]> git.proxmox.com Git - mirror_frr.git/blob - bgpd/bgp_evpn_private.h
bgpd: Validate large-community-list against UINT_MAX
[mirror_frr.git] / bgpd / bgp_evpn_private.h
1 /* BGP EVPN internal definitions
2 * Copyright (C) 2017 Cumulus Networks, Inc.
3 *
4 * This file is part of FRR.
5 *
6 * FRR is free software; you can redistribute it and/or modify it
7 * under the terms of the GNU General Public License as published by the
8 * Free Software Foundation; either version 2, or (at your option) any
9 * later version.
10 *
11 * FRR is distributed in the hope that it will be useful, but
12 * WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * General Public License for more details.
15 *
16 * You should have received a copy of the GNU General Public License
17 * along with FRR; see the file COPYING. If not, write to the Free
18 * Software Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA
19 * 02111-1307, USA.
20 */
21
22 #ifndef _BGP_EVPN_PRIVATE_H
23 #define _BGP_EVPN_PRIVATE_H
24
25 #include "vxlan.h"
26 #include "zebra.h"
27
28 #include "bgpd/bgpd.h"
29 #include "bgpd/bgp_ecommunity.h"
30
31 #define RT_ADDRSTRLEN 28
32
33 /* EVPN prefix lengths. This represents the sizeof struct evpn_addr
34 * in bits */
35 #define EVPN_ROUTE_PREFIXLEN (sizeof(struct evpn_addr) * 8)
36
37 /* EVPN route types. */
38 typedef enum {
39 BGP_EVPN_AD_ROUTE = 1, /* Ethernet Auto-Discovery (A-D) route */
40 BGP_EVPN_MAC_IP_ROUTE, /* MAC/IP Advertisement route */
41 BGP_EVPN_IMET_ROUTE, /* Inclusive Multicast Ethernet Tag route */
42 BGP_EVPN_ES_ROUTE, /* Ethernet Segment route */
43 BGP_EVPN_IP_PREFIX_ROUTE, /* IP Prefix route */
44 } bgp_evpn_route_type;
45
46 /*
47 * Hash table of EVIs. Right now, the only type of EVI supported is with
48 * VxLAN encapsulation, hence each EVI corresponds to a L2 VNI.
49 * The VNIs are not "created" through BGP but through some other interface
50 * on the system. This table stores VNIs that BGP comes to know as present
51 * on the system (through interaction with zebra) as well as pre-configured
52 * VNIs (which need to be defined in the system to become "live").
53 */
54 struct bgpevpn {
55 vni_t vni;
56 vrf_id_t tenant_vrf_id;
57 uint32_t flags;
58 #define VNI_FLAG_CFGD 0x1 /* VNI is user configured */
59 #define VNI_FLAG_LIVE 0x2 /* VNI is "live" */
60 #define VNI_FLAG_RD_CFGD 0x4 /* RD is user configured. */
61 #define VNI_FLAG_IMPRT_CFGD 0x8 /* Import RT is user configured */
62 #define VNI_FLAG_EXPRT_CFGD 0x10 /* Export RT is user configured */
63 #define VNI_FLAG_USE_TWO_LABELS 0x20 /* Attach both L2-VNI and L3-VNI if
64 needed for this VPN */
65
66 struct bgp *bgp_vrf; /* back pointer to the vrf instance */
67
68 /* Flag to indicate if we are
69 * advertising the g/w mac ip for
70 * this VNI*/
71 uint8_t advertise_gw_macip;
72
73 /* Flag to indicate if we are
74 * advertising subnet for this VNI */
75 uint8_t advertise_subnet;
76
77 /* Flag to indicate if we are advertising the svi mac ip for this VNI*/
78 uint8_t advertise_svi_macip;
79
80 /* Id for deriving the RD
81 * automatically for this VNI */
82 uint16_t rd_id;
83
84 /* RD for this VNI. */
85 struct prefix_rd prd;
86
87 /* Route type 3 field */
88 struct in_addr originator_ip;
89
90 /* PIM-SM MDT group for BUM flooding */
91 struct in_addr mcast_grp;
92
93 /* Import and Export RTs. */
94 struct list *import_rtl;
95 struct list *export_rtl;
96
97 /* Route table for EVPN routes for
98 * this VNI. */
99 struct bgp_table *route_table;
100
101 QOBJ_FIELDS
102 };
103
104 DECLARE_QOBJ_TYPE(bgpevpn)
105
106 struct evpnes {
107
108 /* Ethernet Segment Identifier */
109 esi_t esi;
110
111 /* es flags */
112 uint16_t flags;
113 #define EVPNES_LOCAL 0x01
114 #define EVPNES_REMOTE 0x02
115
116 /*
117 * Id for deriving the RD
118 * automatically for this ESI
119 */
120 uint16_t rd_id;
121
122 /* RD for this VNI. */
123 struct prefix_rd prd;
124
125 /* originator ip address */
126 struct ipaddr originator_ip;
127
128 /* list of VTEPs in the same site */
129 struct list *vtep_list;
130
131 /*
132 * Route table for EVPN routes for
133 * this ESI. - type4 routes
134 */
135 struct bgp_table *route_table;
136
137 QOBJ_FIELDS
138 };
139
140 DECLARE_QOBJ_TYPE(evpnes)
141
142 /* Mapping of Import RT to VNIs.
143 * The Import RTs of all VNIs are maintained in a hash table with each
144 * RT linking to all VNIs that will import routes matching this RT.
145 */
146 struct irt_node {
147 /* RT */
148 struct ecommunity_val rt;
149
150 /* List of VNIs importing routes matching this RT. */
151 struct list *vnis;
152 };
153
154 /* Mapping of Import RT to VRFs.
155 * The Import RTs of all VRFss are maintained in a hash table with each
156 * RT linking to all VRFs that will import routes matching this RT.
157 */
158 struct vrf_irt_node {
159 /* RT */
160 struct ecommunity_val rt;
161
162 /* List of VNIs importing routes matching this RT. */
163 struct list *vrfs;
164 };
165
166
167 #define RT_TYPE_IMPORT 1
168 #define RT_TYPE_EXPORT 2
169 #define RT_TYPE_BOTH 3
170
171 #define EVPN_DAD_DEFAULT_TIME 180 /* secs */
172 #define EVPN_DAD_DEFAULT_MAX_MOVES 5 /* default from RFC 7432 */
173 #define EVPN_DAD_DEFAULT_AUTO_RECOVERY_TIME 1800 /* secs */
174
175 struct bgp_evpn_info {
176 /* enable disable dup detect */
177 bool dup_addr_detect;
178
179 /* Detection time(M) */
180 int dad_time;
181 /* Detection max moves(N) */
182 uint32_t dad_max_moves;
183 /* Permanent freeze */
184 bool dad_freeze;
185 /* Recovery time */
186 uint32_t dad_freeze_time;
187
188 /* EVPN enable - advertise svi macip routes */
189 int advertise_svi_macip;
190
191 };
192
193 static inline int is_vrf_rd_configured(struct bgp *bgp_vrf)
194 {
195 return (CHECK_FLAG(bgp_vrf->vrf_flags, BGP_VRF_RD_CFGD));
196 }
197
198 static inline int bgp_evpn_vrf_rd_matches_existing(struct bgp *bgp_vrf,
199 struct prefix_rd *prd)
200 {
201 return (memcmp(&bgp_vrf->vrf_prd.val, prd->val, ECOMMUNITY_SIZE) == 0);
202 }
203
204 static inline vni_t bgpevpn_get_l3vni(struct bgpevpn *vpn)
205 {
206 return vpn->bgp_vrf ? vpn->bgp_vrf->l3vni : 0;
207 }
208
209 static inline void bgpevpn_get_rmac(struct bgpevpn *vpn, struct ethaddr *rmac)
210 {
211 memset(rmac, 0, sizeof(struct ethaddr));
212 if (!vpn->bgp_vrf)
213 return;
214 memcpy(rmac, &vpn->bgp_vrf->rmac, sizeof(struct ethaddr));
215 }
216
217 static inline struct list *bgpevpn_get_vrf_export_rtl(struct bgpevpn *vpn)
218 {
219 if (!vpn->bgp_vrf)
220 return NULL;
221
222 return vpn->bgp_vrf->vrf_export_rtl;
223 }
224
225 static inline struct list *bgpevpn_get_vrf_import_rtl(struct bgpevpn *vpn)
