Adding upstream version 9.1.upstream/9.1

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 304 insertions, 0 deletions

diff --git a/bgpd/bgp_pbr.h b/bgpd/bgp_pbr.h
new file mode 100644
index 0000000..ed143d9
--- /dev/null
+++ b/bgpd/bgp_pbr.h
@@ -0,0 +1,304 @@
+// SPDX-License-Identifier: GPL-2.0-or-later
+/*
+ * BGP pbr
+ * Copyright (C) 6WIND
+ */
+#ifndef __BGP_PBR_H__
+#define __BGP_PBR_H__
+
+#include "nexthop.h"
+#include "zclient.h"
+
+/* flowspec case: 0 to 3 actions maximum:
+ * 1 redirect
+ * 1 set dscp
+ * 1 set traffic rate
+ */
+#define ACTIONS_MAX_NUM 4
+enum bgp_pbr_action_enum {
+	ACTION_TRAFFICRATE = 1,
+	ACTION_TRAFFIC_ACTION = 2,
+	ACTION_REDIRECT = 3,
+	ACTION_MARKING = 4,
+	ACTION_REDIRECT_IP = 5
+};
+
+#define TRAFFIC_ACTION_SAMPLE     (1 << 0)
+#define TRAFFIC_ACTION_TERMINATE  (1 << 1)
+#define TRAFFIC_ACTION_DISTRIBUTE (1 << 2)
+
+#define OPERATOR_COMPARE_LESS_THAN    (1<<1)
+#define OPERATOR_COMPARE_GREATER_THAN (1<<2)
+#define OPERATOR_COMPARE_EQUAL_TO     (1<<3)
+#define OPERATOR_COMPARE_EXACT_MATCH  (1<<4)
+
+#define OPERATOR_UNARY_OR    (1<<1)
+#define OPERATOR_UNARY_AND   (1<<2)
+
+/* struct used to store values [0;65535]
+ * this can be used for port number of protocol
+ */
+#define BGP_PBR_MATCH_VAL_MAX 5
+
+struct bgp_pbr_match_val {
+	uint16_t value;
+	uint8_t compare_operator;
+	uint8_t unary_operator;
+};
+
+#define FRAGMENT_DONT  1
+#define FRAGMENT_IS    2
+#define FRAGMENT_FIRST 4
+#define FRAGMENT_LAST  8
+
+struct bgp_pbr_entry_action {
+	/* used to store enum bgp_pbr_action_enum enumerate */
+	uint8_t action;
+	union {
+		union {
+			uint8_t rate_info[4]; /* IEEE.754.1985 */
+			float rate;
+		} r __attribute__((aligned(8)));
+		struct _pbr_action {
+			uint8_t do_sample;
+			uint8_t filter;
+		} za;
+		vrf_id_t redirect_vrf;
+		struct _pbr_redirect_ip {
+			struct in_addr redirect_ip_v4;
+			struct in6_addr redirect_ip_v6;
+			uint8_t duplicate;
+		} zr;
+		uint8_t marking_dscp;
+	} u __attribute__((aligned(8)));
+};
+
+/* BGP Policy Route structure */
+struct bgp_pbr_entry_main {
+#define BGP_PBR_UNDEFINED	0
+#define BGP_PBR_IPSET		1
+#define BGP_PBR_IPRULE		2
+	uint8_t type;
+
+	/*
+	 * This is an enum but we are going to treat it as a uint8_t
+	 * for purpose of encoding/decoding
+	 */
+	afi_t afi;
+	safi_t safi;
+
+#define PREFIX_SRC_PRESENT (1 << 0)
+#define PREFIX_DST_PRESENT (1 << 1)
+	uint8_t match_bitmask_iprule;
+	uint8_t match_bitmask;
+
+	uint8_t match_src_port_num;
+	uint8_t match_dst_port_num;
+	uint8_t match_port_num;
+	uint8_t match_protocol_num;
+	uint8_t match_icmp_type_num;
+	uint8_t match_icmp_code_num;
+	uint8_t match_packet_length_num;
+	uint8_t match_dscp_num;
+	uint8_t match_tcpflags_num;
+	uint8_t match_fragment_num;
+	uint8_t match_flowlabel_num;
+
+	struct prefix src_prefix;
+	struct prefix dst_prefix;
+	uint8_t src_prefix_offset;
+	uint8_t dst_prefix_offset;
+
+#define PROTOCOL_UDP 17
+#define PROTOCOL_TCP 6
+#define PROTOCOL_ICMP 1
+#define PROTOCOL_ICMPV6 58
+	struct bgp_pbr_match_val protocol[BGP_PBR_MATCH_VAL_MAX];
+	struct bgp_pbr_match_val src_port[BGP_PBR_MATCH_VAL_MAX];
+	struct bgp_pbr_match_val dst_port[BGP_PBR_MATCH_VAL_MAX];
+	struct bgp_pbr_match_val port[BGP_PBR_MATCH_VAL_MAX];
+	struct bgp_pbr_match_val icmp_type[BGP_PBR_MATCH_VAL_MAX];
+	struct bgp_pbr_match_val icmp_code[BGP_PBR_MATCH_VAL_MAX];
+	struct bgp_pbr_match_val packet_length[BGP_PBR_MATCH_VAL_MAX];
+	struct bgp_pbr_match_val dscp[BGP_PBR_MATCH_VAL_MAX];
+	struct bgp_pbr_match_val flow_label[BGP_PBR_MATCH_VAL_MAX];
+
+	struct bgp_pbr_match_val tcpflags[BGP_PBR_MATCH_VAL_MAX];
+	struct bgp_pbr_match_val fragment[BGP_PBR_MATCH_VAL_MAX];
+
+	uint16_t action_num;
+	struct bgp_pbr_entry_action actions[ACTIONS_MAX_NUM];
+
+	vrf_id_t vrf_id;
+};
+
+struct bgp_pbr_interface {
+	RB_ENTRY(bgp_pbr_interface) id_entry;
+	char name[INTERFACE_NAMSIZ];
+};
+
+RB_HEAD(bgp_pbr_interface_head, bgp_pbr_interface);
+RB_PROTOTYPE(bgp_pbr_interface_head, bgp_pbr_interface, id_entry,
+	     bgp_pbr_interface_compare);
+
+extern int bgp_pbr_interface_compare(const struct bgp_pbr_interface *a,
+				     const struct bgp_pbr_interface *b);
+
+struct bgp_pbr_config {
+	struct bgp_pbr_interface_head ifaces_by_name_ipv4;
+	bool pbr_interface_any_ipv4;
+	struct bgp_pbr_interface_head ifaces_by_name_ipv6;
+	bool pbr_interface_any_ipv6;
+};
+
+extern struct bgp_pbr_config *bgp_pbr_cfg;
+
+struct bgp_pbr_rule {
+	uint32_t flags;
+	struct prefix src;
+	struct prefix dst;
+	struct bgp_pbr_action *action;
+	vrf_id_t vrf_id;
+	uint32_t unique;
+	uint32_t priority;
+	bool installed;
+	bool install_in_progress;
+	void *path;
+};
+
+struct bgp_pbr_match {
+	char ipset_name[ZEBRA_IPSET_NAME_SIZE];
+
+	/* mapped on enum ipset_type
+	 */
+	uint32_t type;
+
+	uint32_t flags;
+	uint8_t family;
+
+	uint16_t pkt_len_min;
+	uint16_t pkt_len_max;
+	uint16_t tcp_flags;
+	uint16_t tcp_mask_flags;
+	uint8_t dscp_value;
+	uint8_t fragment;
+	uint8_t protocol;
+	uint16_t flow_label;
+
+	vrf_id_t vrf_id;
+
+	/* unique identifier for ipset create transaction
+	 */
+	uint32_t unique;
+
+	/* unique identifier for iptable add transaction
+	 */
+	uint32_t unique2;
+
+	bool installed;
+	bool install_in_progress;
+
+	bool installed_in_iptable;
+	bool install_iptable_in_progress;
+
+	struct hash *entry_hash;
+
+	struct bgp_pbr_action *action;
+
+};
+
+struct bgp_pbr_match_entry {
+	struct bgp_pbr_match *backpointer;
+
+	uint32_t unique;
+
+	struct prefix src;
+	struct prefix dst;
+
+	uint16_t src_port_min;
+	uint16_t src_port_max;
+	uint16_t dst_port_min;
+	uint16_t dst_port_max;
+	uint8_t proto;
+
+	void *path;
+
+	bool installed;
+	bool install_in_progress;
+};
+
+struct bgp_pbr_action {
+
+	/*
+	 * The Unique identifier of this specific pbrms
+	 */
+	uint32_t unique;
+
+	uint32_t fwmark;
+
+	uint32_t table_id;
+
+	float rate;
+
+	/*
+	 * nexthop information, or drop information
+	 * contains src vrf_id and nh contains dest vrf_id
+	 */
+	vrf_id_t vrf_id;
+	struct nexthop nh;
+
+	bool installed;
+	bool install_in_progress;
+	uint32_t refcnt;
+	struct bgp *bgp;
+	afi_t afi;
+};
+
+extern struct bgp_pbr_rule *bgp_pbr_rule_lookup(vrf_id_t vrf_id,
+						uint32_t unique);
+
+extern struct bgp_pbr_action *bgp_pbr_action_rule_lookup(vrf_id_t vrf_id,
+							 uint32_t unique);
+
+extern struct bgp_pbr_match *bgp_pbr_match_ipset_lookup(vrf_id_t vrf_id,
+							uint32_t unique);
+
+extern struct bgp_pbr_match_entry *bgp_pbr_match_ipset_entry_lookup(
+					    vrf_id_t vrf_id, char *name,
+					    uint32_t unique);
+extern struct bgp_pbr_match *bgp_pbr_match_iptable_lookup(vrf_id_t vrf_id,
+							  uint32_t unique);
+
+extern void bgp_pbr_cleanup(struct bgp *bgp);
+extern void bgp_pbr_init(struct bgp *bgp);
+
+extern uint32_t bgp_pbr_rule_hash_key(const void *arg);
+extern bool bgp_pbr_rule_hash_equal(const void *arg1,
+				   const void *arg2);
+extern uint32_t bgp_pbr_action_hash_key(const void *arg);
+extern bool bgp_pbr_action_hash_equal(const void *arg1,
+				     const void *arg2);
+extern uint32_t bgp_pbr_match_entry_hash_key(const void *arg);
+extern bool bgp_pbr_match_entry_hash_equal(const void *arg1,
+					  const void *arg2);
+extern uint32_t bgp_pbr_match_hash_key(const void *arg);
+extern bool bgp_pbr_match_hash_equal(const void *arg1,
+				    const void *arg2);
+
+void bgp_pbr_print_policy_route(struct bgp_pbr_entry_main *api);
+
+struct bgp_path_info;
+extern void bgp_pbr_update_entry(struct bgp *bgp, const struct prefix *p,
+				 struct bgp_path_info *new_select, afi_t afi,
+				 safi_t safi, bool nlri_update);
+
+/* bgp pbr utilities */
+extern struct bgp_pbr_interface *pbr_interface_lookup(const char *name);
+extern void bgp_pbr_reset(struct bgp *bgp, afi_t afi);
+extern struct bgp_pbr_interface *bgp_pbr_interface_lookup(const char *name,
+				   struct bgp_pbr_interface_head *head);
+
+extern int bgp_pbr_build_and_validate_entry(const struct prefix *p,
+					    struct bgp_path_info *path,
+					    struct bgp_pbr_entry_main *api);
+#endif /* __BGP_PBR_H__ */