xref: /dpdk/drivers/common/cnxk/roc_npc.c (revision 29a8df5cb664feb6f182c07868c49c0f5c9a4c46)

/* SPDX-License-Identifier: BSD-3-Clause
 * Copyright(C) 2021 Marvell.
 */

#include "roc_api.h"
#include "roc_priv.h"

int
roc_npc_mark_actions_get(struct roc_npc *roc_npc)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);

	return npc->mark_actions;
}

int
roc_npc_mark_actions_sub_return(struct roc_npc *roc_npc, uint32_t count)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);

	npc->mark_actions -= count;
	return npc->mark_actions;
}

int
roc_npc_vtag_actions_get(struct roc_npc *roc_npc)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);

	return npc->vtag_strip_actions;
}

int
roc_npc_vtag_actions_sub_return(struct roc_npc *roc_npc, uint32_t count)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);

	npc->vtag_strip_actions -= count;
	return npc->vtag_strip_actions;
}

int
roc_npc_mcam_free_counter(struct roc_npc *roc_npc, uint16_t ctr_id)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);

	return npc_mcam_free_counter(npc->mbox, ctr_id);
}

int
roc_npc_inl_mcam_read_counter(uint32_t ctr_id, uint64_t *count)
{
	struct nix_inl_dev *inl_dev = NULL;
	struct idev_cfg *idev;

	idev = idev_get_cfg();
	if (idev)
		inl_dev = idev->nix_inl_dev;
	if (!inl_dev)
		return 0;
	return npc_mcam_read_counter(inl_dev->dev.mbox, ctr_id, count);
}

int
roc_npc_inl_mcam_clear_counter(uint32_t ctr_id)
{
	struct nix_inl_dev *inl_dev = NULL;
	struct idev_cfg *idev;

	idev = idev_get_cfg();
	if (idev)
		inl_dev = idev->nix_inl_dev;
	if (!inl_dev)
		return 0;

	return npc_mcam_clear_counter(inl_dev->dev.mbox, ctr_id);
}

int
roc_npc_mcam_alloc_counter(struct roc_npc *roc_npc, uint16_t *ctr_id)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);

	return npc_mcam_alloc_counter(npc->mbox, ctr_id);
}

int
roc_npc_get_free_mcam_entry(struct roc_npc *roc_npc, struct roc_npc_flow *flow)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);

	return npc_get_free_mcam_entry(npc->mbox, flow, npc);
}

int
roc_npc_mcam_read_counter(struct roc_npc *roc_npc, uint32_t ctr_id, uint64_t *count)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);

	return npc_mcam_read_counter(npc->mbox, ctr_id, count);
}

int
roc_npc_mcam_clear_counter(struct roc_npc *roc_npc, uint32_t ctr_id)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);

	return npc_mcam_clear_counter(npc->mbox, ctr_id);
}

int
roc_npc_mcam_free_entry(struct roc_npc *roc_npc, uint32_t entry)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);

	return npc_mcam_free_entry(npc->mbox, entry);
}

int
roc_npc_mcam_free(struct roc_npc *roc_npc, struct roc_npc_flow *mcam)
{
	int rc = 0;

	if (mcam->use_ctr) {
		rc = roc_npc_mcam_clear_counter(roc_npc, mcam->ctr_id);
		if (rc)
			return rc;

		rc = roc_npc_mcam_free_counter(roc_npc, mcam->ctr_id);
		if (rc)
			return rc;
	}

	return roc_npc_mcam_free_entry(roc_npc, mcam->mcam_id);
}

int
roc_npc_mcam_init(struct roc_npc *roc_npc, struct roc_npc_flow *flow,
		  int mcam_id)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);
	int rc;

	rc = npc_mcam_init(npc, flow, mcam_id);
	if (rc != 0) {
		plt_err("npc: mcam initialisation write failed");
		return rc;
	}
	return 0;
}

int
roc_npc_mcam_move(struct roc_npc *roc_npc, uint16_t old_ent, uint16_t new_ent)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);
	struct mbox *mbox = npc->mbox;
	int rc;

	rc = npc_mcam_move(mbox, old_ent, new_ent);
	if (rc)
		return rc;

	return 0;
}

int
roc_npc_mcam_free_all_resources(struct roc_npc *roc_npc)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);

	return npc_flow_free_all_resources(npc);
}

int
roc_npc_mcam_alloc_entries(struct roc_npc *roc_npc, int ref_entry, int *alloc_entry, int req_count,
			   int priority, int *resp_count, bool is_conti)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);

	return npc_mcam_alloc_entries(npc->mbox, ref_entry, alloc_entry, req_count, priority,
				      resp_count, is_conti);
}

int
roc_npc_mcam_enable_all_entries(struct roc_npc *roc_npc, bool enable)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);

	return npc_flow_enable_all_entries(npc, enable);
}

int
roc_npc_mcam_alloc_entry(struct roc_npc *roc_npc, struct roc_npc_flow *mcam,
			 struct roc_npc_flow *ref_mcam, int prio,
			 int *resp_count)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);

	return npc_mcam_alloc_entry(npc, mcam, ref_mcam, prio, resp_count);
}

int
roc_npc_mcam_ena_dis_entry(struct roc_npc *roc_npc, struct roc_npc_flow *mcam,
			   bool enable)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);

	return npc_mcam_ena_dis_entry(npc, mcam, enable);
}

int
roc_npc_mcam_write_entry(struct roc_npc *roc_npc, struct roc_npc_flow *mcam)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);

	return npc_mcam_write_entry(npc->mbox, mcam);
}

int
roc_npc_get_low_priority_mcam(struct roc_npc *roc_npc)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);

	if (roc_model_is_cn10k())
		return (npc->mcam_entries - NPC_MCAME_RESVD_10XX - 1);
	else if (roc_model_is_cn98xx())
		return (npc->mcam_entries - NPC_MCAME_RESVD_98XX - 1);
	else
		return (npc->mcam_entries - NPC_MCAME_RESVD_9XXX - 1);
}

static int
npc_mcam_tot_entries(void)
{
	/* FIXME: change to reading in AF from NPC_AF_CONST1/2
	 * MCAM_BANK_DEPTH(_EXT) * MCAM_BANKS
	 */
	if (roc_model_is_cn10k() || roc_model_is_cn98xx())
		return 16 * 1024; /* MCAM_BANKS = 4, BANK_DEPTH_EXT = 4096 */
	else
		return 4 * 1024; /* MCAM_BANKS = 4, BANK_DEPTH_EXT = 1024 */
}

const char *
roc_npc_profile_name_get(struct roc_npc *roc_npc)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);

	return (char *)npc->profile_name;
}

int
roc_npc_kex_capa_get(struct roc_nix *roc_nix, uint64_t *kex_capability)
{
	struct nix *nix = roc_nix_to_nix_priv(roc_nix);
	struct npc npc;
	int rc = 0;

	memset(&npc, 0, sizeof(npc));

	npc.mbox = (&nix->dev)->mbox;

	rc = npc_mcam_fetch_kex_cfg(&npc);
	if (rc)
		return rc;

	rc = npc_mcam_fetch_hw_cap(&npc, &npc.hash_extract_cap);
	if (rc)
		return rc;

	*kex_capability = npc_get_kex_capability(&npc);

	return 0;
}

int
roc_npc_init(struct roc_npc *roc_npc)
{
	uint8_t *mem = NULL, *nix_mem = NULL, *npc_mem = NULL;
	struct nix *nix = roc_nix_to_nix_priv(roc_npc->roc_nix);
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);
	uint32_t bmap_sz;
	int rc = 0, idx;
	size_t sz;

	PLT_STATIC_ASSERT(sizeof(struct npc) <= ROC_NPC_MEM_SZ);

	memset(npc, 0, sizeof(*npc));
	npc->mbox = (&nix->dev)->mbox;
	roc_npc->channel = nix->rx_chan_base;
	roc_npc->pf_func = (&nix->dev)->pf_func;
	npc->channel = roc_npc->channel;
	npc->pf_func = roc_npc->pf_func;
	npc->flow_max_priority = roc_npc->flow_max_priority;
	npc->switch_header_type = roc_npc->switch_header_type;
	npc->flow_prealloc_size = roc_npc->flow_prealloc_size;

	if (npc->mbox == NULL)
		return NPC_ERR_PARAM;

	rc = npc_mcam_fetch_kex_cfg(npc);
	if (rc)
		goto done;

	rc = npc_mcam_fetch_hw_cap(npc, &npc->hash_extract_cap);
	if (rc)
		goto done;

	roc_npc->kex_capability = npc_get_kex_capability(npc);
	roc_npc->rx_parse_nibble = npc->keyx_supp_nmask[NPC_MCAM_RX];

	npc->mcam_entries = npc_mcam_tot_entries() >> npc->keyw[NPC_MCAM_RX];
	nix->exact_match_ena = npc->exact_match_ena;

	/* Free, free_rev, live and live_rev entries */
	bmap_sz = plt_bitmap_get_memory_footprint(npc->mcam_entries);
	mem = plt_zmalloc(4 * bmap_sz * npc->flow_max_priority, 0);
	if (mem == NULL) {
		plt_err("Bmap alloc failed");
		rc = NPC_ERR_NO_MEM;
		return rc;
	}

	sz = npc->flow_max_priority * sizeof(struct npc_flow_list);
	npc->flow_list = plt_zmalloc(sz, 0);
	if (npc->flow_list == NULL) {
		plt_err("flow_list alloc failed");
		rc = NPC_ERR_NO_MEM;
		goto done;
	}

	sz = npc->flow_max_priority * sizeof(struct npc_prio_flow_list_head);
	npc->prio_flow_list = plt_zmalloc(sz, 0);
	if (npc->prio_flow_list == NULL) {
		plt_err("prio_flow_list alloc failed");
		rc = NPC_ERR_NO_MEM;
		goto done;
	}

	npc_mem = mem;

	TAILQ_INIT(&npc->ipsec_list);
	TAILQ_INIT(&npc->age_flow_list);
	for (idx = 0; idx < npc->flow_max_priority; idx++) {
		TAILQ_INIT(&npc->flow_list[idx]);
		TAILQ_INIT(&npc->prio_flow_list[idx]);
	}

	npc->rss_grps = NPC_RSS_GRPS;

	bmap_sz = plt_bitmap_get_memory_footprint(npc->rss_grps);
	nix_mem = plt_zmalloc(bmap_sz, 0);
	if (nix_mem == NULL) {
		plt_err("Bmap alloc failed");
		rc = NPC_ERR_NO_MEM;
		goto done;
	}

	npc->rss_grp_entries = plt_bitmap_init(npc->rss_grps, nix_mem, bmap_sz);

	if (!npc->rss_grp_entries) {
		plt_err("bitmap init failed");
		rc = NPC_ERR_NO_MEM;
		goto done;
	}

	/* Group 0 will be used for RSS,
	 * 1 -7 will be used for npc_flow RSS action
	 */
	plt_bitmap_set(npc->rss_grp_entries, 0);

	roc_npc->flow_age.age_flow_refcnt = 0;

	return rc;

done:
	if (npc->flow_list)
		plt_free(npc->flow_list);
	if (npc->prio_flow_list)
		plt_free(npc->prio_flow_list);
	if (npc_mem)
		plt_free(npc_mem);
	return rc;
}

int
roc_npc_fini(struct roc_npc *roc_npc)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);
	int rc;

	if (!roc_npc->flow_age.aged_flows_get_thread_exit)
		npc_aging_ctrl_thread_destroy(roc_npc);

	rc = npc_flow_free_all_resources(npc);
	if (rc) {
		plt_err("Error when deleting NPC MCAM entries, counters");
		return rc;
	}

	if (npc->flow_list) {
		plt_free(npc->flow_list);
		npc->flow_list = NULL;
	}

	if (npc->prio_flow_list) {
		plt_free(npc->prio_flow_list);
		npc->prio_flow_list = NULL;
	}

	return 0;
}

int
roc_npc_validate_portid_action(struct roc_npc *roc_npc_src,
			       struct roc_npc *roc_npc_dst)
{
	struct roc_nix *roc_nix_src = roc_npc_src->roc_nix;
	struct nix *nix_src = roc_nix_to_nix_priv(roc_nix_src);
	struct roc_nix *roc_nix_dst = roc_npc_dst->roc_nix;
	struct nix *nix_dst = roc_nix_to_nix_priv(roc_nix_dst);

	if (roc_nix_is_pf(roc_npc_dst->roc_nix)) {
		plt_err("Output port should be VF");
		return -EINVAL;
	}

	if (nix_dst->dev.vf >= nix_src->dev.maxvf) {
		plt_err("Invalid VF for output port");
		return -EINVAL;
	}

	if (nix_src->dev.pf != nix_dst->dev.pf) {
		plt_err("Output port should be VF of ingress PF");
		return -EINVAL;
	}
	return 0;
}

static int
npc_parse_spi_to_sa_action(struct roc_npc *roc_npc, const struct roc_npc_action *act,
			   struct roc_npc_flow *flow, uint8_t *has_spi_to_sa_action)
{
	const struct roc_npc_sec_action *sec_action;
	struct nix_spi_to_sa_add_req *req;
	struct nix_spi_to_sa_add_rsp *rsp;
	struct nix_inl_dev *inl_dev;
	struct idev_cfg *idev;
	union {
		uint64_t reg;
		union nix_rx_vtag_action_u act;
	} vtag_act;
	struct mbox *mbox;
	int rc;

	if (roc_npc->roc_nix->custom_sa_action == 0 || roc_model_is_cn9k() == 1 ||
	    act->conf == NULL || flow->is_validate)
		return 0;

	*has_spi_to_sa_action = true;
	sec_action = act->conf;

	vtag_act.reg = 0;
	vtag_act.act.sa_xor = sec_action->sa_xor;
	vtag_act.act.sa_hi = sec_action->sa_hi;
	vtag_act.act.sa_lo = sec_action->sa_lo;

	idev = idev_get_cfg();
	if (!idev)
		return -1;

	inl_dev = idev->nix_inl_dev;

	switch (sec_action->alg) {
	case ROC_NPC_SEC_ACTION_ALG0:
		break;
	case ROC_NPC_SEC_ACTION_ALG1:
		vtag_act.act.vtag1_valid = false;
		vtag_act.act.vtag1_lid = ROC_NPC_SEC_ACTION_ALG1;
		break;
	case ROC_NPC_SEC_ACTION_ALG2:
		vtag_act.act.vtag1_valid = false;
		vtag_act.act.vtag1_lid = ROC_NPC_SEC_ACTION_ALG2;
		break;
	case ROC_NPC_SEC_ACTION_ALG3:
		vtag_act.act.vtag1_valid = false;
		vtag_act.act.vtag1_lid = ROC_NPC_SEC_ACTION_ALG3;
		break;
	case ROC_NPC_SEC_ACTION_ALG4:
		vtag_act.act.vtag1_valid = false;
		vtag_act.act.vtag1_lid = 0;
		mbox = inl_dev->dev.mbox;
		req = mbox_alloc_msg_nix_spi_to_sa_add(mbox);
		if (req == NULL)
			return -ENOSPC;
		req->sa_index = sec_action->sa_index;
		req->spi_index = plt_be_to_cpu_32(flow->spi_to_sa_info.spi);
		req->match_id = flow->match_id;
		req->valid = true;
		rc = mbox_process_msg(mbox, (void *)&rsp);
		if (rc)
			return rc;
		flow->spi_to_sa_info.hash_index = rsp->hash_index;
		flow->spi_to_sa_info.way = rsp->way;
		flow->spi_to_sa_info.duplicate = rsp->is_duplicate;
		flow->spi_to_sa_info.has_action = true;
		break;
	default:
		return -1;
	}

	flow->vtag_action = vtag_act.reg;

	return 0;
}

static int
roc_npc_process_sample_action(struct roc_npc *roc_npc,
			      const struct roc_npc_action_sample *sample_action,
			      struct roc_npc_flow *flow)
{
	struct nix *nix = roc_nix_to_nix_priv(roc_npc->roc_nix);
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);

	flow->is_sampling_rule = true;

	switch (sample_action->action_type) {
	case ROC_NPC_ACTION_TYPE_PORT_ID:
		flow->mcast_pf_funcs[0] = sample_action->pf_func;
		flow->mcast_channels[0] = sample_action->channel;
		break;
	case ROC_NPC_ACTION_TYPE_PF:
		flow->mcast_pf_funcs[0] = roc_npc->pf_func;
		flow->mcast_channels[0] = npc->channel;
		break;
	case ROC_NPC_ACTION_TYPE_VF:
		if (sample_action->pf_func >= nix->dev.maxvf)
			return -EINVAL;
		flow->mcast_pf_funcs[0] =
			((roc_npc->pf_func & 0xfc00) | (sample_action->pf_func + 1));
		flow->mcast_channels[0] = npc->channel;
		break;
	default:
		return -EINVAL;
	}

	return 0;
}

static int
npc_parse_actions(struct roc_npc *roc_npc, const struct roc_npc_attr *attr,
		  const struct roc_npc_action actions[], struct roc_npc_flow *flow,
		  uint16_t dst_pf_func)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);
	const struct roc_npc_action *sec_action = NULL;
	const struct roc_npc_action_sample *act_sample;
	const struct roc_npc_action_mark *act_mark;
	const struct roc_npc_action_meter *act_mtr;
	const struct roc_npc_action_queue *act_q;
	const struct roc_npc_action_vf *vf_act;
	bool vlan_insert_action = false;
	uint8_t has_spi_to_sa_act = 0;
	int sel_act, req_act = 0;
	uint16_t pf_func, vf_id;
	struct roc_nix *roc_nix;
	int errcode = 0;
	int mark = 0;
	int rq = 0;
	int rc = 0;

