From: Vladimir Medvedkin <medvedkinv@gmail.com>
To: Kamraan Nasim <knasim@sidebandnetworks.com>
Cc: "dev@dpdk.org" <dev@dpdk.org>, Jun Du <jdu@sidebandnetworks.com>
Subject: Re: [dpdk-dev] Changes to 5tuple IPv4 filters in dpdk v2.0
Date: Wed, 5 Aug 2015 18:18:09 +0300 [thread overview]
Message-ID: <CANDrEHn=16TUrrV6sciKHMwHJGp+KeyECe7XAdOkBNcihkV1tA@mail.gmail.com> (raw)
In-Reply-To: <CAPrTskjszuEt2XM=Buzincgz_pAaUkDfEJGsZVT-O1RrCJtXLA@mail.gmail.com>
Hi Kam,
Flow director can filter by src/dst prefix, but the src/dst prefix length
is global for all rules. So, if you decide to specify /16 dst network, all
rules will have /16 prefix length for dst address.
Regards,
Vladimir
2015-08-05 17:53 GMT+03:00 Kamraan Nasim <knasim@sidebandnetworks.com>:
> Hi Vladimir,
>
> Thank you for the link. Seems to simply be an abstraction over the
> existing filters so it is safe for me to upgrade to v2.0 :)
>
> Since we are on the subject, are you aware of any filters on 82599 or
> Fortville that may provide subnet filtering(I can specify something like
> 192.168.0.0/16 instead of host addresses)? What about flow director
> filters?
>
>
> --Kam
>
> On Tue, Aug 4, 2015 at 5:40 PM, Vladimir Medvedkin <medvedkinv@gmail.com>
> wrote:
>
>> Hi Kam,
>>
>> 1) The reason is discussed in
>> http://dpdk.org/ml/archives/dev/2014-September/005179.html
>> 2) No, it's still not supported (on current NICs). At the moment ntuple
>> is supported only by igb and ixgbe. If you look at
>> drivers/net/ixgbe/ixgbe_ethdev.c you can see ntuple_filter_to_5tuple
>> function which translate rte_eth_ntuple_filter to ixgbe_5tuple_filter_info,
>> so mask can be either UINT32_MAX or 0. It's hardware limitation (see 82599
>> datasheet 7.1.2.5 L3/L4 5-tuple Filters).
>>
>> Regards,
>> Vladimir
>>
>> 2015-08-04 23:44 GMT+03:00 Kamraan Nasim <knasim@sidebandnetworks.com>:
>>
>>> Hi DPDK community,
>>>
>>> I've been using DPDK v1.7 and v1.8 for the past year. On updating to
>>> v2.0.0, I see that *rte_5tuple_filter* has been deprecated as well as
>>> the
>>> associated install/remove call,* rte_eth_dev_add_5tuple_filter()*
>>>
>>> I now see that rte_eth_ntuple_filter has been added in place.
>>>
>>> 1) Is there a specific reason for removing backward compatibility? As in
>>> is
>>> there a known issue with rte_5tuple_filter infra that was discovered in
>>> v2.0?
>>>
>>>
>>> 2) One limitation of rte_5tuple_filter was that it could not be used to
>>> filter /24 or /16 ip addresses(subnet filtering). I now see that the
>>> src_ip_mask and dst_ip_mask is 32 bits and a separate
>>> RTE_NTUPLE_FLAGS_SRC_IP
>>> <
>>> http://dpdk.org/doc/api/rte__eth__ctrl_8h.html#aff1204ca0b33628610956f840dd9b206
>>> >
>>> has been introduced. Does this imply that we NOW support subnet
>>> filtering(use mask for wildcard masking)?
>>>
>>>
>>> Any help or pointers on the subject will be greatly appreciated!!!
>>>
>>>
>>> Thanks,
>>> Kam
>>>
>>
>>
>
prev parent reply other threads:[~2015-08-05 15:18 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2015-08-04 20:44 Kamraan Nasim
2015-08-04 21:40 ` Vladimir Medvedkin
2015-08-05 14:53 ` Kamraan Nasim
2015-08-05 15:18 ` Vladimir Medvedkin [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='CANDrEHn=16TUrrV6sciKHMwHJGp+KeyECe7XAdOkBNcihkV1tA@mail.gmail.com' \
--to=medvedkinv@gmail.com \
--cc=dev@dpdk.org \
--cc=jdu@sidebandnetworks.com \
--cc=knasim@sidebandnetworks.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).