cnat: Destination based NAT

Type: feature

Signed-off-by: Neale Ranns <nranns@cisco.com>
Change-Id: I64a99a4fbc674212944247793fd5c1fb701408cb

1 files changed, 317 insertions, 0 deletions

diff --git a/src/plugins/cnat/cnat_api.c b/src/plugins/cnat/cnat_api.c
new file mode 100644
index 00000000000..014f75c8682
--- /dev/null
+++ b/src/plugins/cnat/cnat_api.c
@@ -0,0 +1,317 @@
+/*
+ * Copyright (c) 2016 Cisco and/or its affiliates.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+#include <stddef.h>
+
+#include <vnet/vnet.h>
+#include <vnet/plugin/plugin.h>
+#include <cnat/cnat_translation.h>
+#include <cnat/cnat_session.h>
+#include <cnat/cnat_client.h>
+#include <cnat/cnat_snat.h>
+
+#include <vnet/ip/ip_types_api.h>
+
+#include <vpp/app/version.h>
+
+#include <vlibapi/api.h>
+#include <vlibmemory/api.h>
+
+/* define message IDs */
+#include <vnet/format_fns.h>
+#include <cnat/cnat.api_enum.h>
+#include <cnat/cnat.api_types.h>
+
+/**
+ * Base message ID fot the plugin
+ */
+static u32 cnat_base_msg_id;
+
+#define REPLY_MSG_ID_BASE cnat_base_msg_id
+
+#include <vlibapi/api_helper_macros.h>
+
+static void
+cnat_endpoint_decode (const vl_api_cnat_endpoint_t * in,
+		      cnat_endpoint_t * out)
+{
+  ip_address_decode2 (&in->addr, &out->ce_ip);
+  out->ce_port = clib_net_to_host_u16 (in->port);
+}
+
+static void
+cnat_endpoint_tuple_decode (const vl_api_cnat_endpoint_tuple_t * in,
+			    cnat_endpoint_tuple_t * out)
+{
+  cnat_endpoint_decode (&in->src_ep, &out->src_ep);
+  cnat_endpoint_decode (&in->dst_ep, &out->dst_ep);
+}
+
+static void
+cnat_endpoint_encode (const cnat_endpoint_t * in,
+		      vl_api_cnat_endpoint_t * out)
+{
+  ip_address_encode2 (&in->ce_ip, &out->addr);
+  out->port = clib_net_to_host_u16 (in->ce_port);
+}
+
+static void
+vl_api_cnat_translation_update_t_handler (vl_api_cnat_translation_update_t
+					  * mp)
+{
+  vl_api_cnat_translation_update_reply_t *rmp;
+  cnat_endpoint_t vip;
+  cnat_endpoint_tuple_t *paths = NULL, *path;
+  ip_protocol_t ip_proto;
+  u32 id = ~0;
+  u8 flags;
+  int rv = 0;
+  u8 pi;
+
+  rv = ip_proto_decode (mp->translation.ip_proto, &ip_proto);
+
+  if (rv)
+    goto done;
+
+  vec_validate (paths, mp->translation.n_paths - 1);
+
+  for (pi = 0; pi < mp->translation.n_paths; pi++)
+    {
+      path = &paths[pi];
+      cnat_endpoint_tuple_decode (&mp->translation.paths[pi], path);
+    }
+  cnat_endpoint_decode (&mp->translation.vip, &vip);
+
+  flags = mp->translation.flags;
+  if (!mp->translation.is_real_ip)
+    flags |= CNAT_FLAG_EXCLUSIVE;
+  id = cnat_translation_update (&vip, ip_proto, paths, flags);
+
+  vec_free (paths);
+
+done:
+  /* *INDENT-OFF* */
+  REPLY_MACRO2 (VL_API_CNAT_TRANSLATION_UPDATE_REPLY,
+  ({
+    rmp->id = htonl (id);
+  }));
+  /* *INDENT-ON* */
+}
+
+static void
+vl_api_cnat_translation_del_t_handler (vl_api_cnat_translation_del_t * mp)
+{
+  vl_api_cnat_translation_del_reply_t *rmp;
+  int rv;
+
+  rv = cnat_translation_delete (ntohl (mp->id));
+
+  REPLY_MACRO (VL_API_CNAT_TRANSLATION_DEL_REPLY);
+}
+
+typedef struct cnat_dump_walk_ctx_t_
+{
+  vl_api_registration_t *rp;
+  u32 context;
+} cnat_dump_walk_ctx_t;
+
+static walk_rc_t
+cnat_translation_send_details (u32 cti, void *args)
+{
+  vl_api_cnat_translation_details_t *mp;
+  cnat_dump_walk_ctx_t *ctx;
+  cnat_ep_trk_t *trk;
+  vl_api_cnat_endpoint_tuple_t *path;
+  size_t msg_size;
+  cnat_translation_t *ct;
+  u8 n_paths;
+
+  ctx = args;
+  ct = cnat_translation_get (cti);
+  n_paths = vec_len (ct->ct_paths);
+  msg_size = sizeof (*mp) + sizeof (mp->translation.paths[0]) * n_paths;
+
+  mp = vl_msg_api_alloc_zero (msg_size);
+  mp->_vl_msg_id = ntohs (VL_API_CNAT_TRANSLATION_DETAILS + cnat_base_msg_id);
+
+  /* fill in the message */
+  mp->context = ctx->context;
+  mp->translation.n_paths = n_paths;
+  mp->translation.id = htonl (cti);
+  cnat_endpoint_encode (&ct->ct_vip, &mp->translation.vip);
+  mp->translation.ip_proto = ip_proto_encode (ct->ct_proto);
+
+  path = mp->translation.paths;
+  vec_foreach (trk, ct->ct_paths)
+  {
+    cnat_endpoint_encode (&trk->ct_ep[VLIB_TX], &path->dst_ep);
+    cnat_endpoint_encode (&trk->ct_ep[VLIB_RX], &path->src_ep);
+    path++;
+  }
+
+  vl_api_send_msg (ctx->rp, (u8 *) mp);
+
+  return (WALK_CONTINUE);
+}
+
+static void
+vl_api_cnat_translation_dump_t_handler (vl_api_cnat_translation_dump_t * mp)
+{
+  vl_api_registration_t *rp;
+
+  rp = vl_api_client_index_to_registration (mp->client_index);
+  if (rp == 0)
+    return;
+
+  cnat_dump_walk_ctx_t ctx = {
+    .rp = rp,
+    .context = mp->context,
+  };
+
+  cnat_translation_walk (cnat_translation_send_details, &ctx);
+}
+
+static void
+ip_address2_from_46 (const ip46_address_t * nh,
+		     ip_address_family_t af, ip_address_t * ip)
+{
+  ip_addr_46 (ip) = *nh;
+  ip_addr_version (ip) = af;
+}
+
+static walk_rc_t
+cnat_session_send_details (const cnat_session_t * session, void *args)
+{
+  vl_api_cnat_session_details_t *mp;
+  cnat_dump_walk_ctx_t *ctx;
+  cnat_endpoint_t ep;
+
+  ctx = args;
+
+  mp = vl_msg_api_alloc_zero (sizeof (*mp));
+  mp->_vl_msg_id = ntohs (VL_API_CNAT_SESSION_DETAILS + cnat_base_msg_id);
+
+  /* fill in the message */
+  mp->context = ctx->context;
+
+  ip_address2_from_46 (&session->value.cs_ip[VLIB_TX], session->key.cs_af,
+		       &ep.ce_ip);
+  ep.ce_port = clib_host_to_net_u16 (session->value.cs_port[VLIB_TX]);
+  cnat_endpoint_encode (&ep, &mp->session.new);
+
+  ip_address2_from_46 (&session->key.cs_ip[VLIB_RX], session->key.cs_af,
+		       &ep.ce_ip);
+  ep.ce_port = clib_host_to_net_u16 (session->key.cs_port[VLIB_RX]);
+  cnat_endpoint_encode (&ep, &mp->session.src);
+
+  ip_address2_from_46 (&session->key.cs_ip[VLIB_TX], session->key.cs_af,
+		       &ep.ce_ip);
+  ep.ce_port = clib_host_to_net_u16 (session->key.cs_port[VLIB_TX]);
+  cnat_endpoint_encode (&ep, &mp->session.dst);
+
+  mp->session.ip_proto = ip_proto_encode (session->key.cs_proto);
+
+  vl_api_send_msg (ctx->rp, (u8 *) mp);
+
+  return (WALK_CONTINUE);
+}
+
+static void
+vl_api_cnat_session_dump_t_handler (vl_api_cnat_session_dump_t * mp)
+{
+  vl_api_registration_t *rp;
+
+  rp = vl_api_client_index_to_registration (mp->client_index);
+  if (rp == 0)
+    return;
+
+  cnat_dump_walk_ctx_t ctx = {
+    .rp = rp,
+    .context = mp->context,
+  };
+
+  cnat_session_walk (cnat_session_send_details, &ctx);
+}
+
+static void
+vl_api_cnat_session_purge_t_handler (vl_api_cnat_session_purge_t * mp)
+{
+  vl_api_cnat_session_purge_reply_t *rmp;
+  int rv;
+
+  cnat_client_throttle_pool_process ();
+  rv = cnat_session_purge ();
+  rv |= cnat_translation_purge ();
+
+  REPLY_MACRO (VL_API_CNAT_SESSION_PURGE_REPLY);
+}
+
+static void
+vl_api_cnat_set_snat_addresses_t_handler (vl_api_cnat_set_snat_addresses_t
+					  * mp)
+{
+  vl_api_cnat_set_snat_addresses_reply_t *rmp;
+  int rv = 0;
+
+  ip4_address_decode (mp->snat_ip4, &cnat_main.snat_ip4);
+  ip6_address_decode (mp->snat_ip6, &cnat_main.snat_ip6);
+
+  REPLY_MACRO (VL_API_CNAT_SET_SNAT_ADDRESSES_REPLY);
+}
+
+static void
+  vl_api_cnat_add_del_snat_prefix_t_handler
+  (vl_api_cnat_add_del_snat_prefix_t * mp)
+{
+  vl_api_cnat_add_del_snat_prefix_reply_t *rmp;
+  ip_prefix_t pfx;
+  int rv;
+
+  ip_prefix_decode2 (&mp->prefix, &pfx);
+  if (mp->is_add)
+    rv = cnat_add_snat_prefix (&pfx);
+  else
+    rv = cnat_del_snat_prefix (&pfx);
+
+  REPLY_MACRO (VL_API_CNAT_ADD_DEL_SNAT_PREFIX_REPLY);
+}
+
+#include <cnat/cnat.api.c>
+
+static clib_error_t *
+cnat_api_init (vlib_main_t * vm)
+{
+  /* Ask for a correctly-sized block of API message decode slots */
+  cnat_base_msg_id = setup_message_id_table ();
+
+  return 0;
+}
+
+VLIB_INIT_FUNCTION (cnat_api_init);
+
+/* *INDENT-OFF* */
+VLIB_PLUGIN_REGISTER () = {
+    .version = VPP_BUILD_VER,
+    .description = "CNat Translate",
+};
+/* *INDENT-ON* */
+
+/*
+ * fd.io coding-style-patch-verification: ON
+ *
+ * Local Variables:
+ * eval: (c-set-style "gnu")
+ * End:
+ */