[dpdk-users] Subnet filters in hardware

[Matthew Hall]

On Mon, Oct 03, 2016 at 10:46:07PM -0400, Cody Doucette wrote:
> I'm interested in applying a hardware filter for entire subnets instead of
> individual flows. I've seen previous threads stating that ntuple filter in
> theory may be able to support this, but currently there's not any hardware
> support for it. For example, the 82599 only allows you to set an entire
> field to be matched, but not apply a prefix mask.
> 
> Is anyone aware of any new NICs (last 1-2 years) where this is possible? It
> would be a very useful feature and I'm having a hard time finding anything
> suitable.
> 
> Thanks in advance!
> Cody

It is already possible to achieve line rate subnet matching performance using 
a proper configuration of rte_lpm so this might not really be required. Can 
you try that first?

Matthew.