/*
 * CDDL HEADER START
 *
 * The contents of this file are subject to the terms of the
 * Common Development and Distribution License (the "License").
 * You may not use this file except in compliance with the License.
 *
 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
 * or http://www.opensolaris.org/os/licensing.
 * See the License for the specific language governing permissions
 * and limitations under the License.
 *
 * When distributing Covered Code, include this CDDL HEADER in each
 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
 * If applicable, add the following below this CDDL HEADER, with the
 * fields enclosed by brackets "[]" replaced with your own identifying
 * information: Portions Copyright [yyyy] [name of copyright owner]
 *
 * CDDL HEADER END
 */

/*
 * Copyright (c) 2010, Oracle and/or its affiliates. All rights reserved.
 */

#include <sys/types.h>
#include <sys/kmem.h>
#include <sys/conf.h>
#include <sys/ddi.h>
#include <sys/sunddi.h>
#include <sys/ksynch.h>
#include <sys/pattr.h>			/* HCK_* */
#include <inet/ip.h>			/* ipha_t */
#include <inet/tcp.h>			/* tcph_t */
#include <sys/mac_provider.h>		/* mac_* */
#include <sys/strsun.h>			/* MBLKL */

#include <sys/ib/clients/eoib/eib_impl.h>

/*
 * Declarations private to this file
 */
static int eib_data_setup_cqs(eib_t *, eib_vnic_t *);
static int eib_data_setup_ud_channel(eib_t *, eib_vnic_t *);
static void eib_data_setup_lso(eib_wqe_t *, mblk_t *, uint32_t,
    eib_ether_hdr_t *);
static int eib_data_prepare_sgl(eib_vnic_t *, eib_wqe_t *, mblk_t *);
static int eib_data_is_mcast_pkt_ok(eib_vnic_t *, uint8_t *, uint64_t *,
    uint64_t *);
static void eib_data_rx_comp_intr(ibt_cq_hdl_t, void *);
static void eib_data_tx_comp_intr(ibt_cq_hdl_t, void *);
static mblk_t *eib_data_rx_comp(eib_vnic_t *, eib_wqe_t *, ibt_wc_t *);
static void eib_data_tx_comp(eib_vnic_t *, eib_wqe_t *, eib_chan_t *);
static void eib_data_err_comp(eib_vnic_t *, eib_wqe_t *, ibt_wc_t *);
static void eib_rb_data_setup_cqs(eib_t *, eib_vnic_t *);
static void eib_rb_data_setup_ud_channel(eib_t *, eib_vnic_t *);


int
eib_data_create_qp(eib_t *ss, eib_vnic_t *vnic, int *err)
{
	eib_chan_t *chan = NULL;

	/*
	 * Allocate a eib_chan_t to store stuff about this vnic's data qp
	 * and initialize it with default admin qp pkey parameters. We'll
	 * re-associate this with the pkey we receive from the gw once we
	 * receive the login ack.
	 */
	vnic->vn_data_chan = eib_chan_init();

	chan = vnic->vn_data_chan;
	chan->ch_pkey = ss->ei_admin_chan->ch_pkey;
	chan->ch_pkey_ix = ss->ei_admin_chan->ch_pkey_ix;
	chan->ch_vnic_inst = vnic->vn_instance;

	/*
	 * Setup tx/rx CQs and completion handlers
	 */
	if (eib_data_setup_cqs(ss, vnic) != EIB_E_SUCCESS) {
		EIB_DPRINTF_ERR(ss->ei_instance, "eib_data_create_qp: "
		    "eib_data_setup_cqs(vn_inst=0x%x) failed",
		    vnic->vn_instance);
		*err = ENOMEM;
		goto data_create_qp_fail;
	}

	/*
	 * Setup UD channel
	 */
	if (eib_data_setup_ud_channel(ss, vnic) != EIB_E_SUCCESS) {
		EIB_DPRINTF_ERR(ss->ei_instance, "eib_data_create_qp: "
		    "eib_data_setup_ud_channel(vn_inst=0x%x) failed",
		    vnic->vn_instance);
		*err = ENOMEM;
		goto data_create_qp_fail;
	}

	return (EIB_E_SUCCESS);

data_create_qp_fail:
	eib_rb_data_create_qp(ss, vnic);
	return (EIB_E_FAILURE);
}

/*ARGSUSED*/
uint_t
eib_data_rx_comp_handler(caddr_t arg1, caddr_t arg2)
{
	eib_vnic_t *vnic = (eib_vnic_t *)(void *)arg1;
	eib_t *ss = vnic->vn_ss;
	eib_chan_t *chan = vnic->vn_data_chan;
	eib_stats_t *stats = ss->ei_stats;
	ibt_wc_t *wc;
	eib_wqe_t *wqe;
	mblk_t *mp;
	mblk_t *head = NULL;
	mblk_t *tail = NULL;
	ibt_status_t ret;
	uint_t pkts_per_call = 0;
	uint_t polled;
	uint_t rbytes;
	uint_t ipkts;
	uint_t num_wc;
	int i;

	/*
	 * Re-arm the rx notification callback before we start polling
	 * the completion queue.  There's nothing much we can do if the
	 * enable_cq_notify fails - we issue a warning and move on.
	 */
	ret = ibt_enable_cq_notify(chan->ch_rcv_cq_hdl, IBT_NEXT_COMPLETION);
	if (ret != IBT_SUCCESS) {
		EIB_DPRINTF_WARN(ss->ei_instance, "eib_data_rx_comp_handler: "
		    "ibt_enable_cq_notify() failed, ret=%d", ret);
	}

	/*
	 * We don't want to be stuck in receive processing for too long without
	 * giving others a chance.
	 */
	num_wc = (chan->ch_rcv_cq_sz < EIB_MAX_RX_PKTS_ONINTR) ?
	    chan->ch_rcv_cq_sz : EIB_MAX_RX_PKTS_ONINTR;

	/*
	 * Handle rx completions
	 */
	while ((ret = ibt_poll_cq(chan->ch_rcv_cq_hdl, chan->ch_rcv_wc,
	    num_wc, &polled)) == IBT_SUCCESS) {

		rbytes = ipkts = 0;
		head = tail = NULL;

		for (wc = chan->ch_rcv_wc, i = 0; i < polled; i++, wc++) {
			wqe = (eib_wqe_t *)(uintptr_t)wc->wc_id;

			ASSERT(EIB_WQE_TYPE(wqe->qe_info) == EIB_WQE_RX);

			/*
			 * Clear the posted-to-hca flag and reduce the number
			 * of posted-rwqes count
			 */
			wqe->qe_info &= (~EIB_WQE_FLG_POSTED_TO_HCA);
			eib_rsrc_decr_posted_rwqe(ss, chan);

			rbytes += wc->wc_bytes_xfer;
			if (wc->wc_status != IBT_WC_SUCCESS) {
				EIB_INCR_COUNTER(&stats->st_ierrors);
				eib_data_err_comp(vnic, wqe, wc);
			} else {
				ipkts++;
				mp = eib_data_rx_comp(vnic, wqe, wc);
				if (mp == NULL) {
					continue;
				} else {
					/*
					 * Add this mp to the list to
					 * send it to the nw layer. Note
					 * that the wqe could've been
					 * returned to the pool if we're
					 * running low, so don't process
					 * wqe after this point.
					 */
					if (head)
						tail->b_next = mp;
					else
						head = mp;
					tail = mp;
				}
			}
		}

		/*
		 * We reduce the number of atomic updates to key statistics
		 * by pooling them here, once per ibt_poll_cq().  The accuracy
		 * and consistency of the published statistics within a cq
		 * polling cycle will be compromised a little bit, but that
		 * should be ok, given that we probably gain a little bit by
		 * not having to do these atomic operations per packet.
		 */
		EIB_UPDATE_COUNTER(&stats->st_rbytes, rbytes);
		EIB_UPDATE_COUNTER(&stats->st_ipkts, ipkts);

		pkts_per_call += ipkts;

		if (head) {
			mac_rx(ss->ei_mac_hdl, NULL, head);
		}

		/*
		 * If we have processed too many packets in one attempt, we'll
		 * have to come back here later.
		 */
		if (pkts_per_call >= EIB_MAX_RX_PKTS_ONINTR) {
			(void) ddi_intr_trigger_softint(vnic->vn_data_rx_si_hdl,
			    NULL);
			break;
		}

		num_wc -= polled;
	}

	return (DDI_INTR_CLAIMED);
}

/*ARGSUSED*/
uint_t
eib_data_tx_comp_handler(caddr_t arg1, caddr_t arg2)
{
	eib_vnic_t *vnic = (eib_vnic_t *)(void *)arg1;
	eib_t *ss = vnic->vn_ss;
	eib_chan_t *chan = vnic->vn_data_chan;
	eib_stats_t *stats = ss->ei_stats;
	ibt_wc_t *wc;
	eib_wqe_t *wqe;
	ibt_status_t ret;
	uint_t polled;
	int i;

	/*
	 * Re-arm the tx notification callback before we start polling
	 * the completion queue.  There's nothing much we can do if the
	 * enable_cq_notify fails - we issue a warning and move on.
	 */
	ret = ibt_enable_cq_notify(chan->ch_cq_hdl, IBT_NEXT_COMPLETION);
	if (ret != IBT_SUCCESS) {
		EIB_DPRINTF_WARN(ss->ei_instance, "eib_data_tx_comp_handler: "
		    "ibt_enable_cq_notify() failed, ret=%d", ret);
	}

	/*
	 * Handle tx completions
	 */
	while ((ret = ibt_poll_cq(chan->ch_cq_hdl, chan->ch_wc, chan->ch_cq_sz,
	    &polled)) == IBT_SUCCESS) {
		for (wc = chan->ch_wc, i = 0; i < polled; i++, wc++) {
			wqe = (eib_wqe_t *)(uintptr_t)wc->wc_id;

			ASSERT(EIB_WQE_TYPE(wqe->qe_info) == EIB_WQE_TX);

			if (wc->wc_status != IBT_WC_SUCCESS) {
				EIB_INCR_COUNTER(&stats->st_oerrors);
				eib_data_err_comp(vnic, wqe, wc);
			} else {
				eib_data_tx_comp(vnic, wqe, vnic->vn_data_chan);
			}
		}
	}

	return (DDI_INTR_CLAIMED);
}

void
eib_data_rx_recycle(caddr_t arg)
{
	eib_wqe_t *rwqe = (eib_wqe_t *)(void *)arg;
	eib_t *ss = rwqe->qe_pool->wp_ss;
	eib_chan_t *vn_chan;
	uint_t nic_state;
	int ret;

	/*
	 * We come here from three places - (a) from the nw layer if the
	 * rx mblk we handed to it has been done with and the nw layer is
	 * calling the freemsg() (b) from eib_data_rx_comp() if the rx
	 * completion processing discovers that the received EoIB packet
	 * has a problem and (c) from eib_data_err_comp() if we're tearing
	 * down this channel.  We only need to repost the rwqe if we're
	 * being called back from the nw layer.  For the other two cases,
	 * we'll simply return the rwqe to the pool. Also, since we would've
	 * already updated the ch_rx_posted counters in the rx completion
	 * handler, we don't pass the chan pointer to eib_rsrc_return_rwqe
	 * from within this routine.
	 */
	rwqe->qe_mp = NULL;
	if ((rwqe->qe_info & EIB_WQE_FLG_WITH_NW) == 0) {
		eib_rsrc_return_rwqe(ss, rwqe, NULL);
		return;
	}

	rwqe->qe_info &= (~EIB_WQE_FLG_WITH_NW);

	/*
	 * If the buffers are being returned by nw layer after a long
	 * time, this eoib instance could've even been stopped by now.
	 * If so, simply return the rwqe to the pool.
	 */
	nic_state = eib_mac_get_nic_state(ss);
	if ((nic_state & EIB_NIC_STARTED) != EIB_NIC_STARTED) {
		eib_rsrc_return_rwqe(ss, rwqe, NULL);
		return;
	}

	/*
	 * Or it could've taken even longer, and the nic has even been
	 * restarted.  Only thing we can do is to make sure that the
	 * original channel pointer we passed corresponds to what's in
	 * the instance of the vnic currently.
	 */
	vn_chan = eib_vnic_get_data_chan(ss, rwqe->qe_vnic_inst);
	if (vn_chan == NULL || vn_chan != rwqe->qe_chan) {
		eib_rsrc_return_rwqe(ss, rwqe, NULL);
		return;
	}

	/*
	 * Try to repost the rwqe if we're not tearing down this channel
	 */
	if (vn_chan->ch_tear_down) {
		eib_rsrc_return_rwqe(ss, rwqe, NULL);
	} else {
		ret = eib_chan_post_recv(ss, vn_chan, rwqe);
		if (ret != EIB_E_SUCCESS) {
			if (rwqe->qe_mp)
				freemsg(rwqe->qe_mp);
			else
				eib_rsrc_return_rwqe(ss, rwqe, NULL);
		}
	}
}

void
eib_data_post_tx(eib_vnic_t *vnic, eib_wqe_t *swqe)
{
	eib_chan_t *chan = vnic->vn_data_chan;
	eib_t *ss = vnic->vn_ss;
	eib_stats_t *stats = vnic->vn_ss->ei_stats;
	ibt_send_wr_t wrs[EIB_MAX_POST_MULTIPLE];
	eib_wqe_t *wqes[EIB_MAX_POST_MULTIPLE];
	eib_wqe_t *elem;
	ibt_status_t ret;
	uint_t n_wrs;
	uint_t n_posted;
	uint_t total_failed = 0;
	uint_t n_failed = 0;
	uint_t i;

	/*
	 * See if we have room for this wqe and then add it to the
	 * list of tx wrs to post in this channel.
	 */
	mutex_enter(&chan->ch_tx_lock);

	if ((chan->ch_tx_posted + 1) >= (chan->ch_max_swqes - 1)) {
		EIB_DPRINTF_WARN(ss->ei_instance, "eib_data_post_tx: "
		    "too many swqes posted already, posted=0x%lx, "
		    "max=0x%lx", chan->ch_tx_posted, chan->ch_max_swqes);
		mutex_exit(&chan->ch_tx_lock);
		return;
	}

	swqe->qe_nxt_post = NULL;
	if (chan->ch_tx) {
		chan->ch_tx_tail->qe_nxt_post = swqe;
	} else {
		chan->ch_tx = swqe;
	}
	chan->ch_tx_tail = swqe;
	chan->ch_tx_posted++;		/* pre-increment */

	/*
	 * If someone's already posting tx wqes in this channel, let
	 * them post ours as well.
	 */
	if (chan->ch_tx_busy == B_TRUE) {
		mutex_exit(&chan->ch_tx_lock);
		return;
	}
	chan->ch_tx_busy = B_TRUE;

	while (chan->ch_tx) {
		/*
		 * Post EIB_MAX_POST_MULTIPLE wrs at a time
		 */
		for (n_wrs = 0, elem = chan->ch_tx;
		    (elem) && (n_wrs < EIB_MAX_POST_MULTIPLE);
		    elem = elem->qe_nxt_post, n_wrs++) {
			wqes[n_wrs] = elem;
			wrs[n_wrs] = (elem->qe_wr).send;
		}
		chan->ch_tx = elem;
		if (elem == NULL) {
			chan->ch_tx_tail = NULL;
		}
		mutex_exit(&chan->ch_tx_lock);

		ASSERT(n_wrs != 0);

		/*
		 * If multiple wrs posting fails for some reason, we'll try
		 * posting the unposted ones one by one.  If even that fails,
		 * we'll release any mappings/buffers/mblks associated with
		 * this wqe and return it to the pool.
		 */
		n_posted = n_failed = 0;
		ret = ibt_post_send(chan->ch_chan, wrs, n_wrs, &n_posted);
		if (ret != IBT_SUCCESS) {
			EIB_DPRINTF_WARN(ss->ei_instance, "eib_data_post_tx: "
			    "ibt_post_send(n_wrs=0x%lx, n_posted=0x%lx) "
			    "failed, ret=%d", n_wrs, n_posted, ret);

			for (i = n_posted; i < n_wrs; i++) {
				ret = ibt_post_send(chan->ch_chan, &wrs[i],
				    1, NULL);
				if (ret != IBT_SUCCESS) {
					n_failed++;
					eib_data_tx_comp(vnic, wqes[i], chan);

					EIB_DPRINTF_WARN(ss->ei_instance,
					    "eib_data_post_tx: "
					    "ibt_post_send(n_wrs=1) failed, "
					    "ret=%d", ret);
				}
			}
		}
		total_failed += n_failed;

		mutex_enter(&chan->ch_tx_lock);
	}

	chan->ch_tx_busy = B_FALSE;
	mutex_exit(&chan->ch_tx_lock);

	/*
	 * If we failed to post something, update error stats
	 */
	if (total_failed) {
		EIB_UPDATE_COUNTER(&stats->st_oerrors, total_failed);
	}
}

void
eib_data_parse_ether_hdr(mblk_t *mp, eib_ether_hdr_t *evh)
{
	struct ether_vlan_header *vl_hdr;
	struct ether_header *hdr;

	/*
	 * Assume that the ether header (with or without vlan tag) is
	 * contained in one fragment
	 */
	hdr = (struct ether_header *)(void *)mp->b_rptr;
	vl_hdr = (struct ether_vlan_header *)(void *)mp->b_rptr;

	evh->eh_ether_type = ntohs(hdr->ether_type);
	if (evh->eh_ether_type != ETHERTYPE_VLAN) {
		evh->eh_tagless = 1;
		evh->eh_vlan = 0;
		ether_copy((void *)hdr->ether_dhost.ether_addr_octet,
		    (void *)evh->eh_dmac);
		ether_copy((void *)hdr->ether_shost.ether_addr_octet,
		    (void *)evh->eh_smac);
	} else {
		evh->eh_ether_type = ntohs(vl_hdr->ether_type);
		evh->eh_tagless = 0;
		evh->eh_vlan = VLAN_ID(ntohs(vl_hdr->ether_tci));
		ether_copy((void *)vl_hdr->ether_dhost.ether_addr_octet,
		    (void *)evh->eh_dmac);
		ether_copy((void *)vl_hdr->ether_shost.ether_addr_octet,
		    (void *)evh->eh_smac);
	}
}

int
eib_data_lookup_vnic(eib_t *ss, uint8_t *mac, uint16_t vlan, eib_vnic_t **vnicp,
    boolean_t *failed)
{
	eib_vnic_t *vnic;
	eib_vnic_req_t *vrq;
	uint8_t *vn_mac;
	uint16_t vn_vlan;
	uint64_t av;
	int inst = 0;

	if (mac == NULL)
		return (EIB_E_FAILURE);

	/*
	 * For now, a simple search (but only what we've allocated). Note that
	 * if we're in the process of creating a vnic, the instance might've
	 * been allocated, but the vnic entry would be NULL.
	 */
	mutex_enter(&ss->ei_vnic_lock);
	av = ss->ei_active_vnics;
	while ((inst = EIB_FIND_LSB_SET(av)) != -1) {
		if ((vnic = ss->ei_vnic[inst]) != NULL) {
			vn_mac = vnic->vn_login_data.ld_assigned_mac;
			vn_vlan = vnic->vn_login_data.ld_assigned_vlan;

			if ((vn_vlan == vlan) &&
			    (bcmp(vn_mac, mac, ETHERADDRL) == 0)) {
				if (vnicp) {
					*vnicp = vnic;
				}
				mutex_exit(&ss->ei_vnic_lock);
				return (EIB_E_SUCCESS);
			}
		}

		av &= (~((uint64_t)1 << inst));
	}
	mutex_exit(&ss->ei_vnic_lock);

	/*
	 * If we haven't been able to locate a vnic for this {mac,vlan} tuple,
	 * see if we've already failed a creation request for this vnic, and
	 * return that information.
	 */
	if (failed) {
		mutex_enter(&ss->ei_vnic_req_lock);
		*failed = B_FALSE;
		for (vrq = ss->ei_failed_vnic_req; vrq; vrq = vrq->vr_next) {
			if ((vrq->vr_vlan == vlan) &&
			    (bcmp(vrq->vr_mac, mac, ETHERADDRL) == 0)) {
				*failed = B_TRUE;
			}
		}
		mutex_exit(&ss->ei_vnic_req_lock);
	}

	return (EIB_E_FAILURE);
}

int
eib_data_prepare_frame(eib_vnic_t *vnic, eib_wqe_t *swqe, mblk_t *mp,
    eib_ether_hdr_t *evh)
{
	uint32_t mss;
	uint32_t lsoflags;
	uint32_t hckflags;

	/*
	 * The swqe defaults are set to use the regular ud work request
	 * member and the IBT_WRC_SEND opcode, so we don't need to do
	 * anything here if this isn't an LSO packet.
	 */
	mac_lso_get(mp, &mss, &lsoflags);
	if ((lsoflags & HW_LSO) == HW_LSO)
		eib_data_setup_lso(swqe, mp, mss, evh);

	mac_hcksum_get(mp, NULL, NULL, NULL, NULL, &hckflags);
	if ((hckflags & HCK_FULLCKSUM) == HCK_FULLCKSUM) {
		swqe->qe_wr.send.wr_flags |= IBT_WR_SEND_CKSUM;
	} else {
		swqe->qe_wr.send.wr_flags &= (~IBT_WR_SEND_CKSUM);
	}

	if (eib_data_prepare_sgl(vnic, swqe, mp) != 0)
		return (EIB_E_FAILURE);

	swqe->qe_mp = mp;

	return (EIB_E_SUCCESS);
}

void
eib_rb_data_create_qp(eib_t *ss, eib_vnic_t *vnic)
{
	eib_rb_data_setup_ud_channel(ss, vnic);

	eib_rb_data_setup_cqs(ss, vnic);

	eib_chan_fini(vnic->vn_data_chan);
	vnic->vn_data_chan = NULL;
}

static int
eib_data_setup_cqs(eib_t *ss, eib_vnic_t *vnic)
{
	eib_chan_t *chan = vnic->vn_data_chan;
	ibt_cq_attr_t cq_attr;
	ibt_status_t ret;
	uint_t snd_sz;
	uint_t rcv_sz;
	int rv;

	/*
	 * Allocate send completion queue. Note that we've already verified
	 * that cp_max_swqe and cp_max_rwqe meet the max cq size requirements
	 * of the hca.
	 */
	cq_attr.cq_sched = NULL;
	cq_attr.cq_flags = IBT_CQ_NO_FLAGS;
	cq_attr.cq_size = ss->ei_caps->cp_max_swqe + 1;

	ret = ibt_alloc_cq(ss->ei_hca_hdl, &cq_attr, &chan->ch_cq_hdl, &snd_sz);
	if (ret != IBT_SUCCESS) {
		EIB_DPRINTF_ERR(ss->ei_instance, "eib_data_setup_cqs: "
		    "ibt_alloc_cq(snd_cq_sz=0x%lx) failed, ret=%d",
		    cq_attr.cq_size, ret);
		goto setup_data_cqs_fail;
	}
	ret = ibt_modify_cq(chan->ch_cq_hdl, EIB_TX_COMP_COUNT,
	    EIB_TX_COMP_USEC, 0);
	if (ret != IBT_SUCCESS) {
		EIB_DPRINTF_WARN(ss->ei_instance, "eib_data_setup_cqs: "
		    "ibt_modify_cq(snd_comp_count=0x%lx, snd_comp_usec=0x%lx) "
		    "failed, ret=%d",
		    EIB_TX_COMP_COUNT, EIB_TX_COMP_USEC, ret);
	}

