summaryrefslogtreecommitdiffstats
path: root/src/vnet/ipsec/ipsec_punt.c
blob: a08231ab2995c4f51157d55f7f26fbbb48ae61d8 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
/*
 * esp_decrypt.c : IPSec ESP decrypt node
 *
 * Copyright (c) 2015 Cisco and/or its affiliates.
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at:
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

#include <vnet/ipsec/ipsec.h>
#include <vnet/ipsec/ipsec_punt.h>
#include <vnet/ipsec/ipsec_tun.h>

static vlib_punt_hdl_t punt_hdl;

vlib_punt_reason_t ipsec_punt_reason[IPSEC_PUNT_N_REASONS];

static void
ipsec_punt_interested_listener (vlib_enable_or_disable_t action, void *data)
{
  if (action == VLIB_ENABLE)
    {
      ipsec_tun_register_nodes (AF_IP4);
      ipsec_tun_register_nodes (AF_IP6);
    }
  else
    {
      ipsec_tun_unregister_nodes (AF_IP4);
      ipsec_tun_unregister_nodes (AF_IP6);
    }
}

static clib_error_t *
ipsec_punt_init (vlib_main_t * vm)
{
  clib_error_t *error;

  if ((error = vlib_call_init_function (vm, punt_init)))
    return (error);

  punt_hdl = vlib_punt_client_register ("ipsec");

#define _(s,v)  vlib_punt_reason_alloc (punt_hdl, v,                    \
                                        ipsec_punt_interested_listener, \
                                        NULL,                           \
                                        &ipsec_punt_reason[IPSEC_PUNT_##s]);
  foreach_ipsec_punt_reason
#undef _
    return (error);
}

VLIB_INIT_FUNCTION (ipsec_punt_init);


/*
 * fd.io coding-style-patch-verification: ON
 *
 * Local Variables:
 * eval: (c-set-style "gnu")
 * End:
 */
/span>)) lookup_cast_t; #define LOOKUP_CASTS { \ [LOOKUP_UNICAST] = "unicast", \ [LOOKUP_MULTICAST] = "multicast", \ } /** * A representation of an MPLS label for imposition in the data-path */ typedef struct lookup_dpo_t { /** * required for pool_get_aligned. * memebers used in the switch path come first! */ CLIB_CACHE_LINE_ALIGN_MARK(cacheline0); /** * The FIB, or interface from which to get a FIB, in which to perform * the next lookup; */ fib_node_index_t lkd_fib_index; /** * The protocol of the FIB for the lookup, and hence * the protocol of the packet */ dpo_proto_t lkd_proto; /** * Switch to use src or dst address */ lookup_input_t lkd_input; /** * Switch to use the table index passed, or the table of the input interface */ lookup_table_t lkd_table; /** * Unicast of rmulticast FIB lookup */ lookup_cast_t lkd_cast; /** * Number of locks */ u16 lkd_locks; } lookup_dpo_t; extern void lookup_dpo_add_or_lock_w_fib_index(fib_node_index_t fib_index, dpo_proto_t proto, lookup_cast_t cast, lookup_input_t input, lookup_table_t table, dpo_id_t *dpo); extern void lookup_dpo_add_or_lock_w_table_id(u32 table_id, dpo_proto_t proto, lookup_cast_t cast, lookup_input_t input, lookup_table_t table, dpo_id_t *dpo); extern u8* format_lookup_dpo(u8 *s, va_list *args); /* * Encapsulation violation for fast data-path access */ extern lookup_dpo_t *lookup_dpo_pool; static inline lookup_dpo_t * lookup_dpo_get (index_t index) { return (pool_elt_at_index(lookup_dpo_pool, index)); } extern void lookup_dpo_module_init(void); #endif