<!DOCTYPE html> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> </head> <body> Hi Jiangheng, maybe going through this thesis will help you - <a class="moz-txt-link-freetext" href="https://theses.cz/id/c96b6o/24818.pdf">https://theses.cz/id/c96b6o/24818.pdf</a> Page 46 mentions 7680 rules as the overall maximum capacity for i40e. Regards, Lukas <div class="moz-cite-prefix">On 18. 10. 23 6:09, Xing, Beilei wrote: </div> <blockquote type="cite" cite="mid:LV2PR11MB59970CBF9B54F420DC296804F7D5A@LV2PR11MB5997.namprd11.prod.outlook.com"> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="Generator" content="Microsoft Word 15 (filtered medium)"> <style>@font-face {font-family:SimSun; panose-1:2 1 6 0 3 1 1 1 1 1;}@font-face {font-family:"Cambria Math"; panose-1:2 4 5 3 5 4 6 3 2 4;}@font-face {font-family:DengXian; panose-1:2 1 6 0 3 1 1 1 1 1;}@font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4;}@font-face {font-family:Consolas; panose-1:2 11 6 9 2 2 4 3 2 4;}@font-face {font-family:"MS PGothic"; panose-1:2 11 6 0 7 2 5 8 2 4;}@font-face {font-family:"\@MS PGothic";}@font-face {font-family:"\@SimSun"; panose-1:2 1 6 0 3 1 1 1 1 1;}@font-face {font-family:"\@DengXian"; panose-1:2 1 6 0 3 1 1 1 1 1;}p.MsoNormal, li.MsoNormal, div.MsoNormal {margin:0in; text-align:justify; text-justify:inter-ideograph; font-size:10.5pt; font-family:"Calibri",sans-serif; mso-fareast-language:JA;}a:link, span.MsoHyperlink {mso-style-priority:99; color:#0563C1; text-decoration:underline;}p.MsoPlainText, li.MsoPlainText, div.MsoPlainText {mso-style-priority:99; mso-style-link:"Plain Text Char"; margin:0in; text-align:justify; text-justify:inter-ideograph; font-size:10.5pt; font-family:"Calibri",sans-serif; mso-fareast-language:JA;}span.PlainTextChar {mso-style-name:"Plain Text Char"; mso-style-priority:99; mso-style-link:"Plain Text"; font-family:Consolas;}span.EmailStyle25 {mso-style-type:personal-reply; font-family:"Calibri",sans-serif; color:windowtext;}.MsoChpDefault {mso-style-type:export-only; font-size:10.0pt; mso-ligatures:none;}div.WordSection1 {page:WordSection1;}</style> <div class="WordSection1"> Hi jiangheng, <o:p></o:p> <o:p> </o:p> For TCP rules, it should be flow director. I remember i40e supports 8K flow director rules.<o:p></o:p> When the rule number is greater than 8K, only 8k rules can be created successfully.<o:p></o:p> <o:p> </o:p> BR,<o:p></o:p> Beilei<o:p></o:p> <o:p> </o:p> <div style="border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt"> <div> <div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in"> From: jiangheng (G) <a class="moz-txt-link-rfc2396E" href="mailto:jiangheng14@huawei.com"><jiangheng14@huawei.com></a> Sent: Wednesday, October 18, 2023 10:19 AM To: Xing, Beilei <a class="moz-txt-link-rfc2396E" href="mailto:beilei.xing@intel.com"><beilei.xing@intel.com></a>; <a class="moz-txt-link-abbreviated" href="mailto:users@dpdk.org">users@dpdk.org</a>; Stephen Hemminger <a class="moz-txt-link-rfc2396E" href="mailto:stephen@networkplumber.org"><stephen@networkplumber.org></a> Cc: Fanbin(Kira,2012 Blue Lab.) <a class="moz-txt-link-rfc2396E" href="mailto:fanbin12@huawei.com"><fanbin12@huawei.com></a> Subject: 答复: Whether the creatation of flow rules of i40e NIC support tcp port mask<o:p></o:p> </div> </div> <o:p> </o:p> Hi Beilei:<o:p></o:p> What is the maximum number of flow rules supported by the i40e?<o:p></o:p> What about that situation: numbers of tcp connection is greater than the maximum number of flow rules.<o:p></o:p> <o:p> </o:p> <o:p> </o:p> <div> <div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in"> 发件人: Xing, Beilei <<a href="mailto:beilei.xing@intel.com" moz-do-not-send="true" class="moz-txt-link-freetext">beilei.xing@intel.com</a>> 发送时间: 2023年10月18日 9:55 收件人: jiangheng (G) <<a href="mailto:jiangheng14@huawei.com" moz-do-not-send="true" class="moz-txt-link-freetext">jiangheng14@huawei.com</a>>; <a href="mailto:users@dpdk.org" moz-do-not-send="true" class="moz-txt-link-freetext">users@dpdk.org</a> 抄送: Fanbin(Kira,2012 Blue Lab.) <<a href="mailto:fanbin12@huawei.com" moz-do-not-send="true" class="moz-txt-link-freetext">fanbin12@huawei.com</a>> 主题: RE: Whether the creatation of flow rules of i40e NIC support tcp port mask<o:p></o:p> </div> </div> <o:p> </o:p> Hi Jiangheng, <o:p></o:p> <o:p> </o:p> That’s because i40e only supports perfect match.