summaryrefslogtreecommitdiffstats
path: root/src
AgeCommit message (Collapse)AuthorFilesLines
2025-01-09hsa: proxying UDP in HTTP/1.1Matus Fabian9-149/+545
Type: feature Change-Id: Ic0ff9b9bfbad9fbc602fbcec0d8906cd21d63a2c Signed-off-by: Matus Fabian <matfabia@cisco.com>
2025-01-08vlib: update input node counts based on stateMonendra Singh Kushwaha1-0/+7
Type: fix Change-Id: I09497ae8d6a685324f8c7d9e0b3208a3ec465f0e Signed-off-by: Monendra Singh Kushwaha <kmonendra@marvell.com>
2025-01-08octeon: fix compilation for octeonMonendra Singh Kushwaha2-5/+4
This patch adapts new changes introduced in crypto framework as part of 0cf4eef7. Type: fix fixes: 0cf4eef7 Change-Id: I41a17c9b340f54014c9d2ae21546ec39ccef3f43 Signed-off-by: Monendra Singh Kushwaha <kmonendra@marvell.com>
2025-01-08build: add vpp-crypto-engines to debian/control.inVratko Polak1-0/+8
Crypto engines have been moved into a new component, but the component needs Debian packaging information. Type: fix Fixes: 0cf4eef73a4c1bd2831a4618af50939a2aab01c6 Change-Id: I041284f91be4cdb16d5a4771b518dd99571efa99 Signed-off-by: Vratko Polak <vrpolak@cisco.com>
2025-01-08ipsec: fix spd fast path single match compare for ipv6Piotr Bronowski1-15/+91
Fast path match single compare (the last step of policy matching in spd fast path) is only implemented for IPv4 addresses. This change adds support to also do a single match on IPv6 addresses. Type: fix Change-Id: I5aeb6e1e9afccfd2b2082e26502c5b7e9a8b2d4c Signed-off-by: Piotr Bronowski <piotrx.bronowski@intel.com> Signed-off-by: Vinayak Udandkar <vinayakx.udandkar@intel.com>
2025-01-08vcl: fix vls wrk index on forkFlorin Coras1-3/+6
Type: fix Change-Id: If634dac31fd54466428db0726ac441a1247985b8 Signed-off-by: Florin Coras <fcoras@cisco.com>
2025-01-08tests: reduce sleep interval in ikev2 sa rekey testIvan Ivanets7-1/+214
Type: test The sleep interval for this test is set to 0.1 seconds instead of the default 2 seconds. This change is necessary because the test verifies the expiration of old IPsec SAs (self.fail("old IPsec SA not expired")) within a strict timeframe. A longer sleep interval, such as 2 seconds, would significantly delay the loop iterations, reducing the granularity of checks for SA expiration and increasing the risk of false failures. By setting the sleep interval to 0.1 seconds: - The test can perform frequent checks for the status of IPsec SAs - It reduces the likelihood of the test prematurely failing Change-Id: I92ac3de0f33838620b51083d240043e62f37c490 Signed-off-by: Ivan Ivanets <iivanets@cisco.com>
2025-01-07vcl: support pre/post cb before mq waitFlorin Coras6-55/+283
Allow vls to register cb functions with vcl pre/post mq sleep. These can be used to drop/reacquire locks prior/after waiting on vcl mq events. This then allows multi-thread, as opposed to multi-worker, applications to share sessions between threads without deadlocking, e.g., multiple threads trying to read/write/close non-blocking sessions. Caveat: connects still need to be improved. Type: improvement Change-Id: I589aa9dfd0553b0fad54f02ed16c3cda9761a83d Signed-off-by: Florin Coras <fcoras@cisco.com> Signed-off-by: Dave Wallace <dwallacelf@gmail.com>
2025-01-07vppinfra: fix float rounding in format functionPierre Pfister1-5/+6
The current VPP formating for floats tries to round number to the closest value (depending on the number of requested digits), but fails to do so when the last printed digit is 9 (because carries are hard...). This commits fixes this by adding 0.5 * 10^n_fraction_digits to the value and then ignoring digits past the printed ones. Note that when the number is exactly midway, like 9.5, the value is rounded up, as this seems to be the clib behavior as well. Type: fix Change-Id: I03ce04ea6a24b84eeffd548d3f7bd306c58ce36d Signed-off-by: Pierre Pfister <ppfister@cisco.com>