226 {
227 if (!vpn->bgp_vrf)
228 return NULL;
229
230 return vpn->bgp_vrf->vrf_import_rtl;
231 }
232
233 static inline void bgpevpn_unlink_from_l3vni(struct bgpevpn *vpn)
234 {
235 /* bail if vpn is not associated to bgp_vrf */
236 if (!vpn->bgp_vrf)
237 return;
238
239 UNSET_FLAG(vpn->flags, VNI_FLAG_USE_TWO_LABELS);
240 listnode_delete(vpn->bgp_vrf->l2vnis, vpn);
241
242 /* remove the backpointer to the vrf instance */
243 bgp_unlock(vpn->bgp_vrf);
244 vpn->bgp_vrf = NULL;
245 }
246
247 static inline void bgpevpn_link_to_l3vni(struct bgpevpn *vpn)
248 {
249 struct bgp *bgp_vrf = NULL;
250
251 /* bail if vpn is already associated to vrf */
252 if (vpn->bgp_vrf)
253 return;
254
255 bgp_vrf = bgp_lookup_by_vrf_id(vpn->tenant_vrf_id);
256 if (!bgp_vrf)
257 return;
258
259 /* associate the vpn to the bgp_vrf instance */
260 vpn->bgp_vrf = bgp_lock(bgp_vrf);
261 listnode_add_sort(bgp_vrf->l2vnis, vpn);
262
263 /* check if we are advertising two labels for this vpn */
264 if (!CHECK_FLAG(bgp_vrf->vrf_flags, BGP_VRF_L3VNI_PREFIX_ROUTES_ONLY))
265 SET_FLAG(vpn->flags, VNI_FLAG_USE_TWO_LABELS);
266 }
267
268 static inline int is_vni_configured(struct bgpevpn *vpn)
269 {
270 return (CHECK_FLAG(vpn->flags, VNI_FLAG_CFGD));
271 }
272
273 static inline int is_vni_live(struct bgpevpn *vpn)
274 {
275 return (CHECK_FLAG(vpn->flags, VNI_FLAG_LIVE));
276 }
277
278 static inline int is_rd_configured(struct bgpevpn *vpn)
279 {
280 return (CHECK_FLAG(vpn->flags, VNI_FLAG_RD_CFGD));
281 }
282
283 static inline int bgp_evpn_rd_matches_existing(struct bgpevpn *vpn,
284 struct prefix_rd *prd)
285 {
286 return (memcmp(&vpn->prd.val, prd->val, ECOMMUNITY_SIZE) == 0);
287 }
288
289 static inline int is_import_rt_configured(struct bgpevpn *vpn)
290 {
291 return (CHECK_FLAG(vpn->flags, VNI_FLAG_IMPRT_CFGD));
292 }
293
294 static inline int is_export_rt_configured(struct bgpevpn *vpn)
295 {
296 return (CHECK_FLAG(vpn->flags, VNI_FLAG_EXPRT_CFGD));
297 }
298
299 static inline int is_vni_param_configured(struct bgpevpn *vpn)
300 {
301 return (is_rd_configured(vpn) || is_import_rt_configured(vpn)
302 || is_export_rt_configured(vpn));
303 }
304
305 static inline void encode_es_rt_extcomm(struct ecommunity_val *eval,
306 struct ethaddr *mac)
307 {
308 memset(eval, 0, sizeof(struct ecommunity_val));
