2 * Copyright (c) 2017 Cisco and/or its affiliates.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at:
7 * http://www.apache.org/licenses/LICENSE-2.0
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
18 #include "vom/acl_l3_rule.hpp"
22 l3_rule::l3_rule(uint32_t priority,
23 const action_t& action,
24 const route::prefix_t& src,
25 const route::prefix_t& dst)
26 : m_priority(priority)
31 , m_srcport_or_icmptype_first(0)
32 , m_srcport_or_icmptype_last(0)
33 , m_dstport_or_icmpcode_first(0)
34 , m_dstport_or_icmpcode_last(0)
36 , m_tcp_flags_value(0)
41 l3_rule::operator<(const l3_rule& other) const
43 return (other.m_priority < m_priority);
47 l3_rule::to_vpp(vapi_type_acl_rule& rule) const
49 rule.is_permit = m_action.value();
50 m_src.to_vpp(&rule.is_ipv6, rule.src_ip_addr, &rule.src_ip_prefix_len);
51 m_dst.to_vpp(&rule.is_ipv6, rule.dst_ip_addr, &rule.dst_ip_prefix_len);
54 rule.srcport_or_icmptype_first = m_srcport_or_icmptype_first;
55 rule.srcport_or_icmptype_last = m_srcport_or_icmptype_last;
56 rule.dstport_or_icmpcode_first = m_dstport_or_icmpcode_first;
57 rule.dstport_or_icmpcode_last = m_dstport_or_icmpcode_last;
59 rule.tcp_flags_mask = m_tcp_flags_mask;
60 rule.tcp_flags_value = m_tcp_flags_value;
64 l3_rule::operator==(const l3_rule& rule) const
66 return ((m_action == rule.m_action) && (m_src == rule.m_src) &&
67 (m_dst == rule.m_dst) && (m_proto == rule.m_proto) &&
68 (m_srcport_or_icmptype_first == rule.m_srcport_or_icmptype_first) &&
69 (m_srcport_or_icmptype_last == rule.m_srcport_or_icmptype_last) &&
70 (m_dstport_or_icmpcode_first == rule.m_dstport_or_icmpcode_first) &&
71 (m_dstport_or_icmpcode_last == rule.m_dstport_or_icmpcode_last) &&
72 (m_tcp_flags_mask == rule.m_tcp_flags_mask) &&
73 (m_tcp_flags_value == rule.m_tcp_flags_value));
77 l3_rule::to_string() const
82 << "priority:" << m_priority << " action:" << m_action.to_string()
83 << " src:" << m_src.to_string() << " dst:" << m_dst.to_string()
84 << " proto:" << std::to_string(m_proto)
85 << " srcportfrom:" << m_srcport_or_icmptype_first
86 << " srcportto: " << m_srcport_or_icmptype_last
87 << " dstportfrom:" << m_dstport_or_icmpcode_first
88 << " dstportto:" << m_dstport_or_icmpcode_last
89 << " tcpflagmask:" << m_tcp_flags_mask
90 << " tcpflagvalue:" << m_tcp_flags_value << "]";
96 l3_rule::set_src_ip(route::prefix_t src)
102 l3_rule::set_dst_ip(route::prefix_t dst)
108 l3_rule::set_proto(uint8_t proto)
113 l3_rule::set_src_from_port(uint16_t srcport_or_icmptype_first)
115 m_srcport_or_icmptype_first = srcport_or_icmptype_first;
119 l3_rule::set_src_to_port(uint16_t srcport_or_icmptype_last)
121 m_srcport_or_icmptype_last = srcport_or_icmptype_last;
125 l3_rule::set_dst_from_port(uint16_t dstport_or_icmpcode_first)
127 m_dstport_or_icmpcode_first = dstport_or_icmpcode_first;
131 l3_rule::set_dst_to_port(uint16_t dstport_or_icmpcode_last)
133 m_dstport_or_icmpcode_last = dstport_or_icmpcode_last;
137 l3_rule::set_tcp_flags_mask(uint8_t tcp_flags_mask)
139 m_tcp_flags_mask = tcp_flags_mask;
143 l3_rule::set_tcp_flags_value(uint8_t tcp_flags_value)
145 m_tcp_flags_value = tcp_flags_value;
151 * fd.io coding-style-patch-verification: ON
154 * eval: (c-set-style "mozilla")