c1a4265b4b
Change-Id: I89d240753b3f3c5e984aa303a7c8fa35fa59bf7f Signed-off-by: Florin Coras <fcoras@cisco.com>
127 lines
3.3 KiB
C
127 lines
3.3 KiB
C
/*
|
|
* Copyright (c) 2017-2019 Cisco and/or its affiliates.
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at:
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
#ifndef SRC_VNET_SESSION_SESSION_RULES_TABLE_H_
|
|
#define SRC_VNET_SESSION_SESSION_RULES_TABLE_H_
|
|
|
|
#include <vnet/vnet.h>
|
|
#include <vnet/fib/fib.h>
|
|
#include <vnet/session/transport.h>
|
|
#include <vnet/session/mma_16.h>
|
|
#include <vnet/session/mma_40.h>
|
|
|
|
/* *INDENT-OFF* */
|
|
typedef CLIB_PACKED (struct
|
|
{
|
|
union
|
|
{
|
|
struct
|
|
{
|
|
ip4_address_t rmt_ip;
|
|
ip4_address_t lcl_ip;
|
|
u16 rmt_port;
|
|
u16 lcl_port;
|
|
};
|
|
u64 as_u64[2];
|
|
};
|
|
}) session_mask_or_match_4_t;
|
|
|
|
typedef CLIB_PACKED (struct
|
|
{
|
|
union
|
|
{
|
|
struct
|
|
{
|
|
ip6_address_t rmt_ip;
|
|
ip6_address_t lcl_ip;
|
|
u16 rmt_port;
|
|
u16 lcl_port;
|
|
};
|
|
u64 as_u64[5];
|
|
};
|
|
}) session_mask_or_match_6_t;
|
|
/* *INDENT-ON* */
|
|
|
|
#define SESSION_RULE_TAG_MAX_LEN 64
|
|
#define SESSION_RULES_TABLE_INVALID_INDEX MMA_TABLE_INVALID_INDEX
|
|
#define SESSION_RULES_TABLE_ACTION_DROP (MMA_TABLE_INVALID_INDEX - 1)
|
|
#define SESSION_RULES_TABLE_ACTION_ALLOW (MMA_TABLE_INVALID_INDEX - 2)
|
|
|
|
typedef struct _session_rules_table_add_del_args
|
|
{
|
|
fib_prefix_t lcl;
|
|
fib_prefix_t rmt;
|
|
u16 lcl_port;
|
|
u16 rmt_port;
|
|
u32 action_index;
|
|
u8 *tag;
|
|
u8 is_add;
|
|
} session_rule_table_add_del_args_t;
|
|
|
|
typedef struct _rule_tag
|
|
{
|
|
u8 *tag;
|
|
} session_rule_tag_t;
|
|
|
|
typedef struct _session_rules_table_t
|
|
{
|
|
/**
|
|
* Per fib proto session rules tables
|
|
*/
|
|
mma_rules_table_16_t session_rules_tables_16;
|
|
mma_rules_table_40_t session_rules_tables_40;
|
|
/**
|
|
* Hash table that maps tags to rules
|
|
*/
|
|
uword *rules_by_tag;
|
|
/**
|
|
* Pool of rules tags
|
|
*/
|
|
session_rule_tag_t *rule_tags;
|
|
/**
|
|
* Hash table that maps rule indices to tags
|
|
*/
|
|
uword *tags_by_rules;
|
|
} session_rules_table_t;
|
|
|
|
u32 session_rules_table_lookup4 (session_rules_table_t * srt,
|
|
ip4_address_t * lcl_ip,
|
|
ip4_address_t * rmt_ip, u16 lcl_port,
|
|
u16 rmt_port);
|
|
u32 session_rules_table_lookup6 (session_rules_table_t * srt,
|
|
ip6_address_t * lcl_ip,
|
|
ip6_address_t * rmt_ip, u16 lcl_port,
|
|
u16 rmt_port);
|
|
void session_rules_table_cli_dump (vlib_main_t * vm,
|
|
session_rules_table_t * srt, u8 fib_proto);
|
|
void session_rules_table_show_rule (vlib_main_t * vm,
|
|
session_rules_table_t * srt,
|
|
ip46_address_t * lcl_ip, u16 lcl_port,
|
|
ip46_address_t * rmt_ip, u16 rmt_port,
|
|
u8 is_ip4);
|
|
int session_rules_table_add_del (session_rules_table_t * srt,
|
|
session_rule_table_add_del_args_t * args);
|
|
u8 *session_rules_table_rule_tag (session_rules_table_t * srt, u32 ri,
|
|
u8 is_ip4);
|
|
void session_rules_table_init (session_rules_table_t * srt);
|
|
#endif /* SRC_VNET_SESSION_SESSION_RULES_TABLE_H_ */
|
|
/*
|
|
* fd.io coding-style-patch-verification: ON
|
|
*
|
|
* Local Variables:
|
|
* eval: (c-set-style "gnu")
|
|
* End:
|
|
*/
|