Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 1 | /* |
| 2 | * Copyright (c) 2015 Cisco and/or its affiliates. |
| 3 | * Licensed under the Apache License, Version 2.0 (the "License"); |
| 4 | * you may not use this file except in compliance with the License. |
| 5 | * You may obtain a copy of the License at: |
| 6 | * |
| 7 | * http://www.apache.org/licenses/LICENSE-2.0 |
| 8 | * |
| 9 | * Unless required by applicable law or agreed to in writing, software |
| 10 | * distributed under the License is distributed on an "AS IS" BASIS, |
| 11 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 12 | * See the License for the specific language governing permissions and |
| 13 | * limitations under the License. |
| 14 | */ |
| 15 | #include <vnet/vxlan/vxlan.h> |
Chris Luke | 99cb335 | 2016-04-26 10:49:53 -0400 | [diff] [blame] | 16 | #include <vnet/ip/format.h> |
John Lo | c42912d | 2016-11-07 18:30:47 -0500 | [diff] [blame] | 17 | #include <vnet/fib/fib_entry.h> |
| 18 | #include <vnet/fib/fib_table.h> |
Neale Ranns | 32e1c01 | 2016-11-22 17:07:28 +0000 | [diff] [blame] | 19 | #include <vnet/mfib/mfib_table.h> |
| 20 | #include <vnet/adj/adj_mcast.h> |
eyal bari | 82e21d7 | 2018-04-26 13:14:55 +0300 | [diff] [blame] | 21 | #include <vnet/adj/rewrite.h> |
Eyal Bari | 3212c57 | 2017-03-06 11:47:50 +0200 | [diff] [blame] | 22 | #include <vnet/interface.h> |
eyal bari | af86a48 | 2018-04-17 11:20:27 +0300 | [diff] [blame] | 23 | #include <vnet/flow/flow.h> |
Hongjun Ni | beb4bf7 | 2016-11-25 00:03:46 +0800 | [diff] [blame] | 24 | #include <vlib/vlib.h> |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 25 | |
Billy McFall | c5d9cda | 2016-09-14 10:39:58 -0400 | [diff] [blame] | 26 | /** |
| 27 | * @file |
| 28 | * @brief VXLAN. |
| 29 | * |
| 30 | * VXLAN provides the features needed to allow L2 bridge domains (BDs) |
| 31 | * to span multiple servers. This is done by building an L2 overlay on |
| 32 | * top of an L3 network underlay using VXLAN tunnels. |
| 33 | * |
| 34 | * This makes it possible for servers to be co-located in the same data |
| 35 | * center or be separated geographically as long as they are reachable |
| 36 | * through the underlay L3 network. |
| 37 | * |
| 38 | * You can refer to this kind of L2 overlay bridge domain as a VXLAN |
| 39 | * (Virtual eXtensible VLAN) segment. |
| 40 | */ |
| 41 | |
| 42 | |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 43 | vxlan_main_t vxlan_main; |
| 44 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 45 | static u8 * |
| 46 | format_decap_next (u8 * s, va_list * args) |
Hongjun Ni | beb4bf7 | 2016-11-25 00:03:46 +0800 | [diff] [blame] | 47 | { |
| 48 | u32 next_index = va_arg (*args, u32); |
| 49 | |
John Lo | 4478d8e | 2018-01-12 17:15:25 -0500 | [diff] [blame] | 50 | if (next_index == VXLAN_INPUT_NEXT_DROP) |
| 51 | return format (s, "drop"); |
| 52 | else |
| 53 | return format (s, "index %d", next_index); |
Hongjun Ni | beb4bf7 | 2016-11-25 00:03:46 +0800 | [diff] [blame] | 54 | return s; |
| 55 | } |
| 56 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 57 | u8 * |
| 58 | format_vxlan_tunnel (u8 * s, va_list * args) |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 59 | { |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 60 | vxlan_tunnel_t *t = va_arg (*args, vxlan_tunnel_t *); |
Jon Loeliger | 3d460bd | 2018-02-01 16:36:12 -0600 | [diff] [blame] | 61 | |
| 62 | s = format (s, |
| 63 | "[%d] instance %d src %U dst %U vni %d fib-idx %d sw-if-idx %d ", |
John Lo | 25d417f | 2018-02-15 15:47:53 -0500 | [diff] [blame] | 64 | t->dev_instance, t->user_instance, |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 65 | format_ip46_address, &t->src, IP46_TYPE_ANY, |
| 66 | format_ip46_address, &t->dst, IP46_TYPE_ANY, |
| 67 | t->vni, t->encap_fib_index, t->sw_if_index); |
John Lo | 56912c8 | 2016-12-08 16:10:02 -0500 | [diff] [blame] | 68 | |
John Lo | 4478d8e | 2018-01-12 17:15:25 -0500 | [diff] [blame] | 69 | s = format (s, "encap-dpo-idx %d ", t->next_dpo.dpoi_index); |
John Lo | 56912c8 | 2016-12-08 16:10:02 -0500 | [diff] [blame] | 70 | |
John Lo | 4478d8e | 2018-01-12 17:15:25 -0500 | [diff] [blame] | 71 | if (PREDICT_FALSE (t->decap_next_index != VXLAN_INPUT_NEXT_L2_INPUT)) |
| 72 | s = format (s, "decap-next-%U ", format_decap_next, t->decap_next_index); |
| 73 | |
| 74 | if (PREDICT_FALSE (ip46_address_is_multicast (&t->dst))) |
| 75 | s = format (s, "mcast-sw-if-idx %d ", t->mcast_sw_if_index); |
| 76 | |
eyal bari | af86a48 | 2018-04-17 11:20:27 +0300 | [diff] [blame] | 77 | if (t->flow_index != ~0) |
| 78 | s = format (s, "flow-index %d [%U]", t->flow_index, |
| 79 | format_flow_enabled_hw, t->flow_index); |
| 80 | |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 81 | return s; |
| 82 | } |
| 83 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 84 | static u8 * |
| 85 | format_vxlan_name (u8 * s, va_list * args) |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 86 | { |
| 87 | u32 dev_instance = va_arg (*args, u32); |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 88 | vxlan_main_t *vxm = &vxlan_main; |
Jon Loeliger | 3d460bd | 2018-02-01 16:36:12 -0600 | [diff] [blame] | 89 | vxlan_tunnel_t *t; |
| 90 | |
| 91 | if (dev_instance == ~0) |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 92 | return format (s, "<cached-unused>"); |
Jon Loeliger | 3d460bd | 2018-02-01 16:36:12 -0600 | [diff] [blame] | 93 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 94 | if (dev_instance >= vec_len (vxm->tunnels)) |
| 95 | return format (s, "<improperly-referenced>"); |
Jon Loeliger | 3d460bd | 2018-02-01 16:36:12 -0600 | [diff] [blame] | 96 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 97 | t = pool_elt_at_index (vxm->tunnels, dev_instance); |
Jon Loeliger | 3d460bd | 2018-02-01 16:36:12 -0600 | [diff] [blame] | 98 | |
| 99 | return format (s, "vxlan_tunnel%d", t->user_instance); |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 100 | } |
| 101 | |
Pavel Kotucek | 988a7c4 | 2016-02-29 15:03:08 +0100 | [diff] [blame] | 102 | static clib_error_t * |
| 103 | vxlan_interface_admin_up_down (vnet_main_t * vnm, u32 hw_if_index, u32 flags) |
| 104 | { |
Eyal Bari | a93ea42 | 2017-02-01 13:36:15 +0200 | [diff] [blame] | 105 | u32 hw_flags = (flags & VNET_SW_INTERFACE_FLAG_ADMIN_UP) ? |
| 106 | VNET_HW_INTERFACE_FLAG_LINK_UP : 0; |
| 107 | vnet_hw_interface_set_flags (vnm, hw_if_index, hw_flags); |
Pavel Kotucek | 988a7c4 | 2016-02-29 15:03:08 +0100 | [diff] [blame] | 108 | |
| 109 | return /* no error */ 0; |
| 110 | } |
| 111 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 112 | /* *INDENT-OFF* */ |
| 113 | VNET_DEVICE_CLASS (vxlan_device_class, static) = { |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 114 | .name = "VXLAN", |
| 115 | .format_device_name = format_vxlan_name, |
| 116 | .format_tx_trace = format_vxlan_encap_trace, |
Pavel Kotucek | 988a7c4 | 2016-02-29 15:03:08 +0100 | [diff] [blame] | 117 | .admin_up_down_function = vxlan_interface_admin_up_down, |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 118 | }; |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 119 | /* *INDENT-ON* */ |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 120 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 121 | static u8 * |
| 122 | format_vxlan_header_with_length (u8 * s, va_list * args) |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 123 | { |
| 124 | u32 dev_instance = va_arg (*args, u32); |
| 125 | s = format (s, "unimplemented dev %u", dev_instance); |
| 126 | return s; |
| 127 | } |
| 128 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 129 | /* *INDENT-OFF* */ |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 130 | VNET_HW_INTERFACE_CLASS (vxlan_hw_class) = { |
| 131 | .name = "VXLAN", |
| 132 | .format_header = format_vxlan_header_with_length, |
Neale Ranns | b80c536 | 2016-10-08 13:03:40 +0100 | [diff] [blame] | 133 | .build_rewrite = default_build_rewrite, |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 134 | }; |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 135 | /* *INDENT-ON* */ |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 136 | |
Eyal Bari | c5b1360 | 2016-11-24 19:42:43 +0200 | [diff] [blame] | 137 | static void |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 138 | vxlan_tunnel_restack_dpo (vxlan_tunnel_t * t) |
Eyal Bari | c5b1360 | 2016-11-24 19:42:43 +0200 | [diff] [blame] | 139 | { |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 140 | u8 is_ip4 = ip46_address_is_ip4 (&t->dst); |
Eyal Bari | 99ed486 | 2018-04-25 13:50:57 +0300 | [diff] [blame] | 141 | dpo_id_t dpo = DPO_INVALID; |
| 142 | fib_forward_chain_type_t forw_type = is_ip4 ? |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 143 | FIB_FORW_CHAIN_TYPE_UNICAST_IP4 : FIB_FORW_CHAIN_TYPE_UNICAST_IP6; |
Eyal Bari | c5b1360 | 2016-11-24 19:42:43 +0200 | [diff] [blame] | 144 | |
Eyal Bari | 99ed486 | 2018-04-25 13:50:57 +0300 | [diff] [blame] | 145 | fib_entry_contribute_forwarding (t->fib_entry_index, forw_type, &dpo); |
| 146 | |
| 147 | /* vxlan uses the payload hash as the udp source port |
| 148 | * hence the packet's hash is unknown |
| 149 | * skip single bucket load balance dpo's */ |
