[linux-2.6-block.git] / drivers / net / ethernet / mellanox / mlx5 / core / en_tc.c

/*
 * Copyright (c) 2016, Mellanox Technologies. All rights reserved.
 *
 * This software is available to you under a choice of one of two
 * licenses.  You may choose to be licensed under the terms of the GNU
 * General Public License (GPL) Version 2, available from the file
 * COPYING in the main directory of this source tree, or the
 * OpenIB.org BSD license below:
 *
 *     Redistribution and use in source and binary forms, with or
 *     without modification, are permitted provided that the following
 *     conditions are met:
 *
 *      - Redistributions of source code must retain the above
 *        copyright notice, this list of conditions and the following
 *        disclaimer.
 *
 *      - Redistributions in binary form must reproduce the above
 *        copyright notice, this list of conditions and the following
 *        disclaimer in the documentation and/or other materials
 *        provided with the distribution.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
 * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
 * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
 * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
 * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
 * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 * SOFTWARE.
 */

#include <net/flow_dissector.h>
#include <net/pkt_cls.h>
#include <net/tc_act/tc_gact.h>
#include <net/tc_act/tc_skbedit.h>
#include <linux/mlx5/fs.h>
#include <linux/mlx5/device.h>
#include <linux/rhashtable.h>
#include <net/switchdev.h>
#include <net/tc_act/tc_mirred.h>
#include <net/tc_act/tc_vlan.h>
#include "en.h"
#include "en_tc.h"
#include "eswitch.h"

struct mlx5e_tc_flow {
	struct rhash_head	node;
	u64			cookie;
	struct mlx5_flow_rule	*rule;
	struct mlx5_esw_flow_attr *attr;
};

#define MLX5E_TC_TABLE_NUM_ENTRIES 1024
#define MLX5E_TC_TABLE_NUM_GROUPS 4

static struct mlx5_flow_rule *mlx5e_tc_add_nic_flow(struct mlx5e_priv *priv,
						    struct mlx5_flow_spec *spec,
						    u32 action, u32 flow_tag)
{
	struct mlx5_core_dev *dev = priv->mdev;
	struct mlx5_flow_destination dest = { 0 };
	struct mlx5_fc *counter = NULL;
	struct mlx5_flow_rule *rule;
	bool table_created = false;

	if (action & MLX5_FLOW_CONTEXT_ACTION_FWD_DEST) {
		dest.type = MLX5_FLOW_DESTINATION_TYPE_FLOW_TABLE;
		dest.ft = priv->fs.vlan.ft.t;
	} else if (action & MLX5_FLOW_CONTEXT_ACTION_COUNT) {
		counter = mlx5_fc_create(dev, true);
		if (IS_ERR(counter))
			return ERR_CAST(counter);

		dest.type = MLX5_FLOW_DESTINATION_TYPE_COUNTER;
		dest.counter = counter;
	}

	if (IS_ERR_OR_NULL(priv->fs.tc.t)) {
		priv->fs.tc.t =
			mlx5_create_auto_grouped_flow_table(priv->fs.ns,
							    MLX5E_TC_PRIO,
							    MLX5E_TC_TABLE_NUM_ENTRIES,
							    MLX5E_TC_TABLE_NUM_GROUPS,
							    0);
		if (IS_ERR(priv->fs.tc.t)) {
			netdev_err(priv->netdev,
				   "Failed to create tc offload table\n");
			rule = ERR_CAST(priv->fs.tc.t);
			goto err_create_ft;
		}

		table_created = true;
	}

	spec->match_criteria_enable = MLX5_MATCH_OUTER_HEADERS;
	rule = mlx5_add_flow_rule(priv->fs.tc.t, spec,
				  action, flow_tag,
				  &dest);

	if (IS_ERR(rule))
		goto err_add_rule;

	return rule;

err_add_rule:
	if (table_created) {
		mlx5_destroy_flow_table(priv->fs.tc.t);
		priv->fs.tc.t = NULL;
	}
err_create_ft:
	mlx5_fc_destroy(dev, counter);

	return rule;
}

static struct mlx5_flow_rule *mlx5e_tc_add_fdb_flow(struct mlx5e_priv *priv,
						    struct mlx5_flow_spec *spec,
						    struct mlx5_esw_flow_attr *attr)
{
	struct mlx5_eswitch *esw = priv->mdev->priv.eswitch;

	return mlx5_eswitch_add_offloaded_rule(esw, spec, attr);
}

static void mlx5e_tc_del_flow(struct mlx5e_priv *priv,
			      struct mlx5_flow_rule *rule)
{
	struct mlx5_fc *counter = NULL;

	counter = mlx5_flow_rule_counter(rule);

	mlx5_del_flow_rule(rule);

	mlx5_fc_destroy(priv->mdev, counter);

	if (!mlx5e_tc_num_filters(priv) && (priv->fs.tc.t)) {
		mlx5_destroy_flow_table(priv->fs.tc.t);
		priv->fs.tc.t = NULL;
	}
}

static int parse_cls_flower(struct mlx5e_priv *priv, struct mlx5_flow_spec *spec,
			    struct tc_cls_flower_offload *f)
{
	void *headers_c = MLX5_ADDR_OF(fte_match_param, spec->match_criteria,
				       outer_headers);
	void *headers_v = MLX5_ADDR_OF(fte_match_param, spec->match_value,
				       outer_headers);
	u16 addr_type = 0;
	u8 ip_proto = 0;

	if (f->dissector->used_keys &
	    ~(BIT(FLOW_DISSECTOR_KEY_CONTROL) |
	      BIT(FLOW_DISSECTOR_KEY_BASIC) |
	      BIT(FLOW_DISSECTOR_KEY_ETH_ADDRS) |
	      BIT(FLOW_DISSECTOR_KEY_IPV4_ADDRS) |
	      BIT(FLOW_DISSECTOR_KEY_IPV6_ADDRS) |
	      BIT(FLOW_DISSECTOR_KEY_PORTS))) {
		netdev_warn(priv->netdev, "Unsupported key used: 0x%x\n",
			    f->dissector->used_keys);
		return -EOPNOTSUPP;
	}

