Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

291 atomic ip block #306

Merged
merged 52 commits into from
Mar 6, 2025
Merged

291 atomic ip block #306

merged 52 commits into from
Mar 6, 2025

Conversation

ShiriMoran
Copy link
Contributor

No description provided.

@ShiriMoran ShiriMoran marked this pull request as draft March 5, 2025 09:59
@ShiriMoran ShiriMoran marked this pull request as ready for review March 5, 2025 10:19
@ShiriMoran ShiriMoran requested a review from adisos March 5, 2025 10:19
switch {
case atomBlock != nil && otherAtomBlock != nil:
return atomBlock.Intersect(otherAtomBlock).IsEmpty()
case atomBlock != nil || otherAtomBlock != nil:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why false for this case?
can use config details about internal addresses ranges?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If atom is an ipBlockTerm and otherAtom is a tagTerm or a groupTerm then there is no way we can compare them ( groupTerm is used only when we failed to analyze the group's expression).

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

if an expression is defined over VM properties, it may only capture internal VM addresses.
and in such case if IPBlock is known to be external, can infer they are disjoint?

Copy link
Contributor Author

@ShiriMoran ShiriMoran Mar 6, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, we can infer they are disjoint at the moment of synthesis. We can not infer they are meant to be disjoint.
And since using IPs to refer to internal is defined a bad practice, I don't think we should develop methodology for this case (as "guessing" disjointness)

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ok, please open a separate issue for discussing/considering this later.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@haim-kermany
Copy link
Contributor

haim-kermany commented Mar 5, 2025

use
allIPBlock := netset.GetCidrAll()

@ShiriMoran
Copy link
Contributor Author

netset.GetCidrAll()

I now use netset.CidrAll

@ShiriMoran ShiriMoran merged commit 010496a into main Mar 6, 2025
6 checks passed
@ShiriMoran ShiriMoran deleted the 291_atomic_ip_block branch March 6, 2025 07:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants