57 tag = t->
is_slow_path ?
"NAT44_IN2OUT_SLOW_PATH" :
"NAT44_IN2OUT_FAST_PATH";
59 s =
format (s,
"%s: sw_if_index %d, next index %d, session %d", tag,
63 s =
format (s,
", with-hairpinning");
76 s =
format (s,
"NAT44_IN2OUT_FAST: sw_if_index %d, next index %d",
82 #define foreach_nat44_ei_in2out_error \ 83 _ (UNSUPPORTED_PROTOCOL, "unsupported protocol") \ 84 _ (OUT_OF_PORTS, "out of ports") \ 85 _ (BAD_OUTSIDE_FIB, "outside VRF ID not found") \ 86 _ (BAD_ICMP_TYPE, "unsupported ICMP type") \ 87 _ (NO_TRANSLATION, "no translation") \ 88 _ (MAX_SESSIONS_EXCEEDED, "maximum sessions exceeded") \ 89 _ (CANNOT_CREATE_USER, "cannot create NAT user") 93 #define _(sym, str) NAT44_EI_IN2OUT_ERROR_##sym, 100 #define _(sym,string) string, 151 if (sw_if_index == ~0)
159 if (sw_if_index != ~0)
164 if (sw_if_index == ~0)
183 u32 rx_fib_index0,
u32 thread_index)
193 if (clib_bihash_search_8_8 (&nm->
out2in, &kv0, &value0))
197 u16 placeholder_port;
198 u32 placeholder_fib_index;
201 &placeholder_addr, &placeholder_port,
202 &placeholder_fib_index, 1, 0, 0))
227 if (!clib_bihash_search_8_8 (&nm->
out2in, &kv0, &value0))
233 if (!clib_bihash_search_8_8 (&nm->
in2out, &kv0, &value0))
248 #ifndef CLIB_MARCH_VARIANT 254 nat44_ei_session_t *s;
255 u64 sess_timeout_time;
267 &nm->
timeouts, s->nat_proto, s->state);
268 if (ctx->
now >= sess_timeout_time)
271 if (clib_bihash_add_del_8_8 (&nm->
out2in, &s_kv, 0))
275 s->in2out.addr.as_u32,
276 s->out2in.addr.as_u32,
280 s->in2out.fib_index);
283 &s->in2out.addr, s->in2out.port,
284 &s->out2in.addr, s->out2in.port, s->nat_proto);
286 nat_ha_sdel (&s->out2in.addr, s->out2in.port, &s->ext_host_addr,
287 s->ext_host_port, s->nat_proto, s->out2in.fib_index,
310 nat44_ei_session_t *s = 0;
330 b0->
error = node->
errors[NAT44_EI_IN2OUT_ERROR_MAX_SESSIONS_EXCEEDED];
339 nat_proto, &sm_addr, &sm_port,
340 &sm_fib_index, 0, 0, &identity_nat))
344 nm->
addresses, rx_fib_index0, thread_index, nat_proto,
348 b0->
error = node->
errors[NAT44_EI_IN2OUT_ERROR_OUT_OF_PORTS];
367 b0->
error = node->
errors[NAT44_EI_IN2OUT_ERROR_CANNOT_CREATE_USER];
382 s->in2out.addr = i2o_addr;
383 s->in2out.port = i2o_port;
384 s->in2out.fib_index = rx_fib_index0;
385 s->nat_proto = nat_proto;
386 s->out2in.addr = sm_addr;
387 s->out2in.port = sm_port;
405 s->out2in.fib_index = outside_fib->
fib_index;
413 s->ext_host_port =
vnet_buffer (b0)->ip.reass.l4_dst_port;
421 if (clib_bihash_add_or_overwrite_stale_8_8 (
427 if (clib_bihash_add_or_overwrite_stale_8_8 (
433 thread_index, s->in2out.addr.as_u32, s->out2in.addr.as_u32, s->nat_proto,
434 s->in2out.port, s->out2in.port, s->in2out.fib_index);
437 s->in2out.port, &s->out2in.addr, s->out2in.port,
440 nat_ha_sadd (&s->in2out.addr, s->in2out.port, &s->out2in.addr,
441 s->out2in.port, &s->ext_host_addr, s->ext_host_port,
442 &s->ext_host_nat_addr, s->ext_host_nat_port, s->nat_proto,
443 s->in2out.fib_index, s->flags, thread_index, 0);
448 #ifndef CLIB_MARCH_VARIANT 453 icmp46_header_t *icmp0;
