
@@ -6811,6 +6903,8 @@ flow_dv_validate(struct rte_eth_dev *dev, const struct rte_flow_attr *attr,
                        /* Count all modify-header actions as one action. */
                        if (!(action_flags & MLX5_FLOW_MODIFY_HDR_ACTIONS))
                                ++actions_n;
+                       if (action_flags & MLX5_FLOW_ACTION_SAMPLE)
+                               modify_after_mirror = 1;
                        action_flags |= MLX5_FLOW_ACTION_SET_IPV4_DSCP;
                        rw_act_num += MLX5_ACT_NUM_SET_DSCP;
                        break;
@@ -6825,6 +6919,8 @@ flow_dv_validate(struct rte_eth_dev *dev, const struct rte_flow_attr *attr,
                        /* Count all modify-header actions as one action. */
                        if (!(action_flags & MLX5_FLOW_MODIFY_HDR_ACTIONS))
                                ++actions_n;
+                       if (action_flags & MLX5_FLOW_ACTION_SAMPLE)
+                               modify_after_mirror = 1;
                        action_flags |= MLX5_FLOW_ACTION_SET_IPV6_DSCP;
                        rw_act_num += MLX5_ACT_NUM_SET_DSCP;
                        break;
@@ -6833,6 +6929,8 @@ flow_dv_validate(struct rte_eth_dev *dev, const struct rte_flow_attr *attr,
                                                             actions, dev,
                                                             attr, item_flags,
                                                             rss, &sample_rss,
+                                                            &sample_count,
+                                                            &fdb_mirror_limit,
                                                             error);
                        if (ret < 0)
                                return ret;
@@ -6851,14 +6949,11 @@ flow_dv_validate(struct rte_eth_dev *dev, const struct rte_flow_attr *attr,
                        action_flags |= MLX5_FLOW_ACTION_TUNNEL_SET;
                        break;
                case RTE_FLOW_ACTION_TYPE_MODIFY_FIELD:
-                       if (!attr->transfer && !attr->group)
-                               return rte_flow_error_set(error, ENOTSUP,
-                                               RTE_FLOW_ERROR_TYPE_ACTION,
-                                               NULL, "modify field action "
-                                               "is not supported for group 0");
-                       ret = flow_dv_validate_action_modify_field(action_flags,
-                                                                actions,
-                                                                error);
+                       ret = flow_dv_validate_action_modify_field(dev,
+                                                                  action_flags,
+                                                                  actions,
+                                                                  attr,
+                                                                  error);
                        if (ret < 0)
                                return ret;
                        /* Count all modify-header actions as one action. */
@@ -7031,6 +7126,11 @@ flow_dv_validate(struct rte_eth_dev *dev, const struct rte_flow_attr *attr,
                                          NULL, "too many header modify"
                                          " actions to support");
        }
+       /* Eswitch egress mirror and modify flow has limitation on CX5 */
+       if (fdb_mirror_limit && modify_after_mirror)
+               return rte_flow_error_set(error, EINVAL,
+                               RTE_FLOW_ERROR_TYPE_ACTION, NULL,
+                               "sample before modify action is not supported");
        return 0;
 }
 
@@ -12552,10 +12652,10 @@ __flow_dv_hrxqs_release(struct rte_eth_dev *dev,
  */
 static int
 __flow_dv_action_rss_hrxqs_release(struct rte_eth_dev *dev,
-                                struct mlx5_shared_action_rss *action)
+                                struct mlx5_shared_action_rss *shared_rss)
 {
-       return __flow_dv_hrxqs_release(dev, &action->hrxq) +
-               __flow_dv_hrxqs_release(dev, &action->hrxq_tunnel);
+       return __flow_dv_hrxqs_release(dev, &shared_rss->hrxq) +
+               __flow_dv_hrxqs_release(dev, &shared_rss->hrxq_tunnel);
 }
 
 /**
@@ -12579,25 +12679,25 @@ __flow_dv_action_rss_hrxqs_release(struct rte_eth_dev *dev,
 static int
 __flow_dv_action_rss_setup(struct rte_eth_dev *dev,
                           uint32_t action_idx,
-                          struct mlx5_shared_action_rss *action,
+                          struct mlx5_shared_action_rss *shared_rss,
                           struct rte_flow_error *error)
 {
        struct mlx5_flow_rss_desc rss_desc = { 0 };
        size_t i;
        int err;
 
