org.opendaylight.netvirt.aclservice

Class IngressAclServiceImpl

java.lang.Object

org.opendaylight.netvirt.aclservice.AbstractAclServiceImpl

org.opendaylight.netvirt.aclservice.IngressAclServiceImpl

All Implemented Interfaces:

AclServiceListener

public class IngressAclServiceImpl
extends AbstractAclServiceImpl

Provides the implementation for ingress (w.r.t VM) ACL service.

Note: Table names used are w.r.t switch. Hence, switch ingress is VM egress and vice versa.

Field Summary

Fields inherited from class org.opendaylight.netvirt.aclservice.AbstractAclServiceImpl

aclDataUtil, aclInterfaceCache, aclServiceUtils, dataBroker, direction, directionString, jobCoordinator, mdsalManager, serviceMode, txRunner

Constructor Summary

Constructors

Constructor and Description
IngressAclServiceImpl(org.opendaylight.controller.md.sal.binding.api.DataBroker dataBroker, org.opendaylight.genius.mdsalutil.interfaces.IMdsalApiManager mdsalManager, AclDataUtil aclDataUtil, AclServiceUtils aclServiceUtils, org.opendaylight.infrautils.jobcoordinator.JobCoordinator jobCoordinator, AclInterfaceCache aclInterfaceCache) Initialize the member variables.

Method Summary

Modifier and Type	Method and Description
void	bindService(AclInterface aclInterface) Bind service.
protected short	getAclAntiSpoofingTable()
protected short	getAclCommitterTable()
protected short	getAclConntrackClassifierTable()
protected short	getAclConntrackSenderTable()
protected short	getAclFilterCumDispatcherTable()
protected short	getAclForExistingTrafficTable()
protected short	getAclRemoteAclTable()
protected short	getAclRuleBasedFilterTable()
protected void	ingressAclDhcpAllowServerTraffic(List<org.opendaylight.genius.mdsalutil.FlowEntity> flowEntries, BigInteger dpId, int lportTag, int addOrRemove) Add rule to ensure only DHCP server traffic from the specified mac is allowed.
protected void	ingressAclDhcpv6AllowServerTraffic(List<org.opendaylight.genius.mdsalutil.FlowEntity> flowEntries, BigInteger dpId, int lportTag, int addOrRemove) Add rule to ensure only DHCPv6 server traffic from the specified mac is allowed.
protected boolean	isValidDirection(Class<? extends DirectionBase> direction)
protected void	programAntiSpoofingRules(List<org.opendaylight.genius.mdsalutil.FlowEntity> flowEntries, AclInterface port, List<AllowedAddressPairs> allowedAddresses, AclServiceManager.Action action, int addOrRemove) Programs the anti-spoofing rules.
protected void	programArpRule(List<org.opendaylight.genius.mdsalutil.FlowEntity> flowEntries, BigInteger dpId, int lportTag, int addOrRemove) Adds the rule to allow arp packets.
protected void	programBroadcastRules(List<org.opendaylight.genius.mdsalutil.FlowEntity> flowEntries, AclInterface port, int addOrRemove) Programs broadcast rules.
protected void	programGotoClassifierTableRules(List<org.opendaylight.genius.mdsalutil.FlowEntity> flowEntries, BigInteger dpId, List<AllowedAddressPairs> aaps, int lportTag, int addOrRemove)
protected void	programIcmpv6RARule(List<org.opendaylight.genius.mdsalutil.FlowEntity> flowEntries, AclInterface port, List<SubnetInfo> subnets, int addOrRemove)
protected void	programRemoteAclTableFlow(List<org.opendaylight.genius.mdsalutil.FlowEntity> flowEntries, BigInteger dpId, Integer aclTag, AllowedAddressPairs aap, int addOrRemove)
protected void	unbindService(AclInterface aclInterface) Unbind service.

Methods inherited from class org.opendaylight.netvirt.aclservice.AbstractAclServiceImpl

addFlowEntryToList, applyAce, applyAcl, bindAcl, collectDpns, getDispatcherTableResubmitInstructions, getDispatcherTableResubmitInstructions, getElanIdFromAclInterface, getOperAsString, getRemoteAclTags, handleRemoteAclUpdate, programAceRule, programAceSpecificFlows, programAclCommitRuleForConntrack, programAclCommitRuleForNonConntrack, programAclCommitRules, programAclDispatcherTable, programAclPortSpecificFixedRules, programAclRuleMissDropRule, programAclRules, programConntrackInvalidDropRule, programConntrackRecircRule, programConntrackRecircRules, programFirstRemoteAclEntryInDispatcherTable, programFlows, programForAceNotHavingRemoteAclId, programLastRemoteAclEntryInDispatcherTable, programPortSpecificDropRules, removeAce, removeAcl, unbindAcl, updateAcl, updateRemoteAcl

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

IngressAclServiceImpl

public IngressAclServiceImpl(org.opendaylight.controller.md.sal.binding.api.DataBroker dataBroker,
                             org.opendaylight.genius.mdsalutil.interfaces.IMdsalApiManager mdsalManager,
                             AclDataUtil aclDataUtil,
                             AclServiceUtils aclServiceUtils,
                             org.opendaylight.infrautils.jobcoordinator.JobCoordinator jobCoordinator,
                             AclInterfaceCache aclInterfaceCache)

Initialize the member variables.

