Re: [PATCH net-next 1/4] net: Add SRIOV VGT+ support

2017-08-30 Thread Saeed Mahameed
On Tue, Aug 29, 2017 at 7:43 PM, Sabrina Dubroca wrote: > 2017-08-29, 13:13:09 +0300, Saeed Mahameed wrote: >> On Mon, Aug 28, 2017 at 6:52 PM, Sabrina Dubroca >> wrote: >> > 2017-08-27, 14:06:15 +0300, Saeed Mahameed wrote: >> > [...] >> >> +#define VF_VLAN_BITMAP DIV_ROUND_UP(VF_VLAN_N_V

Re: [PATCH net-next 1/4] net: Add SRIOV VGT+ support

2017-08-29 Thread Sabrina Dubroca
2017-08-29, 13:13:09 +0300, Saeed Mahameed wrote: > On Mon, Aug 28, 2017 at 6:52 PM, Sabrina Dubroca wrote: > > 2017-08-27, 14:06:15 +0300, Saeed Mahameed wrote: > > [...] > >> +#define VF_VLAN_BITMAP DIV_ROUND_UP(VF_VLAN_N_VID, sizeof(__u64) * > >> BITS_PER_BYTE) > >> +struct ifla_vf_vlan_

Re: [PATCH net-next 1/4] net: Add SRIOV VGT+ support

2017-08-29 Thread Saeed Mahameed
On Mon, Aug 28, 2017 at 6:52 PM, Sabrina Dubroca wrote: > 2017-08-27, 14:06:15 +0300, Saeed Mahameed wrote: > [...] >> +#define VF_VLAN_BITMAP DIV_ROUND_UP(VF_VLAN_N_VID, sizeof(__u64) * >> BITS_PER_BYTE) >> +struct ifla_vf_vlan_trunk { >> + __u32 vf; >> + __u64 allowed_vlans_8021q_

Re: [PATCH net-next 1/4] net: Add SRIOV VGT+ support

2017-08-28 Thread Sabrina Dubroca
2017-08-27, 14:06:15 +0300, Saeed Mahameed wrote: [...] > +#define VF_VLAN_BITMAP DIV_ROUND_UP(VF_VLAN_N_VID, sizeof(__u64) * > BITS_PER_BYTE) > +struct ifla_vf_vlan_trunk { > + __u32 vf; > + __u64 allowed_vlans_8021q_bm[VF_VLAN_BITMAP]; > + __u64 allowed_vlans_8021ad_bm[VF_VLAN_

Re: [PATCH net-next 1/4] net: Add SRIOV VGT+ support

2017-08-28 Thread Saeed Mahameed
On Mon, Aug 28, 2017 at 3:38 AM, Jakub Kicinski wrote: > On Sun, 27 Aug 2017 14:06:15 +0300, Saeed Mahameed wrote: >> From: Mohamad Haj Yahia >> >> VGT+ is a security feature that gives the administrator the ability of >> controlling the allowed vlan-ids list that can be transmitted/received >> f

Re: [PATCH net-next 1/4] net: Add SRIOV VGT+ support

2017-08-27 Thread Jakub Kicinski
On Sun, 27 Aug 2017 14:06:15 +0300, Saeed Mahameed wrote: > From: Mohamad Haj Yahia > > VGT+ is a security feature that gives the administrator the ability of > controlling the allowed vlan-ids list that can be transmitted/received > from/to the VF. > The allowed vlan-ids list is called "trunk".

[PATCH net-next 1/4] net: Add SRIOV VGT+ support

2017-08-27 Thread Saeed Mahameed
From: Mohamad Haj Yahia VGT+ is a security feature that gives the administrator the ability of controlling the allowed vlan-ids list that can be transmitted/received from/to the VF. The allowed vlan-ids list is called "trunk". Admin can add/remove a range of allowed vlan-ids via iptool. Example: