in2out.c File Reference

NAT44 inside to outside network translation. More...

Include dependency graph for in2out.c:

Go to the source code of this file.

Data Structures
struct	snat_in2out_trace_t

Macros
#define	foreach_snat_in2out_error

Enumerations
enum	snat_in2out_error_t { SNAT_IN2OUT_N_ERROR }
enum	snat_in2out_next_t {   SNAT_IN2OUT_NEXT_LOOKUP, SNAT_IN2OUT_NEXT_DROP, SNAT_IN2OUT_NEXT_ICMP_ERROR, SNAT_IN2OUT_NEXT_SLOW_PATH,   SNAT_IN2OUT_NEXT_REASS, SNAT_IN2OUT_N_NEXT }

Functions
static u8 *	format_snat_in2out_trace (u8 *s, va_list *args)
static u8 *	format_snat_in2out_fast_trace (u8 *s, va_list *args)
static int	snat_not_translate (snat_main_t *sm, vlib_node_runtime_t *node, u32 sw_if_index0, ip4_header_t *ip0, u32 proto0, u32 rx_fib_index0, u32 thread_index)
static int	nat_not_translate_output_feature (snat_main_t *sm, ip4_header_t *ip0, u32 proto0, u16 src_port, u16 dst_port, u32 thread_index, u32 sw_if_index)
int	nat44_i2o_is_idle_session_cb (clib_bihash_kv_8_8_t *kv, void *arg)
static u32	slow_path (snat_main_t *sm, vlib_buffer_t *b0, ip4_header_t *ip0, u32 rx_fib_index0, snat_session_key_t *key0, snat_session_t **sessionp, vlib_node_runtime_t *node, u32 next0, u32 thread_index, f64 now)
static_always_inline snat_in2out_error_t	icmp_get_key (ip4_header_t *ip0, snat_session_key_t *p_key0)
u32	icmp_match_in2out_slow (snat_main_t *sm, vlib_node_runtime_t *node, u32 thread_index, vlib_buffer_t *b0, ip4_header_t *ip0, u8 *p_proto, snat_session_key_t *p_value, u8 *p_dont_translate, void *d, void *e)
	Get address and port values to be used for ICMP packet translation and create session if needed. More...
u32	icmp_match_in2out_fast (snat_main_t *sm, vlib_node_runtime_t *node, u32 thread_index, vlib_buffer_t *b0, ip4_header_t *ip0, u8 *p_proto, snat_session_key_t *p_value, u8 *p_dont_translate, void *d, void *e)
	Get address and port values to be used for ICMP packet translation. More...
u32	icmp_in2out (snat_main_t *sm, vlib_buffer_t *b0, ip4_header_t *ip0, icmp46_header_t *icmp0, u32 sw_if_index0, u32 rx_fib_index0, vlib_node_runtime_t *node, u32 next0, u32 thread_index, void *d, void *e)
static u32	icmp_in2out_slow_path (snat_main_t *sm, vlib_buffer_t *b0, ip4_header_t *ip0, icmp46_header_t *icmp0, u32 sw_if_index0, u32 rx_fib_index0, vlib_node_runtime_t *node, u32 next0, f64 now, u32 thread_index, snat_session_t **p_s0)
static int	nat_in2out_sm_unknown_proto (snat_main_t *sm, vlib_buffer_t *b, ip4_header_t *ip, u32 rx_fib_index)
static uword	snat_in2out_node_fn_inline (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame, int is_slow_path, int is_output_feature)
static uword	snat_in2out_fast_path_fn (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
	VLIB_NODE_FUNCTION_MULTIARCH (snat_in2out_node, snat_in2out_fast_path_fn)
static uword	snat_in2out_output_fast_path_fn (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
	VLIB_NODE_FUNCTION_MULTIARCH (snat_in2out_output_node, snat_in2out_output_fast_path_fn)
static uword	snat_in2out_slow_path_fn (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
	VLIB_NODE_FUNCTION_MULTIARCH (snat_in2out_slowpath_node, snat_in2out_slow_path_fn)
static uword	snat_in2out_output_slow_path_fn (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
	VLIB_NODE_FUNCTION_MULTIARCH (snat_in2out_output_slowpath_node, snat_in2out_output_slow_path_fn)
static uword	nat44_in2out_reass_node_fn (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
	VLIB_NODE_FUNCTION_MULTIARCH (nat44_in2out_reass_node, nat44_in2out_reass_node_fn)
static uword	snat_in2out_fast_static_map_fn (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
	VLIB_NODE_FUNCTION_MULTIARCH (snat_in2out_fast_node, snat_in2out_fast_static_map_fn)

