faucet.valve_acl module

Compose ACLs on ports.

class faucet.valve_acl.ValveAclManager(port_acl_table, vlan_acl_table, pipeline, meters, dp_acls=None)

Bases: faucet.valve_manager_base.ValveManagerBase

Handle installation of ACLs on a DP

add_authed_mac(port_num, mac)

Add authed mac address

add_port(port)

Install port acls if configured

add_vlan(vlan)

Install vlan acls if configured

cold_start_port(port)

Reload acl for a port by deleting existing rules and calling add_port

create_acl_tunnel(dp)

Create tunnel acls from ACLs that require applying in DP Returns flowmods for the tunnel :param dp: DP that contains the tunnel acls to build :type dp: DP

create_dot1x_flow_pair(dot1x_port, nfv_sw_port, mac)

Create dot1x flow pair

del_authed_mac(port_num, mac=None)

remove authed mac address

del_dot1x_flow_pair(dot1x_port, nfv_sw_port, mac)

Deletes dot1x flow pair

initialise_tables()

Install dp acls if configured

faucet.valve_acl.build_acl_entry(acl_table, rule_conf, meters, acl_allow_inst, acl_force_port_vlan_inst, port_num=None, vlan_vid=None)

Build flow/groupmods for one ACL rule entry.

faucet.valve_acl.build_acl_ofmsgs(acls, acl_table, acl_allow_inst, acl_force_port_vlan_inst, highest_priority, meters, exact_match, port_num=None, vlan_vid=None)

Build flow/groupmods for all entries in an ACL.

faucet.valve_acl.build_output_actions(acl_table, output_dict)

Implement actions to alter packet/output.

faucet.valve_acl.push_vlan(acl_table, vlan_vid)

Push a VLAN tag with optional selection of eth type.

faucet.valve_acl.rewrite_vlan(acl_table, output_dict)

Implement actions to rewrite VLAN headers.