34 #define foreach_nat_out2in_ed_error \ 35 _(UNSUPPORTED_PROTOCOL, "unsupported protocol") \ 36 _(OUT2IN_PACKETS, "good out2in packets processed") \ 37 _(OUT_OF_PORTS, "out of ports") \ 38 _(BAD_ICMP_TYPE, "unsupported ICMP type") \ 39 _(NO_TRANSLATION, "no translation") \ 40 _(MAX_SESSIONS_EXCEEDED, "maximum sessions exceeded") \ 41 _(DROP_FRAGMENT, "drop fragment") \ 42 _(MAX_REASS, "maximum reassemblies exceeded") \ 43 _(MAX_FRAG, "maximum fragments per reassembly exceeded")\ 44 _(NON_SYN, "non-SYN packet try to create session") \ 45 _(TCP_PACKETS, "TCP packets") \ 46 _(UDP_PACKETS, "UDP packets") \ 47 _(ICMP_PACKETS, "ICMP packets") \ 48 _(OTHER_PACKETS, "other protocol packets") \ 49 _(FRAGMENTS, "fragments") \ 50 _(CACHED_FRAGMENTS, "cached fragments") \ 51 _(PROCESSED_FRAGMENTS, "processed fragments") 55 #define _(sym,str) NAT_OUT2IN_ED_ERROR_##sym, 62 #define _(sym,string) string, 100 "NAT44_OUT2IN_ED_FAST_PATH";
102 s =
format (s,
"%s: sw_if_index %d, next index %d, session %d", tag,
111 u32 sw_if_index0,
u32 rx_fib_index0,
113 u32 thread_index, snat_session_t ** p_s0)
115 next0 =
icmp_out2in (sm, b0, ip0, icmp0, sw_if_index0, rx_fib_index0, node,
116 next0, thread_index, p_s0, 0);
117 snat_session_t *s0 = *p_s0;
136 u64 sess_timeout_time;
147 if (ctx->
now >= sess_timeout_time)
149 ed_key.
l_addr = s->in2out.addr;
150 ed_key.
r_addr = s->ext_host_addr;
154 ed_key.
proto = s->in2out.port;
161 ed_key.
l_port = s->in2out.port;
162 ed_key.
r_port = s->ext_host_port;
166 ed_key.
r_addr = s->ext_host_nat_addr;
167 ed_key.
r_port = s->ext_host_nat_port;
171 if (clib_bihash_add_del_16_8 (&tsm->
in2out_ed, &ed_kv, 0))
178 s->out2in.addr.as_u32,
182 s->in2out.fib_index);
185 &s->in2out.addr, s->in2out.port,
186 &s->ext_host_nat_addr, s->ext_host_nat_port,
187 &s->out2in.addr, s->out2in.port,
188 &s->ext_host_addr, s->ext_host_port,
196 key.
port = s->ext_host_nat_port;
198 if (a->
addr.
as_u32 == s->ext_host_nat_addr.as_u32)
221 static snat_session_t *
242 b->
error = node->
errors[NAT_OUT2IN_ED_ERROR_MAX_SESSIONS_EXCEEDED];
266 s->ext_host_port = e_key.
protocol == SNAT_PROTOCOL_ICMP ? 0 : udp->
src_port;
275 s->in2out.
protocol = s->out2in.protocol;
284 if (clib_bihash_add_or_overwrite_stale_16_8 (&tsm->
out2in_ed, &kv,
294 thread_index, &eh_key,
298 b->
error = node->
errors[NAT_OUT2IN_ED_ERROR_OUT_OF_PORTS];
300 if (clib_bihash_add_del_16_8 (&tsm->
out2in_ed, &kv, 0))
304 s->ext_host_nat_addr.as_u32 = eh_key.
addr.
as_u32;
305 s->ext_host_nat_port = eh_key.
port;
316 if (clib_bihash_add_or_overwrite_stale_16_8 (&tsm->
in2out_ed, &kv,
322 s->out2in.addr.as_u32,
325 s->out2in.port, s->in2out.fib_index);
328 &s->in2out.addr, s->in2out.port,
329 &s->ext_host_nat_addr, s->ext_host_nat_port,
330 &s->out2in.addr, s->out2in.port,
331 &s->ext_host_addr, s->ext_host_port,
340 icmp46_header_t *icmp0;
345 icmp46_header_t *inner_icmp0;
352 key0.
