55 "NAT44_OUT2IN: sw_if_index %d, next index %d, session index %d",
67 s =
format (s,
"NAT44_OUT2IN_FAST: sw_if_index %d, next index %d",
76 #define foreach_snat_out2in_error \ 77 _(UNSUPPORTED_PROTOCOL, "unsupported protocol") \ 78 _(OUT2IN_PACKETS, "good out2in packets processed") \ 79 _(OUT_OF_PORTS, "out of ports") \ 80 _(BAD_ICMP_TYPE, "unsupported ICMP type") \ 81 _(NO_TRANSLATION, "no translation") \ 82 _(MAX_SESSIONS_EXCEEDED, "maximum sessions exceeded") \ 83 _(DROP_FRAGMENT, "drop fragment") \ 84 _(MAX_REASS, "maximum reassemblies exceeded") \ 85 _(MAX_FRAG, "maximum fragments per reassembly exceeded")\ 86 _(TCP_PACKETS, "TCP packets") \ 87 _(UDP_PACKETS, "UDP packets") \ 88 _(ICMP_PACKETS, "ICMP packets") \ 89 _(OTHER_PACKETS, "other protocol packets") \ 90 _(FRAGMENTS, "fragments") \ 91 _(CACHED_FRAGMENTS, "cached fragments") \ 92 _(PROCESSED_FRAGMENTS, "processed fragments") 96 #define _(sym,str) SNAT_OUT2IN_ERROR_##sym, 103 #define _(sym,string) string, 123 u64 sess_timeout_time;
130 if (ctx->
now >= sess_timeout_time)
132 s_kv.
key = s->in2out.as_u64;
133 if (clib_bihash_add_del_8_8 (&tsm->
in2out, &s_kv, 0))
137 s->out2in.addr.as_u32,
141 s->in2out.fib_index);
144 &s->in2out.addr, s->in2out.port,
145 &s->out2in.addr, s->out2in.port,
173 static inline snat_session_t *
179 u32 thread_index,
f64 now)
190 b0->
error = node->
errors[SNAT_OUT2IN_ERROR_MAX_SESSIONS_EXCEEDED];
225 kv0.
key = s->in2out.as_u64;
227 if (clib_bihash_add_or_overwrite_stale_8_8
232 kv0.
key = s->out2in.as_u64;
234 if (clib_bihash_add_or_overwrite_stale_8_8
241 s->out2in.addr.as_u32,
244 s->out2in.port, s->in2out.fib_index);
247 &s->in2out.addr, s->in2out.port, &s->out2in.addr,
248 s->out2in.port, s->in2out.protocol);
257 icmp46_header_t *icmp0;
262 icmp46_header_t *inner_icmp0;
281 case SNAT_PROTOCOL_ICMP:
282 inner_icmp0 = (icmp46_header_t *) l4_header;
286 case SNAT_PROTOCOL_UDP:
287 case SNAT_PROTOCOL_TCP:
291 return SNAT_OUT2IN_ERROR_UNSUPPORTED_PROTOCOL;
317 u8 * p_dont_translate,
void *d,
void *e)
319 icmp46_header_t *icmp0;
324 snat_session_t *s0 = 0;
325 u8 dont_translate = 0;
341 b0->
error = node->
errors[SNAT_OUT2IN_ERROR_UNSUPPORTED_PROTOCOL];
355 (sm, key0, &sm0, 1, &is_addr_only, 0, 0, 0, &identity_nat))
366 b0->
error = node->
errors[SNAT_OUT2IN_ERROR_NO_TRANSLATION];
378 (icmp0->type != ICMP4_echo_request
381 b0->
error = node->
errors[SNAT_OUT2IN_ERROR_BAD_ICMP_TYPE];
405 icmp0->type != ICMP4_echo_request &&
408 b0->
error = node->
errors[SNAT_OUT2IN_ERROR_BAD_ICMP_TYPE];
420 *p_value = s0->in2out;
421 *p_dont_translate = dont_translate;
423 *(snat_session_t **) d = s0;
445 u8 * p_dont_translate,
void *d,
void *e)
447 icmp46_header_t *icmp0;
452 u8 dont_translate = 0;
