ip4_source_and_port_range_check.c File Reference

IPv4 Source and Port Range Checking. More...

Include dependency graph for ip4_source_and_port_range_check.c:

Go to the source code of this file.

Data Structures
struct	ip4_source_and_port_range_check_trace_t

Macros
#define	foreach_ip4_source_and_port_range_check_error

Enumerations
enum	ip4_source_and_port_range_check_error_t { IP4_SOURCE_AND_PORT_RANGE_CHECK_N_ERROR }
enum	ip4_source_and_port_range_check_next_t { IP4_SOURCE_AND_PORT_RANGE_CHECK_NEXT_DROP, IP4_SOURCE_AND_PORT_RANGE_CHECK_N_NEXT }

Functions
static u8 *	format_ip4_source_and_port_range_check_trace (u8 *s, va_list *va)
static u32	check_adj_port_range_x1 (const protocol_port_range_dpo_t *ppr_dpo, u16 dst_port, u32 next)
static protocol_port_range_dpo_t *	protocol_port_range_dpo_get (index_t index)
static uword	ip4_source_and_port_range_check_inline (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame, int is_tx)
static uword	ip4_source_and_port_range_check_rx (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
static uword	ip4_source_and_port_range_check_tx (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
int	set_ip_source_and_port_range_check (vlib_main_t *vm, u32 *fib_index, u32 sw_if_index, u32 is_add)
static clib_error_t *	set_ip_source_and_port_range_check_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
static u8 *	format_ppr_dpo (u8 *s, va_list *args)
static void	ppr_dpo_lock (dpo_id_t *dpo)
static void	ppr_dpo_unlock (dpo_id_t *dpo)
clib_error_t *	ip4_source_and_port_range_check_init (vlib_main_t *vm)
protocol_port_range_dpo_t *	protocol_port_range_dpo_alloc (void)
static int	add_port_range_adjacency (u32 fib_index, ip4_address_t *address, u32 length, u16 *low_ports, u16 *high_ports)
static int	remove_port_range_adjacency (u32 fib_index, ip4_address_t *address, u32 length, u16 *low_ports, u16 *high_ports)
int	ip6_source_and_port_range_check_add_del (ip6_address_t *address, u32 length, u32 vrf_id, u16 *low_ports, u16 *high_ports, int is_add)
int	ip4_source_and_port_range_check_add_del (ip4_address_t *address, u32 length, u32 vrf_id, u16 *low_ports, u16 *high_ports, int is_add)
static clib_error_t *	ip_source_and_port_range_check_command_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
static clib_error_t *	show_source_and_port_range_check_fn (vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)

Variables
static protocol_port_range_dpo_t *	ppr_dpo_pool
	The pool of range chack DPOs. More...
static dpo_type_t	ppr_dpo_type
	Dynamically registered DPO type. More...
vlib_node_registration_t	ip4_source_port_and_range_check_rx
	(constructor) VLIB_REGISTER_NODE (ip4_source_port_and_range_check_rx) More...
vlib_node_registration_t	ip4_source_port_and_range_check_tx
	(constructor) VLIB_REGISTER_NODE (ip4_source_port_and_range_check_tx) More...
static char *	ip4_source_and_port_range_check_error_strings []
static vlib_cli_command_t	set_interface_ip_source_and_port_range_check_command
	(constructor) VLIB_CLI_COMMAND (set_interface_ip_source_and_port_range_check_command) More...
static const dpo_vft_t	ppr_vft
static const char *const	ppr_ip4_nodes []
static const char *const *const	ppr_nodes [DPO_PROTO_NUM]
static vlib_cli_command_t	ip_source_and_port_range_check_command
	(constructor) VLIB_CLI_COMMAND (ip_source_and_port_range_check_command) More...
static vlib_cli_command_t	show_source_and_port_range_check
	(constructor) VLIB_CLI_COMMAND (show_source_and_port_range_check) More...

Detailed Description

IPv4 Source and Port Range Checking.

This file contains the source code for IPv4 source and port range checking.

Definition in file ip4_source_and_port_range_check.c.

Macro Definition Documentation

#define foreach_ip4_source_and_port_range_check_error

Value:

_(CHECK_FAIL, "ip4 source and port range check bad packets")    \
  _(CHECK_OK, "ip4 source and port range check good packets")

Definition at line 43 of file ip4_source_and_port_range_check.c.

Enumeration Type Documentation

enum ip4_source_and_port_range_check_error_t

Enumerator
IP4_SOURCE_AND_PORT_RANGE_CHECK_N_ERROR

Definition at line 47 of file ip4_source_and_port_range_check.c.

enum ip4_source_and_port_range_check_next_t

Enumerator
IP4_SOURCE_AND_PORT_RANGE_CHECK_NEXT_DROP
IP4_SOURCE_AND_PORT_RANGE_CHECK_N_NEXT

Definition at line 89 of file ip4_source_and_port_range_check.c.

Function Documentation

static int add_port_range_adjacency ( u32  fib_index, ip4_address_t *  address, u32  length, u16 *  low_ports, u16 *  high_ports  )

static

Definition at line 955 of file ip4_source_and_port_range_check.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static u32 check_adj_port_range_x1 ( const protocol_port_range_dpo_t *  ppr_dpo, u16  dst_port, u32  next  )

inlinestatic

Definition at line 97 of file ip4_source_and_port_range_check.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static u8* format_ip4_source_and_port_range_check_trace ( u8 *  s, va_list *  va  )

static

Definition at line 72 of file ip4_source_and_port_range_check.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static u8* format_ppr_dpo ( u8 *  s, va_list *  args  )

static

Definition at line 865 of file ip4_source_and_port_range_check.c.

Here is the call graph for this function:

int ip4_source_and_port_range_check_add_del	(	ip4_address_t *	address,
		u32	length,
		u32	vrf_id,
		u16 *	low_ports,
		u16 *	high_ports,
		int	is_add
	)

Definition at line 1173 of file ip4_source_and_port_range_check.c.

Here is the call graph for this function:

Here is the caller graph for this function:

clib_error_t* ip4_source_and_port_range_check_init

(

vlib_main_t *

vm

)

Definition at line 926 of file ip4_source_and_port_range_check.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static uword ip4_source_and_port_range_check_inline ( vlib_main_t *  vm, vlib_node_runtime_t *  node, vlib_frame_t *  frame, int  is_tx  )

inlinestatic

Definition at line 153 of file ip4_source_and_port_range_check.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static uword ip4_source_and_port_range_check_rx ( vlib_main_t *  vm, vlib_node_runtime_t *  node, vlib_frame_t *  frame  )

static

Definition at line 577 of file ip4_source_and_port_range_check.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static uword ip4_source_and_port_range_check_tx ( vlib_main_t *  vm, vlib_node_runtime_t *  node, vlib_frame_t *  frame  )

static

Definition at line 586 of file ip4_source_and_port_range_check.c.

Here is the call graph for this function:

int ip6_source_and_port_range_check_add_del	(	ip6_address_t *	address,
		u32	length,
		u32	vrf_id,
		u16 *	low_ports,
		u16 *	high_ports,
		int	is_add
	)

Definition at line 1163 of file ip4_source_and_port_range_check.c.

Here is the caller graph for this function:

static clib_error_t* ip_source_and_port_range_check_command_fn ( vlib_main_t *  vm, unformat_input_t *  input, vlib_cli_command_t *  cmd  )

static

Definition at line 1198 of file ip4_source_and_port_range_check.c.

Here is the call graph for this function:

static void ppr_dpo_lock ( dpo_id_t *  dpo )

static

Definition at line 901 of file ip4_source_and_port_range_check.c.

static void ppr_dpo_unlock ( dpo_id_t *  dpo )

static

Definition at line 906 of file ip4_source_and_port_range_check.c.

protocol_port_range_dpo_t* protocol_port_range_dpo_alloc

(

void

)

Definition at line 941 of file ip4_source_and_port_range_check.c.

Here is the caller graph for this function:

static protocol_port_range_dpo_t* protocol_port_range_dpo_get ( index_t  index )

inlinestatic

Definition at line 147 of file ip4_source_and_port_range_check.c.

Here is the caller graph for this function:

static int remove_port_range_adjacency ( u32  fib_index, ip4_address_t *  address, u32  length, u16 *  low_ports, u16 *  high_ports  )

static

Definition at line 1059 of file ip4_source_and_port_range_check.c.

Here is the call graph for this function:

Here is the caller graph for this function:

int set_ip_source_and_port_range_check	(	vlib_main_t *	vm,
		u32 *	fib_index,
		u32	sw_if_index,
		u32	is_add
	)

Definition at line 638 of file ip4_source_and_port_range_check.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static clib_error_t* set_ip_source_and_port_range_check_fn ( vlib_main_t *  vm, unformat_input_t *  input, vlib_cli_command_t *  cmd  )

static

Definition at line 698 of file ip4_source_and_port_range_check.c.

Here is the call graph for this function:

static clib_error_t* show_source_and_port_range_check_fn ( vlib_main_t *  vm, unformat_input_t *  input, vlib_cli_command_t *  cmd  )

static

Definition at line 1325 of file ip4_source_and_port_range_check.c.