proto = IP_PROTOCOL_ICMP;
367 case SNAT_PROTOCOL_ICMP:
368 inner_icmp0 = (icmp46_header_t *) l4_header;
373 case SNAT_PROTOCOL_UDP:
374 case SNAT_PROTOCOL_TCP:
394 rx_fib_index, src_port, dst_port);
395 if (!clib_bihash_search_16_8 (&tsm->
in2out_ed, &kv, &value))
409 snat_session_t *s = 0;
413 if (ip->
protocol == IP_PROTOCOL_ICMP)
418 else if (ip->
protocol == IP_PROTOCOL_UDP || ip->
protocol == IP_PROTOCOL_TCP)
438 if (!clib_bihash_search_16_8 (&tsm->
in2out_ed, &kv, &value))
463 s->ext_host_addr = key.
r_addr;
464 s->ext_host_port = key.
r_port;
466 s->out2in.addr = key.
l_addr;
467 s->out2in.port = key.
l_port;
469 s->out2in.fib_index = 0;
470 s->in2out = s->out2in;
474 if (clib_bihash_add_del_16_8 (&tsm->
in2out_ed, &kv, 1))
478 if (ip->
protocol == IP_PROTOCOL_TCP)
495 u8 * p_dont_translate,
void *d,
void *e)
498 icmp46_header_t *icmp;
502 snat_session_t *s = 0;
503 u8 dont_translate = 0, is_addr_only, identity_nat;
512 b->
error = node->
errors[NAT_OUT2IN_ED_ERROR_UNSUPPORTED_PROTOCOL];
520 if (clib_bihash_search_16_8 (&tsm->
out2in_ed, &kv, &value))
528 (sm, e_key, &l_key, 1, &is_addr_only, 0, 0, 0, &identity_nat))
539 b->
error = node->
errors[NAT_OUT2IN_ED_ERROR_NO_TRANSLATION];
547 thread_index, rx_fib_index))
558 (icmp->type != ICMP4_echo_request || !is_addr_only)))
560 b->
error = node->
errors[NAT_OUT2IN_ED_ERROR_BAD_ICMP_TYPE];
586 icmp->type != ICMP4_echo_request &&
589 b->
error = node->
errors[NAT_OUT2IN_ED_ERROR_BAD_ICMP_TYPE];
600 *p_value = s->in2out;
601 *p_dont_translate = dont_translate;
603 *(snat_session_t **) d = s;
607 static snat_session_t *
619 u32 old_addr, new_addr;
630 if (!clib_bihash_search_16_8 (&tsm->
out2in_ed, &s_kv, &s_value))
639 b->
error = node->
errors[NAT_OUT2IN_ED_ERROR_MAX_SESSIONS_EXCEEDED];
645 if (clib_bihash_search_8_8
648 b->
error = node->
errors[NAT_OUT2IN_ED_ERROR_NO_TRANSLATION];
677 s->out2in.addr.as_u32 = old_addr;
678 s->out2in.fib_index = rx_fib_index;
679 s->in2out.addr.as_u32 = new_addr;
681 s->in2out.port = s->out2in.port = ip->
protocol;
686 if (clib_bihash_add_del_16_8 (&tsm->
out2in_ed, &s_kv, 1))
692 if (clib_bihash_add_del_16_8 (&tsm->
in2out_ed, &s_kv, 1))
716 u32 n_left_from, *from, *to_next, pkts_processed = 0, stats_node_index;
722 u32 tcp_packets = 0, udp_packets = 0, icmp_packets = 0, other_packets =
732 while (n_left_from > 0)
738 while (n_left_from >= 4 && n_left_to_next >= 2)
742 u32 next0, sw_if_index0, rx_fib_index0, proto0, old_addr0,
744 u32 next1, sw_if_index1, rx_fib_index1, proto1, old_addr1,
746 u16 old_port0, new_port0, old_port1, new_port1;
750 icmp46_header_t *icmp0, *icmp1;
751 snat_session_t *s0 = 0, *s1 = 0;
757 u8 identity_nat0, identity_nat1;
774 to_next[0] = bi0 = from[0];
775 to_next[1] = bi1 = from[1];
797 ICMP4_time_exceeded_ttl_exceeded_in_transit,
805 icmp0 = (icmp46_header_t *) udp0;
814 thread_index, now, vm,
828 (sm, b0, ip0, icmp0, sw_if_index0, rx_fib_index0, node,
829 next0, now, thread_index, &s0);
860 if (clib_bihash_search_16_8 (&tsm->
out2in_ed, &kv0, &value0))
871 &twice_nat0, &lb_nat0,
882 (UDP_DST_PORT_dhcp_to_client))))
891 node->
errors[NAT_OUT2IN_ED_ERROR_NO_TRANSLATION];
898 thread_index, rx_fib_index0))
912 if ((proto0 == SNAT_PROTOCOL_TCP) && !
tcp_is_init (tcp0))
914 b0->
error = node->
errors[NAT_OUT2IN_ED_ERROR_NON_SYN];
958 old_port0 = tcp0->dst_port;
959 new_port0 = tcp0->dst_port = s0->in2out.port;
961 sum0 = tcp0->checksum;
969 s0->ext_host_nat_addr.as_u32,
974 tcp0->src_port = s0->ext_host_nat_port;
980 (sm, s0, tcp0, thread_index))
988 udp0->
src_port = s0->ext_host_nat_port;
1004 && (b0->
flags & VLIB_BUFFER_IS_TRACED)))
1031 ICMP4_time_exceeded_ttl_exceeded_in_transit,
1039 icmp1 = (icmp46_header_t *) udp1;
1048 thread_index, now, vm,
1062 (sm, b1, ip1, icmp1, sw_if_index1, rx_fib_index1, node,
1063 next1, now, thread_index, &s1);
1094 if (clib_bihash_search_16_8 (&tsm->
out2in_ed, &kv1, &value1))
1105 &twice_nat1, &lb_nat1,
1115 clib_host_to_net_u16
1116 (UDP_DST_PORT_dhcp_to_client))))
1125 node->
errors[NAT_OUT2IN_ED_ERROR_NO_TRANSLATION];
1132 thread_index, rx_fib_index1))
1146 if ((proto1 == SNAT_PROTOCOL_TCP) && !
tcp_is_init (tcp1))
1148 b1->
error = node->
errors[NAT_OUT2IN_ED_ERROR_NON_SYN];
1192 old_port1 = tcp1->dst_port;
1193 new_port1 = tcp1->dst_port = s1->in2out.port;
1195 sum1 = tcp1->checksum;
1203 s1->ext_host_nat_addr.as_u32,
1208 tcp1->src_port = s1->ext_host_nat_port;
1214 (sm, s1, tcp1, thread_index))
1222 udp1->
src_port = s1->ext_host_nat_port;
1238 && (b1->
flags & VLIB_BUFFER_IS_TRACED)))
1254 to_next, n_left_to_next,
1255 bi0, bi1, next0, next1);
1258 while (n_left_from > 0 && n_left_to_next > 0)
1262 u32 next0, sw_if_index0, rx_fib_index0, proto0, old_addr0,
1264 u16 old_port0, new_port0;
1268 icmp46_header_t *icmp0;
1269 snat_session_t *s0 = 0;
1283 n_left_to_next -= 1;
1299 ICMP4_time_exceeded_ttl_exceeded_in_transit,
1307 icmp0 = (icmp46_header_t *) udp0;
1316 thread_index, now, vm,
1330 (sm, b0, ip0, icmp0, sw_if_index0, rx_fib_index0, node,
1331 next0, now, thread_index, &s0);
1362 if (clib_bihash_search_16_8 (&tsm->
out2in_ed, &kv0, &value0))
1373 &twice_nat0, &lb_nat0,
1383 clib_host_to_net_u16
1384 (UDP_DST_PORT_dhcp_to_client))))
1393 node->
errors[NAT_OUT2IN_ED_ERROR_NO_TRANSLATION];
1400 thread_index, rx_fib_index0))
1414 if ((proto0 == SNAT_PROTOCOL_TCP) && !
tcp_is_init (tcp0))
1416 b0->
error = node->
errors[NAT_OUT2IN_ED_ERROR_NON_SYN];
1460 old_port0 = tcp0->dst_port;
1461 new_port0 = tcp0->dst_port = s0->in2out.port;
1463 sum0 = tcp0->checksum;
1471 s0->ext_host_nat_addr.as_u32,
1476 tcp0->src_port = s0->ext_host_nat_port;
1482 (sm, s0, tcp0, thread_index))
1490 udp0->
src_port = s0->ext_host_nat_port;
1506 && (b0->
flags & VLIB_BUFFER_IS_TRACED)))
1521 to_next, n_left_to_next,
1529 NAT_OUT2IN_ED_ERROR_OUT2IN_PACKETS,
1532 NAT_OUT2IN_ED_ERROR_TCP_PACKETS, tcp_packets);
1534 NAT_OUT2IN_ED_ERROR_UDP_PACKETS, udp_packets);
1536 NAT_OUT2IN_ED_ERROR_ICMP_PACKETS,
1539 NAT_OUT2IN_ED_ERROR_OTHER_PACKETS,
1542 NAT_OUT2IN_ED_ERROR_FRAGMENTS, fragments);
1557 .name =
"nat44-ed-out2in",
1558 .vector_size =
sizeof (
u32),
1590 .name =
"nat44-ed-out2in-slowpath",
1591 .vector_size =
sizeof (
u32),
1617 u32 n_left_from, *from, *to_next;
1619 u32 pkts_processed = 0;
1625 u32 *fragments_to_drop = 0;
1626 u32 *fragments_to_loopback = 0;
1632 while (n_left_from > 0)
1638 while (n_left_from > 0 && n_left_to_next > 0)
1640 u32 bi0, sw_if_index0, proto0, rx_fib_index0, new_addr0, old_addr0;
1645 nat_reass_ip4_t *reass0;
1648 icmp46_header_t *icmp0;
1650 snat_session_t *s0 = 0;
1651 u16 old_port0, new_port0;
1664 n_left_to_next -= 1;
1677 b0->
error = node->
errors[NAT_OUT2IN_ED_ERROR_DROP_FRAGMENT];
1684 icmp0 = (icmp46_header_t *) udp0;
1691 1, &fragments_to_drop);
1696 b0->
error = node->
errors[NAT_OUT2IN_ED_ERROR_MAX_REASS];
1706 (sm, b0, ip0, icmp0, sw_if_index0, rx_fib_index0, node,
1707 next0, now, thread_index, &s0);
1712 reass0->sess_index = s0 - per_thread_data->
sessions;
1715 reass0->thread_index = thread_index;
1717 &fragments_to_loopback);
1727 if (clib_bihash_search_16_8
1728 (&per_thread_data->
out2in_ed, &kv0, &value0))
1737 &twice_nat0, &lb0, 0,
1747 clib_host_to_net_u16
1748 (UDP_DST_PORT_dhcp_to_client))))
1757 node->
errors[NAT_OUT2IN_ED_ERROR_NO_TRANSLATION];
1764 thread_index, rx_fib_index0))
1773 &fragments_to_loopback);
1784 if ((proto0 == SNAT_PROTOCOL_TCP) && !
tcp_is_init (tcp0))
1786 b0->
error = node->
errors[NAT_OUT2IN_ED_ERROR_NON_SYN];
1800 node->
errors[NAT_OUT2IN_ED_ERROR_NO_TRANSLATION];
1804 reass0->sess_index = s0 - per_thread_data->
sessions;
1805 reass0->thread_index = thread_index;
1811 reass0->sess_index = value0.
value;
1822 (reass0, bi0, &fragments_to_drop))
1824 b0->
error = node->
errors[NAT_OUT2IN_ED_ERROR_MAX_FRAG];
1826 (
"maximum fragments per reassembly exceeded");
1834 reass0->sess_index);
1856 old_port0 = tcp0->dst_port;
1857 tcp0->dst_port = s0->in2out.port;
1858 new_port0 = tcp0->dst_port;
1860 sum0 = tcp0->checksum;
1871 s0->ext_host_nat_addr.as_u32,
1874 s0->ext_host_nat_port,
1876 tcp0->src_port = s0->ext_host_nat_port;
1887 udp0->
src_port = s0->ext_host_nat_port;
1903 && (b0->
flags & VLIB_BUFFER_IS_TRACED)))
1923 to_next, n_left_to_next,
1927 if (n_left_from == 0 &&
vec_len (fragments_to_loopback))
1934 sizeof (
u32) * len);
1953 NAT_OUT2IN_ED_ERROR_OUT2IN_PACKETS,
1957 &node->
errors[NAT_OUT2IN_ED_ERROR_DROP_FRAGMENT],
1968 .name =
"nat44-ed-out2in-reass",
1969 .vector_size =
sizeof (
u32),
#define snat_is_session_static(s)
Check if SNAT session is created from static mapping.