	/* Initialize actions */
	flow->ctr_id = NPC_COUNTER_NONE;
	flow->mtr_id = ROC_NIX_MTR_ID_INVALID;
	pf_func = npc->pf_func;
	if (flow->has_rep)
		pf_func = flow->rep_pf_func;

	for (; actions->type != ROC_NPC_ACTION_TYPE_END; actions++) {
		switch (actions->type) {
		case ROC_NPC_ACTION_TYPE_VOID:
			break;
		case ROC_NPC_ACTION_TYPE_MARK:
			act_mark = (const struct roc_npc_action_mark *)
					   actions->conf;
			if (act_mark->id > (NPC_FLOW_FLAG_VAL - 2)) {
				plt_err("mark value must be < 0xfffe");
				goto err_exit;
			}
			mark = act_mark->id + 1;
			req_act |= ROC_NPC_ACTION_TYPE_MARK;
			npc->mark_actions += 1;
			flow->match_id = mark;
			break;

		case ROC_NPC_ACTION_TYPE_FLAG:
			mark = NPC_FLOW_FLAG_VAL;
			req_act |= ROC_NPC_ACTION_TYPE_FLAG;
			npc->mark_actions += 1;
			break;

		case ROC_NPC_ACTION_TYPE_COUNT:
			/* Indicates, need a counter */
			flow->use_ctr = 1;
			req_act |= ROC_NPC_ACTION_TYPE_COUNT;
			break;

		case ROC_NPC_ACTION_TYPE_DROP:
			req_act |= ROC_NPC_ACTION_TYPE_DROP;
			break;

		case ROC_NPC_ACTION_TYPE_PF:
			req_act |= ROC_NPC_ACTION_TYPE_PF;
			pf_func &= (0xfc00);
			break;

		case ROC_NPC_ACTION_TYPE_VF:
			vf_act = (const struct roc_npc_action_vf *)actions->conf;
			req_act |= ROC_NPC_ACTION_TYPE_VF;
			if (roc_model_is_cn20k())
				vf_id = vf_act->id & RVU_PFVF_FUNC_MASK_CN20K;
			else
				vf_id = vf_act->id & RVU_PFVF_FUNC_MASK;
			pf_func &= (0xfc00);
			pf_func = (pf_func | (vf_id + 1));
			break;

		case ROC_NPC_ACTION_TYPE_PORT_ID:
			pf_func = dst_pf_func;
			req_act |= ROC_NPC_ACTION_TYPE_VF;
			break;

		case ROC_NPC_ACTION_TYPE_QUEUE:
			act_q = (const struct roc_npc_action_queue *)actions->conf;
			rq = act_q->index & 0xFFFFF;
			req_act |= ROC_NPC_ACTION_TYPE_QUEUE;
			break;

		case ROC_NPC_ACTION_TYPE_RSS:
			req_act |= ROC_NPC_ACTION_TYPE_RSS;
			break;

		case ROC_NPC_ACTION_TYPE_SEC:
			/* Assumes user has already configured security
			 * session for this flow. Associated conf is
			 * opaque. When security is implemented,
			 * we need to verify that for specified security
			 * session:
			 *  action_type ==
			 *    NPC_SECURITY_ACTION_TYPE_INLINE_PROTOCOL &&
			 *  session_protocol ==
			 *    NPC_SECURITY_PROTOCOL_IPSEC
			 */
			req_act |= ROC_NPC_ACTION_TYPE_SEC;
			rq = 0;
			roc_nix = roc_npc->roc_nix;

			/* Special processing when with inline device */
			if (roc_nix_inb_is_with_inl_dev(roc_nix) &&
			    roc_nix_inl_dev_is_probed()) {
				struct roc_nix_rq *inl_rq;

				inl_rq = roc_nix_inl_dev_rq(roc_nix);
				if (!inl_rq) {
					errcode = NPC_ERR_INTERNAL;
					goto err_exit;
				}
				rq = inl_rq->qid;
				pf_func = nix_inl_dev_pffunc_get();
			}

			if (roc_nix_inl_dev_is_probed())
				flow->is_inline_dev = 1;
			sec_action = actions;
			break;
		case ROC_NPC_ACTION_TYPE_VLAN_STRIP:
			req_act |= ROC_NPC_ACTION_TYPE_VLAN_STRIP;
			break;
		case ROC_NPC_ACTION_TYPE_VLAN_INSERT:
			req_act |= ROC_NPC_ACTION_TYPE_VLAN_INSERT;
			break;
		case ROC_NPC_ACTION_TYPE_VLAN_ETHTYPE_INSERT:
			req_act |= ROC_NPC_ACTION_TYPE_VLAN_ETHTYPE_INSERT;
			break;
		case ROC_NPC_ACTION_TYPE_VLAN_PCP_INSERT:
			req_act |= ROC_NPC_ACTION_TYPE_VLAN_PCP_INSERT;
			break;
		case ROC_NPC_ACTION_TYPE_METER:
			act_mtr = (const struct roc_npc_action_meter *)
					  actions->conf;
			flow->mtr_id = act_mtr->mtr_id;
			req_act |= ROC_NPC_ACTION_TYPE_METER;
			break;
		case ROC_NPC_ACTION_TYPE_AGE:
			if (flow->is_validate == true)
				break;
			plt_seqcount_init(&roc_npc->flow_age.seq_cnt);
			errcode = npc_aging_ctrl_thread_create(roc_npc,
							       actions->conf,
							       flow);
			if (errcode != 0)
				goto err_exit;
			req_act |= ROC_NPC_ACTION_TYPE_AGE;
			break;
		case ROC_NPC_ACTION_TYPE_SAMPLE:
			req_act |= ROC_NPC_ACTION_TYPE_SAMPLE;
			act_sample = actions->conf;
			errcode = roc_npc_process_sample_action(roc_npc, act_sample, flow);
			if (errcode)
				goto err_exit;
			break;
		default:
			errcode = NPC_ERR_ACTION_NOTSUP;
			goto err_exit;
		}
	}

	if (sec_action) {
		rc = npc_parse_spi_to_sa_action(roc_npc, sec_action, flow, &has_spi_to_sa_act);
		if (rc) {
			errcode = NPC_ERR_ACTION_NOTSUP;
			goto err_exit;
		}
	}

	if (req_act & (ROC_NPC_ACTION_TYPE_VLAN_INSERT | ROC_NPC_ACTION_TYPE_VLAN_ETHTYPE_INSERT |
		       ROC_NPC_ACTION_TYPE_VLAN_PCP_INSERT))
		vlan_insert_action = true;

	if ((req_act & (ROC_NPC_ACTION_TYPE_VLAN_INSERT | ROC_NPC_ACTION_TYPE_VLAN_ETHTYPE_INSERT |
			ROC_NPC_ACTION_TYPE_VLAN_PCP_INSERT)) ==
	    ROC_NPC_ACTION_TYPE_VLAN_PCP_INSERT) {
		plt_err("PCP insert action can't be supported alone");
		errcode = NPC_ERR_ACTION_NOTSUP;
		goto err_exit;
	}

	if (has_spi_to_sa_act && (vlan_insert_action ||
			     (req_act & ROC_NPC_ACTION_TYPE_VLAN_STRIP))) {
		plt_err("Both MSNS and VLAN insert/strip action can't be supported"
			" together");
		errcode = NPC_ERR_ACTION_NOTSUP;
		goto err_exit;
	}

