net/mlx5: Use flow steering infrastructure for mlx5_en
[cascardo/linux.git] / drivers / net / ethernet / mellanox / mlx5 / core / en_flow_table.c
index 22d603f..80d81ab 100644 (file)
 #include <linux/ip.h>
 #include <linux/ipv6.h>
 #include <linux/tcp.h>
-#include <linux/mlx5/flow_table.h>
+#include <linux/mlx5/fs.h>
 #include "en.h"
 
+#define MLX5_SET_CFG(p, f, v) MLX5_SET(create_flow_group_in, p, f, v)
+
 enum {
        MLX5E_FULLMATCH = 0,
        MLX5E_ALLMULTI  = 1,
@@ -103,44 +105,38 @@ static void mlx5e_del_eth_addr_from_hash(struct mlx5e_eth_addr_hash_node *hn)
 static void mlx5e_del_eth_addr_from_flow_table(struct mlx5e_priv *priv,
                                               struct mlx5e_eth_addr_info *ai)
 {
-       void *ft = priv->ft.main;
-
        if (ai->tt_vec & BIT(MLX5E_TT_IPV6_IPSEC_ESP))
-               mlx5_del_flow_table_entry(ft,
-                                         ai->ft_ix[MLX5E_TT_IPV6_IPSEC_ESP]);
+               mlx5_del_flow_rule(ai->ft_rule[MLX5E_TT_IPV6_IPSEC_ESP]);
 
        if (ai->tt_vec & BIT(MLX5E_TT_IPV4_IPSEC_ESP))
-               mlx5_del_flow_table_entry(ft,
-                                         ai->ft_ix[MLX5E_TT_IPV4_IPSEC_ESP]);
+               mlx5_del_flow_rule(ai->ft_rule[MLX5E_TT_IPV4_IPSEC_ESP]);
 
        if (ai->tt_vec & BIT(MLX5E_TT_IPV6_IPSEC_AH))
-               mlx5_del_flow_table_entry(ft,
-                                         ai->ft_ix[MLX5E_TT_IPV6_IPSEC_AH]);
+               mlx5_del_flow_rule(ai->ft_rule[MLX5E_TT_IPV6_IPSEC_AH]);
 
        if (ai->tt_vec & BIT(MLX5E_TT_IPV4_IPSEC_AH))
-               mlx5_del_flow_table_entry(ft,
-                                         ai->ft_ix[MLX5E_TT_IPV4_IPSEC_AH]);
+               mlx5_del_flow_rule(ai->ft_rule[MLX5E_TT_IPV4_IPSEC_AH]);
 
        if (ai->tt_vec & BIT(MLX5E_TT_IPV6_TCP))
-               mlx5_del_flow_table_entry(ft, ai->ft_ix[MLX5E_TT_IPV6_TCP]);
+               mlx5_del_flow_rule(ai->ft_rule[MLX5E_TT_IPV6_TCP]);
 
        if (ai->tt_vec & BIT(MLX5E_TT_IPV4_TCP))
-               mlx5_del_flow_table_entry(ft, ai->ft_ix[MLX5E_TT_IPV4_TCP]);
+               mlx5_del_flow_rule(ai->ft_rule[MLX5E_TT_IPV4_TCP]);
 
        if (ai->tt_vec & BIT(MLX5E_TT_IPV6_UDP))
-               mlx5_del_flow_table_entry(ft, ai->ft_ix[MLX5E_TT_IPV6_UDP]);
+               mlx5_del_flow_rule(ai->ft_rule[MLX5E_TT_IPV6_UDP]);
 
        if (ai->tt_vec & BIT(MLX5E_TT_IPV4_UDP))
-               mlx5_del_flow_table_entry(ft, ai->ft_ix[MLX5E_TT_IPV4_UDP]);
+               mlx5_del_flow_rule(ai->ft_rule[MLX5E_TT_IPV4_UDP]);
 
        if (ai->tt_vec & BIT(MLX5E_TT_IPV6))
-               mlx5_del_flow_table_entry(ft, ai->ft_ix[MLX5E_TT_IPV6]);
+               mlx5_del_flow_rule(ai->ft_rule[MLX5E_TT_IPV6]);
 
        if (ai->tt_vec & BIT(MLX5E_TT_IPV4))
-               mlx5_del_flow_table_entry(ft, ai->ft_ix[MLX5E_TT_IPV4]);
+               mlx5_del_flow_rule(ai->ft_rule[MLX5E_TT_IPV4]);
 
        if (ai->tt_vec & BIT(MLX5E_TT_ANY))
-               mlx5_del_flow_table_entry(ft, ai->ft_ix[MLX5E_TT_ANY]);
+               mlx5_del_flow_rule(ai->ft_rule[MLX5E_TT_ANY]);
 }
 
 static int mlx5e_get_eth_addr_type(u8 *addr)
@@ -240,44 +236,34 @@ static u32 mlx5e_get_tt_vec(struct mlx5e_eth_addr_info *ai, int type)
 }
 
 static int __mlx5e_add_eth_addr_rule(struct mlx5e_priv *priv,
-                                    struct mlx5e_eth_addr_info *ai, int type,
-                                    void *flow_context, void *match_criteria)
+                                    struct mlx5e_eth_addr_info *ai,
+                                    int type, u32 *mc, u32 *mv)
 {
+       struct mlx5_flow_destination dest;
        u8 match_criteria_enable = 0;
-       void *match_value;
-       void *dest;
-       u8   *dmac;
-       u8   *match_criteria_dmac;
-       void *ft   = priv->ft.main;
-       u32  *tirn = priv->tirn;
-       u32  *ft_ix;
-       u32  tt_vec;
-       int  err;
-
-       match_value = MLX5_ADDR_OF(flow_context, flow_context, match_value);
-       dmac = MLX5_ADDR_OF(fte_match_param, match_value,
-                           outer_headers.dmac_47_16);
-       match_criteria_dmac = MLX5_ADDR_OF(fte_match_param, match_criteria,
-                                          outer_headers.dmac_47_16);
-       dest = MLX5_ADDR_OF(flow_context, flow_context, destination);
-
-       MLX5_SET(flow_context, flow_context, action,
-                MLX5_FLOW_CONTEXT_ACTION_FWD_DEST);
-       MLX5_SET(flow_context, flow_context, destination_list_size, 1);
-       MLX5_SET(dest_format_struct, dest, destination_type,
-                MLX5_FLOW_CONTEXT_DEST_TYPE_TIR);
+       struct mlx5_flow_rule **rule_p;
+       struct mlx5_flow_table *ft = priv->fts.main.t;
+       u8 *mc_dmac = MLX5_ADDR_OF(fte_match_param, mc,
+                                  outer_headers.dmac_47_16);
+       u8 *mv_dmac = MLX5_ADDR_OF(fte_match_param, mv,
+                                  outer_headers.dmac_47_16);
+       u32 *tirn = priv->tirn;
+       u32 tt_vec;
+       int err = 0;
+
+       dest.type = MLX5_FLOW_DESTINATION_TYPE_TIR;
 
        switch (type) {
        case MLX5E_FULLMATCH:
                match_criteria_enable = MLX5_MATCH_OUTER_HEADERS;
-               memset(match_criteria_dmac, 0xff, ETH_ALEN);
-               ether_addr_copy(dmac, ai->addr);
+               eth_broadcast_addr(mc_dmac);
+               ether_addr_copy(mv_dmac, ai->addr);
                break;
 
        case MLX5E_ALLMULTI:
                match_criteria_enable = MLX5_MATCH_OUTER_HEADERS;
-               match_criteria_dmac[0] = 0x01;
-               dmac[0] = 0x01;
+               mc_dmac[0] = 0x01;
+               mv_dmac[0] = 0x01;
                break;
 
        case MLX5E_PROMISC:
@@ -286,190 +272,165 @@ static int __mlx5e_add_eth_addr_rule(struct mlx5e_priv *priv,
 
        tt_vec = mlx5e_get_tt_vec(ai, type);
 
