Add MACsec Manager

Signed-off-by: Ze Gan <[email protected]>

vslib/inc/MACsecManager.h

@@ -0,0 +1,146 @@
+#pragma once
+
+#include "MACsecAttr.h"
+#include "MACsecFilter.h"
+#include "MACsecForwarder.h"
+
+namespace saivs
+{
+    class MACsecManager
+    {
+    public:
+        MACsecManager();
+
+        virtual ~MACsecManager();
+
+        bool create_macsec_port(
+            _In_ const MACsecAttr &attr);
+
+        bool create_macsec_sc(
+            _In_ const MACsecAttr &attr);
+
+        bool create_macsec_sa(
+            _In_ const MACsecAttr &attr);
+
+        bool delete_macsec_port(
+            _In_ const MACsecAttr &attr);
+
+        bool delete_macsec_sc(
+            _In_ const MACsecAttr &attr);
+
+        bool delete_macsec_sa(
+            _In_ const MACsecAttr &attr);
+
+        bool enable_macsec_filter(
+            _In_ const std::string &macsecInterface,
+            _In_ bool enable);
+
+        bool get_macsec_sa_pn(
+            _In_ const MACsecAttr &attr,
+            _Out_ sai_uint64_t &pn) const;
+
+    private:
+
+        bool create_macsec_egress_sc(
+            _In_ const MACsecAttr &attr);
+
+        bool create_macsec_ingress_sc(
+            _In_ const MACsecAttr &attr);
+
+        bool create_macsec_egress_sa(
+            _In_ const MACsecAttr &attr);
+
+        bool create_macsec_ingress_sa(
+            _In_ const MACsecAttr &attr);
+
+        bool delete_macsec_egress_sc(
+            _In_ const MACsecAttr &attr);
+
+        bool delete_macsec_ingress_sc(
+            _In_ const MACsecAttr &attr);
+
+        bool delete_macsec_egress_sa(
+            _In_ const MACsecAttr &attr);
+
+        bool delete_macsec_ingress_sa(
+            _In_ const MACsecAttr &attr);
+
+        bool add_macsec_filter(
+            _In_ const std::string &macsecInterface);
+
+        bool add_macsec_forwarder(
+            _In_ const std::string &macsecInterface);
+
+        bool delete_macsec_forwarder(
+            _In_ const std::string &macsecInterface);
+
+        bool add_macsec_manager(
+            _In_ const std::string &macsecInterface,
+            _In_ std::shared_ptr<HostInterfaceInfo> info);
+
+        bool delete_macsec_manager(
+            _In_ const std::string &macsecInterface);
+
+        bool get_macsec_device_info(
+            _In_ const std::string &macsecDevice,
+            _Out_ std::string &info) const;
+
+        bool is_macsec_device_existing(
+            _In_ const std::string &macsecDevice) const;
+
+        bool get_macsec_sc_info(
+            _In_ const std::string &macsecDevice,
+            _In_ sai_int32_t direction,
+            _In_ const std::string &sci,
+            _Out_ std::string &info) const;
+
+        bool is_macsec_sc_existing(
+            _In_ const std::string &macsecDevice,
+            _In_ sai_int32_t direction,
+            _In_ const std::string &sci) const;
+
+        bool get_macsec_sa_info(
+            _In_ const std::string &macsecDevice,
+            _In_ sai_int32_t direction,
+            _In_ const std::string &sci,
+            _In_ macsec_an_t an,
+            _Out_ std::string &info) const;
+
+        bool is_macsec_sa_existing(
+            _In_ const std::string &macsecDevice,
+            _In_ sai_int32_t direction,
+            _In_ const std::string &sci,
+            _In_ macsec_an_t an) const;
+
+        size_t get_macsec_sa_count(
+            _In_ const std::string &macsecDevice,
+            _In_ sai_int32_t direction,
+            _In_ const std::string &sci) const;
+
+        void cleanup_macsec_device() const;
+
+        std::string shellquote(
+            _In_ const std::string &str) const;
+
+        bool exec(
+            _In_ const std::string &command,
+            _Out_ std::string &output) const;
+
+        bool exec(
+            _In_ const std::string &command) const;
+
+        struct MACsecTrafficManager
+        {
+            MACsecTrafficManager() = default;
+
+            ~MACsecTrafficManager() = default;
+
+            std::shared_ptr<HostInterfaceInfo> m_info;
+            std::shared_ptr<MACsecFilter> m_ingress_filter;
+            std::shared_ptr<MACsecFilter> m_egress_filter;
+            std::shared_ptr<MACsecForwarder> m_forwarder;
+        };
+
+        std::map<std::string, MACsecTrafficManager> m_macsec_traffic_managers;
+    };
+}