|
2 | 2 | #include <inttypes.h> |
3 | 3 |
|
4 | 4 | #include "switchorch.h" |
| 5 | +#include "crmorch.h" |
5 | 6 | #include "converter.h" |
6 | 7 | #include "notifier.h" |
7 | 8 | #include "notificationproducer.h" |
8 | 9 | #include "macaddress.h" |
| 10 | +#include "return_code.h" |
9 | 11 |
|
10 | 12 | using namespace std; |
11 | 13 | using namespace swss; |
12 | 14 |
|
13 | 15 | extern sai_object_id_t gSwitchId; |
14 | 16 | extern sai_switch_api_t *sai_switch_api; |
| 17 | +extern sai_acl_api_t* sai_acl_api; |
15 | 18 | extern MacAddress gVxlanMacAddress; |
| 19 | +extern CrmOrch *gCrmOrch; |
16 | 20 |
|
17 | 21 | const map<string, sai_switch_attr_t> switch_attribute_map = |
18 | 22 | { |
@@ -55,6 +59,157 @@ SwitchOrch::SwitchOrch(DBConnector *db, vector<TableConnector>& connectors, Tabl |
55 | 59 | querySwitchTpidCapability(); |
56 | 60 | auto executorT = new ExecutableTimer(m_sensorsPollerTimer, this, "ASIC_SENSORS_POLL_TIMER"); |
57 | 61 | Orch::addExecutor(executorT); |
| 62 | + initAclGroupsBindToSwitch(); |
| 63 | +} |
| 64 | + |
| 65 | +void SwitchOrch::initAclGroupsBindToSwitch() |
| 66 | +{ |
| 67 | + // Create an ACL group per stage, INGRESS, EGRESS and PRE_INGRESS |
| 68 | + for (auto stage_it : aclStageLookup) { |
| 69 | + sai_object_id_t group_oid; |
| 70 | + auto status = createAclGroup(fvValue(stage_it), &group_oid); |
| 71 | + if (!status.ok()) |
| 72 | + { |
| 73 | + status.prepend("Failed to create ACL group for stage " + |
| 74 | + fvField(stage_it) + ": "); |
| 75 | + SWSS_LOG_THROW("%s", status.message().c_str()); |
| 76 | + } |
| 77 | + SWSS_LOG_NOTICE("Created ACL group for stage %s", |
| 78 | + fvField(stage_it).c_str()); |
| 79 | + m_aclGroups[fvValue(stage_it)] = group_oid; |
| 80 | + status = bindAclGroupToSwitch(fvValue(stage_it), group_oid); |
| 81 | + if (!status.ok()) |
| 82 | + { |
| 83 | + status.prepend("Failed to bind ACL group to stage " + |
| 84 | + fvField(stage_it) + ": "); |
| 85 | + SWSS_LOG_THROW("%s", status.message().c_str()); |
| 86 | + } |
| 87 | + } |
| 88 | +} |
| 89 | + |
| 90 | +const std::map<sai_acl_stage_t, sai_object_id_t>& |
| 91 | + SwitchOrch::getAclGroupOidsBindingToSwitch() |
| 92 | +{ |
| 93 | + return m_aclGroups; |
| 94 | +} |
| 95 | + |
| 96 | +ReturnCode SwitchOrch::createAclGroup(const sai_acl_stage_t& group_stage, |
| 97 | + sai_object_id_t* acl_grp_oid) |
| 98 | +{ |
| 99 | + SWSS_LOG_ENTER(); |
| 100 | + |
| 101 | + std::vector<sai_attribute_t> acl_grp_attrs; |
| 102 | + sai_attribute_t acl_grp_attr; |
| 103 | + acl_grp_attr.id = SAI_ACL_TABLE_GROUP_ATTR_ACL_STAGE; |
| 104 | + acl_grp_attr.value.s32 = group_stage; |
| 105 | + acl_grp_attrs.push_back(acl_grp_attr); |
| 106 | + |
| 107 | + acl_grp_attr.id = SAI_ACL_TABLE_GROUP_ATTR_TYPE; |
| 108 | + acl_grp_attr.value.s32 = SAI_ACL_TABLE_GROUP_TYPE_PARALLEL; |
| 109 | + acl_grp_attrs.push_back(acl_grp_attr); |
| 110 | + |
| 111 | + acl_grp_attr.id = SAI_ACL_TABLE_ATTR_ACL_BIND_POINT_TYPE_LIST; |
| 112 | + std::vector<int32_t> bpoint_list; |
| 113 | + bpoint_list.push_back(SAI_ACL_BIND_POINT_TYPE_SWITCH); |
| 114 | + acl_grp_attr.value.s32list.count = (uint32_t)bpoint_list.size(); |
| 115 | + acl_grp_attr.value.s32list.list = bpoint_list.data(); |
| 116 | + acl_grp_attrs.push_back(acl_grp_attr); |
| 117 | + |
| 118 | + CHECK_ERROR_AND_LOG_AND_RETURN( |
| 119 | + sai_acl_api->create_acl_table_group(acl_grp_oid, gSwitchId, |
| 120 | + (uint32_t)acl_grp_attrs.size(), |
| 121 | + acl_grp_attrs.data()), |
| 122 | + "Failed to create ACL group for stage " << group_stage); |
| 123 | + if (group_stage == SAI_ACL_STAGE_INGRESS || |
| 124 | + group_stage == SAI_ACL_STAGE_PRE_INGRESS || |
