<html>
    <head>
      <base href="https://bugs.dpdk.org/">
    </head>
    <body><table border="1" cellspacing="0" cellpadding="8" class="bz_new_table">
        <tr>
          <th>Bug ID</th>
          <td><a class="bz_bug_link 
          bz_status_UNCONFIRMED "
   title="UNCONFIRMED - VLAN filtering bug"
   href="https://bugs.dpdk.org/show_bug.cgi?id=1464">1464</a>
          </td>
        </tr>

        <tr>
          <th>Summary</th>
          <td>VLAN filtering bug
          </td>
        </tr>

        <tr>
          <th>Product</th>
          <td>DPDK
          </td>
        </tr>

        <tr>
          <th>Version</th>
          <td>unspecified
          </td>
        </tr>

        <tr>
          <th>Hardware</th>
          <td>All
          </td>
        </tr>

        <tr>
          <th>OS</th>
          <td>All
          </td>
        </tr>

        <tr>
          <th>Status</th>
          <td>UNCONFIRMED
          </td>
        </tr>

        <tr>
          <th>Severity</th>
          <td>normal
          </td>
        </tr>

        <tr>
          <th>Priority</th>
          <td>Normal
          </td>
        </tr>

        <tr>
          <th>Component</th>
          <td>ethdev
          </td>
        </tr>

        <tr>
          <th>Assignee</th>
          <td>dev@dpdk.org
          </td>
        </tr>

        <tr>
          <th>Reporter</th>
          <td>dmarx@iol.unh.edu
          </td>
        </tr>

        <tr>
          <th>Target Milestone</th>
          <td>---
          </td>
        </tr></table>
      <p>
        <div class="bz_comment_block">
          <pre class="bz_comment_text">Hi all, 

I've written a test suite for VLAN features on DPDK drivers including
filtering, stripping, and insertion, but I've run into some issues 
with Intel and Broadcom NICs. Both are forwarding packets when there are vlan
filter rules in place which should block packet forwarding. 
To recreate the environment I'm running the tests on: 

drivers: bnxt_en, i40e 

Broadcom NIC info: 

~$ ethtool -i ens2f0np0 
driver: bnxt_en 
version: 5.15.0-112-generic 
firmware-version: 229.0.141.0/pkg 229.1.123.0 
expansion-rom-version:  
bus-info: 0000:61:00.0 
supports-statistics: yes 
supports-test: yes 
supports-eeprom-access: yes 
supports-register-dump: yes 
supports-priv-flags: no 

./dpdk-testpmd <EAL params> -- -i --portmask=0x3 
testpmd> set fwd mac 
testpmd> set promisc 0 off 
testpmd> vlan set filter on 0 
testpmd> rx_vlan add 1 0 
testpmd> start 

then, I build the following packet and send it to port 0 on testpmd: 
packet = Ether()/Dot1Q(vlan=2)/Raw(load='xxxxx') 

The Mellanox CX-5s show the expected behavior, where a packet with a VLAN tag
not in the filter list is dropped. However, with the Intel XL710 
and Broadcom 57414 NICs, the packet is forwarded regardless of whether its VLAN
tag is in the filter list or not. 
Link to the suite:
<a href="https://patches.dpdk.org/project/dpdk/patch/20240618162939.23339-2-dmarx@iol.unh.edu/">https://patches.dpdk.org/project/dpdk/patch/20240618162939.23339-2-dmarx@iol.unh.edu/</a> 
Series cover letter:
<a href="https://patches.dpdk.org/project/dpdk/cover/20240614150238.26374-1-dmarx@iol.unh.edu/">https://patches.dpdk.org/project/dpdk/cover/20240614150238.26374-1-dmarx@iol.unh.edu/</a> 
Any insight is appreciated.
          </pre>
        </div>
      </p>


      <hr>
      <span>You are receiving this mail because:</span>

      <ul>
          <li>You are the assignee for the bug.</li>
      </ul>
      <div itemscope itemtype="http://schema.org/EmailMessage">
        <div itemprop="action" itemscope itemtype="http://schema.org/ViewAction">
          
          <link itemprop="url" href="https://bugs.dpdk.org/show_bug.cgi?id=1464">
          <meta itemprop="name" content="View bug">
        </div>
        <meta itemprop="description" content="Bugzilla bug update notification">
      </div>
    </body>
</html>