blob: c215caae86f5d00ac0ae1acf84e2025c01da120e [file] [log] [blame]
/*
* Copyright (c) 2016 Cisco and/or its affiliates.
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at:
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
#include <stddef.h>
#include <vnet/vnet.h>
#include <vnet/plugin/plugin.h>
#include <cnat/cnat_translation.h>
#include <cnat/cnat_session.h>
#include <cnat/cnat_client.h>
#include <cnat/cnat_snat.h>
#include <vnet/ip/ip_types_api.h>
#include <vpp/app/version.h>
#include <vlibapi/api.h>
#include <vlibmemory/api.h>
/* define message IDs */
#include <vnet/format_fns.h>
#include <cnat/cnat.api_enum.h>
#include <cnat/cnat.api_types.h>
/**
* Base message ID fot the plugin
*/
static u32 cnat_base_msg_id;
#define REPLY_MSG_ID_BASE cnat_base_msg_id
#include <vlibapi/api_helper_macros.h>
static int
cnat_endpoint_decode (const vl_api_cnat_endpoint_t * in,
cnat_endpoint_t * out)
{
int rv = 0;
out->ce_port = clib_net_to_host_u16 (in->port);
out->ce_sw_if_index = clib_net_to_host_u32 (in->sw_if_index);
out->ce_flags = 0;
if (out->ce_sw_if_index == INDEX_INVALID)
ip_address_decode2 (&in->addr, &out->ce_ip);
else
rv = ip_address_family_decode (in->if_af, &out->ce_ip.version);
return rv;
}
static int
cnat_endpoint_tuple_decode (const vl_api_cnat_endpoint_tuple_t * in,
cnat_endpoint_tuple_t * out)
{
int rv = 0;
rv = cnat_endpoint_decode (&in->src_ep, &out->src_ep);
if (rv)
return rv;
rv = cnat_endpoint_decode (&in->dst_ep, &out->dst_ep);
return rv;
}
static void
cnat_endpoint_encode (const cnat_endpoint_t * in,
vl_api_cnat_endpoint_t * out)
{
out->port = clib_net_to_host_u16 (in->ce_port);
out->sw_if_index = clib_net_to_host_u32 (in->ce_sw_if_index);
out->if_af = ip_address_family_encode (in->ce_ip.version);
if (in->ce_flags & CNAT_EP_FLAG_RESOLVED)
ip_address_encode2 (&in->ce_ip, &out->addr);
else
clib_memset ((void *) &in->ce_ip, 0, sizeof (in->ce_ip));
}
static void
vl_api_cnat_translation_update_t_handler (vl_api_cnat_translation_update_t
* mp)
{
vl_api_cnat_translation_update_reply_t *rmp;
cnat_endpoint_t vip;
cnat_endpoint_tuple_t *paths = NULL, *path;
ip_protocol_t ip_proto;
u32 id = ~0;
u8 flags;
int rv = 0;
u32 pi, n_paths;
rv = ip_proto_decode (mp->translation.ip_proto, &ip_proto);
if (rv)
goto done;
n_paths = clib_net_to_host_u32 (mp->translation.n_paths);
vec_validate (paths, n_paths - 1);
for (pi = 0; pi < n_paths; pi++)
{
path = &paths[pi];
rv = cnat_endpoint_tuple_decode (&mp->translation.paths[pi], path);
if (rv)
goto done;
}
rv = cnat_endpoint_decode (&mp->translation.vip, &vip);
if (rv)
goto done;
flags = mp->translation.flags;
if (!mp->translation.is_real_ip)
flags |= CNAT_FLAG_EXCLUSIVE;
id = cnat_translation_update (&vip, ip_proto, paths, flags);
vec_free (paths);
