ipsec_input.c File Reference

Include dependency graph for ipsec_input.c:

Go to the source code of this file.

Data Structures
struct	ipsec_input_trace_t

Macros
#define	foreach_ipsec_input_next
#define	foreach_ipsec_input_error

Enumerations
enum	ipsec_input_next_t { IPSEC_INPUT_N_NEXT }
enum	ipsec_input_error_t { IPSEC_INPUT_N_ERROR }

Functions
static u8 *	format_ipsec_input_trace (u8 *s, va_list *args)
always_inline ipsec_policy_t *	ipsec_input_protect_policy_match (ipsec_spd_t *spd, u32 sa, u32 da, u32 spi)
always_inline uword	ip6_addr_match_range (ip6_address_t *a, ip6_address_t *la, ip6_address_t *ua)
always_inline ipsec_policy_t *	ipsec_input_ip6_protect_policy_match (ipsec_spd_t *spd, ip6_address_t *sa, ip6_address_t *da, u32 spi)
static uword	ipsec_input_ip4_node_fn (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *from_frame)
static uword	ipsec_input_ip6_node_fn (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *from_frame)

Variables
static char *	ipsec_input_error_strings []
static vlib_node_registration_t	ipsec_input_ip4_node
	(constructor) VLIB_REGISTER_NODE (ipsec_input_ip4_node) More...
static vlib_node_registration_t	ipsec_input_ip6_node
	(constructor) VLIB_REGISTER_NODE (ipsec_input_ip6_node) More...

Macro Definition Documentation

#define foreach_ipsec_input_error

Value:

_(RX_PKTS, "IPSEC pkts received")                  \
 _(DECRYPTION_FAILED, "IPSEC decryption failed")

Definition at line 37 of file ipsec_input.c.

#define foreach_ipsec_input_next

Value:

_(DROP, "error-drop")                           \
_(ESP_DECRYPT, "esp-decrypt")

Definition at line 25 of file ipsec_input.c.

Enumeration Type Documentation

enum ipsec_input_error_t

Enumerator
IPSEC_INPUT_N_ERROR

Definition at line 42 of file ipsec_input.c.

enum ipsec_input_next_t

Enumerator
IPSEC_INPUT_N_NEXT

Definition at line 30 of file ipsec_input.c.

Function Documentation

static u8* format_ipsec_input_trace ( u8 *  s, va_list *  args  )

static

Definition at line 62 of file ipsec_input.c.

Here is the call graph for this function:

Here is the caller graph for this function:

always_inline uword ip6_addr_match_range	(	ip6_address_t *	a,
		ip6_address_t *	la,
		ip6_address_t *	ua
	)

Definition at line 124 of file ipsec_input.c.

Here is the caller graph for this function:

static uword ipsec_input_ip4_node_fn ( vlib_main_t *  vm, vlib_node_runtime_t *  node, vlib_frame_t *  from_frame  )

static

Definition at line 176 of file ipsec_input.c.

Here is the call graph for this function:

static uword ipsec_input_ip6_node_fn ( vlib_main_t *  vm, vlib_node_runtime_t *  node, vlib_frame_t *  from_frame  )

static

Definition at line 295 of file ipsec_input.c.

Here is the call graph for this function:

always_inline ipsec_policy_t* ipsec_input_ip6_protect_policy_match	(	ipsec_spd_t *	spd,
		ip6_address_t *	sa,
		ip6_address_t *	da,
		u32	spi
	)

Definition at line 133 of file ipsec_input.c.

Here is the call graph for this function:

Here is the caller graph for this function:

always_inline ipsec_policy_t* ipsec_input_protect_policy_match	(	ipsec_spd_t *	spd,
		u32	sa,
		u32	da,
		u32	spi
	)

Definition at line 80 of file ipsec_input.c.

Here is the caller graph for this function:

Variable Documentation

char* ipsec_input_error_strings[]

static

Initial value:

= {
#define _(sym,string) 
  foreach_ipsec_input_error

}

Definition at line 49 of file ipsec_input.c.

vlib_node_registration_t ipsec_input_ip4_node

static

Initial value:

= {
  .function = ipsec_input_ip4_node_fn,
  .name = "ipsec-input-ip4",
  .vector_size = sizeof (u32),
  .format_trace = format_ipsec_input_trace,
  .type = VLIB_NODE_TYPE_INTERNAL,

  .n_errors = ARRAY_LEN(ipsec_input_error_strings),
  .error_strings = ipsec_input_error_strings,

  .n_next_nodes = IPSEC_INPUT_N_NEXT,
  .next_nodes = {
#define _(s,n) 
    foreach_ipsec_input_next

  },
}

(constructor) VLIB_REGISTER_NODE (ipsec_input_ip4_node)

Definition at line 173 of file ipsec_input.c.

vlib_node_registration_t ipsec_input_ip6_node

static

Initial value:

= {
  .function = ipsec_input_ip6_node_fn,
  .name = "ipsec-input-ip6",
  .vector_size = sizeof (u32),
  .format_trace = format_ipsec_input_trace,
  .type = VLIB_NODE_TYPE_INTERNAL,

  .n_errors = ARRAY_LEN(ipsec_input_error_strings),
  .error_strings = ipsec_input_error_strings,

  .n_next_nodes = IPSEC_INPUT_N_NEXT,
  .next_nodes = {
#define _(s,n) 
    foreach_ipsec_input_next

  },
}

(constructor) VLIB_REGISTER_NODE (ipsec_input_ip6_node)

Definition at line 292 of file ipsec_input.c.