1 // SPDX-License-Identifier: BSD-3-Clause OR GPL-2.0
2 /* Copyright (c) 2017-2018 Mellanox Technologies. All rights reserved */
4 #include <linux/kernel.h>
5 #include <linux/slab.h>
6 #include <linux/errno.h>
7 #include <linux/list.h>
8 #include <linux/string.h>
9 #include <linux/rhashtable.h>
10 #include <linux/netdevice.h>
11 #include <net/net_namespace.h>
12 #include <net/tc_act/tc_vlan.h>
16 #include "resources.h"
18 #include "core_acl_flex_keys.h"
19 #include "core_acl_flex_actions.h"
20 #include "spectrum_acl_tcam.h"
23 struct mlxsw_sp *mlxsw_sp;
24 struct mlxsw_afk *afk;
25 struct mlxsw_sp_fid *dummy_fid;
26 struct rhashtable ruleset_ht;
27 struct list_head rules;
29 struct delayed_work dw;
30 unsigned long interval; /* ms */
31 #define MLXSW_SP_ACL_RULE_ACTIVITY_UPDATE_PERIOD_MS 1000
32 } rule_activity_update;
33 struct mlxsw_sp_acl_tcam tcam;
36 struct mlxsw_afk *mlxsw_sp_acl_afk(struct mlxsw_sp_acl *acl)
41 struct mlxsw_sp_acl_block_binding {
42 struct list_head list;
43 struct net_device *dev;
44 struct mlxsw_sp_port *mlxsw_sp_port;
48 struct mlxsw_sp_acl_block {
49 struct list_head binding_list;
50 struct mlxsw_sp_acl_ruleset *ruleset_zero;
51 struct mlxsw_sp *mlxsw_sp;
52 unsigned int rule_count;
53 unsigned int disable_count;
56 struct mlxsw_sp_acl_ruleset_ht_key {
57 struct mlxsw_sp_acl_block *block;
59 const struct mlxsw_sp_acl_profile_ops *ops;
62 struct mlxsw_sp_acl_ruleset {
63 struct rhash_head ht_node; /* Member of acl HT */
64 struct mlxsw_sp_acl_ruleset_ht_key ht_key;
65 struct rhashtable rule_ht;
66 unsigned int ref_count;
67 unsigned long priv[0];
68 /* priv has to be always the last item */
71 struct mlxsw_sp_acl_rule {
72 struct rhash_head ht_node; /* Member of rule HT */
73 struct list_head list;
74 unsigned long cookie; /* HT key */
75 struct mlxsw_sp_acl_ruleset *ruleset;
76 struct mlxsw_sp_acl_rule_info *rulei;
80 unsigned long priv[0];
81 /* priv has to be always the last item */
84 static const struct rhashtable_params mlxsw_sp_acl_ruleset_ht_params = {
85 .key_len = sizeof(struct mlxsw_sp_acl_ruleset_ht_key),
86 .key_offset = offsetof(struct mlxsw_sp_acl_ruleset, ht_key),
87 .head_offset = offsetof(struct mlxsw_sp_acl_ruleset, ht_node),
88 .automatic_shrinking = true,
91 static const struct rhashtable_params mlxsw_sp_acl_rule_ht_params = {
92 .key_len = sizeof(unsigned long),
93 .key_offset = offsetof(struct mlxsw_sp_acl_rule, cookie),
94 .head_offset = offsetof(struct mlxsw_sp_acl_rule, ht_node),
95 .automatic_shrinking = true,
98 struct mlxsw_sp_fid *mlxsw_sp_acl_dummy_fid(struct mlxsw_sp *mlxsw_sp)
100 return mlxsw_sp->acl->dummy_fid;
103 struct mlxsw_sp *mlxsw_sp_acl_block_mlxsw_sp(struct mlxsw_sp_acl_block *block)