	/* Both STRIP and INSERT actions are not supported */
	if (vlan_insert_action && (req_act & ROC_NPC_ACTION_TYPE_VLAN_STRIP)) {
		errcode = NPC_ERR_ACTION_NOTSUP;
		goto err_exit;
	}

	if (req_act & ROC_NPC_ACTION_TYPE_SAMPLE) {
		/* One entry for the mce list PF and channel comes from the sample subaction.
		 * Another one is the action target of the flow rule getting created.
		 */
		flow->mcast_pf_funcs[1] = pf_func;
		flow->mcast_channels[1] = npc->channel;
		if (req_act & (ROC_NPC_ACTION_TYPE_DROP | ROC_NPC_ACTION_TYPE_SEC |
			       ROC_NPC_ACTION_TYPE_RSS)) {
			plt_err("Drop/RSS/SEC not supported with action type sample");
			return -EINVAL;
		}
		if (flow->mcast_pf_funcs[0] == flow->mcast_pf_funcs[1]) {
			plt_err("Sample destination and target cannot be same");
			return -EINVAL;
		}
		if ((attr->egress) && (flow->mcast_channels[0] == flow->mcast_channels[1])) {
			plt_err("Mirroring within PF and VF not allowed");
			return -EINVAL;
		}
	}

	/* Check if actions specified are compatible */
	if (attr->egress) {
		if (req_act & ROC_NPC_ACTION_TYPE_VLAN_STRIP) {
			plt_err("VLAN pop action is not supported on Egress");
			errcode = NPC_ERR_ACTION_NOTSUP;
			goto err_exit;
		}

		if (req_act &
		    ~(ROC_NPC_ACTION_TYPE_VLAN_INSERT | ROC_NPC_ACTION_TYPE_VLAN_ETHTYPE_INSERT |
		      ROC_NPC_ACTION_TYPE_VLAN_PCP_INSERT | ROC_NPC_ACTION_TYPE_DROP |
		      ROC_NPC_ACTION_TYPE_COUNT | ROC_NPC_ACTION_TYPE_SAMPLE)) {
			plt_err("Only VLAN insert, drop, count, sample supported on Egress");
			errcode = NPC_ERR_ACTION_NOTSUP;
			goto err_exit;
		}

		if (vlan_insert_action &&
		    (req_act & ROC_NPC_ACTION_TYPE_DROP)) {
			plt_err("Both VLAN insert and drop actions cannot be supported");
			errcode = NPC_ERR_ACTION_NOTSUP;
			goto err_exit;
		}

		if (req_act & ROC_NPC_ACTION_TYPE_DROP) {
			flow->npc_action = NIX_TX_ACTIONOP_DROP;
		} else if ((req_act & ROC_NPC_ACTION_TYPE_COUNT) || vlan_insert_action) {
			flow->npc_action = NIX_TX_ACTIONOP_UCAST_DEFAULT;
			if (flow->rep_act_rep) {
				flow->npc_action = NIX_TX_ACTIONOP_UCAST_CHAN;
				flow->npc_action |= (uint64_t)0x3f << 12;
			}
		} else {
			plt_err("Unsupported action for egress");
			errcode = NPC_ERR_ACTION_NOTSUP;
			goto err_exit;
		}

		if (req_act & ROC_NPC_ACTION_TYPE_SAMPLE) {
			flow->mcast_pf_funcs[1] = pf_func;
			flow->mcast_channels[1] = npc->channel;
		}

		/* PF func who is sending the packet */
		flow->tx_pf_func = pf_func;
		goto done;
	} else {
		if (vlan_insert_action) {
			errcode = NPC_ERR_ACTION_NOTSUP;
			goto err_exit;
		}
	}

	/* We have already verified the attr, this is ingress.
	 * - Exactly one terminating action is supported
	 * - Exactly one of MARK or FLAG is supported
	 * - If terminating action is DROP, only count is valid.
	 */
	sel_act = req_act & NPC_ACTION_TERM;
	if ((sel_act & (sel_act - 1)) != 0) {
		errcode = NPC_ERR_ACTION_NOTSUP;
		goto err_exit;
	}

	if (req_act & ROC_NPC_ACTION_TYPE_DROP) {
		sel_act = req_act & ~ROC_NPC_ACTION_TYPE_COUNT;
		if ((sel_act & (sel_act - 1)) != 0) {
			errcode = NPC_ERR_ACTION_NOTSUP;
			goto err_exit;
		}
	}

	if ((req_act & (ROC_NPC_ACTION_TYPE_FLAG | ROC_NPC_ACTION_TYPE_MARK)) ==
	    (ROC_NPC_ACTION_TYPE_FLAG | ROC_NPC_ACTION_TYPE_MARK)) {
		errcode = NPC_ERR_ACTION_NOTSUP;
		goto err_exit;
	}

	if (req_act & ROC_NPC_ACTION_TYPE_VLAN_STRIP)
		npc->vtag_strip_actions++;

	/* Set NIX_RX_ACTIONOP */
	if (req_act == ROC_NPC_ACTION_TYPE_VLAN_STRIP) {
		/* Only VLAN action is provided */
		flow->npc_action = NIX_RX_ACTIONOP_UCAST;
	} else if (req_act & (ROC_NPC_ACTION_TYPE_PF | ROC_NPC_ACTION_TYPE_VF)) {
		/* Check if any other action is set */
		if ((req_act == ROC_NPC_ACTION_TYPE_PF) || (req_act == ROC_NPC_ACTION_TYPE_VF)) {
			flow->npc_action = NIX_RX_ACTIONOP_DEFAULT;
		} else {
			flow->npc_action = NIX_RX_ACTIONOP_UCAST;
			if (req_act & ROC_NPC_ACTION_TYPE_QUEUE)
				flow->recv_queue = rq;
		}
	} else if (req_act & ROC_NPC_ACTION_TYPE_DROP) {
		flow->npc_action = NIX_RX_ACTIONOP_DROP;
	} else if (req_act & ROC_NPC_ACTION_TYPE_QUEUE) {
		flow->npc_action = NIX_RX_ACTIONOP_UCAST;
		flow->recv_queue = rq;
	} else if (req_act & ROC_NPC_ACTION_TYPE_RSS) {
		flow->npc_action = NIX_RX_ACTIONOP_UCAST;
	} else if (req_act & ROC_NPC_ACTION_TYPE_SEC) {
		flow->npc_action = NIX_RX_ACTIONOP_UCAST_IPSEC;
		flow->npc_action |= (uint64_t)rq << 20;
	} else if (req_act & (ROC_NPC_ACTION_TYPE_FLAG | ROC_NPC_ACTION_TYPE_MARK)) {
		flow->npc_action = NIX_RX_ACTIONOP_UCAST;
	} else if (req_act & ROC_NPC_ACTION_TYPE_COUNT) {
		/* Keep ROC_NPC_ACTION_TYPE_COUNT_ACT always at the end
		 * This is default action, when user specify only
		 * COUNT ACTION
		 */
		flow->npc_action = NIX_RX_ACTIONOP_UCAST;
	} else {
		/* Should never reach here */
		errcode = NPC_ERR_ACTION_NOTSUP;
		goto err_exit;
	}

	if (req_act & ROC_NPC_ACTION_TYPE_SAMPLE)
		flow->npc_action = NIX_RX_ACTIONOP_MCAST;

	if (mark)
		flow->npc_action |= (uint64_t)mark << 40;

	/* Ideally AF must ensure that correct pf_func is set */
	flow->npc_action |= (uint64_t)pf_func << 4;

done:
	return 0;

err_exit:
	return errcode;
}

typedef int (*npc_parse_stage_func_t)(struct npc_parse_state *pst);

static int
npc_parse_pattern(struct npc *npc, const struct roc_npc_item_info pattern[],
		  struct roc_npc_flow *flow, struct npc_parse_state *pst)
{
	npc_parse_stage_func_t parse_stage_funcs[] = {
		npc_parse_meta_items, npc_parse_port_representor_id,
		npc_parse_mark_item,  npc_parse_pre_l2,
		npc_parse_cpt_hdr,    npc_parse_higig2_hdr,
		npc_parse_tx_queue,   npc_parse_la,
		npc_parse_lb,	      npc_parse_lc,
		npc_parse_ld,	      npc_parse_le,
		npc_parse_lf,	      npc_parse_lg,
		npc_parse_lh,
	};
	uint8_t layer = 0;
	int key_offset;
	int rc;

	if (pattern == NULL)
		return NPC_ERR_PARAM;

	pst->npc = npc;
	pst->flow = flow;
	pst->nix_intf = flow->nix_intf;

	/* Use integral byte offset */
	key_offset = pst->npc->keyx_len[flow->nix_intf];
	key_offset = (key_offset + 7) / 8;

	/* Location where LDATA would begin */
	pst->mcam_data = (uint8_t *)flow->mcam_data;
	pst->mcam_mask = (uint8_t *)flow->mcam_mask;

	while (pattern->type != ROC_NPC_ITEM_TYPE_END &&
	       layer < PLT_DIM(parse_stage_funcs)) {
		/* Skip place-holders */
		pattern = npc_parse_skip_void_and_any_items(pattern);

		pst->pattern = pattern;
		rc = parse_stage_funcs[layer](pst);
		if (rc != 0)
			return rc;

		layer++;

		/*
		 * Parse stage function sets pst->pattern to
		 * 1 past the last item it consumed.
		 */
		pattern = pst->pattern;

		if (pst->terminate)
			break;
	}

	/* Skip trailing place-holders */
	pattern = npc_parse_skip_void_and_any_items(pattern);

	/* Are there more items than what we can handle? */
	if (pattern->type != ROC_NPC_ITEM_TYPE_END)
		return NPC_ERR_PATTERN_NOTSUP;

	return 0;
}

static int
npc_parse_attr(struct npc *npc, const struct roc_npc_attr *attr,
	       struct roc_npc_flow *flow)
{
	if (attr == NULL)
		return NPC_ERR_PARAM;
	else if (attr->priority >= npc->flow_max_priority)
		return NPC_ERR_PARAM;
	else if ((!attr->egress && !attr->ingress) ||
		 (attr->egress && attr->ingress))
		return NPC_ERR_PARAM;

	if (attr->ingress)
		flow->nix_intf = ROC_NPC_INTF_RX;
	else
		flow->nix_intf = ROC_NPC_INTF_TX;

	flow->priority = attr->priority;
	return 0;
}

static int
npc_parse_rule(struct roc_npc *roc_npc, const struct roc_npc_attr *attr,
	       const struct roc_npc_item_info pattern[], const struct roc_npc_action actions[],
	       struct roc_npc_flow *flow, struct npc_parse_state *pst)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);
	struct roc_nix *roc_nix = roc_npc->roc_nix;
	struct nix *nix = roc_nix_to_nix_priv(roc_nix);
	int err;

	pst->nb_tx_queues = nix->nb_tx_queues;

	/* Check attr */
	err = npc_parse_attr(npc, attr, flow);
	if (err)
		return err;

	/* Check pattern */
	err = npc_parse_pattern(npc, pattern, flow, pst);
	if (err)
		return err;

	/* Check action */
	err = npc_parse_actions(roc_npc, attr, actions, flow, pst->dst_pf_func);
	if (err)
		return err;
	return 0;
}

int
roc_npc_flow_parse(struct roc_npc *roc_npc, const struct roc_npc_attr *attr,
		   const struct roc_npc_item_info pattern[],
		   const struct roc_npc_action actions[],
		   struct roc_npc_flow *flow)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);
	struct npc_parse_state parse_state = {0};
	int rc;

	rc = npc_parse_rule(roc_npc, attr, pattern, actions, flow, &parse_state);
	if (rc)
		return rc;

	parse_state.is_vf = !roc_nix_is_pf(roc_npc->roc_nix);

	return npc_program_mcam(npc, &parse_state, 0);
}

int
npc_rss_free_grp_get(struct npc *npc, uint32_t *pos)
{
	struct plt_bitmap *bmap = npc->rss_grp_entries;

	for (*pos = 0; *pos < ROC_NIX_RSS_GRPS; ++*pos) {
		if (!plt_bitmap_get(bmap, *pos))
			break;
	}
	return *pos < ROC_NIX_RSS_GRPS ? 0 : -1;
}

int
npc_rss_action_configure(struct roc_npc *roc_npc, const struct roc_npc_action_rss *rss,
			 uint8_t *alg_idx, uint32_t *rss_grp, uint32_t mcam_id,
			 uint16_t rss_repte_pf_func)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);
	struct roc_nix *roc_nix = roc_npc->roc_nix;
	struct nix *nix = roc_nix_to_nix_priv(roc_nix);
	uint32_t flowkey_cfg, rss_grp_idx, i, rem;
	uint8_t key[ROC_NIX_RSS_KEY_LEN];
	const uint8_t *key_ptr;
	uint8_t flowkey_algx;
	uint32_t key_len;
	uint16_t *reta;
	int rc;

	roc_nix_rss_key_get(roc_nix, key);
	if (rss->key == NULL) {
		key_ptr = key;
	} else {
		key_len = rss->key_len;
		if (key_len > ROC_NIX_RSS_KEY_LEN)
			key_len = ROC_NIX_RSS_KEY_LEN;

		for (i = 0; i < key_len; i++) {
			if (key[i] != rss->key[i]) {
				plt_err("RSS key config not supported");
				plt_err("New Key:");
				for (i = 0; i < key_len; i++)
					plt_dump_no_nl("0x%.2x ", rss->key[i]);
				plt_dump_no_nl("\n");
				plt_err("Configured Key:");
				for (i = 0; i < ROC_NIX_RSS_KEY_LEN; i++)
					plt_dump_no_nl("0x%.2x ", key[i]);
				plt_dump_no_nl("\n");
				return -ENOTSUP;
			}
		}
		key_ptr = rss->key;
	}

	rc = npc_rss_free_grp_get(npc, &rss_grp_idx);
	/* RSS group :0 is not usable for flow rss action */
	if (rc < 0 || rss_grp_idx == 0)
		return -ENOSPC;

	for (i = 0; (i < rss->queue_num) && !rss_repte_pf_func; i++) {
		if (rss->queue[i] >= nix->nb_rx_queues) {
			plt_err("queue id > max number of queues");
			return -EINVAL;
		}
	}

	*rss_grp = rss_grp_idx;

	roc_nix_rss_key_set(roc_nix, key_ptr);

	/* If queue count passed in the rss action is less than
	 * HW configured reta size, replicate rss action reta
	 * across HW reta table.
	 */
	reta = nix->reta[rss_grp_idx];

	if (rss->queue_num > nix->reta_sz) {
		plt_err("too many queues for RSS context");
		return -ENOTSUP;
	}

	for (i = 0; i < (nix->reta_sz / rss->queue_num); i++)
		memcpy(reta + i * rss->queue_num, rss->queue,
		       sizeof(uint16_t) * rss->queue_num);

	rem = nix->reta_sz % rss->queue_num;
	if (rem)
		memcpy(&reta[i * rss->queue_num], rss->queue, rem * sizeof(uint16_t));

	rc = nix_rss_reta_pffunc_set(roc_nix, *rss_grp, reta, rss_repte_pf_func);
	if (rc) {
		plt_err("Failed to init rss table rc = %d", rc);
		return rc;
	}

	flowkey_cfg = roc_npc->flowkey_cfg_state;

	rc = nix_rss_flowkey_pffunc_set(roc_nix, &flowkey_algx, flowkey_cfg, *rss_grp, mcam_id,
					rss_repte_pf_func);
	if (rc) {
		plt_err("Failed to set rss hash function rc = %d", rc);
		return rc;
	}

	*alg_idx = flowkey_algx;

	plt_bitmap_set(npc->rss_grp_entries, *rss_grp);

	return 0;
}

int
npc_rss_action_program(struct roc_npc *roc_npc,
		       const struct roc_npc_action actions[],
		       struct roc_npc_flow *flow)
{
	const struct roc_npc_action_rss *rss;
	struct roc_npc *npc = roc_npc;
	uint32_t rss_grp;
	uint8_t alg_idx;
	int rc;

	if (flow->has_rep) {
		npc = roc_npc->rep_npc;
		npc->flowkey_cfg_state = roc_npc->flowkey_cfg_state;
	}

	for (; actions->type != ROC_NPC_ACTION_TYPE_END; actions++) {
		if (actions->type == ROC_NPC_ACTION_TYPE_RSS) {
			rss = (const struct roc_npc_action_rss *)actions->conf;
			rc = npc_rss_action_configure(npc, rss, &alg_idx, &rss_grp, flow->mcam_id,
						      actions->rss_repte_pf_func);
			if (rc)
				return rc;

			flow->npc_action &= (~(0xfULL));
			flow->npc_action |= NIX_RX_ACTIONOP_RSS;
			flow->npc_action |=
				((uint64_t)(alg_idx & NPC_RSS_ACT_ALG_MASK)
				 << NPC_RSS_ACT_ALG_OFFSET) |
				((uint64_t)(rss_grp & NPC_RSS_ACT_GRP_MASK)
				 << NPC_RSS_ACT_GRP_OFFSET);
			break;
		}
	}
	return 0;
}

static int
npc_vtag_cfg_delete(struct roc_npc *roc_npc, struct roc_npc_flow *flow)
{
	struct roc_nix *roc_nix = roc_npc->roc_nix;
	struct nix_vtag_config *vtag_cfg;
	struct nix_vtag_config_rsp *rsp;
	struct mbox *mbox, *ombox;
	struct nix *nix;
	int rc = 0;

	union {
		uint64_t reg;
		struct nix_tx_vtag_action_s act;
	} tx_vtag_action;

	nix = roc_nix_to_nix_priv(roc_nix);
	ombox = (&nix->dev)->mbox;
	if (flow->has_rep)
		ombox = flow->rep_mbox;
	mbox = mbox_get(ombox);

	tx_vtag_action.reg = flow->vtag_action;
	vtag_cfg = mbox_alloc_msg_nix_vtag_cfg(mbox);

	if (vtag_cfg == NULL) {
		rc = -ENOSPC;
		goto exit;
	}

	vtag_cfg->cfg_type = VTAG_TX;
	vtag_cfg->vtag_size = NIX_VTAGSIZE_T4;
	vtag_cfg->tx.vtag0_idx = tx_vtag_action.act.vtag0_def;
	vtag_cfg->tx.free_vtag0 = true;

	if (flow->vtag_insert_count == 2) {
		vtag_cfg->tx.vtag1_idx = tx_vtag_action.act.vtag1_def;
		vtag_cfg->tx.free_vtag1 = true;
	}

	rc = mbox_process_msg(mbox, (void *)&rsp);
	if (rc)
		goto exit;

	rc =  0;
exit:
	mbox_put(mbox);
	return rc;
}

static int
npc_vtag_insert_action_parse(const struct roc_npc_action actions[],
			     struct roc_npc_flow *flow,
			     struct npc_action_vtag_info *vlan_info,
			     int *parsed_cnt)
{
	bool vlan_id_found = false, ethtype_found = false, pcp_found = false;
	int count = 0;

	*parsed_cnt = 0;

	/* This function parses parameters of one VLAN. When a parameter is
	 * found repeated, it treats it as the end of first VLAN's parameters
	 * and returns. The caller calls again to parse the parameters of the
	 * second VLAN.
	 */

	for (; count < NPC_ACTION_MAX_VLAN_PARAMS; count++, actions++) {
		if (actions->type == ROC_NPC_ACTION_TYPE_VLAN_INSERT) {
			if (vlan_id_found)
				return 0;

			const struct roc_npc_action_of_set_vlan_vid *vtag =
				(const struct roc_npc_action_of_set_vlan_vid *)
					actions->conf;

			vlan_info->vlan_id = plt_be_to_cpu_16(vtag->vlan_vid);

			if (vlan_info->vlan_id > 0xfff) {
				plt_err("Invalid vlan_id for set vlan action");
				return -EINVAL;
			}

			flow->vtag_insert_enabled = true;
			(*parsed_cnt)++;
			vlan_id_found = true;
		} else if (actions->type ==
			   ROC_NPC_ACTION_TYPE_VLAN_ETHTYPE_INSERT) {
			if (ethtype_found)
				return 0;

			const struct roc_npc_action_of_push_vlan *ethtype =
				(const struct roc_npc_action_of_push_vlan *)
					actions->conf;
			vlan_info->vlan_ethtype =
				plt_be_to_cpu_16(ethtype->ethertype);
			if (vlan_info->vlan_ethtype != ROC_ETHER_TYPE_VLAN &&
			    vlan_info->vlan_ethtype != ROC_ETHER_TYPE_QINQ) {
				plt_err("Invalid ethtype specified for push"
					" vlan action");
				return -EINVAL;
			}
			flow->vtag_insert_enabled = true;
			(*parsed_cnt)++;
			ethtype_found = true;
		} else if (actions->type ==
			   ROC_NPC_ACTION_TYPE_VLAN_PCP_INSERT) {
			if (pcp_found)
				return 0;
			const struct roc_npc_action_of_set_vlan_pcp *pcp =
				(const struct roc_npc_action_of_set_vlan_pcp *)
					actions->conf;
			vlan_info->vlan_pcp = pcp->vlan_pcp;
			if (vlan_info->vlan_pcp > 0x7) {
				plt_err("Invalid PCP value for pcp action");
				return -EINVAL;
			}
			flow->vtag_insert_enabled = true;
			(*parsed_cnt)++;
			pcp_found = true;
		} else {
			return 0;
		}
	}

	return 0;
}

static int
npc_vtag_insert_action_configure(struct mbox *mbox, struct roc_npc_flow *flow,
				 struct npc_action_vtag_info *vlan_info)
{
	struct nix_vtag_config *vtag_cfg;
	struct nix_vtag_config_rsp *rsp;
	int rc = 0;

	union {
		uint64_t reg;
		struct nix_tx_vtag_action_s act;
	} tx_vtag_action;

	vtag_cfg = mbox_alloc_msg_nix_vtag_cfg(mbox_get(mbox));

	if (vtag_cfg == NULL) {
		rc = -ENOSPC;
		goto exit;
	}

	vtag_cfg->cfg_type = VTAG_TX;
	vtag_cfg->vtag_size = NIX_VTAGSIZE_T4;
	vtag_cfg->tx.vtag0 =
		(((uint32_t)vlan_info[0].vlan_ethtype << 16) |
		 (vlan_info[0].vlan_pcp << 13) | vlan_info[0].vlan_id);

	vtag_cfg->tx.cfg_vtag0 = 1;

	if (flow->vtag_insert_count == 2) {
		vtag_cfg->tx.vtag1 =
			(((uint32_t)vlan_info[1].vlan_ethtype << 16) |
			 (vlan_info[1].vlan_pcp << 13) | vlan_info[1].vlan_id);

		vtag_cfg->tx.cfg_vtag1 = 1;
	}

	rc = mbox_process_msg(mbox, (void *)&rsp);
	if (rc)
		goto exit;

	if (rsp->vtag0_idx < 0 ||
	    ((flow->vtag_insert_count == 2) && (rsp->vtag1_idx < 0))) {
		plt_err("Failed to config TX VTAG action");
		rc =  -EINVAL;
		goto exit;
	}

	tx_vtag_action.reg = 0;
	tx_vtag_action.act.vtag0_def = rsp->vtag0_idx;
	tx_vtag_action.act.vtag0_lid = NPC_LID_LA;
	tx_vtag_action.act.vtag0_op = NIX_TX_VTAGOP_INSERT;
	tx_vtag_action.act.vtag0_relptr = NIX_TX_VTAGACTION_VTAG0_RELPTR;

	if (flow->vtag_insert_count == 2) {
		tx_vtag_action.act.vtag1_def = rsp->vtag1_idx;
		tx_vtag_action.act.vtag1_lid = NPC_LID_LA;
		tx_vtag_action.act.vtag1_op = NIX_TX_VTAGOP_INSERT;
		/* NIX_TX_VTAG_ACTION_S
		 *  If Vtag 0 is inserted, hardware adjusts the Vtag 1 byte
		 *  offset accordingly. Thus, if the two offsets are equal in
		 *  the structure, hardware inserts Vtag 1 immediately after
		 *  Vtag 0 in the packet.
		 */
		tx_vtag_action.act.vtag1_relptr =
			NIX_TX_VTAGACTION_VTAG0_RELPTR;
	}

	flow->vtag_action = tx_vtag_action.reg;

	rc = 0;
exit:
	mbox_put(mbox);
	return rc;
}

static int
npc_vtag_strip_action_configure(struct mbox *mbox,
				const struct roc_npc_action actions[],
				struct roc_npc_flow *flow, int *strip_cnt)
{
	struct nix_vtag_config *vtag_cfg;
	uint64_t rx_vtag_action = 0;
	int count = 0, rc = 0;

	*strip_cnt = 0;

	for (; count < NPC_ACTION_MAX_VLANS_STRIPPED; count++, actions++) {
		if (actions->type == ROC_NPC_ACTION_TYPE_VLAN_STRIP)
			(*strip_cnt)++;
	}

	vtag_cfg = mbox_alloc_msg_nix_vtag_cfg(mbox_get(mbox));

	if (vtag_cfg == NULL) {
		rc = -ENOSPC;
		goto exit;
	}

	vtag_cfg->cfg_type = VTAG_RX;
	vtag_cfg->rx.strip_vtag = 1;
	/* Always capture */
	vtag_cfg->rx.capture_vtag = 1;
	vtag_cfg->vtag_size = NIX_VTAGSIZE_T4;
	vtag_cfg->rx.vtag_type = 0;

	rc = mbox_process(mbox);
	if (rc)
		goto exit;

	rx_vtag_action |= (NIX_RX_VTAGACTION_VTAG_VALID << 15);
	rx_vtag_action |= ((uint64_t)NPC_LID_LB << 8);
	rx_vtag_action |= ((uint64_t)NIX_RX_VTAG_TYPE6 << 12);
	rx_vtag_action |= NIX_RX_VTAGACTION_VTAG0_RELPTR;

	if (*strip_cnt == 2) {
		rx_vtag_action |= (NIX_RX_VTAGACTION_VTAG_VALID << 47);
		rx_vtag_action |= ((uint64_t)NPC_LID_LB << 40);
		rx_vtag_action |= NIX_RX_VTAGACTION_VTAG0_RELPTR << 32;
	}
	flow->vtag_action = rx_vtag_action;

	rc = 0;
exit:
	mbox_put(mbox);
	return rc;
}

static int
npc_vtag_action_program(struct roc_npc *roc_npc,
			const struct roc_npc_action actions[],
			struct roc_npc_flow *flow)
{
	bool vlan_strip_parsed = false, vlan_insert_parsed = false;
	const struct roc_npc_action *insert_actions;
	struct roc_nix *roc_nix = roc_npc->roc_nix;
	struct npc_action_vtag_info vlan_info[2];
	int parsed_cnt = 0, strip_cnt = 0;
	int tot_vlan_params = 0;
	struct mbox *mbox;
	struct nix *nix;
	int i, rc;

	nix = roc_nix_to_nix_priv(roc_nix);
	mbox = (&nix->dev)->mbox;
	if (flow->has_rep)
		mbox = flow->rep_mbox;

	memset(vlan_info, 0, sizeof(vlan_info));

	flow->vtag_insert_enabled = false;

	for (; actions->type != ROC_NPC_ACTION_TYPE_END; actions++) {
		if (actions->type == ROC_NPC_ACTION_TYPE_VLAN_STRIP) {
			if (vlan_strip_parsed) {
				plt_err("Incorrect VLAN strip actions");
				return -EINVAL;
			}
			rc = npc_vtag_strip_action_configure(mbox, actions,
							     flow, &strip_cnt);
			if (rc)
				return rc;

			plt_npc_dbg("VLAN strip action, strip_cnt %d", strip_cnt);
			if (strip_cnt == 2)
				actions++;

			vlan_strip_parsed = true;
		} else if (actions->type == ROC_NPC_ACTION_TYPE_VLAN_INSERT ||
			   actions->type ==
				   ROC_NPC_ACTION_TYPE_VLAN_ETHTYPE_INSERT ||
			   actions->type ==
				   ROC_NPC_ACTION_TYPE_VLAN_PCP_INSERT) {
			if (vlan_insert_parsed) {
				plt_err("Incorrect VLAN insert actions");
				return -EINVAL;
			}

			insert_actions = actions;

			for (i = 0; i < 2; i++) {
				rc = npc_vtag_insert_action_parse(
					insert_actions, flow, &vlan_info[i],
					&parsed_cnt);

				if (rc)
					return rc;

				if (parsed_cnt) {
					insert_actions += parsed_cnt;
					tot_vlan_params += parsed_cnt;
					flow->vtag_insert_count++;
				}
			}
			actions += tot_vlan_params - 1;
			vlan_insert_parsed = true;
		}
	}

	if (flow->vtag_insert_enabled) {
		rc = npc_vtag_insert_action_configure(mbox, flow, vlan_info);

		if (rc)
			return rc;
	}
	return 0;
}

static int
npc_inline_dev_ipsec_action_free(struct npc *npc, struct roc_npc_flow *flow)
{
	struct nix_inl_dev *inl_dev;
	struct idev_cfg *idev;
	int rc;

	PLT_SET_USED(npc);

	idev = idev_get_cfg();
	if (!idev)
		return 1;

	inl_dev = idev->nix_inl_dev;

	if (flow->nix_intf == NIX_INTF_RX && inl_dev && inl_dev->ipsec_index &&
	    ((flow->npc_action & 0xF) == NIX_RX_ACTIONOP_UCAST_IPSEC)) {
		inl_dev->curr_ipsec_idx--;
		inl_dev->ipsec_index[inl_dev->curr_ipsec_idx] = flow->mcam_id;
		flow->enable = 0;
		if (flow->use_ctr) {
			rc = npc_mcam_clear_counter(inl_dev->dev.mbox, flow->ctr_id);
			if (rc)
				return rc;

			rc = npc_mcam_free_counter(inl_dev->dev.mbox, flow->ctr_id);
			if (rc)
				return rc;
		}
		return npc_mcam_write_entry(inl_dev->dev.mbox, flow);
	}

	return 1;
}

void
roc_npc_sdp_channel_get(struct roc_npc *roc_npc, uint16_t *chan_base, uint16_t *chan_mask)
{
	struct roc_nix *roc_nix = roc_npc->roc_nix;
	struct nix *nix = roc_nix_to_nix_priv(roc_nix);
	uint16_t num_chan, range, num_bits = 0;
	uint16_t mask = 0;

	*chan_base = nix->rx_chan_base;
	num_chan = nix->rx_chan_cnt - 1;
	if (num_chan) {
		range = *chan_base ^ (*chan_base + num_chan);
		num_bits = (sizeof(uint32_t) * 8) - plt_clz32(range) - 1;
		/* Set mask for (15 - numbits) MSB bits */
		*chan_mask = (uint16_t)~GENMASK(num_bits, 0);
		*chan_mask &= 0xFFF;
	} else {
		*chan_mask = (uint16_t)GENMASK(11, 0);
	}

	mask = (uint16_t)GENMASK(num_bits, 0);
	if (mask > num_chan + 1)
		plt_warn(
			"npc: SDP channel base:%x, channel count:%x. channel mask:%x covers more than channel count",
			*chan_base, nix->rx_chan_cnt, *chan_mask);
}

struct roc_npc_flow *
roc_npc_flow_create(struct roc_npc *roc_npc, const struct roc_npc_attr *attr,
		    const struct roc_npc_item_info pattern[], const struct roc_npc_action actions[],
		    uint16_t dst_pf_func, int *errcode)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);
	uint16_t sdp_chan_base = 0, sdp_chan_mask = 0;
	struct roc_npc_flow *flow, *flow_iter;
	struct npc_parse_state parse_state;
	struct npc_flow_list *list;
	int rc;

	npc->channel = roc_npc->channel;
	npc->is_sdp_link = roc_nix_is_sdp(roc_npc->roc_nix);
	if (npc->is_sdp_link) {
		if (roc_npc->is_sdp_mask_set) {
			npc->sdp_channel = roc_npc->sdp_channel;
			npc->sdp_channel_mask = roc_npc->sdp_channel_mask;
		} else {
			roc_npc_sdp_channel_get(roc_npc, &sdp_chan_base, &sdp_chan_mask);
			npc->sdp_channel = sdp_chan_base;
			npc->sdp_channel_mask = sdp_chan_mask;
		}
	}

	flow = plt_zmalloc(sizeof(*flow), 0);
	if (flow == NULL) {
		*errcode = NPC_ERR_NO_MEM;
		return NULL;
	}
	memset(flow, 0, sizeof(*flow));
	memset(&parse_state, 0, sizeof(parse_state));

	flow->port_id = -1;
	if (roc_npc->rep_npc) {
		flow->rep_channel =
			(roc_npc->rep_rx_channel == 0) ?
				roc_nix_to_nix_priv(roc_npc->rep_npc->roc_nix)->rx_chan_base :
				roc_npc->rep_rx_channel;
		flow->rep_pf_func = roc_npc->rep_pf_func;
		flow->rep_act_pf_func = roc_npc->rep_act_pf_func;
		flow->rep_act_rep = roc_npc->rep_act_rep;
		flow->rep_mbox = roc_npc_to_npc_priv(roc_npc->rep_npc)->mbox;
		flow->has_rep = true;
		flow->is_rep_vf = !roc_nix_is_pf(roc_npc->rep_npc->roc_nix);
		flow->port_id = roc_npc->rep_port_id;
		flow->rep_npc = roc_npc_to_npc_priv(roc_npc->rep_npc);
		roc_npc->rep_act_rep = false;
		roc_npc->rep_act_pf_func = 0;
		roc_npc->rep_rx_channel = 0;
	}

	parse_state.dst_pf_func = dst_pf_func;

	rc = npc_parse_rule(roc_npc, attr, pattern, actions, flow, &parse_state);
	if (rc != 0) {
		*errcode = rc;
		goto err_exit;
	}

	rc = npc_vtag_action_program(roc_npc, actions, flow);
	if (rc != 0) {
		*errcode = rc;
		goto err_exit;
	}

	parse_state.is_vf = !roc_nix_is_pf(roc_npc->roc_nix);

	rc = npc_program_mcam(npc, &parse_state, 1);
	if (rc != 0) {
		*errcode = rc;
		goto err_exit;
	}

