94 u32 n_left_from, * from, * to_next;
107 while (n_left_from > 0)
112 to_next, n_left_to_next);
114 while (n_left_from >= 4 && n_left_to_next >= 2)
122 u32 pi0, next0, pass0, lb_index0;
123 u32 pi1, next1, pass1, lb_index1;
139 pi0 = to_next[0] = from[0];
140 pi1 = to_next[1] = from[1];
203 p0->
error = error_node->
errors[IP4_ERROR_UNICAST_SOURCE_CHECK_FAILS];
204 p1->
error = error_node->
errors[IP4_ERROR_UNICAST_SOURCE_CHECK_FAILS];
207 to_next, n_left_to_next,
208 pi0, pi1, next0, next1);
211 while (n_left_from > 0 && n_left_to_next > 0)
218 u32 pi0, next0, pass0, lb_index0;
266 p0->
error = error_node->
errors[IP4_ERROR_UNICAST_SOURCE_CHECK_FAILS];
269 to_next, n_left_to_next,
297 .name =
"ip4-source-check-via-any",
298 .vector_size =
sizeof (
u32),
314 .name =
"ip4-source-check-via-rx",
315 .vector_size =
sizeof (
u32),
340 u32 sw_if_index, is_del, ci;
355 else if (
unformat (line_input,
"del"))
357 else if (
unformat (line_input,
"strict"))
359 else if (
unformat (line_input,
"loose"))
368 if (~0 == sw_if_index)
450 .path =
"set interface ip source-check",
451 .function = set_ip_source_check,
452 .short_help =
"set interface ip source-check <interface> [strict|loose] [del]",
466 u32 table_id, is_add, fib_index;
477 if (
unformat (line_input,
"table %d", &table_id))
479 else if (
unformat (line_input,
"del"))
481 else if (
unformat (line_input,
"add"))
483 else if (
unformat (line_input,
"%U/%d",
501 "Nonexistent table id %d",
544 .path =
"ip urpf-accept",
546 .short_help =
"ip urpf-accept [table <table-id>] [add|del]",
vnet_config_main_t config_main
void vlib_put_next_frame(vlib_main_t *vm, vlib_node_runtime_t *r, u32 next_index, u32 n_vectors_left)
Release pointer to next frame vector data.
u32 fib_table_id_find_fib_index(fib_protocol_t proto, u32 table_id)
fib_protocol_t fp_proto
protocol type
static int fib_urpf_check_size(index_t ui)
Data-Plane function to check the size of an uRPF list, (i.e.
u32 ip4_unicast_rx_feature_source_reachable_via_any
Built-in unicast feature path index, see vnet_feature_arc_init()
u32 current_config_index
Used by feature subgraph arcs to visit enabled feature nodes.
u32 vnet_config_del_feature(vlib_main_t *vm, vnet_config_main_t *cm, u32 config_string_heap_index, u32 feature_index, void *feature_config, u32 n_feature_config_bytes)
u32 * config_index_by_sw_if_index
u32 index_t
A Data-Path Object is an object that represents actions that are applied to packets are they are swit...
static int fib_urpf_check(index_t ui, u32 sw_if_index)
Data-Plane function to check an input interface against an uRPF list.
ip_lookup_main_t lookup_main
u32 * fib_index_by_sw_if_index
Table index indexed by software interface.
unformat_function_t unformat_vnet_sw_interface
static ip4_fib_mtrie_leaf_t ip4_fib_mtrie_lookup_step(ip4_fib_mtrie_t *m, ip4_fib_mtrie_leaf_t current_leaf, const ip4_address_t *dst_address, u32 dst_address_byte_index)
vnet_main_t * vnet_get_main(void)
#define VLIB_INIT_FUNCTION(x)
void fib_table_entry_special_remove(u32 fib_index, const fib_prefix_t *prefix, fib_source_t source)
Remove a 'special' entry from the FIB.
static void * vlib_buffer_get_current(vlib_buffer_t *b)
Get pointer to current data to process.