	if (dissector_uses_key(f->dissector, FLOW_DISSECTOR_KEY_CONTROL)) {
		struct flow_dissector_key_control *key =
			skb_flow_dissector_target(f->dissector,
						  FLOW_DISSECTOR_KEY_CONTROL,
						  f->key);
		addr_type = key->addr_type;
	}

	if (dissector_uses_key(f->dissector, FLOW_DISSECTOR_KEY_BASIC)) {
		struct flow_dissector_key_basic *key =
			skb_flow_dissector_target(f->dissector,
						  FLOW_DISSECTOR_KEY_BASIC,
						  f->key);
		struct flow_dissector_key_basic *mask =
			skb_flow_dissector_target(f->dissector,
						  FLOW_DISSECTOR_KEY_BASIC,
						  f->mask);
		ip_proto = key->ip_proto;

		MLX5_SET(fte_match_set_lyr_2_4, headers_c, ethertype,
			 ntohs(mask->n_proto));
		MLX5_SET(fte_match_set_lyr_2_4, headers_v, ethertype,
			 ntohs(key->n_proto));

		MLX5_SET(fte_match_set_lyr_2_4, headers_c, ip_protocol,
			 mask->ip_proto);
		MLX5_SET(fte_match_set_lyr_2_4, headers_v, ip_protocol,
			 key->ip_proto);
	}

	if (dissector_uses_key(f->dissector, FLOW_DISSECTOR_KEY_ETH_ADDRS)) {
		struct flow_dissector_key_eth_addrs *key =
			skb_flow_dissector_target(f->dissector,
						  FLOW_DISSECTOR_KEY_ETH_ADDRS,
						  f->key);
		struct flow_dissector_key_eth_addrs *mask =
			skb_flow_dissector_target(f->dissector,
						  FLOW_DISSECTOR_KEY_ETH_ADDRS,
						  f->mask);

		ether_addr_copy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_c,
					     dmac_47_16),
				mask->dst);
		ether_addr_copy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
					     dmac_47_16),
				key->dst);

		ether_addr_copy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_c,
					     smac_47_16),
				mask->src);
		ether_addr_copy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
					     smac_47_16),
				key->src);
	}

	if (addr_type == FLOW_DISSECTOR_KEY_IPV4_ADDRS) {
		struct flow_dissector_key_ipv4_addrs *key =
			skb_flow_dissector_target(f->dissector,
						  FLOW_DISSECTOR_KEY_IPV4_ADDRS,
						  f->key);
		struct flow_dissector_key_ipv4_addrs *mask =
			skb_flow_dissector_target(f->dissector,
						  FLOW_DISSECTOR_KEY_IPV4_ADDRS,
						  f->mask);

		memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_c,
				    src_ipv4_src_ipv6.ipv4_layout.ipv4),
		       &mask->src, sizeof(mask->src));
		memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
				    src_ipv4_src_ipv6.ipv4_layout.ipv4),
		       &key->src, sizeof(key->src));
		memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_c,
				    dst_ipv4_dst_ipv6.ipv4_layout.ipv4),
		       &mask->dst, sizeof(mask->dst));
		memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
				    dst_ipv4_dst_ipv6.ipv4_layout.ipv4),
		       &key->dst, sizeof(key->dst));
	}

	if (addr_type == FLOW_DISSECTOR_KEY_IPV6_ADDRS) {
		struct flow_dissector_key_ipv6_addrs *key =
			skb_flow_dissector_target(f->dissector,
						  FLOW_DISSECTOR_KEY_IPV6_ADDRS,
						  f->key);
		struct flow_dissector_key_ipv6_addrs *mask =
			skb_flow_dissector_target(f->dissector,
						  FLOW_DISSECTOR_KEY_IPV6_ADDRS,
						  f->mask);

		memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_c,
				    src_ipv4_src_ipv6.ipv6_layout.ipv6),
		       &mask->src, sizeof(mask->src));
		memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
				    src_ipv4_src_ipv6.ipv6_layout.ipv6),
		       &key->src, sizeof(key->src));

		memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_c,
				    dst_ipv4_dst_ipv6.ipv6_layout.ipv6),
		       &mask->dst, sizeof(mask->dst));
		memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
				    dst_ipv4_dst_ipv6.ipv6_layout.ipv6),
		       &key->dst, sizeof(key->dst));
	}

	if (dissector_uses_key(f->dissector, FLOW_DISSECTOR_KEY_PORTS)) {
		struct flow_dissector_key_ports *key =
			skb_flow_dissector_target(f->dissector,
						  FLOW_DISSECTOR_KEY_PORTS,
						  f->key);
		struct flow_dissector_key_ports *mask =
			skb_flow_dissector_target(f->dissector,
						  FLOW_DISSECTOR_KEY_PORTS,
						  f->mask);
		switch (ip_proto) {
		case IPPROTO_TCP:
			MLX5_SET(fte_match_set_lyr_2_4, headers_c,
				 tcp_sport, ntohs(mask->src));
			MLX5_SET(fte_match_set_lyr_2_4, headers_v,
				 tcp_sport, ntohs(key->src));

			MLX5_SET(fte_match_set_lyr_2_4, headers_c,
				 tcp_dport, ntohs(mask->dst));
			MLX5_SET(fte_match_set_lyr_2_4, headers_v,
				 tcp_dport, ntohs(key->dst));
			break;

		case IPPROTO_UDP:
			MLX5_SET(fte_match_set_lyr_2_4, headers_c,
				 udp_sport, ntohs(mask->src));
			MLX5_SET(fte_match_set_lyr_2_4, headers_v,
				 udp_sport, ntohs(key->src));