457 icmp46_header_t *inner_icmp0;
463 (
vnet_buffer (b)->ip.reass.icmp_type_or_tcp_flags))
465 *nat_proto = NAT_PROTOCOL_ICMP;
477 case NAT_PROTOCOL_ICMP:
478 inner_icmp0 = (icmp46_header_t *) l4_header;
482 case NAT_PROTOCOL_UDP:
483 case NAT_PROTOCOL_TCP:
487 return NAT44_EI_IN2OUT_ERROR_UNSUPPORTED_PROTOCOL;
513 nat44_ei_session_t **p_s0,
u8 *dont_translate)
518 nat44_ei_session_t *s0 = 0;
536 init_nat_k (&kv0, *addr, *port, *fib_index, *proto);
537 if (clib_bihash_search_8_8 (&nm->
in2out, &kv0, &value0))
542 nm, ip0, *proto, *port, *port, thread_index, sw_if_index0)))
551 nm, node, sw_if_index0, ip0, NAT_PROTOCOL_ICMP, *fib_index,
563 b0->
error = node->
errors[NAT44_EI_IN2OUT_ERROR_BAD_ICMP_TYPE];
568 next0 =
slow_path (nm, b0, ip0, *addr, *port, *fib_index, *proto, &s0,
588 reass.icmp_type_or_tcp_flags)))
590 b0->
error = node->
errors[NAT44_EI_IN2OUT_ERROR_BAD_ICMP_TYPE];
602 *addr = s0->out2in.addr;
603 *port = s0->out2in.port;
604 *fib_index = s0->out2in.fib_index;
612 #ifndef CLIB_MARCH_VARIANT 618 nat44_ei_session_t **s0,
u8 *dont_translate)
642 &sm_addr, &sm_port, &sm_fib_index, 0,
646 node, sw_if_index0, ip0, IP_PROTOCOL_ICMP, *fib_index)))
659 b0->
error = node->
errors[NAT44_EI_IN2OUT_ERROR_NO_TRANSLATION];
665 (
vnet_buffer (b0)->
ip.reass.icmp_type_or_tcp_flags != ICMP4_echo_request
667 ICMP4_echo_reply || !is_addr_only)
669 reass.icmp_type_or_tcp_flags)))
671 b0->
error = node->
errors[NAT44_EI_IN2OUT_ERROR_BAD_ICMP_TYPE];
682 icmp46_header_t *icmp0,
u32 sw_if_index0,
684 u32 next0,
u32 thread_index,
685 nat44_ei_session_t **p_s0);
687 #ifndef CLIB_MARCH_VARIANT 690 icmp46_header_t *icmp0,
u32 sw_if_index0,
692 u32 thread_index, nat44_ei_session_t **p_s0)
703 icmp46_header_t *inner_icmp0;
705 u32 new_addr0, old_addr0;
706 u16 old_id0, new_id0;
707 u16 old_checksum0, new_checksum0;
718 node, thread_index, b0, ip0, &addr, &port, &fib_index, &proto, p_s0,
724 node, thread_index, b0, ip0, &addr, &port, &fib_index, &proto, p_s0,
759 if (icmp0->checksum == 0)
760 icmp0->checksum = 0xffff;
771 sum0 = icmp0->checksum;
793 sum0 = icmp0->checksum;
799 old_checksum0 = inner_ip0->
checksum;
804 new_checksum0 = inner_ip0->
checksum;
805 sum0 = icmp0->checksum;
813 case NAT_PROTOCOL_ICMP:
814 inner_icmp0 = (icmp46_header_t *) l4_header;
821 sum0 = icmp0->checksum;
827 case NAT_PROTOCOL_UDP:
828 case NAT_PROTOCOL_TCP:
833 sum0 = icmp0->checksum;
847 &required_thread_index))
849 if (thread_index != required_thread_index)
851 vnet_buffer (b0)->snat.required_thread_index = required_thread_index;
864 u32 sw_if_index0,
u32 rx_fib_index0,
866 u32 thread_index, nat44_ei_session_t **p_s0)
871 node, next0, thread_index, p_s0);
872 nat44_ei_session_t *s0 = *p_s0;
890 u32 old_addr, new_addr;
919 int is_output_feature)
933 while (n_left_from >= 2)
937 u32 sw_if_index0, sw_if_index1;
940 u32 new_addr0, old_addr0, new_addr1, old_addr1;
941 u16 old_port0, new_port0, old_port1, new_port1;
944 icmp46_header_t *icmp0, *icmp1;
945 u32 rx_fib_index0, rx_fib_index1;
947 nat44_ei_session_t *s0 = 0, *s1 = 0;
949 u32 iph_offset0 = 0, iph_offset1 = 0;
971 if (is_output_feature)
972 iph_offset0 =
vnet_buffer (b0)->ip.reass.save_rewrite_length;
979 icmp0 = (icmp46_header_t *) udp0;
991 ICMP4_time_exceeded_ttl_exceeded_in_transit,
1008 node->
errors[NAT44_EI_IN2OUT_ERROR_UNSUPPORTED_PROTOCOL];
1013 thread_index, sw_if_index0, 1);
1020 nm, b0, ip0, icmp0, sw_if_index0, rx_fib_index0, node, next0,
1021 now, thread_index, &s0);
1025 thread_index, sw_if_index0, 1);
1052 if (is_output_feature)
1066 (proto0 == NAT_PROTOCOL_UDP
1068 clib_host_to_net_u16
1069 (UDP_DST_PORT_dhcp_to_server))
1076 nm, node, sw_if_index0, ip0, proto0, rx_fib_index0,
1083 rx_fib_index0, proto0, &s0, node, next0,
1101 b0->
flags |= VNET_BUFFER_F_IS_NATED;
1106 if (!is_output_feature)
1119 old_port0 =
vnet_buffer (b0)->ip.reass.l4_src_port;
1120 new_port0 = udp0->
src_port = s0->out2in.port;
1121 sum0 = tcp0->checksum;
1134 thread_index, sw_if_index0, 1);
1143 old_port0 =
vnet_buffer (b0)->ip.reass.l4_src_port;
1158 thread_index, sw_if_index0, 1);
1169 && (b0->
flags & VLIB_BUFFER_IS_TRACED)))
1186 thread_index, sw_if_index0, 1);
1189 if (is_output_feature)
1190 iph_offset1 =
vnet_buffer (b1)->ip.reass.save_rewrite_length;
1197 icmp1 = (icmp46_header_t *) udp1;
1207 ICMP4_time_exceeded_ttl_exceeded_in_transit,
1224 node->
errors[NAT44_EI_IN2OUT_ERROR_UNSUPPORTED_PROTOCOL];
1229 thread_index, sw_if_index1, 1);
1236 nm, b1, ip1, icmp1, sw_if_index1, rx_fib_index1, node, next1,
1237 now, thread_index, &s1);
1241 thread_index, sw_if_index1, 1);
1268 if (is_output_feature)
1282 (proto1 == NAT_PROTOCOL_UDP
1284 clib_host_to_net_u16
1285 (UDP_DST_PORT_dhcp_to_server))
1292 nm, node, sw_if_index1, ip1, proto1, rx_fib_index1,
1299 rx_fib_index1, proto1, &s1, node, next1,
1317 b1->
flags |= VNET_BUFFER_F_IS_NATED;
1322 if (!is_output_feature)
1334 old_port1 =
vnet_buffer (b1)->ip.reass.l4_src_port;
1335 new_port1 = udp1->
src_port = s1->out2in.port;
1336 sum1 = tcp1->checksum;
1349 thread_index, sw_if_index1, 1);
1358 old_port1 =
vnet_buffer (b1)->ip.reass.l4_src_port;
1373 thread_index, sw_if_index1, 1);
1384 && (b1->
flags & VLIB_BUFFER_IS_TRACED)))
1400 thread_index, sw_if_index1, 1);
1409 while (n_left_from > 0)
1416 u32 new_addr0, old_addr0;
1417 u16 old_port0, new_port0;
1420 icmp46_header_t *icmp0;
1423 nat44_ei_session_t *s0 = 0;
1425 u32 iph_offset0 = 0;
1431 if (is_output_feature)
1432 iph_offset0 =
vnet_buffer (b0)->ip.reass.save_rewrite_length;
1439 icmp0 = (icmp46_header_t *) udp0;
1449 ICMP4_time_exceeded_ttl_exceeded_in_transit,
1466 node->
errors[NAT44_EI_IN2OUT_ERROR_UNSUPPORTED_PROTOCOL];
1471 thread_index, sw_if_index0, 1);
1478 nm, b0, ip0, icmp0, sw_if_index0, rx_fib_index0, node, next0,
1479 now, thread_index, &s0);
1483 thread_index, sw_if_index0, 1);
1506 if (clib_bihash_search_8_8 (&nm->
in2out, &kv0, &value0))
1510 if (is_output_feature)
1524 (proto0 == NAT_PROTOCOL_UDP
1526 clib_host_to_net_u16