<o:p></o:p> <o:p> </o:p> BR,<o:p></o:p> Beilei<o:p></o:p> <o:p> </o:p> <div style="border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt"> <div> <div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in"> From: jiangheng (G) <<a href="mailto:jiangheng14@huawei.com" moz-do-not-send="true" class="moz-txt-link-freetext">jiangheng14@huawei.com</a>> Sent: Tuesday, October 17, 2023 4:52 PM To: Xing, Beilei <<a href="mailto:beilei.xing@intel.com" moz-do-not-send="true" class="moz-txt-link-freetext">beilei.xing@intel.com</a>>; <a href="mailto:users@dpdk.org" moz-do-not-send="true" class="moz-txt-link-freetext">users@dpdk.org</a> Cc: Fanbin(Kira,2012 Blue Lab.) <<a href="mailto:fanbin12@huawei.com" moz-do-not-send="true" class="moz-txt-link-freetext">fanbin12@huawei.com</a>> Subject: Whether the creatation of flow rules of i40e NIC support tcp port mask<o:p></o:p> </div> </div> <o:p> </o:p> Hi beilei，<o:p></o:p> I would like to create flows using tcp port mask, but it seems only mask 0xffff or 0x0 work, Does flow rlue can be created using other mask? <o:p></o:p> I40e dirver was using now. <o:p></o:p> <o:p></o:p> Here is my code:<o:p></o:p> struct rte_flow_attr attr;<o:p></o:p> struct rte_flow_item pattern[MAX_PATTERN_NUM];<o:p></o:p> struct rte_flow_action action[MAX_ACTION_NUM];<o:p></o:p> struct rte_flow *flow = NULL;<o:p></o:p> struct rte_flow_action_queue queue = { .index = queue_id };<o:p></o:p> struct rte_flow_item_ipv4 ip_spec;<o:p></o:p> struct rte_flow_item_ipv4 ip_mask;<o:p></o:p> <o:p> </o:p> struct rte_flow_item_tcp tcp_spec;<o:p></o:p> struct rte_flow_item_tcp tcp_mask;<o:p></o:p> int res;<o:p></o:p> <o:p> </o:p> memset_s(pattern, sizeof(pattern), 0, sizeof(pattern));<o:p></o:p> memset_s(action, sizeof(action), 0, sizeof(action));<o:p></o:p> <o:p> </o:p> /*<o:p></o:p> * set the rule attribute.<o:p></o:p> * in this case only ingress packets will be checked.<o:p></o:p> */<o:p></o:p> memset_s(&attr, sizeof(struct rte_flow_attr), 0, sizeof(struct rte_flow_attr));<o:p></o:p> attr.ingress = 1;<o:p></o:p> <o:p> </o:p> /*<o:p></o:p> * create the action sequence.<o:p></o:p> * one action only, move packet to queue<o:p></o:p> */<o:p></o:p> action[0].type = RTE_FLOW_ACTION_TYPE_QUEUE;<o:p></o:p> action[0].conf = &queue;<o:p></o:p> action[1].type = RTE_FLOW_ACTION_TYPE_END;<o:p></o:p> <o:p> </o:p> // not limit eth header<o:p></o:p> pattern[0].type = RTE_FLOW_ITEM_TYPE_ETH;<o:p></o:p> <o:p> </o:p> // ip header<o:p></o:p> memset_s(&ip_spec, sizeof(struct rte_flow_item_ipv4), 0, sizeof(struct rte_flow_item_ipv4));<o:p></o:p> memset_s(&ip_mask, sizeof(struct rte_flow_item_ipv4), 0, sizeof(struct rte_flow_item_ipv4));<o:p></o:p> ip_spec.hdr.dst_addr = dst_ip;<o:p></o:p> ip_mask.hdr.dst_addr = EMPTY_MASK;<o:p></o:p> ip_spec.hdr.src_addr = src_ip;<o:p></o:p> ip_mask.hdr.src_addr = EMPTY_MASK;<o:p></o:p> pattern[1].type = RTE_FLOW_ITEM_TYPE_IPV4;<o:p></o:p> pattern[1].spec = &ip_spec;<o:p></o:p> pattern[1].mask = &ip_mask;<o:p></o:p> <o:p> </o:p> // tcp header, full mask 0xffff<o:p></o:p> memset_s(&tcp_spec, sizeof(struct rte_flow_item_tcp), 0, sizeof(struct rte_flow_item_tcp));<o:p></o:p> memset_s(&tcp_mask, sizeof(struct rte_flow_item_tcp), 0, sizeof(struct rte_flow_item_tcp));<o:p></o:p> pattern[2].type = RTE_FLOW_ITEM_TYPE_TCP; // 2: pattern 2 is tcp header<o:p></o:p> tcp_spec.hdr.src_port = src_port;<o:p></o:p> tcp_spec.hdr.dst_port = dst_port;<o:p></o:p> tcp_mask.hdr.src_port = 0xffff; // only 0xffff and 0x0 work<o:p></o:p> tcp_mask.hdr.dst_port = 0xffff; // only 0xffff and 0x0 work<o:p></o:p> pattern[2].spec = &tcp_spec;<o:p></o:p> pattern[2].mask = &tcp_mask;<o:p></o:p> <o:p> </o:p> /* the final level must be always type end */<o:p></o:p> pattern[3].type = RTE_FLOW_ITEM_TYPE_END;<o:p></o:p> res = rte_flow_validate(port_id, &attr, pattern, action, error);<o:p></o:p> if (!res) {<o:p></o:p> flow = rte_flow_create(port_id, &attr, pattern, action, error);<o:p></o:p> } else {<o:p></o:p> LSTACK_LOG(ERR, PORT, "rte_flow_create.rte_flow_validate error, res %d \n", res);<o:p></o:p> }<o:p></o:p> <o:p> </o:p> Looking forward to your favourable reply.<o:p></o:p> <o:p> </o:p> </div> </div> </div> </blockquote> </body> </html>