FD.io VPP  v21.06-3-gbb25fbf28
Vector Packet Processing
ipsec_input.c File Reference
+ Include dependency graph for ipsec_input.c:

Go to the source code of this file.

Data Structures

struct  ipsec_input_trace_t
 

Macros

#define foreach_ipsec_input_error
 

Enumerations

enum  ipsec_input_error_t { IPSEC_INPUT_N_ERROR }
 

Functions

static u8format_ipsec_input_trace (u8 *s, va_list *args)
 
static ipsec_policy_tipsec_input_policy_match (ipsec_spd_t *spd, u32 sa, u32 da, ipsec_spd_policy_type_t policy_type)
 
static ipsec_policy_tipsec_input_protect_policy_match (ipsec_spd_t *spd, u32 sa, u32 da, u32 spi)
 
static uword ip6_addr_match_range (ip6_address_t *a, ip6_address_t *la, ip6_address_t *ua)
 
static ipsec_policy_tipsec6_input_protect_policy_match (ipsec_spd_t *spd, ip6_address_t *sa, ip6_address_t *da, u32 spi)
 
VLIB_NODE_FN() ipsec4_input_node (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
 
VLIB_NODE_FN() ipsec6_input_node (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *from_frame)
 

Variables

static char * ipsec_input_error_strings []
 
vlib_node_registration_t ipsec4_input_node
 (constructor) VLIB_REGISTER_NODE (ipsec4_input_node) More...
 
vlib_node_registration_t ipsec6_input_node
 (constructor) VLIB_REGISTER_NODE (ipsec6_input_node) More...
 

Macro Definition Documentation

◆ foreach_ipsec_input_error

#define foreach_ipsec_input_error
Value:
_(RX_PKTS, "IPSec pkts received") \
_(RX_POLICY_MATCH, "IPSec policy match") \
_(RX_POLICY_NO_MATCH, "IPSec policy not matched") \
_(RX_POLICY_BYPASS, "IPSec policy bypass") \
_(RX_POLICY_DISCARD, "IPSec policy discard")

Definition at line 28 of file ipsec_input.c.

Enumeration Type Documentation

◆ ipsec_input_error_t

Enumerator
IPSEC_INPUT_N_ERROR 

Definition at line 35 of file ipsec_input.c.

Function Documentation

◆ format_ipsec_input_trace()

static u8* format_ipsec_input_trace ( u8 s,
va_list *  args 
)
static

Definition at line 61 of file ipsec_input.c.

◆ ip6_addr_match_range()

static uword ip6_addr_match_range ( ip6_address_t *  a,
ip6_address_t *  la,
ip6_address_t *  ua 
)
inlinestatic

Definition at line 148 of file ipsec_input.c.

+ Here is the caller graph for this function:

◆ ipsec4_input_node()

VLIB_NODE_FN() ipsec4_input_node ( vlib_main_t vm,
vlib_node_runtime_t node,
vlib_frame_t frame 
)

Definition at line 199 of file ipsec_input.c.

+ Here is the call graph for this function:

◆ ipsec6_input_node()

VLIB_NODE_FN() ipsec6_input_node ( vlib_main_t vm,
vlib_node_runtime_t node,
vlib_frame_t from_frame 
)

Definition at line 479 of file ipsec_input.c.

+ Here is the call graph for this function:

◆ ipsec6_input_protect_policy_match()

static ipsec_policy_t* ipsec6_input_protect_policy_match ( ipsec_spd_t spd,
ip6_address_t *  sa,
ip6_address_t *  da,
u32  spi 
)
inlinestatic

Definition at line 158 of file ipsec_input.c.

+ Here is the call graph for this function:
+ Here is the caller graph for this function:

◆ ipsec_input_policy_match()

static ipsec_policy_t* ipsec_input_policy_match ( ipsec_spd_t spd,
u32  sa,
u32  da,
ipsec_spd_policy_type_t  policy_type 
)
inlinestatic

Definition at line 75 of file ipsec_input.c.

+ Here is the caller graph for this function:

◆ ipsec_input_protect_policy_match()

static ipsec_policy_t* ipsec_input_protect_policy_match ( ipsec_spd_t spd,
u32  sa,
u32  da,
u32  spi 
)
inlinestatic

Definition at line 104 of file ipsec_input.c.

+ Here is the call graph for this function:
+ Here is the caller graph for this function:

Variable Documentation

◆ ipsec4_input_node

vlib_node_registration_t ipsec4_input_node
Initial value:
= {
.name = "ipsec4-input-feature",
.vector_size = sizeof (u32),
.format_trace = format_ipsec_input_trace,
.error_strings = ipsec_input_error_strings,
.n_next_nodes = IPSEC_INPUT_N_NEXT,
.next_nodes = {
#define _(s,n)
},
}

(constructor) VLIB_REGISTER_NODE (ipsec4_input_node)

Definition at line 460 of file ipsec_input.c.

◆ ipsec6_input_node

vlib_node_registration_t ipsec6_input_node
Initial value:
= {
.name = "ipsec6-input-feature",
.vector_size = sizeof (u32),
.format_trace = format_ipsec_input_trace,
.error_strings = ipsec_input_error_strings,
.n_next_nodes = IPSEC_INPUT_N_NEXT,
.next_nodes = {
#define _(s,n)
},
}

(constructor) VLIB_REGISTER_NODE (ipsec6_input_node)

Definition at line 632 of file ipsec_input.c.

◆ ipsec_input_error_strings

char* ipsec_input_error_strings[]
static
Initial value:
= {
#define _(sym,string)
}

Definition at line 43 of file ipsec_input.c.

foreach_ipsec_input_error
#define foreach_ipsec_input_error
Definition: ipsec_input.c:28
VLIB_NODE_TYPE_INTERNAL
@ VLIB_NODE_TYPE_INTERNAL
Definition: node.h:72
ipsec_input_error_strings
static char * ipsec_input_error_strings[]
Definition: ipsec_input.c:43
ARRAY_LEN
#define ARRAY_LEN(x)
Definition: clib.h:70
foreach_ipsec_input_next
#define foreach_ipsec_input_next
Definition: ipsec_io.h:29
format_ipsec_input_trace
static u8 * format_ipsec_input_trace(u8 *s, va_list *args)
Definition: ipsec_input.c:61
u32
unsigned int u32
Definition: types.h:88
IPSEC_INPUT_N_NEXT
@ IPSEC_INPUT_N_NEXT
Definition: ipsec_io.h:38
type
vl_api_fib_path_type_t type
Definition: fib_types.api:123