[mirror_ubuntu-jammy-kernel.git] / drivers / net / ethernet / mellanox / mlx5 / core / en_tc.c

/*
 * Copyright (c) 2016, Mellanox Technologies. All rights reserved.
 *
 * This software is available to you under a choice of one of two
 * licenses.  You may choose to be licensed under the terms of the GNU
 * General Public License (GPL) Version 2, available from the file
 * COPYING in the main directory of this source tree, or the
 * OpenIB.org BSD license below:
 *
 *     Redistribution and use in source and binary forms, with or
 *     without modification, are permitted provided that the following
 *     conditions are met:
 *
 *      - Redistributions of source code must retain the above
 *        copyright notice, this list of conditions and the following
 *        disclaimer.
 *
 *      - Redistributions in binary form must reproduce the above
 *        copyright notice, this list of conditions and the following
 *        disclaimer in the documentation and/or other materials
 *        provided with the distribution.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
 * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
 * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
 * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
 * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
 * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 * SOFTWARE.
 */

#include <net/flow_dissector.h>
#include <net/pkt_cls.h>
#include <net/tc_act/tc_gact.h>
#include <net/tc_act/tc_skbedit.h>
#include <linux/mlx5/fs.h>
#include <linux/mlx5/device.h>
#include <linux/rhashtable.h>
#include <net/switchdev.h>
#include <net/tc_act/tc_mirred.h>
#include <net/tc_act/tc_vlan.h>
#include "en.h"
#include "en_tc.h"
#include "eswitch.h"

struct mlx5e_tc_flow {
	struct rhash_head	node;
	u64			cookie;
	struct mlx5_flow_handle *rule;
	struct mlx5_esw_flow_attr *attr;
};

#define MLX5E_TC_TABLE_NUM_ENTRIES 1024
#define MLX5E_TC_TABLE_NUM_GROUPS 4

static struct mlx5_flow_handle *
mlx5e_tc_add_nic_flow(struct mlx5e_priv *priv,
		      struct mlx5_flow_spec *spec,
		      u32 action, u32 flow_tag)
{
	struct mlx5_core_dev *dev = priv->mdev;
	struct mlx5_flow_destination dest = { 0 };
	struct mlx5_flow_act flow_act = {
		.action = action,
		.flow_tag = flow_tag,
		.encap_id = 0,
	};
	struct mlx5_fc *counter = NULL;
	struct mlx5_flow_handle *rule;
	bool table_created = false;

	if (action & MLX5_FLOW_CONTEXT_ACTION_FWD_DEST) {
		dest.type = MLX5_FLOW_DESTINATION_TYPE_FLOW_TABLE;
		dest.ft = priv->fs.vlan.ft.t;
	} else if (action & MLX5_FLOW_CONTEXT_ACTION_COUNT) {
		counter = mlx5_fc_create(dev, true);
		if (IS_ERR(counter))
			return ERR_CAST(counter);

		dest.type = MLX5_FLOW_DESTINATION_TYPE_COUNTER;
		dest.counter = counter;
	}

	if (IS_ERR_OR_NULL(priv->fs.tc.t)) {
		priv->fs.tc.t =
			mlx5_create_auto_grouped_flow_table(priv->fs.ns,
							    MLX5E_TC_PRIO,
							    MLX5E_TC_TABLE_NUM_ENTRIES,
							    MLX5E_TC_TABLE_NUM_GROUPS,
							    0, 0);
		if (IS_ERR(priv->fs.tc.t)) {
			netdev_err(priv->netdev,
				   "Failed to create tc offload table\n");
			rule = ERR_CAST(priv->fs.tc.t);
			goto err_create_ft;
		}

		table_created = true;
	}

	spec->match_criteria_enable = MLX5_MATCH_OUTER_HEADERS;
	rule = mlx5_add_flow_rules(priv->fs.tc.t, spec, &flow_act, &dest, 1);

	if (IS_ERR(rule))
		goto err_add_rule;

	return rule;

err_add_rule:
	if (table_created) {
		mlx5_destroy_flow_table(priv->fs.tc.t);
		priv->fs.tc.t = NULL;
	}
err_create_ft:
	mlx5_fc_destroy(dev, counter);

	return rule;
}

static struct mlx5_flow_handle *
mlx5e_tc_add_fdb_flow(struct mlx5e_priv *priv,
		      struct mlx5_flow_spec *spec,
		      struct mlx5_esw_flow_attr *attr)
{
	struct mlx5_eswitch *esw = priv->mdev->priv.eswitch;
	int err;

	err = mlx5_eswitch_add_vlan_action(esw, attr);
	if (err)
		return ERR_PTR(err);

	return mlx5_eswitch_add_offloaded_rule(esw, spec, attr);
}

static void mlx5e_tc_del_flow(struct mlx5e_priv *priv,
			      struct mlx5_flow_handle *rule,
			      struct mlx5_esw_flow_attr *attr)
{
	struct mlx5_eswitch *esw = priv->mdev->priv.eswitch;
	struct mlx5_fc *counter = NULL;

	counter = mlx5_flow_rule_counter(rule);

	if (esw && esw->mode == SRIOV_OFFLOADS)
		mlx5_eswitch_del_vlan_action(esw, attr);

	mlx5_del_flow_rules(rule);

	mlx5_fc_destroy(priv->mdev, counter);

	if (!mlx5e_tc_num_filters(priv) && (priv->fs.tc.t)) {
		mlx5_destroy_flow_table(priv->fs.tc.t);
		priv->fs.tc.t = NULL;
	}
}

static int parse_cls_flower(struct mlx5e_priv *priv, struct mlx5_flow_spec *spec,
			    struct tc_cls_flower_offload *f)
{
	void *headers_c = MLX5_ADDR_OF(fte_match_param, spec->match_criteria,
				       outer_headers);
	void *headers_v = MLX5_ADDR_OF(fte_match_param, spec->match_value,
				       outer_headers);
	u16 addr_type = 0;
	u8 ip_proto = 0;

	if (f->dissector->used_keys &
	    ~(BIT(FLOW_DISSECTOR_KEY_CONTROL) |
	      BIT(FLOW_DISSECTOR_KEY_BASIC) |
	      BIT(FLOW_DISSECTOR_KEY_ETH_ADDRS) |
	      BIT(FLOW_DISSECTOR_KEY_VLAN) |
	      BIT(FLOW_DISSECTOR_KEY_IPV4_ADDRS) |
	      BIT(FLOW_DISSECTOR_KEY_IPV6_ADDRS) |
	      BIT(FLOW_DISSECTOR_KEY_PORTS))) {
		netdev_warn(priv->netdev, "Unsupported key used: 0x%x\n",
			    f->dissector->used_keys);
		return -EOPNOTSUPP;
	}

	if (dissector_uses_key(f->dissector, FLOW_DISSECTOR_KEY_CONTROL)) {
		struct flow_dissector_key_control *key =
			skb_flow_dissector_target(f->dissector,
						  FLOW_DISSECTOR_KEY_CONTROL,
						  f->key);
		addr_type = key->addr_type;
	}

	if (dissector_uses_key(f->dissector, FLOW_DISSECTOR_KEY_BASIC)) {
		struct flow_dissector_key_basic *key =
			skb_flow_dissector_target(f->dissector,
						  FLOW_DISSECTOR_KEY_BASIC,
						  f->key);
		struct flow_dissector_key_basic *mask =
			skb_flow_dissector_target(f->dissector,
						  FLOW_DISSECTOR_KEY_BASIC,
						  f->mask);
		ip_proto = key->ip_proto;

		MLX5_SET(fte_match_set_lyr_2_4, headers_c, ethertype,
			 ntohs(mask->n_proto));
		MLX5_SET(fte_match_set_lyr_2_4, headers_v, ethertype,
			 ntohs(key->n_proto));

		MLX5_SET(fte_match_set_lyr_2_4, headers_c, ip_protocol,
			 mask->ip_proto);
		MLX5_SET(fte_match_set_lyr_2_4, headers_v, ip_protocol,
			 key->ip_proto);
	}

	if (dissector_uses_key(f->dissector, FLOW_DISSECTOR_KEY_ETH_ADDRS)) {
		struct flow_dissector_key_eth_addrs *key =
			skb_flow_dissector_target(f->dissector,
						  FLOW_DISSECTOR_KEY_ETH_ADDRS,
						  f->key);
		struct flow_dissector_key_eth_addrs *mask =
			skb_flow_dissector_target(f->dissector,
						  FLOW_DISSECTOR_KEY_ETH_ADDRS,
						  f->mask);

		ether_addr_copy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_c,
					     dmac_47_16),
				mask->dst);
		ether_addr_copy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
					     dmac_47_16),
				key->dst);

		ether_addr_copy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_c,
					     smac_47_16),
				mask->src);
		ether_addr_copy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
					     smac_47_16),
				key->src);
	}

	if (dissector_uses_key(f->dissector, FLOW_DISSECTOR_KEY_VLAN)) {
		struct flow_dissector_key_vlan *key =
			skb_flow_dissector_target(f->dissector,
						  FLOW_DISSECTOR_KEY_VLAN,
						  f->key);
		struct flow_dissector_key_vlan *mask =
			skb_flow_dissector_target(f->dissector,
						  FLOW_DISSECTOR_KEY_VLAN,
						  f->mask);
		if (mask->vlan_id) {
			MLX5_SET(fte_match_set_lyr_2_4, headers_c, vlan_tag, 1);
			MLX5_SET(fte_match_set_lyr_2_4, headers_v, vlan_tag, 1);

			MLX5_SET(fte_match_set_lyr_2_4, headers_c, first_vid, mask->vlan_id);
			MLX5_SET(fte_match_set_lyr_2_4, headers_v, first_vid, key->vlan_id);
		}
	}

	if (addr_type == FLOW_DISSECTOR_KEY_IPV4_ADDRS) {
		struct flow_dissector_key_ipv4_addrs *key =
			skb_flow_dissector_target(f->dissector,
						  FLOW_DISSECTOR_KEY_IPV4_ADDRS,
						  f->key);
		struct flow_dissector_key_ipv4_addrs *mask =
			skb_flow_dissector_target(f->dissector,
						  FLOW_DISSECTOR_KEY_IPV4_ADDRS,
						  f->mask);

		memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_c,
				    src_ipv4_src_ipv6.ipv4_layout.ipv4),
		       &mask->src, sizeof(mask->src));
		memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
				    src_ipv4_src_ipv6.ipv4_layout.ipv4),
		       &key->src, sizeof(key->src));
		memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_c,
				    dst_ipv4_dst_ipv6.ipv4_layout.ipv4),
		       &mask->dst, sizeof(mask->dst));
		memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
				    dst_ipv4_dst_ipv6.ipv4_layout.ipv4),
		       &key->dst, sizeof(key->dst));
	}

	if (addr_type == FLOW_DISSECTOR_KEY_IPV6_ADDRS) {
		struct flow_dissector_key_ipv6_addrs *key =
			skb_flow_dissector_target(f->dissector,
						  FLOW_DISSECTOR_KEY_IPV6_ADDRS,
						  f->key);
		struct flow_dissector_key_ipv6_addrs *mask =
			skb_flow_dissector_target(f->dissector,
						  FLOW_DISSECTOR_KEY_IPV6_ADDRS,
						  f->mask);

		memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_c,
				    src_ipv4_src_ipv6.ipv6_layout.ipv6),
		       &mask->src, sizeof(mask->src));
		memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
				    src_ipv4_src_ipv6.ipv6_layout.ipv6),
		       &key->src, sizeof(key->src));

		memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_c,
				    dst_ipv4_dst_ipv6.ipv6_layout.ipv6),
		       &mask->dst, sizeof(mask->dst));
		memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
				    dst_ipv4_dst_ipv6.ipv6_layout.ipv6),
		       &key->dst, sizeof(key->dst));
	}

	if (dissector_uses_key(f->dissector, FLOW_DISSECTOR_KEY_PORTS)) {
		struct flow_dissector_key_ports *key =
			skb_flow_dissector_target(f->dissector,
						  FLOW_DISSECTOR_KEY_PORTS,
						  f->key);
		struct flow_dissector_key_ports *mask =
			skb_flow_dissector_target(f->dissector,
						  FLOW_DISSECTOR_KEY_PORTS,
						  f->mask);
		switch (ip_proto) {
		case IPPROTO_TCP:
			MLX5_SET(fte_match_set_lyr_2_4, headers_c,
				 tcp_sport, ntohs(mask->src));
			MLX5_SET(fte_match_set_lyr_2_4, headers_v,
				 tcp_sport, ntohs(key->src));

			MLX5_SET(fte_match_set_lyr_2_4, headers_c,
				 tcp_dport, ntohs(mask->dst));
			MLX5_SET(fte_match_set_lyr_2_4, headers_v,
				 tcp_dport, ntohs(key->dst));
			break;

		case IPPROTO_UDP:
			MLX5_SET(fte_match_set_lyr_2_4, headers_c,
				 udp_sport, ntohs(mask->src));
			MLX5_SET(fte_match_set_lyr_2_4, headers_v,
				 udp_sport, ntohs(key->src));

			MLX5_SET(fte_match_set_lyr_2_4, headers_c,
				 udp_dport, ntohs(mask->dst));
			MLX5_SET(fte_match_set_lyr_2_4, headers_v,
				 udp_dport, ntohs(key->dst));
			break;
		default:
			netdev_err(priv->netdev,
				   "Only UDP and TCP transport are supported\n");
			return -EINVAL;
		}
	}

	return 0;
}

static int parse_tc_nic_actions(struct mlx5e_priv *priv, struct tcf_exts *exts,
				u32 *action, u32 *flow_tag)
{
	const struct tc_action *a;
	LIST_HEAD(actions);

	if (tc_no_actions(exts))
		return -EINVAL;

	*flow_tag = MLX5_FS_DEFAULT_FLOW_TAG;
	*action = 0;

	tcf_exts_to_list(exts, &actions);
	list_for_each_entry(a, &actions, list) {
		/* Only support a single action per rule */
		if (*action)
			return -EINVAL;

		if (is_tcf_gact_shot(a)) {
			*action |= MLX5_FLOW_CONTEXT_ACTION_DROP;
			if (MLX5_CAP_FLOWTABLE(priv->mdev,
					       flow_table_properties_nic_receive.flow_counter))
				*action |= MLX5_FLOW_CONTEXT_ACTION_COUNT;
			continue;
		}

		if (is_tcf_skbedit_mark(a)) {
			u32 mark = tcf_skbedit_mark(a);

			if (mark & ~MLX5E_TC_FLOW_ID_MASK) {
				netdev_warn(priv->netdev, "Bad flow mark - only 16 bit is supported: 0x%x\n",
					    mark);
				return -EINVAL;
			}

			*flow_tag = mark;
			*action |= MLX5_FLOW_CONTEXT_ACTION_FWD_DEST;
			continue;
		}

		return -EINVAL;
	}

	return 0;
}

static int parse_tc_fdb_actions(struct mlx5e_priv *priv, struct tcf_exts *exts,
				struct mlx5_esw_flow_attr *attr)
{
	const struct tc_action *a;
	LIST_HEAD(actions);

	if (tc_no_actions(exts))
		return -EINVAL;

	memset(attr, 0, sizeof(*attr));
	attr->in_rep = priv->ppriv;

	tcf_exts_to_list(exts, &actions);
	list_for_each_entry(a, &actions, list) {
		if (is_tcf_gact_shot(a)) {
			attr->action |= MLX5_FLOW_CONTEXT_ACTION_DROP |
					MLX5_FLOW_CONTEXT_ACTION_COUNT;
			continue;
		}

		if (is_tcf_mirred_egress_redirect(a)) {
			int ifindex = tcf_mirred_ifindex(a);
			struct net_device *out_dev;
			struct mlx5e_priv *out_priv;

			out_dev = __dev_get_by_index(dev_net(priv->netdev), ifindex);

			if (!switchdev_port_same_parent_id(priv->netdev, out_dev)) {
				pr_err("devices %s %s not on same switch HW, can't offload forwarding\n",
				       priv->netdev->name, out_dev->name);
				return -EINVAL;
			}

			attr->action |= MLX5_FLOW_CONTEXT_ACTION_FWD_DEST |
					MLX5_FLOW_CONTEXT_ACTION_COUNT;
			out_priv = netdev_priv(out_dev);
			attr->out_rep = out_priv->ppriv;
			continue;
		}

		if (is_tcf_vlan(a)) {
			if (tcf_vlan_action(a) == VLAN_F_POP) {
				attr->action |= MLX5_FLOW_CONTEXT_ACTION_VLAN_POP;
			} else if (tcf_vlan_action(a) == VLAN_F_PUSH) {
				if (tcf_vlan_push_proto(a) != htons(ETH_P_8021Q))
					return -EOPNOTSUPP;

				attr->action |= MLX5_FLOW_CONTEXT_ACTION_VLAN_PUSH;
				attr->vlan = tcf_vlan_push_vid(a);
			}
			continue;
		}

		return -EINVAL;
	}
	return 0;
}

int mlx5e_configure_flower(struct mlx5e_priv *priv, __be16 protocol,
			   struct tc_cls_flower_offload *f)
{
	struct mlx5e_tc_table *tc = &priv->fs.tc;
	int err = 0;
	bool fdb_flow = false;
	u32 flow_tag, action;
	struct mlx5e_tc_flow *flow;
	struct mlx5_flow_spec *spec;
	struct mlx5_flow_handle *old = NULL;
	struct mlx5_esw_flow_attr *old_attr = NULL;
	struct mlx5_eswitch *esw = priv->mdev->priv.eswitch;

	if (esw && esw->mode == SRIOV_OFFLOADS)
		fdb_flow = true;

	flow = rhashtable_lookup_fast(&tc->ht, &f->cookie,
				      tc->ht_params);
	if (flow) {
		old = flow->rule;
		old_attr = flow->attr;
	} else {
		if (fdb_flow)
			flow = kzalloc(sizeof(*flow) + sizeof(struct mlx5_esw_flow_attr),
				       GFP_KERNEL);
		else
			flow = kzalloc(sizeof(*flow), GFP_KERNEL);
	}

	spec = mlx5_vzalloc(sizeof(*spec));
	if (!spec || !flow) {
		err = -ENOMEM;
		goto err_free;
	}

	flow->cookie = f->cookie;

	err = parse_cls_flower(priv, spec, f);
	if (err < 0)
		goto err_free;

	if (fdb_flow) {
		flow->attr  = (struct mlx5_esw_flow_attr *)(flow + 1);
		err = parse_tc_fdb_actions(priv, f->exts, flow->attr);
		if (err < 0)
			goto err_free;
		flow->rule = mlx5e_tc_add_fdb_flow(priv, spec, flow->attr);
	} else {
		err = parse_tc_nic_actions(priv, f->exts, &action, &flow_tag);
		if (err < 0)
			goto err_free;
		flow->rule = mlx5e_tc_add_nic_flow(priv, spec, action, flow_tag);
	}

	if (IS_ERR(flow->rule)) {
		err = PTR_ERR(flow->rule);
		goto err_free;
	}

	err = rhashtable_insert_fast(&tc->ht, &flow->node,
				     tc->ht_params);
	if (err)
		goto err_del_rule;

	if (old)
		mlx5e_tc_del_flow(priv, old, old_attr);

	goto out;

err_del_rule:
	mlx5_del_flow_rules(flow->rule);

err_free:
	if (!old)
		kfree(flow);
out:
	kvfree(spec);
	return err;
}

int mlx5e_delete_flower(struct mlx5e_priv *priv,
			struct tc_cls_flower_offload *f)
{
	struct mlx5e_tc_flow *flow;
	struct mlx5e_tc_table *tc = &priv->fs.tc;

	flow = rhashtable_lookup_fast(&tc->ht, &f->cookie,
				      tc->ht_params);
	if (!flow)
		return -EINVAL;

	rhashtable_remove_fast(&tc->ht, &flow->node, tc->ht_params);

	mlx5e_tc_del_flow(priv, flow->rule, flow->attr);

	kfree(flow);

	return 0;
}

int mlx5e_stats_flower(struct mlx5e_priv *priv,
		       struct tc_cls_flower_offload *f)
{
	struct mlx5e_tc_table *tc = &priv->fs.tc;
	struct mlx5e_tc_flow *flow;
	struct tc_action *a;
	struct mlx5_fc *counter;
	LIST_HEAD(actions);
	u64 bytes;
	u64 packets;
	u64 lastuse;

	flow = rhashtable_lookup_fast(&tc->ht, &f->cookie,
				      tc->ht_params);
	if (!flow)
		return -EINVAL;

	counter = mlx5_flow_rule_counter(flow->rule);
	if (!counter)
		return 0;

	mlx5_fc_query_cached(counter, &bytes, &packets, &lastuse);

	tcf_exts_to_list(f->exts, &actions);
	list_for_each_entry(a, &actions, list)
		tcf_action_stats_update(a, bytes, packets, lastuse);

	return 0;
}

static const struct rhashtable_params mlx5e_tc_flow_ht_params = {
	.head_offset = offsetof(struct mlx5e_tc_flow, node),
	.key_offset = offsetof(struct mlx5e_tc_flow, cookie),
	.key_len = sizeof(((struct mlx5e_tc_flow *)0)->cookie),
	.automatic_shrinking = true,
};

int mlx5e_tc_init(struct mlx5e_priv *priv)
{
	struct mlx5e_tc_table *tc = &priv->fs.tc;

	tc->ht_params = mlx5e_tc_flow_ht_params;
	return rhashtable_init(&tc->ht, &tc->ht_params);
}

static void _mlx5e_tc_del_flow(void *ptr, void *arg)
{
	struct mlx5e_tc_flow *flow = ptr;
	struct mlx5e_priv *priv = arg;

	mlx5e_tc_del_flow(priv, flow->rule, flow->attr);
	kfree(flow);
}

void mlx5e_tc_cleanup(struct mlx5e_priv *priv)
{
	struct mlx5e_tc_table *tc = &priv->fs.tc;

	rhashtable_free_and_destroy(&tc->ht, _mlx5e_tc_del_flow, priv);

