/* SPDX-License-Identifier: BSD-3-Clause * Copyright(c) 2016 Intel Corporation */ /* * Routing Table (RT) */ #include #include #include #include #include #include "ipsec.h" #include "parser.h" #define RT_IPV4_MAX_RULES 1024 #define RT_IPV6_MAX_RULES 1024 struct ip4_route { uint32_t ip; uint8_t depth; uint8_t if_out; }; struct ip6_route { uint8_t ip[16]; uint8_t depth; uint8_t if_out; }; struct ip4_route rt_ip4[RT_IPV4_MAX_RULES]; uint32_t nb_rt_ip4; struct ip6_route rt_ip6[RT_IPV4_MAX_RULES]; uint32_t nb_rt_ip6; void parse_rt_tokens(char **tokens, uint32_t n_tokens, struct parse_status *status) { uint32_t ti; uint32_t *n_rts = NULL; struct ip4_route *route_ipv4 = NULL; struct ip6_route *route_ipv6 = NULL; if (strcmp(tokens[0], "ipv4") == 0) { n_rts = &nb_rt_ip4; route_ipv4 = &rt_ip4[*n_rts]; APP_CHECK(*n_rts <= RT_IPV4_MAX_RULES - 1, status, "too many rt rules, abort insertion\n"); if (status->status < 0) return; } else if (strcmp(tokens[0], "ipv6") == 0) { n_rts = &nb_rt_ip6; route_ipv6 = &rt_ip6[*n_rts]; APP_CHECK(*n_rts <= RT_IPV6_MAX_RULES - 1, status, "too many rt rules, abort insertion\n"); if (status->status < 0) return; } else { APP_CHECK(0, status, "unrecognized input \"%s\"", tokens[0]); return; } for (ti = 1; ti < n_tokens; ti++) { if (strcmp(tokens[ti], "dst") == 0) { INCREMENT_TOKEN_INDEX(ti, n_tokens, status); if (status->status < 0) return; if (route_ipv4 != NULL) { struct in_addr ip; uint32_t depth = 0; APP_CHECK(parse_ipv4_addr(tokens[ti], &ip, &depth) == 0, status, "unrecognized input \"%s\", " "expect valid ipv4 addr", tokens[ti]); if (status->status < 0) return; route_ipv4->ip = rte_bswap32( (uint32_t)ip.s_addr); route_ipv4->depth = (uint8_t)depth; } else { struct in6_addr ip; uint32_t depth; APP_CHECK(parse_ipv6_addr(tokens[ti], &ip, &depth) == 0, status, "unrecognized input \"%s\", " "expect valid ipv6 address", tokens[ti]); if (status->status < 0) return; memcpy(route_ipv6->ip, ip.s6_addr, 16); route_ipv6->depth = (uint8_t)depth; } } if (strcmp(tokens[ti], "port") == 0) { INCREMENT_TOKEN_INDEX(ti, n_tokens, status); if (status->status < 0) return; APP_CHECK_TOKEN_IS_NUM(tokens, ti, status); if (status->status < 0) return; if (route_ipv4 != NULL) route_ipv4->if_out = atoi(tokens[ti]); else route_ipv6->if_out = atoi(tokens[ti]); } } *n_rts = *n_rts + 1; } void rt_init(struct socket_ctx *ctx, int32_t socket_id) { char name[PATH_MAX]; uint32_t i; int32_t ret; struct rte_lpm *lpm; struct rte_lpm6 *lpm6; char a, b, c, d; struct rte_lpm_config conf = { 0 }; struct rte_lpm6_config conf6 = { 0 }; if (ctx == NULL) rte_exit(EXIT_FAILURE, "NULL context.\n"); if (ctx->rt_ip4 != NULL) rte_exit(EXIT_FAILURE, "IPv4 Routing Table for socket %u " "already initialized\n", socket_id); if (ctx->rt_ip6 != NULL) rte_exit(EXIT_FAILURE, "IPv6 Routing Table for socket %u " "already initialized\n", socket_id); if (nb_rt_ip4 == 0 && nb_rt_ip6 == 0) RTE_LOG(WARNING, IPSEC, "No Routing rule specified\n"); printf("Creating IPv4 Routing Table (RT) context with %u max routes\n", RT_IPV4_MAX_RULES); /* create the LPM table */ snprintf(name, sizeof(name), "%s_%u", "rt_ip4", socket_id); conf.max_rules = RT_IPV4_MAX_RULES; conf.number_tbl8s = RTE_LPM_TBL8_NUM_ENTRIES; lpm = rte_lpm_create(name, socket_id, &conf); if (lpm == NULL) rte_exit(EXIT_FAILURE, "Unable to create %s LPM table " "on socket %d\n", name, socket_id); /* populate the LPM table */ for (i = 0; i < nb_rt_ip4; i++) { ret = rte_lpm_add(lpm, rt_ip4[i].ip, rt_ip4[i].depth, rt_ip4[i].if_out); if (ret < 0) rte_exit(EXIT_FAILURE, "Fail to add entry num %u to %s " "LPM table on socket %d\n", i, name, socket_id); uint32_t_to_char(rt_ip4[i].ip, &a, &b, &c, &d); printf("LPM: Adding route %hhu.%hhu.%hhu.%hhu/%hhu (%hhu)\n", a, b, c, d, rt_ip4[i].depth, rt_ip4[i].if_out); } snprintf(name, sizeof(name), "%s_%u", "rt_ip6", socket_id); conf6.max_rules = RT_IPV6_MAX_RULES; conf6.number_tbl8s = RTE_LPM_TBL8_NUM_ENTRIES; lpm6 = rte_lpm6_create(name, socket_id, &conf6); if (lpm6 == NULL) rte_exit(EXIT_FAILURE, "Unable to create %s LPM table " "on socket %d\n", name, socket_id); /* populate the LPM table */ for (i = 0; i < nb_rt_ip6; i++) { ret = rte_lpm6_add(lpm6, rt_ip6[i].ip, rt_ip6[i].depth, rt_ip6[i].if_out); if (ret < 0) rte_exit(EXIT_FAILURE, "Fail to add entry num %u to %s " "LPM table on socket %d\n", i, name, socket_id); printf("LPM6: Adding route " " %hx:%hx:%hx:%hx:%hx:%hx:%hx:%hx/%hhx (%hhx)\n", (uint16_t)((rt_ip6[i].ip[0] << 8) | rt_ip6[i].ip[1]), (uint16_t)((rt_ip6[i].ip[2] << 8) | rt_ip6[i].ip[3]), (uint16_t)((rt_ip6[i].ip[4] << 8) | rt_ip6[i].ip[5]), (uint16_t)((rt_ip6[i].ip[6] << 8) | rt_ip6[i].ip[7]), (uint16_t)((rt_ip6[i].ip[8] << 8) | rt_ip6[i].ip[9]), (uint16_t)((rt_ip6[i].ip[10] << 8) | rt_ip6[i].ip[11]), (uint16_t)((rt_ip6[i].ip[12] << 8) | rt_ip6[i].ip[13]), (uint16_t)((rt_ip6[i].ip[14] << 8) | rt_ip6[i].ip[15]), rt_ip6[i].depth, rt_ip6[i].if_out); } ctx->rt_ip4 = (struct rt_ctx *)lpm; ctx->rt_ip6 = (struct rt_ctx *)lpm6; }