Variables
vlib_node_registration_t	snat_in2out_node
	(constructor) VLIB_REGISTER_NODE (snat_in2out_node) More...
vlib_node_registration_t	snat_in2out_slowpath_node
	(constructor) VLIB_REGISTER_NODE (snat_in2out_slowpath_node) More...
vlib_node_registration_t	snat_in2out_fast_node
	(constructor) VLIB_REGISTER_NODE (snat_in2out_fast_node) More...
vlib_node_registration_t	snat_in2out_output_node
	(constructor) VLIB_REGISTER_NODE (snat_in2out_output_node) More...
vlib_node_registration_t	snat_in2out_output_slowpath_node
	(constructor) VLIB_REGISTER_NODE (snat_in2out_output_slowpath_node) More...
vlib_node_registration_t	nat44_in2out_reass_node
	(constructor) VLIB_REGISTER_NODE (nat44_in2out_reass_node) More...
static char *	snat_in2out_error_strings []

Detailed Description

NAT44 inside to outside network translation.

Definition in file in2out.c.

Macro Definition Documentation

#define foreach_snat_in2out_error

Value:

_(UNSUPPORTED_PROTOCOL, "Unsupported protocol")         \
_(IN2OUT_PACKETS, "Good in2out packets processed")      \
_(OUT_OF_PORTS, "Out of ports")                         \
_(BAD_OUTSIDE_FIB, "Outside VRF ID not found")          \
_(BAD_ICMP_TYPE, "unsupported ICMP type")               \
_(NO_TRANSLATION, "No translation")                     \
_(MAX_SESSIONS_EXCEEDED, "Maximum sessions exceeded")   \
_(DROP_FRAGMENT, "Drop fragment")                       \
_(MAX_REASS, "Maximum reassemblies exceeded")           \
_(MAX_FRAG, "Maximum fragments per reassembly exceeded")

Definition at line 81 of file in2out.c.

Enumeration Type Documentation

enum snat_in2out_error_t

Enumerator
SNAT_IN2OUT_N_ERROR

Definition at line 93 of file in2out.c.

enum snat_in2out_next_t

Enumerator
SNAT_IN2OUT_NEXT_LOOKUP
SNAT_IN2OUT_NEXT_DROP
SNAT_IN2OUT_NEXT_ICMP_ERROR
SNAT_IN2OUT_NEXT_SLOW_PATH
SNAT_IN2OUT_NEXT_REASS
SNAT_IN2OUT_N_NEXT

Definition at line 107 of file in2out.c.

Function Documentation

static u8* format_snat_in2out_fast_trace ( u8 *  s, va_list *  args  )

static

Definition at line 62 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static u8* format_snat_in2out_trace ( u8 *  s, va_list *  args  )

static

Definition at line 46 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static_always_inline snat_in2out_error_t icmp_get_key	(	ip4_header_t *	ip0,
		snat_session_key_t *	p_key0
	)

Definition at line 372 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

u32 icmp_in2out	(	snat_main_t *	sm,
		vlib_buffer_t *	b0,
		ip4_header_t *	ip0,
		icmp46_header_t *	icmp0,
		u32	sw_if_index0,
		u32	rx_fib_index0,
		vlib_node_runtime_t *	node,
		u32	next0,
		u32	thread_index,
		void *	d,
		void *	e
	)

Definition at line 617 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static u32 icmp_in2out_slow_path ( snat_main_t *  sm, vlib_buffer_t *  b0, ip4_header_t *  ip0, icmp46_header_t *  icmp0, u32  sw_if_index0, u32  rx_fib_index0, vlib_node_runtime_t *  node, u32  next0, f64  now, u32  thread_index, snat_session_t **  p_s0  )

inlinestatic

Definition at line 767 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

u32 icmp_match_in2out_fast	(	snat_main_t *	sm,
		vlib_node_runtime_t *	node,
		u32	thread_index,
		vlib_buffer_t *	b0,
		ip4_header_t *	ip0,
		u8 *	p_proto,
		snat_session_key_t *	p_value,
		u8 *	p_dont_translate,
		void *	d,
		void *	e
	)

Get address and port values to be used for ICMP packet translation.

Parameters

[in]	sm	NAT main
[in,out]	node	NAT node runtime
[in]	thread_index	thread index
[in,out]	b0	buffer containing packet to be translated
[out]	p_proto	protocol used for matching
[out]	p_value	address and port after NAT translation
[out]	p_dont_translate	if packet should not be translated
	d	optional parameter
	e	optional parameter

Definition at line 548 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

u32 icmp_match_in2out_slow	(	snat_main_t *	sm,
		vlib_node_runtime_t *	node,
		u32	thread_index,
		vlib_buffer_t *	b0,
		ip4_header_t *	ip0,
		u8 *	p_proto,
		snat_session_key_t *	p_value,
		u8 *	p_dont_translate,
		void *	d,
		void *	e
	)

Get address and port values to be used for ICMP packet translation and create session if needed.

Parameters

[in,out]	sm	NAT main
[in,out]	node	NAT node runtime
[in]	thread_index	thread index
[in,out]	b0	buffer containing packet to be translated
[out]	p_proto	protocol used for matching
[out]	p_value	address and port after NAT translation
[out]	p_dont_translate	if packet should not be translated
	d	optional parameter
	e	optional parameter

Definition at line 431 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

int nat44_i2o_is_idle_session_cb	(	clib_bihash_kv_8_8_t *	kv,
		void *	arg
	)

Definition at line 194 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static uword nat44_in2out_reass_node_fn ( vlib_main_t *  vm, vlib_node_runtime_t *  node, vlib_frame_t *  frame  )

static

Definition at line 1656 of file in2out.c.

Here is the call graph for this function:

static int nat_in2out_sm_unknown_proto ( snat_main_t *  sm, vlib_buffer_t *  b, ip4_header_t *  ip, u32  rx_fib_index  )

static

Definition at line 793 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static int nat_not_translate_output_feature ( snat_main_t *  sm, ip4_header_t *  ip0, u32  proto0, u16  src_port, u16  dst_port, u32  thread_index, u32  sw_if_index  )

inlinestatic

Definition at line 152 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static u32 slow_path ( snat_main_t *  sm, vlib_buffer_t *  b0, ip4_header_t *  ip0, u32  rx_fib_index0, snat_session_key_t *  key0, snat_session_t **  sessionp, vlib_node_runtime_t *  node, u32  next0, u32  thread_index, f64  now  )

static

Definition at line 231 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static uword snat_in2out_fast_path_fn ( vlib_main_t *  vm, vlib_node_runtime_t *  node, vlib_frame_t *  frame  )

static

Definition at line 1507 of file in2out.c.

Here is the call graph for this function:

static uword snat_in2out_fast_static_map_fn ( vlib_main_t *  vm, vlib_node_runtime_t *  node, vlib_frame_t *  frame  )

static

Definition at line 1953 of file in2out.c.

Here is the call graph for this function:

static uword snat_in2out_node_fn_inline ( vlib_main_t *  vm, vlib_node_runtime_t *  node, vlib_frame_t *  frame, int  is_slow_path, int  is_output_feature  )

inlinestatic

Definition at line 831 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static uword snat_in2out_output_fast_path_fn ( vlib_main_t *  vm, vlib_node_runtime_t *  node, vlib_frame_t *  frame  )

static

Definition at line 1543 of file in2out.c.

Here is the call graph for this function:

static uword snat_in2out_output_slow_path_fn ( vlib_main_t *  vm, vlib_node_runtime_t *  node, vlib_frame_t *  frame  )

static

Definition at line 1618 of file in2out.c.

Here is the call graph for this function:

static uword snat_in2out_slow_path_fn ( vlib_main_t *  vm, vlib_node_runtime_t *  node, vlib_frame_t *  frame  )

static

Definition at line 1581 of file in2out.c.

Here is the call graph for this function:

static int snat_not_translate ( snat_main_t *  sm, vlib_node_runtime_t *  node, u32  sw_if_index0, ip4_header_t *  ip0, u32  proto0, u32  rx_fib_index0, u32  thread_index  )

inlinestatic

Definition at line 118 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

VLIB_NODE_FUNCTION_MULTIARCH	(	snat_in2out_node	,
		snat_in2out_fast_path_fn
	)

Here is the caller graph for this function:

VLIB_NODE_FUNCTION_MULTIARCH	(	snat_in2out_output_node	,
		snat_in2out_output_fast_path_fn
	)

VLIB_NODE_FUNCTION_MULTIARCH	(	snat_in2out_slowpath_node	,
		snat_in2out_slow_path_fn
	)

VLIB_NODE_FUNCTION_MULTIARCH	(	snat_in2out_output_slowpath_node	,
		snat_in2out_output_slow_path_fn
	)

VLIB_NODE_FUNCTION_MULTIARCH	(	nat44_in2out_reass_node	,
		nat44_in2out_reass_node_fn
	)

VLIB_NODE_FUNCTION_MULTIARCH	(	snat_in2out_fast_node	,
		snat_in2out_fast_static_map_fn
	)

Variable Documentation

vlib_node_registration_t nat44_in2out_reass_node

Initial value:

= {
  .function = nat44_in2out_reass_node_fn,
  .name = "nat44-in2out-reass",
  .vector_size = sizeof (u32),
  .format_trace = format_nat44_reass_trace,
  .type = VLIB_NODE_TYPE_INTERNAL,

  .n_errors = ARRAY_LEN(snat_in2out_error_strings),
  .error_strings = snat_in2out_error_strings,

  .n_next_nodes = SNAT_IN2OUT_N_NEXT,
  .next_nodes = {
    [SNAT_IN2OUT_NEXT_DROP] = "error-drop",
    [SNAT_IN2OUT_NEXT_LOOKUP] = "ip4-lookup",
    [SNAT_IN2OUT_NEXT_SLOW_PATH] = "nat44-in2out-slowpath",
    [SNAT_IN2OUT_NEXT_ICMP_ERROR] = "ip4-icmp-error",
    [SNAT_IN2OUT_NEXT_REASS] = "nat44-in2out-reass",
  },
}

(constructor) VLIB_REGISTER_NODE (nat44_in2out_reass_node)

Definition at line 79 of file in2out.c.

char* snat_in2out_error_strings[]

static

Initial value:

= {
#define _(sym,string) 
  foreach_snat_in2out_error

}

Definition at line 101 of file in2out.c.

vlib_node_registration_t snat_in2out_fast_node

Initial value:

= {
  .function = snat_in2out_fast_static_map_fn,
  .name = "nat44-in2out-fast",
  .vector_size = sizeof (u32),
  .format_trace = format_snat_in2out_fast_trace,
  .type = VLIB_NODE_TYPE_INTERNAL,

  .n_errors = ARRAY_LEN(snat_in2out_error_strings),
  .error_strings = snat_in2out_error_strings,

  .runtime_data_bytes = sizeof (snat_runtime_t),

  .n_next_nodes = SNAT_IN2OUT_N_NEXT,

  
  .next_nodes = {
    [SNAT_IN2OUT_NEXT_DROP] = "error-drop",
    [SNAT_IN2OUT_NEXT_LOOKUP] = "ip4-lookup",
    [SNAT_IN2OUT_NEXT_SLOW_PATH] = "nat44-in2out-slowpath",
    [SNAT_IN2OUT_NEXT_ICMP_ERROR] = "ip4-icmp-error",
    [SNAT_IN2OUT_NEXT_REASS] = "nat44-in2out-reass",
  },
}

(constructor) VLIB_REGISTER_NODE (snat_in2out_fast_node)

Definition at line 76 of file in2out.c.

vlib_node_registration_t snat_in2out_node

Initial value:

= {
  .function = snat_in2out_fast_path_fn,
  .name = "nat44-in2out",
  .vector_size = sizeof (u32),
  .format_trace = format_snat_in2out_trace,
  .type = VLIB_NODE_TYPE_INTERNAL,

  .n_errors = ARRAY_LEN(snat_in2out_error_strings),
  .error_strings = snat_in2out_error_strings,

