#!/bin/bash
# Copyright (c) 2016 Cisco and/or its affiliates.
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a ght (c) 2016 Cisco and/or its affiliates.
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not usecopy of the License at:
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
set -x
RETURN_STATUS=0
cat /etc/hostname
cat /etc/hosts
PYBOT_ARGS="--noncritical MULTI_THREAD"
JOB_ARCHIVE_ARTIFACTS=(log.html output.xml report.html)
LOG_ARCHIVE_ARTIFACTS=(log.html output.xml report.html)
JOB_ARCHIVE_DIR="archive"
LOG_ARCHIVE_DIR="$WORKSPACE/archives"
mkdir -p ${JOB_ARCHIVE_DIR}
mkdir -p ${LOG_ARCHIVE_DIR}
SCRIPT_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
export PYTHONPATH=${SCRIPT_DIR}
# Create tmp dir
mkdir ${SCRIPT_DIR}/tmp
# Use tmp dir to store log files
LOG_PATH="${SCRIPT_DIR}/tmp"
OS_ID=$(grep '^ID=' /etc/os-release | cut -f2- -d= | sed -e 's/\"//g')
OS_VERSION_ID=$(grep '^VERSION_ID=' /etc/os-release | cut -f2- -d= | sed -e 's/\"//g')
if [ "$OS_ID" == "centos" ]; then
DISTRO="CENTOS"
PACKAGE="rpm"
sudo yum install -y python-devel python-virtualenv
elif [ "$OS_ID" == "ubuntu" ]; then
DISTRO="UBUNTU"
PACKAGE="deb"
export DEBIAN_FRONTEND=noninteractive
sudo apt-get -y update
sudo apt-get -y install libpython2.7-dev python-virtualenv
else
echo "$OS_ID is not yet supported."
exit 1
fi
# 1st step: Download and prepare VPP packages
# Temporarily download VPP packages from nexus.fd.io
if [ "${#}" -ne "0" ]; then
arr=(${@})
echo ${arr[0]}
else
# Download the latest VPP build install packages
CSIT_DIR=${SCRIPT_DIR}
source "${SCRIPT_DIR}/resources/libraries/bash/function/artifacts.sh"
download_artifacts
# Need to revert -euo as the rest of script is not optimized for this.
set +euo pipefail
fi
VIRL_DIR_LOC="/tmp/"
VPP_PKGS=(*vpp*.$PACKAGE)
VPP_PKGS_FULL=("${VPP_PKGS[@]/#/${VIRL_DIR_LOC}}")
echo ${VPP_PKGS[@]}
VIRL_TOPOLOGY=$(cat ${SCRIPT_DIR}/VIRL_TOPOLOGY_${DISTRO})
VIRL_RELEASE=$(cat ${SCRIPT_DIR}/VIRL_RELEASE_${DISTRO})
VPP_VER="$( expr match $(ls vpp*.${PACKAGE} | head -n 1) 'vpp[-|_]\(.*\)'.${PACKAGE} )"
set +x
echo "****************************************************************************************************************************************"
echo "1st step: Download VPP packages FINISHED"
echo "VPP version to be tested: ${VPP_VER}"
echo "****************************************************************************************************************************************"
set -x
# 2nd step: Start virtual env and install requirements
echo Starting virtual env...
virtualenv --system-site-packages env
. env/bin/activate
echo Installing requirements...
pip install -r ${SCRIPT_DIR}/requirements.txt
set +x
echo "****************************************************************************************************************************************"
echo "2nd step: Start virtual env and install requirements FINISHED"
echo "****************************************************************************************************************************************"
set -x
# 3rd step: Prepare VIRL system
echo Preparing VIRL system...
VIRL_SERVERS=("10.30.51.28" "10.30.51.29" "10.30.51.30")
VIRL_SERVER=""
VIRL_USERNAME=jenkins-in
VIRL_PKEY=priv_key
VIRL_SERVER_STATUS_FILE="status"
VIRL_SERVER_EXPECTED_STATUS="PRODUCTION"
VIRL_SESSION_EXPIRY="620"
SSH_OPTIONS="-i ${VIRL_PKEY} -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o BatchMode=yes -o LogLevel=error"
function ssh_do() {
echo
echo "### " ssh $@
ssh ${SSH_OPTIONS} $@
}
rm -f ${VIRL_PKEY}
cat > ${VIRL_PKEY} <<EOF
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
EOF
chmod 600 ${VIRL_PKEY}
#
# Pick a random host from the array of VIRL servers, and attempt
# to reach it and verify it's status.
#
# The server must be reachable, and have a "status" file with
# the content "PRODUCTION", to be selected.
#
# If the server is not reachable, or does not have the correct
# status, remove it from the array and start again.
#
# Abort if there are no more servers left in the array.
#
while [[ ! "$VIRL_SERVER" ]]
do
num_hosts=${#VIRL_SERVERS[@]}
if [ $num_hosts == 0 ]
then
echo "No more VIRL candidate hosts available, failing."
exit 127
fi
element=$[ $RANDOM % $num_hosts ]
virl_server_candidate=${VIRL_SERVERS[$element]}
virl_server_status=$(ssh ${SSH_OPTIONS} ${VIRL_USERNAME}@${virl_server_candidate} cat $VIRL_SERVER_STATUS_FILE 2>&1)
echo VIRL HOST $virl_server_candidate status is \"$virl_server_status\"
if [ "$virl_server_status" == "$VIRL_SERVER_EXPECTED_STATUS" ]
then
# Candidate is in good status. Select this server.
VIRL_SERVER="$virl_server_candidate"
else
# Candidate is in bad status. Remove from array.
VIRL_SERVERS=("${VIRL_SERVERS[@]:0:$element}" "${VIRL_SERVERS[@]:$[$element+1]}")
fi
done
# Copy the files to VIRL host
scp ${SSH_OPTIONS} ${VPP_PKGS[@]} \
${VIRL_USERNAME}@${VIRL_SERVER}:${VIRL_DIR_LOC}/
result=$?
if [ "${result}" -ne "0" ]; then
echo "Failed to copy vpp deb files to virl host"
echo ${result}
exit ${result}
fi
# Start a simulation on VIRL server
echo "Starting simulation on VIRL server"
function stop_virl_simulation {
ssh ${SSH_OPTIONS} ${VIRL_USERNAME}@${VIRL_SERVER}\
"stop-testcase ${VIRL_SID}"
}
VIRL_SID=$(ssh ${SSH_OPTIONS} \
${VIRL_USERNAME}@${VIRL_SERVER} \
"start-testcase -vv --copy ${VIRL_TOPOLOGY} \
--expiry ${VIRL_SESSION_EXPIRY} \
--release ${VIRL_RELEASE} ${VPP_PKGS_FULL[@]}")
retval=$?
if [ ${retval} -ne "0" ]; then
echo "VIRL simulation start failed"
exit ${retval}
fi
if [[ ! "${VIRL_SID}" =~ session-[a-zA-Z0-9_]{6} ]]; then
echo "No VIRL session ID reported."
exit 127
fi
# Upon script exit, cleanup the VIRL simulation execution
trap stop_virl_simulation EXIT
echo ${VIRL_SID}
ssh_do ${VIRL_USERNAME}@${VIRL_SERVER} cat /scratch/${VIRL_SID}/topology.yaml
# Download the topology file from VIRL session
scp ${SSH_OPTIONS} \
${VIRL_USERNAME}@${VIRL_SERVER}:/scratch/${VIRL_SID}/topology.yaml \
topologies/enabled/topology_VIRL.yaml
retval=$?
if [ ${retval} -ne "0" ]; then
echo "Failed to copy topology file from VIRL simulation"
exit ${retval}
fi
set +x
echo "****************************************************************************************************************************************"
echo "3rd step: Start the simulation on the VIRL server FINISHED"
echo "****************************************************************************************************************************************"
set -x
# 4th step: Run functional test suites
RC=0
MORE_FAILS=0
echo Running functional tests on the VIRL system...
# There are used three iterations of functional tests there
# to check the stability and reliability of the results.
partial_logs=""
for test_set in 1 2 3
do
echo
echo Functional test loop: ${test_set}
echo
pybot -L TRACE -W 136\
-v TOPOLOGY_PATH:${SCRIPT_DIR}/topologies/enabled/topology_VIRL.yaml \
--suite "tests.vpp.func" \
--include vm_envAND3_node_single_link_topo \
--include vm_envAND3_node_double_link_topo \
--exclude PERFTEST \
--exclude SOFTWIRE \
--exclude SKIP_TEST \
--noncritical EXPECTED_FAILING \
--output ${LOG_PATH}/output_func_test_set${test_set} \
tests/
PARTIAL_RC=$(echo $?)
partial_logs="${partial_logs} ${LOG_PATH}/output_func_test_set${test_set}.xml"
if [ ${PARTIAL_RC} -eq 250 ]; then
MORE_FAILS=1
fi
RC=$((RC+PARTIAL_RC))
done
set +x
echo "****************************************************************************************************************************************"
echo "4th step: Run functional tests FINISHED"
echo "****************************************************************************************************************************************"
set -x
# Set RETURN_STATUS=1 if some critical test failed
if [ ! ${RC} -eq 0 ]; then
RETURN_STATUS=1
fi
# Log the final result
if [ ${RC} -eq 0 ]; then
set +x
echo
echo "========================================================================================================================================"
echo "Final result of all test loops: | PASS |"
echo "All critical tests have passed."
echo "========================================================================================================================================"
echo
set -x
elif [ ${MORE_FAILS} -eq 0 ]; then
if [ ${RC} -eq 1 ]; then
HLP_STR="test has"
else
HLP_STR="tests have"
fi
set +x
echo
echo "========================================================================================================================================"
echo "Final result of all test loops: | FAIL |"
echo "${RC} critical ${HLP_STR} failed."
echo "========================================================================================================================================"
echo
set -x
else
set +x
echo
echo "========================================================================================================================================"
echo "Final result of all test loops: | FAIL |"
echo "More then 250 critical tests have failed in one test loop."
echo "========================================================================================================================================"
echo
set -x
fi
# 7th step: Post-processing test data
echo Post-processing test data...