Parameters:

dataBroker - the data broker instance.

mdsalManager - the mdsal manager.

aclDataUtil - the acl data util.

aclServiceUtils - the acl service util.

jobCoordinator - the job coordinator

aclInterfaceCache - the acl interface cache

Method Detail

bindService

public void bindService(AclInterface aclInterface)

Bind service.

Specified by:

bindService in class AbstractAclServiceImpl

Parameters:

aclInterface - the acl interface

unbindService

protected void unbindService(AclInterface aclInterface)

Unbind service.

Specified by:

unbindService in class AbstractAclServiceImpl

Parameters:

aclInterface - the acl interface

programAntiSpoofingRules

protected void programAntiSpoofingRules(List<org.opendaylight.genius.mdsalutil.FlowEntity> flowEntries,
                                        AclInterface port,
                                        List<AllowedAddressPairs> allowedAddresses,
                                        AclServiceManager.Action action,
                                        int addOrRemove)

Description copied from class: AbstractAclServiceImpl

Programs the anti-spoofing rules.

Specified by:

programAntiSpoofingRules in class AbstractAclServiceImpl

Parameters:

flowEntries - the flow entries

port - the acl interface

allowedAddresses - the allowed addresses

action - add/modify/remove action

addOrRemove - addorRemove

programGotoClassifierTableRules

protected void programGotoClassifierTableRules(List<org.opendaylight.genius.mdsalutil.FlowEntity> flowEntries,
                                               BigInteger dpId,
                                               List<AllowedAddressPairs> aaps,
                                               int lportTag,
                                               int addOrRemove)

Specified by:

programGotoClassifierTableRules in class AbstractAclServiceImpl

programRemoteAclTableFlow

protected void programRemoteAclTableFlow(List<org.opendaylight.genius.mdsalutil.FlowEntity> flowEntries,
                                         BigInteger dpId,
                                         Integer aclTag,
                                         AllowedAddressPairs aap,
                                         int addOrRemove)

Specified by:

programRemoteAclTableFlow in class AbstractAclServiceImpl

ingressAclDhcpAllowServerTraffic

protected void ingressAclDhcpAllowServerTraffic(List<org.opendaylight.genius.mdsalutil.FlowEntity> flowEntries,
                                                BigInteger dpId,
                                                int lportTag,
                                                int addOrRemove)

Add rule to ensure only DHCP server traffic from the specified mac is allowed.

Parameters:

flowEntries - the flow entries

dpId - the dpid

lportTag - the lport tag

addOrRemove - is write or delete

ingressAclDhcpv6AllowServerTraffic

protected void ingressAclDhcpv6AllowServerTraffic(List<org.opendaylight.genius.mdsalutil.FlowEntity> flowEntries,
                                                  BigInteger dpId,
                                                  int lportTag,
                                                  int addOrRemove)

Add rule to ensure only DHCPv6 server traffic from the specified mac is allowed.

Parameters:

flowEntries - the flow entries

dpId - the dpid

lportTag - the lport tag

addOrRemove - is write or delete

programIcmpv6RARule

protected void programIcmpv6RARule(List<org.opendaylight.genius.mdsalutil.FlowEntity> flowEntries,
                                   AclInterface port,
                                   List<SubnetInfo> subnets,
                                   int addOrRemove)

Specified by:

programIcmpv6RARule in class AbstractAclServiceImpl

programArpRule

protected void programArpRule(List<org.opendaylight.genius.mdsalutil.FlowEntity> flowEntries,
                              BigInteger dpId,
                              int lportTag,
                              int addOrRemove)

Adds the rule to allow arp packets.

Parameters:

flowEntries - the flow entries

dpId - the dpId

lportTag - the lport tag

addOrRemove - whether to add or remove the flow

programBroadcastRules

protected void programBroadcastRules(List<org.opendaylight.genius.mdsalutil.FlowEntity> flowEntries,
                                     AclInterface port,
                                     int addOrRemove)

Programs broadcast rules.

Specified by:

programBroadcastRules in class AbstractAclServiceImpl

Parameters:

flowEntries - the flow entries

port - the Acl Interface port

addOrRemove - whether to delete or add flow

isValidDirection

protected boolean isValidDirection(Class<? extends DirectionBase> direction)

Specified by:

isValidDirection in class AbstractAclServiceImpl

getAclAntiSpoofingTable

protected short getAclAntiSpoofingTable()

Specified by:

getAclAntiSpoofingTable in class AbstractAclServiceImpl

getAclConntrackClassifierTable

protected short getAclConntrackClassifierTable()

Specified by:

getAclConntrackClassifierTable in class AbstractAclServiceImpl

getAclConntrackSenderTable

protected short getAclConntrackSenderTable()

Specified by:

getAclConntrackSenderTable in class AbstractAclServiceImpl

getAclForExistingTrafficTable

protected short getAclForExistingTrafficTable()

Specified by:

getAclForExistingTrafficTable in class AbstractAclServiceImpl

getAclFilterCumDispatcherTable

protected short getAclFilterCumDispatcherTable()

Specified by:

getAclFilterCumDispatcherTable in class AbstractAclServiceImpl

getAclRuleBasedFilterTable

protected short getAclRuleBasedFilterTable()

Specified by:

getAclRuleBasedFilterTable in class AbstractAclServiceImpl

getAclRemoteAclTable

protected short getAclRemoteAclTable()

Specified by:

getAclRemoteAclTable in class AbstractAclServiceImpl

getAclCommitterTable

protected short getAclCommitterTable()

Specified by:

getAclCommitterTable in class AbstractAclServiceImpl