Summary

VPP ACLs can be used with logical interfaces, like bondings and tunnels. But CLI does not allow this at the moment.

Use case

The feature would be highly useful, especially for interfaces like Bonding.

Additional information

The main part of the work seems to need to be done in https://github.com/vyos/vyos-1x/blob/current/src/conf_mode/vpp_acl.py

We need to pay special attention to dependencies and configuration order, to ensure that ACLs are not applied to wrong or non-existing interfaces.