done:
/* *INDENT-OFF* */
REPLY_MACRO2 (VL_API_CNAT_TRANSLATION_UPDATE_REPLY,
({
rmp->id = htonl (id);
}));
/* *INDENT-ON* */
}
static void
vl_api_cnat_translation_del_t_handler (vl_api_cnat_translation_del_t * mp)
{
vl_api_cnat_translation_del_reply_t *rmp;
int rv;
rv = cnat_translation_delete (ntohl (mp->id));
REPLY_MACRO (VL_API_CNAT_TRANSLATION_DEL_REPLY);
}
typedef struct cnat_dump_walk_ctx_t_
{
vl_api_registration_t *rp;
u32 context;
} cnat_dump_walk_ctx_t;
static walk_rc_t
cnat_translation_send_details (u32 cti, void *args)
{
vl_api_cnat_translation_details_t *mp;
cnat_dump_walk_ctx_t *ctx;
cnat_ep_trk_t *trk;
vl_api_cnat_endpoint_tuple_t *path;
size_t msg_size;
cnat_translation_t *ct;
u32 n_paths;
ctx = args;
ct = cnat_translation_get (cti);
n_paths = vec_len (ct->ct_paths);
msg_size = sizeof (*mp) + sizeof (mp->translation.paths[0]) * n_paths;
mp = vl_msg_api_alloc_zero (msg_size);
mp->_vl_msg_id = ntohs (VL_API_CNAT_TRANSLATION_DETAILS + cnat_base_msg_id);
/* fill in the message */
mp->context = ctx->context;
mp->translation.n_paths = clib_host_to_net_u32 (n_paths);
mp->translation.id = clib_host_to_net_u32 (cti);
cnat_endpoint_encode (&ct->ct_vip, &mp->translation.vip);
mp->translation.ip_proto = ip_proto_encode (ct->ct_proto);
path = mp->translation.paths;
vec_foreach (trk, ct->ct_paths)
{
cnat_endpoint_encode (&trk->ct_ep[VLIB_TX], &path->dst_ep);
cnat_endpoint_encode (&trk->ct_ep[VLIB_RX], &path->src_ep);
path++;
}
vl_api_send_msg (ctx->rp, (u8 *) mp);
return (WALK_CONTINUE);
}
static void
vl_api_cnat_translation_dump_t_handler (vl_api_cnat_translation_dump_t * mp)
{
vl_api_registration_t *rp;
rp = vl_api_client_index_to_registration (mp->client_index);
if (rp == 0)
return;
cnat_dump_walk_ctx_t ctx = {
.rp = rp,
.context = mp->context,
};
cnat_translation_walk (cnat_translation_send_details, &ctx);
}
static void
ip_address2_from_46 (const ip46_address_t * nh,
ip_address_family_t af, ip_address_t * ip)
{
ip_addr_46 (ip) = *nh;
ip_addr_version (ip) = af;
}
static walk_rc_t
cnat_session_send_details (const cnat_session_t * session, void *args)
{
vl_api_cnat_session_details_t *mp;
cnat_dump_walk_ctx_t *ctx;
cnat_endpoint_t ep;
ctx = args;
mp = vl_msg_api_alloc_zero (sizeof (*mp));
mp->_vl_msg_id = ntohs (VL_API_CNAT_SESSION_DETAILS + cnat_base_msg_id);
/* fill in the message */
mp->context = ctx->context;
ep.ce_sw_if_index = INDEX_INVALID;
ep.ce_flags = CNAT_EP_FLAG_RESOLVED;
ip_address2_from_46 (&session->value.cs_ip[VLIB_TX], session->key.cs_af,
&ep.ce_ip);
ep.ce_port = clib_host_to_net_u16 (session->value.cs_port[VLIB_TX]);
cnat_endpoint_encode (&ep, &mp->session.new);
ip_address2_from_46 (&session->key.cs_ip[VLIB_RX], session->key.cs_af,
&ep.ce_ip);
