Folks,

I have two questions about the ACL plugin's API.

First, when there are no ACLs configured and an ACL_DUMP is requested,
there is no way for the API to reply except to not send a message and let
the "wait for message" time-out and indicate failure.  The same problem
exists if one requests ACL_INTERFACE_LIST_DUMP and there are no
interfaces with an ACL on them.

This seems like a very fragile interaction to me.  It also induces a delay
in the messaging which is quite noticeable in an interactive session.

Second, as there is no notion of CONTROL_PING in the ACL API it seems
like we can get into synchronization problems with the DUMP messages.

Am I missing something again? :-)

Thanks,
jdl
_______________________________________________
vpp-dev mailing list
vpp-dev@lists.fd.io
https://lists.fd.io/mailman/listinfo/vpp-dev

Reply via email to