FD.io VPP  v18.04-17-g3a0d853
Vector Packet Processing
dslite_out2in.c
Go to the documentation of this file.
1 /*
2  * Copyright (c) 2017 Cisco and/or its affiliates.
3  * Licensed under the Apache License, Version 2.0 (the "License");
4  * you may not use this file except in compliance with the License.
5  * You may obtain a copy of the License at:
6  *
7  * http://www.apache.org/licenses/LICENSE-2.0
8  *
9  * Unless required by applicable law or agreed to in writing, software
10  * distributed under the License is distributed on an "AS IS" BASIS,
11  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12  * See the License for the specific language governing permissions and
13  * limitations under the License.
14  */
15 #include <nat/dslite.h>
16 
18 
19 typedef enum
20 {
26 
27 static char *dslite_out2in_error_strings[] = {
28 #define _(sym,string) string,
30 #undef _
31 };
32 
33 static inline u32
35  dslite_session_t ** sp, u32 next, u8 * error,
36  u32 thread_index)
37 {
38  dslite_session_t *s = 0;
39  icmp46_header_t *icmp = ip4_next_header (ip4);
40  clib_bihash_kv_8_8_t kv, value;
42  u32 n = next;
43  icmp_echo_header_t *echo;
44  u32 new_addr, old_addr;
45  u16 old_id, new_id;
46  ip_csum_t sum;
47 
48  echo = (icmp_echo_header_t *) (icmp + 1);
49 
50  if (icmp_is_error_message (icmp) || (icmp->type != ICMP4_echo_reply))
51  {
53  *error = DSLITE_ERROR_BAD_ICMP_TYPE;
54  goto done;
55  }
56 
57  key.addr = ip4->dst_address;
58  key.port = echo->identifier;
59  key.protocol = SNAT_PROTOCOL_ICMP;
60  key.fib_index = 0;
61  kv.key = key.as_u64;
62 
63  if (clib_bihash_search_8_8
64  (&dm->per_thread_data[thread_index].out2in, &kv, &value))
65  {
67  *error = DSLITE_ERROR_NO_TRANSLATION;
68  goto done;
69  }
70  else
71  {
72  s =
73  pool_elt_at_index (dm->per_thread_data[thread_index].sessions,
74  value.value);
75  }
76 
77  old_id = echo->identifier;
78  echo->identifier = new_id = s->in2out.port;
79  sum = icmp->checksum;
80  sum = ip_csum_update (sum, old_id, new_id, icmp_echo_header_t, identifier);
81  icmp->checksum = ip_csum_fold (sum);
82 
83  old_addr = ip4->dst_address.as_u32;
84  ip4->dst_address = s->in2out.addr;
85  new_addr = ip4->dst_address.as_u32;
86 
87  sum = ip4->checksum;
88  sum = ip_csum_update (sum, old_addr, new_addr, ip4_header_t, dst_address);
89  ip4->checksum = ip_csum_fold (sum);
90 
91 done:
92  *sp = s;
93  return n;
94 }
95 
96 static uword
98  vlib_frame_t * frame)
99 {
100  u32 n_left_from, *from, *to_next;
101  dslite_out2in_next_t next_index;
102  vlib_node_runtime_t *error_node;
103  u32 thread_index = vlib_get_thread_index ();
104  f64 now = vlib_time_now (vm);
105  dslite_main_t *dm = &dslite_main;
106 
107  error_node = vlib_node_get_runtime (vm, dslite_out2in_node.index);
108 
109  from = vlib_frame_vector_args (frame);
110  n_left_from = frame->n_vectors;
111  next_index = node->cached_next_index;
112 
113 
114  while (n_left_from > 0)
115  {
116  u32 n_left_to_next;
117 
118  vlib_get_next_frame (vm, node, next_index, to_next, n_left_to_next);
119 
120  while (n_left_from > 0 && n_left_to_next > 0)
121  {
122  u32 bi0;
123  vlib_buffer_t *b0;
125  u8 error0 = DSLITE_ERROR_OUT2IN;
126  ip4_header_t *ip40;
127  ip6_header_t *ip60;
128  u32 proto0;
129  udp_header_t *udp0;
130  tcp_header_t *tcp0;
131  clib_bihash_kv_8_8_t kv0, value0;
132  snat_session_key_t key0;
133  dslite_session_t *s0 = 0;
134  ip_csum_t sum0;
135  u32 new_addr0, old_addr0;
136  u16 new_port0, old_port0;
137 
138  /* speculatively enqueue b0 to the current next frame */
139  bi0 = from[0];
140  to_next[0] = bi0;
141  from += 1;
142  to_next += 1;
143  n_left_from -= 1;
144  n_left_to_next -= 1;
145 
146  b0 = vlib_get_buffer (vm, bi0);
147  ip40 = vlib_buffer_get_current (b0);
148  proto0 = ip_proto_to_snat_proto (ip40->protocol);
149 
150  if (PREDICT_FALSE (proto0 == ~0))
151  {
152  error0 = DSLITE_ERROR_UNSUPPORTED_PROTOCOL;
153  next0 = DSLITE_OUT2IN_NEXT_DROP;
154  goto trace0;
155  }
156 
157  if (PREDICT_FALSE (proto0 == SNAT_PROTOCOL_ICMP))
158  {
159  next0 =
160  dslite_icmp_out2in (dm, ip40, &s0, next0, &error0,
161  thread_index);
162  if (PREDICT_FALSE (next0 == DSLITE_OUT2IN_NEXT_DROP))
163  goto trace0;
164 
165  goto encap0;
166  }
167 
168  udp0 = ip4_next_header (ip40);
169  tcp0 = (tcp_header_t *) udp0;
170 
171  key0.addr = ip40->dst_address;
172  key0.port = udp0->dst_port;
173  key0.protocol = proto0;
174  key0.fib_index = 0;
175  kv0.key = key0.as_u64;
176 
177  if (clib_bihash_search_8_8
178  (&dm->per_thread_data[thread_index].out2in, &kv0, &value0))
179  {
180  next0 = DSLITE_OUT2IN_NEXT_DROP;
181  error0 = DSLITE_ERROR_NO_TRANSLATION;
182  goto trace0;
183  }
184  else
185  {
186  s0 =
187  pool_elt_at_index (dm->per_thread_data[thread_index].sessions,
188  value0.value);
189  }
190 
191  old_addr0 = ip40->dst_address.as_u32;
192  ip40->dst_address = s0->in2out.addr;
193  new_addr0 = ip40->dst_address.as_u32;
194 
195  sum0 = ip40->checksum;
196  sum0 =
197  ip_csum_update (sum0, old_addr0, new_addr0, ip4_header_t,
198  dst_address);
199  ip40->checksum = ip_csum_fold (sum0);
200 
201  if (PREDICT_TRUE (proto0 == SNAT_PROTOCOL_TCP))
202  {
203  old_port0 = tcp0->dst_port;
204  tcp0->dst_port = s0->in2out.port;
205  new_port0 = tcp0->dst_port;
206 
207  sum0 = tcp0->checksum;
208  sum0 =
209  ip_csum_update (sum0, old_addr0, new_addr0, ip4_header_t,
210  dst_address);
211  sum0 =
212  ip_csum_update (sum0, old_port0, new_port0, ip4_header_t,
213  length);
214  tcp0->checksum = ip_csum_fold (sum0);
215  }
216  else
217  {
218  old_port0 = udp0->dst_port;
219  udp0->dst_port = s0->in2out.port;
220  udp0->checksum = 0;
221  }
222 
223  encap0:
224  /* Construct IPv6 header */
225  vlib_buffer_advance (b0, -(sizeof (ip6_header_t)));
226  ip60 = vlib_buffer_get_current (b0);
228  clib_host_to_net_u32 ((6 << 28) + (ip40->tos << 20));
229  ip60->payload_length = ip40->length;
230  ip60->protocol = IP_PROTOCOL_IP_IN_IP;
231  ip60->hop_limit = ip40->ttl;
232  ip60->src_address.as_u64[0] = dm->aftr_ip6_addr.as_u64[0];
233  ip60->src_address.as_u64[1] = dm->aftr_ip6_addr.as_u64[1];
234  ip60->dst_address.as_u64[0] = s0->in2out.softwire_id.as_u64[0];
235  ip60->dst_address.as_u64[1] = s0->in2out.softwire_id.as_u64[1];
236 
237  /* Accounting */
238  s0->last_heard = now;
239  s0->total_pkts++;
240  s0->total_bytes += vlib_buffer_length_in_chain (vm, b0);
241  /* Per-B4 LRU list maintenance */
242  clib_dlist_remove (dm->per_thread_data[thread_index].list_pool,
243  s0->per_b4_index);
244  clib_dlist_addtail (dm->per_thread_data[thread_index].list_pool,
245  s0->per_b4_list_head_index, s0->per_b4_index);
246  trace0:
248  && (b0->flags & VLIB_BUFFER_IS_TRACED)))
249  {
250  dslite_trace_t *t = vlib_add_trace (vm, node, b0, sizeof (*t));
251  t->next_index = next0;
252  t->session_index = ~0;
253  if (s0)
254  t->session_index =
255  s0 - dm->per_thread_data[thread_index].sessions;
256  }
257 
258  b0->error = error_node->errors[error0];
259 
260  /* verify speculative enqueue, maybe switch current next frame */
261  vlib_validate_buffer_enqueue_x1 (vm, node, next_index, to_next,
262  n_left_to_next, bi0, next0);
263  }
264  vlib_put_next_frame (vm, node, next_index, n_left_to_next);
265  }
266 
267  return frame->n_vectors;
268 }
269 
270 /* *INDENT-OFF* */
272  .function = dslite_out2in_node_fn,
273  .name = "dslite-out2in",
274  .vector_size = sizeof (u32),
275  .format_trace = format_dslite_trace,
276  .type = VLIB_NODE_TYPE_INTERNAL,
278  .error_strings = dslite_out2in_error_strings,
279  .n_next_nodes = DSLITE_OUT2IN_N_NEXT,
280  /* edit / add dispositions here */
281  .next_nodes = {
282  [DSLITE_OUT2IN_NEXT_DROP] = "error-drop",
283  [DSLITE_OUT2IN_NEXT_IP4_LOOKUP] = "ip4-lookup",
284  [DSLITE_OUT2IN_NEXT_IP6_LOOKUP] = "ip6-lookup",
285  },
286 };
287 /* *INDENT-ON* */
288 
290 
291 /*
292  * fd.io coding-style-patch-verification: ON
293  *
294  * Local Variables:
295  * eval: (c-set-style "gnu")
296  * End:
297  */
dslite_out2in_next_t
Definition: dslite_out2in.c:19
u8 * format_dslite_trace(u8 *s, va_list *args)
Definition: dslite.c:221
#define PREDICT_TRUE(x)
Definition: clib.h:106
u64 as_u64[2]
Definition: ip6_packet.h:51
static f64 vlib_time_now(vlib_main_t *vm)
Definition: main.h:227
uword ip_csum_t
Definition: ip_packet.h:90
vlib_error_t * errors
Vector of errors for this node.
Definition: node.h:415
u32 session_index
Definition: dslite.h:99
static uword vlib_buffer_length_in_chain(vlib_main_t *vm, vlib_buffer_t *b)
Get length in bytes of the buffer chain.
Definition: buffer_funcs.h:107
struct _tcp_header tcp_header_t
ip6_address_t src_address
Definition: ip6_packet.h:342
u16 identifier
Definition: nat.h:481
ip4_address_t dst_address
Definition: ip4_packet.h:164
static void * ip4_next_header(ip4_header_t *i)
Definition: ip4_packet.h:233
static uword dslite_out2in_node_fn(vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
Definition: dslite_out2in.c:97
dlist_elt_t * list_pool
Definition: dslite.h:76
clib_bihash_8_8_t out2in
Definition: dslite.h:63
#define pool_elt_at_index(p, i)
Returns pointer to element at given index.
Definition: pool.h:461
u64 key
the key
Definition: bihash_8_8.h:35
static void clib_dlist_addtail(dlist_elt_t *pool, u32 head_index, u32 new_index)
Definition: dlist.h:43
u16 protocol
Definition: nat.h:50
static void * vlib_buffer_get_current(vlib_buffer_t *b)
Get pointer to current data to process.
Definition: buffer.h:209
#define PREDICT_FALSE(x)
Definition: clib.h:105
#define vlib_validate_buffer_enqueue_x1(vm, node, next_index, to_next, n_left_to_next, bi0, next0)
Finish enqueueing one buffer forward in the graph.