309 eval->val[0] = ECOMMUNITY_ENCODE_EVPN;
310 eval->val[1] = ECOMMUNITY_EVPN_SUBTYPE_ES_IMPORT_RT;
311 memcpy(&eval->val[2], mac, ETH_ALEN);
312 }
313
314 static inline void encode_rmac_extcomm(struct ecommunity_val *eval,
315 struct ethaddr *rmac)
316 {
317 memset(eval, 0, sizeof(*eval));
318 eval->val[0] = ECOMMUNITY_ENCODE_EVPN;
319 eval->val[1] = ECOMMUNITY_EVPN_SUBTYPE_ROUTERMAC;
320 memcpy(&eval->val[2], rmac, ETH_ALEN);
321 }
322
323 static inline void encode_default_gw_extcomm(struct ecommunity_val *eval)
324 {
325 memset(eval, 0, sizeof(*eval));
326 eval->val[0] = ECOMMUNITY_ENCODE_OPAQUE;
327 eval->val[1] = ECOMMUNITY_EVPN_SUBTYPE_DEF_GW;
328 }
329
330 static inline void encode_mac_mobility_extcomm(int static_mac, uint32_t seq,
331 struct ecommunity_val *eval)
332 {
333 memset(eval, 0, sizeof(*eval));
334 eval->val[0] = ECOMMUNITY_ENCODE_EVPN;
335 eval->val[1] = ECOMMUNITY_EVPN_SUBTYPE_MACMOBILITY;
336 if (static_mac)
337 eval->val[2] = ECOMMUNITY_EVPN_SUBTYPE_MACMOBILITY_FLAG_STICKY;
338 eval->val[4] = (seq >> 24) & 0xff;
339 eval->val[5] = (seq >> 16) & 0xff;
340 eval->val[6] = (seq >> 8) & 0xff;
341 eval->val[7] = seq & 0xff;
342 }
343
344 static inline void encode_na_flag_extcomm(struct ecommunity_val *eval,
345 uint8_t na_flag)
346 {
347 memset(eval, 0, sizeof(*eval));
348 eval->val[0] = ECOMMUNITY_ENCODE_EVPN;
349 eval->val[1] = ECOMMUNITY_EVPN_SUBTYPE_ND;
350 if (na_flag)
351 eval->val[2] |= ECOMMUNITY_EVPN_SUBTYPE_ND_ROUTER_FLAG;
352 }
353
354 static inline void ip_prefix_from_type5_prefix(struct prefix_evpn *evp,
355 struct prefix *ip)
356 {
357 memset(ip, 0, sizeof(struct prefix));
358 if (is_evpn_prefix_ipaddr_v4(evp)) {
359 ip->family = AF_INET;
360 ip->prefixlen = evp->prefix.prefix_addr.ip_prefix_length;
361 memcpy(&(ip->u.prefix4), &(evp->prefix.prefix_addr.ip.ip),
362 IPV4_MAX_BYTELEN);
363 } else if (is_evpn_prefix_ipaddr_v6(evp)) {
364 ip->family = AF_INET6;
365 ip->prefixlen = evp->prefix.prefix_addr.ip_prefix_length;
366 memcpy(&(ip->u.prefix6), &(evp->prefix.prefix_addr.ip.ip),
367 IPV6_MAX_BYTELEN);
368 }
369 }
370
371 static inline int is_evpn_prefix_default(const struct prefix *evp)
372 {
373 if (evp->family != AF_EVPN)
374 return 0;
375
376 return ((evp->u.prefix_evpn.prefix_addr.ip_prefix_length == 0) ?
