aboutsummaryrefslogtreecommitdiffstats
path: root/src/plugins
AgeCommit message (Collapse)AuthorFilesLines
2025-01-20sflow: initial checkinPim van Pelt16-0/+3562
This is an sFlow dataplane plugin that can sample 1-in-N packets from device-input, copying them to a FIFO queue and servicing that queue from a main process which formats them as Netlink PSAMPLEs, to be picked up by a popular sidecar agent called host-sflow. Type: feature Change-Id: Ic03456472e53309678f182dc8f74d3c81fb619e6 Signed-off-by: neil.mckee@inmon.com Signed-off-by: pim@ipng.nl
2025-01-20af_packet: worker thread call vlib_log coredumpfenglei1-3/+14
Type: fix -When deleting a veth pair interface in linux, vpp's call to af_packet_fd_error will cause it to hang because it's a worker thread. Change-Id: I3dc9018e7e492ccbdf0f59381f9bbbfd5c1c88a5 Signed-off-by: fenglei <1579628578@qq.com>
2025-01-17snort: support multiple instances per interfaceAgathiyan Bragadeesh5-153/+531
Implements load balancing between snort instances via flow hash. New CLI commands have been made to support these changes: snort attach instance <name1> [instance <name2> ... ] interface <ifname> [input|output|inout] snort attach all-instances interface <ifname> [input|output|inout] snort detach instance <name1> interface <ifname> snort detach all-instances interface <ifname> The output of "show snort interfaces" has an extra column to show the direction of each attachment: interface instances direction Ethernet0: snort1 inout snort2 inout snort3 inout Ethernet1: snort1 input snort3 output To maintain backwards compatibility for the snort api, the snort_interface_get api endpoint only returns one of the attached instances and the snort_interface_detach endpoint detaches all attached instances. Type: improvement Signed-off-by: Agathiyan Bragadeesh <agathiyan.bragadeesh2@arm.com> Change-Id: I6b7c26c203496d6a1dba244620907f28c04bb478
2025-01-17linux-cp: add the drain backArtem Glazychev1-0/+10
Type: fix Change-Id: I60338a8c901cf5baf4974ce572f17e70116877df Signed-off-by: Artem Glazychev <glazychev@mts.ru>
2025-01-16http: fix sending error responses to rejected requests by server appsSemir Sionek1-7/+18
Plugins such as http_static sometimes reject requests without reading all of the body. http_static in that case sends an error response and closes the connection. But the error response cannot go out due to the connection state being HTTP_REQ_STATE_TRANSPORT_IO_MORE_DATA. With this change, we make http_app_tx_callback give a response like that special treatment, allowing it to go out. Type: fix Change-Id: I72ae74b869183f5d5921837f6ac9c52f0efc7598 Signed-off-by: Semir Sionek <ssionek@cisco.com>
2025-01-16linux-cp: fix segfault while receiving nl messagesArtem Glazychev1-11/+2
- check nl socket before receiving messages - we don't need extra callback after adding an lcp pair because we start draining messages (due to epoll) right after opening socket Type: fix Change-Id: I0ecb03b758f066662015fd6c6b9d3c48cb520c0d Signed-off-by: Artem Glazychev <glazychev@mts.ru>
2025-01-16crypto: combine sync and async algos and opsDamjan Marion3-38/+19
Type: improvement Change-Id: I4d507b105e5b5ba7dd68d373c7f1ab156a9fc9f1 Signed-off-by: Damjan Marion <damarion@cisco.com>
2025-01-15octeon: add compatibility checkMonendra Singh Kushwaha1-0/+9
This patch adds compatibility check for OCTEON model in plugin. Type: refactor Change-Id: Id583a2f42b8f66f7e045f6cf9176125680e9a16f Signed-off-by: Monendra Singh Kushwaha <kmonendra@marvell.com>
2025-01-15octeon: update octeon roc versionMonendra Singh Kushwaha1-4/+5
Type: feature Change-Id: I9f3044aec29a611d4735001ff1943772b7035711 Signed-off-by: Monendra Singh Kushwaha <kmonendra@marvell.com>