| 150 | while (DPO_LOAD_BALANCE == dpo.dpoi_type) |
| 151 | { |
| 152 | load_balance_t *lb = load_balance_get (dpo.dpoi_index); |
| 153 | if (lb->lb_n_buckets > 1) |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 154 | break; |
Eyal Bari | 99ed486 | 2018-04-25 13:50:57 +0300 | [diff] [blame] | 155 | |
| 156 | dpo_copy (&dpo, load_balance_get_bucket_i (lb, 0)); |
| 157 | } |
| 158 | |
| 159 | u32 encap_index = is_ip4 ? |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 160 | vxlan4_encap_node.index : vxlan6_encap_node.index; |
Eyal Bari | 99ed486 | 2018-04-25 13:50:57 +0300 | [diff] [blame] | 161 | dpo_stack_from_node (encap_index, &t->next_dpo, &dpo); |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 162 | dpo_reset (&dpo); |
Eyal Bari | c5b1360 | 2016-11-24 19:42:43 +0200 | [diff] [blame] | 163 | } |
John Lo | c42912d | 2016-11-07 18:30:47 -0500 | [diff] [blame] | 164 | |
| 165 | static vxlan_tunnel_t * |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 166 | vxlan_tunnel_from_fib_node (fib_node_t * node) |
John Lo | c42912d | 2016-11-07 18:30:47 -0500 | [diff] [blame] | 167 | { |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 168 | ASSERT (FIB_NODE_TYPE_VXLAN_TUNNEL == node->fn_type); |
| 169 | return ((vxlan_tunnel_t *) (((char *) node) - |
| 170 | STRUCT_OFFSET_OF (vxlan_tunnel_t, node))); |
John Lo | c42912d | 2016-11-07 18:30:47 -0500 | [diff] [blame] | 171 | } |
| 172 | |
| 173 | /** |
| 174 | * Function definition to backwalk a FIB node - |
| 175 | * Here we will restack the new dpo of VXLAN DIP to encap node. |
| 176 | */ |
| 177 | static fib_node_back_walk_rc_t |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 178 | vxlan_tunnel_back_walk (fib_node_t * node, fib_node_back_walk_ctx_t * ctx) |
John Lo | c42912d | 2016-11-07 18:30:47 -0500 | [diff] [blame] | 179 | { |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 180 | vxlan_tunnel_restack_dpo (vxlan_tunnel_from_fib_node (node)); |
| 181 | return (FIB_NODE_BACK_WALK_CONTINUE); |
John Lo | c42912d | 2016-11-07 18:30:47 -0500 | [diff] [blame] | 182 | } |
| 183 | |
| 184 | /** |
| 185 | * Function definition to get a FIB node from its index |
| 186 | */ |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 187 | static fib_node_t * |
John Lo | c42912d | 2016-11-07 18:30:47 -0500 | [diff] [blame] | 188 | vxlan_tunnel_fib_node_get (fib_node_index_t index) |
| 189 | { |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 190 | vxlan_tunnel_t *t; |
| 191 | vxlan_main_t *vxm = &vxlan_main; |
John Lo | c42912d | 2016-11-07 18:30:47 -0500 | [diff] [blame] | 192 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 193 | t = pool_elt_at_index (vxm->tunnels, index); |
John Lo | c42912d | 2016-11-07 18:30:47 -0500 | [diff] [blame] | 194 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 195 | return (&t->node); |
John Lo | c42912d | 2016-11-07 18:30:47 -0500 | [diff] [blame] | 196 | } |
| 197 | |
| 198 | /** |
| 199 | * Function definition to inform the FIB node that its last lock has gone. |
| 200 | */ |
| 201 | static void |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 202 | vxlan_tunnel_last_lock_gone (fib_node_t * node) |
John Lo | c42912d | 2016-11-07 18:30:47 -0500 | [diff] [blame] | 203 | { |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 204 | /* |
| 205 | * The VXLAN tunnel is a root of the graph. As such |
| 206 | * it never has children and thus is never locked. |
| 207 | */ |
| 208 | ASSERT (0); |
John Lo | c42912d | 2016-11-07 18:30:47 -0500 | [diff] [blame] | 209 | } |
| 210 | |
| 211 | /* |
| 212 | * Virtual function table registered by VXLAN tunnels |
| 213 | * for participation in the FIB object graph. |
| 214 | */ |
| 215 | const static fib_node_vft_t vxlan_vft = { |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 216 | .fnv_get = vxlan_tunnel_fib_node_get, |
| 217 | .fnv_last_lock = vxlan_tunnel_last_lock_gone, |
| 218 | .fnv_back_walk = vxlan_tunnel_back_walk, |
John Lo | c42912d | 2016-11-07 18:30:47 -0500 | [diff] [blame] | 219 | }; |
| 220 | |
| 221 | |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 222 | #define foreach_copy_field \ |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 223 | _(vni) \ |
Eyal Bari | c5b1360 | 2016-11-24 19:42:43 +0200 | [diff] [blame] | 224 | _(mcast_sw_if_index) \ |
| 225 | _(encap_fib_index) \ |
Hongjun Ni | beb4bf7 | 2016-11-25 00:03:46 +0800 | [diff] [blame] | 226 | _(decap_next_index) \ |
Eyal Bari | c5b1360 | 2016-11-24 19:42:43 +0200 | [diff] [blame] | 227 | _(src) \ |
| 228 | _(dst) |
Chris Luke | 99cb335 | 2016-04-26 10:49:53 -0400 | [diff] [blame] | 229 | |
Eyal Bari | 554075a | 2018-02-13 15:17:17 +0200 | [diff] [blame] | 230 | static void |
Eyal Bari | a93ea42 | 2017-02-01 13:36:15 +0200 | [diff] [blame] | 231 | vxlan_rewrite (vxlan_tunnel_t * t, bool is_ip6) |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 232 | { |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 233 | union |
| 234 | { |
eyal bari | 82e21d7 | 2018-04-26 13:14:55 +0300 | [diff] [blame] | 235 | ip4_vxlan_header_t h4; |
| 236 | ip6_vxlan_header_t h6; |
Matthew Smith | ec8aea1 | 2018-05-02 09:55:01 -0500 | [diff] [blame] | 237 | } h; |
eyal bari | 82e21d7 | 2018-04-26 13:14:55 +0300 | [diff] [blame] | 238 | int len = is_ip6 ? sizeof h.h6 : sizeof h.h4; |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 239 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 240 | udp_header_t *udp; |
| 241 | vxlan_header_t *vxlan; |
Eyal Bari | a93ea42 | 2017-02-01 13:36:15 +0200 | [diff] [blame] | 242 | /* Fixed portion of the (outer) ip header */ |
Matthew Smith | ec8aea1 | 2018-05-02 09:55:01 -0500 | [diff] [blame] | 243 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 244 | memset (&h, 0, sizeof (h)); |
| 245 | if (!is_ip6) |
Hongjun Ni | beb4bf7 | 2016-11-25 00:03:46 +0800 | [diff] [blame] | 246 | { |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 247 | ip4_header_t *ip = &h.h4.ip4; |
eyal bari | 82e21d7 | 2018-04-26 13:14:55 +0300 | [diff] [blame] | 248 | udp = &h.h4.udp, vxlan = &h.h4.vxlan; |
Eyal Bari | a93ea42 | 2017-02-01 13:36:15 +0200 | [diff] [blame] | 249 | ip->ip_version_and_header_length = 0x45; |
| 250 | ip->ttl = 254; |
| 251 | ip->protocol = IP_PROTOCOL_UDP; |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 252 | |
Eyal Bari | a93ea42 | 2017-02-01 13:36:15 +0200 | [diff] [blame] | 253 | ip->src_address = t->src.ip4; |
| 254 | ip->dst_address = t->dst.ip4; |
| 255 | |
| 256 | /* we fix up the ip4 header length and checksum after-the-fact */ |
| 257 | ip->checksum = ip4_header_checksum (ip); |
Hongjun Ni | beb4bf7 | 2016-11-25 00:03:46 +0800 | [diff] [blame] | 258 | } |
| 259 | else |
| 260 | { |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 261 | ip6_header_t *ip = &h.h6.ip6; |
eyal bari | 82e21d7 | 2018-04-26 13:14:55 +0300 | [diff] [blame] | 262 | udp = &h.h6.udp, vxlan = &h.h6.vxlan; |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 263 | ip->ip_version_traffic_class_and_flow_label = |
| 264 | clib_host_to_net_u32 (6 << 28); |
Eyal Bari | a93ea42 | 2017-02-01 13:36:15 +0200 | [diff] [blame] | 265 | ip->hop_limit = 255; |
| 266 | ip->protocol = IP_PROTOCOL_UDP; |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 267 | |
Eyal Bari | a93ea42 | 2017-02-01 13:36:15 +0200 | [diff] [blame] | 268 | ip->src_address = t->src.ip6; |
| 269 | ip->dst_address = t->dst.ip6; |
Hongjun Ni | beb4bf7 | 2016-11-25 00:03:46 +0800 | [diff] [blame] | 270 | } |
| 271 | |
Eyal Bari | a93ea42 | 2017-02-01 13:36:15 +0200 | [diff] [blame] | 272 | /* UDP header, randomize src port on something, maybe? */ |
| 273 | udp->src_port = clib_host_to_net_u16 (4789); |
| 274 | udp->dst_port = clib_host_to_net_u16 (UDP_DST_PORT_vxlan); |
| 275 | |
| 276 | /* VXLAN header */ |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 277 | vnet_set_vni_and_flags (vxlan, t->vni); |
eyal bari | 82e21d7 | 2018-04-26 13:14:55 +0300 | [diff] [blame] | 278 | vnet_rewrite_set_data (*t, &h, len); |
Eyal Bari | a93ea42 | 2017-02-01 13:36:15 +0200 | [diff] [blame] | 279 | } |
| 280 | |
| 281 | static bool |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 282 | vxlan_decap_next_is_valid (vxlan_main_t * vxm, u32 is_ip6, |
| 283 | u32 decap_next_index) |
Eyal Bari | a93ea42 | 2017-02-01 13:36:15 +0200 | [diff] [blame] | 284 | { |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 285 | vlib_main_t *vm = vxm->vlib_main; |
| 286 | u32 input_idx = (!is_ip6) ? |
| 287 | vxlan4_input_node.index : vxlan6_input_node.index; |
Eyal Bari | a93ea42 | 2017-02-01 13:36:15 +0200 | [diff] [blame] | 288 | vlib_node_runtime_t *r = vlib_node_get_runtime (vm, input_idx); |
| 289 | |
| 290 | return decap_next_index < r->n_next_nodes; |
Hongjun Ni | beb4bf7 | 2016-11-25 00:03:46 +0800 | [diff] [blame] | 291 | } |
| 292 | |
Eyal Bari | fff67c8 | 2016-12-21 12:45:47 +0200 | [diff] [blame] | 293 | static uword |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 294 | vtep_addr_ref (ip46_address_t * ip) |
Eyal Bari | fff67c8 | 2016-12-21 12:45:47 +0200 | [diff] [blame] | 295 | { |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 296 | uword *vtep = ip46_address_is_ip4 (ip) ? |
| 297 | hash_get (vxlan_main.vtep4, ip->ip4.as_u32) : |
| 298 | hash_get_mem (vxlan_main.vtep6, &ip->ip6); |