-       if (mlx5_ind_table_obj_setup(dev, action->ind_tbl)) {
+       if (mlx5_ind_table_obj_setup(dev, shared_rss->ind_tbl)) {
                return rte_flow_error_set(error, rte_errno,
                                          RTE_FLOW_ERROR_TYPE_UNSPECIFIED, NULL,
                                          "cannot setup indirection table");
        }
-       memcpy(rss_desc.key, action->origin.key, MLX5_RSS_HASH_KEY_LEN);
+       memcpy(rss_desc.key, shared_rss->origin.key, MLX5_RSS_HASH_KEY_LEN);
        rss_desc.key_len = MLX5_RSS_HASH_KEY_LEN;
-       rss_desc.const_q = action->origin.queue;
-       rss_desc.queue_num = action->origin.queue_num;
+       rss_desc.const_q = shared_rss->origin.queue;
+       rss_desc.queue_num = shared_rss->origin.queue_num;
        /* Set non-zero value to indicate a shared RSS. */
        rss_desc.shared_rss = action_idx;
-       rss_desc.ind_tbl = action->ind_tbl;
+       rss_desc.ind_tbl = shared_rss->ind_tbl;
        for (i = 0; i < MLX5_RSS_HASH_FIELDS_LEN; i++) {
                uint32_t hrxq_idx;
                uint64_t hash_fields = mlx5_rss_hash_fields[i];
@@ -12615,16 +12715,16 @@ __flow_dv_action_rss_setup(struct rte_eth_dev *dev,
                                goto error_hrxq_new;
                        }
                        err = __flow_dv_action_rss_hrxq_set
-                               (action, hash_fields, tunnel, hrxq_idx);
+                               (shared_rss, hash_fields, tunnel, hrxq_idx);
                        MLX5_ASSERT(!err);
                }
        }
        return 0;
 error_hrxq_new:
        err = rte_errno;
-       __flow_dv_action_rss_hrxqs_release(dev, action);
-       if (!mlx5_ind_table_obj_release(dev, action->ind_tbl, true))
-               action->ind_tbl = NULL;
+       __flow_dv_action_rss_hrxqs_release(dev, shared_rss);
+       if (!mlx5_ind_table_obj_release(dev, shared_rss->ind_tbl, true))
+               shared_rss->ind_tbl = NULL;
        rte_errno = err;
        return -rte_errno;
 }
@@ -12653,7 +12753,7 @@ __flow_dv_action_rss_create(struct rte_eth_dev *dev,
                            struct rte_flow_error *error)
 {
        struct mlx5_priv *priv = dev->data->dev_private;
-       struct mlx5_shared_action_rss *shared_action = NULL;
+       struct mlx5_shared_action_rss *shared_rss = NULL;
        void *queue = NULL;
        struct rte_flow_action_rss *origin;
        const uint8_t *rss_key;
@@ -12663,9 +12763,9 @@ __flow_dv_action_rss_create(struct rte_eth_dev *dev,
        RTE_SET_USED(conf);
        queue = mlx5_malloc(0, RTE_ALIGN_CEIL(queue_size, sizeof(void *)),
                            0, SOCKET_ID_ANY);
-       shared_action = mlx5_ipool_zmalloc
+       shared_rss = mlx5_ipool_zmalloc
                         (priv->sh->ipool[MLX5_IPOOL_RSS_SHARED_ACTIONS], &idx);
-       if (!shared_action || !queue) {
+       if (!shared_rss || !queue) {
                rte_flow_error_set(error, ENOMEM,
                                   RTE_FLOW_ERROR_TYPE_UNSPECIFIED, NULL,
                                   "cannot allocate resource memory");
@@ -12677,43 +12777,43 @@ __flow_dv_action_rss_create(struct rte_eth_dev *dev,
                                   "rss action number out of range");
                goto error_rss_init;
        }
-       shared_action->ind_tbl = mlx5_malloc(MLX5_MEM_ZERO,
-                                            sizeof(*shared_action->ind_tbl),
-                                            0, SOCKET_ID_ANY);
-       if (!shared_action->ind_tbl) {
+       shared_rss->ind_tbl = mlx5_malloc(MLX5_MEM_ZERO,
+                                         sizeof(*shared_rss->ind_tbl),
+                                         0, SOCKET_ID_ANY);
+       if (!shared_rss->ind_tbl) {
                rte_flow_error_set(error, ENOMEM,
                                   RTE_FLOW_ERROR_TYPE_UNSPECIFIED, NULL,
                                   "cannot allocate resource memory");
                goto error_rss_init;
        }
        memcpy(queue, rss->queue, queue_size);
-       shared_action->ind_tbl->queues = queue;
-       shared_action->ind_tbl->queues_n = rss->queue_num;
-       origin = &shared_action->origin;
+       shared_rss->ind_tbl->queues = queue;
+       shared_rss->ind_tbl->queues_n = rss->queue_num;
+       origin = &shared_rss->origin;
        origin->func = rss->func;
        origin->level = rss->level;
        /* RSS type 0 indicates default RSS type (ETH_RSS_IP). */
        origin->types = !rss->types ? ETH_RSS_IP : rss->types;
        /* NULL RSS key indicates default RSS key. */
        rss_key = !rss->key ? rss_hash_default_key : rss->key;
-       memcpy(shared_action->key, rss_key, MLX5_RSS_HASH_KEY_LEN);
-       origin->key = &shared_action->key[0];
+       memcpy(shared_rss->key, rss_key, MLX5_RSS_HASH_KEY_LEN);
+       origin->key = &shared_rss->key[0];
