FD.io VPP  v19.04.2-12-g66b1689
Vector Packet Processing
ipsec_spd_policy.h
Go to the documentation of this file.
1 /*
2  * Copyright (c) 2015 Cisco and/or its affiliates.
3  * Licensed under the Apache License, Version 2.0 (the "License");
4  * you may not use this file except in compliance with the License.
5  * You may obtain a copy of the License at:
6  *
7  * http://www.apache.org/licenses/LICENSE-2.0
8  *
9  * Unless required by applicable law or agreed to in writing, software
10  * distributed under the License is distributed on an "AS IS" BASIS,
11  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12  * See the License for the specific language governing permissions and
13  * limitations under the License.
14  */
15 #ifndef __IPSEC_SPD_POLICY_H__
16 #define __IPSEC_SPD_POLICY_H__
17 
18 #include <vnet/ipsec/ipsec_spd.h>
19 
20 #define foreach_ipsec_policy_action \
21  _ (0, BYPASS, "bypass") \
22  _ (1, DISCARD, "discard") \
23  _ (2, RESOLVE, "resolve") \
24  _ (3, PROTECT, "protect")
25 
26 typedef enum
27 {
28 #define _(v, f, s) IPSEC_POLICY_ACTION_##f = v,
30 #undef _
32 
33 #define IPSEC_POLICY_N_ACTION (IPSEC_POLICY_ACTION_PROTECT + 1)
34 
35 typedef struct
36 {
37  ip46_address_t start, stop;
39 
40 typedef struct
41 {
42  u16 start, stop;
43 } port_range_t;
44 
45 /**
46  * @brief
47  * Policy packet & bytes counters
48  */
50 
51 /**
52  * @brief A Secruity Policy. An entry in an SPD
53  */
54 typedef struct ipsec_policy_t_
55 {
58 
59  // the type of policy
61 
62  // Selector
69 
70  // Policy
75 
76 /**
77  * @brief Add/Delete a SPD
78  */
79 extern int ipsec_add_del_policy (vlib_main_t * vm,
81  int is_add, u32 * stat_index);
82 
83 extern u8 *format_ipsec_policy (u8 * s, va_list * args);
84 extern u8 *format_ipsec_policy_action (u8 * s, va_list * args);
86  va_list * args);
87 
88 
89 extern int ipsec_policy_mk_type (bool is_outbound,
90  bool is_ipv6,
91  ipsec_policy_action_t action,
93 
94 #endif /* __IPSEC_SPD_POLICY_H__ */
95 
96 /*
97  * fd.io coding-style-patch-verification: ON
98  *
99  * Local Variables:
100  * eval: (c-set-style "gnu")
101  * End:
102  */
enum ipsec_spd_policy_t_ ipsec_spd_policy_type_t
ip46_address_range_t laddr
u8 * format_ipsec_policy(u8 *s, va_list *args)
Definition: ipsec_format.c:155
unsigned char u8
Definition: types.h:56
port_range_t rport
unsigned int u32
Definition: types.h:88
vlib_combined_counter_main_t ipsec_spd_policy_counters
Policy packet & bytes counters.
struct _unformat_input_t unformat_input_t
unsigned short u16
Definition: types.h:57
ipsec_spd_policy_type_t type
u8 * format_ipsec_policy_action(u8 *s, va_list *args)
Definition: ipsec_format.c:27
ipsec_policy_action_t
int ipsec_policy_mk_type(bool is_outbound, bool is_ipv6, ipsec_policy_action_t action, ipsec_spd_policy_type_t *type)
vlib_main_t * vm
Definition: buffer.c:312
ipsec_policy_action_t policy
u8 is_outbound
Definition: ipsec.api:92
A Secruity Policy.
#define foreach_ipsec_policy_action
signed int i32
Definition: types.h:77
int ipsec_add_del_policy(vlib_main_t *vm, ipsec_policy_t *policy, int is_add, u32 *stat_index)
Add/Delete a SPD.
u8 is_add
Definition: ipsec_gre.api:36
struct ipsec_policy_t_ ipsec_policy_t
A Secruity Policy.
ip46_address_range_t raddr
u64 uword
Definition: types.h:112
A collection of combined counters.
Definition: counter.h:188
uword unformat_ipsec_policy_action(unformat_input_t *input, va_list *args)
Definition: ipsec_format.c:63
port_range_t lport