From mboxrd@z Thu Jan 1 00:00:00 1970 From: Marcelo Ricardo Leitner Subject: Re: [patch net-next v6 00/11] net: sched: allow qdiscs to share filter block instances Date: Mon, 8 Jan 2018 13:23:06 -0200 Message-ID: <20180108152306.GJ725@localhost.localdomain> References: <20180105230929.5645-1-jiri@resnulli.us> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: netdev@vger.kernel.org, davem@davemloft.net, jhs@mojatatu.com, xiyou.wangcong@gmail.com, mlxsw@mellanox.com, andrew@lunn.ch, vivien.didelot@savoirfairelinux.com, f.fainelli@gmail.com, michael.chan@broadcom.com, ganeshgr@chelsio.com, saeedm@mellanox.com, matanb@mellanox.com, leonro@mellanox.com, idosch@mellanox.com, jakub.kicinski@netronome.com, simon.horman@netronome.com, pieter.jansenvanvuuren@netronome.com, john.hurley@netronome.com, alexander.h.duyck@intel.com, ogerlitz@mellanox.com, john.fastabend@gmail.com, daniel@iogearbox.net, dsahern@gmail.com To: Jiri Pirko Return-path: Received: from mx1.redhat.com ([209.132.183.28]:34052 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S933081AbeAHPXO (ORCPT ); Mon, 8 Jan 2018 10:23:14 -0500 Content-Disposition: inline In-Reply-To: <20180105230929.5645-1-jiri@resnulli.us> Sender: netdev-owner@vger.kernel.org List-ID: On Sat, Jan 06, 2018 at 12:09:18AM +0100, Jiri Pirko wrote: ... > Note we cannot use the qdisc for filter manipulations for shared blocks: > > $ tc filter add dev ens8 ingress protocol ip pref 1 flower dst_ip 192.168.100.2 action drop > Error: Cannot work with shared block, please use block index. > > > We will see the same output if we list filters for ingress qdisc of > ens7 and ens8, also for the block 22: > > $ tc filter show block 22 > filter block 22 protocol ip pref 25 flower chain 0 > filter block 22 protocol ip pref 25 flower chain 0 handle 0x1 > ... > > $ tc filter show dev ens7 ingress > filter block 22 protocol ip pref 25 flower chain 0 > filter block 22 protocol ip pref 25 flower chain 0 handle 0x1 > ... > > $ tc filter show dev ens8 ingress > filter block 22 protocol ip pref 25 flower chain 0 > filter block 22 protocol ip pref 25 flower chain 0 handle 0x1 > ... If changing a rule on an interface and reflecting it on the other is considered confusing, what about getting the stats including the stats from the other interface? AFAICT that's what would happen in the 3 show commands above, they would show the same values. Seems it can get confusing to the user: to check an interface, see some hits on it, but they actually happened on the other interface. Marcelo