| 125 | + group_stage == SAI_ACL_STAGE_EGRESS) |
| 126 | + { |
| 127 | + gCrmOrch->incCrmAclUsedCounter(CrmResourceType::CRM_ACL_GROUP, |
| 128 | + (sai_acl_stage_t)group_stage, |
| 129 | + SAI_ACL_BIND_POINT_TYPE_SWITCH); |
| 130 | + } |
| 131 | + SWSS_LOG_INFO("Suceeded to create ACL group %s in stage %d ", |
| 132 | + sai_serialize_object_id(*acl_grp_oid).c_str(), group_stage); |
| 133 | + return ReturnCode(); |
| 134 | +} |
| 135 | + |
| 136 | +ReturnCode SwitchOrch::bindAclGroupToSwitch( |
| 137 | + const sai_acl_stage_t& group_stage, const sai_object_id_t& acl_grp_oid) |
| 138 | +{ |
| 139 | + SWSS_LOG_ENTER(); |
| 140 | + |
| 141 | + auto switch_attr_it = aclStageToSwitchAttrLookup.find(group_stage); |
| 142 | + if (switch_attr_it == aclStageToSwitchAttrLookup.end()) |
| 143 | + { |
| 144 | + LOG_ERROR_AND_RETURN(ReturnCode(StatusCode::SWSS_RC_INVALID_PARAM) |
| 145 | + << "Failed to set ACL group(" << acl_grp_oid |
| 146 | + << ") to the SWITCH bind point at stage " |
| 147 | + << group_stage); |
| 148 | + } |
| 149 | + sai_attribute_t attr; |
| 150 | + attr.id = switch_attr_it->second; |
| 151 | + attr.value.oid = acl_grp_oid; |
| 152 | + auto sai_status = sai_switch_api->set_switch_attribute(gSwitchId, &attr); |
| 153 | + if (sai_status != SAI_STATUS_SUCCESS) |
| 154 | + { |
| 155 | + LOG_ERROR_AND_RETURN( |
| 156 | + ReturnCode(sai_status) |
| 157 | + << "[SAI] Failed to set_switch_attribute with attribute.id=" << attr.id |
| 158 | + << " and acl group oid=" << acl_grp_oid); |
| 159 | + } |
| 160 | + return ReturnCode(); |
| 161 | +} |
| 162 | + |
| 163 | +ReturnCode SwitchOrch::unbindAclGroupToSwitch( |
| 164 | + const sai_acl_stage_t& group_stage) |
| 165 | +{ |
| 166 | + SWSS_LOG_ENTER(); |
| 167 | + |
| 168 | + return bindAclGroupToSwitch(group_stage, SAI_NULL_OBJECT_ID); |
| 169 | +} |
| 170 | + |
| 171 | +ReturnCode SwitchOrch::removeAclGroup(const sai_acl_stage_t& group_stage) |
| 172 | +{ |
| 173 | + SWSS_LOG_ENTER(); |
| 174 | + |
| 175 | + auto group_it = m_aclGroups.find(group_stage); |
| 176 | + if (group_it == m_aclGroups.end()) |
| 177 | + { |
| 178 | + LOG_ERROR_AND_RETURN( |
| 179 | + ReturnCode(SAI_STATUS_INVALID_PARAMETER) |
| 180 | + << "Failed to find ACL group by stage '" << group_stage << "'"); |
| 181 | + } |
| 182 | + CHECK_ERROR_AND_LOG_AND_RETURN( |
| 183 | + sai_acl_api->remove_acl_table_group(group_it->second), |
| 184 | + "Failed to create ACL group for stage " << group_stage); |
| 185 | + if (group_stage == SAI_ACL_STAGE_INGRESS || |
| 186 | + group_stage == SAI_ACL_STAGE_PRE_INGRESS || |
| 187 | + group_stage == SAI_ACL_STAGE_EGRESS) |
| 188 | + { |
| 189 | + gCrmOrch->decCrmAclUsedCounter(CrmResourceType::CRM_ACL_GROUP, |
| 190 | + (sai_acl_stage_t)group_stage, |
| 191 | + SAI_ACL_BIND_POINT_TYPE_SWITCH, |
| 192 | + group_it->second); |
| 193 | + } |
| 194 | + m_aclGroups.erase(group_stage); |
| 195 | + SWSS_LOG_NOTICE("Suceeded to remove ACL group %s in stage %d ", |
| 196 | + sai_serialize_object_id(group_it->second).c_str(), group_stage); |
| 197 | + return ReturnCode(); |
| 198 | +} |
| 199 | + |
| 200 | +ReturnCode SwitchOrch::removeAllAclGroups() |
| 201 | +{ |
| 202 | + SWSS_LOG_ENTER(); |
| 203 | + |
| 204 | + for (auto stage_it : aclStageLookup) |
| 205 | + { |
| 206 | + if (m_aclGroups.find(fvValue(stage_it)) != m_aclGroups.end()) |
| 207 | + { |
| 208 | + LOG_AND_RETURN_IF_ERROR(unbindAclGroupToSwitch(fvValue(stage_it))); |
| 209 | + LOG_AND_RETURN_IF_ERROR(removeAclGroup(fvValue(stage_it))); |
| 210 | + } |
| 211 | + } |
| 212 | + return ReturnCode(); |
58 | 213 | } |
59 | 214 |
|
60 | 215 | void SwitchOrch::doCfgSensorsTableTask(Consumer &consumer) |
|
0 commit comments