Here is the call graph for this function:

Variable Documentation

char* ip4_source_and_port_range_check_error_strings[]

static

Initial value:

= {
#define _(sym,string) 
  foreach_ip4_source_and_port_range_check_error

}

Definition at line 55 of file ip4_source_and_port_range_check.c.

vlib_node_registration_t ip4_source_port_and_range_check_rx

Initial value:

= {
  .function = ip4_source_and_port_range_check_rx,
  .name = "ip4-source-and-port-range-check-rx",
  .vector_size = sizeof (u32),

  .n_errors = ARRAY_LEN(ip4_source_and_port_range_check_error_strings),
  .error_strings = ip4_source_and_port_range_check_error_strings,

  .n_next_nodes = IP4_SOURCE_AND_PORT_RANGE_CHECK_N_NEXT,
  .next_nodes = {
    [IP4_SOURCE_AND_PORT_RANGE_CHECK_NEXT_DROP] = "error-drop",
  },

  .format_buffer = format_ip4_header,
  .format_trace = format_ip4_source_and_port_range_check_trace,
}

(constructor) VLIB_REGISTER_NODE (ip4_source_port_and_range_check_rx)

Definition at line 40 of file ip4_source_and_port_range_check.c.

vlib_node_registration_t ip4_source_port_and_range_check_tx

Initial value:

= {
  .function = ip4_source_and_port_range_check_tx,
  .name = "ip4-source-and-port-range-check-tx",
  .vector_size = sizeof (u32),

  .n_errors = ARRAY_LEN(ip4_source_and_port_range_check_error_strings),
  .error_strings = ip4_source_and_port_range_check_error_strings,

  .n_next_nodes = IP4_SOURCE_AND_PORT_RANGE_CHECK_N_NEXT,
  .next_nodes = {
    [IP4_SOURCE_AND_PORT_RANGE_CHECK_NEXT_DROP] = "error-drop",
  },

  .format_buffer = format_ip4_header,
  .format_trace = format_ip4_source_and_port_range_check_trace,
}

(constructor) VLIB_REGISTER_NODE (ip4_source_port_and_range_check_tx)

Definition at line 41 of file ip4_source_and_port_range_check.c.

vlib_cli_command_t ip_source_and_port_range_check_command

static

Initial value:

= {
  .path = "set ip source-and-port-range-check",
  .function = ip_source_and_port_range_check_command_fn,
  .short_help =
  "set ip source-and-port-range-check vrf <table-id> <ip-addr>/<mask> {port nn | range <nn> - <nn>} [del]",
}

(constructor) VLIB_CLI_COMMAND (ip_source_and_port_range_check_command)

Definition at line 1315 of file ip4_source_and_port_range_check.c.

protocol_port_range_dpo_t* ppr_dpo_pool

static

The pool of range chack DPOs.

Definition at line 33 of file ip4_source_and_port_range_check.c.

dpo_type_t ppr_dpo_type

static

Dynamically registered DPO type.

Definition at line 38 of file ip4_source_and_port_range_check.c.

const char* const ppr_ip4_nodes[]

static

Initial value:

= {
  "ip4-source-and-port-range-check-rx",
  NULL,
}

Definition at line 916 of file ip4_source_and_port_range_check.c.

const char* const* const ppr_nodes[DPO_PROTO_NUM]

static

Initial value:

= {
  [DPO_PROTO_IP4] = ppr_ip4_nodes,
}

Definition at line 921 of file ip4_source_and_port_range_check.c.

const dpo_vft_t ppr_vft

static

Initial value:

= {
  .dv_lock = ppr_dpo_lock,
  .dv_unlock = ppr_dpo_unlock,
  .dv_format = format_ppr_dpo,
}

Definition at line 910 of file ip4_source_and_port_range_check.c.

vlib_cli_command_t set_interface_ip_source_and_port_range_check_command

static

Initial value:

= {
  .path = "set interface ip source-and-port-range-check",
  .function = set_ip_source_and_port_range_check_fn,
  .short_help = "set interface ip source-and-port-range-check <interface> [tcp-out-vrf <table-id>] [udp-out-vrf <table-id>] [tcp-in-vrf <table-id>] [udp-in-vrf <table-id>] [del]",
}

(constructor) VLIB_CLI_COMMAND (set_interface_ip_source_and_port_range_check_command)

Definition at line 857 of file ip4_source_and_port_range_check.c.

vlib_cli_command_t show_source_and_port_range_check

static

Initial value:

= {
  .path = "show ip source-and-port-range-check",
  .function = show_source_and_port_range_check_fn,
  .short_help =
  "show ip source-and-port-range-check vrf <table-id> <ip-addr> [port <n>]",
}

(constructor) VLIB_CLI_COMMAND (show_source_and_port_range_check)

Definition at line 1441 of file ip4_source_and_port_range_check.c.