u32 icmp_out2in(snat_main_t *sm, vlib_buffer_t *b0, ip4_header_t *ip0, icmp46_header_t *icmp0, u32 sw_if_index0, u32 rx_fib_index0, vlib_node_runtime_t *node, u32 next0, u32 thread_index, void *d, void *e)
static int next_src_nat(snat_main_t *sm, ip4_header_t *ip, u8 proto, u16 src_port, u16 dst_port, u32 thread_index, u32 rx_fib_index)
#define foreach_nat_out2in_ed_error
static u32 nat44_session_get_timeout(snat_main_t *sm, snat_session_t *s)
static_always_inline u8 icmp_is_error_message(icmp46_header_t *icmp)
#define clib_memcpy_fast(a, b, c)
static f64 vlib_time_now(vlib_main_t *vm)
u32 fib_table_get_index_for_sw_if_index(fib_protocol_t proto, u32 sw_if_index)
Get the index of the FIB bound to the interface.
static void make_sm_kv(clib_bihash_kv_8_8_t *kv, ip4_address_t *addr, u8 proto, u32 fib_index, u16 port)
#define nat_log_warn(...)
void nat_syslog_nat44_sdel(u32 ssubix, u32 sfibix, ip4_address_t *isaddr, u16 isport, ip4_address_t *idaddr, u16 idport, ip4_address_t *xsaddr, u16 xsport, ip4_address_t *xdaddr, u16 xdport, snat_protocol_t proto, u8 is_twicenat)
vlib_node_registration_t nat44_ed_out2in_node
(constructor) VLIB_REGISTER_NODE (nat44_ed_out2in_node)
vlib_error_t * errors
Vector of errors for this node.
static uword vlib_buffer_length_in_chain(vlib_main_t *vm, vlib_buffer_t *b)
Get length in bytes of the buffer chain.
struct _tcp_header tcp_header_t
#define snat_is_unk_proto_session(s)
Check if SNAT session for unknown protocol.
static int nat44_set_tcp_session_state_o2i(snat_main_t *sm, snat_session_t *ses, tcp_header_t *tcp, u32 thread_index)
#define vec_reset_length(v)
Reset vector length to zero NULL-pointer tolerant.
static int ip4_is_fragment(const ip4_header_t *i)
static u32 icmp_out2in_ed_slow_path(snat_main_t *sm, vlib_buffer_t *b0, ip4_header_t *ip0, icmp46_header_t *icmp0, u32 sw_if_index0, u32 rx_fib_index0, vlib_node_runtime_t *node, u32 next0, f64 now, u32 thread_index, snat_session_t **p_s0)
u32 ip4_fib_table_get_index_for_sw_if_index(u32 sw_if_index)
#define tcp_is_init(t)
Check if client initiating TCP connection (received SYN from client)
#define static_always_inline
static char * nat_out2in_ed_error_strings[]
static uword nat44_ed_out2in_fast_path_fn(vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
#define vlib_prefetch_buffer_header(b, type)
Prefetch buffer metadata.
static_always_inline int icmp_get_ed_key(ip4_header_t *ip0, nat_ed_ses_key_t *p_key0)
#define vec_elt_at_index(v, i)
Get vector value at index i checking that i is in bounds.
#define NAT_REASS_FLAG_ED_DONT_TRANSLATE
static void * ip4_next_header(ip4_header_t *i)
static u8 maximum_sessions_exceeded(snat_main_t *sm, u32 thread_index)
int snat_static_mapping_match(snat_main_t *sm, snat_session_key_t match, snat_session_key_t *mapping, u8 by_external, u8 *is_addr_only, twice_nat_type_t *twice_nat, lb_nat_type_t *lb, ip4_address_t *ext_host_addr, u8 *is_identity_nat)
Match NAT44 static mapping.
void snat_free_outside_address_and_port(snat_address_t *addresses, u32 thread_index, snat_session_key_t *k)
Free outside address and port pair.
static void nat44_delete_session(snat_main_t *sm, snat_session_t *ses, u32 thread_index)
int nat44_o2i_ed_is_idle_session_cb(clib_bihash_kv_16_8_t *kv, void *arg)
VLIB_NODE_FUNCTION_MULTIARCH(nat44_ed_out2in_node, nat44_ed_out2in_fast_path_fn)
int snat_alloc_outside_address_and_port(snat_address_t *addresses, u32 fib_index, u32 thread_index, snat_session_key_t *k, u16 port_per_thread, u32 snat_thread_index)
Alloc outside address and port.
snat_user_t * nat_user_get_or_create(snat_main_t *sm, ip4_address_t *addr, u32 fib_index, u32 thread_index)
Find or create NAT user.
#define pool_elt_at_index(p, i)
Returns pointer to element at given index.
clib_bihash_16_8_t out2in_ed
snat_session_t * nat_ed_session_alloc(snat_main_t *sm, snat_user_t *u, u32 thread_index, f64 now)
Allocate NAT endpoint-dependent session.
snat_static_mapping_t * static_mappings
static void * vlib_buffer_get_current(vlib_buffer_t *b)
Get pointer to current data to process.
void snat_ipfix_logging_nat44_ses_delete(u32 src_ip, u32 nat_src_ip, snat_protocol_t snat_proto, u16 src_port, u16 nat_src_port, u32 vrf_id)
Generate NAT44 session delete event.
void snat_ipfix_logging_nat44_ses_create(u32 src_ip, u32 nat_src_ip, snat_protocol_t snat_proto, u16 src_port, u16 nat_src_port, u32 vrf_id)
Generate NAT44 session create event.
clib_bihash_8_8_t static_mapping_by_external
vl_api_address_union_t src_address
static void create_bypass_for_fwd(snat_main_t *sm, ip4_header_t *ip, u32 rx_fib_index, u32 thread_index)
#define vlib_validate_buffer_enqueue_x2(vm, node, next_index, to_next, n_left_to_next, bi0, bi1, next0, next1)
Finish enqueueing two buffers forward in the graph.
#define SNAT_SESSION_FLAG_UNKNOWN_PROTO
#define vlib_validate_buffer_enqueue_x1(vm, node, next_index, to_next, n_left_to_next, bi0, next0)
Finish enqueueing one buffer forward in the graph.
#define vlib_get_next_frame(vm, node, next_index, vectors, n_vectors_left)
Get pointer to next frame vector data by (vlib_node_runtime_t, next_index).
#define nat_log_notice(...)
vlib_node_registration_t nat44_ed_out2in_reass_node
(constructor) VLIB_REGISTER_NODE (nat44_ed_out2in_reass_node)
vlib_error_t error
Error code for buffers to be enqueued to error handler.
static void vlib_node_increment_counter(vlib_main_t *vm, u32 node_index, u32 counter_index, u64 increment)
static void nat44_delete_user_with_no_session(snat_main_t *sm, snat_user_t *u, u32 thread_index)
#define VLIB_REGISTER_NODE(x,...)
static u8 snat_proto_to_ip_proto(snat_protocol_t snat_proto)
u8 nat_reass_is_drop_frag(u8 is_ip6)
Get status of virtual fragmentation reassembly.
#define CLIB_PREFETCH(addr, size, type)
#define vec_free(V)
Free vector's memory (no header).
static_always_inline void vnet_feature_next(u32 *next0, vlib_buffer_t *b0)
void icmp4_error_set_vnet_buffer(vlib_buffer_t *b, u8 type, u8 code, u32 data)
static u8 * format_nat44_ed_out2in_trace(u8 *s, va_list *args)
static uword nat44_ed_out2in_node_fn_inline(vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame, int is_slow_path)
static void nat44_session_update_counters(snat_session_t *s, f64 now, uword bytes)
8 octet key, 8 octet key value pair
void vlib_put_next_frame(vlib_main_t *vm, vlib_node_runtime_t *r, u32 next_index, u32 n_vectors_left)
Release pointer to next frame vector data.
static uword nat44_ed_out2in_reass_node_fn(vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
vlib_node_registration_t nat44_ed_out2in_slowpath_node
(constructor) VLIB_REGISTER_NODE (nat44_ed_out2in_slowpath_node)
static void make_ed_kv(clib_bihash_kv_16_8_t *kv, ip4_address_t *l_addr, ip4_address_t *r_addr, u8 proto, u32 fib_index, u16 l_port, u16 r_port)
static snat_session_t * nat44_ed_out2in_unknown_proto(snat_main_t *sm, vlib_buffer_t *b, ip4_header_t *ip, u32 rx_fib_index, u32 thread_index, f64 now, vlib_main_t *vm, vlib_node_runtime_t *node)
u16 cached_next_index
Next frame index that vector arguments were last enqueued to last time this node ran.