	if (!IS_ERR_OR_NULL(tc->t)) {
		mlx5_destroy_flow_table(tc->t);
		tc->t = NULL;
	}
}
Commit	Line	Data
e8f887ac AV	1	/*
	2	* Copyright (c) 2016, Mellanox Technologies. All rights reserved.
	3	*
	4	* This software is available to you under a choice of one of two
	5	* licenses. You may choose to be licensed under the terms of the GNU
	6	* General Public License (GPL) Version 2, available from the file
	7	* COPYING in the main directory of this source tree, or the
	8	* OpenIB.org BSD license below:
	9	*
	10	* Redistribution and use in source and binary forms, with or
	11	* without modification, are permitted provided that the following
	12	* conditions are met:
	13	*
	14	* - Redistributions of source code must retain the above
	15	* copyright notice, this list of conditions and the following
	16	* disclaimer.
	17	*
	18	* - Redistributions in binary form must reproduce the above
	19	* copyright notice, this list of conditions and the following
	20	* disclaimer in the documentation and/or other materials
	21	* provided with the distribution.
	22	*
	23	* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
	24	* EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
	25	* MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
	26	* NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
	27	* BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
	28	* ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
	29	* CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
	30	* SOFTWARE.
	31	*/
	32
e3a2b7ed AV	33	#include <net/flow_dissector.h>
	34	#include <net/pkt_cls.h>
	35	#include <net/tc_act/tc_gact.h>
12185a9f	36	#include <net/tc_act/tc_skbedit.h>
e8f887ac AV	37	#include <linux/mlx5/fs.h>
	38	#include <linux/mlx5/device.h>
	39	#include <linux/rhashtable.h>
03a9d11e OG	40	#include <net/switchdev.h>
03a9d11e OG	41	#include <net/tc_act/tc_mirred.h>
776b12b6	42	#include <net/tc_act/tc_vlan.h>
e8f887ac AV	43	#include "en.h"
e8f887ac AV	44	#include "en_tc.h"
03a9d11e	45	#include "eswitch.h"
e8f887ac AV	46
	47	struct mlx5e_tc_flow {
	48	struct rhash_head node;
	49	u64 cookie;
74491de9	50	struct mlx5_flow_handle *rule;
776b12b6	51	struct mlx5_esw_flow_attr *attr;
e8f887ac AV	52	};
e8f887ac AV	53
acff797c MG	54	#define MLX5E_TC_TABLE_NUM_ENTRIES 1024
acff797c MG	55	#define MLX5E_TC_TABLE_NUM_GROUPS 4
e8f887ac	56
74491de9 MB	57	static struct mlx5_flow_handle *
	58	mlx5e_tc_add_nic_flow(struct mlx5e_priv *priv,
	59	struct mlx5_flow_spec *spec,
	60	u32 action, u32 flow_tag)
e8f887ac	61	{
aad7e08d AV	62	struct mlx5_core_dev *dev = priv->mdev;
aad7e08d AV	63	struct mlx5_flow_destination dest = { 0 };
66958ed9 HHZ	64	struct mlx5_flow_act flow_act = {
	65	.action = action,
	66	.flow_tag = flow_tag,
	67	.encap_id = 0,
	68	};
aad7e08d	69	struct mlx5_fc *counter = NULL;
74491de9	70	struct mlx5_flow_handle *rule;
e8f887ac AV	71	bool table_created = false;
e8f887ac AV	72
aad7e08d AV	73	if (action & MLX5_FLOW_CONTEXT_ACTION_FWD_DEST) {
	74	dest.type = MLX5_FLOW_DESTINATION_TYPE_FLOW_TABLE;
	75	dest.ft = priv->fs.vlan.ft.t;
55130287	76	} else if (action & MLX5_FLOW_CONTEXT_ACTION_COUNT) {
aad7e08d AV	77	counter = mlx5_fc_create(dev, true);
	78	if (IS_ERR(counter))
	79	return ERR_CAST(counter);
	80
	81	dest.type = MLX5_FLOW_DESTINATION_TYPE_COUNTER;
	82	dest.counter = counter;
	83	}
	84
acff797c MG	85	if (IS_ERR_OR_NULL(priv->fs.tc.t)) {
	86	priv->fs.tc.t =
	87	mlx5_create_auto_grouped_flow_table(priv->fs.ns,
	88	MLX5E_TC_PRIO,
	89	MLX5E_TC_TABLE_NUM_ENTRIES,
	90	MLX5E_TC_TABLE_NUM_GROUPS,
c9f1b073	91	0, 0);
acff797c	92	if (IS_ERR(priv->fs.tc.t)) {
e8f887ac AV	93	netdev_err(priv->netdev,
e8f887ac AV	94	"Failed to create tc offload table\n");
aad7e08d AV	95	rule = ERR_CAST(priv->fs.tc.t);
aad7e08d AV	96	goto err_create_ft;
e8f887ac AV	97	}
	98
	99	table_created = true;
	100	}
	101
c5bb1730	102	spec->match_criteria_enable = MLX5_MATCH_OUTER_HEADERS;
66958ed9	103	rule = mlx5_add_flow_rules(priv->fs.tc.t, spec, &flow_act, &dest, 1);
aad7e08d AV	104
	105	if (IS_ERR(rule))
	106	goto err_add_rule;
	107
	108	return rule;
e8f887ac	109
aad7e08d AV	110	err_add_rule:
aad7e08d AV	111	if (table_created) {
acff797c MG	112	mlx5_destroy_flow_table(priv->fs.tc.t);
acff797c MG	113	priv->fs.tc.t = NULL;
e8f887ac	114	}
aad7e08d AV	115	err_create_ft:
aad7e08d AV	116	mlx5_fc_destroy(dev, counter);
e8f887ac AV	117
	118	return rule;
	119	}
	120
74491de9 MB	121	static struct mlx5_flow_handle *
	122	mlx5e_tc_add_fdb_flow(struct mlx5e_priv *priv,
	123	struct mlx5_flow_spec *spec,
	124	struct mlx5_esw_flow_attr *attr)
adb4c123 OG	125	{
adb4c123 OG	126	struct mlx5_eswitch *esw = priv->mdev->priv.eswitch;
8b32580d OG	127	int err;
	128
	129	err = mlx5_eswitch_add_vlan_action(esw, attr);
	130	if (err)
	131	return ERR_PTR(err);
adb4c123	132
776b12b6	133	return mlx5_eswitch_add_offloaded_rule(esw, spec, attr);
adb4c123 OG	134	}
adb4c123 OG	135
e8f887ac	136	static void mlx5e_tc_del_flow(struct mlx5e_priv *priv,
74491de9	137	struct mlx5_flow_handle *rule,
8b32580d	138	struct mlx5_esw_flow_attr *attr)
e8f887ac	139	{
