FD.io VPP  v18.07-rc0-415-g6c78436
Vector Packet Processing
acl.c File Reference
+ Include dependency graph for acl.c:

Go to the source code of this file.

Data Structures

struct  macip_match_type_t
 

Macros

#define vl_typedefs
 
#define vl_endianfun
 
#define vl_print(handle, ...)   vlib_cli_output (handle, __VA_ARGS__)
 
#define vl_printfun
 
#define vl_api_version(n, v)   static u32 api_version=(v);
 
#define REPLY_MSG_ID_BASE   am->msg_id_base
 
#define foreach_acl_plugin_api_msg
 
#define XX   "\377"
 
#define v
 
#define vl_msg_name_crc_list
 

Typedefs

typedef void(* acl_vector_print_func_t) (vlib_main_t *vm, u8 *out0)
 

Functions

 VLIB_PLUGIN_REGISTER ()
 
u8format_vec16 (u8 *s, va_list *va)
 
static void * acl_set_heap (acl_main_t *am)
 
void * acl_plugin_set_heap ()
 
void acl_plugin_acl_set_validate_heap (acl_main_t *am, int on)
 
void acl_plugin_acl_set_trace_heap (acl_main_t *am, int on)
 
static void vl_api_acl_plugin_get_version_t_handler (vl_api_acl_plugin_get_version_t *mp)
 
static void vl_api_acl_plugin_control_ping_t_handler (vl_api_acl_plugin_control_ping_t *mp)
 
static void print_clib_warning_and_reset (vlib_main_t *vm, u8 *out0)
 
static void print_cli_and_reset (vlib_main_t *vm, u8 *out0)
 
static void acl_print_acl_x (acl_vector_print_func_t vpr, vlib_main_t *vm, acl_main_t *am, int acl_index)
 
static void acl_print_acl (vlib_main_t *vm, acl_main_t *am, int acl_index)
 
static void warning_acl_print_acl (vlib_main_t *vm, acl_main_t *am, int acl_index)
 
static void increment_policy_epoch (acl_main_t *am, u32 sw_if_index, int is_input)
 
static void try_increment_acl_policy_epoch (acl_main_t *am, u32 acl_num, int is_input)
 
static void policy_notify_acl_change (acl_main_t *am, u32 acl_num)
 
static int acl_add_list (u32 count, vl_api_acl_rule_t rules[], u32 *acl_list_index, u8 *tag)
 
static int acl_is_used_by (u32 acl_index, u32 **foo_index_vec_by_acl)
 
static int acl_del_list (u32 acl_list_index)
 
static int count_skip (u8 *p, u32 size)
 
static int acl_classify_add_del_table_tiny (vnet_classify_main_t *cm, u8 *mask, u32 mask_len, u32 next_table_index, u32 miss_next_index, u32 *table_index, int is_add)
 
static int acl_classify_add_del_table_small (vnet_classify_main_t *cm, u8 *mask, u32 mask_len, u32 next_table_index, u32 miss_next_index, u32 *table_index, int is_add)
 
static int acl_unhook_l2_input_classify (acl_main_t *am, u32 sw_if_index)
 
static int acl_unhook_l2_output_classify (acl_main_t *am, u32 sw_if_index)
 
static void acl_add_vlan_session (acl_main_t *am, u32 table_index, u8 is_output, u8 is_dot1ad, u8 is_ip6)
 
static int intf_has_etype_whitelist (acl_main_t *am, u32 sw_if_index, int is_input)
 
static int etype_whitelist_add_sessions (acl_main_t *am, u32 sw_if_index, int is_input, u32 etype_table_index)
 
static int acl_hook_l2_input_classify (acl_main_t *am, u32 sw_if_index)
 
static int acl_hook_l2_output_classify (acl_main_t *am, u32 sw_if_index)
 
static void acl_clear_sessions (acl_main_t *am, u32 sw_if_index)
 
static int acl_interface_in_enable_disable (acl_main_t *am, u32 sw_if_index, int enable_disable)
 
static int acl_interface_out_enable_disable (acl_main_t *am, u32 sw_if_index, int enable_disable)
 
static int acl_interface_inout_enable_disable (acl_main_t *am, u32 sw_if_index, int is_input, int enable_disable)
 
static int acl_is_not_defined (acl_main_t *am, u32 acl_list_index)
 
static int acl_interface_set_inout_acl_list (acl_main_t *am, u32 sw_if_index, u8 is_input, u32 *vec_acl_list_index, int *may_clear_sessions)
 
static void acl_interface_reset_inout_acls (u32 sw_if_index, u8 is_input, int *may_clear_sessions)
 
static int acl_interface_add_del_inout_acl (u32 sw_if_index, u8 is_add, u8 is_input, u32 acl_list_index)
 
static int acl_set_etype_whitelists (acl_main_t *am, u32 sw_if_index, u16 *vec_in, u16 *vec_out)
 
static u32 macip_find_match_type (macip_match_type_t *mv, u8 *mac_mask, u8 prefix_len, u8 is_ipv6)
 
