[dpdk-users] Request for a valid ip_pipeline example to configure firewall

[Singh, Jasvinder]

Hi Tao,

> -----Original Message-----
> From: users [mailto:users-bounces at dpdk.org] On Behalf Of Tao Wang
> Sent: Friday, July 15, 2016 3:59 PM
> To: users at dpdk.org
> Subject: [dpdk-users] Request for a valid ip_pipeline example to configure
> firewall
> 
> Dear all,
> 
> I am using the dpdp-16.04 in a qemu-kvm based CentOS7 VM.
> 
> I am running the ip_pipeline example. However, I can not get firewall
> configured rightly according to the config files posted at
> http://dpdk.org/browse/dpdk/tree/examples/ip_pipeline/config.
> 
> But there are some problems,
> 
> 1) CLI command "p 1 firewall add priority 1 ipv4 0.0.0.0 0 100.0.0.0 10 0
> 65535 0 65535 6 0xF port 0" returns "bad argument"

If you are working on 16.04, the command format for adding firewall rule is as below;

p <pipeline_id> firewall add ipv4 <priority> <src ip><src ip mask><dst ip><ds tip mask><src_port_from><src_port_to><dst_port_from><dst_port_to><protocol><protocol_mask><port id>

The reason why your command is failing is because in 16.07 we have changed the command format for adding rule to firewall pipeline.

> 2) CLI command "p 1 firewall add default 4 #SINK0" returns "command failed"

I guess you have configured 4 ports  (port  id 0 -3), so if this is the case, use right port id.
> 
> So how to configure it rightly? What's the right semantics of the CLI command
> for firewall?

To learn the command format, please follow the code - ip_pipeline/pipeline/pipeline_firewall.c 


> Wish for your reply.
> 
> Best,
> Tao


Jasvinder