1527 (UDP_DST_PORT_dhcp_to_server))
1534 nm, node, sw_if_index0, ip0, proto0, rx_fib_index0,
1541 rx_fib_index0, proto0, &s0, node, next0,
1560 b0->
flags |= VNET_BUFFER_F_IS_NATED;
1565 if (!is_output_feature)
1577 old_port0 =
vnet_buffer (b0)->ip.reass.l4_src_port;
1578 new_port0 = udp0->
src_port = s0->out2in.port;
1579 sum0 = tcp0->checksum;
1593 thread_index, sw_if_index0, 1);
1602 old_port0 =
vnet_buffer (b0)->ip.reass.l4_src_port;
1618 thread_index, sw_if_index0, 1);
1629 && (b0->
flags & VLIB_BUFFER_IS_TRACED)))
1646 thread_index, sw_if_index0, 1);
1667 .name =
"nat44-ei-in2out",
1668 .vector_size =
sizeof (
u32),
1697 .name =
"nat44-ei-in2out-output",
1698 .vector_size =
sizeof (
u32),
1727 .name =
"nat44-ei-in2out-slowpath",
1728 .vector_size =
sizeof (
u32),
1757 .name =
"nat44-ei-in2out-output-slowpath",
1758 .vector_size =
sizeof (
u32),
1792 while (n_left_from > 0)
1798 while (n_left_from > 0 && n_left_to_next > 0)
1806 u32 new_addr0, old_addr0;
1807 u16 old_port0, new_port0;
1810 icmp46_header_t *icmp0;
1824 n_left_to_next -= 1;
1832 icmp0 = (icmp46_header_t *) udp0;
1842 ICMP4_time_exceeded_ttl_exceeded_in_transit,
1856 rx_fib_index0, node, next0, ~0, 0);
1862 &sm0_addr, &sm0_port, &sm0_fib_index, 0, 0, 0))
1864 b0->
error = node->
errors[NAT44_EI_IN2OUT_ERROR_NO_TRANSLATION];
1869 new_addr0 = sm0_addr.
as_u32;
1870 new_port0 = sm0_port;
1888 sum0 = tcp0->checksum;
1914 sum0 = tcp0->checksum;
1933 vm, node, nm, thread_index, b0, ip0, udp0, tcp0, proto0,
1934 0 , &required_thread_index);
1936 if (thread_index != required_thread_index)
1939 required_thread_index;
1945 && (b0->
flags & VLIB_BUFFER_IS_TRACED)))
1964 to_next, n_left_to_next,
1975 .name =
"nat44-ei-in2out-fast",
1976 .vector_size =
sizeof (
u32),
2006 .name =
"nat44-ei-in2out-hairpinning-handoff-ip4-lookup",
2007 .vector_size =
sizeof (
u32),
2028 .name =
"nat44-ei-in2out-hairpinning-handoff-interface-output",
2029 .vector_size =
sizeof (
u32),
2050 int is_hairpinning = 0;
2056 while (n_left_from > 0)
2062 while (n_left_from > 0 && n_left_to_next > 0)
2071 icmp46_header_t *icmp0;
2081 n_left_to_next -= 1;
2089 icmp0 = (icmp46_header_t *) udp0;
2096 case NAT_PROTOCOL_TCP:
2098 case NAT_PROTOCOL_UDP:
2100 vm, node, nm, thread_index, b0, ip0, udp0, tcp0, proto0,
2101 0 , &required_thread_index);
2103 case NAT_PROTOCOL_ICMP:
2105 nm, b0, thread_index, ip0, icmp0,
2106 &required_thread_index));
2108 case NAT_PROTOCOL_OTHER:
2114 if (thread_index != required_thread_index)
2121 (b0->
flags & VLIB_BUFFER_IS_TRACED)))
2139 n_left_to_next, bi0, next0);
2155 .name =
"nat44-ei-in2out-hairpinning-finish-ip4-lookup",
2156 .vector_size =
sizeof (
u32),
2181 .name =
"nat44-ei-in2out-hairpinning-finish-interface-output",
2182 .vector_size =
sizeof (
u32),
static void mss_clamping(u16 mss_clamping, tcp_header_t *tcp, ip_csum_t *sum)
u32 flags
buffer flags: VLIB_BUFFER_FREE_LIST_INDEX_MASK: bits used to store free list index, VLIB_BUFFER_IS_TRACED: trace this buffer.
