37 #define _(sym,string) string, 60 "NAT44_OUT2IN_ED_FAST_PATH";
62 s =
format (s,
"%s: sw_if_index %d, next index %d, session %d", tag,
71 u32 sw_if_index0,
u32 rx_fib_index0,
73 u32 thread_index, snat_session_t ** p_s0)
77 next0 =
icmp_out2in (sm, b0, ip0, icmp0, sw_if_index0, rx_fib_index0, node,
78 next0, thread_index, p_s0, 0);
79 snat_session_t *s0 = *p_s0;
85 (vm, b0), thread_index);
92 #ifndef CLIB_MARCH_VARIANT 99 u64 sess_timeout_time;
112 if (ctx->
now >= sess_timeout_time)
114 l_addr = &s->in2out.addr;
115 r_addr = &s->ext_host_addr;
116 fib_index = s->in2out.fib_index;
119 proto = s->in2out.port;
126 l_port = s->in2out.port;
127 r_port = s->ext_host_port;
131 r_addr = &s->ext_host_nat_addr;
132 r_port = s->ext_host_nat_port;
134 init_ed_k (&ed_kv, *l_addr, l_port, *r_addr, r_port, fib_index, proto);
135 if (clib_bihash_add_del_16_8 (&tsm->
in2out_ed, &ed_kv, 0))
142 s->in2out.addr.as_u32,
143 s->out2in.addr.as_u32,
147 s->in2out.fib_index);
150 &s->in2out.addr, s->in2out.port,
151 &s->ext_host_nat_addr, s->ext_host_nat_port,
152 &s->out2in.addr, s->out2in.port,
153 &s->ext_host_addr, s->ext_host_port,
156 nat_ha_sdel (&s->out2in.addr, s->out2in.port, &s->ext_host_addr,
157 s->ext_host_port, s->nat_proto, s->out2in.fib_index,
182 &s->out2in.addr, s->out2in.port,
200 u16 port_per_thread,
u32 snat_thread_index)
206 #define _(N, j, n, s) \ 207 case NAT_PROTOCOL_##N: \ 208 if (a->busy_##n##_ports_per_thread[thread_index] < port_per_thread) \ 212 portnum = (port_per_thread * \ 213 snat_thread_index) + \ 214 snat_random_port(0, port_per_thread - 1) + 1024; \ 215 if (a->busy_##n##_port_refcounts[portnum]) \ 217 --a->busy_##n##_port_refcounts[portnum]; \ 218 a->busy_##n##_ports_per_thread[thread_index]++; \ 219 a->busy_##n##_ports++; \ 221 *port = clib_host_to_net_u16(portnum); \ 239 static snat_session_t *
266 b->
error = node->
errors[NAT_OUT2IN_ED_ERROR_MAX_SESSIONS_EXCEEDED];
274 b->
error = node->
errors[NAT_OUT2IN_ED_ERROR_MAX_USER_SESS_EXCEEDED];
283 s->ext_host_port = nat_proto == NAT_PROTOCOL_ICMP ? 0 : udp->
src_port;
290 s->out2in.addr = o2i_addr;
291 s->out2in.port = o2i_port;
292 s->out2in.fib_index = o2i_fib_index;
293 s->in2out.addr = i2o_addr;
294 s->in2out.port = i2o_port;
295 s->in2out.fib_index = i2o_fib_index;
296 s->nat_proto = nat_proto;
299 init_ed_kv (&kv, o2i_addr, o2i_port, s->ext_host_addr, s->ext_host_port,
303 if (clib_bihash_add_or_overwrite_stale_16_8 (&sm->
out2in_ed, &kv,
333 &s->ext_host_nat_addr,
334 &s->ext_host_nat_port,
343 thread_index, nat_proto,
344 &s->ext_host_nat_addr,
345 &s->ext_host_nat_port,
352 b->
error = node->
errors[NAT_OUT2IN_ED_ERROR_OUT_OF_PORTS];
354 if (clib_bihash_add_del_16_8 (&sm->
out2in_ed, &kv, 0))
360 init_ed_kv (&kv, i2o_addr, i2o_port, s->ext_host_nat_addr,
