nat: 1:1 policy NAT - vpp - Vector Packet Processing

diff options

author	Ole Troan <ot@cisco.com>	2021-01-12 21:49:38 +0100
committer	Neale Ranns <neale@graphiant.com>	2021-02-05 13:27:48 +0000
commit	18327be5d458f9f73c12d76e677ee5a068ec6b10 (patch)
tree	bac6dbc08280e5bd6d5749ea56c862e6cdc38434 /src/vat2/vat2.h
parent	490b92738f3cc1c8d534abd6dee8dba942cb652d (diff)

nat: 1:1 policy NAT

A NAT sub-plugin doing statically configured match/rewrite on IP4 input or output. It's stateless (no connection tracking). Currently it supports rewriting of SA, DA and TCP/UDP ports. It should be simple to add new rewrites if required. API: pnat_binding_add, pnat_binding_del, pnat_bindings_get, pnat_interfaces_get CLI: set pnat translation interface <name> match <5-tuple> rewrite <5-tuple> {in|out} [del] show pnat translations show pnat interfaces Trying a new C based unit testing scheme. Where the graph node is tested in isolation. See pnat/pnat_test.c. Also added new cmake targets to generate coverage directly. E.g.: make test_pnat-ccov-report File '/vpp/sdnat/src/plugins/nat/pnat/pnat.c': Name Regions Miss Cover Lines Miss Cover ------------------------------------------------------------------------------------ pnat_interface_by_sw_if_index 39 8 79.49% 13 0 100.00% pnat_instructions_from_mask 9 0 100.00% 13 0 100.00% pnat_binding_add 64 8 87.50% 31 2 93.55% pnat_flow_lookup 4 4 0.00% 10 10 0.00% pnat_binding_attach 104 75 27.88% 33 6 81.82% pnat_binding_detach 30 5 83.33% 23 2 91.30% pnat_binding_del 97 33 65.98% 17 3 82.35% pnat.c:pnat_calc_key_from_5tuple 9 1 88.89% 14 1 92.86% pnat.c:pnat_interface_check_mask 10 2 80.00% 11 2 81.82% pnat.c:pnat_enable 5 0 100.00% 11 0 100.00% pnat.c:pnat_enable_interface 107 26 75.70% 60 15 75.00% pnat.c:pnat_disable_interface 91 30 67.03% 32 7 78.12% pnat.c:pnat_disable 7 2 71.43% 13 7 46.15% ------------------------------------------------------------------------------------ TOTAL 576 194 66.32% 281 55 80.43% File '/vpp/sdnat/src/plugins/nat/pnat/pnat_node.h': Name Regions Miss Cover Lines Miss Cover ------------------------------------------------------------------------------------ pnat_test.c:pnat_node_inline 67 11 83.58% 115 1 99.13% pnat_test.c:pnat_calc_key 9 2 77.78% 14 2 85.71% pnat_test.c:pnat_rewrite_ip4 55 11 80.00% 60 12 80.00% pnat_test.c:format_pnat_trace 1 1 0.00% 12 12 0.00% pnat_node.c:pnat_node_inline 63 63 0.00% 115 115 0.00% pnat_node.c:pnat_calc_key 9 9 0.00% 14 14 0.00% pnat_node.c:pnat_rewrite_ip4 55 55 0.00% 60 60 0.00% pnat_node.c:format_pnat_trace 5 5 0.00% 12 12 0.00% ------------------------------------------------------------------------------------ TOTAL 264 157 40.53% 402 228 43.28% Type: feature Change-Id: I9c897f833603054a8303e7369ebff6512517c9e0 Signed-off-by: Ole Troan <ot@cisco.com>

Diffstat (limited to 'src/vat2/vat2.h')

