46 #define foreach_nat64_out2in_error \ 47 _(UNSUPPORTED_PROTOCOL, "unsupported protocol") \ 48 _(OUT2IN_PACKETS, "good out2in packets processed") \ 49 _(NO_TRANSLATION, "no translation") \ 50 _(UNKNOWN, "unknown") \ 51 _(DROP_FRAGMENT, "drop fragment") \ 52 _(TCP_PACKETS, "TCP packets") \ 53 _(UDP_PACKETS, "UDP packets") \ 54 _(ICMP_PACKETS, "ICMP packets") \ 55 _(OTHER_PACKETS, "other protocol packets") \ 56 _(FRAGMENTS, "fragments") \ 57 _(CACHED_FRAGMENTS, "cached fragments") \ 58 _(PROCESSED_FRAGMENTS, "processed fragments") 63 #define _(sym,str) NAT64_OUT2IN_ERROR_##sym, 70 #define _(sym,string) string, 103 nat64_db_bib_entry_t *bibe;
104 nat64_db_st_entry_t *ste;
105 ip46_address_t saddr;
106 ip46_address_t daddr;
107 ip6_address_t ip6_saddr;
120 if (ip4->
protocol == IP_PROTOCOL_UDP)
128 clib_host_to_net_u16 (ip4->
length) -
sizeof (*ip4);
134 clib_host_to_net_u16 (IP_PROTOCOL_UDP));
142 checksum = &tcp->checksum;
155 sizeof (*ip4) -
sizeof (*ip6) -
158 (ip6_frag_hdr_t *)
u8_ptr_add (ip4,
sizeof (*ip4) -
sizeof (*frag));
164 ip6 = (
ip6_header_t *) (((
u8 *) ip4) +
sizeof (*ip4) -
sizeof (*ip6));
170 clib_host_to_net_u32 ((6 << 28) + (ip4->
tos << 20));
211 ip6->
src_address.as_u64[0] = ste->in_r_addr.as_u64[0];
212 ip6->
src_address.as_u64[1] = ste->in_r_addr.as_u64[1];
214 ip6->
dst_address.as_u64[0] = bibe->in_addr.as_u64[0];
215 ip6->
dst_address.as_u64[1] = bibe->in_addr.as_u64[1];
224 frag->identification = frag_id;
226 frag->fragment_offset_and_more =
228 ip6->
protocol = IP_PROTOCOL_IPV6_FRAGMENTATION;
236 if (proto == IP_PROTOCOL_TCP)
261 nat64_db_bib_entry_t *bibe;
262 nat64_db_st_entry_t *ste;
263 ip46_address_t saddr, daddr;
264 ip6_address_t ip6_saddr;
277 if (icmp->type == ICMP6_echo_request || icmp->type == ICMP6_echo_reply)
279 u16 out_id = ((
u16 *) (icmp))[2];
282 IP_PROTOCOL_ICMP, fib_index, 0);
296 IP_PROTOCOL_ICMP, fib_index, 0);
303 bibe, &ip6_saddr, &saddr.ip4, 0);
314 ip6->
src_address.as_u64[0] = ste->in_r_addr.as_u64[0];
315 ip6->
src_address.as_u64[1] = ste->in_r_addr.as_u64[1];
317 ip6->
dst_address.as_u64[0] = bibe->in_addr.as_u64[0];
318 ip6->
dst_address.as_u64[1] = bibe->in_addr.as_u64[1];
319 ((
u16 *) (icmp))[2] = bibe->in_port;
342 nat64_db_bib_entry_t *bibe;
343 nat64_db_st_entry_t *ste;
344 ip46_address_t saddr, daddr;
358 if (proto == IP_PROTOCOL_ICMP6)
361 u16 out_id = ((
u16 *) (icmp))[2];
362 proto = IP_PROTOCOL_ICMP;
365 (icmp->type == ICMP6_echo_request
366 || icmp->type == ICMP6_echo_reply))
379 ip6->
dst_address.as_u64[0] = ste->in_r_addr.as_u64[0];
380 ip6->
dst_address.as_u64[1] = ste->in_r_addr.as_u64[1];
381 ip6->
src_address.as_u64[0] = bibe->in_addr.as_u64[0];
382 ip6->
src_address.as_u64[1] = bibe->in_addr.as_u64[1];
383 ((
u16 *) (icmp))[2] = bibe->in_port;
407 ip6->
src_address.as_u64[0] = bibe->in_addr.as_u64[0];
408 ip6->
src_address.as_u64[1] = bibe->in_addr.as_u64[1];
411 if (proto == IP_PROTOCOL_UDP)
