src/plugins/nat/nat_ipfix_logging.h

   1 /*
   2  * nat_ipfix_logging.h - NAT Events IPFIX logging
   3  *
   4  * Copyright (c) 2016 Cisco and/or its affiliates.
   5  * Licensed under the Apache License, Version 2.0 (the "License");
   6  * you may not use this file except in compliance with the License.
   7  * You may obtain a copy of the License at:
   8  *
   9  *     http://www.apache.org/licenses/LICENSE-2.0
  10  *
  11  * Unless required by applicable law or agreed to in writing, software
  12  * distributed under the License is distributed on an "AS IS" BASIS,
  13  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  14  * See the License for the specific language governing permissions and
  15  * limitations under the License.
  16  */
  17 #ifndef __included_nat_ipfix_logging_h__
  18 #define __included_nat_ipfix_logging_h__
  19
  20 #include <nat/nat.h>
  21
  22 typedef enum {
  23   NAT_ADDRESSES_EXHAUTED = 3,
  24   NAT44_SESSION_CREATE = 4,
  25   NAT44_SESSION_DELETE = 5,
  26   NAT64_SESSION_CREATE = 6,
  27   NAT64_SESSION_DELETE = 7,
  28   NAT64_BIB_CREATE = 10,
  29   NAT64_BIB_DELETE = 11,
  30   NAT_PORTS_EXHAUSTED = 12,
  31   QUOTA_EXCEEDED = 13,
  32 } nat_event_t;
  33
  34 typedef enum {
  35   MAX_SESSION_ENTRIES = 1,
  36   MAX_BIB_ENTRIES = 2,
  37   MAX_ENTRIES_PER_USER = 3,
  38   MAX_FRAGMENTS_PENDING_REASSEMBLY = 5,
  39   MAX_FRAGMENTS_PENDING_REASSEMBLY_IP6,
  40 } quota_exceed_event_t;
  41
  42 typedef struct {
  43
  44   /** ipfix buffers under construction */
  45   vlib_buffer_t *nat44_session_buffer;
  46   vlib_buffer_t *addr_exhausted_buffer;
  47   vlib_buffer_t *max_entries_per_user_buffer;
  48   vlib_buffer_t *max_sessions_buffer;
  49   vlib_buffer_t *max_bibs_buffer;
  50   vlib_buffer_t *max_frags_ip4_buffer;
  51   vlib_buffer_t *max_frags_ip6_buffer;
  52   vlib_buffer_t *nat64_bib_buffer;
  53   vlib_buffer_t *nat64_ses_buffer;
  54
  55   /** frames containing ipfix buffers */
  56   vlib_frame_t *nat44_session_frame;
  57   vlib_frame_t *addr_exhausted_frame;
  58   vlib_frame_t *max_entries_per_user_frame;
  59   vlib_frame_t *max_sessions_frame;
  60   vlib_frame_t *max_bibs_frame;
  61   vlib_frame_t *max_frags_ip4_frame;
  62   vlib_frame_t *max_frags_ip6_frame;
  63   vlib_frame_t *nat64_bib_frame;
  64   vlib_frame_t *nat64_ses_frame;
  65
  66   /** next record offset */
  67   u32 nat44_session_next_record_offset;
  68   u32 addr_exhausted_next_record_offset;
  69   u32 max_entries_per_user_next_record_offset;
  70   u32 max_sessions_next_record_offset;
  71   u32 max_bibs_next_record_offset;
  72   u32 max_frags_ip4_next_record_offset;
  73   u32 max_frags_ip6_next_record_offset;
  74   u32 nat64_bib_next_record_offset;
  75   u32 nat64_ses_next_record_offset;
  76
  77 } snat_ipfix_per_thread_data_t;
  78
  79 typedef struct {
  80   /** NAT plugin IPFIX logging enabled */
  81   u8 enabled;
  82
  83   /** Time reference pair */
  84   u64 milisecond_time_0;
  85   f64 vlib_time_0;
  86
  87   /* Per thread data */
  88   snat_ipfix_per_thread_data_t *per_thread_data;
  89
  90   /** template IDs */
  91   u16 nat44_session_template_id;
  92   u16 addr_exhausted_template_id;
  93   u16 max_entries_per_user_template_id;
  94   u16 max_sessions_template_id;
  95   u16 max_bibs_template_id;
  96   u16 max_frags_ip4_template_id;
  97   u16 max_frags_ip6_template_id;
  98   u16 nat64_bib_template_id;
  99   u16 nat64_ses_template_id;
 100
 101   /** stream index */
 102   u32 stream_index;
 103
 104   /** vector of worker vlib mains */
 105   vlib_main_t **worker_vms;
 106
 107   /** nat data callbacks call counter */
 108   u16 call_counter;
 109
 110 } snat_ipfix_logging_main_t;
 111
 112 extern snat_ipfix_logging_main_t snat_ipfix_logging_main;
 113
 114 void snat_ipfix_logging_init (vlib_main_t * vm);
 115 int snat_ipfix_logging_enable_disable (int enable, u32 domain_id, u16 src_port);
 116 void snat_ipfix_logging_nat44_ses_create (u32 thread_index, u32 src_ip,
 117                                           u32 nat_src_ip,
 118                                           snat_protocol_t snat_proto,
 119                                           u16 src_port, u16 nat_src_port,
 120                                           u32 vrf_id);
 121 void snat_ipfix_logging_nat44_ses_delete (u32 thread_index, u32 src_ip,
 122                                           u32 nat_src_ip,
 123                                           snat_protocol_t snat_proto,
 124                                           u16 src_port, u16 nat_src_port,
 125                                           u32 vrf_id);
 126 void snat_ipfix_logging_addresses_exhausted(u32 thread_index, u32 pool_id);
 127 void snat_ipfix_logging_max_entries_per_user(u32 thread_index,
 128                                              u32 limit, u32 src_ip);
 129 void nat_ipfix_logging_max_sessions(u32 thread_index, u32 limit);
 130 void nat_ipfix_logging_max_bibs(u32 thread_index, u32 limit);
 131 void nat_ipfix_logging_max_fragments_ip4(u32 thread_index,
 132                                          u32 limit, ip4_address_t * src);
 133 void nat_ipfix_logging_max_fragments_ip6(u32 thread_index,
 134                                          u32 limit, ip6_address_t * src);
 135 void nat_ipfix_logging_nat64_session(u32 thread_index,
 136                                      ip6_address_t * src_ip,
 137                                      ip4_address_t * nat_src_ip, u8 proto,
 138                                      u16 src_port, u16 nat_src_port,
 139                                      ip6_address_t * dst_ip,
 140                                      ip4_address_t * nat_dst_ip,
 141                                      u16 dst_port, u16 nat_dst_port,
 142                                      u32 vrf_id, u8 is_create);
 143 void nat_ipfix_logging_nat64_bib(u32 thread_index,
 144                                  ip6_address_t * src_ip,
 145                                  ip4_address_t * nat_src_ip, u8 proto,
 146                                  u16 src_port, u16 nat_src_port,
 147                                  u32 vrf_id, u8 is_create);
 148
 149 #endif /* __included_nat_ipfix_logging_h__ */