diff options
| author | Mohamad Haj Yahia <mohamad@mellanox.com> | 2016-05-03 14:13:57 (GMT) |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2016-05-04 18:04:47 (GMT) |
| commit | 5742df0f7dbe54728145bf1136540c09c7fcb0d1 (patch) | |
| tree | e84e59b2021231a73122c58c5f0a4728799d0dcf /mm | |
| parent | 761e205b559be52852d85e0db4a034c9f57965f9 (diff) | |
| download | linux-5742df0f7dbe54728145bf1136540c09c7fcb0d1.tar.xz | |
net/mlx5: E-Switch, Introduce VST vport ingress/egress ACLs
Create egress/ingress ACLs per VF vport at vport enable.
Ingress ACL:
- one flow group to drop all tagged traffic in VST mode.
Egress ACL:
- one flow group that allows only untagged traffic with
smac that is equals to the original mac (anti-spoofing).
- one flow group that allows only untagged traffic.
- one flow group that allows only smac that is equals
to the original mac (anti-spoofing).
(note: only one of the above group has active rule)
- star rule will be used to drop all other traffic.
By default no rules are generated, unless VST is explicitly requested.
Signed-off-by: Mohamad Haj Yahia <mohamad@mellanox.com>
Signed-off-by: Saeed Mahameed <saeedm@mellanox.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'mm')
0 files changed, 0 insertions, 0 deletions