bgpd/bgp_pbr.h

   1 /*
   2  * BGP pbr
   3  * Copyright (C) 6WIND
   4  *
   5  * FRR is free software; you can redistribute it and/or modify it
   6  * under the terms of the GNU General Public License as published by the
   7  * Free Software Foundation; either version 2, or (at your option) any
   8  * later version.
   9  *
  10  * FRR is distributed in the hope that it will be useful, but
  11  * WITHOUT ANY WARRANTY; without even the implied warranty of
  12  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  13  * General Public License for more details.
  14  *
  15  * You should have received a copy of the GNU General Public License along
  16  * with this program; see the file COPYING; if not, write to the Free Software
  17  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
  18  */
  19 #ifndef __BGP_PBR_H__
  20 #define __BGP_PBR_H__
  21
  22 #include "nexthop.h"
  23 #include "zclient.h"
  24
  25 /* flowspec case: 0 to 3 actions maximum:
  26  * 1 redirect
  27  * 1 set dscp
  28  * 1 set traffic rate
  29  */
  30 #define ACTIONS_MAX_NUM 4
  31 enum bgp_pbr_action_enum {
  32         ACTION_TRAFFICRATE = 1,
  33         ACTION_TRAFFIC_ACTION = 2,
  34         ACTION_REDIRECT = 3,
  35         ACTION_MARKING = 4,
  36         ACTION_REDIRECT_IP = 5
  37 };
  38
  39 #define TRAFFIC_ACTION_SAMPLE     (1 << 0)
  40 #define TRAFFIC_ACTION_TERMINATE  (1 << 1)
  41 #define TRAFFIC_ACTION_DISTRIBUTE (1 << 2)
  42
  43 #define OPERATOR_COMPARE_LESS_THAN    (1<<1)
  44 #define OPERATOR_COMPARE_GREATER_THAN (1<<2)
  45 #define OPERATOR_COMPARE_EQUAL_TO     (1<<3)
  46 #define OPERATOR_COMPARE_EXACT_MATCH  (1<<4)
  47
  48 #define OPERATOR_UNARY_OR    (1<<1)
  49 #define OPERATOR_UNARY_AND   (1<<2)
  50
  51 /* struct used to store values [0;65535]
  52  * this can be used for port number of protocol
  53  */
  54 #define BGP_PBR_MATCH_VAL_MAX 5
  55
  56 struct bgp_pbr_match_val {
  57         uint16_t value;
  58         uint8_t compare_operator;
  59         uint8_t unary_operator;
  60 };
  61
  62 #define FRAGMENT_DONT  1
  63 #define FRAGMENT_IS    2
  64 #define FRAGMENT_FIRST 4
  65 #define FRAGMENT_LAST  8
  66
  67 struct bgp_pbr_entry_action {
  68         /* used to store enum bgp_pbr_action_enum enumerate */
  69         uint8_t action;
  70         union {
  71                 union {
  72                         uint8_t rate_info[4]; /* IEEE.754.1985 */
  73                         float rate;
  74                 } r __attribute__((aligned(8)));
  75                 struct _pbr_action {
  76                         uint8_t do_sample;
  77                         uint8_t filter;
  78                 } za;
  79                 vrf_id_t redirect_vrf;
  80                 struct _pbr_redirect_ip {
  81                         struct in_addr redirect_ip_v4;
  82                         uint8_t duplicate;
  83                 } zr;
  84                 uint8_t marking_dscp;
  85         } u __attribute__((aligned(8)));
  86 };
  87
  88 /* BGP Policy Route structure */
  89 struct bgp_pbr_entry_main {
  90         uint8_t type;
  91         uint16_t instance;
  92
  93         uint32_t flags;
  94
  95         uint8_t message;
  96
  97         /*
  98          * This is an enum but we are going to treat it as a uint8_t
  99          * for purpose of encoding/decoding
 100          */
 101         afi_t afi;
 102         safi_t safi;
 103
 104 #define PREFIX_SRC_PRESENT (1 << 0)
 105 #define PREFIX_DST_PRESENT (1 << 1)
 106         uint8_t match_bitmask;
 107
 108         uint8_t match_src_port_num;
 109         uint8_t match_dst_port_num;
 110         uint8_t match_port_num;
 111         uint8_t match_protocol_num;
 112         uint8_t match_icmp_type_num;
 113         uint8_t match_icmp_code_num;
 114         uint8_t match_packet_length_num;
 115         uint8_t match_dscp_num;
 116         uint8_t match_tcpflags_num;
 117         uint8_t match_fragment_num;
 118
 119         struct prefix src_prefix;
 120         struct prefix dst_prefix;
 121
 122 #define PROTOCOL_UDP 17
 123 #define PROTOCOL_TCP 6
 124 #define PROTOCOL_ICMP 1
 125         struct bgp_pbr_match_val protocol[BGP_PBR_MATCH_VAL_MAX];
 126         struct bgp_pbr_match_val src_port[BGP_PBR_MATCH_VAL_MAX];
 127         struct bgp_pbr_match_val dst_port[BGP_PBR_MATCH_VAL_MAX];
 128         struct bgp_pbr_match_val port[BGP_PBR_MATCH_VAL_MAX];
 129         struct bgp_pbr_match_val icmp_type[BGP_PBR_MATCH_VAL_MAX];
 130         struct bgp_pbr_match_val icmp_code[BGP_PBR_MATCH_VAL_MAX];
 131         struct bgp_pbr_match_val packet_length[BGP_PBR_MATCH_VAL_MAX];
 132         struct bgp_pbr_match_val dscp[BGP_PBR_MATCH_VAL_MAX];
 133
 134         struct bgp_pbr_match_val tcpflags[BGP_PBR_MATCH_VAL_MAX];
 135         struct bgp_pbr_match_val fragment[BGP_PBR_MATCH_VAL_MAX];
 136
 137         uint16_t action_num;
 138         struct bgp_pbr_entry_action actions[ACTIONS_MAX_NUM];
 139
 140         uint8_t distance;
