Creating Filter Rules - Chelsio Communications Terminator Series Installation And User Manual

Chapter XX. Classification and Filtering
You can change the default filter mode to any one of the following combinations, based on your
requirement. The network driver needs to be reloaded next using the following command:
[root@host~]# rmmod cxgb4
[root@host~]# modprobe cxgb4 use_ddr_filters=1
3.2.

Creating Filter Rules

Network driver (cxgb4) must be installed and loaded before setting the filter rule.
If you haven't done already, run the Unified Wire Installer with the T5/T6 Hash Filter
i.
configuration tuning option to install the Network Driver.
ii. Load the network driver with DDR filters support and bring up the Chelsio interface :
[root@host~]# modprobe cxgb4 use_ddr_filters=1
[root@host~]# ifconfig ethX up
iii. Now, create filter rules using cxgbtool:
[root@host~]# cxgbtool ethX filter <index> action [pass/drop/switch] fip
<source_ip> lip <destination_ip> fport <source_port> lport
<destination_port> proto <protocol> <hitcnts 1> <cap maskless>
Where,
ethX : Chelsio interface.
index : Filter index. For LE-TCAM filters, filter index should be 0-495 for T5
action : Ingress packet disposition.
pass : Ingress packets will be passed through set ingress queues.
switch : Ingress packets will be routed to an output port with optional header
drop : Ingress packets will be dropped.
source_ip/port : Source IP/port of incoming packet.
destination_ip/port : Destination IP/port of incoming packet.
protocol : TCP by default. To change, specify the corresponding internet protocol
hitcnts 1 : To enable hit counts in cxgbtool filter show output.
cap maskless : This is mandatory for hash filter. If not provided, LE-TCAM filter will be
Chelsio Unified Wire for Linux
adapters and 0-559 for T6 adapters. In case of Hash/DDR filter, the index
will be ignored and replaced by an automatically computed value, based
on the hash (4-tuple). The index will be displayed after the filter rule is
created successfully.
rewrite.
number, e.g., use 17 for UDP.
created at the specified index.
288