diff options
| author |   Mohamad Haj Yahia <mohamad@mellanox.com> | 2016-05-03 17:13:57 +0300 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2016-05-04 14:04:47 -0400 |
| commit | 5742df0f7dbe54728145bf1136540c09c7fcb0d1 (patch) | |
| tree | e84e59b2021231a73122c58c5f0a4728799d0dcf /tools/perf/scripts/python/call-graph-from-postgresql.py | |
| parent | net/mlx5: E-Switch, Fix error flow memory leak (diff) | |
| download | linux-dev-5742df0f7dbe54728145bf1136540c09c7fcb0d1.tar.xz linux-dev-5742df0f7dbe54728145bf1136540c09c7fcb0d1.zip | |
net/mlx5: E-Switch, Introduce VST vport ingress/egress ACLs
Create egress/ingress ACLs per VF vport at vport enable.
Ingress ACL:
- one flow group to drop all tagged traffic in VST mode.
Egress ACL:
- one flow group that allows only untagged traffic with
smac that is equals to the original mac (anti-spoofing).
- one flow group that allows only untagged traffic.
- one flow group that allows only smac that is equals
to the original mac (anti-spoofing).
(note: only one of the above group has active rule)
- star rule will be used to drop all other traffic.
By default no rules are generated, unless VST is explicitly requested.
Signed-off-by: Mohamad Haj Yahia <mohamad@mellanox.com>
Signed-off-by: Saeed Mahameed <saeedm@mellanox.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to '')
0 files changed, 0 insertions, 0 deletions