105 return block->mlxsw_sp;
108 unsigned int mlxsw_sp_acl_block_rule_count(struct mlxsw_sp_acl_block *block)
110 return block ? block->rule_count : 0;
113 void mlxsw_sp_acl_block_disable_inc(struct mlxsw_sp_acl_block *block)
116 block->disable_count++;
119 void mlxsw_sp_acl_block_disable_dec(struct mlxsw_sp_acl_block *block)
122 block->disable_count--;
125 bool mlxsw_sp_acl_block_disabled(struct mlxsw_sp_acl_block *block)
127 return block->disable_count;
130 bool mlxsw_sp_acl_block_is_egress_bound(struct mlxsw_sp_acl_block *block)
132 struct mlxsw_sp_acl_block_binding *binding;
134 list_for_each_entry(binding, &block->binding_list, list) {
135 if (!binding->ingress)
142 mlxsw_sp_acl_ruleset_is_singular(const struct mlxsw_sp_acl_ruleset *ruleset)
144 /* We hold a reference on ruleset ourselves */
145 return ruleset->ref_count == 2;
149 mlxsw_sp_acl_ruleset_bind(struct mlxsw_sp *mlxsw_sp,
150 struct mlxsw_sp_acl_block *block,
151 struct mlxsw_sp_acl_block_binding *binding)
153 struct mlxsw_sp_acl_ruleset *ruleset = block->ruleset_zero;
154 const struct mlxsw_sp_acl_profile_ops *ops = ruleset->ht_key.ops;
156 return ops->ruleset_bind(mlxsw_sp, ruleset->priv,
157 binding->mlxsw_sp_port, binding->ingress);
161 mlxsw_sp_acl_ruleset_unbind(struct mlxsw_sp *mlxsw_sp,
162 struct mlxsw_sp_acl_block *block,
163 struct mlxsw_sp_acl_block_binding *binding)
165 struct mlxsw_sp_acl_ruleset *ruleset = block->ruleset_zero;
166 const struct mlxsw_sp_acl_profile_ops *ops = ruleset->ht_key.ops;
168 ops->ruleset_unbind(mlxsw_sp, ruleset->priv,
169 binding->mlxsw_sp_port, binding->ingress);
172 static bool mlxsw_sp_acl_ruleset_block_bound(struct mlxsw_sp_acl_block *block)
174 return block->ruleset_zero;
178 mlxsw_sp_acl_ruleset_block_bind(struct mlxsw_sp *mlxsw_sp,
179 struct mlxsw_sp_acl_ruleset *ruleset,
180 struct mlxsw_sp_acl_block *block)
182 struct mlxsw_sp_acl_block_binding *binding;
185 block->ruleset_zero = ruleset;
186 list_for_each_entry(binding, &block->binding_list, list) {
187 err = mlxsw_sp_acl_ruleset_bind(mlxsw_sp, block, binding);
194 list_for_each_entry_continue_reverse(binding, &block->binding_list,
196 mlxsw_sp_acl_ruleset_unbind(mlxsw_sp, block, binding);
197 block->ruleset_zero = NULL;
203 mlxsw_sp_acl_ruleset_block_unbind(struct mlxsw_sp *mlxsw_sp,
204 struct mlxsw_sp_acl_ruleset *ruleset,
205 struct mlxsw_sp_acl_block *block)
207 struct mlxsw_sp_acl_block_binding *binding;
209 list_for_each_entry(binding, &block->binding_list, list)
210 mlxsw_sp_acl_ruleset_unbind(mlxsw_sp, block, binding);
211 block->ruleset_zero = NULL;
214 struct mlxsw_sp_acl_block *mlxsw_sp_acl_block_create(struct mlxsw_sp *mlxsw_sp,
