vyos-1x.git/src/conf_mode/vpp_acl.py, branch rollingVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=rolling2026-06-17T14:09:42+00:00vpp: T8603: Expand ACL support to logical interfaces2026-06-17T14:09:42+00:00Nataliia Solomkonatalirs1985@gmail.com2026-06-17T11:44:10+00:00urn:sha1:50919788b8128024341b2af351f969a00a9d3a0aVPP: T8495: fix issue with assigning acl on sub interfaces2026-04-20T10:23:49+00:00Ruslan Volodinntwman93@gmail.com2026-04-14T13:17:14+00:00urn:sha1:382b13c9153fe09f7545ac789e692ec4173d228fvpp: T8438: Add bidirectional interface-in-use validation2026-04-02T11:27:22+00:00Nataliia Solomkonatalirs1985@gmail.com2026-04-02T10:57:19+00:00urn:sha1:3139ba759c21800386bc1aa127dd95bc63229362
Add bidirectional VPP interface reference validation: prevent assigning an interface used by a VPP feature (NAT/ACL/IPFIX/sFlow, etc.)
as a VPP member (bond/bridge/xconnect) and prevent using a VPP member interface in VPP features.
Block interface deletion when it is still referenced by any VPP feature/member.
Fix VLAN subinterface removal checks broken by the recent VPP config tree restructuring.
vpp: T8252: Change ACL node 'macip' to 'mac'2026-02-11T10:37:12+00:00Nataliia Solomkonatalirs1985@gmail.com2026-02-11T08:28:14+00:00urn:sha1:eee03985388eb43396559d551e0bf678568e89fdvpp: T8250: Rewrite the CLI for ACL tcp-flags2026-02-10T17:39:18+00:00Nataliia Solomkonatalirs1985@gmail.com2026-02-10T17:28:52+00:00urn:sha1:f94add1ee4eb7255eb5a39d33aa6314d11e8af7eT7697: Remove year from copyright2025-08-07T15:43:25+00:00Viacheslavv.gletenko@vyos.io2025-08-07T15:43:25+00:00urn:sha1:6801f0ef7365556d1c8eb60aeed01789a7620cb7T7488: Make VPP restartable2025-05-28T11:48:07+00:00Nataliia Solomkonatalirs1985@gmail.com2025-05-27T11:27:50+00:00urn:sha1:31beaf550786502f5b62034c6e4b2e0e52508f8cT7419: VPP ACL implementation (#31)2025-05-13T14:33:35+00:00Nataliia S.81954790+natali-rs1985@users.noreply.github.com2025-05-13T14:33:35+00:00urn:sha1:151afffe15ce89755f3c3f81a9d2c647e487f647
CLI:
```
set vpp acl ip tag-name <tag-name> rule <nn> action <permit|deny|permit-reflect>
set vpp acl ip tag-name <tag-name> rule <nn> source prefix <prefix>
set vpp acl ip tag-name <tag-name> rule <nn> source port <port|range>
set vpp acl ip tag-name <tag-name> rule <nn> destination prefix <prefix>
set vpp acl ip tag-name <tag-name> rule <nn> destination port <port>
set vpp acl ip tag-name <tag-name> rule <nn> protocol <protocol>
set vpp acl ip tag-name <tag-name> rule <nn> tcp-flags <fin|syn|rst|psh|ack|urg|ecn|cwr>
set vpp acl ip tag-name <tag-name> rule <nn> tcp-flags not <fin|syn|rst|psh|ack|urg|ecn|cwr>
set vpp acl ip interface <interface_name> input acl-tag <n> tag-name <tag-name>
set vpp acl ip interface <interface_name> output acl-tag <n> tag-name <tag-name>
set vpp acl macip tag-name <tag-name> rule <nn> prefix <prefix>
set vpp acl macip tag-name <tag-name> rule <nn> mac-address <mac>
set vpp acl macip tag-name <tag-name> rule <nn> mac-mask <mac-mask>
set vpp acl macip tag-name <tag-name> rule <nn> action <permit|deny>
set vpp acl macip interface <interface_name> tag-name <tag-name>
```
OP mode
```
show vpp acl ip tag-name <tag_name>
show vpp acl ip interface
show vpp acl macip tag-name <tag_name>
show vpp acl macip interface
```