static int match_type_metric (macip_match_type_t *m)
 
static int match_type_compare (macip_match_type_t *m1, macip_match_type_t *m2)
 
static int get_l3_src_offset (int is6)
 
static int get_l3_dst_offset (int is6)
 
static int macip_permit_also_egress (u8 is_permit)
 
static int macip_create_classify_tables (acl_main_t *am, u32 macip_acl_index)
 
static void macip_destroy_classify_tables (acl_main_t *am, u32 macip_acl_index)
 
static int macip_maybe_apply_unapply_classifier_tables (acl_main_t *am, u32 acl_index, int is_apply)
 
static int macip_acl_add_list (u32 count, vl_api_macip_acl_rule_t rules[], u32 *acl_list_index, u8 *tag)
 
static int macip_acl_interface_del_acl (acl_main_t *am, u32 sw_if_index)
 
static int macip_acl_interface_add_acl (acl_main_t *am, u32 sw_if_index, u32 macip_acl_index)
 
static int macip_acl_del_list (u32 acl_list_index)
 
static int macip_acl_interface_add_del_acl (u32 sw_if_index, u8 is_add, u32 acl_list_index)
 
static int verify_message_len (void *mp, u32 expected_len, char *where)
 
static void vl_api_acl_add_replace_t_handler (vl_api_acl_add_replace_t *mp)
 
static void vl_api_acl_del_t_handler (vl_api_acl_del_t *mp)
 
static void vl_api_acl_interface_add_del_t_handler (vl_api_acl_interface_add_del_t *mp)
 
static void vl_api_acl_interface_set_acl_list_t_handler (vl_api_acl_interface_set_acl_list_t *mp)
 
static void copy_acl_rule_to_api_rule (vl_api_acl_rule_t *api_rule, acl_rule_t *r)
 
static void send_acl_details (acl_main_t *am, vl_api_registration_t *reg, acl_list_t *acl, u32 context)
 
static void vl_api_acl_dump_t_handler (vl_api_acl_dump_t *mp)
 
static void send_acl_interface_list_details (acl_main_t *am, vl_api_registration_t *reg, u32 sw_if_index, u32 context)
 
static void vl_api_acl_interface_list_dump_t_handler (vl_api_acl_interface_list_dump_t *mp)
 
static void vl_api_macip_acl_add_t_handler (vl_api_macip_acl_add_t *mp)
 
static void vl_api_macip_acl_add_replace_t_handler (vl_api_macip_acl_add_replace_t *mp)
 
static void vl_api_macip_acl_del_t_handler (vl_api_macip_acl_del_t *mp)
 
static void vl_api_macip_acl_interface_add_del_t_handler (vl_api_macip_acl_interface_add_del_t *mp)
 
static void send_macip_acl_details (acl_main_t *am, vl_api_registration_t *reg, macip_acl_list_t *acl, u32 context)
 
static void vl_api_macip_acl_dump_t_handler (vl_api_macip_acl_dump_t *mp)
 
static void vl_api_macip_acl_interface_get_t_handler (vl_api_macip_acl_interface_get_t *mp)
 
static void send_macip_acl_interface_list_details (acl_main_t *am, vl_api_registration_t *reg, u32 sw_if_index, u32 acl_index, u32 context)
 
static void vl_api_macip_acl_interface_list_dump_t_handler (vl_api_macip_acl_interface_list_dump_t *mp)
 
static void vl_api_acl_interface_set_etype_whitelist_t_handler (vl_api_acl_interface_set_etype_whitelist_t *mp)
 
static void send_acl_interface_etype_whitelist_details (acl_main_t *am, vl_api_registration_t *reg, u32 sw_if_index, u32 context)
 
static void vl_api_acl_interface_etype_whitelist_dump_t_handler (vl_api_acl_interface_list_dump_t *mp)
 
static clib_error_tacl_plugin_api_hookup (vlib_main_t *vm)
 
static void setup_message_id_table (acl_main_t *am, api_main_t *apim)
 
static void acl_setup_fa_nodes (void)
 
static void acl_set_timeout_sec (int timeout_type, u32 value)
 
static void acl_set_session_max_entries (u32 value)
 
static int acl_set_skip_ipv6_eh (u32 eh, u32 value)
 
static clib_error_tacl_sw_interface_add_del (vnet_main_t *vnm, u32 sw_if_index, u32 is_add)
 