2025-01-05vppinfra: export full symbol set from serialize.cDave Barach1-102/+102
Needed for an out-of-tree plugin under development Type: improvement Change-Id: Ie37f847607616d7f3f5de67550bef17f2afee17f Signed-off-by: Dave Barach <dave@barachs.net>
2024-12-30session: proxy session migration fixMatus Fabian3-19/+52
Type: fix Change-Id: I487ee4e69d8885f46d7a4af2c66a710da66108c5 Signed-off-by: Matus Fabian <matfabia@cisco.com>
2024-12-27vppinfra: fix time range conversion off-by-1sDave Barach1-3/+3
Type: fix Change-Id: I869e657744e9bba81994ad426731a08e5f1bcad7 Signed-off-by: Dave Barach <dave@barachs.net>
2024-12-23session: add auto sdlSteven Luong17-35/+1378
New CLI to enable/disable auto-sdl (requires session enable rt-backend sdl) auto-sdl <enable|disable> [threshold <n>] [remove-timeout <t>] threshold is defined as the number of packets before the SDL entry is created to deny the source. remove-timeout is defined as the duration to remove the SDL entry which was created earlier. Type: feature Change-Id: I513094a59663970beae33257006c652674643764 Signed-off-by: Steven Luong <sluong@cisco.com>
2024-12-23hsa: http connect proxy fixMatus Fabian2-16/+35
Send rpc evt from ao thread to po thread so http response is generated on correct thread. Type: fix Change-Id: I3b9a651a1935e5b623033902f9cf9ec1daf05617 Signed-off-by: Matus Fabian <matfabia@cisco.com>
2024-12-21nsim: fix output feature nodeFlorin Coras3-9/+34
Interface tx nodes want frames with scalar data populated by output nodes. This is not supported by nsim output feature. To avoid reimplementing output node logic and/or future incompatibilities, recirculate buffers through interface output after tagging. Type: fix Signed-off-by: Florin Coras <fcoras@cisco.com> Change-Id: Ib8865798d8e7dc0d2f34b3e13ce29b683e490ceb
2024-12-18hsa: http client honor configured timeoutFlorin Coras1-2/+3
Type: fix Signed-off-by: Florin Coras <fcoras@cisco.com> Change-Id: I87cc6d2ba1a07751359c7276fe096eeae4e30a2e
2024-12-18hsa: fix http client connect failuresFlorin Coras1-2/+2
Type: fix Signed-off-by: Florin Coras <fcoras@cisco.com> Change-Id: Ie8b4ba2cfd2c7fc1e27d2a2eb763b31417bc0743
2024-12-18crypto: move crypto engines outside of pluginsDamjan Marion24-305/+497
This is first step in process of making crypto engine binaries less dependant on specific VPP version. Type: improvement Change-Id: Ib08135688be409049b660e2b2ac435578b63be65 Signed-off-by: Damjan Marion <dmarion@me.com>
2024-12-18dns: cli support enable dns and config server addrfenglei1-0/+81
Type: improvement cli support enable dns node and config name server addr Change-Id: I4fcef28876b916bd5eac026f20afb0b0dda38fa2 Signed-off-by: fenglei <1579628578@qq.com>
2024-12-16docs: add examples for BPF trace filteringHadi Rayan Al-Sandid1-1/+64
Type: docs Change-Id: Ia2f9f94ebdf55d435559f6615da61efb1d2f9616 Signed-off-by: Hadi Rayan Al-Sandid <halsandi@cisco.com>
2024-12-16policer: Add return_dsc for policer_add_command_fnfenglei1-2/+5
Type: improvement add return_desc for except failure Change-Id: Idcec0f8833fc264f66d2e0a784ece2a62c425263 Signed-off-by: fenglei <1579628578@qq.com>
2024-12-16policer: fix policer_input coredumpfenglei1-0/+3
Type: fix policer_input didn't check policer_index will lead to coredump when refer to cm->counters[thread_index] variable, cm->counters[thread_index] is null. Change-Id: I8c6ef6c4c2bc96f23ab806327cb6f179c958cee2 Signed-off-by: fenglei <1579628578@qq.com>
2024-12-16papi: vpp_papi asyncio supportOle Troan2-1/+769
