IB/iser: Use single CQ for RX and TX
[cascardo/linux.git] / drivers / infiniband / ulp / iser / iser_verbs.c
index ea01075..eedc27a 100644 (file)
 #include "iscsi_iser.h"
 
 #define ISCSI_ISER_MAX_CONN    8
-#define ISER_MAX_RX_CQ_LEN     (ISER_QP_MAX_RECV_DTOS * ISCSI_ISER_MAX_CONN)
-#define ISER_MAX_TX_CQ_LEN     (ISER_QP_MAX_REQ_DTOS  * ISCSI_ISER_MAX_CONN)
+#define ISER_MAX_RX_LEN                (ISER_QP_MAX_RECV_DTOS * ISCSI_ISER_MAX_CONN)
+#define ISER_MAX_TX_LEN                (ISER_QP_MAX_REQ_DTOS  * ISCSI_ISER_MAX_CONN)
+#define ISER_MAX_CQ_LEN                (ISER_MAX_RX_LEN + ISER_MAX_TX_LEN)
+
+static int iser_cq_poll_limit = 512;
 
 static void iser_cq_tasklet_fn(unsigned long data);
 static void iser_cq_callback(struct ib_cq *cq, void *cq_context);
@@ -71,9 +74,8 @@ static void iser_event_handler(struct ib_event_handler *handler,
  */
 static int iser_create_device_ib_res(struct iser_device *device)
 {
-       struct iser_cq_desc *cq_desc;
        struct ib_device_attr *dev_attr = &device->dev_attr;
-       int ret, i, j;
+       int ret, i;
 
        ret = ib_query_device(device->ib_device, dev_attr);
        if (ret) {
@@ -101,47 +103,35 @@ static int iser_create_device_ib_res(struct iser_device *device)
                return -1;
        }
 
-       device->cqs_used = min(ISER_MAX_CQ, device->ib_device->num_comp_vectors);
+       device->comps_used = min(ISER_MAX_CQ,
+                                device->ib_device->num_comp_vectors);
        iser_info("using %d CQs, device %s supports %d vectors\n",
-                 device->cqs_used, device->ib_device->name,
+                 device->comps_used, device->ib_device->name,
                  device->ib_device->num_comp_vectors);
 
-       device->cq_desc = kmalloc(sizeof(struct iser_cq_desc) * device->cqs_used,
-                                 GFP_KERNEL);
-       if (device->cq_desc == NULL)
-               goto cq_desc_err;
-       cq_desc = device->cq_desc;
-
        device->pd = ib_alloc_pd(device->ib_device);
        if (IS_ERR(device->pd))
                goto pd_err;
 
-       for (i = 0; i < device->cqs_used; i++) {
-               cq_desc[i].device   = device;
-               cq_desc[i].cq_index = i;
-
-               device->rx_cq[i] = ib_create_cq(device->ib_device,
-                                         iser_cq_callback,
-                                         iser_cq_event_callback,
-                                         (void *)&cq_desc[i],
-                                         ISER_MAX_RX_CQ_LEN, i);
-               if (IS_ERR(device->rx_cq[i]))
-                       goto cq_err;
-
-               device->tx_cq[i] = ib_create_cq(device->ib_device,
-                                         NULL, iser_cq_event_callback,
-                                         (void *)&cq_desc[i],
-                                         ISER_MAX_TX_CQ_LEN, i);
-
-               if (IS_ERR(device->tx_cq[i]))
+       for (i = 0; i < device->comps_used; i++) {
+               struct iser_comp *comp = &device->comps[i];
+
+               comp->device = device;
+               comp->cq = ib_create_cq(device->ib_device,
+                                       iser_cq_callback,
+                                       iser_cq_event_callback,
+                                       (void *)comp,
+                                       ISER_MAX_CQ_LEN, i);
+               if (IS_ERR(comp->cq)) {
+                       comp->cq = NULL;
                        goto cq_err;
+               }
 
-               if (ib_req_notify_cq(device->rx_cq[i], IB_CQ_NEXT_COMP))
+               if (ib_req_notify_cq(comp->cq, IB_CQ_NEXT_COMP))
                        goto cq_err;
 
-               tasklet_init(&device->cq_tasklet[i],
-                            iser_cq_tasklet_fn,
-                       (unsigned long)&cq_desc[i]);
+               tasklet_init(&comp->tasklet, iser_cq_tasklet_fn,
+                            (unsigned long)comp);
        }
 
        device->mr = ib_get_dma_mr(device->pd, IB_ACCESS_LOCAL_WRITE |
@@ -160,19 +150,17 @@ static int iser_create_device_ib_res(struct iser_device *device)
 handler_err:
        ib_dereg_mr(device->mr);
 dma_mr_err:
-       for (j = 0; j < device->cqs_used; j++)
-               tasklet_kill(&device->cq_tasklet[j]);
+       for (i = 0; i < device->comps_used; i++)
+               tasklet_kill(&device->comps[i].tasklet);
 cq_err:
-       for (j = 0; j < i; j++) {
-               if (device->tx_cq[j])
-                       ib_destroy_cq(device->tx_cq[j]);
-               if (device->rx_cq[j])
-                       ib_destroy_cq(device->rx_cq[j]);
+       for (i = 0; i < device->comps_used; i++) {
+               struct iser_comp *comp = &device->comps[i];
+
+               if (comp->cq)
+                       ib_destroy_cq(comp->cq);
        }
        ib_dealloc_pd(device->pd);
 pd_err:
-       kfree(device->cq_desc);
-cq_desc_err:
        iser_err("failed to allocate an IB resource\n");
        return -1;
 }
@@ -186,20 +174,18 @@ static void iser_free_device_ib_res(struct iser_device *device)
        int i;
        BUG_ON(device->mr == NULL);
 
