30 #define NAT44_SESSION_CREATE_LEN 26 31 #define NAT_ADDRESSES_EXHAUTED_LEN 13 32 #define MAX_ENTRIES_PER_USER_LEN 21 33 #define MAX_SESSIONS_LEN 17 34 #define MAX_BIBS_LEN 17 35 #define MAX_FRAGMENTS_IP4_LEN 21 36 #define MAX_FRAGMENTS_IP6_LEN 33 37 #define NAT64_BIB_LEN 38 38 #define NAT64_SES_LEN 62 40 #define NAT44_SESSION_CREATE_FIELD_COUNT 8 41 #define NAT_ADDRESSES_EXHAUTED_FIELD_COUNT 3 42 #define MAX_ENTRIES_PER_USER_FIELD_COUNT 5 43 #define MAX_SESSIONS_FIELD_COUNT 4 44 #define MAX_BIBS_FIELD_COUNT 4 45 #define MAX_FRAGMENTS_FIELD_COUNT 5 46 #define NAT64_BIB_FIELD_COUNT 8 47 #define NAT64_SES_FIELD_COUNT 12 119 #define skip_if_disabled() \ 121 nat_ipfix_logging_main_t *silm = &nat_ipfix_logging_main; \ 122 if (PREDICT_TRUE (!clib_atomic_fetch_or(&silm->enabled, 0))) \ 126 #define update_template_id(old_id, new_id) \ 128 u16 template_id = clib_atomic_fetch_or(old_id, 0); \ 129 clib_atomic_cmp_and_swap(old_id, template_id, new_id); \ 247 udp->
dst_port = clib_host_to_net_u16 (collector_port);
248 udp->
length = clib_host_to_net_u16 (
vec_len (rewrite) -
sizeof (*ip));
386 ip->
length = clib_host_to_net_u16 ((
u8 *) f - (
u8 *) ip);
399 u32 n_elts,
u32 *stream_index)
412 u32 n_elts,
u32 *stream_index)
425 u32 n_elts,
u32 *stream_index)
439 u32 n_elts,
u32 *stream_index)
453 u32 n_elts,
u32 *stream_index)
467 u32 n_elts,
u32 *stream_index)
480 u32 n_elts,
u32 *stream_index)
502 stream = &frm->
streams[stream_index];
507 b0->
flags |= (VLIB_BUFFER_TOTAL_LENGTH_VALID | VNET_BUFFER_F_FLOW_REPORT);
535 *offset = (
u32) (((
u8 *) (s + 1)) - (
u8 *) tp);
557 (sizeof (*ip) +
sizeof (*udp) +
560 (sizeof (*ip) +
sizeof (*udp)));
640 u64 time_stamp = clib_host_to_net_u64 (now);
642 offset +=
sizeof (time_stamp);
645 offset +=
sizeof (nat_event);
648 offset +=
sizeof (
src_ip);
651 offset +=
sizeof (nat_src_ip);
654 offset +=
sizeof (
proto);
660 offset +=
sizeof (nat_src_port);
663 vrf_id = clib_host_to_net_u32 (vrf_id);
665 offset +=
sizeof (
vrf_id);
740 u64 time_stamp = clib_host_to_net_u64 (now);
742 offset +=
sizeof (time_stamp);
745 offset +=
sizeof (nat_event);
748 offset +=
sizeof (pool_id);
825 u64 time_stamp = clib_host_to_net_u64 (now);
827 offset +=
sizeof (time_stamp);
830 offset +=
sizeof (nat_event);
833 offset +=
sizeof (quota_event);
835 limit = clib_host_to_net_u32 (limit);
837 offset +=
sizeof (limit);
840 offset +=
sizeof (
src_ip);
916 u64 time_stamp = clib_host_to_net_u64 (now);
918 offset +=
sizeof (time_stamp);
921 offset +=
sizeof (nat_event);
924 offset +=
sizeof (quota_event);
926 limit = clib_host_to_net_u32 (limit);
928 offset +=
sizeof (limit);
1004 u64 time_stamp = clib_host_to_net_u64 (now);
1006 offset +=
sizeof (time_stamp);
1009 offset +=
sizeof (nat_event);
1012 offset +=
sizeof (quota_event);
1014 limit = clib_host_to_net_u32 (limit);
1016 offset +=
sizeof (limit);
1093 u64 time_stamp = clib_host_to_net_u64 (now);
1095 offset +=
sizeof (time_stamp);
1098 offset +=
sizeof (nat_event);
1101 offset +=
sizeof (ip6_address_t);
1104 offset +=
sizeof (nat_src_ip);
1107 offset +=
sizeof (
proto);
1113 offset +=
sizeof (nat_src_port);
1115 vrf_id = clib_host_to_net_u32 (vrf_id);
1117 offset +=
sizeof (
vrf_id);
1196 u64 time_stamp = clib_host_to_net_u64 (now);
1198 offset +=
sizeof (time_stamp);
1201 offset +=
sizeof (nat_event);
1204 offset +=
sizeof (ip6_address_t);
1207 offset +=
sizeof (nat_src_ip);
1210 offset +=
sizeof (
proto);
1216 offset +=
sizeof (nat_src_port);
1219 offset +=
sizeof (ip6_address_t);
1222 offset +=
sizeof (nat_dst_ip);
1228 offset +=
sizeof (nat_dst_port);
1230 vrf_id = clib_host_to_net_u32 (vrf_id);
1232 offset +=
sizeof (
vrf_id);
1257 0, 0, 0, 0, 0, 0, 0, do_flush);
1263 0, 0, 0, 0, 0, 0, 0, do_flush);
1265 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, do_flush);
1301 nat_ipfix_flush_node.index);
1325 u16 nat_src_port,
u32 fib_index)
1330 nat_src_ip, nat_proto, src_port, nat_src_port,
1351 u16 nat_src_port,
u32 fib_index)
1356 nat_src_ip, nat_proto, src_port, nat_src_port,
1396 u32 * to_next,
u32 node_index)
1458 nat_src_ip->
as_u32, proto, src_port,
1459 nat_src_port, vrf_id, 0);
1494 nat_src_ip->
as_u32, proto, src_port,
1495 nat_src_port, dst_ip, nat_dst_ip->
as_u32,
1496 dst_port, nat_dst_port, vrf_id, 0);
1530 u8 e = enable ? 1 : 0;
1537 a.
domain_id = domain_id ? domain_id : 1;
1637 .name =
"nat-ipfix-flush",
1639 .state = VLIB_NODE_STATE_INTERRUPT,
#define vec_validate(V, I)
Make sure vector is long enough for given index (no header, unspecified alignment) ...
u32 flags
buffer flags: VLIB_BUFFER_FREE_LIST_INDEX_MASK: bits used to store free list index, VLIB_BUFFER_IS_TRACED: trace this buffer.
static void nat_ipfix_logging_nat64_ses(u32 thread_index, u8 nat_event, ip6_address_t *src_ip, u32 nat_src_ip, u8 proto, u16 src_port, u16 nat_src_port, ip6_address_t *dst_ip, u32 nat_dst_ip, u16 dst_port, u16 nat_dst_port, u32 vrf_id, int do_flush)
u32 stream_index
stream index
u32 max_sessions_next_record_offset
static uword ipfix_flush_process(vlib_main_t *vm, vlib_node_runtime_t *rt, vlib_frame_t *f)
vnet_interface_output_runtime_t * rt
u16 addr_exhausted_template_id
u8 * nat_template_rewrite_addr_exhausted(flow_report_main_t *frm, flow_report_t *fr, ip4_address_t *collector_address, ip4_address_t *src_address, u16 collector_port, ipfix_report_element_t *elts, u32 n_elts, u32 *stream_index)
void nat_ipfix_logging_init(vlib_main_t *vm)
Initialize NAT plugin IPFIX logging.
void nat_ipfix_logging_addresses_exhausted(u32 thread_index, u32 pool_id)
Generate NAT addresses exhausted event.
static void nat_ipfix_send(flow_report_main_t *frm, vlib_frame_t *f, vlib_buffer_t *b0, u16 template_id)
vlib_frame_t * addr_exhausted_frame
i16 current_data
signed offset in data[], pre_data[] that we are currently processing.
vl_api_ip_port_and_mask_t dst_port
static void nat_ipfix_logging_nat44_ses(u32 thread_index, u8 nat_event, u32 src_ip, u32 nat_src_ip, nat_protocol_t nat_proto, u16 src_port, u16 nat_src_port, u32 fib_index, int do_flush)
static void vlib_node_set_interrupt_pending(vlib_main_t *vm, u32 node_index)
vlib_buffer_t * nat64_ses_buffer
static u32 ipfix_e_id_length(int e, u16 id, u16 length)
clib_memset(h->entries, 0, sizeof(h->entries[0]) *entries)
static f64 vlib_time_now(vlib_main_t *vm)
int vnet_flow_report_add_del(flow_report_main_t *frm, vnet_flow_report_add_del_args_t *a, u16 *template_id)
u16 current_length
Nbytes between current data and the end of this buffer.
void nat_ipfix_logging_nat64_session(u32 thread_index, ip6_address_t *src_ip, ip4_address_t *nat_src_ip, u8 proto, u16 src_port, u16 nat_src_port, ip6_address_t *dst_ip, ip4_address_t *nat_dst_ip, u16 dst_port, u16 nat_dst_port, u32 vrf_id, u8 is_create)
Generate NAT64 session create and delete events.
#define vec_add1(V, E)
Add 1 element to end of vector (unspecified alignment).
#define NAT_ADDRESSES_EXHAUTED_LEN
u16 ip4_tcp_udp_compute_checksum(vlib_main_t *vm, vlib_buffer_t *p0, ip4_header_t *ip0)
ip4_address_t src_address
static u8 * nat_template_rewrite(flow_report_main_t *frm, flow_report_t *fr, ip4_address_t *collector_address, ip4_address_t *src_address, u16 collector_port, nat_event_t event, quota_exceed_event_t quota_event)
Create an IPFIX template packet rewrite string.
static void nat_ipfix_logging_max_bib(u32 thread_index, u32 limit, int do_flush)
#define vec_validate_aligned(V, I, A)
Make sure vector is long enough for given index (no header, specified alignment)
int nat_ipfix_logging_enable_disable(int enable, u32 domain_id, u16 src_port)
Enable/disable NAT plugin IPFIX logging.
vlib_buffer_t * max_entries_per_user_buffer
u8 * nat_template_rewrite_nat44_session(flow_report_main_t *frm, flow_report_t *fr, ip4_address_t *collector_address, ip4_address_t *src_address, u16 collector_port, ipfix_report_element_t *elts, u32 n_elts, u32 *stream_index)
#define NAT64_BIB_FIELD_COUNT
vlib_frame_t * max_sessions_frame
#define MAX_SESSIONS_FIELD_COUNT
nat_ipfix_per_thread_data_t * per_thread_data
ip4_address_t ipfix_collector
vlib_node_registration_t ip4_lookup_node
(constructor) VLIB_REGISTER_NODE (ip4_lookup_node)
#define NAT_ADDRESSES_EXHAUTED_FIELD_COUNT
flow_report_stream_t * streams
vlib_frame_t * max_bibs_frame
u8 * nat_template_rewrite_max_sessions(flow_report_main_t *frm, flow_report_t *fr, ip4_address_t *collector_address, ip4_address_t *src_address, u16 collector_port, ipfix_report_element_t *elts, u32 n_elts, u32 *stream_index)
static uword ip4_header_checksum_is_valid(ip4_header_t *i)
static void nat_ipfix_logging_max_entries_per_usr(u32 thread_index, u32 limit, u32 src_ip, int do_flush)
vnet_flow_rewrite_callback_t * rewrite_callback
u8 * nat_template_rewrite_max_bibs(flow_report_main_t *frm, flow_report_t *fr, ip4_address_t *collector_address, ip4_address_t *src_address, u16 collector_port, ipfix_report_element_t *elts, u32 n_elts, u32 *stream_index)
#define NAT44_SESSION_CREATE_FIELD_COUNT
vlib_frame_t * vlib_get_frame_to_node(vlib_main_t *vm, u32 to_node_index)
#define clib_atomic_fetch_or(a, b)
vlib_frame_t * nat64_bib_frame
static_always_inline u8 nat_proto_to_ip_proto(nat_protocol_t nat_proto)
#define MAX_ENTRIES_PER_USER_FIELD_COUNT
vlib_buffer_t * max_sessions_buffer
static u32 vlib_get_buffer_index(vlib_main_t *vm, void *p)
Translate buffer pointer into buffer index.
flow_report_main_t flow_report_main
vlib_node_registration_t nat_ipfix_flush_node
(constructor) VLIB_REGISTER_NODE (nat_ipfix_flush_node)
void nat_ipfix_flush_from_main(void)
#define MAX_ENTRIES_PER_USER_LEN
static __clib_warn_unused_result u32 vlib_buffer_alloc(vlib_main_t *vm, u32 *buffers, u32 n_buffers)
Allocate buffers into supplied array.
void vlib_put_frame_to_node(vlib_main_t *vm, u32 to_node_index, vlib_frame_t *f)
static void * vlib_buffer_get_current(vlib_buffer_t *b)
Get pointer to current data to process.
int nat_ipfix_logging_enabled()
#define MAX_BIBS_FIELD_COUNT
vl_api_address_union_t src_address
vlib_main_t * vm
X-connect all packets from the HOST to the PHY.
static u32 version_length(u16 length)
vlib_frame_t * deterministic_nat_data_callback(flow_report_main_t *frm, flow_report_t *fr, vlib_frame_t *f, u32 *to_next, u32 node_index)
u32 addr_exhausted_next_record_offset
u32 nat64_bib_next_record_offset
#define NAT64_SES_FIELD_COUNT
vl_api_ip_port_and_mask_t src_port
void nat_ipfix_logging_max_entries_per_user(u32 thread_index, u32 limit, u32 src_ip)
Generate maximum entries per user exceeded event.
#define VLIB_REGISTER_NODE(x,...)
vlib_buffer_t * nat44_session_buffer
ipfix buffers under construction
void nat_ipfix_flush(u32 thread_index)
sll srl srl sll sra u16x4 i
static u32 ipfix_id_count(u16 id, u16 count)
u32 max_entries_per_user_next_record_offset
void nat_ipfix_logging_nat44_ses_create(u32 thread_index, u32 src_ip, u32 nat_src_ip, nat_protocol_t nat_proto, u16 src_port, u16 nat_src_port, u32 fib_index)
Generate NAT44 session create event.
static u64 unix_time_now_nsec(void)
u16 nat64_bib_template_id
u8 * nat_template_rewrite_nat64_session(flow_report_main_t *frm, flow_report_t *fr, ip4_address_t *collector_address, ip4_address_t *src_address, u16 collector_port, ipfix_report_element_t *elts, u32 n_elts, u32 *stream_index)
static void nat_ipfix_logging_addr_exhausted(u32 thread_index, u32 pool_id, int do_flush)
#define clib_atomic_cmp_and_swap(addr, old, new)
vlib_buffer_t * nat64_bib_buffer
u32 nat44_session_next_record_offset
next record offset
#define update_template_id(old_id, new_id)
u16 nat44_session_template_id
template IDs
u8 enabled
NAT plugin IPFIX logging enabled.
u32 fib_table_get_table_id(u32 fib_index, fib_protocol_t proto)
Get the Table-ID of the FIB from protocol and index.
u16 nat64_ses_template_id
static u32 vlib_get_n_threads()
vlib_frame_t * max_entries_per_user_frame
u8 * nat_template_rewrite_nat64_bib(flow_report_main_t *frm, flow_report_t *fr, ip4_address_t *collector_address, ip4_address_t *src_address, u16 collector_port, ipfix_report_element_t *elts, u32 n_elts, u32 *stream_index)
static_always_inline void * clib_memcpy_fast(void *restrict dst, const void *restrict src, size_t n)
static void nat_ipfix_logging_max_ses(u32 thread_index, u32 limit, int do_flush)
static vlib_main_t * vlib_get_main(void)
void nat_ipfix_logging_max_sessions(u32 thread_index, u32 limit)
Generate maximum session entries exceeded event.
#define clib_atomic_fetch_add(a, b)
u32 nat64_ses_next_record_offset
static void nat_ipfix_header_create(flow_report_main_t *frm, vlib_buffer_t *b0, u32 *offset)
#define skip_if_disabled()
struct _vlib_node_registration vlib_node_registration_t
template key/value backing page structure
u8 * nat_template_rewrite_max_entries_per_usr(flow_report_main_t *frm, flow_report_t *fr, ip4_address_t *collector_address, ip4_address_t *src_address, u16 collector_port, ipfix_report_element_t *elts, u32 n_elts, u32 *stream_index)
static u32 ipfix_set_id_length(u16 set_id, u16 length)
static void nat_ipfix_logging_nat64_bibe(u32 thread_index, u8 nat_event, ip6_address_t *src_ip, u32 nat_src_ip, u8 proto, u16 src_port, u16 nat_src_port, u32 vrf_id, int do_flush)
u16 call_counter
nat data callbacks call counter
static vlib_main_t * vlib_get_main_by_index(u32 thread_index)
vlib_buffer_t * max_bibs_buffer
#define vec_len(v)
Number of elements in vector (rvalue-only, NULL tolerant)
vlib_buffer_t * addr_exhausted_buffer
VLIB buffer representation.
u16 max_sessions_template_id
static void * vlib_frame_vector_args(vlib_frame_t *f)
Get pointer to frame vector data.
vlib_main_t ** worker_vms
vector of worker vlib mains
vnet_flow_data_callback_t * flow_data_callback
struct clib_bihash_value offset
template key/value backing page structure
vlib_frame_t * data_callback(flow_report_main_t *frm, flow_report_t *fr, vlib_frame_t *f, u32 *to_next, u32 node_index)
static vlib_thread_main_t * vlib_get_thread_main()
u16 max_entries_per_user_template_id
#define NAT44_SESSION_CREATE_LEN
nat_ipfix_logging_main_t nat_ipfix_logging_main
#define CLIB_CACHE_LINE_BYTES
void nat_ipfix_logging_max_bibs(u32 thread_index, u32 limit)
Generate maximum BIB entries exceeded event.
void nat_ipfix_logging_nat64_bib(u32 thread_index, ip6_address_t *src_ip, ip4_address_t *nat_src_ip, u8 proto, u16 src_port, u16 nat_src_port, u32 vrf_id, u8 is_create)
Generate NAT64 BIB create and delete events.
u32 max_bibs_next_record_offset
static vlib_buffer_t * vlib_get_buffer(vlib_main_t *vm, u32 buffer_index)
Translate buffer index into buffer pointer.
static u16 ip4_header_checksum(ip4_header_t *i)
vlib_frame_t * nat64_ses_frame
vlib_frame_t * nat44_session_frame
frames containing ipfix buffers
void nat_ipfix_logging_nat44_ses_delete(u32 thread_index, u32 src_ip, u32 nat_src_ip, nat_protocol_t nat_proto, u16 src_port, u16 nat_src_port, u32 fib_index)
Generate NAT44 session delete event.
u64 milisecond_time_0
Time reference pair.