35 #define _(sym,string) string, 58 "NAT44_IN2OUT_ED_FAST_PATH";
60 s =
format (s,
"%s: sw_if_index %d, next index %d, session %d", tag,
66 #ifndef CLIB_MARCH_VARIANT 73 u64 sess_timeout_time;
84 if (ctx->
now >= sess_timeout_time)
89 ed_key.
l_addr = s->out2in.addr;
90 ed_key.
r_addr = s->ext_host_addr;
94 ed_key.
proto = s->in2out.port;
101 ed_key.
l_port = s->out2in.port;
102 ed_key.
r_port = s->ext_host_port;
106 if (clib_bihash_add_del_16_8 (&tsm->
out2in_ed, &ed_kv, 0))
113 s->in2out.addr.as_u32,
114 s->out2in.addr.as_u32,
118 s->in2out.fib_index);
121 &s->in2out.addr, s->in2out.port,
122 &s->ext_host_nat_addr, s->ext_host_nat_port,
123 &s->out2in.addr, s->out2in.port,
124 &s->ext_host_addr, s->ext_host_port,
127 nat_ha_sdel (&s->out2in.addr, s->out2in.port, &s->ext_host_addr,
128 s->ext_host_port, s->out2in.protocol, s->out2in.fib_index,
136 key.
port = s->ext_host_nat_port;
138 if (a->
addr.
as_u32 == s->ext_host_nat_addr.as_u32)
165 u32 sw_if_index0,
u32 rx_fib_index0,
167 u32 thread_index, snat_session_t ** p_s0)
169 next0 =
icmp_in2out (sm, b0, ip0, icmp0, sw_if_index0, rx_fib_index0, node,
170 next0, thread_index, p_s0, 0);
171 snat_session_t *s0 = *p_s0;
189 snat_session_t ** sessionp,
193 snat_session_t *s = 0;
214 b->
error = node->
errors[NAT_IN2OUT_ED_ERROR_MAX_SESSIONS_EXCEEDED];
227 (sm, key0, &key1, 0, 0, 0, &lb, 0, &identity_nat))
236 b->
error = node->
errors[NAT_IN2OUT_ED_ERROR_OUT_OF_PORTS];
251 if (
proto == SNAT_PROTOCOL_TCP)
255 b->
error = node->
errors[NAT_IN2OUT_ED_ERROR_NON_SYN];
266 thread_index, &key1);
277 thread_index, &key1);
287 s->ext_host_addr = key->
r_addr;
288 s->ext_host_port = key->
r_port;
310 s->out2in.fib_index = outside_fib->
fib_index;
323 if (clib_bihash_add_or_overwrite_stale_16_8 (&tsm->
in2out_ed, kv,
331 if (clib_bihash_add_or_overwrite_stale_16_8 (&tsm->
out2in_ed, kv,
340 s->in2out.addr.as_u32,
341 s->out2in.addr.as_u32,
344 s->out2in.port, s->in2out.fib_index);
347 &s->in2out.addr, s->in2out.port,
348 &s->ext_host_nat_addr, s->ext_host_nat_port,
349 &s->out2in.addr, s->out2in.port,
350 &s->ext_host_addr, s->ext_host_port,
351 s->in2out.protocol, 0);
353 nat_ha_sadd (&s->in2out.addr, s->in2out.port, &s->out2in.addr,
354 s->out2in.port, &s->ext_host_addr, s->ext_host_port,
355 &s->ext_host_nat_addr, s->ext_host_nat_port,
356 s->in2out.protocol, s->in2out.fib_index, s->flags,
365 u32 rx_fib_index,
u32 thread_index)
377 if (clib_bihash_search_16_8 (&tsm->
out2in_ed, &kv, &value))
399 u32 thread_index,
f64 now,
405 snat_session_t *s = 0;
411 if (ip->
protocol == IP_PROTOCOL_ICMP)
420 else if (ip->
protocol == IP_PROTOCOL_UDP || ip->
protocol == IP_PROTOCOL_TCP)
432 if (!clib_bihash_search_16_8 (&tsm->
in2out_ed, &kv, &value))
437 if (ip->
protocol == IP_PROTOCOL_TCP)
461 u32 thread_index,
u32 rx_sw_if_index,
474 if (!clib_bihash_search_16_8 (&tsm->
out2in_ed, &kv, &value))
490 if (!clib_bihash_search_16_8 (&tsm->
in2out_ed, &kv, &value))
500 if ((nat_interface_is_inside (i)) && (rx_sw_if_index == i->sw_if_index))