217 struct mlxsw_sp_acl_block *block;
219 block = kzalloc(sizeof(*block), GFP_KERNEL);
222 INIT_LIST_HEAD(&block->binding_list);
223 block->mlxsw_sp = mlxsw_sp;
227 void mlxsw_sp_acl_block_destroy(struct mlxsw_sp_acl_block *block)
229 WARN_ON(!list_empty(&block->binding_list));
233 static struct mlxsw_sp_acl_block_binding *
234 mlxsw_sp_acl_block_lookup(struct mlxsw_sp_acl_block *block,
235 struct mlxsw_sp_port *mlxsw_sp_port, bool ingress)
237 struct mlxsw_sp_acl_block_binding *binding;
239 list_for_each_entry(binding, &block->binding_list, list)
240 if (binding->mlxsw_sp_port == mlxsw_sp_port &&
241 binding->ingress == ingress)
246 int mlxsw_sp_acl_block_bind(struct mlxsw_sp *mlxsw_sp,
247 struct mlxsw_sp_acl_block *block,
248 struct mlxsw_sp_port *mlxsw_sp_port,
251 struct mlxsw_sp_acl_block_binding *binding;
254 if (WARN_ON(mlxsw_sp_acl_block_lookup(block, mlxsw_sp_port, ingress)))
257 binding = kzalloc(sizeof(*binding), GFP_KERNEL);
260 binding->mlxsw_sp_port = mlxsw_sp_port;
261 binding->ingress = ingress;
263 if (mlxsw_sp_acl_ruleset_block_bound(block)) {
264 err = mlxsw_sp_acl_ruleset_bind(mlxsw_sp, block, binding);
266 goto err_ruleset_bind;
269 list_add(&binding->list, &block->binding_list);
277 int mlxsw_sp_acl_block_unbind(struct mlxsw_sp *mlxsw_sp,
278 struct mlxsw_sp_acl_block *block,
279 struct mlxsw_sp_port *mlxsw_sp_port,
282 struct mlxsw_sp_acl_block_binding *binding;
284 binding = mlxsw_sp_acl_block_lookup(block, mlxsw_sp_port, ingress);
288 list_del(&binding->list);
290 if (mlxsw_sp_acl_ruleset_block_bound(block))
291 mlxsw_sp_acl_ruleset_unbind(mlxsw_sp, block, binding);
297 static struct mlxsw_sp_acl_ruleset *
298 mlxsw_sp_acl_ruleset_create(struct mlxsw_sp *mlxsw_sp,
299 struct mlxsw_sp_acl_block *block, u32 chain_index,
300 const struct mlxsw_sp_acl_profile_ops *ops,
301 struct mlxsw_afk_element_usage *tmplt_elusage)
303 struct mlxsw_sp_acl *acl = mlxsw_sp->acl;
304 struct mlxsw_sp_acl_ruleset *ruleset;
308 alloc_size = sizeof(*ruleset) + ops->ruleset_priv_size;
309 ruleset = kzalloc(alloc_size, GFP_KERNEL);
311 return ERR_PTR(-ENOMEM);
312 ruleset->ref_count = 1;
313 ruleset->ht_key.block = block;
314 ruleset->ht_key.chain_index = chain_index;
315 ruleset->ht_key.ops = ops;
317 err = rhashtable_init(&ruleset->rule_ht, &mlxsw_sp_acl_rule_ht_params);
319 goto err_rhashtable_init;
321 err = ops->ruleset_add(mlxsw_sp, &acl->tcam, ruleset->priv,
324 goto err_ops_ruleset_add;
326 err = rhashtable_insert_fast(&acl->ruleset_ht, &ruleset->ht_node,
327 mlxsw_sp_acl_ruleset_ht_params);
334 ops->ruleset_del(mlxsw_sp, ruleset->priv);
336 rhashtable_destroy(&ruleset->rule_ht);
