Re: [vpp-dev] Programming(add/del/mod) ACLs from another plugin

2019-05-23 Thread Satya Murthy 
Hi Neale,

Thank you very much for the reply.

The main problem that we are facing is:
The plugin that we are planning to develop need to configure the classification 
rules dynamically ( ACLs ).
Hence, we can not use VPP-API approach to configure the ACLs first.
We need to add the ACLs based on some config that we receive and use these ACLs 
for matching the data packets. This is where we are stuck.

Any other workarounds for this scenario ?

--
Thanks & Regards,
Murthy
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13129): https://lists.fd.io/g/vpp-dev/message/13129
Mute This Topic: https://lists.fd.io/mt/31729492/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Re: [vpp-dev] Programming(add/del/mod) ACLs from another plugin

2019-05-23 Thread Neale Ranns via Lists.Fd.Io 

HI Murthy,

There are two plugins, that I know of, that use the ACL as a service; ACL based 
forwarding (ABF) and group based policy (GBP).
Both of these plugins expect that the user first configures the ACL using the 
ACL plugin, then passes the index of the ACL during ABF/GBP programming. This 
separation means that the ABF/GBP plugins do not need to reimplement the rich 
ACL API, which is a major benefit. Is this an approach you could also take?

/neale


De :  au nom de Satya Murthy 
Date : jeudi 23 mai 2019 à 12:29
À : "vpp-dev@lists.fd.io" 
Objet : [vpp-dev] Programming(add/del/mod) ACLs from another plugin

Hi ,

We are planning to use "ACL as a service" framework using the lookup contexts 
for performing packet classifications from our custom plugin. While this seem 
to be achievable, we have one issue at our hand.

We would like to program the ACLs ( add/delete of ACL rules ) also from our 
custom plugin instead of VPP-API framework. However, I  see that the lower 
layer functions like acl_add_list() are declared as non-static (only available 
via APIs), preventing us to directly use those functions from our custom plugin.

We can get away with this static function issue by using function pointers. But 
we would like to know , if there is any other cleaner framework VPP provides to 
add/del ACLs from other plugins instead of VPP-API framework.

Please let us know.

--
Thanks & Regards,
Murthy
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13122): https://lists.fd.io/g/vpp-dev/message/13122
Mute This Topic: https://lists.fd.io/mt/31729492/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-