2025-01-14http_static: read body only for POST requestsSemir Sionek1-2/+2
Type: improvement Change-Id: Id863f59d04d8e6f22c886e079367d06908b8b24b Signed-off-by: Semir Sionek <ssionek@cisco.com>
2025-01-13crypto: remove AEAD opt typesDamjan Marion1-201/+179
Type: improvement Change-Id: I32ccf1d58a34bc6f64946ffd711dbd2b4f5864f6 Signed-off-by: Damjan Marion <damarion@cisco.com>
2025-01-12octeon: fix octeon build issueMonendra Singh Kushwaha1-4/+3
This patch adapts new changes introduced in crypto framework as part of 6676d951. Type: fix fixes: 6676d951 Change-Id: I7bbe8d87250e072b2891c0eedee1e14642fab4bc Signed-off-by: Monendra Singh Kushwaha <kmonendra@marvell.com>
2025-01-10crypto: key storage improvementsDamjan Marion3-6/+6
Type: improvement Change-Id: I49d8415ce1d64dc797a0cc43f5382daeaddbe11a Signed-off-by: Damjan Marion <damarion@cisco.com>
2025-01-09hsa: proxying UDP in HTTP/1.1Matus Fabian9-149/+545
Type: feature Change-Id: Ic0ff9b9bfbad9fbc602fbcec0d8906cd21d63a2c Signed-off-by: Matus Fabian <matfabia@cisco.com>
2025-01-08octeon: fix compilation for octeonMonendra Singh Kushwaha2-5/+4
This patch adapts new changes introduced in crypto framework as part of 0cf4eef7. Type: fix fixes: 0cf4eef7 Change-Id: I41a17c9b340f54014c9d2ae21546ec39ccef3f43 Signed-off-by: Monendra Singh Kushwaha <kmonendra@marvell.com>
2025-01-08tests: reduce sleep interval in ikev2 sa rekey testIvan Ivanets7-1/+214
Type: test The sleep interval for this test is set to 0.1 seconds instead of the default 2 seconds. This change is necessary because the test verifies the expiration of old IPsec SAs (self.fail("old IPsec SA not expired")) within a strict timeframe. A longer sleep interval, such as 2 seconds, would significantly delay the loop iterations, reducing the granularity of checks for SA expiration and increasing the risk of false failures. By setting the sleep interval to 0.1 seconds: - The test can perform frequent checks for the status of IPsec SAs - It reduces the likelihood of the test prematurely failing Change-Id: I92ac3de0f33838620b51083d240043e62f37c490 Signed-off-by: Ivan Ivanets <iivanets@cisco.com>
2024-12-30session: proxy session migration fixMatus Fabian1-13/+40
Type: fix Change-Id: I487ee4e69d8885f46d7a4af2c66a710da66108c5 Signed-off-by: Matus Fabian <matfabia@cisco.com>
2024-12-23session: add auto sdlSteven Luong9-2/+1180
New CLI to enable/disable auto-sdl (requires session enable rt-backend sdl) auto-sdl <enable|disable> [threshold <n>] [remove-timeout <t>] threshold is defined as the number of packets before the SDL entry is created to deny the source. remove-timeout is defined as the duration to remove the SDL entry which was created earlier. Type: feature Change-Id: I513094a59663970beae33257006c652674643764 Signed-off-by: Steven Luong <sluong@cisco.com>
2024-12-23hsa: http connect proxy fixMatus Fabian2-16/+35
Send rpc evt from ao thread to po thread so http response is generated on correct thread. Type: fix Change-Id: I3b9a651a1935e5b623033902f9cf9ec1daf05617 Signed-off-by: Matus Fabian <matfabia@cisco.com>
2024-12-21nsim: fix output feature nodeFlorin Coras3-9/+34
Interface tx nodes want frames with scalar data populated by output nodes. This is not supported by nsim output feature. To avoid reimplementing output node logic and/or future incompatibilities, recirculate buffers through interface output after tagging. Type: fix Signed-off-by: Florin Coras <fcoras@cisco.com> Change-Id: Ib8865798d8e7dc0d2f34b3e13ce29b683e490ceb
2024-12-18hsa: http client honor configured timeoutFlorin Coras1-2/+3
Type: fix Signed-off-by: Florin Coras <fcoras@cisco.com> Change-Id: I87cc6d2ba1a07751359c7276fe096eeae4e30a2e
2024-12-18hsa: fix http client connect failuresFlorin Coras1-2/+2
