def _add_vlan_acl(self, vid):
ofmsgs = []
if vid in self.dp.vlan_acl_in:
acl_num = self.dp.vlan_acl_in[vid]
acl_rule_priority = self.dp.highest_priority
acl_allow_inst = valve_of.goto_table(self.dp.eth_src_table)
for rule_conf in self.dp.acls[acl_num].rules:
acl_match, acl_inst = valve_acl.build_acl_entry(
rule_conf, acl_allow_inst, vlan_vid=vid)
ofmsgs.append(self.valve_flowmod(
self.dp.vlan_acl_table,
acl_match,
priority=acl_rule_priority,
inst=acl_inst))
acl_rule_priority -= 1
return ofmsgs
def _add_vlan_acl(self, vid):
ofmsgs = []
if vid in self.dp.vlan_acl_in:
acl_num = self.dp.vlan_acl_in[vid]
acl_rule_priority = self.dp.highest_priority
acl_allow_inst = valve_of.goto_table(self.dp.eth_src_table)
for rule_conf in self.dp.acls[acl_num].rules:
acl_match, acl_inst = valve_acl.build_acl_entry(
rule_conf, acl_allow_inst, vlan_vid=vid)
ofmsgs.append(self.valve_flowmod(
self.dp.vlan_acl_table,
acl_match,
priority=acl_rule_priority,
inst=acl_inst))
acl_rule_priority -= 1
return ofmsgs
def _port_add_acl(self, port_num):
ofmsgs = []
forwarding_table = self.dp.eth_src_table
if port_num in self.dp.acl_in:
acl_num = self.dp.acl_in[port_num]
forwarding_table = self.dp.acl_table
acl_rule_priority = self.dp.highest_priority
acl_allow_inst = valve_of.goto_table(self.dp.eth_src_table)
for rule_conf in self.dp.acls[acl_num].rules:
acl_match, acl_inst = valve_acl.build_acl_entry(
rule_conf, acl_allow_inst, port_num)
ofmsgs.append(self.valve_flowmod(
self.dp.acl_table,
acl_match,
priority=acl_rule_priority,
inst=acl_inst))
acl_rule_priority -= 1
return ofmsgs, forwarding_table
def _port_add_acl(self, port_num):
ofmsgs = []
acl_allow_inst = valve_of.goto_table(self.dp.vlan_table)
if port_num in self.dp.port_acl_in:
acl_num = self.dp.port_acl_in[port_num]
acl_rule_priority = self.dp.highest_priority
for rule_conf in self.dp.acls[acl_num].rules:
acl_match, acl_inst = valve_acl.build_acl_entry(
rule_conf, acl_allow_inst, port_num)
ofmsgs.append(self.valve_flowmod(
self.dp.port_acl_table,
acl_match,
priority=acl_rule_priority,
inst=acl_inst))
acl_rule_priority -= 1
else:
ofmsgs.append(self.valve_flowmod(
self.dp.port_acl_table,
self.valve_in_match(self.dp.port_acl_table, in_port=port_num),
priority=self.dp.highest_priority,
inst=[acl_allow_inst]
))
return ofmsgs
def _port_add_acl(self, port_num):
ofmsgs = []
acl_allow_inst = valve_of.goto_table(self.dp.vlan_table)
if port_num in self.dp.port_acl_in:
acl_num = self.dp.port_acl_in[port_num]
acl_rule_priority = self.dp.highest_priority
for rule_conf in self.dp.acls[acl_num].rules:
acl_match, acl_inst = valve_acl.build_acl_entry(
rule_conf, acl_allow_inst, port_num)
ofmsgs.append(self.valve_flowmod(
self.dp.port_acl_table,
acl_match,
priority=acl_rule_priority,
inst=acl_inst))
acl_rule_priority -= 1
else:
ofmsgs.append(self.valve_flowmod(
self.dp.port_acl_table,
self.valve_in_match(self.dp.port_acl_table, in_port=port_num),
priority=self.dp.highest_priority,
inst=[acl_allow_inst]
))
return ofmsgs