summaryrefslogtreecommitdiffstats
path: root/VNFs/vFW/pipeline/pipeline_vfw_be.c
AgeCommit message (Collapse)AuthorFilesLines
2017-07-18[l2l3 stack] implements new nd state machine & nd bufferingVishwesh M Rudramuni1-659/+117
JIRA: SAMPLEVNF-32 This patch implements ~New nd state machine implementing new states like INCOMPLETE, COMPLETE, PROBE, STALE. ~Implementing nd buffering, when nd is unresolved. ~Integratig the new changes with vCGNAPT ~Integrating the new changes with vACL ~Integrating the new changes with vFW. ~Adding locks to synchronize against multiple VNF threads Change-Id: Iaee4f4599ca3016ebb50ee2d9133fd8c39c5cd04 Signed-off-by: Vishwesh M Rudramuni <vishwesh.m.rudramuni@intel.com>
2017-07-14[l2l3 stack] implements new arp state machine & arp bufferingVishwesh M Rudramuni1-129/+122
JIRA: SAMPLEVNF-23 This patch implements ~New arp state machine implementing new states like INCOMPLETE, COMPLETE, PROBE, STALE. ~removing unwanted code in arpicmp pipeline ~Implementing arp buffering, when arp is unresolved. ~Integratig the new changes with vCGNAPT ~Integrating the new changes with vACL ~Integrating the new changes with vFW. Change-Id: If467ec035bc8de58463ea50d9e603a97f168c1a2 Signed-off-by: Vishwesh M Rudramuni <vishwesh.m.rudramuni@intel.com>
2017-07-12vFW: ARPICMP packets shouldn't be processed by vFWAnand B Jyoti1-6/+24
JIRA: SAMPLEVNF-52 The stats counters are wrong when ARPICMP pkts are received by VFW pipeline in case of HWLB mode as the vFW is trying to process these pkts. The ARPICMP pkts shouldn't be processed by VFW pipeline, as these packets are processed by ARPICMP pipeline in case of HWLB. Change-Id: Iefe947a9f63fd4943f37900582656a9a4f957f5d Signed-off-by: Anand B Jyoti <anand.b.jyoti@intel.com>
2017-07-12vFW: Remove TTL decrementing in firewall acting as gatewayAnand B Jyoti1-20/+0
JIRA: SAMPLEVNF-51 vFW is not functioning as a router and hence TTL decrement is not required. Remove this TTL decrementing in vFW. Change-Id: I49ae9b19a473eec0b8072f8a556dca299d89ef74 Signed-off-by: Anand B Jyoti <anand.b.jyoti@intel.com>
2017-05-12vFW: remove unused dualstack support codeAnand B Jyoti1-660/+1
JIRA: SAMPLEVNF-14 The simultaneous IPV4 and IPV6 traffic is not required/supported. The IPv4 and IPv6 separation is done to avoid multiple checks between v4 and v6 and to improve the throughput performance. This patch removes this unused/unsupported code from the vFW. Change-Id: Iefea5a6ed8c9454be9807eb1796908aec7bfc199 Signed-off-by: Anand B Jyoti <anand.b.jyoti@intel.com>
2017-04-19vFW: Adding Virtual Firewall VNFAnand B Jyoti1-0/+3674
JIRA: SAMPLEVNF-4 vFW supports following features: - Basic packet filtering (malformed packets, IP fragments) - Connection tracking for TCP and UDP - Access Control List for rule based policy enforcement - SYN-flood protection via Synproxy* for TCP - UDP, TCP and ICMP protocol pass-through - CLI based enable/disable connection tracking, synproxy, basic packet filtering - Hardware and Software Load Balancing - L2L3 stack support for ARP/ICMP handling - Multithread support - Multiple physical port support Change-Id: I96d28858488ed8764370d161975bc1e0557c8b20 Signed-off-by: Anand B Jyoti <anand.b.jyoti@intel.com> [Push patch to gerrit] Signed-off-by: Deepak S <deepak.s@linux.intel.com>