+++ /dev/null
-/*
- * Copyright (c) 2017 Cisco and/or its affiliates.
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at:
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-#include "vom/acl_list.hpp"
-#include "vom/acl_list_cmds.hpp"
-#include "vom/logger.hpp"
-#include "vom/singular_db_funcs.hpp"
-
-namespace VOM {
-namespace ACL {
-
-template <>
-l2_list::event_handler::event_handler()
-{
- OM::register_listener(this);
- inspect::register_handler({ "l2-acl-list" }, "L2 ACL lists", this);
-}
-
-template <>
-void
-l2_list::event_handler::handle_populate(const client_db::key_t& key)
-{
- /* hack to get this function instantiated */
- m_evh.order();
-
- /*
- * dump VPP Bridge domains
- */
- std::shared_ptr<list_cmds::l2_dump_cmd> cmd =
- std::make_shared<list_cmds::l2_dump_cmd>();
-
- HW::enqueue(cmd);
- HW::write();
-
- for (auto& record : *cmd) {
- auto& payload = record.get_payload();
-
- const handle_t hdl(payload.acl_index);
- l2_list acl(hdl, std::string(reinterpret_cast<const char*>(payload.tag)));
-
- for (unsigned int ii = 0; ii < payload.count; ii++) {
- const route::prefix_t pfx(payload.r[ii].is_ipv6,
- payload.r[ii].src_ip_addr,
- payload.r[ii].src_ip_prefix_len);
- l2_rule rule(ii, action_t::from_int(payload.r[ii].is_permit), pfx,
- { payload.r[ii].src_mac }, { payload.r[ii].src_mac_mask });
-
- acl.insert(rule);
- }
- VOM_LOG(log_level_t::DEBUG) << "dump: " << acl.to_string();
-
- /*
- * Write each of the discovered ACLs into the OM,
- * but disable the HW Command q whilst we do, so that no
- * commands are sent to VPP
- */
- OM::commit(key, acl);
- }
-}
-
-template <>
-void
-l2_list::event_handler::show(std::ostream& os)
-{
- db_dump(m_db, os);
-}
-
-template <>
-l3_list::event_handler::event_handler()
-{
- OM::register_listener(this);
- inspect::register_handler({ "l3-acl-list" }, "L3 ACL lists", this);
-}
-
-template <>
-void
-l3_list::event_handler::handle_populate(const client_db::key_t& key)
-{
- /* hack to get this function instantiated */
- m_evh.order();
-
- /*
- * dump L3 ACLs Bridge domains
- */
- std::shared_ptr<list_cmds::l3_dump_cmd> cmd =
- std::make_shared<list_cmds::l3_dump_cmd>();
-
- HW::enqueue(cmd);
- HW::write();
-
- for (auto& record : *cmd) {
- auto& payload = record.get_payload();
-
- const handle_t hdl(payload.acl_index);
- l3_list acl(hdl, std::string(reinterpret_cast<const char*>(payload.tag)));
-
- for (unsigned int ii = 0; ii < payload.count; ii++) {
- const route::prefix_t src(payload.r[ii].is_ipv6,
- payload.r[ii].src_ip_addr,
- payload.r[ii].src_ip_prefix_len);
- const route::prefix_t dst(payload.r[ii].is_ipv6,
- payload.r[ii].dst_ip_addr,
- payload.r[ii].dst_ip_prefix_len);
- l3_rule rule(ii, action_t::from_int(payload.r[ii].is_permit), src, dst);
-
- rule.set_proto(payload.r[ii].proto);
- rule.set_src_from_port(payload.r[ii].srcport_or_icmptype_first);
- rule.set_src_to_port(payload.r[ii].srcport_or_icmptype_last);
- rule.set_dst_from_port(payload.r[ii].dstport_or_icmpcode_first);
- rule.set_dst_to_port(payload.r[ii].dstport_or_icmpcode_last);
- rule.set_tcp_flags_mask(payload.r[ii].tcp_flags_mask);
- rule.set_tcp_flags_value(payload.r[ii].tcp_flags_value);
-
- acl.insert(rule);
- }
- VOM_LOG(log_level_t::DEBUG) << "dump: " << acl.to_string();
-
- /*
- * Write each of the discovered ACLs into the OM,
- * but disable the HW Command q whilst we do, so that no
- * commands are sent to VPP
- */
- OM::commit(key, acl);
- }
-}
-
-template <>
-void
-l3_list::event_handler::show(std::ostream& os)
-{
- db_dump(m_db, os);
-}
-
-template <>
-void
-l3_list::update(const l3_list& obj)
-{
- /*
- * always update the instance with the latest rule set
- */
- if (rc_t::OK != m_hdl.rc() || obj.m_rules != m_rules) {
- HW::enqueue(new list_cmds::l3_update_cmd(m_hdl, m_key, m_rules));
- }
- /*
- * We don't, can't, read the priority from VPP,
- * so the is equals check above does not include the priorty.
- * but we save it now.
- */
- m_rules = obj.m_rules;
-}
-template <>
-void
-l2_list::update(const l2_list& obj)
-{
- /*
- * always update the instance with the latest rule set
- */
- if (rc_t::OK != m_hdl.rc() || obj.m_rules != m_rules) {
- HW::enqueue(new list_cmds::l2_update_cmd(m_hdl, m_key, m_rules));
- }
- /*
- * We don't, can't, read the priority from VPP,
- * so the is equals check above does not include the priorty.
- * but we save it now.
- */
- m_rules = obj.m_rules;
-}
-/**
- * Sweep/reap the object if still stale
- */
-template <>
-void
-l3_list::sweep(void)
-{
- if (m_hdl) {
- HW::enqueue(new list_cmds::l3_delete_cmd(m_hdl));
- }
- HW::write();
-}
-template <>
-void
-l2_list::sweep(void)
-{
- if (m_hdl) {
- HW::enqueue(new list_cmds::l2_delete_cmd(m_hdl));
- }
- HW::write();
-}
-
-/**
- * Replay the objects state to HW
- */
-template <>
-void
-l3_list::replay(void)
-{
- if (m_hdl) {
- m_hdl.data().reset();
- HW::enqueue(new list_cmds::l3_update_cmd(m_hdl, m_key, m_rules));
- }
-}
-template <>
-void
-l2_list::replay(void)
-{
- if (m_hdl) {
- m_hdl.data().reset();
- HW::enqueue(new list_cmds::l2_update_cmd(m_hdl, m_key, m_rules));
- }
-}
-
-}; // namespace ACL
-}; // namespace VOM
-
-/*
- * fd.io coding-style-patch-verification: ON
- *
- * Local Variables:
- * eval: (c-set-style "mozilla")
- * End:
- */
Code Review / vpp.git / blobdiff