342 static void mlxsw_sp_acl_ruleset_destroy(struct mlxsw_sp *mlxsw_sp,
343 struct mlxsw_sp_acl_ruleset *ruleset)
345 const struct mlxsw_sp_acl_profile_ops *ops = ruleset->ht_key.ops;
346 struct mlxsw_sp_acl *acl = mlxsw_sp->acl;
348 rhashtable_remove_fast(&acl->ruleset_ht, &ruleset->ht_node,
349 mlxsw_sp_acl_ruleset_ht_params);
350 ops->ruleset_del(mlxsw_sp, ruleset->priv);
351 rhashtable_destroy(&ruleset->rule_ht);
355 static void mlxsw_sp_acl_ruleset_ref_inc(struct mlxsw_sp_acl_ruleset *ruleset)
357 ruleset->ref_count++;
360 static void mlxsw_sp_acl_ruleset_ref_dec(struct mlxsw_sp *mlxsw_sp,
361 struct mlxsw_sp_acl_ruleset *ruleset)
363 if (--ruleset->ref_count)
365 mlxsw_sp_acl_ruleset_destroy(mlxsw_sp, ruleset);
368 static struct mlxsw_sp_acl_ruleset *
369 __mlxsw_sp_acl_ruleset_lookup(struct mlxsw_sp_acl *acl,
370 struct mlxsw_sp_acl_block *block, u32 chain_index,
371 const struct mlxsw_sp_acl_profile_ops *ops)
373 struct mlxsw_sp_acl_ruleset_ht_key ht_key;
375 memset(&ht_key, 0, sizeof(ht_key));
376 ht_key.block = block;
377 ht_key.chain_index = chain_index;
379 return rhashtable_lookup_fast(&acl->ruleset_ht, &ht_key,
380 mlxsw_sp_acl_ruleset_ht_params);
383 struct mlxsw_sp_acl_ruleset *
384 mlxsw_sp_acl_ruleset_lookup(struct mlxsw_sp *mlxsw_sp,
385 struct mlxsw_sp_acl_block *block, u32 chain_index,
386 enum mlxsw_sp_acl_profile profile)
388 const struct mlxsw_sp_acl_profile_ops *ops;
389 struct mlxsw_sp_acl *acl = mlxsw_sp->acl;
390 struct mlxsw_sp_acl_ruleset *ruleset;
392 ops = mlxsw_sp_acl_tcam_profile_ops(mlxsw_sp, profile);
394 return ERR_PTR(-EINVAL);
395 ruleset = __mlxsw_sp_acl_ruleset_lookup(acl, block, chain_index, ops);
397 return ERR_PTR(-ENOENT);
401 struct mlxsw_sp_acl_ruleset *
402 mlxsw_sp_acl_ruleset_get(struct mlxsw_sp *mlxsw_sp,
403 struct mlxsw_sp_acl_block *block, u32 chain_index,
404 enum mlxsw_sp_acl_profile profile,
405 struct mlxsw_afk_element_usage *tmplt_elusage)
407 const struct mlxsw_sp_acl_profile_ops *ops;
408 struct mlxsw_sp_acl *acl = mlxsw_sp->acl;
409 struct mlxsw_sp_acl_ruleset *ruleset;
411 ops = mlxsw_sp_acl_tcam_profile_ops(mlxsw_sp, profile);
413 return ERR_PTR(-EINVAL);
415 ruleset = __mlxsw_sp_acl_ruleset_lookup(acl, block, chain_index, ops);
417 mlxsw_sp_acl_ruleset_ref_inc(ruleset);
420 return mlxsw_sp_acl_ruleset_create(mlxsw_sp, block, chain_index, ops,
424 void mlxsw_sp_acl_ruleset_put(struct mlxsw_sp *mlxsw_sp,
425 struct mlxsw_sp_acl_ruleset *ruleset)
427 mlxsw_sp_acl_ruleset_ref_dec(mlxsw_sp, ruleset);
430 u16 mlxsw_sp_acl_ruleset_group_id(struct mlxsw_sp_acl_ruleset *ruleset)
432 const struct mlxsw_sp_acl_profile_ops *ops = ruleset->ht_key.ops;
434 return ops->ruleset_group_id(ruleset->priv);
