examples/ipsec-secgw/rt.c

/* SPDX-License-Identifier: BSD-3-Clause
 * Copyright(c) 2016 Intel Corporation
 */

/*
 * Routing Table (RT)
 */
#include <sys/types.h>
#include <rte_lpm.h>
#include <rte_lpm6.h>
#include <rte_errno.h>
#include <rte_ip.h>

#include "ipsec.h"
#include "parser.h"

#define RT_IPV4_MAX_RULES       1024
#define RT_IPV6_MAX_RULES       1024

struct ip4_route {
        uint32_t ip;
        uint8_t depth;
        uint8_t if_out;
};

struct ip6_route {
        uint8_t ip[16];
        uint8_t depth;
        uint8_t if_out;
};

struct ip4_route rt_ip4[RT_IPV4_MAX_RULES];
uint32_t nb_rt_ip4;

struct ip6_route rt_ip6[RT_IPV4_MAX_RULES];
uint32_t nb_rt_ip6;

void
parse_rt_tokens(char **tokens, uint32_t n_tokens,
        struct parse_status *status)
{
        uint32_t ti;
        uint32_t *n_rts = NULL;
        struct ip4_route *route_ipv4 = NULL;
        struct ip6_route *route_ipv6 = NULL;

        if (strcmp(tokens[0], "ipv4") == 0) {
                n_rts = &nb_rt_ip4;
                route_ipv4 = &rt_ip4[*n_rts];

                APP_CHECK(*n_rts <= RT_IPV4_MAX_RULES - 1, status,
                        "too many rt rules, abort insertion\n");
                if (status->status < 0)
                        return;

        } else if (strcmp(tokens[0], "ipv6") == 0) {
                n_rts = &nb_rt_ip6;
                route_ipv6 = &rt_ip6[*n_rts];

                APP_CHECK(*n_rts <= RT_IPV6_MAX_RULES - 1, status,
                        "too many rt rules, abort insertion\n");
                if (status->status < 0)
                        return;
        } else {
                APP_CHECK(0, status, "unrecognized input \"%s\"",
                        tokens[0]);
                return;
        }

        for (ti = 1; ti < n_tokens; ti++) {
                if (strcmp(tokens[ti], "dst") == 0) {
                        INCREMENT_TOKEN_INDEX(ti, n_tokens, status);
                        if (status->status < 0)
                                return;

                        if (route_ipv4 != NULL) {
                                struct in_addr ip;
                                uint32_t depth = 0;

                                APP_CHECK(parse_ipv4_addr(tokens[ti],
                                        &ip, &depth) == 0, status,
                                        "unrecognized input \"%s\", "
                                        "expect valid ipv4 addr",
                                        tokens[ti]);
                                if (status->status < 0)
                                        return;
                                route_ipv4->ip = rte_bswap32(
                                        (uint32_t)ip.s_addr);
                                route_ipv4->depth = (uint8_t)depth;
                        } else {
                                struct in6_addr ip;
                                uint32_t depth;

                                APP_CHECK(parse_ipv6_addr(tokens[ti],
                                        &ip, &depth) == 0, status,
                                        "unrecognized input \"%s\", "
                                        "expect valid ipv6 address",
                                        tokens[ti]);
                                if (status->status < 0)
                                        return;
                                memcpy(route_ipv6->ip, ip.s6_addr, 16);
                                route_ipv6->depth = (uint8_t)depth;
                        }
                }

                if (strcmp(tokens[ti], "port") == 0) {
                        INCREMENT_TOKEN_INDEX(ti, n_tokens, status);
                        if (status->status < 0)
                                return;
                        APP_CHECK_TOKEN_IS_NUM(tokens, ti, status);
                        if (status->status < 0)
                                return;
                        if (route_ipv4 != NULL)
                                route_ipv4->if_out = atoi(tokens[ti]);
                        else
                                route_ipv6->if_out = atoi(tokens[ti]);
                }
        }

