flow_rule_drop

<run>
    <script name="flow_rule_drop"/>
    <arg name="count">
        <value>FALSE</value>
    </arg>
    <arg name="env">
      <value ref="env.peer2peer"/>
    </arg>
    <arg name="flow_rule_pattern">
        <value ref="flow_rule_pattern.ethertype"/>
        <value ref="flow_rule_pattern.ethertype.arp"/>
        <value ref="flow_rule_pattern.ethertype.pppoed"/>
        <value ref="flow_rule_pattern.ethertype.pppoes"/>
        <value ref="flow_rule_pattern.ethertype.ip4"/>
        <value ref="flow_rule_pattern.ethertype.outer_vid"/>
        <value ref="flow_rule_pattern.ethertype.outer_vid.inner_vid"/>
        <value ref="flow_rule_pattern.dst_mac"/>
        <value ref="flow_rule_pattern.unknown_ucast_dst_mac"/>
        <value ref="flow_rule_pattern.unknown_mcast_dst_mac"/>
        <value ref="flow_rule_pattern.dst_mac.ethertype"/>
        <value ref="flow_rule_pattern.dst_mac.ethertype.ip4"/>
        <value ref="flow_rule_pattern.ip_proto"/>
        <value ref="flow_rule_pattern.ip_proto.icmp4"/>
        <value ref="flow_rule_pattern.ip_proto.udp"/>
        <value ref="flow_rule_pattern.ip_proto.tcp"/>
        <value ref="flow_rule_pattern.dst_mac.ip_proto"/>
        <value ref="flow_rule_pattern.dst_mac.ip_proto.udp"/>
        <value ref="flow_rule_pattern.3tuple.udp"/>
        <value ref="flow_rule_pattern.5tuple.udp"/>
        <value ref="flow_rule_pattern.dst_mac.3tuple.udp"/>
        <value ref="flow_rule_pattern.dst_mac.5tuple.udp"/>
        <value ref="flow_rule_pattern.3tuple.tcp"/>
        <value ref="flow_rule_pattern.5tuple.tcp"/>
        <value ref="flow_rule_pattern.dst_mac.3tuple.tcp"/>
        <value ref="flow_rule_pattern.dst_mac.5tuple.tcp"/>
    </arg>
    <arg name="ingress">
        <value>TRUE</value>
    </arg>
    <arg name="promisc" type="boolean"/>
    <arg name="transfer">
        <value>FALSE</value>
    </arg>
    <arg name="isolated">
        <value>FALSE</value>
    </arg>
    <arg name="is_ip6_inner_frame">
        <value>FALSE</value>
    </arg>
</run>

<run name="flow_rule_drop_and_count_ip4">
    <script name="flow_rule_drop"/>
    <arg name="env">
      <value ref="env.peer2peer"/>
    </arg>
    <arg name="flow_rule_pattern">
        <value ref="flow_rule_pattern.ethertype"/>
        <value ref="flow_rule_pattern.ethertype.arp"/>
        <value ref="flow_rule_pattern.ethertype.pppoed"/>
        <value ref="flow_rule_pattern.ethertype.pppoes"/>
        <value ref="flow_rule_pattern.ethertype.ip4"/>
        <value ref="flow_rule_pattern.ethertype.outer_vid"/>
        <value ref="flow_rule_pattern.ethertype.outer_vid.inner_vid"/>
        <value ref="flow_rule_pattern.dst_mac"/>
        <value ref="flow_rule_pattern.unknown_ucast_dst_mac"/>
        <value ref="flow_rule_pattern.unknown_mcast_dst_mac"/>
        <value ref="flow_rule_pattern.dst_mac.ethertype"/>
        <value ref="flow_rule_pattern.dst_mac.ethertype.ip4"/>
        <value ref="flow_rule_pattern.ip_proto"/>
        <value ref="flow_rule_pattern.ip_proto.icmp4"/>
        <value ref="flow_rule_pattern.ip_proto.udp"/>
        <value ref="flow_rule_pattern.ip_proto.tcp"/>
        <value ref="flow_rule_pattern.dst_mac.ip_proto"/>
        <value ref="flow_rule_pattern.dst_mac.ip_proto.udp"/>
        <value ref="flow_rule_pattern.3tuple.udp"/>
        <value ref="flow_rule_pattern.5tuple.udp"/>
        <value ref="flow_rule_pattern.dst_mac.3tuple.udp"/>
        <value ref="flow_rule_pattern.dst_mac.5tuple.udp"/>
        <value ref="flow_rule_pattern.3tuple.tcp"/>
        <value ref="flow_rule_pattern.5tuple.tcp"/>
        <value ref="flow_rule_pattern.dst_mac.3tuple.tcp"/>
        <value ref="flow_rule_pattern.dst_mac.5tuple.tcp"/>
    </arg>
    <arg name="is_ip6_inner_frame">
        <value>FALSE</value>
    </arg>
</run>

<run name="flow_rule_drop_and_count_ip6">
    <script name="flow_rule_drop"/>
    <arg name="env">
      <value ref="env.peer2peer_ip6"/>
    </arg>
    <arg name="flow_rule_pattern">
        <value ref="flow_rule_pattern.3tuple.udp6"/>
        <value ref="flow_rule_pattern.5tuple.udp6"/>
        <value ref="flow_rule_pattern.ethertype.ip6"/>
    </arg>
    <arg name="is_ip6_inner_frame">
        <value>FALSE</value>
    </arg>
</run>

<run name="flow_rule_drop_and_count_tunnel">
    <script name="flow_rule_drop"/>
    <arg name="env" list="env_rule">
      <value ref="env.peer2peer"/>
      <value ref="env.peer2peer"/>
      <value ref="env.peer2peer_ip6"/>
      <value ref="env.peer2peer"/>
      <value ref="env.peer2peer"/>
      <value ref="env.peer2peer_ip6"/>
      <value ref="env.peer2peer"/>
      <value ref="env.peer2peer_ip6"/>
      <value ref="env.peer2peer"/>
      <value ref="env.peer2peer_ip6"/>
      <value ref="env.peer2peer"/>
    </arg>
    <arg name="flow_rule_pattern" list="env_rule">
      <value ref="flow_rule_pattern.vsid.vxlan"/>
      <value ref="flow_rule_pattern.ip4.udp_dst.vsid.vxlan"/>
      <value ref="flow_rule_pattern.ip6.udp_dst.vsid.vxlan"/>
      <value ref="flow_rule_pattern.vsid.ifrm_dst_mac.vxlan"/>
      <value ref="flow_rule_pattern.ip4.udp_dst.vsid.ifrm_dst_mac.vxlan"/>
      <value ref="flow_rule_pattern.ip6.udp_dst.vsid.ifrm_dst_mac.vxlan"/>
      <value ref="flow_rule_pattern.dst_mac.vsid.ifrm_dst_mac.vxlan"/>
      <value ref="flow_rule_pattern.dst_mac.vsid.ifrm_dst_mac.vxlan6"/>
      <value ref="flow_rule_pattern.dst_mac.vsid.ifrm_dst_mac.geneve"/>
      <value ref="flow_rule_pattern.dst_mac.vsid.ifrm_dst_mac.geneve6"/>
      <value ref="flow_rule_pattern.dst_mac.vsid.ifrm_dst_mac.nvgre"/>
    </arg>
    <arg name="is_ip6_inner_frame" type="boolean"/>
</run>