437 struct mlxsw_sp_acl_rule_info *
438 mlxsw_sp_acl_rulei_create(struct mlxsw_sp_acl *acl,
439 struct mlxsw_afa_block *afa_block)
441 struct mlxsw_sp_acl_rule_info *rulei;
444 rulei = kzalloc(sizeof(*rulei), GFP_KERNEL);
449 rulei->act_block = afa_block;
453 rulei->act_block = mlxsw_afa_block_create(acl->mlxsw_sp->afa);
454 if (IS_ERR(rulei->act_block)) {
455 err = PTR_ERR(rulei->act_block);
456 goto err_afa_block_create;
458 rulei->action_created = 1;
461 err_afa_block_create:
466 void mlxsw_sp_acl_rulei_destroy(struct mlxsw_sp_acl_rule_info *rulei)
468 if (rulei->action_created)
469 mlxsw_afa_block_destroy(rulei->act_block);
473 int mlxsw_sp_acl_rulei_commit(struct mlxsw_sp_acl_rule_info *rulei)
475 return mlxsw_afa_block_commit(rulei->act_block);
478 void mlxsw_sp_acl_rulei_priority(struct mlxsw_sp_acl_rule_info *rulei,
479 unsigned int priority)
481 rulei->priority = priority >> 16;
484 void mlxsw_sp_acl_rulei_keymask_u32(struct mlxsw_sp_acl_rule_info *rulei,
485 enum mlxsw_afk_element element,
486 u32 key_value, u32 mask_value)
488 mlxsw_afk_values_add_u32(&rulei->values, element,
489 key_value, mask_value);
492 void mlxsw_sp_acl_rulei_keymask_buf(struct mlxsw_sp_acl_rule_info *rulei,
493 enum mlxsw_afk_element element,
494 const char *key_value,
495 const char *mask_value, unsigned int len)
497 mlxsw_afk_values_add_buf(&rulei->values, element,
498 key_value, mask_value, len);
501 int mlxsw_sp_acl_rulei_act_continue(struct mlxsw_sp_acl_rule_info *rulei)
503 return mlxsw_afa_block_continue(rulei->act_block);
506 int mlxsw_sp_acl_rulei_act_jump(struct mlxsw_sp_acl_rule_info *rulei,
509 return mlxsw_afa_block_jump(rulei->act_block, group_id);
512 int mlxsw_sp_acl_rulei_act_terminate(struct mlxsw_sp_acl_rule_info *rulei)
514 return mlxsw_afa_block_terminate(rulei->act_block);
517 int mlxsw_sp_acl_rulei_act_drop(struct mlxsw_sp_acl_rule_info *rulei)
519 return mlxsw_afa_block_append_drop(rulei->act_block);
522 int mlxsw_sp_acl_rulei_act_trap(struct mlxsw_sp_acl_rule_info *rulei)
524 return mlxsw_afa_block_append_trap(rulei->act_block,
528 int mlxsw_sp_acl_rulei_act_fwd(struct mlxsw_sp *mlxsw_sp,
529 struct mlxsw_sp_acl_rule_info *rulei,
530 struct net_device *out_dev,
531 struct netlink_ext_ack *extack)
533 struct mlxsw_sp_port *mlxsw_sp_port;
538 if (!mlxsw_sp_port_dev_check(out_dev)) {
539 NL_SET_ERR_MSG_MOD(extack, "Invalid output device");
542 mlxsw_sp_port = netdev_priv(out_dev);
543 if (mlxsw_sp_port->mlxsw_sp != mlxsw_sp) {
544 NL_SET_ERR_MSG_MOD(extack, "Invalid output device");
547 local_port = mlxsw_sp_port->local_port;
550 /* If out_dev is NULL, the caller wants to
551 * set forward to ingress port.