 VNET_SW_INTERFACE_ADD_DEL_FUNCTION (acl_sw_interface_add_del)
 
static clib_error_tacl_set_aclplugin_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
static u8my_format_mac_address (u8 *s, va_list *args)
 
static u8my_macip_acl_rule_t_pretty_format (u8 *out, va_list *args)
 
static void macip_acl_print (acl_main_t *am, u32 macip_acl_index)
 
static clib_error_tacl_show_aclplugin_macip_acl_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
static clib_error_tacl_show_aclplugin_macip_interface_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
static void acl_plugin_show_acl (acl_main_t *am, u32 acl_index)
 
static clib_error_tacl_show_aclplugin_acl_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
static clib_error_tacl_show_aclplugin_lookup_context_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
static clib_error_tacl_show_aclplugin_lookup_user_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
static void acl_plugin_show_interface (acl_main_t *am, u32 sw_if_index, int show_acl, int detail)
 
static clib_error_tacl_show_aclplugin_decode_5tuple_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
static clib_error_tacl_show_aclplugin_interface_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
static clib_error_tacl_show_aclplugin_memory_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
static void acl_plugin_show_sessions (acl_main_t *am, u32 show_session_thread_id, u32 show_session_session_index)
 
static clib_error_tacl_show_aclplugin_sessions_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
static clib_error_tacl_show_aclplugin_tables_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
static clib_error_tacl_clear_aclplugin_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
 
static clib_error_tacl_plugin_config (vlib_main_t *vm, unformat_input_t *input)
 
static clib_error_tacl_init (vlib_main_t *vm)
 

Variables

acl_main_t acl_main
 
static acl_plugin_methods_t acl_plugin
 
u8 ip4_5tuple_mask []
 
u8 ip6_5tuple_mask []
 
u8 dot1q_5tuple_mask []
 
u8 dot1ad_5tuple_mask []
 
u8 ethertype_mask []
 
static vlib_cli_command_t aclplugin_set_command
 (constructor) VLIB_CLI_COMMAND (aclplugin_set_command) More...
 
static vlib_cli_command_t aclplugin_show_acl_command
 (constructor) VLIB_CLI_COMMAND (aclplugin_show_acl_command) More...
 
static vlib_cli_command_t aclplugin_show_lookup_context_command
 (constructor) VLIB_CLI_COMMAND (aclplugin_show_lookup_context_command) More...
 
static vlib_cli_command_t aclplugin_show_lookup_user_command
 (constructor) VLIB_CLI_COMMAND (aclplugin_show_lookup_user_command) More...
 
static vlib_cli_command_t aclplugin_show_decode_5tuple_command
 (constructor) VLIB_CLI_COMMAND (aclplugin_show_decode_5tuple_command) More...
 
static vlib_cli_command_t aclplugin_show_interface_command
 (constructor) VLIB_CLI_COMMAND (aclplugin_show_interface_command) More...
 
static vlib_cli_command_t aclplugin_show_memory_command
 (constructor) VLIB_CLI_COMMAND (aclplugin_show_memory_command) More...
 
static vlib_cli_command_t aclplugin_show_sessions_command
 (constructor) VLIB_CLI_COMMAND (aclplugin_show_sessions_command) More...
 
static vlib_cli_command_t aclplugin_show_tables_command
 (constructor) VLIB_CLI_COMMAND (aclplugin_show_tables_command) More...
 
static vlib_cli_command_t aclplugin_show_macip_acl_command
 (constructor) VLIB_CLI_COMMAND (aclplugin_show_macip_acl_command) More...
 
static vlib_cli_command_t aclplugin_show_macip_interface_command
 (constructor) VLIB_CLI_COMMAND (aclplugin_show_macip_interface_command) More...
 
static vlib_cli_command_t aclplugin_clear_command
 (constructor) VLIB_CLI_COMMAND (aclplugin_clear_command) More...
 

Macro Definition Documentation

#define foreach_acl_plugin_api_msg
Value:
_(ACL_PLUGIN_GET_VERSION, acl_plugin_get_version) \
_(ACL_PLUGIN_CONTROL_PING, acl_plugin_control_ping) \
_(ACL_ADD_REPLACE, acl_add_replace) \
_(ACL_DEL, acl_del) \
_(ACL_INTERFACE_ADD_DEL, acl_interface_add_del) \
_(ACL_INTERFACE_SET_ACL_LIST, acl_interface_set_acl_list) \
_(ACL_DUMP, acl_dump) \
_(ACL_INTERFACE_LIST_DUMP, acl_interface_list_dump) \
_(MACIP_ACL_ADD, macip_acl_add) \
_(MACIP_ACL_ADD_REPLACE, macip_acl_add_replace) \
_(MACIP_ACL_DEL, macip_acl_del) \
_(MACIP_ACL_INTERFACE_ADD_DEL, macip_acl_interface_add_del) \
_(MACIP_ACL_DUMP, macip_acl_dump) \
_(MACIP_ACL_INTERFACE_GET, macip_acl_interface_get) \
_(MACIP_ACL_INTERFACE_LIST_DUMP, macip_acl_interface_list_dump) \
_(ACL_INTERFACE_SET_ETYPE_WHITELIST, acl_interface_set_etype_whitelist) \
_(ACL_INTERFACE_ETYPE_WHITELIST_DUMP, acl_interface_etype_whitelist_dump)

Definition at line 70 of file acl.c.

#define REPLY_MSG_ID_BASE   am->msg_id_base

Definition at line 58 of file acl.c.

#define v

Definition at line 491 of file acl.c.

#define vl_api_version (   n,
  v 
)    static u32 api_version=(v);

Definition at line 49 of file acl.c.

#define vl_endianfun

Definition at line 38 of file acl.c.

#define vl_msg_name_crc_list

Definition at line 3099 of file acl.c.

#define vl_print (   handle,
  ... 
)    vlib_cli_output (handle, __VA_ARGS__)

Definition at line 43 of file acl.c.

#define vl_printfun

Definition at line 44 of file acl.c.

#define vl_typedefs

Definition at line 33 of file acl.c.

#define XX   "\377"

Definition at line 488 of file acl.c.

Typedef Documentation

typedef void(* acl_vector_print_func_t) (vlib_main_t *vm, u8 *out0)

Definition at line 249 of file acl.c.

Function Documentation

static int acl_add_list ( u32  count,
vl_api_acl_rule_t  rules[],
u32 acl_list_index,
u8 tag 
)
static

Definition at line 346 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static void acl_add_vlan_session ( acl_main_t am,
u32  table_index,
u8  is_output,
u8  is_dot1ad,
u8  is_ip6 
)
static

Definition at line 793 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static int acl_classify_add_del_table_small ( vnet_classify_main_t cm,
u8 mask,
u32  mask_len,
u32  next_table_index,
u32  miss_next_index,
u32 table_index,
int  is_add 
)
static

Definition at line 610 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static int acl_classify_add_del_table_tiny ( vnet_classify_main_t cm,
u8 mask,
u32  mask_len,
u32  next_table_index,
u32  miss_next_index,
u32 table_index,
int  is_add 
)
static

Definition at line 583 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static clib_error_t* acl_clear_aclplugin_fn ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 3996 of file acl.c.

+ Here is the call graph for this function:

static void acl_clear_sessions ( acl_main_t am,
u32  sw_if_index 
)
static

Definition at line 1137 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static int acl_del_list ( u32  acl_list_index)
static

Definition at line 458 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static int acl_hook_l2_input_classify ( acl_main_t am,
u32  sw_if_index 
)
static

Definition at line 899 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static int acl_hook_l2_output_classify ( acl_main_t am,
u32  sw_if_index 
)
static

Definition at line 1017 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static clib_error_t* acl_init ( vlib_main_t vm)
static

Definition at line 4134 of file acl.c.

+ Here is the call graph for this function:

static int acl_interface_add_del_inout_acl ( u32  sw_if_index,
u8  is_add,
u8  is_input,
u32  acl_list_index 
)
static

Definition at line 1382 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static int acl_interface_in_enable_disable ( acl_main_t am,
u32  sw_if_index,
int  enable_disable 
)
static

Definition at line 1148 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static int acl_interface_inout_enable_disable ( acl_main_t am,
u32  sw_if_index,
int  is_input,
int  enable_disable 
)
static

Definition at line 1212 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static int acl_interface_out_enable_disable ( acl_main_t am,
u32  sw_if_index,
int  enable_disable 
)
static

Definition at line 1180 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static void acl_interface_reset_inout_acls ( u32  sw_if_index,
u8  is_input,
int *  may_clear_sessions 
)
static

Definition at line 1371 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static int acl_interface_set_inout_acl_list ( acl_main_t am,
u32  sw_if_index,
u8  is_input,
u32 vec_acl_list_index,
int *  may_clear_sessions 
)
static

Definition at line 1228 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static int acl_is_not_defined ( acl_main_t am,
u32  acl_list_index 
)
static

Definition at line 1222 of file acl.c.

+ Here is the caller graph for this function:

static int acl_is_used_by ( u32  acl_index,
u32 **  foo_index_vec_by_acl 
)
static

Definition at line 444 of file acl.c.

+ Here is the caller graph for this function:

void acl_plugin_acl_set_trace_heap ( acl_main_t am,
int  on 
)

Definition at line 182 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

void acl_plugin_acl_set_validate_heap ( acl_main_t am,
int  on 
)

Definition at line 164 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static clib_error_t* acl_plugin_api_hookup ( vlib_main_t vm)
static

Definition at line 3082 of file acl.c.

+ Here is the caller graph for this function:

static clib_error_t* acl_plugin_config ( vlib_main_t vm,
unformat_input_t input 
)
static

Definition at line 4081 of file acl.c.

+ Here is the call graph for this function:

void* acl_plugin_set_heap ( )

Definition at line 157 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static void acl_plugin_show_acl ( acl_main_t am,
u32  acl_index 
)
static

Definition at line 3532 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static void acl_plugin_show_interface ( acl_main_t am,
u32  sw_if_index,
int  show_acl,
int  detail 
)
static

Definition at line 3614 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static void acl_plugin_show_sessions ( acl_main_t am,
u32  show_session_thread_id,
u32  show_session_session_index 
)
static

Definition at line 3763 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static void acl_print_acl ( vlib_main_t vm,
acl_main_t am,
int  acl_index 
)
static

Definition at line 294 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static void acl_print_acl_x ( acl_vector_print_func_t  vpr,
vlib_main_t vm,
acl_main_t am,
int  acl_index 
)
static

Definition at line 252 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static clib_error_t* acl_set_aclplugin_fn ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 3226 of file acl.c.

