FD.io VPP  v18.10-34-gcce845e
Vector Packet Processing
vxlan.c
Go to the documentation of this file.
1 /*
2  * Copyright (c) 2015 Cisco and/or its affiliates.
3  * Licensed under the Apache License, Version 2.0 (the "License");
4  * you may not use this file except in compliance with the License.
5  * You may obtain a copy of the License at:
6  *
7  * http://www.apache.org/licenses/LICENSE-2.0
8  *
9  * Unless required by applicable law or agreed to in writing, software
10  * distributed under the License is distributed on an "AS IS" BASIS,
11  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12  * See the License for the specific language governing permissions and
13  * limitations under the License.
14  */
15 #include <vnet/vxlan/vxlan.h>
16 #include <vnet/ip/format.h>
17 #include <vnet/fib/fib_entry.h>
18 #include <vnet/fib/fib_table.h>
19 #include <vnet/mfib/mfib_table.h>
20 #include <vnet/adj/adj_mcast.h>
21 #include <vnet/adj/rewrite.h>
22 #include <vnet/interface.h>
23 #include <vnet/flow/flow.h>
24 #include <vlib/vlib.h>
25 
26 /**
27  * @file
28  * @brief VXLAN.
29  *
30  * VXLAN provides the features needed to allow L2 bridge domains (BDs)
31  * to span multiple servers. This is done by building an L2 overlay on
32  * top of an L3 network underlay using VXLAN tunnels.
33  *
34  * This makes it possible for servers to be co-located in the same data
35  * center or be separated geographically as long as they are reachable
36  * through the underlay L3 network.
37  *
38  * You can refer to this kind of L2 overlay bridge domain as a VXLAN
39  * (Virtual eXtensible VLAN) segment.
40  */
41 
42 
44 
45 static u8 *
46 format_decap_next (u8 * s, va_list * args)
47 {
48  u32 next_index = va_arg (*args, u32);
49 
50  if (next_index == VXLAN_INPUT_NEXT_DROP)
51  return format (s, "drop");
52  else
53  return format (s, "index %d", next_index);
54  return s;
55 }
56 
57 u8 *
58 format_vxlan_tunnel (u8 * s, va_list * args)
59 {
60  vxlan_tunnel_t *t = va_arg (*args, vxlan_tunnel_t *);
61 
62  s = format (s,
63  "[%d] instance %d src %U dst %U vni %d fib-idx %d sw-if-idx %d ",
67  t->vni, t->encap_fib_index, t->sw_if_index);
68 
69  s = format (s, "encap-dpo-idx %d ", t->next_dpo.dpoi_index);
70 
71  if (PREDICT_FALSE (t->decap_next_index != VXLAN_INPUT_NEXT_L2_INPUT))
72  s = format (s, "decap-next-%U ", format_decap_next, t->decap_next_index);
73 
75  s = format (s, "mcast-sw-if-idx %d ", t->mcast_sw_if_index);
76 
77  if (t->flow_index != ~0)
78  s = format (s, "flow-index %d [%U]", t->flow_index,
80 
81  return s;
82 }
83 
84 static u8 *
85 format_vxlan_name (u8 * s, va_list * args)
86 {
87  u32 dev_instance = va_arg (*args, u32);
88  vxlan_main_t *vxm = &vxlan_main;
89  vxlan_tunnel_t *t;
90 
91  if (dev_instance == ~0)
92  return format (s, "<cached-unused>");
93 
94  if (dev_instance >= vec_len (vxm->tunnels))
95  return format (s, "<improperly-referenced>");
96 
97  t = pool_elt_at_index (vxm->tunnels, dev_instance);
98 
99  return format (s, "vxlan_tunnel%d", t->user_instance);
100 }
101 
102 static clib_error_t *
104 {
105  u32 hw_flags = (flags & VNET_SW_INTERFACE_FLAG_ADMIN_UP) ?
107  vnet_hw_interface_set_flags (vnm, hw_if_index, hw_flags);
108 
109  return /* no error */ 0;
110 }
111 
112 /* *INDENT-OFF* */
113 VNET_DEVICE_CLASS (vxlan_device_class, static) = {
114  .name = "VXLAN",
115  .format_device_name = format_vxlan_name,
116  .format_tx_trace = format_vxlan_encap_trace,
117  .admin_up_down_function = vxlan_interface_admin_up_down,
118 };
119 /* *INDENT-ON* */
120 
121 static u8 *
122 format_vxlan_header_with_length (u8 * s, va_list * args)
123 {
124  u32 dev_instance = va_arg (*args, u32);
125  s = format (s, "unimplemented dev %u", dev_instance);
126  return s;
127 }
128 
129 /* *INDENT-OFF* */
130 VNET_HW_INTERFACE_CLASS (vxlan_hw_class) = {
131  .name = "VXLAN",
132  .format_header = format_vxlan_header_with_length,
133  .build_rewrite = default_build_rewrite,
134 };
135 /* *INDENT-ON* */
136 
137 static void
139 {
140  u8 is_ip4 = ip46_address_is_ip4 (&t->dst);
141  dpo_id_t dpo = DPO_INVALID;
142  fib_forward_chain_type_t forw_type = is_ip4 ?
144 
145  fib_entry_contribute_forwarding (t->fib_entry_index, forw_type, &dpo);
146 
147  /* vxlan uses the payload hash as the udp source port
148  * hence the packet's hash is unknown
149  * skip single bucket load balance dpo's */
150  while (DPO_LOAD_BALANCE == dpo.dpoi_type)
151  {
153  if (lb->lb_n_buckets > 1)
154  break;
155 
156  dpo_copy (&dpo, load_balance_get_bucket_i (lb, 0));
157  }
158 
159  u32 encap_index = is_ip4 ?
160  vxlan4_encap_node.index : vxlan6_encap_node.index;
161  dpo_stack_from_node (encap_index, &t->next_dpo, &dpo);
162  dpo_reset (&dpo);
163 }
164 
165 static vxlan_tunnel_t *
167 {
169  return ((vxlan_tunnel_t *) (((char *) node) -
171 }
172 
173 /**
174  * Function definition to backwalk a FIB node -
175  * Here we will restack the new dpo of VXLAN DIP to encap node.
176  */
179 {
182 }
183 
184 /**
185  * Function definition to get a FIB node from its index
186  */
187 static fib_node_t *
189 {
190  vxlan_tunnel_t *t;
191  vxlan_main_t *vxm = &vxlan_main;
192 
193  t = pool_elt_at_index (vxm->tunnels, index);
194 
195  return (&t->node);
196 }
197 
198 /**
199  * Function definition to inform the FIB node that its last lock has gone.
200  */
201 static void
203 {
204  /*
205  * The VXLAN tunnel is a root of the graph. As such
206  * it never has children and thus is never locked.
207  */
208  ASSERT (0);
209 }
210 
211 /*
212  * Virtual function table registered by VXLAN tunnels
213  * for participation in the FIB object graph.
214  */
215 const static fib_node_vft_t vxlan_vft = {
217  .fnv_last_lock = vxlan_tunnel_last_lock_gone,
218  .fnv_back_walk = vxlan_tunnel_back_walk,
219 };
220 
221 
222 #define foreach_copy_field \
223 _(vni) \
224 _(mcast_sw_if_index) \
225 _(encap_fib_index) \
226 _(decap_next_index) \
227 _(src) \
228 _(dst)
229 
230 static void
231 vxlan_rewrite (vxlan_tunnel_t * t, bool is_ip6)
232 {
233  union
234  {
235  ip4_vxlan_header_t h4;
236  ip6_vxlan_header_t h6;
237  } h;
238  int len = is_ip6 ? sizeof h.h6 : sizeof h.h4;
239 
240  udp_header_t *udp;
241  vxlan_header_t *vxlan;
242  /* Fixed portion of the (outer) ip header */
243 
244  memset (&h, 0, sizeof (h));
245  if (!is_ip6)
246  {
247  ip4_header_t *ip = &h.h4.ip4;
248  udp = &h.h4.udp, vxlan = &h.h4.vxlan;
249  ip->ip_version_and_header_length = 0x45;
250  ip->ttl = 254;
251  ip->protocol = IP_PROTOCOL_UDP;
252 
253  ip->src_address = t->src.ip4;
254  ip->dst_address = t->dst.ip4;
255 
256  /* we fix up the ip4 header length and checksum after-the-fact */
257  ip->checksum = ip4_header_checksum (ip);
258  }
259  else
260  {
261  ip6_header_t *ip = &h.h6.ip6;
262  udp = &h.h6.udp, vxlan = &h.h6.vxlan;
264  clib_host_to_net_u32 (6 << 28);
265  ip->hop_limit = 255;
266  ip->protocol = IP_PROTOCOL_UDP;
267 
268  ip->src_address = t->src.ip6;
269  ip->dst_address = t->dst.ip6;
270  }
271 
272  /* UDP header, randomize src port on something, maybe? */
273  udp->src_port = clib_host_to_net_u16 (4789);
274  udp->dst_port = clib_host_to_net_u16 (UDP_DST_PORT_vxlan);
275 
276  /* VXLAN header */
277  vnet_set_vni_and_flags (vxlan, t->vni);
278  vnet_rewrite_set_data (*t, &h, len);
279 }
280 
281 static bool
284 {
285  vlib_main_t *vm = vxm->vlib_main;
286  u32 input_idx = (!is_ip6) ?