556 return mlxsw_afa_block_append_fwd(rulei->act_block,
557 local_port, in_port, extack);
560 int mlxsw_sp_acl_rulei_act_mirror(struct mlxsw_sp *mlxsw_sp,
561 struct mlxsw_sp_acl_rule_info *rulei,
562 struct mlxsw_sp_acl_block *block,
563 struct net_device *out_dev,
564 struct netlink_ext_ack *extack)
566 struct mlxsw_sp_acl_block_binding *binding;
567 struct mlxsw_sp_port *in_port;
569 if (!list_is_singular(&block->binding_list)) {
570 NL_SET_ERR_MSG_MOD(extack, "Only a single mirror source is allowed");
573 binding = list_first_entry(&block->binding_list,
574 struct mlxsw_sp_acl_block_binding, list);
575 in_port = binding->mlxsw_sp_port;
577 return mlxsw_afa_block_append_mirror(rulei->act_block,
584 int mlxsw_sp_acl_rulei_act_vlan(struct mlxsw_sp *mlxsw_sp,
585 struct mlxsw_sp_acl_rule_info *rulei,
586 u32 action, u16 vid, u16 proto, u8 prio,
587 struct netlink_ext_ack *extack)
591 if (action == TCA_VLAN_ACT_MODIFY) {
600 NL_SET_ERR_MSG_MOD(extack, "Unsupported VLAN protocol");
601 dev_err(mlxsw_sp->bus_info->dev, "Unsupported VLAN protocol %#04x\n",
606 return mlxsw_afa_block_append_vlan_modify(rulei->act_block,
607 vid, prio, ethertype,
610 NL_SET_ERR_MSG_MOD(extack, "Unsupported VLAN action");
611 dev_err(mlxsw_sp->bus_info->dev, "Unsupported VLAN action\n");
616 int mlxsw_sp_acl_rulei_act_count(struct mlxsw_sp *mlxsw_sp,
617 struct mlxsw_sp_acl_rule_info *rulei,
618 struct netlink_ext_ack *extack)
620 return mlxsw_afa_block_append_counter(rulei->act_block,
621 &rulei->counter_index, extack);
624 int mlxsw_sp_acl_rulei_act_fid_set(struct mlxsw_sp *mlxsw_sp,
625 struct mlxsw_sp_acl_rule_info *rulei,
626 u16 fid, struct netlink_ext_ack *extack)
628 return mlxsw_afa_block_append_fid_set(rulei->act_block, fid, extack);
631 struct mlxsw_sp_acl_rule *
632 mlxsw_sp_acl_rule_create(struct mlxsw_sp *mlxsw_sp,
633 struct mlxsw_sp_acl_ruleset *ruleset,
634 unsigned long cookie,
635 struct mlxsw_afa_block *afa_block,
636 struct netlink_ext_ack *extack)
638 const struct mlxsw_sp_acl_profile_ops *ops = ruleset->ht_key.ops;
639 struct mlxsw_sp_acl_rule *rule;
642 mlxsw_sp_acl_ruleset_ref_inc(ruleset);
643 rule = kzalloc(sizeof(*rule) + ops->rule_priv_size(mlxsw_sp),
649 rule->cookie = cookie;
650 rule->ruleset = ruleset;
652 rule->rulei = mlxsw_sp_acl_rulei_create(mlxsw_sp->acl, afa_block);
653 if (IS_ERR(rule->rulei)) {
654 err = PTR_ERR(rule->rulei);
655 goto err_rulei_create;
663 mlxsw_sp_acl_ruleset_ref_dec(mlxsw_sp, ruleset);
667 void mlxsw_sp_acl_rule_destroy(struct mlxsw_sp *mlxsw_sp,
668 struct mlxsw_sp_acl_rule *rule)
670 struct mlxsw_sp_acl_ruleset *ruleset = rule->ruleset;
672 mlxsw_sp_acl_rulei_destroy(rule->rulei);
674 mlxsw_sp_acl_ruleset_ref_dec(mlxsw_sp, ruleset);
677 int mlxsw_sp_acl_rule_add(struct mlxsw_sp *mlxsw_sp,
678 struct mlxsw_sp_acl_rule *rule)
680 struct mlxsw_sp_acl_ruleset *ruleset = rule->ruleset;
681 const struct mlxsw_sp_acl_profile_ops *ops = ruleset->ht_key.ops;
684 err = ops->rule_add(mlxsw_sp, ruleset->priv, rule->priv, rule->rulei);
688 err = rhashtable_insert_fast(&ruleset->rule_ht, &rule->ht_node,
689 mlxsw_sp_acl_rule_ht_params);
691 goto err_rhashtable_insert;
693 if (!ruleset->ht_key.chain_index &&
694 mlxsw_sp_acl_ruleset_is_singular(ruleset)) {
695 /* We only need ruleset with chain index 0, the implicit
696 * one, to be directly bound to device. The rest of the
697 * rulesets are bound by "Goto action set".