+ Here is the call graph for this function:

static int acl_set_etype_whitelists ( acl_main_t am,
u32  sw_if_index,
u16 vec_in,
u16 vec_out 
)
static

Definition at line 1444 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static void* acl_set_heap ( acl_main_t am)
static

Definition at line 117 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static void acl_set_session_max_entries ( u32  value)
static

Definition at line 3176 of file acl.c.

+ Here is the caller graph for this function:

static int acl_set_skip_ipv6_eh ( u32  eh,
u32  value 
)
static

Definition at line 3183 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static void acl_set_timeout_sec ( int  timeout_type,
u32  value 
)
static

Definition at line 3157 of file acl.c.

+ Here is the caller graph for this function:

static void acl_setup_fa_nodes ( void  )
static

Definition at line 3113 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static clib_error_t* acl_show_aclplugin_acl_fn ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 3571 of file acl.c.

+ Here is the call graph for this function:

static clib_error_t* acl_show_aclplugin_decode_5tuple_fn ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 3698 of file acl.c.

+ Here is the call graph for this function:

static clib_error_t* acl_show_aclplugin_interface_fn ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 3717 of file acl.c.

+ Here is the call graph for this function:

static clib_error_t* acl_show_aclplugin_lookup_context_fn ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 3585 of file acl.c.

+ Here is the call graph for this function:

static clib_error_t* acl_show_aclplugin_lookup_user_fn ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 3599 of file acl.c.

+ Here is the call graph for this function:

static clib_error_t* acl_show_aclplugin_macip_acl_fn ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 3480 of file acl.c.

+ Here is the call graph for this function:

static clib_error_t* acl_show_aclplugin_macip_interface_fn ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 3516 of file acl.c.

+ Here is the call graph for this function:

static clib_error_t* acl_show_aclplugin_memory_fn ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 3734 of file acl.c.

+ Here is the call graph for this function:

static clib_error_t* acl_show_aclplugin_sessions_fn ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 3916 of file acl.c.

+ Here is the call graph for this function:

static clib_error_t* acl_show_aclplugin_tables_fn ( vlib_main_t vm,
unformat_input_t input,
vlib_cli_command_t cmd 
)
static

Definition at line 3937 of file acl.c.

+ Here is the call graph for this function:

static clib_error_t* acl_sw_interface_add_del ( vnet_main_t vnm,
u32  sw_if_index,
u32  is_add 
)
static

Definition at line 3199 of file acl.c.

+ Here is the call graph for this function:

static int acl_unhook_l2_input_classify ( acl_main_t am,
u32  sw_if_index 
)
static

Definition at line 638 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static int acl_unhook_l2_output_classify ( acl_main_t am,
u32  sw_if_index 
)
static

Definition at line 715 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static void copy_acl_rule_to_api_rule ( vl_api_acl_rule_t api_rule,
acl_rule_t r 
)
static

Definition at line 2519 of file acl.c.

+ Here is the caller graph for this function:

static int count_skip ( u8 p,
u32  size 
)
static

Definition at line 568 of file acl.c.

+ Here is the caller graph for this function:

static int etype_whitelist_add_sessions ( acl_main_t am,
u32  sw_if_index,
int  is_input,
u32  etype_table_index 
)
static

Definition at line 869 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

u8* format_vec16 ( u8 s,
va_list *  va 
)

Definition at line 102 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static int get_l3_dst_offset ( int  is6)
static

Definition at line 1566 of file acl.c.

+ Here is the caller graph for this function:

static int get_l3_src_offset ( int  is6)
static

Definition at line 1555 of file acl.c.

+ Here is the caller graph for this function:

static void increment_policy_epoch ( acl_main_t am,
u32  sw_if_index,
int  is_input 
)
static

Definition at line 306 of file acl.c.

+ Here is the caller graph for this function:

static int intf_has_etype_whitelist ( acl_main_t am,
u32  sw_if_index,
int  is_input 
)
static

Definition at line 860 of file acl.c.

+ Here is the caller graph for this function:

static int macip_acl_add_list ( u32  count,
vl_api_macip_acl_rule_t  rules[],
u32 acl_list_index,
u8 tag 
)
static

Definition at line 2164 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static int macip_acl_del_list ( u32  acl_list_index)
static

Definition at line 2323 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static int macip_acl_interface_add_acl ( acl_main_t am,
u32  sw_if_index,
u32  macip_acl_index 
)
static

Definition at line 2291 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static int macip_acl_interface_add_del_acl ( u32  sw_if_index,
u8  is_add,
u32  acl_list_index 
)
static

Definition at line 2359 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static int macip_acl_interface_del_acl ( acl_main_t am,
u32  sw_if_index 
)
static

Definition at line 2254 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static void macip_acl_print ( acl_main_t am,
u32  macip_acl_index 
)
static

Definition at line 3449 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static int macip_create_classify_tables ( acl_main_t am,
u32  macip_acl_index 
)
static

Definition at line 1589 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static void macip_destroy_classify_tables ( acl_main_t am,
u32  macip_acl_index 
)
static

Definition at line 2093 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static u32 macip_find_match_type ( macip_match_type_t mv,
u8 mac_mask,
u8  prefix_len,
u8  is_ipv6 
)
static

Definition at line 1504 of file acl.c.

+ Here is the caller graph for this function:

static int macip_maybe_apply_unapply_classifier_tables ( acl_main_t am,
u32  acl_index,
int  is_apply 
)
static

Definition at line 2137 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static int macip_permit_also_egress ( u8  is_permit)
static

Definition at line 1583 of file acl.c.

+ Here is the caller graph for this function:

static int match_type_compare ( macip_match_type_t m1,
macip_match_type_t m2 
)
static

Definition at line 1547 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static int match_type_metric ( macip_match_type_t m)
static

Definition at line 1526 of file acl.c.

+ Here is the caller graph for this function:

static u8* my_format_mac_address ( u8 s,
va_list *  args 
)
static

Definition at line 3426 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static u8* my_macip_acl_rule_t_pretty_format ( u8 out,
va_list *  args 
)
inlinestatic

Definition at line 3434 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static void policy_notify_acl_change ( acl_main_t am,
u32  acl_num 
)
static

Definition at line 337 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static void print_cli_and_reset ( vlib_main_t vm,
u8 out0 
)
static

Definition at line 243 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static void print_clib_warning_and_reset ( vlib_main_t vm,
u8 out0 
)
static

Definition at line 236 of file acl.c.

+ Here is the caller graph for this function:

static void send_acl_details ( acl_main_t am,
vl_api_registration_t reg,
acl_list_t acl,
u32  context 
)
static

Definition at line 2545 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static void send_acl_interface_etype_whitelist_details ( acl_main_t am,
vl_api_registration_t reg,
u32  sw_if_index,
u32  context 
)
static

Definition at line 2988 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static void send_acl_interface_list_details ( acl_main_t am,
vl_api_registration_t reg,
u32  sw_if_index,
u32  context 
)
static

Definition at line 2616 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static void send_macip_acl_details ( acl_main_t am,
vl_api_registration_t reg,
macip_acl_list_t acl,
u32  context 
)
static

Definition at line 2783 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static void send_macip_acl_interface_list_details ( acl_main_t am,
vl_api_registration_t reg,
u32  sw_if_index,
u32  acl_index,
u32  context 
)
static

Definition at line 2897 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static void setup_message_id_table ( acl_main_t am,
api_main_t apim 
)
static

Definition at line 3104 of file acl.c.

+ Here is the caller graph for this function:

static void try_increment_acl_policy_epoch ( acl_main_t am,
u32  acl_num,
int  is_input 
)
static

Definition at line 321 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static int verify_message_len ( void *  mp,
u32  expected_len,
char *  where 
)
static

Definition at line 2392 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static void vl_api_acl_add_replace_t_handler ( vl_api_acl_add_replace_t mp)
static

Definition at line 2409 of file acl.c.

+ Here is the call graph for this function:

static void vl_api_acl_del_t_handler ( vl_api_acl_del_t mp)
static

Definition at line 2436 of file acl.c.

+ Here is the call graph for this function:

static void vl_api_acl_dump_t_handler ( vl_api_acl_dump_t mp)
static

Definition at line 2576 of file acl.c.

+ Here is the call graph for this function:

static void vl_api_acl_interface_add_del_t_handler ( vl_api_acl_interface_add_del_t mp)
static

Definition at line 2448 of file acl.c.

+ Here is the call graph for this function:

static void vl_api_acl_interface_etype_whitelist_dump_t_handler ( vl_api_acl_interface_list_dump_t mp)
static

Definition at line 3047 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static void vl_api_acl_interface_list_dump_t_handler ( vl_api_acl_interface_list_dump_t mp)
static

Definition at line 2663 of file acl.c.

+ Here is the call graph for this function:

static void vl_api_acl_interface_set_acl_list_t_handler ( vl_api_acl_interface_set_acl_list_t mp)
static

Definition at line 2468 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static void vl_api_acl_interface_set_etype_whitelist_t_handler ( vl_api_acl_interface_set_etype_whitelist_t mp)
static

Definition at line 2958 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static void vl_api_acl_plugin_control_ping_t_handler ( vl_api_acl_plugin_control_ping_t mp)
static

Definition at line 220 of file acl.c.

static void vl_api_acl_plugin_get_version_t_handler ( vl_api_acl_plugin_get_version_t mp)
static

Definition at line 197 of file acl.c.

