struct netlink_ext_ack *extack)
 {
        struct mlx5_eswitch *esw = priv->mdev->priv.eswitch;
+       u32 max_chain = mlx5_eswitch_get_chain_range(esw);
        struct mlx5_esw_flow_attr *attr = flow->esw_attr;
+       u16 max_prio = mlx5_eswitch_get_prio_range(esw);
        struct net_device *out_dev, *encap_dev = NULL;
        struct mlx5_fc *counter = NULL;
        struct mlx5e_rep_priv *rpriv;
        struct mlx5e_priv *out_priv;
        int err = 0, encap_err = 0;
 
-       /* keep the old behaviour, use same prio for all offloaded rules */
-       attr->prio = 1;
+       /* if prios are not supported, keep the old behaviour of using same prio
+        * for all offloaded rules.
+        */
+       if (!mlx5_eswitch_prios_supported(esw))
+               attr->prio = 1;
+
+       if (attr->chain > max_chain) {
+               NL_SET_ERR_MSG(extack, "Requested chain is out of supported range");
+               err = -EOPNOTSUPP;
+               goto err_max_prio_chain;
+       }
+
+       if (attr->prio > max_prio) {
+               NL_SET_ERR_MSG(extack, "Requested priority is out of supported range");
+               err = -EOPNOTSUPP;
+               goto err_max_prio_chain;
+       }
 
        if (attr->action & MLX5_FLOW_CONTEXT_ACTION_PACKET_REFORMAT) {
                out_dev = __dev_get_by_index(dev_net(priv->netdev),
        if (attr->action & MLX5_FLOW_CONTEXT_ACTION_PACKET_REFORMAT)
                mlx5e_detach_encap(priv, flow);
 err_attach_encap:
+err_max_prio_chain:
        return err;
 }
 
                                struct mlx5e_tc_flow *flow,
                                struct netlink_ext_ack *extack)
 {
+       struct mlx5_eswitch *esw = priv->mdev->priv.eswitch;
        struct mlx5_esw_flow_attr *attr = flow->esw_attr;
        struct mlx5e_rep_priv *rpriv = priv->ppriv;
        struct ip_tunnel_info *info = NULL;
                        continue;
                }
 
+               if (is_tcf_gact_goto_chain(a)) {
+                       u32 dest_chain = tcf_gact_goto_chain_index(a);
+                       u32 max_chain = mlx5_eswitch_get_chain_range(esw);
+
+                       if (dest_chain <= attr->chain) {
+                               NL_SET_ERR_MSG(extack, "Goto earlier chain isn't supported");
+                               return -EOPNOTSUPP;
+                       }
+                       if (dest_chain > max_chain) {
+                               NL_SET_ERR_MSG(extack, "Requested destination chain is out of supported range");
+                               return -EOPNOTSUPP;
+                       }
+                       action |= MLX5_FLOW_CONTEXT_ACTION_FWD_DEST |
+                                 MLX5_FLOW_CONTEXT_ACTION_COUNT;
+                       attr->dest_chain = dest_chain;
+
+                       continue;
+               }
+
                return -EINVAL;
        }
 
        if (err)
                goto out;
 
+       flow->esw_attr->chain = f->common.chain_index;
+       flow->esw_attr->prio = TC_H_MAJ(f->common.prio) >> 16;
        err = parse_tc_fdb_actions(priv, f->exts, parse_attr, flow, extack);
        if (err)
                goto err_free;
        struct mlx5e_tc_flow *flow;
        int attr_size, err;
 
+       /* multi-chain not supported for NIC rules */
+       if (!tc_cls_can_offload_and_chain0(priv->netdev, &f->common))
+               return -EOPNOTSUPP;
+
        flow_flags |= MLX5E_TC_FLOW_NIC;
        attr_size  = sizeof(struct mlx5_nic_flow_attr);
        err = mlx5e_alloc_flow(priv, attr_size, f, flow_flags,
 
        get_flags(flags, &flow_flags);
 
+       if (!tc_can_offload_extack(priv->netdev, f->common.extack))
+               return -EOPNOTSUPP;
+
        if (esw && esw->mode == SRIOV_OFFLOADS)
                err = mlx5e_add_fdb_flow(priv, f, flow_flags, flow);
        else