Reflexive ACL support on ICMP 18/10418/2
authorSteve Shin <jonshin@cisco.com>
Tue, 6 Feb 2018 00:44:19 +0000 (16:44 -0800)
committerDamjan Marion <dmarion.lists@gmail.com>
Tue, 6 Feb 2018 12:29:37 +0000 (12:29 +0000)
commitbbd41cd5da7b8db76a5faed22c061358c147f191
tree0857e50c9eb662c95de3f1118b52abbb4361dc6f
parent7d25415a9384d4c3d786d0c1ae5c0fcff3112acd
Reflexive ACL support on ICMP

Normally session keys are generated by mirroring the packets sent.
ICMP message type should be used and inverted for the stateful ACL.

Supported ICMP messages with this patch:
 - ICMPv4: Echo/Timestamp/Information/Address Mask requests
 - ICMPv6: Echo request/Node Information Queury

The invmap & valid_new tables can be modified to make any other
ICMP messages to be reflexive ACL.

Change-Id: Ia47b08b79fe0a5b1f7a995af78de3763d275dbd9
Signed-off-by: Steve Shin <jonshin@cisco.com>
src/plugins/acl/fa_node.c