Aggregrate type for a prefix.
u16 fp_len
The mask length.
static u32 ip4_fib_mtrie_leaf_get_adj_index(ip4_fib_mtrie_leaf_t n)
static uword ip4_source_check_reachable_via_rx(vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
#define ADJ_INDEX_INVALID
Invalid ADJ index - used when no adj is known likewise blazoned capitals INVALID speak volumes where ...
fib_node_index_t fib_table_entry_special_add(u32 fib_index, const fib_prefix_t *prefix, fib_source_t source, fib_entry_flag_t flags, adj_index_t adj_index)
Add a 'special' entry to the FIB that links to the adj passed A special entry is an entry that the FI...
vlib_node_registration_t ip4_input_node
Global ip4 input node.
ip46_address_t fp_addr
The address type is not deriveable from the fp_addr member.
static void * vnet_get_config_data(vnet_config_main_t *cm, u32 *config_index, u32 *next_index, u32 n_data_bytes)
static uword ip4_address_is_multicast(ip4_address_t *a)
#define vlib_validate_buffer_enqueue_x2(vm, node, next_index, to_next, n_left_to_next, bi0, bi1, next0, next1)
Finish enqueueing two buffers forward in the graph.
VLIB_NODE_FUNCTION_MULTIARCH(ip4_check_source_reachable_via_any, ip4_source_check_reachable_via_any)
(constructor) VLIB_REGISTER_NODE (ip4_check_source_reachable_via_rx)
#define vlib_validate_buffer_enqueue_x1(vm, node, next_index, to_next, n_left_to_next, bi0, next0)
Finish enqueueing one buffer forward in the graph.
#define vlib_get_next_frame(vm, node, next_index, vectors, n_vectors_left)
Get pointer to next frame vector data by (vlib_node_runtime_t, next_index).
vlib_error_t error
Error code for buffers to be enqueued to error handler.
vnet_feature_config_main_t feature_config_mains[VNET_N_IP_FEAT]
rx unicast, multicast, tx interface/feature configuration.
#define CLIB_PREFETCH(addr, size, type)
clib_error_t * ip4_source_check_init(vlib_main_t *vm)
u32 ip4_unicast_rx_feature_source_reachable_via_rx
Built-in unicast feature path index, see vnet_feature_arc_init()
static ip4_fib_t * ip4_fib_get(u32 index)
Get the FIB at the given index.
static vlib_node_runtime_t * vlib_node_get_runtime(vlib_main_t *vm, u32 node_index)
Get node runtime by node index.
#define VLIB_CLI_COMMAND(x,...)
#define IP4_FIB_MTRIE_LEAF_ROOT
index_t lb_urpf
This is the index of the uRPF list for this LB.
static load_balance_t * load_balance_get(index_t lbi)
static clib_error_t * ip_source_check_accept(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
#define VLIB_NODE_FLAG_TRACE
u32 vnet_config_add_feature(vlib_main_t *vm, vnet_config_main_t *cm, u32 config_string_heap_index, u32 feature_index, void *feature_config, u32 n_feature_config_bytes)
static uword ip4_source_check_inline(vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame, ip4_source_check_type_t source_check_type)
void vlib_trace_frame_buffers_only(vlib_main_t *vm, vlib_node_runtime_t *node, u32 *buffers, uword n_buffers, uword next_buffer_stride, uword n_buffer_data_bytes_in_trace)
static void * vlib_frame_vector_args(vlib_frame_t *f)
Get pointer to frame vector data.
static uword ip4_source_check_reachable_via_any(vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
#define vlib_prefetch_buffer_header(b, type)
Prefetch buffer metadata.
#define VLIB_REGISTER_NODE(x,...)
ip4_main_t ip4_main
Global ip4 main structure.
vlib_node_registration_t ip4_check_source_reachable_via_any
(constructor) VLIB_REGISTER_NODE (ip4_check_source_reachable_via_any)
#define clib_error_return(e, args...)
static u8 * format_ip4_source_check_trace(u8 *s, va_list *va)
static vlib_buffer_t * vlib_get_buffer(vlib_main_t *vm, u32 buffer_index)
Translate buffer index into buffer pointer.