reassembly: prevent long chain attack

[vpp.git] / src / vnet / ip / ip.api

diff --git a/src/vnet/ip/ip.api b/src/vnet/ip/ip.api
index b67e2e5..afb0960 100644 (file)
--- a/src/vnet/ip/ip.api
+++ b/src/vnet/ip/ip.api
@@ -20,7 +20,7 @@
     called through a shared memory interface. 
 */
 
-option version = "2.0.0";
+option version = "2.0.1";
 import "vnet/ip/ip_types.api";
 import "vnet/fib/fib_types.api";
 import "vnet/ethernet/ethernet_types.api";
@@ -114,7 +114,6 @@ enum ip_neighbor_flags
   IP_API_NEIGHBOR_FLAG_NONE = 0,
   IP_API_NEIGHBOR_FLAG_STATIC = 0x1,
   IP_API_NEIGHBOR_FLAG_NO_FIB_ENTRY = 0x2,
-  IP_API_NEIGHBOR_FLAG_FIX_ME_OLE = 0x3,
 };
 
 /** \brief IP neighbor
@@ -1086,6 +1085,7 @@ autoreply define ip_reassembly_set
   u32 context;
   u32 timeout_ms;
   u32 max_reassemblies;
+  u32 max_reassembly_length;
   u32 expire_walk_interval_ms;
   u8 is_ip6;
 };
@@ -1103,6 +1103,7 @@ define ip_reassembly_get_reply
   i32 retval;
   u32 timeout_ms;
   u32 max_reassemblies;
+  u32 max_reassembly_length;
   u32 expire_walk_interval_ms;
   u8 is_ip6;
 };