-       for (i = 0; i < device->cqs_used; i++) {
-               tasklet_kill(&device->cq_tasklet[i]);
-               (void)ib_destroy_cq(device->tx_cq[i]);
-               (void)ib_destroy_cq(device->rx_cq[i]);
-               device->tx_cq[i] = NULL;
-               device->rx_cq[i] = NULL;
+       for (i = 0; i < device->comps_used; i++) {
+               struct iser_comp *comp = &device->comps[i];
+
+               tasklet_kill(&comp->tasklet);
+               ib_destroy_cq(comp->cq);
+               comp->cq = NULL;
        }
 
        (void)ib_unregister_event_handler(&device->event_handler);
        (void)ib_dereg_mr(device->mr);
        (void)ib_dealloc_pd(device->pd);
 
-       kfree(device->cq_desc);
-
        device->mr = NULL;
        device->pd = NULL;
 }
@@ -209,7 +195,7 @@ static void iser_free_device_ib_res(struct iser_device *device)
  *
  * returns 0 on success, or errno code on failure
  */
-int iser_create_fmr_pool(struct iser_conn *ib_conn, unsigned cmds_max)
+int iser_create_fmr_pool(struct ib_conn *ib_conn, unsigned cmds_max)
 {
        struct iser_device *device = ib_conn->device;
        struct ib_fmr_pool_param params;
@@ -259,7 +245,7 @@ int iser_create_fmr_pool(struct iser_conn *ib_conn, unsigned cmds_max)
 /**
  * iser_free_fmr_pool - releases the FMR pool and page vec
  */
-void iser_free_fmr_pool(struct iser_conn *ib_conn)
+void iser_free_fmr_pool(struct ib_conn *ib_conn)
 {
        iser_info("freeing conn %p fmr pool %p\n",
                  ib_conn, ib_conn->fmr.pool);
@@ -363,10 +349,10 @@ fast_reg_mr_failure:
  * for fast registration work requests.
  * returns 0 on success, or errno code on failure
  */
-int iser_create_fastreg_pool(struct iser_conn *ib_conn, unsigned cmds_max)
+int iser_create_fastreg_pool(struct ib_conn *ib_conn, unsigned cmds_max)
 {
-       struct iser_device      *device = ib_conn->device;
-       struct fast_reg_descriptor      *desc;
+       struct iser_device *device = ib_conn->device;
+       struct fast_reg_descriptor *desc;
        int i, ret;
 
        INIT_LIST_HEAD(&ib_conn->fastreg.pool);
@@ -402,7 +388,7 @@ err:
 /**
  * iser_free_fastreg_pool - releases the pool of fast_reg descriptors
  */
-void iser_free_fastreg_pool(struct iser_conn *ib_conn)
+void iser_free_fastreg_pool(struct ib_conn *ib_conn)
 {
        struct fast_reg_descriptor *desc, *tmp;
        int i = 0;
@@ -436,7 +422,7 @@ void iser_free_fastreg_pool(struct iser_conn *ib_conn)
  *
  * returns 0 on success, -1 on failure
  */
-static int iser_create_ib_conn_res(struct iser_conn *ib_conn)
+static int iser_create_ib_conn_res(struct ib_conn *ib_conn)
 {
        struct iser_device      *device;
        struct ib_qp_init_attr  init_attr;
@@ -451,18 +437,20 @@ static int iser_create_ib_conn_res(struct iser_conn *ib_conn)
 
        mutex_lock(&ig.connlist_mutex);
        /* select the CQ with the minimal number of usages */
-       for (index = 0; index < device->cqs_used; index++)
-               if (device->cq_active_qps[index] <
-                   device->cq_active_qps[min_index])
+       for (index = 0; index < device->comps_used; index++) {
+               if (device->comps[index].active_qps <
+                   device->comps[min_index].active_qps)
                        min_index = index;
-       device->cq_active_qps[min_index]++;
+       }
+       ib_conn->comp = &device->comps[min_index];
+       ib_conn->comp->active_qps++;
        mutex_unlock(&ig.connlist_mutex);
        iser_info("cq index %d used for ib_conn %p\n", min_index, ib_conn);
 
        init_attr.event_handler = iser_qp_event_callback;
        init_attr.qp_context    = (void *)ib_conn;
-       init_attr.send_cq       = device->tx_cq[min_index];
-       init_attr.recv_cq       = device->rx_cq[min_index];
+       init_attr.send_cq       = ib_conn->comp->cq;
+       init_attr.recv_cq       = ib_conn->comp->cq;
        init_attr.cap.max_recv_wr  = ISER_QP_MAX_RECV_DTOS;
        init_attr.cap.max_send_sge = 2;
        init_attr.cap.max_recv_sge = 1;
@@ -490,33 +478,6 @@ out_err:
        return ret;
 }
 
-/**
- * releases the QP objects, returns 0 on success,
- * -1 on failure
- */
-static int iser_free_ib_conn_res(struct iser_conn *ib_conn)
-{
-       int cq_index;
-       BUG_ON(ib_conn == NULL);
-
-       iser_info("freeing conn %p cma_id %p qp %p\n",
-                 ib_conn, ib_conn->cma_id,
-                 ib_conn->qp);
-
-       /* qp is created only once both addr & route are resolved */
-
-       if (ib_conn->qp != NULL) {
-               cq_index = ((struct iser_cq_desc *)ib_conn->qp->recv_cq->cq_context)->cq_index;
-               ib_conn->device->cq_active_qps[cq_index]--;
-
-               rdma_destroy_qp(ib_conn->cma_id);
-       }
-
-       ib_conn->qp       = NULL;
-
-       return 0;
-}
-
 /**
  * based on the resolved device node GUID see if there already allocated
  * device for this device. If there's no such, create one.
@@ -568,96 +529,168 @@ static void iser_device_try_release(struct iser_device *device)
        mutex_unlock(&ig.device_list_mutex);
 }
 
