From mboxrd@z Thu Jan  1 00:00:00 1970
From: Eric Dumazet <eric.dumazet@gmail.com>
Subject: Re: [PATCH RFC net-next 1/4] ipv4: fib_rules: support match on
 sport, dport and ip proto
Date: Mon, 12 Feb 2018 13:54:59 -0800
Message-ID: <1518472499.3715.165.camel@gmail.com>
References: <1518387989-33735-1-git-send-email-roopa@cumulusnetworks.com>
         <1518387989-33735-2-git-send-email-roopa@cumulusnetworks.com>
         <1518468573.3715.163.camel@gmail.com>
         <20180212.160510.620630476824737121.davem@davemloft.net>
Mime-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Cc: roopa@cumulusnetworks.com, netdev@vger.kernel.org,
        dsa@cumulusnetworks.com, nikolay@cumulusnetworks.com
To: David Miller <davem@davemloft.net>
Return-path: <netdev-owner@vger.kernel.org>
Received: from mail-it0-f51.google.com ([209.85.214.51]:35921 "EHLO
        mail-it0-f51.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org
        with ESMTP id S932109AbeBLVzD (ORCPT
        <rfc822;netdev@vger.kernel.org>); Mon, 12 Feb 2018 16:55:03 -0500
Received: by mail-it0-f51.google.com with SMTP id n206so8374209itg.1
        for <netdev@vger.kernel.org>; Mon, 12 Feb 2018 13:55:03 -0800 (PST)
In-Reply-To: <20180212.160510.620630476824737121.davem@davemloft.net>
Sender: netdev-owner@vger.kernel.org
List-ID: <netdev.vger.kernel.org>

On Mon, 2018-02-12 at 16:05 -0500, David Miller wrote:
> From: Eric Dumazet <eric.dumazet@gmail.com>
> Date: Mon, 12 Feb 2018 12:49:33 -0800
> 
> > Any setup with about 20 rules to be evaluated (per packet cost) will
> > feel the pain...
> > 
> > I wonder if we could JIT/eBPF this thing.
> 
> That's true for the software implementation angle.
> 
> But I bet anyone actually using this thing will get it hardware
> offloaded.

I wish :)

We had project/teams using different routing tables for each vlan they
setup :/

Setups with tunnels are doubly impacted, it is really easy to reach 20
evaluated rules per incoming and outgoing packet.