FD.io VPP  v20.09-64-g4f7b92f0a
Vector Packet Processing
ip4_urpf.c
Go to the documentation of this file.
1 /*
2  * Copyright (c) 2015 Cisco and/or its affiliates.
3  * Licensed under the Apache License, Version 2.0 (the "License");
4  * you may not use this file except in compliance with the License.
5  * You may obtain a copy of the License at:
6  *
7  * http://www.apache.org/licenses/LICENSE-2.0
8  *
9  * Unless required by applicable law or agreed to in writing, software
10  * distributed under the License is distributed on an "AS IS" BASIS,
11  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12  * See the License for the specific language governing permissions and
13  * limitations under the License.
14  */
15 /*
16  * ip/ip4_source_check.c: IP v4 check source address (unicast RPF check)
17  *
18  * Copyright (c) 2008 Eliot Dresselhaus
19  *
20  * Permission is hereby granted, free of charge, to any person obtaining
21  * a copy of this software and associated documentation files (the
22  * "Software"), to deal in the Software without restriction, including
23  * without limitation the rights to use, copy, modify, merge, publish,
24  * distribute, sublicense, and/or sell copies of the Software, and to
25  * permit persons to whom the Software is furnished to do so, subject to
26  * the following conditions:
27  *
28  * The above copyright notice and this permission notice shall be
29  * included in all copies or substantial portions of the Software.
30  *
31  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
32  * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
33  * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
34  * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
35  * LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
36  * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
37  * WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
38  */
39 
40 #include <urpf/urpf.h>
41 #include <urpf/urpf_dp.h>
42 
43 static char *ip4_urpf_error_strings[] = {
44 #define _(a,b) "ip4-" # b,
46 #undef _
47 };
48 
52 {
53  return (urpf_inline (vm, node, frame, AF_IP4, VLIB_RX, URPF_MODE_LOOSE));
54 }
55 
59 {
60  return (urpf_inline (vm, node, frame, AF_IP4, VLIB_RX, URPF_MODE_STRICT));
61 }
62 
66 {
67  return (urpf_inline (vm, node, frame, AF_IP4, VLIB_TX, URPF_MODE_LOOSE));
68 }
69 
73 {
74  return (urpf_inline (vm, node, frame, AF_IP4, VLIB_TX, URPF_MODE_STRICT));
75 }
76 
77 /* *INDENT-OFF* */
79  .name = "ip4-rx-urpf-loose",
80  .vector_size = sizeof (u32),
81 
82  .n_next_nodes = URPF_N_NEXT,
83  .next_nodes = {
84  [URPF_NEXT_DROP] = "ip4-drop",
85  },
86  .n_errors = ARRAY_LEN (ip4_urpf_error_strings),
87  .error_strings = ip4_urpf_error_strings,
88 
89  .format_buffer = format_ip4_header,
90  .format_trace = format_urpf_trace,
91 };
92 
94  .name = "ip4-rx-urpf-strict",
95  .vector_size = sizeof (u32),
96 
97  .n_next_nodes = URPF_N_NEXT,
98  .next_nodes = {
99  [URPF_NEXT_DROP] = "ip4-drop",
100  },
101  .n_errors = ARRAY_LEN (ip4_urpf_error_strings),
102  .error_strings = ip4_urpf_error_strings,
103 
104  .format_buffer = format_ip4_header,
105  .format_trace = format_urpf_trace,
106 };
107 
109  .name = "ip4-tx-urpf-loose",
110  .vector_size = sizeof (u32),
111 
112  .n_next_nodes = URPF_N_NEXT,
113  .next_nodes = {
114  [URPF_NEXT_DROP] = "ip4-drop",
115  },
116  .n_errors = ARRAY_LEN (ip4_urpf_error_strings),
117  .error_strings = ip4_urpf_error_strings,
118 
119  .format_buffer = format_ip4_header,
120  .format_trace = format_urpf_trace,
121 };
122 
124  .name = "ip4-tx-urpf-strict",
125  .vector_size = sizeof (u32),
126 
127  .n_next_nodes = URPF_N_NEXT,
128  .next_nodes = {
129  [URPF_NEXT_DROP] = "ip4-drop",
130  },
131  .n_errors = ARRAY_LEN (ip4_urpf_error_strings),
132  .error_strings = ip4_urpf_error_strings,
133 
134  .format_buffer = format_ip4_header,
135  .format_trace = format_urpf_trace,
136 };
137 
138 VNET_FEATURE_INIT (ip4_rx_urpf_loose_feat, static) =
139 {
140  .arc_name = "ip4-unicast",
141  .node_name = "ip4-rx-urpf-loose",
142  .runs_before = VNET_FEATURES ("ip4-rx-urpf-strict"),
143 };
144 
145 VNET_FEATURE_INIT (ip4_rx_urpf_strict_feat, static) =
146 {
147  .arc_name = "ip4-unicast",
148  .node_name = "ip4-rx-urpf-strict",
149  .runs_before = VNET_FEATURES ("ip4-policer-classify"),
150 };
151 
152 VNET_FEATURE_INIT (ip4_tx_urpf_loose_feat, static) =
153 {
154  .arc_name = "ip4-output",
155  .node_name = "ip4-tx-urpf-loose",
156 };
157 
158 VNET_FEATURE_INIT (ip4_tx_urpf_strict_feat, static) =
159 {
160  .arc_name = "ip4-output",
161  .node_name = "ip4-tx-urpf-strict",
162 };
163 /* *INDENT-ON* */
164 
165 /*
166  * fd.io coding-style-patch-verification: ON
167  *
168  * Local Variables:
169  * eval: (c-set-style "gnu")
170  * End:
171  */
format_function_t format_ip4_header
Definition: format.h:81
vlib_main_t * vm
Definition: in2out_ed.c:1582
vlib_node_registration_t ip4_tx_urpf_strict
(constructor) VLIB_REGISTER_NODE (ip4_tx_urpf_strict)
Definition: ip4_urpf.c:123
#define VLIB_NODE_FN(node)
Definition: node.h:202
static_always_inline uword urpf_inline(vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame, ip_address_family_t af, vlib_dir_t dir, urpf_mode_t mode)
Definition: urpf_dp.h:91
vlib_node_registration_t ip4_rx_urpf_strict
(constructor) VLIB_REGISTER_NODE (ip4_rx_urpf_strict)
Definition: ip4_urpf.c:93
static u8 * format_urpf_trace(u8 *s, va_list *va)
Definition: urpf_dp.h:62
unsigned int u32
Definition: types.h:88
vlib_node_registration_t ip4_rx_urpf_loose
(constructor) VLIB_REGISTER_NODE (ip4_rx_urpf_loose)
Definition: ip4_urpf.c:78
vlib_node_registration_t ip4_tx_urpf_loose
(constructor) VLIB_REGISTER_NODE (ip4_tx_urpf_loose)
Definition: ip4_urpf.c:108
Unicast Reverse Path forwarding.
VNET_FEATURE_INIT(ip4_rx_urpf_loose_feat, static)
#define VLIB_REGISTER_NODE(x,...)
Definition: node.h:169
static char * ip4_urpf_error_strings[]
Definition: ip4_urpf.c:43
#define ARRAY_LEN(x)
Definition: clib.h:67
vlib_main_t vlib_node_runtime_t * node
Definition: in2out_ed.c:1582
#define VNET_FEATURES(...)
Definition: feature.h:470
Definition: defs.h:47
#define foreach_urpf_error
Definition: urpf_dp.h:73
vlib_main_t vlib_node_runtime_t vlib_frame_t * frame
Definition: in2out_ed.c:1583
Definition: defs.h:46