-static int iser_conn_state_comp_exch(struct iser_conn *ib_conn,
-                                    enum iser_ib_conn_state comp,
-                                    enum iser_ib_conn_state exch)
+/**
+ * Called with state mutex held
+ **/
+static int iser_conn_state_comp_exch(struct iser_conn *iser_conn,
+                                    enum iser_conn_state comp,
+                                    enum iser_conn_state exch)
 {
        int ret;
 
-       spin_lock_bh(&ib_conn->lock);
-       if ((ret = (ib_conn->state == comp)))
-               ib_conn->state = exch;
-       spin_unlock_bh(&ib_conn->lock);
+       ret = (iser_conn->state == comp);
+       if (ret)
+               iser_conn->state = exch;
+
        return ret;
 }
 
 void iser_release_work(struct work_struct *work)
 {
-       struct iser_conn *ib_conn;
+       struct iser_conn *iser_conn;
 
-       ib_conn = container_of(work, struct iser_conn, release_work);
+       iser_conn = container_of(work, struct iser_conn, release_work);
 
-       /* wait for .conn_stop callback */
-       wait_for_completion(&ib_conn->stop_completion);
+       /* Wait for conn_stop to complete */
+       wait_for_completion(&iser_conn->stop_completion);
+       /* Wait for IB resouces cleanup to complete */
+       wait_for_completion(&iser_conn->ib_completion);
 
-       /* wait for the qp`s post send and post receive buffers to empty */
-       wait_event_interruptible(ib_conn->wait,
-                                ib_conn->state == ISER_CONN_DOWN);
+       mutex_lock(&iser_conn->state_mutex);
+       iser_conn->state = ISER_CONN_DOWN;
+       mutex_unlock(&iser_conn->state_mutex);
 
-       iser_conn_release(ib_conn);
+       iser_conn_release(iser_conn);
 }
 
 /**
- * Frees all conn objects and deallocs conn descriptor
+ * iser_free_ib_conn_res - release IB related resources
+ * @iser_conn: iser connection struct
+ * @destroy_device: indicator if we need to try to release
+ *     the iser device (only iscsi shutdown and DEVICE_REMOVAL
+ *     will use this.
+ *
+ * This routine is called with the iser state mutex held
+ * so the cm_id removal is out of here. It is Safe to
+ * be invoked multiple times.
  */
-void iser_conn_release(struct iser_conn *ib_conn)
+static void iser_free_ib_conn_res(struct iser_conn *iser_conn,
+                                 bool destroy_device)
 {
-       struct iser_device  *device = ib_conn->device;
+       struct ib_conn *ib_conn = &iser_conn->ib_conn;
+       struct iser_device *device = ib_conn->device;
+
+       iser_info("freeing conn %p cma_id %p qp %p\n",
+                 iser_conn, ib_conn->cma_id, ib_conn->qp);
+
+       iser_free_rx_descriptors(iser_conn);
+
+       if (ib_conn->qp != NULL) {
+               ib_conn->comp->active_qps--;
+               rdma_destroy_qp(ib_conn->cma_id);
+               ib_conn->qp = NULL;
+       }
+
+       if (destroy_device && device != NULL) {
+               iser_device_try_release(device);
+               ib_conn->device = NULL;
+       }
+}
 
-       BUG_ON(ib_conn->state == ISER_CONN_UP);
+/**
+ * Frees all conn objects and deallocs conn descriptor
+ */
+void iser_conn_release(struct iser_conn *iser_conn)
+{
+       struct ib_conn *ib_conn = &iser_conn->ib_conn;
 
        mutex_lock(&ig.connlist_mutex);
-       list_del(&ib_conn->conn_list);
+       list_del(&iser_conn->conn_list);
        mutex_unlock(&ig.connlist_mutex);
-       iser_free_rx_descriptors(ib_conn);
-       iser_free_ib_conn_res(ib_conn);
-       ib_conn->device = NULL;
-       /* on EVENT_ADDR_ERROR there's no device yet for this conn */
-       if (device != NULL)
-               iser_device_try_release(device);
-       /* if cma handler context, the caller actually destroy the id */
+
+       mutex_lock(&iser_conn->state_mutex);
+       if (iser_conn->state != ISER_CONN_DOWN)
+               iser_warn("iser conn %p state %d, expected state down.\n",
+                         iser_conn, iser_conn->state);
+       /*
+        * In case we never got to bind stage, we still need to
+        * release IB resources (which is safe to call more than once).
+        */
+       iser_free_ib_conn_res(iser_conn, true);
+       mutex_unlock(&iser_conn->state_mutex);
+
        if (ib_conn->cma_id != NULL) {
                rdma_destroy_id(ib_conn->cma_id);
                ib_conn->cma_id = NULL;
        }
-       iscsi_destroy_endpoint(ib_conn->ep);
+
+       kfree(iser_conn);
 }
 
 /**
  * triggers start of the disconnect procedures and wait for them to be done
+ * Called with state mutex held
  */
-void iser_conn_terminate(struct iser_conn *ib_conn)
+int iser_conn_terminate(struct iser_conn *iser_conn)
 {
+       struct ib_conn *ib_conn = &iser_conn->ib_conn;
        int err = 0;
 
-       /* change the ib conn state only if the conn is UP, however always call
-        * rdma_disconnect since this is the only way to cause the CMA to change
-        * the QP state to ERROR
+       /* terminate the iser conn only if the conn state is UP */
+       if (!iser_conn_state_comp_exch(iser_conn, ISER_CONN_UP,
+                                      ISER_CONN_TERMINATING))
+               return 0;
+
+       iser_info("iser_conn %p state %d\n", iser_conn, iser_conn->state);
+
+       /* suspend queuing of new iscsi commands */
+       if (iser_conn->iscsi_conn)
+               iscsi_suspend_queue(iser_conn->iscsi_conn);
+
+       /*
+        * In case we didn't already clean up the cma_id (peer initiated
+        * a disconnection), we need to Cause the CMA to change the QP
+        * state to ERROR.
         */
+       if (ib_conn->cma_id) {
+               err = rdma_disconnect(ib_conn->cma_id);
+               if (err)
+                       iser_err("Failed to disconnect, conn: 0x%p err %d\n",
+                                iser_conn, err);
+
+               wait_for_completion(&ib_conn->flush_comp);
+       }
 
-       iser_conn_state_comp_exch(ib_conn, ISER_CONN_UP, ISER_CONN_TERMINATING);
-       err = rdma_disconnect(ib_conn->cma_id);
-       if (err)
-               iser_err("Failed to disconnect, conn: 0x%p err %d\n",
-                        ib_conn,err);
+       return 1;
 }
 
+/**
+ * Called with state mutex held
+ **/
 static void iser_connect_error(struct rdma_cm_id *cma_id)
 {
-       struct iser_conn *ib_conn;
+       struct iser_conn *iser_conn;
 
-       ib_conn = (struct iser_conn *)cma_id->context;
-
-       ib_conn->state = ISER_CONN_DOWN;
-       wake_up_interruptible(&ib_conn->wait);
+       iser_conn = (struct iser_conn *)cma_id->context;
+       iser_conn->state = ISER_CONN_DOWN;
 }
 
+/**
+ * Called with state mutex held
+ **/
 static void iser_addr_handler(struct rdma_cm_id *cma_id)
 {
        struct iser_device *device;
-       struct iser_conn   *ib_conn;
+       struct iser_conn   *iser_conn;
+       struct ib_conn   *ib_conn;
        int    ret;
 
+       iser_conn = (struct iser_conn *)cma_id->context;
+       if (iser_conn->state != ISER_CONN_PENDING)
+               /* bailout */
+               return;
+
+       ib_conn = &iser_conn->ib_conn;
        device = iser_device_find_by_ib_device(cma_id);
        if (!device) {
                iser_err("device lookup/creation failed\n");
@@ -665,7 +698,6 @@ static void iser_addr_handler(struct rdma_cm_id *cma_id)
                return;
        }
 
-       ib_conn = (struct iser_conn *)cma_id->context;
        ib_conn->device = device;
 
        /* connection T10-PI support */
@@ -689,18 +721,28 @@ static void iser_addr_handler(struct rdma_cm_id *cma_id)
        }
 }
 
+/**
+ * Called with state mutex held
+ **/
 static void iser_route_handler(struct rdma_cm_id *cma_id)
 {
        struct rdma_conn_param conn_param;
        int    ret;
        struct iser_cm_hdr req_hdr;
+       struct iser_conn *iser_conn = (struct iser_conn *)cma_id->context;
+       struct ib_conn *ib_conn = &iser_conn->ib_conn;
+       struct iser_device *device = ib_conn->device;
+
+       if (iser_conn->state != ISER_CONN_PENDING)
+               /* bailout */
+               return;
 
-       ret = iser_create_ib_conn_res((struct iser_conn *)cma_id->context);
+       ret = iser_create_ib_conn_res(ib_conn);
        if (ret)
                goto failure;
 
        memset(&conn_param, 0, sizeof conn_param);
-       conn_param.responder_resources = 4;
+       conn_param.responder_resources = device->dev_attr.max_qp_rd_atom;
        conn_param.initiator_depth     = 1;
        conn_param.retry_count         = 7;
        conn_param.rnr_retry_count     = 6;
@@ -724,47 +766,60 @@ failure:
 
 static void iser_connected_handler(struct rdma_cm_id *cma_id)
 {
-       struct iser_conn *ib_conn;
+       struct iser_conn *iser_conn;
        struct ib_qp_attr attr;
        struct ib_qp_init_attr init_attr;
 
+       iser_conn = (struct iser_conn *)cma_id->context;
+       if (iser_conn->state != ISER_CONN_PENDING)
+               /* bailout */
+               return;
+
        (void)ib_query_qp(cma_id->qp, &attr, ~0, &init_attr);
        iser_info("remote qpn:%x my qpn:%x\n", attr.dest_qp_num, cma_id->qp->qp_num);
 
-       ib_conn = (struct iser_conn *)cma_id->context;
-       if (iser_conn_state_comp_exch(ib_conn, ISER_CONN_PENDING, ISER_CONN_UP))
-               wake_up_interruptible(&ib_conn->wait);
+       iser_conn->state = ISER_CONN_UP;
+       complete(&iser_conn->up_completion);
 }
 
 static void iser_disconnected_handler(struct rdma_cm_id *cma_id)
 {
-       struct iser_conn *ib_conn;
-
-       ib_conn = (struct iser_conn *)cma_id->context;
+       struct iser_conn *iser_conn = (struct iser_conn *)cma_id->context;
 
-       /* getting here when the state is UP means that the conn is being *
-        * terminated asynchronously from the iSCSI layer's perspective.  */
-       if (iser_conn_state_comp_exch(ib_conn, ISER_CONN_UP,
-                                       ISER_CONN_TERMINATING)){
-               if (ib_conn->iscsi_conn)
-                       iscsi_conn_failure(ib_conn->iscsi_conn, ISCSI_ERR_CONN_FAILED);
+       if (iser_conn_terminate(iser_conn)) {
+               if (iser_conn->iscsi_conn)
+                       iscsi_conn_failure(iser_conn->iscsi_conn,
+                                          ISCSI_ERR_CONN_FAILED);
                else
                        iser_err("iscsi_iser connection isn't bound\n");
        }
-
-       /* Complete the termination process if no posts are pending */
-       if (ib_conn->post_recv_buf_count == 0 &&
-           (atomic_read(&ib_conn->post_send_buf_count) == 0)) {
-               ib_conn->state = ISER_CONN_DOWN;
-               wake_up_interruptible(&ib_conn->wait);
-       }
 }
 
+static void iser_cleanup_handler(struct rdma_cm_id *cma_id,
+                                bool destroy_device)
+{
+       struct iser_conn *iser_conn = (struct iser_conn *)cma_id->context;
+
+       /*
+        * We are not guaranteed that we visited disconnected_handler
+        * by now, call it here to be safe that we handle CM drep
+        * and flush errors.
+        */
+       iser_disconnected_handler(cma_id);
+       iser_free_ib_conn_res(iser_conn, destroy_device);
+       complete(&iser_conn->ib_completion);
+};
+
 static int iser_cma_handler(struct rdma_cm_id *cma_id, struct rdma_cm_event *event)
 {
+       struct iser_conn *iser_conn;
+       int ret = 0;
+
+       iser_conn = (struct iser_conn *)cma_id->context;
        iser_info("event %d status %d conn %p id %p\n",
                  event->event, event->status, cma_id->context, cma_id);
 
+       mutex_lock(&iser_conn->state_mutex);
        switch (event->event) {
        case RDMA_CM_EVENT_ADDR_RESOLVED:
                iser_addr_handler(cma_id);
@@ -783,89 +838,105 @@ static int iser_cma_handler(struct rdma_cm_id *cma_id, struct rdma_cm_event *eve
                iser_connect_error(cma_id);
                break;
        case RDMA_CM_EVENT_DISCONNECTED:
-       case RDMA_CM_EVENT_DEVICE_REMOVAL:
        case RDMA_CM_EVENT_ADDR_CHANGE:
                iser_disconnected_handler(cma_id);
                break;
+       case RDMA_CM_EVENT_DEVICE_REMOVAL:
+               /*
+                * we *must* destroy the device as we cannot rely
+                * on iscsid to be around to initiate error handling.
+                * also implicitly destroy the cma_id.
+                */
+               iser_cleanup_handler(cma_id, true);
+               iser_conn->ib_conn.cma_id = NULL;
+               ret = 1;
+               break;
+       case RDMA_CM_EVENT_TIMEWAIT_EXIT:
+               iser_cleanup_handler(cma_id, false);
+               break;
        default:
                iser_err("Unexpected RDMA CM event (%d)\n", event->event);
                break;
        }
-       return 0;
+       mutex_unlock(&iser_conn->state_mutex);
+
+       return ret;
 }
 
-void iser_conn_init(struct iser_conn *ib_conn)
+void iser_conn_init(struct iser_conn *iser_conn)
 {
-       ib_conn->state = ISER_CONN_INIT;
-       init_waitqueue_head(&ib_conn->wait);
-       ib_conn->post_recv_buf_count = 0;
-       atomic_set(&ib_conn->post_send_buf_count, 0);
-       init_completion(&ib_conn->stop_completion);
-       INIT_LIST_HEAD(&ib_conn->conn_list);
-       spin_lock_init(&ib_conn->lock);
+       iser_conn->state = ISER_CONN_INIT;
+       iser_conn->ib_conn.post_recv_buf_count = 0;
+       atomic_set(&iser_conn->ib_conn.post_send_buf_count, 0);
+       init_completion(&iser_conn->ib_conn.flush_comp);
+       init_completion(&iser_conn->stop_completion);
+       init_completion(&iser_conn->ib_completion);
+       init_completion(&iser_conn->up_completion);
+       INIT_LIST_HEAD(&iser_conn->conn_list);
+       spin_lock_init(&iser_conn->ib_conn.lock);
+       mutex_init(&iser_conn->state_mutex);
 }
 
  /**
  * starts the process of connecting to the target
  * sleeps until the connection is established or rejected
  */
-int iser_connect(struct iser_conn   *ib_conn,
-                struct sockaddr_in *src_addr,
-                struct sockaddr_in *dst_addr,
+int iser_connect(struct iser_conn   *iser_conn,
+                struct sockaddr    *src_addr,
+                struct sockaddr    *dst_addr,
                 int                 non_blocking)
 {
-       struct sockaddr *src, *dst;
+       struct ib_conn *ib_conn = &iser_conn->ib_conn;
        int err = 0;
 
-       sprintf(ib_conn->name, "%pI4:%d",
-               &dst_addr->sin_addr.s_addr, dst_addr->sin_port);
+       mutex_lock(&iser_conn->state_mutex);
+
+       sprintf(iser_conn->name, "%pISp", dst_addr);
+
+       iser_info("connecting to: %s\n", iser_conn->name);
 
        /* the device is known only --after-- address resolution */
        ib_conn->device = NULL;
 
-       iser_info("connecting to: %pI4, port 0x%x\n",
-                 &dst_addr->sin_addr, dst_addr->sin_port);
-
-       ib_conn->state = ISER_CONN_PENDING;
+       iser_conn->state = ISER_CONN_PENDING;
 
        ib_conn->cma_id = rdma_create_id(iser_cma_handler,
-                                            (void *)ib_conn,
-                                            RDMA_PS_TCP, IB_QPT_RC);
+                                        (void *)iser_conn,
+                                        RDMA_PS_TCP, IB_QPT_RC);
        if (IS_ERR(ib_conn->cma_id)) {
                err = PTR_ERR(ib_conn->cma_id);
                iser_err("rdma_create_id failed: %d\n", err);
                goto id_failure;
        }
 
-       src = (struct sockaddr *)src_addr;
-       dst = (struct sockaddr *)dst_addr;
-       err = rdma_resolve_addr(ib_conn->cma_id, src, dst, 1000);
+       err = rdma_resolve_addr(ib_conn->cma_id, src_addr, dst_addr, 1000);
        if (err) {
                iser_err("rdma_resolve_addr failed: %d\n", err);
                goto addr_failure;
        }
 
        if (!non_blocking) {
-               wait_event_interruptible(ib_conn->wait,
-                                        (ib_conn->state != ISER_CONN_PENDING));
+               wait_for_completion_interruptible(&iser_conn->up_completion);
 
-               if (ib_conn->state != ISER_CONN_UP) {
+               if (iser_conn->state != ISER_CONN_UP) {
                        err =  -EIO;
                        goto connect_failure;
                }
        }
+       mutex_unlock(&iser_conn->state_mutex);
 
        mutex_lock(&ig.connlist_mutex);
-       list_add(&ib_conn->conn_list, &ig.connlist);
+       list_add(&iser_conn->conn_list, &ig.connlist);
        mutex_unlock(&ig.connlist_mutex);
        return 0;
 
 id_failure:
        ib_conn->cma_id = NULL;
 addr_failure:
-       ib_conn->state = ISER_CONN_DOWN;
+       iser_conn->state = ISER_CONN_DOWN;
 connect_failure:
-       iser_conn_release(ib_conn);
+       mutex_unlock(&iser_conn->state_mutex);
+       iser_conn_release(iser_conn);
        return err;
 }
 
@@ -874,7 +945,7 @@ connect_failure:
  *
  * returns: 0 on success, errno code on failure
  */
-int iser_reg_page_vec(struct iser_conn     *ib_conn,
+int iser_reg_page_vec(struct ib_conn *ib_conn,
                      struct iser_page_vec *page_vec,
                      struct iser_mem_reg  *mem_reg)
 {
@@ -944,7 +1015,8 @@ void iser_unreg_mem_fastreg(struct iscsi_iser_task *iser_task,
                            enum iser_data_dir cmd_dir)
 {
        struct iser_mem_reg *reg = &iser_task->rdma_regd[cmd_dir].reg;
-       struct iser_conn *ib_conn = iser_task->ib_conn;
+       struct iser_conn *iser_conn = iser_task->iser_conn;
+       struct ib_conn *ib_conn = &iser_conn->ib_conn;
        struct fast_reg_descriptor *desc = reg->mem_h;
 
        if (!reg->is_mr)
@@ -957,17 +1029,18 @@ void iser_unreg_mem_fastreg(struct iscsi_iser_task *iser_task,
        spin_unlock_bh(&ib_conn->lock);
 }
 
-int iser_post_recvl(struct iser_conn *ib_conn)
+int iser_post_recvl(struct iser_conn *iser_conn)
 {
        struct ib_recv_wr rx_wr, *rx_wr_failed;
+       struct ib_conn *ib_conn = &iser_conn->ib_conn;
        struct ib_sge     sge;
        int ib_ret;
 
-       sge.addr   = ib_conn->login_resp_dma;
+       sge.addr   = iser_conn->login_resp_dma;
        sge.length = ISER_RX_LOGIN_SIZE;
        sge.lkey   = ib_conn->device->mr->lkey;
 
-       rx_wr.wr_id   = (unsigned long)ib_conn->login_resp_buf;
+       rx_wr.wr_id   = (unsigned long)iser_conn->login_resp_buf;
        rx_wr.sg_list = &sge;
        rx_wr.num_sge = 1;
        rx_wr.next    = NULL;
@@ -981,20 +1054,21 @@ int iser_post_recvl(struct iser_conn *ib_conn)
        return ib_ret;
 }
 
-int iser_post_recvm(struct iser_conn *ib_conn, int count)
+int iser_post_recvm(struct iser_conn *iser_conn, int count)
 {
        struct ib_recv_wr *rx_wr, *rx_wr_failed;
        int i, ib_ret;
-       unsigned int my_rx_head = ib_conn->rx_desc_head;
+       struct ib_conn *ib_conn = &iser_conn->ib_conn;
+       unsigned int my_rx_head = iser_conn->rx_desc_head;
        struct iser_rx_desc *rx_desc;
 
        for (rx_wr = ib_conn->rx_wr, i = 0; i < count; i++, rx_wr++) {
-               rx_desc         = &ib_conn->rx_descs[my_rx_head];
+               rx_desc         = &iser_conn->rx_descs[my_rx_head];
                rx_wr->wr_id    = (unsigned long)rx_desc;
                rx_wr->sg_list  = &rx_desc->rx_sg;
                rx_wr->num_sge  = 1;
                rx_wr->next     = rx_wr + 1;
-               my_rx_head = (my_rx_head + 1) & ib_conn->qp_max_recv_dtos_mask;
+               my_rx_head = (my_rx_head + 1) & iser_conn->qp_max_recv_dtos_mask;
        }
 
        rx_wr--;
@@ -1006,7 +1080,7 @@ int iser_post_recvm(struct iser_conn *ib_conn, int count)
                iser_err("ib_post_recv failed ret=%d\n", ib_ret);
                ib_conn->post_recv_buf_count -= count;
        } else
-               ib_conn->rx_desc_head = my_rx_head;
+               iser_conn->rx_desc_head = my_rx_head;
        return ib_ret;
 }
 
