summaryrefslogtreecommitdiffstats
path: root/plugins/vcgn-plugin/vcgn/cnat_db_scanner.c
diff options
context:
space:
mode:
Diffstat (limited to 'plugins/vcgn-plugin/vcgn/cnat_db_scanner.c')
-rw-r--r--plugins/vcgn-plugin/vcgn/cnat_db_scanner.c493
1 files changed, 0 insertions, 493 deletions
diff --git a/plugins/vcgn-plugin/vcgn/cnat_db_scanner.c b/plugins/vcgn-plugin/vcgn/cnat_db_scanner.c
deleted file mode 100644
index 6e536d84c79..00000000000
--- a/plugins/vcgn-plugin/vcgn/cnat_db_scanner.c
+++ /dev/null
@@ -1,493 +0,0 @@
-/*
- *---------------------------------------------------------------------------
- * cnat_db_scanner.c - cnat_db_scanner dispatch function and initialization
- *
- * Copyright (c) 2009-2014 Cisco and/or its affiliates.
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at:
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- *---------------------------------------------------------------------------
- */
-
-#include <vlib/vlib.h>
-#include <vnet/vnet.h>
-#include <vppinfra/error.h>
-#include <vnet/buffer.h>
-#include <vppinfra/string.h>
-#include <vppinfra/random.h>
-#include <vppinfra/fifo.h>
-#include <vppinfra/hash.h>
-#include <vppinfra/format.h>
-
-
-#include "cnat_db.h"
-#include "cnat_logging.h"
-#include "cnat_global.h"
-#include "cnat_ipv4_udp.h"
-#include "cnat_common_api.h"
-
-u32 translation_create_count, translation_delete_count;
-u32 translation_create_rate, translation_delete_rate;
-
-u32 in2out_forwarding_count, out2in_forwarding_count;
-u32 in2out_forwarding_rate, out2in_forwarding_rate;
-
-u32 nat44_active_translations;
-u32 num_entries;
-uword check_these_pool_indices[2*MAX_DB_ENTRY_SELECTED_PER_SCAN];
-
-#define CNAT_DB_SCANNER_TURN_ON 5 /* just an arbitary number for easier debugging */
-
-//extern u32 pcp_throttle_count;
-
-typedef struct {
- u32 cached_next_index;
- /* $$$$ add data here */
-
- /* convenience variables */
- vlib_main_t * vlib_main;
- vnet_main_t * vnet_main;
-} cnat_db_scanner_main_t;
-
-cnat_db_scanner_main_t cnat_db_scanner_main;
-
-
-static inline void check_session_for_expiry(
- cnat_session_entry_t * sdb, u8 timeout_dirty
- /*,dslite_table_entry_t *dslite_entry_ptr*/)
-{
- void cnat_delete_session_db_entry (cnat_session_entry_t *ep, u8 log);
- /* Tasks -
- * 1. Check for expiry for this entry
- * 2. Delete if expired
- */
- u32 timeout = 0;
-
- switch(sdb->v4_dest_key.k.vrf & CNAT_PRO_MASK) {
- case CNAT_TCP:
- if (sdb->flags & CNAT_DB_FLAG_TCP_ACTIVE) {
- timeout = sdb->timeout;
- if(PREDICT_FALSE(timeout_dirty)) {
- timeout = query_and_update_db_timeout(
- (void *)sdb, SESSION_DB_TYPE);
- }
- if(PREDICT_TRUE(timeout == 0)) {
- timeout = tcp_active_timeout;
- //dslite_entry_ptr->timeout_info.tcp_active_timeout;
- }
- } else {
- timeout = tcp_initial_setup_timeout;
- //dslite_entry_ptr->timeout_info.tcp_initial_setup_timeout;
- }
- break;
- case CNAT_UDP:
- if (sdb->flags & CNAT_DB_FLAG_UDP_ACTIVE) {
- timeout = sdb->timeout;
- if(PREDICT_FALSE(timeout_dirty)) {
- timeout = query_and_update_db_timeout(
- (void *)sdb, SESSION_DB_TYPE);
- }
-
- if(PREDICT_TRUE(timeout == 0)) {
- timeout = udp_act_session_timeout;
- //dslite_entry_ptr->timeout_info.udp_act_session_timeout;
- }
- } else {
- timeout = udp_init_session_timeout;
- //dslite_entry_ptr->timeout_info.udp_init_session_timeout;
- }
- break;
- case CNAT_ICMP:
- timeout = icmp_session_timeout;
- //dslite_entry_ptr->timeout_info.icmp_session_timeout;
- break;
- case CNAT_PPTP:
- timeout = pptp_cfg.timeout;
- break;
- default:
- return;
- }
- /* Changes required for clearing sessions */
- if (PREDICT_FALSE((sdb->entry_expires == 0) ||
- (sdb->entry_expires + timeout < cnat_current_time))) {
- cnat_delete_session_db_entry(sdb, TRUE);
- }
-}
-
-static u8 handle_db_scan_for_sessions(
- cnat_main_db_entry_t *db, int *dirty_index, uword db_index
- /* ,dslite_table_entry_t *dslite_entry_ptr */)
-{
- /* Tasks -
- * 1. Traverse through the sessions and check for timeouts
- * 2. Delete sessions that have exipred
- * 3. Check if the db has only one session remaining.. if so,
- * the details of the session has to be moved to main db
- * and session db entry needs to be freed
- * 4. If db does not have any sessions left, the db itself
- * needs to be deleted.
- */
- u32 nsessions, session_index_head, session_index;
- cnat_session_entry_t *sdb;
- u8 timeout_dirty = FALSE;
-
- if(PREDICT_FALSE(*dirty_index == db_index)) {
- *dirty_index = -1;
- }
- if(PREDICT_FALSE(timeout_dirty_flag == 1)) {
- timeout_dirty_flag = 0;
- *dirty_index = db_index;
- timeout_dirty = TRUE;
- }
-
- session_index_head = session_index = db->session_head_index;
- nsessions = db->nsessions;
-
- do {
- sdb = cnat_session_db + session_index;
- if(PREDICT_FALSE(!sdb)) {
- //TO DO: Debug msg?
- return FALSE;
- }
- session_index = sdb->main_list.next;
- check_session_for_expiry(sdb, timeout_dirty /*,dslite_entry_ptr*/);
- nsessions--; /* To ensure that we do not get in to an infinite loop */
- } while(session_index != session_index_head
- && db->session_head_index != EMPTY &&
- nsessions);
-
- /* Note.. the code below assumes that while deleting the
- * sessions, we do not delete the main db entry if it does
- * not have any sessions anymore
- */
- if(PREDICT_FALSE((!db->nsessions) &&
- (!(db->flags & CNAT_DB_FLAG_STATIC_PORT)))) {
- cnat_delete_main_db_entry_v2(db);
- return TRUE; /* to indicate that main db was deleted */
- }
- return FALSE;
-}
-
-static void cnat_db_scanner(void)
-{
- cnat_main_db_entry_t * db;
- u32 timeout;
- cnat_vrfmap_t *my_vrfmap __attribute__((unused)) = 0;
- static int dirty_index = -1;
- u16 instance __attribute__((unused));
- //dslite_table_entry_t *dslite_entry_ptr;
- u32 i;
- uword db_index;
- //pcp_throttle_count = 0;
-
- for (i = 0; i < num_entries; i++) {
- db_index = check_these_pool_indices[i];
- db = cnat_main_db + db_index;
- timeout=0;
- my_vrfmap = 0;
-
-#if 0
- if(PREDICT_FALSE(db->flags & CNAT_PCP_FLAG)) {
-
- if(db->proto_data.seq_pcp.pcp_lifetime < cnat_current_time) {
- /* mark as implicit */
- db->flags &= ~CNAT_PCP_FLAG;
- }
- continue;
- }
-
-#endif
- if(PREDICT_FALSE(db->nsessions > 1)) {
- if(PREDICT_FALSE(
- handle_db_scan_for_sessions(db, &dirty_index, db_index /*,dslite_entry_ptr */))) {
- continue;
- } else if(PREDICT_TRUE(db->nsessions > 1)) {
- continue;
- }
- /* if there is exactly one dest left.. let it fall through
- * and check if that needs to be deleted as well
- */
- }
-
-#if 0
- if (PREDICT_FALSE(db->flags & CNAT_DB_FLAG_STATIC_PORT)) {
- if (PREDICT_FALSE(db->flags & CNAT_DB_DSLITE_FLAG)) {
- if(PREDICT_FALSE(
- ((dslite_entry_ptr->nf_logging_policy != SESSION_LOG_ENABLE) &&
- (dslite_entry_ptr->syslog_logging_policy != SESSION_LOG_ENABLE))
- || (db->nsessions !=1))) {
- continue;
- }
- } else {
- my_vrfmap = cnat_map_by_vrf + db->vrfmap_index;
- if(PREDICT_FALSE(
- ((my_vrfmap->nf_logging_policy != SESSION_LOG_ENABLE) &&
- (my_vrfmap->syslog_logging_policy != SESSION_LOG_ENABLE)) ||
- (db->nsessions !=1))) {
- continue;
- }
- }
- }
-#endif
-
- switch(db->in2out_key.k.vrf & CNAT_PRO_MASK) {
- case CNAT_TCP:
- if (db->flags & CNAT_DB_FLAG_TCP_ACTIVE) {
- timeout = db->timeout;
- if(PREDICT_FALSE(dirty_index == db_index)) {
- dirty_index = -1;
- }
- if(PREDICT_FALSE(timeout_dirty_flag == 1)) {
- timeout_dirty_flag = 0;
- dirty_index = db_index;
- }
- if(PREDICT_FALSE(dirty_index != -1)) {
- timeout = query_and_update_db_timeout(
- (void *)db, MAIN_DB_TYPE);
- }
- if(PREDICT_TRUE(timeout == 0)) {
- timeout = tcp_active_timeout;
- }
- } else {
- timeout = tcp_initial_setup_timeout;
- }
- break;
- case CNAT_UDP:
- if (db->flags & CNAT_DB_FLAG_UDP_ACTIVE) {
- timeout = db->timeout;
- if(PREDICT_FALSE(dirty_index == db_index)) {
- dirty_index = -1;
- }
- if(PREDICT_FALSE(timeout_dirty_flag == 1)) {
- timeout_dirty_flag = 0;
- dirty_index = db_index;
- }
- if(PREDICT_FALSE(dirty_index != -1)) {
- timeout = query_and_update_db_timeout(
- (void *)db, MAIN_DB_TYPE);
- }
- if(PREDICT_TRUE(timeout == 0)) {
- timeout = udp_act_session_timeout;
- }
- } else {
- timeout = udp_init_session_timeout;
- }
- break;
- case CNAT_ICMP:
- timeout = icmp_session_timeout;
- break;
- case CNAT_PPTP:
- timeout = pptp_cfg.timeout;
- break;
- default:
- continue;
- }
-
-
- /* Ref: CSCtu97536 */
- if (PREDICT_FALSE((db->entry_expires == 0) ||
- (db->entry_expires + timeout < cnat_current_time))) {
-#if 0
- if (PREDICT_FALSE(db->flags & CNAT_DB_FLAG_STATIC_PORT)) {
- if (PREDICT_FALSE(db->flags & CNAT_DB_DSLITE_FLAG)) {
- instance = db->dslite_nat44_inst_id;
- } else {
- instance = NAT44_RESERVED_INST_ID;
- cnat_session_log_nat44_mapping_delete(db, 0, my_vrfmap);
- }
-
- /* Reset the session details */
- db->nsessions = 0;
- db->dst_ipv4 = 0;
- db->dst_port = 0;
- db->flags &= ~(CNAT_DB_FLAG_TCP_ACTIVE | CNAT_DB_FLAG_UDP_ACTIVE
- | CNAT_DB_FLAG_ALG_ENTRY);
- db->timeout = 0;
- db->entry_expires = 0;
- db->alg.delta = 0;
- db->proto_data.seq_pcp.tcp_seq_num = 0;
- continue;
- }
-#endif
- //printf("DELETING DB ENTRY FOR 0x%x\n", db->in2out_key.k.ipv4);
- cnat_delete_main_db_entry_v2(db);
- }
- //free(check_these_pool_indices[i]);
- }
-}
-
-static void walk_the_db (void)
-{
- pool_header_t *h = pool_header(cnat_main_db);
- u32 db_uword_len;
- static u32 base_index = 0, free_bitmap_index = 0;
- int bits_scanned = 0, i;
- uword inuse_bitmap;
-
- num_entries=0;
-
- /* Across all db entries... */
- db_uword_len = vec_len(cnat_main_db) / NUM_BITS_IN_UWORD;
- if (PREDICT_FALSE(vec_len(cnat_main_db) % NUM_BITS_IN_UWORD)) {
- /*
- * It should not come here as in cnat_db_init_v2()
- * it is made multiple of NUM_BITS_IN_UWORD
- */
- ASSERT(0);
- return ;
- }
-
- if (PREDICT_FALSE(! db_uword_len))
- return ;
-
- while (bits_scanned < MAX_DB_ENTRY_PER_SCAN) {
-
- if (PREDICT_FALSE(free_bitmap_index < vec_len(h->free_bitmap))) {
-
- /* free_bitmap exists and it is not all 0 */
-
- inuse_bitmap = ~(h->free_bitmap[free_bitmap_index]);
- i = 0;
- while (inuse_bitmap) {
-
- /* Check to see if the index is in use */
- if (PREDICT_FALSE((inuse_bitmap >> i) & 1)) {
- check_these_pool_indices[num_entries] = base_index + i;
- inuse_bitmap &= ~((uword) 1 << i);
- num_entries++;
- }
- i++;
- } // while (inuse_bitmap)
- } else {
-
- /*
- * 64-bit entry is 0, means all 64 entries are allocated.
