FD.io VPP  v16.09
Vector Packet Processing
ipsec_input.c File Reference
+ Include dependency graph for ipsec_input.c:

Go to the source code of this file.

Data Structures

struct  ipsec_input_trace_t
 

Macros

#define foreach_ipsec_input_next
 
#define foreach_ipsec_input_error
 

Enumerations

enum  ipsec_input_next_t { IPSEC_INPUT_N_NEXT }
 
enum  ipsec_input_error_t { IPSEC_INPUT_N_ERROR }
 

Functions

static u8format_ipsec_input_trace (u8 *s, va_list *args)
 
static ipsec_policy_tipsec_input_protect_policy_match (ipsec_spd_t *spd, u32 sa, u32 da, u32 spi)
 
static uword ip6_addr_match_range (ip6_address_t *a, ip6_address_t *la, ip6_address_t *ua)
 
static ipsec_policy_tipsec_input_ip6_protect_policy_match (ipsec_spd_t *spd, ip6_address_t *sa, ip6_address_t *da, u32 spi)
 
static uword ipsec_input_ip4_node_fn (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *from_frame)
 
static uword ipsec_input_ip6_node_fn (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *from_frame)
 

Variables

static char * ipsec_input_error_strings []
 
static vlib_node_registration_t ipsec_input_ip4_node
 (constructor) VLIB_REGISTER_NODE (ipsec_input_ip4_node) More...
 
static vlib_node_registration_t ipsec_input_ip6_node
 (constructor) VLIB_REGISTER_NODE (ipsec_input_ip6_node) More...
 

Macro Definition Documentation

#define foreach_ipsec_input_error
Value:
_(RX_PKTS, "IPSEC pkts received") \
_(DECRYPTION_FAILED, "IPSEC decryption failed")

Definition at line 38 of file ipsec_input.c.

#define foreach_ipsec_input_next
Value:
_(DROP, "error-drop") \
_(ESP_DECRYPT, "esp-decrypt")
DROP
Definition: error.def:41

Definition at line 25 of file ipsec_input.c.

Enumeration Type Documentation

Enumerator
IPSEC_INPUT_N_ERROR 

Definition at line 43 of file ipsec_input.c.

Enumerator
IPSEC_INPUT_N_NEXT 

Definition at line 30 of file ipsec_input.c.

Function Documentation

static u8* format_ipsec_input_trace ( u8 s,
va_list *  args 
)
static

Definition at line 66 of file ipsec_input.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static uword ip6_addr_match_range ( ip6_address_t a,
ip6_address_t la,
ip6_address_t ua 
)
inlinestatic

Definition at line 130 of file ipsec_input.c.

+ Here is the caller graph for this function:

static uword ipsec_input_ip4_node_fn ( vlib_main_t vm,
vlib_node_runtime_t node,
vlib_frame_t from_frame 
)
static

Definition at line 182 of file ipsec_input.c.

+ Here is the call graph for this function:

static uword ipsec_input_ip6_node_fn ( vlib_main_t vm,
vlib_node_runtime_t node,
vlib_frame_t from_frame 
)
static

Definition at line 313 of file ipsec_input.c.

+ Here is the call graph for this function:

static ipsec_policy_t* ipsec_input_ip6_protect_policy_match ( ipsec_spd_t spd,
ip6_address_t sa,
ip6_address_t da,
u32  spi 
)
inlinestatic

Definition at line 140 of file ipsec_input.c.

+ Here is the call graph for this function:

+ Here is the caller graph for this function:

static ipsec_policy_t* ipsec_input_protect_policy_match ( ipsec_spd_t spd,
u32  sa,
u32  da,
u32  spi 
)
inlinestatic

Definition at line 86 of file ipsec_input.c.

+ Here is the caller graph for this function:

Variable Documentation

char* ipsec_input_error_strings[]
static
Initial value:
= {
#define _(sym,string)
}
#define foreach_ipsec_input_error
Definition: ipsec_input.c:38

Definition at line 51 of file ipsec_input.c.

static vlib_node_registration_t ipsec_input_ip4_node
static
Initial value:
= {
.name = "ipsec-input-ip4",
.vector_size = sizeof (u32),
.format_trace = format_ipsec_input_trace,
.error_strings = ipsec_input_error_strings,
.n_next_nodes = IPSEC_INPUT_N_NEXT,
.next_nodes = {
#define _(s,n)
},
}
static char * ipsec_input_error_strings[]
Definition: ipsec_input.c:51
bad routing header type(not 4)") sr_error (NO_MORE_SEGMENTS
static u8 * format_ipsec_input_trace(u8 *s, va_list *args)
Definition: ipsec_input.c:66
#define ARRAY_LEN(x)
Definition: clib.h:59
unsigned int u32
Definition: types.h:88
static uword ipsec_input_ip4_node_fn(vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *from_frame)
Definition: ipsec_input.c:182
#define foreach_ipsec_input_next
Definition: ipsec_input.c:25

(constructor) VLIB_REGISTER_NODE (ipsec_input_ip4_node)

Definition at line 179 of file ipsec_input.c.

static vlib_node_registration_t ipsec_input_ip6_node
static
Initial value:
= {
.name = "ipsec-input-ip6",
.vector_size = sizeof (u32),
.format_trace = format_ipsec_input_trace,
.error_strings = ipsec_input_error_strings,
.n_next_nodes = IPSEC_INPUT_N_NEXT,
.next_nodes = {
#define _(s,n)
},
}
static char * ipsec_input_error_strings[]
Definition: ipsec_input.c:51
bad routing header type(not 4)") sr_error (NO_MORE_SEGMENTS
static uword ipsec_input_ip6_node_fn(vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *from_frame)
Definition: ipsec_input.c:313
static u8 * format_ipsec_input_trace(u8 *s, va_list *args)
Definition: ipsec_input.c:66
#define ARRAY_LEN(x)
Definition: clib.h:59
unsigned int u32
Definition: types.h:88
#define foreach_ipsec_input_next
Definition: ipsec_input.c:25

(constructor) VLIB_REGISTER_NODE (ipsec_input_ip6_node)

Definition at line 310 of file ipsec_input.c.