# Rebot output post-processing
rebot --noncritical EXPECTED_FAILING \
--output output.xml ${partial_logs}
# Remove unnecessary files
rm -f ${partial_logs}
# Archive JOB artifacts in jenkins
for i in ${JOB_ARCHIVE_ARTIFACTS[@]}; do
cp $( readlink -f ${i} | tr '\n' ' ' ) ${JOB_ARCHIVE_DIR}/
done
# Archive JOB artifacts to logs.fd.io
for i in ${LOG_ARCHIVE_ARTIFACTS[@]}; do
cp $( readlink -f ${i} | tr '\n'
@media only all and (prefers-color-scheme: dark) {
.highlight .hll { background-color: #49483e }
.highlight .c { color: #75715e } /* Comment */
.highlight .err { color: #960050; background-color: #1e0010 } /* Error */
.highlight .k { color: #66d9ef } /* Keyword */
.highlight .l { color: #ae81ff } /* Literal */
.highlight .n { color: #f8f8f2 } /* Name */
.highlight .o { color: #f92672 } /* Operator */
.highlight .p { color: #f8f8f2 } /* Punctuation */
.highlight .ch { color: #75715e } /* Comment.Hashbang */
.highlight .cm { color: #75715e } /* Comment.Multiline */
.highlight .cp { color: #75715e } /* Comment.Preproc */
.highlight .cpf { color: #75715e } /* Comment.PreprocFile */
.highlight .c1 { color: #75715e } /* Comment.Single */
.highlight .cs { color: #75715e } /* Comment.Special */
.highlight .gd { color: #f92672 } /* Generic.Deleted */
.highlight .ge { font-style: italic } /* Generic.Emph */
.highlight .gi { color: #a6e22e } /* Generic.Inserted */
.highlight .gs { font-weight: bold } /* Generic.Strong */
.highlight .gu { color: #75715e } /* Generic.Subheading */
.highlight .kc { color: #66d9ef } /* Keyword.Constant */
.highlight .kd { color: #66d9ef } /* Keyword.Declaration */
.highlight .kn { color: #f92672 } /* Keyword.Namespace */
.highlight .kp { color: #66d9ef } /* Keyword.Pseudo */
.highlight .kr { color: #66d9ef } /* Keyword.Reserved */
.highlight .kt { color: #66d9ef } /* Keyword.Type */
.highlight .ld { color: #e6db74 } /* Literal.Date */
.highlight .m { color: #ae81ff } /* Literal.Number */
.highlight .s { color: #e6db74 } /* Literal.String */
.highlight .na { color: #a6e22e } /* Name.Attribute */
.highlight .nb { color: #f8f8f2 } /* Name.Builtin */
.highlight .nc { color: #a6e22e } /* Name.Class */
.highlight .no { color: #66d9ef } /* Name.Constant */
.highlight .nd { color: #a6e22e } /* Name.Decorator */
.highlight .ni { color: #f8f8f2 } /* Name.Entity */
.highlight .ne { color: #a6e22e } /* Name.Exception */
.highlight .nf { color: #a6e22e } /* Name.Function */
.highlight .nl { color: #f8f8f2 } /* Name.Label */
.highlight .nn { color: #f8f8f2 } /* Name.Namespace */
.highlight .nx { color: #a6e22e } /* Name.Other */
.highlight .py { color: #f8f8f2 } /* Name.Property */
.highlight .nt { color: #f92672 } /* Name.Tag */
.highlight .nv { color: #f8f8f2 } /* Name.Variable */
.highlight .ow { color: #f92672 } /* Operator.Word */
.highlight .w { color: #f8f8f2 } /* Text.Whitespace */
.highlight .mb { color: #ae81ff } /* Literal.Number.Bin */
.highlight .mf { color: #ae81ff } /* Literal.Number.Float */
.highlight .mh { color: #ae81ff } /* Literal.Number.Hex */
.highlight .mi { color: #ae81ff } /* Literal.Number.Integer */
.highlight .mo { color: #ae81ff } /* Literal.Number.Oct */
.highlight .sa { color: #e6db74 } /* Literal.String.Affix */
.highlight .sb { color: #e6db74 } /* Literal.String.Backtick */
.highlight .sc { color: #e6db74 } /* Literal.String.Char */
.highlight .dl { color: #e6db74 } /* Literal.String.Delimiter */
.highlight .sd { color: #e6db74 } /* Literal.String.Doc */
.highlight .s2 { color: #e6db74 } /* Literal.String.Double */
.highlight .se { color: #ae81ff } /* Literal.String.Escape */
.highlight .sh { color: #e6db74 } /* Literal.String.Heredoc */
.highlight .si { color: #e6db74 } /* Literal.String.Interpol */
.highlight .sx { color: #e6db74 } /* Literal.String.Other */
.highlight .sr { color: #e6db74 } /* Literal.String.Regex */
.highlight .s1 { color: #e6db74 } /* Literal.String.Single */
.highlight .ss { color: #e6db74 } /* Literal.String.Symbol */
.highlight .bp { color: #f8f8f2 } /* Name.Builtin.Pseudo */
.highlight .fm { color: #a6e22e } /* Name.Function.Magic */
.highlight .vc { color: #f8f8f2 } /* Name.Variable.Class */
.highlight .vg { color: #f8f8f2 } /* Name.Variable.Global */
.highlight .vi { color: #f8f8f2 } /* Name.Variable.Instance */
.highlight .vm { color: #f8f8f2 } /* Name.Variable.Magic */
.highlight .il { color: #ae81ff } /* Literal.Number.Integer.Long */
}
@media (prefers-color-scheme: light) {
.highlight .hll { background-color: #ffffcc }
.highlight .c { color: #888888 } /* Comment */
.highlight .err { color: #a61717; background-color: #e3d2d2 } /* Error */
.highlight .k { color: #008800; font-weight: bold } /* Keyword */
.highlight .ch { color: #888888 } /* Comment.Hashbang */
.highlight .cm { color: #888888 } /* Comment.Multiline */
.highlight .cp { color: #cc0000; font-weight: bold } /* Comment.Preproc */
.highlight .cpf { color: #888888 } /* Comment.PreprocFile */
.highlight .c1 { color: #888888 } /* Comment.Single */
.highlight .cs { color: #cc0000; font-weight: bold; background-color: #fff0f0 } /* Comment.Special */
.highlight .gd { color: #000000; background-color: #ffdddd } /* Generic.Deleted */
.highlight .ge { font-style: italic } /* Generic.Emph */
.highlight .gr { color: #aa0000 } /* Generic.Error */
.highlight .gh { color: #333333 } /* Generic.Heading */
.highlight .gi { color: #000000; background-color: #ddffdd } /* Generic.Inserted */
.highlight .go { color: #888888 } /* Generic.Output */
.highlight .gp { color: #555555 } /* Generic.Prompt */
.highlight .gs { font-weight: bold } /* Generic.Strong */
.highlight .gu { color: #666666 } /* Generic.Subheading */
.highlight .gt { color: #aa0000 } /* Generic.Traceback */
.highlight .kc { color: #008800; font-weight: bold } /* Keyword.Constant */
.highlight .kd { color: #008800; font-weight: bold } /* Keyword.Declaration */
.highlight .kn { color: #008800; font-weight: bold } /* Keyword.Namespace */
.highlight .kp { color: #008800 } /* Keyword.Pseudo */
.highlight .kr { color: #008800; font-weight: bold } /* Keyword.Reserved */
.highlight .kt { color: #888888; font-weight: bold } /* Keyword.Type */
.highlight .m { color: #0000DD; font-weight: bold } /* Literal.Number */
.highlight .s { color: #dd2200; background-color: #fff0f0 } /* Literal.String */
.highlight .na { color: #336699 } /* Name.Attribute */
.highlight .nb { color: #003388 } /* Name.Builtin */
.highlight .nc { color: #bb0066; font-weight: bold } /* Name.Class */
.highlight .no { color: #003366; font-weight: bold } /* Name.Constant */
.highlight .nd { color: #555555 } /* Name.Decorator */
.highlight .ne { color: #bb0066; font-weight: bold } /* Name.Exception */
.highlight .nf { color: #0066bb; font-weight: bold } /* Name.Function */
.highlight .nl { color: #336699; font-style: italic } /* Name.Label */
.highlight .nn { color: #bb0066; font-weight: bold } /* Name.Namespace */
.highlight .py { color: #336699; font-weight: bold } /* Name.Property */
.highlight .nt { color: #bb0066; font-weight: bold } /* Name.Tag */
.highlight .nv { color: #336699 } /* Name.Variable */
.highlight .ow { color: #008800 } /* Operator.Word */
.highlight .w { color: #bbbbbb } /* Text.Whitespace */
.highlight .mb { color: #0000DD; font-weight: bold } /* Literal.Number.Bin */
.highlight .mf { color: #0000DD; font-weight: bold } /* Literal.Number.Float */
.highlight .mh { color: #0000DD; font-weight: bold } /* Literal.Number.Hex */
.highlight .mi { color: #0000DD; font-weight: bold } /* Literal.Number.Integer */
.highlight .mo { color: #0000DD; font-weight: bold } /* Literal.Number.Oct */
.highlight .sa { color: #dd2200; background-color: #fff0f0 } /* Literal.String.Affix */
.highlight .sb { color: #dd2200; background-color: #fff0f0 } /* Literal.String.Backtick */
.highlight .sc { color: #dd2200; background-color: #fff0f0 } /* Literal.String.Char */
.highlight .dl { color: #dd2200; background-color: #fff0f0 } /* Literal.String.Delimiter */
.highlight .sd { color: #dd2200; background-color: #fff0f0 } /* Literal.String.Doc */
.highlight .s2 { color: #dd2200; background-color: #fff0f0 } /* Literal.String.Double */
.highlight .se { color: #0044dd; background-color: #fff0f0 } /* Literal.String.Escape */
.highlight .sh { color: #dd2200; background-color: #fff0f0 } /* Literal.String.Heredoc */
.highlight .si { color: #3333bb; background-color: #fff0f0 } /* Literal.String.Interpol */
.highlight .sx { color: #22bb22; background-color: #f0fff0 } /* Literal.String.Other */
.highlight .sr { color: #008800; background-color: #fff0ff } /* Literal.String.Regex */
.highlight .s1 { color: #dd2200; background-color: #fff0f0 } /* Literal.String.Single */
.highlight .ss { color: #aa6600; background-color: #fff0f0 } /* Literal.String.Symbol */
.highlight .bp { color: #003388 } /* Name.Builtin.Pseudo */
.highlight .fm { color: #0066bb; font-weight: bold } /* Name.Function.Magic */
.highlight .vc { color: #336699 } /* Name.Variable.Class */
.highlight .vg { color: #dd7700 } /* Name.Variable.Global */
.highlight .vi { color: #3333bb } /* Name.Variable.Instance */
.highlight .vm { color: #336699 } /* Name.Variable.Magic */
.highlight .il { color: #0000DD; font-weight: bold } /* Literal.Number.Integer.Long */
}
/*
* Copyright (c) 2017 Cisco and/or its affiliates.
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at:
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
/**
* @file
* @brief NAT64 IPv6 to IPv4 translation (inside to outside network)
*/
#include <nat/nat64.h>
#include <nat/nat_reass.h>
#include <nat/nat_inlines.h>
#include <vnet/ip/ip6_to_ip4.h>
#include <vnet/fib/fib_table.h>
typedef struct
{
u32 sw_if_index;
u32 next_index;
u8 is_slow_path;
} nat64_in2out_trace_t;
static u8 *
format_nat64_in2out_trace (u8 * s, va_list * args)
{
CLIB_UNUSED (vlib_main_t * vm) = va_arg (*args, vlib_main_t *);
CLIB_UNUSED (vlib_node_t * node) = va_arg (*args, vlib_node_t *);
nat64_in2out_trace_t *t = va_arg (*args, nat64_in2out_trace_t *);
char *tag;
tag = t->is_slow_path ? "NAT64-in2out-slowpath" : "NAT64-in2out";
s =
format (s, "%s: sw_if_index %d, next index %d", tag, t->sw_if_index,
t->next_index);
return s;
}
typedef struct
{
u32 sw_if_index;
u32 next_index;
u8 cached;
} nat64_in2out_reass_trace_t;
static u8 *
format_nat64_in2out_reass_trace (u8 * s, va_list * args)
{
CLIB_UNUSED (vlib_main_t * vm) = va_arg (*args, vlib_main_t *);
CLIB_UNUSED (vlib_node_t * node) = va_arg (*args, vlib_node_t *);
nat64_in2out_reass_trace_t *t =
va_arg (*args, nat64_in2out_reass_trace_t *);
s =
format (s, "NAT64-in2out-reass: sw_if_index %d, next index %d, status %s",
t->sw_if_index, t->next_index,
t->cached ? "cached" : "translated");
return s;
}
vlib_node_registration_t nat64_in2out_node;
vlib_node_registration_t nat64_in2out_slowpath_node;
vlib_node_registration_t nat64_in2out_reass_node;
vlib_node_registration_t nat64_in2out_handoff_node;
#define foreach_nat64_in2out_error \
_(UNSUPPORTED_PROTOCOL, "unsupported protocol") \
_(IN2OUT_PACKETS, "good in2out packets processed") \
_(NO_TRANSLATION, "no translation") \
_(UNKNOWN, "unknown") \
_(DROP_FRAGMENT, "Drop fragment") \
_(MAX_REASS, "Maximum reassemblies exceeded") \
_(MAX_FRAG, "Maximum fragments per reassembly exceeded")
typedef enum
{
#define _(sym,str) NAT64_IN2OUT_ERROR_##sym,
foreach_nat64_in2out_error
#undef _
NAT64_IN2OUT_N_ERROR,
} nat64_in2out_error_t;
static char *nat64_in2out_error_strings[] = {
#define _(sym,string) string,
foreach_nat64_in2out_error
#undef _
};
typedef enum
{
NAT64_IN2OUT_NEXT_IP4_LOOKUP,
NAT64_IN2OUT_NEXT_IP6_LOOKUP,
NAT64_IN2OUT_NEXT_DROP,
NAT64_IN2OUT_NEXT_SLOWPATH,
NAT64_IN2OUT_NEXT_REASS,
NAT64_IN2OUT_N_NEXT,
} nat64_in2out_next_t;
typedef struct nat64_in2out_set_ctx_t_
{
vlib_buffer_t *b;
vlib_main_t *vm;
u32 thread_index;
} nat64_in2out_set_ctx_t;
static inline u8
nat64_not_translate (u32 sw_if_index, ip6_address_t ip6_addr)
{
ip6_address_t *addr;
ip6_main_t *im6 = &ip6_main;
ip_lookup_main_t *lm6 = &im6->lookup_main;
ip_interface_address_t *ia = 0;
/* *INDENT-OFF* */
foreach_ip_interface_address (lm6, ia, sw_if_index, 0,
({
addr = ip_interface_address_get_address (lm6, ia);
if (0 == ip6_address_compare (addr, &ip6_addr))
return 1;
}));
/* *INDENT-ON* */
return 0;
}
/**
* @brief Check whether is a hairpinning.
*
* If the destination IP address of the packet is an IPv4 address assigned to
* the NAT64 itself, then the packet is a hairpin packet.
*
* param dst_addr Destination address of the packet.
*
* @returns 1 if hairpinning, otherwise 0.
*/
static_always_inline int
is_hairpinning (ip6_address_t * dst_addr)
{
nat64_main_t *nm = &nat64_main;
int i;
for (i = 0; i < vec_len (nm->addr_pool); i++)
{
if (nm->addr_pool[i].addr.as_u32 == dst_addr->as_u32[3])
return 1;
}
return 0;
}
static int
nat64_in2out_tcp_udp_set_cb (ip6_header_t * ip6, ip4_header_t * ip4,
void *arg)
{
nat64_main_t *nm = &nat64_main;
nat64_in2out_set_ctx_t *ctx = arg;
nat64_db_bib_entry_t *bibe;
nat64_db_st_entry_t *ste;
ip46_address_t saddr, daddr;
u32 sw_if_index, fib_index;
udp_header_t *udp = ip6_next_header (ip6);
u8 proto = ip6->protocol;
u16 sport = udp->src_port;
u16 dport = udp->dst_port;
nat64_db_t *db = &nm->db[ctx->thread_index];
sw_if_index = vnet_buffer (ctx->b)->sw_if_index[VLIB_RX];
fib_index =
fib_table_get_index_for_sw_if_index (FIB_PROTOCOL_IP6, sw_if_index);
saddr.as_u64[0] = ip6->src_address.as_u64[0];
saddr.as_u64[1] = ip6->src_address.as_u64[1];
daddr.as_u64[0] = ip6->dst_address.as_u64[0];
daddr.as_u64[1] = ip6->dst_address.as_u64[1];
ste =
nat64_db_st_entry_find (db, &saddr, &daddr, sport, dport, proto,
fib_index, 1);
if (ste)
{
bibe = nat64_db_bib_entry_by_index (db, proto, ste->bibe_index);
if (!bibe)
return -1;
}
else
{
bibe = nat64_db_bib_entry_find (db, &saddr, sport, proto, fib_index, 1);
if (!bibe)
{
u16 out_port;
ip4_address_t out_addr;
if (nat64_alloc_out_addr_and_port
(fib_index, ip_proto_to_snat_proto (proto), &out_addr,
&out_port, ctx->thread_index))
return -1;
bibe =
nat64_db_bib_entry_create (db, &ip6->src_address, &out_addr,
sport, out_port, fib_index, proto, 0);
if (!bibe)
return -1;
}
nat64_extract_ip4 (&ip6->dst_address, &daddr.ip4, fib_index);
ste =
nat64_db_st_entry_create (db, bibe, &ip6->dst_address,
&daddr.ip4, dport);
if (!ste)
return -1;
}
ip4->src_address.as_u32 = bibe->out_addr.as_u32;
udp->src_port = bibe->out_port;
ip4->dst_address.as_u32 = ste->out_r_addr.as_u32;
if (proto == IP_PROTOCOL_TCP)
{
u16 *checksum;
ip_csum_t csum;
tcp_header_t *tcp = ip6_next_header (ip6);
nat64_tcp_session_set_state (ste, tcp, 1);
checksum = &tcp->checksum;
csum = ip_csum_sub_even (*checksum, sport);
csum = ip_csum_add_even (csum, udp->src_port);
mss_clamping (nm->sm, tcp, &csum);
*checksum = ip_csum_fold (csum);
}
nat64_session_reset_timeout (ste, ctx->vm);
return 0;
}
static int
nat64_in2out_icmp_set_cb (ip6_header_t * ip6, ip4_header_t * ip4, void *arg)
{
nat64_main_t *nm = &nat64_main;
nat64_in2out_set_ctx_t *ctx = arg;
nat64_db_bib_entry_t *bibe;
nat64_db_st_entry_t *ste;
ip46_address_t saddr, daddr;
u32 sw_if_index, fib_index;
icmp46_header_t *icmp = ip6_next_header (ip6);
nat64_db_t *db = &nm->db[ctx->thread_index];
sw_if_index = vnet_buffer (ctx->b)->sw_if_index[VLIB_RX];
fib_index =
fib_table_get_index_for_sw_if_index (FIB_PROTOCOL_IP6, sw_if_index);
saddr.as_u64[0] = ip6->src_address.as_u64[0];
saddr.as_u64[1] = ip6->src_address.as_u64[1];
daddr.as_u64[0] = ip6->dst_address.as_u64[0];
daddr.as_u64[1] = ip6->dst_address.as_u64[1];
if (icmp->type == ICMP4_echo_request || icmp->type == ICMP4_echo_reply)
{
u16 in_id = ((u16 *) (icmp))[2];
ste =
nat64_db_st_entry_find (db, &saddr, &daddr, in_id, 0,
IP_PROTOCOL_ICMP, fib_index, 1);
if (ste)
{
bibe =
nat64_db_bib_entry_by_index (db, IP_PROTOCOL_ICMP,
ste->bibe_index);
if (!bibe)
return -1;
}
else
{
bibe =
nat64_db_bib_entry_find (db, &saddr, in_id,
IP_PROTOCOL_ICMP, fib_index, 1);
if (!bibe)
{
u16 out_id;
ip4_address_t out_addr;
if (nat64_alloc_out_addr_and_port
(fib_index, SNAT_PROTOCOL_ICMP, &out_addr, &out_id,
ctx->thread_index))
return -1;
bibe =
nat64_db_bib_entry_create (db, &ip6->src_address,
&out_addr, in_id, out_id,
fib_index, IP_PROTOCOL_ICMP, 0);
if (!bibe)
return -1;
}
nat64_extract_ip4 (&ip6->dst_address, &daddr.ip4, fib_index);
ste =
nat64_db_st_entry_create (db, bibe, &ip6->dst_address,
&daddr.ip4, 0);
if (!ste)
return -1;
}
nat64_session_reset_timeout (ste, ctx->vm);
ip4->src_address.as_u32 = bibe->out_addr.as_u32;
((u16 *) (icmp))[2] = bibe->out_port;
ip4->dst_address.as_u32 = ste->out_r_addr.as_u32;
}
else
{
if (!vec_len (nm->addr_pool))
return -1;
ip4->src_address.as_u32 = nm->addr_pool[0].addr.as_u32;
nat64_extract_ip4 (&ip6->dst_address, &ip4->dst_address, fib_index);
}
return 0;
}
static int
nat64_in2out_inner_icmp_set_cb (ip6_header_t * ip6, ip4_header_t * ip4,
void *arg)
{
nat64_main_t *nm = &nat64_main;
nat64_in2out_set_ctx_t *ctx = arg;
nat64_db_st_entry_t *ste;
nat64_db_bib_entry_t *bibe;
ip46_address_t saddr, daddr;
u32 sw_if_index, fib_index;
u8 proto = ip6->protocol;
nat64_db_t *db = &nm->db[ctx->thread_index];
sw_if_index = vnet_buffer (ctx->b)->sw_if_index[VLIB_RX];
fib_index =
fib_table_get_index_for_sw_if_index (FIB_PROTOCOL_IP6, sw_if_index);
saddr.as_u64[0] = ip6->src_address.as_u64[0];
saddr.as_u64[1] = ip6->src_address.as_u64[1];
daddr.as_u64[0] = ip6->dst_address.as_u64[0];
daddr.as_u64[1] = ip6->dst_address.as_u64[1];
if (proto == IP_PROTOCOL_ICMP6)
{
icmp46_header_t *icmp = ip6_next_header (ip6);
u16 in_id = ((u16 *) (icmp))[2];
proto = IP_PROTOCOL_ICMP;
if (!
(icmp->type == ICMP4_echo_request
|| icmp->type == ICMP4_echo_reply))
return -1;
ste =
nat64_db_st_entry_find (db, &daddr, &saddr, in_id, 0, proto,
fib_index, 1);
if (!ste)
return -1;
bibe = nat64_db_bib_entry_by_index (db, proto, ste->bibe_index);
if (!bibe)
return -1;
ip4->dst_address.as_u32 = bibe->out_addr.as_u32;
((u16 *) (icmp))[2] = bibe->out_port;
ip4->src_address.as_u32 = ste->out_r_addr.as_u32;
}
else
{
udp_header_t *udp = ip6_next_header (ip6);
tcp_header_t *tcp = ip6_next_header (ip6);
u16 *checksum;
ip_csum_t csum;
u16 sport = udp->src_port;
u16 dport = udp->dst_port;
ste =
nat64_db_st_entry_find (db, &daddr, &saddr, dport, sport, proto,
fib_index, 1);
if (!ste)
return -1;
bibe = nat64_db_bib_entry_by_index (db, proto, ste->bibe_index);
if (!bibe)
return -1;
ip4->dst_address.as_u32 = bibe->out_addr.as_u32;
udp->dst_port = bibe->out_port;
ip4->src_address.as_u32 = ste->out_r_addr.as_u32;
if (proto == IP_PROTOCOL_TCP)
checksum = &tcp->checksum;
else
checksum = &udp->checksum;
csum = ip_csum_sub_even (*checksum, dport);
csum = ip_csum_add_even (csum, udp->dst_port);
*checksum = ip_csum_fold (csum);
}
return 0;
}
typedef struct unk_proto_st_walk_ctx_t_
{
ip6_address_t src_addr;
ip6_address_t dst_addr;
ip4_address_t out_addr;
u32 fib_index;
u32 thread_index;
u8 proto;
} unk_proto_st_walk_ctx_t;
static int
unk_proto_st_walk (nat64_db_st_entry_t * ste, void *arg)
{
nat64_main_t *nm = &nat64_main;
unk_proto_st_walk_ctx_t *ctx = arg;
nat64_db_bib_entry_t *bibe;
ip46_address_t saddr, daddr;
nat64_db_t *db = &nm->db[ctx->thread_index];
if (ip46_address_is_equal (&ste->in_r_addr, &ctx->dst_addr))
{
bibe = nat64_db_bib_entry_by_index (db, ste->proto, ste->bibe_index);
if (!bibe)
return -1;
if (ip46_address_is_equal (&bibe->in_addr, &ctx->src_addr)
&& bibe->fib_index == ctx->fib_index)
{
memset (&saddr, 0, sizeof (saddr));
saddr.ip4.as_u32 = bibe->out_addr.as_u32;
memset (&daddr, 0, sizeof (daddr));
nat64_extract_ip4 (&ctx->dst_addr, &daddr.ip4, ctx->fib_index);
if (nat64_db_st_entry_find
(db, &daddr, &saddr, 0, 0, ctx->proto, ctx->fib_index, 0))
return -1;
ctx->out_addr.as_u32 = bibe->out_addr.as_u32;
return 1;
}
}
return 0;
}
static int
nat64_in2out_unk_proto_set_cb (ip6_header_t * ip6, ip4_header_t * ip4,
void *arg)
{
nat64_main_t *nm = &nat64_main;
nat64_in2out_set_ctx_t *s_ctx = arg;
nat64_db_bib_entry_t *bibe;
nat64_db_st_entry_t *ste;
ip46_address_t saddr, daddr, addr;
u32 sw_if_index, fib_index;
u8 proto = ip6->protocol;
int i;
nat64_db_t *db = &nm->db[s_ctx->thread_index];
sw_if_index = vnet_buffer (s_ctx->b)->sw_if_index[VLIB_RX];
fib_index =
fib_table_get_index_for_sw_if_index (FIB_PROTOCOL_IP6, sw_if_index);
saddr.as_u64[0] = ip6->src_address.as_u64[0];
saddr.as_u64[1] = ip6->src_address.as_u64[1];
daddr.as_u64[0] = ip6->dst_address.as_u64[0];
daddr.as_u64[1] = ip6->dst_address.as_u64[1];
ste =
nat64_db_st_entry_find (db, &saddr, &daddr, 0, 0, proto, fib_index, 1);
if (ste)
{
bibe = nat64_db_bib_entry_by_index (db, proto, ste->bibe_index);
if (!bibe)
return -1;
}
else
{
bibe = nat64_db_bib_entry_find (db, &saddr, 0, proto, fib_index, 1);
if (!bibe)
{
/* Choose same out address as for TCP/UDP session to same dst */
unk_proto_st_walk_ctx_t ctx = {
.src_addr.as_u64[0] = ip6->src_address.as_u64[0],
.src_addr.as_u64[1] = ip6->src_address.as_u64[1],
.dst_addr.as_u64[0] = ip6->dst_address.as_u64[0],
.dst_addr.as_u64[1] = ip6->dst_address.as_u64[1],
.out_addr.as_u32 = 0,
.fib_index = fib_index,
.proto = proto,
.thread_index = s_ctx->thread_index,
};
nat64_db_st_walk (db, IP_PROTOCOL_TCP, unk_proto_st_walk, &ctx);
if (!ctx.out_addr.as_u32)
nat64_db_st_walk (db, IP_PROTOCOL_UDP, unk_proto_st_walk, &ctx);
/* Verify if out address is not already in use for protocol */
memset (&addr, 0, sizeof (addr));
addr.ip4.as_u32 = ctx.out_addr.as_u32;
if (nat64_db_bib_entry_find (db, &addr, 0, proto, 0, 0))
ctx.out_addr.as_u32 = 0;
if (!ctx.out_addr.as_u32)
{
for (i = 0; i < vec_len (nm->addr_pool); i++)
{
addr.ip4.as_u32 = nm->addr_pool[i].addr.as_u32;
if (!nat64_db_bib_entry_find (db, &addr, 0, proto, 0, 0))
break;
}
}
if (!ctx.out_addr.as_u32)
return -1;
bibe =
nat64_db_bib_entry_create (db, &ip6->src_address,
&ctx.out_addr, 0, 0, fib_index, proto,
0);
if (!bibe)
return -1;
}
nat64_extract_ip4 (&ip6->dst_address, &daddr.ip4, fib_index);
ste =
nat64_db_st_entry_create (db, bibe, &ip6->dst_address, &daddr.ip4, 0);
if (!ste)
return -1;
}
nat64_session_reset_timeout (ste, s_ctx->vm);
ip4->src_address.as_u32 = bibe->out_addr.as_u32;
ip4->dst_address.as_u32 = ste->out_r_addr.as_u32;
return 0;
}
static int
nat64_in2out_tcp_udp_hairpinning (vlib_main_t * vm, vlib_buffer_t * b,
ip6_header_t * ip6, u32 thread_index)
{
nat64_main_t *nm = &nat64_main;
nat64_db_bib_entry_t *bibe;
nat64_db_st_entry_t *ste;
ip46_address_t saddr, daddr;
u32 sw_if_index, fib_index;
udp_header_t *udp = ip6_next_header (ip6);
tcp_header_t *tcp = ip6_next_header (ip6);
u8 proto = ip6->protocol;
u16 sport = udp->src_port;
u16 dport = udp->dst_port;
u16 *checksum;
ip_csum_t csum;
nat64_db_t *db = &nm->db[thread_index];
sw_if_index = vnet_buffer (b)->sw_if_index[VLIB_RX];
fib_index =
fib_table_get_index_for_sw_if_index (FIB_PROTOCOL_IP6, sw_if_index);
saddr.as_u64[0] = ip6->src_address.as_u64[0];
saddr.as_u64[1] = ip6->src_address.as_u64[1];
daddr.as_u64[0] = ip6->dst_address.as_u64[0];
daddr.as_u64[1] = ip6->dst_address.as_u64[1];
if (proto == IP_PROTOCOL_UDP)
checksum = &udp->checksum;
else
checksum = &tcp->checksum;
csum = ip_csum_sub_even (*checksum, ip6->src_address.as_u64[0]);
csum = ip_csum_sub_even (csum, ip6->src_address.as_u64[1]);
csum = ip_csum_sub_even (csum, ip6->dst_address.as_u64[0]);
csum = ip_csum_sub_even (csum, ip6->dst_address.as_u64[1]);
csum = ip_csum_sub_even (csum, sport);
csum = ip_csum_sub_even (csum, dport);
ste =
nat64_db_st_entry_find (db, &saddr, &daddr, sport, dport, proto,
fib_index, 1);
if (ste)
{
bibe = nat64_db_bib_entry_by_index (db, proto, ste->bibe_index);
if (!bibe)
return -1;
}
else
{
bibe = nat64_db_bib_entry_find (db, &saddr, sport, proto, fib_index, 1);
if (!bibe)
{
u16 out_port;
ip4_address_t out_addr;
if (nat64_alloc_out_addr_and_port
(fib_index, ip_proto_to_snat_proto (proto), &out_addr,
&out_port, thread_index))
return -1;
bibe =
nat64_db_bib_entry_create (db, &ip6->src_address, &out_addr,
sport, out_port, fib_index, proto, 0);
if (!bibe)
return -1;
}
nat64_extract_ip4 (&ip6->dst_address, &daddr.ip4, fib_index);
ste =
nat64_db_st_entry_create (db, bibe, &ip6->dst_address,
&daddr.ip4, dport);
if (!ste)
return -1;
}
if (proto == IP_PROTOCOL_TCP)
