On 15-09-15 11:05 PM, Alexei Starovoitov wrote: > Existing bpf_clone_redirect() helper clones skb before redirecting > it to RX or TX of destination netdev. > Introduce bpf_redirect() helper that does that without cloning. > > Benchmarked with two hosts using 10G ixgbe NICs. > One host is doing line rate pktgen. > Another host is configured as: > $ tc qdisc add dev $dev ingress > $ tc filter add dev $dev root pref 10 u32 match u32 0 0 flowid 1:2 \ > action bpf run object-file tcbpf1_kern.o section clone_redirect_xmit drop > so it receives the packet on $dev and immediately xmits it on $dev + 1 > The section 'clone_redirect_xmit' in tcbpf1_kern.o file has the program > that does bpf_clone_redirect() and performance is 2.0 Mpps > > $ tc filter add dev $dev root pref 10 u32 match u32 0 0 flowid 1:2 \ > action bpf run object-file tcbpf1_kern.o section redirect_xmit drop > which is using bpf_redirect() - 2.4 Mpps > > and using cls_bpf with integrated actions as: > $ tc filter add dev $dev root pref 10 \ > bpf run object-file tcbpf1_kern.o section redirect_xmit integ_act classid 1 > performance is 2.5 Mpps > > To summarize: > u32+act_bpf using clone_redirect - 2.0 Mpps > u32+act_bpf using redirect - 2.4 Mpps > cls_bpf using redirect - 2.5 Mpps > > For comparison linux bridge in this setup is doing 2.1 Mpps > and ixgbe rx + drop in ip_rcv - 7.8 Mpps > > Signed-off-by: Alexei Starovoitov <a...@plumgrid.com> > Acked-by: Daniel Borkmann <dan...@iogearbox.net> > --- > This approach is using per_cpu scratch area to store ifindex and flags. > The other alternatives discussed at plumbers are slower and more intrusive. > v1->v2: dropped redundant iff_up check > > include/net/sch_generic.h | 1 + > include/uapi/linux/bpf.h | 8 ++++++++ > include/uapi/linux/pkt_cls.h | 1 + > net/core/dev.c | 8 ++++++++ > net/core/filter.c | 44 > ++++++++++++++++++++++++++++++++++++++++++ > net/sched/act_bpf.c | 1 + > net/sched/cls_bpf.c | 1 + > samples/bpf/bpf_helpers.h | 4 ++++ > samples/bpf/tcbpf1_kern.c | 24 ++++++++++++++++++++++- > 9 files changed, 91 insertions(+), 1 deletion(-) >
Acked-by: John Fastabend <john.r.fastab...@intel.com> -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
