diff options
| author |   Juraj Sloboda <jsloboda@cisco.com> | 2018-04-10 13:51:54 +0200 |
|---|---|---|
| committer |   Damjan Marion <dmarion.lists@gmail.com> | 2018-04-19 10:35:13 +0000 |
| commit | 1e5c07d379a092f4829e7081aa962d013b31fdfc (patch) | |
| tree | 1b1a3c386663b3356773cf374b55a64f14d43709 /src/plugins/nat/out2in.c | |
| parent | b14826e459302556febb391456ea90644278645a (diff) | |
Add special Twice-NAT feature (VPP-1221)
When enabled then Twice-NAT is applied only when
source IP equals destination IP after DNAT
Change-Id: I58a9d1d222b2a10c83eafffb2107f32c1b4aa3a8
Signed-off-by: Juraj Sloboda <jsloboda@cisco.com>
Diffstat (limited to 'src/plugins/nat/out2in.c')
| -rwxr-xr-x | src/plugins/nat/out2in.c | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/src/plugins/nat/out2in.c b/src/plugins/nat/out2in.c index 637a07341e0..a0128b8d61d 100755 --- a/src/plugins/nat/out2in.c +++ b/src/plugins/nat/out2in.c @@ -871,6 +871,7 @@ snat_out2in_unknown_proto (snat_main_t *sm, s->ext_host_addr.as_u32 = ip->src_address.as_u32; s->flags |= SNAT_SESSION_FLAG_UNKNOWN_PROTO; s->flags |= SNAT_SESSION_FLAG_STATIC_MAPPING; + s->flags |= SNAT_SESSION_FLAG_ENDPOINT_DEPENDENT; s->outside_address_index = ~0; s->out2in.addr.as_u32 = old_addr; s->out2in.fib_index = rx_fib_index; @@ -935,7 +936,8 @@ snat_out2in_lb (snat_main_t *sm, snat_user_t *u; u32 address_index; snat_session_key_t eh_key; - u8 twice_nat, lb; + twice_nat_type_t twice_nat; + u8 lb; old_addr = ip->dst_address.as_u32; @@ -987,6 +989,7 @@ snat_out2in_lb (snat_main_t *sm, s->flags |= SNAT_SESSION_FLAG_STATIC_MAPPING; if (lb) s->flags |= SNAT_SESSION_FLAG_LOAD_BALANCING; + s->flags |= SNAT_SESSION_FLAG_ENDPOINT_DEPENDENT; s->outside_address_index = ~0; s->out2in = e_key; s->in2out = l_key; @@ -997,7 +1000,9 @@ snat_out2in_lb (snat_main_t *sm, if (clib_bihash_add_del_16_8 (&sm->out2in_ed, &s_kv, 1)) clib_warning ("out2in-ed key add failed"); - if (twice_nat) + if (twice_nat == TWICE_NAT || + (twice_nat == TWICE_NAT_SELF && + ip->src_address.as_u32 == l_key.addr.as_u32)) { eh_key.protocol = proto; if (snat_alloc_outside_address_and_port (sm->twice_nat_addresses, 0, |