  .runtime_data_bytes = sizeof (snat_runtime_t),

  .n_next_nodes = SNAT_IN2OUT_N_NEXT,

  
  .next_nodes = {
    [SNAT_IN2OUT_NEXT_DROP] = "error-drop",
    [SNAT_IN2OUT_NEXT_LOOKUP] = "ip4-lookup",
    [SNAT_IN2OUT_NEXT_SLOW_PATH] = "nat44-in2out-slowpath",
    [SNAT_IN2OUT_NEXT_ICMP_ERROR] = "ip4-icmp-error",
    [SNAT_IN2OUT_NEXT_REASS] = "nat44-in2out-reass",
  },
}

(constructor) VLIB_REGISTER_NODE (snat_in2out_node)

Definition at line 74 of file in2out.c.

vlib_node_registration_t snat_in2out_output_node

Initial value:

= {
  .function = snat_in2out_output_fast_path_fn,
  .name = "nat44-in2out-output",
  .vector_size = sizeof (u32),
  .format_trace = format_snat_in2out_trace,
  .type = VLIB_NODE_TYPE_INTERNAL,

  .n_errors = ARRAY_LEN(snat_in2out_error_strings),
  .error_strings = snat_in2out_error_strings,

  .runtime_data_bytes = sizeof (snat_runtime_t),

  .n_next_nodes = SNAT_IN2OUT_N_NEXT,

  
  .next_nodes = {
    [SNAT_IN2OUT_NEXT_DROP] = "error-drop",
    [SNAT_IN2OUT_NEXT_LOOKUP] = "interface-output",
    [SNAT_IN2OUT_NEXT_SLOW_PATH] = "nat44-in2out-output-slowpath",
    [SNAT_IN2OUT_NEXT_ICMP_ERROR] = "ip4-icmp-error",
    [SNAT_IN2OUT_NEXT_REASS] = "nat44-in2out-reass",
  },
}

(constructor) VLIB_REGISTER_NODE (snat_in2out_output_node)

Definition at line 77 of file in2out.c.

vlib_node_registration_t snat_in2out_output_slowpath_node

Initial value:

= {
  .function = snat_in2out_output_slow_path_fn,
  .name = "nat44-in2out-output-slowpath",
  .vector_size = sizeof (u32),
  .format_trace = format_snat_in2out_trace,
  .type = VLIB_NODE_TYPE_INTERNAL,

  .n_errors = ARRAY_LEN(snat_in2out_error_strings),
  .error_strings = snat_in2out_error_strings,

  .runtime_data_bytes = sizeof (snat_runtime_t),

  .n_next_nodes = SNAT_IN2OUT_N_NEXT,

  
  .next_nodes = {
    [SNAT_IN2OUT_NEXT_DROP] = "error-drop",
    [SNAT_IN2OUT_NEXT_LOOKUP] = "interface-output",
    [SNAT_IN2OUT_NEXT_SLOW_PATH] = "nat44-in2out-output-slowpath",
    [SNAT_IN2OUT_NEXT_ICMP_ERROR] = "ip4-icmp-error",
    [SNAT_IN2OUT_NEXT_REASS] = "nat44-in2out-reass",
  },
}

(constructor) VLIB_REGISTER_NODE (snat_in2out_output_slowpath_node)

Definition at line 78 of file in2out.c.

vlib_node_registration_t snat_in2out_slowpath_node

Initial value:

= {
  .function = snat_in2out_slow_path_fn,
  .name = "nat44-in2out-slowpath",
  .vector_size = sizeof (u32),
  .format_trace = format_snat_in2out_trace,
  .type = VLIB_NODE_TYPE_INTERNAL,

  .n_errors = ARRAY_LEN(snat_in2out_error_strings),
  .error_strings = snat_in2out_error_strings,

  .runtime_data_bytes = sizeof (snat_runtime_t),

  .n_next_nodes = SNAT_IN2OUT_N_NEXT,

  
  .next_nodes = {
    [SNAT_IN2OUT_NEXT_DROP] = "error-drop",
    [SNAT_IN2OUT_NEXT_LOOKUP] = "ip4-lookup",
    [SNAT_IN2OUT_NEXT_SLOW_PATH] = "nat44-in2out-slowpath",
    [SNAT_IN2OUT_NEXT_ICMP_ERROR] = "ip4-icmp-error",
    [SNAT_IN2OUT_NEXT_REASS] = "nat44-in2out-reass",
  },
}

(constructor) VLIB_REGISTER_NODE (snat_in2out_slowpath_node)

Definition at line 75 of file in2out.c.