        origin->key_len = MLX5_RSS_HASH_KEY_LEN;
        origin->queue = queue;
        origin->queue_num = rss->queue_num;
-       if (__flow_dv_action_rss_setup(dev, idx, shared_action, error))
+       if (__flow_dv_action_rss_setup(dev, idx, shared_rss, error))
                goto error_rss_init;
-       rte_spinlock_init(&shared_action->action_rss_sl);
-       __atomic_add_fetch(&shared_action->refcnt, 1, __ATOMIC_RELAXED);
+       rte_spinlock_init(&shared_rss->action_rss_sl);
+       __atomic_add_fetch(&shared_rss->refcnt, 1, __ATOMIC_RELAXED);
        rte_spinlock_lock(&priv->shared_act_sl);
        ILIST_INSERT(priv->sh->ipool[MLX5_IPOOL_RSS_SHARED_ACTIONS],
-                    &priv->rss_shared_actions, idx, shared_action, next);
+                    &priv->rss_shared_actions, idx, shared_rss, next);
        rte_spinlock_unlock(&priv->shared_act_sl);
        return idx;
 error_rss_init:
-       if (shared_action) {
-               if (shared_action->ind_tbl)
-                       mlx5_free(shared_action->ind_tbl);
+       if (shared_rss) {
+               if (shared_rss->ind_tbl)
+                       mlx5_free(shared_rss->ind_tbl);
                mlx5_ipool_free(priv->sh->ipool[MLX5_IPOOL_RSS_SHARED_ACTIONS],
                                idx);
        }
@@ -12758,6 +12858,13 @@ __flow_dv_action_rss_release(struct rte_eth_dev *dev, uint32_t idx,
                                          RTE_FLOW_ERROR_TYPE_ACTION,
                                          NULL,
                                          "shared rss hrxq has references");
+       if (!__atomic_compare_exchange_n(&shared_rss->refcnt, &old_refcnt,
+                                        0, 0, __ATOMIC_ACQUIRE,
+                                        __ATOMIC_RELAXED))
+               return rte_flow_error_set(error, EBUSY,
+                                         RTE_FLOW_ERROR_TYPE_ACTION,
+                                         NULL,
+                                         "shared rss has references");
        queue = shared_rss->ind_tbl->queues;
        remaining = mlx5_ind_table_obj_release(dev, shared_rss->ind_tbl, true);
        if (remaining)
@@ -12766,13 +12873,6 @@ __flow_dv_action_rss_release(struct rte_eth_dev *dev, uint32_t idx,
                                          NULL,
                                          "shared rss indirection table has"
                                          " references");
-       if (!__atomic_compare_exchange_n(&shared_rss->refcnt, &old_refcnt,
-                                        0, 0, __ATOMIC_ACQUIRE,
-                                        __ATOMIC_RELAXED))
-               return rte_flow_error_set(error, EBUSY,
-                                         RTE_FLOW_ERROR_TYPE_ACTION,
-                                         NULL,
-                                         "shared rss has references");
        mlx5_free(queue);
        rte_spinlock_lock(&priv->shared_act_sl);
        ILIST_REMOVE(priv->sh->ipool[MLX5_IPOOL_RSS_SHARED_ACTIONS],
@@ -12920,6 +13020,10 @@ __flow_dv_action_rss_update(struct rte_eth_dev *dev, uint32_t idx,
                return rte_flow_error_set(error, EINVAL,
                                          RTE_FLOW_ERROR_TYPE_ACTION, NULL,
                                          "invalid shared action to update");
+       if (priv->obj_ops.ind_table_modify == NULL)
+               return rte_flow_error_set(error, ENOTSUP,
+                                         RTE_FLOW_ERROR_TYPE_ACTION, NULL,
+                                         "cannot modify indirection table");
        queue = mlx5_malloc(MLX5_MEM_ZERO,
                            RTE_ALIGN_CEIL(queue_size, sizeof(void *)),
                            0, SOCKET_ID_ANY);
@@ -13802,6 +13906,20 @@ flow_dv_action_validate(struct rte_eth_dev *dev,
        RTE_SET_USED(conf);
        switch (action->type) {
        case RTE_FLOW_ACTION_TYPE_RSS:
+               /*
+                * priv->obj_ops is set according to driver capabilities.
+                * When DevX capabilities are
+                * sufficient, it is set to devx_obj_ops.
+                * Otherwise, it is set to ibv_obj_ops.
+                * ibv_obj_ops doesn't support ind_table_modify operation.
+                * In this case the shared RSS action can't be used.
+                */
+               if (priv->obj_ops.ind_table_modify == NULL)
+                       return rte_flow_error_set
+                                       (err, ENOTSUP,
+                                        RTE_FLOW_ERROR_TYPE_ACTION,
+                                        NULL,
+                                        "shared RSS action not supported");
                return mlx5_validate_action_rss(dev, action, err);
        case RTE_FLOW_ACTION_TYPE_AGE:
                if (!priv->sh->aso_age_mng)