#define __CNAT_SNAT_H__
#include <cnat/cnat_types.h>
+#include <cnat/cnat_session.h>
-always_inline int
-cnat_search_snat_prefix (ip46_address_t * addr, ip_address_family_t af)
+/* function to use to decide whether to snat connections in the output
+ feature */
+typedef void (*cnat_snat_policy_t) (vlib_main_t *vm, vlib_buffer_t *b,
+ cnat_session_t *session,
+ cnat_node_ctx_t *ctx, u8 *do_snat);
+
+typedef struct cnat_snat_policy_main_t_
{
- /* Returns 0 if addr matches any of the listed prefixes */
- cnat_snat_pfx_table_t *table = &cnat_main.snat_pfx_table;
- clib_bihash_kv_24_8_t kv, val;
- int i, n_p, rv;
- n_p = vec_len (table->meta[af].prefix_lengths_in_search_order);
- if (AF_IP4 == af)
- {
- kv.key[0] = addr->ip4.as_u32;
- kv.key[1] = 0;
- }
- else
- {
- kv.key[0] = addr->as_u64[0];
- kv.key[1] = addr->as_u64[1];
- }
+ /* SNAT policy for the output feature node */
+ cnat_snat_policy_t snat_policy;
- /*
- * start search from a mask length same length or shorter.
- * we don't want matches longer than the mask passed
- */
- i = 0;
- for (; i < n_p; i++)
- {
- int dst_address_length =
- table->meta[af].prefix_lengths_in_search_order[i];
- ip6_address_t *mask = &table->ip_masks[dst_address_length];
+} cnat_snat_policy_main_t;
- ASSERT (dst_address_length >= 0 && dst_address_length <= 128);
- /* As lengths are decreasing, masks are increasingly specific. */
- kv.key[0] &= mask->as_u64[0];
- kv.key[1] &= mask->as_u64[1];
- kv.key[2] = ((u64) af << 32) | dst_address_length;
- rv = clib_bihash_search_inline_2_24_8 (&table->ip_hash, &kv, &val);
- if (rv == 0)
- return 0;
- }
- return -1;
-}
+extern cnat_snat_policy_main_t cnat_snat_policy_main;
+extern void cnat_set_snat (ip4_address_t * ip4, ip6_address_t * ip6,
+ u32 sw_if_index);
extern int cnat_add_snat_prefix (ip_prefix_t * pfx);
extern int cnat_del_snat_prefix (ip_prefix_t * pfx);
+extern void cnat_set_snat_policy (cnat_snat_policy_t fp);
+
+int cnat_search_snat_prefix (ip46_address_t * addr, ip_address_family_t af);
/*
* fd.io coding-style-patch-verification: ON