287  vxlan4_input_node.index : vxlan6_input_node.index;
288  vlib_node_runtime_t *r = vlib_node_get_runtime (vm, input_idx);
289 
290  return decap_next_index < r->n_next_nodes;
291 }
292 
293 static uword
294 vtep_addr_ref (ip46_address_t * ip)
295 {
296  uword *vtep = ip46_address_is_ip4 (ip) ?
297  hash_get (vxlan_main.vtep4, ip->ip4.as_u32) :
298  hash_get_mem (vxlan_main.vtep6, &ip->ip6);
299  if (vtep)
300  return ++(*vtep);
301  ip46_address_is_ip4 (ip) ?
302  hash_set (vxlan_main.vtep4, ip->ip4.as_u32, 1) :
303  hash_set_mem_alloc (&vxlan_main.vtep6, &ip->ip6, 1);
304  return 1;
305 }
306 
307 static uword
308 vtep_addr_unref (ip46_address_t * ip)
309 {
310  uword *vtep = ip46_address_is_ip4 (ip) ?
311  hash_get (vxlan_main.vtep4, ip->ip4.as_u32) :
312  hash_get_mem (vxlan_main.vtep6, &ip->ip6);
313  ASSERT (vtep);
314  if (--(*vtep) != 0)
315  return *vtep;
316  ip46_address_is_ip4 (ip) ?
317  hash_unset (vxlan_main.vtep4, ip->ip4.as_u32) :
318  hash_unset_mem_free (&vxlan_main.vtep6, &ip->ip6);
319  return 0;
320 }
321 
322 /* *INDENT-OFF* */
323 typedef CLIB_PACKED(union
324 {
325  struct
326  {
327  fib_node_index_t mfib_entry_index;
328  adj_index_t mcast_adj_index;
329  };
330  u64 as_u64;
331 }) mcast_shared_t;
332 /* *INDENT-ON* */
333 
334 static inline mcast_shared_t
335 mcast_shared_get (ip46_address_t * ip)
336 {
338  uword *p = hash_get_mem (vxlan_main.mcast_shared, ip);
339  ASSERT (p);
340  mcast_shared_t ret = {.as_u64 = *p };
341  return ret;
342 }
343 
344 static inline void
345 mcast_shared_add (ip46_address_t * dst, fib_node_index_t mfei, adj_index_t ai)
346 {
347  mcast_shared_t new_ep = {
348  .mcast_adj_index = ai,
349  .mfib_entry_index = mfei,
350  };
351 
352  hash_set_mem_alloc (&vxlan_main.mcast_shared, dst, new_ep.as_u64);
353 }
354 
355 static inline void
356 mcast_shared_remove (ip46_address_t * dst)
357 {
358  mcast_shared_t ep = mcast_shared_get (dst);
359 
360  adj_unlock (ep.mcast_adj_index);
361  mfib_table_entry_delete_index (ep.mfib_entry_index, MFIB_SOURCE_VXLAN);
362 
363  hash_unset_mem_free (&vxlan_main.mcast_shared, dst);
364 }
365 
367  (vnet_vxlan_add_del_tunnel_args_t * a, u32 * sw_if_indexp)
368 {
369  vxlan_main_t *vxm = &vxlan_main;
370  vnet_main_t *vnm = vxm->vnet_main;
372  u32 sw_if_index = ~0;
373  vxlan4_tunnel_key_t key4;
374  vxlan6_tunnel_key_t key6;
375  u32 is_ip6 = a->is_ip6;
376 
377  int not_found;
378  if (!is_ip6)
379  {
380  /* ip4 mcast is indexed by mcast addr only */
381  key4.key[0] = ip46_address_is_multicast (&a->dst) ?
382  a->dst.ip4.as_u32 :
383  a->dst.ip4.as_u32 | (((u64) a->src.ip4.as_u32) << 32);
384  key4.key[1] = (((u64) a->encap_fib_index) << 32)
385  | clib_host_to_net_u32 (a->vni << 8);
386  not_found =
387  clib_bihash_search_inline_16_8 (&vxm->vxlan4_tunnel_by_key, &key4);
388  p = (void *) &key4.value;
389  }
390  else
391  {
392  key6.key[0] = a->dst.ip6.as_u64[0];
393  key6.key[1] = a->dst.ip6.as_u64[1];
394  key6.key[2] = (((u64) a->encap_fib_index) << 32)
395  | clib_host_to_net_u32 (a->vni << 8);
396  not_found =
397  clib_bihash_search_inline_24_8 (&vxm->vxlan6_tunnel_by_key, &key6);
398  p = (void *) &key6.value;
399  }
400 
401  if (not_found)
402  p = 0;
403 
404  if (a->is_add)
405  {
406  l2input_main_t *l2im = &l2input_main;
407  u32 dev_instance; /* real dev instance tunnel index */
408  u32 user_instance; /* request and actual instance number */
409 
410  /* adding a tunnel: tunnel must not already exist */
411  if (p)
412  return VNET_API_ERROR_TUNNEL_EXIST;
413 
414  /*if not set explicitly, default to l2 */
415  if (a->decap_next_index == ~0)
416  a->decap_next_index = VXLAN_INPUT_NEXT_L2_INPUT;
417  if (!vxlan_decap_next_is_valid (vxm, is_ip6, a->decap_next_index))
418  return VNET_API_ERROR_INVALID_DECAP_NEXT;
419 
420  vxlan_tunnel_t *t;
422  memset (t, 0, sizeof (*t));
423  dev_instance = t - vxm->tunnels;
424 
425  /* copy from arg structure */
426 #define _(x) t->x = a->x;
428 #undef _
429 
430  vxlan_rewrite (t, is_ip6);
431  /*
432  * Reconcile the real dev_instance and a possible requested instance.
433  */
434  user_instance = a->instance;
435  if (user_instance == ~0)
436  user_instance = dev_instance;
437  if (hash_get (vxm->instance_used, user_instance))
438  {
439  pool_put (vxm->tunnels, t);
440  return VNET_API_ERROR_INSTANCE_IN_USE;
441  }
442  hash_set (vxm->instance_used, user_instance, 1);
443 
444  t->dev_instance = dev_instance; /* actual */
445  t->user_instance = user_instance; /* name */
446  t->flow_index = ~0;
447 
449  (vnm, vxlan_device_class.index, dev_instance,
450  vxlan_hw_class.index, dev_instance);
452 
453  /* Set vxlan tunnel output node */
454  u32 encap_index = !is_ip6 ?
455  vxlan4_encap_node.index : vxlan6_encap_node.index;
456  vnet_set_interface_output_node (vnm, t->hw_if_index, encap_index);
457 
458  t->sw_if_index = sw_if_index = hi->sw_if_index;
459 
460  /* copy the key */
461  int add_failed;
462  if (is_ip6)
463  {
464  key6.value = (u64) dev_instance;
465  add_failed = clib_bihash_add_del_24_8 (&vxm->vxlan6_tunnel_by_key,
466  &key6, 1 /*add */ );
467  }
468  else
469  {
470  vxlan_decap_info_t di = {.sw_if_index = t->sw_if_index, };
471  if (ip46_address_is_multicast (&t->dst))
472  di.local_ip = t->src.ip4;
473  else
475  key4.value = di.as_u64;
476  add_failed = clib_bihash_add_del_16_8 (&vxm->vxlan4_tunnel_by_key,
477  &key4, 1 /*add */ );
478  }
479 
480  if (add_failed)
481  {
484  pool_put (vxm->tunnels, t);
485  return VNET_API_ERROR_INVALID_REGISTRATION;
486  }
487 
489  ~0);
490  vxm->tunnel_index_by_sw_if_index[sw_if_index] = dev_instance;
491 
492  /* setup l2 input config with l2 feature and bd 0 to drop packet */
493  vec_validate (l2im->configs, sw_if_index);
494  l2im->configs[sw_if_index].feature_bitmap = L2INPUT_FEAT_DROP;
495  l2im->configs[sw_if_index].bd_index = 0;
496 
497  vnet_sw_interface_t *si = vnet_get_sw_interface (vnm, sw_if_index);
499  vnet_sw_interface_set_flags (vnm, sw_if_index,
501 
503  fib_prefix_t tun_dst_pfx;
505 
506  fib_prefix_from_ip46_addr (&t->dst, &tun_dst_pfx);
507  if (!ip46_address_is_multicast (&t->dst))
508  {
509  /* Unicast tunnel -
510  * source the FIB entry for the tunnel's destination
511  * and become a child thereof. The tunnel will then get poked
512  * when the forwarding for the entry updates, and the tunnel can
513  * re-stack accordingly
514  */
515  vtep_addr_ref (&t->src);
517  (t->encap_fib_index, &tun_dst_pfx, FIB_SOURCE_RR,
520  (t->fib_entry_index, FIB_NODE_TYPE_VXLAN_TUNNEL, dev_instance);
522  }
523  else
524  {
525  /* Multicast tunnel -
526  * as the same mcast group can be used for multiple mcast tunnels
527  * with different VNIs, create the output fib adjacency only if
528  * it does not already exist
529  */
530  fib_protocol_t fp = fib_ip_proto (is_ip6);
531 
532  if (vtep_addr_ref (&t->dst) == 1)
533  {
534  fib_node_index_t mfei;
535  adj_index_t ai;
536  fib_route_path_t path = {
537  .frp_proto = fib_proto_to_dpo (fp),
538  .frp_addr = zero_addr,
539  .frp_sw_if_index = 0xffffffff,
540  .frp_fib_index = ~0,
541  .frp_weight = 0,
542  .frp_flags = FIB_ROUTE_PATH_LOCAL,
543  };
544  const mfib_prefix_t mpfx = {
545  .fp_proto = fp,
546  .fp_len = (is_ip6 ? 128 : 32),
547  .fp_grp_addr = tun_dst_pfx.fp_addr,
548  };
549 
550  /*
551  * Setup the (*,G) to receive traffic on the mcast group
552  * - the forwarding interface is for-us
553  * - the accepting interface is that from the API
554  */
556  &mpfx,
558  &path, MFIB_ITF_FLAG_FORWARD);
559 
563  &mpfx,
565  &path,
567 
568  /*
569  * Create the mcast adjacency to send traffic to the group
570  */
571  ai = adj_mcast_add_or_lock (fp,
572  fib_proto_to_link (fp),
573  a->mcast_sw_if_index);
574 
575  /*
576  * create a new end-point
577  */
578  mcast_shared_add (&t->dst, mfei, ai);
579  }
580 
581  dpo_id_t dpo = DPO_INVALID;
582  mcast_shared_t ep = mcast_shared_get (&t->dst);
583 
584  /* Stack shared mcast dst mac addr rewrite on encap */
586  fib_proto_to_dpo (fp), ep.mcast_adj_index);
587 
588  dpo_stack_from_node (encap_index, &t->next_dpo, &dpo);
589  dpo_reset (&dpo);
590  flood_class = VNET_FLOOD_CLASS_TUNNEL_MASTER;
591  }
592 
593  vnet_get_sw_interface (vnet_get_main (), sw_if_index)->flood_class =
594  flood_class;
595  }
596  else
597  {
598  /* deleting a tunnel: tunnel must exist */
599  if (!p)
600  return VNET_API_ERROR_NO_SUCH_ENTRY;
601 
602  u32 instance = is_ip6 ? key6.value :
604  vxlan_tunnel_t *t = pool_elt_at_index (vxm->tunnels, instance);
605 
606  sw_if_index = t->sw_if_index;
607  vnet_sw_interface_set_flags (vnm, sw_if_index, 0 /* down */ );
608 
610 
611  if (!is_ip6)
612  clib_bihash_add_del_16_8 (&vxm->vxlan4_tunnel_by_key, &key4,
613  0 /*del */ );
614  else
615  clib_bihash_add_del_24_8 (&vxm->vxlan6_tunnel_by_key, &key6,
616  0 /*del */ );
617 
618  if (!ip46_address_is_multicast (&t->dst))
619  {
620  if (t->flow_index != ~0)
621  vnet_flow_del (vnm, t->flow_index);
622 
623  vtep_addr_unref (&t->src);
626  }
627  else if (vtep_addr_unref (&t->dst) == 0)
628  {
629  mcast_shared_remove (&t->dst);
630  }
631 
634 
635  fib_node_deinit (&t->node);
636  pool_put (vxm->tunnels, t);
637  }
638 
639  if (sw_if_indexp)
640  *sw_if_indexp = sw_if_index;
641 
642  return 0;
643 }
644 
645 static uword
646 get_decap_next_for_node (u32 node_index, u32 ipv4_set)
647 {
648  vxlan_main_t *vxm = &vxlan_main;
649  vlib_main_t *vm = vxm->vlib_main;
650  uword input_node = (ipv4_set) ? vxlan4_input_node.index :
651  vxlan6_input_node.index;
652 
653  return vlib_node_add_next (vm, input_node, node_index);
654 }
655 
656 static uword
657 unformat_decap_next (unformat_input_t * input, va_list * args)
658 {
659  u32 *result = va_arg (*args, u32 *);
660  u32 ipv4_set = va_arg (*args, int);
661  vxlan_main_t *vxm = &vxlan_main;
662  vlib_main_t *vm = vxm->vlib_main;
663  u32 node_index;
664  u32 tmp;
665 
666  if (unformat (input, "l2"))
667  *result = VXLAN_INPUT_NEXT_L2_INPUT;
668  else if (unformat (input, "node %U", unformat_vlib_node, vm, &node_index))
669  *result = get_decap_next_for_node (node_index, ipv4_set);
670  else if (unformat (input, "%d", &tmp))
671  *result = tmp;
672  else
673  return 0;
674  return 1;
675 }
676 
677 static clib_error_t *
679  unformat_input_t * input,
680  vlib_cli_command_t * cmd)
681 {
682  unformat_input_t _line_input, *line_input = &_line_input;
683  ip46_address_t src = ip46_address_initializer, dst =
685  u8 is_add = 1;
686  u8 src_set = 0;
687  u8 dst_set = 0;
688  u8 grp_set = 0;
689  u8 ipv4_set = 0;
690  u8 ipv6_set = 0;
691  u32 instance = ~0;
692  u32 encap_fib_index = 0;
693  u32 mcast_sw_if_index = ~0;
694  u32 decap_next_index = VXLAN_INPUT_NEXT_L2_INPUT;
695  u32 vni = 0;
696  u32 table_id;
697  clib_error_t *parse_error = NULL;
698 
699  /* Get a line of input. */
700  if (!unformat_user (input, unformat_line_input, line_input))
701  return 0;
702 
703  while (unformat_check_input (line_input) != UNFORMAT_END_OF_INPUT)
704  {
705  if (unformat (line_input, "del"))
706  {
707  is_add = 0;
708  }
709  else if (unformat (line_input, "instance %d", &instance))
710  ;
711  else if (unformat (line_input, "src %U",
713  {
714  src_set = 1;
715  ip46_address_is_ip4 (&src) ? (ipv4_set = 1) : (ipv6_set = 1);
716  }
717  else if (unformat (line_input, "dst %U",
719  {
720  dst_set = 1;
721  ip46_address_is_ip4 (&dst) ? (ipv4_set = 1) : (ipv6_set = 1);
722  }
723  else if (unformat (line_input, "group %U %U",
726  vnet_get_main (), &mcast_sw_if_index))
727  {
728  grp_set = dst_set = 1;
729  ip46_address_is_ip4 (&dst) ? (ipv4_set = 1) : (ipv6_set = 1);
730  }
731  else if (unformat (line_input, "encap-vrf-id %d", &table_id))
732  {
733  encap_fib_index =
734  fib_table_find (fib_ip_proto (ipv6_set), table_id);
735  }
736  else if (unformat (line_input, "decap-next %U", unformat_decap_next,
737  &decap_next_index, ipv4_set))
738  ;
739  else if (unformat (line_input, "vni %d", &vni))
740  ;
741  else
742  {
743  parse_error = clib_error_return (0, "parse error: '%U'",
744  format_unformat_error, line_input);
745  break;
746  }
747  }
748 
749  unformat_free (line_input);
750 
751  if (parse_error)
752  return parse_error;
753 
754  if (encap_fib_index == ~0)
755  return clib_error_return (0, "nonexistent encap-vrf-id %d", table_id);
756 
757  if (src_set == 0)
758  return clib_error_return (0, "tunnel src address not specified");
759 
760  if (dst_set == 0)
761  return clib_error_return (0, "tunnel dst address not specified");
762 
763  if (grp_set && !ip46_address_is_multicast (&dst))
764  return clib_error_return (0, "tunnel group address not multicast");
765 
766  if (grp_set == 0 && ip46_address_is_multicast (&dst))
767  return clib_error_return (0, "dst address must be unicast");
768 
769  if (grp_set && mcast_sw_if_index == ~0)
770  return clib_error_return (0, "tunnel nonexistent multicast device");
771 
772  if (ipv4_set && ipv6_set)
773  return clib_error_return (0, "both IPv4 and IPv6 addresses specified");
774 
775  if (ip46_address_cmp (&src, &dst) == 0)
776  return clib_error_return (0, "src and dst addresses are identical");
777 
778  if (decap_next_index == ~0)
779  return clib_error_return (0, "next node not found");
780 
781  if (vni == 0)
782  return clib_error_return (0, "vni not specified");
783 
784  if (vni >> 24)
785  return clib_error_return (0, "vni %d out of range", vni);
786 
788  .is_add = is_add,
789  .is_ip6 = ipv6_set,
790  .instance = instance,
791 #define _(x) .x = x,
793 #undef _
794  };
795 
796  u32 tunnel_sw_if_index;
797  int rv = vnet_vxlan_add_del_tunnel (&a, &tunnel_sw_if_index);
798 
799  switch (rv)
800  {
801  case 0:
802  if (is_add)
804  vnet_get_main (), tunnel_sw_if_index);
805  break;
806 
807  case VNET_API_ERROR_TUNNEL_EXIST:
808  return clib_error_return (0, "tunnel already exists...");
809 
810  case VNET_API_ERROR_NO_SUCH_ENTRY:
811  return clib_error_return (0, "tunnel does not exist...");
812 
813  case VNET_API_ERROR_INSTANCE_IN_USE:
814  return clib_error_return (0, "Instance is in use");
815 
816  default:
817  return clib_error_return
818  (0, "vnet_vxlan_add_del_tunnel returned %d", rv);
819  }
820 
821  return 0;
822 }
823 
824 /*?
825  * Add or delete a VXLAN Tunnel.
826  *
827  * VXLAN provides the features needed to allow L2 bridge domains (BDs)
828  * to span multiple servers. This is done by building an L2 overlay on
829  * top of an L3 network underlay using VXLAN tunnels.
830  *
831  * This makes it possible for servers to be co-located in the same data
832  * center or be separated geographically as long as they are reachable
833  * through the underlay L3 network.
834  *
835  * You can refer to this kind of L2 overlay bridge domain as a VXLAN
836  * (Virtual eXtensible VLAN) segment.
837  *
838  * @cliexpar
839  * Example of how to create a VXLAN Tunnel:
840  * @cliexcmd{create vxlan tunnel src 10.0.3.1 dst 10.0.3.3 vni 13 encap-vrf-id 7}
841  * Example of how to create a VXLAN Tunnel with a known name, vxlan_tunnel42:
842  * @cliexcmd{create vxlan tunnel src 10.0.3.1 dst 10.0.3.3 instance 42}
843  * Example of how to create a multicast VXLAN Tunnel with a known name, vxlan_tunnel23:
844  * @cliexcmd{create vxlan tunnel src 10.0.3.1 group 239.1.1.1 GigabitEthernet0/8/0 instance 23}
845  * Example of how to delete a VXLAN Tunnel:
846  * @cliexcmd{create vxlan tunnel src 10.0.3.1 dst 10.0.3.3 vni 13 del}
847  ?*/
848 /* *INDENT-OFF* */
849 VLIB_CLI_COMMAND (create_vxlan_tunnel_command, static) = {
850  .path = "create vxlan tunnel",
851  .short_help =
852  "create vxlan tunnel src <local-vtep-addr>"
853  " {dst <remote-vtep-addr>|group <mcast-vtep-addr> <intf-name>} vni <nn>"
854  " [instance <id>]"
855  " [encap-vrf-id <nn>] [decap-next [l2|node <name>]] [del]",
857 };
858 /* *INDENT-ON* */
859 
860 static clib_error_t *
862  unformat_input_t * input,
863  vlib_cli_command_t * cmd)
864 {
865  vxlan_main_t *vxm = &vxlan_main;
866  vxlan_tunnel_t *t;
867  int raw = 0;
868 
870  {
871  if (unformat (input, "raw"))
872  raw = 1;
873  else
874  return clib_error_return (0, "parse error: '%U'",
875  format_unformat_error, input);
876  }
877 
878  if (pool_elts (vxm->tunnels) == 0)
879  vlib_cli_output (vm, "No vxlan tunnels configured...");
880 
881 /* *INDENT-OFF* */
882  pool_foreach (t, vxm->tunnels,
883  ({
884  vlib_cli_output (vm, "%U", format_vxlan_tunnel, t);
885  }));
886 /* *INDENT-ON* */
887 
888  if (raw)
889  {
890  vlib_cli_output (vm, "Raw IPv4 Hash Table:\n%U\n",
891  format_bihash_16_8, &vxm->vxlan4_tunnel_by_key,
892  1 /* verbose */ );
893  vlib_cli_output (vm, "Raw IPv6 Hash Table:\n%U\n",
894  format_bihash_24_8, &vxm->vxlan6_tunnel_by_key,
895  1 /* verbose */ );
896  }
897 
898  return 0;
899 }
900 
901 /*?
902  * Display all the VXLAN Tunnel entries.
903  *
904  * @cliexpar
905  * Example of how to display the VXLAN Tunnel entries:
906  * @cliexstart{show vxlan tunnel}
907  * [0] src 10.0.3.1 dst 10.0.3.3 vni 13 encap_fib_index 0 sw_if_index 5 decap_next l2
908  * @cliexend
909  ?*/
910 /* *INDENT-OFF* */
911 VLIB_CLI_COMMAND (show_vxlan_tunnel_command, static) = {
912  .path = "show vxlan tunnel",
913  .short_help = "show vxlan tunnel [raw]",
914  .function = show_vxlan_tunnel_command_fn,
915 };
916 /* *INDENT-ON* */
917 
918 
919 void
921 {
922  if (is_ip6)
923  vnet_feature_enable_disable ("ip6-unicast", "ip6-vxlan-bypass",
924  sw_if_index, is_enable, 0, 0);
925  else
926  vnet_feature_enable_disable ("ip4-unicast", "ip4-vxlan-bypass",
927  sw_if_index, is_enable, 0, 0);
928 }
929 
930 
931 static clib_error_t *
933  unformat_input_t * input, vlib_cli_command_t * cmd)
934 {
935  unformat_input_t _line_input, *line_input = &_line_input;
936  vnet_main_t *vnm = vnet_get_main ();
937  clib_error_t *error = 0;
938  u32 sw_if_index, is_enable;
939 
940  sw_if_index = ~0;
941  is_enable = 1;
942 
943  if (!unformat_user (input, unformat_line_input, line_input))
944  return 0;
945 
946  while (unformat_check_input (line_input) != UNFORMAT_END_OF_INPUT)
947  {
948  if (unformat_user
949  (line_input, unformat_vnet_sw_interface, vnm, &sw_if_index))
950  ;
951  else if (unformat (line_input, "del"))
952  is_enable = 0;
953  else
954  {
955  error = unformat_parse_error (line_input);
956  goto done;
957  }
958  }
959 
960  if (~0 == sw_if_index)
961  {
962  error = clib_error_return (0, "unknown interface `%U'",
963  format_unformat_error, line_input);
964  goto done;
965  }
966 
967  vnet_int_vxlan_bypass_mode (sw_if_index, is_ip6, is_enable);
968 
969 done:
970  unformat_free (line_input);
971 
972  return error;
973 }
974 
975 static clib_error_t *
977  unformat_input_t * input, vlib_cli_command_t * cmd)
978 {
979  return set_ip_vxlan_bypass (0, input, cmd);
980 }
981 
982 /*?
983  * This command adds the 'ip4-vxlan-bypass' graph node for a given interface.
984  * By adding the IPv4 vxlan-bypass graph node to an interface, the node checks
985  * for and validate input vxlan packet and bypass ip4-lookup, ip4-local,
986  * ip4-udp-lookup nodes to speedup vxlan packet forwarding. This node will
987  * cause extra overhead to for non-vxlan packets which is kept at a minimum.
988  *
989  * @cliexpar
990  * @parblock
991  * Example of graph node before ip4-vxlan-bypass is enabled:
992  * @cliexstart{show vlib graph ip4-vxlan-bypass}
993  * Name Next Previous
994  * ip4-vxlan-bypass error-drop [0]
995  * vxlan4-input [1]
996  * ip4-lookup [2]
997  * @cliexend
998  *
999  * Example of how to enable ip4-vxlan-bypass on an interface:
1000  * @cliexcmd{set interface ip vxlan-bypass GigabitEthernet2/0/0}
1001  *
1002  * Example of graph node after ip4-vxlan-bypass is enabled:
1003  * @cliexstart{show vlib graph ip4-vxlan-bypass}
1004  * Name Next Previous
1005  * ip4-vxlan-bypass error-drop [0] ip4-input
1006  * vxlan4-input [1] ip4-input-no-checksum
1007  * ip4-lookup [2]
1008  * @cliexend
1009  *
1010  * Example of how to display the feature enabled on an interface:
1011  * @cliexstart{show ip interface features GigabitEthernet2/0/0}
1012  * IP feature paths configured on GigabitEthernet2/0/0...
1013  * ...
1014  * ipv4 unicast:
1015  * ip4-vxlan-bypass
1016  * ip4-lookup
1017  * ...
1018  * @cliexend
1019  *
1020  * Example of how to disable ip4-vxlan-bypass on an interface:
1021  * @cliexcmd{set interface ip vxlan-bypass GigabitEthernet2/0/0 del}
1022  * @endparblock
1023 ?*/
1024 /* *INDENT-OFF* */
1025 VLIB_CLI_COMMAND (set_interface_ip_vxlan_bypass_command, static) = {
1026  .path = "set interface ip vxlan-bypass",
1027  .function = set_ip4_vxlan_bypass,
1028  .short_help = "set interface ip vxlan-bypass <interface> [del]",
1029 };
1030 /* *INDENT-ON* */
1031 
1032 static clib_error_t *
1034  unformat_input_t * input, vlib_cli_command_t * cmd)
1035 {
1036  return set_ip_vxlan_bypass (1, input, cmd);
1037 }
1038 
1039 /*?
1040  * This command adds the 'ip6-vxlan-bypass' graph node for a given interface.
1041  * By adding the IPv6 vxlan-bypass graph node to an interface, the node checks
1042  * for and validate input vxlan packet and bypass ip6-lookup, ip6-local,
1043  * ip6-udp-lookup nodes to speedup vxlan packet forwarding. This node will
1044  * cause extra overhead to for non-vxlan packets which is kept at a minimum.
1045  *
1046  * @cliexpar
1047  * @parblock
1048  * Example of graph node before ip6-vxlan-bypass is enabled:
1049  * @cliexstart{show vlib graph ip6-vxlan-bypass}
1050  * Name Next Previous
1051  * ip6-vxlan-bypass error-drop [0]
1052  * vxlan6-input [1]
1053  * ip6-lookup [2]
1054  * @cliexend
1055  *
1056  * Example of how to enable ip6-vxlan-bypass on an interface:
1057  * @cliexcmd{set interface ip6 vxlan-bypass GigabitEthernet2/0/0}
1058  *
1059  * Example of graph node after ip6-vxlan-bypass is enabled:
1060  * @cliexstart{show vlib graph ip6-vxlan-bypass}
1061  * Name Next Previous
1062  * ip6-vxlan-bypass error-drop [0] ip6-input
1063  * vxlan6-input [1] ip4-input-no-checksum
1064  * ip6-lookup [2]
1065  * @cliexend
1066  *
1067  * Example of how to display the feature enabled on an interface:
1068  * @cliexstart{show ip interface features GigabitEthernet2/0/0}
1069  * IP feature paths configured on GigabitEthernet2/0/0...
1070  * ...
1071  * ipv6 unicast:
1072  * ip6-vxlan-bypass
1073  * ip6-lookup
1074  * ...
1075  * @cliexend
1076  *
1077  * Example of how to disable ip6-vxlan-bypass on an interface:
1078  * @cliexcmd{set interface ip6 vxlan-bypass GigabitEthernet2/0/0 del}
1079  * @endparblock
1080 ?*/
1081 /* *INDENT-OFF* */
1082 VLIB_CLI_COMMAND (set_interface_ip6_vxlan_bypass_command, static) = {
1083  .path = "set interface ip6 vxlan-bypass",
1084  .function = set_ip6_vxlan_bypass,
1085  .short_help = "set interface ip vxlan-bypass <interface> [del]",
1086 };
1087 /* *INDENT-ON* */
1088 
1089 int
1090 vnet_vxlan_add_del_rx_flow (u32 hw_if_index, u32 t_index, int is_add)
1091 {
1092  vxlan_main_t *vxm = &vxlan_main;
1093  vxlan_tunnel_t *t = pool_elt_at_index (vxm->tunnels, t_index);
1094  vnet_main_t *vnm = vnet_get_main ();
1095  if (is_add)
1096  {
1097  if (t->flow_index == ~0)
1098  {
1099  vxlan_main_t *vxm = &vxlan_main;
1100  vnet_flow_t flow = {
1101  .actions =
1102  VNET_FLOW_ACTION_REDIRECT_TO_NODE | VNET_FLOW_ACTION_MARK,
1103  .mark_flow_id = t->dev_instance + vxm->flow_id_start,
1104  .redirect_node_index = vxlan4_flow_input_node.index,
1105  .type = VNET_FLOW_TYPE_IP4_VXLAN,
1106  .ip4_vxlan = {
1107  .src_addr = t->dst.ip4,
1108  .dst_addr = t->src.ip4,
1109  .dst_port = UDP_DST_PORT_vxlan,
1110  .vni = t->vni,
1111  }
1112  ,
1113  };
1114  vnet_flow_add (vnm, &flow, &t->flow_index);
1115  }
1116  return vnet_flow_enable (vnm, t->flow_index, hw_if_index);
1117  }
1118  /* flow index is removed when the tunnel is deleted */
1119  return vnet_flow_disable (vnm, t->flow_index, hw_if_index);
1120 }
1121 
1122 u32
1124 {
1125  vxlan_main_t *vxm = &vxlan_main;
1126 
1127  if (sw_if_index >= vec_len (vxm->tunnel_index_by_sw_if_index))
1128  return ~0;
1130 }
1131 
1132 static clib_error_t *
1134  unformat_input_t * input, vlib_cli_command_t * cmd)
1135 {
1136  unformat_input_t _line_input, *line_input = &_line_input;
1137 
1138  /* Get a line of input. */
1139  if (!unformat_user (input, unformat_line_input, line_input))
1140  return 0;
1141 
1142  vnet_main_t *vnm = vnet_get_main ();
1143  u32 rx_sw_if_index = ~0;
1144  u32 hw_if_index = ~0;
1145  int is_add = 1;
1146 
1147  while (unformat_check_input (line_input) != UNFORMAT_END_OF_INPUT)
1148  {
1149  if (unformat (line_input, "hw %U", unformat_vnet_hw_interface, vnm,
1150  &hw_if_index))
1151  continue;
1152  if (unformat (line_input, "rx %U", unformat_vnet_sw_interface, vnm,
1153  &rx_sw_if_index))
1154  continue;
1155  if (unformat (line_input, "del"))
1156  {
1157  is_add = 0;
1158  continue;
1159  }
1160  return clib_error_return (0, "unknown input `%U'",
1161  format_unformat_error, line_input);
1162  }
1163 
1164  if (rx_sw_if_index == ~0)
1165  return clib_error_return (0, "missing rx interface");
1166  if (hw_if_index == ~0)
1167  return clib_error_return (0, "missing hw interface");
1168 
1169  u32 t_index = vnet_vxlan_get_tunnel_index (rx_sw_if_index);;
1170  if (t_index == ~0)
1171  return clib_error_return (0, "%U is not a vxlan tunnel",
1173  rx_sw_if_index);
1174 
1175  vxlan_main_t *vxm = &vxlan_main;
1176  vxlan_tunnel_t *t = pool_elt_at_index (vxm->tunnels, t_index);
1177 
1178  if (!ip46_address_is_ip4 (&t->dst))
1179  return clib_error_return (0, "currently only IPV4 tunnels are supported");
1180 
1181  vnet_hw_interface_t *hw_if = vnet_get_hw_interface (vnm, hw_if_index);
1182  ip4_main_t *im = &ip4_main;
1183  u32 rx_fib_index =
1185 
1186  if (t->encap_fib_index != rx_fib_index)
1187  return clib_error_return (0, "interface/tunnel fib mismatch");
1188 
1189  if (vnet_vxlan_add_del_rx_flow (hw_if_index, t_index, is_add))
1190  return clib_error_return (0, "error %s flow",
1191  is_add ? "enabling" : "disabling");
1192 
1193  return 0;
1194 }
1195 
1196 /* *INDENT-OFF* */
1197 VLIB_CLI_COMMAND (vxlan_offload_command, static) = {
1198  .path = "set flow-offload vxlan",
1199  .short_help =
1200  "set flow-offload vxlan hw <interface-name> rx <tunnel-name> [del]",
1201  .function = vxlan_offload_command_fn,
1202 };
1203 /* *INDENT-ON* */
1204 
1205 #define VXLAN_HASH_NUM_BUCKETS (2 * 1024)
1206 #define VXLAN_HASH_MEMORY_SIZE (1 << 20)
1207 
1208 clib_error_t *
1210 {
1211  vxlan_main_t *vxm = &vxlan_main;
1212 
1213  vxm->vnet_main = vnet_get_main ();
1214  vxm->vlib_main = vm;
1215 
1216  vnet_flow_get_range (vxm->vnet_main, "vxlan", 1024 * 1024,
1217  &vxm->flow_id_start);
1218 
1219  /* initialize the ip6 hash */
1220  clib_bihash_init_16_8 (&vxm->vxlan4_tunnel_by_key, "vxlan4",
1222  clib_bihash_init_24_8 (&vxm->vxlan6_tunnel_by_key, "vxlan6",
1224  vxm->vtep6 = hash_create_mem (0, sizeof (ip6_address_t), sizeof (uword));
1225  vxm->mcast_shared = hash_create_mem (0,
1226  sizeof (ip46_address_t),
1227  sizeof (mcast_shared_t));
1228 
1229  udp_register_dst_port (vm, UDP_DST_PORT_vxlan,
1230  vxlan4_input_node.index, /* is_ip4 */ 1);
1231  udp_register_dst_port (vm, UDP_DST_PORT_vxlan6,
1232  vxlan6_input_node.index, /* is_ip4 */ 0);
1233 
1235 
1236  return 0;
1237 }
1238 
1240 
1241 /*
1242  * fd.io coding-style-patch-verification: ON
1243  *
1244  * Local Variables:
1245  * eval: (c-set-style "gnu")
1246  * End:
1247  */
unformat_function_t unformat_vnet_hw_interface
#define vec_validate(V, I)
Make sure vector is long enough for given index (no header, unspecified alignment) ...
Definition: vec.h:437
void vnet_set_interface_output_node(vnet_main_t *vnm, u32 hw_if_index, u32 node_index)
Set interface output node - for interface registered without its output/tx nodes created because its ...
u16 lb_n_buckets
number of buckets in the load-balance.
Definition: load_balance.h:94
void dpo_stack_from_node(u32 child_node_index, dpo_id_t *dpo, const dpo_id_t *parent)
Stack one DPO object on another, and thus establish a child parent relationship.
Definition: dpo.c:530
vmrglw vmrglh hi
u32 user_instance
Definition: vxlan.h:130
Recursive resolution source.
Definition: fib_entry.h:125
Contribute an object that is to be used to forward IP6 packets.
Definition: fib_types.h:113
#define hash_set(h, key, value)
Definition: hash.h:255
l2_input_config_t * configs
Definition: l2_input.h:61
vl_api_address_t src
Definition: vxlan_gbp.api:33
u32 sibling_index
The tunnel is a child of the FIB entry for its destination.
Definition: vxlan.h:126
clib_error_t * vnet_hw_interface_set_flags(vnet_main_t *vnm, u32 hw_if_index, u32 flags)
Definition: interface.c:469
int vnet_flow_get_range(vnet_main_t *vnm, char *owner, u32 count, u32 *start)
Definition: flow.c:24
#define hash_unset(h, key)
Definition: hash.h:261
clib_bihash_24_8_t vxlan6_tunnel_by_key
Definition: vxlan.h:162
A representation of a path as described by a route producer.
Definition: fib_types.h:470
ip4_address_t src_address
Definition: ip4_packet.h:169
uword * vtep6
Definition: vxlan.h:167
vnet_main_t * vnet_get_main(void)
Definition: misc.c:47
clib_error_t * vxlan_init(vlib_main_t *vm)
Definition: vxlan.c:1209
void fib_node_init(fib_node_t *node, fib_node_type_t type)
Definition: fib_node.c:185
u64 as_u64
Definition: bihash_doc.h:63
vlib_node_registration_t vxlan4_input_node
(constructor) VLIB_REGISTER_NODE (vxlan4_input_node)
Definition: decap.c:23
u32 fib_entry_child_add(fib_node_index_t fib_entry_index, fib_node_type_t child_type, fib_node_index_t child_index)
Definition: fib_entry.c:527
static clib_error_t * set_ip6_vxlan_bypass(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: vxlan.c:1033
unsigned long u64
Definition: types.h:89
u32 flow_id_start
Definition: vxlan.h:181
#define NULL
Definition: clib.h:57
enum fib_node_back_walk_rc_t_ fib_node_back_walk_rc_t
Return code from a back walk function.
void fib_entry_contribute_forwarding(fib_node_index_t fib_entry_index, fib_forward_chain_type_t fct, dpo_id_t *dpo)
Definition: fib_entry.c:419
uword * mcast_shared
Definition: vxlan.h:170
ip46_address_t dst
Definition: vxlan.h:93
#define vnet_rewrite_set_data(rw, data, data_bytes)
Definition: rewrite.h:138
static void mcast_shared_remove(ip46_address_t *dst)
Definition: vxlan.c:356
u32 mcast_sw_if_index
Definition: vxlan_gbp.api:35
static vnet_hw_interface_t * vnet_get_hw_interface(vnet_main_t *vnm, u32 hw_if_index)
void fib_entry_child_remove(fib_node_index_t fib_entry_index, u32 sibling_index)
Definition: fib_entry.c:538
void dpo_copy(dpo_id_t *dst, const dpo_id_t *src)
atomic copy a data-plane object.
Definition: dpo.c:261
static clib_error_t * set_ip4_vxlan_bypass(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: vxlan.c:976
vlib_node_registration_t vxlan4_flow_input_node
(constructor) VLIB_REGISTER_NODE (vxlan4_flow_input_node)
Definition: decap.c:1291
uword unformat_user(unformat_input_t *input, unformat_function_t *func,...)
Definition: unformat.c:983
format_function_t format_ip46_address
Definition: format.h:61
Contribute an object that is to be used to forward IP4 packets.
Definition: fib_types.h:109
#define STRUCT_OFFSET_OF(t, f)
Definition: clib.h:64
void fib_node_deinit(fib_node_t *node)
Definition: fib_node.c:197
static vnet_sw_interface_t * vnet_get_sw_interface(vnet_main_t *vnm, u32 sw_if_index)
u32 * fib_index_by_sw_if_index
Table index indexed by software interface.
Definition: ip4.h:112
u8 * format(u8 *s, const char *fmt,...)
Definition: format.c:419
dpo_proto_t frp_proto
The protocol of the address below.
