mir/ovs
2
0
Fork 0
mirror of https://github.com/openvswitch/ovs synced 2025-08-22 01:51:26 +00:00
Code Issues Releases Wiki Activity
ovs/ofproto/ofproto-dpif-ipfix.c
Ilya Maximets 19b8941620 tunnels: Remove support for deprecated STT and LISP. 
STT and LISP tunnel types were deprecated and marked for removal in
the following commits in the OVS 3.5 release:

  3b37a6154a59 ("netdev-vport: Deprecate STT tunnel port type.")
  8d7ac031c03d ("netdev-vport: Deprecate LISP tunnel port type.")

Main reasons were that STT was rejected in upstream kernel and the
LISP was never upstreamed as well and doesn't really have a supported
implementation.  Both protocols also appear to have lost their former
relevance.

Removing both now.  While at it, also fixing some small documentation
issues and comments.

Acked-by: Eelco Chaudron <echaudro@redhat.com>
Acked-by: Alin Serdean <aserdean@ovn.org>
Acked-by: Kevin Traynor <ktraynor@redhat.com>
Signed-off-by: Ilya Maximets <i.maximets@ovn.org>
2025-02-28 17:19:41 +01:00

3136 lines
112 KiB
C
Raw Permalink Blame History

/*
* Copyright (c) 2012, 2013, 2014, 2015, 2016, 2017 Nicira, Inc.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at:
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
#include <config.h>
#include "ofproto-dpif-ipfix.h"
#include <sys/time.h>
#include "byte-order.h"
#include "collectors.h"
#include "flow.h"
#include "hash.h"
#include "openvswitch/hmap.h"
#include "netdev.h"
#include "openvswitch/list.h"
#include "openvswitch/ofp-ipfix.h"
#include "openvswitch/ofpbuf.h"
#include "ofproto.h"
#include "ofproto-dpif.h"
#include "dp-packet.h"
#include "packets.h"
#include "openvswitch/poll-loop.h"
#include "sset.h"
#include "util.h"
#include "timeval.h"
#include "openvswitch/vlog.h"
VLOG_DEFINE_THIS_MODULE(ipfix);
static struct vlog_rate_limit rl = VLOG_RATE_LIMIT_INIT(1, 5);
static struct ovs_mutex mutex = OVS_MUTEX_INITIALIZER;
/* This variable represents a number of exporters that have been created
* throughout OvS lifecycle. It's used to identify Exporting Process. Since
* it's NOT decreased when exporter is destroyed, it will eventually overflow.
* Considering the maximum value it can hold and the fact that Exporting
* Process may be re-started with a different ID, this shouldn't be a problem.
*/
static uint32_t exporter_total_count;
/* Cf. IETF RFC 5101 Section 10.3.4. */
#define IPFIX_DEFAULT_COLLECTOR_PORT 4739
/* Cf. IETF RFC 5881 Setion 8. */
#define BFD_CONTROL_DEST_PORT 3784
#define BFD_ECHO_DEST_PORT 3785
enum ipfix_sampled_packet_type {
IPFIX_SAMPLED_PKT_UNKNOWN = 0x00,
IPFIX_SAMPLED_PKT_IPV4_OK = 0x01,
IPFIX_SAMPLED_PKT_IPV6_OK = 0x02,
IPFIX_SAMPLED_PKT_IPV4_ERROR = 0x03,
IPFIX_SAMPLED_PKT_IPV6_ERROR = 0x04,
IPFIX_SAMPLED_PKT_OTHERS = 0x05
};
/* The standard layer2SegmentId (ID 351) element is included in vDS to send
* the VxLAN tunnel's VNI. It is 64-bit long, the most significant byte is used
* to indicate the type of tunnel (0x01 = VxLAN, 0x02 = GRE) and the three or
* four least significant bytes hold the value of the layer 2 overlay network
* segment identifier: a 24-bit VxLAN or Geneve tunnel's VNI or a 32-bit GRE
* tunnel's TNI.
*
* Two new enterprise information elements are defined which are similar to
* laryerSegmentId but support 64-bit IDs:
* tunnelType (ID 891) and tunnelKey (ID 892).
* OVS currently doesn't support any tunnel types that require 64-bit IDs, but
* these elements are used for historical reasons.
*
* The enum dpif_ipfix_tunnel_type is to declare the types supported in the
* tunnelType element.
*/
enum dpif_ipfix_tunnel_type {
DPIF_IPFIX_TUNNEL_UNKNOWN = 0x00,
DPIF_IPFIX_TUNNEL_VXLAN = 0x01,
DPIF_IPFIX_TUNNEL_GRE = 0x02,
/* 0x03 - 0x06 are either reserved or previously used by no longer
* supported tunnel types, hence should not be used for any new ones. */
DPIF_IPFIX_TUNNEL_GENEVE = 0x07,
NUM_DPIF_IPFIX_TUNNEL
};
typedef struct ofputil_ipfix_stats ofproto_ipfix_stats;
struct dpif_ipfix_global_stats {
uint64_t dropped_packet_total_count;
uint64_t dropped_octet_total_count;
uint64_t packet_total_count;
uint64_t octet_total_count;
uint64_t octet_total_sum_of_squares;
uint64_t layer2_octet_total_count;
uint64_t tcp_ack_total_count;
uint64_t tcp_fin_total_count;
uint64_t tcp_psh_total_count;
uint64_t tcp_rst_total_count;
uint64_t tcp_syn_total_count;
uint64_t tcp_urg_total_count;
uint64_t post_mcast_packet_total_count;
uint64_t post_mcast_octet_total_count;
uint64_t in_ucast_packet_total_count;
uint64_t in_mcast_packet_total_count;
uint64_t in_bcast_packet_total_count;
uint64_t out_ucast_packet_total_count;
uint64_t out_bcast_packet_total_count;
};
struct dpif_ipfix_port {
struct hmap_node hmap_node; /* In struct dpif_ipfix's "ports" hmap. */
struct ofport *ofport; /* To retrieve port stats. */
odp_port_t odp_port;
enum dpif_ipfix_tunnel_type tunnel_type;
uint8_t tunnel_key_length;
uint32_t ifindex;
};
struct dpif_ipfix_domain {
struct hmap_node hmap_node; /* In struct dpif_ipfix_exporter's domains. */
time_t last_template_set_time;
};
struct dpif_ipfix_exporter {
uint32_t exporter_id; /* Exporting Process identifier */
uint32_t seq_number;
struct collectors *collectors;
struct hmap domains; /* Contains struct dpif_ipfix_domain indexed by
observation domain id. */
time_t last_stats_sent_time;
struct hmap cache_flow_key_map; /* ipfix_flow_cache_entry. */
struct ovs_list cache_flow_start_timestamp_list; /* ipfix_flow_cache_entry. */
uint32_t cache_active_timeout; /* In seconds. */
uint32_t cache_max_flows;
uint32_t stats_interval;
uint32_t template_interval;
char *virtual_obs_id;
uint8_t virtual_obs_len;
ofproto_ipfix_stats ofproto_stats;
struct dpif_ipfix_global_stats ipfix_global_stats;
};
struct dpif_ipfix_bridge_exporter {
struct dpif_ipfix_exporter exporter;
struct ofproto_ipfix_bridge_exporter_options *options;
uint32_t probability;
};
struct dpif_ipfix_flow_exporter {
struct dpif_ipfix_exporter exporter;
struct ofproto_ipfix_flow_exporter_options *options;
};
struct dpif_ipfix_flow_exporter_map_node {
struct hmap_node node;
struct dpif_ipfix_flow_exporter exporter;
};
struct dpif_ipfix {
struct dpif_ipfix_bridge_exporter bridge_exporter;
struct hmap flow_exporter_map; /* dpif_ipfix_flow_exporter_map_node. */
struct hmap ports; /* Contains "struct dpif_ipfix_port"s.
