Age | Commit message (Collapse) | Author | Files | Lines |
|
In case of low-level classfier model, single table is removed.
No change in case of ietf-acl model: whole chain of tables is removed.
Change-Id: I94ca5d3ecaf04efc35b67fb5f878cbffc0c100cc
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
Change-Id: I819f54671139081e5eb600bff3ac98cb7949eaa0
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
Current IETF-ACL implementation is using vpp-classfier.
In the future, acl implementation based on acl plugin is going to be
supported. Current implementation is going to be deprecated, then removed.
In order to switch between acl implementations, ietf-acl configuration
needs separate guice module.
After fixing nested augmentation support (HONEYCOMB-302), current
implementation can be moved to separate hc2vpp module (HONEYCOMB-308).
Change-Id: I1668c274c03f9a750654cb0f96ec328af09f89f5
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
Api hcange was introduced by https://gerrit.fd.io/r/#/c/4049/
Change-Id: If1f3a0ce301369f3e6cb5bde8553feb9dd2ed881
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
Current acl implementation uses vpp's classfier.
The vpp-acl model will be used to expose new acl api.
Change-Id: Ia1e0f7acf00e1284e92a56f6f1c7f43538d394ad
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
Timeout exported to configurable property
Change-Id: Ic095469be4d95f6726fdcabe17a6d2e4e51ba856
Signed-off-by: Jan Srnicek <jsrnicek@cisco.com>
|
|
Ipv4/6 address logic refactored to not use
InetAddresses.fromLittleEndianArray to
prevent unnecessary reverting of address arrays
after fix introduced by VPP-132.
Removed unused ***reverted variants of conversion
logic.
Tested with these plugins
- Lisp
- V3po
- Nat
Change-Id: I6a0728f8b3dffd04e2edd822ec61542216cca824
Signed-off-by: Jan Srnicek <jsrnicek@cisco.com>
|
|
Refactoring due to https://gerrit.fd.io/r/#/c/3898/
Change-Id: I3ddcc06aca0a730db9fd727a3d2b10cd085f870e
Signed-off-by: Jan Srnicek <jsrnicek@cisco.com>
|
|
Refactored setUp() method in WriteCustomizerTest
to not trigger http://errorprone.info/bugpattern/JUnit4SetUpNotRun
while used in combination with @RunWith(HoneycombTestRunner.class)
Change-Id: Iba56b39399ddd7678dda97e094e935a3f02dd22c
Signed-off-by: Jan Srnicek <jsrnicek@cisco.com>
|
|
Change-Id: I2e4a555ca8373b8bed9bf00d4a61fd59b1810bbc
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
|
|
Change-Id: I9ed339fd8c7daf1433709dcd862e64b690c5d3da
Signed-off-by: Maros Marsalek <mmarsale@cisco.com>
|
|
BD creation should go before L2 creation.
Change-Id: I155234a6d8babbf419b661db9a2fb948ada113bd
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
- change groupIds
- change packages
- update poms
Change-Id: I343c5a292a67de1dd50687870ca4ab5b7276e93e
Signed-off-by: Maros Marsalek <mmarsale@cisco.com>
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
So that they can influence whether empty data is to be considered as present
+ Move registries implementations from util to impl
+ Introduce DelegatingReader trait
+ Extend GenericReader where possible to reduce duplication
Change-Id: I5a416acd0c4eab1fbc30fcbe585719991dbe9215
Signed-off-by: Maros Marsalek <mmarsale@cisco.com>
|
|
Same as for interface addresses, these addresses must have
caching scope of their parent sub-interface
Change-Id: I31a8d123e02a99e592181c198f69a34b0be910e5
Signed-off-by: Jan Srnicek <jsrnicek@cisco.com>
|
|
Provides logic for creating scoped keys
Change-Id: I126bcb9255b4f8a3f2585f50e6e718948581e7f0
Signed-off-by: Jan Srnicek <jsrnicek@cisco.com>
|
|
Change-Id: I7e4d817bb7dfe9ccd779e59347c956233c012e4a
Signed-off-by: Maros Marsalek <mmarsale@cisco.com>
|
|
ArgumentMatchers.any() does not match null anymore,
so some of the tests has been updated.
Change-Id: I5de0fdfe87fc8e5c8ce24bfae8daeaba032195ff
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
Change-Id: I3372d4156a19157ca431cb29c23de33161f6cfc0
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
Change-Id: I7f02841d899465fd2156db0bb79fcc490cd4929f
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
Change-Id: I9a7783bf072b2e2396f0fa1a784bcb57adb689b4
Signed-off-by: Maros Marsalek <mmarsale@cisco.com>
|
|
Change-Id: Ic148b22f9bc48ff29bf67894e2cecafa29772db7
Signed-off-by: Maros Marsalek <mmarsale@cisco.com>
|
|
Change-Id: I657db9617f3477201ccd6f1a8743b1843e99ba16
Signed-off-by: Maros Marsalek <mmarsale@cisco.com>
|
|
Generated builders are not used in the runtime.
Starting from ODL boron, strings that represent union types,
are processed according to YANG RFC, that is in the order
they are specified in the "type" statement,
unitl a match is found. That makes
builders for union types obsolete.