471 (sm, key0, &sm0, 1, &is_addr_only, 0, 0, 0, 0))
479 b0->
error = node->
errors[SNAT_OUT2IN_ERROR_NO_TRANSLATION];
485 (icmp0->type != ICMP4_echo_request || !is_addr_only) &&
488 b0->
error = node->
errors[SNAT_OUT2IN_ERROR_BAD_ICMP_TYPE];
497 *p_dont_translate = dont_translate;
505 icmp46_header_t * icmp0,
509 u32 next0,
u32 thread_index,
void *d,
void *e)
516 icmp46_header_t *inner_icmp0;
518 u32 new_addr0, old_addr0;
519 u16 old_id0, new_id0;
527 &protocol, &sm0, &dont_translate, d,
542 if (checksum0 != 0 && checksum0 != 0xffff)
558 if (icmp0->checksum == 0)
559 icmp0->checksum = 0xffff;
570 sum0 = icmp0->checksum;
591 sum0 = icmp0->checksum;
598 case SNAT_PROTOCOL_ICMP:
599 inner_icmp0 = (icmp46_header_t *) l4_header;
606 sum0 = icmp0->checksum;
611 case SNAT_PROTOCOL_UDP:
612 case SNAT_PROTOCOL_TCP:
617 sum0 = icmp0->checksum;
636 icmp46_header_t * icmp0,
641 u32 thread_index, snat_session_t ** p_s0)
643 next0 =
icmp_out2in (sm, b0, ip0, icmp0, sw_if_index0, rx_fib_index0, node,
644 next0, thread_index, p_s0, 0);
645 snat_session_t *s0 = *p_s0;
666 u32 old_addr, new_addr;
693 u32 n_left_from, *from, *to_next;
695 u32 pkts_processed = 0;
699 u32 tcp_packets = 0, udp_packets = 0, icmp_packets = 0, other_packets =
706 while (n_left_from > 0)
712 while (n_left_from >= 4 && n_left_to_next >= 2)
718 u32 sw_if_index0, sw_if_index1;
721 u32 new_addr0, old_addr0;
722 u16 new_port0, old_port0;
723 u32 new_addr1, old_addr1;
724 u16 new_port1, old_port1;
727 icmp46_header_t *icmp0, *icmp1;
729 u32 rx_fib_index0, rx_fib_index1;
731 snat_session_t *s0 = 0, *s1 = 0;
733 u8 identity_nat0, identity_nat1;
750 to_next[0] = bi0 = from[0];
751 to_next[1] = bi1 = from[1];
766 icmp0 = (icmp46_header_t *) udp0;
776 ICMP4_time_exceeded_ttl_exceeded_in_transit,
791 node->
errors[SNAT_OUT2IN_ERROR_UNSUPPORTED_PROTOCOL];
809 (sm, b0, ip0, icmp0, sw_if_index0, rx_fib_index0, node,
810 next0, now, thread_index, &s0);
822 if (clib_bihash_search_8_8
828 (sm, key0, &sm0, 1, 0, 0, 0, 0, &identity_nat0))
837 (UDP_DST_PORT_dhcp_to_client))))
846 node->
errors[SNAT_OUT2IN_ERROR_NO_TRANSLATION];
882 old_port0 = tcp0->dst_port;
883 tcp0->dst_port = s0->in2out.port;
884 new_port0 = tcp0->dst_port;
886 sum0 = tcp0->checksum;
914 && (b0->
flags & VLIB_BUFFER_IS_TRACED)))
932 icmp1 = (icmp46_header_t *) udp1;
942 ICMP4_time_exceeded_ttl_exceeded_in_transit,
957 node->
errors[SNAT_OUT2IN_ERROR_UNSUPPORTED_PROTOCOL];
975 (sm, b1, ip1, icmp1, sw_if_index1, rx_fib_index1, node,
976 next1, now, thread_index, &s1);
988 if (clib_bihash_search_8_8
994 (sm, key1, &sm1, 1, 0, 0, 0, 0, &identity_nat1))
1002 clib_host_to_net_u16
1003 (UDP_DST_PORT_dhcp_to_client))))
1012 node->
errors[SNAT_OUT2IN_ERROR_NO_TRANSLATION];
1048 old_port1 = tcp1->dst_port;
