DPDK usage discussions
 help / color / mirror / Atom feed
From: Asaf Penso <asafp@nvidia.com>
To: Tony Hart <Tony.Hart@corero.com>,
	Stephen Hemminger <stephen@networkplumber.org>
Cc: "users@dpdk.org" <users@dpdk.org>
Subject: Re: [External] rte_flow: no ability to match on packet length?
Date: Sun, 19 Mar 2023 18:34:55 +0000	[thread overview]
Message-ID: <DM4PR12MB8474F83E5E828167BECC8AA6CD839@DM4PR12MB8474.namprd12.prod.outlook.com> (raw)
In-Reply-To: <CC7831F6-5C74-49F5-A875-C59499ECC9AF@corero.com>

[-- Attachment #1: Type: text/plain, Size: 2788 bytes --]

Hello Tony,

Starting ConnectX-6 Dx NIC, the HW can match on range of values for different fields.
In general, it will be implemented as part of the rte_flow template API.
We plan implementing range match on ip.total_length field as part of 23.07.

Asaf Penso
From: Tony Hart <Tony.Hart@corero.com>
Sent: Monday, March 6, 2023 1:50:11 PM
To: Stephen Hemminger <stephen@networkplumber.org>
Cc: users@dpdk.org <users@dpdk.org>
Subject: Re: [External] rte_flow: no ability to match on packet length?

Hi Stephen,
Thanks for the confirmation. As you say, maybe any MLX5 experts have some suggestions?


Tony Hart | Chief Architect
Tony.Hart@corero.com <mailto:Tony.Hart@corero.com>

 293 Boston Post Road West Suite 310, Marlborough, MA 01752

Access Corero Network Security’s Privacy Policy here <www.corero.com/privacy<http://www.corero.com/privacy>>.

We are Corero Network Security plc (“Corero”), registered in England and Wales, with registered company number 02662978, registered office address Regus House Highbridge, Oxford Road, Uxbridge, Middlesex, UB8 1HR. Corero is the parent company for Corero Network Security, Inc. and Corero Network Security (UK) Ltd (a company registered in England and Wales with registered number 04047090, with the same registered office address as above) For information about how we process your data, or to manage your data preferences, click here <info.corero.com/data-preferences.html>.

> On Mar 5, 2023, at 3:46 PM, Stephen Hemminger <stephen@networkplumber.org> wrote:
> On Tue, 28 Feb 2023 15:12:31 +0000
> Tony Hart <Tony.Hart@corero.com> wrote:
>> I’m trying to use the Generic Flow API (rte_flow) to match IP packets based on their length (either L2, L3 or L4 lengths).
>> There doesn’t seem to be an item type that explicitly matches based on length (RTE_FLOW_ITEM_TYPE_x).  So I’ve tried using a mask with RTE_FLOW_ITEM_TYPE_IPV4 to match on the total_length field (and similar attempt to match on the UDP header dgram_len field) but the NIC I’m using (mlx5) returns an error (mask enables non supported bits).
>> Am I out of luck, or maybe missing something?
>> Thanks for any insights!
>> I’ve tried, DPDK: 20.11.7 and 22.11.1
>> Tony Hart | Chief Architect
>> Tony.Hart@corero.com <mailto:Tony.Hart@corero.com>
> Short answer: yes, you are right there is no generic length match.
> Longer answer: rte_flow is an API which is meant to provide access to the underlying
> match features of NIC hardware. Supporting something requires that the HW/FW can do the
> match, and that the driver writer has added (and tested) that match.
> Hopefully the MLX5 experts can help answer what is possible.

[-- Attachment #2: Type: text/html, Size: 3996 bytes --]

  reply	other threads:[~2023-03-19 18:35 UTC|newest]

Thread overview: 7+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
     [not found] <5644d4d8-d47b-4a0c-84ec-17ce8d68d922.8b1a23e8-b9b9-4aca-a31a-0d4e4655acbd.eee7240b-6962-4037-97c6-178856ab054b@emailsignatures365.codetwo.com>
2023-02-28 15:12 ` Tony Hart
2023-03-05 20:46   ` Stephen Hemminger
2023-03-06 11:50     ` [External] " Tony Hart
2023-03-19 18:34       ` Asaf Penso [this message]
2023-03-21  9:57         ` Tony Hart
2023-03-21 13:00           ` Tony Hart
2023-03-21 16:49             ` Asaf Penso

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=DM4PR12MB8474F83E5E828167BECC8AA6CD839@DM4PR12MB8474.namprd12.prod.outlook.com \
    --to=asafp@nvidia.com \
    --cc=Tony.Hart@corero.com \
    --cc=stephen@networkplumber.org \
    --cc=users@dpdk.org \


* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).