diff options
| author |   Andrew Yourtchenko <ayourtch@gmail.com> | 2018-01-18 08:07:05 +0100 |
|---|---|---|
| committer |   Damjan Marion <dmarion.lists@gmail.com> | 2018-02-08 10:01:26 +0000 |
| commit | db3c480e375bd7eb22c27887590c8dca07293719 (patch) | |
| tree | 625fe9459ee775845f2c30f5168ce66e50a4503a /src/plugins/acl/acl.h | |
| parent | 1c6e5cf6905b2bd951982da9b712b13e2cb21295 (diff) | |
acl-plugin: VPP-1088: add support for egress filter in macip ACLs
This is the second patch, using the new functionality from the change 10002
in order to implement the egress filtering on the MACIP ACLs.
This adds an action "2" which means "add also egress filtering rules for this
MACIP ACL.
The reason for having the two choices is that the egress filtering really takes
care of a fairly corner case scenario, and I am not convinced that
always adding the performance cost of the egress lookup check is worth it.
Also, of course, not breaking the existing implementations is a nice plus,
too.
Change-Id: I3d7883ed45b1cdf98d7303771bcc75951dff38f0
Signed-off-by: Andrew Yourtchenko <ayourtch@gmail.com>
Diffstat (limited to 'src/plugins/acl/acl.h')
| -rw-r--r-- | src/plugins/acl/acl.h | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/plugins/acl/acl.h b/src/plugins/acl/acl.h index 41e216f089b..263867b61ff 100644 --- a/src/plugins/acl/acl.h +++ b/src/plugins/acl/acl.h @@ -116,6 +116,10 @@ typedef struct u32 ip4_table_index; u32 ip6_table_index; u32 l2_table_index; + /* outacl classifier tables */ + u32 out_ip4_table_index; + u32 out_ip6_table_index; + u32 out_l2_table_index; } macip_acl_list_t; /* |