| 299 | if (vtep) |
| 300 | return ++(*vtep); |
| 301 | ip46_address_is_ip4 (ip) ? |
| 302 | hash_set (vxlan_main.vtep4, ip->ip4.as_u32, 1) : |
| 303 | hash_set_mem_alloc (&vxlan_main.vtep6, &ip->ip6, 1); |
| 304 | return 1; |
Eyal Bari | fff67c8 | 2016-12-21 12:45:47 +0200 | [diff] [blame] | 305 | } |
| 306 | |
| 307 | static uword |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 308 | vtep_addr_unref (ip46_address_t * ip) |
Eyal Bari | fff67c8 | 2016-12-21 12:45:47 +0200 | [diff] [blame] | 309 | { |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 310 | uword *vtep = ip46_address_is_ip4 (ip) ? |
| 311 | hash_get (vxlan_main.vtep4, ip->ip4.as_u32) : |
| 312 | hash_get_mem (vxlan_main.vtep6, &ip->ip6); |
| 313 | ASSERT (vtep); |
| 314 | if (--(*vtep) != 0) |
| 315 | return *vtep; |
| 316 | ip46_address_is_ip4 (ip) ? |
| 317 | hash_unset (vxlan_main.vtep4, ip->ip4.as_u32) : |
| 318 | hash_unset_mem_free (&vxlan_main.vtep6, &ip->ip6); |
| 319 | return 0; |
Eyal Bari | fff67c8 | 2016-12-21 12:45:47 +0200 | [diff] [blame] | 320 | } |
| 321 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 322 | /* *INDENT-OFF* */ |
| 323 | typedef CLIB_PACKED(union |
| 324 | { |
| 325 | struct |
| 326 | { |
Neale Ranns | 32e1c01 | 2016-11-22 17:07:28 +0000 | [diff] [blame] | 327 | fib_node_index_t mfib_entry_index; |
Eyal Bari | 0ded851 | 2017-01-19 17:01:09 +0200 | [diff] [blame] | 328 | adj_index_t mcast_adj_index; |
| 329 | }; |
| 330 | u64 as_u64; |
| 331 | }) mcast_shared_t; |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 332 | /* *INDENT-ON* */ |
Eyal Bari | 0ded851 | 2017-01-19 17:01:09 +0200 | [diff] [blame] | 333 | |
| 334 | static inline mcast_shared_t |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 335 | mcast_shared_get (ip46_address_t * ip) |
Eyal Bari | fff67c8 | 2016-12-21 12:45:47 +0200 | [diff] [blame] | 336 | { |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 337 | ASSERT (ip46_address_is_multicast (ip)); |
| 338 | uword *p = hash_get_mem (vxlan_main.mcast_shared, ip); |
| 339 | ASSERT (p); |
| 340 | mcast_shared_t ret = {.as_u64 = *p }; |
| 341 | return ret; |
Eyal Bari | fff67c8 | 2016-12-21 12:45:47 +0200 | [diff] [blame] | 342 | } |
| 343 | |
Eyal Bari | 0ded851 | 2017-01-19 17:01:09 +0200 | [diff] [blame] | 344 | static inline void |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 345 | mcast_shared_add (ip46_address_t * dst, fib_node_index_t mfei, adj_index_t ai) |
Neale Ranns | 32e1c01 | 2016-11-22 17:07:28 +0000 | [diff] [blame] | 346 | { |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 347 | mcast_shared_t new_ep = { |
| 348 | .mcast_adj_index = ai, |
| 349 | .mfib_entry_index = mfei, |
| 350 | }; |
Neale Ranns | 32e1c01 | 2016-11-22 17:07:28 +0000 | [diff] [blame] | 351 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 352 | hash_set_mem_alloc (&vxlan_main.mcast_shared, dst, new_ep.as_u64); |
Neale Ranns | 32e1c01 | 2016-11-22 17:07:28 +0000 | [diff] [blame] | 353 | } |
| 354 | |
| 355 | static inline void |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 356 | mcast_shared_remove (ip46_address_t * dst) |
Neale Ranns | 32e1c01 | 2016-11-22 17:07:28 +0000 | [diff] [blame] | 357 | { |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 358 | mcast_shared_t ep = mcast_shared_get (dst); |
Neale Ranns | 32e1c01 | 2016-11-22 17:07:28 +0000 | [diff] [blame] | 359 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 360 | adj_unlock (ep.mcast_adj_index); |
| 361 | mfib_table_entry_delete_index (ep.mfib_entry_index, MFIB_SOURCE_VXLAN); |
Neale Ranns | 32e1c01 | 2016-11-22 17:07:28 +0000 | [diff] [blame] | 362 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 363 | hash_unset_mem_free (&vxlan_main.mcast_shared, dst); |
Eyal Bari | fff67c8 | 2016-12-21 12:45:47 +0200 | [diff] [blame] | 364 | } |
| 365 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 366 | int vnet_vxlan_add_del_tunnel |
| 367 | (vnet_vxlan_add_del_tunnel_args_t * a, u32 * sw_if_indexp) |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 368 | { |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 369 | vxlan_main_t *vxm = &vxlan_main; |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 370 | vxlan_tunnel_t *t = 0; |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 371 | vnet_main_t *vnm = vxm->vnet_main; |
Eyal Bari | dd47eca | 2018-07-08 08:15:56 +0300 | [diff] [blame] | 372 | u64 *p; |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 373 | u32 sw_if_index = ~0; |
Chris Luke | 99cb335 | 2016-04-26 10:49:53 -0400 | [diff] [blame] | 374 | vxlan4_tunnel_key_t key4; |
| 375 | vxlan6_tunnel_key_t key6; |
John Lo | c42912d | 2016-11-07 18:30:47 -0500 | [diff] [blame] | 376 | u32 is_ip6 = a->is_ip6; |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 377 | |
Eyal Bari | dd47eca | 2018-07-08 08:15:56 +0300 | [diff] [blame] | 378 | int not_found; |
John Lo | 56912c8 | 2016-12-08 16:10:02 -0500 | [diff] [blame] | 379 | if (!is_ip6) |
| 380 | { |
Eyal Bari | dd47eca | 2018-07-08 08:15:56 +0300 | [diff] [blame] | 381 | key4.key[0] = a->dst.ip4.as_u32; |
| 382 | key4.key[1] = (((u64) a->encap_fib_index) << 32) |
| 383 | | clib_host_to_net_u32 (a->vni << 8); |
| 384 | not_found = |
| 385 | clib_bihash_search_inline_16_8 (&vxm->vxlan4_tunnel_by_key, &key4); |
| 386 | p = &key4.value; |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 387 | } |
| 388 | else |
John Lo | 56912c8 | 2016-12-08 16:10:02 -0500 | [diff] [blame] | 389 | { |
Eyal Bari | 0fa5678 | 2018-06-04 12:25:05 +0300 | [diff] [blame] | 390 | key6.key[0] = a->dst.ip6.as_u64[0]; |
| 391 | key6.key[1] = a->dst.ip6.as_u64[1]; |
| 392 | key6.key[2] = (((u64) a->encap_fib_index) << 32) |
| 393 | | clib_host_to_net_u32 (a->vni << 8); |
Eyal Bari | dd47eca | 2018-07-08 08:15:56 +0300 | [diff] [blame] | 394 | not_found = |
| 395 | clib_bihash_search_inline_24_8 (&vxm->vxlan6_tunnel_by_key, &key6); |
| 396 | p = &key6.value; |
John Lo | 56912c8 | 2016-12-08 16:10:02 -0500 | [diff] [blame] | 397 | } |
Jon Loeliger | 3d460bd | 2018-02-01 16:36:12 -0600 | [diff] [blame] | 398 | |
Eyal Bari | dd47eca | 2018-07-08 08:15:56 +0300 | [diff] [blame] | 399 | if (not_found) |
| 400 | p = 0; |
| 401 | |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 402 | if (a->is_add) |
| 403 | { |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 404 | l2input_main_t *l2im = &l2input_main; |
Jon Loeliger | 3d460bd | 2018-02-01 16:36:12 -0600 | [diff] [blame] | 405 | u32 dev_instance; /* real dev instance tunnel index */ |
| 406 | u32 user_instance; /* request and actual instance number */ |
John Lo | c42912d | 2016-11-07 18:30:47 -0500 | [diff] [blame] | 407 | |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 408 | /* adding a tunnel: tunnel must not already exist */ |
| 409 | if (p) |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 410 | return VNET_API_ERROR_TUNNEL_EXIST; |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 411 | |
Hongjun Ni | beb4bf7 | 2016-11-25 00:03:46 +0800 | [diff] [blame] | 412 | /*if not set explicitly, default to l2 */ |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 413 | if (a->decap_next_index == ~0) |
Hongjun Ni | beb4bf7 | 2016-11-25 00:03:46 +0800 | [diff] [blame] | 414 | a->decap_next_index = VXLAN_INPUT_NEXT_L2_INPUT; |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 415 | if (!vxlan_decap_next_is_valid (vxm, is_ip6, a->decap_next_index)) |
| 416 | return VNET_API_ERROR_INVALID_DECAP_NEXT; |
Hongjun Ni | beb4bf7 | 2016-11-25 00:03:46 +0800 | [diff] [blame] | 417 | |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 418 | pool_get_aligned (vxm->tunnels, t, CLIB_CACHE_LINE_BYTES); |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 419 | memset (t, 0, sizeof (*t)); |
Jon Loeliger | 3d460bd | 2018-02-01 16:36:12 -0600 | [diff] [blame] | 420 | dev_instance = t - vxm->tunnels; |
| 421 | |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 422 | /* copy from arg structure */ |
| 423 | #define _(x) t->x = a->x; |
| 424 | foreach_copy_field; |
| 425 | #undef _ |
Chris Luke | 99cb335 | 2016-04-26 10:49:53 -0400 | [diff] [blame] | 426 | |
Eyal Bari | 554075a | 2018-02-13 15:17:17 +0200 | [diff] [blame] | 427 | vxlan_rewrite (t, is_ip6); |
Jon Loeliger | 3d460bd | 2018-02-01 16:36:12 -0600 | [diff] [blame] | 428 | /* |
| 429 | * Reconcile the real dev_instance and a possible requested instance. |
| 430 | */ |
| 431 | user_instance = a->instance; |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 432 | if (user_instance == ~0) |
Jon Loeliger | 3d460bd | 2018-02-01 16:36:12 -0600 | [diff] [blame] | 433 | user_instance = dev_instance; |
| 434 | if (hash_get (vxm->instance_used, user_instance)) |
| 435 | { |
| 436 | pool_put (vxm->tunnels, t); |
| 437 | return VNET_API_ERROR_INSTANCE_IN_USE; |
| 438 | } |
| 439 | hash_set (vxm->instance_used, user_instance, 1); |
| 440 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 441 | t->dev_instance = dev_instance; /* actual */ |
| 442 | t->user_instance = user_instance; /* name */ |
eyal bari | af86a48 | 2018-04-17 11:20:27 +0300 | [diff] [blame] | 443 | t->flow_index = ~0; |
Jon Loeliger | 3d460bd | 2018-02-01 16:36:12 -0600 | [diff] [blame] | 444 | |
