/* * Copyright (c) 2017 Cisco and/or its affiliates. * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at: * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "vom/acl_list.hpp" #include "vom/acl_list_cmds.hpp" #include "vom/logger.hpp" #include "vom/singular_db_funcs.hpp" namespace VOM { namespace ACL { template <> l2_list::event_handler::event_handler() { OM::register_listener(this); inspect::register_handler({ "l2-acl-list" }, "L2 ACL lists", this); } template <> void l2_list::event_handler::handle_populate(const client_db::key_t& key) { /* hack to get this function instantiated */ m_evh.order(); /* * dump VPP Bridge domains */ std::shared_ptr cmd = std::make_shared(); HW::enqueue(cmd); HW::write(); for (auto& record : *cmd) { auto& payload = record.get_payload(); const handle_t hdl(payload.acl_index); l2_list acl(hdl, std::string(reinterpret_cast(payload.tag))); for (unsigned int ii = 0; ii < payload.count; ii++) { const route::prefix_t pfx(payload.r[ii].is_ipv6, payload.r[ii].src_ip_addr, payload.r[ii].src_ip_prefix_len); l2_rule rule(ii, action_t::from_int(payload.r[ii].is_permit), pfx, { payload.r[ii].src_mac }, { payload.r[ii].src_mac_mask }); acl.insert(rule); } VOM_LOG(log_level_t::DEBUG) << "dump: " << acl.to_string(); /* * Write each of the discovered ACLs into the OM, * but disable the HW Command q whilst we do, so that no * commands are sent to VPP */ OM::commit(key, acl); } } template <> void l2_list::event_handler::show(std::ostream& os) { db_dump(m_db, os); } template <> l3_list::event_handler::event_handler() { OM::register_listener(this); inspect::register_handler({ "l3-acl-list" }, "L3 ACL lists", this); } template <> void l3_list::event_handler::handle_populate(const client_db::key_t& key) { /* hack to get this function instantiated */ m_evh.order(); /* * dump L3 ACLs Bridge domains */ std::shared_ptr cmd = std::make_shared(); HW::enqueue(cmd); HW::write(); for (auto& record : *cmd) { auto& payload = record.get_payload(); const handle_t hdl(payload.acl_index); l3_list acl(hdl, std::string(reinterpret_cast(payload.tag))); for (unsigned int ii = 0; ii < payload.count; ii++) { const route::prefix_t src(payload.r[ii].is_ipv6, payload.r[ii].src_ip_addr, payload.r[ii].src_ip_prefix_len); const route::prefix_t dst(payload.r[ii].is_ipv6, payload.r[ii].dst_ip_addr, payload.r[ii].dst_ip_prefix_len); l3_rule rule(ii, action_t::from_int(payload.r[ii].is_permit), src, dst); rule.set_proto(payload.r[ii].proto); rule.set_src_from_port(payload.r[ii].srcport_or_icmptype_first); rule.set_src_to_port(payload.r[ii].srcport_or_icmptype_last); rule.set_dst_from_port(payload.r[ii].dstport_or_icmpcode_first); rule.set_dst_to_port(payload.r[ii].dstport_or_icmpcode_last); rule.set_tcp_flags_mask(payload.r[ii].tcp_flags_mask); rule.set_tcp_flags_value(payload.r[ii].tcp_flags_value); acl.insert(rule); } VOM_LOG(log_level_t::DEBUG) << "dump: " << acl.to_string(); /* * Write each of the discovered ACLs into the OM, * but disable the HW Command q whilst we do, so that no * commands are sent to VPP */ OM::commit(key, acl); } } template <> void l3_list::event_handler::show(std::ostream& os) { db_dump(m_db, os); } template <> void l3_list::update(const l3_list& obj) { /* * always update the instance with the latest rule set */ if (rc_t::OK != m_hdl.rc() || obj.m_rules != m_rules) { HW::enqueue(new list_cmds::l3_update_cmd(m_hdl, m_key, m_rules)); } /* * We don't, can't, read the priority from VPP, * so the is equals check above does not include the priorty. * but we save it now. */ m_rules = obj.m_rules; } template <> void l2_list::update(const l2_list& obj) { /* * always update the instance with the latest rule set */ if (rc_t::OK != m_hdl.rc() || obj.m_rules != m_rules) { HW::enqueue(new list_cmds::l2_update_cmd(m_hdl, m_key, m_rules)); } /* * We don't, can't, read the priority from VPP, * so the is equals check above does not include the priorty. * but we save it now. */ m_rules = obj.m_rules; } /** * Sweep/reap the object if still stale */ template <> void l3_list::sweep(void) { if (m_hdl) { HW::enqueue(new list_cmds::l3_delete_cmd(m_hdl)); } HW::write(); } template <> void l2_list::sweep(void) { if (m_hdl) { HW::enqueue(new list_cmds::l2_delete_cmd(m_hdl)); } HW::write(); } /** * Replay the objects state to HW */ template <> void l3_list::replay(void) { if (m_hdl) { m_hdl.data().reset(); HW::enqueue(new list_cmds::l3_update_cmd(m_hdl, m_key, m_rules)); } } template <> void l2_list::replay(void) { if (m_hdl) { m_hdl.data().reset(); HW::enqueue(new list_cmds::l2_update_cmd(m_hdl, m_key, m_rules)); } } }; // namespace ACL }; // namespace VOM /* * fd.io coding-style-patch-verification: ON * * Local Variables: * eval: (c-set-style "mozilla") * End: */