1049 tcp1->dst_port = s1->in2out.port;
1050 new_port1 = tcp1->dst_port;
1052 sum1 = tcp1->checksum;
1080 && (b1->
flags & VLIB_BUFFER_IS_TRACED)))
1096 to_next, n_left_to_next,
1097 bi0, bi1, next0, next1);
1100 while (n_left_from > 0 && n_left_to_next > 0)
1108 u32 new_addr0, old_addr0;
1109 u16 new_port0, old_port0;
1112 icmp46_header_t *icmp0;
1116 snat_session_t *s0 = 0;
1126 n_left_to_next -= 1;
1135 icmp0 = (icmp46_header_t *) udp0;
1150 node->
errors[SNAT_OUT2IN_ERROR_UNSUPPORTED_PROTOCOL];
1162 ICMP4_time_exceeded_ttl_exceeded_in_transit,
1178 (sm, b0, ip0, icmp0, sw_if_index0, rx_fib_index0, node,
1179 next0, now, thread_index, &s0);
1191 if (clib_bihash_search_8_8
1197 (sm, key0, &sm0, 1, 0, 0, 0, 0, &identity_nat0))
1205 clib_host_to_net_u16
1206 (UDP_DST_PORT_dhcp_to_client))))
1215 node->
errors[SNAT_OUT2IN_ERROR_NO_TRANSLATION];
1251 old_port0 = tcp0->dst_port;
1252 tcp0->dst_port = s0->in2out.port;
1253 new_port0 = tcp0->dst_port;
1255 sum0 = tcp0->checksum;
1283 && (b0->
flags & VLIB_BUFFER_IS_TRACED)))
1299 to_next, n_left_to_next,
1307 SNAT_OUT2IN_ERROR_OUT2IN_PACKETS,
1310 SNAT_OUT2IN_ERROR_TCP_PACKETS, tcp_packets);
1312 SNAT_OUT2IN_ERROR_UDP_PACKETS, udp_packets);
1314 SNAT_OUT2IN_ERROR_ICMP_PACKETS, icmp_packets);
1316 SNAT_OUT2IN_ERROR_OTHER_PACKETS,
1319 SNAT_OUT2IN_ERROR_FRAGMENTS, fragments);
1327 .name =
"nat44-out2in",
1328 .vector_size =
sizeof (
u32),
1355 u32 n_left_from, *from, *to_next;
1357 u32 pkts_processed = 0, cached_fragments = 0;
1363 u32 *fragments_to_drop = 0;
1364 u32 *fragments_to_loopback = 0;
1370 while (n_left_from > 0)
1376 while (n_left_from > 0 && n_left_to_next > 0)
1378 u32 bi0, sw_if_index0, proto0, rx_fib_index0, new_addr0, old_addr0;
1383 nat_reass_ip4_t *reass0;
1386 icmp46_header_t *icmp0;
1389 snat_session_t *s0 = 0;
1390 u16 old_port0, new_port0;
1400 n_left_to_next -= 1;
1413 b0->
error = node->
errors[SNAT_OUT2IN_ERROR_DROP_FRAGMENT];
1420 icmp0 = (icmp46_header_t *) udp0;
1427 1, &fragments_to_drop);
1432 b0->
error = node->
errors[SNAT_OUT2IN_ERROR_MAX_REASS];
1442 (sm, b0, ip0, icmp0, sw_if_index0, rx_fib_index0, node,
1443 next0, now, thread_index, &s0);
1448 reass0->sess_index = s0 - per_thread_data->
sessions;
1451 reass0->thread_index = thread_index;
1453 &fragments_to_loopback);
1465 if (clib_bihash_search_8_8
1466 (&per_thread_data->
out2in, &kv0, &value0))
1471 (sm, key0, &sm0, 1, 0, 0, 0, 0, &identity_nat0))
1480 clib_host_to_net_u16
1481 (UDP_DST_PORT_dhcp_to_client))))
1490 node->
errors[SNAT_OUT2IN_ERROR_NO_TRANSLATION];
1497 &fragments_to_loopback);
1513 node->
errors[SNAT_OUT2IN_ERROR_NO_TRANSLATION];
1517 reass0->sess_index = s0 - per_thread_data->
sessions;
1518 reass0->thread_index = thread_index;
1524 reass0->sess_index = value0.
value;
1535 (reass0, bi0, &fragments_to_drop))
1537 b0->
error = node->
errors[SNAT_OUT2IN_ERROR_MAX_FRAG];
1539 (
"maximum fragments per reassembly exceeded");
1547 reass0->sess_index);
1565 old_port0 = tcp0->dst_port;
1566 tcp0->dst_port = s0->in2out.port;
1567 new_port0 = tcp0->dst_port;
1569 sum0 = tcp0->checksum;
1596 && (b0->
flags & VLIB_BUFFER_IS_TRACED)))
1617 to_next, n_left_to_next,
1621 if (n_left_from == 0 &&
vec_len (fragments_to_loopback))
1628 sizeof (
u32) * len);
1647 SNAT_OUT2IN_ERROR_PROCESSED_FRAGMENTS,
1650 SNAT_OUT2IN_ERROR_CACHED_FRAGMENTS,
1654 &node->
errors[SNAT_OUT2IN_ERROR_DROP_FRAGMENT],
1665 .name =
"nat44-out2in-reass",
1666 .vector_size =
sizeof (
u32),
1692 u32 n_left_from, *from, *to_next;
1694 u32 pkts_processed = 0;
1701 while (n_left_from > 0)
1707 while (n_left_from > 0 && n_left_to_next > 0)
1715 u32 new_addr0, old_addr0;
1716 u16 new_port0, old_port0;
1719 icmp46_header_t *icmp0;
1730 n_left_to_next -= 1;
1737 icmp0 = (icmp46_header_t *) udp0;
1749 ICMP4_time_exceeded_ttl_exceeded_in_transit,
1762 next0 =
icmp_out2in (sm, b0, ip0, icmp0, sw_if_index0,
1763 rx_fib_index0, node, next0, ~0, 0, 0);
1773 b0->
error = node->
errors[SNAT_OUT2IN_ERROR_NO_TRANSLATION];
1778 new_port0 = sm0.
port;
1793 old_port0 = tcp0->dst_port;
1794 tcp0->dst_port = new_port0;
1796 sum0 = tcp0->checksum;
1817 sum0 = tcp0->checksum;
1829 && (b0->
flags & VLIB_BUFFER_IS_TRACED)))
1841 to_next, n_left_to_next,
1849 SNAT_OUT2IN_ERROR_OUT2IN_PACKETS,
1857 .name =
"nat44-out2in-fast",
1858 .vector_size =
sizeof (
u32),
vlib_node_registration_t snat_out2in_fast_node
(constructor) VLIB_REGISTER_NODE (snat_out2in_fast_node)
static ip_csum_t ip_incremental_checksum_buffer(vlib_main_t *vm, vlib_buffer_t *first_buffer, u32 first_buffer_offset, u32 n_bytes_to_checksum, ip_csum_t sum)
VLIB_NODE_FUNCTION_MULTIARCH(snat_out2in_node, snat_out2in_node_fn)
#define snat_is_session_static(s)
Check if SNAT session is created from static mapping.
u32 icmp_match_out2in_slow(snat_main_t *sm, vlib_node_runtime_t *node, u32 thread_index, vlib_buffer_t *b0, ip4_header_t *ip0, u8 *p_proto, snat_session_key_t *p_value, u8 *p_dont_translate, void *d, void *e)
Get address and port values to be used for ICMP packet translation and create session if needed...
static u8 * format_snat_out2in_fast_trace(u8 *s, va_list *args)
static u32 nat44_session_get_timeout(snat_main_t *sm, snat_session_t *s)
static u32 icmp_out2in_slow_path(snat_main_t *sm, vlib_buffer_t *b0, ip4_header_t *ip0, icmp46_header_t *icmp0, u32 sw_if_index0, u32 rx_fib_index0, vlib_node_runtime_t *node, u32 next0, f64 now, u32 thread_index, snat_session_t **p_s0)
static_always_inline u8 icmp_is_error_message(icmp46_header_t *icmp)
#define clib_memcpy_fast(a, b, c)
static f64 vlib_time_now(vlib_main_t *vm)
u32 fib_table_get_index_for_sw_if_index(fib_protocol_t proto, u32 sw_if_index)
Get the index of the FIB bound to the interface.
#define nat_log_warn(...)
u32 * fib_index_by_sw_if_index
Table index indexed by software interface.
vlib_error_t * errors
Vector of errors for this node.
int nat44_o2i_is_idle_session_cb(clib_bihash_kv_8_8_t *kv, void *arg)
static uword vlib_buffer_length_in_chain(vlib_main_t *vm, vlib_buffer_t *b)
Get length in bytes of the buffer chain.
struct _tcp_header tcp_header_t
#define vec_reset_length(v)
Reset vector length to zero NULL-pointer tolerant.
static int ip4_is_fragment(const ip4_header_t *i)
u32 ip4_fib_table_get_index_for_sw_if_index(u32 sw_if_index)
#define static_always_inline
static uword ip4_header_checksum_is_valid(ip4_header_t *i)
#define vlib_prefetch_buffer_header(b, type)
Prefetch buffer metadata.
#define vec_elt_at_index(v, i)
Get vector value at index i checking that i is in bounds.
#define NAT_REASS_FLAG_ED_DONT_TRANSLATE
static void * ip4_next_header(ip4_header_t *i)
#define foreach_snat_out2in_error
static uword nat44_out2in_reass_node_fn(vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
static u8 maximum_sessions_exceeded(snat_main_t *sm, u32 thread_index)
int snat_static_mapping_match(snat_main_t *sm, snat_session_key_t match, snat_session_key_t *mapping, u8 by_external, u8 *is_addr_only, twice_nat_type_t *twice_nat, lb_nat_type_t *lb, ip4_address_t *ext_host_addr, u8 *is_identity_nat)
Match NAT44 static mapping.
void snat_free_outside_address_and_port(snat_address_t *addresses, u32 thread_index, snat_session_key_t *k)
Free outside address and port pair.
static void nat44_delete_session(snat_main_t *sm, snat_session_t *ses, u32 thread_index)
snat_user_t * nat_user_get_or_create(snat_main_t *sm, ip4_address_t *addr, u32 fib_index, u32 thread_index)
Find or create NAT user.
#define pool_elt_at_index(p, i)
Returns pointer to element at given index.
snat_static_mapping_t * static_mappings
static void * vlib_buffer_get_current(vlib_buffer_t *b)
Get pointer to current data to process.
void snat_ipfix_logging_nat44_ses_delete(u32 src_ip, u32 nat_src_ip, snat_protocol_t snat_proto, u16 src_port, u16 nat_src_port, u32 vrf_id)
Generate NAT44 session delete event.
void nat_syslog_nat44_apmadd(u32 ssubix, u32 sfibix, ip4_address_t *isaddr, u16 isport, ip4_address_t *xsaddr, u16 xsport, snat_protocol_t proto)
void snat_ipfix_logging_nat44_ses_create(u32 src_ip, u32 nat_src_ip, snat_protocol_t snat_proto, u16 src_port, u16 nat_src_port, u32 vrf_id)
Generate NAT44 session create event.
clib_bihash_8_8_t static_mapping_by_external
vl_api_address_union_t src_address
#define vlib_validate_buffer_enqueue_x2(vm, node, next_index, to_next, n_left_to_next, bi0, bi1, next0, next1)
Finish enqueueing two buffers forward in the graph.
vlib_node_registration_t snat_out2in_node
(constructor) VLIB_REGISTER_NODE (snat_out2in_node)
#define vlib_validate_buffer_enqueue_x1(vm, node, next_index, to_next, n_left_to_next, bi0, next0)
Finish enqueueing one buffer forward in the graph.
#define vlib_get_next_frame(vm, node, next_index, vectors, n_vectors_left)
Get pointer to next frame vector data by (vlib_node_runtime_t, next_index).
#define nat_log_notice(...)
vlib_error_t error
Error code for buffers to be enqueued to error handler.
static void vlib_node_increment_counter(vlib_main_t *vm, u32 node_index, u32 counter_index, u64 increment)
The fine-grained event logger allows lightweight, thread-safe event logging at minimum cost...
static void nat44_delete_user_with_no_session(snat_main_t *sm, snat_user_t *u, u32 thread_index)
#define VLIB_REGISTER_NODE(x,...)
u8 nat_reass_is_drop_frag(u8 is_ip6)
Get status of virtual fragmentation reassembly.
#define CLIB_PREFETCH(addr, size, type)
#define vec_free(V)
Free vector's memory (no header).
static_always_inline void vnet_feature_next(u32 *next0, vlib_buffer_t *b0)
void icmp4_error_set_vnet_buffer(vlib_buffer_t *b, u8 type, u8 code, u32 data)
static void nat44_session_update_counters(snat_session_t *s, f64 now, uword bytes)
8 octet key, 8 octet key value pair
void vlib_put_next_frame(vlib_main_t *vm, vlib_node_runtime_t *r, u32 next_index, u32 n_vectors_left)
Release pointer to next frame vector data.
u16 cached_next_index
Next frame index that vector arguments were last enqueued to last time this node ran.
snat_icmp_match_function_t * icmp_match_out2in_cb
static void nat44_session_update_lru(snat_main_t *sm, snat_session_t *s, u32 thread_index)
Per-user LRU list maintenance.
