Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
Date:   Thu, 20 Oct 2022 17:58:42 +0300
From:   Ido Schimmel <idosch@nvidia.com>
To:     Vladimir Oltean <olteanv@gmail.com>
Cc:     "Hans J. Schultz" <netdev@kapio-technology.com>,
        davem@davemloft.net, kuba@kernel.org, netdev@vger.kernel.org,
        Florian Fainelli <f.fainelli@gmail.com>,
        Andrew Lunn <andrew@lunn.ch>,
        Vivien Didelot <vivien.didelot@gmail.com>,
        Eric Dumazet <edumazet@google.com>,
        Paolo Abeni <pabeni@redhat.com>,
        Kurt Kanzenbach <kurt@linutronix.de>,
        Hauke Mehrtens <hauke@hauke-m.de>,
        Woojung Huh <woojung.huh@microchip.com>,
        UNGLinuxDriver@microchip.com, Sean Wang <sean.wang@mediatek.com>,
        Landen Chao <Landen.Chao@mediatek.com>,
        DENG Qingfang <dqfext@gmail.com>,
        Matthias Brugger <matthias.bgg@gmail.com>,
        Claudiu Manoil <claudiu.manoil@nxp.com>,
        Alexandre Belloni <alexandre.belloni@bootlin.com>,
        Jiri Pirko <jiri@resnulli.us>,
        Ivan Vecera <ivecera@redhat.com>,
        Roopa Prabhu <roopa@nvidia.com>,
        Nikolay Aleksandrov <razor@blackwall.org>,
        Shuah Khan <shuah@kernel.org>,
        Russell King <linux@armlinux.org.uk>,
        Christian Marangi <ansuelsmth@gmail.com>,
        Daniel Borkmann <daniel@iogearbox.net>,
        Yuwei Wang <wangyuweihx@gmail.com>,
        Petr Machata <petrm@nvidia.com>,
        Florent Fourcot <florent.fourcot@wifirst.fr>,
        Hans Schultz <schultz.hans@gmail.com>,
        Joachim Wiberg <troglobit@gmail.com>,
        Amit Cohen <amcohen@nvidia.com>, linux-kernel@vger.kernel.org,
        linux-arm-kernel@lists.infradead.org,
        linux-mediatek@lists.infradead.org,
        bridge@lists.linux-foundation.org, linux-kselftest@vger.kernel.org
Subject: Re: [PATCH v8 net-next 05/12] net: dsa: propagate the locked flag
 down through the DSA layer
Message-ID: <Y1FiImF3i4s0bLuD@shredder>
References: <20221018165619.134535-1-netdev@kapio-technology.com>
 <20221018165619.134535-1-netdev@kapio-technology.com>
 <20221018165619.134535-6-netdev@kapio-technology.com>
 <20221018165619.134535-6-netdev@kapio-technology.com>
 <20221020130224.6ralzvteoxfdwseb@skbuf>
 <Y1FMAI9BzDRUPi5Y@shredder>
 <20221020133506.76wroc7owpwjzrkg@skbuf>
 <Y1FTzyPdTbAF+ODT@shredder>
 <20221020140400.h4czo4wwv7erncy7@skbuf>
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20221020140400.h4czo4wwv7erncy7@skbuf>
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?RPuaKzJ/i9u5icSvS+soJY4vz4ypaM2G4DcURzHmZYUveBsR5v/P8c8tWKJa?=
 =?us-ascii?Q?yTYUhW6gAhsB6YN0DwXRdiiaPhRps5zl7RBIMQDH8l0mCWPPUFRTHCzx9KL2?=
 =?us-ascii?Q?tLk0Q04PR3PfZvM4dsPg7Cw3yH7HMjJFVbhkJ3X1wV+Oo6XduCVR7kWKn3Gn?=
 =?us-ascii?Q?PYpLeiag+NoIEVBmHWdNj8ztOE2qgANAWHExRBvpahEWhYhXSkTWKvz9xE5a?=
 =?us-ascii?Q?PUab6JGSuHkKupektJa/CnHzAmVaAs8HJhwSSxsoOdTmkG34XjUl38CRqGZN?=
 =?us-ascii?Q?58GMe2DbudSX3mkqASCKsLOC+xF74usMNrQ3ucS8nO9Z0ExR3wIlTuj9mEb5?=
 =?us-ascii?Q?2sAApTicvXHk6c6XlZMt7FPo8J2LK6RPNZAGavxoGw66WoPPl8CmV3DIwc/V?=
 =?us-ascii?Q?WkMt9pUybUVsbJzND7SpNQtKF1pR+FiNn0JrtjoqL0ZfHT0QVZp2RaBJT37h?=
 =?us-ascii?Q?YsUJvbokZa4tATWO7pkX1YM+epNIsG8Z/EbwK67oMIR+AXJUZp/c1Af9m3V8?=
 =?us-ascii?Q?Oq68gskXXoHcVVbHmjSYLRqFr8QfNZlp2ph4ne+01oQW40TwjH0eZp8N+R7u?=
 =?us-ascii?Q?P5OOWtR4Gdz2wmM27qLVOPvWE9esPPmkVG5LY8ZO2G2hT9lzAMQdGGWtBR7T?=
 =?us-ascii?Q?6WjXC8dXbmZqUiDM3mcmGbJ9/Q5aSjBGo54GYSH/1mCl14AsW5VFv2s20qbL?=
 =?us-ascii?Q?kCfzsLUXTSIcTE8RN0x0P0W3Y1/Kwr/cpIsh6vsp1z/TjSM0LSoASprlZuFd?=
 =?us-ascii?Q?0UJJ2ye/82LIrP1sk4v65GZeFq9iymuP4Qxw9yGPndFHHoQBsgHxigmlrKmy?=
 =?us-ascii?Q?sV34cx1gSrkhOmWBn0ucNPb39xubHqKyyHpOmDkB91QX72kOV6bKX60/zqZa?=
 =?us-ascii?Q?AjQxz8Htj64bm/ZGoo81xK2wmusfw0fxBVtXM63WKQ9COYO+sUfaHjB/4TIp?=
 =?us-ascii?Q?t0z/cDAAiH5Ravtqrk4xYaolD4Kkpw5r2cAHDY8Og1DBoVpRTsmFbds6fsfh?=
 =?us-ascii?Q?kO0E0yapbK69kzP0rsGYqiSJL5SZMirEaoPzOy7Lvv9iBK+lZgD4ssUxGmDl?=
 =?us-ascii?Q?atb94QzZVsjSWNba8TJgWOxQM0IYg9vaPBNT1EY5Z8gI4p4qlEcY+DuStLUG?=
 =?us-ascii?Q?vMETOfGLnhSDjLsGbImN9X08HKGAg98+rs4P69zS0aP16XGfQLA0qW/v3WOg?=
 =?us-ascii?Q?gJzb84dYHiOvykuVgdA3+dWXBO0BF1grje8pYytzaulppYOUNmzaH/3FYmYe?=
 =?us-ascii?Q?R2eWg7bxBUBQDMvMhn64QTEBQWSJB9wf3/wbqMR6LUAKVuO+WezmByulbpVE?=
 =?us-ascii?Q?v2sbgqPaZDZ1GpgpSVngYn4c+XEJ8Kj6PFQBNbqCKjK8NMSDHTfl6wuymMmc?=
 =?us-ascii?Q?swf+ElQ6iiM2a/NecRkC0axYKONBTJBJZsIlzzzhIyp74FP7XKDIKS407Kb3?=
 =?us-ascii?Q?Baqzns95yIpBQtxwR/V8EnBO18M8d4HboFT3ws8gdPgeD0vBqxNB8y0aLIaj?=
 =?us-ascii?Q?tsJ+lkXKQu/BfIY8RMDARGcPqoibVvQVpaYa046xQ0tGlm6IkcMWabG0e9yj?=
 =?us-ascii?Q?j9GElxm/9sTSdgoTWggFx8bGdnKxunLpgirzVuRu?=
X-OriginatorOrg: Nvidia.com
X-MS-Exchange-CrossTenant-Network-Message-Id: ad99cae0-d89f-40b6-812a-08dab2ab9842
X-MS-Exchange-CrossTenant-AuthSource: CY5PR12MB6179.namprd12.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Oct 2022 14:58:49.1711
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 43083d15-7273-40c1-b7db-39efd9ccc17a
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: L05EuL5R73xa9sdfpppcAJhIwY7gsYt4IuWlbLQVE0HJjUeIo/aD1Fbw+qpLGvQHfmLcfleWTPkADiXFWmi4Jw==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH7PR12MB5805
X-Spam-Status: No, score=-1.4 required=5.0 tests=BAYES_00,DKIMWL_WL_HIGH,
        DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FORGED_SPF_HELO,
        RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_PASS,SPF_NONE,
        URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
        lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

