summaryrefslogtreecommitdiffstats
path: root/src/vnet/session/session_lookup.h
diff options
context:
space:
mode:
authorFlorin Coras <fcoras@cisco.com>2017-11-19 18:06:58 -0800
committerDave Wallace <dwallacelf@gmail.com>2017-11-20 16:15:34 +0000
commitdff48db0782444125f68cab14d91e7bb4109286a (patch)
tree1c30045b625d7161a53512395b591f98d3196854 /src/vnet/session/session_lookup.h
parent45b485099d8bdf5985e9869bc8221852073f9369 (diff)
session/tcp: filtering improvements
- make allow action explicit (-3) - add session lookup is_filtered return flag that is set if lookup hit a deny filter - change tcp logic to drop filtered packets when punting is enabled Change-Id: Ic38f294424663a4e108439b7571511f46f8e0be1 Signed-off-by: Florin Coras <fcoras@cisco.com>
Diffstat (limited to 'src/vnet/session/session_lookup.h')
-rw-r--r--src/vnet/session/session_lookup.h6
1 files changed, 4 insertions, 2 deletions
diff --git a/src/vnet/session/session_lookup.h b/src/vnet/session/session_lookup.h
index 00ef19fec5a..1bdf6d17fcb 100644
--- a/src/vnet/session/session_lookup.h
+++ b/src/vnet/session/session_lookup.h
@@ -32,7 +32,8 @@ transport_connection_t *session_lookup_connection_wt4 (u32 fib_index,
ip4_address_t * rmt,
u16 lcl_port,
u16 rmt_port, u8 proto,
- u32 thread_index);
+ u32 thread_index,
+ u8 * is_filtered);
transport_connection_t *session_lookup_connection4 (u32 fib_index,
ip4_address_t * lcl,
ip4_address_t * rmt,
@@ -43,7 +44,8 @@ transport_connection_t *session_lookup_connection_wt6 (u32 fib_index,
ip6_address_t * rmt,
u16 lcl_port,
u16 rmt_port, u8 proto,
- u32 thread_index);
+ u32 thread_index,
+ u8 * is_filtered);
transport_connection_t *session_lookup_connection6 (u32 fib_index,
ip6_address_t * lcl,
ip6_address_t * rmt,