mbox series

[ovs-dev,v2,0/4] netdev-offload-tc: Allow to match the IP and port mask of tunnel

Message ID 20200602135025.20704-1-xiangxia.m.yue@gmail.com
Headers show
Series netdev-offload-tc: Allow to match the IP and port mask of tunnel | expand

Message

Tonghao Zhang June 2, 2020, 1:50 p.m. UTC 
From: Tonghao Zhang <xiangxia.m.yue@gmail.com>

This series patch allows user to match tunnel src/dst
address and port with masked values. User can use that
to match specified IP address or port and then drop packets
(DDOS network attack from a gateway or others) or other actions.

patch [1]: allow user install TC Flowers with dpctl
patch [2]: make the codes more readable.
patch [3]: allow user to masked match
patch [4]: allow user only match tunnel src address

Tonghao Zhang (4):
  dpif-netlink: Generate ufids for installing TC flowers
  netdev-offload-tc: Use ipv6_addr_is_set instead of is_all_zeros
  netdev-offload-tc: Allow to match the IP and port mask of tunnel
  netdev-offload-tc: Expand tunnel source IPs masked match

 NEWS                        |  5 +++
 include/openvswitch/match.h |  3 ++
 lib/dpif-netlink.c          | 45 ++++++++++++++++++++++++++
 lib/match.c                 | 13 ++++++++
 lib/netdev-offload-tc.c     | 49 ++++++++++++++++++++---------
 lib/odp-util.c              |  3 +-
 lib/packets.h               |  6 ++++
 lib/tc.c                    | 63 +++++++++++++++++++++++++++++++------
 tests/tunnel.at             | 22 +++++++++++++
 9 files changed, 184 insertions(+), 25 deletions(-)

--
V2:
* Split: http://patchwork.ozlabs.org/project/openvswitch/patch/20200518014443.1529-2-xiangxia.m.yue@gmail.com/
  to two patches, that easily to review the patch.
* Fix checkpatch warning
* update NEWS
* add more info in commit message
--
2.26.1

Comments

Simon Horman June 4, 2020, 11:56 a.m. UTC | #1 
On Tue, Jun 02, 2020 at 09:50:21PM +0800, xiangxia.m.yue@gmail.com wrote:
> From: Tonghao Zhang <xiangxia.m.yue@gmail.com>
> 
> This series patch allows user to match tunnel src/dst
> address and port with masked values. User can use that
> to match specified IP address or port and then drop packets
> (DDOS network attack from a gateway or others) or other actions.

Thanks for the revised patchset.
I have pushed it to the master branch.