510 #ifndef CLIB_MARCH_VARIANT 515 u8 * p_dont_translate,
void *d,
void *e)
517 icmp46_header_t *icmp;
521 snat_session_t *s = 0;
522 u8 dont_translate = 0;
545 if (clib_bihash_search_16_8 (&tsm->
in2out_ed, &kv, &value))
569 ip, SNAT_PROTOCOL_ICMP,
580 b->
error = node->
errors[NAT_IN2OUT_ED_ERROR_BAD_ICMP_TYPE];
585 next =
slow_path_ed (sm, b, rx_fib_index, &kv, &s, node, next,
600 icmp->type != ICMP4_echo_reply &&
603 b->
error = node->
errors[NAT_IN2OUT_ED_ERROR_BAD_ICMP_TYPE];
614 *p_value = s->out2in;
615 *p_dont_translate = dont_translate;
617 *(snat_session_t **) d = s;
622 static snat_session_t *
634 u32 old_addr, new_addr = 0;
639 u32 elt_index, head_index, ses_index;
671 outside_fib_index = outside_fib->
fib_index;
684 if (!clib_bihash_search_16_8 (&tsm->
in2out_ed, &s_kv, &s_value))
693 b->
error = node->
errors[NAT_IN2OUT_ED_ERROR_MAX_SESSIONS_EXCEEDED];
723 elt_index = head->
next;
729 ses_index = elt->
value;
732 while (ses_index != ~0)
735 elt_index = elt->
next;
737 ses_index = elt->
value;
744 ip->
protocol, outside_fib_index, 0, 0);
745 if (clib_bihash_search_16_8
756 ip->
protocol, outside_fib_index, 0, 0);
757 if (clib_bihash_search_16_8 (&tsm->
out2in_ed, &s_kv, &s_value))
779 s->out2in.addr.as_u32 = new_addr;
780 s->out2in.fib_index = outside_fib_index;
781 s->in2out.addr.as_u32 = old_addr;
782 s->in2out.fib_index = rx_fib_index;
783 s->in2out.port = s->out2in.port = ip->
protocol;
792 if (clib_bihash_add_del_16_8 (&tsm->
in2out_ed, &s_kv, 1))
796 outside_fib_index, 0, 0);
798 if (clib_bihash_add_del_16_8 (&tsm->
out2in_ed, &s_kv, 1))
827 int is_output_feature)
829 u32 n_left_from, *from, *to_next, pkts_processed = 0, stats_node_index;
835 u32 tcp_packets = 0, udp_packets = 0, icmp_packets = 0, other_packets =
836 0, fragments = 0, def_slow, def_reass;
851 while (n_left_from > 0)
857 while (n_left_from >= 4 && n_left_to_next >= 2)
861 u32 next0, sw_if_index0, rx_fib_index0, iph_offset0 = 0, proto0,
862 new_addr0, old_addr0;
863 u32 next1, sw_if_index1, rx_fib_index1, iph_offset1 = 0, proto1,
864 new_addr1, old_addr1;
865 u16 old_port0, new_port0, old_port1, new_port1;
869 icmp46_header_t *icmp0, *icmp1;
870 snat_session_t *s0 = 0, *s1 = 0;
889 to_next[0] = bi0 = from[0];
890 to_next[1] = bi1 = from[1];
899 if (is_output_feature)
909 iph_offset0 =
vnet_buffer (b0)->ip.save_rewrite_length;
910 iph_offset1 =
vnet_buffer (b1)->ip.save_rewrite_length;
928 ICMP4_time_exceeded_ttl_exceeded_in_transit,
936 icmp0 = (icmp46_header_t *) udp0;
945 thread_index, now, vm,
956 (sm, b0, ip0, icmp0, sw_if_index0, rx_fib_index0, node,
957 next0, now, thread_index, &s0);
977 if (is_output_feature)
981 (sm, ip0, thread_index, now, vm, b0)))
996 if (clib_bihash_search_16_8 (&tsm->
in2out_ed, &kv0, &value0))
1000 if (is_output_feature)
1005 udp0->
dst_port, thread_index, sw_if_index0,
1021 next0, thread_index, now, tcp0);
1040 b0->
flags |= VNET_BUFFER_F_IS_NATED;
1042 if (!is_output_feature)
1057 new_port0 = udp0->
src_port = s0->out2in.port;
1061 sum0 = tcp0->checksum;
1069 s0->ext_host_addr.as_u32,
1074 tcp0->dst_port = s0->ext_host_port;
1081 (sm, s0, tcp0, thread_index))
1094 s0->ext_host_addr.as_u32,
1099 udp0->
dst_port = s0->ext_host_port;
1109 udp0->
dst_port = s0->ext_host_port;
1125 && (b0->
flags & VLIB_BUFFER_IS_TRACED)))
1151 ICMP4_time_exceeded_ttl_exceeded_in_transit,
1159 icmp1 = (icmp46_header_t *) udp1;
1168 thread_index, now, vm,
1179 (sm, b1, ip1, icmp1, sw_if_index1, rx_fib_index1, node,
1180 next1, now, thread_index, &s1);
1200 if (is_output_feature)
1204 (sm, ip1, thread_index, now, vm, b1)))
1219 if (clib_bihash_search_16_8 (&tsm->
in2out_ed, &kv1, &value1))
1223 if (is_output_feature)
1228 udp1->
dst_port, thread_index, sw_if_index1,
1244 next1, thread_index, now, tcp1);
1263 b1->
flags |= VNET_BUFFER_F_IS_NATED;
1265 if (!is_output_feature)
1280 new_port1 = udp1->
src_port = s1->out2in.port;
1284 sum1 = tcp1->checksum;
1292 s1->ext_host_addr.as_u32,
1297 tcp1->dst_port = s1->ext_host_port;
1304 (sm, s1, tcp1, thread_index))
1318 s1->ext_host_addr.as_u32,
1323 udp1->
dst_port = s1->ext_host_port;
1333 udp1->
dst_port = s1->ext_host_port;
1348 && (b1->
flags & VLIB_BUFFER_IS_TRACED)))
1365 to_next, n_left_to_next,
1366 bi0, bi1, next0, next1);
1369 while (n_left_from > 0 && n_left_to_next > 0)
1373 u32 next0, sw_if_index0, rx_fib_index0, iph_offset0 = 0, proto0,
1374 new_addr0, old_addr0;
1375 u16 old_port0, new_port0;
1379 icmp46_header_t *icmp0;
1380 snat_session_t *s0 = 0;
1390 n_left_to_next -= 1;
1394 if (is_output_feature)
1401 iph_offset0 =
vnet_buffer (b0)->ip.save_rewrite_length;
1418 ICMP4_time_exceeded_ttl_exceeded_in_transit,
1426 icmp0 = (icmp46_header_t *) udp0;
1435 thread_index, now, vm,
1446 (sm, b0, ip0, icmp0, sw_if_index0, rx_fib_index0, node,
1447 next0, now, thread_index, &s0);
1467 if (is_output_feature)
1471 (sm, ip0, thread_index, now, vm, b0)))
1486 if (clib_bihash_search_16_8 (&tsm->
in2out_ed, &kv0, &value0))
1490 if (is_output_feature)
1495 udp0->
dst_port, thread_index, sw_if_index0,
1511 next0, thread_index, now, tcp0);
1530 b0->
flags |= VNET_BUFFER_F_IS_NATED;
1532 if (!is_output_feature)
1547 new_port0 = udp0->
src_port = s0->out2in.port;
1551 sum0 = tcp0->checksum;
1559 s0->ext_host_addr.as_u32,
1564 tcp0->dst_port = s0->ext_host_port;
1571 (sm, s0, tcp0, thread_index))
1584 s0->ext_host_addr.as_u32,
1589 udp0->
dst_port = s0->ext_host_port;
1599 udp0->
dst_port = s0->ext_host_port;
1614 && (b0->
flags & VLIB_BUFFER_IS_TRACED)))
1630 to_next, n_left_to_next,
1638 NAT_IN2OUT_ED_ERROR_IN2OUT_PACKETS,
1641 NAT_IN2OUT_ED_ERROR_TCP_PACKETS, tcp_packets);
1643 NAT_IN2OUT_ED_ERROR_UDP_PACKETS, udp_packets);
1645 NAT_IN2OUT_ED_ERROR_ICMP_PACKETS,
1648 NAT_IN2OUT_ED_ERROR_OTHER_PACKETS,
1651 NAT_IN2OUT_ED_ERROR_FRAGMENTS, fragments);
1660 int is_output_feature)
1662 u32 n_left_from, *from, *to_next;
1664 u32 pkts_processed = 0, cached_fragments = 0;
1670 u32 *fragments_to_drop = 0;
1671 u32 *fragments_to_loopback = 0;
1677 while (n_left_from > 0)
1683 while (n_left_from > 0 && n_left_to_next > 0)
1685 u32 bi0, sw_if_index0, proto0, rx_fib_index0, new_addr0, old_addr0;
1686 u32 iph_offset0 = 0;
1691 nat_reass_ip4_t *reass0;
1694 icmp46_header_t *icmp0;
1696 snat_session_t *s0 = 0;
1697 u16 old_port0, new_port0;
1706 n_left_to_next -= 1;
1720 b0->
error = node->
errors[NAT_IN2OUT_ED_ERROR_DROP_FRAGMENT];
1724 if (is_output_feature)
1725 iph_offset0 =
vnet_buffer (b0)->ip.save_rewrite_length;
1732 icmp0 = (icmp46_header_t *) udp0;
1739 1, &fragments_to_drop);
1744 b0->
error = node->
errors[NAT_IN2OUT_ED_ERROR_MAX_REASS];
1753 if (is_output_feature)
1757 (sm, ip0, thread_index, now, vm, b0)))
1763 (sm, b0, ip0, icmp0, sw_if_index0, rx_fib_index0, node,
1764 next0, now, thread_index, &s0);
1769 reass0->sess_index = s0 - per_thread_data->
sessions;
1773 &fragments_to_loopback);
1783 if (clib_bihash_search_16_8
1784 (&per_thread_data->
in2out_ed, &kv0, &value0))
1786 if (is_output_feature)
1791 udp0->
dst_port, thread_index, sw_if_index0,
1796 &fragments_to_loopback);
1810 &fragments_to_loopback);
1816 &s0, node, next0, thread_index, now,
1828 reass0->sess_index = s0 - per_thread_data->
sessions;
1834 reass0->sess_index = value0.
value;
1845 (thread_index, reass0, bi0, &fragments_to_drop))
1847 b0->
error = node->
errors[NAT_IN2OUT_ED_ERROR_MAX_FRAG];
1849 (
"maximum fragments per reassembly exceeded");
1857 reass0->sess_index);
1863 if (!is_output_feature)
1879 new_port0 = udp0->
src_port = s0->out2in.port;
1883 sum0 = tcp0->checksum;
1893 s0->ext_host_addr.as_u32,
1898 tcp0->dst_port = s0->ext_host_port;
1915 s0->ext_host_addr.as_u32,
1920 udp0->
dst_port = s0->ext_host_port;
1929 udp0->
dst_port = s0->ext_host_port;
1937 s0->ext_host_port, proto0, 1);
1948 && (b0->
flags & VLIB_BUFFER_IS_TRACED)))
1969 to_next, n_left_to_next,
1973 if (n_left_from == 0 &&
vec_len (fragments_to_loopback))
1980 sizeof (
u32) * len);
1999 NAT_IN2OUT_ED_ERROR_PROCESSED_FRAGMENTS,
2002 NAT_IN2OUT_ED_ERROR_CACHED_FRAGMENTS,
2006 &node->
errors[NAT_IN2OUT_ED_ERROR_DROP_FRAGMENT],
2023 .name =
"nat44-ed-in2out",
2024 .vector_size =
sizeof (
u32),
2025 .sibling_of =
"nat-default",
2043 .name =
"nat44-ed-in2out-output",
2044 .vector_size =
sizeof (
u32),
2045 .sibling_of =
"nat-default",
2063 .name =
"nat44-ed-in2out-slowpath",
2064 .vector_size =
sizeof (
u32),
2065 .sibling_of =
"nat-default",
2084 .name =
"nat44-ed-in2out-output-slowpath",
2085 .vector_size =
sizeof (
u32),
2086 .sibling_of =
"nat-default",
2105 .name =
"nat44-ed-in2out-reass",
2106 .vector_size =
sizeof (
u32),
2107 .sibling_of =
"nat-default",
2124 .name =
"nat44-ed-in2out-reass-output",
2125 .vector_size =
sizeof (
u32),
2126 .sibling_of =
"nat-default",
2153 .name =
"nat-pre-in2out",
2154 .vector_size =
sizeof (
u32),
2155 .sibling_of =
"nat-default",
ip4_address_t external_addr
u32 flags
buffer flags: VLIB_BUFFER_FREE_LIST_INDEX_MASK: bits used to store free list index, VLIB_BUFFER_IS_TRACED: trace this buffer.
fib_protocol_t fp_proto
protocol type
nat_outside_fib_t * outside_fibs
#define nat_buffer_opaque(b)
#define snat_is_session_static(s)
Check if SNAT session is created from static mapping.
u32 sessions_per_user_list_head_index
vlib_node_registration_t nat44_ed_in2out_output_node
(constructor) VLIB_REGISTER_NODE (nat44_ed_in2out_output_node)
static uword nat44_ed_in2out_node_fn_inline(vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame, int is_slow_path, int is_output_feature)
int nat_ip4_reass_add_fragment(u32 thread_index, nat_reass_ip4_t *reass, u32 bi, u32 **bi_to_drop)
Cache fragment.
static u32 nat44_session_get_timeout(snat_main_t *sm, snat_session_t *s)
#define nat_elog_notice(nat_elog_str)
static_always_inline int get_icmp_i2o_ed_key(ip4_header_t *ip0, nat_ed_ses_key_t *p_key0)
static_always_inline u8 icmp_is_error_message(icmp46_header_t *icmp)
#define clib_memcpy_fast(a, b, c)
static f64 vlib_time_now(vlib_main_t *vm)
u32 fib_table_get_index_for_sw_if_index(fib_protocol_t proto, u32 sw_if_index)
Get the index of the FIB bound to the interface.
static void make_sm_kv(clib_bihash_kv_8_8_t *kv, ip4_address_t *addr, u8 proto, u32 fib_index, u16 port)
void nat_free_session_data(snat_main_t *sm, snat_session_t *s, u32 thread_index, u8 is_ha)
Free NAT44 session data (lookup keys, external addrres port)
u32 ed_in2out_reass_node_index
#define foreach_nat_in2out_ed_error
void nat_syslog_nat44_sdel(u32 ssubix, u32 sfibix, ip4_address_t *isaddr, u16 isport, ip4_address_t *idaddr, u16 idport, ip4_address_t *xsaddr, u16 xsport, ip4_address_t *xdaddr, u16 xdport, snat_protocol_t proto, u8 is_twicenat)
#define nat_elog_warn(nat_elog_str)
void nat_ha_sadd(ip4_address_t *in_addr, u16 in_port, ip4_address_t *out_addr, u16 out_port, ip4_address_t *eh_addr, u16 eh_port, ip4_address_t *ehn_addr, u16 ehn_port, u8 proto, u32 fib_index, u16 flags, u32 thread_index, u8 is_resync)
Create session add HA event.
#define nat44_is_ses_closed(s)
Check if NAT44 endpoint-dependent TCP session is closed.
#define VLIB_NODE_FN(node)
static_always_inline int nat44_ed_not_translate(snat_main_t *sm, vlib_node_runtime_t *node, u32 sw_if_index, ip4_header_t *ip, u32 proto, u32 rx_fib_index, u32 thread_index)
vlib_error_t * errors
Vector of errors for this node.
static uword vlib_buffer_length_in_chain(vlib_main_t *vm, vlib_buffer_t *b)
Get length in bytes of the buffer chain.
struct _tcp_header tcp_header_t
#define snat_is_unk_proto_session(s)
Check if SNAT session for unknown protocol.
static snat_session_t * nat44_ed_in2out_unknown_proto(snat_main_t *sm, vlib_buffer_t *b, ip4_header_t *ip, u32 rx_fib_index, u32 thread_index, f64 now, vlib_main_t *vm, vlib_node_runtime_t *node)
#define vec_reset_length(v)
Reset vector length to zero NULL-pointer tolerant.