* It makes port lookups faster in sampling
* upcalls. */
struct ovs_refcount ref_cnt;
};
#define IPFIX_VERSION 0x000a
/* Cf. IETF RFC 5101 Section 3.1. */
OVS_PACKED(
struct ipfix_header {
ovs_be16 version; /* IPFIX_VERSION. */
ovs_be16 length; /* Length in bytes including this header. */
ovs_be32 export_time; /* Seconds since the epoch. */
ovs_be32 seq_number; /* Message sequence number. */
ovs_be32 obs_domain_id; /* Observation Domain ID. */
});
BUILD_ASSERT_DECL(sizeof(struct ipfix_header) == 16);
#define IPFIX_SET_ID_TEMPLATE 2
#define IPFIX_SET_ID_OPTION_TEMPLATE 3
enum ipfix_options_template {
IPFIX_OPTIONS_TEMPLATE_EXPORTER_STATS = 0,
NUM_IPFIX_OPTIONS_TEMPLATE
};
/* Cf. IETF RFC 5101 Section 3.3.2. */
OVS_PACKED(
struct ipfix_set_header {
ovs_be16 set_id; /* IPFIX_SET_ID_* or valid template ID for Data Sets. */
ovs_be16 length; /* Length of the set in bytes including header. */
});
BUILD_ASSERT_DECL(sizeof(struct ipfix_set_header) == 4);
/* Alternatives for templates at each layer. A template is defined by
* a combination of one value for each layer. */
enum ipfix_proto_l2 {
IPFIX_PROTO_L2_ETH = 0, /* No VLAN. */
IPFIX_PROTO_L2_VLAN,
NUM_IPFIX_PROTO_L2
};
enum ipfix_proto_l3 {
IPFIX_PROTO_L3_UNKNOWN = 0,
IPFIX_PROTO_L3_IPV4,
IPFIX_PROTO_L3_IPV6,
NUM_IPFIX_PROTO_L3
};
enum ipfix_proto_l4 {
IPFIX_PROTO_L4_UNKNOWN = 0,
IPFIX_PROTO_L4_TCP,
IPFIX_PROTO_L4_UDP,
IPFIX_PROTO_L4_SCTP,
IPFIX_PROTO_L4_ICMP,
NUM_IPFIX_PROTO_L4
};
enum ipfix_proto_tunnel {
IPFIX_PROTO_NOT_TUNNELED = 0,
IPFIX_PROTO_TUNNELED, /* Support gre, geneve and vxlan. */
NUM_IPFIX_PROTO_TUNNEL
};
/* Any Template ID > 255 is usable for Template Records. */
#define IPFIX_TEMPLATE_ID_MIN 256
/* Cf. IETF RFC 5101 Section 3.4.1. */
OVS_PACKED(
struct ipfix_template_record_header {
ovs_be16 template_id;
ovs_be16 field_count;
});
BUILD_ASSERT_DECL(sizeof(struct ipfix_template_record_header) == 4);
/* Cf. IETF RFC 5101 Section 3.4.2.2. */
OVS_PACKED(
struct ipfix_options_template_record_header {
ovs_be16 template_id; /* Template ID of Data Set is within 256-65535
range. */
ovs_be16 field_count; /* Number of all fields in this Options
* Template Record, including the Scope
* Fields. */
ovs_be16 scope_field_count; /* Number of scope fields. The number MUST BE
* greater than 0. */
});
BUILD_ASSERT_DECL(sizeof(struct ipfix_options_template_record_header) == 6);
enum ipfix_entity_id {
/* standard IPFIX elements */
#define IPFIX_ENTITY(ENUM, ID, SIZE, NAME) IPFIX_ENTITY_ID_##ENUM = ID,
#include "ofproto/ipfix-entities.def"
/* non-standard IPFIX elements */
#define IPFIX_SET_ENTERPRISE(v) (((v) | 0x8000))
#define IPFIX_ENTERPRISE_ENTITY(ENUM, ID, SIZE, NAME, ENTERPRISE) \
IPFIX_ENTITY_ID_##ENUM = IPFIX_SET_ENTERPRISE(ID),
#include "ofproto/ipfix-enterprise-entities.def"
};
enum ipfix_entity_size {
/* standard IPFIX elements */
#define IPFIX_ENTITY(ENUM, ID, SIZE, NAME) IPFIX_ENTITY_SIZE_##ENUM = SIZE,
#include "ofproto/ipfix-entities.def"
/* non-standard IPFIX elements */
#define IPFIX_ENTERPRISE_ENTITY(ENUM, ID, SIZE, NAME, ENTERPRISE) \
IPFIX_ENTITY_SIZE_##ENUM = SIZE,
#include "ofproto/ipfix-enterprise-entities.def"
};
enum ipfix_entity_enterprise {
/* standard IPFIX elements */
#define IPFIX_ENTITY(ENUM, ID, SIZE, NAME) IPFIX_ENTITY_ENTERPRISE_##ENUM = 0,
#include "ofproto/ipfix-entities.def"
/* non-standard IPFIX elements */
#define IPFIX_ENTERPRISE_ENTITY(ENUM, ID, SIZE, NAME, ENTERPRISE) \
IPFIX_ENTITY_ENTERPRISE_##ENUM = ENTERPRISE,
#include "ofproto/ipfix-enterprise-entities.def"
};
OVS_PACKED(
struct ipfix_template_field_specifier {
ovs_be16 element_id; /* IPFIX_ENTITY_ID_*. */
ovs_be16 field_length; /* Length of the field's value, in bytes.
* For Variable-Length element, it should be 65535.
*/
ovs_be32 enterprise; /* Enterprise number */
});
BUILD_ASSERT_DECL(sizeof(struct ipfix_template_field_specifier) == 8);
/* Cf. IETF RFC 5102 Section 5.11.6. */
enum ipfix_flow_direction {
INGRESS_FLOW = 0x00,
EGRESS_FLOW = 0x01,
NUM_IPFIX_FLOW_DIRECTION
};
/* Part of data record flow key for common metadata and Ethernet entities. */
OVS_PACKED(
struct ipfix_data_record_flow_key_common {
ovs_be32 observation_point_id; /* OBSERVATION_POINT_ID */
uint8_t flow_direction; /* FLOW_DIRECTION */
struct eth_addr source_mac_address; /* SOURCE_MAC_ADDRESS */
struct eth_addr destination_mac_address; /* DESTINATION_MAC_ADDRESS */
ovs_be16 ethernet_type; /* ETHERNET_TYPE */
uint8_t ethernet_header_length; /* ETHERNET_HEADER_LENGTH */
});
BUILD_ASSERT_DECL(sizeof(struct ipfix_data_record_flow_key_common) == 20);
/* Part of data record flow key for interface information. Since some of the
* elements have variable length, members of this structure should be appended
* to the 'struct dp_packet' one by one. */
OVS_PACKED(
struct ipfix_data_record_flow_key_iface {
ovs_be32 if_index; /* (INGRESS | EGRESS)_INTERFACE */
ovs_be32 if_type; /* (INGRESS | EGRESS)_INTERFACE_TYPE */
uint8_t if_name_len; /* Variable length element: INTERFACE_NAME */
char *if_name;
uint8_t if_descr_len; /* Variable length element: INTERFACE_DESCRIPTION */
char *if_descr;
});
BUILD_ASSERT_DECL(sizeof(struct ipfix_data_record_flow_key_iface) ==
10 + 2 * sizeof(char *));
/* Part of data record flow key for VLAN entities. */
OVS_PACKED(
struct ipfix_data_record_flow_key_vlan {
ovs_be16 vlan_id; /* VLAN_ID */
ovs_be16 dot1q_vlan_id; /* DOT1Q_VLAN_ID */
uint8_t dot1q_priority; /* DOT1Q_PRIORITY */
});
BUILD_ASSERT_DECL(sizeof(struct ipfix_data_record_flow_key_vlan) == 5);
/* Part of data record flow key for IP entities. */
/* XXX: Replace IP_TTL with MINIMUM_TTL and MAXIMUM_TTL? */
OVS_PACKED(
struct ipfix_data_record_flow_key_ip {
uint8_t ip_version; /* IP_VERSION */
uint8_t ip_ttl; /* IP_TTL */
uint8_t protocol_identifier; /* PROTOCOL_IDENTIFIER */
uint8_t ip_diff_serv_code_point; /* IP_DIFF_SERV_CODE_POINT */
uint8_t ip_precedence; /* IP_PRECEDENCE */
uint8_t ip_class_of_service; /* IP_CLASS_OF_SERVICE */
});
BUILD_ASSERT_DECL(sizeof(struct ipfix_data_record_flow_key_ip) == 6);
/* Part of data record flow key for IPv4 entities. */
OVS_PACKED(
struct ipfix_data_record_flow_key_ipv4 {
ovs_be32 source_ipv4_address; /* SOURCE_IPV4_ADDRESS */
ovs_be32 destination_ipv4_address; /* DESTINATION_IPV4_ADDRESS */
});
BUILD_ASSERT_DECL(sizeof(struct ipfix_data_record_flow_key_ipv4) == 8);
/* Part of data record flow key for IPv6 entities. */
OVS_PACKED(
struct ipfix_data_record_flow_key_ipv6 {
uint8_t source_ipv6_address[16]; /* SOURCE_IPV6_ADDRESS */
uint8_t destination_ipv6_address[16]; /* DESTINATION_IPV6_ADDRESS */
ovs_be32 flow_label_ipv6; /* FLOW_LABEL_IPV6 */
});
BUILD_ASSERT_DECL(sizeof(struct ipfix_data_record_flow_key_ipv6) == 36);
/* Part of data record flow key for TCP/UDP/SCTP entities. */
OVS_PACKED(
struct ipfix_data_record_flow_key_transport {
ovs_be16 source_transport_port; /* SOURCE_TRANSPORT_PORT */
ovs_be16 destination_transport_port; /* DESTINATION_TRANSPORT_PORT */
});
BUILD_ASSERT_DECL(sizeof(struct ipfix_data_record_flow_key_transport) == 4);
/* Part of data record flow key for ICMP entities. */
OVS_PACKED(
struct ipfix_data_record_flow_key_icmp {
uint8_t icmp_type; /* ICMP_TYPE_IPV4 / ICMP_TYPE_IPV6 */
uint8_t icmp_code; /* ICMP_CODE_IPV4 / ICMP_CODE_IPV6 */
});
BUILD_ASSERT_DECL(sizeof(struct ipfix_data_record_flow_key_icmp) == 2);
static uint8_t tunnel_protocol[NUM_DPIF_IPFIX_TUNNEL] = {
[DPIF_IPFIX_TUNNEL_VXLAN] = IPPROTO_UDP,
[DPIF_IPFIX_TUNNEL_GRE] = IPPROTO_GRE,
[DPIF_IPFIX_TUNNEL_GENEVE] = IPPROTO_UDP,
};
OVS_PACKED(
struct ipfix_data_record_flow_key_tunnel {
ovs_be32 tunnel_source_ipv4_address; /* TUNNEL_SOURCE_IPV4_ADDRESS */
ovs_be32 tunnel_destination_ipv4_address; /* TUNNEL_DESTINATION_IPV4_ADDRESS */
uint8_t tunnel_protocol_identifier; /* TUNNEL_PROTOCOL_IDENTIFIER */
ovs_be16 tunnel_source_transport_port; /* TUNNEL_SOURCE_TRANSPORT_PORT */
ovs_be16 tunnel_destination_transport_port; /* TUNNEL_DESTINATION_TRANSPORT_PORT */
uint8_t tunnel_type; /* TUNNEL_TYPE */
uint8_t tunnel_key_length; /* length of TUNNEL_KEY */
uint8_t tunnel_key[]; /* data of TUNNEL_KEY */
});
BUILD_ASSERT_DECL(sizeof(struct ipfix_data_record_flow_key_tunnel) == 15);
/* Cf. IETF RFC 5102 Section 5.11.3. */
enum ipfix_flow_end_reason {
IDLE_TIMEOUT = 0x01,
ACTIVE_TIMEOUT = 0x02,
END_OF_FLOW_DETECTED = 0x03,
FORCED_END = 0x04,
LACK_OF_RESOURCES = 0x05
};
/* Exporting Process Reliability Statistics data record. */
OVS_PACKED(
struct ipfix_data_record_exporter_stats {
/* Scope Fields */
ovs_be32 exporting_process_id; /* EXPORTING_PROCESS_ID */
/* Fields */
ovs_be64 not_sent_packet_total_count; /* NOT_SENT_PACKET_TOTAL_COUNT */
});
BUILD_ASSERT_DECL(sizeof(struct ipfix_data_record_exporter_stats) == 12);
/* Part of data record for common aggregated elements. */
OVS_PACKED(
struct ipfix_data_record_aggregated_common {
ovs_be32 flow_start_delta_microseconds; /* FLOW_START_DELTA_MICROSECONDS */
ovs_be32 flow_end_delta_microseconds; /* FLOW_END_DELTA_MICROSECONDS */
ovs_be64 dropped_packet_delta_count; /* DROPPED_PACKET_DELTA_COUNT */
ovs_be64 dropped_packet_total_count; /* DROPPED_PACKET_TOTAL_COUNT */
ovs_be64 packet_delta_count; /* PACKET_DELTA_COUNT */
ovs_be64 packet_total_count; /* PACKET_TOTAL_COUNT */
/* INGRESS_UNICAST_PACKET_TOTAL_COUNT */
ovs_be64 in_ucast_packet_total_count;
/* INGRESS_MULTICAST_PACKET_TOTAL_COUNT */
ovs_be64 in_mcast_packet_total_count;
/* INGRESS_BROADCAST_PACKET_TOTAL_COUNT */
ovs_be64 in_bcast_packet_total_count;
/* EGRESS_UNICAST_PACKET_TOTAL_COUNT */
ovs_be64 out_ucast_packet_total_count;
/* EGRESS_BROADCAST_PACKET_TOTAL_COUNT */
ovs_be64 out_bcast_packet_total_count;
ovs_be64 post_mcast_packet_delta_count; /* POST_MCAST_PACKET_DELTA_COUNT */
ovs_be64 post_mcast_packet_total_count; /* POST_MCAST_PACKET_TOTAL_COUNT */
ovs_be64 layer2_octet_delta_count; /* LAYER2_OCTET_DELTA_COUNT */
ovs_be64 layer2_octet_total_count; /* LAYER2_OCTET_TOTAL_COUNT */
uint8_t flow_end_reason; /* FLOW_END_REASON */
});
BUILD_ASSERT_DECL(sizeof(struct ipfix_data_record_aggregated_common) == 113);
/* Part of data record for IP aggregated elements. */
OVS_PACKED(
struct ipfix_data_record_aggregated_ip {
ovs_be64 dropped_octet_delta_count; /* DROPPED_OCTET_DELTA_COUNT */
ovs_be64 dropped_octet_total_count; /* DROPPED_OCTET_TOTAL_COUNT */
ovs_be64 octet_delta_count; /* OCTET_DELTA_COUNT */
ovs_be64 octet_total_count; /* OCTET_TOTAL_COUNT */
ovs_be64 octet_delta_sum_of_squares; /* OCTET_DELTA_SUM_OF_SQUARES */
ovs_be64 octet_total_sum_of_squares; /* OCTET_TOTAL_SUM_OF_SQUARES */
ovs_be64 minimum_ip_total_length; /* MINIMUM_IP_TOTAL_LENGTH */
ovs_be64 maximum_ip_total_length; /* MAXIMUM_IP_TOTAL_LENGTH */
ovs_be64 post_mcast_octet_delta_count; /* POST_MCAST_OCTET_DELTA_COUNT */
ovs_be64 post_mcast_octet_total_count; /* POST_MCAST_OCTET_TOTAL_COUNT */
});
BUILD_ASSERT_DECL(sizeof(struct ipfix_data_record_aggregated_ip) == 80);
/* Part of data record for TCP aggregated elements. */
OVS_PACKED(
struct ipfix_data_record_aggregated_tcp {
ovs_be64 tcp_ack_total_count; /* TCP_ACK_TOTAL_COUNT */
ovs_be64 tcp_fin_total_count; /* TCP_FIN_TOTAL_COUNT */
ovs_be64 tcp_psh_total_count; /* TCP_PSH_TOTAL_COUNT */
ovs_be64 tcp_rst_total_count; /* TCP_RST_TOTAL_COUNT */
ovs_be64 tcp_syn_total_count; /* TCP_SYN_TOTAL_COUNT */
ovs_be64 tcp_urg_total_count; /* TCP_URG_TOTAL_COUNT */
});
BUILD_ASSERT_DECL(sizeof(struct ipfix_data_record_aggregated_tcp) == 48);
/*
* Refer to RFC 7011, the length of Variable length element is 0~65535:
* In most case, it should be less than 255 octets:
* 0 1 2 3
* 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
* | Length (< 255)| Information Element |
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
* | ... continuing as needed |
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
*
* When it is greater than or equeal to 255 octets:
* 0 1 2 3
* 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
* | 255 | Length (0 to 65535) | IE |
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
* | ... continuing as needed |
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
*
*
* Now, only the virtual_obs_id whose length < 255 is implemented.
*/
#define IPFIX_VIRTUAL_OBS_MAX_LEN 254
/*
* support tunnel key for:
* VxLAN: 24-bit VNI,
* Geneve: 24-bit VNI,
* GRE: 32-bit key,
*/
#define MAX_TUNNEL_KEY_LEN 4
#define MAX_IF_NAME_LEN 64
#define MAX_IF_DESCR_LEN 128
/*
* Calculate interface information length in flow key.
* This is used to calculate max flow key length.