An asyncio version of the VPP Python API. A API call returns a awaitable future. In comparision to the legacy API, the extra message receive thread is no needed. from vpp_papi.vpp_papi_async import VPPApiClient async def process_events(event_queue): while True: event = await event_queue.get() print(f"*** Processing event: {event}") if event is None: return async def test(): vpp = VPPApiClient() event_queue = asyncio.Queue() event_processor_task = asyncio.create_task(process_events(event_queue)) rv = await vpp.connect("foobar", event_queue) assert rv == 0 rv = await vpp.api.show_version() rv = await vpp.api.sw_interface_dump() await event_queue.put(None) # Send sentinel to stop the event processor await asyncio.gather(event_processor_task) # Wait for them to finish await vpp.disconnect() Example of sending multiple requests and gather replies asynchronously async def test_bulk(): futures = [] for i in range(n): futures.append(vpp.api.show_version()) rv = await asyncio.gather(*futures) def main(): asyncio.run(test()) Type: feature Change-Id: Ie6bcb483930216c21a45658b72e87ba4c46f43ad Signed-off-by: Ole Troan <otroan@employees.org>
2024-12-16nat: add clear session for nat44-edOle Troan1-0/+22
Type: improvement Change-Id: Ie8568999821f6dd5025fd5343670a8969a3e634e Signed-off-by: Ole Troan <otroan@employees.org>
2024-12-16map: map_domain_dump fails for empty tagOle Troan1-6/+13
Fix API to handle map_domain_dump for domains with an empty tag. Type: fix Change-Id: Ie065c5863538d5851cd8f8907400255f51a2e90f Signed-off-by: Ole Troan <otroan@employees.org>
2024-12-12vapi: remove directory name from include guardsOleksandr Hnatiuk1-1/+1
Script vapi_c_gen.py uses full paths to source files to generate include guards in files with `.vapi.h` extension. This makes the content of header files depend on build directory which causes reproducibility issues (cannot get identical build output when building in a different directory). Commit 4c64b6edc86f7 fixes this for .hpp files, but seems to forget about .h files. Use its fix for these as well. Type: fix Change-Id: Ida638c7b4630fac1f6d968a9203a409648bef55c Signed-off-by: Oleksandr Hnatiuk <ohnatiuk@cisco.com>
2024-12-12build: use VPP_BUILD_TOPDIR from environment if setOleksandr Hnatiuk1-1/+2
Commit 3d14f036199d added the possibility to use `VPP_BUILD_USER` and `VPP_BUILD_HOST` from environment (if they are set) to avoid reproducibility issues by hard-coding such data in the build system. However, there's no way to provide VPP_BUILD_TOPDIR externally. Add this feature to improve binary reproducibility. Type: improvement Change-Id: I3a7ee47d75af9635b636fa3750a3688314eaa60d Signed-off-by: Oleksandr Hnatiuk <ohnatiuk@cisco.com>
2024-12-12armada: fix feature arc for secondary interfacesGuillaume Solignac1-1/+1
Fixes an issue preventing a feature to be configured on a secondary interface. Type: fix Signed-off-by: Guillaume Solignac <gsoligna@cisco.com> Change-Id: I8ecd80988d22291013cd0addae6dc25043aaea98
2024-12-12pg: misc improvements and fixesBenoît Ganne6-80/+174
1) pg can typically injects packets in ethernet-input, ip4-input or ip6-input. Make sure offload offsets are correctly set for ip4-input and ip6-input. 2) add hw-addr support for ethernet mode (only available through cli) 3) refactor pg creation code to improve the readability by using data structure pg_interface_args_t 4) fix the pg input and output traces to use headers according to pg interface mode 5) introduce pg interface flags i.e. checksum, gso, gro Type: improvement Change-Id: Iffed502e9c6357d7ef8e8a72217867e8297236aa Signed-off-by: Benoît Ganne <bganne@cisco.com> Signed-off-by: Mohsin Kazmi <sykazmi@cisco.com>
2024-12-12session: disable fifo tuning on app closeFlorin Coras1-0/+3
Type: fix Change-Id: Id6aa410a75356ece1d114a2970f70cf32203997f Signed-off-by: Florin Coras <fcoras@cisco.com>
