#!/usr/bin/env python3 import ipaddress import unittest from framework import VppTestCase, VppTestRunner from vpp_ip import DpoProto from vpp_ip_route import VppIpRoute, VppRoutePath from util import fragment_rfc791, fragment_rfc8200 import scapy.compat from scapy.layers.l2 import Ether from scapy.packet import Raw from scapy.layers.inet import IP, UDP, ICMP, TCP, IPerror, UDPerror from scapy.layers.inet6 import IPv6, ICMPv6TimeExceeded, ICMPv6PacketTooBig from scapy.layers.inet6 import ICMPv6EchoRequest, ICMPv6EchoReply, IPerror6 class TestMAPBR(VppTestCase): """ MAP-T Test Cases """ @classmethod def setUpClass(cls): super(TestMAPBR, cls).setUpClass() @classmethod def tearDownClass(cls): super(TestMAPBR, cls).tearDownClass() def setUp(self): super(TestMAPBR, self).setUp() # # Create 2 pg interfaces. # pg0 is IPv4 # pg1 is IPv6 # self.create_pg_interfaces(range(2)) self.pg0.admin_up() self.pg0.config_ip4() self.pg1.generate_remote_hosts(20) self.pg1.configure_ipv4_neighbors() self.pg0.resolve_arp() self.pg1.admin_up() self.pg1.config_ip6() self.pg1.generate_remote_hosts(20) self.pg1.configure_ipv6_neighbors() # # BR configuration parameters used for all test. # self.ip4_prefix = '198.18.0.0/24' self.ip6_prefix = '2001:db8:f0::/48' self.ip6_src = '2001:db8:ffff:ff00::/64' self.ea_bits_len = 12 self.psid_offset = 6 self.psid_length = 4 self.mtu = 1500 self.tag = 'MAP-T BR' self.ipv4_internet_address = self.pg0.remote_ip4 self.ipv4_map_address = "198.18.0.12" self.ipv4_udp_or_tcp_internet_port = 65000 self.ipv4_udp_or_tcp_map_port = 16606 self.ipv6_cpe_address = "2001:db8:f0:c30:0:c612:c:3" # 198.18.0.12 self.ipv6_spoof_address = "2001:db8:f0:c30:0:c612:1c:3" # 198.18.0.28 self.ipv6_spoof_prefix = "2001:db8:f0:c30:0:a00:c:3" # 10.0.0.12 self.ipv6_spoof_psid = "2001:db8:f0:c30:0:c612:c:4" # 4 self.ipv6_spoof_subnet = "2001:db8:f1:c30:0:c612:c:3" # f1 self.ipv6_udp_or_tcp_internet_port = 65000 self.ipv6_udp_or_tcp_map_port = 16606 self.ipv6_udp_or_tcp_spoof_port = 16862 self.ipv6_map_address = ( "2001:db8:ffff:ff00:ac:1001:200:0") # 176.16.1.2 self.ipv6_map_same_rule_diff_addr = ( "2001:db8:ffff:ff00:c6:1200:1000:0") # 198.18.0.16 self.ipv6_map_same_rule_same_addr = ( "2001:db8:ffff:ff00:c6:1200:c00:0") # 198.18.0.12 self.map_br_prefix = "2001:db8:f0::" self.map_br_prefix_len = 48 self.psid_number = 3 # # Add an IPv6 route to the MAP-BR. # map_route = VppIpRoute(self, self.map_br_prefix, self.map_br_prefix_len, [VppRoutePath(self.pg1.remote_ip6, self.pg1.sw_if_index)]) map_route.add_vpp_config() # # Add a MAP BR domain that maps from pg0 to pg1. # self.vapi.map_add_domain(ip4_prefix=self.ip4_prefix, ip6_prefix=self.ip6_prefix, ip6_src=self.ip6_src, ea_bits_len=self.ea_bits_len, psid_offset=self.psid_offset, psid_length=self.psid_length, mtu=self.mtu, tag=self.tag) # # Set BR parameters. # self.vapi.map_param_set_fragmentation(inner=1, ignore_df=0) self.vapi.map_param_set_fragmentation(inner=0, ignore_df=0) self.vapi.map_param_set_icmp(ip4_err_relay_src=self.pg0.local_ip4) self.vapi.map_param_set_traffic_class(copy=1) # # Enable MAP-T on interfaces. # self.vapi.map_if_enable_disable(is_enable=1, sw_if_index=self.pg0.sw_if_index, is_translation=1) self.vapi.map_if_enable_disable(is_enable=1, sw_if_index=self.pg1.sw_if_index, is_translation=1) self.vapi.map_if_enable_disable(is_enable=1, sw_if_index=self.pg1.sw_if_index, is_translation=1) def tearDown(self): super(TestMAPBR, self).tearDown() for i in self.pg_interfaces: i.unconfig_ip4() i.unconfig_ip6() i.admin_down() def v4_address_check(self, pkt): self.assertEqual(pkt[IP].src, self.ipv4_map_address) self.assertEqual(pkt[IP].dst, self.ipv4_internet_address) def v4_port_check(self, pkt, proto): self.assertEqual(pkt[proto].sport, self.ipv4_udp_or_tcp_map_port) self.assertEqual(pkt[proto].dport, self.ipv4_udp_or_tcp_internet_port) def