 141
 142         uint32_t metric;
 143
 144         route_tag_t tag;
 145
 146         uint32_t mtu;
 147
 148         vrf_id_t vrf_id;
 149 };
 150
 151 struct bgp_pbr_interface {
 152         RB_ENTRY(bgp_pbr_interface) id_entry;
 153         char name[INTERFACE_NAMSIZ];
 154 };
 155
 156 RB_HEAD(bgp_pbr_interface_head, bgp_pbr_interface);
 157 RB_PROTOTYPE(bgp_pbr_interface_head, bgp_pbr_interface, id_entry,
 158              bgp_pbr_interface_compare);
 159
 160 extern int bgp_pbr_interface_compare(const struct bgp_pbr_interface *a,
 161                                      const struct bgp_pbr_interface *b);
 162
 163 struct bgp_pbr_config {
 164         struct bgp_pbr_interface_head ifaces_by_name_ipv4;
 165         bool pbr_interface_any_ipv4;
 166 };
 167
 168 extern struct bgp_pbr_config *bgp_pbr_cfg;
 169
 170 struct bgp_pbr_match {
 171         char ipset_name[ZEBRA_IPSET_NAME_SIZE];
 172
 173         /* mapped on enum ipset_type
 174          */
 175         uint32_t type;
 176
 177         uint32_t flags;
 178
 179         uint16_t pkt_len_min;
 180         uint16_t pkt_len_max;
 181         uint16_t tcp_flags;
 182         uint16_t tcp_mask_flags;
 183         uint8_t dscp_value;
 184         uint8_t fragment;
 185
 186         vrf_id_t vrf_id;
 187
 188         /* unique identifier for ipset create transaction
 189          */
 190         uint32_t unique;
 191
 192         /* unique identifier for iptable add transaction
 193          */
 194         uint32_t unique2;
 195
 196         bool installed;
 197         bool install_in_progress;
 198
 199         bool installed_in_iptable;
 200         bool install_iptable_in_progress;
 201
 202         struct hash *entry_hash;
 203
 204         struct bgp_pbr_action *action;
 205
 206 };
 207
 208 struct bgp_pbr_match_entry {
 209         struct bgp_pbr_match *backpointer;
 210
 211         uint32_t unique;
 212
 213         struct prefix src;
 214         struct prefix dst;
 215
 216         uint16_t src_port_min;
 217         uint16_t src_port_max;
 218         uint16_t dst_port_min;
 219         uint16_t dst_port_max;
 220         uint8_t proto;
 221
 222         void *path;
 223
 224         bool installed;
 225         bool install_in_progress;
 226 };
 227
 228 struct bgp_pbr_action {
 229
 230         /*
 231          * The Unique identifier of this specific pbrms
 232          */
 233         uint32_t unique;
 234
 235         uint32_t fwmark;
 236
 237         uint32_t table_id;
 238
 239         float rate;
 240
 241         /*
 242          * nexthop information, or drop information
 243          * contains src vrf_id and nh contains dest vrf_id
 244          */
 245         vrf_id_t vrf_id;
 246         struct nexthop nh;
 247
 248         bool installed;
 249         bool install_in_progress;
 250         uint32_t refcnt;
 251         struct bgp *bgp;
 252 };
 253
 254 extern struct bgp_pbr_action *bgp_pbr_action_rule_lookup(vrf_id_t vrf_id,
 255                                                          uint32_t unique);
 256
 257 extern struct bgp_pbr_match *bgp_pbr_match_ipset_lookup(vrf_id_t vrf_id,
 258                                                         uint32_t unique);
 259
 260 extern struct bgp_pbr_match_entry *bgp_pbr_match_ipset_entry_lookup(
 261                                             vrf_id_t vrf_id, char *name,
 262                                             uint32_t unique);
 263 extern struct bgp_pbr_match *bgp_pbr_match_iptable_lookup(vrf_id_t vrf_id,
 264                                                           uint32_t unique);
 265
 266 extern void bgp_pbr_cleanup(struct bgp *bgp);
 267 extern void bgp_pbr_init(struct bgp *bgp);
 268
 269 extern uint32_t bgp_pbr_action_hash_key(void *arg);
 270 extern bool bgp_pbr_action_hash_equal(const void *arg1,
 271                                      const void *arg2);
 272 extern uint32_t bgp_pbr_match_entry_hash_key(void *arg);
 273 extern bool bgp_pbr_match_entry_hash_equal(const void *arg1,
 274                                           const void *arg2);
 275 extern uint32_t bgp_pbr_match_hash_key(void *arg);
 276 extern bool bgp_pbr_match_hash_equal(const void *arg1,
 277                                     const void *arg2);
 278
 279 void bgp_pbr_print_policy_route(struct bgp_pbr_entry_main *api);
 280
 281 struct bgp_node;
 282 struct bgp_path_info;
 283 extern void bgp_pbr_update_entry(struct bgp *bgp, struct prefix *p,
 284                                  struct bgp_path_info *new_select, afi_t afi,
 285                                  safi_t safi, bool nlri_update);
 286
 287 /* bgp pbr utilities */
 288 extern struct bgp_pbr_interface *pbr_interface_lookup(const char *name);
 289 extern void bgp_pbr_reset(struct bgp *bgp, afi_t afi);
 290 extern struct bgp_pbr_interface *bgp_pbr_interface_lookup(const char *name,
 291                                    struct bgp_pbr_interface_head *head);
 292
 293 #endif /* __BGP_PBR_H__ */