From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from dpdk.org (dpdk.org [92.243.14.124]) by inbox.dpdk.org (Postfix) with ESMTP id 58490A04B6; Mon, 12 Oct 2020 12:45:05 +0200 (CEST) Received: from [92.243.14.124] (localhost [127.0.0.1]) by dpdk.org (Postfix) with ESMTP id 7DF721D6C4; Mon, 12 Oct 2020 12:44:05 +0200 (CEST) Received: from mellanox.co.il (mail-il-dmz.mellanox.com [193.47.165.129]) by dpdk.org (Postfix) with ESMTP id 429CA1D6B0 for ; Mon, 12 Oct 2020 12:44:03 +0200 (CEST) Received: from Internal Mail-Server by MTLPINE1 (envelope-from dekelp@nvidia.com) with SMTP; 12 Oct 2020 13:44:01 +0300 Received: from mtl-vdi-280.wap.labs.mlnx. (mtl-vdi-280.wap.labs.mlnx [10.228.134.250]) by labmailer.mlnx (8.13.8/8.13.8) with ESMTP id 09CAhqvq025485; Mon, 12 Oct 2020 13:44:01 +0300 From: Dekel Peled To: orika@nvidia.com, thomas@monjalon.net, ferruh.yigit@intel.com, arybchenko@solarflare.com, konstantin.ananyev@intel.com, olivier.matz@6wind.com, wenzhuo.lu@intel.com, beilei.xing@intel.com, bernard.iremonger@intel.com, matan@nvidia.com, shahafs@nvidia.com, viacheslavo@nvidia.com Cc: dev@dpdk.org Date: Mon, 12 Oct 2020 13:43:00 +0300 Message-Id: <97bc93abb2093db8eebba0fbe1b9692afb1e7095.1602494556.git.dekelp@nvidia.com> X-Mailer: git-send-email 1.7.1 In-Reply-To: References: Subject: [dpdk-dev] [PATCH v5 01/11] ethdev: add extensions attributes to IPv6 item X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org Sender: "dev" Using the current implementation of DPDK, an application cannot match on IPv6 packets, based on the existing extension headers, in a simple way. Field 'Next Header' in IPv6 header indicates type of the first extension header only. Following extension headers can't be identified by inspecting the IPv6 header. As a result, the existence or absence of specific extension headers can't be used for packet matching. For example, fragmented IPv6 packets contain a dedicated extension header (which is implemented in a later patch of this series). Non-fragmented packets don't contain the fragment extension header. For an application to match on non-fragmented IPv6 packets, the current implementation doesn't provide a suitable solution. Matching on the Next Header field is not sufficient, since additional extension headers might be present in the same packet. To match on fragmented IPv6 packets, the same difficulty exists. This patch implements the update as detailed in RFC [1]. A set of additional values will be added to IPv6 header struct. These values will indicate the existence of every defined extension header type, providing simple means for identification of existing extensions in the packet header. Continuing the above example, fragmented packets can be identified using the specific value indicating existence of fragment extension header. To match on non-fragmented IPv6 packets, need to use frag_ext_exist 0. To match on fragmented IPv6 packets, need to use frag_ext_exist 1. To match on any IPv6 packets, the frag_ext_exist field should not be specified for match. [1] https://mails.dpdk.org/archives/dev/2020-August/177257.html Signed-off-by: Dekel Peled Acked-by: Ori Kam --- doc/guides/prog_guide/rte_flow.rst | 22 +++++++++++++++++++--- lib/librte_ethdev/rte_flow.h | 25 +++++++++++++++++++++++-- 2 files changed, 42 insertions(+), 5 deletions(-) diff --git a/doc/guides/prog_guide/rte_flow.rst b/doc/guides/prog_guide/rte_flow.rst index 119b128..ae090db 100644 --- a/doc/guides/prog_guide/rte_flow.rst +++ b/doc/guides/prog_guide/rte_flow.rst @@ -946,11 +946,27 @@ Item: ``IPV6`` Matches an IPv6 header. -Note: IPv6 options are handled by dedicated pattern items, see `Item: -IPV6_EXT`_. +Dedicated flags indicate existence of specific extension headers. +Every type of extension header can use a dedicated pattern item, or +the generic `Item: IPV6_EXT`_. +To match on packets containing a specific extension header, an application +should match on the dedicated flag set to 1. +To match on packets not containing a specific extension header, an application +should match on the dedicated flag clear to 0. +In case application doesn't care about the existence of a specific extension +header, it should not specify the dedicated flag for matching. - ``hdr``: IPv6 header definition (``rte_ip.h``). -- Default ``mask`` matches source and destination addresses only. +- ``hop_ext_exist``: Hop-by-Hop Options extension header exists. +- ``rout_ext_exist``: Routing extension header exists. +- ``frag_ext_exist``: Fragment extension header exists. +- ``auth_ext_exist``: Authentication extension header exists. +- ``esp_ext_exist``: Encapsulation Security Payload extension header exists. +- ``dest_ext_exist``: Destination Options extension header exists. +- ``mobil_ext_exist``: Mobility extension header exists. +- ``hip_ext_exist``: Host Identity Protocol extension header exists. +- ``shim6_ext_exist``: Shim6 Protocol extension header exists. +- Default ``mask`` matches ``hdr`` source and destination addresses only. Item: ``ICMP`` ^^^^^^^^^^^^^^ diff --git a/lib/librte_ethdev/rte_flow.h b/lib/librte_ethdev/rte_flow.h index da8bfa5..5b5bed2 100644 --- a/lib/librte_ethdev/rte_flow.h +++ b/lib/librte_ethdev/rte_flow.h @@ -792,11 +792,32 @@ struct rte_flow_item_ipv4 { * * Matches an IPv6 header. * - * Note: IPv6 options are handled by dedicated pattern items, see - * RTE_FLOW_ITEM_TYPE_IPV6_EXT. + * Dedicated flags indicate existence of specific extension headers. + * Every type of extension header can use a dedicated pattern item, or + * the generic item RTE_FLOW_ITEM_TYPE_IPV6_EXT. */ struct rte_flow_item_ipv6 { struct rte_ipv6_hdr hdr; /**< IPv6 header definition. */ + uint32_t hop_ext_exist:1; + /**< Hop-by-Hop Options extension header exists. */ + uint32_t rout_ext_exist:1; + /**< Routing extension header exists. */ + uint32_t frag_ext_exist:1; + /**< Fragment extension header exists. */ + uint32_t auth_ext_exist:1; + /**< Authentication extension header exists. */ + uint32_t esp_ext_exist:1; + /**< Encapsulation Security Payload extension header exists. */ + uint32_t dest_ext_exist:1; + /**< Destination Options extension header exists. */ + uint32_t mobil_ext_exist:1; + /**< Mobility extension header exists. */ + uint32_t hip_ext_exist:1; + /**< Host Identity Protocol extension header exists. */ + uint32_t shim6_ext_exist:1; + /**< Shim6 Protocol extension header exists. */ + uint32_t reserved:23; + /**< Reserved for future extension headers, must be zero. */ }; /** Default mask for RTE_FLOW_ITEM_TYPE_IPV6. */ -- 1.8.3.1