Eyal Bari | 5ac9bf5 | 2017-01-02 14:29:21 +0200 | [diff] [blame] | 445 | /* copy the key */ |
Eyal Bari | dd47eca | 2018-07-08 08:15:56 +0300 | [diff] [blame] | 446 | int add_failed; |
Eyal Bari | 5ac9bf5 | 2017-01-02 14:29:21 +0200 | [diff] [blame] | 447 | if (is_ip6) |
Eyal Bari | 0fa5678 | 2018-06-04 12:25:05 +0300 | [diff] [blame] | 448 | { |
| 449 | key6.value = (u64) dev_instance; |
Eyal Bari | dd47eca | 2018-07-08 08:15:56 +0300 | [diff] [blame] | 450 | add_failed = clib_bihash_add_del_24_8 (&vxm->vxlan6_tunnel_by_key, |
| 451 | &key6, 1 /*add */ ); |
Eyal Bari | 0fa5678 | 2018-06-04 12:25:05 +0300 | [diff] [blame] | 452 | } |
Chris Luke | 99cb335 | 2016-04-26 10:49:53 -0400 | [diff] [blame] | 453 | else |
Eyal Bari | dd47eca | 2018-07-08 08:15:56 +0300 | [diff] [blame] | 454 | { |
| 455 | key4.value = (u64) dev_instance; |
| 456 | add_failed = clib_bihash_add_del_16_8 (&vxm->vxlan4_tunnel_by_key, |
| 457 | &key4, 1 /*add */ ); |
| 458 | } |
| 459 | |
| 460 | if (add_failed) |
| 461 | { |
| 462 | pool_put (vxm->tunnels, t); |
| 463 | return VNET_API_ERROR_INVALID_REGISTRATION; |
| 464 | } |
Eyal Bari | fff67c8 | 2016-12-21 12:45:47 +0200 | [diff] [blame] | 465 | |
Eyal Bari | 554075a | 2018-02-13 15:17:17 +0200 | [diff] [blame] | 466 | t->hw_if_index = vnet_register_interface |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 467 | (vnm, vxlan_device_class.index, dev_instance, |
| 468 | vxlan_hw_class.index, dev_instance); |
| 469 | vnet_hw_interface_t *hi = vnet_get_hw_interface (vnm, t->hw_if_index); |
John Lo | e5453d0 | 2018-01-23 19:21:34 -0500 | [diff] [blame] | 470 | |
| 471 | /* Set vxlan tunnel output node */ |
| 472 | u32 encap_index = !is_ip6 ? |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 473 | vxlan4_encap_node.index : vxlan6_encap_node.index; |
Eyal Bari | 554075a | 2018-02-13 15:17:17 +0200 | [diff] [blame] | 474 | vnet_set_interface_output_node (vnm, t->hw_if_index, encap_index); |
John Lo | e5453d0 | 2018-01-23 19:21:34 -0500 | [diff] [blame] | 475 | |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 476 | t->sw_if_index = sw_if_index = hi->sw_if_index; |
John Lo | e5453d0 | 2018-01-23 19:21:34 -0500 | [diff] [blame] | 477 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 478 | vec_validate_init_empty (vxm->tunnel_index_by_sw_if_index, sw_if_index, |
| 479 | ~0); |
Jon Loeliger | 3d460bd | 2018-02-01 16:36:12 -0600 | [diff] [blame] | 480 | vxm->tunnel_index_by_sw_if_index[sw_if_index] = dev_instance; |
Dave Wallace | 60231f3 | 2015-12-17 21:04:30 -0500 | [diff] [blame] | 481 | |
John Lo | c42912d | 2016-11-07 18:30:47 -0500 | [diff] [blame] | 482 | /* setup l2 input config with l2 feature and bd 0 to drop packet */ |
| 483 | vec_validate (l2im->configs, sw_if_index); |
| 484 | l2im->configs[sw_if_index].feature_bitmap = L2INPUT_FEAT_DROP; |
| 485 | l2im->configs[sw_if_index].bd_index = 0; |
John Lo | e5453d0 | 2018-01-23 19:21:34 -0500 | [diff] [blame] | 486 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 487 | vnet_sw_interface_t *si = vnet_get_sw_interface (vnm, sw_if_index); |
Eyal Bari | 3212c57 | 2017-03-06 11:47:50 +0200 | [diff] [blame] | 488 | si->flags &= ~VNET_SW_INTERFACE_FLAG_HIDDEN; |
John Lo | e5453d0 | 2018-01-23 19:21:34 -0500 | [diff] [blame] | 489 | vnet_sw_interface_set_flags (vnm, sw_if_index, |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 490 | VNET_SW_INTERFACE_FLAG_ADMIN_UP); |
Eyal Bari | 3212c57 | 2017-03-06 11:47:50 +0200 | [diff] [blame] | 491 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 492 | fib_node_init (&t->node, FIB_NODE_TYPE_VXLAN_TUNNEL); |
Eyal Bari | c5b1360 | 2016-11-24 19:42:43 +0200 | [diff] [blame] | 493 | fib_prefix_t tun_dst_pfx; |
Eyal Bari | c5b1360 | 2016-11-24 19:42:43 +0200 | [diff] [blame] | 494 | vnet_flood_class_t flood_class = VNET_FLOOD_CLASS_TUNNEL_NORMAL; |
John Lo | c42912d | 2016-11-07 18:30:47 -0500 | [diff] [blame] | 495 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 496 | fib_prefix_from_ip46_addr (&t->dst, &tun_dst_pfx); |
| 497 | if (!ip46_address_is_multicast (&t->dst)) |
| 498 | { |
| 499 | /* Unicast tunnel - |
| 500 | * source the FIB entry for the tunnel's destination |
| 501 | * and become a child thereof. The tunnel will then get poked |
| 502 | * when the forwarding for the entry updates, and the tunnel can |
| 503 | * re-stack accordingly |
| 504 | */ |
| 505 | vtep_addr_ref (&t->src); |
| 506 | t->fib_entry_index = fib_table_entry_special_add |
| 507 | (t->encap_fib_index, &tun_dst_pfx, FIB_SOURCE_RR, |
Neale Ranns | a055830 | 2017-04-13 00:44:52 -0700 | [diff] [blame] | 508 | FIB_ENTRY_FLAG_NONE); |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 509 | t->sibling_index = fib_entry_child_add |
| 510 | (t->fib_entry_index, FIB_NODE_TYPE_VXLAN_TUNNEL, dev_instance); |
| 511 | vxlan_tunnel_restack_dpo (t); |
| 512 | } |
Eyal Bari | fff67c8 | 2016-12-21 12:45:47 +0200 | [diff] [blame] | 513 | else |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 514 | { |
| 515 | /* Multicast tunnel - |
John Lo | 56912c8 | 2016-12-08 16:10:02 -0500 | [diff] [blame] | 516 | * as the same mcast group can be used for mutiple mcast tunnels |
| 517 | * with different VNIs, create the output fib adjecency only if |
| 518 | * it does not already exist |
| 519 | */ |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 520 | fib_protocol_t fp = fib_ip_proto (is_ip6); |
Eyal Bari | c5b1360 | 2016-11-24 19:42:43 +0200 | [diff] [blame] | 521 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 522 | if (vtep_addr_ref (&t->dst) == 1) |
| 523 | { |
| 524 | fib_node_index_t mfei; |
| 525 | adj_index_t ai; |
| 526 | fib_route_path_t path = { |
| 527 | .frp_proto = fib_proto_to_dpo (fp), |
| 528 | .frp_addr = zero_addr, |
| 529 | .frp_sw_if_index = 0xffffffff, |
| 530 | .frp_fib_index = ~0, |
| 531 | .frp_weight = 0, |
| 532 | .frp_flags = FIB_ROUTE_PATH_LOCAL, |
| 533 | }; |
| 534 | const mfib_prefix_t mpfx = { |
| 535 | .fp_proto = fp, |
| 536 | .fp_len = (is_ip6 ? 128 : 32), |
| 537 | .fp_grp_addr = tun_dst_pfx.fp_addr, |
| 538 | }; |
Eyal Bari | fff67c8 | 2016-12-21 12:45:47 +0200 | [diff] [blame] | 539 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 540 | /* |
| 541 | * Setup the (*,G) to receive traffic on the mcast group |
| 542 | * - the forwarding interface is for-us |
| 543 | * - the accepting interface is that from the API |
| 544 | */ |
| 545 | mfib_table_entry_path_update (t->encap_fib_index, |
| 546 | &mpfx, |
| 547 | MFIB_SOURCE_VXLAN, |
| 548 | &path, MFIB_ITF_FLAG_FORWARD); |
Neale Ranns | 32e1c01 | 2016-11-22 17:07:28 +0000 | [diff] [blame] | 549 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 550 | path.frp_sw_if_index = a->mcast_sw_if_index; |
| 551 | path.frp_flags = FIB_ROUTE_PATH_FLAG_NONE; |
| 552 | mfei = mfib_table_entry_path_update (t->encap_fib_index, |
| 553 | &mpfx, |
| 554 | MFIB_SOURCE_VXLAN, |
| 555 | &path, |
| 556 | MFIB_ITF_FLAG_ACCEPT); |
Neale Ranns | 32e1c01 | 2016-11-22 17:07:28 +0000 | [diff] [blame] | 557 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 558 | /* |
| 559 | * Create the mcast adjacency to send traffic to the group |
| 560 | */ |
| 561 | ai = adj_mcast_add_or_lock (fp, |
| 562 | fib_proto_to_link (fp), |
| 563 | a->mcast_sw_if_index); |
Neale Ranns | 32e1c01 | 2016-11-22 17:07:28 +0000 | [diff] [blame] | 564 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 565 | /* |
| 566 | * create a new end-point |
| 567 | */ |
| 568 | mcast_shared_add (&t->dst, mfei, ai); |
| 569 | } |
Neale Ranns | 32e1c01 | 2016-11-22 17:07:28 +0000 | [diff] [blame] | 570 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 571 | dpo_id_t dpo = DPO_INVALID; |
| 572 | mcast_shared_t ep = mcast_shared_get (&t->dst); |
Neale Ranns | 32e1c01 | 2016-11-22 17:07:28 +0000 | [diff] [blame] | 573 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 574 | /* Stack shared mcast dst mac addr rewrite on encap */ |
| 575 | dpo_set (&dpo, DPO_ADJACENCY_MCAST, |
| 576 | fib_proto_to_dpo (fp), ep.mcast_adj_index); |
Neale Ranns | 32e1c01 | 2016-11-22 17:07:28 +0000 | [diff] [blame] | 577 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 578 | dpo_stack_from_node (encap_index, &t->next_dpo, &dpo); |
| 579 | dpo_reset (&dpo); |
Eyal Bari | fff67c8 | 2016-12-21 12:45:47 +0200 | [diff] [blame] | 580 | flood_class = VNET_FLOOD_CLASS_TUNNEL_MASTER; |
John Lo | 56912c8 | 2016-12-08 16:10:02 -0500 | [diff] [blame] | 581 | } |
| 582 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 583 | vnet_get_sw_interface (vnet_get_main (), sw_if_index)->flood_class = |
| 584 | flood_class; |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 585 | } |
| 586 | else |
| 587 | { |
| 588 | /* deleting a tunnel: tunnel must exist */ |
John Lo | 37682e1 | 2016-11-30 12:51:39 -0500 | [diff] [blame] | 589 | if (!p) |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 590 | return VNET_API_ERROR_NO_SUCH_ENTRY; |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 591 | |
Jon Loeliger | 3d460bd | 2018-02-01 16:36:12 -0600 | [diff] [blame] | 592 | u32 instance = p[0]; |
| 593 | t = pool_elt_at_index (vxm->tunnels, instance); |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 594 | |