	/* If Egress mirror requested then enable TL3_TL2_LINK_CFG */
	if (flow->is_sampling_rule && (flow->nix_intf == NIX_INTF_TX)) {
		if (flow->mcast_pf_funcs[0] == npc->pf_func)
			rc = roc_nix_tm_egress_link_cfg_set(roc_npc->roc_nix,
							    flow->mcast_pf_funcs[1], true);
		else
			rc = roc_nix_tm_egress_link_cfg_set(roc_npc->roc_nix,
							    flow->mcast_pf_funcs[0], true);
		if (rc) {
			plt_err("Adding egress mirror failed");
			*errcode = rc;
			goto err_exit;
		}
	}

	rc = npc_rss_action_program(roc_npc, actions, flow);
	if (rc != 0) {
		*errcode = rc;
		goto set_rss_failed;
	}
	roc_npc->rep_npc = NULL;
	roc_npc->rep_act_pf_func = 0;

	if (flow->has_age_action)
		npc_age_flow_list_entry_add(roc_npc, flow);

	if (flow->use_pre_alloc == 0)
		list = &npc->flow_list[flow->priority];
	else
		list = &npc->ipsec_list;
	/* List in ascending order of mcam entries */
	TAILQ_FOREACH(flow_iter, list, next) {
		if (flow_iter->mcam_id > flow->mcam_id) {
			TAILQ_INSERT_BEFORE(flow_iter, flow, next);
			roc_npc->rep_npc = NULL;
			return flow;
		}
	}
	TAILQ_INSERT_TAIL(list, flow, next);

	return flow;

set_rss_failed:
	roc_npc->rep_npc = NULL;
	roc_npc->rep_act_pf_func = 0;
	if (flow->use_pre_alloc == 0) {
		rc = roc_npc_mcam_free_entry(roc_npc, flow->mcam_id);
		if (rc != 0) {
			*errcode = rc;
			plt_free(flow);
			return NULL;
		}
	} else {
		npc_inline_dev_ipsec_action_free(npc, flow);
	}
err_exit:
	roc_npc->rep_npc = NULL;
	roc_npc->rep_act_pf_func = 0;
	plt_free(flow);
	return NULL;
}

int
npc_rss_group_free(struct npc *npc, struct roc_npc_flow *flow)
{
	struct npc *lnpc = npc;
	uint32_t rss_grp;

	if (flow->has_rep)
		lnpc = flow->rep_npc;

	if ((flow->npc_action & 0xF) == NIX_RX_ACTIONOP_RSS) {
		rss_grp = (flow->npc_action >> NPC_RSS_ACT_GRP_OFFSET) &
			  NPC_RSS_ACT_GRP_MASK;
		if (rss_grp == 0 || rss_grp >= npc->rss_grps)
			return -EINVAL;

		plt_bitmap_clear(lnpc->rss_grp_entries, rss_grp);
	}

	return 0;
}

static int
roc_npc_delete_spi_to_sa_action(struct roc_npc *roc_npc, struct roc_npc_flow *flow)
{
	struct nix_spi_to_sa_delete_req *req;
	struct nix_inl_dev *inl_dev;
	struct idev_cfg *idev;
	struct mbox *mbox;

	PLT_SET_USED(roc_npc);

	if (!flow->spi_to_sa_info.has_action || flow->spi_to_sa_info.duplicate)
		return 0;

	idev = idev_get_cfg();
	if (!idev)
		return -1;

	inl_dev = idev->nix_inl_dev;
	mbox = inl_dev->dev.mbox;
	req = mbox_alloc_msg_nix_spi_to_sa_delete(mbox);
	if (req == NULL)
		return -ENOSPC;
	req->hash_index = flow->spi_to_sa_info.hash_index;
	req->way = flow->spi_to_sa_info.way;
	return mbox_process_msg(mbox, NULL);
}

int
roc_npc_flow_destroy(struct roc_npc *roc_npc, struct roc_npc_flow *flow)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);
	int rc;

	rc = roc_npc_delete_spi_to_sa_action(roc_npc, flow);
	if (rc)
		return rc;

	if (npc_inline_dev_ipsec_action_free(npc, flow) == 0) {
		TAILQ_REMOVE(&npc->ipsec_list, flow, next);
		goto done;
	}

	rc = npc_rss_group_free(npc, flow);
	if (rc != 0) {
		plt_err("Failed to free rss action rc = %d", rc);
		return rc;
	}

	if (flow->vtag_insert_enabled) {
		rc = npc_vtag_cfg_delete(roc_npc, flow);
		if (rc != 0)
			return rc;
	}

	/* Disable egress mirror rule */
	if (flow->is_sampling_rule && (flow->nix_intf == NIX_INTF_TX)) {
		if (flow->mcast_pf_funcs[0] == npc->pf_func)
			rc = roc_nix_tm_egress_link_cfg_set(roc_npc->roc_nix,
							    flow->mcast_pf_funcs[1], false);
		else
			rc = roc_nix_tm_egress_link_cfg_set(roc_npc->roc_nix,
							    flow->mcast_pf_funcs[0], false);
		if (rc)
			plt_err("Failed to remove egress mirror rule");
	}
	if (flow->is_sampling_rule)
		roc_nix_mcast_list_free(npc->mbox, flow->mcast_grp_index);

	rc = roc_npc_mcam_free(roc_npc, flow);
	if (rc != 0)
		return rc;

	TAILQ_REMOVE(&npc->flow_list[flow->priority], flow, next);

	npc_delete_prio_list_entry(npc, flow);

	if (flow->has_age_action)
		npc_age_flow_list_entry_delete(roc_npc, flow);

	if (roc_npc->flow_age.age_flow_refcnt == 0)
		npc_aging_ctrl_thread_destroy(roc_npc);

done:
	plt_free(flow);
	return 0;
}

void
roc_npc_flow_dump(FILE *file, struct roc_npc *roc_npc, int rep_port_id)
{
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);
	struct roc_npc_flow *flow_iter;
	struct npc_flow_list *list;
	uint32_t max_prio, i;

	max_prio = npc->flow_max_priority;

	for (i = 0; i < max_prio; i++) {
		list = &npc->flow_list[i];

		/* List in ascending order of mcam entries */
		TAILQ_FOREACH(flow_iter, list, next) {
			if (rep_port_id == -1 || rep_port_id == flow_iter->port_id)
				roc_npc_flow_mcam_dump(file, roc_npc, flow_iter);
		}
	}

	TAILQ_FOREACH(flow_iter, &npc->ipsec_list, next) {
		if (rep_port_id == -1 || rep_port_id == flow_iter->port_id)
			roc_npc_flow_mcam_dump(file, roc_npc, flow_iter);
	}
}

int
roc_npc_mcam_merge_base_steering_rule(struct roc_npc *roc_npc, struct roc_npc_flow *flow)
{
	struct npc_mcam_read_base_rule_rsp *base_rule_rsp;
	struct npc *npc = roc_npc_to_npc_priv(roc_npc);
	struct mcam_entry *base_entry;
	struct mbox *mbox = mbox_get(npc->mbox);
	int idx, rc;

	if (roc_nix_is_pf(roc_npc->roc_nix)) {
		rc = 0;
		goto exit;
	}

	(void)mbox_alloc_msg_npc_read_base_steer_rule(mbox);
	rc = mbox_process_msg(mbox, (void *)&base_rule_rsp);
	if (rc) {
		plt_err("Failed to fetch VF's base MCAM entry");
		goto exit;
	}
	base_entry = &base_rule_rsp->entry_data;
	for (idx = 0; idx < ROC_NPC_MAX_MCAM_WIDTH_DWORDS; idx++) {
		flow->mcam_data[idx] |= base_entry->kw[idx];
		flow->mcam_mask[idx] |= base_entry->kw_mask[idx];
	}

	rc = 0;
exit:
	mbox_put(mbox);
	return rc;
}