/*
- * Copyright (c) 2016 Ericsson India Global Services Pvt Ltd. and others. All rights reserved.
+ * Copyright (c) 2016, 2017 Ericsson India Global Services Pvt Ltd. and others. All rights reserved.
*
* This program and the accompanying materials are made available under the
* terms of the Eclipse Public License v1.0 which accompanies this distribution,
package org.opendaylight.netvirt.aclservice.utils;
import java.math.BigInteger;
+import java.util.ArrayList;
+import java.util.List;
/**
* The class to have ACL related constants.
*/
public final class AclConstants {
- // TODO: To be deleted once it is available in NwConstants
- public static final short EGRESS_LPORT_DISPATCHER_TABLE = 220;
- // TODO: To be moved to NwConstants
- public static final short INGRESS_ACL_SERVICE_PRIORITY = 6;
-
public static final short INGRESS_ACL_DEFAULT_FLOW_PRIORITY = 1;
public static final short EGRESS_ACL_DEFAULT_FLOW_PRIORITY = 11;
+ public static final Integer PROTO_IPV6_DROP_PRIORITY = 63020;
+ public static final Integer PROTO_IPV6_ALLOWED_PRIORITY = 63010;
+ public static final Integer PROTO_DHCP_SERVER_MATCH_PRIORITY = 63010;
+ public static final Integer PROTO_DHCP_CLIENT_TRAFFIC_MATCH_PRIORITY = 63010;
+ public static final Integer PROTO_ARP_TRAFFIC_MATCH_PRIORITY = 63010;
public static final Integer PROTO_MATCH_PRIORITY = 61010;
public static final Integer PREFIX_MATCH_PRIORITY = 61009;
public static final Integer PROTO_PREFIX_MATCH_PRIORITY = 61008;
public static final Integer PROTO_PORT_MATCH_PRIORITY = 61007;
public static final Integer PROTO_PORT_PREFIX_MATCH_PRIORITY = 61007;
- public static final Integer PROTO_DHCP_SERVER_MATCH_PRIORITY = 61006;
+ public static final Integer PROTO_MATCH_SYN_ALLOW_PRIORITY = 61005;
+ public static final Integer PROTO_MATCH_SYN_ACK_ALLOW_PRIORITY = 61004;
+ public static final Integer PROTO_MATCH_SYN_DROP_PRIORITY = 61003;
public static final Integer PROTO_VM_IP_MAC_MATCH_PRIORITY = 36001;
public static final Integer CT_STATE_UNTRACKED_PRIORITY = 62030;
public static final Integer CT_STATE_TRACKED_EXIST_PRIORITY = 62020;
+ public static final Integer CT_STATE_TRACKED_INVALID_PRIORITY = 62015;
public static final Integer CT_STATE_TRACKED_NEW_PRIORITY = 62010;
- public static final Integer CT_STATE_NEW_PRIORITY_DROP = 36007;
+ public static final Integer CT_STATE_TRACKED_NEW_DROP_PRIORITY = 50;
+ public static final Integer NO_PRIORITY = 50;
+
public static final short DHCP_CLIENT_PORT_IPV4 = 68;
public static final short DHCP_SERVER_PORT_IPV4 = 67;
- public static final short DHCP_CLIENT_PORT_IPV6 = 568;
- public static final short DHCP_SERVER_PORT_IPV6 = 567;
+ public static final short DHCP_CLIENT_PORT_IPV6 = 546;
+ public static final short DHCP_SERVER_PORT_IPV6 = 547;
+
public static final BigInteger COOKIE_ACL_BASE = new BigInteger("6900000", 16);
+ public static final BigInteger COOKIE_ACL_DROP_FLOW = new BigInteger("6900001", 16);
- public static final int UNTRACKED_CT_STATE = 0x00;
- public static final int TRACKED_CT_STATE = 0x20;
public static final int TRACKED_EST_CT_STATE = 0x22;
public static final int TRACKED_REL_CT_STATE = 0x24;
public static final int TRACKED_NEW_CT_STATE = 0x21;
public static final int TRACKED_INV_CT_STATE = 0x30;
- public static final int UNTRACKED_CT_STATE_MASK = 0x20;
- public static final int TRACKED_CT_STATE_MASK = 0x20;
public static final int TRACKED_EST_CT_STATE_MASK = 0x37;
public static final int TRACKED_REL_CT_STATE_MASK = 0x37;
public static final int TRACKED_NEW_CT_STATE_MASK = 0x21;
