2 * Copyright (c) 2015 Cisco and/or its affiliates.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at:
7 * http://www.apache.org/licenses/LICENSE-2.0
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
16 * ip/ip_lookup.c: ip4/6 adjacency and lookup table managment
18 * Copyright (c) 2008 Eliot Dresselhaus
20 * Permission is hereby granted, free of charge, to any person obtaining
21 * a copy of this software and associated documentation files (the
22 * "Software"), to deal in the Software without restriction, including
23 * without limitation the rights to use, copy, modify, merge, publish,
24 * distribute, sublicense, and/or sell copies of the Software, and to
25 * permit persons to whom the Software is furnished to do so, subject to
26 * the following conditions:
28 * The above copyright notice and this permission notice shall be
29 * included in all copies or substantial portions of the Software.
31 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
32 * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
33 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
34 * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
35 * LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
36 * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
37 * WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
40 #include <vnet/ip/ip.h>
41 #include <vnet/adj/adj.h>
42 #include <vnet/fib/fib_table.h>
43 #include <vnet/fib/ip4_fib.h>
44 #include <vnet/fib/ip6_fib.h>
45 #include <vnet/mpls/mpls.h>
46 #include <vnet/mfib/mfib_table.h>
47 #include <vnet/dpo/drop_dpo.h>
48 #include <vnet/dpo/classify_dpo.h>
49 #include <vnet/dpo/punt_dpo.h>
50 #include <vnet/dpo/receive_dpo.h>
51 #include <vnet/dpo/ip_null_dpo.h>
52 #include <vnet/dpo/l3_proxy_dpo.h>
53 #include <vnet/ip/ip6_neighbor.h>
57 * @brief IPv4 and IPv6 adjacency and lookup table managment.
62 ip_interface_address_add_del (ip_lookup_main_t * lm,
66 u32 is_del, u32 * result_if_address_index)
68 vnet_main_t *vnm = vnet_get_main ();
69 ip_interface_address_t *a, *prev, *next;
70 uword *p = mhash_get (&lm->address_to_if_address_index, addr_fib);
72 vec_validate_init_empty (lm->if_address_pool_index_by_sw_if_index,
74 a = p ? pool_elt_at_index (lm->if_address_pool, p[0]) : 0;
76 /* Verify given length. */
77 if ((a && (address_length != a->address_length)) ||
78 (address_length == 0) ||
79 (lm->is_ip6 && address_length > 128) ||
80 (!lm->is_ip6 && address_length > 32))
82 vnm->api_errno = VNET_API_ERROR_ADDRESS_LENGTH_MISMATCH;
83 return clib_error_create
84 ("%U wrong length (expected %d) for interface %U",
85 lm->format_address_and_length, addr_fib,
86 address_length, a ? a->address_length : -1,
87 format_vnet_sw_if_index_name, vnm, sw_if_index);
94 vnet_sw_interface_t *si = vnet_get_sw_interface (vnm, sw_if_index);
95 vnm->api_errno = VNET_API_ERROR_ADDRESS_NOT_FOUND_FOR_INTERFACE;
96 return clib_error_create ("%U not found for interface %U",
97 lm->format_address_and_length,
98 addr_fib, address_length,
99 format_vnet_sw_interface_name, vnm, si);
102 if (a->prev_this_sw_interface != ~0)
105 pool_elt_at_index (lm->if_address_pool,
106 a->prev_this_sw_interface);
107 prev->next_this_sw_interface = a->next_this_sw_interface;
109 if (a->next_this_sw_interface != ~0)
112 pool_elt_at_index (lm->if_address_pool,
113 a->next_this_sw_interface);
114 next->prev_this_sw_interface = a->prev_this_sw_interface;
116 if (a->prev_this_sw_interface == ~0)
117 lm->if_address_pool_index_by_sw_if_index[sw_if_index] =
118 a->next_this_sw_interface;
121 if ((a->next_this_sw_interface == ~0)
122 && (a->prev_this_sw_interface == ~0))
123 lm->if_address_pool_index_by_sw_if_index[sw_if_index] = ~0;
125 mhash_unset (&lm->address_to_if_address_index, addr_fib,
127 pool_put (lm->if_address_pool, a);
129 if (result_if_address_index)
130 *result_if_address_index = ~0;
135 u32 pi; /* previous index */
137 u32 hi; /* head index */
139 pool_get (lm->if_address_pool, a);
140 memset (a, ~0, sizeof (a[0]));
141 ai = a - lm->if_address_pool;
143 hi = pi = lm->if_address_pool_index_by_sw_if_index[sw_if_index];
145 while (pi != (u32) ~ 0)
147 prev = pool_elt_at_index (lm->if_address_pool, pi);
148 pi = prev->next_this_sw_interface;
150 pi = prev ? prev - lm->if_address_pool : (u32) ~ 0;
152 a->address_key = mhash_set (&lm->address_to_if_address_index,
153 addr_fib, ai, /* old_value */ 0);
154 a->address_length = address_length;
155 a->sw_if_index = sw_if_index;
157 a->prev_this_sw_interface = pi;
158 a->next_this_sw_interface = ~0;
160 prev->next_this_sw_interface = ai;
162 lm->if_address_pool_index_by_sw_if_index[sw_if_index] =
163 (hi != ~0) ? hi : ai;
164 if (result_if_address_index)
165 *result_if_address_index = ai;
169 if (sw_if_index != a->sw_if_index)
171 if (result_if_address_index)
172 *result_if_address_index = ~0;
173 vnm->api_errno = VNET_API_ERROR_DUPLICATE_IF_ADDRESS;
174 return clib_error_create
175 ("Prefix %U already found on interface %U",
176 lm->format_address_and_length, addr_fib, address_length,
177 format_vnet_sw_if_index_name, vnm, a->sw_if_index);
180 if (result_if_address_index)
181 *result_if_address_index = a - lm->if_address_pool;
184 return /* no error */ 0;
187 static clib_error_t *
188 ip_sw_interface_add_del (vnet_main_t * vnm, u32 sw_if_index, u32 is_add)
190 vec_validate_init_empty (ip4_main.