fib_protocol_t fp_proto
protocol type
static ip_csum_t ip_incremental_checksum_buffer(vlib_main_t *vm, vlib_buffer_t *first_buffer, u32 first_buffer_offset, u32 n_bytes_to_checksum, ip_csum_t sum)
static u8 * format_nat44_ei_in2out_trace(u8 *s, va_list *args)
static void nat44_ei_delete_user_with_no_session(nat44_ei_main_t *nm, nat44_ei_user_t *u, u32 thread_index)
int nat44_o2i_is_idle_session_cb(clib_bihash_kv_8_8_t *kv, void *arg)
struct nat44_ei_main_s::@81::@82 fastpath
vlib_node_registration_t nat44_ei_in2out_fast_node
(constructor) VLIB_REGISTER_NODE (nat44_ei_in2out_fast_node)
vlib_node_registration_t nat44_ei_in2out_hairpinning_finish_ip4_lookup_node
(constructor) VLIB_REGISTER_NODE (nat44_ei_in2out_hairpinning_finish_ip4_lookup_node) ...
static int nat44_ei_not_translate_output_feature(nat44_ei_main_t *nm, ip4_header_t *ip0, u32 proto0, u16 src_port, u16 dst_port, u32 thread_index, u32 sw_if_index)
static char * nat44_ei_in2out_error_strings[]
nat44_ei_interface_t * interfaces
#define pool_foreach(VAR, POOL)
Iterate through pool.
int nat44_i2o_is_idle_session_cb(clib_bihash_kv_8_8_t *kv, void *arg)
int nat44_ei_hairpinning(vlib_main_t *vm, vlib_node_runtime_t *node, nat44_ei_main_t *nm, u32 thread_index, vlib_buffer_t *b0, ip4_header_t *ip0, udp_header_t *udp0, tcp_header_t *tcp0, u32 proto0, int do_trace, u32 *required_thread_index)
vl_api_ip_port_and_mask_t dst_port
u16 nexts[VLIB_FRAME_SIZE]
static f64 vlib_time_now(vlib_main_t *vm)
u32 nat44_ei_icmp_match_in2out_fast(vlib_node_runtime_t *node, u32 thread_index, vlib_buffer_t *b0, ip4_header_t *ip0, ip4_address_t *addr, u16 *port, u32 *fib_index, nat_protocol_t *proto, nat44_ei_session_t **s0, u8 *dont_translate)
static uword nat44_ei_hairpinning_handoff_fn_inline(vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame, u32 fq_index)
static int nat44_ei_not_translate(nat44_ei_main_t *nm, vlib_node_runtime_t *node, u32 sw_if_index0, ip4_header_t *ip0, u32 proto0, u32 rx_fib_index0, u32 thread_index)
NAT44 endpoint independent plugin declarations.
nat44_ei_session_t * sessions
static void init_nat_i2o_kv(clib_bihash_kv_8_8_t *kv, nat44_ei_session_t *s, u32 thread_index, u32 session_index)
nat44_ei_in2out_hairpinnig_finish_next_t
u32 * fib_index_by_sw_if_index
Table index indexed by software interface.
static void vlib_increment_simple_counter(vlib_simple_counter_main_t *cm, u32 thread_index, u32 index, u64 increment)
Increment a simple counter.
static u32 nat_value_get_thread_index(clib_bihash_kv_8_8_t *value)
vlib_main_t vlib_node_runtime_t vlib_frame_t * frame
#define VLIB_NODE_FN(node)
vlib_error_t * errors
Vector of errors for this node.
static uword vlib_buffer_length_in_chain(vlib_main_t *vm, vlib_buffer_t *b)
Get length in bytes of the buffer chain.
