in2out.c File Reference

NAT44 inside to outside network translation. More...

Include dependency graph for in2out.c:

Go to the source code of this file.

Data Structures
struct	snat_in2out_trace_t

Macros
#define	foreach_snat_in2out_error

Enumerations
enum	snat_in2out_error_t { SNAT_IN2OUT_N_ERROR }
enum	snat_in2out_next_t {   SNAT_IN2OUT_NEXT_LOOKUP, SNAT_IN2OUT_NEXT_DROP, SNAT_IN2OUT_NEXT_ICMP_ERROR, SNAT_IN2OUT_NEXT_SLOW_PATH,   SNAT_IN2OUT_NEXT_REASS, SNAT_IN2OUT_N_NEXT }

Functions
static u8 *	format_snat_in2out_trace (u8 *s, va_list *args)
static u8 *	format_snat_in2out_fast_trace (u8 *s, va_list *args)
static int	snat_not_translate (snat_main_t *sm, vlib_node_runtime_t *node, u32 sw_if_index0, ip4_header_t *ip0, u32 proto0, u32 rx_fib_index0, u32 thread_index)
static int	nat_not_translate_output_feature (snat_main_t *sm, ip4_header_t *ip0, u32 proto0, u16 src_port, u16 dst_port, u32 thread_index, u32 sw_if_index)
int	nat44_i2o_is_idle_session_cb (clib_bihash_kv_8_8_t *kv, void *arg)
static u32	slow_path (snat_main_t *sm, vlib_buffer_t *b0, ip4_header_t *ip0, u32 rx_fib_index0, snat_session_key_t *key0, snat_session_t **sessionp, vlib_node_runtime_t *node, u32 next0, u32 thread_index, f64 now)
static_always_inline snat_in2out_error_t	icmp_get_key (ip4_header_t *ip0, snat_session_key_t *p_key0)
u32	icmp_match_in2out_slow (snat_main_t *sm, vlib_node_runtime_t *node, u32 thread_index, vlib_buffer_t *b0, ip4_header_t *ip0, u8 *p_proto, snat_session_key_t *p_value, u8 *p_dont_translate, void *d, void *e)
	Get address and port values to be used for ICMP packet translation and create session if needed. More...
u32	icmp_match_in2out_fast (snat_main_t *sm, vlib_node_runtime_t *node, u32 thread_index, vlib_buffer_t *b0, ip4_header_t *ip0, u8 *p_proto, snat_session_key_t *p_value, u8 *p_dont_translate, void *d, void *e)
	Get address and port values to be used for ICMP packet translation. More...
u32	icmp_in2out (snat_main_t *sm, vlib_buffer_t *b0, ip4_header_t *ip0, icmp46_header_t *icmp0, u32 sw_if_index0, u32 rx_fib_index0, vlib_node_runtime_t *node, u32 next0, u32 thread_index, void *d, void *e)
static u32	icmp_in2out_slow_path (snat_main_t *sm, vlib_buffer_t *b0, ip4_header_t *ip0, icmp46_header_t *icmp0, u32 sw_if_index0, u32 rx_fib_index0, vlib_node_runtime_t *node, u32 next0, f64 now, u32 thread_index, snat_session_t **p_s0)
static int	nat_in2out_sm_unknown_proto (snat_main_t *sm, vlib_buffer_t *b, ip4_header_t *ip, u32 rx_fib_index)
static uword	snat_in2out_node_fn_inline (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame, int is_slow_path, int is_output_feature)
static uword	snat_in2out_fast_path_fn (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
	VLIB_NODE_FUNCTION_MULTIARCH (snat_in2out_node, snat_in2out_fast_path_fn)
static uword	snat_in2out_output_fast_path_fn (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
	VLIB_NODE_FUNCTION_MULTIARCH (snat_in2out_output_node, snat_in2out_output_fast_path_fn)
static uword	snat_in2out_slow_path_fn (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
	VLIB_NODE_FUNCTION_MULTIARCH (snat_in2out_slowpath_node, snat_in2out_slow_path_fn)
static uword	snat_in2out_output_slow_path_fn (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
	VLIB_NODE_FUNCTION_MULTIARCH (snat_in2out_output_slowpath_node, snat_in2out_output_slow_path_fn)
static uword	nat44_in2out_reass_node_fn (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
	VLIB_NODE_FUNCTION_MULTIARCH (nat44_in2out_reass_node, nat44_in2out_reass_node_fn)
static uword	snat_in2out_fast_static_map_fn (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
	VLIB_NODE_FUNCTION_MULTIARCH (snat_in2out_fast_node, snat_in2out_fast_static_map_fn)

