Basic flow specification support (RFC 5575)

Add flow4/flow6 network and rt-table type and operations, config grammar
and static protocol support.

Squashed flowspec branch from Pavel Tvrdik.

1 files changed, 26 insertions, 0 deletions

diff --git a/filter/test.conf b/filter/test.conf
index 18aeaae1..7915e627 100644
--- a/filter/test.conf
+++ b/filter/test.conf
@@ -548,6 +548,32 @@ bt_test_suite(t_prefix6_set, "Testing prefix IPv6 sets");
 
 
 
+function t_flowspec()
+prefix p;
+{
+	p = flow4 { dst 10.0.0.0/8; };
+	bt_assert(p !~ [ 10.0.0.0/8 ] );
+
+	bt_assert(format(flow4 { dst 10.0.0.0/8; proto = 23; }) = "flow4 { dst 10.0.0.0/8; proto 23; }");
+	bt_assert(format(flow6 { dst ::1/128; src ::2/127; }) = "flow6 { dst ::1/128; src ::2/127; }");
+	bt_assert(format(flow6 { next header false 42; }) = "flow6 { next header false 42; }");
+	bt_assert(format(flow6 { port 80; }) = "flow6 { port 80; }");
+	bt_assert(format(flow6 { dport > 24 && < 30 || 40..50,60..70,80 && >= 90; }) = "flow6 { dport > 24 && < 30 || 40..50,60..70,80 && >= 90; }");
+	bt_assert(format(flow6 { sport 0..0x400; }) = "flow6 { sport 0..1024; }");
+	bt_assert(format(flow6 { icmp type 80; }) = "flow6 { icmp type 80; }");
+	bt_assert(format(flow6 { icmp code 90; }) = "flow6 { icmp code 90; }");
+	bt_assert(format(flow6 { tcp flags 0x03/0x0f; }) = "flow6 { tcp flags 0x3/0x3,0x0/0xc; }");
+	bt_assert(format(flow6 { length 0..65535; }) = "flow6 { length 0..65535; }");
+	bt_assert(format(flow6 { dscp = 63; }) = "flow6 { dscp 63; }");
+	bt_assert(format(flow6 { fragment is_fragment || !first_fragment; }) = "flow6 { fragment is_fragment || !first_fragment; }");
+	bt_assert(format(flow6 { }) = "flow6 { }");
+}
+
+bt_test_suite(t_flowspec, "Testing flowspec routes");
+
+
+
+
 /*
  * 	Testing Paths
  * 	-------------