191 lookup_main.if_address_pool_index_by_sw_if_index,
193 vec_validate_init_empty (ip6_main.
194 lookup_main.if_address_pool_index_by_sw_if_index,
200 VNET_SW_INTERFACE_ADD_DEL_FUNCTION (ip_sw_interface_add_del);
203 ip_lookup_init (ip_lookup_main_t * lm, u32 is_ip6)
205 if (!lm->fib_result_n_bytes)
206 lm->fib_result_n_bytes = sizeof (uword);
211 lm->format_address_and_length = format_ip6_address_and_length;
212 mhash_init (&lm->address_to_if_address_index, sizeof (uword),
213 sizeof (ip6_address_fib_t));
217 lm->format_address_and_length = format_ip4_address_and_length;
218 mhash_init (&lm->address_to_if_address_index, sizeof (uword),
219 sizeof (ip4_address_fib_t));
225 /* Setup all IP protocols to be punted and builtin-unknown. */
226 for (i = 0; i < 256; i++)
228 lm->local_next_by_ip_protocol[i] = IP_LOCAL_NEXT_PUNT;
229 lm->builtin_protocol_by_ip_protocol[i] = IP_BUILTIN_PROTOCOL_UNKNOWN;
232 lm->local_next_by_ip_protocol[IP_PROTOCOL_UDP] = IP_LOCAL_NEXT_UDP_LOOKUP;
233 lm->local_next_by_ip_protocol[is_ip6 ? IP_PROTOCOL_ICMP6 :
234 IP_PROTOCOL_ICMP] = IP_LOCAL_NEXT_ICMP;
235 lm->builtin_protocol_by_ip_protocol[IP_PROTOCOL_UDP] =
236 IP_BUILTIN_PROTOCOL_UDP;
237 lm->builtin_protocol_by_ip_protocol[is_ip6 ? IP_PROTOCOL_ICMP6 :
239 IP_BUILTIN_PROTOCOL_ICMP;
244 format_ip_flow_hash_config (u8 * s, va_list * args)
246 flow_hash_config_t flow_hash_config = va_arg (*args, u32);
248 #define _(n,v) if (flow_hash_config & v) s = format (s, "%s ", #n);
249 foreach_flow_hash_bit;
256 format_ip_adjacency_packet_data (u8 * s, va_list * args)
258 u32 adj_index = va_arg (*args, u32);
259 u8 *packet_data = va_arg (*args, u8 *);
260 u32 n_packet_data_bytes = va_arg (*args, u32);
261 ip_adjacency_t *adj = adj_get (adj_index);
263 switch (adj->lookup_next_index)
265 case IP_LOOKUP_NEXT_REWRITE:
266 case IP_LOOKUP_NEXT_MCAST:
268 format (s, "%U", format_hex_bytes, packet_data, n_packet_data_bytes);
279 unformat_dpo (unformat_input_t * input, va_list * args)
281 dpo_id_t *dpo = va_arg (*args, dpo_id_t *);
282 fib_protocol_t fp = va_arg (*args, int);
285 proto = fib_proto_to_dpo (fp);
287 if (unformat (input, "drop"))
288 dpo_copy (dpo, drop_dpo_get (proto));
289 else if (unformat (input, "punt"))
290 dpo_copy (dpo, punt_dpo_get (proto));
291 else if (unformat (input, "local"))
292 receive_dpo_add_or_lock (proto, ~0, NULL, dpo);
293 else if (unformat (input, "null-send-unreach"))
294 ip_null_dpo_add_and_lock (proto, IP_NULL_ACTION_SEND_ICMP_UNREACH, dpo);
295 else if (unformat (input, "null-send-prohibit"))
296 ip_null_dpo_add_and_lock (proto, IP_NULL_ACTION_SEND_ICMP_PROHIBIT, dpo);
297 else if (unformat (input, "null"))
298 ip_null_dpo_add_and_lock (proto, IP_NULL_ACTION_NONE, dpo);
299 else if (unformat (input, "classify"))
301 u32 classify_table_index;
303 if (!unformat (input, "%d", &classify_table_index))
305 clib_warning ("classify adj must specify table index");
309 dpo_set (dpo, DPO_CLASSIFY, proto,
310 classify_dpo_create (proto, classify_table_index));
318 const ip46_address_t zero_addr = {
323 static clib_error_t *
324 vnet_ip_route_cmd (vlib_main_t * vm,
325 unformat_input_t * main_input, vlib_cli_command_t * cmd)
327 unformat_input_t _line_input, *line_input = &_line_input;
328 u32 table_id, is_del, fib_index, payload_proto;
329 dpo_id_t dpo = DPO_INVALID, *dpos = NULL;
330 fib_route_path_t *rpaths = NULL, rpath;
331 fib_prefix_t *prefixs = NULL, pfx;
332 clib_error_t *error = NULL;
339 memset (&pfx, 0, sizeof (pfx));
341 /* Get a line of input. */
342 if (!unformat_user (main_input, unformat_line_input, line_input))
345 while (unformat_check_input (line_input) != UNFORMAT_END_OF_INPUT)
347 memset (&rpath, 0, sizeof (rpath));
349 if (unformat (line_input, "table %d", &table_id))
351 else if (unformat (line_input, "count %f", &count))
354 else if (unformat (line_input, "%U/%d",
355 unformat_ip4_address, &pfx.fp_addr.ip4, &pfx.fp_len))
357 payload_proto = pfx.fp_proto = FIB_PROTOCOL_IP4;
358 vec_add1 (prefixs, pfx);
360 else if (unformat (line_input, "%U/%d",
361 unformat_ip6_address, &pfx.fp_addr.ip6, &pfx.fp_len))
363 payload_proto = pfx.fp_proto = FIB_PROTOCOL_IP6;
364 vec_add1 (prefixs, pfx);
366 else if (unformat (line_input, "via %U",
367 unformat_fib_route_path, &rpath, &payload_proto))
369 vec_add1 (rpaths, rpath);
371 else if (vec_len (prefixs) > 0 &&
372 unformat (line_input, "via %U",
373 unformat_dpo, &dpo, prefixs[0].fp_proto))
375 vec_add1 (dpos, dpo);
377 else if (unformat (line_input, "del"))
379 else if (unformat (line_input, "add"))
383 error = unformat_parse_error (line_input);
388 if (vec_len (prefixs) == 0)
391 clib_error_return (0, "expected ip4/ip6 destination address/length.");
395 if (!is_del && vec_len (rpaths) + vec_len (dpos) == 0)
397 error = clib_error_return (0, "expected paths.");
404 * if no table_id is passed we will manipulate the default
410 fib_index = fib_table_find (prefixs[0].fp_proto, table_id);
414 error = clib_error_return (0, "Nonexistent table id %d", table_id);
419 for (i = 0; i < vec_len (prefixs); i++)
421 if (is_del && 0 == vec_len (rpaths))
423 fib_table_entry_delete (fib_index, &prefixs[i], FIB_SOURCE_CLI);
425 else if (!is_del && 1 == vec_len (dpos))
427 fib_table_entry_special_dpo_add (fib_index,
430 FIB_ENTRY_FLAG_EXCLUSIVE,
432 dpo_reset (&dpos[0]);
434 else if (vec_len (dpos) > 0)
437 clib_error_return (0,
438 "Load-balancing over multiple special adjacencies is unsupported");
441 else if (0 < vec_len (rpaths))
444 ip46_address_t dst = prefixs[i].fp_addr;
447 t[0] = vlib_time_now (vm);
448 incr = 1 << ((FIB_PROTOCOL_IP4 == prefixs[0].fp_proto ? 32 : 128) -
451 for (k = 0; k < n; k++)
453 for (j = 0; j < vec_len (rpaths); j++)
457 * the CLI parsing stored table Ids, swap to FIB indicies
459 fi = fib_table_find (prefixs[i].fp_proto,
460 rpaths[i].frp_fib_index);
465 clib_error_return (0, "Via table %d does not exist",
466 rpaths[i].frp_fib_index);
469 rpaths[i].frp_fib_index = fi;
471 fib_prefix_t rpfx = {
472 .fp_len = prefixs[i].fp_len,
473 .fp_proto = prefixs[i].fp_proto,
478 fib_table_entry_path_remove2 (fib_index,
480 FIB_SOURCE_CLI, &rpaths[j]);
482 fib_table_entry_path_add2 (fib_index,
489 if (FIB_PROTOCOL_IP4 == prefixs[0].fp_proto)
492 clib_host_to_net_u32 (incr +
493 clib_net_to_host_u32 (dst.
498 int bucket = (incr < 64 ? 0 : 1);
499 dst.ip6.as_u64[bucket] =
500 clib_host_to_net_u64 (incr +
501 clib_net_to_host_u64 (dst.ip6.as_u64
506 t[1] = vlib_time_now (vm);
508 vlib_cli_output (vm, "%.6e routes/sec", count / (t[1] - t[0]));
512 error = clib_error_return (0, "Don't understand what you want...");
522 unformat_free (line_input);
527 vnet_ip_table_cmd (vlib_main_t * vm,
528 unformat_input_t * main_input,
529 vlib_cli_command_t * cmd, fib_protocol_t fproto)
531 unformat_input_t _line_input, *line_input = &_line_input;
532 clib_error_t *error = NULL;
533 u32 table_id, is_add;
539 /* Get a line of input. */
540 if (!unformat_user (main_input, unformat_line_input, line_input))
543 while (unformat_check_input (line_input) != UNFORMAT_END_OF_INPUT)
545 if (unformat (line_input, "%d", &table_id))
547 else if (unformat (line_input, "del"))
549 else if (unformat (line_input, "add"))
551 else if (unformat (line_input, "name %s", &name))
555 error = unformat_parse_error (line_input);
562 error = clib_error_return (0, "No table id");
565 else if (0 == table_id)
567 error = clib_error_return (0, "Can't change the default table");
574 ip_table_create (fproto, table_id, 0, name);
578 ip_table_delete (fproto, table_id, 0);
583 unformat_free (line_input);
588 vnet_ip4_table_cmd (vlib_main_t * vm,
589 unformat_input_t * main_input, vlib_cli_command_t * cmd)
591 return (vnet_ip_table_cmd (vm, main_input, cmd, FIB_PROTOCOL_IP4));
595 vnet_ip6_table_cmd (vlib_main_t * vm,
596 unformat_input_t * main_input, vlib_cli_command_t * cmd)
598 return (vnet_ip_table_cmd (vm, main_input, cmd, FIB_PROTOCOL_IP6));
602 VLIB_CLI_COMMAND (vlib_cli_ip_command, static) = {
604 .short_help = "Internet protocol (IP) commands",
609 VLIB_CLI_COMMAND (vlib_cli_ip6_command, static) = {
611 .short_help = "Internet protocol version 6 (IPv6) commands",
616 VLIB_CLI_COMMAND (vlib_cli_show_ip_command, static) = {
618 .short_help = "Internet protocol (IP) show commands",
623 VLIB_CLI_COMMAND (vlib_cli_show_ip6_command, static) = {
625 .short_help = "Internet protocol version 6 (IPv6) show commands",
630 * This command is used to add or delete IPv4 or IPv6 routes. All
631 * IP Addresses ('<em><dst-ip-addr>/<width></em>',
632 * '<em><next-hop-ip-addr></em>' and '<em><adj-hop-ip-addr></em>')
633 * can be IPv4 or IPv6, but all must be of the same form in a single
634 * command. To display the current set of routes, use the commands
635 * '<em>show ip fib</em>' and '<em>show ip6 fib</em>'.
638 * Example of how to add a straight forward static route:
639 * @cliexcmd{ip route add 6.0.1.2/32 via 6.0.0.1 GigabitEthernet2/0/0}
640 * Example of how to delete a straight forward static route:
641 * @cliexcmd{ip route del 6.0.1.2/32 via 6.0.0.1 GigabitEthernet2/0/0}
642 * Mainly for route add/del performance testing, one can add or delete
643 * multiple routes by adding 'count N' to the previous item:
644 * @cliexcmd{ip route add count 10 7.0.0.0/24 via 6.0.0.1 GigabitEthernet2/0/0}
645 * Add multiple routes for the same destination to create equal-cost multipath:
646 * @cliexcmd{ip route add 7.0.0.1/32 via 6.0.0.1 GigabitEthernet2/0/0}
647 * @cliexcmd{ip route add 7.0.0.1/32 via 6.0.0.2 GigabitEthernet2/0/0}
648 * For unequal-cost multipath, specify the desired weights. This
649 * combination of weights results in 3/4 of the traffic following the
650 * second path, 1/4 following the first path:
651 * @cliexcmd{ip route add 7.0.0.1/32 via 6.0.0.1 GigabitEthernet2/0/0 weight 1}
652 * @cliexcmd{ip route add 7.0.0.1/32 via 6.0.0.2 GigabitEthernet2/0/0 weight 3}
653 * To add a route to a particular FIB table (VRF), use:
654 * @cliexcmd{ip route add 172.16.24.0/24 table 7 via GigabitEthernet2/0/0}
657 VLIB_CLI_COMMAND (ip_route_command, static) = {
659 .short_help = "ip route [add|del] [count <n>] <dst-ip-addr>/<width> [table <table-id>] via [next-hop-address] [next-hop-interface] [next-hop-table <value>] [weight <value>] [preference <value>] [udp-encap-id <value>] [ip4-lookup-in-table <value>] [ip6-lookup-in-table <value>] [mpls-lookup-in-table <value>] [resolve-via-host] [resolve-via-connected] [rx-ip4 <interface>] [out-labels <value value value>]",
660 .function = vnet_ip_route_cmd,
666 * This command is used to add or delete IPv4 Tables. All
667 * Tables must be explicitly added before that can be used. Creating a
668 * table will add both unicast and multicast FIBs
672 VLIB_CLI_COMMAND (ip4_table_command, static) = {
674 .short_help = "ip table [add|del] <table-id>",
675 .function = vnet_ip4_table_cmd,
682 * This command is used to add or delete IPv4 Tables. All
683 * Tables must be explicitly added before that can be used. Creating a
684 * table will add both unicast and multicast FIBs
688 VLIB_CLI_COMMAND (ip6_table_command, static) = {
690 .short_help = "ip6 table [add|del] <table-id>",
691 .function = vnet_ip6_table_cmd,
695 static clib_error_t *
696 ip_table_bind_cmd (vlib_main_t * vm,
697 unformat_input_t * input,
698 vlib_cli_command_t * cmd,
699 fib_protocol_t fproto)
701 vnet_main_t *vnm = vnet_get_main ();
702 clib_error_t *error = 0;
703 u32 sw_if_index, table_id;
708 if (!unformat_user (input, unformat_vnet_sw_interface, vnm, &sw_if_index))
710 error = clib_error_return (0, "unknown interface `%U'",
711 format_unformat_error, input);
715 if (unformat (input, "%d", &table_id))
719 error = clib_error_return (0, "expected table id `%U'",
720 format_unformat_error, input);
724 rv = ip_table_bind (fproto, sw_if_index, table_id, 0);
726 if (VNET_API_ERROR_ADDRESS_FOUND_FOR_INTERFACE == rv)
728 error = clib_error_return (0, "IP addresses are still present on %U",
729 format_vnet_sw_if_index_name,
733 else if (VNET_API_ERROR_NO_SUCH_FIB == rv)
735 error = clib_error_return (0, "no such table %d", table_id);
739 error = clib_error_return (0, "unknown error");
746 static clib_error_t *
747 ip4_table_bind_cmd (vlib_main_t * vm,
748 unformat_input_t * input,
749 vlib_cli_command_t * cmd)
751 return (ip_table_bind_cmd (vm , input, cmd, FIB_PROTOCOL_IP4));
754 static clib_error_t *
755 ip6_table_bind_cmd (vlib_main_t * vm,
756 unformat_input_t * input,
757 vlib_cli_command_t * cmd)
759 return (ip_table_bind_cmd (vm , input, cmd, FIB_PROTOCOL_IP6));
763 * Place the indicated interface into the supplied IPv4 FIB table (also known
764 * as a VRF). The FIB table must be created using "ip table add" already. To
765 * display the current IPv4 FIB table, use the command '<em>show ip fib</em>'.
766 * FIB table will only be displayed if a route has been added to the table, or
767 * an IP Address is assigned to an interface in the table (which adds a route
770 * @note IP addresses added after setting the interface IP table are added to
771 * the indicated FIB table. If an IP address is added prior to changing the
772 * table then this is an error. The control plane must remove these addresses
773 * first and then change the table. VPP will not automatically move the
774 * addresses from the old to the new table as it does not know the validity
778 * Example of how to add an interface to an IPv4 FIB table (where 2 is the table-id):
779 * @cliexcmd{set interface ip table GigabitEthernet2/0/0 2}
782 VLIB_CLI_COMMAND (set_interface_ip_table_command, static) =
784 .path = "set interface ip table",
785 .function = ip4_table_bind_cmd,
786 .short_help = "set interface ip table <interface> <table-id>",
791 * Place the indicated interface into the supplied IPv6 FIB table (also known
792 * as a VRF). The FIB table must be created using "ip6 table add" already. To
793 * display the current IPv6 FIB table, use the command '<em>show ip6 fib</em>'.
794 * FIB table will only be displayed if a route has been added to the table, or
795 * an IP Address is assigned to an interface in the table (which adds a route
798 * @note IP addresses added after setting the interface IP table are added to
799 * the indicated FIB table. If an IP address is added prior to changing the
800 * table then this is an error. The control plane must remove these addresses
801 * first and then change the table. VPP will not automatically move the
802 * addresses from the old to the new table as it does not know the validity
806 * Example of how to add an interface to an IPv6 FIB table (where 2 is the table-id):
807 * @cliexcmd{set interface ip6 table GigabitEthernet2/0/0 2}
810 VLIB_CLI_COMMAND (set_interface_ip6_table_command, static) =
812 .path = "set interface ip6 table",
813 .function = ip6_table_bind_cmd,
814 .short_help = "set interface ip6 table <interface> <table-id>"
819 vnet_ip_mroute_cmd (vlib_main_t * vm,
820 unformat_input_t * main_input, vlib_cli_command_t * cmd)
822 unformat_input_t _line_input, *line_input = &_line_input;
823 clib_error_t *error = NULL;
824 fib_route_path_t rpath;
825 u32 table_id, is_del;
829 mfib_itf_flags_t iflags = 0;
830 mfib_entry_flags_t eflags = 0;
831 u32 gcount, scount, ss, gg, incr;
835 vnm = vnet_get_main ();
838 memset (&pfx, 0, sizeof (pfx));
839 memset (&rpath, 0, sizeof (rpath));
840 rpath.frp_sw_if_index = ~0;
842 /* Get a line of input. */
843 if (!unformat_user (main_input, unformat_line_input, line_input))
846 while (unformat_check_input (line_input) != UNFORMAT_END_OF_INPUT)
848 if (unformat (line_input, "table %d", &table_id))
850 else if (unformat (line_input, "del"))
852 else if (unformat (line_input, "add"))
854 else if (unformat (line_input, "scount %d", &scount))
856 else if (unformat (line_input, "gcount %d", &gcount))
858 else if (unformat (line_input, "%U %U",
859 unformat_ip4_address,
860 &pfx.fp_src_addr.ip4,
861 unformat_ip4_address, &pfx.fp_grp_addr.ip4))
863 pfx.fp_proto = FIB_PROTOCOL_IP4;
866 else if (unformat (line_input, "%U %U",
867 unformat_ip6_address,
868 &pfx.fp_src_addr.ip6,
869 unformat_ip6_address, &pfx.fp_grp_addr.ip6))
871 pfx.fp_proto = FIB_PROTOCOL_IP6;
874 else if (unformat (line_input, "%U/%d",
875 unformat_ip4_address,
876 &pfx.fp_grp_addr.ip4, &pfx.fp_len))
878 memset (&pfx.fp_src_addr.ip4, 0, sizeof (pfx.fp_src_addr.ip4));
879 pfx.fp_proto = FIB_PROTOCOL_IP4;
881 else if (unformat (line_input, "%U/%d",
882 unformat_ip6_address,
883 &pfx.fp_grp_addr.ip6, &pfx.fp_len))
885 memset (&pfx.fp_src_addr.ip6, 0, sizeof (pfx.fp_src_addr.ip6));
886 pfx.fp_proto = FIB_PROTOCOL_IP6;
888 else if (unformat (line_input, "%U",
889 unformat_ip4_address, &pfx.fp_grp_addr.ip4))
891 memset (&pfx.fp_src_addr.ip4, 0, sizeof (pfx.fp_src_addr.ip4));
892 pfx.fp_proto = FIB_PROTOCOL_IP4;
895 else if (unformat (line_input, "%U",
896 unformat_ip6_address, &pfx.fp_grp_addr.ip6))
898 memset (&pfx.fp_src_addr.ip6, 0, sizeof (pfx.fp_src_addr.ip6));
899 pfx.fp_proto = FIB_PROTOCOL_IP6;
902 else if (unformat (line_input, "via %U %U",
903 unformat_ip4_address, &rpath.frp_addr.ip4,
904 unformat_vnet_sw_interface, vnm,
905 &rpath.frp_sw_if_index))
907 rpath.frp_weight = 1;
909 else if (unformat (line_input, "via %U %U",
910 unformat_ip6_address, &rpath.frp_addr.ip6,
911 unformat_vnet_sw_interface, vnm,
912 &rpath.frp_sw_if_index))
914 rpath.frp_weight = 1;
916 else if (unformat (line_input, "via %U",
917 unformat_vnet_sw_interface, vnm,
918 &rpath.frp_sw_if_index))
920 memset (&rpath.frp_addr, 0, sizeof (rpath.frp_addr));
921 rpath.frp_weight = 1;
923 else if (unformat (line_input, "via local"))
925 memset (&rpath.frp_addr, 0, sizeof (rpath.frp_addr));
926 rpath.frp_sw_if_index = ~0;
927 rpath.frp_weight = 1;
928 rpath.frp_flags |= FIB_ROUTE_PATH_LOCAL;
930 * set the path proto appropriately for the prefix
932 rpath.frp_proto = fib_proto_to_dpo (pfx.fp_proto);
934 else if (unformat (line_input, "%U", unformat_mfib_itf_flags, &iflags))
936 else if (unformat (line_input, "%U",
937 unformat_mfib_entry_flags, &eflags))
941 error = unformat_parse_error (line_input);
949 * if no table_id is passed we will manipulate the default
955 fib_index = mfib_table_find (pfx.fp_proto, table_id);
959 error = clib_error_return (0, "Nonexistent table id %d", table_id);
964 timet[0] = vlib_time_now (vm);
966 if (FIB_PROTOCOL_IP4 == pfx.fp_proto)
968 incr = 1 << (32 - (pfx.fp_len % 32));
972 incr = 1 << (128 - (pfx.fp_len % 128));
975 for (ss = 0; ss < scount; ss++)
977 for (gg = 0; gg < gcount; gg++)
979 if (is_del && 0 == rpath.frp_weight)
981 /* no path provided => route delete */
982 mfib_table_entry_delete (fib_index, &pfx, MFIB_SOURCE_CLI);
986 mfib_table_entry_update (fib_index, &pfx, MFIB_SOURCE_CLI,
987 MFIB_RPF_ID_NONE, eflags);
992 mfib_table_entry_path_remove (fib_index,
993 &pfx, MFIB_SOURCE_CLI, &rpath);
995 mfib_table_entry_path_update (fib_index,
996 &pfx, MFIB_SOURCE_CLI, &rpath,
1000 if (FIB_PROTOCOL_IP4 == pfx.fp_proto)
1002 pfx.fp_grp_addr.ip4.as_u32 =
1003 clib_host_to_net_u32 (incr +
1004 clib_net_to_host_u32 (pfx.
1010 int bucket = (incr < 64 ? 0 : 1);
1011 pfx.fp_grp_addr.ip6.as_u64[bucket] =
1012 clib_host_to_net_u64 (incr +
1013 clib_net_to_host_u64 (pfx.
1014 fp_grp_addr.ip6.as_u64
1019 if (FIB_PROTOCOL_IP4 == pfx.fp_proto)
1021 pfx.fp_src_addr.ip4.as_u32 =
1022 clib_host_to_net_u32 (1 +
1023 clib_net_to_host_u32 (pfx.fp_src_addr.
1028 pfx.fp_src_addr.ip6.as_u64[1] =
1029 clib_host_to_net_u64 (1 +
1030 clib_net_to_host_u64 (pfx.fp_src_addr.
1035 timet[1] = vlib_time_now (vm);
1037 if (scount > 1 || gcount > 1)
1038 vlib_cli_output (vm, "%.6e routes/sec",
1039 (scount * gcount) / (timet[1] - timet[0]));
1042 unformat_free (line_input);
1048 * This command is used to add or delete IPv4 or IPv6 multicastroutes. All
1049 * IP Addresses ('<em><dst-ip-addr>/<width></em>',
1050 * '<em><next-hop-ip-addr></em>' and '<em><adj-hop-ip-addr></em>')
1051 * can be IPv4 or IPv6, but all must be of the same form in a single
1052 * command. To display the current set of routes, use the commands
1053 * '<em>show ip mfib</em>' and '<em>show ip6 mfib</em>'.
1054 * The full set of support flags for interfaces and route is shown via;
1055 * '<em>show mfib route flags</em>' and '<em>show mfib itf flags</em>'
1058 * Example of how to add a forwarding interface to a route (and create the
1059 * route if it does not exist)
1060 * @cliexcmd{ip mroute add 232.1.1.1 via GigabitEthernet2/0/0 Forward}
1061 * Example of how to add an accepting interface to a route (and create the
1062 * route if it does not exist)
1063 * @cliexcmd{ip mroute add 232.1.1.1 via GigabitEthernet2/0/1 Accept}
1064 * Example of changing the route's flags to send signals via the API
1065 * @cliexcmd{ip mroute add 232.1.1.1 Signal}
1069 VLIB_CLI_COMMAND (ip_mroute_command, static) =
1071 .path = "ip mroute",
1072 .short_help = "ip mroute [add|del] <dst-ip-addr>/<width> [table <table-id>] [via <next-hop-ip-addr> [<interface>],",
1073 .function = vnet_ip_mroute_cmd,
1079 * The next two routines address a longstanding script hemorrhoid.
1080 * Probing a v4 or v6 neighbor needs to appear to be synchronous,
1081 * or dependent route-adds will simply fail.
1083 static clib_error_t *
1084 ip6_probe_neighbor_wait (vlib_main_t * vm, ip6_address_t * a, u32 sw_if_index,
1087 vnet_main_t *vnm = vnet_get_main ();
1092 uword *event_data = 0;
1094 ASSERT (vlib_in_process_context (vm));
1096 if (retry_count > 0)
1097 vnet_register_ip6_neighbor_resolution_event
1098 (vnm, a, vlib_get_current_process (vm)->node_runtime.node_index,
1099 1 /* event */ , 0 /* data */ );
1101 for (i = 0; i < retry_count; i++)
1103 /* The interface may be down, etc. */
1104 e = ip6_probe_neighbor (vm, a, sw_if_index, 0);
1109 vlib_process_wait_for_event_or_clock (vm, 1.0);
1110 event_type = vlib_process_get_events (vm, &event_data);
1113 case 1: /* resolved... */
1114 vlib_cli_output (vm, "Resolved %U", format_ip6_address, a);
1118 case ~0: /* timeout */
1122 clib_warning ("unknown event_type %d", event_type);
1124 vec_reset_length (event_data);
1130 return clib_error_return (0, "Resolution failed for %U",
1131 format_ip6_address, a);
1135 static clib_error_t *
1136 ip4_probe_neighbor_wait (vlib_main_t * vm, ip4_address_t * a, u32 sw_if_index,
1139 vnet_main_t *vnm = vnet_get_main ();
1144 uword *event_data = 0;
1146 ASSERT (vlib_in_process_context (vm));
1148 if (retry_count > 0)
1149 vnet_register_ip4_arp_resolution_event
1150 (vnm, a, vlib_get_current_process (vm)->node_runtime.node_index,
1151 1 /* event */ , 0 /* data */ );
1153 for (i = 0; i < retry_count; i++)
1155 /* The interface may be down, etc. */
1156 e = ip4_probe_neighbor (vm, a, sw_if_index, 0);
1161 vlib_process_wait_for_event_or_clock (vm, 1.0);
1162 event_type = vlib_process_get_events (vm, &event_data);
1165 case 1: /* resolved... */
1166 vlib_cli_output (vm, "Resolved %U", format_ip4_address, a);
1170 case ~0: /* timeout */
1174 clib_warning ("unknown event_type %d", event_type);
1176 vec_reset_length (event_data);
1181 vec_reset_length (event_data);
1184 return clib_error_return (0, "Resolution failed for %U",
1185 format_ip4_address, a);
1189 static clib_error_t *
1190 probe_neighbor_address (vlib_main_t * vm,
1191 unformat_input_t * input, vlib_cli_command_t * cmd)
1193 vnet_main_t *vnm = vnet_get_main ();
1194 unformat_input_t _line_input, *line_input = &_line_input;
1197 clib_error_t *error = 0;
1198 u32 sw_if_index = ~0;
1199 int retry_count = 3;
1201 int address_set = 0;
1203 /* Get a line of input. */
1204 if (!unformat_user (input, unformat_line_input, line_input))
1207 while (unformat_check_input (line_input) != UNFORMAT_END_OF_INPUT)
1209 if (unformat_user (line_input, unformat_vnet_sw_interface, vnm,
1212 else if (unformat (line_input, "retry %d", &retry_count))
1215 else if (unformat (line_input, "%U", unformat_ip4_address, &a4))
1217 else if (unformat (line_input, "%U", unformat_ip6_address, &a6))
1224 error = clib_error_return (0, "unknown input '%U'",
1225 format_unformat_error, line_input);
1230 if (sw_if_index == ~0)
1232 error = clib_error_return (0, "Interface required, not set.");
1235 if (address_set == 0)
1237 error = clib_error_return (0, "ip address required, not set.");
1240 if (address_set > 1)
1242 error = clib_error_return (0, "Multiple ip addresses not supported.");
1247 error = ip4_probe_neighbor_wait (vm, &a4, sw_if_index, retry_count);
1249 error = ip6_probe_neighbor_wait (vm, &a6, sw_if_index, retry_count);
1252 unformat_free (line_input);
1258 * The '<em>ip probe-neighbor</em>' command ARPs for IPv4 addresses or
1259 * attempts IPv6 neighbor discovery depending on the supplied IP address
1262 * @note This command will not immediately affect the indicated FIB; it
1263 * is not suitable for use in establishing a FIB entry prior to adding
1264 * recursive FIB entries. As in: don't use it in a script to probe a
1265 * gateway prior to adding a default route. It won't work. Instead,
1266 * configure a static ARP cache entry [see '<em>set ip arp</em>'], or
1267 * a static IPv6 neighbor [see '<em>set ip6 neighbor</em>'].