361 s->ext_host_nat_port, i2o_fib_index, ip->
protocol,
366 init_ed_kv (&kv, i2o_addr, i2o_port, s->ext_host_addr,
367 s->ext_host_port, i2o_fib_index, ip->
protocol,
370 if (clib_bihash_add_or_overwrite_stale_16_8 (&tsm->
in2out_ed, &kv,
376 s->in2out.addr.as_u32,
377 s->out2in.addr.as_u32,
380 s->out2in.port, s->in2out.fib_index);
383 &s->in2out.addr, s->in2out.port,
384 &s->ext_host_nat_addr, s->ext_host_nat_port,
385 &s->out2in.addr, s->out2in.port,
386 &s->ext_host_addr, s->ext_host_port,
389 nat_ha_sadd (&s->in2out.addr, s->in2out.port, &s->out2in.addr,
390 s->out2in.port, &s->ext_host_addr, s->ext_host_port,
391 &s->ext_host_nat_addr, s->ext_host_nat_port,
392 s->nat_proto, s->in2out.fib_index, s->flags, thread_index, 0);
408 if (!clib_bihash_search_16_8 (&tsm->
in2out_ed, &kv, &value))
416 u32 rx_fib_index,
u32 thread_index)
420 snat_session_t *s = 0;
426 if (ip->
protocol == IP_PROTOCOL_ICMP)
429 (b, ip, rx_fib_index, ~0, ~0, 0, &l_port, &r_port, &kv))
449 if (!clib_bihash_search_16_8 (&tsm->
in2out_ed, &kv, &value))
462 (sm, rx_fib_index, thread_index)))
475 s->ext_host_port = r_port;
478 s->out2in.port = l_port;
479 s->nat_proto =
proto;
480 if (proto == NAT_PROTOCOL_OTHER)
485 s->out2in.fib_index = 0;
486 s->in2out.addr = s->out2in.addr;
487 s->in2out.port = s->out2in.port;
488 s->in2out.fib_index = s->out2in.fib_index;
491 if (clib_bihash_add_del_16_8 (&tsm->
in2out_ed, &kv, 1))
497 if (ip->
protocol == IP_PROTOCOL_TCP)
501 (sm, now, s, tcp->flags, tcp->ack_number, tcp->seq_number,
524 #ifndef CLIB_MARCH_VARIANT 530 void *d,
void *e,
u8 * dont_translate)
535 snat_session_t *s = 0;
536 u8 is_addr_only, identity_nat;
549 (b, ip, rx_fib_index, ~0, ~0, proto, &l_port, &r_port, &kv))
551 b->
error = node->
errors[NAT_OUT2IN_ED_ERROR_UNSUPPORTED_PROTOCOL];
556 if (clib_bihash_search_16_8 (&sm->
out2in_ed, &kv, &value))
561 &sm_fib_index, 1, &is_addr_only, 0, 0, 0, &identity_nat, &m))
574 b->
error = node->
errors[NAT_OUT2IN_ED_ERROR_NO_TRANSLATION];
582 thread_index, rx_fib_index))
599 (
vnet_buffer (b)->ip.reass.icmp_type_or_tcp_flags !=
601 && (
vnet_buffer (b)->ip.reass.icmp_type_or_tcp_flags !=
602 ICMP4_echo_request || !is_addr_only)))
604 b->
error = node->
errors[NAT_OUT2IN_ED_ERROR_BAD_ICMP_TYPE];
619 l_port, rx_fib_index, *proto,
629 (
vnet_buffer (b)->ip.reass.icmp_type_or_tcp_flags !=
631 &&
vnet_buffer (b)->ip.reass.icmp_type_or_tcp_flags !=
634 reass.icmp_type_or_tcp_flags)))
636 b->
error = node->
errors[NAT_OUT2IN_ED_ERROR_BAD_ICMP_TYPE];
649 *addr = s->in2out.addr;
650 *port = s->in2out.port;
651 *fib_index = s->in2out.fib_index;
654 *(snat_session_t **) d = s;
659 static snat_session_t *
671 u32 old_addr, new_addr;
681 if (!clib_bihash_search_16_8 (&sm->
out2in_ed, &s_kv, &s_value))
