Re: [vpp-dev] Support for TCP flag

2018-06-12 Thread Andrew Yourtchenko
me as Linux > conntrack. Do you have any plan to provide VPP as an appropriate > infrastructure for firewall applications? > > From: Andrew 👽 Yourtchenko > Sent: Tuesday, May 29, 2018 1:10 PM > To: Rubina Bianchi > Cc: vpp-dev@lists.fd.io >

Re: [vpp-dev] Support for TCP flag

2018-06-02 Thread Rubina Bianchi
From: Andrew 👽 Yourtchenko Sent: Tuesday, May 29, 2018 1:10 PM To: Rubina Bianchi Cc: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] Support for TCP flag Hi Rubina, I designed the stateful mode to be just a bit more than the ACL, with a "diode" state, rather than going for the fully fledged fire

Re: [vpp-dev] Support for TCP flag

2018-05-29 Thread Rubina Bianchi
Thanks a lot for your prompt answer. :) From: Andrew 👽 Yourtchenko Sent: Tuesday, May 29, 2018 1:10 PM To: Rubina Bianchi Cc: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] Support for TCP flag Hi Rubina, I designed the stateful mode to be just a bit more than the

Re: [vpp-dev] Support for TCP flag

2018-05-29 Thread Andrew Yourtchenko
Hi Rubina, I designed the stateful mode to be just a bit more than the ACL, with a "diode" state, rather than going for the fully fledged firewall model - as a balance between the simplicity and the functionality. The full tracking of the TCP state machine was not in scope - getting into that ter

[vpp-dev] Support for TCP flag

2018-05-29 Thread Rubina Bianchi
Hi I have a question about vpp stateful mode. It seems that vpp stateful mode hasn't implemented completely. I mean there aren't any feature same as contrack in linux kernel. So, vpp doesn't have any mechanism to handle TCP sessions based on different flags. For example I sent TCP three way hand