Definition: fib_types.h:475
unformat_function_t unformat_vnet_sw_interface
#define VNET_HW_INTERFACE_FLAG_LINK_UP
Definition: interface.h:494
int vnet_flow_disable(vnet_main_t *vnm, u32 flow_index, u32 hw_if_index)
Definition: flow.c:132
static vxlan_tunnel_t * vxlan_tunnel_from_fib_node(fib_node_t *node)
Definition: vxlan.c:166
ip6_address_t src_address
Definition: ip6_packet.h:378
#define ip46_address_cmp(ip46_1, ip46_2)
Definition: ip6_packet.h:92
format_function_t format_vnet_sw_if_index_name
static uword vlib_node_add_next(vlib_main_t *vm, uword node, uword next_node)
Definition: node_funcs.h:1118
unsigned char u8
Definition: types.h:56
static clib_error_t * show_vxlan_tunnel_command_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: vxlan.c:861
static fib_node_back_walk_rc_t vxlan_tunnel_back_walk(fib_node_t *node, fib_node_back_walk_ctx_t *ctx)
Function definition to backwalk a FIB node - Here we will restack the new dpo of VXLAN DIP to encap n...
Definition: vxlan.c:178
enum fib_protocol_t_ fib_protocol_t
Protocol Type.
static uword ip46_address_is_multicast(const ip46_address_t *a)
Definition: ip6_packet.h:178
void fib_node_register_type(fib_node_type_t type, const fib_node_vft_t *vft)
fib_node_register_type
Definition: fib_node.c:60
vnet_flood_class_t flood_class
Definition: interface.h:747
memset(h->entries, 0, sizeof(h->entries[0])*entries)
vnet_main_t * vnet_main
Definition: vxlan.h:177
VNET_DEVICE_CLASS(vxlan_device_class, static)
#define pool_foreach(VAR, POOL, BODY)
Iterate through pool.
Definition: pool.h:443
u32 frp_sw_if_index
The interface.
Definition: fib_types.h:505
#define VLIB_INIT_FUNCTION(x)
Definition: init.h:163
u32 sw_if_index
Definition: vxlan_gbp.api:39
void mfib_table_entry_delete_index(fib_node_index_t mfib_entry_index, mfib_source_t source)
Delete a FIB entry.
Definition: mfib_table.c:380
ip4_address_t dst_address
Definition: ip4_packet.h:169
void di(unformat_input_t *i)
Definition: unformat.c:163
Aggregrate type for a prefix.
Definition: fib_types.h:203
static void vxlan_tunnel_last_lock_gone(fib_node_t *node)
Function definition to inform the FIB node that its last lock has gone.
Definition: vxlan.c:202
vlib_main_t * vlib_main
Definition: vxlan.h:176
#define clib_error_return(e, args...)
Definition: error.h:99
fib_node_index_t mfib_table_entry_path_update(u32 fib_index, const mfib_prefix_t *prefix, mfib_source_t source, const fib_route_path_t *rpath, mfib_itf_flags_t itf_flags)
Add n paths to an entry (aka route) in the FIB.
Definition: mfib_table.c:219
void adj_unlock(adj_index_t adj_index)
Release a reference counting lock on the adjacency.
Definition: adj.c:252
unsigned int u32
Definition: types.h:88
u32 fib_table_find(fib_protocol_t proto, u32 table_id)
Get the index of the FIB for a Table-ID.
Definition: fib_table.c:1064
static clib_error_t * vxlan_add_del_tunnel_command_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: vxlan.c:678
fib_node_t node
Linkage into the FIB object graph.
Definition: vxlan.h:111
u32 vnet_register_interface(vnet_main_t *vnm, u32 dev_class_index, u32 dev_instance, u32 hw_class_index, u32 hw_instance)
Definition: interface.c:703
Definition: fib_entry.h:275
unformat_function_t unformat_line_input
Definition: format.h:282
int vnet_flow_del(vnet_main_t *vnm, u32 flow_index)
Definition: flow.c:67
The identity of a DPO is a combination of its type and its instance number/index of objects of that t...
Definition: dpo.h:168
#define hash_create_mem(elts, key_bytes, value_bytes)
Definition: hash.h:661
#define hash_get(h, key)
Definition: hash.h:249
#define pool_elt_at_index(p, i)
Returns pointer to element at given index.
Definition: pool.h:464
static clib_error_t * vxlan_offload_command_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: vxlan.c:1133
static clib_error_t * vxlan_interface_admin_up_down(vnet_main_t *vnm, u32 hw_if_index, u32 flags)
Definition: vxlan.c:103
ip46_address_t fp_addr
The address type is not deriveable from the fp_addr member.
Definition: fib_types.h:226
dpo_type_t dpoi_type
the type
Definition: dpo.h:172
ip4_address_t local_ip
Definition: vxlan.h:74
static const dpo_id_t * load_balance_get_bucket_i(const load_balance_t *lb, u32 bucket)
Definition: load_balance.h:209
long ctx[MAX_CONNS]
Definition: main.c:144
struct _unformat_input_t unformat_input_t
u32 decap_next_index
Definition: vxlan_gbp.api:37
load-balancing over a choice of [un]equal cost paths
Definition: dpo.h:102
#define pool_put(P, E)
Free an object E in pool P.
Definition: pool.h:274
The FIB DPO provieds;.
Definition: load_balance.h:84
vxlan_main_t vxlan_main
Definition: vxlan.c:43
#define PREDICT_FALSE(x)
Definition: clib.h:107
vnet_sw_interface_flags_t flags
Definition: interface.h:720
vlib_node_registration_t vxlan6_input_node
(constructor) VLIB_REGISTER_NODE (vxlan6_input_node)
Definition: decap.c:24
fib_node_type_t fn_type
The node&#39;s type.
Definition: fib_node.h:293
An node in the FIB graph.
Definition: fib_node.h:289
u8 * format_vxlan_encap_trace(u8 *s, va_list *args)
Definition: encap.c:52
#define ip46_address_initializer
Definition: ip6_packet.h:96
static uword vtep_addr_unref(ip46_address_t *ip)
Definition: vxlan.c:308
u32 flags
Definition: vhost_user.h:115
#define ip46_address_is_ip4(ip46)
Definition: ip6_packet.h:88
#define pool_get_aligned(P, E, A)
Allocate an object E from a pool P (general version).
Definition: pool.h:188
int vnet_vxlan_add_del_rx_flow(u32 hw_if_index, u32 t_index, int is_add)
Definition: vxlan.c:1090
fib_node_index_t fib_table_entry_special_add(u32 fib_index, const fib_prefix_t *prefix, fib_source_t source, fib_entry_flag_t flags)
Add a &#39;special&#39; entry to the FIB.
Definition: fib_table.c:388
int vnet_vxlan_add_del_tunnel(vnet_vxlan_add_del_tunnel_args_t *a, u32 *sw_if_indexp)
Definition: vxlan.c:367
typedef CLIB_PACKED(union{struct{fib_node_index_t mfib_entry_index;adj_index_t mcast_adj_index;};u64 as_u64;})
Definition: vxlan.c:323
u32 dev_instance
Definition: vxlan.h:129
#define UNFORMAT_END_OF_INPUT
Definition: format.h:144
vlib_main_t * vm
Definition: buffer.c:294
void fib_table_entry_delete_index(fib_node_index_t fib_entry_index, fib_source_t source)
Delete a FIB entry.
Definition: fib_table.c:877
vl_api_address_t dst
Definition: vxlan_gbp.api:34
u32 mcast_sw_if_index
Definition: vxlan.h:96
vnet_flood_class_t
Definition: interface.h:662
static vlib_node_runtime_t * vlib_node_get_runtime(vlib_main_t *vm, u32 node_index)
Get node runtime by node index.
Definition: node_funcs.h:89
fib_node_get_t fnv_get
Definition: fib_node.h:277
u32 fib_node_index_t
A typedef of a node index.
Definition: fib_types.h:30
static void vnet_set_vni_and_flags(vxlan_header_t *h, u32 vni)
Definition: vxlan_packet.h:62
u32 adj_index_t
An index for adjacencies.
Definition: adj_types.h:30
static uword unformat_decap_next(unformat_input_t *input, va_list *args)
Definition: vxlan.c:657
void fib_prefix_from_ip46_addr(const ip46_address_t *addr, fib_prefix_t *pfx)
Host prefix from ip.
