From mboxrd@z Thu Jan 1 00:00:00 1970 From: David Ahern Subject: Re: [iproute2-next PATCH v3 1/2] tc: flower: Classify packets based port ranges Date: Tue, 20 Nov 2018 16:00:52 -0700 Message-ID: References: <154232971379.10668.16416943966699679792.stgit@anamhost.jf.intel.com> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Cc: jakub.kicinski@netronome.com, sridhar.samudrala@intel.com, jhs@mojatatu.com, xiyou.wangcong@gmail.com, jiri@resnulli.us To: Amritha Nambiar , stephen@networkplumber.org, netdev@vger.kernel.org Return-path: Received: from mail-pl1-f196.google.com ([209.85.214.196]:34445 "EHLO mail-pl1-f196.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725913AbeKUJca (ORCPT ); Wed, 21 Nov 2018 04:32:30 -0500 Received: by mail-pl1-f196.google.com with SMTP id f12-v6so2478324plo.1 for ; Tue, 20 Nov 2018 15:00:54 -0800 (PST) In-Reply-To: <154232971379.10668.16416943966699679792.stgit@anamhost.jf.intel.com> Content-Language: en-US Sender: netdev-owner@vger.kernel.org List-ID: On 11/15/18 5:55 PM, Amritha Nambiar wrote: > Added support for filtering based on port ranges. > UAPI changes have been accepted into net-next. > > Example: > 1. Match on a port range: > ------------------------- > $ tc filter add dev enp4s0 protocol ip parent ffff:\ > prio 1 flower ip_proto tcp dst_port range 20-30 skip_hw\ > action drop > > $ tc -s filter show dev enp4s0 parent ffff: > filter protocol ip pref 1 flower chain 0 > filter protocol ip pref 1 flower chain 0 handle 0x1 > eth_type ipv4 > ip_proto tcp > dst_port range 20-30 > skip_hw > not_in_hw > action order 1: gact action drop > random type none pass val 0 > index 1 ref 1 bind 1 installed 85 sec used 3 sec > Action statistics: > Sent 460 bytes 10 pkt (dropped 10, overlimits 0 requeues 0) > backlog 0b 0p requeues 0 > > 2. Match on IP address and port range: > -------------------------------------- > $ tc filter add dev enp4s0 protocol ip parent ffff:\ > prio 1 flower dst_ip 192.168.1.1 ip_proto tcp dst_port range 100-200\ > skip_hw action drop > > $ tc -s filter show dev enp4s0 parent ffff: > filter protocol ip pref 1 flower chain 0 handle 0x2 > eth_type ipv4 > ip_proto tcp > dst_ip 192.168.1.1 > dst_port range 100-200 > skip_hw > not_in_hw > action order 1: gact action drop > random type none pass val 0 > index 2 ref 1 bind 1 installed 58 sec used 2 sec > Action statistics: > Sent 920 bytes 20 pkt (dropped 20, overlimits 0 requeues 0) > backlog 0b 0p requeues 0 > > v3: > Modified flower_port_range_attr_type calls. > > v2: > Addressed Jiri's comment to sync output format with input > > Signed-off-by: Amritha Nambiar > --- > include/uapi/linux/pkt_cls.h | 7 ++ > tc/f_flower.c | 143 +++++++++++++++++++++++++++++++++++++++--- > 2 files changed, 140 insertions(+), 10 deletions(-) > applied to iproute2-next. Thanks