8b32580d	140	struct mlx5_eswitch *esw = priv->mdev->priv.eswitch;
aad7e08d AV	141	struct mlx5_fc *counter = NULL;
	142
	143	counter = mlx5_flow_rule_counter(rule);
	144
8b32580d OG	145	if (esw && esw->mode == SRIOV_OFFLOADS)
	146	mlx5_eswitch_del_vlan_action(esw, attr);
	147
74491de9	148	mlx5_del_flow_rules(rule);
e8f887ac	149
aad7e08d AV	150	mlx5_fc_destroy(priv->mdev, counter);
aad7e08d AV	151
5c40348c	152	if (!mlx5e_tc_num_filters(priv) && (priv->fs.tc.t)) {
acff797c MG	153	mlx5_destroy_flow_table(priv->fs.tc.t);
acff797c MG	154	priv->fs.tc.t = NULL;
e8f887ac AV	155	}
	156	}
	157
c5bb1730	158	static int parse_cls_flower(struct mlx5e_priv priv, struct mlx5_flow_spec spec,
e3a2b7ed AV	159	struct tc_cls_flower_offload *f)
e3a2b7ed AV	160	{
c5bb1730 MG	161	void *headers_c = MLX5_ADDR_OF(fte_match_param, spec->match_criteria,
	162	outer_headers);
	163	void *headers_v = MLX5_ADDR_OF(fte_match_param, spec->match_value,
	164	outer_headers);
e3a2b7ed AV	165	u16 addr_type = 0;
	166	u8 ip_proto = 0;
	167
	168	if (f->dissector->used_keys &
	169	~(BIT(FLOW_DISSECTOR_KEY_CONTROL) \|
	170	BIT(FLOW_DISSECTOR_KEY_BASIC) \|
	171	BIT(FLOW_DISSECTOR_KEY_ETH_ADDRS) \|
095b6cfd	172	BIT(FLOW_DISSECTOR_KEY_VLAN) \|
e3a2b7ed AV	173	BIT(FLOW_DISSECTOR_KEY_IPV4_ADDRS) \|
	174	BIT(FLOW_DISSECTOR_KEY_IPV6_ADDRS) \|
	175	BIT(FLOW_DISSECTOR_KEY_PORTS))) {
	176	netdev_warn(priv->netdev, "Unsupported key used: 0x%x\n",
	177	f->dissector->used_keys);
	178	return -EOPNOTSUPP;
	179	}
	180
	181	if (dissector_uses_key(f->dissector, FLOW_DISSECTOR_KEY_CONTROL)) {
	182	struct flow_dissector_key_control *key =
	183	skb_flow_dissector_target(f->dissector,
1dbd0d37	184	FLOW_DISSECTOR_KEY_CONTROL,
e3a2b7ed AV	185	f->key);
	186	addr_type = key->addr_type;
	187	}
	188
	189	if (dissector_uses_key(f->dissector, FLOW_DISSECTOR_KEY_BASIC)) {
	190	struct flow_dissector_key_basic *key =
	191	skb_flow_dissector_target(f->dissector,
	192	FLOW_DISSECTOR_KEY_BASIC,
	193	f->key);
	194	struct flow_dissector_key_basic *mask =
	195	skb_flow_dissector_target(f->dissector,
	196	FLOW_DISSECTOR_KEY_BASIC,
	197	f->mask);
	198	ip_proto = key->ip_proto;
	199
	200	MLX5_SET(fte_match_set_lyr_2_4, headers_c, ethertype,
	201	ntohs(mask->n_proto));
	202	MLX5_SET(fte_match_set_lyr_2_4, headers_v, ethertype,
	203	ntohs(key->n_proto));
	204
	205	MLX5_SET(fte_match_set_lyr_2_4, headers_c, ip_protocol,
	206	mask->ip_proto);
	207	MLX5_SET(fte_match_set_lyr_2_4, headers_v, ip_protocol,
	208	key->ip_proto);
	209	}
	210
	211	if (dissector_uses_key(f->dissector, FLOW_DISSECTOR_KEY_ETH_ADDRS)) {
	212	struct flow_dissector_key_eth_addrs *key =
	213	skb_flow_dissector_target(f->dissector,
	214	FLOW_DISSECTOR_KEY_ETH_ADDRS,
	215	f->key);
	216	struct flow_dissector_key_eth_addrs *mask =
	217	skb_flow_dissector_target(f->dissector,
	218	FLOW_DISSECTOR_KEY_ETH_ADDRS,
	219	f->mask);
	220
	221	ether_addr_copy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_c,
	222	dmac_47_16),
	223	mask->dst);
	224	ether_addr_copy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
	225	dmac_47_16),
	226	key->dst);
	227
	228	ether_addr_copy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_c,
	229	smac_47_16),
	230	mask->src);
	231	ether_addr_copy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
	232	smac_47_16),
	233	key->src);
	234	}
	235
095b6cfd OG	236	if (dissector_uses_key(f->dissector, FLOW_DISSECTOR_KEY_VLAN)) {
	237	struct flow_dissector_key_vlan *key =
	238	skb_flow_dissector_target(f->dissector,
	239	FLOW_DISSECTOR_KEY_VLAN,
	240	f->key);
	241	struct flow_dissector_key_vlan *mask =
	242	skb_flow_dissector_target(f->dissector,
	243	FLOW_DISSECTOR_KEY_VLAN,
	244	f->mask);
	245	if (mask->vlan_id) {
	246	MLX5_SET(fte_match_set_lyr_2_4, headers_c, vlan_tag, 1);
	247	MLX5_SET(fte_match_set_lyr_2_4, headers_v, vlan_tag, 1);
	248
	249	MLX5_SET(fte_match_set_lyr_2_4, headers_c, first_vid, mask->vlan_id);
	250	MLX5_SET(fte_match_set_lyr_2_4, headers_v, first_vid, key->vlan_id);
	251	}
	252	}
	253
e3a2b7ed AV	254	if (addr_type == FLOW_DISSECTOR_KEY_IPV4_ADDRS) {
	255	struct flow_dissector_key_ipv4_addrs *key =
	256	skb_flow_dissector_target(f->dissector,
	257	FLOW_DISSECTOR_KEY_IPV4_ADDRS,
	258	f->key);
	259	struct flow_dissector_key_ipv4_addrs *mask =
	260	skb_flow_dissector_target(f->dissector,
	261	FLOW_DISSECTOR_KEY_IPV4_ADDRS,
	262	f->mask);
	263
	264	memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_c,
	265	src_ipv4_src_ipv6.ipv4_layout.ipv4),
	266	&mask->src, sizeof(mask->src));
	267	memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
	268	src_ipv4_src_ipv6.ipv4_layout.ipv4),
	269	&key->src, sizeof(key->src));
	270	memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_c,
	271	dst_ipv4_dst_ipv6.ipv4_layout.ipv4),
	272	&mask->dst, sizeof(mask->dst));
	273	memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
	274	dst_ipv4_dst_ipv6.ipv4_layout.ipv4),
	275	&key->dst, sizeof(key->dst));
	276	}
	277
	278	if (addr_type == FLOW_DISSECTOR_KEY_IPV6_ADDRS) {
	279	struct flow_dissector_key_ipv6_addrs *key =
	280	skb_flow_dissector_target(f->dissector,
