firewall.p4

//
// Copyright (c) 2018 Haggai Eran
// All rights reserved.
//
// Redistribution and use in source and binary forms, with or without modification,
// are permitted provided that the following conditions are met:
//
//  * Redistributions of source code must retain the above copyright notice, this
// list of conditions and the following disclaimer.
//  * Redistributions in binary form must reproduce the above copyright notice,
// this list of conditions and the following disclaimer in the documentation and/or
// other materials provided with the distribution.
//
// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS ``AS IS''
// AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
// IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
// DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR
// ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
// (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
// LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
// ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
// (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
// SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
//

#include "headers.p4"

control IngressPipeline(inout headers_t hdr, inout metadata_t ctrl) {
    action pass() {
        ctrl.dropped = 0;
    }
    action drop() {
        ctrl.dropped = 1;
    }

    table flows {
        key             = {
            hdr.ipv4.src : exact;
            hdr.ipv4.dst : exact;
            hdr.udp.sport : exact;
            hdr.udp.dport : exact;
        }
        actions         = { pass; drop; }
        size            = 1024;
        default_action  = pass;
    }

    apply {
        if (hdr.ipv4.isValid() && hdr.udp.isValid())
            flows.apply();
        else
            pass();
    }
}

XilinxSwitch(Parser(), IngressPipeline(), Deparser()) main;