22 #undef __included_bihash_template_h__ 57 }) v4_connection_key_t;
82 u16 lcl_port,
u16 rmt_port,
u8 proto)
85 kv->
key[1] = (
u64) proto << 32 | (
u64) rmt_port << 16 | (
u64) lcl_port;
94 kv->
key[1] = (
u64) proto << 32 | (
u64) lcl_port;
102 kv->
key[1] = (
u64) proto << 32;
109 make_v4_ss_kv (kv, &tc->lcl_ip.ip4, &tc->rmt_ip.ip4, tc->lcl_port,
110 tc->rmt_port, tc->proto);
115 u16 lcl_port,
u16 rmt_port,
u8 proto)
121 kv->
key[4] = (
u64) proto << 32 | (
u64) rmt_port << 16 | (
u64) lcl_port;
134 kv->
key[4] = (
u64) proto << 32 | (
u64) lcl_port;
146 kv->
key[4] = (
u64) proto << 32;
154 make_v6_ss_kv (kv, &tc->lcl_ip.ip6, &tc->rmt_ip.ip6, tc->lcl_port,
155 tc->rmt_port, tc->proto);
163 if (
vec_len (fib_index_to_table_index[fib_proto]) <= fib_index)
167 vec_validate (fib_index_to_table_index[fib_proto], fib_index);
168 fib_index_to_table_index[fib_proto][fib_index] = table_index;
169 st->active_fib_proto = fib_proto;
175 table_index = fib_index_to_table_index[fib_proto][fib_index];
192 if (
vec_len (fib_index_to_table_index[fib_proto]) <= tc->fib_index)
201 if (
vec_len (fib_index_to_table_index[fib_proto]) <= fib_index)
209 if (
vec_len (fib_index_to_table_index[fib_proto]) <= fib_index)
211 return fib_index_to_table_index[fib_proto][fib_index];
239 return clib_bihash_add_del_16_8 (&st->v4_session_hash, &kv4,
246 return clib_bihash_add_del_48_8 (&st->v6_session_hash, &kv6,
265 sep->transport_proto);
267 return clib_bihash_add_del_16_8 (&st->v4_session_hash, &kv4, 1);
272 sep->transport_proto);
274 return clib_bihash_add_del_48_8 (&st->v6_session_hash, &kv6, 1);
292 sep->transport_proto);
293 return clib_bihash_add_del_16_8 (&st->v4_session_hash, &kv4, 0);
298 sep->transport_proto);
299 return clib_bihash_add_del_48_8 (&st->v6_session_hash, &kv6, 0);
324 return clib_bihash_add_del_16_8 (&st->v4_session_hash, &kv4,
330 return clib_bihash_add_del_48_8 (&st->v6_session_hash, &kv6,
356 switch (action_index)
379 fib_proto, transport_proto);
400 u32 action_index, app_index;
416 u32 action_index, app_index;
452 sep->transport_proto);
453 rv = clib_bihash_search_inline_16_8 (&st->v4_session_hash, &kv4);
459 srt = &st->session_rules[sep->transport_proto];
472 sep->transport_proto);
473 rv = clib_bihash_search_inline_48_8 (&st->v6_session_hash, &kv6);
480 srt = &st->session_rules[sep->transport_proto];
528 srt = &st->session_rules[sep->transport_proto];
538 sep->transport_proto);
539 rv = clib_bihash_search_inline_16_8 (&st->v4_session_hash, &kv4);
550 rv = clib_bihash_search_inline_16_8 (&st->v4_session_hash, &kv4);
563 rv = clib_bihash_search_inline_16_8 (&st->v4_session_hash, &kv4);
573 srt = &st->session_rules[sep->transport_proto];
580 sep->transport_proto);
581 rv = clib_bihash_search_inline_48_8 (&st->v6_session_hash, &kv6);
591 kv6.
key[0] = kv6.
key[1] = 0;
592 rv = clib_bihash_search_inline_48_8 (&st->v6_session_hash, &kv6);
598 kv6.
key[0] = kv6.
key[1] = 0;
604 kv6.
key[4] = kv6.
key[5] = 0;
605 rv = clib_bihash_search_inline_48_8 (&st->v6_session_hash, &kv6);
614 u16 lcl_port,
u8 proto,
u8 use_wildcard)
623 rv = clib_bihash_search_inline_16_8 (&st->v4_session_hash, &kv4);
633 rv = clib_bihash_search_inline_16_8 (&st->v4_session_hash, &kv4);
646 rv = clib_bihash_search_inline_16_8 (&st->v4_session_hash, &kv4);
666 u16 lcl_port,
u8 proto,
u8 ip_wildcard)
672 rv = clib_bihash_search_inline_48_8 (&st->v6_session_hash, &kv6);
679 kv6.
key[0] = kv6.
key[1] = 0;
680 rv = clib_bihash_search_inline_48_8 (&st->v6_session_hash, &kv6);
686 kv6.
key[0] = kv6.
key[1] = 0;
690 rv = clib_bihash_search_inline_48_8 (&st->v6_session_hash, &kv6);
719 sep->transport_proto, 0);
722 sep->transport_proto, 0);
738 sep->transport_proto,
742 sep->transport_proto,
761 return clib_bihash_add_del_16_8 (&st->v4_half_open_hash, &kv4,
768 return clib_bihash_add_del_48_8 (&st->v6_half_open_hash, &kv6,
786 return clib_bihash_add_del_16_8 (&st->v4_half_open_hash, &kv4,
792 return clib_bihash_add_del_48_8 (&st->v6_half_open_hash, &kv6,
811 make_v4_ss_kv (&kv4, &tc->lcl_ip.ip4, &tc->rmt_ip.ip4, tc->lcl_port,
812 tc->rmt_port, tc->proto);
813 rv = clib_bihash_search_inline_16_8 (&st->v4_half_open_hash, &kv4);
819 make_v6_ss_kv (&kv6, &tc->lcl_ip.ip6, &tc->rmt_ip.ip6, tc->lcl_port,
820 tc->rmt_port, tc->proto);
821 rv = clib_bihash_search_inline_48_8 (&st->v6_half_open_hash, &kv6);
868 u16 rmt_port,
u8 proto,
u32 thread_index,
885 rv = clib_bihash_search_inline_16_8 (&st->v4_session_hash, &kv4);
901 rv = clib_bihash_search_inline_16_8 (&st->v4_half_open_hash, &kv4);
909 rmt, lcl_port, rmt_port);
967 rv = clib_bihash_search_inline_16_8 (&st->v4_session_hash, &kv4);
978 rv = clib_bihash_search_inline_16_8 (&st->v4_half_open_hash, &kv4);
986 rmt, lcl_port, rmt_port);
1022 u16 lcl_port,
u16 rmt_port,
u8 proto)
1038 rv = clib_bihash_search_inline_16_8 (&st->v4_session_hash, &kv4);
1046 rmt, lcl_port, rmt_port);
1092 u16 rmt_port,
u8 proto,
u32 thread_index,
1106 rv = clib_bihash_search_inline_48_8 (&st->v6_session_hash, &kv6);
1121 rv = clib_bihash_search_inline_48_8 (&st->v6_half_open_hash, &kv6);
1127 rmt, lcl_port, rmt_port);
1181 rv = clib_bihash_search_inline_48_8 (&st->v6_session_hash, &kv6);
1190 rv = clib_bihash_search_inline_48_8 (&st->v6_half_open_hash, &kv6);
1196 rmt, lcl_port, rmt_port);
1230 u16 lcl_port,
u16 rmt_port,
u8 proto)
1243 rv = clib_bihash_search_inline_48_8 (&st->v6_session_hash, &kv6);
1249 rmt, lcl_port, rmt_port);
1275 return VNET_API_ERROR_APP_INVALID_NS;
1277 if (args->scope > 3)
1278 return VNET_API_ERROR_INVALID_VALUE;
1282 return VNET_API_ERROR_INVALID_VALUE;
1286 fib_proto = args->table_args.rmt.fp_proto;
1289 srt = &st->session_rules[args->transport_proto];
1295 clib_memset (&args->table_args.lcl, 0, sizeof (args->table_args.lcl));
1296 args->table_args.lcl.fp_proto = args->table_args.rmt.fp_proto;
1297 args->table_args.lcl_port = 0;
1299 srt = &st->session_rules[args->transport_proto];
1315 for (fp = 0; fp <
ARRAY_LEN (fib_index_to_table_index); fp++)
1328 u32 is_local = va_arg (*args,
u32);
1329 v4_connection_key_t *
key = (v4_connection_key_t *) kvp->
key;
1343 &key->dst, clib_net_to_host_u16 (key->dst_port));
1344 s =
format (s,
"%-40v%-30v", str, app_name);
1353 clib_net_to_host_u16 (key->src_port));
1354 s =
format (s,
"%-30v%-30v", str, app_name);
1359 typedef struct _ip4_session_table_show_ctx_t
1376 u8 type,
u8 is_local)
1380 .is_local = is_local,
1402 u32 proto = ~0, lcl_port, rmt_port, action = 0, lcl_plen = 0, rmt_plen = 0;
1403 u32 appns_index, scope = 0;
1404 ip46_address_t lcl_ip, rmt_ip;
1405 u8 is_ip4 = 1, conn_set = 0;
1406 u8 fib_proto,
is_add = 1, *ns_id = 0;
1419 else if (
unformat (input,
"appns %_%v%_", &ns_id))
1421 else if (
unformat (input,
"scope global"))
1423 else if (
unformat (input,
"scope local"))
1425 else if (
unformat (input,
"scope all"))
1430 &lcl_ip.ip4, &lcl_plen, &lcl_port,
1438 &lcl_ip.ip6, &lcl_plen, &lcl_port,
1445 else if (
unformat (input,
"action %d", &action))
1447 else if (
unformat (input,
"tag %_%v%_", &tag))
1459 if (is_add && !conn_set && action == ~0)
1464 if (!is_add && !tag && !conn_set)
1492 .transport_proto = proto,
1493 .table_args.lcl.fp_addr = lcl_ip,
1494 .table_args.lcl.fp_len = lcl_plen,
1495 .table_args.lcl.fp_proto = fib_proto,
1496 .table_args.rmt.fp_addr = rmt_ip,
1497 .table_args.rmt.fp_len = rmt_plen,
1498 .table_args.rmt.fp_proto = fib_proto,
1499 .table_args.lcl_port = lcl_port,
1500 .table_args.rmt_port = rmt_port,
1501 .table_args.action_index = action,
1502 .table_args.is_add =
is_add,
1503 .table_args.tag = tag,
1504 .appns_index = appns_index,
1517 .path =
"session rule",
1518 .short_help =
"session rule [add|del] appns <ns_id> proto <proto> " 1519 "<lcl-ip/plen> <lcl-port> <rmt-ip/plen> <rmt-port> action <action>",
1532 srt = &st->session_rules[transport_proto];
1544 srt = &st->session_rules[transport_proto];
1552 u32 transport_proto = ~0, lcl_port, rmt_port, lcl_plen, rmt_plen;
1553 u32 fib_index, scope = 0;
1554 ip46_address_t lcl_ip, rmt_ip;
1555 u8 is_ip4 = 1, show_one = 0;
1559 u8 *ns_id = 0, fib_proto;
1567 else if (
unformat (input,
"appns %_%v%_", &ns_id))
1569 else if (
unformat (input,
"scope global"))
1571 else if (
unformat (input,
"scope local"))
1574 &lcl_ip.ip4, &lcl_plen, &lcl_port,
1582 &lcl_ip.ip6, &lcl_plen, &lcl_port,
1594 if (transport_proto == ~0)
1614 if (scope == 1 || scope == 0)
1617 fib_index = is_ip4 ? app_ns->ip4_fib_index : app_ns->ip6_fib_index;
1627 srt = &st->session_rules[transport_proto];
1635 srt = &st->session_rules[transport_proto];
1646 .path =
"show session rules",
1647 .short_help =
"show session rules [<proto> appns <id> <lcl-ip/plen> " 1648 "<lcl-port> <rmt-ip/plen> <rmt-port> scope <scope>]",
#define vec_validate(V, I)
Make sure vector is long enough for given index (no header, unspecified alignment) ...
