On Tue, Sep 02, 2025 at 06:26:51PM +0100, Anatoly Burakov wrote:
> From: Marcin Szycik <marcin.szy...@intel.com>
>
> Currently it is possible to create a rule which might break Tx traffic,
> because by default all switch rules apply to both Rx and Tx traffic. In
> order to avoid situations where Tx traffic accidentally matches Rx rule,
> always add direction metadata to all switch rules.
>
> However, because we're adding a new piece of metadata to all rules, some
> rules might get too big and be rejected because they were already maxing
> out rule capacity. To avoid that, we will only add direction metadata to
> rules that are big enough to store it, on the assumption that if a rule
> is already big enough to max out the capacity, the rule is therefore so
> hyper-specific that it is highly unlikely to match both Rx and Tx
> traffic, and so the direction is implied by the fact that the rule is so
> specific.
>
> Signed-off-by: Marcin Szycik <marcin.szy...@intel.com>
> Signed-off-by: Anatoly Burakov <anatoly.bura...@intel.com>
> ---
> drivers/net/intel/ice/base/ice_protocol_type.h | 1 +
> drivers/net/intel/ice/base/ice_switch.c | 14 ++++++++++++++
> 2 files changed, 15 insertions(+)
>
Acked-by: Bruce Richardson <bruce.richard...@intel.com>