- * So, simply add all 64 entries here.
- * No need to form inuse_bitmap, check and reset bits
- */
- for (i=0; i<NUM_BITS_IN_UWORD; i++) {
-
- check_these_pool_indices[num_entries] = base_index + i;
- num_entries++;
- }
- } // if (free_bitmap_index < vec_len(h->free_bitmap))
-
- /* Update free_bitmap_index and base_index for next run */
- if (PREDICT_FALSE(free_bitmap_index == db_uword_len - 1)) {
- /* wrap-around for next run */
- free_bitmap_index = 0;
- base_index = 0;
- } else {
- free_bitmap_index ++;
- base_index += NUM_BITS_IN_UWORD;
- }
-
- /* increment # of bits scanned */
- bits_scanned += NUM_BITS_IN_UWORD;
-
- /* Found enough entries to check ? */
- if (PREDICT_FALSE(num_entries >= MAX_DB_ENTRY_SELECTED_PER_SCAN))
- {
- /* This check is introduced to keep fixed MAX scan entry value */
- /* This is very much required when we do scanning for NAT64 */
- /* please check comments in cnat_db_scanner() &
- * handler_nat64_db_scanner() */
- if (num_entries >= MAX_COMBINED_DB_ENTRIES_PER_SCAN) {
- num_entries = MAX_COMBINED_DB_ENTRIES_PER_SCAN;
- }
- break;
- }
-
- } // while (bits_scanned < MAX_DB_ENTRY_PER_SCAN)
-
- if (PREDICT_FALSE(num_entries > 0)) {
- //printf("%s: num_entries [%d]\n", __func__, num_entries);
- cnat_db_scanner();
- }
- return ;
-}
-
-static uword cnat_db_scanner_fn (vlib_main_t * vm,
- vlib_node_runtime_t * node,
- vlib_frame_t * frame)
-{
- f64 timeout = 0.01; /* timeout value in sec (10 ms) */
- static u8 timeout_count = 0;
-
- uword event_type;
- uword * event_data = 0;
- /* Wait until vCGN is configured */
- while (1) {
- /* Assigning a huge timeout value, vCGN may or
- * may not get configured within this timeout */
- vlib_process_wait_for_event_or_clock (vm, 1e9);
- event_type = vlib_process_get_events (vm, &event_data);
-
- /* check whether the process is waken up by correct guy,
- * otherwise continue waiting for the vCGN config */
- if (event_type == CNAT_DB_SCANNER_TURN_ON) {
- break;
- }
- }
-
- while(1) {
- vlib_process_suspend(vm, timeout);
-
- /* Above suspend API should serve the purpose, no need to invoke wait API */
- /* vlib_process_wait_for_event_or_clock (vm, timeout); */
-
- /* Lets make use of this timeout for netflow packet sent */
- if (timeout_count < 100) { /* 100*10 ms = 1 sec */
- timeout_count++;
- } else {
- if (nfv9_configured) {
- handle_pending_nfv9_pkts();
- }
- timeout_count = 0;
- }
- /* Do we need this ? */
- //event_type = vlib_process_get_events (vm, &event_data);
- cnat_current_time = (u32)vlib_time_now (vm);
- if (cnat_db_init_done) {
- walk_the_db();
- }
- }
-
- return 0;
-}
-
-
-VLIB_REGISTER_NODE (cnat_db_scanner_node) = {
- .function = cnat_db_scanner_fn,
- .type = VLIB_NODE_TYPE_PROCESS,
- .name = "cnat-db-scanner",
- .process_log2_n_stack_bytes = 18,
-};
-
-clib_error_t *cnat_db_scanner_init (vlib_main_t *vm)
-{
- cnat_db_scanner_main_t *mp = &cnat_db_scanner_main;
-
- mp->vlib_main = vm;
- mp->vnet_main = vnet_get_main();
-
- return 0;
-}
-
-void cnat_scanner_db_process_turn_on(vlib_main_t *vm)
-{
- vlib_process_signal_event (vm, cnat_db_scanner_node.index,
- CNAT_DB_SCANNER_TURN_ON, 0);
- return;
-}
-
-VLIB_INIT_FUNCTION (cnat_db_scanner_init);
-