vlib_node_registration_t nat44_out2in_reass_node
(constructor) VLIB_REGISTER_NODE (nat44_out2in_reass_node)
void nat_syslog_nat44_apmdel(u32 ssubix, u32 sfibix, ip4_address_t *isaddr, u16 isport, ip4_address_t *xsaddr, u16 xsport, snat_protocol_t proto)
snat_session_t * nat_session_alloc_or_recycle(snat_main_t *sm, snat_user_t *u, u32 thread_index)
Allocate new NAT session or recycle last used.
static void * vlib_add_trace(vlib_main_t *vm, vlib_node_runtime_t *r, vlib_buffer_t *b, u32 n_data_bytes)
#define vec_elt(v, i)
Get vector value at index i.
struct _vlib_node_registration vlib_node_registration_t
format_function_t format_nat44_reass_trace
static int ip4_is_first_fragment(const ip4_header_t *i)
static u32 ip_proto_to_snat_proto(u8 ip_proto)
The NAT inline functions.
static void user_session_increment(snat_main_t *sm, snat_user_t *u, u8 is_static)
static snat_session_t * create_session_for_static_mapping(snat_main_t *sm, vlib_buffer_t *b0, snat_session_key_t in2out, snat_session_key_t out2in, vlib_node_runtime_t *node, u32 thread_index, f64 now)
Create session for static mapping.
#define vec_len(v)
Number of elements in vector (rvalue-only, NULL tolerant)
static char * snat_out2in_error_strings[]
static int nat_out2in_sm_unknown_proto(snat_main_t *sm, vlib_buffer_t *b, ip4_header_t *ip, u32 rx_fib_index)
snat_main_per_thread_data_t * per_thread_data
static void * vlib_frame_vector_args(vlib_frame_t *f)
Get pointer to frame vector data.
#define ip_csum_update(sum, old, new, type, field)
static u8 is_interface_addr(snat_main_t *sm, vlib_node_runtime_t *node, u32 sw_if_index0, u32 ip4_addr)
static_always_inline snat_out2in_error_t icmp_get_key(ip4_header_t *ip0, snat_session_key_t *p_key0)
static u8 * format_snat_out2in_trace(u8 *s, va_list *args)
nat_reass_ip4_t * nat_ip4_reass_find_or_create(ip4_address_t src, ip4_address_t dst, u16 frag_id, u8 proto, u8 reset_timeout, u32 **bi_to_drop)
Find or create reassembly.
snat_address_t * addresses
static uword snat_out2in_fast_node_fn(vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
#define SNAT_SESSION_FLAG_STATIC_MAPPING
static uword snat_out2in_node_fn(vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
int nat_ip4_reass_add_fragment(nat_reass_ip4_t *reass, u32 bi, u32 **bi_to_drop)
Cache fragment.
u16 flags
Copy of main node flags.
static void nat_send_all_to_node(vlib_main_t *vm, u32 *bi_vector, vlib_node_runtime_t *node, vlib_error_t *error, u32 next)
static int ip4_header_bytes(const ip4_header_t *i)
void nat_ip4_reass_get_frags(nat_reass_ip4_t *reass, u32 **bi)
Get cached fragments.
NAT plugin virtual fragmentation reassembly.
#define VLIB_NODE_FLAG_TRACE
#define CLIB_CACHE_LINE_BYTES
u32 flags
buffer flags: VLIB_BUFFER_FREE_LIST_INDEX_MASK: bits used to store free list index, VLIB_BUFFER_IS_TRACED: trace this buffer.
u32 icmp_out2in(snat_main_t *sm, vlib_buffer_t *b0, ip4_header_t *ip0, icmp46_header_t *icmp0, u32 sw_if_index0, u32 rx_fib_index0, vlib_node_runtime_t *node, u32 next0, u32 thread_index, void *d, void *e)
int nat44_i2o_is_idle_session_cb(clib_bihash_kv_8_8_t *kv, void *arg)
snat_session_t * sessions
static vlib_buffer_t * vlib_get_buffer(vlib_main_t *vm, u32 buffer_index)
Translate buffer index into buffer pointer.
static u16 ip_csum_fold(ip_csum_t c)
u32 icmp_match_out2in_fast(snat_main_t *sm, vlib_node_runtime_t *node, u32 thread_index, vlib_buffer_t *b0, ip4_header_t *ip0, u8 *p_proto, snat_session_key_t *p_value, u8 *p_dont_translate, void *d, void *e)
Get address and port values to be used for ICMP packet translation.