Date: Wed, 5 May 2010 00:41:40 +0000 (UTC) From: Navdeep Parhar <np@FreeBSD.org> To: cvs-src-old@freebsd.org Subject: cvs commit: src/sys/dev/cxgb cxgb_ioctl.h cxgb_main.c src/usr.sbin/cxgbtool cxgbtool.c Message-ID: <201005050051.o450pBWS012727@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
np 2010-05-05 00:41:40 UTC
FreeBSD src repository
Modified files:
sys/dev/cxgb cxgb_ioctl.h cxgb_main.c
usr.sbin/cxgbtool cxgbtool.c
Log:
SVN rev 207643 on 2010-05-05 00:41:40Z by np
Add support for hardware filters to cxgb(4). The T3 chip can inspect
L2/3/4 headers and can drop or steer packets as instructed. Filtering
based on src ip, dst ip, src port, dst port, 802.1q, udp/tcp, and mac
addr is possible. Add support in cxgbtool to program these filters.
Some simple examples:
Drop all tcp/80 traffic coming from the subnet specified.
# cxgbtool cxgb2 filter 0 sip 192.168.1.0/24 dport 80 type tcp action drop
Steer all incoming UDP traffic to qset 0.
# cxgbtool cxgb2 filter 1 type udp queue 0 action pass
Steer all tcp traffic from 192.168.1.1 to qset 1.
# cxgbtool cxgb2 filter 2 sip 192.168.1.1 type tcp queue 1 action pass
Drop fragments.
# cxgbtool cxgb2 filter 3 type frag action drop
List all filters.
# cxgbtool cxgb2 filter list
index SIP DIP sport dport VLAN PRI P/MAC type Q
0 192.168.1.0/24 0.0.0.0 * 80 0 0/1 */* tcp -
1 0.0.0.0/0 0.0.0.0 * * 0 0/1 */* udp 0
2 192.168.1.1/32 0.0.0.0 * * 0 0/1 */* tcp 1
3 0.0.0.0/0 0.0.0.0 * * 0 0/1 */* frag -
16367 0.0.0.0/0 0.0.0.0 * * 0 0/1 */* * *
MFC after: 2 weeks
Revision Changes Path
1.10 +29 -0 src/sys/dev/cxgb/cxgb_ioctl.h
1.109 +273 -0 src/sys/dev/cxgb/cxgb_main.c
1.8 +180 -6 src/usr.sbin/cxgbtool/cxgbtool.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201005050051.o450pBWS012727>