ipseccontroller.h

/***************************************************************************
*   Copyright (C) 2005 by                                                 *
*   Pedro J. Fernandez Ruiz    pedroj.fernandez@dif.um.es                 *
*   Alejandro Perez Mendez     alejandro_perez@dif.um.es                  *
*                                                                         *
*   This library is free software; you can redistribute it and/or         *
*   modify it under the terms of the GNU Lesser General Public            *
*   License as published by the Free Software Foundation; either          *
*   version 2.1 of the License, or (at your option) any later version.    *
*                                                                         *
*   This library is distributed in the hope that it will be useful,       *
*   but WITHOUT ANY WARRANTY; without even the implied warranty of        *
*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU     *
*   Lesser General Public License for more details.                       *
*                                                                         *
*   You should have received a copy of the GNU Lesser General Public      *
*   License along with this library; if not, write to the Free Software   *
*   Foundation, Inc., 51 Franklin St, Fifth Floor,                        *
*   Boston, MA  02110-1301  USA                                           *
***************************************************************************/
#ifndef IPSECCONTROLLER_H
#define IPSECCONTROLLER_H

#include "runnable.h"
#include "printable.h"
#include "ipaddress.h"
#include "payload_tsi.h"
#include "payload_tsr.h"
#include "payload_sa.h"
#include "enums.h"
#include "ipseccontrollerimpl.h"

namespace openikev2 {

    class IpsecController {

            /****************************** ATTRIBUTES ******************************/
        protected:
            static auto_ptr<IpsecControllerImpl> implementation;       
            /****************************** METHODS ******************************/
        public:
            static void startThread();

            static void setImplementation( auto_ptr<IpsecControllerImpl> implementation );

            static bool narrowPayloadTS( const Payload_TSi& received_payload_ts_i, const Payload_TSr& received_payload_ts_r, IkeSaController& ike_sa_controller, ChildSa& child_sa );

            static bool checkNarrowPayloadTS( const Payload_TSi& received_payload_ts_i , const Payload_TSr& received_payload_ts_r, ChildSa& child_sa );

            static uint32_t getSpi( const IpAddress& src, const IpAddress& dst, Enums::PROTOCOL_ID ipsec_protocol );

            static void createIpsecSa( const IpAddress& src, const IpAddress& dst, const ChildSa& childsa );

            static uint32_t deleteIpsecSa( const IpAddress& src, const IpAddress& dst, Enums::PROTOCOL_ID ipsec_protocol, uint32_t spi );

            static void createIpsecPolicy( vector< TrafficSelector*> src_sel, vector< TrafficSelector*> dst_sel, Enums::DIRECTION direction = Enums::DIR_ALL, uint32_t priority = 1000, Enums::PROTOCOL_ID ipsec_protocol = Enums::PROTO_NONE, Enums::IPSEC_MODE mode = Enums::TRANSPORT_MODE, const IpAddress* src_tunnel = NULL, const IpAddress* dst_tunnel = NULL );

            static void createIpsecPolicy( const TrafficSelector& src_sel, const TrafficSelector& dst_sel, Enums::DIRECTION direction = Enums::DIR_ALL, uint32_t priority = 1000, Enums::PROTOCOL_ID ipsec_protocol = Enums::PROTO_NONE, Enums::IPSEC_MODE mode = Enums::TRANSPORT_MODE, const IpAddress* src_tunnel = NULL, const IpAddress* dst_tunnel = NULL );

            static void deleteIpsecPolicy( vector< TrafficSelector*> src_sel, vector< TrafficSelector*> dst_sel, Enums::DIRECTION direction );

            static void updateIpsecAddresses ( const IpAddress& old_address, const IpAddress& new_address);
            
            static void flushIpsecPolicies();

            static void flushIpsecSas();
    };
    //*******************************************************************
}
#endif

---