Type: fix Signed-off-by: Florin Coras <fcoras@cisco.com> Change-Id: Ie8b4ba2cfd2c7fc1e27d2a2eb763b31417bc0743
2024-12-18crypto: move crypto engines outside of pluginsDamjan Marion18-2768/+5
This is first step in process of making crypto engine binaries less dependant on specific VPP version. Type: improvement Change-Id: Ib08135688be409049b660e2b2ac435578b63be65 Signed-off-by: Damjan Marion <dmarion@me.com>
2024-12-18dns: cli support enable dns and config server addrfenglei1-0/+81
Type: improvement cli support enable dns node and config name server addr Change-Id: I4fcef28876b916bd5eac026f20afb0b0dda38fa2 Signed-off-by: fenglei <1579628578@qq.com>
2024-12-16docs: add examples for BPF trace filteringHadi Rayan Al-Sandid1-1/+64
Type: docs Change-Id: Ia2f9f94ebdf55d435559f6615da61efb1d2f9616 Signed-off-by: Hadi Rayan Al-Sandid <halsandi@cisco.com>
2024-12-16nat: add clear session for nat44-edOle Troan1-0/+22
Type: improvement Change-Id: Ie8568999821f6dd5025fd5343670a8969a3e634e Signed-off-by: Ole Troan <otroan@employees.org>
2024-12-16map: map_domain_dump fails for empty tagOle Troan1-6/+13
Fix API to handle map_domain_dump for domains with an empty tag. Type: fix Change-Id: Ie065c5863538d5851cd8f8907400255f51a2e90f Signed-off-by: Ole Troan <otroan@employees.org>
2024-12-10http: fix http_free_header_tableMatus Fabian1-1/+0
Type: fix Change-Id: I014aebc84d0c219cc0c99120e9cd51fcc520a41c Signed-off-by: Matus Fabian <matfabia@cisco.com>
2024-12-10http: connection upgrade mechanismMatus Fabian5-197/+415
Handle "Connection" and "Upgrade" headers in http transport layer which are used to create a tunnel for some other protocol on the same connection. Type: improvement Change-Id: Icf5479f36fbcc7259b157eaad957211be5ea2aae Signed-off-by: Matus Fabian <matfabia@cisco.com>
2024-12-09cnat: add support for icmp tracerouteMohsin Kazmi1-33/+154
Type: improvement Signed-off-by: Mohsin Kazmi <sykazmi@cisco.com> Change-Id: Ief1e97d03b7a934547add35ac3ed1f93f2499a20
2024-12-08http: http_decap_udp_payload_datagram fixMatus Fabian2-3/+31
Properly handle incomplete capsule. Type: fix Change-Id: Ied7fca861f02e401451beaff09e612bcf471d8e0 Signed-off-by: Matus Fabian <matfabia@cisco.com>
2024-12-07tls: add async processing supportVarun Rapelly3-68/+764
Adds support for tls async processing using OpenSSL. Adds new CLI command to configure OpenSSL TLS configurations used by OpenSSL context and session. New CLI format is: tls openssl set-tls [record-size <size>] [record-split-size <size>] [max-pipelines <size>] Sets default values to below TLS configuration parameters: - first_seg_size: 32MB - add_seg_size: 256MB Type: feature Signed-off-by: Varun Rapelly <vrapelly@marvell.com> Change-Id: I990be31fced9e258fdb036f5751cd67594b0bce7
2024-12-06misc: move ppp to a pluginJoel Ahn13-6/+1198
Type: refactor Move PPP folder under vnet to the plugin folder, and modify some of path of the #inlude<header> to the new path. Add a plugin.c file to register a plugin. Resolve ip4_input and ip6_input's dependency on PPP functions by moving those calls to PPP's initialization. Resolve osi's inter-plugin dependency on PPP by having it retrieve the function pointer Add ppp to the list of valid spelling words JIRA: VPP-2052 Change-Id: I1a26ef0663a91857d13f7d87a3bb14bc38893194 Signed-off-by: Joel Ahn <joeahn@cisco.com>
2024-12-06memif: add num pkts received/sent per queueDau Do3-3/+69
Add memif stats per queue for performance tuning. Type: improvement Change-Id: Ifacc80c0adfe92075d91179857c8956d1cbf3a70 Signed-off-by: Dau Do <daudo@yahoo.com>
2024-12-05hsa: fix proxy udp issueAdrian Villin2-4/+5
- when testing multithreaded proxy with udp iperf, iperf wouldn't connect -> made client_sep a vector so multiple transport protocols can be saved Type: fix Change-Id: I91936bd3214f40deb914792c02783112ae59942c Signed-off-by: Adrian Villin <avillin@cisco.com>
