GBP V2

update the GBP plugin to implement the full NAT feature set of opflex agent

Change-Id: Ic06a039c889445ed0b9087fa1f292634192b0f8d
Signed-off-by: Neale Ranns <neale.ranns@cisco.com>

1 files changed, 217 insertions, 0 deletions

diff --git a/src/plugins/gbp/gbp_recirc.c b/src/plugins/gbp/gbp_recirc.c
new file mode 100644
index 00000000000..1debbe406f3
--- /dev/null
+++ b/src/plugins/gbp/gbp_recirc.c
@@ -0,0 +1,217 @@
+/*
+ * Copyright (c) 2018 Cisco and/or its affiliates.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+#include <plugins/gbp/gbp_recirc.h>
+#include <plugins/gbp/gbp_endpoint_group.h>
+#include <plugins/gbp/gbp_endpoint.h>
+
+#include <vnet/dpo/dvr_dpo.h>
+#include <vnet/fib/fib_table.h>
+
+/**
+ * Pool of GBP recircs
+ */
+gbp_recirc_t *gbp_recirc_pool;
+
+/**
+ * Recirc configs keyed by sw_if_index
+ */
+index_t *gbp_recirc_db;
+
+int
+gbp_recirc_add (u32 sw_if_index, epg_id_t epg_id, u8 is_ext)
+{
+  gbp_recirc_t *gr;
+  index_t gri;
+
+  vec_validate_init_empty (gbp_recirc_db, sw_if_index, INDEX_INVALID);
+
+  gri = gbp_recirc_db[sw_if_index];
+
+  if (INDEX_INVALID == gri)
+    {
+      gbp_endpoint_group_t *gepg;
+      fib_protocol_t fproto;
+
+      pool_get (gbp_recirc_pool, gr);
+      memset (gr, 0, sizeof (*gr));
+      gri = gr - gbp_recirc_pool;
+
+      gr->gr_epg = epg_id;
+      gr->gr_is_ext = is_ext;
+      gr->gr_sw_if_index = sw_if_index;
+
+      /*
+       * IP enable the recirc interface
+       */
+      ip4_sw_interface_enable_disable (gr->gr_sw_if_index, 1);
+      ip6_sw_interface_enable_disable (gr->gr_sw_if_index, 1);
+
+      /*
+       * cache the FIB indicies of the EPG
+       */
+      gepg = gbp_endpoint_group_find (gr->gr_epg);
+
+      if (NULL == gepg)
+	return (VNET_API_ERROR_NO_SUCH_ENTRY);
+
+      FOR_EACH_FIB_IP_PROTOCOL (fproto)
+      {
+	gr->gr_fib_index[fproto] = gepg->gepg_fib_index[fproto];
+      }
+
+      /*
+       * Packets on the recirculation interface are subjet to src-EPG
+       * classification. Recirc interfaces are L2-emulation mode.
+       *   for internal EPGs this is via an LPM on all external subnets.
+       *   for external EPGs this is via a port mapping.
+       */
+      if (gr->gr_is_ext)
+	{
+	  /*
+	   * recirc is for post-NAT translation packets going into
+	   * the external EPG, these are classified to the NAT EPG
+	   * based on its port
+	   */
+	  gbp_itf_epg_update (gr->gr_sw_if_index, gr->gr_epg, 0);
+	  vnet_feature_enable_disable ("ip4-unicast",
+				       "ip4-gbp-src-classify",
+				       gr->gr_sw_if_index, 1, 0, 0);
+	  vnet_feature_enable_disable ("ip6-unicast",
+				       "ip6-gbp-src-classify",
+				       gr->gr_sw_if_index, 1, 0, 0);
+	}
+      else
+	{
+	  /*
+	   * recirc is for pre-NAT translation packets coming from
+	   * the external EPG, these are classified based on a LPM
+	   * in the EPG's route-domain
+	   */
+	  vnet_feature_enable_disable ("ip4-unicast",
+				       "ip4-gbp-lpm-classify",
+				       gr->gr_sw_if_index, 1, 0, 0);
+	  vnet_feature_enable_disable ("ip6-unicast",
+				       "ip6-gbp-lpm-classify",
+				       gr->gr_sw_if_index, 1, 0, 0);
+	}
+
+      gbp_recirc_db[sw_if_index] = gri;
+    }
+
+  return (0);
+}
+
+void
+gbp_recirc_delete (u32 sw_if_index)
+{
+  gbp_recirc_t *gr;
+  index_t gri;
+
+  gri = gbp_recirc_db[sw_if_index];
+
+  if (INDEX_INVALID != gri)
+    {
+      gr = pool_elt_at_index (gbp_recirc_pool, gri);
+
+      if (gr->gr_is_ext)
+	{
+	  gbp_itf_epg_delete (gr->gr_sw_if_index);
+	  vnet_feature_enable_disable ("ip4-unicast",
+				       "ip4-gbp-src-classify",
+				       gr->gr_sw_if_index, 0, 0, 0);
+	  vnet_feature_enable_disable ("ip6-unicast",
+				       "ip6-gbp-src-classify",
+				       gr->gr_sw_if_index, 0, 0, 0);
+	}
+      else
+	{
+	  vnet_feature_enable_disable ("ip4-unicast",
+				       "ip4-gbp-lpm-classify",
+				       gr->gr_sw_if_index, 0, 0, 0);
+	  vnet_feature_enable_disable ("ip6-unicast",
+				       "ip6-gbp-lpm-classify",
+				       gr->gr_sw_if_index, 0, 0, 0);
+	}
+
+      ip4_sw_interface_enable_disable (gr->gr_sw_if_index, 0);
+      ip6_sw_interface_enable_disable (gr->gr_sw_if_index, 0);
+
+      gbp_recirc_db[sw_if_index] = INDEX_INVALID;
+      pool_put (gbp_recirc_pool, gr);
+    }
+}
+
+void
+gbp_recirc_walk (gbp_recirc_cb_t cb, void *ctx)
+{
+  gbp_recirc_t *gbpe;
+
+  /* *INDENT-OFF* */
+  pool_foreach(gbpe, gbp_recirc_pool,
+  {
+    if (!cb(gbpe, ctx))
+      break;
+  });
+  /* *INDENT-ON* */
+}
+
+static int
+gbp_recirc_show_one (gbp_recirc_t * gr, void *ctx)
+{
+  vnet_main_t *vnm = vnet_get_main ();
+  vlib_main_t *vm;
+
+  vm = ctx;
+  vlib_cli_output (vm, "  %U, epg:%d, ext:%d",
+		   format_vnet_sw_if_index_name, vnm,
+		   gr->gr_sw_if_index, gr->gr_epg, gr->gr_is_ext);
+
+  return (1);
+}
+
+static clib_error_t *
+gbp_recirc_show (vlib_main_t * vm,
+		 unformat_input_t * input, vlib_cli_command_t * cmd)
+{
+  vlib_cli_output (vm, "Recirculation-Interfaces:");
+  gbp_recirc_walk (gbp_recirc_show_one, vm);
+
+  return (NULL);
+}
+
+
+/*?
+ * Show Group Based Policy Recircs and derived information
+ *
+ * @cliexpar
+ * @cliexstart{show gbp recirc}
+ * @cliexend
+ ?*/
+/* *INDENT-OFF* */
+VLIB_CLI_COMMAND (gbp_recirc_show_node, static) = {
+  .path = "show gbp recirc",
+  .short_help = "show gbp recirc\n",
+  .function = gbp_recirc_show,
+};
+/* *INDENT-ON* */
+
+/*
+ * fd.io coding-style-patch-verification: ON
+ *
+ * Local Variables:
+ * eval: (c-set-style "gnu")
+ * End:
+ */