static int ip4_is_fragment(const ip4_header_t *i)
static int snat_not_translate_fast(snat_main_t *sm, vlib_node_runtime_t *node, u32 sw_if_index0, ip4_header_t *ip0, u32 proto0, u32 rx_fib_index0)
Check if packet should be translated.
u32 ip4_fib_table_get_index_for_sw_if_index(u32 sw_if_index)
#define tcp_is_init(t)
Check if client initiating TCP connection (received SYN from client)
#define static_always_inline
#define pool_foreach(VAR, POOL, BODY)
Iterate through pool.
vl_api_interface_index_t sw_if_index
#define vlib_prefetch_buffer_header(b, type)
Prefetch buffer metadata.
#define SNAT_SESSION_FLAG_OUTPUT_FEATURE
#define vec_elt_at_index(v, i)
Get vector value at index i checking that i is in bounds.
Aggregate type for a prefix.
u32 icmp_in2out(snat_main_t *sm, vlib_buffer_t *b0, ip4_header_t *ip0, icmp46_header_t *icmp0, u32 sw_if_index0, u32 rx_fib_index0, vlib_node_runtime_t *node, u32 next0, u32 thread_index, void *d, void *e)
#define is_fwd_bypass_session(s)
Check if NAT session is forwarding bypass.
#define NAT_REASS_FLAG_ED_DONT_TRANSLATE
static void * ip4_next_header(ip4_header_t *i)
void nat_ipfix_logging_max_sessions(u32 thread_index, u32 limit)
Generate maximum session entries exceeded event.
fib_node_index_t fib_table_lookup(u32 fib_index, const fib_prefix_t *prefix)
Perfom a longest prefix match in the non-forwarding table.
static u8 maximum_sessions_exceeded(snat_main_t *sm, u32 thread_index)
int snat_static_mapping_match(snat_main_t *sm, snat_session_key_t match, snat_session_key_t *mapping, u8 by_external, u8 *is_addr_only, twice_nat_type_t *twice_nat, lb_nat_type_t *lb, ip4_address_t *ext_host_addr, u8 *is_identity_nat)
Match NAT44 static mapping.
void snat_free_outside_address_and_port(snat_address_t *addresses, u32 thread_index, snat_session_key_t *k)
Free outside address and port pair.
static void nat44_delete_session(snat_main_t *sm, snat_session_t *ses, u32 thread_index)
vl_api_fib_path_type_t type
vlib_error_t error
Error code for buffers to be enqueued to error handler.
static void mss_clamping(snat_main_t *sm, tcp_header_t *tcp, ip_csum_t *sum)
int snat_alloc_outside_address_and_port(snat_address_t *addresses, u32 fib_index, u32 thread_index, snat_session_key_t *k, u16 port_per_thread, u32 snat_thread_index)
Alloc outside address and port.
snat_user_t * nat_user_get_or_create(snat_main_t *sm, ip4_address_t *addr, u32 fib_index, u32 thread_index)
Find or create NAT user.
#define pool_elt_at_index(p, i)
Returns pointer to element at given index.
clib_bihash_16_8_t out2in_ed
vlib_node_registration_t nat44_ed_in2out_slowpath_node
(constructor) VLIB_REGISTER_NODE (nat44_ed_in2out_slowpath_node)
snat_session_t * nat_ed_session_alloc(snat_main_t *sm, snat_user_t *u, u32 thread_index, f64 now)
Allocate NAT endpoint-dependent session.
snat_static_mapping_t * static_mappings
static void * vlib_buffer_get_current(vlib_buffer_t *b)
Get pointer to current data to process.
void nat_syslog_nat44_sadd(u32 ssubix, u32 sfibix, ip4_address_t *isaddr, u16 isport, ip4_address_t *idaddr, u16 idport, ip4_address_t *xsaddr, u16 xsport, ip4_address_t *xdaddr, u16 xdport, snat_protocol_t proto, u8 is_twicenat)
vl_api_address_union_t src_address
#define vlib_validate_buffer_enqueue_x2(vm, node, next_index, to_next, n_left_to_next, bi0, bi1, next0, next1)
Finish enqueueing two buffers forward in the graph.
#define SNAT_SESSION_FLAG_UNKNOWN_PROTO
#define vlib_validate_buffer_enqueue_x1(vm, node, next_index, to_next, n_left_to_next, bi0, next0)
Finish enqueueing one buffer forward in the graph.
#define vlib_get_next_frame(vm, node, next_index, vectors, n_vectors_left)
Get pointer to next frame vector data by (vlib_node_runtime_t, next_index).
static u8 * format_nat_pre_trace(u8 *s, va_list *args)
static void vlib_node_increment_counter(vlib_main_t *vm, u32 node_index, u32 counter_index, u64 increment)
u32 fib_entry_get_resolving_interface(fib_node_index_t entry_index)
static u8 * format_nat_in2out_ed_trace(u8 *s, va_list *args)
snat_interface_t * output_feature_interfaces
void snat_ipfix_logging_nat44_ses_delete(u32 thread_index, u32 src_ip, u32 nat_src_ip, snat_protocol_t snat_proto, u16 src_port, u16 nat_src_port, u32 vrf_id)
Generate NAT44 session delete event.
vlib_node_registration_t nat_pre_in2out_node
(constructor) VLIB_REGISTER_NODE (nat_pre_in2out_node)
static void nat44_delete_user_with_no_session(snat_main_t *sm, snat_user_t *u, u32 thread_index)
#define VLIB_REGISTER_NODE(x,...)
static u8 snat_proto_to_ip_proto(snat_protocol_t snat_proto)
u8 nat_reass_is_drop_frag(u8 is_ip6)
Get status of virtual fragmentation reassembly.
#define CLIB_PREFETCH(addr, size, type)
int nat44_o2i_ed_is_idle_session_cb(clib_bihash_kv_16_8_t *kv, void *arg)
vlib_node_registration_t nat44_ed_in2out_output_slowpath_node
(constructor) VLIB_REGISTER_NODE (nat44_ed_in2out_output_slowpath_node)
#define vec_free(V)
Free vector's memory (no header).
static_always_inline void vnet_feature_next(u32 *next0, vlib_buffer_t *b0)
static void nat44_session_update_counters(snat_session_t *s, f64 now, uword bytes, u32 thread_index)
u32 ed_in2out_slowpath_node_index
vlib_node_registration_t nat44_ed_in2out_reass_node
(constructor) VLIB_REGISTER_NODE (nat44_ed_in2out_reass_node)
u32 fib_node_index_t
A typedef of a node index.
8 octet key, 8 octet key value pair
void vlib_put_next_frame(vlib_main_t *vm, vlib_node_runtime_t *r, u32 next_index, u32 n_vectors_left)
Release pointer to next frame vector data.
static_always_inline int nat_not_translate_output_feature_fwd(snat_main_t *sm, ip4_header_t *ip, u32 thread_index, f64 now, vlib_main_t *vm, vlib_buffer_t *b)
static uword nat_pre_node_fn_inline(vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame, u32 def_next)
The NAT inline functions.
static void make_ed_kv(clib_bihash_kv_16_8_t *kv, ip4_address_t *l_addr, ip4_address_t *r_addr, u8 proto, u32 fib_index, u16 l_port, u16 r_port)
static int nat44_set_tcp_session_state_i2o(snat_main_t *sm, snat_session_t *ses, tcp_header_t *tcp, u32 thread_index)
Set TCP session state.
u16 cached_next_index
Next frame index that vector arguments were last enqueued to last time this node ran.
static uword nat44_ed_in2out_reass_node_fn_inline(vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame, int is_output_feature)
static void nat44_session_update_lru(snat_main_t *sm, snat_session_t *s, u32 thread_index)
Per-user LRU list maintenance.
#define SNAT_SESSION_FLAG_ENDPOINT_DEPENDENT
static u32 icmp_in2out_ed_slow_path(snat_main_t *sm, vlib_buffer_t *b0, ip4_header_t *ip0, icmp46_header_t *icmp0, u32 sw_if_index0, u32 rx_fib_index0, vlib_node_runtime_t *node, u32 next0, f64 now, u32 thread_index, snat_session_t **p_s0)
vlib_node_registration_t nat44_ed_in2out_node
(constructor) VLIB_REGISTER_NODE (nat44_ed_in2out_node)
snat_address_t * twice_nat_addresses
void nat_ha_sdel(ip4_address_t *out_addr, u16 out_port, ip4_address_t *eh_addr, u16 eh_port, u8 proto, u32 fib_index, u32 thread_index)
Create session delete HA event.
