From mboxrd@z Thu Jan 1 00:00:00 1970 From: Pablo Neira Ayuso Subject: Re: [PATCH net-next,v6 00/12] add flow_rule infrastructure Date: Thu, 20 Dec 2018 16:39:19 +0100 Message-ID: <20181220153919.kcxtmzgpieqh4gy3@salvia> References: <20181214181205.28812-1-pablo@netfilter.org> <20181217173929.024ab742@cakuba.netronome.com> <20181218195705.r6v7n4gaponpmeak@salvia> <20181219115703.51253f51@cakuba.netronome.com> <20181220000313.cursjruvzknstlzd@salvia> <20181219162653.2aeeb15a@cakuba.netronome.com> <20181220123523.bacj7juww2fraqcj@salvia> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: Jakub Kicinski , Linux Netdev List , David Miller , thomas.lendacky@amd.com, Florian Fainelli , Ariel Elior , Michael Chan , santosh@chelsio.com, madalin.bucur@nxp.com, "Zhuangyuzeng (Yisen)" , Salil Mehta , Jeff Kirsher , Tariq Toukan , Saeed Mahameed , Jiri Pirko , Ido Schimmel , peppe.cavallaro@st.com, grygorii.strashko@ti.com, Andrew Lunn , Vivien Didelot , alexandre.torgue@st.com, joabreu@synopsys.c To: Or Gerlitz Return-path: Received: from mail.us.es ([193.147.175.20]:44896 "EHLO mail.us.es" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1729603AbeLTPj2 (ORCPT ); Thu, 20 Dec 2018 10:39:28 -0500 Received: from antivirus1-rhel7.int (unknown [192.168.2.11]) by mail.us.es (Postfix) with ESMTP id BD6161373C0 for ; Thu, 20 Dec 2018 16:39:24 +0100 (CET) Received: from antivirus1-rhel7.int (localhost [127.0.0.1]) by antivirus1-rhel7.int (Postfix) with ESMTP id A4B20DA573 for ; Thu, 20 Dec 2018 16:39:24 +0100 (CET) Content-Disposition: inline In-Reply-To: Sender: netdev-owner@vger.kernel.org List-ID: On Thu, Dec 20, 2018 at 03:51:00PM +0200, Or Gerlitz wrote: > On Thu, Dec 20, 2018 at 2:35 PM Pablo Neira Ayuso wrote: > > On Wed, Dec 19, 2018 at 04:26:53PM -0800, Jakub Kicinski wrote: > > > > I'm confused, could you rephrase? How does you work help such devices? > > > How is tc not suitable for them? > > > There are two HW offload usecases: > > > > #1 Policy resides in software, CPU host sees initial packets, based on > > policy, you place flows into hardware via nf_flow_table infrastructure. > > This usecase is fine in your NIC since you assume host CPU can cope > > with policy in software for these few initial packets of the flow. > > However, switches usually have a small CPU to run control plane > > software only. There we _cannot_ use this approach. > > > > #2 Policy resides in hardware. For the usecase of switches with small > > CPU, the ACL is deployed in hardware. We use the host CPU to run > > control plane configurations only. > > > > This patchset _is not_ related to #1, this patchset _is_ related to #2. > > confused, isn't this patch set related to connection tracking offloads > on modern NIC HWs? This patchset is aiming to unify ethtool_rxnfc and tc/cls_flower representation to simplify driver codebase, ie. have a single parser to populate HW IR. My immediate future work is to reuse this new infrastructure to explore #2 for netfilter.