Hi Andrew,
Sure. I am in the process of doing the harness code to test the ACL-plugin
approach.
Will post the results to this thread in a week's time.
--
Thanks & Regards,
Murthy
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#13135):
So, to me “received from an external entity” seems like squarely a task for a
separate control plane entity - because presumably you will also want to
resynchronize that info upon the restart of the VPP, right ?
In any case, seems like your use case will require some investments in either
case
Hi Andrew,
Our custom plugin will receive these rules per each session from an external
entity.
The number of sessions may go into millions.
Yes, as you rightly said, these are rules are very dynamic in nature and these
will be added and deleted with addition of session and it's deletion
Satya,
How often do you plan to update/ how many ranges do you plan to have ?
And what is the source of information defining the ranges ?
Acl plugin does encapsulate some of the complexity, but seeing as you seem to
want to use the it as a dynamic traffic-driven datastructure, classifier
Thanks Andrew for the reply.
Instead, now, we are looking at "ACL lookup context" framework to add them as
acl rules and use for packet classification. Hope this should work for us
without any issues.
--
Thanks & Regards,
Murthy
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to
No, you can’t do ranges in classifier. You can add multiple chained tables with
different masks, but performance wise it most certainly be worse than simply
create a mask with exact match for the port and adding 1112 entries for each of
the ports you need to match.
--a
> On 22 May 2019, at
Hi,
>From the documentation I have read so far and from the classifier code I have
>gone through:
VPP classifier works on mask and match to classify the packets.
But, I didnt see any logic in the classifier code that classifies packets based
on any rule like "range of values".
For example: is