nat64_tcp_session_set_state (ste, tcp, 1);
nat64_session_reset_timeout (ste, vm);
sport = udp->src_port = bibe->out_port;
nat64_compose_ip6 (&ip6->src_address, &bibe->out_addr, fib_index);
memset (&daddr, 0, sizeof (daddr));
daddr.ip4.as_u32 = ste->out_r_addr.as_u32;
bibe = 0;
/* *INDENT-OFF* */
vec_foreach (db, nm->db)
{
bibe = nat64_db_bib_entry_find (db, &daddr, dport, proto, 0, 0);
if (bibe)
break;
}
/* *INDENT-ON* */
if (!bibe)
return -1;
ip6->dst_address.as_u64[0] = bibe->in_addr.as_u64[0];
ip6->dst_address.as_u64[1] = bibe->in_addr.as_u64[1];
udp->dst_port = bibe->in_port;
csum = ip_csum_add_even (csum, ip6->src_address.as_u64[0]);
csum = ip_csum_add_even (csum, ip6->src_address.as_u64[1]);
csum = ip_csum_add_even (csum, ip6->dst_address.as_u64[0]);
csum = ip_csum_add_even (csum, ip6->dst_address.as_u64[1]);
csum = ip_csum_add_even (csum, udp->src_port);
csum = ip_csum_add_even (csum, udp->dst_port);
*checksum = ip_csum_fold (csum);
return 0;
}
static int
nat64_in2out_icmp_hairpinning (vlib_main_t * vm, vlib_buffer_t * b,
ip6_header_t * ip6, u32 thread_index)
{
nat64_main_t *nm = &nat64_main;
nat64_db_bib_entry_t *bibe;
nat64_db_st_entry_t *ste;
icmp46_header_t *icmp = ip6_next_header (ip6);
ip6_header_t *inner_ip6;
ip46_address_t saddr, daddr;
u32 sw_if_index, fib_index;
u8 proto;
udp_header_t *udp;
tcp_header_t *tcp;
u16 *checksum, sport, dport;
ip_csum_t csum;
nat64_db_t *db = &nm->db[thread_index];
if (icmp->type == ICMP6_echo_request || icmp->type == ICMP6_echo_reply)
return -1;
inner_ip6 = (ip6_header_t *) u8_ptr_add (icmp, 8);
proto = inner_ip6->protocol;
if (proto == IP_PROTOCOL_ICMP6)
return -1;
sw_if_index = vnet_buffer (b)->sw_if_index[VLIB_RX];
fib_index =
fib_table_get_index_for_sw_if_index (FIB_PROTOCOL_IP6, sw_if_index);
saddr.as_u64[0] = inner_ip6->src_address.as_u64[0];
saddr.as_u64[1] = inner_ip6->src_address.as_u64[1];
daddr.as_u64[0] = inner_ip6->dst_address.as_u64[0];
daddr.as_u64[1] = inner_ip6->dst_address.as_u64[1];
udp = ip6_next_header (inner_ip6);
tcp = ip6_next_header (inner_ip6);
sport = udp->src_port;
dport = udp->dst_port;
if (proto == IP_PROTOCOL_UDP)
checksum = &udp->checksum;
else
checksum = &tcp->checksum;
csum = ip_csum_sub_even (*checksum, inner_ip6->src_address.as_u64[0]);
csum = ip_csum_sub_even (csum, inner_ip6->src_address.as_u64[1]);
csum = ip_csum_sub_even (csum, inner_ip6->dst_address.as_u64[0]);
csum = ip_csum_sub_even (csum, inner_ip6->dst_address.as_u64[1]);
csum = ip_csum_sub_even (csum, sport);
csum = ip_csum_sub_even (csum, dport);
ste =
nat64_db_st_entry_find (db, &daddr, &saddr, dport, sport, proto,
fib_index, 1);
if (!ste)
return -1;
bibe = nat64_db_bib_entry_by_index (db, proto, ste->bibe_index);
if (!bibe)
return -1;
dport = udp->dst_port = bibe->out_port;
nat64_compose_ip6 (&inner_ip6->dst_address, &bibe->out_addr, fib_index);
memset (&saddr, 0, sizeof (saddr));
memset (&daddr, 0, sizeof (daddr));
saddr.ip4.as_u32 = ste->out_r_addr.as_u32;
daddr.ip4.as_u32 = bibe->out_addr.as_u32;
ste = 0;
/* *INDENT-OFF* */
vec_foreach (db, nm->db)
{
ste = nat64_db_st_entry_find (db, &saddr, &daddr, sport, dport, proto,
0, 0);
if (ste)
break;
}
/* *INDENT-ON* */
if (!ste)
return -1;
bibe = nat64_db_bib_entry_by_index (db, proto, ste->bibe_index);
if (!bibe)
return -1;
inner_ip6->src_address.as_u64[0] = bibe->in_addr.as_u64[0];
inner_ip6->src_address.as_u64[1] = bibe->in_addr.as_u64[1];
udp->src_port = bibe->in_port;
csum = ip_csum_add_even (csum, inner_ip6->src_address.as_u64[0]);
csum = ip_csum_add_even (csum, inner_ip6->src_address.as_u64[1]);
csum = ip_csum_add_even (csum, inner_ip6->dst_address.as_u64[0]);
csum = ip_csum_add_even (csum, inner_ip6->dst_address.as_u64[1]);
csum = ip_csum_add_even (csum, udp->src_port);
csum = ip_csum_add_even (csum, udp->dst_port);
*checksum = ip_csum_fold (csum);
if (!vec_len (nm->addr_pool))
return -1;
nat64_compose_ip6 (&ip6->src_address, &nm->addr_pool[0].addr, fib_index);
ip6->dst_address.as_u64[0] = inner_ip6->src_address.as_u64[0];
ip6->dst_address.as_u64[1] = inner_ip6->src_address.as_u64[1];
icmp->checksum = 0;
csum = ip_csum_with_carry (0, ip6->payload_length);
csum = ip_csum_with_carry (csum, clib_host_to_net_u16 (ip6->protocol));
csum = ip_csum_with_carry (csum, ip6->src_address.as_u64[0]);
csum = ip_csum_with_carry (csum, ip6->src_address.as_u64[1]);
csum = ip_csum_with_carry (csum, ip6->dst_address.as_u64[0]);
csum = ip_csum_with_carry (csum, ip6->dst_address.as_u64[1]);
csum =
ip_incremental_checksum (csum, icmp,
clib_net_to_host_u16 (ip6->payload_length));
icmp->checksum = ~ip_csum_fold (csum);
return 0;
}
static int
nat64_in2out_unk_proto_hairpinning (vlib_main_t * vm, vlib_buffer_t * b,
ip6_header_t * ip6, u32 thread_index)
{
nat64_main_t *nm = &nat64_main;
nat64_db_bib_entry_t *bibe;
nat64_db_st_entry_t *ste;
ip46_address_t saddr, daddr, addr;
u32 sw_if_index, fib_index;
u8 proto = ip6->protocol;
int i;
nat64_db_t *db = &nm->db[thread_index];
sw_if_index = vnet_buffer (b)->sw_if_index[VLIB_RX];
fib_index =
fib_table_get_index_for_sw_if_index (FIB_PROTOCOL_IP6, sw_if_index);
saddr.as_u64[0] = ip6->src_address.as_u64[0];
saddr.as_u64[1] = ip6->src_address.as_u64[1];
daddr.as_u64[0] = ip6->dst_address.as_u64[0];
daddr.as_u64[1] = ip6->dst_address.as_u64[1];
ste =
nat64_db_st_entry_find (db, &saddr, &daddr, 0, 0, proto, fib_index, 1);
if (ste)
{
bibe = nat64_db_bib_entry_by_index (db, proto, ste->bibe_index);
if (!bibe)
return -1;
}
else
{
bibe = nat64_db_bib_entry_find (db, &saddr, 0, proto, fib_index, 1);
if (!bibe)
{
/* Choose same out address as for TCP/UDP session to same dst */
unk_proto_st_walk_ctx_t ctx = {
.src_addr.as_u64[0] = ip6->src_address.as_u64[0],
.src_addr.as_u64[1] = ip6->src_address.as_u64[1],
.dst_addr.as_u64[0] = ip6->dst_address.as_u64[0],
.dst_addr.as_u64[1] = ip6->dst_address.as_u64[1],
.out_addr.as_u32 = 0,
.fib_index = fib_index,
.proto = proto,
.thread_index = thread_index,
};
nat64_db_st_walk (db, IP_PROTOCOL_TCP, unk_proto_st_walk, &ctx);
if (!ctx.out_addr.as_u32)
nat64_db_st_walk (db, IP_PROTOCOL_UDP, unk_proto_st_walk, &ctx);
/* Verify if out address is not already in use for protocol */
memset (&addr, 0, sizeof (addr));
addr.ip4.as_u32 = ctx.out_addr.as_u32;
if (nat64_db_bib_entry_find (db, &addr, 0, proto, 0, 0))
ctx.out_addr.as_u32 = 0;
if (!ctx.out_addr.as_u32)
{
for (i = 0; i < vec_len (nm->addr_pool); i++)
{
addr.ip4.as_u32 = nm->addr_pool[i].addr.as_u32;
if (!nat64_db_bib_entry_find (db, &addr, 0, proto, 0, 0))
break;
}
}
if (!ctx.out_addr.as_u32)
return -1;
bibe =
nat64_db_bib_entry_create (db, &ip6->src_address,
&ctx.out_addr, 0, 0, fib_index, proto,
0);
if (!bibe)
return -1;
}
nat64_extract_ip4 (&ip6->dst_address, &daddr.ip4, fib_index);
ste =
nat64_db_st_entry_create (db, bibe, &ip6->dst_address, &daddr.ip4, 0);
if (!ste)
return -1;
}
nat64_session_reset_timeout (ste, vm);
nat64_compose_ip6 (&ip6->src_address, &bibe->out_addr, fib_index);
memset (&daddr, 0, sizeof (daddr));
daddr.ip4.as_u32 = ste->out_r_addr.as_u32;
bibe = 0;
/* *INDENT-OFF* */
vec_foreach (db, nm->db)
{
bibe = nat64_db_bib_entry_find (db, &daddr, 0, proto, 0, 0);
if (bibe)
break;
}
/* *INDENT-ON* */
if (!bibe)
return -1;
ip6->dst_address.as_u64[0] = bibe->in_addr.as_u64[0];
ip6->dst_address.as_u64[1] = bibe->in_addr.as_u64[1];
return 0;
}
static inline uword
nat64_in2out_node_fn_inline (vlib_main_t * vm, vlib_node_runtime_t * node,
vlib_frame_t * frame, u8 is_slow_path)
{
u32 n_left_from, *from, *to_next;
nat64_in2out_next_t next_index;
u32 pkts_processed = 0;
u32 stats_node_index;
u32 thread_index = vm->thread_index;
stats_node_index =
is_slow_path ? nat64_in2out_slowpath_node.index : nat64_in2out_node.index;
from = vlib_frame_vector_args (frame);
n_left_from = frame->n_vectors;
next_index = node->cached_next_index;
while (n_left_from > 0)
{
u32 n_left_to_next;
vlib_get_next_frame (vm, node, next_index, to_next, n_left_to_next);
while (n_left_from > 0 && n_left_to_next > 0)
{
u32 bi0;
vlib_buffer_t *b0;
u32 next0;
ip6_header_t *ip60;
u16 l4_offset0, frag_offset0;
u8 l4_protocol0;
u32 proto0;
nat64_in2out_set_ctx_t ctx0;
u32 sw_if_index0;
/* speculatively enqueue b0 to the current next frame */
bi0 = from[0];
to_next[0] = bi0;
from += 1;
to_next += 1;
n_left_from -= 1;
n_left_to_next -= 1;
b0 = vlib_get_buffer (vm, bi0);
ip60 = vlib_buffer_get_current (b0);
ctx0.b = b0;
ctx0.vm = vm;
ctx0.thread_index = thread_index;
next0 = NAT64_IN2OUT_NEXT_IP4_LOOKUP;
if (PREDICT_FALSE
(ip6_parse
(ip60, b0->current_length, &l4_protocol0, &l4_offset0,
&frag_offset0)))
{
next0 = NAT64_IN2OUT_NEXT_DROP;
b0->error = node->errors[NAT64_IN2OUT_ERROR_UNKNOWN];
goto trace0;
}
sw_if_index0 = vnet_buffer (b0)->sw_if_index[VLIB_RX];
if (nat64_not_translate (sw_if_index0, ip60->dst_address))
{
next0 = NAT64_IN2OUT_NEXT_IP6_LOOKUP;
goto trace0;
}
proto0 = ip_proto_to_snat_proto (l4_protocol0);
if (is_slow_path)
{
if (PREDICT_TRUE (proto0 == ~0))
{
if (is_hairpinning (&ip60->dst_address))
{
next0 = NAT64_IN2OUT_NEXT_IP6_LOOKUP;
if (nat64_in2out_unk_proto_hairpinning
(vm, b0, ip60, thread_index))
{
next0 = NAT64_IN2OUT_NEXT_DROP;
b0->error =
node->errors[NAT64_IN2OUT_ERROR_NO_TRANSLATION];
}
goto trace0;
}
if (ip6_to_ip4 (b0, nat64_in2out_unk_proto_set_cb, &ctx0))
{
next0 = NAT64_IN2OUT_NEXT_DROP;
b0->error =
node->errors[NAT64_IN2OUT_ERROR_NO_TRANSLATION];
goto trace0;
}
}
goto trace0;
}
else
{
if (PREDICT_FALSE (proto0 == ~0))
{
next0 = NAT64_IN2OUT_NEXT_SLOWPATH;
goto trace0;
}
}
if (PREDICT_FALSE
(ip60->protocol == IP_PROTOCOL_IPV6_FRAGMENTATION))
{
next0 = NAT64_IN2OUT_NEXT_REASS;
goto trace0;
}
if (proto0 == SNAT_PROTOCOL_ICMP)
{
if (is_hairpinning (&ip60->dst_address))
{
next0 = NAT64_IN2OUT_NEXT_IP6_LOOKUP;
if (nat64_in2out_icmp_hairpinning
(vm, b0, ip60, thread_index))
{
next0 = NAT64_IN2OUT_NEXT_DROP;
b0->error =
node->errors[NAT64_IN2OUT_ERROR_NO_TRANSLATION];
}
goto trace0;
}
if (icmp6_to_icmp
(b0, nat64_in2out_icmp_set_cb, &ctx0,
nat64_in2out_inner_icmp_set_cb, &ctx0))
{
next0 = NAT64_IN2OUT_NEXT_DROP;
b0->error = node->errors[NAT64_IN2OUT_ERROR_NO_TRANSLATION];
goto trace0;
}
}
else if (proto0 == SNAT_PROTOCOL_TCP || proto0 == SNAT_PROTOCOL_UDP)
{
if (is_hairpinning (&ip60->dst_address))
{
next0 = NAT64_IN2OUT_NEXT_IP6_LOOKUP;
if (nat64_in2out_tcp_udp_hairpinning
(vm, b0, ip60, thread_index))
{
next0 = NAT64_IN2OUT_NEXT_DROP;
b0->error =
node->errors[NAT64_IN2OUT_ERROR_NO_TRANSLATION];
}
goto trace0;
}
if (ip6_to_ip4_tcp_udp
(b0, nat64_in2out_tcp_udp_set_cb, &ctx0, 0))
{
next0 = NAT64_IN2OUT_NEXT_DROP;
b0->error = node->errors[NAT64_IN2OUT_ERROR_NO_TRANSLATION];
goto trace0;
}
}
trace0:
if (PREDICT_FALSE ((node->flags & VLIB_NODE_FLAG_TRACE)
&& (b0->flags & VLIB_BUFFER_IS_TRACED)))
{
nat64_in2out_trace_t *t =
vlib_add_trace (vm, node, b0, sizeof (*t));
t->sw_if_index = vnet_buffer (b0)->sw_if_index[VLIB_RX];
t->next_index = next0;
t->is_slow_path = is_slow_path;
}
pkts_processed += next0 != NAT64_IN2OUT_NEXT_DROP;
/* verify speculative enqueue, maybe switch current next frame */
vlib_validate_buffer_enqueue_x1 (vm, node, next_index, to_next,
n_left_to_next, bi0, next0);
}
vlib_put_next_frame (vm, node, next_index, n_left_to_next);
}
vlib_node_increment_counter (vm, stats_node_index,
NAT64_IN2OUT_ERROR_IN2OUT_PACKETS,
pkts_processed);
return frame->n_vectors;
}
static uword
nat64_in2out_node_fn (vlib_main_t * vm, vlib_node_runtime_t * node,
vlib_frame_t * frame)
{
return nat64_in2out_node_fn_inline (vm, node, frame, 0);
}
/* *INDENT-OFF* */
VLIB_REGISTER_NODE (nat64_in2out_node) = {
.function = nat64_in2out_node_fn,
.name = "nat64-in2out",
.vector_size = sizeof (u32),
.format_trace = format_nat64_in2out_trace,
.type = VLIB_NODE_TYPE_INTERNAL,
.n_errors = ARRAY_LEN (nat64_in2out_error_strings),
.error_strings = nat64_in2out_error_strings,
.n_next_nodes = NAT64_IN2OUT_N_NEXT,
/* edit / add dispositions here */
.next_nodes = {
[NAT64_IN2OUT_NEXT_DROP] = "error-drop",
[NAT64_IN2OUT_NEXT_IP4_LOOKUP] = "ip4-lookup",
[NAT64_IN2OUT_NEXT_IP6_LOOKUP] = "ip6-lookup",
[NAT64_IN2OUT_NEXT_SLOWPATH] = "nat64-in2out-slowpath",
[NAT64_IN2OUT_NEXT_REASS] = "nat64-in2out-reass",
},
};
/* *INDENT-ON* */
VLIB_NODE_FUNCTION_MULTIARCH (nat64_in2out_node, nat64_in2out_node_fn);
static uword
nat64_in2out_slowpath_node_fn (vlib_main_t * vm, vlib_node_runtime_t * node,
vlib_frame_t * frame)
{
return nat64_in2out_node_fn_inline (vm, node, frame, 1);
}
/* *INDENT-OFF* */
VLIB_REGISTER_NODE (nat64_in2out_slowpath_node) = {
.function = nat64_in2out_slowpath_node_fn,
.name = "nat64-in2out-slowpath",
.vector_size = sizeof (u32),
.format_trace = format_nat64_in2out_trace,
.type = VLIB_NODE_TYPE_INTERNAL,
.n_errors = ARRAY_LEN (nat64_in2out_error_strings),
.error_strings = nat64_in2out_error_strings,
.n_next_nodes = NAT64_IN2OUT_N_NEXT,
/* edit / add dispositions here */
.next_nodes = {
[NAT64_IN2OUT_NEXT_DROP] = "error-drop",
[NAT64_IN2OUT_NEXT_IP4_LOOKUP] = "ip4-lookup",
[NAT64_IN2OUT_NEXT_IP6_LOOKUP] = "ip6-lookup",
[NAT64_IN2OUT_NEXT_SLOWPATH] = "nat64-in2out-slowpath",
[NAT64_IN2OUT_NEXT_REASS] = "nat64-in2out-reass",
},
};
/* *INDENT-ON* */
VLIB_NODE_FUNCTION_MULTIARCH (nat64_in2out_slowpath_node,
nat64_in2out_slowpath_node_fn);
typedef struct nat64_in2out_frag_set_ctx_t_