#define SESSION_DROP_HANDLE
u32 connection_index
Index of the transport connection associated to the session.
static session_t * session_lookup_action_to_session(u32 action_index, u8 fib_proto, u8 transport_proto)
session_t * session_lookup_listener(u32 table_index, session_endpoint_t *sep)
Lookup listener, exact or proxy (inaddr_any:0) match.
int session_lookup_del_connection(transport_connection_t *tc)
Delete transport connection from session table.
static session_table_t * session_table_get_or_alloc_for_connection(transport_connection_t *tc)
session_table_t * session_table_alloc(void)
void session_lookup_show_table_entries(vlib_main_t *vm, session_table_t *table, u8 type, u8 is_local)
#define SESSION_RULES_TABLE_ACTION_DROP
u8 * format_transport_proto_short(u8 *s, va_list *args)
clib_bihash_kv_48_8_t session_kv6_t
void session_rules_table_cli_dump(vlib_main_t *vm, session_rules_table_t *srt, u8 fib_proto)
#define SESSION_TABLE_INVALID_INDEX
static u8 transport_connection_fib_proto(transport_connection_t *tc)
u64 session_lookup_endpoint_listener(u32 table_index, session_endpoint_t *sep, u8 use_rules)
Lookup listener for session endpoint in table.
static clib_error_t * session_rule_command_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
static session_table_t * session_table_get_for_fib_index(u32 fib_proto, u32 fib_index)
struct _session_rules_table_t session_rules_table_t
transport_connection_t * session_lookup_connection_wt6(u32 fib_index, ip6_address_t *lcl, ip6_address_t *rmt, u16 lcl_port, u16 rmt_port, u8 proto, u32 thread_index, u8 *result)
Lookup connection with ip6 and transport layer information.
static u8 session_lookup_action_index_is_valid(u32 action_index)
u32 app_namespace_index(app_namespace_t *app_ns)
session_t * session_lookup_rules_table_session6(session_table_t *st, u8 proto, ip6_address_t *lcl, u16 lcl_port, ip6_address_t *rmt, u16 rmt_port)
UNUSED.
static session_t * session_lookup_app_listen_session(u32 app_index, u8 fib_proto, u8 transport_proto)
session_t * session_lookup_safe4(u32 fib_index, ip4_address_t *lcl, ip4_address_t *rmt, u16 lcl_port, u16 rmt_port, u8 proto)
Lookup session with ip4 and transport layer information.
clib_memset(h->entries, 0, sizeof(h->entries[0]) *entries)
void session_lookup_set_tables_appns(app_namespace_t *app_ns)
Mark (global) tables as pertaining to app ns.
static clib_error_t * show_session_rules_command_fn(vlib_main_t *vm, unformat_input_t *input, vlib_cli_command_t *cmd)
u32 session_lookup_get_index_for_fib(u32 fib_proto, u32 fib_index)
static transport_proto_t session_get_transport_proto(session_t *s)
session_t * session_lookup_listener_wildcard(u32 table_index, session_endpoint_t *sep)
Lookup listener wildcard match.
static session_t * session_get(u32 si, u32 thread_index)
u32 session_rules_table_lookup4(session_rules_table_t *srt, ip4_address_t *lcl_ip, ip4_address_t *rmt_ip, u16 lcl_port, u16 rmt_port)
static void make_v6_listener_kv(session_kv6_t *kv, ip6_address_t *lcl, u16 lcl_port, u8 proto)
session_t * session_lookup_safe6(u32 fib_index, ip6_address_t *lcl, ip6_address_t *rmt, u16 lcl_port, u16 rmt_port, u8 proto)
Lookup session with ip6 and transport layer information.