Change-Id: If9289a0dde34f345a672103d2461a3acd00e2afd
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
Change-Id: I8b43f9a6220b90aaed5d85d60c0d2095518d6226
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
Change-Id: Iafebdc5dcc978313daf9818907fc27b2909ecc04
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
ODL does not uses builders for unions anymore.
Unused builders will be removed in subsequent commit.
Change-Id: Ib4e77fed19f591f6f0dc836d66067a2827d2e202
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
Change-Id: I2912f1265af7487ceed1be01ac489ba765311a97
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
- ip-version was mandatory only when mixing l2/l3 rules in one ACE
(vpp api limitation). It needs to be provided also in case of
ACEs that define l3 only rules (we allow mixing ip4/ip6 ACEs
in one list).
- updates postman collestion with example of L4 only acl
Change-Id: Ifb863208c21a504cd61843f7540341bc35a6174a
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
* can be used in combination with any other L2/L3 rule.
* assumes no ip options / extension headers
* provides naive implementation (vpp classfier api limitation):
every (src, dst) is mapped to single classify session.
Change-Id: Id6aa249b3e19f0aa47b9e15b5477d56bc70bee0e
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
Reflects SNAT from VPP:
- 1:1 Static IPv4 mapping
- interface in/out NAT feature management
Bonus:
- Support presence containers in infra
Change-Id: Ieb38526f83edbae5e605d5c7e39bb22bbafc50e5
Signed-off-by: Maros Marsalek <mmarsale@cisco.com>
|
|
Caching scope fixed also in specific request logic
Added test
Change-Id: Ib70a3069cf7620132ae5921ddb21b56fa2f4108b
Signed-off-by: Jan Srnicek <jsrnicek@cisco.com>
|
|
Just as e187f2bd1301a3f20d5316c5a14a99b733f07550
Change-Id: Ia9c86ef60c626f507adf62098b2dc3852932f32f
Signed-off-by: Maros Marsalek <mmarsale@cisco.com>
|
|
In case of L2 interfaces, acls are translated into
a chain of classify tables and assigned as L2 table.
In case of L3 interfaces, acls are translated into
ip4 and ip6 chains (eth only rules go to
both chains, rest - depending on ip-version).
Limitations:
- it is not possible to define L3 rule without specifying ip-version
(common header fields for IP4/IP6 have different offsets),
- eth rules on L3 interfaces are applied only to IP traffic
(vpp classfier limitation).
Change-Id: I7ca2648cabad8c6e936cf71a51e06596a42891e8
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
It was translated to version field,
but should be to protocol/next header field.
Change-Id: I0cf23fdd43246bcc559f61d97701c9153e9b3607
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
Change-Id: Ia11eacababd62f719e23af5b64b19c5227d56a45
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
- adds classify table on the end of each of the 3 chains to enforce ordering
- updates v3po.yang with default-action leaf
- updates postman collection
Change-Id: If54abec1a6516eaf87aae0e5da9382a6e5dee1f3
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
Change-Id: Ia426f855b13323369bcc7ec2cde0861421950476
Signed-off-by: Jan Srnicek <jsrnicek@cisco.com>
|
|
Sets revision date to 14.12.2016 - API freeze for HC 1.17.01
Updated models:
- lisp.yang
- v3po.yang
- vpp-vlan.yang
- pbb-types.yang
- vpp-pbb.yang
Change-Id: Ib2b962c7756748ac357141ffbc6f5bc6668c97e3
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
models/implementation refactored to work as rewrite on interfaces
Change-Id: I8ce42905ce8f183c354e718d02291aea2435110d
Signed-off-by: Jan Srnicek <jsrnicek@cisco.com>
|
|
Change-Id: Idde761d0c0c2c4d96555ef94dbdaa87fad889493
Signed-off-by: Jan Srnicek <jsrnicek@cisco.com>
|
|
- L2 only rules for L3 interfaces are not allowed by vpp
- describes other limitations of ietf-acl model implementation
Change-Id: If7e79e4bbfe3113b82e3411d9a951c409799a29f
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
Change-Id: Idbf139773441e72e47c49518235b03a71e398acf
Signed-off-by: Jan Srnicek <jsrnicek@cisco.com>
|
|
Change-Id: I6152975b31a9bf764fa9d8a4210e16e61e98d61b
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
- marks existing ACL support as ingress
- updates postman collection
Change-Id: I7ae39cb6698d9aafbe932d57725f138194b52e70
Signed-off-by: Maros Marsalek <mmarsale@cisco.com>
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
Depends on
- vpp: https://gerrit.fd.io/r/#/c/3178
- NSH: https://gerrit.fd.io/r/#/c/3181
Change-Id: I1929947ccccc453aa32552fc42942a8b24ade157
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
Change-Id: I95ea94c3a1a581753f7eb667af7aacde832c21fd
Signed-off-by: Jan Srnicek <jsrnicek@cisco.com>
|
|
Change-Id: Ifa774054646a59e39e4cc017df3be1e9e64233de
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|
|
Change-Id: I74f769c09e86f08b1753e685a134d20e801bd7da
Signed-off-by: Marek Gradzki <mgradzki@cisco.com>
|