Variables
vlib_node_registration_t	snat_in2out_node
	(constructor) VLIB_REGISTER_NODE (snat_in2out_node) More...
vlib_node_registration_t	snat_in2out_slowpath_node
	(constructor) VLIB_REGISTER_NODE (snat_in2out_slowpath_node) More...
vlib_node_registration_t	snat_in2out_fast_node
	(constructor) VLIB_REGISTER_NODE (snat_in2out_fast_node) More...
vlib_node_registration_t	snat_in2out_output_node
	(constructor) VLIB_REGISTER_NODE (snat_in2out_output_node) More...
vlib_node_registration_t	snat_in2out_output_slowpath_node
	(constructor) VLIB_REGISTER_NODE (snat_in2out_output_slowpath_node) More...
vlib_node_registration_t	nat44_in2out_reass_node
	(constructor) VLIB_REGISTER_NODE (nat44_in2out_reass_node) More...
static char *	snat_in2out_error_strings []

Detailed Description

NAT44 inside to outside network translation.

Definition in file in2out.c.

Macro Definition Documentation

#define foreach_snat_in2out_error

Value:

_(UNSUPPORTED_PROTOCOL, "unsupported protocol")         \
_(IN2OUT_PACKETS, "good in2out packets processed")      \
_(OUT_OF_PORTS, "out of ports")                         \
_(BAD_OUTSIDE_FIB, "outside VRF ID not found")          \
_(BAD_ICMP_TYPE, "unsupported ICMP type")               \
_(NO_TRANSLATION, "no translation")                     \
_(MAX_SESSIONS_EXCEEDED, "maximum sessions exceeded")   \
_(DROP_FRAGMENT, "drop fragment")                       \
_(MAX_REASS, "maximum reassemblies exceeded")           \
_(MAX_FRAG, "maximum fragments per reassembly exceeded")\
_(TCP_PACKETS, "TCP packets")                           \
_(UDP_PACKETS, "UDP packets")                           \
_(ICMP_PACKETS, "ICMP packets")                         \
_(OTHER_PACKETS, "other protocol packets")              \
_(FRAGMENTS, "fragments")                               \
_(CACHED_FRAGMENTS, "cached fragments")                 \
_(PROCESSED_FRAGMENTS, "processed fragments")

Definition at line 82 of file in2out.c.

Enumeration Type Documentation

enum snat_in2out_error_t

Enumerator
SNAT_IN2OUT_N_ERROR

Definition at line 101 of file in2out.c.

enum snat_in2out_next_t

Enumerator
SNAT_IN2OUT_NEXT_LOOKUP
SNAT_IN2OUT_NEXT_DROP
SNAT_IN2OUT_NEXT_ICMP_ERROR
SNAT_IN2OUT_NEXT_SLOW_PATH
SNAT_IN2OUT_NEXT_REASS
SNAT_IN2OUT_N_NEXT

Definition at line 115 of file in2out.c.

Function Documentation

static u8* format_snat_in2out_fast_trace ( u8 *  s, va_list *  args  )

static

Definition at line 63 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static u8* format_snat_in2out_trace ( u8 *  s, va_list *  args  )

static

Definition at line 47 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static_always_inline snat_in2out_error_t icmp_get_key	(	ip4_header_t *	ip0,
		snat_session_key_t *	p_key0
	)

Definition at line 390 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

u32 icmp_in2out	(	snat_main_t *	sm,
		vlib_buffer_t *	b0,
		ip4_header_t *	ip0,
		icmp46_header_t *	icmp0,
		u32	sw_if_index0,
		u32	rx_fib_index0,
		vlib_node_runtime_t *	node,
		u32	next0,
		u32	thread_index,
		void *	d,
		void *	e
	)

Definition at line 635 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static u32 icmp_in2out_slow_path ( snat_main_t *  sm, vlib_buffer_t *  b0, ip4_header_t *  ip0, icmp46_header_t *  icmp0, u32  sw_if_index0, u32  rx_fib_index0, vlib_node_runtime_t *  node, u32  next0, f64  now, u32  thread_index, snat_session_t **  p_s0  )

inlinestatic

Definition at line 785 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

u32 icmp_match_in2out_fast	(	snat_main_t *	sm,
		vlib_node_runtime_t *	node,
		u32	thread_index,
		vlib_buffer_t *	b0,
		ip4_header_t *	ip0,
		u8 *	p_proto,
		snat_session_key_t *	p_value,
		u8 *	p_dont_translate,
		void *	d,
		void *	e
	)

Get address and port values to be used for ICMP packet translation.

Parameters

[in]	sm	NAT main
[in,out]	node	NAT node runtime
[in]	thread_index	thread index
[in,out]	b0	buffer containing packet to be translated
[out]	p_proto	protocol used for matching
[out]	p_value	address and port after NAT translation
[out]	p_dont_translate	if packet should not be translated
	d	optional parameter
	e	optional parameter

Definition at line 566 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

u32 icmp_match_in2out_slow	(	snat_main_t *	sm,
		vlib_node_runtime_t *	node,
		u32	thread_index,
		vlib_buffer_t *	b0,
		ip4_header_t *	ip0,
		u8 *	p_proto,
		snat_session_key_t *	p_value,
		u8 *	p_dont_translate,
		void *	d,
		void *	e
	)

Get address and port values to be used for ICMP packet translation and create session if needed.

Parameters

[in,out]	sm	NAT main
[in,out]	node	NAT node runtime
[in]	thread_index	thread index
[in,out]	b0	buffer containing packet to be translated
[out]	p_proto	protocol used for matching
[out]	p_value	address and port after NAT translation
[out]	p_dont_translate	if packet should not be translated
	d	optional parameter
	e	optional parameter

Definition at line 449 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

int nat44_i2o_is_idle_session_cb	(	clib_bihash_kv_8_8_t *	kv,
		void *	arg
	)

Definition at line 202 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static uword nat44_in2out_reass_node_fn ( vlib_main_t *  vm, vlib_node_runtime_t *  node, vlib_frame_t *  frame  )

static

Definition at line 1703 of file in2out.c.

Here is the call graph for this function:

static int nat_in2out_sm_unknown_proto ( snat_main_t *  sm, vlib_buffer_t *  b, ip4_header_t *  ip, u32  rx_fib_index  )

static

Definition at line 811 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static int nat_not_translate_output_feature ( snat_main_t *  sm, ip4_header_t *  ip0, u32  proto0, u16  src_port, u16  dst_port, u32  thread_index, u32  sw_if_index  )

inlinestatic

Definition at line 160 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static u32 slow_path ( snat_main_t *  sm, vlib_buffer_t *  b0, ip4_header_t *  ip0, u32  rx_fib_index0, snat_session_key_t *  key0, snat_session_t **  sessionp, vlib_node_runtime_t *  node, u32  next0, u32  thread_index, f64  now  )

static

Definition at line 244 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static uword snat_in2out_fast_path_fn ( vlib_main_t *  vm, vlib_node_runtime_t *  node, vlib_frame_t *  frame  )

static

Definition at line 1554 of file in2out.c.

Here is the call graph for this function:

static uword snat_in2out_fast_static_map_fn ( vlib_main_t *  vm, vlib_node_runtime_t *  node, vlib_frame_t *  frame  )

static

Definition at line 2003 of file in2out.c.

Here is the call graph for this function:

static uword snat_in2out_node_fn_inline ( vlib_main_t *  vm, vlib_node_runtime_t *  node, vlib_frame_t *  frame, int  is_slow_path, int  is_output_feature  )

inlinestatic

Definition at line 849 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static uword snat_in2out_output_fast_path_fn ( vlib_main_t *  vm, vlib_node_runtime_t *  node, vlib_frame_t *  frame  )

static

Definition at line 1590 of file in2out.c.

Here is the call graph for this function:

static uword snat_in2out_output_slow_path_fn ( vlib_main_t *  vm, vlib_node_runtime_t *  node, vlib_frame_t *  frame  )

static

Definition at line 1665 of file in2out.c.

Here is the call graph for this function:

static uword snat_in2out_slow_path_fn ( vlib_main_t *  vm, vlib_node_runtime_t *  node, vlib_frame_t *  frame  )

static

Definition at line 1628 of file in2out.c.

Here is the call graph for this function:

static int snat_not_translate ( snat_main_t *  sm, vlib_node_runtime_t *  node, u32  sw_if_index0, ip4_header_t *  ip0, u32  proto0, u32  rx_fib_index0, u32  thread_index  )

inlinestatic

Definition at line 126 of file in2out.c.