        *n_rts = *n_rts + 1;
}

void
rt_init(struct socket_ctx *ctx, int32_t socket_id)
{
        char name[PATH_MAX];
        uint32_t i;
        int32_t ret;
        struct rte_lpm *lpm;
        struct rte_lpm6 *lpm6;
        char a, b, c, d;
        struct rte_lpm_config conf = { 0 };
        struct rte_lpm6_config conf6 = { 0 };

        if (ctx == NULL)
                rte_exit(EXIT_FAILURE, "NULL context.\n");

        if (ctx->rt_ip4 != NULL)
                rte_exit(EXIT_FAILURE, "IPv4 Routing Table for socket %u "
                        "already initialized\n", socket_id);

        if (ctx->rt_ip6 != NULL)
                rte_exit(EXIT_FAILURE, "IPv6 Routing Table for socket %u "
                        "already initialized\n", socket_id);

        if (nb_rt_ip4 == 0 && nb_rt_ip6 == 0)
                RTE_LOG(WARNING, IPSEC, "No Routing rule specified\n");

        printf("Creating IPv4 Routing Table (RT) context with %u max routes\n",
                        RT_IPV4_MAX_RULES);

        /* create the LPM table */
        snprintf(name, sizeof(name), "%s_%u", "rt_ip4", socket_id);
        conf.max_rules = RT_IPV4_MAX_RULES;
        conf.number_tbl8s = RTE_LPM_TBL8_NUM_ENTRIES;
        lpm = rte_lpm_create(name, socket_id, &conf);
        if (lpm == NULL)
                rte_exit(EXIT_FAILURE, "Unable to create %s LPM table "
                        "on socket %d\n", name, socket_id);

        /* populate the LPM table */
        for (i = 0; i < nb_rt_ip4; i++) {
                ret = rte_lpm_add(lpm, rt_ip4[i].ip, rt_ip4[i].depth,
                        rt_ip4[i].if_out);
                if (ret < 0)
                        rte_exit(EXIT_FAILURE, "Fail to add entry num %u to %s "
                                "LPM table on socket %d\n", i, name, socket_id);

                uint32_t_to_char(rt_ip4[i].ip, &a, &b, &c, &d);
                printf("LPM: Adding route %hhu.%hhu.%hhu.%hhu/%hhu (%hhu)\n",
                                a, b, c, d, rt_ip4[i].depth,
                                rt_ip4[i].if_out);
        }

        snprintf(name, sizeof(name), "%s_%u", "rt_ip6", socket_id);
        conf6.max_rules = RT_IPV6_MAX_RULES;
        conf6.number_tbl8s = RTE_LPM_TBL8_NUM_ENTRIES;
        lpm6 = rte_lpm6_create(name, socket_id, &conf6);
        if (lpm6 == NULL)
                rte_exit(EXIT_FAILURE, "Unable to create %s LPM table "
                        "on socket %d\n", name, socket_id);

        /* populate the LPM table */
        for (i = 0; i < nb_rt_ip6; i++) {
                ret = rte_lpm6_add(lpm6, rt_ip6[i].ip, rt_ip6[i].depth,
                                rt_ip6[i].if_out);
                if (ret < 0)
                        rte_exit(EXIT_FAILURE, "Fail to add entry num %u to %s "
                                "LPM table on socket %d\n", i, name, socket_id);

                printf("LPM6: Adding route "
                        " %hx:%hx:%hx:%hx:%hx:%hx:%hx:%hx/%hhx (%hhx)\n",
                        (uint16_t)((rt_ip6[i].ip[0] << 8) | rt_ip6[i].ip[1]),
                        (uint16_t)((rt_ip6[i].ip[2] << 8) | rt_ip6[i].ip[3]),
                        (uint16_t)((rt_ip6[i].ip[4] << 8) | rt_ip6[i].ip[5]),
                        (uint16_t)((rt_ip6[i].ip[6] << 8) | rt_ip6[i].ip[7]),
                        (uint16_t)((rt_ip6[i].ip[8] << 8) | rt_ip6[i].ip[9]),
                        (uint16_t)((rt_ip6[i].ip[10] << 8) | rt_ip6[i].ip[11]),
                        (uint16_t)((rt_ip6[i].ip[12] << 8) | rt_ip6[i].ip[13]),
                        (uint16_t)((rt_ip6[i].ip[14] << 8) | rt_ip6[i].ip[15]),
                        rt_ip6[i].depth, rt_ip6[i].if_out);
        }

        ctx->rt_ip4 = (struct rt_ctx *)lpm;
        ctx->rt_ip6 = (struct rt_ctx *)lpm6;
}