*/
#define FLOW_KEY_IFACE_LEN \
(sizeof(struct ipfix_data_record_flow_key_iface) \
- 2 * sizeof(char *) \
+ MAX_IF_NAME_LEN + MAX_IF_DESCR_LEN)
#define MAX_FLOW_KEY_LEN \
(sizeof(struct ipfix_data_record_flow_key_common) \
+ FLOW_KEY_IFACE_LEN \
+ sizeof(struct ipfix_data_record_flow_key_vlan) \
+ sizeof(struct ipfix_data_record_flow_key_ip) \
+ MAX(sizeof(struct ipfix_data_record_flow_key_ipv4), \
sizeof(struct ipfix_data_record_flow_key_ipv6)) \
+ MAX(sizeof(struct ipfix_data_record_flow_key_icmp), \
sizeof(struct ipfix_data_record_flow_key_transport)) \
+ sizeof(struct ipfix_data_record_flow_key_tunnel) \
+ MAX_TUNNEL_KEY_LEN)
#define MAX_DATA_RECORD_LEN \
(MAX_FLOW_KEY_LEN \
+ sizeof(struct ipfix_data_record_aggregated_common) \
+ sizeof(struct ipfix_data_record_aggregated_ip) \
+ sizeof(struct ipfix_data_record_aggregated_tcp))
#define MAX_OPTIONS_DATA_RECORD_LEN \
(sizeof(struct ipfix_data_record_exporter_stats))
/* Max length of a data set. To simplify the implementation, each
* data record is sent in a separate data set, so each data set
* contains at most one data record. */
#define MAX_DATA_SET_LEN \
(sizeof(struct ipfix_set_header) \
+ MAX(MAX_DATA_RECORD_LEN, \
MAX_OPTIONS_DATA_RECORD_LEN))
/* Max length of an IPFIX message. Arbitrarily set to accommodate low
* MTU. */
#define MAX_MESSAGE_LEN 1024
/* Cache structures. */
/* Flow key. */
struct ipfix_flow_key {
uint32_t obs_domain_id;
uint16_t template_id;
size_t flow_key_msg_part_size;
uint64_t flow_key_msg_part[DIV_ROUND_UP(MAX_FLOW_KEY_LEN, 8)];
};
/* Flow cache entry. */
struct ipfix_flow_cache_entry {
struct hmap_node flow_key_map_node;
struct ovs_list cache_flow_start_timestamp_list_node;
struct ipfix_flow_key flow_key;
/* Common aggregated elements. */
uint64_t flow_start_timestamp_usec;
uint64_t flow_end_timestamp_usec;
uint64_t dropped_packet_delta_count;
uint64_t dropped_packet_total_count;
uint64_t packet_delta_count;
uint64_t packet_total_count;
uint64_t in_ucast_packet_total_count;
uint64_t in_mcast_packet_total_count;
uint64_t in_bcast_packet_total_count;
uint64_t out_ucast_packet_total_count;
uint64_t out_bcast_packet_total_count;
uint64_t post_mcast_packet_total_count;
uint64_t post_mcast_packet_delta_count;
uint64_t post_mcast_octet_total_count;
uint64_t post_mcast_octet_delta_count;
uint64_t layer2_octet_delta_count;
uint64_t layer2_octet_total_count;
uint64_t dropped_octet_delta_count;
uint64_t dropped_octet_total_count;
uint64_t octet_delta_count;
uint64_t octet_total_count;
uint64_t octet_delta_sum_of_squares; /* 0 if not IP. */
uint64_t octet_total_sum_of_squares; /* 0 if not IP. */
uint16_t minimum_ip_total_length; /* 0 if not IP. */
uint16_t maximum_ip_total_length; /* 0 if not IP. */
uint64_t tcp_packet_delta_count;
uint64_t tcp_ack_total_count;
uint64_t tcp_fin_total_count;
uint64_t tcp_psh_total_count;
uint64_t tcp_rst_total_count;
uint64_t tcp_syn_total_count;
uint64_t tcp_urg_total_count;
};
static void dpif_ipfix_cache_expire(struct dpif_ipfix_exporter *, bool,
const uint64_t, const uint32_t);
static void get_export_time_now(uint64_t *, uint32_t *);
static void dpif_ipfix_cache_expire_now(struct dpif_ipfix_exporter *, bool);
static void dpif_ipfix_exporter_del_domain(struct dpif_ipfix_exporter *,
struct dpif_ipfix_domain *);
static bool
ofproto_ipfix_bridge_exporter_options_equal(
const struct ofproto_ipfix_bridge_exporter_options *a,
const struct ofproto_ipfix_bridge_exporter_options *b)
{
return (a->obs_domain_id == b->obs_domain_id
&& a->obs_point_id == b->obs_point_id
&& a->sampling_rate == b->sampling_rate
&& a->cache_active_timeout == b->cache_active_timeout
&& a->cache_max_flows == b->cache_max_flows
&& a->stats_interval == b->stats_interval
&& a->template_interval == b->template_interval
&& a->enable_tunnel_sampling == b->enable_tunnel_sampling
&& a->enable_input_sampling == b->enable_input_sampling
&& a->enable_output_sampling == b->enable_output_sampling
&& sset_equals(&a->targets, &b->targets)
&& nullable_string_is_equal(a->virtual_obs_id, b->virtual_obs_id));
}
static struct ofproto_ipfix_bridge_exporter_options *
ofproto_ipfix_bridge_exporter_options_clone(
const struct ofproto_ipfix_bridge_exporter_options *old)
{
struct ofproto_ipfix_bridge_exporter_options *new =
xmemdup(old, sizeof *old);
sset_clone(&new->targets, &old->targets);
new->virtual_obs_id = nullable_xstrdup(old->virtual_obs_id);
return new;
}
static void
ofproto_ipfix_bridge_exporter_options_destroy(
struct ofproto_ipfix_bridge_exporter_options *options)
{
if (options) {
sset_destroy(&options->targets);
free(options->virtual_obs_id);
free(options);
}
}
static bool
ofproto_ipfix_flow_exporter_options_equal(
const struct ofproto_ipfix_flow_exporter_options *a,
const struct ofproto_ipfix_flow_exporter_options *b)
{
return (a->collector_set_id == b->collector_set_id
&& a->cache_active_timeout == b->cache_active_timeout
&& a->cache_max_flows == b->cache_max_flows
&& a->stats_interval == b->stats_interval
&& a->template_interval == b->template_interval
&& a->enable_tunnel_sampling == b->enable_tunnel_sampling
&& sset_equals(&a->targets, &b->targets)
&& nullable_string_is_equal(a->virtual_obs_id, b->virtual_obs_id));
}
static struct ofproto_ipfix_flow_exporter_options *
ofproto_ipfix_flow_exporter_options_clone(
const struct ofproto_ipfix_flow_exporter_options *old)
{
struct ofproto_ipfix_flow_exporter_options *new =
xmemdup(old, sizeof *old);
sset_clone(&new->targets, &old->targets);
new->virtual_obs_id = nullable_xstrdup(old->virtual_obs_id);
return new;
}
static void
ofproto_ipfix_flow_exporter_options_destroy(
struct ofproto_ipfix_flow_exporter_options *options)
{
if (options) {
sset_destroy(&options->targets);
free(options->virtual_obs_id);
free(options);
}
}
static void
dpif_ipfix_exporter_init(struct dpif_ipfix_exporter *exporter)
{
exporter->exporter_id = ++exporter_total_count;
exporter->collectors = NULL;
exporter->seq_number = 1;
exporter->last_stats_sent_time = 0;
hmap_init(&exporter->cache_flow_key_map);
ovs_list_init(&exporter->cache_flow_start_timestamp_list);
exporter->cache_active_timeout = 0;
exporter->cache_max_flows = 0;
exporter->stats_interval = OFPROTO_IPFIX_DEFAULT_TEMPLATE_INTERVAL;
exporter->template_interval = OFPROTO_IPFIX_DEFAULT_TEMPLATE_INTERVAL;
exporter->last_stats_sent_time = 0;
exporter->virtual_obs_id = NULL;
exporter->virtual_obs_len = 0;
hmap_init(&exporter->domains);
memset(&exporter->ipfix_global_stats, 0,
sizeof(struct dpif_ipfix_global_stats));
}
static void
dpif_ipfix_exporter_clear(struct dpif_ipfix_exporter *exporter)
OVS_REQUIRES(mutex)
{
/* Flush the cache with flow end reason "forced end." */
dpif_ipfix_cache_expire_now(exporter, true);
collectors_destroy(exporter->collectors);
exporter->exporter_id = 0;
exporter->collectors = NULL;
exporter->seq_number = 1;
exporter->last_stats_sent_time = 0;
exporter->cache_active_timeout = 0;
exporter->cache_max_flows = 0;
exporter->stats_interval = OFPROTO_IPFIX_DEFAULT_TEMPLATE_INTERVAL;
exporter->template_interval = OFPROTO_IPFIX_DEFAULT_TEMPLATE_INTERVAL;
exporter->last_stats_sent_time = 0;
free(exporter->virtual_obs_id);
exporter->virtual_obs_id = NULL;
exporter->virtual_obs_len = 0;
struct dpif_ipfix_domain *dom;
HMAP_FOR_EACH_SAFE (dom, hmap_node, &exporter->domains) {
dpif_ipfix_exporter_del_domain(exporter, dom);
}
memset(&exporter->ipfix_global_stats, 0,
sizeof(struct dpif_ipfix_global_stats));
}
static void
dpif_ipfix_exporter_destroy(struct dpif_ipfix_exporter *exporter)
OVS_REQUIRES(mutex)
{
dpif_ipfix_exporter_clear(exporter);
hmap_destroy(&exporter->cache_flow_key_map);
hmap_destroy(&exporter->domains);
}
static bool
dpif_ipfix_exporter_set_options(struct dpif_ipfix_exporter *exporter,
const struct sset *targets,
const uint32_t cache_active_timeout,
const uint32_t cache_max_flows,
const uint32_t stats_interval,
const uint32_t template_interval,
const char *virtual_obs_id) OVS_REQUIRES(mutex)
{
size_t virtual_obs_len;
collectors_destroy(exporter->collectors);
collectors_create(targets, IPFIX_DEFAULT_COLLECTOR_PORT,
&exporter->collectors);
if (exporter->collectors == NULL) {
VLOG_WARN_RL(&rl, "no collectors could be initialized, "
"IPFIX exporter disabled");
dpif_ipfix_exporter_clear(exporter);
return false;
}
exporter->cache_active_timeout = cache_active_timeout;
exporter->cache_max_flows = cache_max_flows;
exporter->stats_interval = stats_interval;
exporter->template_interval = template_interval;
virtual_obs_len = virtual_obs_id ? strlen(virtual_obs_id) : 0;
if (virtual_obs_len > IPFIX_VIRTUAL_OBS_MAX_LEN) {
VLOG_WARN_RL(&rl, "Virtual obsevation ID too long (%d bytes), "
"should not be longer than %d bytes.",
exporter->virtual_obs_len, IPFIX_VIRTUAL_OBS_MAX_LEN);
dpif_ipfix_exporter_clear(exporter);
return false;
}
exporter->virtual_obs_len = virtual_obs_len;
exporter->virtual_obs_id = nullable_xstrdup(virtual_obs_id);
return true;
}
static struct dpif_ipfix_domain *
dpif_ipfix_exporter_find_domain(const struct dpif_ipfix_exporter *exporter,
uint32_t domain_id) OVS_REQUIRES(mutex)
{
struct dpif_ipfix_domain *dom;
HMAP_FOR_EACH_WITH_HASH (dom, hmap_node, hash_int(domain_id, 0),
&exporter->domains) {
return dom;
}
return NULL;
}
static struct dpif_ipfix_domain *
dpif_ipfix_exporter_insert_domain(struct dpif_ipfix_exporter *exporter,
const uint32_t domain_id) OVS_REQUIRES(mutex)
{
struct dpif_ipfix_domain *dom = xmalloc(sizeof *dom);
dom->last_template_set_time = 0;
hmap_insert(&exporter->domains, &dom->hmap_node, hash_int(domain_id, 0));
return dom;
}
static void
dpif_ipfix_exporter_del_domain(struct dpif_ipfix_exporter *exporter,
struct dpif_ipfix_domain *dom)
OVS_REQUIRES(mutex)
{
hmap_remove(&exporter->domains, &dom->hmap_node);
free(dom);
}
static struct dpif_ipfix_port *
dpif_ipfix_find_port(const struct dpif_ipfix *di,
odp_port_t odp_port) OVS_REQUIRES(mutex)
{
struct dpif_ipfix_port *dip;
HMAP_FOR_EACH_IN_BUCKET (dip, hmap_node, hash_odp_port(odp_port),
&di->ports) {
if (dip->odp_port == odp_port) {
return dip;
}
}
return NULL;
}
static void
dpif_ipfix_del_port__(struct dpif_ipfix *di,
struct dpif_ipfix_port *dip)
OVS_REQUIRES(mutex)
{
hmap_remove(&di->ports, &dip->hmap_node);
free(dip);
}
static enum dpif_ipfix_tunnel_type
dpif_ipfix_tunnel_type(const struct ofport *ofport)
{
const char *type = netdev_get_type(ofport->netdev);
if (type == NULL) {
return DPIF_IPFIX_TUNNEL_UNKNOWN;
}
if (strcmp(type, "gre") == 0) {
return DPIF_IPFIX_TUNNEL_GRE;
} else if (strcmp(type, "vxlan") == 0) {
return DPIF_IPFIX_TUNNEL_VXLAN;
} else if (strcmp(type, "geneve") == 0) {
return DPIF_IPFIX_TUNNEL_GENEVE;
}
return DPIF_IPFIX_TUNNEL_UNKNOWN;
}
static uint8_t
dpif_ipfix_tunnel_key_length(enum dpif_ipfix_tunnel_type tunnel_type)
{
switch (tunnel_type) {
case DPIF_IPFIX_TUNNEL_GRE:
/* 32-bit key gre */
return 4;
case DPIF_IPFIX_TUNNEL_VXLAN:
case DPIF_IPFIX_TUNNEL_GENEVE:
return 3;
case DPIF_IPFIX_TUNNEL_UNKNOWN:
case NUM_DPIF_IPFIX_TUNNEL:
default:
return 0;
}
}
void
dpif_ipfix_add_port(struct dpif_ipfix *di, struct ofport *ofport,
odp_port_t odp_port) OVS_EXCLUDED(mutex)
{
struct dpif_ipfix_port *dip;
int64_t ifindex;
ovs_mutex_lock(&mutex);
dip = dpif_ipfix_find_port(di, odp_port);
if (dip) {
dpif_ipfix_del_port__(di, dip);
}
ifindex = netdev_get_ifindex(ofport->netdev);
if (ifindex < 0) {
ifindex = 0;
}
/* Add to table of ports. */
dip = xmalloc(sizeof *dip);
dip->ofport = ofport;
dip->odp_port = odp_port;
dip->tunnel_type = dpif_ipfix_tunnel_type(ofport);
dip->tunnel_key_length = dpif_ipfix_tunnel_key_length(dip->tunnel_type);
dip->ifindex = ifindex;
hmap_insert(&di->ports, &dip->hmap_node, hash_odp_port(odp_port));
ovs_mutex_unlock(&mutex);
}
void
dpif_ipfix_del_port(struct dpif_ipfix *di, odp_port_t odp_port)
OVS_EXCLUDED(mutex)
{
struct dpif_ipfix_port *dip;
ovs_mutex_lock(&mutex);
dip = dpif_ipfix_find_port(di, odp_port);
if (dip) {
dpif_ipfix_del_port__(di, dip);
}
ovs_mutex_unlock(&mutex);
}
static struct dpif_ipfix_port *
dpif_ipfix_find_tunnel_port(const struct dpif_ipfix *di, odp_port_t odp_port)
OVS_REQUIRES(mutex)
{
struct dpif_ipfix_port *dip = dpif_ipfix_find_port(di, odp_port);
return (dip && dip->tunnel_type != DPIF_IPFIX_TUNNEL_UNKNOWN) ? dip : NULL;
}
bool
dpif_ipfix_is_tunnel_port(const struct dpif_ipfix *di, odp_port_t odp_port)
OVS_EXCLUDED(mutex)
{
struct dpif_ipfix_port *dip;
ovs_mutex_lock(&mutex);
dip = dpif_ipfix_find_tunnel_port(di, odp_port);
ovs_mutex_unlock(&mutex);
return dip != NULL;
}
static void
dpif_ipfix_bridge_exporter_init(struct dpif_ipfix_bridge_exporter *exporter)
{
dpif_ipfix_exporter_init(&exporter->exporter);
exporter->options = NULL;
exporter->probability = 0;
}
static void
dpif_ipfix_bridge_exporter_clear(struct dpif_ipfix_bridge_exporter *exporter)
OVS_REQUIRES(mutex)
{
dpif_ipfix_exporter_clear(&exporter->exporter);
ofproto_ipfix_bridge_exporter_options_destroy(exporter->options);
exporter->options = NULL;
exporter->probability = 0;
}
static void
dpif_ipfix_bridge_exporter_destroy(struct dpif_ipfix_bridge_exporter *exporter)
OVS_REQUIRES(mutex)
{
dpif_ipfix_bridge_exporter_clear(exporter);
dpif_ipfix_exporter_destroy(&exporter->exporter);
}
static void
dpif_ipfix_bridge_exporter_set_options(
struct dpif_ipfix_bridge_exporter *exporter,
const struct ofproto_ipfix_bridge_exporter_options *options,
bool *options_changed) OVS_REQUIRES(mutex)
{
if (!options || sset_is_empty(&options->targets)) {
/* No point in doing any work if there are no targets. */
if (exporter->options) {
dpif_ipfix_bridge_exporter_clear(exporter);
*options_changed = true;
} else {
*options_changed = false;
}
return;
}
*options_changed = (
!exporter->options
|| !ofproto_ipfix_bridge_exporter_options_equal(
options, exporter->options));
/* Configure collectors if options have changed or if we're
* shortchanged in collectors (which indicates that opening one or
* more of the configured collectors failed, so that we should
* retry). */
if (*options_changed
|| collectors_count(exporter->exporter.collectors)
< sset_count(&options->targets)) {
if (!dpif_ipfix_exporter_set_options(
&exporter->exporter, &options->targets,
options->cache_active_timeout, options->cache_max_flows,
options->stats_interval, options->template_interval,
options->virtual_obs_id)) {
return;
}
}
/* Avoid reconfiguring if options didn't change. */
if (!*options_changed) {
return;
}
ofproto_ipfix_bridge_exporter_options_destroy(exporter->options);
exporter->options = ofproto_ipfix_bridge_exporter_options_clone(options);
exporter->probability =
MAX(1, UINT32_MAX / exporter->options->sampling_rate);
/* Configure static observation_domain_id. */
struct dpif_ipfix_domain *dom;
HMAP_FOR_EACH_SAFE (dom, hmap_node, &(exporter->exporter.domains)) {
dpif_ipfix_exporter_del_domain(&exporter->exporter, dom);
}
dpif_ipfix_exporter_insert_domain(&exporter->exporter,
options->obs_domain_id);
/* Run over the cache as some entries might have expired after
* changing the timeouts. */
dpif_ipfix_cache_expire_now(&exporter->exporter, false);
}
static struct dpif_ipfix_flow_exporter_map_node*
dpif_ipfix_find_flow_exporter_map_node(
const struct dpif_ipfix *di, const uint32_t collector_set_id)
OVS_REQUIRES(mutex)
{
struct dpif_ipfix_flow_exporter_map_node *exporter_node;
HMAP_FOR_EACH_WITH_HASH (exporter_node, node,
hash_int(collector_set_id, 0),
&di->flow_exporter_map) {
if (exporter_node->exporter.options->collector_set_id
== collector_set_id) {
return exporter_node;
}
}
return NULL;
}
static void
dpif_ipfix_flow_exporter_init(struct dpif_ipfix_flow_exporter *exporter)
{
dpif_ipfix_exporter_init(&exporter->exporter);
exporter->options = NULL;
}
static void
dpif_ipfix_flow_exporter_clear(struct dpif_ipfix_flow_exporter *exporter)
OVS_REQUIRES(mutex)
{
dpif_ipfix_exporter_clear(&exporter->exporter);
ofproto_ipfix_flow_exporter_options_destroy(exporter->options);
exporter->options = NULL;
}
static void
dpif_ipfix_flow_exporter_destroy(struct dpif_ipfix_flow_exporter *exporter)
OVS_REQUIRES(mutex)
{
dpif_ipfix_flow_exporter_clear(exporter);
dpif_ipfix_exporter_destroy(&exporter->exporter);
}
static bool
dpif_ipfix_flow_exporter_set_options(
struct dpif_ipfix_flow_exporter *exporter,
const struct ofproto_ipfix_flow_exporter_options *options,
bool *options_changed) OVS_REQUIRES(mutex)
{
if (sset_is_empty(&options->targets)) {
/* No point in doing any work if there are no targets. */
if (exporter->options) {
dpif_ipfix_flow_exporter_clear(exporter);
*options_changed = true;
} else {
*options_changed = false;
}
return true;
}
*options_changed = (
!exporter->options
|| !ofproto_ipfix_flow_exporter_options_equal(
options, exporter->options));
/* Configure collectors if options have changed or if we're
* shortchanged in collectors (which indicates that opening one or
* more of the configured collectors failed, so that we should
* retry). */
if (*options_changed
|| collectors_count(exporter->exporter.collectors)
< sset_count(&options->targets)) {
if (!dpif_ipfix_exporter_set_options(
&exporter->exporter, &options->targets,
options->cache_active_timeout, options->cache_max_flows,
options->stats_interval, options->template_interval,
options->virtual_obs_id)) {
return false;
}
}
/* Avoid reconfiguring if options didn't change. */
if (!*options_changed) {
return true;
}
ofproto_ipfix_flow_exporter_options_destroy(exporter->options);
exporter->options = ofproto_ipfix_flow_exporter_options_clone(options);
/* Run over the cache as some entries might have expired after
* changing the timeouts. */
dpif_ipfix_cache_expire_now(&exporter->exporter, false);
return true;
}
static void
remove_flow_exporter(struct dpif_ipfix *di,
struct dpif_ipfix_flow_exporter_map_node *node)
OVS_REQUIRES(mutex)
{
hmap_remove(&di->flow_exporter_map, &node->node);
dpif_ipfix_flow_exporter_destroy(&node->exporter);
free(node);
}
bool
dpif_ipfix_set_options(
struct dpif_ipfix *di,
const struct ofproto_ipfix_bridge_exporter_options *bridge_exporter_options,
const struct ofproto_ipfix_flow_exporter_options *flow_exporters_options,
size_t n_flow_exporters_options) OVS_EXCLUDED(mutex)
{
int i;
bool beo_changed, feo_changed, entry_changed;
struct ofproto_ipfix_flow_exporter_options *options;
struct dpif_ipfix_flow_exporter_map_node *node;
ovs_assert(flow_exporters_options || n_flow_exporters_options == 0);
ovs_mutex_lock(&mutex);
dpif_ipfix_bridge_exporter_set_options(&di->bridge_exporter,
bridge_exporter_options,
&beo_changed);
/* Add new flow exporters and update current flow exporters. */
options = (struct ofproto_ipfix_flow_exporter_options *)
flow_exporters_options;
feo_changed = false;
for (i = 0; i < n_flow_exporters_options; i++) {
node = dpif_ipfix_find_flow_exporter_map_node(
di, options->collector_set_id);
if (!node) {
node = xzalloc(sizeof *node);
dpif_ipfix_flow_exporter_init(&node->exporter);
hmap_insert(&di->flow_exporter_map, &node->node,
hash_int(options->collector_set_id, 0));
feo_changed = true;
}
if (!dpif_ipfix_flow_exporter_set_options(&node->exporter,
options,
&entry_changed)) {
remove_flow_exporter(di, node);
}
feo_changed = entry_changed ? true : feo_changed;
options++;
}
/* Remove dropped flow exporters, if any needs to be removed. */
HMAP_FOR_EACH_SAFE (node, node, &di->flow_exporter_map) {
/* This is slow but doesn't take any extra memory, and
* this table is not supposed to contain many rows anyway. */
options = (struct ofproto_ipfix_flow_exporter_options *)
flow_exporters_options;
for (i = 0; i < n_flow_exporters_options; i++) {
if (node->exporter.options->collector_set_id
== options->collector_set_id) {
break;
}
options++;
}
if (i == n_flow_exporters_options) { /* Not found. */
remove_flow_exporter(di, node);
feo_changed = true;
}
}
ovs_mutex_unlock(&mutex);
return beo_changed || feo_changed;
}
struct dpif_ipfix *
dpif_ipfix_create(void)
{
struct dpif_ipfix *di;
di = xzalloc(sizeof *di);
dpif_ipfix_bridge_exporter_init(&di->bridge_exporter);
hmap_init(&di->flow_exporter_map);
hmap_init(&di->ports);
ovs_refcount_init(&di->ref_cnt);
return di;
}
struct dpif_ipfix *
dpif_ipfix_ref(const struct dpif_ipfix *di_)
{
struct dpif_ipfix *di = CONST_CAST(struct dpif_ipfix *, di_);
if (di) {
ovs_refcount_ref(&di->ref_cnt);
}
return di;
}
uint32_t
dpif_ipfix_get_bridge_exporter_probability(const struct dpif_ipfix *di)
OVS_EXCLUDED(mutex)
{
uint32_t ret;
ovs_mutex_lock(&mutex);
ret = di->bridge_exporter.probability;
ovs_mutex_unlock(&mutex);
return ret;
}
bool
dpif_ipfix_get_bridge_exporter_input_sampling(const struct dpif_ipfix *di)
OVS_EXCLUDED(mutex)
{
bool ret = false;
ovs_mutex_lock(&mutex);
if (di->bridge_exporter.options) {
ret = di->bridge_exporter.options->enable_input_sampling;
}
ovs_mutex_unlock(&mutex);
return ret;
}
bool
dpif_ipfix_get_bridge_exporter_output_sampling(const struct dpif_ipfix *di)
OVS_EXCLUDED(mutex)
{
bool ret = false;
ovs_mutex_lock(&mutex);
if (di->bridge_exporter.options) {
ret = di->bridge_exporter.options->enable_output_sampling;
}
ovs_mutex_unlock(&mutex);
return ret;
}
bool
dpif_ipfix_get_bridge_exporter_tunnel_sampling(const struct dpif_ipfix *di)
OVS_EXCLUDED(mutex)
{
bool ret = false;
ovs_mutex_lock(&mutex);
if (di->bridge_exporter.options) {
ret = di->bridge_exporter.options->enable_tunnel_sampling;
}
ovs_mutex_unlock(&mutex);
return ret;
}
bool
dpif_ipfix_get_flow_exporter_tunnel_sampling(const struct dpif_ipfix *di,
const uint32_t collector_set_id)
OVS_EXCLUDED(mutex)
{
ovs_mutex_lock(&mutex);
struct dpif_ipfix_flow_exporter_map_node *node
= dpif_ipfix_find_flow_exporter_map_node(di, collector_set_id);
bool ret = (node
&& node->exporter.options
&& node->exporter.options->enable_tunnel_sampling);
ovs_mutex_unlock(&mutex);
return ret;
}
static void
dpif_ipfix_clear(struct dpif_ipfix *di) OVS_REQUIRES(mutex)
{
struct dpif_ipfix_flow_exporter_map_node *exp_node;
struct dpif_ipfix_port *dip;
dpif_ipfix_bridge_exporter_clear(&di->bridge_exporter);
HMAP_FOR_EACH_POP (exp_node, node, &di->flow_exporter_map) {
dpif_ipfix_flow_exporter_destroy(&exp_node->exporter);
free(exp_node);
}
HMAP_FOR_EACH_SAFE (dip, hmap_node, &di->ports) {
dpif_ipfix_del_port__(di, dip);
}
}
void
dpif_ipfix_unref(struct dpif_ipfix *di) OVS_EXCLUDED(mutex)
{
if (di && ovs_refcount_unref_relaxed(&di->ref_cnt) == 1) {
ovs_mutex_lock(&mutex);
dpif_ipfix_clear(di);
dpif_ipfix_bridge_exporter_destroy(&di->bridge_exporter);
hmap_destroy(&di->flow_exporter_map);
hmap_destroy(&di->ports);
free(di);
ovs_mutex_unlock(&mutex);
}
}
static void
ipfix_init_header(uint32_t export_time_sec, uint32_t seq_number,
uint32_t obs_domain_id, struct dp_packet *msg)
{
struct ipfix_header *hdr;
hdr = dp_packet_put_zeros(msg, sizeof *hdr);
hdr->version = htons(IPFIX_VERSION);
hdr->length = htons(sizeof *hdr); /* Updated in ipfix_send_msg. */
hdr->export_time = htonl(export_time_sec);
hdr->seq_number = htonl(seq_number);
hdr->obs_domain_id = htonl(obs_domain_id);
}
static size_t
ipfix_send_msg(const struct collectors *collectors, struct dp_packet *msg)
{
struct ipfix_header *hdr;
size_t tx_errors;
/* Adjust the length in the header. */
hdr = dp_packet_data(msg);
hdr->length = htons(dp_packet_size(msg));
tx_errors = collectors_send(collectors,
dp_packet_data(msg), dp_packet_size(msg));
dp_packet_set_size(msg, 0);
return tx_errors;
}
static uint16_t
ipfix_get_template_id(enum ipfix_proto_l2 l2, enum ipfix_proto_l3 l3,
enum ipfix_proto_l4 l4, enum ipfix_proto_tunnel tunnel,
enum ipfix_flow_direction flow_direction)
{
uint16_t template_id;
template_id = l2;
template_id = template_id * NUM_IPFIX_PROTO_L3 + l3;
template_id = template_id * NUM_IPFIX_PROTO_L4 + l4;
template_id = template_id * NUM_IPFIX_PROTO_TUNNEL + tunnel;
template_id = template_id * NUM_IPFIX_FLOW_DIRECTION + flow_direction;
return IPFIX_TEMPLATE_ID_MIN + template_id;
}
static uint16_t
ipfix_get_options_template_id(enum ipfix_options_template opt_tmpl_type)
{
/* Check what is the maximum possible Template ID for Template Record and
* use it as a base number for Template ID in Options Template Record. */
uint16_t max_tmpl_id = ipfix_get_template_id(NUM_IPFIX_PROTO_L2,
NUM_IPFIX_PROTO_L3,
NUM_IPFIX_PROTO_L4,
NUM_IPFIX_PROTO_TUNNEL,
NUM_IPFIX_FLOW_DIRECTION);
return max_tmpl_id + opt_tmpl_type;
}
static void
ipfix_define_template_entity(enum ipfix_entity_id id,
enum ipfix_entity_size size,
enum ipfix_entity_enterprise enterprise,
struct dp_packet *msg)
{
struct ipfix_template_field_specifier *field;
size_t field_size;
if (enterprise) {
field_size = sizeof *field;
} else {
/* No enterprise number */
field_size = sizeof *field - sizeof(ovs_be32);
}
field = dp_packet_put_zeros(msg, field_size);
field->element_id = htons(id);
if (size) {
field->field_length = htons(size);
} else {
/* RFC 5101, Section 7. Variable-Length Information Element */
field->field_length = OVS_BE16_MAX;
}
if (enterprise) {
field->enterprise = htonl(enterprise);
}
}
#define DEF(ID) \
{ \
ipfix_define_template_entity(IPFIX_ENTITY_ID_##ID, \
IPFIX_ENTITY_SIZE_##ID, \
IPFIX_ENTITY_ENTERPRISE_##ID, msg); \
count++; \
}
/* Defines The Exporting Process Reliability Statistics Options Template
* fields, including scope fields. Updates 'scope_field_count' and
* 'field_count' in Options Template Record Header. */
static uint16_t
ipfix_def_exporter_options_template_fields(size_t opt_tmpl_hdr_offset,
struct dp_packet *msg)
{
uint16_t count = 0;
struct ipfix_options_template_record_header *opt_tmpl_hdr;
/* 1. Scope Fields Specifiers */
DEF(EXPORTING_PROCESS_ID);
/* Update 'scope_field_count' in options template header. */
opt_tmpl_hdr = (struct ipfix_options_template_record_header *)
((uint8_t *)dp_packet_data(msg) + opt_tmpl_hdr_offset);
opt_tmpl_hdr->scope_field_count = htons(count);
/* 2. Fields Specifiers */
DEF(NOT_SENT_PACKET_TOTAL_COUNT);
/* Update 'field_count' in options template header. */
opt_tmpl_hdr = (struct ipfix_options_template_record_header *)
((uint8_t *)dp_packet_data(msg) + opt_tmpl_hdr_offset);
opt_tmpl_hdr->field_count = htons(count);
return count;
}
static uint16_t
ipfix_def_options_template_fields(enum ipfix_options_template opt_tmpl_type,
size_t opt_tmpl_hdr_offset,
struct dp_packet *msg)
{
switch (opt_tmpl_type) {
case IPFIX_OPTIONS_TEMPLATE_EXPORTER_STATS:
return ipfix_def_exporter_options_template_fields(opt_tmpl_hdr_offset,
msg);
break;
case NUM_IPFIX_OPTIONS_TEMPLATE:
default:
OVS_NOT_REACHED();
}
return 0;
}
/* Defines fields in Template Record. Updates 'field_count' in Template Record
* Header. */
static uint16_t
ipfix_define_template_fields(enum ipfix_proto_l2 l2, enum ipfix_proto_l3 l3,
enum ipfix_proto_l4 l4, enum ipfix_proto_tunnel tunnel,
enum ipfix_flow_direction flow_direction,
bool virtual_obs_id_set,
size_t tmpl_hdr_offset,
struct dp_packet *msg)
{
struct ipfix_template_record_header *tmpl_hdr;
uint16_t count = 0;
/* 1. Flow key. */
DEF(OBSERVATION_POINT_ID);
DEF(FLOW_DIRECTION);
/* Common Ethernet entities. */
DEF(SOURCE_MAC_ADDRESS);
DEF(DESTINATION_MAC_ADDRESS);
DEF(ETHERNET_TYPE);
DEF(ETHERNET_HEADER_LENGTH);
/* Interface Information Elements */
DEF(INGRESS_INTERFACE);
DEF(INGRESS_INTERFACE_TYPE);
DEF(INTERFACE_NAME);
DEF(INTERFACE_DESCRIPTION);
if (flow_direction == EGRESS_FLOW) {
DEF(EGRESS_INTERFACE);
DEF(EGRESS_INTERFACE_TYPE);
DEF(INTERFACE_NAME);
DEF(INTERFACE_DESCRIPTION);
}
if (l2 == IPFIX_PROTO_L2_VLAN) {
