[PATCH net-next 0/5] net: flower: validate encapsulation control flags

From: Asbjørn Sloth Tønnesen
Date: Sun Jun 09 2024 - 13:35:43 EST


Now that all drivers properly rejects unsupported flower control flags
used with FLOW_DISSECTOR_KEY_CONTROL, then time has come to add similar
checks to the drivers supporting FLOW_DISSECTOR_KEY_ENC_CONTROL.

There are currently just 4 drivers supporting this key, and
3 of those currently doesn't validate encapsulated control flags.

Encapsulation control flags may currently be unused, but they should
still be validated by the drivers, so that drivers will properly
reject any new flags when they are introduced.

This series adds some helper functions, and implements them in all
4 drivers.

NB: It is currently discussed[1] to use encapsulation control flags
for tunnel flags instead of the new FLOW_DISSECTOR_KEY_ENC_FLAGS.

[1] https://lore.kernel.org/netdev/ZmFuxElwZiYJzBkh@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx/

Asbjørn Sloth Tønnesen (5):
flow_offload: add encapsulation control flag helpers
sfc: use flow_rule_is_supp_enc_control_flags()
net/mlx5e: flower: validate encapsulation control flags
nfp: flower: validate encapsulation control flags
ice: flower: validate encapsulation control flags

drivers/net/ethernet/intel/ice/ice_tc_lib.c | 4 +++
.../ethernet/mellanox/mlx5/core/en/tc_tun.c | 6 ++++
.../ethernet/netronome/nfp/flower/offload.c | 4 +++
drivers/net/ethernet/sfc/tc.c | 5 +--
include/net/flow_offload.h | 35 +++++++++++++++++++
5 files changed, 50 insertions(+), 4 deletions(-)

--
2.45.1