2024-12-05crypto: add config option to adjust crypto sw scheduler queue sizeDau Do2-37/+73
Type: improvement Change-Id: I63c16365a0d4a26b8ecb05bde81ad7b532df50a0 Signed-off-by: Dau Do <daudo@yahoo.com>
2024-11-26build: add SHA256 checksums for downloaded dependenciesAndrew Yourtchenko1-3/+3
- Replace md5sum with sha256sum for verification of downloaded external and optional dependencies. Type: improvement Change-Id: I52c96098d3cfd4c1eaf599da44a7b859ad24f1a4 Signed-off-by: Andrew Yourtchenko <ayourtch@gmail.com> Signed-off-by: Dave Wallace <dwallacelf@gmail.com>
2024-11-21hsa: added request repeating to http clientAdrian Villin1-124/+238
- added request repeating (repeat <count>|duration <seconds>) - added basic stats Type: feature Change-Id: Ic69eac8029eac31ea5ace5b5c0da1ce7a3543ac0 Signed-off-by: Adrian Villin <avillin@cisco.com>
2024-11-19http: track requests as independent objectsMatus Fabian2-182/+203
Type: improvement Change-Id: I6c1808a82f61c71f34eab12ae5f99cca5fee8854 Signed-off-by: Matus Fabian <matfabia@cisco.com>
2024-11-19http: HTTP Datagrams and the Capsule ProtocolMatus Fabian2-0/+265
Type: improvement Change-Id: I45de69172eec54578ceebe87f655701830af1a3d Signed-off-by: Matus Fabian <matfabia@cisco.com>
2024-11-19quic: update to quicly version 0.1.5Dave Wallace4-22/+16
Type: improvement Change-Id: I7c9c91a9c4d3ac2499e42eedda0a5d395bdf5912 Signed-off-by: Dave Wallace <dwallacelf@gmail.com>
2024-11-14hsa: configurable connect-proxy idle timeoutMatus Fabian2-1/+13
Added cli option idle-timeout to specify connect-proxy timeout for idle connections, default value 10 minutes. Type: improvement Change-Id: I3ced83f28d3aabcc70fbd3ca1ef10b8a0336ffb1 Signed-off-by: Matus Fabian <matfabia@cisco.com>
2024-11-14http: state machine improvementMatus Fabian3-233/+235
Split in two, one for rx and second for tx, which is more suitable for http tunnels. Updated state names too, some of them were bit confusing. Type: improvement Change-Id: I2310deaa49196819f9d8147a5d9af188465dbd65 Signed-off-by: Matus Fabian <matfabia@cisco.com>
2024-11-14mss_clamp: export functionsMaxime Peim1-2/+2
Type: fix Change-Id: If2b3e580c038064eca4edcdfd2fd432c8b813a6d Signed-off-by: Maxime Peim <mpeim@cisco.com>
2024-11-13http_static: api add keepalive-timeoutMatus Fabian5-23/+38
Type: improvement Change-Id: Ia1e0dcf562fd1538794542207ac2cad97d168c6c Signed-off-by: Matus Fabian <matfabia@cisco.com>
2024-11-13octeon: set rss flowkey after mac updateMonendra Singh Kushwaha1-0/+20
Type: fix Change-Id: I1b087b9e1e7a17ca545f960e896ca48266cdcc93 Signed-off-by: Monendra Singh Kushwaha <kmonendra@marvell.com>
2024-11-13tracenode: fix pcap capture if packet is also tracedBenoît Ganne1-7/+3
Type: fix Change-Id: Ifc259d87a086f686ce273f543632bd122b506c31 Signed-off-by: Benoît Ganne <bganne@cisco.com>
2024-11-13octeon: fix compilation for octeonMonendra Singh Kushwaha3-12/+15
This patch adapts new changes introduced in vnet/dev framework as part of 61e287b9. Type: fix fixes: 61e287b9 Change-Id: I816ee9b80fca188ee799e704d08aaf3515bd57c0 Signed-off-by: Monendra Singh Kushwaha <kmonendra@marvell.com>
2024-11-11octeon: add support for hmac_md5 and chachapolyKishor Dhanawade2-1/+39
Added support for following algorithms - aes-cbc hmac_md5 - chacha20_poly1305 Type: feature Signed-off-by: Kishor Dhanawade <kdhanawade@marvell.com> Signed-off-by: Nithinsen Kaithakadan <nkaithakadan@marvell.com> Change-Id: I44702483dad8182d5f15aed39c6bb42f1ca15d3c
2024-11-07hsa: proxy fix assert placementFlorin Coras1-3/+4
Assert fifo refcnt on the right thread Type: fix Signed-off-by: Florin Coras <fcoras@cisco.com> Change-Id: If6edf9969f5c70533a1e9c6358c022c556c4ed81