693 (sm, rx_fib_index, thread_index)))
695 b->
error = node->
errors[NAT_OUT2IN_ED_ERROR_MAX_SESSIONS_EXCEEDED];
701 if (clib_bihash_search_8_8
704 b->
error = node->
errors[NAT_OUT2IN_ED_ERROR_NO_TRANSLATION];
716 b->
error = node->
errors[NAT_OUT2IN_ED_ERROR_MAX_USER_SESS_EXCEEDED];
725 s->out2in.addr.as_u32 = old_addr;
726 s->out2in.fib_index = rx_fib_index;
727 s->in2out.addr.as_u32 = new_addr;
729 s->in2out.port = s->out2in.port = ip->
protocol;
733 if (clib_bihash_add_del_16_8 (&sm->
out2in_ed, &s_kv, 1))
738 if (clib_bihash_add_del_16_8 (&tsm->
in2out_ed, &s_kv, 1))
766 u32 n_left_from, *from;
779 while (n_left_from > 0)
782 u32 sw_if_index0, rx_fib_index0, proto0, old_addr0, new_addr0;
783 u16 old_port0, new_port0;
787 snat_session_t *s0 = 0;
819 ICMP4_time_exceeded_ttl_exceeded_in_transit,
856 nat.ed_out2in_nat_session_index);
861 && s0->out2in.fib_index == rx_fib_index0
863 && s0->ext_host_port ==
872 if (clib_bihash_search_16_8 (&sm->
out2in_ed, &kv0, &value0))
894 if (s0->tcp_closed_timestamp)
896 if (now >= s0->tcp_closed_timestamp)
904 b0->
error = node->
errors[NAT_OUT2IN_ED_ERROR_TCP_CLOSED];
911 u64 sess_timeout_time;
914 if (now >= sess_timeout_time)
936 old_port0 =
vnet_buffer (b0)->ip.reass.l4_dst_port;
942 new_port0 = udp0->
dst_port = s0->in2out.port;
943 sum0 = tcp0->checksum;
953 s0->ext_host_nat_addr.as_u32,
960 tcp0->src_port = s0->ext_host_nat_port;
966 thread_index, sw_if_index0, 1);
968 (sm, now, s0,
vnet_buffer (b0)->
ip.reass.icmp_type_or_tcp_flags,
976 new_port0 = udp0->
dst_port = s0->in2out.port;
992 udp0->
src_port = s0->ext_host_nat_port;
997 thread_index, sw_if_index0, 1);
1003 new_port0 = udp0->
dst_port = s0->in2out.port;
1006 udp0->
src_port = s0->ext_host_nat_port;
1011 thread_index, sw_if_index0, 1);
1023 && (b0->
flags & VLIB_BUFFER_IS_TRACED)))
1040 out2in_ed.drops, thread_index,
1058 u32 n_left_from, *from;
1072 while (n_left_from > 0)
1075 u32 sw_if_index0, rx_fib_index0, proto0, old_addr0, new_addr0;
1076 u16 old_port0, new_port0;
1080 icmp46_header_t *icmp0;
1081 snat_session_t *s0 = 0;
1105 ICMP4_time_exceeded_ttl_exceeded_in_transit,
1113 icmp0 = (icmp46_header_t *) udp0;
1120 thread_index, now, vm, node);
1127 out2in_ed.other, thread_index,
1135 (sm, b0, ip0, icmp0, sw_if_index0, rx_fib_index0, node,
1136 next[0], now, thread_index, &s0);
1138 out2in_ed.icmp, thread_index,
1149 if (!clib_bihash_search_16_8 (&sm->
out2in_ed, &kv0, &value0))
1156 if (s0->tcp_closed_timestamp && now >= s0->tcp_closed_timestamp)
1172 proto0, &sm_addr, &sm_port, &sm_fib_index, 1, 0,
1173 &twice_nat0, &lb_nat0, &ip0->
src_address, &identity_nat0, &m))
1181 clib_host_to_net_u16
1182 (UDP_DST_PORT_dhcp_to_client))))
1190 node->
errors[NAT_OUT2IN_ED_ERROR_NO_TRANSLATION];
1198 thread_index, rx_fib_index0))
1218 if ((proto0 == NAT_PROTOCOL_TCP)
1220 reass.icmp_type_or_tcp_flags))
1222 b0->
error = node->
errors[NAT_OUT2IN_ED_ERROR_NON_SYN];
1233 ip.reass.l4_dst_port,
1234 rx_fib_index0, proto0,
1235 node, rx_fib_index0,
1236 thread_index, twice_nat0,
1258 old_port0 =
vnet_buffer (b0)->ip.reass.l4_dst_port;
1264 new_port0 = udp0->
dst_port = s0->in2out.port;
1265 sum0 = tcp0->checksum;
1275 s0->ext_host_nat_addr.as_u32,
1282 tcp0->src_port = s0->ext_host_nat_port;
1288 thread_index, sw_if_index0, 1);
1290 (sm, now, s0,
vnet_buffer (b0)->
ip.reass.icmp_type_or_tcp_flags,
1298 new_port0 = udp0->
dst_port = s0->in2out.port;
1307 s0->ext_host_nat_addr.as_u32,
1313 udp0->
src_port = s0->ext_host_nat_port;
1318 thread_index, sw_if_index0, 1);
1324 new_port0 = udp0->
dst_port = s0->in2out.port;
1327 udp0->
src_port = s0->ext_host_nat_port;
1332 thread_index, sw_if_index0, 1);
1344 && (b0->
flags & VLIB_BUFFER_IS_TRACED)))
1361 out2in_ed.drops, thread_index,
1392 .name =
"nat44-ed-out2in",
1393 .vector_size =
sizeof (
u32),
1394 .sibling_of =
"nat-default",
1412 .name =
"nat44-ed-out2in-slowpath",
1413 .vector_size =
sizeof (
u32),
1414 .sibling_of =
"nat-default",
1443 .name =
"nat-pre-out2in",
1444 .vector_size =
sizeof (
u32),
1445 .sibling_of =
"nat-default",
u32 flags
buffer flags: VLIB_BUFFER_FREE_LIST_INDEX_MASK: bits used to store free list index, VLIB_BUFFER_IS_TRACED: trace this buffer.
#define snat_is_session_static(s)
Check if SNAT session is created from static mapping.
int snat_alloc_outside_address_and_port(snat_address_t *addresses, u32 fib_index, u32 thread_index, nat_protocol_t proto, ip4_address_t *addr, u16 *port, u16 port_per_thread, u32 snat_thread_index)
Alloc outside address and port.
clib_bihash_16_8_t out2in_ed
u32 icmp_out2in(snat_main_t *sm, vlib_buffer_t *b0, ip4_header_t *ip0, icmp46_header_t *icmp0, u32 sw_if_index0, u32 rx_fib_index0, vlib_node_runtime_t *node, u32 next0, u32 thread_index, void *d, void *e)
#define nat_elog_info(nat_elog_str)
static u32 nat44_session_get_timeout(snat_main_t *sm, snat_session_t *s)
#define nat_elog_notice(nat_elog_str)
void nat_syslog_nat44_sadd(u32 ssubix, u32 sfibix, ip4_address_t *isaddr, u16 isport, ip4_address_t *idaddr, u16 idport, ip4_address_t *xsaddr, u16 xsport, ip4_address_t *xdaddr, u16 xdport, nat_protocol_t proto, u8 is_twicenat)
vl_api_ip_port_and_mask_t dst_port
static_always_inline int get_icmp_o2i_ed_key(vlib_buffer_t *b, ip4_header_t *ip0, u32 rx_fib_index, u32 thread_index, u32 session_index, nat_protocol_t *nat_proto, u16 *l_port, u16 *r_port, clib_bihash_kv_16_8_t *kv)
static f64 vlib_time_now(vlib_main_t *vm)
u32 fib_table_get_index_for_sw_if_index(fib_protocol_t proto, u32 sw_if_index)
Get the index of the FIB bound to the interface.