Definition: fib_types.c:80
void dpo_set(dpo_id_t *dpo, dpo_type_t type, dpo_proto_t proto, index_t index)
Set/create a DPO ID The DPO will be locked.
Definition: dpo.c:185
Aggregrate type for a prefix.
Definition: mfib_types.h:24
u8 * default_build_rewrite(vnet_main_t *vnm, u32 sw_if_index, vnet_link_t link_type, const void *dst_address)
Return a complete, zero-length (aka dummy) rewrite.
Definition: interface.c:1513
Context passed between object during a back walk.
Definition: fib_node.h:202
#define VLIB_CLI_COMMAND(x,...)
Definition: cli.h:155
static u8 * format_vxlan_header_with_length(u8 *s, va_list *args)
Definition: vxlan.c:122
static void vxlan_tunnel_restack_dpo(vxlan_tunnel_t *t)
Definition: vxlan.c:138
#define ASSERT(truth)
static void mcast_shared_add(ip46_address_t *dst, fib_node_index_t mfei, adj_index_t ai)
Definition: vxlan.c:345
static fib_node_t * vxlan_tunnel_fib_node_get(fib_node_index_t index)
Function definition to get a FIB node from its index.
Definition: vxlan.c:188
static load_balance_t * load_balance_get(index_t lbi)
Definition: load_balance.h:200
IPv4 main type.
Definition: ip4.h:96
uword * vtep4
Definition: vxlan.h:166
enum fib_forward_chain_type_t_ fib_forward_chain_type_t
FIB output chain type.
fib_route_path_flags_t frp_flags
flags on the path
Definition: fib_types.h:567
format_function_t format_flow_enabled_hw
Definition: flow.h:184
u32 sw_if_index
Definition: vxlan.h:105
dpo_proto_t fib_proto_to_dpo(fib_protocol_t fib_proto)
Definition: fib_types.c:237
static uword get_decap_next_for_node(u32 node_index, u32 ipv4_set)
Definition: vxlan.c:646
u32 hw_if_index
Definition: vxlan.h:106
u32 vnet_vxlan_get_tunnel_index(u32 sw_if_index)
Definition: vxlan.c:1123
unformat_function_t unformat_ip46_address
Definition: format.h:65
int vnet_flow_add(vnet_main_t *vnm, vnet_flow_t *flow, u32 *flow_index)
Definition: flow.c:43
static void vxlan_rewrite(vxlan_tunnel_t *t, bool is_ip6)
Definition: vxlan.c:231
void vnet_delete_hw_interface(vnet_main_t *vnm, u32 hw_if_index)
Definition: interface.c:913
static uword vtep_addr_ref(ip46_address_t *ip)
Definition: vxlan.c:294
#define vec_elt(v, i)
Get vector value at index i.
#define foreach_copy_field
Definition: vxlan.c:222
#define unformat_parse_error(input)
Definition: format.h:268
uword * instance_used
Definition: vxlan.h:180
u32 ip_version_traffic_class_and_flow_label
Definition: ip6_packet.h:365
fib_protocol_t fp_proto
protocol type
Definition: mfib_types.h:33
l2input_main_t l2input_main
Definition: l2_input.c:113
index_t dpoi_index
the index of objects of that type
Definition: dpo.h:184
void vnet_int_vxlan_bypass_mode(u32 sw_if_index, u8 is_ip6, u8 is_enable)
Definition: vxlan.c:920
A for-us/local path.
Definition: fib_types.h:332
#define vec_len(v)
Number of elements in vector (rvalue-only, NULL tolerant)
static fib_protocol_t fib_ip_proto(bool is_ip6)
Convert from boolean is_ip6 to FIB protocol.
Definition: fib_types.h:80
static clib_error_t * set_ip_vxlan_bypass(u32 is_ip6, unformat_input_t *input, vlib_cli_command_t *cmd)
Definition: vxlan.c:932
fib_node_index_t fib_entry_index
Definition: vxlan.h:117
u64 uword
Definition: types.h:112
static void unformat_free(unformat_input_t *i)
Definition: format.h:162
static void hash_set_mem_alloc(uword **h, void *key, uword v)
Definition: hash.h:279
u32 encap_fib_index
Definition: vxlan.h:102
u32 vni
Definition: vxlan_gbp.api:38
#define DPO_INVALID
An initialiser for DPOs declared on the stack.
Definition: dpo.h:195
int vnet_flow_enable(vnet_main_t *vnm, u32 flow_index, u32 hw_if_index)
Definition: flow.c:91
unformat_function_t unformat_vlib_node
Definition: node_funcs.h:1173
u16 decap_next_index
Definition: vxlan.h:99
u32 * tunnel_index_by_sw_if_index
Definition: vxlan.h:173
#define hash_get_mem(h, key)
Definition: hash.h:269
static void hash_unset_mem_free(uword **h, void *key)
Definition: hash.h:295
A FIB graph nodes virtual function table.
Definition: fib_node.h:276
static u8 * format_decap_next(u8 *s, va_list *args)
Definition: vxlan.c:46
vlib_node_registration_t vxlan4_encap_node
(constructor) VLIB_REGISTER_NODE (vxlan4_encap_node)
Definition: encap.c:484
u8 * format_unformat_error(u8 *s, va_list *va)
Definition: unformat.c:91
ip4_main_t ip4_main
Global ip4 main structure.
Definition: ip4_forward.c:900
clib_bihash_16_8_t vxlan4_tunnel_by_key
Definition: vxlan.h:161
adj_index_t adj_mcast_add_or_lock(fib_protocol_t proto, vnet_link_t link_type, u32 sw_if_index)
Mcast Adjacency.
Definition: adj_mcast.c:51
void dpo_reset(dpo_id_t *dpo)
reset a DPO ID The DPO will be unlocked.
Definition: dpo.c:231
vlib_node_registration_t vxlan6_encap_node
(constructor) VLIB_REGISTER_NODE (vxlan6_encap_node)
Definition: encap.c:500
vnet_link_t fib_proto_to_link(fib_protocol_t proto)
Convert from a protocol to a link type.
Definition: fib_types.c:271
clib_error_t * vnet_sw_interface_set_flags(vnet_main_t *vnm, u32 sw_if_index, u32 flags)
Definition: interface.c:477
dpo_id_t next_dpo
Definition: vxlan.h:86
void udp_register_dst_port(vlib_main_t *vm, udp_dst_port_t dst_port, u32 node_index, u8 is_ip4)
Definition: udp_local.c:492
VNET_HW_INTERFACE_CLASS(vxlan_hw_class)
u8 ip_version_and_header_length
Definition: ip4_packet.h:137
#define VXLAN_HASH_NUM_BUCKETS
Definition: vxlan.c:1205
#define vec_validate_init_empty(V, I, INIT)
Make sure vector is long enough for given index and initialize empty space (no header, unspecified alignment)
Definition: vec.h:486
#define CLIB_CACHE_LINE_BYTES
Definition: cache.h:59
static bool vxlan_decap_next_is_valid(vxlan_main_t *vxm, u32 is_ip6, u32 decap_next_index)
Definition: vxlan.c:282
void vlib_cli_output(vlib_main_t *vm, char *fmt,...)
Definition: cli.c:725
static u16 ip4_header_checksum(ip4_header_t *i)
Definition: ip4_packet.h:246
vxlan_tunnel_t * tunnels
Definition: vxlan.h:158
#define VXLAN_HASH_MEMORY_SIZE
Definition: vxlan.c:1206
icmpr_flow_t * flow
Definition: main.c:123
const ip46_address_t zero_addr
Definition: lookup.c:318
uword unformat(unformat_input_t *i, const char *fmt,...)
Definition: unformat.c:972
ip46_address_t src
Definition: vxlan.h:92
u8 * format_vxlan_tunnel(u8 *s, va_list *args)
Definition: vxlan.c:58
static u8 * format_vxlan_name(u8 *s, va_list *args)
Definition: vxlan.c:85
int vnet_feature_enable_disable(const char *arc_name, const char *node_name, u32 sw_if_index, int enable_disable, void *feature_config, u32 n_feature_config_bytes)
Definition: feature.c:233
ip6_address_t dst_address
Definition: ip6_packet.h:378
static uword unformat_check_input(unformat_input_t *i)
Definition: format.h:170
u32 flow_index
Definition: vxlan.h:128
static uword pool_elts(void *v)
Number of active elements in a pool.
Definition: pool.h:128