static session_t * session_lookup_listener4_i(session_table_t *st, ip4_address_t *lcl, u16 lcl_port, u8 proto, u8 use_wildcard)
u64 session_lookup_half_open_handle(transport_connection_t *tc)
static void make_v6_ss_kv_from_tc(session_kv6_t *kv, transport_connection_t *tc)
application_t * application_get_if_valid(u32 app_index)
transport_connection_t * session_lookup_connection6(u32 fib_index, ip6_address_t *lcl, ip6_address_t *rmt, u16 lcl_port, u16 rmt_port, u8 proto)
Lookup connection with ip6 and transport layer information.
#define SESSION_INVALID_INDEX
transport_connection_t * session_lookup_connection_wt4(u32 fib_index, ip4_address_t *lcl, ip4_address_t *rmt, u16 lcl_port, u16 rmt_port, u8 proto, u32 thread_index, u8 *result)
Lookup connection with ip4 and transport layer information.
static void make_v6_ss_kv(session_kv6_t *kv, ip6_address_t *lcl, ip6_address_t *rmt, u16 lcl_port, u16 rmt_port, u8 proto)
#define clib_error_return(e, args...)
static int ip4_session_table_show(clib_bihash_kv_16_8_t *kvp, void *arg)
static void make_v6_proxy_kv(session_kv6_t *kv, ip6_address_t *lcl, u8 proto)
#define HALF_OPEN_LOOKUP_INVALID_VALUE
int session_lookup_del_half_open(transport_connection_t *tc)
transport_connection_t * session_lookup_connection4(u32 fib_index, ip4_address_t *lcl, ip4_address_t *rmt, u16 lcl_port, u16 rmt_port, u8 proto)
Lookup connection with ip4 and transport layer information.
void session_table_init(session_table_t *slt, u8 fib_proto)
Initialize session table hash tables.
u32 app_namespace_get_fib_index(app_namespace_t *app_ns, u8 fib_proto)
static session_type_t session_type_from_proto_and_ip(transport_proto_t proto, u8 is_ip4)
static session_t * session_get_from_handle(session_handle_t handle)
struct _session_rule_add_del_args session_rule_add_del_args_t
void session_lookup_dump_rules_table(u32 fib_index, u8 fib_proto, u8 transport_proto)
const u8 * application_name_from_index(u32 app_index)
Returns app name for app-index.
static app_namespace_t * app_namespace_get_default(void)
int vnet_session_rule_add_del(session_rule_add_del_args_t *args)
static session_t * session_get_from_handle_safe(u64 handle)
Get session from handle and 'lock' pool resize if not in same thread.
int session_lookup_del_session(session_t *s)
app_namespace_t * app_namespace_get(u32 index)
session_t * session_lookup_listener6(u32 fib_index, ip6_address_t *lcl, u16 lcl_port, u8 proto)
typedef CLIB_PACKED(struct { union { struct { ip4_address_t src;ip4_address_t dst;u16 src_port;u16 dst_port;u32 proto;};u64 as_u64[2];};})
u32 session_rules_table_lookup6(session_rules_table_t *srt, ip6_address_t *lcl_ip, ip6_address_t *rmt_ip, u16 lcl_port, u16 rmt_port)
u64 session_lookup_local_endpoint(u32 table_index, session_endpoint_t *sep)
Look up endpoint in local session table.
static session_table_t * session_table_get_for_connection(transport_connection_t *tc)
static u32 * fib_index_to_table_index[2]
Generate typed init functions for multiple hash table styles...
static transport_connection_t * transport_get_connection(transport_proto_t tp, u32 conn_index, u8 thread_index)
session_t * app_worker_first_listener(app_worker_t *app, u8 fib_proto, u8 transport_proto)
#define SESSION_RULES_TABLE_INVALID_INDEX
session_table_t * app_namespace_get_local_table(app_namespace_t *app_ns)
#define vec_free(V)
Free vector's memory (no header).
int session_lookup_del_session_endpoint(u32 table_index, session_endpoint_t *sep)
#define clib_warning(format, args...)