			MLX5_SET(fte_match_set_lyr_2_4, headers_c,
				 udp_dport, ntohs(mask->dst));
			MLX5_SET(fte_match_set_lyr_2_4, headers_v,
				 udp_dport, ntohs(key->dst));
			break;
		default:
			netdev_err(priv->netdev,
				   "Only UDP and TCP transport are supported\n");
			return -EINVAL;
		}
	}

	return 0;
}

static int parse_tc_nic_actions(struct mlx5e_priv *priv, struct tcf_exts *exts,
				u32 *action, u32 *flow_tag)
{
	const struct tc_action *a;
	LIST_HEAD(actions);

	if (tc_no_actions(exts))
		return -EINVAL;

	*flow_tag = MLX5_FS_DEFAULT_FLOW_TAG;
	*action = 0;

	tcf_exts_to_list(exts, &actions);
	list_for_each_entry(a, &actions, list) {
		/* Only support a single action per rule */
		if (*action)
			return -EINVAL;

		if (is_tcf_gact_shot(a)) {
			*action |= MLX5_FLOW_CONTEXT_ACTION_DROP;
			if (MLX5_CAP_FLOWTABLE(priv->mdev,
					       flow_table_properties_nic_receive.flow_counter))
				*action |= MLX5_FLOW_CONTEXT_ACTION_COUNT;
			continue;
		}

		if (is_tcf_skbedit_mark(a)) {
			u32 mark = tcf_skbedit_mark(a);

			if (mark & ~MLX5E_TC_FLOW_ID_MASK) {
				netdev_warn(priv->netdev, "Bad flow mark - only 16 bit is supported: 0x%x\n",
					    mark);
				return -EINVAL;
			}

			*flow_tag = mark;
			*action |= MLX5_FLOW_CONTEXT_ACTION_FWD_DEST;
			continue;
		}

		return -EINVAL;
	}

	return 0;
}

static int parse_tc_fdb_actions(struct mlx5e_priv *priv, struct tcf_exts *exts,
				struct mlx5_esw_flow_attr *attr)
{
	const struct tc_action *a;
	LIST_HEAD(actions);

	if (tc_no_actions(exts))
		return -EINVAL;

	memset(attr, 0, sizeof(*attr));
	attr->in_rep = priv->ppriv;

	tcf_exts_to_list(exts, &actions);
	list_for_each_entry(a, &actions, list) {
		/* Only support a single action per rule */
		if (attr->action)
			return -EINVAL;

		if (is_tcf_gact_shot(a)) {
			attr->action = MLX5_FLOW_CONTEXT_ACTION_DROP |
				       MLX5_FLOW_CONTEXT_ACTION_COUNT;
			continue;
		}

		if (is_tcf_mirred_redirect(a)) {
			int ifindex = tcf_mirred_ifindex(a);
			struct net_device *out_dev;
			struct mlx5e_priv *out_priv;

			out_dev = __dev_get_by_index(dev_net(priv->netdev), ifindex);

			if (!switchdev_port_same_parent_id(priv->netdev, out_dev)) {
				pr_err("devices %s %s not on same switch HW, can't offload forwarding\n",
				       priv->netdev->name, out_dev->name);
				return -EINVAL;
			}

			attr->action = MLX5_FLOW_CONTEXT_ACTION_FWD_DEST;
			out_priv = netdev_priv(out_dev);
			attr->out_rep = out_priv->ppriv;
			continue;
		}

		return -EINVAL;
	}
	return 0;
}

int mlx5e_configure_flower(struct mlx5e_priv *priv, __be16 protocol,
			   struct tc_cls_flower_offload *f)
{
	struct mlx5e_tc_table *tc = &priv->fs.tc;
	int err = 0;
	bool fdb_flow = false;
	u32 flow_tag, action;
	struct mlx5e_tc_flow *flow;
	struct mlx5_flow_spec *spec;
	struct mlx5_flow_rule *old = NULL;
	struct mlx5_eswitch *esw = priv->mdev->priv.eswitch;

	if (esw && esw->mode == SRIOV_OFFLOADS)
		fdb_flow = true;

	flow = rhashtable_lookup_fast(&tc->ht, &f->cookie,
				      tc->ht_params);
	if (flow) {
		old = flow->rule;
	} else {
		if (fdb_flow)
			flow = kzalloc(sizeof(*flow) + sizeof(struct mlx5_esw_flow_attr),
				       GFP_KERNEL);
		else
			flow = kzalloc(sizeof(*flow), GFP_KERNEL);
	}

	spec = mlx5_vzalloc(sizeof(*spec));
	if (!spec || !flow) {
		err = -ENOMEM;
		goto err_free;
	}

	flow->cookie = f->cookie;

	err = parse_cls_flower(priv, spec, f);
	if (err < 0)
		goto err_free;

	if (fdb_flow) {
		flow->attr  = (struct mlx5_esw_flow_attr *)(flow + 1);
		err = parse_tc_fdb_actions(priv, f->exts, flow->attr);
		if (err < 0)
			goto err_free;
		flow->rule = mlx5e_tc_add_fdb_flow(priv, spec, flow->attr);
	} else {
		err = parse_tc_nic_actions(priv, f->exts, &action, &flow_tag);
		if (err < 0)
			goto err_free;
		flow->rule = mlx5e_tc_add_nic_flow(priv, spec, action, flow_tag);
	}

	if (IS_ERR(flow->rule)) {
		err = PTR_ERR(flow->rule);
		goto err_free;
	}

	err = rhashtable_insert_fast(&tc->ht, &flow->node,
				     tc->ht_params);
	if (err)
		goto err_del_rule;

	if (old)
		mlx5e_tc_del_flow(priv, old);

	goto out;

err_del_rule:
	mlx5_del_flow_rule(flow->rule);