public static final int TRACKED_INV_CT_STATE_MASK = 0x30;
+ public static final String IPV4_ALL_NETWORK = "0.0.0.0/0";
+ public static final String IPV6_ALL_NETWORK = "::/0";
+ public static final long TCP_FLAG_SYN = 1 << 1;
+ public static final long TCP_FLAG_ACK = 1 << 4;
+ public static final long TCP_FLAG_SYN_ACK = TCP_FLAG_SYN + TCP_FLAG_ACK;
+ public static final int ALL_LAYER4_PORT = 65535;
+ public static final int ALL_LAYER4_PORT_MASK = 0x0000;
+
+ public static final Short IP_PROT_ICMPV6 = 58;
+ public static final int ICMPV6_TYPE_MLD_QUERY = 130;
+ public static final int ICMPV6_TYPE_RS = 133;
+ public static final int ICMPV6_TYPE_RA = 134;
+ public static final int ICMPV6_TYPE_NS = 135;
+ public static final int ICMPV6_TYPE_NA = 136;
+ public static final int ICMPV6_TYPE_MLD2_REPORT = 143;
+
+ public static final BigInteger METADATA_MASK_LEARN_FLAG = new BigInteger("FFFFFFFFFFFFFFFE", 16);
+
+ public static final String SECURITY_GROUP_TCP_IDLE_TO_KEY = "security-group-tcp-idle-timeout";
+ public static final String SECURITY_GROUP_TCP_HARD_TO_KEY = "security-group-tcp-hard-timeout";
+ public static final String SECURITY_GROUP_TCP_FIN_IDLE_TO_KEY = "security-group-tcp-fin-idle-timeout";
+ public static final String SECURITY_GROUP_TCP_FIN_HARD_TO_KEY = "security-group-tcp-fin-hard-timeout";
+ public static final String SECURITY_GROUP_UDP_IDLE_TO_KEY = "security-group-udp-idle-timeout";
+ public static final String SECURITY_GROUP_UDP_HARD_TO_KEY = "security-group-udp-hard-timeout";
+
+ public static final int LEARN_MATCH_REG_VALUE = 1;
+ public static final int LEARN_DELETE_LEARNED_FLAG_VALUE = 2;
+
+ public static final String ACL_FLOW_PRIORITY_POOL_NAME = "acl.flow.priorities.pool";
+ public static final long ACL_FLOW_PRIORITY_LOW_POOL_START = 1000L;
+ public static final long ACL_FLOW_PRIORITY_LOW_POOL_END = 30000L;
+ public static final long ACL_FLOW_PRIORITY_HIGH_POOL_START = 30001L;
+ public static final long ACL_FLOW_PRIORITY_HIGH_POOL_END = 60000L;
+ public static final long ACL_ID_METADATA_POOL_START = 1L;
+ public static final long ACL_ID_METADATA_POOL_END = 10000L;
+
+ public static final int SOURCE_LOWER_PORT_UNSPECIFIED = -1;
+ public static final int SOURCE_UPPER_PORT_UNSPECIFIED = -1;
+ public static final int DEST_LOWER_PORT_UNSPECIFIED = -1;
+ public static final int DEST_UPPER_PORT_UNSPECIFIED = -1;
+ public static final int DEST_LOWER_PORT_HTTP = 80;
+ public static final int DEST_LOWER_PORT_2 = 2;
+ public static final int DEST_UPPER_PORT_3 = 3;
+ public static final int DEST_UPPER_PORT_HTTP = 80;
+ public static final int SOURCE_REMOTE_IP_PREFIX_SPECIFIED = 1;
+ public static final int SOURCE_REMOTE_IP_PREFIX_UNSPECIFIED = -1;
+ public static final int DEST_REMOTE_IP_PREFIX_SPECIFIED = 1;
+ public static final int DEST_REMOTE_IP_PREFIX_UNSPECIFIED = -1;
+ public static final int INVALID_ACL_ID = -1;
+ public static final short EGRESS_ACL_DUMMY_TABLE = 239;
+ public static final int TRACKED_CT_STATE = 0x20;
+ public static final int TRACKED_CT_STATE_MASK = 0x20;
+
+ public static final String ACL_ID_POOL_NAME = "ACL-ID-POOL";
+
+ enum PacketHandlingType {
+ PERMIT,
+ DENY
+ }
+
private AclConstants() {
}
+
+ public static List<Integer> allowedIcmpv6NdList() {
+ List<Integer> icmpv6NdList = new ArrayList<>();
+ icmpv6NdList.add(ICMPV6_TYPE_RS);
+ icmpv6NdList.add(ICMPV6_TYPE_NS);
+ icmpv6NdList.add(ICMPV6_TYPE_NA);
+ return icmpv6NdList;
+ }
}
Code Review / netvirt.git / blobdiff