VPP's policer framework has been extended to support rate limiting on VLAN sub-interfaces and L2 bridge-domain interfaces. Previously, policers only worked on physical interfaces (device-input) and L3 routed interfaces. The solution leverages VPP's L2 feature bitmap system to insert policer nodes into both l2-input and l2-output processing chains, while maintaining backward compatibility with existing L3 policer functionality. A key challenge involved correcting packet accounting to include full L2 frame overhead (Ethernet headers and VLAN tags) across all four cases: L2/L3 input/output. Comprehensive unit tests validate the implementation across routed sub-interfaces and bridge-domain configurations.
200 Impressions