Received-SPF: pass (google.com: domain of linux-kernel+bounces-94049-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.80.249 as permitted sender) client-ip=147.75.80.249;
Date: Sat, 2 Mar 2024 07:47:56 +0100
From: Larysa Zaremba <larysa.zaremba@intel.com>
To: Jakub Kicinski <kuba@kernel.org>
CC: Jiri Pirko <jiri@resnulli.us>, <intel-wired-lan@lists.osuosl.org>,
	<netdev@vger.kernel.org>, <linux-kernel@vger.kernel.org>, Mateusz Pacuszka
	<mateuszx.pacuszka@intel.com>, Tony Nguyen <anthony.l.nguyen@intel.com>,
	Lukasz Plachno <lukasz.plachno@intel.com>, Jakub Buchocki
	<jakubx.buchocki@intel.com>, Pawel Kaminski <pawel.kaminski@intel.com>,
	Przemek Kitszel <przemyslaw.kitszel@intel.com>, Michal Swiatkowski
	<michal.swiatkowski@linux.intel.com>, Mateusz Polchlopek
	<mateusz.polchlopek@intel.com>, "David S. Miller" <davem@davemloft.net>,
	"Eric Dumazet" <edumazet@google.com>, Paolo Abeni <pabeni@redhat.com>, "Pawel
 Chmielewski" <pawel.chmielewski@intel.com>, Jesse Brandeburg
	<jesse.brandeburg@intel.com>
Subject: Re: [PATCH iwl-net 0/5] ice: LLDP support for VFs
Message-ID: <ZeLLnEA1pv1ejP8e@lzaremba-mobl.ger.corp.intel.com>
References: <20240228155957.408036-1-larysa.zaremba@intel.com>
 <20240228084745.2c0fef0e@kernel.org>
 <ZeBMRXUjVSwUHxU-@nanopsycho>
 <20240229072813.5d7614c3@kernel.org>
 <ZeDb8Dr8mBvov9fc@lzaremba-mobl.ger.corp.intel.com>
 <20240301090836.185e3b79@kernel.org>
 <ZeJ3u2x3Ihs8WQJn@lzaremba-mobl.ger.corp.intel.com>
 <20240305115450.577c161e@kernel.org>
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <20240305115450.577c161e@kernel.org>
Precedence: bulk
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?bzZZE3xBO/AUFQnA2gJovqAbFrEVIQaKzLq7QkAkMoiu/BhlOFfmMinjW4Jv?=
 =?us-ascii?Q?Uj9kehwHyALDfqQ5UUqn0RrRFi0k9J/nJ4+cZeEEEOAVCmxVKM9cMjZyYKsm?=
 =?us-ascii?Q?q0UzweM7hqVlHY0WomvQx+yLQbVF8+MNE3p+FCiDHi4G//KhIob+Kj8AYbFm?=
 =?us-ascii?Q?0yqX8wzieJnJTvLeX+KYmxrDn1kbaRd8iPOZEjnT07BOVJ61YsIXXNU6FNu+?=
 =?us-ascii?Q?3Y0hWH8eVQ2EW2ktxTTpwTurtYi534ke+kW9jjXCC2pGgYdvXTsSe2rRA1/u?=
 =?us-ascii?Q?zf+aT/SOeMKL22mm2Hp53C8B0wibD6kCfXYwcxC+R+w507auYVQxQlparCOL?=
 =?us-ascii?Q?5TD0H5X985a7xPhLvXVR3uuLRmO2xCzkBH2SsURo1jotiK/Q+lpwJTm+RARE?=
 =?us-ascii?Q?/457pAoiSkHlRxpXiyQqae6fcPS5vByNCNTAEcWW0V8MoALCcyTKcHF2syB5?=
 =?us-ascii?Q?tkeF+g9mihaRn9VTGnE4I6PPwaIqkjqQkoKfGwiVvavaXRUGXUXjqX6EjNo8?=
 =?us-ascii?Q?mA7ivqvaW/emLO52Nl/VUE/6lbXlzB9zgBGCKoW7flKYJN03qCCLfRTDFofd?=
 =?us-ascii?Q?SHCuOXHFUscu5fy7jUC3kr3PH7BSrB/nlm7z+FwmWoQXuzGx69IeAxSUrv2j?=
 =?us-ascii?Q?3I0isH9Up1sDoUuZtBtBdQxTQB5fUy1g7M6ukC9QcgoML+ExrzIZ4LNcjOSx?=