{
vlib_main_t *vm;
u32 sess_index;
u32 thread_index;
u16 l4_offset;
u8 proto;
u8 first_frag;
} nat64_in2out_frag_set_ctx_t;
static int
nat64_in2out_frag_set_cb (ip6_header_t * ip6, ip4_header_t * ip4, void *arg)
{
nat64_main_t *nm = &nat64_main;
nat64_in2out_frag_set_ctx_t *ctx = arg;
nat64_db_st_entry_t *ste;
nat64_db_bib_entry_t *bibe;
udp_header_t *udp;
nat64_db_t *db = &nm->db[ctx->thread_index];
ste = nat64_db_st_entry_by_index (db, ctx->proto, ctx->sess_index);
if (!ste)
return -1;
bibe = nat64_db_bib_entry_by_index (db, ctx->proto, ste->bibe_index);
if (!bibe)
return -1;
nat64_session_reset_timeout (ste, ctx->vm);
if (ctx->first_frag)
{
udp = (udp_header_t *) u8_ptr_add (ip6, ctx->l4_offset);
if (ctx->proto == IP_PROTOCOL_TCP)
{
u16 *checksum;
ip_csum_t csum;
tcp_header_t *tcp = (tcp_header_t *) udp;
nat64_tcp_session_set_state (ste, tcp, 1);
checksum = &tcp->checksum;
csum = ip_csum_sub_even (*checksum, tcp->src_port);
csum = ip_csum_sub_even (csum, ip6->src_address.as_u64[0]);
csum = ip_csum_sub_even (csum, ip6->src_address.as_u64[1]);
csum = ip_csum_sub_even (csum, ip6->dst_address.as_u64[0]);
csum = ip_csum_sub_even (csum, ip6->dst_address.as_u64[1]);
csum = ip_csum_add_even (csum, bibe->out_port);
csum = ip_csum_add_even (csum, bibe->out_addr.as_u32);
csum = ip_csum_add_even (csum, ste->out_r_addr.as_u32);
*checksum = ip_csum_fold (csum);
}
udp->src_port = bibe->out_port;
}
ip4->src_address.as_u32 = bibe->out_addr.as_u32;
ip4->dst_address.as_u32 = ste->out_r_addr.as_u32;
return 0;
}
static int
nat64_in2out_frag_hairpinning (vlib_buffer_t * b, ip6_header_t * ip6,
nat64_in2out_frag_set_ctx_t * ctx)
{
nat64_main_t *nm = &nat64_main;
nat64_db_st_entry_t *ste;
nat64_db_bib_entry_t *bibe;
udp_header_t *udp = (udp_header_t *) u8_ptr_add (ip6, ctx->l4_offset);
tcp_header_t *tcp = (tcp_header_t *) udp;
u16 sport = udp->src_port;
u16 dport = udp->dst_port;
u16 *checksum;
ip_csum_t csum;
ip46_address_t daddr;
nat64_db_t *db = &nm->db[ctx->thread_index];
if (ctx->first_frag)
{
if (ctx->proto == IP_PROTOCOL_UDP)
checksum = &udp->checksum;
else
checksum = &tcp->checksum;
csum = ip_csum_sub_even (*checksum, ip6->src_address.as_u64[0]);
csum = ip_csum_sub_even (csum, ip6->src_address.as_u64[1]);
csum = ip_csum_sub_even (csum, ip6->dst_address.as_u64[0]);
csum = ip_csum_sub_even (csum, ip6->dst_address.as_u64[1]);
csum = ip_csum_sub_even (csum, sport);
csum = ip_csum_sub_even (csum, dport);
}
ste = nat64_db_st_entry_by_index (db, ctx->proto, ctx->sess_index);
if (!ste)
return -1;
bibe = nat64_db_bib_entry_by_index (db, ctx->proto, ste->bibe_index);
if (!bibe)
return -1;
if (ctx->proto == IP_PROTOCOL_TCP)
nat64_tcp_session_set_state (ste, tcp, 1);
nat64_session_reset_timeout (ste, ctx->vm);
sport = bibe->out_port;
dport = ste->r_port;
nat64_compose_ip6 (&ip6->src_address, &bibe->out_addr, bibe->fib_index);
memset (&daddr, 0, sizeof (daddr));
daddr.ip4.as_u32 = ste->out_r_addr.as_u32;
bibe = 0;
/* *INDENT-OFF* */
vec_foreach (db, nm->db)
{
bibe = nat64_db_bib_entry_find (db, &daddr, dport, ctx->proto, 0, 0);
if (bibe)
break;
}
/* *INDENT-ON* */
if (!bibe)
return -1;
ip6->dst_address.as_u64[0] = bibe->in_addr.as_u64[0];
ip6->dst_address.as_u64[1] = bibe->in_addr.as_u64[1];
if (ctx->first_frag)
{
udp->dst_port = bibe->in_port;
udp->src_port = sport;
csum = ip_csum_add_even (csum, ip6->src_address.as_u64[0]);
csum = ip_csum_add_even (csum, ip6->src_address.as_u64[1]);
csum = ip_csum_add_even (csum, ip6->dst_address.as_u64[0]);
csum = ip_csum_add_even (csum, ip6->dst_address.as_u64[1]);
csum = ip_csum_add_even (csum, udp->src_port);
csum = ip_csum_add_even (csum, udp->dst_port);
*checksum = ip_csum_fold (csum);
}
return 0;
}
static uword
nat64_in2out_reass_node_fn (vlib_main_t * vm,
vlib_node_runtime_t * node, vlib_frame_t * frame)
{
u32 n_left_from, *from, *to_next;
nat64_in2out_next_t next_index;
u32 pkts_processed = 0;
u32 *fragments_to_drop = 0;
u32 *fragments_to_loopback = 0;
nat64_main_t *nm = &nat64_main;
u32 thread_index = vm->thread_index;
from = vlib_frame_vector_args (frame);
n_left_from = frame->n_vectors;
next_index = node->cached_next_index;
while (n_left_from > 0)
{
u32 n_left_to_next;
vlib_get_next_frame (vm, node, next_index, to_next, n_left_to_next);
while (n_left_from > 0 && n_left_to_next > 0)
{
u32 bi0;
vlib_buffer_t *b0;
u32 next0;
u8 cached0 = 0;
ip6_header_t *ip60;
u16 l4_offset0, frag_offset0;
u8 l4_protocol0;
nat_reass_ip6_t *reass0;
ip6_frag_hdr_t *frag0;
nat64_db_bib_entry_t *bibe0;
nat64_db_st_entry_t *ste0;
udp_header_t *udp0;
snat_protocol_t proto0;
u32 sw_if_index0, fib_index0;
ip46_address_t saddr0, daddr0;
nat64_in2out_frag_set_ctx_t ctx0;
nat64_db_t *db = &nm->db[thread_index];
/* speculatively enqueue b0 to the current next frame */
bi0 = from[0];
to_next[0] = bi0;
from += 1;
to_next += 1;
n_left_from -= 1;
n_left_to_next -= 1;
b0 = vlib_get_buffer (vm, bi0);
next0 = NAT64_IN2OUT_NEXT_IP4_LOOKUP;
sw_if_index0 = vnet_buffer (b0)->sw_if_index[VLIB_RX];
fib_index0 =
fib_table_get_index_for_sw_if_index (FIB_PROTOCOL_IP6,
sw_if_index0);
ctx0.thread_index = thread_index;
if (PREDICT_FALSE (nat_reass_is_drop_frag (1)))
{
next0 = NAT64_IN2OUT_NEXT_DROP;
b0->error = node->errors[NAT64_IN2OUT_ERROR_DROP_FRAGMENT];
goto trace0;
}
ip60 = (ip6_header_t *) vlib_buffer_get_current (b0);
if (PREDICT_FALSE
(ip6_parse
(ip60, b0->current_length, &l4_protocol0, &l4_offset0,
&frag_offset0)))
{
next0 = NAT64_IN2OUT_NEXT_DROP;
b0->error = node->errors[NAT64_IN2OUT_ERROR_UNKNOWN];
goto trace0;
}
if (PREDICT_FALSE
(!(l4_protocol0 == IP_PROTOCOL_TCP
|| l4_protocol0 == IP_PROTOCOL_UDP)))
{
next0 = NAT64_IN2OUT_NEXT_DROP;
b0->error = node->errors[NAT64_IN2OUT_ERROR_DROP_FRAGMENT];
goto trace0;
}
udp0 = (udp_header_t *) u8_ptr_add (ip60, l4_offset0);
frag0 = (ip6_frag_hdr_t *) u8_ptr_add (ip60, frag_offset0);
proto0 = ip_proto_to_snat_proto (l4_protocol0);
reass0 = nat_ip6_reass_find_or_create (ip60->src_address,
ip60->dst_address,
frag0->identification,
l4_protocol0,
1, &fragments_to_drop);
if (PREDICT_FALSE (!reass0))
{
next0 = NAT64_IN2OUT_NEXT_DROP;
b0->error = node->errors[NAT64_IN2OUT_ERROR_MAX_REASS];
goto trace0;
}
if (PREDICT_TRUE (ip6_frag_hdr_offset (frag0)))
{
ctx0.first_frag = 0;
if (PREDICT_FALSE (reass0->sess_index == (u32) ~ 0))
{
if (nat_ip6_reass_add_fragment
(reass0, bi0, &fragments_to_drop))
{
b0->error = node->errors[NAT64_IN2OUT_ERROR_MAX_FRAG];
next0 = NAT64_IN2OUT_NEXT_DROP;
goto trace0;
}
cached0 = 1;
goto trace0;
}
}
else
{
ctx0.first_frag = 1;
saddr0.as_u64[0] = ip60->src_address.as_u64[0];
saddr0.as_u64[1] = ip60->src_address.as_u64[1];
