When an XDP/XSK program is bound to a network interface queue, configuring ntuple rules via ethtool fails to take effect. The user must first disable the ntuple feature, then re-enable it for the rules to apply. However, disabling ntuple disrupts the XDP/XSK functionality.
The ntuple filter rule:
ethtool -N enp61s0f0 flow-type udp4 src-ip 192.168.1.1 action -1
To disable ntuple feature:
ethtool -K enp61s0f0 ntuple off
i40e driver:
# ethtool -i enp61s0f0
driver: i40e
version: 6.5.0-1034
firmware-version: 4.10 0x80001a63 1.2585.0
expansion-rom-version:
bus-info: 0000:3d:00.0
supports-statistics: yes
supports-test: yes
supports-eeprom-access: yes
supports-register-dump: yes
supports-priv-flags: yes