On (08/19/21 16:21), Iremonger, Bernard wrote: > > Looking closer at this patchset, I am not sure that a second ACL table is > needed. > The existing ACL table handles UDP, TCP and SCP, however it is not processing > the TCP flags. > I think it just needs to be modified to process the TCP flags. > Could you take another look to see if the above proposed solution will work > for you.
I'm not sure it would. As I pointed out in the original rfc at https://inbox.dpdk.org/dev/cover.1578936382.git.sowmini.varad...@microsoft.com/ we need to add a key for the 8 bit flags, but the multibit trie lookup moves in steps of 4 bytes. However, it has admittedly been a while since I tinkereed with this, and I can give it a shot and get back. Thanks --Sowmini