<div dir="ltr">Dear DPDK Team,I am attempting to use DPDK's <code>rte_flow</code> API to filter incoming packets at the hardware level. My goal is to drop all packets except those with a specific IP address and UDP port.I have implemented the following flow filtering rule in my code:<div style="color:rgb(204,204,204);background-color:rgb(31,31,31);font-family:"Droid Sans Mono","monospace",monospace;font-weight:normal;font-size:14px;line-height:19px;white-space:pre-wrap"><div>int flow_filtering(uint16_t port_id, uint32_t ip_addr, uint16_t udp_port) {</div><div> struct rte_flow_error error;</div><div> struct rte_flow_attr attr;</div><div> struct rte_flow_item pattern[4]; // 4 pour inclure END</div><div> struct rte_flow_action action[2];</div><div> struct rte_flow *flow;</div> <div> // Remplir l'attribut de la règle</div><div> memset(&attr, 0, sizeof(struct rte_flow_attr));</div><div> attr.ingress = 1; // Règle pour le trafic entrant</div><div> attr.priority = 1000; // Priorité haute pour que cette règle soit appliquée en premier</div> <div> // Définir le motif de filtrage (IP + UDP)</div><div> memset(pattern, 0, sizeof(pattern));</div> <div> pattern[0].type = RTE_FLOW_ITEM_TYPE_ETH;</div> <div> // Motif IPv4</div><div> pattern[1].type = RTE_FLOW_ITEM_TYPE_IPV4;</div><div> pattern[1].spec = &(struct rte_flow_item_ipv4){</div><div> .hdr = {</div><div> .dst_addr = RTE_BE32(ip_addr), // Adresse IP de destination</div><div> }</div><div> };</div><div> </div><div> pattern[1].mask = &(struct rte_flow_item_ipv4){</div><div> .hdr = {</div><div> .dst_addr = RTE_BE32(0xFFFFFFFF), // Masque pour l'adresse IP</div><div> }</div><div> };</div> <div> // Motif UDP</div><div> pattern[2].type = RTE_FLOW_ITEM_TYPE_UDP;</div><div> pattern[2].spec = &(struct rte_flow_item_udp){</div><div> .hdr = {</div><div> .dst_port = RTE_BE16(udp_port), // Port de destination</div><div> }</div><div> };</div><div> pattern[2].mask = &(struct rte_flow_item_udp){</div><div> .hdr = {</div><div> .dst_port = RTE_BE16(0xFFFF), // Masque pour le port</div><div> }</div><div> };</div> <div> // Fin du motif</div><div> pattern[3].type = RTE_FLOW_ITEM_TYPE_END;</div> <div> // Définir l'action (accepter le paquet)</div><div> memset(action, 0, sizeof(action));</div> <div> // Envoyer à la file RX_ID</div><div> action[0].type = RTE_FLOW_ACTION_TYPE_QUEUE;</div><div> action[0].conf = &(struct rte_flow_action_queue){</div><div> .index = RX_ID, // Envoyer les paquets à la file RX_ID</div><div> };</div> <div> // Fin de la liste d'actions</div><div> action[1].type = RTE_FLOW_ACTION_TYPE_END;</div> <div> // Créer la règle de filtrage</div><div> flow = rte_flow_create(port_id, &attr, pattern, action, &error);</div><div> if (flow == NULL) {</div><div> printf("Erreur lors de la création de la règle de filtrage : %s\n", error.message);</div><div> return -1;</div><div> }</div> <div> // Afficher un message de succès</div><div> printf(</div><div> "Règle de filtrage créee avec succès pour l'IP %u.%u.%u.%u et le port %u\n",</div><div> (ip_addr >> 24) & 0xFF,</div><div> (ip_addr >> 16) & 0xFF,</div><div> (ip_addr >> 8) & 0xFF,</div><div> ip_addr & 0xFF,</div><div> udp_port</div><div> );</div> <div> return 0;</div><div>}</div></div>However, despite this configuration, I continue to receive packets with other IP addresses and ports that do not match the specified filter.Could you provide any insights into why the filtering isn't working as expected? Any advice on ensuring the rule is properly applied at the hardware level would be greatly appreciated.Thank you for your assistance.Best regards, Ali</div>