65 s =
format (s,
"%s: sw_if_index %d, next_index %d, table %d, offset %d",
66 is_output ?
"OUTACL" :
"INACL",
85 #ifndef CLIB_MARCH_VARIANT 92 #define foreach_l2_inacl_error \ 93 _(NONE, "valid input ACL packets") \ 94 _(MISS, "input ACL misses") \ 95 _(HIT, "input ACL hits") \ 96 _(CHAIN_HIT, "input ACL hits after chain walk") \ 97 _(TABLE_MISS, "input ACL table-miss drops") \ 98 _(SESSION_DENY, "input ACL session deny drops") 100 #define foreach_l2_outacl_error \ 101 _(NONE, "valid output ACL packets") \ 102 _(MISS, "output ACL misses") \ 103 _(HIT, "output ACL hits") \ 104 _(CHAIN_HIT, "output ACL hits after chain walk") \ 105 _(TABLE_MISS, "output ACL table-miss drops") \ 106 _(SESSION_DENY, "output ACL session deny drops") 111 #define _(sym,str) L2_INACL_ERROR_##sym, 118 #define _(sym,string) string, 125 #define _(sym,str) L2_OUTACL_ERROR_##sym, 132 #define _(sym,string) string, 143 u32 n_left_from, *from, *to_next;
159 while (n_left_from > 2)
164 u32 sw_if_index0, sw_if_index1;
165 u32 table_index0, table_index1;
221 vnet_buffer (b0)->l2_classify.table_index = table_index0;
223 vnet_buffer (b1)->l2_classify.table_index = table_index1;
229 while (n_left_from > 0)
256 vnet_buffer (b0)->l2_classify.table_index = table_index0;
267 while (n_left_from > 0)
274 while (n_left_from > 0 && n_left_to_next > 0)
281 vnet_classify_entry_t *e0;
294 table_index1 =
vnet_buffer (p1)->l2_classify.table_index;
314 table_index0 =
vnet_buffer (b0)->l2_classify.table_index;
323 is_output ? L2OUTPUT_FEAT_ACL :
346 e0->next_index : next0;
352 L2_OUTACL_ERROR_SESSION_DENY : L2_INACL_ERROR_NONE;
355 L2_OUTACL_ERROR_SESSION_DENY : L2_OUTACL_ERROR_NONE;
376 L2_OUTACL_ERROR_TABLE_MISS :
377 L2_OUTACL_ERROR_NONE;
380 L2_INACL_ERROR_TABLE_MISS : L2_INACL_ERROR_NONE;
395 (t0, (
u8 *) h0, hash0, now);
400 e0->next_index : next0;
406 L2_OUTACL_ERROR_SESSION_DENY :
407 L2_OUTACL_ERROR_NONE;
410 L2_INACL_ERROR_SESSION_DENY :
420 && (b0->
flags & VLIB_BUFFER_IS_TRACED)))
433 to_next, n_left_to_next,
441 is_output ? L2_OUTACL_ERROR_MISS :
442 L2_INACL_ERROR_MISS, misses);
444 is_output ? L2_OUTACL_ERROR_HIT :
445 L2_INACL_ERROR_HIT, hits);
447 is_output ? L2_OUTACL_ERROR_CHAIN_HIT :
448 L2_INACL_ERROR_CHAIN_HIT, chain_hits);
470 .name =
"l2-input-acl",
471 .vector_size =
sizeof (
u32),
487 .name =
"l2-output-acl",
488 .vector_size =
sizeof (
u32),
505 #ifndef CLIB_MARCH_VARIANT u64 vnet_classify_hash_packet(vnet_classify_table_t *t, u8 *h)
static uword l2_in_out_acl_node_fn(vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame, int is_output)
vlib_node_registration_t l2_inacl_node
(constructor) VLIB_REGISTER_NODE (l2_inacl_node)
u32 flags
buffer flags: VLIB_BUFFER_FREE_LIST_INDEX_MASK: bits used to store free list index, VLIB_BUFFER_IS_TRACED: trace this buffer.