daddr0.as_u64[0] = ip60->dst_address.as_u64[0];
daddr0.as_u64[1] = ip60->dst_address.as_u64[1];
ste0 =
nat64_db_st_entry_find (db, &saddr0, &daddr0,
udp0->src_port, udp0->dst_port,
l4_protocol0, fib_index0, 1);
if (!ste0)
{
bibe0 =
nat64_db_bib_entry_find (db, &saddr0, udp0->src_port,
l4_protocol0, fib_index0, 1);
if (!bibe0)
{
u16 out_port0;
ip4_address_t out_addr0;
if (nat64_alloc_out_addr_and_port
(fib_index0, proto0, &out_addr0, &out_port0,
thread_index))
{
next0 = NAT64_IN2OUT_NEXT_DROP;
b0->error =
node->errors[NAT64_IN2OUT_ERROR_NO_TRANSLATION];
goto trace0;
}
bibe0 =
nat64_db_bib_entry_create (db,
&ip60->src_address,
&out_addr0, udp0->src_port,
out_port0, fib_index0,
l4_protocol0, 0);
if (!bibe0)
{
next0 = NAT64_IN2OUT_NEXT_DROP;
b0->error =
node->errors[NAT64_IN2OUT_ERROR_NO_TRANSLATION];
goto trace0;
}
}
nat64_extract_ip4 (&ip60->dst_address, &daddr0.ip4,
fib_index0);
ste0 =
nat64_db_st_entry_create (db, bibe0,
&ip60->dst_address, &daddr0.ip4,
udp0->dst_port);
if (!ste0)
{
next0 = NAT64_IN2OUT_NEXT_DROP;
b0->error =
node->errors[NAT64_IN2OUT_ERROR_NO_TRANSLATION];
goto trace0;
}
}
reass0->sess_index = nat64_db_st_entry_get_index (db, ste0);
nat_ip6_reass_get_frags (reass0, &fragments_to_loopback);
}
ctx0.sess_index = reass0->sess_index;
ctx0.proto = l4_protocol0;
ctx0.vm = vm;
ctx0.l4_offset = l4_offset0;
if (PREDICT_FALSE (is_hairpinning (&ip60->dst_address)))
{
next0 = NAT64_IN2OUT_NEXT_IP6_LOOKUP;
if (nat64_in2out_frag_hairpinning (b0, ip60, &ctx0))
{
next0 = NAT64_IN2OUT_NEXT_DROP;
b0->error = node->errors[NAT64_IN2OUT_ERROR_NO_TRANSLATION];
}
goto trace0;
}
else
{
if (ip6_to_ip4_fragmented (b0, nat64_in2out_frag_set_cb, &ctx0))
{
next0 = NAT64_IN2OUT_NEXT_DROP;
b0->error = node->errors[NAT64_IN2OUT_ERROR_UNKNOWN];
goto trace0;
}
}
trace0:
if (PREDICT_FALSE
((node->flags & VLIB_NODE_FLAG_TRACE)
&& (b0->flags & VLIB_BUFFER_IS_TRACED)))
{
nat64_in2out_reass_trace_t *t =
vlib_add_trace (vm, node, b0, sizeof (*t));
t->cached = cached0;
t->sw_if_index = sw_if_index0;
t->next_index = next0;
}
if (cached0)
{
n_left_to_next++;
to_next--;
}
else
{
pkts_processed += next0 != NAT64_IN2OUT_NEXT_DROP;
/* verify speculative enqueue, maybe switch current next frame */
vlib_validate_buffer_enqueue_x1 (vm, node, next_index,
to_next, n_left_to_next,
bi0, next0);
}
if (n_left_from == 0 && vec_len (fragments_to_loopback))
{
from = vlib_frame_vector_args (frame);
u32 len = vec_len (fragments_to_loopback);
if (len <= VLIB_FRAME_SIZE)
{
clib_memcpy (from, fragments_to_loopback,
sizeof (u32) * len);
n_left_from = len;
vec_reset_length (fragments_to_loopback);
}
else
{
clib_memcpy (from,
fragments_to_loopback + (len -
VLIB_FRAME_SIZE),
sizeof (u32) * VLIB_FRAME_SIZE);
n_left_from = VLIB_FRAME_SIZE;
_vec_len (fragments_to_loopback) = len - VLIB_FRAME_SIZE;
}
}
}
vlib_put_next_frame (vm, node, next_index, n_left_to_next);
}
vlib_node_increment_counter (vm, nat64_in2out_reass_node.index,
NAT64_IN2OUT_ERROR_IN2OUT_PACKETS,
pkts_processed);
nat_send_all_to_node (vm, fragments_to_drop, node,
&node->errors[NAT64_IN2OUT_ERROR_DROP_FRAGMENT],
NAT64_IN2OUT_NEXT_DROP);
vec_free (fragments_to_drop);
vec_free (fragments_to_loopback);
return frame->n_vectors;
}
/* *INDENT-OFF* */
VLIB_REGISTER_NODE (nat64_in2out_reass_node) = {
.function = nat64_in2out_reass_node_fn,
.name = "nat64-in2out-reass",
.vector_size = sizeof (u32),
.format_trace = format_nat64_in2out_reass_trace,
.type = VLIB_NODE_TYPE_INTERNAL,
.n_errors = ARRAY_LEN (nat64_in2out_error_strings),
.error_strings = nat64_in2out_error_strings,
.n_next_nodes = NAT64_IN2OUT_N_NEXT,
/* edit / add dispositions here */
.next_nodes = {
[NAT64_IN2OUT_NEXT_DROP] = "error-drop",
[NAT64_IN2OUT_NEXT_IP4_LOOKUP] = "ip4-lookup",
[NAT64_IN2OUT_NEXT_IP6_LOOKUP] = "ip6-lookup",
[NAT64_IN2OUT_NEXT_SLOWPATH] = "nat64-in2out-slowpath",
[NAT64_IN2OUT_NEXT_REASS] = "nat64-in2out-reass",
},
};
/* *INDENT-ON* */
VLIB_NODE_FUNCTION_MULTIARCH (nat64_in2out_reass_node,
nat64_in2out_reass_node_fn);
#define foreach_nat64_in2out_handoff_error \
_(CONGESTION_DROP, "congestion drop")
typedef enum
{
#define _(sym,str) NAT64_IN2OUT_HANDOFF_ERROR_##sym,
foreach_nat64_in2out_handoff_error
#undef _
NAT64_IN2OUT_HANDOFF_N_ERROR,
} nat64_in2out_handoff_error_t;
static char *nat64_in2out_handoff_error_strings[] = {
#define _(sym,string) string,
foreach_nat64_in2out_handoff_error
#undef _
};
typedef struct
{
u32 next_worker_index;
} nat64_in2out_handoff_trace_t;
static u8 *
format_nat64_in2out_handoff_trace (u8 * s, va_list * args)
{
CLIB_UNUSED (vlib_main_t * vm) = va_arg (*args, vlib_main_t *);
CLIB_UNUSED (vlib_node_t * node) = va_arg (*args, vlib_node_t *);
nat64_in2out_handoff_trace_t *t =
va_arg (*args, nat64_in2out_handoff_trace_t *);
s =
format (s, "NAT64-IN2OUT-HANDOFF: next-worker %d", t->next_worker_index);
return s;
}
static inline uword
nat64_in2out_handoff_node_fn (vlib_main_t * vm, vlib_node_runtime_t * node,
vlib_frame_t * frame)
{
nat64_main_t *nm = &nat64_main;
vlib_buffer_t *bufs[VLIB_FRAME_SIZE], **b;
u32 n_enq, n_left_from, *from;
u16 thread_indices[VLIB_FRAME_SIZE], *ti;
u32 fq_index;
from = vlib_frame_vector_args (frame);
n_left_from = frame->n_vectors;
vlib_get_buffers (vm, from, bufs, n_left_from);
b = bufs;
ti = thread_indices;
fq_index = nm->fq_in2out_index;
while (n_left_from > 0)
{
ip6_header_t *ip0;
ip0 = vlib_buffer_get_current (b[0]);
ti[0] = nat64_get_worker_in2out (&ip0->src_address);
if (PREDICT_FALSE
((node->flags & VLIB_NODE_FLAG_TRACE)
&& (b[0]->flags & VLIB_BUFFER_IS_TRACED)))
{
nat64_in2out_handoff_trace_t *t =
vlib_add_trace (vm, node, b[0], sizeof (*t));
t->next_worker_index = ti[0];
}
n_left_from -= 1;
ti += 1;
b += 1;
}
n_enq =
vlib_buffer_enqueue_to_thread (vm, fq_index, from, thread_indices,
frame->n_vectors, 1);
if (n_enq < frame->n_vectors)
vlib_node_increment_counter (vm, node->node_index,
NAT64_IN2OUT_HANDOFF_ERROR_CONGESTION_DROP,
frame->n_vectors - n_enq);
return frame->n_vectors;
}
/* *INDENT-OFF* */
VLIB_REGISTER_NODE (nat64_in2out_handoff_node) = {
.function = nat64_in2out_handoff_node_fn,
.name = "nat64-in2out-handoff",
.vector_size = sizeof (u32),
.format_trace = format_nat64_in2out_handoff_trace,
.type = VLIB_NODE_TYPE_INTERNAL,
.n_errors = ARRAY_LEN(nat64_in2out_handoff_error_strings),
.error_strings = nat64_in2out_handoff_error_strings,
.n_next_nodes = 1,
.next_nodes = {
[0] = "error-drop",
},
};
/* *INDENT-ON* */
VLIB_NODE_FUNCTION_MULTIARCH (nat64_in2out_handoff_node,
nat64_in2out_handoff_node_fn);
/*
* fd.io coding-style-patch-verification: ON
*
* Local Variables:
* eval: (c-set-style "gnu")
* End:
*/