+ Here is the call graph for this function:

static void vl_api_macip_acl_add_replace_t_handler ( vl_api_macip_acl_add_replace_t mp)
static

Definition at line 2724 of file acl.c.

+ Here is the call graph for this function:

static void vl_api_macip_acl_add_t_handler ( vl_api_macip_acl_add_t mp)
static

Definition at line 2697 of file acl.c.

+ Here is the call graph for this function:

static void vl_api_macip_acl_del_t_handler ( vl_api_macip_acl_del_t mp)
static

Definition at line 2751 of file acl.c.

+ Here is the call graph for this function:

static void vl_api_macip_acl_dump_t_handler ( vl_api_macip_acl_dump_t mp)
static

Definition at line 2833 of file acl.c.

+ Here is the call graph for this function:

static void vl_api_macip_acl_interface_add_del_t_handler ( vl_api_macip_acl_interface_add_del_t mp)
static

Definition at line 2764 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static void vl_api_macip_acl_interface_get_t_handler ( vl_api_macip_acl_interface_get_t mp)
static

Definition at line 2868 of file acl.c.

+ Here is the call graph for this function:

static void vl_api_macip_acl_interface_list_dump_t_handler ( vl_api_macip_acl_interface_list_dump_t mp)
static

Definition at line 2922 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

VLIB_PLUGIN_REGISTER ( )
VNET_SW_INTERFACE_ADD_DEL_FUNCTION ( acl_sw_interface_add_del  )

+ Here is the caller graph for this function:

static void warning_acl_print_acl ( vlib_main_t vm,
acl_main_t am,
int  acl_index 
)
static

Definition at line 300 of file acl.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

Variable Documentation

acl_main_t acl_main

Definition at line 56 of file acl.c.

acl_plugin_methods_t acl_plugin
static

Definition at line 98 of file acl.c.

vlib_cli_command_t aclplugin_clear_command
static
Initial value:
= {
.path = "clear acl-plugin sessions",
.short_help = "clear acl-plugin sessions",
}
static clib_error_t * acl_clear_aclplugin_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: acl.c:3996

(constructor) VLIB_CLI_COMMAND (aclplugin_clear_command)

Definition at line 4073 of file acl.c.

vlib_cli_command_t aclplugin_set_command
static
Initial value:
= {
.path = "set acl-plugin",
.short_help = "set acl-plugin session timeout {{udp idle}|tcp {idle|transient}} <seconds>",
.function = acl_set_aclplugin_fn,
}
static clib_error_t * acl_set_aclplugin_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: acl.c:3226

(constructor) VLIB_CLI_COMMAND (aclplugin_set_command)

Definition at line 4007 of file acl.c.

vlib_cli_command_t aclplugin_show_acl_command
static
Initial value:
= {
.path = "show acl-plugin acl",
.short_help = "show acl-plugin acl [index N]",
}
static clib_error_t * acl_show_aclplugin_acl_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: acl.c:3571

(constructor) VLIB_CLI_COMMAND (aclplugin_show_acl_command)

Definition at line 4013 of file acl.c.

vlib_cli_command_t aclplugin_show_decode_5tuple_command
static
Initial value:
= {
.path = "show acl-plugin decode 5tuple",
.short_help = "show acl-plugin decode 5tuple XXXX XXXX XXXX XXXX XXXX XXXX",
}
static clib_error_t * acl_show_aclplugin_decode_5tuple_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: acl.c:3698

(constructor) VLIB_CLI_COMMAND (aclplugin_show_decode_5tuple_command)

Definition at line 4031 of file acl.c.

vlib_cli_command_t aclplugin_show_interface_command
static
Initial value:
= {
.path = "show acl-plugin interface",
.short_help = "show acl-plugin interface [sw_if_index N] [acl]",
}
static clib_error_t * acl_show_aclplugin_interface_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: acl.c:3717

(constructor) VLIB_CLI_COMMAND (aclplugin_show_interface_command)

Definition at line 4037 of file acl.c.

vlib_cli_command_t aclplugin_show_lookup_context_command
static
Initial value:
= {
.path = "show acl-plugin lookup context",
.short_help = "show acl-plugin lookup context [index N]",
}
static clib_error_t * acl_show_aclplugin_lookup_context_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: acl.c:3585

(constructor) VLIB_CLI_COMMAND (aclplugin_show_lookup_context_command)

Definition at line 4019 of file acl.c.

vlib_cli_command_t aclplugin_show_lookup_user_command
static
Initial value:
= {
.path = "show acl-plugin lookup user",
.short_help = "show acl-plugin lookup user [index N]",
}
static clib_error_t * acl_show_aclplugin_lookup_user_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: acl.c:3599

(constructor) VLIB_CLI_COMMAND (aclplugin_show_lookup_user_command)

Definition at line 4025 of file acl.c.

vlib_cli_command_t aclplugin_show_macip_acl_command
static
Initial value:
= {
.path = "show acl-plugin macip acl",
.short_help = "show acl-plugin macip acl [index N]",
}
static clib_error_t * acl_show_aclplugin_macip_acl_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: acl.c:3480

