Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[openconfig_acl] Add SONiC ACL extension to open config ACL model #6896

Merged
merged 3 commits into from
Feb 28, 2021

Conversation

daall
Copy link
Contributor

@daall daall commented Feb 26, 2021

  • Add support for VLAN ID match
  • Add support for ICMP type/code match

Signed-off-by: Danny Allen daall@microsoft.com

Why I did it

To allow users to add ACL rules w/ ICMP and VLAN qualifiers via acl-loader.

How I did it

Added sonic-acl-extension.yang to augment the existing OpenConfig spec and used pyangbind to generate a new set of python bindings.

How to verify it

Re-run the ACL tests w/ the new openconfig_acl.py script and verify that all rules are still loaded properly and dataplane behavior is not impacted.

Which release branch to backport (provide reason below if selected)

  • 201811
  • [] 201911
  • 202006
  • 202012

Description for the changelog

A picture of a cute animal (not mandatory but encouraged)

- Add support for VLAN ID match
- Add support for ICMP type/code match

Signed-off-by: Danny Allen <daall@microsoft.com>
@lguohan
Copy link
Collaborator

lguohan commented Feb 26, 2021

openconfig_acl.py seems generated code, can we generate the code during the build?

@daall
Copy link
Contributor Author

daall commented Feb 28, 2021

openconfig_acl.py seems generated code, can we generate the code during the build?

I would prefer to merge this as-is to unblock the feature and then refine the process to generate the code at build-time.

@daall daall merged commit abb3867 into sonic-net:master Feb 28, 2021
@daall daall deleted the openconfig_update branch February 28, 2021 23:02
yxieca pushed a commit that referenced this pull request Mar 4, 2021
)

- Add support for VLAN ID match
- Add support for ICMP type/code match

Signed-off-by: Danny Allen <daall@microsoft.com>
carl-nokia pushed a commit to carl-nokia/sonic-buildimage that referenced this pull request Aug 7, 2021
…nic-net#6896)

- Add support for VLAN ID match
- Add support for ICMP type/code match

Signed-off-by: Danny Allen <daall@microsoft.com>
lolyu pushed a commit to lolyu/sonic-buildimage that referenced this pull request Sep 13, 2021
…nic-net#6896)

- Add support for VLAN ID match
- Add support for ICMP type/code match

Signed-off-by: Danny Allen <daall@microsoft.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants