From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mails.dpdk.org (mails.dpdk.org [217.70.189.124]) by inbox.dpdk.org (Postfix) with ESMTP id 16529A0C41 for ; Wed, 1 Dec 2021 15:38:50 +0100 (CET) Received: from [217.70.189.124] (localhost [127.0.0.1]) by mails.dpdk.org (Postfix) with ESMTP id 876204067B; Wed, 1 Dec 2021 15:38:49 +0100 (CET) Received: from delivery.mailspamprotection.com (delivery.mailspamprotection.com [146.66.121.86]) by mails.dpdk.org (Postfix) with ESMTP id 468AF40140 for ; Wed, 1 Dec 2021 15:38:48 +0100 (CET) Received: from 72.204.214.35.bc.googleusercontent.com ([35.214.204.72] helo=es18.siteground.eu) by se22.mailspamprotection.com with esmtps (TLSv1.2:AES128-GCM-SHA256:128) (Exim 4.92) (envelope-from ) id 1msQku-0006Ac-TS for users@dpdk.org; Wed, 01 Dec 2021 08:38:47 -0600 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=filipjaniszewski.com; s=default; h=Content-Transfer-Encoding:Content-Type: In-Reply-To:MIME-Version:Date:Message-ID:References:To:From:Subject:Sender: Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=FpeCzo/t3HFnEiZIGAZNhumyXdztXex+NxaHubNvXkk=; b=J2is8GuShh7p3kRWVcmKKkKLAG A08TcKfZv7eDSPRkRpVgrT1eXaNBT9YUYcU1arRAZD3DY8xl5NwAP15Q+6Og+EjCGSvDW69x8l86g r/AmCGZ2rts8NtB0LfeGWKC6Vc0ycV7P19+FkcHJQhdfACnK0Nx9r1cArm0icPPdAO7X5F6LvaY+u EBcVTPHB7u3w5jsxAY3XqwKiTZrHlsiQJrI152xiy+qfNK5fmQIYpbKZxcLsjSOzWTtus8y9Kq6Qz 4XVGQ4lxTm0L2hAm3+ymlrt8NnU0CvgeIgnFkZzrXuei7+MSvYRhnu/aYnWQ21nuWeOu8Kv3BCMnc iRiuqtLQ==; Received: from [89.64.148.179] (port=41860 helo=localhost.localdomain) by es18.siteground.eu with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.90-.1) (envelope-from ) id 1msQkt-000Bja-GT for users@dpdk.org; Wed, 01 Dec 2021 14:38:43 +0000 Subject: Re: flow rule to drop all the packets From: Filip Janiszewski To: "users@dpdk.org" References: <146a4351-cc39-09a1-4e39-bd0f3d3f90cb@filipjaniszewski.com> Message-ID: Date: Wed, 1 Dec 2021 15:37:42 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.14.0 MIME-Version: 1.0 In-Reply-To: <146a4351-cc39-09a1-4e39-bd0f3d3f90cb@filipjaniszewski.com> Content-Type: text/plain; charset=iso-8859-15 Content-Language: en-US Content-Transfer-Encoding: 7bit X-Originating-IP: 35.214.204.72 X-SpamExperts-Domain: es18.siteground.eu X-SpamExperts-Username: 35.214.204.72 Authentication-Results: mailspamprotection.com; auth=pass smtp.auth=35.214.204.72@es18.siteground.eu X-SpamExperts-Outgoing-Class: ham X-SpamExperts-Outgoing-Evidence: Combined (0.08) X-Recommended-Action: accept X-Filter-ID: Pt3MvcO5N4iKaDQ5O6lkdGlMVN6RH8bjRMzItlySaT+nwaxpSJ+BgNhbd2GsQgT0PUtbdvnXkggZ 3YnVId/Y5jcf0yeVQAvfjHznO7+bT5wDtBK3p5VcS6iRNP7EipR8fYzfQXcfqmra3dmoHS4yglvA pSzZCbRw5cKI7qIVDt9WuRWrkPihq53YqAd1ENNq6iAM41hAeV/RVyTQeiNgOIMaxvXc9tQ1fZaW Jxab/NLu+GFU0sCml2vPee3sRKccf6uNtfvhlxVIcNsI7TpuMmCm1Mqx/0+DydNzT9K7qSnD/KIZ FjZmfdcVjL2SVfcQjmlJySLkQdPf+nBedSzwCqKnvfKMIrExxqESVUcBaN8ffwwAuVVFydqPv9iK YN1iXpnMT5mZ0ViAnM4Z+9gjdWWLX2ZbQb3UJKihEmoDuwh8ZolFwwybCr3yWDyr1A1PvRkWzsAg aWolxIxCj2GHto6atsxaFkWS/KO9ggVt7y11v0HCq9Ij3WgoQoezM+scaWWR7drMd0qbJIo1RVCX ie2VXGdtLyog7ui50fJvZPXx1zG+dBgRGQy5Evn9+jdEgn5yrhquUfGKFVmhdtT5snHd0G1x4pfZ 