414 checksum = &tcp->checksum;
434 ip6_frag_hdr_t *frag;
438 nat64_db_bib_entry_t *bibe;
439 nat64_db_st_entry_t *ste;
440 ip46_address_t saddr, daddr;
441 ip6_address_t ip6_saddr;
452 sizeof (*ip4) -
sizeof (*ip6) -
455 (ip6_frag_hdr_t *)
u8_ptr_add (ip4,
sizeof (*ip4) -
sizeof (*frag));
461 ip6 = (
ip6_header_t *) (((
u8 *) ip4) +
sizeof (*ip4) -
sizeof (*ip6));
467 clib_host_to_net_u32 ((6 << 28) + (ip4->
tos << 20));
475 frag->identification = frag_id;
477 frag->fragment_offset_and_more =
479 ip6->
protocol = IP_PROTOCOL_IPV6_FRAGMENTATION;
508 bibe, &ip6_saddr, &saddr.ip4, 0);
519 ip6->
src_address.as_u64[0] = ste->in_r_addr.as_u64[0];
520 ip6->
src_address.as_u64[1] = ste->in_r_addr.as_u64[1];
522 ip6->
dst_address.as_u64[0] = bibe->in_addr.as_u64[0];
523 ip6->
dst_address.as_u64[1] = bibe->in_addr.as_u64[1];
534 u32 n_left_from, *from, *to_next;
537 u32 pkts_processed = 0;
539 u32 tcp_packets = 0, udp_packets = 0, icmp_packets = 0, other_packets =
543 n_left_from =
frame->n_vectors;
544 next_index =
node->cached_next_index;
545 while (n_left_from > 0)
551 while (n_left_from > 0 && n_left_to_next > 0)
585 b0->
error =
node->errors[NAT64_OUT2IN_ERROR_NO_TRANSLATION];
591 if (proto0 == NAT_PROTOCOL_ICMP)
599 b0->
error =
node->errors[NAT64_OUT2IN_ERROR_NO_TRANSLATION];
605 if (proto0 == NAT_PROTOCOL_TCP)
617 if ((proto0 == NAT_PROTOCOL_UDP)
619 clib_host_to_net_u16 (UDP_DST_PORT_dhcp_to_client)))
625 b0->
error =
node->errors[NAT64_OUT2IN_ERROR_NO_TRANSLATION];
632 && (b0->
flags & VLIB_BUFFER_IS_TRACED)))
644 n_left_to_next, bi0, next0);
649 NAT64_OUT2IN_ERROR_OUT2IN_PACKETS,
652 NAT64_OUT2IN_ERROR_TCP_PACKETS, tcp_packets);
654 NAT64_OUT2IN_ERROR_UDP_PACKETS, udp_packets);
656 NAT64_OUT2IN_ERROR_ICMP_PACKETS, icmp_packets);
658 NAT64_OUT2IN_ERROR_OTHER_PACKETS,
661 NAT64_OUT2IN_ERROR_FRAGMENTS, fragments);
663 return frame->n_vectors;
668 .name =
"nat64-out2in",
669 .vector_size =
sizeof (
u32),
694 #define foreach_nat64_out2in_handoff_error \ 695 _(CONGESTION_DROP, "congestion drop") \ 696 _(SAME_WORKER, "same worker") \ 697 _(DO_HANDOFF, "do handoff") 701 #define _(sym,str) NAT64_OUT2IN_HANDOFF_ERROR_##sym, 708 #define _(sym,string) string, 738 u32 n_enq, n_left_from, *from;
742 u32 do_handoff = 0, same_worker = 0;
745 n_left_from =
frame->n_vectors;
753 while (n_left_from > 0)
760 if (ti[0] != thread_index)
767 && (b[0]->
flags & VLIB_BUFFER_IS_TRACED)))
781 frame->n_vectors, 1);
783 if (n_enq < frame->n_vectors)
785 NAT64_OUT2IN_HANDOFF_ERROR_CONGESTION_DROP,
786 frame->n_vectors - n_enq);
788 NAT64_OUT2IN_HANDOFF_ERROR_SAME_WORKER,
791 NAT64_OUT2IN_HANDOFF_ERROR_DO_HANDOFF,
794 return frame->n_vectors;
799 .name =
"nat64-out2in-handoff",
800 .vector_size =
sizeof (
u32),
nat64_out2in_handoff_error_t
u32 flags
buffer flags: VLIB_BUFFER_FREE_LIST_INDEX_MASK: bits used to store free list index, VLIB_BUFFER_IS_TRACED: trace this buffer.
nat64_db_t * db
BIB and session DB per thread.
static char * nat64_out2in_error_strings[]
struct nat64_out2in_frag_set_ctx_t_ nat64_out2in_frag_set_ctx_t
clib_memset(h->entries, 0, sizeof(h->entries[0]) *entries)
u32 fib_table_get_index_for_sw_if_index(fib_protocol_t proto, u32 sw_if_index)
Get the index of the FIB bound to the interface.
nat64_db_bib_entry_t * nat64_db_bib_entry_find(nat64_db_t *db, ip46_address_t *addr, u16 port, u8 proto, u32 fib_index, u8 is_ip6)
Find NAT64 BIB entry.
static ip_csum_t ip_csum_with_carry(ip_csum_t sum, ip_csum_t x)
#define VLIB_NODE_FN(node)
static int nat64_out2in_icmp_set_cb(vlib_buffer_t *b, ip4_header_t *ip4, ip6_header_t *ip6, void *arg)
struct _tcp_header tcp_header_t
struct nat64_out2in_set_ctx_t_ nat64_out2in_set_ctx_t
IPv4 to IPv6 translation.
vlib_node_registration_t nat64_out2in_handoff_node
(constructor) VLIB_REGISTER_NODE (nat64_out2in_handoff_node)
#define u8_ptr_add(ptr, index)
u32 ip4_fib_table_get_index_for_sw_if_index(u32 sw_if_index)
static nat_protocol_t ip_proto_to_nat_proto(u8 ip_proto)
Common NAT inline functions.
vl_api_interface_index_t sw_if_index
nat64_db_st_entry_t * nat64_db_st_entry_create(u32 thread_index, nat64_db_t *db, nat64_db_bib_entry_t *bibe, ip6_address_t *in_r_addr, ip4_address_t *out_r_addr, u16 r_port)
Create new NAT64 session table entry.
static u16 ip4_get_fragment_more(const ip4_header_t *i)
static void * ip4_next_header(ip4_header_t *i)
void nat64_tcp_session_set_state(nat64_db_st_entry_t *ste, tcp_header_t *tcp, u8 is_ip6)
Set NAT64 TCP session state.
vl_api_fib_path_type_t type
vlib_error_t error
Error code for buffers to be enqueued to error handler.
void nat64_session_reset_timeout(nat64_db_st_entry_t *ste, vlib_main_t *vm)
Reset NAT64 session timeout.
#define foreach_nat64_out2in_handoff_error
static void * vlib_buffer_get_current(vlib_buffer_t *b)
Get pointer to current data to process.
static char * nat64_out2in_handoff_error_strings[]
static u8 * format_nat64_out2in_trace(u8 *s, va_list *args)
static void vlib_set_simple_counter(vlib_simple_counter_main_t *cm, u32 thread_index, u32 index, u64 value)
Set a simple counter.
#define vlib_validate_buffer_enqueue_x1(vm, node, next_index, to_next, n_left_to_next, bi0, next0)
Finish enqueueing one buffer forward in the graph.
