2 * Copyright (c) 2016 Cisco and/or its affiliates.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at:
7 * http://www.apache.org/licenses/LICENSE-2.0
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
18 * @brief Local TCP/IP stack punt infrastructure.
20 * Provides a set of VPP nodes together with the relevant APIs and CLI
21 * commands in order to adjust and dispatch packets from the VPP data plane
22 * to the local TCP/IP stack
25 #include <vnet/ip/ip.h>
26 #include <vlib/vlib.h>
27 #include <vnet/udp/udp.h>
28 #include <vnet/tcp/tcp.h>
29 #include <vnet/ip/punt.h>
30 #include <vlib/unix/unix.h>
34 #include <sys/socket.h>
38 punt_main_t punt_main;
41 vnet_punt_get_server_pathname (void)
43 punt_main_t *pm = &punt_main;
48 punt_client_l4_db_add (ip_address_family_t af, u16 port, u32 index)
50 punt_main_t *pm = &punt_main;
52 pm->db.clients_by_l4_port = hash_set (pm->db.clients_by_l4_port,
53 punt_client_l4_mk_key (af, port),
58 punt_client_l4_db_remove (ip_address_family_t af, u16 port)
60 punt_main_t *pm = &punt_main;
64 key = punt_client_l4_mk_key (af, port);
65 p = hash_get (pm->db.clients_by_l4_port, key);
70 hash_unset (pm->db.clients_by_l4_port, key);
76 punt_client_ip_proto_db_add (ip_address_family_t af,
77 ip_protocol_t proto, u32 index)
79 punt_main_t *pm = &punt_main;
81 pm->db.clients_by_ip_proto = hash_set (pm->db.clients_by_ip_proto,
82 punt_client_ip_proto_mk_key (af,
88 punt_client_ip_proto_db_remove (ip_address_family_t af, ip_protocol_t proto)
90 punt_main_t *pm = &punt_main;
94 key = punt_client_ip_proto_mk_key (af, proto);
95 p = hash_get (pm->db.clients_by_ip_proto, key);
100 hash_unset (pm->db.clients_by_ip_proto, key);
106 punt_client_exception_db_add (vlib_punt_reason_t reason, u32 pci)
108 punt_main_t *pm = &punt_main;
110 vec_validate_init_empty (pm->db.clients_by_exception, reason, ~0);
112 pm->db.clients_by_exception[reason] = pci;
116 punt_client_exception_db_remove (vlib_punt_reason_t reason)
118 punt_main_t *pm = &punt_main;
121 if (punt_client_exception_get (reason))
123 pci = pm->db.clients_by_exception[reason];
124 pm->db.clients_by_exception[reason] = ~0;
130 static clib_error_t *
131 punt_socket_read_ready (clib_file_t * uf)
133 vlib_main_t *vm = vlib_get_main ();
134 punt_main_t *pm = &punt_main;
136 /** Schedule the rx node */
137 vlib_node_set_interrupt_pending (vm, punt_socket_rx_node.index);
138 vec_add1 (pm->ready_fds, uf->file_descriptor);
143 static clib_error_t *
144 punt_socket_register_l4 (vlib_main_t * vm,
145 ip_address_family_t af,
146 u8 protocol, u16 port, char *client_pathname)
148 punt_main_t *pm = &punt_main;
151 if (port == (u16) ~ 0)
152 return clib_error_return (0, "Port number required");
157 case IP_PROTOCOL_UDP:
158 node_index = (af == AF_IP4 ? udp4_punt_socket_node.index :
159 udp6_punt_socket_node.index);
160 udp_register_dst_port (vm, port, node_index, af == AF_IP4);
162 case IP_PROTOCOL_ICMP6:
164 return clib_error_return (
165 0, "only UDP or ICMP6 protocol (%d, %d) is supported, got %d",
166 IP_PROTOCOL_UDP, IP_PROTOCOL_ICMP6, protocol);
168 node_index = icmp6_punt_socket_node.index;
169 icmp6_register_type (vm, port, node_index);
172 return clib_error_return (
173 0, "only UDP or ICMP6 protocol (%d) is supported, got %d",
174 IP_PROTOCOL_UDP, protocol);
177 c = punt_client_l4_get (af, port);
181 pool_get_zero (pm->punt_client_pool, c);
182 punt_client_l4_db_add (af, port, c - pm->punt_client_pool);
185 snprintf (c->caddr.sun_path, sizeof (c->caddr.sun_path), "%s",
187 c->caddr.sun_family = AF_UNIX;
188 c->reg.type = PUNT_TYPE_L4;
189 c->reg.punt.l4.port = port;
190 c->reg.punt.l4.protocol = protocol;
191 c->reg.punt.l4.af = af;
196 static clib_error_t *
197 punt_socket_register_ip_proto (vlib_main_t * vm,
198 ip_address_family_t af,
199 ip_protocol_t proto, char *client_pathname)
201 punt_main_t *pm = &punt_main;
204 c = punt_client_ip_proto_get (af, proto);
208 pool_get_zero (pm->punt_client_pool, c);
209 punt_client_ip_proto_db_add (af, proto, c - pm->punt_client_pool);
212 snprintf (c->caddr.sun_path, sizeof (c->caddr.sun_path), "%s",
214 c->caddr.sun_family = AF_UNIX;
215 c->reg.type = PUNT_TYPE_IP_PROTO;
216 c->reg.punt.ip_proto.protocol = proto;
217 c->reg.punt.ip_proto.af = af;
220 ip4_register_protocol (proto, ip4_proto_punt_socket_node.index);
222 ip6_register_protocol (proto, ip6_proto_punt_socket_node.index);
227 static clib_error_t *
228 punt_socket_register_exception (vlib_main_t * vm,
229 vlib_punt_reason_t reason,
230 char *client_pathname)
232 punt_main_t *pm = &punt_main;
235 pc = punt_client_exception_get (reason);
239 pool_get_zero (pm->punt_client_pool, pc);
240 punt_client_exception_db_add (reason, pc - pm->punt_client_pool);
243 snprintf (pc->caddr.sun_path, sizeof (pc->caddr.sun_path), "%s",
245 pc->caddr.sun_family = AF_UNIX;
246 pc->reg.type = PUNT_TYPE_EXCEPTION;
247 pc->reg.punt.exception.reason = reason;
249 vlib_punt_register (pm->hdl,
250 pc->reg.punt.exception.reason, "exception-punt-socket");
255 static clib_error_t *
256 punt_socket_unregister_l4 (ip_address_family_t af,
257 ip_protocol_t protocol, u16 port)
261 udp_unregister_dst_port (vlib_get_main (), port, af == AF_IP4);
263 pci = punt_client_l4_db_remove (af, port);
266 pool_put_index (punt_main.punt_client_pool, pci);
271 static clib_error_t *
272 punt_socket_unregister_ip_proto (ip_address_family_t af, ip_protocol_t proto)
277 ip4_unregister_protocol (proto);
279 ip6_unregister_protocol (proto);
281 pci = punt_client_ip_proto_db_remove (af, proto);
284 pool_put_index (punt_main.punt_client_pool, pci);
289 static clib_error_t *
290 punt_socket_unregister_exception (vlib_punt_reason_t reason)
294 pci = punt_client_exception_db_remove (reason);
297 pool_put_index (punt_main.punt_client_pool, pci);
303 vnet_punt_socket_add (vlib_main_t * vm, u32 header_version,
304 const punt_reg_t * pr, char *client_pathname)
306 punt_main_t *pm = &punt_main;
308 if (!pm->is_configured)
309 return clib_error_return (0, "socket is not configured");
311 if (header_version != PUNT_PACKETDESC_VERSION)
312 return clib_error_return (0, "Invalid packet descriptor version");
314 if (strncmp (client_pathname, vnet_punt_get_server_pathname (),
316 return clib_error_return (0,
317 "Punt socket: Invalid client path: %s",
320 /* Register client */
324 return (punt_socket_register_l4 (vm,
326 pr->punt.l4.protocol,
327 pr->punt.l4.port, client_pathname));
328 case PUNT_TYPE_IP_PROTO:
329 return (punt_socket_register_ip_proto (vm,
330 pr->punt.ip_proto.af,
331 pr->punt.ip_proto.protocol,
333 case PUNT_TYPE_EXCEPTION:
334 return (punt_socket_register_exception (vm,
335 pr->punt.exception.reason,
343 vnet_punt_socket_del (vlib_main_t * vm, const punt_reg_t * pr)
345 punt_main_t *pm = &punt_main;
347 if (!pm->is_configured)
348 return clib_error_return (0, "socket is not configured");
353 return (punt_socket_unregister_l4 (pr->punt.l4.af,
354 pr->punt.l4.protocol,
356 case PUNT_TYPE_IP_PROTO:
357 return (punt_socket_unregister_ip_proto (pr->punt.ip_proto.af,
358 pr->punt.ip_proto.protocol));
359 case PUNT_TYPE_EXCEPTION:
360 return (punt_socket_unregister_exception (pr->punt.exception.reason));
367 * @brief Request IP L4 traffic punt to the local TCP/IP stack.
370 * - UDP is the only protocol supported in the current implementation
372 * @param vm vlib_main_t corresponding to the current thread
373 * @param af IP address family.
374 * @param protocol 8-bits L4 protocol value
377 * @param port 16-bits L4 (TCP/IP) port number when applicable (UDP only)
379 * @returns 0 on success, non-zero value otherwise
381 static clib_error_t *
382 punt_l4_add_del (vlib_main_t * vm,
383 ip_address_family_t af,
384 ip_protocol_t protocol, u16 port, bool is_add)
386 int is_ip4 = af == AF_IP4;
388 /* For now we only support TCP and UDP punt */
389 if (protocol != IP_PROTOCOL_UDP && protocol != IP_PROTOCOL_TCP)
390 return clib_error_return (0,
391 "only UDP (%d) and TCP (%d) protocols are supported, got %d",
392 IP_PROTOCOL_UDP, IP_PROTOCOL_TCP, protocol);
394 if (port == (u16) ~ 0)
396 if (protocol == IP_PROTOCOL_UDP)
397 udp_punt_unknown (vm, is_ip4, is_add);
398 else if (protocol == IP_PROTOCOL_TCP)
399 tcp_punt_unknown (vm, is_ip4, is_add);
406 const vlib_node_registration_t *punt_node =
407 is_ip4 ? &udp4_punt_node : &udp6_punt_node;
409 if (protocol == IP_PROTOCOL_TCP)
410 return clib_error_return (0, "punt TCP ports is not supported yet");
412 udp_register_dst_port (vm, port, punt_node->index, is_ip4);
418 if (protocol == IP_PROTOCOL_TCP)
419 return clib_error_return (0, "punt TCP ports is not supported yet");
421 udp_unregister_dst_port (vm, port, is_ip4);
428 * @brief Request exception traffic punt.
430 * @param reason Punting reason
432 * @returns 0 on success, non-zero value otherwise
434 static clib_error_t *
435 punt_exception_add_del (vlib_punt_reason_t reason, bool is_add)
437 punt_main_t *pm = &punt_main;
439 vnet_punt_reason_flag_t flag = vlib_punt_reason_get_flags (reason);
440 const char *node_name =
441 vnet_punt_reason_flag_is_IP6_PACKET (flag) ? "ip6-punt" : "ip4-punt";
443 rv = vlib_punt_register (pm->hdl, reason, node_name);
445 rv = vlib_punt_unregister (pm->hdl, reason, node_name);
449 return clib_error_return (0, is_add ? "Existing punting registration..." :
450 "Punting registration not found...");
454 vnet_punt_add_del (vlib_main_t * vm, const punt_reg_t * pr, bool is_add)
459 return (punt_l4_add_del (vm, pr->punt.l4.af, pr->punt.l4.protocol,
460 pr->punt.l4.port, is_add));
461 case PUNT_TYPE_EXCEPTION:
462 return punt_exception_add_del (pr->punt.exception.reason, is_add);
463 case PUNT_TYPE_IP_PROTO:
467 return (clib_error_return (0, "Unsupported punt type: %d", pr->type));
470 static clib_error_t *
471 punt_cli (vlib_main_t * vm,
472 unformat_input_t * input__, vlib_cli_command_t * cmd)
474 unformat_input_t line_input, *input = &line_input;
475 clib_error_t *error = NULL;
483 .protocol = IP_PROTOCOL_UDP,
486 .type = PUNT_TYPE_L4,
491 if (!unformat_user (input__, unformat_line_input, input))
494 while (unformat_check_input (input) != UNFORMAT_END_OF_INPUT)
496 if (unformat (input, "del"))
498 else if (unformat (input, "reason %U", unformat_punt_reason,
499 &pr.punt.exception.reason))
500 pr.type = PUNT_TYPE_EXCEPTION;
501 else if (unformat (input, "ipv4"))
502 pr.punt.l4.af = AF_IP4;
503 else if (unformat (input, "ipv6"))
504 pr.punt.l4.af = AF_IP6;
505 else if (unformat (input, "ip6"))
506 pr.punt.l4.af = AF_IP6;
507 else if (unformat (input, "%d", &port))
508 pr.punt.l4.port = port;
509 else if (unformat (input, "all"))
510 pr.punt.l4.port = ~0;
511 else if (unformat (input, "udp"))
512 pr.punt.l4.protocol = IP_PROTOCOL_UDP;
513 else if (unformat (input, "tcp"))
514 pr.punt.l4.protocol = IP_PROTOCOL_TCP;
517 error = clib_error_return (0, "parse error: '%U'",
518 format_unformat_error, input);
523 /* punt both IPv6 and IPv4 when used in CLI */
524 error = vnet_punt_add_del (vm, &pr, is_add);
527 clib_error_report (error);
531 unformat_free (input);
536 * The set of '<em>set punt</em>' commands allows specific IP traffic to
537 * be punted to the host TCP/IP stack
540 * - UDP is the only protocol supported in the current implementation
541 * - All TCP traffic is currently punted to the host by default
545 * Example of how to request NTP traffic to be punted
546 * @cliexcmd{set punt udp 125}
548 * Example of how to request all 'unknown' UDP traffic to be punted
549 * @cliexcmd{set punt udp all}
551 * Example of how to stop all 'unknown' UDP traffic to be punted
552 * @cliexcmd{set punt udp del all}
556 VLIB_CLI_COMMAND (punt_command, static) = {
558 .short_help = "set punt [IPV4|ip6|ipv6] [UDP|tcp] [del] [ALL|<port-num>]",
559 .function = punt_cli,
563 static clib_error_t *
564 punt_socket_register_cmd (vlib_main_t * vm,
565 unformat_input_t * input__,
566 vlib_cli_command_t * cmd)
568 unformat_input_t line_input, *input = &line_input;
570 clib_error_t *error = NULL;
577 .protocol = IP_PROTOCOL_UDP,
580 .type = PUNT_TYPE_L4,
584 if (!unformat_user (input__, unformat_line_input, input))
587 while (unformat_check_input (input) != UNFORMAT_END_OF_INPUT)
589 if (unformat (input, "ipv4"))
590 pr.punt.l4.af = AF_IP4;
591 else if (unformat (input, "ipv6"))
592 pr.punt.l4.af = AF_IP6;
593 else if (unformat (input, "udp"))
594 pr.punt.l4.protocol = IP_PROTOCOL_UDP;
595 else if (unformat (input, "tcp"))
596 pr.punt.l4.protocol = IP_PROTOCOL_TCP;
597 else if (unformat (input, "%d", &pr.punt.l4.port))
599 else if (unformat (input, "all"))
600 pr.punt.l4.port = ~0;
601 else if (unformat (input, "socket %s", &socket_name))
603 else if (unformat (input, "reason %U", unformat_punt_reason,
604 &pr.punt.exception.reason))
605 pr.type = PUNT_TYPE_EXCEPTION;
608 error = clib_error_return (0, "parse error: '%U'",
609 format_unformat_error, input);
615 error = clib_error_return (0, "socket name not specified");
617 error = vnet_punt_socket_add (vm, 1, &pr, (char *) socket_name);
620 unformat_free (input);
627 * @cliexcmd{punt socket register socket punt_l4_foo.sock}
631 VLIB_CLI_COMMAND (punt_socket_register_command, static) =
633 .path = "punt socket register",
634 .function = punt_socket_register_cmd,
635 .short_help = "punt socket register [IPV4|ipv6] [UDP|tcp] [ALL|<port-num>] socket <socket>",
640 static clib_error_t *
641 punt_socket_deregister_cmd (vlib_main_t * vm,
642 unformat_input_t * input__,
643 vlib_cli_command_t * cmd)
645 unformat_input_t line_input, *input = &line_input;
646 clib_error_t *error = NULL;
653 .protocol = IP_PROTOCOL_UDP,
656 .type = PUNT_TYPE_L4,
660 if (!unformat_user (input__, unformat_line_input, input))
663 while (unformat_check_input (input) != UNFORMAT_END_OF_INPUT)
665 if (unformat (input, "ipv4"))
666 pr.punt.l4.af = AF_IP4;
667 else if (unformat (input, "ipv6"))
668 pr.punt.l4.af = AF_IP6;
669 else if (unformat (input, "udp"))
670 pr.punt.l4.protocol = IP_PROTOCOL_UDP;
671 else if (unformat (input, "tcp"))
672 pr.punt.l4.protocol = IP_PROTOCOL_TCP;
673 else if (unformat (input, "%d", &pr.punt.l4.port))
675 else if (unformat (input, "all"))
676 pr.punt.l4.port = ~0;
677 else if (unformat (input, "reason %U", unformat_punt_reason,
678 &pr.punt.exception.reason))
679 pr.type = PUNT_TYPE_EXCEPTION;
682 error = clib_error_return (0, "parse error: '%U'",
683 format_unformat_error, input);
688 error = vnet_punt_socket_del (vm, &pr);
690 unformat_free (input);
697 * @cliexcmd{punt socket register}
700 VLIB_CLI_COMMAND (punt_socket_deregister_command, static) =
702 .path = "punt socket deregister",
703 .function = punt_socket_deregister_cmd,
704 .short_help = "punt socket deregister [IPV4|ipv6] [UDP|tcp] [ALL|<port-num>]",
710 punt_client_walk (punt_type_t pt, punt_client_walk_cb_t cb, void *ctx)
712 punt_main_t *pm = &punt_main;
721 hash_foreach(key, pci, pm->db.clients_by_l4_port,
723 cb (pool_elt_at_index(pm->punt_client_pool, pci), ctx);
728 case PUNT_TYPE_IP_PROTO:
733 hash_foreach(key, pci, pm->db.clients_by_ip_proto,
735 cb (pool_elt_at_index(pm->punt_client_pool, pci), ctx);
740 case PUNT_TYPE_EXCEPTION:
744 vec_foreach (pci, pm->db.clients_by_exception)
747 cb (pool_elt_at_index (pm->punt_client_pool, *pci), ctx);
756 format_punt_client (u8 * s, va_list * args)
758 punt_client_t *pc = va_arg (*args, punt_client_t *);
760 s = format (s, " punt ");
762 switch (pc->reg.type)
765 s = format (s, "%U %U port %d",
766 format_ip_address_family, pc->reg.punt.l4.af,
767 format_ip_protocol, pc->reg.punt.l4.protocol,
768 pc->reg.punt.l4.port);
770 case PUNT_TYPE_IP_PROTO:
771 s = format (s, "%U %U",
772 format_ip_address_family, pc->reg.punt.ip_proto.af,
773 format_ip_protocol, pc->reg.punt.ip_proto.protocol);
775 case PUNT_TYPE_EXCEPTION:
776 s = format (s, " %U", format_vlib_punt_reason,
777 pc->reg.punt.exception.reason);
781 s = format (s, " to socket %s \n", pc->caddr.sun_path);
787 punt_client_show_one (const punt_client_t * pc, void *ctx)
789 vlib_cli_output (ctx, "%U", format_punt_client, pc);
791 return (WALK_CONTINUE);
794 static clib_error_t *
795 punt_socket_show_cmd (vlib_main_t * vm,
796 unformat_input_t * input__, vlib_cli_command_t * cmd)
798 unformat_input_t line_input, *input = &line_input;
799 clib_error_t *error = NULL;
804 if (!unformat_user (input__, unformat_line_input, input))
807 while (unformat_check_input (input) != UNFORMAT_END_OF_INPUT)
809 if (unformat (input, "exception"))
810 pt = PUNT_TYPE_EXCEPTION;
811 else if (unformat (input, "l4"))
813 else if (unformat (input, "ip"))
814 pt = PUNT_TYPE_IP_PROTO;
817 error = clib_error_return (0, "parse error: '%U'",
818 format_unformat_error, input);
823 punt_client_walk (pt, punt_client_show_one, vm);
826 unformat_free (input);
833 * @cliexcmd{show punt socket ipv4}
836 VLIB_CLI_COMMAND (show_punt_socket_registration_command, static) =
838 .path = "show punt socket registrations",
839 .function = punt_socket_show_cmd,
840 .short_help = "show punt socket registrations [l4|exception]",
846 ip_punt_init (vlib_main_t * vm)
848 clib_error_t *error = NULL;
849 punt_main_t *pm = &punt_main;
850 vlib_thread_main_t *tm = vlib_get_thread_main ();
852 pm->is_configured = false;
853 pm->interface_output_node =
854 vlib_get_node_by_name (vm, (u8 *) "interface-output");
856 if ((error = vlib_call_init_function (vm, punt_init)))
859 pm->hdl = vlib_punt_client_register ("ip-punt");
861 vec_validate_aligned (pm->thread_data, tm->n_vlib_mains,
862 CLIB_CACHE_LINE_BYTES);
868 format_vnet_punt_reason_flags (u8 *s, va_list *args)
870 vnet_punt_reason_flag_t flag = va_arg (*args, int);
871 #define _(pos, len, value, name, str) \
872 if (vnet_punt_reason_flag_is_##name (flag)) \
873 s = format (s, "%s ", str);
875 foreach_vnet_punt_reason_flag
880 VLIB_INIT_FUNCTION (ip_punt_init);
882 static clib_error_t *
883 punt_config (vlib_main_t * vm, unformat_input_t * input)
885 punt_main_t *pm = &punt_main;
886 char *socket_path = 0;
888 while (unformat_check_input (input) != UNFORMAT_END_OF_INPUT)
890 if (unformat (input, "socket %s", &socket_path))
891 strncpy (pm->sun_path, socket_path, UNIX_PATH_MAX - 1);
893 return clib_error_return (0, "unknown input `%U'",
894 format_unformat_error, input);
897 if (socket_path == 0)
900 /* UNIX domain socket */
901 struct sockaddr_un addr;
902 if ((pm->socket_fd = socket (AF_UNIX, SOCK_DGRAM | SOCK_NONBLOCK, 0)) == -1)
904 return clib_error_return (0, "socket error");
907 clib_memset (&addr, 0, sizeof (addr));
908 addr.sun_family = AF_UNIX;
909 if (*socket_path == '\0')
911 *addr.sun_path = '\0';
912 strncpy (addr.sun_path + 1, socket_path + 1,
913 sizeof (addr.sun_path) - 2);
917 strncpy (addr.sun_path, socket_path, sizeof (addr.sun_path) - 1);
918 unlink (socket_path);
921 if (bind (pm->socket_fd, (struct sockaddr *) &addr, sizeof (addr)) == -1)
923 return clib_error_return (0, "bind error");
926 int n_bytes = 0x10000;
929 (pm->socket_fd, SOL_SOCKET, SO_SNDBUF, &n_bytes,
930 sizeof (n_bytes)) == -1)
932 return clib_error_return (0, "setsockopt error");
935 /* Register socket */
936 clib_file_main_t *fm = &file_main;
937 clib_file_t template = { 0 };
938 template.read_function = punt_socket_read_ready;
939 template.file_descriptor = pm->socket_fd;
940 template.description = format (0, "punt socket %s", socket_path);
941 pm->clib_file_index = clib_file_add (fm, &template);
943 pm->is_configured = true;
948 VLIB_CONFIG_FUNCTION (punt_config, "punt");
951 * fd.io coding-style-patch-verification: ON
954 * eval: (c-set-style "gnu")