From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from NAM03-CO1-obe.outbound.protection.outlook.com (mail-co1nam03on0078.outbound.protection.outlook.com [104.47.40.78]) by dpdk.org (Postfix) with ESMTP id 329BE2C3F for ; Fri, 1 Dec 2017 16:04:23 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=CAVIUMNETWORKS.onmicrosoft.com; s=selector1-cavium-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=0JNgQUcTWJbwSwDTLFPtZANy+OplJFcYDeyKoY5+qEg=; b=k9MIkX5HwxODtJX+4juswB7SpXpfdXyj0NCXebylIJUh4TxU+j5jTTmf3Ln1YI+FD6pTO1hS/kKszU/Vd9/DbfQOSGtJfSoo/3hsmGr47O8E8nkOMbaaMn/h8vMj/Goa6AGGPVsFCXNzhxRBfs1OFYinJHgWMPxH4ECJrKOrYMU= Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=Anoob.Joseph@cavium.com; Received: from [192.168.0.106] (183.82.140.80) by DM5PR0701MB3637.namprd07.prod.outlook.com (2603:10b6:4:7d::38) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.282.5; Fri, 1 Dec 2017 15:04:18 +0000 To: Nelio Laranjeiro Cc: Sergio Gonzalez Monroy , Radu Nicolau , dev@dpdk.org, Narayana Prasad , Jerin Jacob References: <6ac80a2be156911ee35c894924a02f04c43f49fc.1511449894.git.nelio.laranjeiro@6wind.com> <532499c2-b00e-870e-625d-9aa13302a8a3@caviumnetworks.com> <20171129125045.lqfs6xmqradolz4x@laranjeiro-vm.dev.6wind.com> <20171130122800.2cotiud5rdcaqzkm@laranjeiro-vm.dev.6wind.com> From: Anoob Joseph Message-ID: <333ed41b-37c5-db51-45d2-7eabac483d96@caviumnetworks.com> Date: Fri, 1 Dec 2017 20:34:04 +0530 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.5.0 MIME-Version: 1.0 In-Reply-To: <20171130122800.2cotiud5rdcaqzkm@laranjeiro-vm.dev.6wind.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US X-Originating-IP: [183.82.140.80] X-ClientProxiedBy: SG2PR06CA0113.apcprd06.prod.outlook.com (2603:1096:1:1d::15) To DM5PR0701MB3637.namprd07.prod.outlook.com (2603:10b6:4:7d::38) X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 26138b14-87cb-4b3d-850d-08d538ccccb9 X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(4534020)(4602075)(4627115)(201703031133081)(201702281549075)(5600026)(4604075)(2017052603286); SRVR:DM5PR0701MB3637; X-Microsoft-Exchange-Diagnostics: 1; DM5PR0701MB3637; 3:Eiqdv46O5r8FcsgwVmQzroNKMk3rQG4IEN/dzA/4Xpna/gpHnPz2UW8mGR7RH/YmxOxwvBz1pFCij9L/O807rEHvgAlnYSEyy7eJpVTuSE0LCzBKRNZTOq5yBZfW2Z6oyDqORyvicwmDpky58lLhw88puTBFbtsaUlPi820v6KxLaUusQgfUnI9c6zPFioyX2iBM64D34+LJooz9pWtGd0PxfYkRGlp0j6z2mX62Ix7dUrvm0B7LFERfMyd10SZo; 25:2bFhU0vjnWBcWqTmgGsEqPXKlIXuNlxzhgO6FdfCkYIaFVNY8161iOUMpE9lztBm4qigPgckheZoDUDcW0Go89GDCHXQyrZNbCVjxB1ujv8g1Lr0Lskw5sqd1akun9Z5c8l7esoO1a97Fn86K84UmRpPVxerOs6C22Idm9iM65A2UIp0rjaLt3DqwQM9XPIdiiRPvbr7JEuopqbYcwNB972lIATnkFiYZ7wwbWO+SLIgUCw/NxJRJmX+cS4rx63LRqm/QvTo/6sCWw8Wo4sxfFuAp8prVWW53WPJ1vdK8jpOvfkmU7yqYaMHs9Rw9/admNBaiB4MKZ+d1crHTHcPMw==; 31:gp4sGCiz/hh6fJaA3e6cm/eg+ZEbUp+l/bKjVb1ITn0muDMQH1mTAPMqemMzjhO/uqi0GI+TeiKcGwEbfvvSHGeSe1OGA8+1X4C2+AaXFtmwf8ah2APWP8EsOxD2mNO3PSMwK1wyGTeMvF4ua0ZqZwwT9Sv5FKOfXETmFMczoKvpMbcDdl4u3hV9/0bc8SCQVm0VqipkgSuCPd9knc/26R+P9dyj7NBEKujM5dCOYmw= X-MS-TrafficTypeDiagnostic: DM5PR0701MB3637: X-Microsoft-Exchange-Diagnostics: 1; DM5PR0701MB3637; 20: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; 4:jMIe1T/iDNRUGNc7Qm0WflIlvAflnZZa2iq3DIN5XDLNu8cHSW3KIsaOI3aG+ZlFt9b/zU00aGS7unIEn9xsEIwC1my/Wlbc0A48eMKPszbDEk05QuBAEYub+fpRf+a8ERyt7Hyb9pseOahej8e6jif0F94gdmuk8XXHYX3O/GxqxrcgKtXK4UuwvQ78XcrgA0/lbjZy+SdUT+e27UcifhPnieAafz28XY8dW4sX2CZbXk+lEZ94Lc/WfmO9ZNI0AjuEqvNFPB6GE5qs4GZGltDS5MrJGCWqf+kJuuzlfk7pqzVbQAH46yZ0/H9vo+PQ X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:(192374486261705); X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040450)(2401047)(5005006)(8121501046)(10201501046)(3231022)(93006095)(3002001)(6041248)(20161123564025)(20161123560025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123558100)(20161123562025)(20161123555025)(6072148)(201708071742011); SRVR:DM5PR0701MB3637; BCL:0; PCL:0; RULEID:(100000803101)(100110400095); SRVR:DM5PR0701MB3637; X-Forefront-PRVS: 05087F0C24 X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10009020)(6009001)(6049001)(366004)(346002)(376002)(377424004)(52164004)(51914003)(199003)(189002)(24454002)(2486003)(52146003)(52116002)(23676004)(6486002)(31696002)(53936002)(107886003)(6246003)(230700001)(2950100002)(6666003)(7736002)(305945005)(42882006)(189998001)(6916009)(8936002)(3846002)(36756003)(93886005)(64126003)(77096006)(4326008)(6116002)(229853002)(54906003)(478600001)(2906002)(83506002)(67846002)(65806001)(66066001)(65956001)(16576012)(58126008)(31686004)(72206003)(5660300001)(316002)(106356001)(16526018)(97736004)(47776003)(3260700006)(25786009)(117156002)(101416001)(33646002)(81166006)(50466002)(65826007)(8676002)(105586002)(68736007)(54356011)(53546010)(81156014)(76176011); DIR:OUT; SFP:1101; SCL:1; SRVR:DM5PR0701MB3637; H:[192.168.0.106]; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; Received-SPF: None (protection.outlook.com: cavium.com does not designate permitted sender hosts) X-Microsoft-Exchange-Diagnostics: =?utf-8?B?MTtETTVQUjA3MDFNQjM2Mzc7MjM6M0doQk9NMHFyTWkvcmdGenRIVEpyM05k?= =?utf-8?B?eEwyamZ6Mk5ObmxXajZFcFE4NWlSd3NUZWVxUnJZdWE4VGZEbUZUZTJBMUFK?= =?utf-8?B?WDdyYVduaXduT0JLeTJKN3ZQWnNKcmh2RWFKamU1bkdCVzNDU3VJQVlZV3h2?= =?utf-8?B?QWM4d0R5MEpiclMwWmhOV21qMzNSVCtiaEtvWW9UMTE2cjZZUW9QdTlXTG9S?= =?utf-8?B?R1hyV2t4b3RHTDRETWlQOVlsT2tQTVBGd0RGNW5Xd3NHOUZaR3drdVVZV056?= =?utf-8?B?b2ZLWWYzeWdMajZXRks0bmNlb0JFcEJMcXdvVU1QSFBLVGhpTC9HUUlvcVFL?= =?utf-8?B?OE9mVkZQVmNoY2lzck82a0haaUd0Z0FvVWZZWXo3eU5CVldTRTUzVVNMRXZP?= =?utf-8?B?QlhIZnRjVHBudUZhT0FCdG9rVEJ6aUJFZDZzS1V3R1dmV1VaY1owR2VORTVk?= =?utf-8?B?blYyVmtWR2lwNlVBQUYwVExpTG9hdTZDWFhIRENUNkJFT0xnT0NFWUR6akpo?= =?utf-8?B?RVZpTDJYZk5YVGlaOHVWbHY0clRTYUlFdVpvK1ZSblM1U3U1SE5QZUFPc01B?= =?utf-8?B?MHlTemJ0TG9iTVpMUFJCRURKNXV2ZEhqakRCY1UrWXh1Uy9JeHY1dHgwOFBY?= =?utf-8?B?WFNsV2Jtbmlra3BoZmxsTUFiZ3dDS3Y3TEhwTkhwSUxNWTFEejFXYnRISG9D?= =?utf-8?B?ckdVU2wvNGp6Ui90TURHL2lYMmhDdjJ6S1hiZzVRLzJHeHovaFFOelpBc0xi?