err_free:
	if (!old)
		kfree(flow);
out:
	kvfree(spec);
	return err;
}

int mlx5e_delete_flower(struct mlx5e_priv *priv,
			struct tc_cls_flower_offload *f)
{
	struct mlx5e_tc_flow *flow;
	struct mlx5e_tc_table *tc = &priv->fs.tc;

	flow = rhashtable_lookup_fast(&tc->ht, &f->cookie,
				      tc->ht_params);
	if (!flow)
		return -EINVAL;

	rhashtable_remove_fast(&tc->ht, &flow->node, tc->ht_params);

	mlx5e_tc_del_flow(priv, flow->rule);

	kfree(flow);

	return 0;
}

int mlx5e_stats_flower(struct mlx5e_priv *priv,
		       struct tc_cls_flower_offload *f)
{
	struct mlx5e_tc_table *tc = &priv->fs.tc;
	struct mlx5e_tc_flow *flow;
	struct tc_action *a;
	struct mlx5_fc *counter;
	LIST_HEAD(actions);
	u64 bytes;
	u64 packets;
	u64 lastuse;

	flow = rhashtable_lookup_fast(&tc->ht, &f->cookie,
				      tc->ht_params);
	if (!flow)
		return -EINVAL;

	counter = mlx5_flow_rule_counter(flow->rule);
	if (!counter)
		return 0;

	mlx5_fc_query_cached(counter, &bytes, &packets, &lastuse);

	tcf_exts_to_list(f->exts, &actions);
	list_for_each_entry(a, &actions, list)
		tcf_action_stats_update(a, bytes, packets, lastuse);

	return 0;
}

static const struct rhashtable_params mlx5e_tc_flow_ht_params = {
	.head_offset = offsetof(struct mlx5e_tc_flow, node),
	.key_offset = offsetof(struct mlx5e_tc_flow, cookie),
	.key_len = sizeof(((struct mlx5e_tc_flow *)0)->cookie),
	.automatic_shrinking = true,
};

int mlx5e_tc_init(struct mlx5e_priv *priv)
{
	struct mlx5e_tc_table *tc = &priv->fs.tc;

	tc->ht_params = mlx5e_tc_flow_ht_params;
	return rhashtable_init(&tc->ht, &tc->ht_params);
}

static void _mlx5e_tc_del_flow(void *ptr, void *arg)
{
	struct mlx5e_tc_flow *flow = ptr;
	struct mlx5e_priv *priv = arg;

	mlx5e_tc_del_flow(priv, flow->rule);
	kfree(flow);
}

void mlx5e_tc_cleanup(struct mlx5e_priv *priv)
{
	struct mlx5e_tc_table *tc = &priv->fs.tc;

	rhashtable_free_and_destroy(&tc->ht, _mlx5e_tc_del_flow, priv);

	if (!IS_ERR_OR_NULL(tc->t)) {
		mlx5_destroy_flow_table(tc->t);
		tc->t = NULL;
	}
}
Commit	Line	Data
e8f887ac AV	1	/*
	2	* Copyright (c) 2016, Mellanox Technologies. All rights reserved.
	3	*
	4	* This software is available to you under a choice of one of two
	5	* licenses. You may choose to be licensed under the terms of the GNU
	6	* General Public License (GPL) Version 2, available from the file
	7	* COPYING in the main directory of this source tree, or the
	8	* OpenIB.org BSD license below:
	9	*
	10	* Redistribution and use in source and binary forms, with or
	11	* without modification, are permitted provided that the following
	12	* conditions are met:
	13	*
	14	* - Redistributions of source code must retain the above
	15	* copyright notice, this list of conditions and the following
	16	* disclaimer.
	17	*
	18	* - Redistributions in binary form must reproduce the above
	19	* copyright notice, this list of conditions and the following
	20	* disclaimer in the documentation and/or other materials
	21	* provided with the distribution.
	22	*
	23	* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
	24	* EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
	25	* MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
	26	* NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
	27	* BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
	28	* ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
	29	* CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
	30	* SOFTWARE.
	31	*/
	32
e3a2b7ed AV	33	#include <net/flow_dissector.h>
	34	#include <net/pkt_cls.h>
	35	#include <net/tc_act/tc_gact.h>
12185a9f	36	#include <net/tc_act/tc_skbedit.h>
e8f887ac AV	37	#include <linux/mlx5/fs.h>
	38	#include <linux/mlx5/device.h>
	39	#include <linux/rhashtable.h>
03a9d11e OG	40	#include <net/switchdev.h>
03a9d11e OG	41	#include <net/tc_act/tc_mirred.h>
776b12b6	42	#include <net/tc_act/tc_vlan.h>
e8f887ac AV	43	#include "en.h"
e8f887ac AV	44	#include "en_tc.h"
03a9d11e	45	#include "eswitch.h"
e8f887ac AV	46
	47	struct mlx5e_tc_flow {
	48	struct rhash_head node;
	49	u64 cookie;
	50	struct mlx5_flow_rule *rule;
776b12b6	51	struct mlx5_esw_flow_attr *attr;
e8f887ac AV	52	};
e8f887ac AV	53
acff797c MG	54	#define MLX5E_TC_TABLE_NUM_ENTRIES 1024
acff797c MG	55	#define MLX5E_TC_TABLE_NUM_GROUPS 4
e8f887ac	56
5c40348c OG	57	static struct mlx5_flow_rule mlx5e_tc_add_nic_flow(struct mlx5e_priv priv,
	58	struct mlx5_flow_spec *spec,
	59	u32 action, u32 flow_tag)
e8f887ac	60	{
aad7e08d AV	61	struct mlx5_core_dev *dev = priv->mdev;
	62	struct mlx5_flow_destination dest = { 0 };
	63	struct mlx5_fc *counter = NULL;
e8f887ac AV	64	struct mlx5_flow_rule *rule;
	65	bool table_created = false;
	66
aad7e08d AV	67	if (action & MLX5_FLOW_CONTEXT_ACTION_FWD_DEST) {
	68	dest.type = MLX5_FLOW_DESTINATION_TYPE_FLOW_TABLE;
	69	dest.ft = priv->fs.vlan.ft.t;
55130287	70	} else if (action & MLX5_FLOW_CONTEXT_ACTION_COUNT) {
aad7e08d AV	71	counter = mlx5_fc_create(dev, true);
	72	if (IS_ERR(counter))
	73	return ERR_CAST(counter);
	74
	75	dest.type = MLX5_FLOW_DESTINATION_TYPE_COUNTER;
	76	dest.counter = counter;
	77	}
	78
acff797c MG	79	if (IS_ERR_OR_NULL(priv->fs.tc.t)) {
	80	priv->fs.tc.t =
	81	mlx5_create_auto_grouped_flow_table(priv->fs.ns,
	82	MLX5E_TC_PRIO,
	83	MLX5E_TC_TABLE_NUM_ENTRIES,
	84	MLX5E_TC_TABLE_NUM_GROUPS,
d63cd286	85	0);
acff797c	86	if (IS_ERR(priv->fs.tc.t)) {
e8f887ac AV	87	netdev_err(priv->netdev,
e8f887ac AV	88	"Failed to create tc offload table\n");
aad7e08d AV	89	rule = ERR_CAST(priv->fs.tc.t);
aad7e08d AV	90	goto err_create_ft;
e8f887ac AV	91	}
	92
	93	table_created = true;
	94	}
	95
c5bb1730 MG	96	spec->match_criteria_enable = MLX5_MATCH_OUTER_HEADERS;
c5bb1730 MG	97	rule = mlx5_add_flow_rule(priv->fs.tc.t, spec,
e8f887ac	98	action, flow_tag,
aad7e08d AV	99	&dest);
	100
	101	if (IS_ERR(rule))
	102	goto err_add_rule;
	103
	104	return rule;
e8f887ac	105
aad7e08d AV	106	err_add_rule:
aad7e08d AV	107	if (table_created) {
acff797c MG	108	mlx5_destroy_flow_table(priv->fs.tc.t);
acff797c MG	109	priv->fs.tc.t = NULL;
e8f887ac	110	}
aad7e08d AV	111	err_create_ft:
aad7e08d AV	112	mlx5_fc_destroy(dev, counter);
e8f887ac AV	113
	114	return rule;
	115	}
	116
adb4c123 OG	117	static struct mlx5_flow_rule mlx5e_tc_add_fdb_flow(struct mlx5e_priv priv,
adb4c123 OG	118	struct mlx5_flow_spec *spec,
776b12b6	119	struct mlx5_esw_flow_attr *attr)
adb4c123 OG	120	{
adb4c123 OG	121	struct mlx5_eswitch *esw = priv->mdev->priv.eswitch;
adb4c123	122
776b12b6	123	return mlx5_eswitch_add_offloaded_rule(esw, spec, attr);
adb4c123 OG	124	}
adb4c123 OG	125
e8f887ac AV	126	static void mlx5e_tc_del_flow(struct mlx5e_priv *priv,
	127	struct mlx5_flow_rule *rule)
	128	{
aad7e08d AV	129	struct mlx5_fc *counter = NULL;
	130
	131	counter = mlx5_flow_rule_counter(rule);
	132
e8f887ac AV	133	mlx5_del_flow_rule(rule);
e8f887ac AV	134
aad7e08d AV	135	mlx5_fc_destroy(priv->mdev, counter);
aad7e08d AV	136
5c40348c	137	if (!mlx5e_tc_num_filters(priv) && (priv->fs.tc.t)) {
acff797c MG	138	mlx5_destroy_flow_table(priv->fs.tc.t);
acff797c MG	139	priv->fs.tc.t = NULL;
e8f887ac AV	140	}
	141	}
	142
c5bb1730	143	static int parse_cls_flower(struct mlx5e_priv priv, struct mlx5_flow_spec spec,
e3a2b7ed AV	144	struct tc_cls_flower_offload *f)
e3a2b7ed AV	145	{
c5bb1730 MG	146	void *headers_c = MLX5_ADDR_OF(fte_match_param, spec->match_criteria,
	147	outer_headers);
	148	void *headers_v = MLX5_ADDR_OF(fte_match_param, spec->match_value,
	149	outer_headers);
e3a2b7ed AV	150	u16 addr_type = 0;
	151	u8 ip_proto = 0;
	152
	153	if (f->dissector->used_keys &
	154	~(BIT(FLOW_DISSECTOR_KEY_CONTROL) \|
	155	BIT(FLOW_DISSECTOR_KEY_BASIC) \|
	156	BIT(FLOW_DISSECTOR_KEY_ETH_ADDRS) \|
	157	BIT(FLOW_DISSECTOR_KEY_IPV4_ADDRS) \|
	158	BIT(FLOW_DISSECTOR_KEY_IPV6_ADDRS) \|
	159	BIT(FLOW_DISSECTOR_KEY_PORTS))) {
	160	netdev_warn(priv->netdev, "Unsupported key used: 0x%x\n",
	161	f->dissector->used_keys);
	162	return -EOPNOTSUPP;
	163	}
	164
	165	if (dissector_uses_key(f->dissector, FLOW_DISSECTOR_KEY_CONTROL)) {
	166	struct flow_dissector_key_control *key =
	167	skb_flow_dissector_target(f->dissector,
1dbd0d37	168	FLOW_DISSECTOR_KEY_CONTROL,
e3a2b7ed AV	169	f->key);
	170	addr_type = key->addr_type;
	171	}
	172
	173	if (dissector_uses_key(f->dissector, FLOW_DISSECTOR_KEY_BASIC)) {
	174	struct flow_dissector_key_basic *key =
	175	skb_flow_dissector_target(f->dissector,
	176	FLOW_DISSECTOR_KEY_BASIC,
	177	f->key);
	178	struct flow_dissector_key_basic *mask =
	179	skb_flow_dissector_target(f->dissector,
	180	FLOW_DISSECTOR_KEY_BASIC,
	181	f->mask);
	182	ip_proto = key->ip_proto;
	183
	184	MLX5_SET(fte_match_set_lyr_2_4, headers_c, ethertype,
	185	ntohs(mask->n_proto));
	186	MLX5_SET(fte_match_set_lyr_2_4, headers_v, ethertype,
	187	ntohs(key->n_proto));
	188
	189	MLX5_SET(fte_match_set_lyr_2_4, headers_c, ip_protocol,
	190	mask->ip_proto);
	191	MLX5_SET(fte_match_set_lyr_2_4, headers_v, ip_protocol,
	192	key->ip_proto);
	193	}
	194
	195	if (dissector_uses_key(f->dissector, FLOW_DISSECTOR_KEY_ETH_ADDRS)) {
	196	struct flow_dissector_key_eth_addrs *key =
	197	skb_flow_dissector_target(f->dissector,
	198	FLOW_DISSECTOR_KEY_ETH_ADDRS,
	199	f->key);
	200	struct flow_dissector_key_eth_addrs *mask =
	201	skb_flow_dissector_target(f->dissector,
	202	FLOW_DISSECTOR_KEY_ETH_ADDRS,
	203	f->mask);
	204
	205	ether_addr_copy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_c,
	206	dmac_47_16),
	207	mask->dst);
	208	ether_addr_copy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
	209	dmac_47_16),
	210	key->dst);
	211
	212	ether_addr_copy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_c,
	213	smac_47_16),
	214	mask->src);
	215	ether_addr_copy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
	216	smac_47_16),
	217	key->src);
	218	}
	219
	220	if (addr_type == FLOW_DISSECTOR_KEY_IPV4_ADDRS) {
	221	struct flow_dissector_key_ipv4_addrs *key =
	222	skb_flow_dissector_target(f->dissector,
	223	FLOW_DISSECTOR_KEY_IPV4_ADDRS,
	224	f->key);
	225	struct flow_dissector_key_ipv4_addrs *mask =
	226	skb_flow_dissector_target(f->dissector,
	227	FLOW_DISSECTOR_KEY_IPV4_ADDRS,
	228	f->mask);
	229
	230	memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_c,
	231	src_ipv4_src_ipv6.ipv4_layout.ipv4),
	232	&mask->src, sizeof(mask->src));
233	memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
234	src_ipv4_src_ipv6.ipv4_layout.ipv4),
235	&key->src, sizeof(key->src));
236	memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_c,
237	dst_ipv4_dst_ipv6.ipv4_layout.ipv4),
238	&mask->dst, sizeof(mask->dst));
239	memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
240	dst_ipv4_dst_ipv6.ipv4_layout.ipv4),
241	&key->dst, sizeof(key->dst));
242	}
243
244	if (addr_type == FLOW_DISSECTOR_KEY_IPV6_ADDRS) {
245	struct flow_dissector_key_ipv6_addrs *key =
246	skb_flow_dissector_target(f->dissector,
247	FLOW_DISSECTOR_KEY_IPV6_ADDRS,
248	f->key);
249	struct flow_dissector_key_ipv6_addrs *mask =
250	skb_flow_dissector_target(f->dissector,
251	FLOW_DISSECTOR_KEY_IPV6_ADDRS,
252	f->mask);
253
254	memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_c,
255	src_ipv4_src_ipv6.ipv6_layout.ipv6),
256	&mask->src, sizeof(mask->src));