Eyal Bari | bc799c9 | 2017-04-06 03:26:59 +0300 | [diff] [blame] | 595 | sw_if_index = t->sw_if_index; |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 596 | vnet_sw_interface_set_flags (vnm, sw_if_index, 0 /* down */ ); |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 597 | |
Jon Loeliger | 3d460bd | 2018-02-01 16:36:12 -0600 | [diff] [blame] | 598 | vxm->tunnel_index_by_sw_if_index[sw_if_index] = ~0; |
Dave Wallace | 60231f3 | 2015-12-17 21:04:30 -0500 | [diff] [blame] | 599 | |
John Lo | c42912d | 2016-11-07 18:30:47 -0500 | [diff] [blame] | 600 | if (!is_ip6) |
Eyal Bari | dd47eca | 2018-07-08 08:15:56 +0300 | [diff] [blame] | 601 | clib_bihash_add_del_16_8 (&vxm->vxlan4_tunnel_by_key, &key4, |
| 602 | 0 /*del */ ); |
Chris Luke | 99cb335 | 2016-04-26 10:49:53 -0400 | [diff] [blame] | 603 | else |
Eyal Bari | dd47eca | 2018-07-08 08:15:56 +0300 | [diff] [blame] | 604 | clib_bihash_add_del_24_8 (&vxm->vxlan6_tunnel_by_key, &key6, |
Eyal Bari | 0fa5678 | 2018-06-04 12:25:05 +0300 | [diff] [blame] | 605 | 0 /*del */ ); |
Eyal Bari | fff67c8 | 2016-12-21 12:45:47 +0200 | [diff] [blame] | 606 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 607 | if (!ip46_address_is_multicast (&t->dst)) |
| 608 | { |
eyal bari | af86a48 | 2018-04-17 11:20:27 +0300 | [diff] [blame] | 609 | if (t->flow_index != ~0) |
| 610 | vnet_flow_del (vnm, t->flow_index); |
| 611 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 612 | vtep_addr_unref (&t->src); |
| 613 | fib_entry_child_remove (t->fib_entry_index, t->sibling_index); |
| 614 | fib_table_entry_delete_index (t->fib_entry_index, FIB_SOURCE_RR); |
| 615 | } |
| 616 | else if (vtep_addr_unref (&t->dst) == 0) |
| 617 | { |
| 618 | mcast_shared_remove (&t->dst); |
| 619 | } |
Eyal Bari | fff67c8 | 2016-12-21 12:45:47 +0200 | [diff] [blame] | 620 | |
Eyal Bari | 554075a | 2018-02-13 15:17:17 +0200 | [diff] [blame] | 621 | vnet_delete_hw_interface (vnm, t->hw_if_index); |
Jon Loeliger | 25ef2b5 | 2018-02-23 17:02:41 -0600 | [diff] [blame] | 622 | hash_unset (vxm->instance_used, t->user_instance); |
Jon Loeliger | 3d460bd | 2018-02-01 16:36:12 -0600 | [diff] [blame] | 623 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 624 | fib_node_deinit (&t->node); |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 625 | pool_put (vxm->tunnels, t); |
| 626 | } |
| 627 | |
| 628 | if (sw_if_indexp) |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 629 | *sw_if_indexp = sw_if_index; |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 630 | |
| 631 | return 0; |
| 632 | } |
| 633 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 634 | static uword |
| 635 | get_decap_next_for_node (u32 node_index, u32 ipv4_set) |
Hongjun Ni | beb4bf7 | 2016-11-25 00:03:46 +0800 | [diff] [blame] | 636 | { |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 637 | vxlan_main_t *vxm = &vxlan_main; |
| 638 | vlib_main_t *vm = vxm->vlib_main; |
Eyal Bari | 0765c6e | 2017-01-29 12:40:50 +0200 | [diff] [blame] | 639 | uword input_node = (ipv4_set) ? vxlan4_input_node.index : |
| 640 | vxlan6_input_node.index; |
Hongjun Ni | beb4bf7 | 2016-11-25 00:03:46 +0800 | [diff] [blame] | 641 | |
Eyal Bari | 0765c6e | 2017-01-29 12:40:50 +0200 | [diff] [blame] | 642 | return vlib_node_add_next (vm, input_node, node_index); |
Hongjun Ni | beb4bf7 | 2016-11-25 00:03:46 +0800 | [diff] [blame] | 643 | } |
| 644 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 645 | static uword |
| 646 | unformat_decap_next (unformat_input_t * input, va_list * args) |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 647 | { |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 648 | u32 *result = va_arg (*args, u32 *); |
Hongjun Ni | beb4bf7 | 2016-11-25 00:03:46 +0800 | [diff] [blame] | 649 | u32 ipv4_set = va_arg (*args, int); |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 650 | vxlan_main_t *vxm = &vxlan_main; |
| 651 | vlib_main_t *vm = vxm->vlib_main; |
Hongjun Ni | beb4bf7 | 2016-11-25 00:03:46 +0800 | [diff] [blame] | 652 | u32 node_index; |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 653 | u32 tmp; |
Hongjun Ni | beb4bf7 | 2016-11-25 00:03:46 +0800 | [diff] [blame] | 654 | |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 655 | if (unformat (input, "l2")) |
| 656 | *result = VXLAN_INPUT_NEXT_L2_INPUT; |
Hongjun Ni | beb4bf7 | 2016-11-25 00:03:46 +0800 | [diff] [blame] | 657 | else if (unformat (input, "node %U", unformat_vlib_node, vm, &node_index)) |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 658 | *result = get_decap_next_for_node (node_index, ipv4_set); |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 659 | else if (unformat (input, "%d", &tmp)) |
| 660 | *result = tmp; |
| 661 | else |
| 662 | return 0; |
| 663 | return 1; |
| 664 | } |
| 665 | |
| 666 | static clib_error_t * |
| 667 | vxlan_add_del_tunnel_command_fn (vlib_main_t * vm, |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 668 | unformat_input_t * input, |
| 669 | vlib_cli_command_t * cmd) |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 670 | { |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 671 | unformat_input_t _line_input, *line_input = &_line_input; |
| 672 | ip46_address_t src = ip46_address_initializer, dst = |
| 673 | ip46_address_initializer; |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 674 | u8 is_add = 1; |
| 675 | u8 src_set = 0; |
| 676 | u8 dst_set = 0; |
Eyal Bari | c5b1360 | 2016-11-24 19:42:43 +0200 | [diff] [blame] | 677 | u8 grp_set = 0; |
Chris Luke | 99cb335 | 2016-04-26 10:49:53 -0400 | [diff] [blame] | 678 | u8 ipv4_set = 0; |
| 679 | u8 ipv6_set = 0; |
Jon Loeliger | 3d460bd | 2018-02-01 16:36:12 -0600 | [diff] [blame] | 680 | u32 instance = ~0; |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 681 | u32 encap_fib_index = 0; |
Eyal Bari | c5b1360 | 2016-11-24 19:42:43 +0200 | [diff] [blame] | 682 | u32 mcast_sw_if_index = ~0; |
Hongjun Ni | beb4bf7 | 2016-11-25 00:03:46 +0800 | [diff] [blame] | 683 | u32 decap_next_index = VXLAN_INPUT_NEXT_L2_INPUT; |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 684 | u32 vni = 0; |
Eyal Bari | aa0180b | 2018-03-27 11:43:57 +0300 | [diff] [blame] | 685 | u32 table_id; |
Eyal Bari | 0fa5678 | 2018-06-04 12:25:05 +0300 | [diff] [blame] | 686 | clib_error_t *parse_error = NULL; |
Eyal Bari | c5b1360 | 2016-11-24 19:42:43 +0200 | [diff] [blame] | 687 | |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 688 | /* Get a line of input. */ |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 689 | if (!unformat_user (input, unformat_line_input, line_input)) |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 690 | return 0; |
| 691 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 692 | while (unformat_check_input (line_input) != UNFORMAT_END_OF_INPUT) |
| 693 | { |
| 694 | if (unformat (line_input, "del")) |
| 695 | { |
| 696 | is_add = 0; |
| 697 | } |
| 698 | else if (unformat (line_input, "instance %d", &instance)) |
| 699 | ; |
| 700 | else if (unformat (line_input, "src %U", |
| 701 | unformat_ip46_address, &src, IP46_TYPE_ANY)) |
| 702 | { |
| 703 | src_set = 1; |
| 704 | ip46_address_is_ip4 (&src) ? (ipv4_set = 1) : (ipv6_set = 1); |
| 705 | } |
| 706 | else if (unformat (line_input, "dst %U", |
| 707 | unformat_ip46_address, &dst, IP46_TYPE_ANY)) |
| 708 | { |
| 709 | dst_set = 1; |
| 710 | ip46_address_is_ip4 (&dst) ? (ipv4_set = 1) : (ipv6_set = 1); |
| 711 | } |
| 712 | else if (unformat (line_input, "group %U %U", |
| 713 | unformat_ip46_address, &dst, IP46_TYPE_ANY, |
| 714 | unformat_vnet_sw_interface, |
| 715 | vnet_get_main (), &mcast_sw_if_index)) |
| 716 | { |
| 717 | grp_set = dst_set = 1; |
| 718 | ip46_address_is_ip4 (&dst) ? (ipv4_set = 1) : (ipv6_set = 1); |
| 719 | } |
| 720 | else if (unformat (line_input, "encap-vrf-id %d", &table_id)) |
| 721 | { |
| 722 | encap_fib_index = |
| 723 | fib_table_find (fib_ip_proto (ipv6_set), table_id); |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 724 | } |
| 725 | else if (unformat (line_input, "decap-next %U", unformat_decap_next, |
| 726 | &decap_next_index, ipv4_set)) |
| 727 | ; |
| 728 | else if (unformat (line_input, "vni %d", &vni)) |
| 729 | ; |
| 730 | else |
| 731 | { |
Eyal Bari | 0fa5678 | 2018-06-04 12:25:05 +0300 | [diff] [blame] | 732 | parse_error = clib_error_return (0, "parse error: '%U'", |
| 733 | format_unformat_error, line_input); |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 734 | break; |
| 735 | } |
| 736 | } |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 737 | |
Eyal Bari | aa0180b | 2018-03-27 11:43:57 +0300 | [diff] [blame] | 738 | unformat_free (line_input); |
| 739 | |
Eyal Bari | 0fa5678 | 2018-06-04 12:25:05 +0300 | [diff] [blame] | 740 | if (parse_error) |
| 741 | return parse_error; |
| 742 | |
| 743 | if (encap_fib_index == ~0) |
| 744 | return clib_error_return (0, "nonexistent encap-vrf-id %d", table_id); |
Eyal Bari | aa0180b | 2018-03-27 11:43:57 +0300 | [diff] [blame] | 745 | |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 746 | if (src_set == 0) |
Eyal Bari | aa0180b | 2018-03-27 11:43:57 +0300 | [diff] [blame] | 747 | return clib_error_return (0, "tunnel src address not specified"); |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 748 | |
| 749 | if (dst_set == 0) |
Eyal Bari | aa0180b | 2018-03-27 11:43:57 +0300 | [diff] [blame] | 750 | return clib_error_return (0, "tunnel dst address not specified"); |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 751 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 752 | if (grp_set && !ip46_address_is_multicast (&dst)) |
Eyal Bari | aa0180b | 2018-03-27 11:43:57 +0300 | [diff] [blame] | 753 | return clib_error_return (0, "tunnel group address not multicast"); |
Eyal Bari | c5b1360 | 2016-11-24 19:42:43 +0200 | [diff] [blame] | 754 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 755 | if (grp_set == 0 && ip46_address_is_multicast (&dst)) |
Eyal Bari | aa0180b | 2018-03-27 11:43:57 +0300 | [diff] [blame] | 756 | return clib_error_return (0, "dst address must be unicast"); |
John Lo | 56912c8 | 2016-12-08 16:10:02 -0500 | [diff] [blame] | 757 | |
Eyal Bari | c5b1360 | 2016-11-24 19:42:43 +0200 | [diff] [blame] | 758 | if (grp_set && mcast_sw_if_index == ~0) |
Eyal Bari | aa0180b | 2018-03-27 11:43:57 +0300 | [diff] [blame] | 759 | return clib_error_return (0, "tunnel nonexistent multicast device"); |
Eyal Bari | c5b1360 | 2016-11-24 19:42:43 +0200 | [diff] [blame] | 760 | |
Chris Luke | 99cb335 | 2016-04-26 10:49:53 -0400 | [diff] [blame] | 761 | if (ipv4_set && ipv6_set) |
Eyal Bari | aa0180b | 2018-03-27 11:43:57 +0300 | [diff] [blame] | 762 | return clib_error_return (0, "both IPv4 and IPv6 addresses specified"); |
Chris Luke | 99cb335 | 2016-04-26 10:49:53 -0400 | [diff] [blame] | 763 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 764 | if (ip46_address_cmp (&src, &dst) == 0) |
Eyal Bari | aa0180b | 2018-03-27 11:43:57 +0300 | [diff] [blame] | 765 | return clib_error_return (0, "src and dst addresses are identical"); |
Chris Luke | 99cb335 | 2016-04-26 10:49:53 -0400 | [diff] [blame] | 766 | |
Hongjun Ni | beb4bf7 | 2016-11-25 00:03:46 +0800 | [diff] [blame] | 767 | if (decap_next_index == ~0) |
Eyal Bari | aa0180b | 2018-03-27 11:43:57 +0300 | [diff] [blame] | 768 | return clib_error_return (0, "next node not found"); |
Hongjun Ni | beb4bf7 | 2016-11-25 00:03:46 +0800 | [diff] [blame] | 769 | |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 770 | if (vni == 0) |
Eyal Bari | aa0180b | 2018-03-27 11:43:57 +0300 | [diff] [blame] | 771 | return clib_error_return (0, "vni not specified"); |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 772 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 773 | if (vni >> 24) |
Eyal Bari | aa0180b | 2018-03-27 11:43:57 +0300 | [diff] [blame] | 774 | return clib_error_return (0, "vni %d out of range", vni); |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 775 | |
Eyal Bari | aa0180b | 2018-03-27 11:43:57 +0300 | [diff] [blame] | 776 | vnet_vxlan_add_del_tunnel_args_t a = { |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 777 | .is_add = is_add, |
| 778 | .is_ip6 = ipv6_set, |
| 779 | .instance = instance, |
Eyal Bari | aa0180b | 2018-03-27 11:43:57 +0300 | [diff] [blame] | 780 | #define _(x) .x = x, |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 781 | foreach_copy_field |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 782 | #undef _ |
Eyal Bari | aa0180b | 2018-03-27 11:43:57 +0300 | [diff] [blame] | 783 | }; |
Jon Loeliger | 3d460bd | 2018-02-01 16:36:12 -0600 | [diff] [blame] | 784 | |
Eyal Bari | aa0180b | 2018-03-27 11:43:57 +0300 | [diff] [blame] | 785 | u32 tunnel_sw_if_index; |
| 786 | int rv = vnet_vxlan_add_del_tunnel (&a, &tunnel_sw_if_index); |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 787 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 788 | switch (rv) |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 789 | { |
| 790 | case 0: |
Pierre Pfister | 78ea9c2 | 2016-05-23 12:51:54 +0100 | [diff] [blame] | 791 | if (is_add) |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 792 | vlib_cli_output (vm, "%U\n", format_vnet_sw_if_index_name, |
| 793 | vnet_get_main (), tunnel_sw_if_index); |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 794 | break; |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 795 | |
| 796 | case VNET_API_ERROR_TUNNEL_EXIST: |
Eyal Bari | aa0180b | 2018-03-27 11:43:57 +0300 | [diff] [blame] | 797 | return clib_error_return (0, "tunnel already exists..."); |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 798 | |
| 799 | case VNET_API_ERROR_NO_SUCH_ENTRY: |
Eyal Bari | aa0180b | 2018-03-27 11:43:57 +0300 | [diff] [blame] | 800 | return clib_error_return (0, "tunnel does not exist..."); |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 801 | |
Jon Loeliger | 3d460bd | 2018-02-01 16:36:12 -0600 | [diff] [blame] | 802 | case VNET_API_ERROR_INSTANCE_IN_USE: |
Eyal Bari | aa0180b | 2018-03-27 11:43:57 +0300 | [diff] [blame] | 803 | return clib_error_return (0, "Instance is in use"); |
Jon Loeliger | 3d460bd | 2018-02-01 16:36:12 -0600 | [diff] [blame] | 804 | |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 805 | default: |
Eyal Bari | aa0180b | 2018-03-27 11:43:57 +0300 | [diff] [blame] | 806 | return clib_error_return |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 807 | (0, "vnet_vxlan_add_del_tunnel returned %d", rv); |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 808 | } |
| 809 | |
Eyal Bari | 0fa5678 | 2018-06-04 12:25:05 +0300 | [diff] [blame] | 810 | return 0; |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 811 | } |
| 812 | |
Billy McFall | c5d9cda | 2016-09-14 10:39:58 -0400 | [diff] [blame] | 813 | /*? |
| 814 | * Add or delete a VXLAN Tunnel. |
| 815 | * |
| 816 | * VXLAN provides the features needed to allow L2 bridge domains (BDs) |
| 817 | * to span multiple servers. This is done by building an L2 overlay on |
| 818 | * top of an L3 network underlay using VXLAN tunnels. |
| 819 | * |
| 820 | * This makes it possible for servers to be co-located in the same data |
| 821 | * center or be separated geographically as long as they are reachable |
| 822 | * through the underlay L3 network. |
| 823 | * |
| 824 | * You can refer to this kind of L2 overlay bridge domain as a VXLAN |
| 825 | * (Virtual eXtensible VLAN) segment. |
| 826 | * |
| 827 | * @cliexpar |
| 828 | * Example of how to create a VXLAN Tunnel: |
John Lo | c42912d | 2016-11-07 18:30:47 -0500 | [diff] [blame] | 829 | * @cliexcmd{create vxlan tunnel src 10.0.3.1 dst 10.0.3.3 vni 13 encap-vrf-id 7} |
Jon Loeliger | 3d460bd | 2018-02-01 16:36:12 -0600 | [diff] [blame] | 830 | * Example of how to create a VXLAN Tunnel with a known name, vxlan_tunnel42: |
| 831 | * @cliexcmd{create vxlan tunnel src 10.0.3.1 dst 10.0.3.3 instance 42} |
Eyal Bari | dd47eca | 2018-07-08 08:15:56 +0300 | [diff] [blame] | 832 | * Example of how to create a multicast VXLAN Tunnel with a known name, vxlan_tunnel23: |
| 833 | * @cliexcmd{create vxlan tunnel src 10.0.3.1 group 239.1.1.1 GigabitEtherner0/8/0 instance 23} |
Billy McFall | c5d9cda | 2016-09-14 10:39:58 -0400 | [diff] [blame] | 834 | * Example of how to delete a VXLAN Tunnel: |
| 835 | * @cliexcmd{create vxlan tunnel src 10.0.3.1 dst 10.0.3.3 vni 13 del} |
| 836 | ?*/ |
| 837 | /* *INDENT-OFF* */ |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 838 | VLIB_CLI_COMMAND (create_vxlan_tunnel_command, static) = { |
| 839 | .path = "create vxlan tunnel", |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 840 | .short_help = |
Eyal Bari | c5b1360 | 2016-11-24 19:42:43 +0200 | [diff] [blame] | 841 | "create vxlan tunnel src <local-vtep-addr>" |
| 842 | " {dst <remote-vtep-addr>|group <mcast-vtep-addr> <intf-name>} vni <nn>" |
Jon Loeliger | 3d460bd | 2018-02-01 16:36:12 -0600 | [diff] [blame] | 843 | " [instance <id>]" |
Hongjun Ni | beb4bf7 | 2016-11-25 00:03:46 +0800 | [diff] [blame] | 844 | " [encap-vrf-id <nn>] [decap-next [l2|node <name>]] [del]", |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 845 | .function = vxlan_add_del_tunnel_command_fn, |
| 846 | }; |
Billy McFall | c5d9cda | 2016-09-14 10:39:58 -0400 | [diff] [blame] | 847 | /* *INDENT-ON* */ |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 848 | |
| 849 | static clib_error_t * |
| 850 | show_vxlan_tunnel_command_fn (vlib_main_t * vm, |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 851 | unformat_input_t * input, |
| 852 | vlib_cli_command_t * cmd) |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 853 | { |
Eyal Bari | 0fa5678 | 2018-06-04 12:25:05 +0300 | [diff] [blame] | 854 | unformat_input_t _line_input, *line_input = &_line_input; |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 855 | vxlan_main_t *vxm = &vxlan_main; |
| 856 | vxlan_tunnel_t *t; |
Eyal Bari | 0fa5678 | 2018-06-04 12:25:05 +0300 | [diff] [blame] | 857 | int raw = 0; |
| 858 | clib_error_t *parse_error = NULL; |
| 859 | |
| 860 | /* Get a line of input. */ |
| 861 | if (!unformat_user (input, unformat_line_input, line_input)) |
| 862 | return 0; |
| 863 | |
| 864 | while (unformat_check_input (line_input) != UNFORMAT_END_OF_INPUT) |
| 865 | { |
| 866 | if (unformat (line_input, "raw")) |
| 867 | raw = 1; |
| 868 | else |
| 869 | parse_error = clib_error_return (0, "parse error: '%U'", |
| 870 | format_unformat_error, line_input); |
| 871 | } |
| 872 | |
| 873 | unformat_free (line_input); |
| 874 | |
| 875 | if (parse_error) |
| 876 | return parse_error; |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 877 | |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 878 | if (pool_elts (vxm->tunnels) == 0) |
| 879 | vlib_cli_output (vm, "No vxlan tunnels configured..."); |
| 880 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 881 | /* *INDENT-OFF* */ |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 882 | pool_foreach (t, vxm->tunnels, |
| 883 | ({ |
| 884 | vlib_cli_output (vm, "%U", format_vxlan_tunnel, t); |
| 885 | })); |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 886 | /* *INDENT-ON* */ |
| 887 | |
Eyal Bari | 0fa5678 | 2018-06-04 12:25:05 +0300 | [diff] [blame] | 888 | if (raw) |
Eyal Bari | dd47eca | 2018-07-08 08:15:56 +0300 | [diff] [blame] | 889 | { |
| 890 | vlib_cli_output (vm, "Raw IPv4 Hash Table:\n%U\n", |
| 891 | format_bihash_16_8, &vxm->vxlan4_tunnel_by_key, |
| 892 | 1 /* verbose */ ); |
| 893 | vlib_cli_output (vm, "Raw IPv6 Hash Table:\n%U\n", |
| 894 | format_bihash_24_8, &vxm->vxlan6_tunnel_by_key, |
| 895 | 1 /* verbose */ ); |
| 896 | } |
Eyal Bari | 0fa5678 | 2018-06-04 12:25:05 +0300 | [diff] [blame] | 897 | |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 898 | return 0; |
| 899 | } |
| 900 | |
Billy McFall | c5d9cda | 2016-09-14 10:39:58 -0400 | [diff] [blame] | 901 | /*? |
| 902 | * Display all the VXLAN Tunnel entries. |
| 903 | * |
| 904 | * @cliexpar |
| 905 | * Example of how to display the VXLAN Tunnel entries: |
| 906 | * @cliexstart{show vxlan tunnel} |
Hongjun Ni | beb4bf7 | 2016-11-25 00:03:46 +0800 | [diff] [blame] | 907 | * [0] src 10.0.3.1 dst 10.0.3.3 vni 13 encap_fib_index 0 sw_if_index 5 decap_next l2 |
Billy McFall | c5d9cda | 2016-09-14 10:39:58 -0400 | [diff] [blame] | 908 | * @cliexend |
| 909 | ?*/ |
| 910 | /* *INDENT-OFF* */ |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 911 | VLIB_CLI_COMMAND (show_vxlan_tunnel_command, static) = { |
| 912 | .path = "show vxlan tunnel", |
Eyal Bari | 0fa5678 | 2018-06-04 12:25:05 +0300 | [diff] [blame] | 913 | .short_help = "show vxlan tunnel [raw]", |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 914 | .function = show_vxlan_tunnel_command_fn, |
| 915 | }; |
Billy McFall | c5d9cda | 2016-09-14 10:39:58 -0400 | [diff] [blame] | 916 | /* *INDENT-ON* */ |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 917 | |
Chris Luke | 99cb335 | 2016-04-26 10:49:53 -0400 | [diff] [blame] | 918 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 919 | void |
| 920 | vnet_int_vxlan_bypass_mode (u32 sw_if_index, u8 is_ip6, u8 is_enable) |
John Lo | 2b81eb8 | 2017-01-30 13:12:10 -0500 | [diff] [blame] | 921 | { |
| 922 | if (is_ip6) |
| 923 | vnet_feature_enable_disable ("ip6-unicast", "ip6-vxlan-bypass", |
| 924 | sw_if_index, is_enable, 0, 0); |
| 925 | else |
| 926 | vnet_feature_enable_disable ("ip4-unicast", "ip4-vxlan-bypass", |
| 927 | sw_if_index, is_enable, 0, 0); |
| 928 | } |
| 929 | |
| 930 | |
| 931 | static clib_error_t * |
| 932 | set_ip_vxlan_bypass (u32 is_ip6, |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 933 | unformat_input_t * input, vlib_cli_command_t * cmd) |
John Lo | 2b81eb8 | 2017-01-30 13:12:10 -0500 | [diff] [blame] | 934 | { |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 935 | unformat_input_t _line_input, *line_input = &_line_input; |
| 936 | vnet_main_t *vnm = vnet_get_main (); |
| 937 | clib_error_t *error = 0; |
John Lo | 2b81eb8 | 2017-01-30 13:12:10 -0500 | [diff] [blame] | 938 | u32 sw_if_index, is_enable; |
| 939 | |
| 940 | sw_if_index = ~0; |
| 941 | is_enable = 1; |
| 942 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 943 | if (!unformat_user (input, unformat_line_input, line_input)) |
John Lo | 2b81eb8 | 2017-01-30 13:12:10 -0500 | [diff] [blame] | 944 | return 0; |
| 945 | |
| 946 | while (unformat_check_input (line_input) != UNFORMAT_END_OF_INPUT) |
| 947 | { |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 948 | if (unformat_user |
| 949 | (line_input, unformat_vnet_sw_interface, vnm, &sw_if_index)) |
| 950 | ; |
John Lo | 2b81eb8 | 2017-01-30 13:12:10 -0500 | [diff] [blame] | 951 | else if (unformat (line_input, "del")) |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 952 | is_enable = 0; |
John Lo | 2b81eb8 | 2017-01-30 13:12:10 -0500 | [diff] [blame] | 953 | else |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 954 | { |
John Lo | 2b81eb8 | 2017-01-30 13:12:10 -0500 | [diff] [blame] | 955 | error = unformat_parse_error (line_input); |
| 956 | goto done; |
| 957 | } |
| 958 | } |
| 959 | |
| 960 | if (~0 == sw_if_index) |
| 961 | { |
| 962 | error = clib_error_return (0, "unknown interface `%U'", |
| 963 | format_unformat_error, line_input); |
| 964 | goto done; |
| 965 | } |
| 966 | |
| 967 | vnet_int_vxlan_bypass_mode (sw_if_index, is_ip6, is_enable); |
| 968 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 969 | done: |
Billy McFall | a9a20e7 | 2017-02-15 11:39:12 -0500 | [diff] [blame] | 970 | unformat_free (line_input); |
| 971 | |
John Lo | 2b81eb8 | 2017-01-30 13:12:10 -0500 | [diff] [blame] | 972 | return error; |
| 973 | } |
| 974 | |
| 975 | static clib_error_t * |
| 976 | set_ip4_vxlan_bypass (vlib_main_t * vm, |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 977 | unformat_input_t * input, vlib_cli_command_t * cmd) |
John Lo | 2b81eb8 | 2017-01-30 13:12:10 -0500 | [diff] [blame] | 978 | { |
| 979 | return set_ip_vxlan_bypass (0, input, cmd); |
| 980 | } |
| 981 | |
| 982 | /*? |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 983 | * This command adds the 'ip4-vxlan-bypass' graph node for a given interface. |
John Lo | 2b81eb8 | 2017-01-30 13:12:10 -0500 | [diff] [blame] | 984 | * By adding the IPv4 vxlan-bypass graph node to an interface, the node checks |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 985 | * for and validate input vxlan packet and bypass ip4-lookup, ip4-local, |
| 986 | * ip4-udp-lookup nodes to speedup vxlan packet forwarding. This node will |
John Lo | 2b81eb8 | 2017-01-30 13:12:10 -0500 | [diff] [blame] | 987 | * cause extra overhead to for non-vxlan packets which is kept at a minimum. |
| 988 | * |
| 989 | * @cliexpar |
| 990 | * @parblock |
| 991 | * Example of graph node before ip4-vxlan-bypass is enabled: |
| 992 | * @cliexstart{show vlib graph ip4-vxlan-bypass} |
| 993 | * Name Next Previous |
| 994 | * ip4-vxlan-bypass error-drop [0] |
| 995 | * vxlan4-input [1] |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 996 | * ip4-lookup [2] |
John Lo | 2b81eb8 | 2017-01-30 13:12:10 -0500 | [diff] [blame] | 997 | * @cliexend |
| 998 | * |
| 999 | * Example of how to enable ip4-vxlan-bypass on an interface: |
| 1000 | * @cliexcmd{set interface ip vxlan-bypass GigabitEthernet2/0/0} |
| 1001 | * |
| 1002 | * Example of graph node after ip4-vxlan-bypass is enabled: |
| 1003 | * @cliexstart{show vlib graph ip4-vxlan-bypass} |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 1004 | * Name Next Previous |
| 1005 | * ip4-vxlan-bypass error-drop [0] ip4-input |
| 1006 | * vxlan4-input [1] ip4-input-no-checksum |
| 1007 | * ip4-lookup [2] |
John Lo | 2b81eb8 | 2017-01-30 13:12:10 -0500 | [diff] [blame] | 1008 | * @cliexend |
| 1009 | * |
| 1010 | * Example of how to display the feature enabed on an interface: |
| 1011 | * @cliexstart{show ip interface features GigabitEthernet2/0/0} |
| 1012 | * IP feature paths configured on GigabitEthernet2/0/0... |
| 1013 | * ... |
| 1014 | * ipv4 unicast: |
| 1015 | * ip4-vxlan-bypass |
| 1016 | * ip4-lookup |
| 1017 | * ... |
| 1018 | * @cliexend |
| 1019 | * |
| 1020 | * Example of how to disable ip4-vxlan-bypass on an interface: |
| 1021 | * @cliexcmd{set interface ip vxlan-bypass GigabitEthernet2/0/0 del} |
| 1022 | * @endparblock |
| 1023 | ?*/ |
| 1024 | /* *INDENT-OFF* */ |
| 1025 | VLIB_CLI_COMMAND (set_interface_ip_vxlan_bypass_command, static) = { |
| 1026 | .path = "set interface ip vxlan-bypass", |
| 1027 | .function = set_ip4_vxlan_bypass, |
| 1028 | .short_help = "set interface ip vxlan-bypass <interface> [del]", |
| 1029 | }; |
| 1030 | /* *INDENT-ON* */ |
| 1031 | |
| 1032 | static clib_error_t * |
| 1033 | set_ip6_vxlan_bypass (vlib_main_t * vm, |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 1034 | unformat_input_t * input, vlib_cli_command_t * cmd) |
John Lo | 2b81eb8 | 2017-01-30 13:12:10 -0500 | [diff] [blame] | 1035 | { |
| 1036 | return set_ip_vxlan_bypass (1, input, cmd); |
| 1037 | } |
| 1038 | |
| 1039 | /*? |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 1040 | * This command adds the 'ip6-vxlan-bypass' graph node for a given interface. |
John Lo | 2b81eb8 | 2017-01-30 13:12:10 -0500 | [diff] [blame] | 1041 | * By adding the IPv6 vxlan-bypass graph node to an interface, the node checks |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 1042 | * for and validate input vxlan packet and bypass ip6-lookup, ip6-local, |
| 1043 | * ip6-udp-lookup nodes to speedup vxlan packet forwarding. This node will |
John Lo | 2b81eb8 | 2017-01-30 13:12:10 -0500 | [diff] [blame] | 1044 | * cause extra overhead to for non-vxlan packets which is kept at a minimum. |
| 1045 | * |
| 1046 | * @cliexpar |
| 1047 | * @parblock |
| 1048 | * Example of graph node before ip6-vxlan-bypass is enabled: |
| 1049 | * @cliexstart{show vlib graph ip6-vxlan-bypass} |
| 1050 | * Name Next Previous |
| 1051 | * ip6-vxlan-bypass error-drop [0] |
| 1052 | * vxlan6-input [1] |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 1053 | * ip6-lookup [2] |
John Lo | 2b81eb8 | 2017-01-30 13:12:10 -0500 | [diff] [blame] | 1054 | * @cliexend |
| 1055 | * |
| 1056 | * Example of how to enable ip6-vxlan-bypass on an interface: |
| 1057 | * @cliexcmd{set interface ip6 vxlan-bypass GigabitEthernet2/0/0} |
| 1058 | * |
| 1059 | * Example of graph node after ip6-vxlan-bypass is enabled: |
| 1060 | * @cliexstart{show vlib graph ip6-vxlan-bypass} |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 1061 | * Name Next Previous |
| 1062 | * ip6-vxlan-bypass error-drop [0] ip6-input |
| 1063 | * vxlan6-input [1] ip4-input-no-checksum |
| 1064 | * ip6-lookup [2] |
John Lo | 2b81eb8 | 2017-01-30 13:12:10 -0500 | [diff] [blame] | 1065 | * @cliexend |
| 1066 | * |
| 1067 | * Example of how to display the feature enabed on an interface: |
| 1068 | * @cliexstart{show ip interface features GigabitEthernet2/0/0} |
| 1069 | * IP feature paths configured on GigabitEthernet2/0/0... |
| 1070 | * ... |
| 1071 | * ipv6 unicast: |
| 1072 | * ip6-vxlan-bypass |
| 1073 | * ip6-lookup |
| 1074 | * ... |
| 1075 | * @cliexend |
| 1076 | * |
| 1077 | * Example of how to disable ip6-vxlan-bypass on an interface: |
| 1078 | * @cliexcmd{set interface ip6 vxlan-bypass GigabitEthernet2/0/0 del} |
| 1079 | * @endparblock |
| 1080 | ?*/ |
| 1081 | /* *INDENT-OFF* */ |
| 1082 | VLIB_CLI_COMMAND (set_interface_ip6_vxlan_bypass_command, static) = { |
| 1083 | .path = "set interface ip6 vxlan-bypass", |
| 1084 | .function = set_ip6_vxlan_bypass, |
| 1085 | .short_help = "set interface ip vxlan-bypass <interface> [del]", |
| 1086 | }; |
| 1087 | /* *INDENT-ON* */ |
| 1088 | |
eyal bari | af86a48 | 2018-04-17 11:20:27 +0300 | [diff] [blame] | 1089 | int |
| 1090 | vnet_vxlan_add_del_rx_flow (u32 hw_if_index, u32 t_index, int is_add) |
| 1091 | { |
| 1092 | vxlan_main_t *vxm = &vxlan_main; |
| 1093 | vxlan_tunnel_t *t = pool_elt_at_index (vxm->tunnels, t_index); |
| 1094 | vnet_main_t *vnm = vnet_get_main (); |
| 1095 | if (is_add) |
| 1096 | { |
| 1097 | if (t->flow_index == ~0) |
| 1098 | { |
| 1099 | vxlan_main_t *vxm = &vxlan_main; |
| 1100 | vnet_flow_t flow = { |
| 1101 | .actions = |
| 1102 | VNET_FLOW_ACTION_REDIRECT_TO_NODE | VNET_FLOW_ACTION_MARK, |
| 1103 | .mark_flow_id = t->dev_instance + vxm->flow_id_start, |
| 1104 | .redirect_node_index = vxlan4_flow_input_node.index, |
| 1105 | .type = VNET_FLOW_TYPE_IP4_VXLAN, |
| 1106 | .ip4_vxlan = { |
| 1107 | .src_addr = t->dst.ip4, |
| 1108 | .dst_addr = t->src.ip4, |
| 1109 | .dst_port = UDP_DST_PORT_vxlan, |
| 1110 | .vni = t->vni, |
| 1111 | } |
| 1112 | , |
| 1113 | }; |
| 1114 | vnet_flow_add (vnm, &flow, &t->flow_index); |
| 1115 | } |
| 1116 | return vnet_flow_enable (vnm, t->flow_index, hw_if_index); |
| 1117 | } |
| 1118 | /* flow index is removed when the tunnel is deleted */ |
| 1119 | return vnet_flow_disable (vnm, t->flow_index, hw_if_index); |
| 1120 | } |
| 1121 | |
| 1122 | u32 |
| 1123 | vnet_vxlan_get_tunnel_index (u32 sw_if_index) |
| 1124 | { |
| 1125 | vxlan_main_t *vxm = &vxlan_main; |
| 1126 | |
Eyal Bari | cd30774 | 2018-07-22 12:45:15 +0300 | [diff] [blame^] | 1127 | if (sw_if_index >= vec_len (vxm->tunnel_index_by_sw_if_index)) |
eyal bari | af86a48 | 2018-04-17 11:20:27 +0300 | [diff] [blame] | 1128 | return ~0; |
| 1129 | return vxm->tunnel_index_by_sw_if_index[sw_if_index]; |
| 1130 | } |
| 1131 | |
| 1132 | static clib_error_t * |
| 1133 | vxlan_offload_command_fn (vlib_main_t * vm, |
| 1134 | unformat_input_t * input, vlib_cli_command_t * cmd) |
| 1135 | { |
| 1136 | unformat_input_t _line_input, *line_input = &_line_input; |
| 1137 | |
| 1138 | /* Get a line of input. */ |
| 1139 | if (!unformat_user (input, unformat_line_input, line_input)) |
| 1140 | return 0; |
| 1141 | |
| 1142 | vnet_main_t *vnm = vnet_get_main (); |
| 1143 | u32 rx_sw_if_index = ~0; |
| 1144 | u32 hw_if_index = ~0; |
| 1145 | int is_add = 1; |
| 1146 | |
| 1147 | while (unformat_check_input (line_input) != UNFORMAT_END_OF_INPUT) |
| 1148 | { |
| 1149 | if (unformat (line_input, "hw %U", unformat_vnet_hw_interface, vnm, |
| 1150 | &hw_if_index)) |
| 1151 | continue; |
| 1152 | if (unformat (line_input, "rx %U", unformat_vnet_sw_interface, vnm, |
| 1153 | &rx_sw_if_index)) |
| 1154 | continue; |
| 1155 | if (unformat (line_input, "del")) |
| 1156 | { |
| 1157 | is_add = 0; |
| 1158 | continue; |
| 1159 | } |
| 1160 | return clib_error_return (0, "unknown input `%U'", |
| 1161 | format_unformat_error, line_input); |
| 1162 | } |
| 1163 | |
| 1164 | if (rx_sw_if_index == ~0) |
| 1165 | return clib_error_return (0, "missing rx interface"); |
| 1166 | if (hw_if_index == ~0) |
| 1167 | return clib_error_return (0, "missing hw interface"); |
| 1168 | |
| 1169 | u32 t_index = vnet_vxlan_get_tunnel_index (rx_sw_if_index);; |
| 1170 | if (t_index == ~0) |
| 1171 | return clib_error_return (0, "%U is not a vxlan tunnel", |
| 1172 | format_vnet_sw_if_index_name, vnm, |
| 1173 | rx_sw_if_index); |
| 1174 | |
| 1175 | vxlan_main_t *vxm = &vxlan_main; |
| 1176 | vxlan_tunnel_t *t = pool_elt_at_index (vxm->tunnels, t_index); |
| 1177 | |
| 1178 | if (!ip46_address_is_ip4 (&t->dst)) |
| 1179 | return clib_error_return (0, "currently only IPV4 tunnels are supported"); |
| 1180 | |
| 1181 | vnet_hw_interface_t *hw_if = vnet_get_hw_interface (vnm, hw_if_index); |
| 1182 | ip4_main_t *im = &ip4_main; |
| 1183 | u32 rx_fib_index = |
| 1184 | vec_elt (im->fib_index_by_sw_if_index, hw_if->sw_if_index); |
| 1185 | |
| 1186 | if (t->encap_fib_index != rx_fib_index) |
| 1187 | return clib_error_return (0, "interface/tunnel fib mismatch"); |
| 1188 | |
| 1189 | if (vnet_vxlan_add_del_rx_flow (hw_if_index, t_index, is_add)) |
| 1190 | return clib_error_return (0, "error %s flow", |
| 1191 | is_add ? "enabling" : "disabling"); |
| 1192 | |
| 1193 | return 0; |
| 1194 | } |
| 1195 | |
| 1196 | /* *INDENT-OFF* */ |
| 1197 | VLIB_CLI_COMMAND (vxlan_offload_command, static) = { |
| 1198 | .path = "set flow-offload vxlan", |
| 1199 | .short_help = |
| 1200 | "set flow-offload vxlan hw <inerface-name> rx <tunnel-name> [del]", |
| 1201 | .function = vxlan_offload_command_fn, |
| 1202 | }; |
| 1203 | /* *INDENT-ON* */ |
| 1204 | |
Eyal Bari | 0fa5678 | 2018-06-04 12:25:05 +0300 | [diff] [blame] | 1205 | #define VXLAN_HASH_NUM_BUCKETS (2 * 1024) |
| 1206 | #define VXLAN_HASH_MEMORY_SIZE (1 << 20) |
| 1207 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 1208 | clib_error_t * |
| 1209 | vxlan_init (vlib_main_t * vm) |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 1210 | { |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 1211 | vxlan_main_t *vxm = &vxlan_main; |
| 1212 | |
| 1213 | vxm->vnet_main = vnet_get_main (); |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 1214 | vxm->vlib_main = vm; |
| 1215 | |
eyal bari | af86a48 | 2018-04-17 11:20:27 +0300 | [diff] [blame] | 1216 | vnet_flow_get_range (vxm->vnet_main, "vxlan", 1024 * 1024, |
| 1217 | &vxm->flow_id_start); |
| 1218 | |
Chris Luke | 99cb335 | 2016-04-26 10:49:53 -0400 | [diff] [blame] | 1219 | /* initialize the ip6 hash */ |
Eyal Bari | dd47eca | 2018-07-08 08:15:56 +0300 | [diff] [blame] | 1220 | clib_bihash_init_16_8 (&vxm->vxlan4_tunnel_by_key, "vxlan4", |
| 1221 | VXLAN_HASH_NUM_BUCKETS, VXLAN_HASH_MEMORY_SIZE); |
| 1222 | clib_bihash_init_24_8 (&vxm->vxlan6_tunnel_by_key, "vxlan6", |
Eyal Bari | 0fa5678 | 2018-06-04 12:25:05 +0300 | [diff] [blame] | 1223 | VXLAN_HASH_NUM_BUCKETS, VXLAN_HASH_MEMORY_SIZE); |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 1224 | vxm->vtep6 = hash_create_mem (0, sizeof (ip6_address_t), sizeof (uword)); |
| 1225 | vxm->mcast_shared = hash_create_mem (0, |
| 1226 | sizeof (ip46_address_t), |
| 1227 | sizeof (mcast_shared_t)); |
Chris Luke | 99cb335 | 2016-04-26 10:49:53 -0400 | [diff] [blame] | 1228 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 1229 | udp_register_dst_port (vm, UDP_DST_PORT_vxlan, |
| 1230 | vxlan4_input_node.index, /* is_ip4 */ 1); |
Chris Luke | 99cb335 | 2016-04-26 10:49:53 -0400 | [diff] [blame] | 1231 | udp_register_dst_port (vm, UDP_DST_PORT_vxlan6, |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 1232 | vxlan6_input_node.index, /* is_ip4 */ 0); |
John Lo | c42912d | 2016-11-07 18:30:47 -0500 | [diff] [blame] | 1233 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 1234 | fib_node_register_type (FIB_NODE_TYPE_VXLAN_TUNNEL, &vxlan_vft); |
John Lo | c42912d | 2016-11-07 18:30:47 -0500 | [diff] [blame] | 1235 | |
Ed Warnicke | cb9cada | 2015-12-08 15:45:58 -0700 | [diff] [blame] | 1236 | return 0; |
| 1237 | } |
| 1238 | |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 1239 | VLIB_INIT_FUNCTION (vxlan_init); |
Jon Loeliger | 3d460bd | 2018-02-01 16:36:12 -0600 | [diff] [blame] | 1240 | |
| 1241 | /* |
Eyal Bari | 8f57648 | 2018-05-07 10:13:44 +0300 | [diff] [blame] | 1242 | * fd.io coding-style-patch-verification: ON |
| 1243 | * |
Jon Loeliger | 3d460bd | 2018-02-01 16:36:12 -0600 | [diff] [blame] | 1244 | * Local Variables: |
| 1245 | * eval: (c-set-style "gnu") |
| 1246 | * End: |
| 1247 | */ |