| .. _packetforge_doc: |
| |
| Packetforge for generic flow |
| ============================ |
| |
| Packetforge is a tool to support generic flow. Since the input format of |
| generic flow is hard to read and create, packetforge can help to create |
| generic flow rules using a format of naming protocols (like Scapy) or json |
| profile. Packetforge is built based on a parsegraph, users can modify the |
| graph nodes and edges if needed. |
| |
| Command examples |
| ---------------- |
| |
| :: |
| |
| $ python flow_create.py --add -p "mac()/ipv4(src=1.1.1.1,dst=2.2.2.2)/udp()" |
| -a "redirect-to-queue 3" -i 1 |
| |
| $ python flow_create.py --add |
| --pattern "mac()/ipv4(src=1.1.1.1,dst=2.2.2.2)/udp()" |
| --actions "redirect-to-queue 3" --interface 1 |
| |
| $ python flow_create.py --del -i 1 -I 0 |
| |
| $ python flow_create.py --del --interface 1 --flow-index 0 |
| |
| Naming format input. There are two operations, add and delete flow rules. |
| For add, it needs three parameters. Pattern is similar to Scapy protocols. |
| Actions is the same as vnet/flow command. Interface is the device to which |
| we want to add the flow rule. For delete, flow index is the index of the |
| flow rule we want to delete. We can get the index number when we add the |
| flow or use command to show the existed flow entry in CLI. |
| |
| :: |
| |
| $ python flow_create.py --add -f "./flow_rule_examples/mac_ipv4.json" -i 1 |
| |
| $ python flow_create.py --add --file "./flow_rule_examples/mac_ipv4.json" |
| --interface 1 |
| |
| $ python flow_create.py --add -f "./flow_rule_examples/mac_ipv4.json" |
| -a "redirect-to-queue 3" -i 1 |
| |
| Json profile format input. This command takes a json profile as parameter. |
| In the json profile, there will be protocols and their fields and values. |
| Users can define spec and mask for each field. Actions can be added in the |
| profile directly, otherwise "-a" option should be added in the command to |
| specify actions. The example can be found in parsegraph/samples folder. |
| Users can create their own json files according to examples and Spec. |
| |
| :: |
| |
| $ python flow_create.py --show -p "mac()/ipv4(src=1.1.1.1,dst=2.2.2.2)/udp()" |
| |
| $ python flow_parse.py --show -p "mac()/ipv4(src=1.1.1.1,dst=2.2.2.2)/udp()" |
| |
| These commands can show the forging result of spec and mask only, without invoving |
| VPP. No need to configure actions and interfaces. Users can get the binary string |
| of spec and mask from a flow pattern if needed. flow_parse.py can be used without |
| VAPI installed. |
| |
| :: |
| |
| $ show flow entry |
| |
| It is a vnet/flow command, used in VPP CLI. It can show the added flow rules |
| after using the above commands. Users can get the flow index with this command |
| and use it to delete the flow rule. |
| |
| ParseGraph |
| ---------- |
| |
| Packetforge is built based on a ParseGraph. The ParseGraph is constructed |
| with nodes and edges. Nodes are protocols, including information about |
| protocol's name, fields and default values. Edges are the relationship |
| between two protocols, including some actions needed when connecting two |
| protocols. For example, change the mac header ethertype to 0x0800 when |
| connecting mac and ipv4. More details are in the Spec in parsegraph folder. |
| Users can build the ParseGraph following the spec by themselves, like |
| adding a new protocol. If NIC supports the new protocol, the rule can be |
| created. Otherwise, it will return error. |