vppcalls

type IPSecSaDetails struct {
	Sa   *ipsec.SecurityAssociations_SA
	Meta *IPSecSaMeta
}

type IPSecSaMeta struct {
	SaID           uint32
	Interface      string
	IfIdx          uint32
	CryptoKeyLen   uint8
	IntegKeyLen    uint8
	Salt           uint32
	SeqOutbound    uint64
	LastSeqInbound uint64
	ReplayWindow   uint64
	TotalDataSize  uint64
}

type IPSecSpdDetails struct {
	Spd         *ipsec.SecurityPolicyDatabases_SPD
	PolicyMeta  map[string]*SpdMeta // SA-generated name is a key
	NumPolicies uint32
}

type IPSecTunnelInterfaceDetails struct {
	Tunnel *ipsec.TunnelInterfaces_Tunnel
	Meta   *IPSecTunnelMeta
}

type IPSecTunnelMeta struct {
	SwIfIndex uint32
}

type IPSecVPPRead interface {
	// DumpIPSecSPD returns a list of IPSec security policy databases
	DumpIPSecSPD() (spdList []*IPSecSpdDetails, err error)
	// DumpIPSecSA returns a list of configured security associations
	DumpIPSecSA() (saList []*IPSecSaDetails, err error)
	// DumpIPSecSAWithIndex returns a security association with provided index
	DumpIPSecSAWithIndex(saID uint32) (saList []*IPSecSaDetails, err error)
	// DumpIPSecTunnelInterfaces returns a list of configured IPSec tunnel interfaces
	DumpIPSecTunnelInterfaces() (tun []*IPSecTunnelInterfaceDetails, err error)
}

type IPSecVppAPI interface {
	IPSecVppWrite
	IPSecVPPRead
}

type IPSecVppHandler struct {
	// contains filtered or unexported fields
}

type IPSecVppWrite interface {
	// AddTunnelInterface adds tunnel interface
	AddTunnelInterface(tunnel *ipsec.TunnelInterfaces_Tunnel) (uint32, error)
	// DelTunnelInterface removes tunnel interface
	DelTunnelInterface(ifIdx uint32, tunnel *ipsec.TunnelInterfaces_Tunnel) error
	// AddSPD adds SPD to VPP via binary API
	AddSPD(spdID uint32) error
	// DelSPD deletes SPD from VPP via binary API
	DelSPD(spdID uint32) error
	// InterfaceAddSPD adds SPD interface assignment to VPP via binary API
	InterfaceAddSPD(spdID, swIfIdx uint32) error
	// InterfaceDelSPD deletes SPD interface assignment from VPP via binary API
	InterfaceDelSPD(spdID, swIfIdx uint32) error
	// AddSPDEntry adds SPD policy entry to VPP via binary API
	AddSPDEntry(spdID, saID uint32, spd *ipsec.SecurityPolicyDatabases_SPD_PolicyEntry) error
	// DelSPDEntry deletes SPD policy entry from VPP via binary API
	DelSPDEntry(spdID, saID uint32, spd *ipsec.SecurityPolicyDatabases_SPD_PolicyEntry) error
	// AddSAEntry adds SA to VPP via binary API
	AddSAEntry(saID uint32, sa *ipsec.SecurityAssociations_SA) error
	// DelSAEntry deletes SA from VPP via binary API
	DelSAEntry(saID uint32, sa *ipsec.SecurityAssociations_SA) error
}

type SpdMeta struct {
	SaID    uint32
	SpdID   uint32
	Policy  uint8
	Bytes   uint64
	Packets uint64
}