	/*
	 * Allocate receive completion queue
	 */
	cq_attr.cq_sched = NULL;
	cq_attr.cq_flags = IBT_CQ_NO_FLAGS;
	cq_attr.cq_size = ss->ei_caps->cp_max_rwqe + 1;

	ret = ibt_alloc_cq(ss->ei_hca_hdl, &cq_attr, &chan->ch_rcv_cq_hdl,
	    &rcv_sz);
	if (ret != IBT_SUCCESS) {
		EIB_DPRINTF_ERR(ss->ei_instance, "eib_data_setup_cqs: "
		    "ibt_alloc_cq(rcv_cq_sz=0x%lx) failed, ret=%d",
		    cq_attr.cq_size, ret);
		goto setup_data_cqs_fail;
	}
	ret = ibt_modify_cq(chan->ch_rcv_cq_hdl, EIB_RX_COMP_COUNT,
	    EIB_RX_COMP_USEC, 0);
	if (ret != IBT_SUCCESS) {
		EIB_DPRINTF_WARN(ss->ei_instance, "eib_data_setup_cqs: "
		    "ibt_modify_cq(rcv_comp_count=0x%lx, rcv_comp_usec=0x%lx) "
		    "failed, ret=%d",
		    EIB_RX_COMP_COUNT, EIB_RX_COMP_USEC, ret);
	}

	/*
	 * Set up parameters for collecting tx and rx completion information
	 */
	chan->ch_cq_sz = snd_sz;
	chan->ch_wc = kmem_zalloc(sizeof (ibt_wc_t) * snd_sz, KM_SLEEP);
	chan->ch_rcv_cq_sz = rcv_sz;
	chan->ch_rcv_wc = kmem_zalloc(sizeof (ibt_wc_t) * rcv_sz, KM_SLEEP);

	/*
	 * Set up the vnic's data tx completion queue handler and allocate
	 * a softint for it as well.
	 */
	if ((rv = ddi_intr_add_softint(ss->ei_dip, &vnic->vn_data_tx_si_hdl,
	    EIB_SOFTPRI_DATA, eib_data_tx_comp_handler, vnic)) != DDI_SUCCESS) {
		EIB_DPRINTF_ERR(ss->ei_instance, "eib_data_setup_cqs: "
		    "ddi_intr_add_softint() failed for data tx qp, ret=%d", rv);
		goto setup_data_cqs_fail;
	}
	ibt_set_cq_handler(chan->ch_cq_hdl, eib_data_tx_comp_intr, vnic);
	ret = ibt_enable_cq_notify(chan->ch_cq_hdl, IBT_NEXT_COMPLETION);
	if (ret != IBT_SUCCESS) {
		EIB_DPRINTF_ERR(ss->ei_instance, "eib_data_setup_cqs: "
		    "ibt_enable_cq_notify() failed for tx cq, ret=%d", ret);
		goto setup_data_cqs_fail;
	}

	/*
	 * And then the data rx completion queue handler
	 */
	if ((rv = ddi_intr_add_softint(ss->ei_dip, &vnic->vn_data_rx_si_hdl,
	    EIB_SOFTPRI_DATA, eib_data_rx_comp_handler, vnic)) != DDI_SUCCESS) {
		EIB_DPRINTF_ERR(ss->ei_instance, "eib_data_setup_cqs: "
		    "ddi_intr_add_softint() failed for data rx qp, ret=%d", rv);
		goto setup_data_cqs_fail;
	}
	ibt_set_cq_handler(chan->ch_rcv_cq_hdl, eib_data_rx_comp_intr, vnic);
	ret = ibt_enable_cq_notify(chan->ch_rcv_cq_hdl, IBT_NEXT_COMPLETION);
	if (ret != IBT_SUCCESS) {
		EIB_DPRINTF_ERR(ss->ei_instance, "eib_data_setup_cqs: "
		    "ibt_enable_cq_notify() failed for rx cq, ret=%d", ret);
		goto setup_data_cqs_fail;
	}

	return (EIB_E_SUCCESS);

setup_data_cqs_fail:
	eib_rb_data_setup_cqs(ss, vnic);
	return (EIB_E_FAILURE);
}

static int
eib_data_setup_ud_channel(eib_t *ss, eib_vnic_t *vnic)
{
	eib_chan_t *chan = vnic->vn_data_chan;
	ibt_ud_chan_alloc_args_t alloc_attr;
	ibt_ud_chan_query_attr_t query_attr;
	ibt_status_t ret;

	bzero(&alloc_attr, sizeof (ibt_ud_chan_alloc_args_t));
	bzero(&query_attr, sizeof (ibt_ud_chan_query_attr_t));

	alloc_attr.ud_flags = IBT_ALL_SIGNALED;
	if (ss->ei_caps->cp_resv_lkey_capab)
		alloc_attr.ud_flags |= IBT_FAST_REG_RES_LKEY;
	if (ss->ei_caps->cp_lso_maxlen)
		alloc_attr.ud_flags |= IBT_USES_LSO;

	alloc_attr.ud_hca_port_num = ss->ei_props->ep_port_num;
	alloc_attr.ud_pkey_ix = chan->ch_pkey_ix;
	alloc_attr.ud_sizes.cs_sq = ss->ei_caps->cp_max_swqe;
	alloc_attr.ud_sizes.cs_rq = ss->ei_caps->cp_max_rwqe;
	alloc_attr.ud_sizes.cs_sq_sgl = ss->ei_caps->cp_max_sgl;
	alloc_attr.ud_sizes.cs_rq_sgl = 1;
	alloc_attr.ud_sizes.cs_inline = 0;

	alloc_attr.ud_qkey = EIB_DATA_QKEY;
	alloc_attr.ud_scq = chan->ch_cq_hdl;
	alloc_attr.ud_rcq = chan->ch_rcv_cq_hdl;
	alloc_attr.ud_pd = ss->ei_pd_hdl;

	ret = ibt_alloc_ud_channel(ss->ei_hca_hdl, IBT_ACHAN_NO_FLAGS,
	    &alloc_attr, &chan->ch_chan, NULL);
	if (ret != IBT_SUCCESS) {
		EIB_DPRINTF_ERR(ss->ei_instance, "eib_data_setup_ud_channel: "
		    "ibt_alloc_ud_channel(port=0x%x, pkey_ix=0x%x, "
		    "cs_sq=0x%lx, cs_rq=0x%lx, sq_sgl=0x%lx) failed, ret=%d",
		    alloc_attr.ud_hca_port_num, chan->ch_pkey_ix,
		    alloc_attr.ud_sizes.cs_sq, alloc_attr.ud_sizes.cs_rq,
		    alloc_attr.ud_sizes.cs_sq_sgl, ret);

		goto setup_data_ud_channel_fail;
	}

	ret = ibt_query_ud_channel(chan->ch_chan, &query_attr);
	if (ret != IBT_SUCCESS) {
		EIB_DPRINTF_ERR(ss->ei_instance, "eib_data_setup_ud_channel: "
		    "ibt_query_ud_channel() failed, ret=%d", ret);
		goto setup_data_ud_channel_fail;
	}

	chan->ch_qpn = query_attr.ud_qpn;
	chan->ch_max_swqes = query_attr.ud_chan_sizes.cs_sq;
	chan->ch_max_rwqes = query_attr.ud_chan_sizes.cs_rq;
	chan->ch_lwm_rwqes = chan->ch_max_rwqes >> 2;
	chan->ch_rwqe_bktsz = (chan->ch_max_rwqes < EIB_DATA_RWQE_BKT) ?
	    chan->ch_max_rwqes : EIB_DATA_RWQE_BKT;
	chan->ch_ip_hdr_align = EIB_IP_HDR_ALIGN;
	chan->ch_alloc_mp = B_TRUE;
	chan->ch_tear_down = B_FALSE;

	return (EIB_E_SUCCESS);

setup_data_ud_channel_fail:
	eib_rb_data_setup_ud_channel(ss, vnic);
	return (EIB_E_FAILURE);
}

static void
eib_data_setup_lso(eib_wqe_t *swqe, mblk_t *mp, uint32_t mss,
    eib_ether_hdr_t *evh)
{
	ibt_wr_lso_t *lso;
	mblk_t  *nmp;
	uint8_t *dst;
	uintptr_t ip_start;
	uintptr_t tcp_start;
	uint_t pending;
	uint_t mblen;
	uint_t eth_hdr_len;
	uint_t ip_hdr_len;
	uint_t tcp_hdr_len;

	/*
	 * When the swqe was grabbed, it would've had its wr_opcode and
	 * wr.ud.udwr_dest set to default values. Since we're now going
	 * to use LSO, we need to change these.
	 */
	swqe->qe_wr.send.wr_opcode = IBT_WRC_SEND_LSO;
	lso = &(swqe->qe_wr.send.wr.ud_lso);
	lso->lso_ud_dest = swqe->qe_dest;
	lso->lso_mss = mss;

	/*
	 * Details on the ethernet header in the mp is already known to us
	 */
	eth_hdr_len = (evh->eh_tagless) ? (sizeof (struct ether_header)) :
	    (sizeof (struct ether_vlan_header));

	/*
	 * Calculate the LSO header size and set it in the UD LSO structure.
	 * Note that the only assumption we make is that each of the Ethernet,
	 * IP and TCP headers will be contained in a single mblk fragment;
	 * together, the headers may span multiple mblk fragments. Note also
	 * that since the EoIB encapsulation header is not part of the message
	 * block we receive, we'll need to account space for inserting it later.
	 */
	nmp = mp;
	ip_start = (uintptr_t)(nmp->b_rptr) + eth_hdr_len;
	if (ip_start >= (uintptr_t)(nmp->b_wptr)) {
		ip_start = (uintptr_t)nmp->b_cont->b_rptr
		    + (ip_start - (uintptr_t)(nmp->b_wptr));
		nmp = nmp->b_cont;
	}
	ip_hdr_len = IPH_HDR_LENGTH((ipha_t *)ip_start);

	tcp_start = ip_start + ip_hdr_len;
	if (tcp_start >= (uintptr_t)(nmp->b_wptr)) {
		tcp_start = (uintptr_t)nmp->b_cont->b_rptr
		    + (tcp_start - (uintptr_t)(nmp->b_wptr));
		nmp = nmp->b_cont;
	}
	tcp_hdr_len = TCP_HDR_LENGTH((tcph_t *)tcp_start);

	/*
	 * Since the passed mp fragment never contains the EoIB encapsulation
	 * header, we always have to copy the lso header. Sigh.
	 */
	lso->lso_hdr = swqe->qe_payload_hdr;
	lso->lso_hdr_sz = EIB_ENCAP_HDR_SZ + eth_hdr_len +
	    ip_hdr_len + tcp_hdr_len;

	/*
	 * We already have the EoIB encapsulation header written at the
	 * start of wqe->qe_payload_hdr during swqe acquisition.  Only
	 * copy the remaining headers.
	 */
	dst = lso->lso_hdr + EIB_ENCAP_HDR_SZ;
	pending = lso->lso_hdr_sz - EIB_ENCAP_HDR_SZ;

	for (nmp = mp; nmp && pending; nmp = nmp->b_cont) {
		mblen = MBLKL(nmp);
		if (pending > mblen) {
			bcopy(nmp->b_rptr, dst, mblen);
			dst += mblen;
			pending -= mblen;
		} else {
			bcopy(nmp->b_rptr, dst, pending);
			break;
		}
	}
}

static int
eib_data_prepare_sgl(eib_vnic_t *vnic, eib_wqe_t *swqe, mblk_t *mp)
{
	eib_t *ss = vnic->vn_ss;
	eib_stats_t *stats = vnic->vn_ss->ei_stats;
	ibt_iov_t iov_arr[EIB_MAX_SGL];
	ibt_iov_attr_t iov_attr;
	ibt_wr_ds_t *sgl;
	ibt_status_t ret;
	mblk_t *nmp;
	mblk_t *data_mp;
	uchar_t *bufp;
	size_t blksize;
	size_t skip;
	size_t avail;
	uint_t lsohdr_sz;
	uint_t pktsz;
	ptrdiff_t frag_len;
	uint_t pending_hdr;
	uint_t nblks;
	uint_t i;

	/*
	 * Let's skip ahead to the TCP data if this is LSO.  Note that while
	 * the lso header size in the swqe includes the EoIB encapsulation
	 * header size, that encapsulation header itself won't be found in
	 * the mblk.
	 */
	lsohdr_sz = (swqe->qe_wr.send.wr_opcode == IBT_WRC_SEND) ? 0 :
	    swqe->qe_wr.send.wr.ud_lso.lso_hdr_sz;

	data_mp = mp;
	pending_hdr = 0;
	if (lsohdr_sz) {
		pending_hdr = lsohdr_sz - EIB_ENCAP_HDR_SZ;
		for (nmp = mp; nmp; nmp = nmp->b_cont) {
			frag_len =
			    (uintptr_t)nmp->b_wptr - (uintptr_t)nmp->b_rptr;
			if (frag_len > pending_hdr)
				break;
			pending_hdr -= frag_len;
		}
		data_mp = nmp;  /* start of data past lso header */
		ASSERT(data_mp != NULL);
	}

	/*
	 * If this is an LSO packet, we want pktsz to hold the size of the
	 * data following the eoib/ethernet/tcp/ip headers.  If this is a
	 * non-LSO packet, we want pktsz to refer to the size of the entire
	 * packet with all the headers, and nblks to hold the number of
	 * mappings we'll need to iov map this (for reserved lkey request).
	 */
	if (lsohdr_sz == 0) {
		nblks = 1;
		pktsz = EIB_ENCAP_HDR_SZ;
	} else {
		nblks = 0;
		pktsz = 0;
	}
	for (nmp = data_mp; nmp != NULL; nmp = nmp->b_cont) {
		pktsz += MBLKL(nmp);
		nblks++;
	}
	pktsz -= pending_hdr;

	EIB_UPDATE_COUNTER(&stats->st_obytes, pktsz);
	EIB_INCR_COUNTER(&stats->st_opkts);

	/*
	 * We only do ibt_map_mem_iov() if the pktsz is above the tx copy
	 * threshold and if the number of mp fragments is less than the
	 * maximum acceptable.
	 */
	if ((ss->ei_caps->cp_resv_lkey_capab) && (pktsz > EIB_TX_COPY_THRESH) &&
	    (nblks < ss->ei_caps->cp_hiwm_sgl)) {

		iov_attr.iov_as = NULL;
		iov_attr.iov = iov_arr;
		iov_attr.iov_buf = NULL;
		iov_attr.iov_list_len = nblks;
		iov_attr.iov_wr_nds = ss->ei_caps->cp_max_sgl;
		iov_attr.iov_lso_hdr_sz = lsohdr_sz;
		iov_attr.iov_flags = IBT_IOV_SLEEP;

		i = 0;
		if (lsohdr_sz == 0) {
			iov_arr[i].iov_addr = (caddr_t)swqe->qe_payload_hdr;
			iov_arr[i].iov_len = EIB_ENCAP_HDR_SZ;
			i++;
		}
		for (nmp = data_mp; i < nblks; i++, nmp = nmp->b_cont) {
			iov_arr[i].iov_addr = (caddr_t)(void *)nmp->b_rptr;
			iov_arr[i].iov_len = MBLKL(nmp);
			if (nmp == data_mp) {
				iov_arr[i].iov_addr += pending_hdr;
				iov_arr[i].iov_len -= pending_hdr;
			}
		}
		swqe->qe_info |= EIB_WQE_FLG_BUFTYPE_MAPPED;
		swqe->qe_wr.send.wr_sgl = swqe->qe_big_sgl;

		ret = ibt_map_mem_iov(ss->ei_hca_hdl, &iov_attr,
		    &swqe->qe_wr, &swqe->qe_iov_hdl);
		if (ret != IBT_SUCCESS) {
			EIB_DPRINTF_WARN(ss->ei_instance,
			"eib_data_prepare_sgl: "
			"ibt_map_mem_iov(nblks=0x%lx) failed, ret=%d ",
			"attempting to use copy path", nblks, ret);
			goto prepare_sgl_copy_path;
		}

		return (EIB_E_SUCCESS);
	}

prepare_sgl_copy_path:
	if (pktsz <= swqe->qe_bufsz) {
		swqe->qe_wr.send.wr_nds = 1;
		swqe->qe_wr.send.wr_sgl = &swqe->qe_sgl;
		swqe->qe_sgl.ds_len = pktsz;

		/*
		 * Even though this is the copy path for transfers less than
		 * qe_bufsz, it could still be an LSO packet.  If so, we only
		 * have to write the data following all the headers into the
		 * work request buffer, since we'll be sending the lso header
		 * itself separately. If this is not an LSO send (but pkt size
		 * greater than mtu, say for a jumbo frame), then we need
		 * to write all the headers including EoIB encapsulation,
		 * into the work request buffer.
		 */
		bufp = (uchar_t *)(uintptr_t)swqe->qe_sgl.ds_va;
		if (lsohdr_sz == 0) {
			*(uint32_t *)((void *)bufp) = htonl(EIB_TX_ENCAP_HDR);
			bufp += EIB_ENCAP_HDR_SZ;
		}
		for (nmp = data_mp; nmp != NULL; nmp = nmp->b_cont) {
			blksize = MBLKL(nmp) - pending_hdr;
			bcopy(nmp->b_rptr + pending_hdr, bufp, blksize);
			bufp += blksize;
			pending_hdr = 0;
		}

		/*
		 * If the ethernet frame we're going to send is less than
		 * ETHERMIN, pad up the buffer to ETHERMIN (with zeros)
		 */
		if ((pktsz + lsohdr_sz) < (ETHERMIN + EIB_ENCAP_HDR_SZ)) {
			bzero(bufp, (ETHERMIN + EIB_ENCAP_HDR_SZ) -
			    (pktsz + lsohdr_sz));
			swqe->qe_sgl.ds_len = ETHERMIN + EIB_ENCAP_HDR_SZ;
		}
		return (EIB_E_SUCCESS);
	}

	/*
	 * Copy path for transfers greater than swqe->qe_bufsz
	 */
	swqe->qe_wr.send.wr_sgl = swqe->qe_big_sgl;
	if (eib_rsrc_grab_lsobufs(ss, pktsz, swqe->qe_wr.send.wr_sgl,
	    &(swqe->qe_wr.send.wr_nds)) != EIB_E_SUCCESS) {
		EIB_DPRINTF_ERR(ss->ei_instance, "eib_data_prepare_sgl: "
		    "eib_rsrc_grab_lsobufs() failed");
		return (EIB_E_FAILURE);
	}
	swqe->qe_info |= EIB_WQE_FLG_BUFTYPE_LSO;

	/*
	 * Copy the larger-than-qe_buf_sz packet into a set of fixed-sized,
	 * pre-mapped LSO buffers. Note that we might need to skip part of
	 * the LSO header in the first fragment as before.
	 */
	nmp = data_mp;
	skip = pending_hdr;
	for (i = 0; i < swqe->qe_wr.send.wr_nds; i++) {
		sgl = swqe->qe_wr.send.wr_sgl + i;
		bufp = (uchar_t *)(uintptr_t)sgl->ds_va;
		avail = EIB_LSO_BUFSZ;

		/*
		 * If this is a non-LSO packet (perhaps a jumbo frame?)
		 * we may still need to prefix the EoIB header in the
		 * wr buffer.
		 */
		if ((i == 0) && (lsohdr_sz == 0)) {
			*(uint32_t *)((void *)bufp) = htonl(EIB_TX_ENCAP_HDR);
			bufp += EIB_ENCAP_HDR_SZ;
			avail -= EIB_ENCAP_HDR_SZ;
		}

		while (nmp && avail) {
			blksize = MBLKL(nmp) - skip;
			if (blksize > avail) {
				bcopy(nmp->b_rptr + skip, bufp, avail);
				skip += avail;
				avail = 0;
			} else {
				bcopy(nmp->b_rptr + skip, bufp, blksize);
				skip = 0;
				bufp += blksize;
				avail -= blksize;
				nmp = nmp->b_cont;
			}
		}
	}

	return (EIB_E_SUCCESS);
}

/*ARGSUSED*/
static int
eib_data_is_mcast_pkt_ok(eib_vnic_t *vnic, uint8_t *macaddr, uint64_t *brdcst,
    uint64_t *multicst)
{
	/*
	 * If the dmac is a broadcast packet, let it through.  Otherwise, either
	 * we should be in promiscuous mode or the dmac should be in our list of
	 * joined multicast addresses. Currently we only update the stat
	 * counters and always let things through.
	 */
	if (bcmp(macaddr, eib_broadcast_mac, ETHERADDRL) == 0)
		EIB_INCR_COUNTER(brdcst);
	else
		EIB_INCR_COUNTER(multicst);

	return (1);
}

static void
eib_data_rx_comp_intr(ibt_cq_hdl_t cq_hdl, void *arg)
{
	eib_vnic_t *vnic = arg;
	eib_chan_t *chan = vnic->vn_data_chan;
	eib_t *ss = vnic->vn_ss;

	if (cq_hdl != chan->ch_rcv_cq_hdl) {
		EIB_DPRINTF_DEBUG(ss->ei_instance, "eib_data_rx_comp_intr: "
		    "cq_hdl(0x%llx) != chan->ch_cq_hdl(0x%llx), "
		    "ignoring completion", cq_hdl, chan->ch_cq_hdl);
		return;
	}

	ASSERT(vnic->vn_data_rx_si_hdl != NULL);

	(void) ddi_intr_trigger_softint(vnic->vn_data_rx_si_hdl, NULL);
}

static void
eib_data_tx_comp_intr(ibt_cq_hdl_t cq_hdl, void *arg)
{
	eib_vnic_t *vnic = arg;
	eib_chan_t *chan = vnic->vn_data_chan;
	eib_t *ss = vnic->vn_ss;

	if (cq_hdl != chan->ch_cq_hdl) {
		EIB_DPRINTF_DEBUG(ss->ei_instance, "eib_data_tx_comp_intr: "
		    "cq_hdl(0x%llx) != chan->ch_cq_hdl(0x%llx), "
		    "ignoring completion", cq_hdl, chan->ch_cq_hdl);
		return;
	}

	ASSERT(vnic->vn_data_tx_si_hdl != NULL);