1270 * Example of probe for an IPv4 address:
1271 * @cliexcmd{ip probe-neighbor GigabitEthernet2/0/0 172.16.1.2}
1274 VLIB_CLI_COMMAND (ip_probe_neighbor_command, static) = {
1275 .path = "ip probe-neighbor",
1276 .function = probe_neighbor_address,
1277 .short_help = "ip probe-neighbor <interface> <ip4-addr> | <ip6-addr> [retry nn]",
1283 vnet_ip_container_proxy_add_del (vnet_ip_container_proxy_args_t * args)
1287 if (!vnet_sw_interface_is_api_valid (vnet_get_main (), args->sw_if_index))
1288 return clib_error_return_code (0, VNET_API_ERROR_INVALID_INTERFACE, 0,
1289 "invalid sw_if_index");
1291 fib_index = fib_table_get_table_id_for_sw_if_index (args->prefix.fp_proto,
1295 dpo_id_t proxy_dpo = DPO_INVALID;
1296 l3_proxy_dpo_add_or_lock (fib_proto_to_dpo (args->prefix.fp_proto),
1297 args->sw_if_index, &proxy_dpo);
1298 fib_table_entry_special_dpo_add (fib_index,
1301 FIB_ENTRY_FLAG_EXCLUSIVE, &proxy_dpo);
1302 dpo_reset (&proxy_dpo);
1306 fib_table_entry_special_remove (fib_index, &args->prefix,
1313 ip_container_proxy_is_set (fib_prefix_t * pfx, u32 sw_if_index)
1316 fib_node_index_t fei;
1317 const dpo_id_t *dpo;
1318 l3_proxy_dpo_t *l3p;
1319 load_balance_t *lb0;
1321 fib_index = fib_table_get_table_id_for_sw_if_index (pfx->fp_proto,
1323 if (fib_index == ~0)
1326 fei = fib_table_lookup_exact_match (fib_index, pfx);
1327 if (fei == FIB_NODE_INDEX_INVALID)
1330 dpo = fib_entry_contribute_ip_forwarding (fei);
1331 lb0 = load_balance_get (dpo->dpoi_index);
1332 dpo = load_balance_get_bucket_i (lb0, 0);
1333 if (dpo->dpoi_type != DPO_L3_PROXY)
1336 l3p = l3_proxy_dpo_get (dpo->dpoi_index);
1337 return (l3p->l3p_sw_if_index == sw_if_index);
1341 ip_container_cmd (vlib_main_t * vm,
1342 unformat_input_t * main_input, vlib_cli_command_t * cmd)
1344 unformat_input_t _line_input, *line_input = &_line_input;
1346 u32 is_del, addr_set = 0;
1350 vnm = vnet_get_main ();
1353 memset (&pfx, 0, sizeof (pfx));
1355 /* Get a line of input. */
1356 if (!unformat_user (main_input, unformat_line_input, line_input))
1359 while (unformat_check_input (line_input) != UNFORMAT_END_OF_INPUT)
1361 if (unformat (line_input, "%U", unformat_ip4_address, &pfx.fp_addr.ip4))
1363 pfx.fp_proto = FIB_PROTOCOL_IP4;
1367 else if (unformat (line_input, "%U",
1368 unformat_ip6_address, &pfx.fp_addr.ip6))
1370 pfx.fp_proto = FIB_PROTOCOL_IP6;
1374 else if (unformat (line_input, "%U",
1375 unformat_vnet_sw_interface, vnm, &sw_if_index))
1377 else if (unformat (line_input, "del"))
1381 unformat_free (line_input);
1382 return (clib_error_return (0, "unknown input '%U'",
1383 format_unformat_error, line_input));
1387 if (~0 == sw_if_index || !addr_set)
1389 unformat_free (line_input);
1390 vlib_cli_output (vm, "interface and address must be set");
1394 vnet_ip_container_proxy_args_t args = {
1396 .sw_if_index = sw_if_index,
1399 vnet_ip_container_proxy_add_del (&args);
1400 unformat_free (line_input);
1405 VLIB_CLI_COMMAND (ip_container_command_node, static) = {
1406 .path = "ip container",
1407 .function = ip_container_cmd,
1408 .short_help = "ip container <address> <interface>",
1414 show_ip_container_cmd_fn (vlib_main_t * vm, unformat_input_t * main_input,
1415 vlib_cli_command_t * cmd)
1417 unformat_input_t _line_input, *line_input = &_line_input;
1418 vnet_main_t *vnm = vnet_get_main ();
1420 u32 sw_if_index = ~0;
1423 if (!unformat_user (main_input, unformat_line_input, line_input))
1425 while (unformat_check_input (line_input) != UNFORMAT_END_OF_INPUT)
1427 if (unformat (line_input, "%U", unformat_ip4_address, &pfx.fp_addr.ip4))
1429 pfx.fp_proto = FIB_PROTOCOL_IP4;
1432 else if (unformat (line_input, "%U",
1433 unformat_ip6_address, &pfx.fp_addr.ip6))
1435 pfx.fp_proto = FIB_PROTOCOL_IP6;
1438 else if (unformat (line_input, "%U",
1439 unformat_vnet_sw_interface, vnm, &sw_if_index))
1443 unformat_free (line_input);
1444 return (clib_error_return (0, "unknown input '%U'",
1445 format_unformat_error, line_input));
1449 if (~0 == sw_if_index)
1451 unformat_free (line_input);
1452 vlib_cli_output (vm, "no interface");
1453 return (clib_error_return (0, "no interface"));
1456 has_proxy = ip_container_proxy_is_set (&pfx, sw_if_index);
1457 vlib_cli_output (vm, "ip container proxy is: %s", has_proxy ? "on" : "off");
1459 unformat_free (line_input);
1464 VLIB_CLI_COMMAND (show_ip_container_command, static) = {
1465 .path = "show ip container",
1466 .function = show_ip_container_cmd_fn,
1467 .short_help = "show ip container <address> <interface>",
1473 * fd.io coding-style-patch-verification: ON
1476 * eval: (c-set-style "gnu")