FD.io VPP  v21.06-3-gbb25fbf28
Vector Packet Processing
ip_in_out_acl.c File Reference
+ Include dependency graph for ip_in_out_acl.c:

Go to the source code of this file.

Data Structures

struct  ip_in_out_acl_trace_t
 

Macros

#define foreach_ip_inacl_error
 
#define foreach_ip_outacl_error
 

Enumerations

enum  ip_inacl_error_t { IP_INACL_N_ERROR }
 
enum  ip_outacl_error_t { IP_OUTACL_N_ERROR }
 

Functions

static u8format_ip_in_out_acl_trace (u8 *s, u32 is_output, va_list *args)
 
static u8format_ip_inacl_trace (u8 *s, va_list *args)
 
static u8format_ip_outacl_trace (u8 *s, va_list *args)
 
static_always_inline void ip_in_out_acl_inline (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_buffer_t **b, u16 *next, u32 n_left, int is_ip4, int is_output, int do_trace)
 
VLIB_NODE_FN() ip4_inacl_node (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
 
VLIB_NODE_FN() ip4_outacl_node (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
 
VLIB_NODE_FN() ip6_inacl_node (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
 
VLIB_NODE_FN() ip6_outacl_node (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
 
static clib_error_tip_in_out_acl_init (vlib_main_t *vm)
 

Variables

vlib_node_registration_t ip4_inacl_node
 (constructor) VLIB_REGISTER_NODE (ip4_inacl_node) More...
 
vlib_node_registration_t ip4_outacl_node
 (constructor) VLIB_REGISTER_NODE (ip4_outacl_node) More...
 
vlib_node_registration_t ip6_inacl_node
 (constructor) VLIB_REGISTER_NODE (ip6_inacl_node) More...
 
vlib_node_registration_t ip6_outacl_node
 (constructor) VLIB_REGISTER_NODE (ip6_outacl_node) More...
 
static char * ip_inacl_error_strings []
 
static char * ip_outacl_error_strings []
 

Macro Definition Documentation

◆ foreach_ip_inacl_error

#define foreach_ip_inacl_error
Value:
_(MISS, "input ACL misses") \
_(HIT, "input ACL hits") \
_(CHAIN_HIT, "input ACL hits after chain walk")

Definition at line 59 of file ip_in_out_acl.c.

◆ foreach_ip_outacl_error

#define foreach_ip_outacl_error
Value:
_(MISS, "output ACL misses") \
_(HIT, "output ACL hits") \
_(CHAIN_HIT, "output ACL hits after chain walk")

Definition at line 64 of file ip_in_out_acl.c.

Enumeration Type Documentation

◆ ip_inacl_error_t

Enumerator
IP_INACL_N_ERROR 

Definition at line 69 of file ip_in_out_acl.c.

◆ ip_outacl_error_t

Enumerator
IP_OUTACL_N_ERROR 

Definition at line 84 of file ip_in_out_acl.c.

Function Documentation

◆ format_ip_in_out_acl_trace()

static u8* format_ip_in_out_acl_trace ( u8 s,
u32  is_output,
va_list *  args 
)
static

Definition at line 30 of file ip_in_out_acl.c.

+ Here is the caller graph for this function:

◆ format_ip_inacl_trace()

static u8* format_ip_inacl_trace ( u8 s,
va_list *  args 
)
static

Definition at line 43 of file ip_in_out_acl.c.

+ Here is the call graph for this function:

◆ format_ip_outacl_trace()

static u8* format_ip_outacl_trace ( u8 s,
va_list *  args 
)
static

Definition at line 49 of file ip_in_out_acl.c.

+ Here is the call graph for this function:

◆ ip4_inacl_node()

VLIB_NODE_FN() ip4_inacl_node ( vlib_main_t vm,
vlib_node_runtime_t node,
vlib_frame_t frame 
)

Definition at line 781 of file ip_in_out_acl.c.

+ Here is the call graph for this function:

◆ ip4_outacl_node()

VLIB_NODE_FN() ip4_outacl_node ( vlib_main_t vm,
vlib_node_runtime_t node,
vlib_frame_t frame 
)

Definition at line 807 of file ip_in_out_acl.c.

+ Here is the call graph for this function:

◆ ip6_inacl_node()

VLIB_NODE_FN() ip6_inacl_node ( vlib_main_t vm,
vlib_node_runtime_t node,
vlib_frame_t frame 
)

Definition at line 860 of file ip_in_out_acl.c.

+ Here is the call graph for this function:

◆ ip6_outacl_node()

VLIB_NODE_FN() ip6_outacl_node ( vlib_main_t vm,
vlib_node_runtime_t node,
vlib_frame_t frame 
)

Definition at line 885 of file ip_in_out_acl.c.

