diff options
| author |   Florin Coras <fcoras@cisco.com> | 2017-10-17 00:03:13 -0700 |
|---|---|---|
| committer |   Dave Barach <openvpp@barachs.net> | 2017-10-28 19:56:39 +0000 |
| commit | 1c7104514cd40d2377caca36cf40c13b791bc5aa (patch) | |
| tree | 2b95bb11dd8658e826ad8cb3fe4d399adbab7e01 /src/vnet/session/session_table.h | |
| parent | ae5a02f8235b9a243df09b42e932ae5f238e366b (diff) | |
session: rules tables
This introduces 5-tuple lookup tables that may be used to implement
custom session layer actions at connection establishment time (session
layer perspective).
The rules table build mask-match-action lookup trees that for a given
5-tuple key return the action for the first longest match. If rules
overlap, ordering is established by tuple longest match with the
following descending priority: remote ip, local ip, remote port, local
port.
At this time, the only match action supported is to forward packets to
the application identified by the action.
Change-Id: Icbade6fac720fa3979820d50cd7d6137f8b635c3
Signed-off-by: Florin Coras <fcoras@cisco.com>
Diffstat (limited to 'src/vnet/session/session_table.h')
| -rw-r--r-- | src/vnet/session/session_table.h | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/src/vnet/session/session_table.h b/src/vnet/session/session_table.h index 5e0564043f3..6588a43aa14 100644 --- a/src/vnet/session/session_table.h +++ b/src/vnet/session/session_table.h @@ -18,6 +18,7 @@ #include <vppinfra/bihash_16_8.h> #include <vppinfra/bihash_48_8.h> +#include <vnet/session/session_rules_table.h> typedef struct _session_lookup_table { @@ -32,6 +33,11 @@ typedef struct _session_lookup_table */ clib_bihash_16_8_t v4_half_open_hash; clib_bihash_48_8_t v6_half_open_hash; + + /** + * Per fib proto and transport proto session rules tables + */ + session_rules_table_t session_rules; } session_table_t; #define SESSION_TABLE_INVALID_INDEX ((u32)~0) |