-       ft_ix = &ai->ft_ix[MLX5E_TT_ANY];
        if (tt_vec & BIT(MLX5E_TT_ANY)) {
-               MLX5_SET(dest_format_struct, dest, destination_id,
-                        tirn[MLX5E_TT_ANY]);
-               err = mlx5_add_flow_table_entry(ft, match_criteria_enable,
-                                               match_criteria, flow_context,
-                                               ft_ix);
-               if (err)
+               rule_p = &ai->ft_rule[MLX5E_TT_ANY];
+               dest.tir_num = tirn[MLX5E_TT_ANY];
+               *rule_p = mlx5_add_flow_rule(ft, match_criteria_enable, mc, mv,
+                                            MLX5_FLOW_CONTEXT_ACTION_FWD_DEST,
+                                            MLX5_FS_DEFAULT_FLOW_TAG, &dest);
+               if (IS_ERR_OR_NULL(*rule_p))
                        goto err_del_ai;
-
                ai->tt_vec |= BIT(MLX5E_TT_ANY);
        }
 
        match_criteria_enable = MLX5_MATCH_OUTER_HEADERS;
-       MLX5_SET_TO_ONES(fte_match_param, match_criteria,
-                        outer_headers.ethertype);
+       MLX5_SET_TO_ONES(fte_match_param, mc, outer_headers.ethertype);
 
-       ft_ix = &ai->ft_ix[MLX5E_TT_IPV4];
        if (tt_vec & BIT(MLX5E_TT_IPV4)) {
-               MLX5_SET(fte_match_param, match_value, outer_headers.ethertype,
+               rule_p = &ai->ft_rule[MLX5E_TT_IPV4];
+               dest.tir_num = tirn[MLX5E_TT_IPV4];
+               MLX5_SET(fte_match_param, mv, outer_headers.ethertype,
                         ETH_P_IP);
-               MLX5_SET(dest_format_struct, dest, destination_id,
-                        tirn[MLX5E_TT_IPV4]);
-               err = mlx5_add_flow_table_entry(ft, match_criteria_enable,
-                                               match_criteria, flow_context,
-                                               ft_ix);
-               if (err)
+               *rule_p = mlx5_add_flow_rule(ft, match_criteria_enable, mc, mv,
+                                            MLX5_FLOW_CONTEXT_ACTION_FWD_DEST,
+                                            MLX5_FS_DEFAULT_FLOW_TAG, &dest);
+               if (IS_ERR_OR_NULL(*rule_p))
                        goto err_del_ai;
-
                ai->tt_vec |= BIT(MLX5E_TT_IPV4);
        }
 
-       ft_ix = &ai->ft_ix[MLX5E_TT_IPV6];
        if (tt_vec & BIT(MLX5E_TT_IPV6)) {
-               MLX5_SET(fte_match_param, match_value, outer_headers.ethertype,
+               rule_p = &ai->ft_rule[MLX5E_TT_IPV6];
+               dest.tir_num = tirn[MLX5E_TT_IPV6];
+               MLX5_SET(fte_match_param, mv, outer_headers.ethertype,
                         ETH_P_IPV6);
-               MLX5_SET(dest_format_struct, dest, destination_id,
-                        tirn[MLX5E_TT_IPV6]);
-               err = mlx5_add_flow_table_entry(ft, match_criteria_enable,
-                                               match_criteria, flow_context,
-                                               ft_ix);
-               if (err)
+               *rule_p = mlx5_add_flow_rule(ft, match_criteria_enable, mc, mv,
+                                            MLX5_FLOW_CONTEXT_ACTION_FWD_DEST,
+                                            MLX5_FS_DEFAULT_FLOW_TAG, &dest);
+               if (IS_ERR_OR_NULL(*rule_p))
                        goto err_del_ai;
-
                ai->tt_vec |= BIT(MLX5E_TT_IPV6);
        }
 
-       MLX5_SET_TO_ONES(fte_match_param, match_criteria,
-                        outer_headers.ip_protocol);
-       MLX5_SET(fte_match_param, match_value, outer_headers.ip_protocol,
-                IPPROTO_UDP);
+       MLX5_SET_TO_ONES(fte_match_param, mc, outer_headers.ip_protocol);
+       MLX5_SET(fte_match_param, mv, outer_headers.ip_protocol, IPPROTO_UDP);
 
-       ft_ix = &ai->ft_ix[MLX5E_TT_IPV4_UDP];
        if (tt_vec & BIT(MLX5E_TT_IPV4_UDP)) {
-               MLX5_SET(fte_match_param, match_value, outer_headers.ethertype,
+               rule_p = &ai->ft_rule[MLX5E_TT_IPV4_UDP];
+               dest.tir_num = tirn[MLX5E_TT_IPV4_UDP];
+               MLX5_SET(fte_match_param, mv, outer_headers.ethertype,
                         ETH_P_IP);
-               MLX5_SET(dest_format_struct, dest, destination_id,
-                        tirn[MLX5E_TT_IPV4_UDP]);
-               err = mlx5_add_flow_table_entry(ft, match_criteria_enable,
-                                               match_criteria, flow_context,
-                                               ft_ix);
-               if (err)
+               *rule_p = mlx5_add_flow_rule(ft, match_criteria_enable, mc, mv,
+                                            MLX5_FLOW_CONTEXT_ACTION_FWD_DEST,
+                                            MLX5_FS_DEFAULT_FLOW_TAG, &dest);
+               if (IS_ERR_OR_NULL(*rule_p))
                        goto err_del_ai;
-
                ai->tt_vec |= BIT(MLX5E_TT_IPV4_UDP);
        }
 
-       ft_ix = &ai->ft_ix[MLX5E_TT_IPV6_UDP];
        if (tt_vec & BIT(MLX5E_TT_IPV6_UDP)) {
-               MLX5_SET(fte_match_param, match_value, outer_headers.ethertype,
+               rule_p = &ai->ft_rule[MLX5E_TT_IPV6_UDP];
+               dest.tir_num = tirn[MLX5E_TT_IPV6_UDP];
+               MLX5_SET(fte_match_param, mv, outer_headers.ethertype,
                         ETH_P_IPV6);
-               MLX5_SET(dest_format_struct, dest, destination_id,
-                        tirn[MLX5E_TT_IPV6_UDP]);
-               err = mlx5_add_flow_table_entry(ft, match_criteria_enable,
-                                               match_criteria, flow_context,
-                                               ft_ix);
-               if (err)
+               *rule_p = mlx5_add_flow_rule(ft, match_criteria_enable, mc, mv,
+                                            MLX5_FLOW_CONTEXT_ACTION_FWD_DEST,
+                                            MLX5_FS_DEFAULT_FLOW_TAG, &dest);
+               if (IS_ERR_OR_NULL(*rule_p))
                        goto err_del_ai;
-
                ai->tt_vec |= BIT(MLX5E_TT_IPV6_UDP);
        }
 
-       MLX5_SET(fte_match_param, match_value, outer_headers.ip_protocol,
-                IPPROTO_TCP);
+       MLX5_SET(fte_match_param, mv, outer_headers.ip_protocol, IPPROTO_TCP);
 
