ice: Add function to program ethertype based filter rule on VSIs
authorAkeem G Abodunrin <akeem.g.abodunrin@intel.com>
Tue, 16 Apr 2019 17:21:24 +0000 (10:21 -0700)
committerJeff Kirsher <jeffrey.t.kirsher@intel.com>
Sat, 4 May 2019 21:36:28 +0000 (14:36 -0700)
commitd95276ced00060dc3d4d157b1eba61eb7830eb02
treecd6da561ae6274675c7c9ea3db2c985a7d8d88ab
parent8f529ff912073f778e3cd74e87fb69a36499fc2f
ice: Add function to program ethertype based filter rule on VSIs

This patch adds function to program VSI with ethertype based filter rule,
so that all flow control frames would be disallowed from being transmitted
to the client, in order to prevent malicious VSI, especially VF from
sending out PAUSE or PFC frames, and then control other VSIs traffic.

Signed-off-by: Akeem G Abodunrin <akeem.g.abodunrin@intel.com>
Signed-off-by: Anirudh Venkataramanan <anirudh.venkataramanan@intel.com>
Tested-by: Andrew Bowers <andrewx.bowers@intel.com>
Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@intel.com>
drivers/net/ethernet/intel/ice/ice.h
drivers/net/ethernet/intel/ice/ice_lib.c
drivers/net/ethernet/intel/ice/ice_switch.c
drivers/net/ethernet/intel/ice/ice_switch.h