On Thu, Oct 20, 2022 at 05:04:00PM +0300, Vladimir Oltean wrote:
> On Thu, Oct 20, 2022 at 04:57:35PM +0300, Ido Schimmel wrote:
> > On Thu, Oct 20, 2022 at 04:35:06PM +0300, Vladimir Oltean wrote:
> > > On Thu, Oct 20, 2022 at 04:24:16PM +0300, Ido Schimmel wrote:
> > > > On Thu, Oct 20, 2022 at 04:02:24PM +0300, Vladimir Oltean wrote:
> > > > > On Tue, Oct 18, 2022 at 06:56:12PM +0200, Hans J. Schultz wrote:
> > > > > > @@ -3315,6 +3316,7 @@ static int dsa_slave_fdb_event(struct net_device *dev,
> > > > > >  	struct dsa_port *dp = dsa_slave_to_port(dev);
> > > > > >  	bool host_addr = fdb_info->is_local;
> > > > > >  	struct dsa_switch *ds = dp->ds;
> > > > > > +	u16 fdb_flags = 0;
> > > > > >  
> > > > > >  	if (ctx && ctx != dp)
> > > > > >  		return 0;
> > > > > > @@ -3361,6 +3363,9 @@ static int dsa_slave_fdb_event(struct net_device *dev,
> > > > > >  		   orig_dev->name, fdb_info->addr, fdb_info->vid,
> > > > > >  		   host_addr ? " as host address" : "");
> > > > > >  
> > > > > > +	if (fdb_info->locked)
> > > > > > +		fdb_flags |= DSA_FDB_FLAG_LOCKED;
> > > > > 
> > > > > This is the bridge->driver direction. In which of the changes up until
> > > > > now/through which mechanism will the bridge emit a
> > > > > SWITCHDEV_FDB_ADD_TO_DEVICE with fdb_info->locked = true?
> > > > 
> > > > I believe it can happen in the following call chain:
> > > > 
> > > > br_handle_frame_finish
> > > >    br_fdb_update // p->flags & BR_PORT_MAB
> > > >        fdb_notify
> > > >            br_switchdev_fdb_notify
> > > > 
> > > > This can happen with Spectrum when a packet ingresses via a locked port
> > > > and incurs an FDB miss in hardware. The packet will be trapped and
> > > > injected to the Rx path where it should invoke the above call chain.
> > > 
> > > Ah, so this is the case which in mv88e6xxx would generate an ATU
> > > violation interrupt; in the Spectrum case it generates a special packet.
> > 
> > Not sure what you mean by "special" :) It's simply the packet that
> > incurred the FDB miss on the SMAC.
> > 
> > > Right now this packet isn't generated, right?
> > 
> > Right. We don't support BR_PORT_LOCKED so these checks are not currently
> > enabled in hardware. To be clear, only packets received via locked ports
> > are able to trigger the check.
> > 
> > > 
> > > I think we have the same thing in ocelot, a port can be configured to
> > > send "learn frames" to the CPU.
> > > 
> > > Should these packets be injected into the bridge RX path in the first
> > > place? They reach the CPU because of an FDB miss, not because the CPU
> > > was the intended destination.
> > 
> > The reason to inject them to the Rx path is so that they will trigger
> > the creation of the "locked" entry in the bridge driver (when MAB is
> > on), thereby notifying user space about the presence of a new MAC behind
> > the locked port. We can try to parse them in the driver and notify the
> > bridge driver via SWITCHDEV_FDB_ADD_TO_BRIDGE, but it's quite ugly...
> 
> "ugly" => your words, not mine... But abstracting things a bit, doing
> what you just said (SWITCHDEV_FDB_ADD_TO_BRIDGE) for learn frames would
> be exactly the same thing as what mv88e6xxx is doing (so your "ugly"
> comment equally applies to Marvell).

