summaryrefslogtreecommitdiffstats
path: root/src/plugins/acl/fa_node.h
AgeCommit message (Expand)AuthorFilesLines
2019-02-14Add -fno-common compile optionBenoît Ganne1-1/+1
2018-11-20acl-plugin: performance optimizations for established connectionsAndrew Yourtchenko1-0/+9
2018-11-05acl-plugin: 5-tuple parse: get rid of memcpy and move to flags vs. bitfieldsAndrew Yourtchenko1-6/+18
2018-10-24acl-plugin: introduce a format function for l4 session keyAndrew Yourtchenko1-0/+11
2018-09-25acl-plugin: optimize session idle timer checksAndrew Yourtchenko1-0/+6
2018-06-20acl-plugin: acl-as-a-service: VPP-1248: fix the error if exports.h included i...Andrew Yourtchenko1-5/+4
2018-06-14acl-plugin: use 16_8 bihash for IPv4 sessions and 40_8 bihash for IPv6 sessionsAndrew Yourtchenko1-2/+11
2018-06-13acl-plugin: change the src/dst L3 info in 5tuple struct to be always contiguo...Andrew Yourtchenko1-2/+13
2018-06-02acl-plugin: multicore: session management fixesAndrew Yourtchenko1-3/+8
2018-05-26acl-plugin: create forward and return sessions in lieu of making a special pe...Andrew Yourtchenko1-2/+10
2018-03-30acl-plugin: implement an optional session reclassification when ACL is (re-)a...Andrew Yourtchenko1-1/+7
2018-03-22acl-plugin: implement ACL lookup contexts for "ACL as a service" use by other...Andrew Yourtchenko1-3/+8
2018-02-08acl-plugin: an elog-based tracing implementation for troubleshooting the conn...Andrew Yourtchenko1-0/+117
2017-12-20acl-plugin: add a debug CLI to print 5-tuple structure in human readable form...Andrew Yourtchenko1-0/+1
2017-08-22acl-plugin: Recreate the bihash_40_8.h in the proper placeAndrew Yourtchenko1-1/+1
2017-08-18acl-plugin: time out the sessions created by main thread too (VPP-948)Andrew Yourtchenko1-0/+4
2017-08-03acl-plugin: multicore: CSIT c100k 2-core stateful ACL test does not pass (VPP...Andrew Yourtchenko1-0/+3
2017-06-19acl-plugin: bihash-based ACL lookupAndrew Yourtchenko1-1/+6
2017-06-15acl-plugin: store sessions in a single hash table instead of a per-interfaceAndrew Yourtchenko1-1/+1
2017-06-07acl-plugin: make the ACL plugin multicore-capableAndrew Yourtchenko1-8/+68
2017-05-07Avoid active connection prevent timeout of idle conns after itAndrew Yourtchenko1-1/+2
2017-04-06acl-plugin: make the IPv4/IPv6 non-first fragment handling in line with ACL (...Andrew Yourtchenko1-3/+5
2017-03-21ACL plugin 1.2Andrew Yourtchenko1-0/+99
an class="o">= self.vapi.ipsec_backend_dump() self.assert_equal(len(d), 2, "number of ipsec backends in dump") self.assert_equal(d[0].protocol, self.vpp_ah_protocol, "ipsec protocol in dump entry") self.assert_equal(d[0].index, 0, "index in dump entry") self.assert_equal(d[0].active, 1, "active flag in dump entry") self.assert_equal(d[1].protocol, self.vpp_esp_protocol, "ipsec protocol in dump entry") self.assert_equal(d[1].index, 0, "index in dump entry") self.assert_equal(d[1].active, 1, "active flag in dump entry") def test_select_valid_backend(self): """ select valid backend """ self.vapi.ipsec_select_backend(self.vpp_ah_protocol, 0) self.vapi.ipsec_select_backend(self.vpp_esp_protocol, 0) def test_select_invalid_backend(self): """ select invalid backend """ with self.vapi.assert_negative_api_retval(): self.vapi.ipsec_select_backend(self.vpp_ah_protocol, 200) with self.vapi.assert_negative_api_retval(): self.vapi.ipsec_select_backend(self.vpp_esp_protocol, 200) def test_select_backend_in_use(self): """ attempt to change backend while sad configured """ params = self.ipv4_params addr_type = params.addr_type is_ipv6 = params.is_ipv6 scapy_tun_sa_id = params.scapy_tun_sa_id scapy_tun_spi = params.scapy_tun_spi auth_algo_vpp_id = params.auth_algo_vpp_id auth_key = params.auth_key crypt_algo_vpp_id = params.crypt_algo_vpp_id crypt_key = params.crypt_key self.vapi.ipsec_sad_entry_add_del(scapy_tun_sa_id, scapy_tun_spi, auth_algo_vpp_id, auth_key, crypt_algo_vpp_id, crypt_key, self.vpp_ah_protocol, self.pg0.local_addr[addr_type], self.pg0.remote_addr[addr_type]) with self.vapi.assert_negative_api_retval(): self.vapi.ipsec_select_backend( protocol=self.vpp_ah_protocol, index=0) self.vapi.ipsec_sad_entry_add_del(scapy_tun_sa_id, scapy_tun_spi, auth_algo_vpp_id, auth_key, crypt_algo_vpp_id, crypt_key, self.vpp_ah_protocol, self.pg0.local_addr[addr_type], self.pg0.remote_addr[addr_type], is_add=0) self.vapi.ipsec_select_backend( protocol=self.vpp_ah_protocol, index=0) if __name__ == '__main__': unittest.main(testRunner=VppTestRunner)