Here is the call graph for this function:

Here is the caller graph for this function:

VLIB_NODE_FUNCTION_MULTIARCH	(	snat_in2out_node	,
		snat_in2out_fast_path_fn
	)

Here is the caller graph for this function:

VLIB_NODE_FUNCTION_MULTIARCH	(	snat_in2out_output_node	,
		snat_in2out_output_fast_path_fn
	)

VLIB_NODE_FUNCTION_MULTIARCH	(	snat_in2out_slowpath_node	,
		snat_in2out_slow_path_fn
	)

VLIB_NODE_FUNCTION_MULTIARCH	(	snat_in2out_output_slowpath_node	,
		snat_in2out_output_slow_path_fn
	)

VLIB_NODE_FUNCTION_MULTIARCH	(	nat44_in2out_reass_node	,
		nat44_in2out_reass_node_fn
	)

VLIB_NODE_FUNCTION_MULTIARCH	(	snat_in2out_fast_node	,
		snat_in2out_fast_static_map_fn
	)

Variable Documentation

vlib_node_registration_t nat44_in2out_reass_node

Initial value:

= {
  .function = nat44_in2out_reass_node_fn,
  .name = "nat44-in2out-reass",
  .vector_size = sizeof (u32),
  .format_trace = format_nat44_reass_trace,
  .type = VLIB_NODE_TYPE_INTERNAL,

  .n_errors = ARRAY_LEN(snat_in2out_error_strings),
  .error_strings = snat_in2out_error_strings,

  .n_next_nodes = SNAT_IN2OUT_N_NEXT,
  .next_nodes = {
    [SNAT_IN2OUT_NEXT_DROP] = "error-drop",
    [SNAT_IN2OUT_NEXT_LOOKUP] = "ip4-lookup",
    [SNAT_IN2OUT_NEXT_SLOW_PATH] = "nat44-in2out-slowpath",
    [SNAT_IN2OUT_NEXT_ICMP_ERROR] = "ip4-icmp-error",
    [SNAT_IN2OUT_NEXT_REASS] = "nat44-in2out-reass",
  },
}

(constructor) VLIB_REGISTER_NODE (nat44_in2out_reass_node)

Definition at line 80 of file in2out.c.

char* snat_in2out_error_strings[]

static

Initial value:

= {
#define _(sym,string) 
  foreach_snat_in2out_error

}

Definition at line 109 of file in2out.c.

vlib_node_registration_t snat_in2out_fast_node

Initial value:

= {
  .function = snat_in2out_fast_static_map_fn,
  .name = "nat44-in2out-fast",
  .vector_size = sizeof (u32),
  .format_trace = format_snat_in2out_fast_trace,
  .type = VLIB_NODE_TYPE_INTERNAL,

  .n_errors = ARRAY_LEN(snat_in2out_error_strings),
  .error_strings = snat_in2out_error_strings,

  .runtime_data_bytes = sizeof (snat_runtime_t),

  .n_next_nodes = SNAT_IN2OUT_N_NEXT,

  
  .next_nodes = {
    [SNAT_IN2OUT_NEXT_DROP] = "error-drop",
    [SNAT_IN2OUT_NEXT_LOOKUP] = "ip4-lookup",
    [SNAT_IN2OUT_NEXT_SLOW_PATH] = "nat44-in2out-slowpath",
    [SNAT_IN2OUT_NEXT_ICMP_ERROR] = "ip4-icmp-error",
    [SNAT_IN2OUT_NEXT_REASS] = "nat44-in2out-reass",
  },
}

(constructor) VLIB_REGISTER_NODE (snat_in2out_fast_node)

Definition at line 77 of file in2out.c.

vlib_node_registration_t snat_in2out_node

Initial value:

= {
  .function = snat_in2out_fast_path_fn,
  .name = "nat44-in2out",
  .vector_size = sizeof (u32),
  .format_trace = format_snat_in2out_trace,
  .type = VLIB_NODE_TYPE_INTERNAL,

  .n_errors = ARRAY_LEN(snat_in2out_error_strings),
  .error_strings = snat_in2out_error_strings,

  .runtime_data_bytes = sizeof (snat_runtime_t),

  .n_next_nodes = SNAT_IN2OUT_N_NEXT,

  
  .next_nodes = {
    [SNAT_IN2OUT_NEXT_DROP] = "error-drop",
    [SNAT_IN2OUT_NEXT_LOOKUP] = "ip4-lookup",
    [SNAT_IN2OUT_NEXT_SLOW_PATH] = "nat44-in2out-slowpath",
    [SNAT_IN2OUT_NEXT_ICMP_ERROR] = "ip4-icmp-error",
    [SNAT_IN2OUT_NEXT_REASS] = "nat44-in2out-reass",
  },
}

(constructor) VLIB_REGISTER_NODE (snat_in2out_node)

Definition at line 75 of file in2out.c.

vlib_node_registration_t snat_in2out_output_node

Initial value:

= {
  .function = snat_in2out_output_fast_path_fn,
  .name = "nat44-in2out-output",
  .vector_size = sizeof (u32),
  .format_trace = format_snat_in2out_trace,
  .type = VLIB_NODE_TYPE_INTERNAL,

  .n_errors = ARRAY_LEN(snat_in2out_error_strings),
  .error_strings = snat_in2out_error_strings,

  .runtime_data_bytes = sizeof (snat_runtime_t),

  .n_next_nodes = SNAT_IN2OUT_N_NEXT,

  
  .next_nodes = {
    [SNAT_IN2OUT_NEXT_DROP] = "error-drop",
    [SNAT_IN2OUT_NEXT_LOOKUP] = "interface-output",
    [SNAT_IN2OUT_NEXT_SLOW_PATH] = "nat44-in2out-output-slowpath",
    [SNAT_IN2OUT_NEXT_ICMP_ERROR] = "ip4-icmp-error",
    [SNAT_IN2OUT_NEXT_REASS] = "nat44-in2out-reass",
  },
}

(constructor) VLIB_REGISTER_NODE (snat_in2out_output_node)

Definition at line 78 of file in2out.c.

vlib_node_registration_t snat_in2out_output_slowpath_node

Initial value:

= {
  .function = snat_in2out_output_slow_path_fn,
  .name = "nat44-in2out-output-slowpath",
  .vector_size = sizeof (u32),
  .format_trace = format_snat_in2out_trace,
  .type = VLIB_NODE_TYPE_INTERNAL,

  .n_errors = ARRAY_LEN(snat_in2out_error_strings),
  .error_strings = snat_in2out_error_strings,

  .runtime_data_bytes = sizeof (snat_runtime_t),

  .n_next_nodes = SNAT_IN2OUT_N_NEXT,

  
  .next_nodes = {
    [SNAT_IN2OUT_NEXT_DROP] = "error-drop",
    [SNAT_IN2OUT_NEXT_LOOKUP] = "interface-output",
    [SNAT_IN2OUT_NEXT_SLOW_PATH] = "nat44-in2out-output-slowpath",
    [SNAT_IN2OUT_NEXT_ICMP_ERROR] = "ip4-icmp-error",
    [SNAT_IN2OUT_NEXT_REASS] = "nat44-in2out-reass",
  },
}

(constructor) VLIB_REGISTER_NODE (snat_in2out_output_slowpath_node)

Definition at line 79 of file in2out.c.

vlib_node_registration_t snat_in2out_slowpath_node

Initial value:

= {
  .function = snat_in2out_slow_path_fn,
  .name = "nat44-in2out-slowpath",
  .vector_size = sizeof (u32),
  .format_trace = format_snat_in2out_trace,
  .type = VLIB_NODE_TYPE_INTERNAL,

  .n_errors = ARRAY_LEN(snat_in2out_error_strings),
  .error_strings = snat_in2out_error_strings,

  .runtime_data_bytes = sizeof (snat_runtime_t),

  .n_next_nodes = SNAT_IN2OUT_N_NEXT,

  
  .next_nodes = {
    [SNAT_IN2OUT_NEXT_DROP] = "error-drop",
    [SNAT_IN2OUT_NEXT_LOOKUP] = "ip4-lookup",
    [SNAT_IN2OUT_NEXT_SLOW_PATH] = "nat44-in2out-slowpath",
    [SNAT_IN2OUT_NEXT_ICMP_ERROR] = "ip4-icmp-error",
    [SNAT_IN2OUT_NEXT_REASS] = "nat44-in2out-reass",
  },
}

(constructor) VLIB_REGISTER_NODE (snat_in2out_slowpath_node)

Definition at line 76 of file in2out.c.