ip_in_out_acl.c File Reference

Include dependency graph for ip_in_out_acl.c:

Go to the source code of this file.

Data Structures
struct	ip_in_out_acl_trace_t

Macros
#define	foreach_ip_inacl_error
#define	foreach_ip_outacl_error

Enumerations
enum	ip_inacl_error_t { IP_INACL_N_ERROR }
enum	ip_outacl_error_t { IP_OUTACL_N_ERROR }

Functions
static u8 *	format_ip_in_out_acl_trace (u8 *s, u32 is_output, va_list *args)
static u8 *	format_ip_inacl_trace (u8 *s, va_list *args)
static u8 *	format_ip_outacl_trace (u8 *s, va_list *args)
static uword	ip_in_out_acl_inline (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame, int is_ip4, int is_output)
static uword	ip4_inacl (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
static uword	ip4_outacl (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
	VLIB_NODE_FUNCTION_MULTIARCH (ip4_inacl_node, ip4_inacl)
	VLIB_NODE_FUNCTION_MULTIARCH (ip4_outacl_node, ip4_outacl)
static uword	ip6_inacl (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
static uword	ip6_outacl (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
	VLIB_NODE_FUNCTION_MULTIARCH (ip6_inacl_node, ip6_inacl)
	VLIB_NODE_FUNCTION_MULTIARCH (ip6_outacl_node, ip6_outacl)
static clib_error_t *	ip_in_out_acl_init (vlib_main_t *vm)

Variables
vlib_node_registration_t	ip4_inacl_node
	(constructor) VLIB_REGISTER_NODE (ip4_inacl_node) More...
vlib_node_registration_t	ip4_outacl_node
	(constructor) VLIB_REGISTER_NODE (ip4_outacl_node) More...
vlib_node_registration_t	ip6_inacl_node
	(constructor) VLIB_REGISTER_NODE (ip6_inacl_node) More...
vlib_node_registration_t	ip6_outacl_node
	(constructor) VLIB_REGISTER_NODE (ip6_outacl_node) More...
static char *	ip_inacl_error_strings []
static char *	ip_outacl_error_strings []

Macro Definition Documentation

#define foreach_ip_inacl_error

Value:

_(MISS, "input ACL misses")                     \
_(HIT, "input ACL hits")                        \
_(CHAIN_HIT, "input ACL hits after chain walk")

Definition at line 58 of file ip_in_out_acl.c.

#define foreach_ip_outacl_error

Value:

_(MISS, "output ACL misses")                     \
_(HIT, "output ACL hits")                        \
_(CHAIN_HIT, "output ACL hits after chain walk")

Definition at line 63 of file ip_in_out_acl.c.

Enumeration Type Documentation

enum ip_inacl_error_t

Enumerator
IP_INACL_N_ERROR

Definition at line 68 of file ip_in_out_acl.c.

enum ip_outacl_error_t

Enumerator
IP_OUTACL_N_ERROR

Definition at line 82 of file ip_in_out_acl.c.

Function Documentation

static u8* format_ip_in_out_acl_trace ( u8 *  s, u32  is_output, va_list *  args  )

static

Definition at line 29 of file ip_in_out_acl.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static u8* format_ip_inacl_trace ( u8 *  s, va_list *  args  )

static

Definition at line 42 of file ip_in_out_acl.c.

Here is the call graph for this function:

static u8* format_ip_outacl_trace ( u8 *  s, va_list *  args  )

static

Definition at line 48 of file ip_in_out_acl.c.

Here is the call graph for this function:

static uword ip4_inacl ( vlib_main_t *  vm, vlib_node_runtime_t *  node, vlib_frame_t *  frame  )

static

Definition at line 478 of file ip_in_out_acl.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static uword ip4_outacl ( vlib_main_t *  vm, vlib_node_runtime_t *  node, vlib_frame_t *  frame  )

static

Definition at line 485 of file ip_in_out_acl.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static uword ip6_inacl ( vlib_main_t *  vm, vlib_node_runtime_t *  node, vlib_frame_t *  frame  )

static

Definition at line 527 of file ip_in_out_acl.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static uword ip6_outacl ( vlib_main_t *  vm, vlib_node_runtime_t *  node, vlib_frame_t *  frame  )

static

Definition at line 534 of file ip_in_out_acl.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static clib_error_t* ip_in_out_acl_init ( vlib_main_t *  vm )

static

Definition at line 575 of file ip_in_out_acl.c.

Here is the caller graph for this function:

static uword ip_in_out_acl_inline ( vlib_main_t *  vm, vlib_node_runtime_t *  node, vlib_frame_t *  frame, int  is_ip4, int  is_output  )

inlinestatic

Definition at line 97 of file ip_in_out_acl.c.

Here is the call graph for this function:

Here is the caller graph for this function:

VLIB_NODE_FUNCTION_MULTIARCH	(	ip4_inacl_node	,
		ip4_inacl
	)

VLIB_NODE_FUNCTION_MULTIARCH	(	ip4_outacl_node	,
		ip4_outacl
	)

VLIB_NODE_FUNCTION_MULTIARCH	(	ip6_inacl_node	,
		ip6_inacl
	)

VLIB_NODE_FUNCTION_MULTIARCH	(	ip6_outacl_node	,
		ip6_outacl
	)

Variable Documentation

vlib_node_registration_t ip4_inacl_node

Initial value:

= {
  .function = ip4_inacl,
  .name = "ip4-inacl",
  .vector_size = sizeof (u32),
  .format_trace = format_ip_inacl_trace,
  .n_errors = ARRAY_LEN(ip_inacl_error_strings),
  .error_strings = ip_inacl_error_strings,

  .n_next_nodes = ACL_NEXT_INDEX_N_NEXT,
  .next_nodes = {
    [ACL_NEXT_INDEX_DENY] = "ip4-drop",
  },
}

(constructor) VLIB_REGISTER_NODE (ip4_inacl_node)

Definition at line 53 of file ip_in_out_acl.c.

vlib_node_registration_t ip4_outacl_node

Initial value:

= {
  .function = ip4_outacl,
  .name = "ip4-outacl",
  .vector_size = sizeof (u32),
  .format_trace = format_ip_outacl_trace,
  .n_errors = ARRAY_LEN(ip_outacl_error_strings),
  .error_strings = ip_outacl_error_strings,

  .n_next_nodes = ACL_NEXT_INDEX_N_NEXT,
  .next_nodes = {
    [ACL_NEXT_INDEX_DENY] = "ip4-drop",
  },
}

(constructor) VLIB_REGISTER_NODE (ip4_outacl_node)

Definition at line 54 of file ip_in_out_acl.c.

vlib_node_registration_t ip6_inacl_node

Initial value:

= {
  .function = ip6_inacl,
  .name = "ip6-inacl",
  .vector_size = sizeof (u32),
  .format_trace = format_ip_inacl_trace,
  .n_errors = ARRAY_LEN(ip_inacl_error_strings),
  .error_strings = ip_inacl_error_strings,

  .n_next_nodes = ACL_NEXT_INDEX_N_NEXT,
  .next_nodes = {
    [ACL_NEXT_INDEX_DENY] = "ip6-drop",
  },
}

(constructor) VLIB_REGISTER_NODE (ip6_inacl_node)

Definition at line 55 of file ip_in_out_acl.c.

vlib_node_registration_t ip6_outacl_node

Initial value:

= {
  .function = ip6_outacl,
  .name = "ip6-outacl",
  .vector_size = sizeof (u32),
  .format_trace = format_ip_outacl_trace,
  .n_errors = ARRAY_LEN(ip_outacl_error_strings),
  .error_strings = ip_outacl_error_strings,

  .n_next_nodes = ACL_NEXT_INDEX_N_NEXT,
  .next_nodes = {
    [ACL_NEXT_INDEX_DENY] = "ip6-drop",
  },
}

(constructor) VLIB_REGISTER_NODE (ip6_outacl_node)

Definition at line 56 of file ip_in_out_acl.c.

char* ip_inacl_error_strings[]

static

Initial value:

= {
#define _(sym,string) 
  foreach_ip_inacl_error

}

Definition at line 76 of file ip_in_out_acl.c.

char* ip_outacl_error_strings[]

static

Initial value:

= {
#define _(sym,string) 
  foreach_ip_outacl_error

}

Definition at line 90 of file ip_in_out_acl.c.