Documentation

Pipeline

Reusable named pipelines

The pipeline block allows defining a reusable named pipelines that can be invoked from multiple places in the configuration. This is useful for defining common processing logic that can be shared across different policies or handlers.

A common use case is to define a reusable logging pipelines

aaa {
    pipeline "LOG_AUTHENTICATION" {
        log "AUTHENTICATION" {
            json {
                "Timestamp" datetime.timestamp;
                "AAA-Identity" aaa.identity;
                "AAA-Method" aaa.method;
                "Reason" aaa.reason;
                "Result" "%{aaa.result}";
                "Errors" "%{aaa.errors}";
            }
        }
    }
}

The pipeline is invoked using the invoke action:

final-authentication {
    invoke "LOG_AUTHENTICATION";
}
Navigation
Parents