(constructor) VLIB_CLI_COMMAND (aclplugin_show_macip_acl_command)

Definition at line 4061 of file acl.c.

vlib_cli_command_t aclplugin_show_macip_interface_command
static
Initial value:
= {
.path = "show acl-plugin macip interface",
.short_help = "show acl-plugin macip interface",
}
static clib_error_t * acl_show_aclplugin_macip_interface_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: acl.c:3516

(constructor) VLIB_CLI_COMMAND (aclplugin_show_macip_interface_command)

Definition at line 4067 of file acl.c.

vlib_cli_command_t aclplugin_show_memory_command
static
Initial value:
= {
.path = "show acl-plugin memory",
.short_help = "show acl-plugin memory",
}
static clib_error_t * acl_show_aclplugin_memory_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: acl.c:3734

(constructor) VLIB_CLI_COMMAND (aclplugin_show_memory_command)

Definition at line 4043 of file acl.c.

vlib_cli_command_t aclplugin_show_sessions_command
static
Initial value:
= {
.path = "show acl-plugin sessions",
.short_help = "show acl-plugin sessions",
}
static clib_error_t * acl_show_aclplugin_sessions_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: acl.c:3916

(constructor) VLIB_CLI_COMMAND (aclplugin_show_sessions_command)

Definition at line 4049 of file acl.c.

vlib_cli_command_t aclplugin_show_tables_command
static
Initial value:
= {
.path = "show acl-plugin tables",
.short_help = "show acl-plugin tables [ acl [index N] | applied [ lc_index N ] | mask | hash [verbose N] ]",
}
static clib_error_t * acl_show_aclplugin_tables_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: acl.c:3937

(constructor) VLIB_CLI_COMMAND (aclplugin_show_tables_command)

Definition at line 4055 of file acl.c.

u8 dot1ad_5tuple_mask[]
Initial value:
=
_(" dmac smac dot1ad dot1q etype ")
_(ether) __ __ __ __ __ __ v __ __ __ __ __ __ v XX XX __ __ XX XX __ __ v XX XX v
_(padpad) __ __ __ __
_(padpad) __ __ __ __
_(padeth) __ __
#define v
Definition: acl.c:491
#define XX
Definition: acl.c:488

Definition at line 550 of file acl.c.

u8 dot1q_5tuple_mask[]
Initial value:
=
_(" dmac smac dot1q etype ")
_(ether) __ __ __ __ __ __ v __ __ __ __ __ __ v XX XX __ __ v XX XX v
_(padpad) __ __ __ __
_(padpad) __ __ __ __
_(padpad) __ __ __ __
_(padeth) __ __
#define v
Definition: acl.c:491
#define XX
Definition: acl.c:488

Definition at line 542 of file acl.c.

u8 ethertype_mask[]
Initial value:
=
_(" dmac smac etype ")
_(ether) __ __ __ __ __ __ v __ __ __ __ __ __ v XX XX __ __
#define v
Definition: acl.c:491
#define XX
Definition: acl.c:488

Definition at line 557 of file acl.c.

u8 ip4_5tuple_mask[]
Initial value:
=
_(" dmac smac etype ")
_(ether) __ __ __ __ __ __ v __ __ __ __ __ __ v __ __ v
_(" v ihl totlen ")
_(0x0000)
__ __ __ __
_(" ident fl+fo ")
_(0x0004)
__ __ __ __
_(" ttl pr checksum ")
_(0x0008)
__ XX __ __
_(" src address ")
_(0x000C)
_(" dst address ")
_(0x0010)
_("L4 T/U sport dport ")
_(tcpudp)
_(padpad)
__ __ __ __
_(padpad)
__ __ __ __
_(padeth)
__ __
typedef address
Definition: ip_types.api:34
#define fl(x, y)
#define v
Definition: acl.c:491
#define XX
Definition: acl.c:488

Definition at line 494 of file acl.c.

u8 ip6_5tuple_mask[]
Initial value:
=
_(" dmac smac etype ")
_(ether) __ __ __ __ __ __ v __ __ __ __ __ __ v __ __ v
_(" v tc + flow ")
_(0x0000) __ __ __ __
_(" plen nh hl ")
_(0x0004) __ __ XX __
_(" src address ")
_(0x0008) XX XX XX XX
_(0x000C) XX XX XX XX
_(0x0010) XX XX XX XX
_(0x0014) XX XX XX XX
_(" dst address ")
_(0x0018) XX XX XX XX
_(0x001C) XX XX XX XX
_(0x0020) XX XX XX XX
_(0x0024) XX XX XX XX
_("L4T/U sport dport ")
_(tcpudp) XX XX XX XX _(padpad) __ __ __ __ _(padeth) __ __
typedef address
Definition: ip_types.api:34
#define v
Definition: acl.c:491
#define XX
Definition: acl.c:488
icmpr_flow_t * flow
Definition: main.c:123

Definition at line 522 of file acl.c.