[dpdk-dev] Question about range type of DPDK ACL

[dpdk-dev] Question about range type of DPDK ACL

[Doohwan Lee]

Hello everyone.

I want to implement some feature like ACL using DPDK ACL library.
so, I defined rule like below.


struct acl_match_component
{
    uint8_t protocol;
    uint32_t sip;
    uint32_t dip;
    uint16_t sport;
    uint16_t dport;
    uint16_t in_if;
    uint16_t out_if;
}


struct rte_acl_field_def ipv4_defs[7] = {
    {
        .type = RTE_ACL_FIELD_TYPE_RANGE,
        .size = sizeof(uint8_t),
        .field_index = 0,
        .input_index = 0,
        .offset = 0
    },
    {
        .type = RTE_ACL_FIELD_TYPE_RANGE,
        .size = sizeof(uint32_t),
        .field_index = 1,
        .input_index = 1,
        .offset = offsetof(struct acl_match_component, sip)
    },
    {
        .type = RTE_ACL_FIELD_TYPE_RANGE,
        .size = sizeof(uint32_t),
        .field_index = 2,
        .input_index = 2,
        .offset = offsetof(struct acl_match_component, dip)
    },
    {
        .type = RTE_ACL_FIELD_TYPE_RANGE,
        .size = sizeof(uint16_t),
        .field_index = 3,
        .input_index = 3,
        .offset = offsetof(struct acl_match_component, sport)
    },
    {
        .type = RTE_ACL_FIELD_TYPE_RANGE,
        .size = sizeof(uint16_t),
        .field_index = 4,
        .input_index = 3,
        .offset = offsetof(struct acl_match_component, dport)
    },
    {
        .type = RTE_ACL_FIELD_TYPE_RANGE,
        .size = sizeof(uint16_t),
        .field_index = 5,
        .input_index = 4,
        .offset = offsetof(struct acl_match_component, in_if)
    },
    {
        .type = RTE_ACL_FIELD_TYPE_RANGE,
        .size = sizeof(uint16_t),
        .field_index = 6,
        .input_index = 4,
        .offset = offsetof(struct acl_match_component, out_if)
    },
};

I defined 32bit IPv4 address filed as RTE_ACL_FIELD_TYPE_RANGE type.
and I set rte_acl_field for IP field like below.

value.u32 = IPv4(10,10,10,10);
mask_range.u32 = IPv4(20,20,20,20);

In this case, I think IP 10.10.10.15 and 10.10.10.30 should be matched.
but result was IP 10.10.10.15 was matched and 10.10.10.30 was not matched.

I am using DPDK 16.04 and there was no example in the DPDK source using
32bit field as range type.
Range type with 16bit field (ex. port number) works well.

Do you have any idea about this?


I already posted same question to users@dpdk.org.

https://www.mail-archive.com/users@dpdk.org/msg02071.html


Thank you.