699 err = mlxsw_sp_acl_ruleset_block_bind(mlxsw_sp, ruleset,
700 ruleset->ht_key.block);
702 goto err_ruleset_block_bind;
705 list_add_tail(&rule->list, &mlxsw_sp->acl->rules);
706 ruleset->ht_key.block->rule_count++;
709 err_ruleset_block_bind:
710 rhashtable_remove_fast(&ruleset->rule_ht, &rule->ht_node,
711 mlxsw_sp_acl_rule_ht_params);
712 err_rhashtable_insert:
713 ops->rule_del(mlxsw_sp, rule->priv);
717 void mlxsw_sp_acl_rule_del(struct mlxsw_sp *mlxsw_sp,
718 struct mlxsw_sp_acl_rule *rule)
720 struct mlxsw_sp_acl_ruleset *ruleset = rule->ruleset;
721 const struct mlxsw_sp_acl_profile_ops *ops = ruleset->ht_key.ops;
723 ruleset->ht_key.block->rule_count--;
724 list_del(&rule->list);
725 if (!ruleset->ht_key.chain_index &&
726 mlxsw_sp_acl_ruleset_is_singular(ruleset))
727 mlxsw_sp_acl_ruleset_block_unbind(mlxsw_sp, ruleset,
728 ruleset->ht_key.block);
729 rhashtable_remove_fast(&ruleset->rule_ht, &rule->ht_node,
730 mlxsw_sp_acl_rule_ht_params);
731 ops->rule_del(mlxsw_sp, rule->priv);
734 int mlxsw_sp_acl_rule_action_replace(struct mlxsw_sp *mlxsw_sp,
735 struct mlxsw_sp_acl_rule *rule,
736 struct mlxsw_afa_block *afa_block)
738 struct mlxsw_sp_acl_ruleset *ruleset = rule->ruleset;
739 const struct mlxsw_sp_acl_profile_ops *ops = ruleset->ht_key.ops;
740 struct mlxsw_sp_acl_rule_info *rulei;
742 rulei = mlxsw_sp_acl_rule_rulei(rule);
743 rulei->act_block = afa_block;
745 return ops->rule_action_replace(mlxsw_sp, ruleset->priv, rule->priv,
749 struct mlxsw_sp_acl_rule *
750 mlxsw_sp_acl_rule_lookup(struct mlxsw_sp *mlxsw_sp,
751 struct mlxsw_sp_acl_ruleset *ruleset,
752 unsigned long cookie)
754 return rhashtable_lookup_fast(&ruleset->rule_ht, &cookie,
755 mlxsw_sp_acl_rule_ht_params);
758 struct mlxsw_sp_acl_rule_info *
759 mlxsw_sp_acl_rule_rulei(struct mlxsw_sp_acl_rule *rule)
764 static int mlxsw_sp_acl_rule_activity_update(struct mlxsw_sp *mlxsw_sp,
765 struct mlxsw_sp_acl_rule *rule)
767 struct mlxsw_sp_acl_ruleset *ruleset = rule->ruleset;
768 const struct mlxsw_sp_acl_profile_ops *ops = ruleset->ht_key.ops;
772 err = ops->rule_activity_get(mlxsw_sp, rule->priv, &active);
776 rule->last_used = jiffies;
780 static int mlxsw_sp_acl_rules_activity_update(struct mlxsw_sp_acl *acl)
782 struct mlxsw_sp_acl_rule *rule;
785 /* Protect internal structures from changes */
787 list_for_each_entry(rule, &acl->rules, list) {
788 err = mlxsw_sp_acl_rule_activity_update(acl->mlxsw_sp,
791 goto err_rule_update;
801 static void mlxsw_sp_acl_rule_activity_work_schedule(struct mlxsw_sp_acl *acl)
