ice: Add function to program ethertype based filter rule on VSIs

Browse source

This patch adds function to program VSI with ethertype based filter rule,
so that all flow control frames would be disallowed from being transmitted
to the client, in order to prevent malicious VSI, especially VF from
sending out PAUSE or PFC frames, and then control other VSIs traffic.

Signed-off-by: Akeem G Abodunrin <akeem.g.abodunrin@intel.com>
Signed-off-by: Anirudh Venkataramanan <anirudh.venkataramanan@intel.com>
Tested-by: Andrew Bowers <andrewx.bowers@intel.com>
Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@intel.com>

...

This commit is contained in:

Akeem G Abodunrin 2019-04-16 10:21:24 -07:00 • committed by Jeff Kirsher

parent 8f529ff912

commit d95276ced0

4 changed files with 120 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

2

drivers/net/ethernet/intel/ice/ice.h

View file

55

drivers/net/ethernet/intel/ice/ice_lib.c

View file

59

drivers/net/ethernet/intel/ice/ice_switch.c

View file

4

drivers/net/ethernet/intel/ice/ice_switch.h

View file