+ Here is the call graph for this function:

◆ ip_in_out_acl_init()

static clib_error_t* ip_in_out_acl_init ( vlib_main_t vm)
static

Definition at line 940 of file ip_in_out_acl.c.

◆ ip_in_out_acl_inline()

static_always_inline void ip_in_out_acl_inline ( vlib_main_t vm,
vlib_node_runtime_t node,
vlib_buffer_t **  b,
u16 next,
u32  n_left,
int  is_ip4,
int  is_output,
int  do_trace 
)

Definition at line 100 of file ip_in_out_acl.c.

+ Here is the call graph for this function:
+ Here is the caller graph for this function:

Variable Documentation

◆ ip4_inacl_node

vlib_node_registration_t ip4_inacl_node
Initial value:
= {
.name = "ip4-inacl",
.vector_size = sizeof (u32),
.format_trace = format_ip_inacl_trace,
.error_strings = ip_inacl_error_strings,
.n_next_nodes = ACL_NEXT_INDEX_N_NEXT,
.next_nodes = {
[ACL_NEXT_INDEX_DENY] = "ip4-drop",
},
}

(constructor) VLIB_REGISTER_NODE (ip4_inacl_node)

Definition at line 833 of file ip_in_out_acl.c.

◆ ip4_outacl_node

vlib_node_registration_t ip4_outacl_node
Initial value:
= {
.name = "ip4-outacl",
.vector_size = sizeof (u32),
.format_trace = format_ip_outacl_trace,
.error_strings = ip_outacl_error_strings,
.n_next_nodes = ACL_NEXT_INDEX_N_NEXT,
.next_nodes = {
[ACL_NEXT_INDEX_DENY] = "ip4-drop",
},
}

(constructor) VLIB_REGISTER_NODE (ip4_outacl_node)

Definition at line 846 of file ip_in_out_acl.c.

◆ ip6_inacl_node

vlib_node_registration_t ip6_inacl_node
Initial value:
= {
.name = "ip6-inacl",
.vector_size = sizeof (u32),
.format_trace = format_ip_inacl_trace,
.error_strings = ip_inacl_error_strings,
.n_next_nodes = ACL_NEXT_INDEX_N_NEXT,
.next_nodes = {
[ACL_NEXT_INDEX_DENY] = "ip6-drop",
},
}

(constructor) VLIB_REGISTER_NODE (ip6_inacl_node)

Definition at line 911 of file ip_in_out_acl.c.

◆ ip6_outacl_node

vlib_node_registration_t ip6_outacl_node
Initial value:
= {
.name = "ip6-outacl",
.vector_size = sizeof (u32),
.format_trace = format_ip_outacl_trace,
.error_strings = ip_outacl_error_strings,
.n_next_nodes = ACL_NEXT_INDEX_N_NEXT,
.next_nodes = {
[ACL_NEXT_INDEX_DENY] = "ip6-drop",
},
}

(constructor) VLIB_REGISTER_NODE (ip6_outacl_node)

Definition at line 924 of file ip_in_out_acl.c.

◆ ip_inacl_error_strings

char* ip_inacl_error_strings[]
static
Initial value:
= {
#define _(sym,string)
}

Definition at line 78 of file ip_in_out_acl.c.

◆ ip_outacl_error_strings

char* ip_outacl_error_strings[]
static
Initial value:
= {
#define _(sym,string)
}

Definition at line 93 of file ip_in_out_acl.c.

format_ip_inacl_trace
static u8 * format_ip_inacl_trace(u8 *s, va_list *args)
Definition: ip_in_out_acl.c:43
ACL_NEXT_INDEX_DENY
@ ACL_NEXT_INDEX_DENY
Definition: in_out_acl.h:25
ip_outacl_error_strings
static char * ip_outacl_error_strings[]
Definition: ip_in_out_acl.c:93
format_ip_outacl_trace
static u8 * format_ip_outacl_trace(u8 *s, va_list *args)
Definition: ip_in_out_acl.c:49
ARRAY_LEN
#define ARRAY_LEN(x)
Definition: clib.h:70
ip_inacl_error_strings
static char * ip_inacl_error_strings[]
Definition: ip_in_out_acl.c:78
foreach_ip_outacl_error
#define foreach_ip_outacl_error
Definition: ip_in_out_acl.c:64
foreach_ip_inacl_error
#define foreach_ip_inacl_error
Definition: ip_in_out_acl.c:59
u32
unsigned int u32
Definition: types.h:88
ACL_NEXT_INDEX_N_NEXT
@ ACL_NEXT_INDEX_N_NEXT
Definition: in_out_acl.h:26