char ** l2output_get_feat_names(void)
vnet_main_t * vnet_get_main(void)
u32 * classify_table_index_by_sw_if_index[IN_OUT_ACL_N_TABLE_GROUPS][IN_OUT_ACL_N_TABLES]
static f64 vlib_time_now(vlib_main_t *vm)
#define foreach_l2_inacl_error
#define VLIB_NODE_FN(node)
vlib_error_t * errors
Vector of errors for this node.
static u32 vnet_l2_feature_next(vlib_buffer_t *b, u32 *next_nodes, u32 feat_bit)
Return the graph node index for the feature corresponding to the next set bit after clearing the curr...
static u8 * format_l2_outacl_trace(u8 *s, va_list *args)
static u8 * format_l2_inacl_trace(u8 *s, va_list *args)
#define CLASSIFY_FLAG_USE_CURR_DATA
#define VLIB_INIT_FUNCTION(x)
#define vlib_prefetch_buffer_header(b, type)
Prefetch buffer metadata.
l2_in_out_acl_main_t l2_in_out_acl_main
static void vnet_classify_prefetch_bucket(vnet_classify_table_t *t, u64 hash)
static void vnet_classify_prefetch_entry(vnet_classify_table_t *t, u64 hash)
vl_api_fib_path_type_t type
vlib_error_t error
Error code for buffers to be enqueued to error handler.
#define pool_elt_at_index(p, i)
Returns pointer to element at given index.
static void * vlib_buffer_get_current(vlib_buffer_t *b)
Get pointer to current data to process.
u32 node_index
Node index.
#define vlib_validate_buffer_enqueue_x1(vm, node, next_index, to_next, n_left_to_next, bi0, next0)
Finish enqueueing one buffer forward in the graph.
#define vlib_get_next_frame(vm, node, next_index, vectors, n_vectors_left)
Get pointer to next frame vector data by (vlib_node_runtime_t, next_index).
static void vlib_node_increment_counter(vlib_main_t *vm, u32 node_index, u32 counter_index, u64 increment)
static uword vnet_classify_get_offset(vnet_classify_table_t *t, vnet_classify_entry_t *v)
#define foreach_l2_outacl_error
#define VLIB_REGISTER_NODE(x,...)
#define CLIB_PREFETCH(addr, size, type)
static void feat_bitmap_init_next_nodes(vlib_main_t *vm, u32 node_index, u32 num_features, char **feat_names, u32 *next_nodes)
Initialize the feature next-node indexes of a graph node.
u32 feat_next_node_index[IN_OUT_ACL_N_TABLE_GROUPS][32]
void vlib_put_next_frame(vlib_main_t *vm, vlib_node_runtime_t *r, u32 next_index, u32 n_vectors_left)
Release pointer to next frame vector data.
vlib_main_t vlib_node_runtime_t * node
struct _vnet_classify_main vnet_classify_main_t
clib_error_t * l2_in_out_acl_init(vlib_main_t *vm)
u16 cached_next_index
Next frame index that vector arguments were last enqueued to last time this node ran.
static void vlib_buffer_advance(vlib_buffer_t *b, word l)
Advance current data pointer by the supplied (signed!) amount.
static char * l2_inacl_error_strings[]
static char * l2_outacl_error_strings[]
struct _vlib_node_registration vlib_node_registration_t
vnet_classify_main_t * vnet_classify_main
vlib_main_t vlib_node_runtime_t vlib_frame_t * frame
VLIB buffer representation.
static void * vlib_frame_vector_args(vlib_frame_t *f)
Get pointer to frame vector data.
in_out_acl_main_t in_out_acl_main
u16 flags
Copy of main node flags.
void * vlib_add_trace(vlib_main_t *vm, vlib_node_runtime_t *r, vlib_buffer_t *b, u32 n_data_bytes)
#define VLIB_NODE_FLAG_TRACE
#define CLIB_CACHE_LINE_BYTES
static u8 * format_l2_in_out_acl_trace(u8 *s, u32 is_output, va_list *args)
static vlib_buffer_t * vlib_get_buffer(vlib_main_t *vm, u32 buffer_index)
Translate buffer index into buffer pointer.
vnet_classify_entry_t * vnet_classify_find_entry(vnet_classify_table_t *t, u8 *h, u64 hash, f64 now)
vlib_node_registration_t l2_outacl_node
(constructor) VLIB_REGISTER_NODE (l2_outacl_node)