@@ -1016,13 +1090,14 @@ int iser_post_recvm(struct iser_conn *ib_conn, int count)
  *
  * returns 0 on success, -1 on failure
  */
-int iser_post_send(struct iser_conn *ib_conn, struct iser_tx_desc *tx_desc)
+int iser_post_send(struct ib_conn *ib_conn, struct iser_tx_desc *tx_desc)
 {
        int               ib_ret;
        struct ib_send_wr send_wr, *send_wr_failed;
 
        ib_dma_sync_single_for_device(ib_conn->device->ib_device,
-               tx_desc->dma_addr, ISER_HEADERS_LEN, DMA_TO_DEVICE);
+                                     tx_desc->dma_addr, ISER_HEADERS_LEN,
+                                     DMA_TO_DEVICE);
 
        send_wr.next       = NULL;
        send_wr.wr_id      = (unsigned long)tx_desc;
@@ -1041,113 +1116,142 @@ int iser_post_send(struct iser_conn *ib_conn, struct iser_tx_desc *tx_desc)
        return ib_ret;
 }
 
-static void iser_handle_comp_error(struct iser_tx_desc *desc,
-                               struct iser_conn *ib_conn)
+/**
+ * is_iser_tx_desc - Indicate if the completion wr_id
+ *     is a TX descriptor or not.
+ * @iser_conn: iser connection
+ * @wr_id: completion WR identifier
+ *
+ * Since we cannot rely on wc opcode in FLUSH errors
+ * we must work around it by checking if the wr_id address
+ * falls in the iser connection rx_descs buffer. If so
+ * it is an RX descriptor, otherwize it is a TX.
+ */
+static inline bool
+is_iser_tx_desc(struct iser_conn *iser_conn, void *wr_id)
 {
-       if (desc && desc->type == ISCSI_TX_DATAOUT)
-               kmem_cache_free(ig.desc_cache, desc);
-
-       if (ib_conn->post_recv_buf_count == 0 &&
-           atomic_read(&ib_conn->post_send_buf_count) == 0) {
-               /* getting here when the state is UP means that the conn is *
-                * being terminated asynchronously from the iSCSI layer's   *
-                * perspective.                                             */
-               if (iser_conn_state_comp_exch(ib_conn, ISER_CONN_UP,
-                   ISER_CONN_TERMINATING))
-                       iscsi_conn_failure(ib_conn->iscsi_conn,
+       void *start = iser_conn->rx_descs;
+       int len = iser_conn->num_rx_descs * sizeof(*iser_conn->rx_descs);
+
+       if (wr_id >= start && wr_id < start + len)
+               return false;
+
+       return true;
+}
+
+/**
+ * iser_handle_comp_error() - Handle error completion
+ * @ib_conn:   connection RDMA resources
+ * @wc:        work completion
+ *
+ * Notes: We may handle a FLUSH error completion and in this case
+ *        we only cleanup in case TX type was DATAOUT. For non-FLUSH
+ *        error completion we should also notify iscsi layer that
+ *        connection is failed (in case we passed bind stage).
+ */
+static void
+iser_handle_comp_error(struct ib_conn *ib_conn,
+                      struct ib_wc *wc)
+{
+       struct iser_conn *iser_conn = container_of(ib_conn, struct iser_conn,
+                                                  ib_conn);
+
+       if (wc->status != IB_WC_WR_FLUSH_ERR)
+               if (iser_conn->iscsi_conn)
+                       iscsi_conn_failure(iser_conn->iscsi_conn,
                                           ISCSI_ERR_CONN_FAILED);
 
-               /* no more non completed posts to the QP, complete the
-                * termination process w.o worrying on disconnect event */
-               ib_conn->state = ISER_CONN_DOWN;
-               wake_up_interruptible(&ib_conn->wait);
+       if (is_iser_tx_desc(iser_conn, (void *)wc->wr_id)) {
+               struct iser_tx_desc *desc = (struct iser_tx_desc *)wc->wr_id;
+
+               atomic_dec(&ib_conn->post_send_buf_count);
+               if (desc->type == ISCSI_TX_DATAOUT)
+                       kmem_cache_free(ig.desc_cache, desc);
+       } else {
+               ib_conn->post_recv_buf_count--;
        }
 }
 
-static int iser_drain_tx_cq(struct iser_device  *device, int cq_index)
+/**
+ * iser_handle_wc - handle a single work completion
+ * @wc: work completion
+ *
+ * Soft-IRQ context, work completion can be either
+ * SEND or RECV, and can turn out successful or
+ * with error (or flush error).
+ */
+static void iser_handle_wc(struct ib_wc *wc)
 {
-       struct ib_cq  *cq = device->tx_cq[cq_index];
-       struct ib_wc  wc;
+       struct ib_conn *ib_conn;
        struct iser_tx_desc *tx_desc;
-       struct iser_conn *ib_conn;
-       int completed_tx = 0;
+       struct iser_rx_desc *rx_desc;
 
