35 s =
format (s,
"INACL: sw_if_index %d, next_index %d, table %d, offset %d",
43 #define foreach_ip_inacl_error \ 44 _(MISS, "input ACL misses") \ 45 _(HIT, "input ACL hits") \ 46 _(CHAIN_HIT, "input ACL hits after chain walk") 50 #define _(sym,str) IP_INACL_ERROR_##sym, 57 #define _(sym,string) string, 66 u32 n_left_from, *from, *to_next;
96 while (n_left_from > 2)
101 u32 sw_if_index0, sw_if_index1;
102 u32 table_index0, table_index1;
156 vnet_buffer (b0)->l2_classify.table_index = table_index0;
158 vnet_buffer (b1)->l2_classify.table_index = table_index1;
164 while (n_left_from > 0)
190 vnet_buffer (b0)->l2_classify.table_index = table_index0;
201 while (n_left_from > 0)
208 while (n_left_from > 0 && n_left_to_next > 0)
215 vnet_classify_entry_t *e0;
228 table_index1 =
vnet_buffer (p1)->l2_classify.table_index;
247 table_index0 =
vnet_buffer (b0)->l2_classify.table_index;
275 next0 = (e0->next_index < n_next_nodes) ?
276 e0->next_index : next0;
282 IP4_ERROR_INACL_SESSION_DENY : IP4_ERROR_NONE;
285 IP6_ERROR_INACL_SESSION_DENY : IP6_ERROR_NONE;
310 IP4_ERROR_INACL_TABLE_MISS : IP4_ERROR_NONE;
313 IP6_ERROR_INACL_TABLE_MISS : IP6_ERROR_NONE;
328 (t0, (
u8 *) h0, hash0, now);
334 next0 = (e0->next_index < n_next_nodes) ?
335 e0->next_index : next0;
341 IP4_ERROR_INACL_SESSION_DENY : IP4_ERROR_NONE;
344 IP6_ERROR_INACL_SESSION_DENY : IP6_ERROR_NONE;
371 to_next, n_left_to_next,
379 IP_INACL_ERROR_MISS, misses);
381 IP_INACL_ERROR_HIT, hits);
383 IP_INACL_ERROR_CHAIN_HIT, chain_hits);
398 .vector_size =
sizeof (
u32),
423 .vector_size =
sizeof (
u32),
u64 vnet_classify_hash_packet(vnet_classify_table_t *t, u8 *h)
u32 current_config_index
Used by feature subgraph arcs to visit enabled feature nodes.
u32 * classify_table_index_by_sw_if_index[INPUT_ACL_N_TABLES]
static f64 vlib_time_now(vlib_main_t *vm)
struct _vlib_node_registration vlib_node_registration_t
vlib_error_t * errors
Vector of errors for this node.
vnet_classify_main_t * vnet_classify_main
#define CLASSIFY_FLAG_USE_CURR_DATA
#define VLIB_INIT_FUNCTION(x)
#define vlib_prefetch_buffer_header(b, type)
Prefetch buffer metadata.
static void vnet_classify_prefetch_bucket(vnet_classify_table_t *t, u64 hash)
static void vnet_classify_prefetch_entry(vnet_classify_table_t *t, u64 hash)
#define pool_elt_at_index(p, i)
Returns pointer to element at given index.
vlib_node_registration_t ip4_input_node
Global ip4 input node.
vlib_node_registration_t ip6_input_node
(constructor) VLIB_REGISTER_NODE (ip6_input_node)
static void * vlib_buffer_get_current(vlib_buffer_t *b)
Get pointer to current data to process.
static void * vnet_get_config_data(vnet_config_main_t *cm, u32 *config_index, u32 *next_index, u32 n_data_bytes)
vnet_config_main_t * vnet_config_main[INPUT_ACL_N_TABLES]
u32 node_index
Node index.
#define vlib_validate_buffer_enqueue_x1(vm, node, next_index, to_next, n_left_to_next, bi0, next0)
Finish enqueueing one buffer forward in the graph.
#define vlib_get_next_frame(vm, node, next_index, vectors, n_vectors_left)
Get pointer to next frame vector data by (vlib_node_runtime_t, next_index).
vlib_error_t error
Error code for buffers to be enqueued to error handler.
static void vlib_node_increment_counter(vlib_main_t *vm, u32 node_index, u32 counter_index, u64 increment)
static uword vnet_classify_get_offset(vnet_classify_table_t *t, vnet_classify_entry_t *v)
#define CLIB_PREFETCH(addr, size, type)
#define VLIB_BUFFER_IS_TRACED
static vlib_node_runtime_t * vlib_node_get_runtime(vlib_main_t *vm, u32 node_index)
Get node runtime by node index.
void vlib_put_next_frame(vlib_main_t *vm, vlib_node_runtime_t *r, u32 next_index, u32 n_vectors_left)
Release pointer to next frame vector data.
struct _vnet_classify_main vnet_classify_main_t
u16 cached_next_index
Next frame index that vector arguments were last enqueued to last time this node ran.
static void vlib_buffer_advance(vlib_buffer_t *b, word l)
Advance current data pointer by the supplied (signed!) amount.
#define VLIB_NODE_FLAG_TRACE
static void * vlib_add_trace(vlib_main_t *vm, vlib_node_runtime_t *r, vlib_buffer_t *b, u32 n_data_bytes)
static void * vlib_frame_vector_args(vlib_frame_t *f)
Get pointer to frame vector data.
#define VLIB_REGISTER_NODE(x,...)
u16 flags
Copy of main node flags.
#define CLIB_CACHE_LINE_BYTES
u32 flags
buffer flags: VLIB_BUFFER_FREE_LIST_INDEX_MASK: bits used to store free list index, VLIB_BUFFER_IS_TRACED: trace this buffer.
static vlib_buffer_t * vlib_get_buffer(vlib_main_t *vm, u32 buffer_index)
Translate buffer index into buffer pointer.
vnet_classify_entry_t * vnet_classify_find_entry(vnet_classify_table_t *t, u8 *h, u64 hash, f64 now)