in2out.c File Reference

NAT44 inside to outside network translation. More...

Include dependency graph for in2out.c:

Go to the source code of this file.

Data Structures
struct	snat_in2out_trace_t

Macros
#define	foreach_snat_in2out_error

Enumerations
enum	snat_in2out_error_t { SNAT_IN2OUT_N_ERROR }
enum	snat_in2out_next_t {   SNAT_IN2OUT_NEXT_LOOKUP, SNAT_IN2OUT_NEXT_DROP, SNAT_IN2OUT_NEXT_ICMP_ERROR, SNAT_IN2OUT_NEXT_SLOW_PATH,   SNAT_IN2OUT_N_NEXT }

Functions
static u8 *	format_snat_in2out_trace (u8 *s, va_list *args)
static u8 *	format_snat_in2out_fast_trace (u8 *s, va_list *args)
static int	snat_not_translate (snat_main_t *sm, vlib_node_runtime_t *node, u32 sw_if_index0, ip4_header_t *ip0, u32 proto0, u32 rx_fib_index0, u32 thread_index)
static int	nat_not_translate_output_feature (snat_main_t *sm, ip4_header_t *ip0, u32 proto0, u16 src_port, u16 dst_port, u32 thread_index, u32 sw_if_index)
int	nat44_i2o_is_idle_session_cb (clib_bihash_kv_8_8_t *kv, void *arg)
static u32	slow_path (snat_main_t *sm, vlib_buffer_t *b0, ip4_header_t *ip0, u32 rx_fib_index0, snat_session_key_t *key0, snat_session_t **sessionp, vlib_node_runtime_t *node, u32 next0, u32 thread_index, f64 now)
static_always_inline snat_in2out_error_t	icmp_get_key (vlib_buffer_t *b, ip4_header_t *ip0, snat_session_key_t *p_key0)
u32	icmp_match_in2out_slow (snat_main_t *sm, vlib_node_runtime_t *node, u32 thread_index, vlib_buffer_t *b0, ip4_header_t *ip0, u8 *p_proto, snat_session_key_t *p_value, u8 *p_dont_translate, void *d, void *e)
	Get address and port values to be used for ICMP packet translation and create session if needed. More...
u32	icmp_match_in2out_fast (snat_main_t *sm, vlib_node_runtime_t *node, u32 thread_index, vlib_buffer_t *b0, ip4_header_t *ip0, u8 *p_proto, snat_session_key_t *p_value, u8 *p_dont_translate, void *d, void *e)
	Get address and port values to be used for ICMP packet translation. More...
u32	icmp_in2out (snat_main_t *sm, vlib_buffer_t *b0, ip4_header_t *ip0, icmp46_header_t *icmp0, u32 sw_if_index0, u32 rx_fib_index0, vlib_node_runtime_t *node, u32 next0, u32 thread_index, void *d, void *e)
static u32	icmp_in2out_slow_path (snat_main_t *sm, vlib_buffer_t *b0, ip4_header_t *ip0, icmp46_header_t *icmp0, u32 sw_if_index0, u32 rx_fib_index0, vlib_node_runtime_t *node, u32 next0, f64 now, u32 thread_index, snat_session_t **p_s0)
static int	nat_in2out_sm_unknown_proto (snat_main_t *sm, vlib_buffer_t *b, ip4_header_t *ip, u32 rx_fib_index)
static uword	snat_in2out_node_fn_inline (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame, int is_slow_path, int is_output_feature)
VLIB_NODE_FN()	snat_in2out_node (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
VLIB_NODE_FN()	snat_in2out_output_node (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
VLIB_NODE_FN()	snat_in2out_slowpath_node (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
VLIB_NODE_FN()	snat_in2out_output_slowpath_node (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
VLIB_NODE_FN()	snat_in2out_fast_node (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)

Variables
static char *	snat_in2out_error_strings []
vlib_node_registration_t	snat_in2out_node
	(constructor) VLIB_REGISTER_NODE (snat_in2out_node) More...
vlib_node_registration_t	snat_in2out_output_node
	(constructor) VLIB_REGISTER_NODE (snat_in2out_output_node) More...
vlib_node_registration_t	snat_in2out_slowpath_node
	(constructor) VLIB_REGISTER_NODE (snat_in2out_slowpath_node) More...
vlib_node_registration_t	snat_in2out_output_slowpath_node
	(constructor) VLIB_REGISTER_NODE (snat_in2out_output_slowpath_node) More...
vlib_node_registration_t	snat_in2out_fast_node
	(constructor) VLIB_REGISTER_NODE (snat_in2out_fast_node) More...

Detailed Description

NAT44 inside to outside network translation.

Definition in file in2out.c.

Macro Definition Documentation

foreach_snat_in2out_error

#define foreach_snat_in2out_error

Value:

_(UNSUPPORTED_PROTOCOL, "unsupported protocol")         \
_(IN2OUT_PACKETS, "good in2out packets processed")      \
_(OUT_OF_PORTS, "out of ports")                         \
_(BAD_OUTSIDE_FIB, "outside VRF ID not found")          \
_(BAD_ICMP_TYPE, "unsupported ICMP type")               \
_(NO_TRANSLATION, "no translation")                     \
_(MAX_SESSIONS_EXCEEDED, "maximum sessions exceeded")   \
_(DROP_FRAGMENT, "drop fragment")                       \
_(TCP_PACKETS, "TCP packets")                           \
_(UDP_PACKETS, "UDP packets")                           \
_(ICMP_PACKETS, "ICMP packets")                         \
_(OTHER_PACKETS, "other protocol packets")              \
_(FRAGMENTS, "fragments")                               \
_(CACHED_FRAGMENTS, "cached fragments")                 \
_(PROCESSED_FRAGMENTS, "processed fragments")

Definition at line 77 of file in2out.c.

Enumeration Type Documentation

snat_in2out_error_t

enum snat_in2out_error_t

Enumerator
SNAT_IN2OUT_N_ERROR

Definition at line 94 of file in2out.c.

snat_in2out_next_t

enum snat_in2out_next_t

Enumerator
SNAT_IN2OUT_NEXT_LOOKUP
SNAT_IN2OUT_NEXT_DROP
SNAT_IN2OUT_NEXT_ICMP_ERROR
SNAT_IN2OUT_NEXT_SLOW_PATH
SNAT_IN2OUT_N_NEXT

Definition at line 108 of file in2out.c.

Function Documentation

format_snat_in2out_fast_trace()

static u8* format_snat_in2out_fast_trace ( u8 *  s, va_list *  args  )

static

Definition at line 65 of file in2out.c.

Here is the call graph for this function:

format_snat_in2out_trace()

static u8* format_snat_in2out_trace ( u8 *  s, va_list *  args  )

static

Definition at line 49 of file in2out.c.

Here is the call graph for this function:

icmp_get_key()

static_always_inline snat_in2out_error_t icmp_get_key	(	vlib_buffer_t *	b,
		ip4_header_t *	ip0,
		snat_session_key_t *	p_key0
	)

Definition at line 399 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

icmp_in2out()

u32 icmp_in2out	(	snat_main_t *	sm,
		vlib_buffer_t *	b0,
		ip4_header_t *	ip0,
		icmp46_header_t *	icmp0,
		u32	sw_if_index0,
		u32	rx_fib_index0,
		vlib_node_runtime_t *	node,
		u32	next0,
		u32	thread_index,
		void *	d,
		void *	e
	)

Definition at line 655 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

icmp_in2out_slow_path()

static u32 icmp_in2out_slow_path ( snat_main_t *  sm, vlib_buffer_t *  b0, ip4_header_t *  ip0, icmp46_header_t *  icmp0, u32  sw_if_index0, u32  rx_fib_index0, vlib_node_runtime_t *  node, u32  next0, f64  now, u32  thread_index, snat_session_t **  p_s0  )

inlinestatic

Definition at line 812 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

icmp_match_in2out_fast()

u32 icmp_match_in2out_fast	(	snat_main_t *	sm,
		vlib_node_runtime_t *	node,
		u32	thread_index,
		vlib_buffer_t *	b0,
		ip4_header_t *	ip0,
		u8 *	p_proto,
		snat_session_key_t *	p_value,
		u8 *	p_dont_translate,
		void *	d,
		void *	e
	)

Get address and port values to be used for ICMP packet translation.

Parameters

[in]	sm	NAT main
[in,out]	node	NAT node runtime
[in]	thread_index	thread index
[in,out]	b0	buffer containing packet to be translated
[out]	p_proto	protocol used for matching
[out]	p_value	address and port after NAT translation
[out]	p_dont_translate	if packet should not be translated
	d	optional parameter
	e	optional parameter

Definition at line 582 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

icmp_match_in2out_slow()

u32 icmp_match_in2out_slow	(	snat_main_t *	sm,
		vlib_node_runtime_t *	node,
		u32	thread_index,
		vlib_buffer_t *	b0,
		ip4_header_t *	ip0,
		u8 *	p_proto,
		snat_session_key_t *	p_value,
		u8 *	p_dont_translate,
		void *	d,
		void *	e
	)

Get address and port values to be used for ICMP packet translation and create session if needed.

Parameters

[in,out]	sm	NAT main
[in,out]	node	NAT node runtime
[in]	thread_index	thread index
[in,out]	b0	buffer containing packet to be translated
[out]	p_proto	protocol used for matching
[out]	p_value	address and port after NAT translation
[out]	p_dont_translate	if packet should not be translated
	d	optional parameter
	e	optional parameter

Definition at line 459 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

nat44_i2o_is_idle_session_cb()

int nat44_i2o_is_idle_session_cb	(	clib_bihash_kv_8_8_t *	kv,
		void *	arg
	)

Definition at line 195 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

nat_in2out_sm_unknown_proto()

static int nat_in2out_sm_unknown_proto ( snat_main_t *  sm, vlib_buffer_t *  b, ip4_header_t *  ip, u32  rx_fib_index  )

static

Definition at line 838 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

nat_not_translate_output_feature()

static int nat_not_translate_output_feature ( snat_main_t *  sm, ip4_header_t *  ip0, u32  proto0, u16  src_port, u16  dst_port, u32  thread_index, u32  sw_if_index  )

inlinestatic

Definition at line 152 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

slow_path()

static u32 slow_path ( snat_main_t *  sm, vlib_buffer_t *  b0, ip4_header_t *  ip0, u32  rx_fib_index0, snat_session_key_t *  key0, snat_session_t **  sessionp, vlib_node_runtime_t *  node, u32  next0, u32  thread_index, f64  now  )

static

Definition at line 243 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

snat_in2out_fast_node()

VLIB_NODE_FN() snat_in2out_fast_node	(	vlib_main_t *	vm,
		vlib_node_runtime_t *	node,
		vlib_frame_t *	frame
	)

Definition at line 1763 of file in2out.c.

Here is the call graph for this function:

snat_in2out_node()

VLIB_NODE_FN() snat_in2out_node	(	vlib_main_t *	vm,
		vlib_node_runtime_t *	node,
		vlib_frame_t *	frame
	)

Definition at line 1635 of file in2out.c.

Here is the call graph for this function:

snat_in2out_node_fn_inline()

static uword snat_in2out_node_fn_inline ( vlib_main_t *  vm, vlib_node_runtime_t *  node, vlib_frame_t *  frame, int  is_slow_path, int  is_output_feature  )

inlinestatic

Definition at line 876 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

snat_in2out_output_node()

VLIB_NODE_FN() snat_in2out_output_node	(	vlib_main_t *	vm,
		vlib_node_runtime_t *	node,
		vlib_frame_t *	frame
	)

Definition at line 1667 of file in2out.c.

Here is the call graph for this function:

snat_in2out_output_slowpath_node()

VLIB_NODE_FN() snat_in2out_output_slowpath_node	(	vlib_main_t *	vm,
		vlib_node_runtime_t *	node,
		vlib_frame_t *	frame
	)

Definition at line 1731 of file in2out.c.

Here is the call graph for this function:

snat_in2out_slowpath_node()

VLIB_NODE_FN() snat_in2out_slowpath_node	(	vlib_main_t *	vm,
		vlib_node_runtime_t *	node,
		vlib_frame_t *	frame
	)

Definition at line 1699 of file in2out.c.

Here is the call graph for this function:

snat_not_translate()

static int snat_not_translate ( snat_main_t *  sm, vlib_node_runtime_t *  node, u32  sw_if_index0, ip4_header_t *  ip0, u32  proto0, u32  rx_fib_index0, u32  thread_index  )

inlinestatic

Definition at line 118 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

Variable Documentation

snat_in2out_error_strings

char* snat_in2out_error_strings[]

static

Initial value:

= {
#define _(sym,string) 
  foreach_snat_in2out_error

}

Definition at line 102 of file in2out.c.

snat_in2out_fast_node

vlib_node_registration_t snat_in2out_fast_node

Initial value:

= {
  .name = "nat44-in2out-fast",
  .vector_size = sizeof (u32),
  .format_trace = format_snat_in2out_fast_trace,
  .type = VLIB_NODE_TYPE_INTERNAL,

  .n_errors = ARRAY_LEN(snat_in2out_error_strings),
  .error_strings = snat_in2out_error_strings,

  .runtime_data_bytes = sizeof (snat_runtime_t),

  .n_next_nodes = SNAT_IN2OUT_N_NEXT,

  
  .next_nodes = {
    [SNAT_IN2OUT_NEXT_DROP] = "error-drop",
    [SNAT_IN2OUT_NEXT_LOOKUP] = "ip4-lookup",
    [SNAT_IN2OUT_NEXT_SLOW_PATH] = "nat44-in2out-slowpath",
    [SNAT_IN2OUT_NEXT_ICMP_ERROR] = "ip4-icmp-error",
  },
}

(constructor) VLIB_REGISTER_NODE (snat_in2out_fast_node)

Definition at line 1950 of file in2out.c.

snat_in2out_node

vlib_node_registration_t snat_in2out_node

Initial value:

= {
  .name = "nat44-in2out",
  .vector_size = sizeof (u32),
  .format_trace = format_snat_in2out_trace,
  .type = VLIB_NODE_TYPE_INTERNAL,

  .n_errors = ARRAY_LEN(snat_in2out_error_strings),
  .error_strings = snat_in2out_error_strings,

  .runtime_data_bytes = sizeof (snat_runtime_t),

  .n_next_nodes = SNAT_IN2OUT_N_NEXT,

  
  .next_nodes = {
    [SNAT_IN2OUT_NEXT_DROP] = "error-drop",
    [SNAT_IN2OUT_NEXT_LOOKUP] = "ip4-lookup",
    [SNAT_IN2OUT_NEXT_SLOW_PATH] = "nat44-in2out-slowpath",
    [SNAT_IN2OUT_NEXT_ICMP_ERROR] = "ip4-icmp-error",
  },
}

(constructor) VLIB_REGISTER_NODE (snat_in2out_node)

Definition at line 1644 of file in2out.c.

snat_in2out_output_node

vlib_node_registration_t snat_in2out_output_node

Initial value:

= {
  .name = "nat44-in2out-output",
  .vector_size = sizeof (u32),
  .format_trace = format_snat_in2out_trace,
  .type = VLIB_NODE_TYPE_INTERNAL,

  .n_errors = ARRAY_LEN(snat_in2out_error_strings),
  .error_strings = snat_in2out_error_strings,

  .runtime_data_bytes = sizeof (snat_runtime_t),

  .n_next_nodes = SNAT_IN2OUT_N_NEXT,

  
  .next_nodes = {
    [SNAT_IN2OUT_NEXT_DROP] = "error-drop",
    [SNAT_IN2OUT_NEXT_LOOKUP] = "interface-output",
    [SNAT_IN2OUT_NEXT_SLOW_PATH] = "nat44-in2out-output-slowpath",
    [SNAT_IN2OUT_NEXT_ICMP_ERROR] = "ip4-icmp-error",
  },
}

(constructor) VLIB_REGISTER_NODE (snat_in2out_output_node)

Definition at line 1676 of file in2out.c.

snat_in2out_output_slowpath_node

vlib_node_registration_t snat_in2out_output_slowpath_node

Initial value:

= {
  .name = "nat44-in2out-output-slowpath",
  .vector_size = sizeof (u32),
  .format_trace = format_snat_in2out_trace,
  .type = VLIB_NODE_TYPE_INTERNAL,

  .n_errors = ARRAY_LEN(snat_in2out_error_strings),
  .error_strings = snat_in2out_error_strings,

  .runtime_data_bytes = sizeof (snat_runtime_t),

  .n_next_nodes = SNAT_IN2OUT_N_NEXT,

  
  .next_nodes = {
    [SNAT_IN2OUT_NEXT_DROP] = "error-drop",
    [SNAT_IN2OUT_NEXT_LOOKUP] = "interface-output",
    [SNAT_IN2OUT_NEXT_SLOW_PATH] = "nat44-in2out-output-slowpath",
    [SNAT_IN2OUT_NEXT_ICMP_ERROR] = "ip4-icmp-error",
  },
}

(constructor) VLIB_REGISTER_NODE (snat_in2out_output_slowpath_node)

Definition at line 1740 of file in2out.c.

snat_in2out_slowpath_node

vlib_node_registration_t snat_in2out_slowpath_node

Initial value:

= {
  .name = "nat44-in2out-slowpath",
  .vector_size = sizeof (u32),
  .format_trace = format_snat_in2out_trace,
  .type = VLIB_NODE_TYPE_INTERNAL,

  .n_errors = ARRAY_LEN(snat_in2out_error_strings),
  .error_strings = snat_in2out_error_strings,

  .runtime_data_bytes = sizeof (snat_runtime_t),

  .n_next_nodes = SNAT_IN2OUT_N_NEXT,

  
  .next_nodes = {
    [SNAT_IN2OUT_NEXT_DROP] = "error-drop",
    [SNAT_IN2OUT_NEXT_LOOKUP] = "ip4-lookup",
    [SNAT_IN2OUT_NEXT_SLOW_PATH] = "nat44-in2out-slowpath",
    [SNAT_IN2OUT_NEXT_ICMP_ERROR] = "ip4-icmp-error",
  },
}

(constructor) VLIB_REGISTER_NODE (snat_in2out_slowpath_node)

Definition at line 1708 of file in2out.c.