	(void) ddi_intr_trigger_softint(vnic->vn_data_tx_si_hdl, NULL);
}

static mblk_t *
eib_data_rx_comp(eib_vnic_t *vnic, eib_wqe_t *wqe, ibt_wc_t *wc)
{
	eib_t *ss = vnic->vn_ss;
	eib_chan_t *chan = vnic->vn_data_chan;
	eib_login_data_t *ld = &vnic->vn_login_data;
	eib_stats_t *stats = ss->ei_stats;
	eib_ether_hdr_t evh;
	mblk_t *mp;
	boolean_t allocd_mp = B_FALSE;
	uint_t ec_hdr;
	uint_t ec_sign;
	uint_t ec_ver;
	uint_t ec_tu_cs;
	uint_t ec_ip_cs;

	/*
	 * Before we process this mblk and send it up to network layer, see
	 * if we're running low on rwqes in the wqe pool. If so, allocate a
	 * new mblk, copy the received data into it and send it up (and return
	 * the current rwqe back to the pool immediately by calling freemsg()
	 * on the original mblk).
	 */
	if (!eib_rsrc_rxpool_low(wqe)) {
		mp = wqe->qe_mp;
	} else {
		if ((mp = allocb(wc->wc_bytes_xfer, BPRI_HI)) != NULL) {
			bcopy(wqe->qe_mp->b_rptr, mp->b_rptr,
			    wc->wc_bytes_xfer);
			freemsg(wqe->qe_mp);
			allocd_mp = B_TRUE;
		} else {
			EIB_DPRINTF_WARN(ss->ei_instance, "eib_data_rx_comp: "
			    "wqe level below watermark, dropping rx pkt");
			EIB_INCR_COUNTER(&stats->st_norcvbuf);
			freemsg(wqe->qe_mp);
			return (NULL);
		}
	}

	/*
	 * Adjust write pointer depending on how much data came in. Note that
	 * since the nw layer will expect us to hand over the mp with the
	 * ethernet header starting at mp->b_rptr, update the b_rptr as well.
	 */
	mp->b_wptr = mp->b_rptr + wc->wc_bytes_xfer;

	/*
	 * We have a problem if this really happens!
	 */
	if (mp->b_next != NULL) {
		EIB_DPRINTF_WARN(ss->ei_instance, "eib_data_rx_comp: "
		    "received packet's b_next not NULL, possible dup from cq");
		mp->b_next = NULL;
	}

	/*
	 * Drop loopback packets ?
	 */
	if ((wc->wc_slid == ss->ei_props->ep_blid) &&
	    (wc->wc_qpn == chan->ch_qpn)) {
		goto data_rx_comp_fail;
	}

	mp->b_rptr += EIB_GRH_SZ;

	/*
	 * Since the recv buffer has been aligned for IP header to start on
	 * a word boundary, it is safe to say that the EoIB and ethernet
	 * headers won't start on a word boundary.
	 */
	bcopy(mp->b_rptr, &ec_hdr, EIB_ENCAP_HDR_SZ);

	/*
	 * Check EoIB signature and version
	 */
	ec_hdr = ntohl(ec_hdr);

	ec_sign = (ec_hdr >> EIB_ENCAP_SIGN_SHIFT) & EIB_ENCAP_SIGN_MASK;
	if (ec_sign != EIB_EH_SIGNATURE) {
		EIB_DPRINTF_WARN(ss->ei_instance, "eib_data_rx_comp: "
		    "EoIB encapsulation header signature (0x%lx) unknown",
		    ec_sign);
		goto data_rx_comp_fail;
	}

	ec_ver = (ec_hdr >> EIB_ENCAP_VER_SHIFT) & EIB_ENCAP_VER_MASK;
	if (ec_ver != EIB_EH_VERSION) {
		EIB_DPRINTF_WARN(ss->ei_instance, "eib_data_rx_comp: "
		    "EoIB encapsulation header version (0x%lx) unknown",
		    ec_ver);
		goto data_rx_comp_fail;
	}

	/*
	 * Check TCP/UDP and IP checksum
	 */
	ec_tu_cs = (ec_hdr >> EIB_ENCAP_TCPCHK_SHIFT) & EIB_ENCAP_TCPCHK_MASK;
	ec_ip_cs = (ec_hdr >> EIB_ENCAP_IPCHK_SHIFT) & EIB_ENCAP_IPCHK_MASK;

	if ((ec_tu_cs == EIB_EH_UDPCSUM_OK || ec_tu_cs == EIB_EH_TCPCSUM_OK) &&
	    (ec_ip_cs == EIB_EH_IPCSUM_OK)) {
		mac_hcksum_set(mp, 0, 0, 0, 0, HCK_FULLCKSUM_OK);
	} else if (ec_tu_cs == EIB_EH_CSUM_BAD || ec_ip_cs == EIB_EH_CSUM_BAD) {
		EIB_DPRINTF_WARN(ss->ei_instance, "eib_data_rx_comp: "
		    "EoIB encapsulation header tcp/udp checksum (0x%lx) or"
		    "ip checksum (0x%lx) is bad", ec_tu_cs, ec_ip_cs);
	}

	/*
	 * Update the message block's b_rptr to the start of ethernet header
	 * and parse the header information
	 */
	mp->b_rptr += EIB_ENCAP_HDR_SZ;
	eib_data_parse_ether_hdr(mp, &evh);

	/*
	 * If the incoming packet is vlan-tagged, but the tag doesn't match
	 * this vnic's vlan, drop it.
	 */
	if ((evh.eh_tagless == 0) && (evh.eh_vlan != ld->ld_assigned_vlan)) {
		EIB_DPRINTF_WARN(ss->ei_instance, "eib_data_rx_comp: "
		    "received packet's vlan unknown, expected=0x%x, got=0x%x",
		    ld->ld_assigned_vlan, evh.eh_vlan);
		goto data_rx_comp_fail;
	}

	/*
	 * Final checks to see if the unicast destination is indeed correct
	 * and to see if the multicast address is ok for us.
	 */
	if (EIB_UNICAST_MAC(evh.eh_dmac)) {
		if (bcmp(evh.eh_dmac, ld->ld_assigned_mac, ETHERADDRL) != 0) {
			uint8_t *exp;
			uint8_t *got;

			exp = ld->ld_assigned_mac;
			got = evh.eh_dmac;

			EIB_DPRINTF_WARN(ss->ei_instance, "eib_data_rx_comp: "
			    "received packet's macaddr mismatch, "
			    "expected=%x:%x:%x:%x:%x:%x, got=%x:%x:%x:%x:%x:%x",
			    exp[0], exp[1], exp[2], exp[3], exp[4], exp[5],
			    got[0], got[1], got[2], got[3], got[4], got[5]);

			goto data_rx_comp_fail;
		}
	} else {
		if (!eib_data_is_mcast_pkt_ok(vnic, evh.eh_dmac,
		    &stats->st_brdcstrcv, &stats->st_multircv)) {
			EIB_DPRINTF_WARN(ss->ei_instance, "eib_data_rx_comp: "
			    "multicast packet not ok");
			goto data_rx_comp_fail;
		}
	}

	/*
	 * Strip ethernet FCS if present in the packet.  ConnectX-2 doesn't
	 * support ethernet FCS, so this shouldn't happen anyway.
	 */
	if ((ec_hdr >> EIB_ENCAP_FCS_B_SHIFT) & 0x1) {
		EIB_DPRINTF_WARN(ss->ei_instance, "eib_data_rx_comp: "
		    "ethernet FCS present (ec_hdr=0%lx), ignoring",
		    ec_hdr);

		mp->b_wptr -= ETHERFCSL;
	}

	/*
	 * If this is the same mp as was in the original rwqe (i.e. we didn't
	 * do any allocb()), then mark the rwqe flag so we know that its mblk
	 * is with the network layer.
	 */
	if (!allocd_mp) {
		wqe->qe_info |= EIB_WQE_FLG_WITH_NW;
	}

	return (mp);

data_rx_comp_fail:
	freemsg(mp);
	return (NULL);
}

static void
eib_data_tx_comp(eib_vnic_t *vnic, eib_wqe_t *wqe, eib_chan_t *chan)
{
	eib_t *ss = vnic->vn_ss;
	ibt_status_t ret;

	if (wqe->qe_mp) {
		if (wqe->qe_info & EIB_WQE_FLG_BUFTYPE_MAPPED) {
			ret = ibt_unmap_mem_iov(ss->ei_hca_hdl,
			    wqe->qe_iov_hdl);
			if (ret != IBT_SUCCESS) {
				EIB_DPRINTF_WARN(ss->ei_instance,
				    "eib_data_tx_comp: "
				    "ibt_unmap_mem_iov() failed, ret=%d", ret);
			}
			wqe->qe_iov_hdl = NULL;
		} else if (wqe->qe_info & EIB_WQE_FLG_BUFTYPE_LSO) {
			eib_rsrc_return_lsobufs(ss, wqe->qe_big_sgl,
			    wqe->qe_wr.send.wr_nds);
		}
		freemsg(wqe->qe_mp);
		wqe->qe_mp = NULL;
	}

	eib_rsrc_return_swqe(ss, wqe, chan);
}

static void
eib_data_err_comp(eib_vnic_t *vnic, eib_wqe_t *wqe, ibt_wc_t *wc)
{
	eib_t *ss = vnic->vn_ss;

	/*
	 * Currently, all we do is report
	 */
	switch (wc->wc_status) {
	case IBT_WC_WR_FLUSHED_ERR:
		break;

	case IBT_WC_LOCAL_CHAN_OP_ERR:
		EIB_DPRINTF_ERR(ss->ei_instance, "eib_data_err_comp: "
		    "IBT_WC_LOCAL_CHAN_OP_ERR seen, wqe_info=0x%lx ",
		    wqe->qe_info);
		break;

	case IBT_WC_LOCAL_PROTECT_ERR:
		EIB_DPRINTF_ERR(ss->ei_instance, "eib_data_err_comp: "
		    "IBT_WC_LOCAL_PROTECT_ERR seen, wqe_info=0x%lx ",
		    wqe->qe_info);
		break;
	}

	/*
	 * When a wc indicates error, we do not attempt to repost the
	 * rwqe but simply return it to the wqe pool. Also for rwqes,
	 * attempting to free the mblk in the wqe invokes the
	 * eib_data_rx_recycle() callback.  For tx wqes, error handling
	 * is the same as successful completion handling.  We still
	 * have to unmap iov/free lsobufs/free mblk and then return the
	 * swqe to the pool.
	 */
	if (EIB_WQE_TYPE(wqe->qe_info) == EIB_WQE_RX) {
		ASSERT(wqe->qe_mp != NULL);
		freemsg(wqe->qe_mp);
	} else {
		eib_data_tx_comp(vnic, wqe, vnic->vn_data_chan);
	}
}

/*ARGSUSED*/
static void
eib_rb_data_setup_cqs(eib_t *ss, eib_vnic_t *vnic)
{
	eib_chan_t *chan = vnic->vn_data_chan;
	ibt_status_t ret;

	if (chan == NULL)
		return;

	/*
	 * Reset any completion handlers we may have set up
	 */
	if (chan->ch_rcv_cq_hdl) {
		ibt_set_cq_handler(chan->ch_rcv_cq_hdl, NULL, NULL);
	}
	if (chan->ch_cq_hdl) {
		ibt_set_cq_handler(chan->ch_cq_hdl, NULL, NULL);
	}

	/*
	 * Remove any softints that were added
	 */
	if (vnic->vn_data_rx_si_hdl) {
		(void) ddi_intr_remove_softint(vnic->vn_data_rx_si_hdl);
		vnic->vn_data_rx_si_hdl = NULL;
	}
	if (vnic->vn_data_tx_si_hdl) {
		(void) ddi_intr_remove_softint(vnic->vn_data_tx_si_hdl);
		vnic->vn_data_tx_si_hdl = NULL;
	}

	/*
	 * Release any work completion buffers we may have allocated
	 */
	if (chan->ch_rcv_wc && chan->ch_rcv_cq_sz) {
		kmem_free(chan->ch_rcv_wc,
		    sizeof (ibt_wc_t) * chan->ch_rcv_cq_sz);
	}
	chan->ch_rcv_cq_sz = 0;
	chan->ch_rcv_wc = NULL;

	if (chan->ch_wc && chan->ch_cq_sz) {
		kmem_free(chan->ch_wc, sizeof (ibt_wc_t) * chan->ch_cq_sz);
	}
	chan->ch_cq_sz = 0;
	chan->ch_wc = NULL;

	/*
	 * Free any completion queues we may have allocated
	 */
	if (chan->ch_rcv_cq_hdl) {
		ret = ibt_free_cq(chan->ch_rcv_cq_hdl);
		if (ret != IBT_SUCCESS) {
			EIB_DPRINTF_WARN(ss->ei_instance,
			    "eib_rb_data_setup_cqs: "
			    "ibt_free_cq(rcv_cq) failed, ret=%d", ret);
		}
		chan->ch_rcv_cq_hdl = NULL;
	}
	if (chan->ch_cq_hdl) {
		ret = ibt_free_cq(chan->ch_cq_hdl);
		if (ret != IBT_SUCCESS) {
			EIB_DPRINTF_WARN(ss->ei_instance,
			    "eib_rb_data_setup_cqs: "
			    "ibt_free_cq(snd_cq) failed, ret=%d", ret);
		}
		chan->ch_cq_hdl = NULL;
	}
}

/*ARGSUSED*/
static void
eib_rb_data_setup_ud_channel(eib_t *ss, eib_vnic_t *vnic)
{
	eib_chan_t *chan = vnic->vn_data_chan;
	ibt_status_t ret;

	if (chan == NULL)
		return;

	if (chan->ch_chan) {
		/*
		 * We're trying to tear down this UD channel. Make sure that
		 * we don't attempt to refill (repost) at any point from now on.
		 */
		chan->ch_tear_down = B_TRUE;
		if ((ret = ibt_flush_channel(chan->ch_chan)) != IBT_SUCCESS) {
			EIB_DPRINTF_WARN(ss->ei_instance,
			    "eib_rb_data_setup_ud_channel: "
			    "ibt_flush_channel() failed, ret=%d", ret);
		}

		/*
		 * Wait until all posted tx wqes on this channel are back with
		 * the wqe pool.
		 */
		mutex_enter(&chan->ch_tx_lock);
		while (chan->ch_tx_posted > 0)
			cv_wait(&chan->ch_tx_cv, &chan->ch_tx_lock);
		mutex_exit(&chan->ch_tx_lock);

		/*
		 * Wait until all posted rx wqes on this channel are back with
		 * the wqe pool.
		 */
		mutex_enter(&chan->ch_rx_lock);
		while (chan->ch_rx_posted > 0)
			cv_wait(&chan->ch_rx_cv, &chan->ch_rx_lock);
		mutex_exit(&chan->ch_rx_lock);

		/*
		 * Now we're ready to free this channel
		 */
		if ((ret = ibt_free_channel(chan->ch_chan)) != IBT_SUCCESS) {
			EIB_DPRINTF_WARN(ss->ei_instance,
			    "eib_rb_data_setup_ud_channel: "
			    "ibt_free_channel() failed, ret=%d", ret);
		}

		chan->ch_alloc_mp = B_FALSE;
		chan->ch_ip_hdr_align = 0;
		chan->ch_rwqe_bktsz = 0;
		chan->ch_lwm_rwqes = 0;
		chan->ch_max_rwqes = 0;
		chan->ch_max_swqes = 0;
		chan->ch_qpn = 0;
		chan->ch_chan = NULL;
	}
}