Author: Pieter Jansen van Vuuren <email@example.com>
Date: Fri Sep 28 16:03:39 2018 +0200
tc: f_flower: add geneve option match support to flower
Allow matching on options in Geneve tunnel headers.
The options can be described in the form
CLASS:TYPE:DATA/CLASS_MASK:TYPE_MASK:DATA_MASK, where CLASS is
represented as a 16bit hexadecimal value, TYPE as an 8bit
hexadecimal value and DATA as a variable length hexadecimal value.
# ip link add name geneve0 type geneve dstport 0 external
# tc qdisc add dev geneve0 ingress
# tc filter add dev geneve0 protocol ip parent ffff: \
enc_src_ip 10.0.99.192 \
enc_dst_ip 10.0.99.193 \
enc_key_id 11 \
geneve_opts 0102:80:1122334421314151/ffff:ff:ffffffffffffffff \
ip_proto udp \
action mirred egress redirect dev eth1
Signed-off-by: Pieter Jansen van Vuuren <firstname.lastname@example.org>
Signed-off-by: Simon Horman <email@example.com>
Signed-off-by: David Ahern <firstname.lastname@example.org>
Happy to try backporting and propose patches for the iproute pkg
(In reply to Pablo Cascon from comment #1)
> Happy to try backporting and propose patches for the iproute pkg
Thanks for your offer, shouldn't be necessary though. RHEL8 iproute is pretty up to date, so backporting should be easy. I'd appreciate though if you could give it a quick test once a build containing the requested patch is available (I'll update the Fixed In Version field then).
brilliant. Absolutely will get it tested.
Have gone half way to create a custom iproute pkg just to realize we also need:
6217917 tc: m_tunnel_key: Add tunnel option support to act_tunnel_key
and deps as it doesn't apply nicely unfortunately. Sorry about that, let me know if you wanted a different BZ. Will try to figure the list of deps and post them here.
do you have any justification why this is needed in 184.108.40.206 and it can not wait for 220.127.116.11?
Hello Jaroslav, not a strong one, it is a very nice to have, specially for debugging and also for testing the driver feature backported in 1655604 without OVS. It is mostly that all the dev work has been done and the backport is the last step :) Happy to get this backport tested by Netronome
If someone else (Netronome) verify this bug, I'm ok with it. Setting qa_ack. Anyway it needs exception from PM.
Pkg iproute-4.18.0-11.el8 works as expected, this is verified from Netronome side, please consider marking this BZ as qa_ack+