	281	FLOW_DISSECTOR_KEY_IPV6_ADDRS,
	282	f->key);
	283	struct flow_dissector_key_ipv6_addrs *mask =
	284	skb_flow_dissector_target(f->dissector,
	285	FLOW_DISSECTOR_KEY_IPV6_ADDRS,
	286	f->mask);
	287
	288	memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_c,
	289	src_ipv4_src_ipv6.ipv6_layout.ipv6),
	290	&mask->src, sizeof(mask->src));
	291	memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
	292	src_ipv4_src_ipv6.ipv6_layout.ipv6),
	293	&key->src, sizeof(key->src));
	294
	295	memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_c,
	296	dst_ipv4_dst_ipv6.ipv6_layout.ipv6),
	297	&mask->dst, sizeof(mask->dst));
	298	memcpy(MLX5_ADDR_OF(fte_match_set_lyr_2_4, headers_v,
	299	dst_ipv4_dst_ipv6.ipv6_layout.ipv6),
	300	&key->dst, sizeof(key->dst));
	301	}
	302
	303	if (dissector_uses_key(f->dissector, FLOW_DISSECTOR_KEY_PORTS)) {
	304	struct flow_dissector_key_ports *key =
	305	skb_flow_dissector_target(f->dissector,
	306	FLOW_DISSECTOR_KEY_PORTS,
	307	f->key);
	308	struct flow_dissector_key_ports *mask =
	309	skb_flow_dissector_target(f->dissector,
	310	FLOW_DISSECTOR_KEY_PORTS,
	311	f->mask);
	312	switch (ip_proto) {
	313	case IPPROTO_TCP:
	314	MLX5_SET(fte_match_set_lyr_2_4, headers_c,
	315	tcp_sport, ntohs(mask->src));
	316	MLX5_SET(fte_match_set_lyr_2_4, headers_v,
	317	tcp_sport, ntohs(key->src));
318
319	MLX5_SET(fte_match_set_lyr_2_4, headers_c,
320	tcp_dport, ntohs(mask->dst));
321	MLX5_SET(fte_match_set_lyr_2_4, headers_v,
322	tcp_dport, ntohs(key->dst));
323	break;
324
325	case IPPROTO_UDP:
326	MLX5_SET(fte_match_set_lyr_2_4, headers_c,
327	udp_sport, ntohs(mask->src));
328	MLX5_SET(fte_match_set_lyr_2_4, headers_v,
329	udp_sport, ntohs(key->src));
330
331	MLX5_SET(fte_match_set_lyr_2_4, headers_c,
332	udp_dport, ntohs(mask->dst));
333	MLX5_SET(fte_match_set_lyr_2_4, headers_v,
334	udp_dport, ntohs(key->dst));
335	break;
336	default:
337	netdev_err(priv->netdev,
338	"Only UDP and TCP transport are supported\n");
339	return -EINVAL;
340	}
341	}
342
343	return 0;
344	}
345
5c40348c OG	346	static int parse_tc_nic_actions(struct mlx5e_priv priv, struct tcf_exts exts,
5c40348c OG	347	u32 action, u32 flow_tag)
e3a2b7ed AV	348	{
e3a2b7ed AV	349	const struct tc_action *a;
22dc13c8	350	LIST_HEAD(actions);
e3a2b7ed AV	351
	352	if (tc_no_actions(exts))
	353	return -EINVAL;
	354
	355	*flow_tag = MLX5_FS_DEFAULT_FLOW_TAG;
	356	*action = 0;
	357
22dc13c8 WC	358	tcf_exts_to_list(exts, &actions);
22dc13c8 WC	359	list_for_each_entry(a, &actions, list) {
e3a2b7ed AV	360	/* Only support a single action per rule */
	361	if (*action)
	362	return -EINVAL;
	363
	364	if (is_tcf_gact_shot(a)) {
	365	*action \|= MLX5_FLOW_CONTEXT_ACTION_DROP;
aad7e08d AV	366	if (MLX5_CAP_FLOWTABLE(priv->mdev,
	367	flow_table_properties_nic_receive.flow_counter))
	368	*action \|= MLX5_FLOW_CONTEXT_ACTION_COUNT;
e3a2b7ed AV	369	continue;
	370	}
	371
	372	if (is_tcf_skbedit_mark(a)) {
	373	u32 mark = tcf_skbedit_mark(a);
	374
	375	if (mark & ~MLX5E_TC_FLOW_ID_MASK) {
	376	netdev_warn(priv->netdev, "Bad flow mark - only 16 bit is supported: 0x%x\n",
	377	mark);
	378	return -EINVAL;
	379	}
	380
	381	*flow_tag = mark;
	382	*action \|= MLX5_FLOW_CONTEXT_ACTION_FWD_DEST;
	383	continue;
	384	}
	385
	386	return -EINVAL;
	387	}
	388
	389	return 0;
	390	}
	391
03a9d11e	392	static int parse_tc_fdb_actions(struct mlx5e_priv priv, struct tcf_exts exts,
776b12b6	393	struct mlx5_esw_flow_attr *attr)
03a9d11e OG	394	{
03a9d11e OG	395	const struct tc_action *a;
22dc13c8	396	LIST_HEAD(actions);
03a9d11e OG	397
	398	if (tc_no_actions(exts))
	399	return -EINVAL;
	400
776b12b6 OG	401	memset(attr, 0, sizeof(*attr));
776b12b6 OG	402	attr->in_rep = priv->ppriv;
03a9d11e	403
22dc13c8 WC	404	tcf_exts_to_list(exts, &actions);
22dc13c8 WC	405	list_for_each_entry(a, &actions, list) {
03a9d11e	406	if (is_tcf_gact_shot(a)) {
8b32580d OG	407	attr->action \|= MLX5_FLOW_CONTEXT_ACTION_DROP \|
8b32580d OG	408	MLX5_FLOW_CONTEXT_ACTION_COUNT;
03a9d11e OG	409	continue;
	410	}
	411
5724b8b5	412	if (is_tcf_mirred_egress_redirect(a)) {
03a9d11e OG	413	int ifindex = tcf_mirred_ifindex(a);
	414	struct net_device *out_dev;
	415	struct mlx5e_priv *out_priv;
03a9d11e OG	416
	417	out_dev = __dev_get_by_index(dev_net(priv->netdev), ifindex);
	418
	419	if (!switchdev_port_same_parent_id(priv->netdev, out_dev)) {
	420	pr_err("devices %s %s not on same switch HW, can't offload forwarding\n",
	421	priv->netdev->name, out_dev->name);
	422	return -EINVAL;
	423	}
	424
e37a79e5 MB	425	attr->action \|= MLX5_FLOW_CONTEXT_ACTION_FWD_DEST \|
e37a79e5 MB	426	MLX5_FLOW_CONTEXT_ACTION_COUNT;
03a9d11e	427	out_priv = netdev_priv(out_dev);
776b12b6	428	attr->out_rep = out_priv->ppriv;
03a9d11e OG	429	continue;
	430	}
	431
8b32580d OG	432	if (is_tcf_vlan(a)) {
	433	if (tcf_vlan_action(a) == VLAN_F_POP) {
	434	attr->action \|= MLX5_FLOW_CONTEXT_ACTION_VLAN_POP;
	435	} else if (tcf_vlan_action(a) == VLAN_F_PUSH) {
	436	if (tcf_vlan_push_proto(a) != htons(ETH_P_8021Q))
	437	return -EOPNOTSUPP;
	438
	439	attr->action \|= MLX5_FLOW_CONTEXT_ACTION_VLAN_PUSH;