My understanding is that mv88e6xxx only reads the SMAC and FID/VID from
hardware and notifies them to the bridge driver. It does not need to
parse them out of the Ethernet frame that triggered the "violation".
This is the "ugly" part (in my opinion).

> The learn frames are "special" in the sense that they don't belong to
> the data path of the software bridge*, they are just hardware specific
> information which the driver must deal with, using a channel that
> happens to be Ethernet and not an IRQ/MDIO.

I think we misunderstand each other because I don't understand why you
call them "special" nor "hardware specific information" :/ We don't
inject to the software data path some hardware specific frames, but
rather the original Ethernet frames that triggered the violation. The
same thing happens with packets that encountered a neighbour miss during
routing or whose TTL was decremented to zero. The hardware can't
generate ARP or ICMP packets, so the original packet is injected to the
Rx path so that the kernel will generate the necessary control packets
in response.

> *in other words, a bridge with proper RX filtering should not even
> receive these frames, or would need special casing for BR_PORT_MAB to
> not drop them in the first place.
> 
> I would incline towards an unified approach for CPU assisted learning,
> regardless of this (minor, IMO) difference between Marvell and other
> vendors.

OK, understood. Assuming you don't like the above, I need to check if we
can do something similar to what mv88e6xxx is doing (because I don't
think mv88e6xxx can do anything else).