-       ft_ix = &ai->ft_ix[MLX5E_TT_IPV4_TCP];
        if (tt_vec & BIT(MLX5E_TT_IPV4_TCP)) {
-               MLX5_SET(fte_match_param, match_value, outer_headers.ethertype,
+               rule_p = &ai->ft_rule[MLX5E_TT_IPV4_TCP];
+               dest.tir_num = tirn[MLX5E_TT_IPV4_TCP];
+               MLX5_SET(fte_match_param, mv, outer_headers.ethertype,
                         ETH_P_IP);
-               MLX5_SET(dest_format_struct, dest, destination_id,
-                        tirn[MLX5E_TT_IPV4_TCP]);
-               err = mlx5_add_flow_table_entry(ft, match_criteria_enable,
-                                               match_criteria, flow_context,
-                                               ft_ix);
-               if (err)
+               *rule_p = mlx5_add_flow_rule(ft, match_criteria_enable, mc, mv,
+                                            MLX5_FLOW_CONTEXT_ACTION_FWD_DEST,
+                                            MLX5_FS_DEFAULT_FLOW_TAG, &dest);
+               if (IS_ERR_OR_NULL(*rule_p))
                        goto err_del_ai;
-
                ai->tt_vec |= BIT(MLX5E_TT_IPV4_TCP);
        }
 
-       ft_ix = &ai->ft_ix[MLX5E_TT_IPV6_TCP];
        if (tt_vec & BIT(MLX5E_TT_IPV6_TCP)) {
-               MLX5_SET(fte_match_param, match_value, outer_headers.ethertype,
+               rule_p = &ai->ft_rule[MLX5E_TT_IPV6_TCP];
+               dest.tir_num = tirn[MLX5E_TT_IPV6_TCP];
+               MLX5_SET(fte_match_param, mv, outer_headers.ethertype,
                         ETH_P_IPV6);
-               MLX5_SET(dest_format_struct, dest, destination_id,
-                        tirn[MLX5E_TT_IPV6_TCP]);
-               err = mlx5_add_flow_table_entry(ft, match_criteria_enable,
-                                               match_criteria, flow_context,
-                                               ft_ix);
-               if (err)
+               *rule_p = mlx5_add_flow_rule(ft, match_criteria_enable, mc, mv,
+                                            MLX5_FLOW_CONTEXT_ACTION_FWD_DEST,
+                                            MLX5_FS_DEFAULT_FLOW_TAG, &dest);
+               if (IS_ERR_OR_NULL(*rule_p))
                        goto err_del_ai;
 
                ai->tt_vec |= BIT(MLX5E_TT_IPV6_TCP);
        }
 
-       MLX5_SET(fte_match_param, match_value, outer_headers.ip_protocol,
-                IPPROTO_AH);
+       MLX5_SET(fte_match_param, mv, outer_headers.ip_protocol, IPPROTO_AH);
 
-       ft_ix = &ai->ft_ix[MLX5E_TT_IPV4_IPSEC_AH];
        if (tt_vec & BIT(MLX5E_TT_IPV4_IPSEC_AH)) {
-               MLX5_SET(fte_match_param, match_value, outer_headers.ethertype,
+               rule_p = &ai->ft_rule[MLX5E_TT_IPV4_IPSEC_AH];
+               dest.tir_num = tirn[MLX5E_TT_IPV4_IPSEC_AH];
+               MLX5_SET(fte_match_param, mv, outer_headers.ethertype,
                         ETH_P_IP);
-               MLX5_SET(dest_format_struct, dest, destination_id,
-                        tirn[MLX5E_TT_IPV4_IPSEC_AH]);
-               err = mlx5_add_flow_table_entry(ft, match_criteria_enable,
-                                               match_criteria, flow_context,
-                                               ft_ix);
-               if (err)
+               *rule_p = mlx5_add_flow_rule(ft, match_criteria_enable, mc, mv,
+                                            MLX5_FLOW_CONTEXT_ACTION_FWD_DEST,
+                                            MLX5_FS_DEFAULT_FLOW_TAG, &dest);
+               if (IS_ERR_OR_NULL(*rule_p))
                        goto err_del_ai;
-
                ai->tt_vec |= BIT(MLX5E_TT_IPV4_IPSEC_AH);
        }
 
-       ft_ix = &ai->ft_ix[MLX5E_TT_IPV6_IPSEC_AH];
        if (tt_vec & BIT(MLX5E_TT_IPV6_IPSEC_AH)) {
-               MLX5_SET(fte_match_param, match_value, outer_headers.ethertype,
+               rule_p = &ai->ft_rule[MLX5E_TT_IPV6_IPSEC_AH];
+               dest.tir_num = tirn[MLX5E_TT_IPV6_IPSEC_AH];
+               MLX5_SET(fte_match_param, mv, outer_headers.ethertype,
                         ETH_P_IPV6);
-               MLX5_SET(dest_format_struct, dest, destination_id,
-                        tirn[MLX5E_TT_IPV6_IPSEC_AH]);
-               err = mlx5_add_flow_table_entry(ft, match_criteria_enable,
-                                               match_criteria, flow_context,
-                                               ft_ix);
-               if (err)
+               *rule_p = mlx5_add_flow_rule(ft, match_criteria_enable, mc, mv,
+                                            MLX5_FLOW_CONTEXT_ACTION_FWD_DEST,
+                                            MLX5_FS_DEFAULT_FLOW_TAG, &dest);
+               if (IS_ERR_OR_NULL(*rule_p))
                        goto err_del_ai;
-
                ai->tt_vec |= BIT(MLX5E_TT_IPV6_IPSEC_AH);
        }
 
-       MLX5_SET(fte_match_param, match_value, outer_headers.ip_protocol,
-                IPPROTO_ESP);
+       MLX5_SET(fte_match_param, mv, outer_headers.ip_protocol, IPPROTO_ESP);
 
-       ft_ix = &ai->ft_ix[MLX5E_TT_IPV4_IPSEC_ESP];
        if (tt_vec & BIT(MLX5E_TT_IPV4_IPSEC_ESP)) {
-               MLX5_SET(fte_match_param, match_value, outer_headers.ethertype,
+               rule_p = &ai->ft_rule[MLX5E_TT_IPV4_IPSEC_ESP];
+               dest.tir_num = tirn[MLX5E_TT_IPV4_IPSEC_ESP];
+               MLX5_SET(fte_match_param, mv, outer_headers.ethertype,
                         ETH_P_IP);
-               MLX5_SET(dest_format_struct, dest, destination_id,
-                        tirn[MLX5E_TT_IPV4_IPSEC_ESP]);
-               err = mlx5_add_flow_table_entry(ft, match_criteria_enable,
-                                               match_criteria, flow_context,
-                                               ft_ix);
-               if (err)
+               *rule_p = mlx5_add_flow_rule(ft, match_criteria_enable, mc, mv,
+                                            MLX5_FLOW_CONTEXT_ACTION_FWD_DEST,
+                                            MLX5_FS_DEFAULT_FLOW_TAG, &dest);
+               if (IS_ERR_OR_NULL(*rule_p))
                        goto err_del_ai;
-
                ai->tt_vec |= BIT(MLX5E_TT_IPV4_IPSEC_ESP);
        }
 