ep.ce_port = clib_host_to_net_u16 (session->key.cs_port[VLIB_RX]);
cnat_endpoint_encode (&ep, &mp->session.src);
ip_address2_from_46 (&session->key.cs_ip[VLIB_TX], session->key.cs_af,
&ep.ce_ip);
ep.ce_port = clib_host_to_net_u16 (session->key.cs_port[VLIB_TX]);
cnat_endpoint_encode (&ep, &mp->session.dst);
mp->session.ip_proto = ip_proto_encode (session->key.cs_proto);
vl_api_send_msg (ctx->rp, (u8 *) mp);
return (WALK_CONTINUE);
}
static void
vl_api_cnat_session_dump_t_handler (vl_api_cnat_session_dump_t * mp)
{
vl_api_registration_t *rp;
rp = vl_api_client_index_to_registration (mp->client_index);
if (rp == 0)
return;
cnat_dump_walk_ctx_t ctx = {
.rp = rp,
.context = mp->context,
};
cnat_session_walk (cnat_session_send_details, &ctx);
}
static void
vl_api_cnat_session_purge_t_handler (vl_api_cnat_session_purge_t * mp)
{
vl_api_cnat_session_purge_reply_t *rmp;
int rv;
cnat_client_throttle_pool_process ();
rv = cnat_session_purge ();
rv |= cnat_translation_purge ();
REPLY_MACRO (VL_API_CNAT_SESSION_PURGE_REPLY);
}
static void
vl_api_cnat_get_snat_addresses_t_handler (vl_api_cnat_get_snat_addresses_t
* mp)
{
vl_api_cnat_get_snat_addresses_reply_t *rmp;
int rv = 0;
/* *INDENT-OFF* */
REPLY_MACRO2 (VL_API_CNAT_GET_SNAT_ADDRESSES_REPLY,
({
ip6_address_encode (&ip_addr_v6(&cnat_main.snat_ip6.ce_ip), rmp->snat_ip6);
ip4_address_encode (&ip_addr_v4(&cnat_main.snat_ip4.ce_ip), rmp->snat_ip4);
rmp->sw_if_index = clib_host_to_net_u32 (cnat_main.snat_ip6.ce_sw_if_index);
}));
/* *INDENT-ON* */
}
static void
vl_api_cnat_set_snat_addresses_t_handler (vl_api_cnat_set_snat_addresses_t
* mp)
{
vl_api_cnat_set_snat_addresses_reply_t *rmp;
u32 sw_if_index = clib_net_to_host_u32 (mp->sw_if_index);
ip4_address_t ip4;
ip6_address_t ip6;
int rv = 0;
ip4_address_decode (mp->snat_ip4, &ip4);
ip6_address_decode (mp->snat_ip6, &ip6);
cnat_set_snat (&ip4, &ip6, sw_if_index);
REPLY_MACRO (VL_API_CNAT_SET_SNAT_ADDRESSES_REPLY);
}
static void
vl_api_cnat_add_del_snat_prefix_t_handler
(vl_api_cnat_add_del_snat_prefix_t * mp)
{
vl_api_cnat_add_del_snat_prefix_reply_t *rmp;
ip_prefix_t pfx;
int rv;
ip_prefix_decode2 (&mp->prefix, &pfx);
if (mp->is_add)
rv = cnat_add_snat_prefix (&pfx);
else
rv = cnat_del_snat_prefix (&pfx);
REPLY_MACRO (VL_API_CNAT_ADD_DEL_SNAT_PREFIX_REPLY);
}
#include <cnat/cnat.api.c>
static clib_error_t *
cnat_api_init (vlib_main_t * vm)
{
/* Ask for a correctly-sized block of API message decode slots */
cnat_base_msg_id = setup_message_id_table ();
return 0;
}
VLIB_INIT_FUNCTION (cnat_api_init);
/* *INDENT-OFF* */
VLIB_PLUGIN_REGISTER () = {
.version = VPP_BUILD_VER,
.description = "CNat Translate",
};
/* *INDENT-ON* */
/*
* fd.io coding-style-patch-verification: ON
*
* Local Variables:
* eval: (c-set-style "gnu")
* End:
*/