static void * vlib_add_trace(vlib_main_t *vm, vlib_node_runtime_t *r, vlib_buffer_t *b, u32 n_data_bytes)
format_function_t format_nat44_reass_trace
static int ip4_is_first_fragment(const ip4_header_t *i)
static u32 ip_proto_to_snat_proto(u8 ip_proto)
#define FIB_NODE_INDEX_INVALID
int nat44_i2o_ed_is_idle_session_cb(clib_bihash_kv_16_8_t *kv, void *arg)
static void user_session_increment(snat_main_t *sm, snat_user_t *u, u8 is_static)
#define vec_len(v)
Number of elements in vector (rvalue-only, NULL tolerant)
VLIB buffer representation.
snat_main_per_thread_data_t * per_thread_data
static void * vlib_frame_vector_args(vlib_frame_t *f)
Get pointer to frame vector data.
#define ip_csum_update(sum, old, new, type, field)
nat_reass_ip4_t * nat_ip4_reass_find_or_create(ip4_address_t src, ip4_address_t dst, u16 frag_id, u8 proto, u8 reset_timeout, u32 **bi_to_drop)
Find or create reassembly.
snat_address_t * addresses
#define SNAT_SESSION_FLAG_STATIC_MAPPING
void nat44_ed_hairpinning_unknown_proto(snat_main_t *sm, vlib_buffer_t *b, ip4_header_t *ip)
#define vec_foreach(var, vec)
Vector iterator.
u32 icmp_match_in2out_ed(snat_main_t *sm, vlib_node_runtime_t *node, u32 thread_index, vlib_buffer_t *b, ip4_header_t *ip, u8 *p_proto, snat_session_key_t *p_value, u8 *p_dont_translate, void *d, void *e)
u16 flags
Copy of main node flags.
static void nat_send_all_to_node(vlib_main_t *vm, u32 *bi_vector, vlib_node_runtime_t *node, vlib_error_t *error, u32 next)
#define is_twice_nat_session(s)
Check if NAT session is twice NAT.
clib_bihash_16_8_t in2out_ed
void nat_ip4_reass_get_frags(nat_reass_ip4_t *reass, u32 **bi)
Get cached fragments.
NAT plugin virtual fragmentation reassembly.
#define VLIB_NODE_FLAG_TRACE
#define CLIB_CACHE_LINE_BYTES
snat_session_t * sessions
static_always_inline void icmp4_error_set_vnet_buffer(vlib_buffer_t *b, u8 type, u8 code, u32 data)
static vlib_buffer_t * vlib_get_buffer(vlib_main_t *vm, u32 buffer_index)
Translate buffer index into buffer pointer.
static char * nat_in2out_ed_error_strings[]
#define SNAT_SESSION_FLAG_LOAD_BALANCING
clib_bihash_8_8_t static_mapping_by_local
vlib_node_registration_t nat44_ed_in2out_reass_output_node
(constructor) VLIB_REGISTER_NODE (nat44_ed_in2out_reass_output_node)
static u16 ip_csum_fold(ip_csum_t c)
void nat44_reass_hairpinning(snat_main_t *sm, vlib_buffer_t *b0, ip4_header_t *ip0, u16 sport, u16 dport, u32 proto0, int is_ed)
static u32 slow_path_ed(snat_main_t *sm, vlib_buffer_t *b, u32 rx_fib_index, clib_bihash_kv_16_8_t *kv, snat_session_t **sessionp, vlib_node_runtime_t *node, u32 next, u32 thread_index, f64 now, tcp_header_t *tcp)
vl_api_fib_path_nh_proto_t proto
void snat_ipfix_logging_nat44_ses_create(u32 thread_index, u32 src_ip, u32 nat_src_ip, snat_protocol_t snat_proto, u16 src_port, u16 nat_src_port, u32 vrf_id)
Generate NAT44 session create event.
static_always_inline int nat44_ed_not_translate_output_feature(snat_main_t *sm, ip4_header_t *ip, u8 proto, u16 src_port, u16 dst_port, u32 thread_index, u32 rx_sw_if_index, u32 tx_sw_if_index)