static u8 * format_nat44_ei_in2out_fast_trace(u8 *s, va_list *args)
struct _tcp_header tcp_header_t
static_always_inline u8 icmp_type_is_error_message(u8 icmp_type)
nat44_ei_static_mapping_t * static_mappings
static int ip4_is_fragment(const ip4_header_t *i)
static void init_nat_o2i_kv(clib_bihash_kv_8_8_t *kv, nat44_ei_session_t *s, u32 thread_index, u32 session_index)
vlib_node_registration_t nat44_ei_in2out_slowpath_node
(constructor) VLIB_REGISTER_NODE (nat44_ei_in2out_slowpath_node)
#define static_always_inline
static void nat44_ei_user_session_increment(nat44_ei_main_t *nm, nat44_ei_user_t *u, u8 is_static)
static uword ip4_header_checksum_is_valid(ip4_header_t *i)
static_always_inline u8 nat44_ei_maximum_sessions_exceeded(nat44_ei_main_t *nm, u32 thread_index)
nat44_ei_main_per_thread_data_t * tnm
static nat_protocol_t ip_proto_to_nat_proto(u8 ip_proto)
Common NAT inline functions.
void nat_syslog_nat44_apmdel(u32 ssubix, u32 sfibix, ip4_address_t *isaddr, u16 isport, ip4_address_t *xsaddr, u16 xsport, nat_protocol_t proto)
nat44_ei_address_t * addresses
vlib_node_registration_t nat44_ei_in2out_hairpinning_handoff_interface_output_node
(constructor) VLIB_REGISTER_NODE (nat44_ei_in2out_hairpinning_handoff_interface_output_node) ...
vlib_get_buffers(vm, from, b, n_left_from)
description fragment has unexpected format
#define vlib_prefetch_buffer_header(b, type)
Prefetch buffer metadata.
u32 ip4_fib_table_get_index_for_sw_if_index(u32 sw_if_index)
#define vec_elt_at_index(v, i)
Get vector value at index i checking that i is in bounds.
Aggregate type for a prefix.
#define nat_elog_warn(_pm, nat_elog_str)
u32 nat44_ei_icmp_hairpinning(nat44_ei_main_t *nm, vlib_buffer_t *b0, u32 thread_index, ip4_header_t *ip0, icmp46_header_t *icmp0, u32 *required_thread_index)
static u32 nat_value_get_session_index(clib_bihash_kv_8_8_t *value)
static void * ip4_next_header(ip4_header_t *i)
struct nat44_ei_main_s::@81::@83 slowpath
vlib_buffer_enqueue_to_next(vm, node, from,(u16 *) nexts, frame->n_vectors)
#define nat44_ei_is_session_static(sp)
struct nat44_ei_main_s::@81 counters
static_always_inline u32 nat_session_get_timeout(nat_timeouts_t *timeouts, nat_protocol_t proto, u8 state)
static_always_inline nat44_ei_in2out_error_t icmp_get_key(vlib_buffer_t *b, ip4_header_t *ip0, ip4_address_t *addr, u16 *port, nat_protocol_t *nat_proto)
fib_node_index_t fib_table_lookup(u32 fib_index, const fib_prefix_t *prefix)
Perfom a longest prefix match in the non-forwarding table.
vl_api_fib_path_type_t type
vlib_error_t error
Error code for buffers to be enqueued to error handler.
#define NAT44_EI_SESSION_FLAG_STATIC_MAPPING
void nat_syslog_nat44_apmadd(u32 ssubix, u32 sfibix, ip4_address_t *isaddr, u16 isport, ip4_address_t *xsaddr, u16 xsport, nat_protocol_t proto)
#define pool_elt_at_index(p, i)
Returns pointer to element at given index.
vl_api_interface_index_t sw_if_index
static_always_inline u32 nat44_ei_icmp_in2out_slow_path(nat44_ei_main_t *nm, vlib_buffer_t *b0, ip4_header_t *ip0, icmp46_header_t *icmp0, u32 sw_if_index0, u32 rx_fib_index0, vlib_node_runtime_t *node, u32 next0, f64 now, u32 thread_index, nat44_ei_session_t **p_s0)
vlib_node_registration_t nat44_ei_in2out_hairpinning_handoff_ip4_lookup_node
(constructor) VLIB_REGISTER_NODE (nat44_ei_in2out_hairpinning_handoff_ip4_lookup_node) ...
nat44_ei_interface_t * output_feature_interfaces
vlib_node_registration_t nat44_ei_in2out_output_slowpath_node
(constructor) VLIB_REGISTER_NODE (nat44_ei_in2out_output_slowpath_node)
void nat44_ei_free_outside_address_and_port(nat44_ei_address_t *addresses, u32 thread_index, ip4_address_t *addr, u16 port, nat_protocol_t protocol)
static void * vlib_buffer_get_current(vlib_buffer_t *b)
Get pointer to current data to process.
vl_api_address_union_t src_address
#define vlib_validate_buffer_enqueue_x1(vm, node, next_index, to_next, n_left_to_next, bi0, next0)
Finish enqueueing one buffer forward in the graph.
#define vlib_get_next_frame(vm, node, next_index, vectors, n_vectors_left)
Get pointer to next frame vector data by (vlib_node_runtime_t, next_index).
static u8 * format_nat44_ei_hairpinning_handoff_trace(u8 *s, va_list *args)
static char * nat44_ei_hairpinning_handoff_error_strings[]
u32 fib_entry_get_resolving_interface(fib_node_index_t entry_index)
clib_bihash_8_8_t static_mapping_by_local
static int nat_in2out_sm_unknown_proto(nat44_ei_main_t *nm, vlib_buffer_t *b, ip4_header_t *ip, u32 rx_fib_index)
vl_api_ip_port_and_mask_t src_port
vlib_node_registration_t nat44_ei_in2out_node
(constructor) VLIB_REGISTER_NODE (nat44_ei_in2out_node)
#define VLIB_REGISTER_NODE(x,...)
nat44_ei_main_per_thread_data_t * per_thread_data
#define CLIB_PREFETCH(addr, size, type)
sll srl srl sll sra u16x4 i
void nat_ipfix_logging_nat44_ses_create(u32 thread_index, u32 src_ip, u32 nat_src_ip, nat_protocol_t nat_proto, u16 src_port, u16 nat_src_port, u32 fib_index)
Generate NAT44 session create event.
u32 fib_node_index_t
A typedef of a node index.
u32 in2out_hairpinning_finish_interface_output_node_fq_index
8 octet key, 8 octet key value pair
static u8 nat44_ei_is_interface_addr(ip4_main_t *im, vlib_node_runtime_t *node, u32 sw_if_index0, u32 ip4_addr)
u32 nat44_ei_icmp_match_in2out_slow(vlib_node_runtime_t *node, u32 thread_index, vlib_buffer_t *b0, ip4_header_t *ip0, ip4_address_t *addr, u16 *port, u32 *fib_index, nat_protocol_t *proto, nat44_ei_session_t **p_s0, u8 *dont_translate)
Get address and port values to be used for ICMP packet translation and create session if needed...
static int nat44_ei_not_translate_fast(vlib_node_runtime_t *node, u32 sw_if_index0, ip4_header_t *ip0, u32 proto0, u32 rx_fib_index0)
u16 cached_next_index
Next frame index that vector arguments were last enqueued to last time this node ran.
u32 in2out_hairpinning_finish_ip4_lookup_node_fq_index
nat44_ei_in2out_next_t next_index
ip4_address_t external_addr
vlib_put_next_frame(vm, node, next_index, 0)
static vlib_main_t * vlib_get_main(void)
void nat_ipfix_logging_max_sessions(u32 thread_index, u32 limit)
Generate maximum session entries exceeded event.
#define vec_elt(v, i)
Get vector value at index i.
void nat44_ei_delete_session(nat44_ei_main_t *nm, nat44_ei_session_t *ses, u32 thread_index)
static void nat44_ei_session_update_counters(nat44_ei_session_t *s, f64 now, uword bytes, u32 thread_index)
vlib_node_registration_t nat44_ei_in2out_hairpinning_finish_interface_output_node
(constructor) VLIB_REGISTER_NODE (nat44_ei_in2out_hairpinning_finish_interface_output_node) ...
void nat_ha_sadd(ip4_address_t *in_addr, u16 in_port, ip4_address_t *out_addr, u16 out_port, ip4_address_t *eh_addr, u16 eh_port, ip4_address_t *ehn_addr, u16 ehn_port, u8 proto, u32 fib_index, u16 flags, u32 thread_index, u8 is_resync)
Create session add HA event.
static_always_inline int nat44_ei_in2out_hairpinning_finish_inline(vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
#define FIB_NODE_INDEX_INVALID
#define vec_len(v)
Number of elements in vector (rvalue-only, NULL tolerant)
static void nat44_ei_session_update_lru(nat44_ei_main_t *nm, nat44_ei_session_t *s, u32 thread_index)
Per-user LRU list maintenance.
VLIB buffer representation.
nat44_ei_outside_fib_t * outside_fibs
static void * vlib_frame_vector_args(vlib_frame_t *f)
Get pointer to frame vector data.
#define ip_csum_update(sum, old, new, type, field)
nat44_ei_main_t nat44_ei_main
static void init_nat_o2i_k(clib_bihash_kv_8_8_t *kv, nat44_ei_session_t *s)
nat44_ei_session_t * nat44_ei_session_alloc_or_recycle(nat44_ei_main_t *nm, nat44_ei_user_t *u, u32 thread_index, f64 now)
NAT port/address allocation lib.
#define vec_foreach(var, vec)
Vector iterator.
#define nat_elog_notice(_pm, nat_elog_str)
u16 flags
Copy of main node flags.
void nat_ha_sdel(ip4_address_t *out_addr, u16 out_port, ip4_address_t *eh_addr, u16 eh_port, u8 proto, u32 fib_index, u32 session_thread_index)
Create session delete HA event.
void * vlib_add_trace(vlib_main_t *vm, vlib_node_runtime_t *r, vlib_buffer_t *b, u32 n_data_bytes)
static int ip4_header_bytes(const ip4_header_t *i)
nat44_ei_alloc_out_addr_and_port_function_t * alloc_addr_and_port
static u32 slow_path(nat44_ei_main_t *nm, vlib_buffer_t *b0, ip4_header_t *ip0, ip4_address_t i2o_addr, u16 i2o_port, u32 rx_fib_index0, nat_protocol_t nat_proto, nat44_ei_session_t **sessionp, vlib_node_runtime_t *node, u32 next0, u32 thread_index, f64 now)
#define VLIB_NODE_FLAG_TRACE
void nat44_ei_hairpinning_sm_unknown_proto(nat44_ei_main_t *nm, vlib_buffer_t *b, ip4_header_t *ip)
vlib_main_t vlib_node_runtime_t * node
#define CLIB_CACHE_LINE_BYTES
static uword nat44_ei_in2out_node_fn_inline(vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame, int is_slow_path, int is_output_feature)
u32 max_translations_per_thread
int nat44_ei_static_mapping_match(ip4_address_t match_addr, u16 match_port, u32 match_fib_index, nat_protocol_t match_protocol, ip4_address_t *mapping_addr, u16 *mapping_port, u32 *mapping_fib_index, u8 by_external, u8 *is_addr_only, u8 *is_identity_nat)
Match NAT44-EI static mapping.
vlib_buffer_t * bufs[VLIB_FRAME_SIZE]
#define nat44_ei_interface_is_inside(ip)
vlib_node_registration_t nat44_ei_in2out_output_node
(constructor) VLIB_REGISTER_NODE (nat44_ei_in2out_output_node)
u32 nat44_ei_icmp_in2out(vlib_buffer_t *b0, ip4_header_t *ip0, icmp46_header_t *icmp0, u32 sw_if_index0, u32 rx_fib_index0, vlib_node_runtime_t *node, u32 next0, u32 thread_index, nat44_ei_session_t **p_s0)
static void init_nat_k(clib_bihash_kv_8_8_t *kv, ip4_address_t addr, u16 port, u32 fib_index, nat_protocol_t proto)
static_always_inline void icmp4_error_set_vnet_buffer(vlib_buffer_t *b, u8 type, u8 code, u32 data)
static vlib_buffer_t * vlib_get_buffer(vlib_main_t *vm, u32 buffer_index)
Translate buffer index into buffer pointer.
static u16 ip_csum_fold(ip_csum_t c)
nat44_ei_user_t * nat44_ei_user_get_or_create(nat44_ei_main_t *nm, ip4_address_t *addr, u32 fib_index, u32 thread_index)
#define nat44_ei_interface_is_outside(ip)
#define foreach_nat44_ei_in2out_error
void nat_ipfix_logging_nat44_ses_delete(u32 thread_index, u32 src_ip, u32 nat_src_ip, nat_protocol_t nat_proto, u16 src_port, u16 nat_src_port, u32 fib_index)
Generate NAT44 session delete event.