Thanks, Andrew. I want to avoid any algorithms that support specific data. This is why I pointed to a general algorithm in a Varghese paper: http://cseweb.ucsd.edu/~susingh/papers/hyp-sigcomm03.pdf
This paper creates rules, e.g., Rule1 to match IP prefix, Rule2 to match range, Rule3 to exact match, etc. Even ACLs create such rules. However, how does one implement matching all rules using least memory, using how many cpu cycles, and support, say, 50k entries, is tricky. Hemant -----Original Message----- From: Andrew 👽 Yourtchenko <ayour...@gmail.com> Sent: Friday, March 05, 2021 11:05 AM To: bga...@cisco.com Cc: hem...@mnkcg.com; vpp-dev@lists.fd.io Subject: Re: [vpp-dev] IP subnet and port range match? Buyer beware :-) ACL plugin handles the ranges more as an exception case, based on the real-world config data analysis back in the day... --a > On 5 Mar 2021, at 13:58, Benoit Ganne (bganne) via lists.fd.io > <bganne=cisco....@lists.fd.io> wrote: > >  >> >> Am I correct that VPP classifier does not support matching both an IP >> subnet and layer-4 port range? The classifier matches IP subnet and >> then another function matches range. > > The VPP classifier matches bitmasks, so technically you can match ranges as > long as they can be expressed as bitmasks. > If your port range does not (usual case) you can use VPP ACL plugin which > does support this kind of match. > > ben > > >
smime.p7s
Description: S/MIME cryptographic signature
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#18866): https://lists.fd.io/g/vpp-dev/message/18866 Mute This Topic: https://lists.fd.io/mt/81084196/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