 =?us-ascii?Q?cvyO4gKPycJkZuXstoxc/UnFdOlMerPBo6w+v42SqmXsa8hIK52kh8LZ+mhe?=
 =?us-ascii?Q?PM4DqgjRMJHpNcZd01tiwHFtGkuptZ9hrjyIS/bpmWYG5LWZb603knh2wC0D?=
 =?us-ascii?Q?NddoS67fz8zI0IYKBd4y81yl9EHYEcziLX9axscaeVkWBHMxyRvVfoWvxzq1?=
 =?us-ascii?Q?EarRJ6swqJW9aOE0r7LHQ60fYoffiHmuFBHjOQ92hxpz+agOe5DsbaRJokkU?=
 =?us-ascii?Q?+CHst3tvZ+OsAi7XqHqqqE5nuYVBNxmhqMzhDhuTb15yIlBupGgSWsT4Pn6a?=
 =?us-ascii?Q?dK/tqO9GpaLY71AdWXpxQqjMdG8axovSmbCPLyxcur+MlFhAN/aoTwlmYLlX?=
 =?us-ascii?Q?Hbk/RecEmSj2P5AXnymL97jqu9slARlyS03zvepM0ReifZkDdt0QkZ+p4CON?=
 =?us-ascii?Q?k6ST0NU0VKmkufbp48Hg/ZKmwnLCv72X82IPC9rtg9Tv6J1nCW7nY6bQKrXg?=
 =?us-ascii?Q?UD9XazGExgM6+vH1Ks84oeuE14kaUJvFaga5krgZav3Sq/czzsFlF/hl/6li?=
 =?us-ascii?Q?aetaOCeb+gWnnYPm6bbjbhoFXlYMnK8kTX52UcShbbAEILV1rXMZfeIg8lRg?=
 =?us-ascii?Q?HphWJv+G2q5YD9mqVi+JHUxNoeJoBypj9FpwyPZcLTa5SfzawYuQ7mygXgo2?=
 =?us-ascii?Q?qBzQupEkBZfO8kBsmPQeltgYPOEWdq22bhRbulEjT6YXaq4iIFYuqhtZpOae?=
 =?us-ascii?Q?nmADcrCZ4RtS4Qo5eiMX/p/APTP0b1vytc6oItWFInYHFGwbOQ8GNNF7k1Ms?=
 =?us-ascii?Q?Ks3gEdNAXGCTGU4Gp82UjT6EJ9s052SrkL9Ki7bJ6mfdzymTwZ0hHezTLzm+?=
 =?us-ascii?Q?eq3Xbh/nVHep2TjsOv5cZ7lPW07SNqLr2hDf/c1HDf9UYBAXHe2fnBQpz0oh?=
 =?us-ascii?Q?lQ=3D=3D?=
X-MS-Exchange-CrossTenant-Network-Message-Id: 755efec7-ec12-4bdd-17e4-08dc3de98bd6
X-MS-Exchange-CrossTenant-AuthSource: SN7PR11MB7540.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Mar 2024 14:27:26.4115
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 46c98d88-e344-4ed4-8496-4ed7712e255d
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: qS69jjsq4UaQwz0I9ITepqiz+fsDnvlC/YW6kITgdI1yShF5TH0tIHqL7Jx9pHezXqpnVSEJSAnsTB48VitqIf0gSLN4lR17bIAvpH7E2J4=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY8PR11MB7729
X-OriginatorOrg: intel.com

On Tue, Mar 05, 2024 at 11:54:50AM -0800, Jakub Kicinski wrote:
> On Sat, 2 Mar 2024 01:50:03 +0100 Larysa Zaremba wrote:
> > For RX: match on Ethertype and mirror, every trusted VF should be able to scan 
> > neighbors.
> > 
> > For TX this is more complicated and is done not through eswitch, but through 
> > modifying security options, so do not think this would work with tc. So private 
> > flags are the best option? Our requirements say only a single VSI can transmit 
> > LLDP.
> 
> It is doable theoretically, tho, right? Driver can detect that all
> eswitch VF/PF ports but one have a "drop LLDP" rule and update the
> security option correctly?

I can envision that. I'll report in this thread, if I encounter roadblocks, when 
doing v2.

Thanks!