	440	attr->vlan = tcf_vlan_push_vid(a);
	441	}
	442	continue;
	443	}
	444
03a9d11e OG	445	return -EINVAL;
	446	}
	447	return 0;
	448	}
	449
e3a2b7ed AV	450	int mlx5e_configure_flower(struct mlx5e_priv *priv, __be16 protocol,
	451	struct tc_cls_flower_offload *f)
	452	{
acff797c	453	struct mlx5e_tc_table *tc = &priv->fs.tc;
e3a2b7ed	454	int err = 0;
776b12b6 OG	455	bool fdb_flow = false;
776b12b6 OG	456	u32 flow_tag, action;
e3a2b7ed	457	struct mlx5e_tc_flow *flow;
c5bb1730	458	struct mlx5_flow_spec *spec;
74491de9	459	struct mlx5_flow_handle *old = NULL;
d0debb76	460	struct mlx5_esw_flow_attr *old_attr = NULL;
adb4c123	461	struct mlx5_eswitch *esw = priv->mdev->priv.eswitch;
e3a2b7ed	462
776b12b6 OG	463	if (esw && esw->mode == SRIOV_OFFLOADS)
	464	fdb_flow = true;
	465
e3a2b7ed AV	466	flow = rhashtable_lookup_fast(&tc->ht, &f->cookie,
e3a2b7ed AV	467	tc->ht_params);
776b12b6	468	if (flow) {
e3a2b7ed	469	old = flow->rule;
8b32580d	470	old_attr = flow->attr;
776b12b6 OG	471	} else {
	472	if (fdb_flow)
	473	flow = kzalloc(sizeof(*flow) + sizeof(struct mlx5_esw_flow_attr),
	474	GFP_KERNEL);
	475	else
	476	flow = kzalloc(sizeof(*flow), GFP_KERNEL);
	477	}
e3a2b7ed	478
c5bb1730 MG	479	spec = mlx5_vzalloc(sizeof(*spec));
c5bb1730 MG	480	if (!spec \|\| !flow) {
e3a2b7ed AV	481	err = -ENOMEM;
	482	goto err_free;
	483	}
	484
	485	flow->cookie = f->cookie;
	486
c5bb1730	487	err = parse_cls_flower(priv, spec, f);
e3a2b7ed AV	488	if (err < 0)
	489	goto err_free;
	490
776b12b6 OG	491	if (fdb_flow) {
	492	flow->attr = (struct mlx5_esw_flow_attr *)(flow + 1);
	493	err = parse_tc_fdb_actions(priv, f->exts, flow->attr);
adb4c123 OG	494	if (err < 0)
adb4c123 OG	495	goto err_free;
776b12b6	496	flow->rule = mlx5e_tc_add_fdb_flow(priv, spec, flow->attr);
adb4c123 OG	497	} else {
	498	err = parse_tc_nic_actions(priv, f->exts, &action, &flow_tag);
	499	if (err < 0)
	500	goto err_free;
	501	flow->rule = mlx5e_tc_add_nic_flow(priv, spec, action, flow_tag);
	502	}
e3a2b7ed	503
e3a2b7ed AV	504	if (IS_ERR(flow->rule)) {
e3a2b7ed AV	505	err = PTR_ERR(flow->rule);
5c40348c	506	goto err_free;
e3a2b7ed AV	507	}
e3a2b7ed AV	508
5c40348c OG	509	err = rhashtable_insert_fast(&tc->ht, &flow->node,
	510	tc->ht_params);
	511	if (err)
	512	goto err_del_rule;
	513
e3a2b7ed	514	if (old)
8b32580d	515	mlx5e_tc_del_flow(priv, old, old_attr);
e3a2b7ed AV	516
	517	goto out;
	518
5c40348c	519	err_del_rule:
74491de9	520	mlx5_del_flow_rules(flow->rule);
e3a2b7ed AV	521
	522	err_free:
	523	if (!old)
	524	kfree(flow);
	525	out:
c5bb1730	526	kvfree(spec);
e3a2b7ed AV	527	return err;
	528	}
	529
	530	int mlx5e_delete_flower(struct mlx5e_priv *priv,
	531	struct tc_cls_flower_offload *f)
	532	{
	533	struct mlx5e_tc_flow *flow;
acff797c	534	struct mlx5e_tc_table *tc = &priv->fs.tc;
e3a2b7ed AV	535
	536	flow = rhashtable_lookup_fast(&tc->ht, &f->cookie,
	537	tc->ht_params);
	538	if (!flow)
	539	return -EINVAL;
	540
	541	rhashtable_remove_fast(&tc->ht, &flow->node, tc->ht_params);
	542
8b32580d	543	mlx5e_tc_del_flow(priv, flow->rule, flow->attr);
e3a2b7ed AV	544
	545	kfree(flow);
	546
	547	return 0;
	548	}
	549
aad7e08d AV	550	int mlx5e_stats_flower(struct mlx5e_priv *priv,
	551	struct tc_cls_flower_offload *f)
	552	{
	553	struct mlx5e_tc_table *tc = &priv->fs.tc;
	554	struct mlx5e_tc_flow *flow;
	555	struct tc_action *a;
	556	struct mlx5_fc *counter;
22dc13c8	557	LIST_HEAD(actions);
aad7e08d AV	558	u64 bytes;
	559	u64 packets;
	560	u64 lastuse;
	561
	562	flow = rhashtable_lookup_fast(&tc->ht, &f->cookie,
	563	tc->ht_params);
	564	if (!flow)
	565	return -EINVAL;
	566
	567	counter = mlx5_flow_rule_counter(flow->rule);
	568	if (!counter)
	569	return 0;
	570
	571	mlx5_fc_query_cached(counter, &bytes, &packets, &lastuse);
	572
22dc13c8 WC	573	tcf_exts_to_list(f->exts, &actions);
22dc13c8 WC	574	list_for_each_entry(a, &actions, list)
aad7e08d AV	575	tcf_action_stats_update(a, bytes, packets, lastuse);
	576
	577	return 0;
	578	}
	579
e8f887ac AV	580	static const struct rhashtable_params mlx5e_tc_flow_ht_params = {
	581	.head_offset = offsetof(struct mlx5e_tc_flow, node),
	582	.key_offset = offsetof(struct mlx5e_tc_flow, cookie),
	583	.key_len = sizeof(((struct mlx5e_tc_flow *)0)->cookie),
	584	.automatic_shrinking = true,
	585	};
	586
	587	int mlx5e_tc_init(struct mlx5e_priv *priv)
	588	{
acff797c	589	struct mlx5e_tc_table *tc = &priv->fs.tc;
e8f887ac AV	590
	591	tc->ht_params = mlx5e_tc_flow_ht_params;
	592	return rhashtable_init(&tc->ht, &tc->ht_params);
	593	}
	594
	595	static void _mlx5e_tc_del_flow(void ptr, void arg)
	596	{
	597	struct mlx5e_tc_flow *flow = ptr;
	598	struct mlx5e_priv *priv = arg;
	599
8b32580d	600	mlx5e_tc_del_flow(priv, flow->rule, flow->attr);
e8f887ac AV	601	kfree(flow);
	602	}
	603
	604	void mlx5e_tc_cleanup(struct mlx5e_priv *priv)
	605	{
acff797c	606	struct mlx5e_tc_table *tc = &priv->fs.tc;
e8f887ac AV	607
	608	rhashtable_free_and_destroy(&tc->ht, _mlx5e_tc_del_flow, priv);
	609
acff797c MG	610	if (!IS_ERR_OR_NULL(tc->t)) {
	611	mlx5_destroy_flow_table(tc->t);
	612	tc->t = NULL;
e8f887ac AV	613	}
e8f887ac AV	614	}