-       ft_ix = &ai->ft_ix[MLX5E_TT_IPV6_IPSEC_ESP];
        if (tt_vec & BIT(MLX5E_TT_IPV6_IPSEC_ESP)) {
-               MLX5_SET(fte_match_param, match_value, outer_headers.ethertype,
+               rule_p = &ai->ft_rule[MLX5E_TT_IPV6_IPSEC_ESP];
+               dest.tir_num = tirn[MLX5E_TT_IPV6_IPSEC_ESP];
+               MLX5_SET(fte_match_param, mv, outer_headers.ethertype,
                         ETH_P_IPV6);
-               MLX5_SET(dest_format_struct, dest, destination_id,
-                        tirn[MLX5E_TT_IPV6_IPSEC_ESP]);
-               err = mlx5_add_flow_table_entry(ft, match_criteria_enable,
-                                               match_criteria, flow_context,
-                                               ft_ix);
-               if (err)
+               *rule_p = mlx5_add_flow_rule(ft, match_criteria_enable, mc, mv,
+                                            MLX5_FLOW_CONTEXT_ACTION_FWD_DEST,
+                                            MLX5_FS_DEFAULT_FLOW_TAG, &dest);
+               if (IS_ERR_OR_NULL(*rule_p))
                        goto err_del_ai;
-
                ai->tt_vec |= BIT(MLX5E_TT_IPV6_IPSEC_ESP);
        }
 
        return 0;
 
 err_del_ai:
+       err = PTR_ERR(*rule_p);
+       *rule_p = NULL;
        mlx5e_del_eth_addr_from_flow_table(priv, ai);
 
        return err;
@@ -478,27 +439,68 @@ err_del_ai:
 static int mlx5e_add_eth_addr_rule(struct mlx5e_priv *priv,
                                   struct mlx5e_eth_addr_info *ai, int type)
 {
-       u32 *flow_context;
        u32 *match_criteria;
-       int err;
+       u32 *match_value;
+       int err = 0;
 
-       flow_context   = mlx5_vzalloc(MLX5_ST_SZ_BYTES(flow_context) +
-                                     MLX5_ST_SZ_BYTES(dest_format_struct));
-       match_criteria = mlx5_vzalloc(MLX5_ST_SZ_BYTES(fte_match_param));
-       if (!flow_context || !match_criteria) {
+       match_value     = mlx5_vzalloc(MLX5_ST_SZ_BYTES(fte_match_param));
+       match_criteria  = mlx5_vzalloc(MLX5_ST_SZ_BYTES(fte_match_param));
+       if (!match_value || !match_criteria) {
                netdev_err(priv->netdev, "%s: alloc failed\n", __func__);
                err = -ENOMEM;
                goto add_eth_addr_rule_out;
        }
 
-       err = __mlx5e_add_eth_addr_rule(priv, ai, type, flow_context,
-                                       match_criteria);
-       if (err)
-               netdev_err(priv->netdev, "%s: failed\n", __func__);
+       err = __mlx5e_add_eth_addr_rule(priv, ai, type, match_criteria,
+                                       match_value);
 
 add_eth_addr_rule_out:
        kvfree(match_criteria);
-       kvfree(flow_context);
+       kvfree(match_value);
+
+       return err;
+}
+
+static int mlx5e_vport_context_update_vlans(struct mlx5e_priv *priv)
+{
+       struct net_device *ndev = priv->netdev;
+       int max_list_size;
+       int list_size;
+       u16 *vlans;
+       int vlan;
+       int err;
+       int i;
+
+       list_size = 0;
+       for_each_set_bit(vlan, priv->vlan.active_vlans, VLAN_N_VID)
+               list_size++;
+
+       max_list_size = 1 << MLX5_CAP_GEN(priv->mdev, log_max_vlan_list);
+
+       if (list_size > max_list_size) {
+               netdev_warn(ndev,
+                           "netdev vlans list size (%d) > (%d) max vport list size, some vlans will be dropped\n",
+                           list_size, max_list_size);
+               list_size = max_list_size;
+       }
+
+       vlans = kcalloc(list_size, sizeof(*vlans), GFP_KERNEL);
+       if (!vlans)
+               return -ENOMEM;
+
+       i = 0;
+       for_each_set_bit(vlan, priv->vlan.active_vlans, VLAN_N_VID) {
+               if (i >= list_size)
+                       break;
+               vlans[i++] = vlan;
+       }
+
+       err = mlx5_modify_nic_vport_vlans(priv->mdev, vlans, list_size);
+       if (err)
+               netdev_err(ndev, "Failed to modify vport vlans list err(%d)\n",
+                          err);
+
+       kfree(vlans);
        return err;
 }
 
@@ -508,68 +510,77 @@ enum mlx5e_vlan_rule_type {
        MLX5E_VLAN_RULE_TYPE_MATCH_VID,
 };
 
-static int mlx5e_add_vlan_rule(struct mlx5e_priv *priv,
-                              enum mlx5e_vlan_rule_type rule_type, u16 vid)
+static int __mlx5e_add_vlan_rule(struct mlx5e_priv *priv,
+                                enum mlx5e_vlan_rule_type rule_type,
+                                u16 vid, u32 *mc, u32 *mv)
 {
+       struct mlx5_flow_table *ft = priv->fts.vlan.t;
+       struct mlx5_flow_destination dest;
        u8 match_criteria_enable = 0;
-       u32 *flow_context;
-       void *match_value;
-       void *dest;
-       u32 *match_criteria;
-       u32 *ft_ix;
-       int err;
-
-       flow_context   = mlx5_vzalloc(MLX5_ST_SZ_BYTES(flow_context) +
-                                     MLX5_ST_SZ_BYTES(dest_format_struct));
-       match_criteria = mlx5_vzalloc(MLX5_ST_SZ_BYTES(fte_match_param));
-       if (!flow_context || !match_criteria) {
-               netdev_err(priv->netdev, "%s: alloc failed\n", __func__);
-               err = -ENOMEM;
-               goto add_vlan_rule_out;
-       }
-       match_value = MLX5_ADDR_OF(flow_context, flow_context, match_value);
-       dest = MLX5_ADDR_OF(flow_context, flow_context, destination);
+       struct mlx5_flow_rule **rule_p;
+       int err = 0;
 
-       MLX5_SET(flow_context, flow_context, action,
-                MLX5_FLOW_CONTEXT_ACTION_FWD_DEST);
-       MLX5_SET(flow_context, flow_context, destination_list_size, 1);
-       MLX5_SET(dest_format_struct, dest, destination_type,
-                MLX5_FLOW_CONTEXT_DEST_TYPE_FLOW_TABLE);
-       MLX5_SET(dest_format_struct, dest, destination_id,
-                mlx5_get_flow_table_id(priv->ft.main));
+       dest.type = MLX5_FLOW_DESTINATION_TYPE_FLOW_TABLE;
+       dest.ft = priv->fts.main.t;
 
        match_criteria_enable = MLX5_MATCH_OUTER_HEADERS;
-       MLX5_SET_TO_ONES(fte_match_param, match_criteria,
-                        outer_headers.vlan_tag);
+       MLX5_SET_TO_ONES(fte_match_param, mc, outer_headers.vlan_tag);
 
        switch (rule_type) {
        case MLX5E_VLAN_RULE_TYPE_UNTAGGED:
-               ft_ix = &priv->vlan.untagged_rule_ft_ix;
+               rule_p = &priv->vlan.untagged_rule;
                break;
        case MLX5E_VLAN_RULE_TYPE_ANY_VID:
-               ft_ix = &priv->vlan.any_vlan_rule_ft_ix;
-               MLX5_SET(fte_match_param, match_value, outer_headers.vlan_tag,
-                        1);
+               rule_p = &priv->vlan.any_vlan_rule;
+               MLX5_SET(fte_match_param, mv, outer_headers.vlan_tag, 1);
                break;
        default: /* MLX5E_VLAN_RULE_TYPE_MATCH_VID */
-               ft_ix = &priv->vlan.active_vlans_ft_ix[vid];
-               MLX5_SET(fte_match_param, match_value, outer_headers.vlan_tag,
-                        1);
-               MLX5_SET_TO_ONES(fte_match_param, match_criteria,
-                                outer_headers.first_vid);
-               MLX5_SET(fte_match_param, match_value, outer_headers.first_vid,
-                        vid);
+               rule_p = &priv->vlan.active_vlans_rule[vid];
+               MLX5_SET(fte_match_param, mv, outer_headers.vlan_tag, 1);
+               MLX5_SET_TO_ONES(fte_match_param, mc, outer_headers.first_vid);
+               MLX5_SET(fte_match_param, mv, outer_headers.first_vid, vid);
                break;
        }
 