257	memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
258	src_ipv4_src_ipv6.ipv6_layout.ipv6),
259	&key->src, sizeof(key->src));
260
261	memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_c,
262	dst_ipv4_dst_ipv6.ipv6_layout.ipv6),
263	&mask->dst, sizeof(mask->dst));
264	memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
265	dst_ipv4_dst_ipv6.ipv6_layout.ipv6),
266	&key->dst, sizeof(key->dst));
267	}
268
269	if (dissector_uses_key(f->dissector, FLOW_DISSECTOR_KEY_PORTS)) {
270	struct flow_dissector_key_ports *key =
271	skb_flow_dissector_target(f->dissector,
272	FLOW_DISSECTOR_KEY_PORTS,
273	f->key);
274	struct flow_dissector_key_ports *mask =
275	skb_flow_dissector_target(f->dissector,
276	FLOW_DISSECTOR_KEY_PORTS,
277	f->mask);
278	switch (ip_proto) {
279	case IPPROTO_TCP:
280	MLX5_SET(fte_match_set_lyr_2_4, headers_c,
281	tcp_sport, ntohs(mask->src));
282	MLX5_SET(fte_match_set_lyr_2_4, headers_v,
283	tcp_sport, ntohs(key->src));
284
285	MLX5_SET(fte_match_set_lyr_2_4, headers_c,
286	tcp_dport, ntohs(mask->dst));
287	MLX5_SET(fte_match_set_lyr_2_4, headers_v,
288	tcp_dport, ntohs(key->dst));
289	break;
290
291	case IPPROTO_UDP:
292	MLX5_SET(fte_match_set_lyr_2_4, headers_c,
293	udp_sport, ntohs(mask->src));
294	MLX5_SET(fte_match_set_lyr_2_4, headers_v,
295	udp_sport, ntohs(key->src));
296
297	MLX5_SET(fte_match_set_lyr_2_4, headers_c,
298	udp_dport, ntohs(mask->dst));
299	MLX5_SET(fte_match_set_lyr_2_4, headers_v,
300	udp_dport, ntohs(key->dst));
301	break;
302	default:
303	netdev_err(priv->netdev,
304	"Only UDP and TCP transport are supported\n");
305	return -EINVAL;
306	}
307	}
308
309	return 0;
310	}
311
5c40348c OG	312	static int parse_tc_nic_actions(struct mlx5e_priv priv, struct tcf_exts exts,
5c40348c OG	313	u32 action, u32 flow_tag)
e3a2b7ed AV	314	{
e3a2b7ed AV	315	const struct tc_action *a;
22dc13c8	316	LIST_HEAD(actions);
e3a2b7ed AV	317
	318	if (tc_no_actions(exts))
	319	return -EINVAL;
	320
	321	*flow_tag = MLX5_FS_DEFAULT_FLOW_TAG;
	322	*action = 0;
	323
22dc13c8 WC	324	tcf_exts_to_list(exts, &actions);
22dc13c8 WC	325	list_for_each_entry(a, &actions, list) {
e3a2b7ed AV	326	/* Only support a single action per rule */
	327	if (*action)
	328	return -EINVAL;
	329
	330	if (is_tcf_gact_shot(a)) {
	331	*action \|= MLX5_FLOW_CONTEXT_ACTION_DROP;
aad7e08d AV	332	if (MLX5_CAP_FLOWTABLE(priv->mdev,
	333	flow_table_properties_nic_receive.flow_counter))
	334	*action \|= MLX5_FLOW_CONTEXT_ACTION_COUNT;
e3a2b7ed AV	335	continue;
	336	}
	337
	338	if (is_tcf_skbedit_mark(a)) {
	339	u32 mark = tcf_skbedit_mark(a);
	340
	341	if (mark & ~MLX5E_TC_FLOW_ID_MASK) {
	342	netdev_warn(priv->netdev, "Bad flow mark - only 16 bit is supported: 0x%x\n",
	343	mark);
	344	return -EINVAL;
	345	}
	346
	347	*flow_tag = mark;
	348	*action \|= MLX5_FLOW_CONTEXT_ACTION_FWD_DEST;
	349	continue;
	350	}
	351
	352	return -EINVAL;
	353	}
	354
	355	return 0;
	356	}
	357
03a9d11e	358	static int parse_tc_fdb_actions(struct mlx5e_priv priv, struct tcf_exts exts,
776b12b6	359	struct mlx5_esw_flow_attr *attr)
03a9d11e OG	360	{
03a9d11e OG	361	const struct tc_action *a;
22dc13c8	362	LIST_HEAD(actions);
03a9d11e OG	363
	364	if (tc_no_actions(exts))
	365	return -EINVAL;
	366
776b12b6 OG	367	memset(attr, 0, sizeof(*attr));
776b12b6 OG	368	attr->in_rep = priv->ppriv;
03a9d11e	369
22dc13c8 WC	370	tcf_exts_to_list(exts, &actions);
22dc13c8 WC	371	list_for_each_entry(a, &actions, list) {
03a9d11e	372	/* Only support a single action per rule */
776b12b6	373	if (attr->action)
03a9d11e OG	374	return -EINVAL;
	375
	376	if (is_tcf_gact_shot(a)) {
776b12b6 OG	377	attr->action = MLX5_FLOW_CONTEXT_ACTION_DROP \|
776b12b6 OG	378	MLX5_FLOW_CONTEXT_ACTION_COUNT;
03a9d11e OG	379	continue;
	380	}
	381
	382	if (is_tcf_mirred_redirect(a)) {
	383	int ifindex = tcf_mirred_ifindex(a);
	384	struct net_device *out_dev;
	385	struct mlx5e_priv *out_priv;
03a9d11e OG	386
	387	out_dev = __dev_get_by_index(dev_net(priv->netdev), ifindex);
	388
	389	if (!switchdev_port_same_parent_id(priv->netdev, out_dev)) {
	390	pr_err("devices %s %s not on same switch HW, can't offload forwarding\n",
	391	priv->netdev->name, out_dev->name);
	392	return -EINVAL;
	393	}
	394
776b12b6	395	attr->action = MLX5_FLOW_CONTEXT_ACTION_FWD_DEST;
03a9d11e	396	out_priv = netdev_priv(out_dev);
776b12b6	397	attr->out_rep = out_priv->ppriv;
03a9d11e OG	398	continue;
	399	}
	400
	401	return -EINVAL;
	402	}
	403	return 0;
	404	}
	405
e3a2b7ed AV	406	int mlx5e_configure_flower(struct mlx5e_priv *priv, __be16 protocol,
	407	struct tc_cls_flower_offload *f)
	408	{
acff797c	409	struct mlx5e_tc_table *tc = &priv->fs.tc;