2024-12-11bpf_trace_filter: allow pcap filtering without classifierHadi Rayan Al-Sandid3-13/+12
Type: improvement Change-Id: I7ca860dbee0d0a24b7f00943142d8c878ed90e80 Signed-off-by: Hadi Rayan Al-Sandid <halsandi@cisco.com>
2024-12-10http: fix http_free_header_tableMatus Fabian1-1/+0
Type: fix Change-Id: I014aebc84d0c219cc0c99120e9cd51fcc520a41c Signed-off-by: Matus Fabian <matfabia@cisco.com>
2024-12-10ip: add enable ip4 apiOle Troan4-0/+78
A philosophical question. Do an interface have to have an IPv4 address to process IPv4 packets? For ICMP error generation it's sufficient that it has an address available on the node. More concretely this patch is to allow an extern DHCP client to process IP packets before it configures an address on the interface, without having to have an node early in the ip4-unicast feature-arc like ip4-dhcp-client-detect to intercept the packets. Type: improvement Change-Id: I780c579eec28ba564cf8417fbcc87e7a7876fdd2 Signed-off-by: Ole Troan <otroan@employees.org>
2024-12-10http: connection upgrade mechanismMatus Fabian5-197/+415
Handle "Connection" and "Upgrade" headers in http transport layer which are used to create a tunnel for some other protocol on the same connection. Type: improvement Change-Id: Icf5479f36fbcc7259b157eaad957211be5ea2aae Signed-off-by: Matus Fabian <matfabia@cisco.com>
2024-12-09cnat: add support for icmp tracerouteMohsin Kazmi1-33/+154
Type: improvement Signed-off-by: Mohsin Kazmi <sykazmi@cisco.com> Change-Id: Ief1e97d03b7a934547add35ac3ed1f93f2499a20
2024-12-08session: add ip4-fib-id and ip6-fib-id to app ns CLISteven Luong3-11/+158
Problem The API app_namespace_add_del allows specifying ip4_fib_id and ip6_fib_id. But the CLI does not. It only allows interface. Interface binding may change after the application namespace is created and there is no registration for the callback when the interface binding changes. Fix Add ip4-fib-id and ip6-fib-id to app ns CLI. When both interface and fib-id's are specified, interface takes precedence. When interface is not specified, either ip4-fib-id or ip6-fib-id or both ip4 and ip6 fib-id's may be specified. If only ip4-fib-id is specified, ip6 is disable for this particular app namespace. If only ip6-fib-id is specified, ip4 is disable for this namespace. When the interface binding changes to different vrf and the application namespace was created via interface option, we delete the application namespace and recreate the application namespace with the new interface binding. Notice when the application namespace is removed, all session rules and sdl rules previously created for the deleted application namespace will be deleted. However, if the fib table/session table was shared by another namespace, the other namespace will still contain the session rules and sdl rules. Type: improvement Change-Id: I76eb30da1ed8a39d06694c1e66d0675bf03516bf Signed-off-by: Steven Luong <sluong@cisco.com>
2024-12-08session: enhance display for show appSteven Luong4-10/+72
Display segment manager information for show app <index> verbose Mark segment manager as listener if it is a listener segment. Type: improvement Change-Id: I8d91f4c2ed5b8f39620f2c8b06950c0e7ee2225e Signed-off-by: Steven Luong <sluong@cisco.com>
2024-12-08http: http_decap_udp_payload_datagram fixMatus Fabian2-3/+31
Properly handle incomplete capsule. Type: fix Change-Id: Ied7fca861f02e401451beaff09e612bcf471d8e0 Signed-off-by: Matus Fabian <matfabia@cisco.com>
2024-12-08vcl: fix ldp getsockopt tcp_info length checkFlorin Coras1-3/+7
