1 /*******************************************************************************
2 * ============LICENSE_START==================================================
4 * * ===========================================================================
5 * * Copyright © 2017 AT&T Intellectual Property. All rights reserved.
6 * * ===========================================================================
7 * * Licensed under the Apache License, Version 2.0 (the "License");
8 * * you may not use this file except in compliance with the License.
9 * * You may obtain a copy of the License at
11 * * http://www.apache.org/licenses/LICENSE-2.0
13 * * Unless required by applicable law or agreed to in writing, software
14 * * distributed under the License is distributed on an "AS IS" BASIS,
15 * * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * * See the License for the specific language governing permissions and
17 * * limitations under the License.
18 * * ============LICENSE_END====================================================
20 * * ECOMP is a trademark and service mark of AT&T Intellectual Property.
22 ******************************************************************************/
25 package org.onap.dmaap.datarouter.node;
28 * Compare IP addresses as byte arrays to a subnet specified as a CIDR
30 public class SubnetMatcher {
36 * Construct a subnet matcher given a CIDR
38 * @param subnet The CIDR to match
40 public SubnetMatcher(String subnet) {
41 int i = subnet.lastIndexOf('/');
43 sn = NodeUtils.getInetAddress(subnet);
46 len = Integer.parseInt(subnet.substring(i + 1));
47 sn = NodeUtils.getInetAddress(subnet.substring(0, i));
48 mask = ((0xff00) >> (len % 8)) & 0xff;
54 * Is the IP address in the CIDR?
56 * @param addr the IP address as bytes in network byte order
57 * @return true if the IP address matches.
59 public boolean matches(byte[] addr) {
60 if (addr.length != sn.length) {
63 for (int i = 0; i < len; i++) {
64 if (addr[i] != sn[i]) {
68 if (mask != 0 && ((addr[len] ^ sn[len]) & mask) != 0) {