= =?utf-8?B?c0pJV2g2N0k4b2VPNG5URVpJa1RMWDJ1WlEyejBmOWZYbVd3c1RXZmMxTS9D?= =?utf-8?B?dUJUN09vd0hrS1dlc0hKYkxZcWpmT2hvcUgrREdkLzVXVFZiYnplU0ZxLzRI?= =?utf-8?B?UTJRUkNJWXJ0RUkrNmgyaUcvRmRSL21qSWJSZllxVXZZNW03ZDRzdTdHSEhW?= =?utf-8?B?ZnY1WlNHZEtyRm5zZkNsK01XQWRUQnlrYzZUQVZuS3pPZFh3T01laTRtUTlB?= =?utf-8?B?WVE5N2lqN3ZPZUtwaFE5UjFXS1dUSjNpV2VOZWdkazlpRTJWbDJCZ2crOTM0?= =?utf-8?B?NVMzZDcwUy9TV3U3S0MyRElyL2JvSlBwTGJ0K2NqYWxGZEl4NWhNVXpuTGpD?= =?utf-8?B?OVltcGp4YXp1MDAzU1NJV2NHcjdzTzc1aTFLOS90eTZNR2hvTjQ1dHJoK0k4?= =?utf-8?B?S2F5WVNINU9hR1JjSG12MEFYTDByLzRqanVYRTdMbEpLUVBRcVN5c2NyNTlR?= =?utf-8?B?Sk11aW5GcjVVQ255SDM2SFFYM245VlpUci8wdGJuUzRjbE5sQWYyYk1CcGdT?= =?utf-8?B?OEkwWnA4M09ISEM1Sk5obSsvdUk4YTZ5aThUU0cxVk02OWtMemZzdkJSM3hM?= =?utf-8?B?SXIzNGJnL3dWcXV3TmlRN0VmaTRoUkZpQUJJUWtCSG9XcWRoeVc1VFZjVFVx?= =?utf-8?B?M25GRjNzUG5KNXM1b2dwYnRXWjkxQXRBV0M2NElpVUpsc2VTOEl5MFNFT1pp?= =?utf-8?B?ZnNsS1NMQ0VxZ0ZpR0RxczZXTzVSc01rVjFYNGRkZkZzSnhvajZvU3B6RFo5?= =?utf-8?B?QTFmYkEzY0lSc25ONGlhbmZJMUh0Wi9vMlptV0hPclk0NEZJQ1BRbm5pMFRC?= =?utf-8?B?RkZWNXRCMWhZVmU4Y1hxaGJ1bjhkK3lES2F4OEkyMDV6Um9GZHIvQkhVS1B1?= =?utf-8?B?anhwUHZ5OGNMS00wY1lkcGI5dnNIcGFnNWtjWlFZTDJsSjQ5dmtMb3lHL2RR?= =?utf-8?B?WnpEd0FtbGZqZWRJUEJ6aWZhMEJkaHVNZGRqTTc2VnBFbU01cE1nYnJuOXFS?= =?utf-8?B?VHNzRVh0a0RTcmlhMGJMUFo2NG16cnA0cEsxTUxsemQ1WWpWVWh6b0xNZkIx?= =?utf-8?B?djJYMTRiV2NhRzlWTFFBTjhJZXoyM0h4NnZObkh1SnpoeE5VWHYrQms5ZTlq?= =?utf-8?B?N1NnbmthNXRFKy9PZG90aEtDMUt4SzdCNTdWR29QUmtjek9uaFlVbk9wVzgw?= =?utf-8?B?VkgxTDYwRHdvZkcwL1lNVWRkcms2ZVBNZ01BbXUxV0tjOVhCdm9hTldCVTdB?= =?utf-8?B?VnVJNVlGRWNoUUtieUVCSFVDR3dMcEVUYnJWOHQwdnhxK1RBK3VmUEJydlhW?= =?utf-8?Q?eFkHWW5IS1JNN5aurPpPebX6RV37Nh8rzSnhxxmDnT2uHz?= X-Microsoft-Antispam-Message-Info: Z/Dc1ogYqn/ScfGmXZ5Yak/a3qLVhwrPUdllgGMakBdtd1ZvYKD1DWkTeIsBa//goQRnaCHLI7Mrz+iBXLCGqA== X-Microsoft-Exchange-Diagnostics: 1; DM5PR0701MB3637; 6:/HIWmpvWFPBWWXttM8uRwTFTBSzShs3fJ3+OEoLEb11tOPWiR9tMJczWfnApnYUOz1uRpED5OjSWXAPo4Xh2CMmqtz2RRf/6FoaeyrDS2ERGj8AMWWBuEGaW1DvFeIOEDTiA1Ql+KTqsQVU/6V+OL2BZqeaWDqHN98lr9sqhjmsCSFcwrg2Gf7hrqnUh4S+W4olZpfS1hYDI3Ujy6+o2BCPgFhmhTQl1BrYkDzBZuTFlkoNv3GVdDcxvlpnHz+GBUd4mjIL8xknYx/TVADFh0Kjl92bENQ5A0860JSLx2AMxt0d6IXTpieuK2xwpY/oeHXcqrmSiAm45EK1L4eqQxEFSjmtedlWpmV6E34juqUc=; 5:CQwHD4ssqioId6nTeSGORH8dK+ryoTd/MO0glvSB3PIB4Jj76ovBEEIXTvGjVFXKJHRDaQIwk9E5VamhX1ISJmnaOtUv65LpmUj6wP9ol1p9oDnUTKhtyLhRefoddhifWh5AAMxomhviu1qGXTza6WDEzGteX5SNQeLyYs2VLD0=; 24:Ap39ZJxBmprVGSw4KHN1WYtIr/BgVeH/6j3fDtsEgAwIF0D4+91EpQJUvBWbsi7vJzV7dfC91cddufAv8xoOVoBfjSE80zeD/YQlZ2/fdRM=; 7:f24Vf+vp+QIqzdTsAX9/NFxiaaQ3gnaAXT1yDL6gq/OU3zL5udQAwSpU3ATRuBJ04M4y+Cm2LDb6/jA6IgZbcLgdtOX6VjKr1hIiB0kQGPBN/FPTky1uuqAJNI76qBY8ze78v1uTz8Nz0+d8fdg4HBrZDRMmY7ZwBc5mzF+yjpZRPjor+WjqzYxBmsifcwjeDfHbqSWcVXw55p9dnvFxZnBlzeJLRvlRBlace7c06+09nVkQuPIj9LedXSea+SpJ SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: caviumnetworks.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 01 Dec 2017 15:04:18.1205 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 26138b14-87cb-4b3d-850d-08d538ccccb9 X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 711e4ccf-2e9b-4bcf-a551-4094005b6194 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR0701MB3637 Subject: Re: [dpdk-dev] [PATCH 2/2] examples/ipsec-secgw: add target queues in flow actions X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Dec 2017 15:04:23 -0000 Hi Nelio, On 30-11-2017 17:58, Nelio Laranjeiro wrote: > Hi Annob, > > On Thu, Nov 30, 2017 at 04:16:23PM +0530, Anoob wrote: >> On 11/29/2017 06:20 PM, Nelio Laranjeiro wrote: >>> Hi Anoob, >>> >>> On Wed, Nov 29, 2017 at 06:00:38PM +0530, Anoob wrote: >>>> Hi Nelio, >>>> >>>> Since support of RSS with inline crypto/protocol is hardware >>>> implementation dependent, it would be better if there is some sort of >>>> capability check before setting the flow parameters in the application. >>>> >>>> If the hardware doesn't support RSS with inline processing, then the RSS >>>> flow action will have to be ignored in the driver. This wouldn't look >>>> right from application's point of view. And also the PMD would need >>>> application-specific logic to handle such cases, which may not scale well. >>> There is a real issue here, RTE_FLOW API needs a terminal action, security is >>> not one [1] you must have one of the followings: QUEUE, DROP, RSS, PF, >>> VF or PASSTHRU. >>> >>> Flow API does not work with "capabilities" as the application can verify >>> the rule using the validate(). If it cannot be validated the >>> application can test another kind of rule until the PMD returns a >>> success. >>> >>> Here, I am proposing the RSS as RSS with a single queue is equivalent to queue. >>> >>> On Mellanox NIC we need the RSS or QUEUE in ingress and for Egress PASSTHRU >>> is good. >>> >>> What are your needs? >> Thanks for the clarification. Understood the issue here. On Cavium hardware >> SECURITY will be terminating. > You should finalise with PASSTHRU to be compliant with the API, > otherwise application makers won't understand why it does not work > according to the API implementation. Cavium hardware would be supporting only terminating actions. So PASSTHRU will not be supported. >> So a better approach would be to first check from the application >> (using rte_flow_verify()) if SECURITY is terminating action. If it >> fails, then application can do RSS/QUEUE. That should solve >> the issue. > > > I think we have an agreement here, in order the final action to be > tested: > > 1. PASSTHRU > 2. RSS > 3. QUEUE > > If those 3 fails, the functions fails to create the rule, the first > succeeding is the one applied. PASSTHRU itself is non-terminating, right? So I'm not sure, how a check with PASSTHRU would help us. SECURITY will be terminating action on Cavium hardware. So, the first check could be without any addition. If that fails, RSS. And then QUEUE. That should be fine. Any thoughts? Anoob > > Do you agree? > > Thanks, >