From mboxrd@z Thu Jan  1 00:00:00 1970
From: Shyam Shrivastav <shrivastav.shyam@gmail.com>
Subject: ip_pipeline firewall : fragmented packets filtering
Date: Fri, 10 Mar 2017 14:03:11 +0530
Message-ID: <CAGSp03mtd-mxXdrwntuzJrnQv5cTgi0oxVwLqShVSQosVGgqig@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
To: dev@dpdk.org
Return-path: <dev-bounces@dpdk.org>
Received: from mail-qk0-f177.google.com (mail-qk0-f177.google.com
 [209.85.220.177]) by dpdk.org (Postfix) with ESMTP id 569DA2B8C
 for <dev@dpdk.org>; Fri, 10 Mar 2017 09:33:12 +0100 (CET)
Received: by mail-qk0-f177.google.com with SMTP id p64so157568252qke.1
 for <dev@dpdk.org>; Fri, 10 Mar 2017 00:33:12 -0800 (PST)
List-Id: DPDK patches and discussions <dev.dpdk.org>
List-Unsubscribe: <http://dpdk.org/ml/options/dev>,
 <mailto:dev-request@dpdk.org?subject=unsubscribe>
List-Archive: <http://dpdk.org/ml/archives/dev/>
List-Post: <mailto:dev@dpdk.org>
List-Help: <mailto:dev-request@dpdk.org?subject=help>
List-Subscribe: <http://dpdk.org/ml/listinfo/dev>,
 <mailto:dev-request@dpdk.org?subject=subscribe>
Errors-To: dev-bounces@dpdk.org
Sender: "dev" <dev-bounces@dpdk.org>

Hi All

Filtering based on TCP/UDP fields like src/dest port range works correctly
only on non-fragmented packets , that means reassembly must be done before
packets hit firewall rules table. Also  packets must be fragmented before
transmission if larger than port mtu. This is unsupported currently, any
plans for this in near future?

Regards
Shyam