ipsec_input.c File Reference

Include dependency graph for ipsec_input.c:

Go to the source code of this file.

Data Structures
struct	ipsec_input_trace_t

Macros
#define	foreach_ipsec_input_error

Enumerations
enum	ipsec_input_error_t { IPSEC_INPUT_N_ERROR }

Functions
static u8 *	format_ipsec_input_trace (u8 *s, va_list *args)
static ipsec_policy_t *	ipsec_input_policy_match (ipsec_spd_t *spd, u32 sa, u32 da, ipsec_spd_policy_type_t policy_type)
static ipsec_policy_t *	ipsec_input_protect_policy_match (ipsec_spd_t *spd, u32 sa, u32 da, u32 spi)
static uword	ip6_addr_match_range (ip6_address_t *a, ip6_address_t *la, ip6_address_t *ua)
static ipsec_policy_t *	ipsec6_input_protect_policy_match (ipsec_spd_t *spd, ip6_address_t *sa, ip6_address_t *da, u32 spi)
VLIB_NODE_FN()	ipsec4_input_node (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
VLIB_NODE_FN()	ipsec6_input_node (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *from_frame)

Variables
static char *	ipsec_input_error_strings []
vlib_node_registration_t	ipsec4_input_node
	(constructor) VLIB_REGISTER_NODE (ipsec4_input_node) More...
vlib_node_registration_t	ipsec6_input_node
	(constructor) VLIB_REGISTER_NODE (ipsec6_input_node) More...

Macro Definition Documentation

foreach_ipsec_input_error

#define foreach_ipsec_input_error

Value:

_(RX_PKTS, "IPSec pkts received")                       \
_(RX_POLICY_MATCH, "IPSec policy match")                \
_(RX_POLICY_NO_MATCH, "IPSec policy not matched")       \
_(RX_POLICY_BYPASS, "IPSec policy bypass")              \
_(RX_POLICY_DISCARD, "IPSec policy discard")

Definition at line 28 of file ipsec_input.c.

Enumeration Type Documentation

ipsec_input_error_t

enum ipsec_input_error_t

Enumerator
IPSEC_INPUT_N_ERROR

Definition at line 35 of file ipsec_input.c.

Function Documentation

format_ipsec_input_trace()

static u8* format_ipsec_input_trace ( u8 *  s, va_list *  args  )

static

Definition at line 61 of file ipsec_input.c.

ip6_addr_match_range()

static uword ip6_addr_match_range ( ip6_address_t *  a, ip6_address_t *  la, ip6_address_t *  ua  )

inlinestatic

Definition at line 148 of file ipsec_input.c.

Here is the caller graph for this function:

ipsec4_input_node()

VLIB_NODE_FN() ipsec4_input_node	(	vlib_main_t *	vm,
		vlib_node_runtime_t *	node,
		vlib_frame_t *	frame
	)

Definition at line 199 of file ipsec_input.c.

Here is the call graph for this function:

ipsec6_input_node()

VLIB_NODE_FN() ipsec6_input_node	(	vlib_main_t *	vm,
		vlib_node_runtime_t *	node,
		vlib_frame_t *	from_frame
	)

Definition at line 499 of file ipsec_input.c.

Here is the call graph for this function:

ipsec6_input_protect_policy_match()

static ipsec_policy_t* ipsec6_input_protect_policy_match ( ipsec_spd_t *  spd, ip6_address_t *  sa, ip6_address_t *  da, u32  spi  )

inlinestatic

Definition at line 158 of file ipsec_input.c.

Here is the call graph for this function:

Here is the caller graph for this function:

ipsec_input_policy_match()

static ipsec_policy_t* ipsec_input_policy_match ( ipsec_spd_t *  spd, u32  sa, u32  da, ipsec_spd_policy_type_t  policy_type  )

inlinestatic

Definition at line 75 of file ipsec_input.c.

Here is the caller graph for this function:

ipsec_input_protect_policy_match()

static ipsec_policy_t* ipsec_input_protect_policy_match ( ipsec_spd_t *  spd, u32  sa, u32  da, u32  spi  )

inlinestatic

Definition at line 104 of file ipsec_input.c.

Here is the call graph for this function:

Here is the caller graph for this function:

Variable Documentation

ipsec4_input_node

vlib_node_registration_t ipsec4_input_node

Initial value:

= {
  .name = "ipsec4-input-feature",
  .vector_size = sizeof (u32),
  .format_trace = format_ipsec_input_trace,
  .type = VLIB_NODE_TYPE_INTERNAL,
  .n_errors = ARRAY_LEN(ipsec_input_error_strings),
  .error_strings = ipsec_input_error_strings,
  .n_next_nodes = IPSEC_INPUT_N_NEXT,
  .next_nodes = {
#define _(s,n) 
    foreach_ipsec_input_next
 
  },
}

(constructor) VLIB_REGISTER_NODE (ipsec4_input_node)

Definition at line 480 of file ipsec_input.c.

ipsec6_input_node

vlib_node_registration_t ipsec6_input_node

Initial value:

= {
  .name = "ipsec6-input-feature",
  .vector_size = sizeof (u32),
  .format_trace = format_ipsec_input_trace,
  .type = VLIB_NODE_TYPE_INTERNAL,
  .n_errors = ARRAY_LEN(ipsec_input_error_strings),
  .error_strings = ipsec_input_error_strings,
  .n_next_nodes = IPSEC_INPUT_N_NEXT,
  .next_nodes = {
#define _(s,n) 
    foreach_ipsec_input_next
 
  },
}

(constructor) VLIB_REGISTER_NODE (ipsec6_input_node)

Definition at line 652 of file ipsec_input.c.

ipsec_input_error_strings

char* ipsec_input_error_strings[]

static

Initial value:

= {
#define _(sym,string) 
  foreach_ipsec_input_error
 
}

Definition at line 43 of file ipsec_input.c.