803 unsigned long interval = acl->rule_activity_update.interval;
805 mlxsw_core_schedule_dw(&acl->rule_activity_update.dw,
806 msecs_to_jiffies(interval));
809 static void mlxsw_sp_acl_rul_activity_update_work(struct work_struct *work)
811 struct mlxsw_sp_acl *acl = container_of(work, struct mlxsw_sp_acl,
812 rule_activity_update.dw.work);
815 err = mlxsw_sp_acl_rules_activity_update(acl);
817 dev_err(acl->mlxsw_sp->bus_info->dev, "Could not update acl activity");
819 mlxsw_sp_acl_rule_activity_work_schedule(acl);
822 int mlxsw_sp_acl_rule_get_stats(struct mlxsw_sp *mlxsw_sp,
823 struct mlxsw_sp_acl_rule *rule,
824 u64 *packets, u64 *bytes, u64 *last_use)
827 struct mlxsw_sp_acl_rule_info *rulei;
832 rulei = mlxsw_sp_acl_rule_rulei(rule);
833 err = mlxsw_sp_flow_counter_get(mlxsw_sp, rulei->counter_index,
834 ¤t_packets, ¤t_bytes);
838 *packets = current_packets - rule->last_packets;
839 *bytes = current_bytes - rule->last_bytes;
840 *last_use = rule->last_used;
842 rule->last_bytes = current_bytes;
843 rule->last_packets = current_packets;
848 int mlxsw_sp_acl_init(struct mlxsw_sp *mlxsw_sp)
850 struct mlxsw_sp_fid *fid;
851 struct mlxsw_sp_acl *acl;
855 alloc_size = sizeof(*acl) + mlxsw_sp_acl_tcam_priv_size(mlxsw_sp);
856 acl = kzalloc(alloc_size, GFP_KERNEL);
860 acl->mlxsw_sp = mlxsw_sp;
861 acl->afk = mlxsw_afk_create(MLXSW_CORE_RES_GET(mlxsw_sp->core,
869 err = rhashtable_init(&acl->ruleset_ht,
870 &mlxsw_sp_acl_ruleset_ht_params);
872 goto err_rhashtable_init;
874 fid = mlxsw_sp_fid_dummy_get(mlxsw_sp);
879 acl->dummy_fid = fid;
881 INIT_LIST_HEAD(&acl->rules);
882 err = mlxsw_sp_acl_tcam_init(mlxsw_sp, &acl->tcam);
884 goto err_acl_ops_init;
886 /* Create the delayed work for the rule activity_update */
887 INIT_DELAYED_WORK(&acl->rule_activity_update.dw,
888 mlxsw_sp_acl_rul_activity_update_work);
889 acl->rule_activity_update.interval = MLXSW_SP_ACL_RULE_ACTIVITY_UPDATE_PERIOD_MS;
890 mlxsw_core_schedule_dw(&acl->rule_activity_update.dw, 0);
894 mlxsw_sp_fid_put(fid);
896 rhashtable_destroy(&acl->ruleset_ht);
898 mlxsw_afk_destroy(acl->afk);
904 void mlxsw_sp_acl_fini(struct mlxsw_sp *mlxsw_sp)
906 struct mlxsw_sp_acl *acl = mlxsw_sp->acl;
908 cancel_delayed_work_sync(&mlxsw_sp->acl->rule_activity_update.dw);
909 mlxsw_sp_acl_tcam_fini(mlxsw_sp, &acl->tcam);
910 WARN_ON(!list_empty(&acl->rules));
911 mlxsw_sp_fid_put(acl->dummy_fid);
912 rhashtable_destroy(&acl->ruleset_ht);
913 mlxsw_afk_destroy(acl->afk);