v6_address_check(self, pkt): self.assertEqual(pkt[IPv6].src, self.ipv6_map_address) self.assertEqual(pkt[IPv6].dst, self.ipv6_cpe_address) def v6_port_check(self, pkt, proto): self.assertEqual(pkt[proto].sport, self.ipv6_udp_or_tcp_internet_port) self.assertEqual(pkt[proto].dport, self.ipv6_udp_or_tcp_map_port) # # Normal translation of UDP packets v4 -> v6 direction # Send 128 frame size packet for IPv4/UDP. # Received packet should be translated into IPv6 packet with no # fragment header. # def test_map_t_udp_ip4_to_ip6(self): """ MAP-T UDP IPv4 -> IPv6 """ eth = Ether(src=self.pg0.remote_mac, dst=self.pg0.local_mac) ip = IP(src=self.pg0.remote_ip4, dst=self.ipv4_map_address, tos=0) udp = UDP(sport=self.ipv4_udp_or_tcp_internet_port, dport=self.ipv4_udp_or_tcp_map_port) payload = "a" * 82 tx_pkt = eth / ip / udp / payload self.pg_send(self.pg0, tx_pkt * 1) rx_pkts = self.pg1.get_capture(1) rx_pkt = rx_pkts[0] self.v6_address_check(rx_pkt) self.v6_port_check(rx_pkt, UDP) self.assertEqual(rx_pkt[IPv6].tc, 0) # IPv4 ToS passed to v6 TC self.assertEqual(rx_pkt[IPv6].nh, IPv6(nh="UDP").nh) # # Normal translation of TCP packets v4 -> v6 direction. # Send 128 frame size packet for IPv4/TCP. # Received packet should be translated into IPv6 packet with no # fragment header. # def test_map_t_tcp_ip4_to_ip6(self): """ MAP-T TCP IPv4 -> IPv6 """ eth = Ether(src=self.pg0.remote_mac, dst=self.pg0.local_mac) ip = IP(src=self.pg0.remote_ip4, dst=self.ipv4_map_address, tos=0) tcp = TCP(sport=self.ipv4_udp_or_tcp_internet_port, dport=self.ipv4_udp_or_tcp_map_port) payload = "a" * 82 tx_pkt = eth / ip / tcp / payload self.pg_send(self.pg0, tx_pkt * 1) rx_pkts = self.pg1.get_capture(1) rx_pkt = rx_pkts[0] self.v6_address_check(rx_pkt) self.v6_port_check(rx_pkt, TCP) self.assertEqual(rx_pkt[IPv6].tc, 0) # IPv4 ToS passed to v6 TC self.assertEqual(rx_pkt[IPv6].nh, IPv6(nh="TCP").nh) # # Normal translation of UDP packets v6 -> v4 direction # Send 128 frame size packet for IPv6/UDP. # Received packet should be translated into an IPv4 packet with DF=1. # def test_map_t_udp_ip6_to_ip4(self): """ MAP-T UDP IPv6 -> IPv4 """ eth = Ether(src=self.pg1.remote_mac, dst=self.pg1.local_mac) ip = IPv6(src=self.ipv6_cpe_address, dst=self.ipv6_map_address) udp = UDP(sport=self.ipv6_udp_or_tcp_map_port, dport=self.ipv6_udp_or_tcp_internet_port) payload = "a" * 82 tx_pkt = eth / ip / udp / payload self.pg_send(self.pg1, tx_pkt * 1) rx_pkts = self.pg0.get_capture(1) rx_pkt = rx_pkts[0] self.v4_address_check(rx_pkt) self.v4_port_check(rx_pkt, UDP) self.assertEqual(rx_pkt[IP].proto, IP(proto="udp").proto) self.assertEqual(rx_pkt[IP].tos, 0) # IPv6 TC passed to v4 ToS df_bit = IP(flags="DF").flags self.assertNotEqual(rx_pkt[IP].flags & df_bit, df_bit) # # Normal translation of TCP packets v6 -> v4 direction # Send 128 frame size packet for IPv6/TCP. # Received packet should be translated into an IPv4 packet with DF=1 # def test_map_t_tcp_ip6_to_ip4(self): """ MAP-T TCP IPv6 -> IPv4 """ eth = Ether(src=self.pg1.remote_mac, dst=self.pg1.local_mac) ip = IPv6(src=self.ipv6_cpe_address, dst=self.ipv6_map_address) tcp = TCP(sport=self.ipv6_udp_or_tcp_map_port, dport=self.ipv6_udp_or_tcp_internet_port) payload = "a" * 82 tx_pkt = eth / ip / tcp / payload self.pg_send(self.pg1, tx_pkt * 1) rx_pkts = self.pg0.get_capture(1) rx_pkt = rx_pkts[0] self.v4_address_check(rx_pkt) self.v4_port_check(rx_pkt, TCP) self.assertEqual(rx_pkt[IP].proto, IP(proto="tcp").proto) self.assertEqual(rx_pkt[IP].tos, 0) # IPv6 TC passed to v4 ToS df_bit = IP(flags="DF").flags self.assertNotEqual(rx_pkt[IP].flags & df_bit, df_bit) # # Translation of ICMP Echo Request v4 -> v6 direction 
/*
 * Copyright (c) 2015 Cisco and/or its affiliates.
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at:
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

#ifndef included_vector_neon_h
#define included_vector_neon_h
#include <arm_neon.h>

/* Arithmetic */
#define u16x8_sub_saturate(a,b) vsubq_u16(a,b)
#define i16x8_sub_saturate(a,b) vsubq_s16(a,b)

/* Converts all ones/zeros compare mask to bitmap. */
always_inline u32
u8x16_compare_byte_mask (u8x16 x)
{
  uint8x16_t mask_shift =
    { -7, -6, -5, -4, -3, -2, -1, 0, -7, -6, -5, -4, -3, -2, -1, 0 };
  uint8x16_t mask_and = vdupq_n_u8 (0x80);
  x = vandq_u8 (x, mask_and);
  x = vshlq_u8 (x, vreinterpretq_s8_u8 (mask_shift));
  x = vpaddq_u8 (x, x);
  x = vpaddq_u8 (x, x);
  x = vpaddq_u8 (x, x);
  return vgetq_lane_u8 (x, 0) | (vgetq_lane_u8 (x, 1) << 8);
}

always_inline u32
u16x8_zero_byte_mask (u16x8 input)
{
  u8x16 vall_one = vdupq_n_u8 (0x0);
  u8x16 res_values = { 0x01, 0x02, 0x04, 0x08,
    0x10, 0x20, 0x40, 0x80,
    0x01, 0x02, 0x04, 0x08,
    0x10, 0x20, 0x40, 0x80
  };

  /* input --> [0x80, 0x40, 0x01, 0xf0, ... ] */
  u8x16 test_result =
    vreinterpretq_u8_u16 (vceqq_u16 (input, vreinterpretq_u16_u8 (vall_one)));