netfilter-devel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* Conntrack offload and ingress_ifindex
@ 2022-04-01 10:40 Edward Cree
  0 siblings, 0 replies; only message in thread
From: Edward Cree @ 2022-04-01 10:40 UTC (permalink / raw)
  To: pablo; +Cc: Network Development, netfilter-devel

Pablo,

When developing a conntrack offload driver, I was quite surprised to find
 that CT entries passed to the driver's flow-block callback (as registered
 with nf_flow_table_offload_add_cb()) include a match on ingress_ifindex,
 with mask 0xffffffff and key 0.  This is especially confusing as AIUI 0 is
 not a valid ifindex.
From reading the calling code, looking at git logs etc, I can't determine
 the intended semantics of this match; could you clarify what (if anything)
 drivers are expected to do with it?
(Looking at other drivers it appears that e.g. mlx5e simply ignores it, as
 its test for `key & mask` in mlx5_tc_ct_set_tuple_match() will be false.)

-ed

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2022-04-01 10:40 UTC | newest]

Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2022-04-01 10:40 Conntrack offload and ingress_ifindex Edward Cree

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).