Definition: buffer_node.h:218
#define vlib_get_next_frame(vm, node, next_index, vectors, n_vectors_left)
Get pointer to next frame vector data by (vlib_node_runtime_t, next_index).
Definition: node_funcs.h:364
vlib_error_t error
Error code for buffers to be enqueued to error handler.
Definition: buffer.h:130
u64 value
the value
Definition: bihash_8_8.h:36
VLIB_NODE_FUNCTION_MULTIARCH(dslite_out2in_node, dslite_out2in_node_fn)
ip6_address_t aftr_ip6_addr
Definition: dslite.h:81
#define VLIB_REGISTER_NODE(x,...)
Definition: node.h:143
u16 n_vectors
Definition: node.h:344
static_always_inline uword vlib_get_thread_index(void)
Definition: threads.h:221
vlib_main_t * vm
Definition: buffer.c:294
static vlib_node_runtime_t * vlib_node_get_runtime(vlib_main_t *vm, u32 node_index)
Get node runtime by node index.
Definition: node_funcs.h:89
dslite_main_t dslite_main
Definition: dslite.c:19
8 octet key, 8 octet key value pair
Definition: bihash_8_8.h:33
#define ARRAY_LEN(x)
Definition: clib.h:59
ip4_address_t addr
Definition: nat.h:48
void vlib_put_next_frame(vlib_main_t *vm, vlib_node_runtime_t *r, u32 next_index, u32 n_vectors_left)
Release pointer to next frame vector data.
Definition: main.c:454
static char * dslite_out2in_error_strings[]
Definition: dslite_out2in.c:27
u16 cached_next_index
Next frame index that vector arguments were last enqueued to last time this node ran.
Definition: node.h:456
unsigned int u32
Definition: types.h:88
static u32 ip_proto_to_snat_proto(u8 ip_proto)
Definition: nat.h:486
static void vlib_buffer_advance(vlib_buffer_t *b, word l)
Advance current data pointer by the supplied (signed!) amount.
Definition: buffer.h:222
static void clib_dlist_remove(dlist_elt_t *pool, u32 index)
Definition: dlist.h:99
u64 uword
Definition: types.h:112
dslite_per_thread_data_t * per_thread_data
Definition: dslite.h:85
static void * vlib_add_trace(vlib_main_t *vm, vlib_node_runtime_t *r, vlib_buffer_t *b, u32 n_data_bytes)
Definition: trace_funcs.h:55
struct _vlib_node_registration vlib_node_registration_t
u32 ip_version_traffic_class_and_flow_label
Definition: ip6_packet.h:329
unsigned short u16
Definition: types.h:57
u16 payload_length
Definition: ip6_packet.h:333
u32 next_index
Definition: dslite.h:98
double f64
Definition: types.h:142
unsigned char u8
Definition: types.h:56
static void * vlib_frame_vector_args(vlib_frame_t *f)
Get pointer to frame vector data.
Definition: node_funcs.h:267
#define ip_csum_update(sum, old, new, type, field)
Definition: ip_packet.h:139
vlib_node_registration_t dslite_out2in_node
(constructor) VLIB_REGISTER_NODE (dslite_out2in_node)
Definition: dslite_out2in.c:17
static u32 dslite_icmp_out2in(dslite_main_t *dm, ip4_header_t *ip4, dslite_session_t **sp, u32 next, u8 *error, u32 thread_index)
Definition: dslite_out2in.c:34
dslite_session_t * sessions
Definition: dslite.h:73
#define foreach_dslite_error
Definition: dslite.h:107
u16 flags
Copy of main node flags.
Definition: node.h:450
#define VLIB_NODE_FLAG_TRACE
Definition: node.h:259
u32 flags
buffer flags: VLIB_BUFFER_FREE_LIST_INDEX_MASK: bits used to store free list index, VLIB_BUFFER_IS_TRACED: trace this buffer.
Definition: buffer.h:111
static vlib_buffer_t * vlib_get_buffer(vlib_main_t *vm, u32 buffer_index)
Translate buffer index into buffer pointer.
Definition: buffer_funcs.h:57
static u16 ip_csum_fold(ip_csum_t c)
Definition: ip_packet.h:145
u16 fib_index
Definition: nat.h:50
ip6_address_t dst_address
Definition: ip6_packet.h:342
static_always_inline u8 icmp_is_error_message(icmp46_header_t *icmp)
Definition: nat.h:580