1aISb7ugeb3EER4aaezxB4UAOdANOt+ul3AsDBujjw7GCggXV/wpTFs765aq/7Ihe5JpNEYIVsOM yGnDIpSchlco6RIDoNg/2Wq2InZGQXRwgp4DivepysN6jYX/nXkLyQnRCh0nB+uYUazmWajDqA7N T8Js52zSASJFC/49WOPBr5nlEUI4xNminCxz7jUNWjVVhew0+GNKC5XROoL23kHH2wGTQk+5HIP3 Hxa9PEZLTef9o1t/VlXaDqbyZkBgwlsmJSApZEqGwbl8TXg3XKOyYkvqwVxA/SO94N/2SEEH7lin r52fw+KWcJtmG1plI+Nh+fOKdo9dSwHv18bIXaCSozrY6YvBicRNxE8lHVRedXHzx9B2331lF87H XtkB1vLi4H9iqNu8411SrRwMQMuSPpQU2OtAlNXofO3b66ZzHydBWCw/pU71nl8LtSoTAZ7CV7UR iTwh1nDzQkFBVYGPvfegTl+Dfqb5R4VemuUI6bcEARsm0BSzT3e/vErSojFNgZ+z2eBRGMCLmveJ Ez/K74eczsDjUYzyeeQlRL3BCK088rhJO2eupYYdzPm7YfRDaULOU2k3qaBFfCaFoX7lbNqfdmmz 2Fm01HXrVQ4RYy46tWH9VYjfMCvRZi/l0agnbmEWZxQ= X-Report-Abuse-To: spam@quarantine1.mailspamprotection.com X-BeenThere: users@dpdk.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DPDK usage discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: users-bounces@dpdk.org This issue exists only for Intel E810 NICs, using the Mellanox cards I've in the lab a rule like this: . flow create 0 ingress pattern eth type spec 0x0000 type mask 0x0000 / end actions drop / end . Will happily work and drop every packet, then I can create a new rule with higher priority to capture just the packets I'm interested. So I guess if there's some Intel guy they can have a look on why nothing like this is supported in the DPDK ICE driver (or perhaps the nic?) Thanks Il 11/30/21 4:24 PM, Filip Janiszewski ha scritto: > Hi, > > Is there a way to create a flow rule that drops all the eth packets? > I've attempted to setup a flow rule that match any ether type but it's > never validated, for example a rule like: > > . > rte_flow_item_eth eth_spec{}; > eth_spec.hdr.ether_type = RTE_BE16(0x8100); > rte_flow_item_eth eth_mask{}; > eth_mask.hdr.ether_type = 0xFFFF; > . > > Should match every packet with ether type 0x8100, so I would assume that > setting ether_type for the mask to 0x0000 would trigger the card to > match everything regardless of the spec value, but it doesn't run > ("Invalid input set" is the complain). > > Also with testpmd I'm failing to make it work and the documentation on > this entire rte flow is pretty poor.. > > So, how do I configure a rule that drops all*? My use case would be that > I need to filter a link that is getting a lot of stuff, I'll drop all > but just certain flows that are relevant to me (using an higher priority > rule).. > > Perhaps there's a way to configure an ingress rule that automatically > drops everything which is not matching the rule? > > As a side note, I can't just disable RSS, spit all to queue 0 like it > was a void bucket (dropping/releasing) and then setting up rules for the > packets I need so that they get enqueue to some other queue, because: > > 1) I'll waste a cpu just for dropping packets > 2) I'll probably get my stat reports full of imiss/errors since the link > is 100G and that poor queue is going to be getting tons of packets > > Thanks > > > * I found this command: > > . > testpmd> set all queues drop 0 on > function not implemented > . > > But, it doesn't work. > -- BR, Filip +48 666 369 823