summaryrefslogtreecommitdiffstats
path: root/src/plugins/wireguard/wireguard.api
diff options
context:
space:
mode:
authorArtem Glazychev <artem.glazychev@xored.com>2020-08-31 17:12:30 +0700
committerDamjan Marion <dmarion@me.com>2020-09-09 11:57:48 +0000
commitedca1325cf296bd0f5ff422fc12de2ce7a7bad88 (patch)
treefb12d12bd4193c5b2c7559d98aba9dc5d2f14e85 /src/plugins/wireguard/wireguard.api
parentef80ad6bff03e3cc35950de0e15e4821ef3f7c04 (diff)
wireguard: initial implementation of wireguard protocol
Type: feature The main information about plugin you can see in README.md vpp# wireguard ? wireguard create wireguard create listen-port <port> private-key <key> src <IP> [generate-key] wireguard delete wireguard delete <interface> wireguard peer add wireguard peer add <wg_int> public-key <pub_key_other>endpoint <ip4_dst> allowed-ip <prefix>dst-port [port_dst] persistent-keepalive [keepalive_interval] wireguard peer remove wireguard peer remove <index> Change-Id: I85eb0bfc033ccfb2045696398d8a108b1c64b8d9 Signed-off-by: Artem Glazychev <artem.glazychev@xored.com> Signed-off-by: Damjan Marion <damarion@cisco.com> Signed-off-by: Jim Thompson <jim@netgate.com> Signed-off-by: Neale Ranns <nranns@cisco.com> Signed-off-by: Damjan Marion <damarion@cisco.com>
Diffstat (limited to 'src/plugins/wireguard/wireguard.api')
-rwxr-xr-xsrc/plugins/wireguard/wireguard.api162
1 files changed, 162 insertions, 0 deletions
diff --git a/src/plugins/wireguard/wireguard.api b/src/plugins/wireguard/wireguard.api
new file mode 100755
index 00000000000..195755e5c43
--- /dev/null
+++ b/src/plugins/wireguard/wireguard.api
@@ -0,0 +1,162 @@
+/* Hey Emacs use -*- mode: C -*- */
+/*
+ * Copyright (c) 2020 Doc.ai and/or its affiliates.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+option version = "0.1.0";
+
+import "vnet/interface_types.api";
+import "vnet/ip/ip_types.api";
+
+/** \brief Create wireguard interface
+ @param client_index - opaque cookie to identify the sender
+ @param context - sender context, to match reply w/ request
+ @param private_key - private key in binary format of this device
+ @param port - port of this device
+ @param src_ip - packet sent through this interface us this
+ address as the IP source.
+*/
+typedef wireguard_interface
+{
+ u32 user_instance [default=0xffffffff];
+ vl_api_interface_index_t sw_if_index;
+ u8 private_key[32];
+ u16 port;
+ vl_api_address_t src_ip;
+};
+
+/** \brief Create an Wireguard interface
+ */
+define wireguard_interface_create {
+ u32 client_index;
+ u32 context;
+ vl_api_wireguard_interface_t interface;
+ bool generate_key;
+};
+
+/** \brief Add Wireguard interface interface response
+ @param context - sender context, to match reply w/ request
+ @param retval - return status
+ @param sw_if_index - sw_if_index of new interface (for successful add)
+*/
+define wireguard_interface_create_reply
+{
+ u32 context;
+ i32 retval;
+ vl_api_interface_index_t sw_if_index;
+};
+
+autoreply define wireguard_interface_delete
+{
+ u32 client_index;
+ u32 context;
+ vl_api_interface_index_t sw_if_index;
+};
+
+define wireguard_interface_dump
+{
+ u32 client_index;
+ u32 context;
+ bool show_private_key;
+ vl_api_interface_index_t sw_if_index;
+};
+
+define wireguard_interface_details
+{
+ u32 context;
+ vl_api_wireguard_interface_t interface;
+};
+
+enum wireguard_peer_flags : u8
+{
+ WIREGUARD_PEER_STATUS_DEAD = 0x1,
+};
+
+/** \brief Create new peer
+ @param public_key - public key (in binary format) of destination peer
+ @param port - destination port
+ @param table_id - The IP table in which 'endpoint' is reachable
+ @param endpoint - destination ip
+ @param allowed_ip - allowed incoming ip tunnel
+ @param tun_sw_if_index - tunnel interface
+ @param persistent_keepalive - keepalive packet timeout
+*/
+typedef wireguard_peer
+{
+ u8 public_key[32];
+ u16 port;
+ u16 persistent_keepalive;
+ u32 table_id;
+ vl_api_address_t endpoint;
+ vl_api_interface_index_t sw_if_index;
+ vl_api_wireguard_peer_flags_t flags;
+ u8 n_allowed_ips;
+ vl_api_prefix_t allowed_ips[n_allowed_ips];
+};
+
+/** \brief Create new peer
+ @param client_index - opaque cookie to identify the sender
+ @param context - sender context, to match reply w/ request
+ @param peer - peer to create
+*/
+define wireguard_peer_add
+{
+ u32 client_index;
+ u32 context;
+ vl_api_wireguard_peer_t peer;
+};
+define wireguard_peer_add_reply
+{
+ u32 context;
+ i32 retval;
+ u32 peer_index;
+};
+
+/** \brief Remove peer by public_key
+ @param client_index - opaque cookie to identify the sender
+ @param context - sender context, to match reply w/ request
+ @param public_key
+*/
+autoreply define wireguard_peer_remove
+{
+ u32 client_index;
+ u32 context;
+ u32 peer_index;
+};
+
+/** \brief Dump all peers
+ @param client_index - opaque cookie to identify the sender
+ @param context - sender context, to match reply w/ request
+*/
+define wireguard_peers_dump {
+ u32 client_index;
+ u32 context;
+};
+
+/** \brief Dump peers response
+ @param context - sender context, to match reply w/ request
+ @param is_dead - is peer valid yet
+ @param public_key - peer public_key
+ @param ip4_address - ip4 endpoint address
+*/
+define wireguard_peers_details {
+ u32 context;
+ vl_api_wireguard_peer_t peer;
+};
+
+/*
+ * Local Variables:
+ * eval: (c-set-style "gnu")
+ * End:
+ */