#define SNAT_SESSION_FLAG_TWICE_NAT
static void nat44_session_update_lru(snat_main_t *sm, snat_session_t *s, u32 thread_index)
Per-user LRU list maintenance.
static snat_session_t * create_session_for_static_mapping_ed(snat_main_t *sm, vlib_buffer_t *b, snat_session_key_t l_key, snat_session_key_t e_key, vlib_node_runtime_t *node, u32 thread_index, twice_nat_type_t twice_nat, lb_nat_type_t lb_nat, f64 now)
#define SNAT_SESSION_FLAG_ENDPOINT_DEPENDENT
snat_address_t * twice_nat_addresses
static uword nat44_ed_out2in_slow_path_fn(vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
static void * vlib_add_trace(vlib_main_t *vm, vlib_node_runtime_t *r, vlib_buffer_t *b, u32 n_data_bytes)
struct _vlib_node_registration vlib_node_registration_t
format_function_t format_nat44_reass_trace
static int ip4_is_first_fragment(const ip4_header_t *i)
#define SNAT_SESSION_FLAG_FWD_BYPASS
static u32 ip_proto_to_snat_proto(u8 ip_proto)
The NAT inline functions.
int nat44_i2o_ed_is_idle_session_cb(clib_bihash_kv_16_8_t *kv, void *arg)
static void user_session_increment(snat_main_t *sm, snat_user_t *u, u8 is_static)
u32 icmp_match_out2in_ed(snat_main_t *sm, vlib_node_runtime_t *node, u32 thread_index, vlib_buffer_t *b, ip4_header_t *ip, u8 *p_proto, snat_session_key_t *p_value, u8 *p_dont_translate, void *d, void *e)
#define vec_len(v)
Number of elements in vector (rvalue-only, NULL tolerant)
#define SNAT_SESSION_FLAG_AFFINITY
snat_main_per_thread_data_t * per_thread_data
static void * vlib_frame_vector_args(vlib_frame_t *f)
Get pointer to frame vector data.
#define ip_csum_update(sum, old, new, type, field)
static u8 is_interface_addr(snat_main_t *sm, vlib_node_runtime_t *node, u32 sw_if_index0, u32 ip4_addr)
nat_reass_ip4_t * nat_ip4_reass_find_or_create(ip4_address_t src, ip4_address_t dst, u16 frag_id, u8 proto, u8 reset_timeout, u32 **bi_to_drop)
Find or create reassembly.
snat_address_t * addresses
#define SNAT_SESSION_FLAG_STATIC_MAPPING
int nat_ip4_reass_add_fragment(nat_reass_ip4_t *reass, u32 bi, u32 **bi_to_drop)
Cache fragment.
u16 flags
Copy of main node flags.
static void nat_send_all_to_node(vlib_main_t *vm, u32 *bi_vector, vlib_node_runtime_t *node, vlib_error_t *error, u32 next)
#define is_twice_nat_session(s)
Check if NAT session is twice NAT.
clib_bihash_16_8_t in2out_ed
void nat_ip4_reass_get_frags(nat_reass_ip4_t *reass, u32 **bi)
Get cached fragments.
NAT plugin virtual fragmentation reassembly.
#define VLIB_NODE_FLAG_TRACE
#define CLIB_CACHE_LINE_BYTES
u32 flags
buffer flags: VLIB_BUFFER_FREE_LIST_INDEX_MASK: bits used to store free list index, VLIB_BUFFER_IS_TRACED: trace this buffer.
snat_session_t * sessions
static vlib_buffer_t * vlib_get_buffer(vlib_main_t *vm, u32 buffer_index)
Translate buffer index into buffer pointer.
#define SNAT_SESSION_FLAG_LOAD_BALANCING
static u16 ip_csum_fold(ip_csum_t c)