-       while (ib_poll_cq(cq, 1, &wc) == 1) {
-               tx_desc = (struct iser_tx_desc *) (unsigned long) wc.wr_id;
-               ib_conn = wc.qp->qp_context;
-               if (wc.status == IB_WC_SUCCESS) {
-                       if (wc.opcode == IB_WC_SEND)
-                               iser_snd_completion(tx_desc, ib_conn);
-                       else
-                               iser_err("expected opcode %d got %d\n",
-                                       IB_WC_SEND, wc.opcode);
+       ib_conn = wc->qp->qp_context;
+       if (wc->status == IB_WC_SUCCESS) {
+               if (wc->opcode == IB_WC_RECV) {
+                       rx_desc = (struct iser_rx_desc *)wc->wr_id;
+                       iser_rcv_completion(rx_desc, wc->byte_len,
+                                           ib_conn);
+               } else
+               if (wc->opcode == IB_WC_SEND) {
+                       tx_desc = (struct iser_tx_desc *)wc->wr_id;
+                       iser_snd_completion(tx_desc, ib_conn);
+                       atomic_dec(&ib_conn->post_send_buf_count);
                } else {
-                       iser_err("tx id %llx status %d vend_err %x\n",
-                                wc.wr_id, wc.status, wc.vendor_err);
-                       if (wc.wr_id != ISER_FASTREG_LI_WRID) {
-                               atomic_dec(&ib_conn->post_send_buf_count);
-                               iser_handle_comp_error(tx_desc, ib_conn);
-                       }
+                       iser_err("Unknown wc opcode %d\n", wc->opcode);
                }
-               completed_tx++;
+       } else {
+               if (wc->status != IB_WC_WR_FLUSH_ERR)
+                       iser_err("wr id %llx status %d vend_err %x\n",
+                                wc->wr_id, wc->status, wc->vendor_err);
+               else
+                       iser_dbg("flush error: wr id %llx\n", wc->wr_id);
+
+               if (wc->wr_id != ISER_FASTREG_LI_WRID)
+                       iser_handle_comp_error(ib_conn, wc);
+
+               /* complete in case all flush errors were consumed */
+               if (ib_conn->post_recv_buf_count == 0 &&
+                   atomic_read(&ib_conn->post_send_buf_count) == 0)
+                       complete(&ib_conn->flush_comp);
        }
-       return completed_tx;
 }
 
-
+/**
+ * iser_cq_tasklet_fn - iSER completion polling loop
+ * @data: iSER completion context
+ *
+ * Soft-IRQ context, polling connection CQ until
+ * either CQ was empty or we exausted polling budget
+ */
 static void iser_cq_tasklet_fn(unsigned long data)
 {
-       struct iser_cq_desc *cq_desc = (struct iser_cq_desc *)data;
-       struct iser_device  *device = cq_desc->device;
-       int cq_index = cq_desc->cq_index;
-       struct ib_cq         *cq = device->rx_cq[cq_index];
-        struct ib_wc        wc;
-        struct iser_rx_desc *desc;
-        unsigned long       xfer_len;
-       struct iser_conn *ib_conn;
-       int completed_tx, completed_rx = 0;
-
-       /* First do tx drain, so in a case where we have rx flushes and a successful
-        * tx completion we will still go through completion error handling.
-        */
-       completed_tx = iser_drain_tx_cq(device, cq_index);
+       struct iser_comp *comp = (struct iser_comp *)data;
+       struct ib_cq *cq = comp->cq;
+       struct ib_wc wc;
+       int completed = 0;
 
        while (ib_poll_cq(cq, 1, &wc) == 1) {
-               desc     = (struct iser_rx_desc *) (unsigned long) wc.wr_id;
-               BUG_ON(desc == NULL);
-               ib_conn = wc.qp->qp_context;
-               if (wc.status == IB_WC_SUCCESS) {
-                       if (wc.opcode == IB_WC_RECV) {
-                               xfer_len = (unsigned long)wc.byte_len;
-                               iser_rcv_completion(desc, xfer_len, ib_conn);
-                       } else
-                               iser_err("expected opcode %d got %d\n",
-                                       IB_WC_RECV, wc.opcode);
-               } else {
-                       if (wc.status != IB_WC_WR_FLUSH_ERR)
-                               iser_err("rx id %llx status %d vend_err %x\n",
-                                       wc.wr_id, wc.status, wc.vendor_err);
-                       ib_conn->post_recv_buf_count--;
-                       iser_handle_comp_error(NULL, ib_conn);
-               }
-               completed_rx++;
-               if (!(completed_rx & 63))
-                       completed_tx += iser_drain_tx_cq(device, cq_index);
+               iser_handle_wc(&wc);
+
+               if (++completed >= iser_cq_poll_limit)
+                       break;
        }
-       /* #warning "it is assumed here that arming CQ only once its empty" *
-        * " would not cause interrupts to be missed"                       */
+
+       /*
+        * It is assumed here that arming CQ only once its empty
+        * would not cause interrupts to be missed.
+        */
        ib_req_notify_cq(cq, IB_CQ_NEXT_COMP);
 
-       iser_dbg("got %d rx %d tx completions\n", completed_rx, completed_tx);
+       iser_dbg("got %d completions\n", completed);
 }
 
 static void iser_cq_callback(struct ib_cq *cq, void *cq_context)
 {
-       struct iser_cq_desc *cq_desc = (struct iser_cq_desc *)cq_context;
-       struct iser_device  *device = cq_desc->device;
-       int cq_index = cq_desc->cq_index;
+       struct iser_comp *comp = cq_context;
 
-       tasklet_schedule(&device->cq_tasklet[cq_index]);
+       tasklet_schedule(&comp->tasklet);
 }
 
 u8 iser_check_task_pi_status(struct iscsi_iser_task *iser_task,