0 files changed, 0 insertions, 0 deletions

/* * Copyright (c) 2015 Cisco and/or its affiliates. * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at: * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* Copyright (c) 2001, 2002, 2003 Eliot Dresselhaus Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. */ #include <vppinfra/format.h> static int verbose; static u8 *test_vec; static u8 * format_test1 (u8 * s, va_list * va) { uword x = va_arg (*va, uword); f64 y = va_arg (*va, f64); return format (s, "%12d %12f%12.4e", x, y, y); } static int expectation (const char *exp, char *fmt, ...) { int ret = 0; va_list va; va_start (va, fmt); test_vec = va_format (test_vec, fmt, &va); va_end (va); vec_add1 (test_vec, 0); if (strcmp (exp, (char *) test_vec)) { fformat (stdout, "FAIL: %s (expected vs. result)\n\"%s\"\n\"%v\"\n", fmt, exp, test_vec); ret = 1; } else if (verbose) fformat (stdout, "PASS: %s\n", fmt); vec_delete (test_vec, vec_len (test_vec), 0); return ret; } int test_format_main (unformat_input_t * input) { int ret = 0; u8 *food = format (0, "food"); ret |= expectation ("foo", "foo"); ret |= expectation ("foo", "%s", "foo"); ret |= expectation ("9876", "%d", 9876); ret |= expectation ("-9876", "%wd", (word) - 9876); ret |= expectation ("98765432", "%u", 98765432); ret |= expectation ("1200ffee", "%x", 0x1200ffee); ret |= expectation ("BABEBABE", "%X", 0xbabebabe); ret |= expectation ("10%a", "%d%%%c", 10, 'a'); ret |= expectation ("123456789abcdef0", "%016Lx", 0x123456789abcdef0LL); ret |= expectation ("00000123", "%08x", 0x123); ret |= expectation (" 23 23 2.3037e1", "%40U", format_test1, 23, 23.0367); ret |= expectation ("left ", "%-10s", "left"); ret |= expectation (" center ", "%=10s", "center"); ret |= expectation (" right", "%+10s", "right"); ret |= expectation ("123456", "%.0f", 123456.); ret |= expectation ("1234567.0", "%.1f", 1234567.); ret |= expectation ("foo", "%.*s", 3, "food"); ret |= expectation ("food ", "%.*s", 10, "food "); ret |= expectation ("(nil)", "%.*s", 3, (void *) 0); ret |= expectation ("foo", "%.*v", 3, food); ret |= expectation ("foobar", "%.*v%s", 3, food, "bar"); ret |= expectation ("foo bar", "%S", "foo_bar"); vec_free (food); vec_free (test_vec); return ret; } typedef struct { int a, b; } foo_t; static u8 * format_foo (u8 * s, va_list * va) { foo_t *foo = va_arg (*va, foo_t *); return format (s, "{a %d, b %d}", foo->a, foo->b); } static uword unformat_foo (unformat_input_t * i, va_list * va) { foo_t *foo = va_arg (*va, foo_t *); return unformat (i, "{%D,%D}", sizeof (foo->a), &foo->a, sizeof (foo->b), &foo->b); } int test_unformat_main (unformat_input_t * input) { u32 v[8]; long l; long long ll; f64 f; u8 *s; foo_t foo = {.a = ~0,.b = ~0 }; v[0] = v[1] = 0; while (unformat_check_input (input) != UNFORMAT_END_OF_INPUT) { if (unformat (input, "01 %d %d", &v[0], &v[1])) fformat (stdout, "got 01 %d %d\n", v[0], v[1]); else if (unformat (input, "d %d", &v[0])) fformat (stdout, "got it d %d\n", v[0]); else if (unformat (input, "ld %ld", &l)) fformat (stdout, "got it ld %ld\n", l); else if (unformat (input, "lld %lld", &ll)) fformat (stdout, "got it lld %lld\n", ll); else if (unformat (input, "string %s", &s)) fformat (stdout, "got string `%s'\n", s); else if (unformat (input, "float %f", &f)) fformat (stdout, "got float `%.4f'\n", f); else if (unformat (input, "foo %U", unformat_foo, &foo)) fformat (stdout, "got a foo `%U'\n", format_foo, &foo); else if (unformat (input, "ignore-me1")) fformat (stdout, "got an `ignore-me1'\n"); else if (unformat (input, "ignore-me2")) fformat (stdout, "got an `ignore-me2'\n"); else if (unformat (input, "gi%d_%d@-", &v[0], &v[1])) fformat (stdout, "got `gi%d_%d@-'\n", v[0], v[1]); else if (unformat (input, "%_%d.%d.%d.%d%_->%_%d.%d.%d.%d%_", &v[0], &v[1], &v[2], &v[3], &v[4], &v[5], &v[6], &v[7])) fformat (stdout, "got %d.%d.%d.%d -> %d.%d.%d.%d", v[0], v[1], v[2], v[3], v[4], v[5], v[6], v[7]); else { clib_warning ("unknown input `%U'\n", format_unformat_error, input); return 1; } } return 0; } #ifdef CLIB_UNIX int main (int argc, char *argv[]) { unformat_input_t i; verbose = (argc > 1); unformat_init_command_line (&i, argv); if (unformat (&i, "unformat")) return test_unformat_main (&i); else return test_format_main (&i); } #endif /* * fd.io coding-style-patch-verification: ON * * Local Variables: * eval: (c-set-style "gnu") * End: */


context:
space:
mode: