user level vxlan bridge and firewall

NB: Depends on Botan2 and CK https://github.com/mattmacy/ck

uvxbridge -i <ingress> -e <egress> -c <config> -m <config mac address> -p <provisioning agent mac address> [-d]

v0.1: 2017.10.13 - Friday --- DONE

• underlay is v4 only
• VLAN unsupported for underlay
• regular MTU only
• only a single interface address and default route is accepted
• 2 copies on both ingress and egress
• VALE permits broadcast
• ptnetmap integrated

v0.2: 2017.10.20 - Friday DONE

v0.1 +

• optimized datapath to avoid lookups
• firewall support with per VM interface state table

v0.3 2017.10.27 - Friday DONE

v0.2 +

• encrypted tunnel support

v0.4 2017.11.03 - Friday

v0.3 +

• additional routes / interface addresses

v0.5 2017.11.10 - Friday

v0.4 +

• smart VALE (enforces subnet IDs) works
• adding support for JITted BPF filters in uvxbridge and VALE

v0.6 2017.11.17 - Friday

v0.5 +

• rate limiting in VALE and uvxbridge

v0.7 2017.11.24 - Friday

v0.6 +

• crypto offload
• copy reduction (direct SR-IOV interface)

Unscheduled - but may be done to meet performance targets:

• ptnetmap integration upstreamable
• Jumbo frames
• tagged VLAN support
• conversion to more performant data structures than STL maps