Fix source address reachability check for ip6 local packets 66/5066/6
authorAkshayaNadahalli <anadahal@cisco.com>
Tue, 7 Feb 2017 18:29:54 +0000 (23:59 +0530)
committerNeale Ranns <nranns@cisco.com>
Wed, 8 Feb 2017 10:21:00 +0000 (10:21 +0000)
commit8ea6d7153b053f1b9bf837ef3a927136f44b41fd
tree7622a7dc6266edba33c9d36910114d06e6440cc3
parente4ad8cce6cf6e5d50b0ec101a4f5ab5d510ad374
Fix source address reachability check for ip6 local packets

Currently ip6 local check fails with error - source lookup miss if
route to source of packet is over a dpo object such as load balance -
recurssive route, tunnel adj - GRE, SR etc.
So unless packet source is of a directly connected neibhor or has
route with both interface and nexthop specified, it will be dropped.
Fix is to check urpf list and if at least one link exists in the list,
then allow packets to be processed, else drop.

Change-Id: Id426311bb63bab506754a79409c602fdb6d0f190
Signed-off-by: AkshayaNadahalli <anadahal@cisco.com>
src/vnet/fib/ip6_fib.h
src/vnet/ip/ip6_forward.c