session/tcp: filtering improvements 86/9486/4
authorFlorin Coras <fcoras@cisco.com>
Mon, 20 Nov 2017 02:06:58 +0000 (18:06 -0800)
committerDave Wallace <dwallacelf@gmail.com>
Mon, 20 Nov 2017 16:15:34 +0000 (16:15 +0000)
commitdff48db0782444125f68cab14d91e7bb4109286a
tree1c30045b625d7161a53512395b591f98d3196854
parent45b485099d8bdf5985e9869bc8221852073f9369
session/tcp: filtering improvements

- make allow action explicit (-3)
- add session lookup is_filtered return flag that is set if lookup hit a
  deny filter
- change tcp logic to drop filtered packets when punting is enabled

Change-Id: Ic38f294424663a4e108439b7571511f46f8e0be1
Signed-off-by: Florin Coras <fcoras@cisco.com>
src/vnet/session/application_namespace.c
src/vnet/session/session_lookup.c
src/vnet/session/session_lookup.h
src/vnet/session/session_rules_table.h
src/vnet/session/session_test.c
src/vnet/tcp/tcp_error.def
src/vnet/tcp/tcp_input.c
src/vnet/tcp/tcp_test.c