/* * Copyright (c) 2015 Cisco and/or its affiliates. * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at: * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #ifndef included_ip_ip_source_and_port_range_check_h #define included_ip_ip_source_and_port_range_check_h typedef struct { u32 ranges_per_adjacency; u32 special_adjacency_format_function_index; /* convenience */ vlib_main_t *vlib_main; vnet_main_t *vnet_main; } source_range_check_main_t; source_range_check_main_t source_range_check_main; typedef enum { IP_SOURCE_AND_PORT_RANGE_CHECK_PROTOCOL_TCP_OUT, IP_SOURCE_AND_PORT_RANGE_CHECK_PROTOCOL_UDP_OUT, IP_SOURCE_AND_PORT_RANGE_CHECK_PROTOCOL_TCP_IN, IP_SOURCE_AND_PORT_RANGE_CHECK_PROTOCOL_UDP_IN, IP_SOURCE_AND_PORT_RANGE_CHECK_N_PROTOCOLS, } ip_source_and_port_range_check_protocol_t; typedef struct { u32 fib_index[IP_SOURCE_AND_PORT_RANGE_CHECK_N_PROTOCOLS]; } ip_source_and_port_range_check_config_t; #define IP_SOURCE_AND_PORT_RANGE_CHECK_RANGE_LIMIT VLIB_BUFFER_PRE_DATA_SIZE/(2*sizeof(u16x8)); typedef struct { union { u16x8 as_u16x8; u16 as_u16[8]; }; } u16x8vec_t; typedef struct { u16x8vec_t low; u16x8vec_t hi; } protocol_port_range_t; int ip4_source_and_port_range_check_add_del (ip4_address_t * address, u32 length, u32 vrf_id, u16 * low_ports, u16 * hi_ports, int is_add); // This will be moved to another file in another patch -- for API freeze int ip6_source_and_port_range_check_add_del (ip6_address_t * address, u32 length, u32 vrf_id, u16 * low_ports, u16 * hi_ports, int is_add); int set_ip_source_and_port_range_check (vlib_main_t * vm, u32 * fib_index, u32 sw_if_index, u32 is_add); #endif /* included ip_source_and_port_range_check_h */