ligang/vpp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

acl-plugin: VPP-1088: add support for egress filter in macip ACLs

Browse Source 
This is the second patch, using the new functionality from the change 10002
in order to implement the egress filtering on the MACIP ACLs.

This adds an action "2" which means "add also egress filtering rules for this
MACIP ACL.

The reason for having the two choices is that the egress filtering really takes
care of a fairly corner case scenario, and I am not convinced that
always adding the performance cost of the egress lookup check is worth it.

Also, of course, not breaking the existing implementations is a nice plus,
too.

Change-Id: I3d7883ed45b1cdf98d7303771bcc75951dff38f0
Signed-off-by: Andrew Yourtchenko <ayourtch@gmail.com>
This commit is contained in:
Andrew Yourtchenko
2018-01-18 08:07:05 +01:00
committed by Damjan Marion
parent 1c6e5cf690
commit db3c480e37
2 changed files with 244 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/plugins/acl/acl.c
+240 -16
View File
File diff suppressed because it is too large Load Diff
src/plugins/acl/acl.h
+4
View File
@@ -116,6 +116,10 @@ typedef struct
u32 ip4_table_index;
u32 ip6_table_index;
u32 l2_table_index;
/* outacl classifier tables */
u32 out_ip4_table_index;
u32 out_ip6_table_index;
u32 out_l2_table_index;
} macip_acl_list_t;
/*