Skip to content

The egress ACL table fails to bind to channel ports on the Xsight ES9618XX device. - #136

Merged
yehjunying merged 1 commit into
edge-core:202311.X_x2devfrom
ezio-chen:202311.X_x2dev_acl
Aug 6, 2025
Merged

The egress ACL table fails to bind to channel ports on the Xsight ES9618XX device.#136
yehjunying merged 1 commit into
edge-core:202311.X_x2devfrom
ezio-chen:202311.X_x2dev_acl

Conversation

@ezio-chen

@ezio-chen ezio-chen commented Aug 6, 2025

Copy link
Copy Markdown
Contributor

Why I did it
The egress ACL table fails to bind to channel ports on the Xsight ES9618XX device.

What I did
With the addition of support for the Xsight ES9618XX device, some platform-specific behaviors previously applied only to Broadcom need to be adjusted. The following changes were restricted to the Broadcom platform:

  • Egress ACL tables are now only applied to physical ports; channel ports are not supported.
  • Replaced EtherType with IP type in ACL matches.
  • Removed L4 source/destination port range support for egress ACL tables.

How I verified it
Executed test_acl.py to ensure the changes do not introduce side effects. Verified on the following platforms:

  • ES9618XX (Xsight)
  • AS9817-64D (Broadcom)

…tforms.

- Why I did it:
Previously, several workarounds were introduced for the Egress ACL table to
accommodate limitations on Broadcom chips.
These changes included:
  * Only supporting SAI_ACL_BIND_POINT_TYPE_PORT.
  * Replacing SAI_ACL_TABLE_ATTR_FIELD_ETHER_TYPE with SAI_ACL_TABLE_ATTR_FIELD_ACL_IP_TYPE.
  * Removing SAI_ACL_TABLE_ATTR_FIELD_ACL_RANGE_TYPE.
However, these modifications were applied globally and are not necessary for
non-Broadcom platforms, such as Xsight.

- What I did:
This commit refactors the implementation to ensure these specific workarounds
are conditionally applied only when the underlying hardware is a Broadcom
platform.

- How I verified it:
The test_acl.py automation suite was run to verify the change. Tests passed
successfully on both platforms, confirming the correct behavior:
  * ES9618XX (Xsight)
  * AS9817-64D (Broadcom)
@ezio-chen ezio-chen changed the title ACL: Scope the Egress ACL table changes to apply only to Broadcom The egress ACL table fails to bind to channel ports on the Xsight ES9618XX device. Aug 6, 2025
@yehjunying
yehjunying merged commit 75f6f10 into edge-core:202311.X_x2dev Aug 6, 2025
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants