2 * nat_ipfix_logging.h - NAT Events IPFIX logging
4 * Copyright (c) 2016 Cisco and/or its affiliates.
5 * Licensed under the Apache License, Version 2.0 (the "License");
6 * you may not use this file except in compliance with the License.
7 * You may obtain a copy of the License at:
9 * http://www.apache.org/licenses/LICENSE-2.0
11 * Unless required by applicable law or agreed to in writing, software
12 * distributed under the License is distributed on an "AS IS" BASIS,
13 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14 * See the License for the specific language governing permissions and
15 * limitations under the License.
17 #ifndef __included_nat_ipfix_logging_h__
18 #define __included_nat_ipfix_logging_h__
23 NAT_ADDRESSES_EXHAUTED = 3,
24 NAT44_SESSION_CREATE = 4,
25 NAT44_SESSION_DELETE = 5,
26 NAT64_SESSION_CREATE = 6,
27 NAT64_SESSION_DELETE = 7,
28 NAT64_BIB_CREATE = 10,
29 NAT64_BIB_DELETE = 11,
30 NAT_PORTS_EXHAUSTED = 12,
35 MAX_SESSION_ENTRIES = 1,
37 MAX_ENTRIES_PER_USER = 3,
38 MAX_FRAGMENTS_PENDING_REASSEMBLY = 5,
39 MAX_FRAGMENTS_PENDING_REASSEMBLY_IP6,
40 } quota_exceed_event_t;
43 /** NAT plugin IPFIX logging enabled */
46 /** ipfix buffers under construction */
47 vlib_buffer_t *nat44_session_buffer;
48 vlib_buffer_t *addr_exhausted_buffer;
49 vlib_buffer_t *max_entries_per_user_buffer;
50 vlib_buffer_t *max_sessions_buffer;
51 vlib_buffer_t *max_bibs_buffer;
52 vlib_buffer_t *max_frags_ip4_buffer;
53 vlib_buffer_t *max_frags_ip6_buffer;
54 vlib_buffer_t *nat64_bib_buffer;
55 vlib_buffer_t *nat64_ses_buffer;
57 /** frames containing ipfix buffers */
58 vlib_frame_t *nat44_session_frame;
59 vlib_frame_t *addr_exhausted_frame;
60 vlib_frame_t *max_entries_per_user_frame;
61 vlib_frame_t *max_sessions_frame;
62 vlib_frame_t *max_bibs_frame;
63 vlib_frame_t *max_frags_ip4_frame;
64 vlib_frame_t *max_frags_ip6_frame;
65 vlib_frame_t *nat64_bib_frame;
66 vlib_frame_t *nat64_ses_frame;
68 /** next record offset */
69 u32 nat44_session_next_record_offset;
70 u32 addr_exhausted_next_record_offset;
71 u32 max_entries_per_user_next_record_offset;
72 u32 max_sessions_next_record_offset;
73 u32 max_bibs_next_record_offset;
74 u32 max_frags_ip4_next_record_offset;
75 u32 max_frags_ip6_next_record_offset;
76 u32 nat64_bib_next_record_offset;
77 u32 nat64_ses_next_record_offset;
79 /** Time reference pair */
80 u64 milisecond_time_0;
84 u16 nat44_session_template_id;
85 u16 addr_exhausted_template_id;
86 u16 max_entries_per_user_template_id;
87 u16 max_sessions_template_id;
88 u16 max_bibs_template_id;
89 u16 max_frags_ip4_template_id;
90 u16 max_frags_ip6_template_id;
91 u16 nat64_bib_template_id;
92 u16 nat64_ses_template_id;
96 } snat_ipfix_logging_main_t;
98 extern snat_ipfix_logging_main_t snat_ipfix_logging_main;
100 void snat_ipfix_logging_init (vlib_main_t * vm);
101 int snat_ipfix_logging_enable_disable (int enable, u32 domain_id, u16 src_port);
102 void snat_ipfix_logging_nat44_ses_create (u32 src_ip, u32 nat_src_ip,
103 snat_protocol_t snat_proto,
104 u16 src_port, u16 nat_src_port,
106 void snat_ipfix_logging_nat44_ses_delete (u32 src_ip, u32 nat_src_ip,
107 snat_protocol_t snat_proto,
108 u16 src_port, u16 nat_src_port,
110 void snat_ipfix_logging_addresses_exhausted(u32 pool_id);
111 void snat_ipfix_logging_max_entries_per_user(u32 limit, u32 src_ip);
112 void nat_ipfix_logging_max_sessions(u32 limit);
113 void nat_ipfix_logging_max_bibs(u32 limit);
114 void nat_ipfix_logging_max_fragments_ip4(u32 limit, ip4_address_t * src);
115 void nat_ipfix_logging_max_fragments_ip6(u32 limit, ip6_address_t * src);
116 void nat_ipfix_logging_nat64_session(ip6_address_t * src_ip,
117 ip4_address_t * nat_src_ip, u8 proto,
118 u16 src_port, u16 nat_src_port,
119 ip6_address_t * dst_ip,
120 ip4_address_t * nat_dst_ip,
121 u16 dst_port, u16 nat_dst_port,
122 u32 vrf_id, u8 is_create);
123 void nat_ipfix_logging_nat64_bib(ip6_address_t * src_ip,
124 ip4_address_t * nat_src_ip, u8 proto,
125 u16 src_port, u16 nat_src_port,
126 u32 vrf_id, u8 is_create);
128 #endif /* __included_nat_ipfix_logging_h__ */