netinet/tcp.h and linux/tcp.h have different lenghts but overlap. LDP uses the former while iperf the latter. Accept both lengths for now as we do not support exposing tcp metrics via ldp. Type: improvement Change-Id: I13a149d68715ed9451773630a3595c09c421aa29 Signed-off-by: Florin Coras <fcoras@cisco.com>
2024-12-07vcl: improve handling of thread cancelation in vlsFlorin Coras1-0/+7
Meant for multi-threaded applications that share a vls and vcl worker. Disable thread cancelation on thread new thread detection and add a new pthread cancelation point in vls_mt_mq_lock Type: improvement Change-Id: I21b16ee7c6a5ec31b8f6363325cc7ffa463c7b5c Signed-off-by: Florin Coras <fcoras@cisco.com>
2024-12-07tls: add async processing supportVarun Rapelly5-70/+783
Adds support for tls async processing using OpenSSL. Adds new CLI command to configure OpenSSL TLS configurations used by OpenSSL context and session. New CLI format is: tls openssl set-tls [record-size <size>] [record-split-size <size>] [max-pipelines <size>] Sets default values to below TLS configuration parameters: - first_seg_size: 32MB - add_seg_size: 256MB Type: feature Signed-off-by: Varun Rapelly <vrapelly@marvell.com> Change-Id: I990be31fced9e258fdb036f5751cd67594b0bce7
2024-12-07vcl: fix epoll wait assertFlorin Coras1-1/+1
Type: fix Found by Lucas. Signed-off-by: Florin Coras <fcoras@cisco.com> Change-Id: I3e10d3a9f40ef28cb9bda58f199a04dfc3e41d27
2024-12-06misc: move ppp to a pluginJoel Ahn17-40/+104
Type: refactor Move PPP folder under vnet to the plugin folder, and modify some of path of the #inlude<header> to the new path. Add a plugin.c file to register a plugin. Resolve ip4_input and ip6_input's dependency on PPP functions by moving those calls to PPP's initialization. Resolve osi's inter-plugin dependency on PPP by having it retrieve the function pointer Add ppp to the list of valid spelling words JIRA: VPP-2052 Change-Id: I1a26ef0663a91857d13f7d87a3bb14bc38893194 Signed-off-by: Joel Ahn <joeahn@cisco.com>
2024-12-06session: clean up session table when re-adding an existing application namespaceSteven Luong1-0/+13
The app ns semantics allows the same app ns to be re-added with different interface. For example, app ns add id blue secret 1 if tap0 app ns add id blue secret 1 if tap1 If tap0 is bound to table 0 and tap1 is bound to tap1, we need to clean up the existing session table and possibly allocate a new session table for the app ns. Type: fix Change-Id: I566d621081b7cdbd7d0c481fda53953b39c26001 Signed-off-by: Steven Luong <sluong@cisco.com>
2024-12-06memif: add num pkts received/sent per queueDau Do3-3/+69
Add memif stats per queue for performance tuning. Type: improvement Change-Id: Ifacc80c0adfe92075d91179857c8956d1cbf3a70 Signed-off-by: Dau Do <daudo@yahoo.com>
2024-12-05hsa: fix proxy udp issueAdrian Villin2-4/+5
- when testing multithreaded proxy with udp iperf, iperf wouldn't connect -> made client_sep a vector so multiple transport protocols can be saved Type: fix Change-Id: I91936bd3214f40deb914792c02783112ae59942c Signed-off-by: Adrian Villin <avillin@cisco.com>
2024-12-05tap: update tap_flagsAdrian Villin1-0/+1
- added TAP_API_FLAG_CONSISTENT_QP = 256 Type: improvement Change-Id: I57d95503395baf265c29d48a92bd69347f0a7333 Signed-off-by: Adrian Villin <avillin@cisco.com>
2024-12-05crypto: add config option to adjust crypto sw scheduler queue sizeDau Do2-37/+73
Type: improvement Change-Id: I63c16365a0d4a26b8ecb05bde81ad7b532df50a0 Signed-off-by: Dau Do <daudo@yahoo.com>
2024-12-04dev: include limits.h for PATH_MAXRenato Botelho do Couto1-0/+1
Type: fix Change-Id: I66607164b1552011b39808bafc8e02b5a24f883c Signed-off-by: Renato Botelho do Couto <renato@netgate.com>
2024-12-02vcl: fix poll supportFlorin Coras3-2/+24
Type: fix Change-Id: I827f19d893153277baba3c2d0efde5f2827eb0ff Signed-off-by: Florin Coras <fcoras@cisco.com>