e3a2b7ed	410	int err = 0;
776b12b6 OG	411	bool fdb_flow = false;
776b12b6 OG	412	u32 flow_tag, action;
e3a2b7ed	413	struct mlx5e_tc_flow *flow;
c5bb1730	414	struct mlx5_flow_spec *spec;
e3a2b7ed	415	struct mlx5_flow_rule *old = NULL;
adb4c123	416	struct mlx5_eswitch *esw = priv->mdev->priv.eswitch;
e3a2b7ed	417
776b12b6 OG	418	if (esw && esw->mode == SRIOV_OFFLOADS)
	419	fdb_flow = true;
	420
e3a2b7ed AV	421	flow = rhashtable_lookup_fast(&tc->ht, &f->cookie,
e3a2b7ed AV	422	tc->ht_params);
776b12b6	423	if (flow) {
e3a2b7ed	424	old = flow->rule;
776b12b6 OG	425	} else {
	426	if (fdb_flow)
	427	flow = kzalloc(sizeof(*flow) + sizeof(struct mlx5_esw_flow_attr),
	428	GFP_KERNEL);
	429	else
	430	flow = kzalloc(sizeof(*flow), GFP_KERNEL);
	431	}
e3a2b7ed	432
c5bb1730 MG	433	spec = mlx5_vzalloc(sizeof(*spec));
c5bb1730 MG	434	if (!spec \|\| !flow) {
e3a2b7ed AV	435	err = -ENOMEM;
	436	goto err_free;
	437	}
	438
	439	flow->cookie = f->cookie;
	440
c5bb1730	441	err = parse_cls_flower(priv, spec, f);
e3a2b7ed AV	442	if (err < 0)
	443	goto err_free;
	444
776b12b6 OG	445	if (fdb_flow) {
	446	flow->attr = (struct mlx5_esw_flow_attr *)(flow + 1);
	447	err = parse_tc_fdb_actions(priv, f->exts, flow->attr);
adb4c123 OG	448	if (err < 0)
adb4c123 OG	449	goto err_free;
776b12b6	450	flow->rule = mlx5e_tc_add_fdb_flow(priv, spec, flow->attr);
adb4c123 OG	451	} else {
	452	err = parse_tc_nic_actions(priv, f->exts, &action, &flow_tag);
	453	if (err < 0)
	454	goto err_free;
	455	flow->rule = mlx5e_tc_add_nic_flow(priv, spec, action, flow_tag);
	456	}
e3a2b7ed	457
e3a2b7ed AV	458	if (IS_ERR(flow->rule)) {
e3a2b7ed AV	459	err = PTR_ERR(flow->rule);
5c40348c	460	goto err_free;
e3a2b7ed AV	461	}
e3a2b7ed AV	462
5c40348c OG	463	err = rhashtable_insert_fast(&tc->ht, &flow->node,
	464	tc->ht_params);
	465	if (err)
	466	goto err_del_rule;
	467
e3a2b7ed AV	468	if (old)
	469	mlx5e_tc_del_flow(priv, old);
	470
	471	goto out;
	472
5c40348c OG	473	err_del_rule:
5c40348c OG	474	mlx5_del_flow_rule(flow->rule);
e3a2b7ed AV	475
	476	err_free:
	477	if (!old)
	478	kfree(flow);
	479	out:
c5bb1730	480	kvfree(spec);
e3a2b7ed AV	481	return err;
	482	}
	483
	484	int mlx5e_delete_flower(struct mlx5e_priv *priv,
	485	struct tc_cls_flower_offload *f)
	486	{
	487	struct mlx5e_tc_flow *flow;
acff797c	488	struct mlx5e_tc_table *tc = &priv->fs.tc;
e3a2b7ed AV	489
	490	flow = rhashtable_lookup_fast(&tc->ht, &f->cookie,
	491	tc->ht_params);
	492	if (!flow)
	493	return -EINVAL;
	494
	495	rhashtable_remove_fast(&tc->ht, &flow->node, tc->ht_params);
	496
	497	mlx5e_tc_del_flow(priv, flow->rule);
	498
	499	kfree(flow);
	500
	501	return 0;
	502	}
	503
aad7e08d AV	504	int mlx5e_stats_flower(struct mlx5e_priv *priv,
	505	struct tc_cls_flower_offload *f)
	506	{
	507	struct mlx5e_tc_table *tc = &priv->fs.tc;
	508	struct mlx5e_tc_flow *flow;
	509	struct tc_action *a;
	510	struct mlx5_fc *counter;
22dc13c8	511	LIST_HEAD(actions);
aad7e08d AV	512	u64 bytes;
	513	u64 packets;
	514	u64 lastuse;
	515
	516	flow = rhashtable_lookup_fast(&tc->ht, &f->cookie,
	517	tc->ht_params);
	518	if (!flow)
	519	return -EINVAL;
	520
	521	counter = mlx5_flow_rule_counter(flow->rule);
	522	if (!counter)
	523	return 0;
	524
	525	mlx5_fc_query_cached(counter, &bytes, &packets, &lastuse);
	526
22dc13c8 WC	527	tcf_exts_to_list(f->exts, &actions);
22dc13c8 WC	528	list_for_each_entry(a, &actions, list)
aad7e08d AV	529	tcf_action_stats_update(a, bytes, packets, lastuse);
	530
	531	return 0;
	532	}
	533
e8f887ac AV	534	static const struct rhashtable_params mlx5e_tc_flow_ht_params = {
	535	.head_offset = offsetof(struct mlx5e_tc_flow, node),
	536	.key_offset = offsetof(struct mlx5e_tc_flow, cookie),
	537	.key_len = sizeof(((struct mlx5e_tc_flow *)0)->cookie),
	538	.automatic_shrinking = true,
	539	};
	540
	541	int mlx5e_tc_init(struct mlx5e_priv *priv)
	542	{
acff797c	543	struct mlx5e_tc_table *tc = &priv->fs.tc;
e8f887ac AV	544
	545	tc->ht_params = mlx5e_tc_flow_ht_params;
	546	return rhashtable_init(&tc->ht, &tc->ht_params);
	547	}
	548
	549	static void _mlx5e_tc_del_flow(void ptr, void arg)
	550	{
	551	struct mlx5e_tc_flow *flow = ptr;
	552	struct mlx5e_priv *priv = arg;
	553
	554	mlx5e_tc_del_flow(priv, flow->rule);
	555	kfree(flow);
	556	}
	557
	558	void mlx5e_tc_cleanup(struct mlx5e_priv *priv)
	559	{
acff797c	560	struct mlx5e_tc_table *tc = &priv->fs.tc;
e8f887ac AV	561
	562	rhashtable_free_and_destroy(&tc->ht, _mlx5e_tc_del_flow, priv);
	563
acff797c MG	564	if (!IS_ERR_OR_NULL(tc->t)) {
	565	mlx5_destroy_flow_table(tc->t);
	566	tc->t = NULL;
e8f887ac AV	567	}
e8f887ac AV	568	}