-       err = mlx5_add_flow_table_entry(priv->ft.vlan, match_criteria_enable,
-                                       match_criteria, flow_context, ft_ix);
-       if (err)
-               netdev_err(priv->netdev, "%s: failed\n", __func__);
+       *rule_p = mlx5_add_flow_rule(ft, match_criteria_enable, mc, mv,
+                                    MLX5_FLOW_CONTEXT_ACTION_FWD_DEST,
+                                    MLX5_FS_DEFAULT_FLOW_TAG,
+                                    &dest);
+
+       if (IS_ERR(*rule_p)) {
+               err = PTR_ERR(*rule_p);
+               *rule_p = NULL;
+               netdev_err(priv->netdev, "%s: add rule failed\n", __func__);
+       }
+
+       return err;
+}
+
+static int mlx5e_add_vlan_rule(struct mlx5e_priv *priv,
+                              enum mlx5e_vlan_rule_type rule_type, u16 vid)
+{
+       u32 *match_criteria;
+       u32 *match_value;
+       int err = 0;
+
+       match_value     = mlx5_vzalloc(MLX5_ST_SZ_BYTES(fte_match_param));
+       match_criteria  = mlx5_vzalloc(MLX5_ST_SZ_BYTES(fte_match_param));
+       if (!match_value || !match_criteria) {
+               netdev_err(priv->netdev, "%s: alloc failed\n", __func__);
+               err = -ENOMEM;
+               goto add_vlan_rule_out;
+       }
+
+       if (rule_type == MLX5E_VLAN_RULE_TYPE_MATCH_VID)
+               mlx5e_vport_context_update_vlans(priv);
+
+       err = __mlx5e_add_vlan_rule(priv, rule_type, vid, match_criteria,
+                                   match_value);
 
 add_vlan_rule_out:
        kvfree(match_criteria);
-       kvfree(flow_context);
+       kvfree(match_value);
+
        return err;
 }
 
@@ -578,16 +589,24 @@ static void mlx5e_del_vlan_rule(struct mlx5e_priv *priv,
 {
        switch (rule_type) {
        case MLX5E_VLAN_RULE_TYPE_UNTAGGED:
-               mlx5_del_flow_table_entry(priv->ft.vlan,
-                                         priv->vlan.untagged_rule_ft_ix);
+               if (priv->vlan.untagged_rule) {
+                       mlx5_del_flow_rule(priv->vlan.untagged_rule);
+                       priv->vlan.untagged_rule = NULL;
+               }
                break;
        case MLX5E_VLAN_RULE_TYPE_ANY_VID:
-               mlx5_del_flow_table_entry(priv->ft.vlan,
-                                         priv->vlan.any_vlan_rule_ft_ix);
+               if (priv->vlan.any_vlan_rule) {
+                       mlx5_del_flow_rule(priv->vlan.any_vlan_rule);
+                       priv->vlan.any_vlan_rule = NULL;
+               }
                break;
        case MLX5E_VLAN_RULE_TYPE_MATCH_VID:
-               mlx5_del_flow_table_entry(priv->ft.vlan,
-                                         priv->vlan.active_vlans_ft_ix[vid]);
+               mlx5e_vport_context_update_vlans(priv);
+               if (priv->vlan.active_vlans_rule[vid]) {
+                       mlx5_del_flow_rule(priv->vlan.active_vlans_rule[vid]);
+                       priv->vlan.active_vlans_rule[vid] = NULL;
+               }
+               mlx5e_vport_context_update_vlans(priv);
                break;
        }
 }
@@ -619,6 +638,8 @@ int mlx5e_vlan_rx_add_vid(struct net_device *dev, __always_unused __be16 proto,
 {
        struct mlx5e_priv *priv = netdev_priv(dev);
 
+       set_bit(vid, priv->vlan.active_vlans);
+
        return mlx5e_add_vlan_rule(priv, MLX5E_VLAN_RULE_TYPE_MATCH_VID, vid);
 }
 
@@ -627,6 +648,8 @@ int mlx5e_vlan_rx_kill_vid(struct net_device *dev, __always_unused __be16 proto,
 {
        struct mlx5e_priv *priv = netdev_priv(dev);
 
+       clear_bit(vid, priv->vlan.active_vlans);
+
        mlx5e_del_vlan_rule(priv, MLX5E_VLAN_RULE_TYPE_MATCH_VID, vid);
 
        return 0;
@@ -671,6 +694,91 @@ static void mlx5e_sync_netdev_addr(struct mlx5e_priv *priv)
        netif_addr_unlock_bh(netdev);
 }
 
+static void mlx5e_fill_addr_array(struct mlx5e_priv *priv, int list_type,
+                                 u8 addr_array[][ETH_ALEN], int size)
+{
+       bool is_uc = (list_type == MLX5_NVPRT_LIST_TYPE_UC);
+       struct net_device *ndev = priv->netdev;
+       struct mlx5e_eth_addr_hash_node *hn;
+       struct hlist_head *addr_list;
+       struct hlist_node *tmp;
+       int i = 0;
+       int hi;
+
+       addr_list = is_uc ? priv->eth_addr.netdev_uc : priv->eth_addr.netdev_mc;
+
+       if (is_uc) /* Make sure our own address is pushed first */
+               ether_addr_copy(addr_array[i++], ndev->dev_addr);
+       else if (priv->eth_addr.broadcast_enabled)
+               ether_addr_copy(addr_array[i++], ndev->broadcast);
+
+       mlx5e_for_each_hash_node(hn, tmp, addr_list, hi) {
+               if (ether_addr_equal(ndev->dev_addr, hn->ai.addr))
+                       continue;
+               if (i >= size)
+                       break;
+               ether_addr_copy(addr_array[i++], hn->ai.addr);
+       }
+}
+
+static void mlx5e_vport_context_update_addr_list(struct mlx5e_priv *priv,
+                                                int list_type)
+{
+       bool is_uc = (list_type == MLX5_NVPRT_LIST_TYPE_UC);
+       struct mlx5e_eth_addr_hash_node *hn;
+       u8 (*addr_array)[ETH_ALEN] = NULL;
+       struct hlist_head *addr_list;
+       struct hlist_node *tmp;
+       int max_size;
+       int size;
+       int err;
+       int hi;
+
+       size = is_uc ? 0 : (priv->eth_addr.broadcast_enabled ? 1 : 0);
+       max_size = is_uc ?
+               1 << MLX5_CAP_GEN(priv->mdev, log_max_current_uc_list) :
+               1 << MLX5_CAP_GEN(priv->mdev, log_max_current_mc_list);
+
+       addr_list = is_uc ? priv->eth_addr.netdev_uc : priv->eth_addr.netdev_mc;
+       mlx5e_for_each_hash_node(hn, tmp, addr_list, hi)
+               size++;
+
+       if (size > max_size) {
+               netdev_warn(priv->netdev,
+                           "netdev %s list size (%d) > (%d) max vport list size, some addresses will be dropped\n",
+                           is_uc ? "UC" : "MC", size, max_size);
+               size = max_size;
+       }
+
+       if (size) {
+               addr_array = kcalloc(size, ETH_ALEN, GFP_KERNEL);
+               if (!addr_array) {
+                       err = -ENOMEM;
+                       goto out;
+               }
+               mlx5e_fill_addr_array(priv, list_type, addr_array, size);
+       }
+
+       err = mlx5_modify_nic_vport_mac_list(priv->mdev, list_type, addr_array, size);
+out:
+       if (err)
+               netdev_err(priv->netdev,
+                          "Failed to modify vport %s list err(%d)\n",
+                          is_uc ? "UC" : "MC", err);
+       kfree(addr_array);
+}
+
+static void mlx5e_vport_context_update(struct mlx5e_priv *priv)
+{
+       struct mlx5e_eth_addr_db *ea = &priv->eth_addr;
+
+       mlx5e_vport_context_update_addr_list(priv, MLX5_NVPRT_LIST_TYPE_UC);
+       mlx5e_vport_context_update_addr_list(priv, MLX5_NVPRT_LIST_TYPE_MC);
+       mlx5_modify_nic_vport_promisc(priv->mdev, 0,
+                                     ea->allmulti_enabled,
+                                     ea->promisc_enabled);
+}
+
 static void mlx5e_apply_netdev_addr(struct mlx5e_priv *priv)
 {
        struct mlx5e_eth_addr_hash_node *hn;
@@ -748,6 +856,20 @@ void mlx5e_set_rx_mode_work(struct work_struct *work)
        ea->promisc_enabled   = promisc_enabled;
        ea->allmulti_enabled  = allmulti_enabled;
        ea->broadcast_enabled = broadcast_enabled;
+
+       mlx5e_vport_context_update(priv);
+}
+
+static void mlx5e_destroy_groups(struct mlx5e_flow_table *ft)
+{
+       int i;
+
+       for (i = ft->num_groups - 1; i >= 0; i--) {
+               if (!IS_ERR_OR_NULL(ft->g[i]))
+                       mlx5_destroy_flow_group(ft->g[i]);
+               ft->g[i] = NULL;
+       }
+       ft->num_groups = 0;
 }
 
 void mlx5e_init_eth_addr(struct mlx5e_priv *priv)
@@ -755,146 +877,341 @@ void mlx5e_init_eth_addr(struct mlx5e_priv *priv)
        ether_addr_copy(priv->eth_addr.broadcast.addr, priv->netdev->broadcast);
 }
 
-static int mlx5e_create_main_flow_table(struct mlx5e_priv *priv)
+#define MLX5E_MAIN_GROUP0_SIZE BIT(3)
+#define MLX5E_MAIN_GROUP1_SIZE BIT(1)
+#define MLX5E_MAIN_GROUP2_SIZE BIT(0)
+#define MLX5E_MAIN_GROUP3_SIZE BIT(14)
+#define MLX5E_MAIN_GROUP4_SIZE BIT(13)
+#define MLX5E_MAIN_GROUP5_SIZE BIT(11)
+#define MLX5E_MAIN_GROUP6_SIZE BIT(2)
+#define MLX5E_MAIN_GROUP7_SIZE BIT(1)
+#define MLX5E_MAIN_GROUP8_SIZE BIT(0)
+#define MLX5E_MAIN_TABLE_SIZE  (MLX5E_MAIN_GROUP0_SIZE +\
+                                MLX5E_MAIN_GROUP1_SIZE +\
+                                MLX5E_MAIN_GROUP2_SIZE +\
+                                MLX5E_MAIN_GROUP3_SIZE +\
+                                MLX5E_MAIN_GROUP4_SIZE +\
+                                MLX5E_MAIN_GROUP5_SIZE +\
+                                MLX5E_MAIN_GROUP6_SIZE +\
+                                MLX5E_MAIN_GROUP7_SIZE +\
+                                MLX5E_MAIN_GROUP8_SIZE)
+
+static int __mlx5e_create_main_groups(struct mlx5e_flow_table *ft, u32 *in,
+                                     int inlen)
+{
+       u8 *mc = MLX5_ADDR_OF(create_flow_group_in, in, match_criteria);
+       u8 *dmac = MLX5_ADDR_OF(create_flow_group_in, in,
+                               match_criteria.outer_headers.dmac_47_16);
+       int err;
+       int ix = 0;
+
+       memset(in, 0, inlen);
+       MLX5_SET_CFG(in, match_criteria_enable, MLX5_MATCH_OUTER_HEADERS);
+       MLX5_SET_TO_ONES(fte_match_param, mc, outer_headers.ethertype);
+       MLX5_SET_TO_ONES(fte_match_param, mc, outer_headers.ip_protocol);
+       MLX5_SET_CFG(in, start_flow_index, ix);
+       ix += MLX5E_MAIN_GROUP0_SIZE;
+       MLX5_SET_CFG(in, end_flow_index, ix - 1);
+       ft->g[ft->num_groups] = mlx5_create_flow_group(ft->t, in);
+       if (IS_ERR(ft->g[ft->num_groups]))
+               goto err_destroy_groups;
+       ft->num_groups++;
+
+       memset(in, 0, inlen);
+       MLX5_SET_CFG(in, match_criteria_enable, MLX5_MATCH_OUTER_HEADERS);
+       MLX5_SET_TO_ONES(fte_match_param, mc, outer_headers.ethertype);
+       MLX5_SET_CFG(in, start_flow_index, ix);
+       ix += MLX5E_MAIN_GROUP1_SIZE;
+       MLX5_SET_CFG(in, end_flow_index, ix - 1);
+       ft->g[ft->num_groups] = mlx5_create_flow_group(ft->t, in);
+       if (IS_ERR(ft->g[ft->num_groups]))
+               goto err_destroy_groups;
+       ft->num_groups++;
+
+       memset(in, 0, inlen);
+       MLX5_SET_CFG(in, start_flow_index, ix);
+       ix += MLX5E_MAIN_GROUP2_SIZE;
+       MLX5_SET_CFG(in, end_flow_index, ix - 1);
+       ft->g[ft->num_groups] = mlx5_create_flow_group(ft->t, in);
+       if (IS_ERR(ft->g[ft->num_groups]))
+               goto err_destroy_groups;
+       ft->num_groups++;
+
+       memset(in, 0, inlen);
+       MLX5_SET_CFG(in, match_criteria_enable, MLX5_MATCH_OUTER_HEADERS);
+       MLX5_SET_TO_ONES(fte_match_param, mc, outer_headers.ethertype);
+       MLX5_SET_TO_ONES(fte_match_param, mc, outer_headers.ip_protocol);
+       eth_broadcast_addr(dmac);
+       MLX5_SET_CFG(in, start_flow_index, ix);
+       ix += MLX5E_MAIN_GROUP3_SIZE;
+       MLX5_SET_CFG(in, end_flow_index, ix - 1);
+       ft->g[ft->num_groups] = mlx5_create_flow_group(ft->t, in);
+       if (IS_ERR(ft->g[ft->num_groups]))
+               goto err_destroy_groups;
+       ft->num_groups++;
+
+       memset(in, 0, inlen);
+       MLX5_SET_CFG(in, match_criteria_enable, MLX5_MATCH_OUTER_HEADERS);
+       MLX5_SET_TO_ONES(fte_match_param, mc, outer_headers.ethertype);
+       eth_broadcast_addr(dmac);
+       MLX5_SET_CFG(in, start_flow_index, ix);
+       ix += MLX5E_MAIN_GROUP4_SIZE;
+       MLX5_SET_CFG(in, end_flow_index, ix - 1);
+       ft->g[ft->num_groups] = mlx5_create_flow_group(ft->t, in);
+       if (IS_ERR(ft->g[ft->num_groups]))
+               goto err_destroy_groups;
+       ft->num_groups++;
+
+       memset(in, 0, inlen);
+       MLX5_SET_CFG(in, match_criteria_enable, MLX5_MATCH_OUTER_HEADERS);
+       eth_broadcast_addr(dmac);
+       MLX5_SET_CFG(in, start_flow_index, ix);
+       ix += MLX5E_MAIN_GROUP5_SIZE;
+       MLX5_SET_CFG(in, end_flow_index, ix - 1);
+       ft->g[ft->num_groups] = mlx5_create_flow_group(ft->t, in);
+       if (IS_ERR(ft->g[ft->num_groups]))
+               goto err_destroy_groups;
+       ft->num_groups++;
+
+       memset(in, 0, inlen);
+       MLX5_SET_CFG(in, match_criteria_enable, MLX5_MATCH_OUTER_HEADERS);
+       MLX5_SET_TO_ONES(fte_match_param, mc, outer_headers.ethertype);
+       MLX5_SET_TO_ONES(fte_match_param, mc, outer_headers.ip_protocol);
+       dmac[0] = 0x01;
+       MLX5_SET_CFG(in, start_flow_index, ix);
+       ix += MLX5E_MAIN_GROUP6_SIZE;
+       MLX5_SET_CFG(in, end_flow_index, ix - 1);
+       ft->g[ft->num_groups] = mlx5_create_flow_group(ft->t, in);
+       if (IS_ERR(ft->g[ft->num_groups]))
+               goto err_destroy_groups;
+       ft->num_groups++;
+
+       memset(in, 0, inlen);
+       MLX5_SET_CFG(in, match_criteria_enable, MLX5_MATCH_OUTER_HEADERS);
+       MLX5_SET_TO_ONES(fte_match_param, mc, outer_headers.ethertype);
+       dmac[0] = 0x01;
+       MLX5_SET_CFG(in, start_flow_index, ix);
+       ix += MLX5E_MAIN_GROUP7_SIZE;
+       MLX5_SET_CFG(in, end_flow_index, ix - 1);
+       ft->g[ft->num_groups] = mlx5_create_flow_group(ft->t, in);
+       if (IS_ERR(ft->g[ft->num_groups]))
+               goto err_destroy_groups;
+       ft->num_groups++;
+
+       memset(in, 0, inlen);
+       MLX5_SET_CFG(in, match_criteria_enable, MLX5_MATCH_OUTER_HEADERS);
+       dmac[0] = 0x01;
+       MLX5_SET_CFG(in, start_flow_index, ix);
+       ix += MLX5E_MAIN_GROUP8_SIZE;
+       MLX5_SET_CFG(in, end_flow_index, ix - 1);
+       ft->g[ft->num_groups] = mlx5_create_flow_group(ft->t, in);
+       if (IS_ERR(ft->g[ft->num_groups]))
+               goto err_destroy_groups;
+       ft->num_groups++;
+
+       return 0;
+
+err_destroy_groups:
+       err = PTR_ERR(ft->g[ft->num_groups]);
+       ft->g[ft->num_groups] = NULL;
+       mlx5e_destroy_groups(ft);
+
+       return err;
+}
+
+static int mlx5e_create_main_groups(struct mlx5e_flow_table *ft)
 {
-       struct mlx5_flow_table_group *g;
-       u8 *dmac;
+       u32 *in;
+       int inlen = MLX5_ST_SZ_BYTES(create_flow_group_in);
+       int err;
 
-       g = kcalloc(9, sizeof(*g), GFP_KERNEL);
-       if (!g)
+       in = mlx5_vzalloc(inlen);
+       if (!in)
                return -ENOMEM;
 
-       g[0].log_sz = 3;
-       g[0].match_criteria_enable = MLX5_MATCH_OUTER_HEADERS;
-       MLX5_SET_TO_ONES(fte_match_param, g[0].match_criteria,
-                        outer_headers.ethertype);
-       MLX5_SET_TO_ONES(fte_match_param, g[0].match_criteria,
-                        outer_headers.ip_protocol);
-
-       g[1].log_sz = 1;
-       g[1].match_criteria_enable = MLX5_MATCH_OUTER_HEADERS;
-       MLX5_SET_TO_ONES(fte_match_param, g[1].match_criteria,
-                        outer_headers.ethertype);
-
-       g[2].log_sz = 0;
-
-       g[3].log_sz = 14;
-       g[3].match_criteria_enable = MLX5_MATCH_OUTER_HEADERS;
-       dmac = MLX5_ADDR_OF(fte_match_param, g[3].match_criteria,
-                           outer_headers.dmac_47_16);
-       memset(dmac, 0xff, ETH_ALEN);
-       MLX5_SET_TO_ONES(fte_match_param, g[3].match_criteria,
-                        outer_headers.ethertype);
-       MLX5_SET_TO_ONES(fte_match_param, g[3].match_criteria,
-                        outer_headers.ip_protocol);
-
-       g[4].log_sz = 13;
-       g[4].match_criteria_enable = MLX5_MATCH_OUTER_HEADERS;
-       dmac = MLX5_ADDR_OF(fte_match_param, g[4].match_criteria,
-                           outer_headers.dmac_47_16);
-       memset(dmac, 0xff, ETH_ALEN);
-       MLX5_SET_TO_ONES(fte_match_param, g[4].match_criteria,
-                        outer_headers.ethertype);
-
-       g[5].log_sz = 11;
-       g[5].match_criteria_enable = MLX5_MATCH_OUTER_HEADERS;
-       dmac = MLX5_ADDR_OF(fte_match_param, g[5].match_criteria,
-                           outer_headers.dmac_47_16);
-       memset(dmac, 0xff, ETH_ALEN);
-
-       g[6].log_sz = 2;
-       g[6].match_criteria_enable = MLX5_MATCH_OUTER_HEADERS;
-       dmac = MLX5_ADDR_OF(fte_match_param, g[6].match_criteria,
-                           outer_headers.dmac_47_16);
-       dmac[0] = 0x01;
-       MLX5_SET_TO_ONES(fte_match_param, g[6].match_criteria,
-                        outer_headers.ethertype);
-       MLX5_SET_TO_ONES(fte_match_param, g[6].match_criteria,
-                        outer_headers.ip_protocol);
-
-       g[7].log_sz = 1;
-       g[7].match_criteria_enable = MLX5_MATCH_OUTER_HEADERS;
-       dmac = MLX5_ADDR_OF(fte_match_param, g[7].match_criteria,
-                           outer_headers.dmac_47_16);
-       dmac[0] = 0x01;
-       MLX5_SET_TO_ONES(fte_match_param, g[7].match_criteria,
-                        outer_headers.ethertype);
+       err = __mlx5e_create_main_groups(ft, in, inlen);
 
-       g[8].log_sz = 0;
-       g[8].match_criteria_enable = MLX5_MATCH_OUTER_HEADERS;
-       dmac = MLX5_ADDR_OF(fte_match_param, g[8].match_criteria,
-                           outer_headers.dmac_47_16);
-       dmac[0] = 0x01;
-       priv->ft.main = mlx5_create_flow_table(priv->mdev, 1,
-                                              MLX5_FLOW_TABLE_TYPE_NIC_RCV,
-                                              9, g);
-       kfree(g);
+       kvfree(in);
+       return err;
+}
+
+static int mlx5e_create_main_flow_table(struct mlx5e_priv *priv)
+{
+       struct mlx5e_flow_table *ft = &priv->fts.main;
+       int err;
+
+       ft->num_groups = 0;
+       ft->t = mlx5_create_flow_table(priv->fts.ns, 0, MLX5E_MAIN_TABLE_SIZE);
+
+       if (IS_ERR(ft->t)) {
+               err = PTR_ERR(ft->t);
+               ft->t = NULL;
+               return err;
+       }
+       ft->g = kcalloc(MLX5E_NUM_MAIN_GROUPS, sizeof(*ft->g), GFP_KERNEL);
+       if (!ft->g) {
+               err = -ENOMEM;
+               goto err_destroy_main_flow_table;
+       }
 