#define SESSION_INVALID_HANDLE
u8 ip4_is_local_host(ip4_address_t *ip4_address)
struct _transport_connection transport_connection_t
u8 ip6_is_local_host(ip6_address_t *ip6_address)
int session_lookup_add_session_endpoint(u32 table_index, session_endpoint_t *sep, u64 value)
struct _app_namespace app_namespace_t
#define VLIB_CLI_COMMAND(x,...)
session_table_t * session_table_get(u32 table_index)
static void make_v4_proxy_kv(session_kv4_t *kv, ip4_address_t *lcl, u8 proto)
struct _ip4_session_table_show_ctx_t ip4_session_table_show_ctx_t
uword unformat_transport_proto(unformat_input_t *input, va_list *args)
static u64 session_lookup_action_to_handle(u32 action_index)
void ip4_session_table_walk(clib_bihash_16_8_t *hash, ip4_session_table_walk_fn_t fn, void *arg)
#define SESSION_RULES_TABLE_ACTION_ALLOW
static void make_v4_listener_kv(session_kv4_t *kv, ip4_address_t *lcl, u16 lcl_port, u8 proto)
static vlib_main_t * vlib_get_main(void)
u8 thread_index
Index of the thread that allocated the session.
void session_rules_table_show_rule(vlib_main_t *vm, session_rules_table_t *srt, ip46_address_t *lcl_ip, u16 lcl_port, ip46_address_t *rmt_ip, u16 rmt_port, u8 is_ip4)
u8 * format_ip4_session_lookup_kvp(u8 *s, va_list *args)
#define SESSION_RULE_TAG_MAX_LEN
static transport_connection_t * transport_get_half_open(transport_proto_t tp, u32 conn_index)
app_worker_t * app_worker_get(u32 wrk_index)
void session_lookup_init(void)
#define vec_len(v)
Number of elements in vector (rvalue-only, NULL tolerant)
void session_lookup_dump_local_rules_table(u32 table_index, u8 fib_proto, u8 transport_proto)
app_worker_t * application_get_default_worker(application_t *app)
session_t * session_lookup_listener4(u32 fib_index, ip4_address_t *lcl, u16 lcl_port, u8 proto)
struct _session_lookup_table session_table_t
static session_table_t * session_table_get_or_alloc(u8 fib_proto, u8 fib_index)
int session_rules_table_add_del(session_rules_table_t *srt, session_rule_table_add_del_args_t *args)
Add/delete session rule.
int session_lookup_add_connection(transport_connection_t *tc, u64 value)
Add transport connection to a session table.
u32 session_table_index(session_table_t *slt)
static void make_v4_ss_kv(session_kv4_t *kv, ip4_address_t *lcl, ip4_address_t *rmt, u16 lcl_port, u16 rmt_port, u8 proto)
session_t * session_lookup_rules_table_session4(session_table_t *st, u8 proto, ip4_address_t *lcl, u16 lcl_port, ip4_address_t *rmt, u16 rmt_port)
UNUSED.
app_namespace_t * app_namespace_get_from_id(const u8 *ns_id)
struct _session_endpoint session_endpoint_t
static transport_connection_t * transport_get_listener(transport_proto_t tp, u32 conn_index)
static session_t * session_lookup_listener6_i(session_table_t *st, ip6_address_t *lcl, u16 lcl_port, u8 proto, u8 ip_wildcard)
int session_lookup_add_half_open(transport_connection_t *tc, u64 value)
void vlib_cli_output(vlib_main_t *vm, char *fmt,...)
u8 * format_transport_proto(u8 *s, va_list *args)
static void make_v4_ss_kv_from_tc(session_kv4_t *kv, transport_connection_t *tc)
static session_t * listen_session_get(u32 ls_index)
transport_connection_t * session_lookup_half_open_connection(u64 handle, u8 proto, u8 is_ip4)
clib_bihash_kv_16_8_t session_kv4_t