ip: add classifier-based ACLs support on ip punt 49/33949/2
authorBenoît Ganne <bganne@cisco.com>
Thu, 30 Sep 2021 11:41:00 +0000 (13:41 +0200)
committerNeale Ranns <neale@graphiant.com>
Wed, 6 Oct 2021 11:58:43 +0000 (11:58 +0000)
commitabb2a42239430a1a67b259b931848a9195402d1a
treeebc0c6ed52424f0bea5130090a00b96053e4b451
parent7b3a3df263c7a5bf549f350553cbd9bce7ee40b3
ip: add classifier-based ACLs support on ip punt

This feature allows one to add classifier-based ACLs on packets punted
from the ip infra, eg. to only whitelist specific sender(s).

Type: feature

Change-Id: Idab37b188583efbca980038875fc3e540cb2e880
Signed-off-by: Benoît Ganne <bganne@cisco.com>
src/vnet/classify/classify.api
src/vnet/classify/classify_api.c
src/vnet/classify/in_out_acl.c
src/vnet/classify/in_out_acl.h
src/vnet/ip/ip_in_out_acl.c
test/template_classifier.py
test/test_classifier.py