#pragma once

#include <cstdint>

#include <memory>

#include <vector>

#include "envoy/config/core/v3/socket_option.pb.h"

#include "envoy/network/address.h"

#include "envoy/network/socket.h"

#include "source/common/common/logger.h"

#include "absl/types/optional.h"

#include "cilium/filter_state_cilium_destination.h"

#include "cilium/filter_state_cilium_policy.h"

namespace Envoy {

namespace Cilium {

// Socket Option that restores the local address of the socket with the relevant

// source address which is either the original source address or a configured

// source address (used for Ingress - N/S load balancing).

// In addition, its hashKey implementation is also responsible to introduce Envoy

// to separate upstream connection pools per source address or source security ID.

class SourceAddressSocketOption : public Network::Socket::Option,

                                  public Logger::Loggable<Logger::Id::filter> {

public:

  SourceAddressSocketOption(

      uint32_t source_identity, int linger_time = -1,

      Network::Address::InstanceConstSharedPtr original_source_address = nullptr,

      Network::Address::InstanceConstSharedPtr ipv4_source_address = nullptr,

      Network::Address::InstanceConstSharedPtr ipv6_source_address = nullptr,

      std::shared_ptr<CiliumDestinationFilterState> dest_fs = nullptr,

      std::shared_ptr<CiliumPolicyFilterState> policy_fs = nullptr);

  absl::optional<Network::Socket::Option::Details>

  getOptionDetails(const Network::Socket&,

  bool setOption(Network::Socket& socket,

                 envoy::config::core::v3::SocketOption::SocketState state) const override;

  void hashKey(std::vector<uint8_t>& key) const override;

  uint32_t source_identity_;

  int linger_time_;

  Network::Address::InstanceConstSharedPtr original_source_address_;

  // Version specific source addresses are only used if original source address is not used.

  // Selection is made based on the socket domain, which is selected based on the destination

  // address. This makes sure we don't try to bind IPv4 or IPv6 source address to a socket

  // connecting to IPv6 or IPv4 address, respectively.

  Network::Address::InstanceConstSharedPtr ipv4_source_address_;

  Network::Address::InstanceConstSharedPtr ipv6_source_address_;

  std::shared_ptr<CiliumDestinationFilterState> dest_fs_;

  std::shared_ptr<CiliumPolicyFilterState> policy_fs_;

};

} // namespace Cilium

} // namespace Envoy