377 1 : 0);
378 }
379
380 static inline void ip_prefix_from_type2_prefix(struct prefix_evpn *evp,
381 struct prefix *ip)
382 {
383 memset(ip, 0, sizeof(struct prefix));
384 if (is_evpn_prefix_ipaddr_v4(evp)) {
385 ip->family = AF_INET;
386 ip->prefixlen = IPV4_MAX_BITLEN;
387 memcpy(&(ip->u.prefix4), &(evp->prefix.macip_addr.ip.ip),
388 IPV4_MAX_BYTELEN);
389 } else if (is_evpn_prefix_ipaddr_v6(evp)) {
390 ip->family = AF_INET6;
391 ip->prefixlen = IPV6_MAX_BITLEN;
392 memcpy(&(ip->u.prefix6), &(evp->prefix.macip_addr.ip.ip),
393 IPV6_MAX_BYTELEN);
394 }
395 }
396
397 static inline void ip_prefix_from_evpn_prefix(struct prefix_evpn *evp,
398 struct prefix *ip)
399 {
400 if (evp->prefix.route_type == BGP_EVPN_MAC_IP_ROUTE)
401 ip_prefix_from_type2_prefix(evp, ip);
402 else if (evp->prefix.route_type == BGP_EVPN_IP_PREFIX_ROUTE)
403 ip_prefix_from_type5_prefix(evp, ip);
404 }
405
406 static inline void build_evpn_type2_prefix(struct prefix_evpn *p,
407 struct ethaddr *mac,
408 struct ipaddr *ip)
409 {
410 memset(p, 0, sizeof(struct prefix_evpn));
411 p->family = AF_EVPN;
412 p->prefixlen = EVPN_ROUTE_PREFIXLEN;
413 p->prefix.route_type = BGP_EVPN_MAC_IP_ROUTE;
414 memcpy(&p->prefix.macip_addr.mac.octet, mac->octet, ETH_ALEN);
415 p->prefix.macip_addr.ip.ipa_type = IPADDR_NONE;
416 if (ip)
417 memcpy(&p->prefix.macip_addr.ip, ip, sizeof(*ip));
418 }
419
420 static inline void build_type5_prefix_from_ip_prefix(struct prefix_evpn *evp,
421 struct prefix *ip_prefix)
422 {
423 struct ipaddr ip;
424
425 memset(&ip, 0, sizeof(struct ipaddr));
426 if (ip_prefix->family == AF_INET) {
427 ip.ipa_type = IPADDR_V4;
428 memcpy(&ip.ipaddr_v4, &ip_prefix->u.prefix4,
429 sizeof(struct in_addr));
430 } else {
431 ip.ipa_type = IPADDR_V6;
432 memcpy(&ip.ipaddr_v6, &ip_prefix->u.prefix6,
433 sizeof(struct in6_addr));
434 }
435
436 memset(evp, 0, sizeof(struct prefix_evpn));
437 evp->family = AF_EVPN;
438 evp->prefixlen = EVPN_ROUTE_PREFIXLEN;
439 evp->prefix.route_type = BGP_EVPN_IP_PREFIX_ROUTE;
440 evp->prefix.prefix_addr.ip_prefix_length = ip_prefix->prefixlen;
441 evp->prefix.prefix_addr.ip.ipa_type = ip.ipa_type;
442 memcpy(&evp->prefix.prefix_addr.ip, &ip, sizeof(struct ipaddr));
443 }
444
445 static inline void build_evpn_type3_prefix(struct prefix_evpn *p,
446 struct in_addr originator_ip)
447 {
448 memset(p, 0, sizeof(struct prefix_evpn));
449 p->family = AF_EVPN;
450 p->prefixlen = EVPN_ROUTE_PREFIXLEN;
451 p->prefix.route_type = BGP_EVPN_IMET_ROUTE;
452 p->prefix.imet_addr.ip.ipa_type = IPADDR_V4;
453 p->prefix.imet_addr.ip.ipaddr_v4 = originator_ip;
454 }
455
456 static inline void build_evpn_type4_prefix(struct prefix_evpn *p,
457 esi_t *esi,
458 struct in_addr originator_ip)
459 {
460 memset(p, 0, sizeof(struct prefix_evpn));
461 p->family = AF_EVPN;
462 p->prefixlen = EVPN_ROUTE_PREFIXLEN;
463 p->prefix.route_type = BGP_EVPN_ES_ROUTE;
464 p->prefix.es_addr.ip_prefix_length = IPV4_MAX_BITLEN;
465 p->prefix.es_addr.ip.ipa_type = IPADDR_V4;
466 p->prefix.es_addr.ip.ipaddr_v4 = originator_ip;
467 memcpy(&p->prefix.es_addr.esi, esi, sizeof(esi_t));
468 }
469
470 static inline int evpn_default_originate_set(struct bgp *bgp, afi_t afi,
471 safi_t safi)
472 {
473 if (afi == AFI_IP &&
474 CHECK_FLAG(bgp->af_flags[AFI_L2VPN][SAFI_EVPN],
475 BGP_L2VPN_EVPN_DEFAULT_ORIGINATE_IPV4))
476 return 1;
477 else if (afi == AFI_IP6 &&
478 CHECK_FLAG(bgp->af_flags[AFI_L2VPN][SAFI_EVPN],
479 BGP_L2VPN_EVPN_DEFAULT_ORIGINATE_IPV6))
480 return 1;
481 return 0;
482 }
483
484 static inline void es_get_system_mac(esi_t *esi,
485 struct ethaddr *mac)
486 {
487 /*
488 * for type-1 and type-3 ESIs,
489 * the system mac starts at val[1]
490 */
491 memcpy(mac, &esi->val[1], ETH_ALEN);
492 }
493
494 static inline int is_es_local(struct evpnes *es)
495 {
496 return CHECK_FLAG(es->flags, EVPNES_LOCAL) ? 1 : 0;
497 }
498
499 extern void bgp_evpn_install_uninstall_default_route(struct bgp *bgp_vrf,
500 afi_t afi, safi_t safi,
501 bool add);
502 extern void evpn_rt_delete_auto(struct bgp *, vni_t, struct list *);
503 extern void bgp_evpn_configure_export_rt_for_vrf(struct bgp *bgp_vrf,
504 struct ecommunity *ecomadd);
505 extern void bgp_evpn_unconfigure_export_rt_for_vrf(struct bgp *bgp_vrf,
506 struct ecommunity *ecomdel);
507 extern void bgp_evpn_configure_import_rt_for_vrf(struct bgp *bgp_vrf,
508 struct ecommunity *ecomadd);
509 extern void bgp_evpn_unconfigure_import_rt_for_vrf(struct bgp *bgp_vrf,
510 struct ecommunity *ecomdel);
511 extern int bgp_evpn_handle_export_rt_change(struct bgp *bgp,
512 struct bgpevpn *vpn);
513 extern void bgp_evpn_handle_autort_change(struct bgp *bgp);
514 extern void bgp_evpn_handle_vrf_rd_change(struct bgp *bgp_vrf, int withdraw);
515 extern void bgp_evpn_handle_rd_change(struct bgp *bgp, struct bgpevpn *vpn,
516 int withdraw);
517 extern int bgp_evpn_install_routes(struct bgp *bgp, struct bgpevpn *vpn);
518 extern int bgp_evpn_uninstall_routes(struct bgp *bgp, struct bgpevpn *vpn);
519 extern void bgp_evpn_map_vrf_to_its_rts(struct bgp *bgp_vrf);
520 extern void bgp_evpn_unmap_vrf_from_its_rts(struct bgp *bgp_vrf);
521 extern void bgp_evpn_map_vni_to_its_rts(struct bgp *bgp, struct bgpevpn *vpn);
522 extern void bgp_evpn_unmap_vni_from_its_rts(struct bgp *bgp,
523 struct bgpevpn *vpn);
524 extern void bgp_evpn_derive_auto_rt_import(struct bgp *bgp,
525 struct bgpevpn *vpn);
526 extern void bgp_evpn_derive_auto_rt_export(struct bgp *bgp,
527 struct bgpevpn *vpn);
528 extern void bgp_evpn_derive_auto_rd(struct bgp *bgp, struct bgpevpn *vpn);
529 extern void bgp_evpn_derive_auto_rd_for_vrf(struct bgp *bgp);
530 extern struct bgpevpn *bgp_evpn_lookup_vni(struct bgp *bgp, vni_t vni);
531 extern struct bgpevpn *bgp_evpn_new(struct bgp *bgp, vni_t vni,
532 struct in_addr originator_ip,
533 vrf_id_t tenant_vrf_id,
534 struct in_addr mcast_grp);
535 extern void bgp_evpn_free(struct bgp *bgp, struct bgpevpn *vpn);
536 extern struct evpnes *bgp_evpn_lookup_es(struct bgp *bgp, esi_t *esi);
537 extern struct evpnes *bgp_evpn_es_new(struct bgp *bgp, esi_t *esi,
538 struct ipaddr *originator_ip);
539 extern void bgp_evpn_es_free(struct bgp *bgp, struct evpnes *es);
540 extern bool bgp_evpn_lookup_l3vni_l2vni_table(vni_t vni);
541 #endif /* _BGP_EVPN_PRIVATE_H */