-       return priv->ft.main ? 0 : -ENOMEM;
+       err = mlx5e_create_main_groups(ft);
+       if (err)
+               goto err_free_g;
+       return 0;
+
+err_free_g:
+       kfree(ft->g);
+
+err_destroy_main_flow_table:
+       mlx5_destroy_flow_table(ft->t);
+       ft->t = NULL;
+
+       return err;
+}
+
+static void mlx5e_destroy_flow_table(struct mlx5e_flow_table *ft)
+{
+       mlx5e_destroy_groups(ft);
+       kfree(ft->g);
+       mlx5_destroy_flow_table(ft->t);
+       ft->t = NULL;
 }
 
 static void mlx5e_destroy_main_flow_table(struct mlx5e_priv *priv)
 {
-       mlx5_destroy_flow_table(priv->ft.main);
+       mlx5e_destroy_flow_table(&priv->fts.main);
 }
 
-static int mlx5e_create_vlan_flow_table(struct mlx5e_priv *priv)
+#define MLX5E_NUM_VLAN_GROUPS  2
+#define MLX5E_VLAN_GROUP0_SIZE BIT(12)
+#define MLX5E_VLAN_GROUP1_SIZE BIT(1)
+#define MLX5E_VLAN_TABLE_SIZE  (MLX5E_VLAN_GROUP0_SIZE +\
+                                MLX5E_VLAN_GROUP1_SIZE)
+
+static int __mlx5e_create_vlan_groups(struct mlx5e_flow_table *ft, u32 *in,
+                                     int inlen)
 {
-       struct mlx5_flow_table_group *g;
+       int err;
+       int ix = 0;
+       u8 *mc = MLX5_ADDR_OF(create_flow_group_in, in, match_criteria);
+
+       memset(in, 0, inlen);
+       MLX5_SET_CFG(in, match_criteria_enable, MLX5_MATCH_OUTER_HEADERS);
+       MLX5_SET_TO_ONES(fte_match_param, mc, outer_headers.vlan_tag);
+       MLX5_SET_TO_ONES(fte_match_param, mc, outer_headers.first_vid);
+       MLX5_SET_CFG(in, start_flow_index, ix);
+       ix += MLX5E_VLAN_GROUP0_SIZE;
+       MLX5_SET_CFG(in, end_flow_index, ix - 1);
+       ft->g[ft->num_groups] = mlx5_create_flow_group(ft->t, in);
+       if (IS_ERR(ft->g[ft->num_groups]))
+               goto err_destroy_groups;
+       ft->num_groups++;
+
+       memset(in, 0, inlen);
+       MLX5_SET_CFG(in, match_criteria_enable, MLX5_MATCH_OUTER_HEADERS);
+       MLX5_SET_TO_ONES(fte_match_param, mc, outer_headers.vlan_tag);
+       MLX5_SET_CFG(in, start_flow_index, ix);
+       ix += MLX5E_VLAN_GROUP1_SIZE;
+       MLX5_SET_CFG(in, end_flow_index, ix - 1);
+       ft->g[ft->num_groups] = mlx5_create_flow_group(ft->t, in);
+       if (IS_ERR(ft->g[ft->num_groups]))
+               goto err_destroy_groups;
+       ft->num_groups++;
+
+       return 0;
+
+err_destroy_groups:
+       err = PTR_ERR(ft->g[ft->num_groups]);
+       ft->g[ft->num_groups] = NULL;
+       mlx5e_destroy_groups(ft);
+
+       return err;
+}
+
+static int mlx5e_create_vlan_groups(struct mlx5e_flow_table *ft)
+{
+       u32 *in;
+       int inlen = MLX5_ST_SZ_BYTES(create_flow_group_in);
+       int err;
 
-       g = kcalloc(2, sizeof(*g), GFP_KERNEL);
-       if (!g)
+       in = mlx5_vzalloc(inlen);
+       if (!in)
                return -ENOMEM;
 
-       g[0].log_sz = 12;
-       g[0].match_criteria_enable = MLX5_MATCH_OUTER_HEADERS;
-       MLX5_SET_TO_ONES(fte_match_param, g[0].match_criteria,
-                        outer_headers.vlan_tag);
-       MLX5_SET_TO_ONES(fte_match_param, g[0].match_criteria,
-                        outer_headers.first_vid);
+       err = __mlx5e_create_vlan_groups(ft, in, inlen);
+
+       kvfree(in);
+       return err;
+}
+
+static int mlx5e_create_vlan_flow_table(struct mlx5e_priv *priv)
+{
+       struct mlx5e_flow_table *ft = &priv->fts.vlan;
+       int err;
+
+       ft->num_groups = 0;
+       ft->t = mlx5_create_flow_table(priv->fts.ns, 0, MLX5E_VLAN_TABLE_SIZE);
 
-       /* untagged + any vlan id */
-       g[1].log_sz = 1;
-       g[1].match_criteria_enable = MLX5_MATCH_OUTER_HEADERS;
-       MLX5_SET_TO_ONES(fte_match_param, g[1].match_criteria,
-                        outer_headers.vlan_tag);
+       if (IS_ERR(ft->t)) {
+               err = PTR_ERR(ft->t);
+               ft->t = NULL;
+               return err;
+       }
+       ft->g = kcalloc(MLX5E_NUM_VLAN_GROUPS, sizeof(*ft->g), GFP_KERNEL);
+       if (!ft->g) {
+               err = -ENOMEM;
+               goto err_destroy_vlan_flow_table;
+       }
 
-       priv->ft.vlan = mlx5_create_flow_table(priv->mdev, 0,
-                                              MLX5_FLOW_TABLE_TYPE_NIC_RCV,
-                                              2, g);
+       err = mlx5e_create_vlan_groups(ft);
+       if (err)
+               goto err_free_g;
 
-       kfree(g);
-       return priv->ft.vlan ? 0 : -ENOMEM;
+       return 0;
+
+err_free_g:
+       kfree(ft->g);
+
+err_destroy_vlan_flow_table:
+       mlx5_destroy_flow_table(ft->t);
+       ft->t = NULL;
+
+       return err;
 }
 
 static void mlx5e_destroy_vlan_flow_table(struct mlx5e_priv *priv)
 {
-       mlx5_destroy_flow_table(priv->ft.vlan);
+       mlx5e_destroy_flow_table(&priv->fts.vlan);
 }
 
 int mlx5e_create_flow_tables(struct mlx5e_priv *priv)
 {
        int err;
 
-       err = mlx5e_create_main_flow_table(priv);
+       priv->fts.ns = mlx5_get_flow_namespace(priv->mdev,
+                                              MLX5_FLOW_NAMESPACE_KERNEL);
+
+       if (!priv->fts.ns)
+               return -EINVAL;
+
+       err = mlx5e_create_vlan_flow_table(priv);
        if (err)
                return err;
 
-       err = mlx5e_create_vlan_flow_table(priv);
+       err = mlx5e_create_main_flow_table(priv);
        if (err)
-               goto err_destroy_main_flow_table;
+               goto err_destroy_vlan_flow_table;
 
        err = mlx5e_add_vlan_rule(priv, MLX5E_VLAN_RULE_TYPE_UNTAGGED, 0);
        if (err)
-               goto err_destroy_vlan_flow_table;
+               goto err_destroy_main_flow_table;
 
        return 0;
 
-err_destroy_vlan_flow_table:
-       mlx5e_destroy_vlan_flow_table(priv);
-
 err_destroy_main_flow_table:
        mlx5e_destroy_main_flow_table(priv);
+err_destroy_vlan_flow_table:
+       mlx5e_destroy_vlan_flow_table(priv);
 
        return err;
 }
@@ -902,6 +1219,6 @@ err_destroy_main_flow_table:
 void mlx5e_destroy_flow_tables(struct mlx5e_priv *priv)
 {
        mlx5e_del_vlan_rule(priv, MLX5E_VLAN_RULE_TYPE_UNTAGGED, 0);
-       mlx5e_destroy_vlan_flow_table(priv);
        mlx5e_destroy_main_flow_table(priv);
+       mlx5e_destroy_vlan_flow_table(priv);
 }