#define vlib_get_next_frame(vm, node, next_index, vectors, n_vectors_left)
Get pointer to next frame vector data by (vlib_node_runtime_t, next_index).
void nat64_compose_ip6(ip6_address_t *ip6, ip4_address_t *ip4, u32 fib_index)
Compose IPv4-embedded IPv6 addresses.
static void vlib_node_increment_counter(vlib_main_t *vm, u32 node_index, u32 counter_index, u64 increment)
vlib_simple_counter_main_t total_sessions
static int nat64_out2in_tcp_udp(vlib_main_t *vm, vlib_buffer_t *b, nat64_out2in_set_ctx_t *ctx)
#define VLIB_REGISTER_NODE(x,...)
static u8 * format_nat64_out2in_handoff_trace(u8 *s, va_list *args)
static u16 ip4_get_fragment_offset(const ip4_header_t *i)
void vlib_put_next_frame(vlib_main_t *vm, vlib_node_runtime_t *r, u32 next_index, u32 n_vectors_left)
Release pointer to next frame vector data.
static int nat64_out2in_unk_proto(vlib_main_t *vm, vlib_buffer_t *p, nat64_out2in_set_ctx_t *ctx)
vlib_main_t vlib_node_runtime_t * node
nat64_db_st_entry_t * nat64_db_st_entry_find(nat64_db_t *db, ip46_address_t *l_addr, ip46_address_t *r_addr, u16 l_port, u16 r_port, u8 proto, u32 fib_index, u8 is_ip6)
Find NAT64 session table entry.
u32 nat64_get_worker_out2in(vlib_buffer_t *b, ip4_header_t *ip)
Get worker thread index for NAT64 out2in.
static int nat64_out2in_inner_icmp_set_cb(vlib_buffer_t *b, ip4_header_t *ip4, ip6_header_t *ip6, void *arg)
static ip_csum_t ip_csum_sub_even(ip_csum_t c, ip_csum_t x)
nat64_db_bib_entry_t * nat64_db_bib_entry_by_index(nat64_db_t *db, u8 proto, u32 bibe_index)
Get BIB entry by index and protocol.
static int icmp_to_icmp6(vlib_buffer_t *p, ip4_to_ip6_set_fn_t fn, void *ctx, ip4_to_ip6_set_fn_t inner_fn, void *inner_ctx)
Translate ICMP4 packet to ICMP6.
vlib_node_registration_t nat64_out2in_node
(constructor) VLIB_REGISTER_NODE (nat64_out2in_node)
static void vlib_buffer_advance(vlib_buffer_t *b, word l)
Advance current data pointer by the supplied (signed!) amount.
static void * vlib_add_trace(vlib_main_t *vm, vlib_node_runtime_t *r, vlib_buffer_t *b, u32 n_data_bytes)
NAT64 global declarations.
VLIB buffer representation.
static void * vlib_frame_vector_args(vlib_frame_t *f)
Get pointer to frame vector data.
static_always_inline u32 vlib_buffer_enqueue_to_thread(vlib_main_t *vm, u32 frame_queue_index, u32 *buffer_indices, u16 *thread_indices, u32 n_packets, int drop_on_congestion)
vlib_main_t vlib_node_runtime_t vlib_frame_t * frame
#define u16_net_add(u, val)
#define ip6_frag_hdr_offset_and_more(offset, more)
static_always_inline void vlib_get_buffers(vlib_main_t *vm, u32 *bi, vlib_buffer_t **b, int count)
Translate array of buffer indices into buffer pointers.
#define VLIB_NODE_FLAG_TRACE
static ip_csum_t ip_incremental_checksum(ip_csum_t sum, void *_data, uword n_bytes)
static vlib_buffer_t * vlib_get_buffer(vlib_main_t *vm, u32 buffer_index)
Translate buffer index into buffer pointer.
static u16 ip_csum_fold(ip_csum_t c)
#define foreach_nat64_out2in_error
static ip_csum_t ip_csum_add_even(ip_csum_t c, ip_csum_t x)