acl-plugin: implement ACL lookup contexts for "ACL as a service" use by other plugins 74/11274/7
authorAndrew Yourtchenko <ayourtch@gmail.com>
Wed, 21 Mar 2018 18:53:39 +0000 (19:53 +0100)
committerDamjan Marion <dmarion.lists@gmail.com>
Thu, 22 Mar 2018 20:50:09 +0000 (20:50 +0000)
commit94f9a6de3f706243d138e05b63fef1d5c8174f6c
tree5e50ccf062229f3d60b9ec656c6ca53cae0c5455
parent8ced6e1a53d6a828debe7dc2396c7eb7d6866e4a
acl-plugin: implement ACL lookup contexts for "ACL as a service" use by other plugins

This code implements the functionality required for other plugins wishing
to perform ACL lookups in the contexts of their choice, rather than only
in the context of the interface in/out.

The lookups are the stateless ACLs - there is no concept of "direction"
within the context, hence no concept of "connection" either.

The plugins need to include the

The file acl_lookup_context.md has more info.

Change-Id: I91ba97428cc92b24d1517e808dc2fd8e56ea2f8d
Signed-off-by: Andrew Yourtchenko <ayourtch@gmail.com>
15 files changed:
src/plugins/acl.am
src/plugins/acl/acl.c
src/plugins/acl/acl.h
src/plugins/acl/acl_lookup_context.md [new file with mode: 0644]
src/plugins/acl/elog_acl_trace.h [new file with mode: 0644]
src/plugins/acl/exports.h [new file with mode: 0644]
src/plugins/acl/fa_node.c
src/plugins/acl/fa_node.h
src/plugins/acl/hash_lookup.c
src/plugins/acl/hash_lookup.h
src/plugins/acl/hash_lookup_types.h
src/plugins/acl/lookup_context.c [new file with mode: 0644]
src/plugins/acl/lookup_context.h [new file with mode: 0644]
src/plugins/acl/public_inlines.h [new file with mode: 0644]
src/vnet/api_errno.h