void nat_free_session_data(snat_main_t *sm, snat_session_t *s, u32 thread_index, u8 is_ha)
Free NAT44 session data (lookup keys, external address port)
static_always_inline int nat_alloc_addr_and_port_exact(snat_address_t *a, u32 thread_index, nat_protocol_t proto, ip4_address_t *addr, u16 *port, u16 port_per_thread, u32 snat_thread_index)
static_always_inline void per_vrf_sessions_register_session(snat_session_t *s, u32 thread_index)
#define nat_elog_warn(nat_elog_str)
void nat_ha_sadd(ip4_address_t *in_addr, u16 in_port, ip4_address_t *out_addr, u16 out_port, ip4_address_t *eh_addr, u16 eh_port, ip4_address_t *ehn_addr, u16 ehn_port, u8 proto, u32 fib_index, u16 flags, u32 thread_index, u8 is_resync)
Create session add HA event.
static void vlib_increment_simple_counter(vlib_simple_counter_main_t *cm, u32 thread_index, u32 index, u64 increment)
Increment a simple counter.
vlib_node_registration_t nat44_ed_out2in_node
(constructor) VLIB_REGISTER_NODE (nat44_ed_out2in_node)
#define VLIB_NODE_FN(node)
static void nat_ed_session_delete(snat_main_t *sm, snat_session_t *ses, u32 thread_index, int lru_delete)
static void init_ed_kv(clib_bihash_kv_16_8_t *kv, ip4_address_t l_addr, u16 l_port, ip4_address_t r_addr, u16 r_port, u32 fib_index, u8 proto, u32 thread_index, u32 session_index)
vlib_error_t * errors
Vector of errors for this node.
static uword vlib_buffer_length_in_chain(vlib_main_t *vm, vlib_buffer_t *b)
Get length in bytes of the buffer chain.
void snat_ipfix_logging_nat44_ses_create(u32 thread_index, u32 src_ip, u32 nat_src_ip, nat_protocol_t nat_proto, u16 src_port, u16 nat_src_port, u32 vrf_id)
Generate NAT44 session create event.
struct _tcp_header tcp_header_t
#define snat_is_unk_proto_session(s)
Check if SNAT session for unknown protocol.
#define is_exact_address(s)
Check if exact pool address should be used.
static uword nat44_ed_out2in_fast_path_node_fn_inline(vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame, int is_multi_worker)
static u32 icmp_out2in_ed_slow_path(snat_main_t *sm, vlib_buffer_t *b0, ip4_header_t *ip0, icmp46_header_t *icmp0, u32 sw_if_index0, u32 rx_fib_index0, vlib_node_runtime_t *node, u32 next0, f64 now, u32 thread_index, snat_session_t **p_s0)
u32 ip4_fib_table_get_index_for_sw_if_index(u32 sw_if_index)
#define static_always_inline
static char * nat_out2in_ed_error_strings[]
static nat_protocol_t ip_proto_to_nat_proto(u8 ip_proto)
Common NAT inline functions.
int snat_static_mapping_match(snat_main_t *sm, ip4_address_t match_addr, u16 match_port, u32 match_fib_index, nat_protocol_t match_protocol, ip4_address_t *mapping_addr, u16 *mapping_port, u32 *mapping_fib_index, u8 by_external, u8 *is_addr_only, twice_nat_type_t *twice_nat, lb_nat_type_t *lb, ip4_address_t *ext_host_addr, u8 *is_identity_nat, snat_static_mapping_t **out)
Match NAT44 static mapping.
static_always_inline u8 per_vrf_sessions_is_expired(snat_session_t *s, u32 thread_index)
#define vlib_prefetch_buffer_header(b, type)
Prefetch buffer metadata.
#define vec_elt_at_index(v, i)
Get vector value at index i checking that i is in bounds.
static_always_inline u8 icmp_type_is_error_message(u8 icmp_type)
static void * ip4_next_header(ip4_header_t *i)
void snat_ipfix_logging_addresses_exhausted(u32 thread_index, u32 pool_id)
Generate NAT addresses exhausted event.
vl_api_fib_path_type_t type
vlib_error_t error
Error code for buffers to be enqueued to error handler.
int nat44_o2i_ed_is_idle_session_cb(clib_bihash_kv_16_8_t *kv, void *arg)
#define pool_elt_at_index(p, i)
Returns pointer to element at given index.
#define foreach_nat_out2in_ed_error
static u32 ed_value_get_session_index(clib_bihash_kv_16_8_t *value)
snat_static_mapping_t * static_mappings
static void * vlib_buffer_get_current(vlib_buffer_t *b)
Get pointer to current data to process.
struct snat_main_s::@91 counters
vlib_node_registration_t nat_pre_out2in_node
(constructor) VLIB_REGISTER_NODE (nat_pre_out2in_node)
clib_bihash_8_8_t static_mapping_by_external
u32 icmp_match_out2in_ed(snat_main_t *sm, vlib_node_runtime_t *node, u32 thread_index, vlib_buffer_t *b, ip4_header_t *ip, ip4_address_t *addr, u16 *port, u32 *fib_index, nat_protocol_t *proto, void *d, void *e, u8 *dont_translate)
vl_api_address_union_t src_address
struct snat_main_s::@91::@93 slowpath
#define SNAT_SESSION_FLAG_UNKNOWN_PROTO
#define SNAT_SESSION_FLAG_EXACT_ADDRESS
static void init_nat_k(clib_bihash_kv_8_8_t *kv, ip4_address_t addr, u16 port, u32 fib_index, nat_protocol_t proto)
static_always_inline snat_session_t * nat_ed_session_alloc(snat_main_t *sm, u32 thread_index, f64 now, u8 proto)
vl_api_ip_port_and_mask_t src_port
static int nat44_set_tcp_session_state_o2i(snat_main_t *sm, f64 now, snat_session_t *ses, u8 tcp_flags, u32 tcp_ack_number, u32 tcp_seq_number, u32 thread_index)
#define VLIB_REGISTER_NODE(x,...)
#define CLIB_PREFETCH(addr, size, type)
static_always_inline void vlib_buffer_enqueue_to_next(vlib_main_t *vm, vlib_node_runtime_t *node, u32 *buffers, u16 *nexts, uword count)
sll srl srl sll sra u16x4 i
static void nat44_session_update_counters(snat_session_t *s, f64 now, uword bytes, u32 thread_index)
static u8 * format_nat44_ed_out2in_trace(u8 *s, va_list *args)
static u8 * format_nat_pre_trace(u8 *s, va_list *args)
#define pool_is_free_index(P, I)
Use free bitmap to query whether given index is free.
8 octet key, 8 octet key value pair
vlib_node_registration_t nat44_ed_out2in_slowpath_node
(constructor) VLIB_REGISTER_NODE (nat44_ed_out2in_slowpath_node)
static uword nat_pre_node_fn_inline(vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame, u32 def_next)
vlib_main_t vlib_node_runtime_t * node
static snat_session_t * nat44_ed_out2in_unknown_proto(snat_main_t *sm, vlib_buffer_t *b, ip4_header_t *ip, u32 rx_fib_index, u32 thread_index, f64 now, vlib_main_t *vm, vlib_node_runtime_t *node)
void nat_syslog_nat44_sdel(u32 ssubix, u32 sfibix, ip4_address_t *isaddr, u16 isport, ip4_address_t *idaddr, u16 idport, ip4_address_t *xsaddr, u16 xsport, ip4_address_t *xdaddr, u16 xdport, nat_protocol_t proto, u8 is_twicenat)
#define SNAT_SESSION_FLAG_TWICE_NAT
static void nat44_session_update_lru(snat_main_t *sm, snat_session_t *s, u32 thread_index)
Per-user LRU list maintenance.
#define SNAT_SESSION_FLAG_ENDPOINT_DEPENDENT
void snat_ipfix_logging_nat44_ses_delete(u32 thread_index, u32 src_ip, u32 nat_src_ip, nat_protocol_t nat_proto, u16 src_port, u16 nat_src_port, u32 vrf_id)
Generate NAT44 session delete event.
snat_address_t * twice_nat_addresses
static_always_inline u8 nat44_ed_maximum_sessions_exceeded(snat_main_t *sm, u32 fib_index, u32 thread_index)
static vlib_main_t * vlib_get_main(void)
void nat_ha_sdel(ip4_address_t *out_addr, u16 out_port, ip4_address_t *eh_addr, u16 eh_port, u8 proto, u32 fib_index, u32 thread_index)
Create session delete HA event.
struct snat_main_s::@91::@92 fastpath
#define SNAT_SESSION_FLAG_FWD_BYPASS
int nat44_i2o_ed_is_idle_session_cb(clib_bihash_kv_16_8_t *kv, void *arg)
#define vec_len(v)
Number of elements in vector (rvalue-only, NULL tolerant)
#define SNAT_SESSION_FLAG_AFFINITY
static_always_inline u8 nat_proto_to_ip_proto(nat_protocol_t nat_proto)
vlib_main_t vlib_node_runtime_t vlib_frame_t * frame
VLIB buffer representation.
snat_main_per_thread_data_t * per_thread_data
static void * vlib_frame_vector_args(vlib_frame_t *f)
Get pointer to frame vector data.
#define ip_csum_update(sum, old, new, type, field)
static u8 is_interface_addr(snat_main_t *sm, vlib_node_runtime_t *node, u32 sw_if_index0, u32 ip4_addr)
static void create_bypass_for_fwd(snat_main_t *sm, vlib_buffer_t *b, ip4_header_t *ip, u32 rx_fib_index, u32 thread_index)
snat_address_t * addresses
static snat_session_t * create_session_for_static_mapping_ed(snat_main_t *sm, vlib_buffer_t *b, ip4_address_t i2o_addr, u16 i2o_port, u32 i2o_fib_index, ip4_address_t o2i_addr, u16 o2i_port, u32 o2i_fib_index, nat_protocol_t nat_proto, vlib_node_runtime_t *node, u32 rx_fib_index, u32 thread_index, twice_nat_type_t twice_nat, lb_nat_type_t lb_nat, f64 now, snat_static_mapping_t *mapping)
snat_get_worker_in2out_function_t * worker_in2out_cb
static void init_ed_k(clib_bihash_kv_16_8_t *kv, ip4_address_t l_addr, u16 l_port, ip4_address_t r_addr, u16 r_port, u32 fib_index, u8 proto)
#define SNAT_SESSION_FLAG_STATIC_MAPPING
#define vec_foreach(var, vec)
Vector iterator.
static void create_bypass_for_fwd_worker(snat_main_t *sm, vlib_buffer_t *b, ip4_header_t *ip, u32 rx_fib_index)
u16 flags
Copy of main node flags.
#define is_twice_nat_session(s)
Check if NAT session is twice NAT.
void * vlib_add_trace(vlib_main_t *vm, vlib_node_runtime_t *r, vlib_buffer_t *b, u32 n_data_bytes)
clib_bihash_16_8_t in2out_ed
static uword nat44_ed_out2in_slow_path_node_fn_inline(vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
static_always_inline void vlib_get_buffers(vlib_main_t *vm, u32 *bi, vlib_buffer_t **b, int count)
Translate array of buffer indices into buffer pointers.
#define VLIB_NODE_FLAG_TRACE
static int next_src_nat(snat_main_t *sm, ip4_header_t *ip, u16 src_port, u16 dst_port, u32 thread_index, u32 rx_fib_index)
#define CLIB_CACHE_LINE_BYTES
void snat_free_outside_address_and_port(snat_address_t *addresses, u32 thread_index, ip4_address_t *addr, u16 port, nat_protocol_t protocol)
Free outside address and port pair.
snat_session_t * sessions
static_always_inline void icmp4_error_set_vnet_buffer(vlib_buffer_t *b, u8 type, u8 code, u32 data)
#define SNAT_SESSION_FLAG_LOAD_BALANCING
static u32 ed_value_get_thread_index(clib_bihash_kv_16_8_t *value)
static u16 ip_csum_fold(ip_csum_t c)
vl_api_interface_index_t sw_if_index
static bool tcp_flags_is_init(u8 f)
Check if client initiating TCP connection (received SYN from client)