DEF(VLAN_ID);
DEF(DOT1Q_VLAN_ID);
DEF(DOT1Q_PRIORITY);
}
if (l3 != IPFIX_PROTO_L3_UNKNOWN) {
DEF(IP_VERSION);
DEF(IP_TTL);
DEF(PROTOCOL_IDENTIFIER);
DEF(IP_DIFF_SERV_CODE_POINT);
DEF(IP_PRECEDENCE);
DEF(IP_CLASS_OF_SERVICE);
if (l3 == IPFIX_PROTO_L3_IPV4) {
DEF(SOURCE_IPV4_ADDRESS);
DEF(DESTINATION_IPV4_ADDRESS);
if (l4 == IPFIX_PROTO_L4_TCP
|| l4 == IPFIX_PROTO_L4_UDP
|| l4 == IPFIX_PROTO_L4_SCTP) {
DEF(SOURCE_TRANSPORT_PORT);
DEF(DESTINATION_TRANSPORT_PORT);
} else if (l4 == IPFIX_PROTO_L4_ICMP) {
DEF(ICMP_TYPE_IPV4);
DEF(ICMP_CODE_IPV4);
}
} else { /* l3 == IPFIX_PROTO_L3_IPV6 */
DEF(SOURCE_IPV6_ADDRESS);
DEF(DESTINATION_IPV6_ADDRESS);
DEF(FLOW_LABEL_IPV6);
if (l4 == IPFIX_PROTO_L4_TCP
|| l4 == IPFIX_PROTO_L4_UDP
|| l4 == IPFIX_PROTO_L4_SCTP) {
DEF(SOURCE_TRANSPORT_PORT);
DEF(DESTINATION_TRANSPORT_PORT);
} else if (l4 == IPFIX_PROTO_L4_ICMP) {
DEF(ICMP_TYPE_IPV6);
DEF(ICMP_CODE_IPV6);
}
}
}
if (tunnel != IPFIX_PROTO_NOT_TUNNELED) {
DEF(TUNNEL_SOURCE_IPV4_ADDRESS);
DEF(TUNNEL_DESTINATION_IPV4_ADDRESS);
DEF(TUNNEL_PROTOCOL_IDENTIFIER);
DEF(TUNNEL_SOURCE_TRANSPORT_PORT);
DEF(TUNNEL_DESTINATION_TRANSPORT_PORT);
DEF(TUNNEL_TYPE);
DEF(TUNNEL_KEY);
}
/* 2. Virtual observation ID, which is not a part of flow key. */
if (virtual_obs_id_set) {
DEF(VIRTUAL_OBS_ID);
}
/* 3. Flow aggregated data. */
DEF(FLOW_START_DELTA_MICROSECONDS);
DEF(FLOW_END_DELTA_MICROSECONDS);
DEF(DROPPED_PACKET_DELTA_COUNT);
DEF(DROPPED_PACKET_TOTAL_COUNT);
DEF(PACKET_DELTA_COUNT);
DEF(PACKET_TOTAL_COUNT);
DEF(INGRESS_UNICAST_PACKET_TOTAL_COUNT);
DEF(INGRESS_MULTICAST_PACKET_TOTAL_COUNT);
DEF(INGRESS_BROADCAST_PACKET_TOTAL_COUNT);
DEF(EGRESS_UNICAST_PACKET_TOTAL_COUNT);
DEF(EGRESS_BROADCAST_PACKET_TOTAL_COUNT);
DEF(POST_MCAST_PACKET_DELTA_COUNT);
DEF(POST_MCAST_PACKET_TOTAL_COUNT);
DEF(LAYER2_OCTET_DELTA_COUNT);
DEF(LAYER2_OCTET_TOTAL_COUNT);
DEF(FLOW_END_REASON);
if (l3 != IPFIX_PROTO_L3_UNKNOWN) {
DEF(DROPPED_OCTET_DELTA_COUNT);
DEF(DROPPED_OCTET_TOTAL_COUNT);
DEF(OCTET_DELTA_COUNT);
DEF(OCTET_TOTAL_COUNT);
DEF(OCTET_DELTA_SUM_OF_SQUARES);
DEF(OCTET_TOTAL_SUM_OF_SQUARES);
DEF(MINIMUM_IP_TOTAL_LENGTH);
DEF(MAXIMUM_IP_TOTAL_LENGTH);
DEF(POST_MCAST_OCTET_DELTA_COUNT);
DEF(POST_MCAST_OCTET_TOTAL_COUNT);
}
if (l4 == IPFIX_PROTO_L4_TCP) {
DEF(TCP_ACK_TOTAL_COUNT);
DEF(TCP_FIN_TOTAL_COUNT);
DEF(TCP_PSH_TOTAL_COUNT);
DEF(TCP_RST_TOTAL_COUNT);
DEF(TCP_SYN_TOTAL_COUNT);
DEF(TCP_URG_TOTAL_COUNT);
}
/* Update 'field_count' in template header. */
tmpl_hdr = (struct ipfix_template_record_header *)
((uint8_t *)dp_packet_data(msg) + tmpl_hdr_offset);
tmpl_hdr->field_count = htons(count);
return count;
}
#undef DEF
static void
ipfix_init_template_msg(uint32_t export_time_sec,
uint32_t seq_number, uint32_t obs_domain_id,
uint16_t set_id, struct dp_packet *msg,
size_t *set_hdr_offset)
{
struct ipfix_set_header *set_hdr;
dp_packet_clear(msg);
ipfix_init_header(export_time_sec, seq_number, obs_domain_id, msg);
*set_hdr_offset = dp_packet_size(msg);
/* Add a Set Header. */
set_hdr = dp_packet_put_zeros(msg, sizeof *set_hdr);
set_hdr->set_id = htons(set_id);
}
static size_t
ipfix_send_template_msg(const struct collectors *collectors,
struct dp_packet *msg, size_t set_hdr_offset)
{
struct ipfix_set_header *set_hdr;
size_t tx_errors;
/* Send template message. */
set_hdr = (struct ipfix_set_header*)
((uint8_t*)dp_packet_data(msg) + set_hdr_offset);
set_hdr->length = htons(dp_packet_size(msg) - set_hdr_offset);
tx_errors = ipfix_send_msg(collectors, msg);
return tx_errors;
}
static void
ipfix_add_options_template_record(enum ipfix_options_template opt_tmpl_type,
struct dp_packet *msg)
{
struct ipfix_options_template_record_header *opt_tmpl_hdr;
size_t opt_tmpl_hdr_offset;
opt_tmpl_hdr_offset = dp_packet_size(msg);
opt_tmpl_hdr = dp_packet_put_zeros(msg, sizeof *opt_tmpl_hdr);
opt_tmpl_hdr->template_id =
htons(ipfix_get_options_template_id(opt_tmpl_type));
ipfix_def_options_template_fields(opt_tmpl_type, opt_tmpl_hdr_offset, msg);
}
static void
ipfix_send_options_template_msgs(struct dpif_ipfix_exporter *exporter,
uint32_t export_time_sec,
uint32_t obs_domain_id,
struct dp_packet *msg)
{
size_t set_hdr_offset;
size_t tx_packets = 0;
size_t tx_errors = 0, error_pkts;
enum ipfix_options_template opt_tmpl_type;
ipfix_init_template_msg(export_time_sec, exporter->seq_number,
obs_domain_id, IPFIX_SET_ID_OPTION_TEMPLATE, msg,
&set_hdr_offset);
for (opt_tmpl_type = 0; opt_tmpl_type < NUM_IPFIX_OPTIONS_TEMPLATE;
++opt_tmpl_type) {
if (dp_packet_size(msg) >= MAX_MESSAGE_LEN) {
/* Send template message. */
error_pkts = ipfix_send_template_msg(exporter->collectors, msg,
set_hdr_offset);
tx_errors += error_pkts;
tx_packets += collectors_count(exporter->collectors) - error_pkts;
/* Reinitialize the template msg. */
ipfix_init_template_msg(export_time_sec, exporter->seq_number,
obs_domain_id,
IPFIX_SET_ID_OPTION_TEMPLATE,
msg,
&set_hdr_offset);
}
ipfix_add_options_template_record(opt_tmpl_type, msg);
}
error_pkts = ipfix_send_template_msg(exporter->collectors, msg,
set_hdr_offset);
tx_errors += error_pkts;
tx_packets += collectors_count(exporter->collectors) - error_pkts;
exporter->ofproto_stats.tx_pkts += tx_packets;
exporter->ofproto_stats.tx_errors += tx_errors;
}
static void
ipfix_add_template_record(enum ipfix_proto_l2 l2, enum ipfix_proto_l3 l3,
enum ipfix_proto_l4 l4,
enum ipfix_proto_tunnel tunnel,
enum ipfix_flow_direction flow_direction,
bool virtual_obs_id_set,
struct dp_packet *msg)
{
struct ipfix_template_record_header *tmpl_hdr;
size_t tmpl_hdr_offset = dp_packet_size(msg);
tmpl_hdr = dp_packet_put_zeros(msg, sizeof *tmpl_hdr);
tmpl_hdr->template_id =
htons(ipfix_get_template_id(l2, l3, l4, tunnel, flow_direction));
ipfix_define_template_fields(l2, l3, l4, tunnel, flow_direction,
virtual_obs_id_set, tmpl_hdr_offset, msg);
}
static void
ipfix_send_template_msgs(struct dpif_ipfix_exporter *exporter,
uint32_t export_time_sec, uint32_t obs_domain_id)
{
uint64_t msg_stub[DIV_ROUND_UP(MAX_MESSAGE_LEN, 8)];
struct dp_packet msg;
dp_packet_use_stub(&msg, msg_stub, sizeof msg_stub);
size_t set_hdr_offset, error_pkts;
size_t tx_packets = 0;
size_t tx_errors = 0;
enum ipfix_proto_l2 l2;
enum ipfix_proto_l3 l3;
enum ipfix_proto_l4 l4;
enum ipfix_proto_tunnel tunnel;
enum ipfix_flow_direction flow_direction;
ipfix_init_template_msg(export_time_sec, exporter->seq_number,
obs_domain_id, IPFIX_SET_ID_TEMPLATE, &msg,
&set_hdr_offset);
/* Define one template for each possible combination of
* protocols. */
for (l2 = 0; l2 < NUM_IPFIX_PROTO_L2; l2++) {
for (l3 = 0; l3 < NUM_IPFIX_PROTO_L3; l3++) {
for (l4 = 0; l4 < NUM_IPFIX_PROTO_L4; l4++) {
if (l3 == IPFIX_PROTO_L3_UNKNOWN &&
l4 != IPFIX_PROTO_L4_UNKNOWN) {
continue;
}
for (tunnel = 0; tunnel < NUM_IPFIX_PROTO_TUNNEL; tunnel++) {
for (flow_direction = 0;
flow_direction < NUM_IPFIX_FLOW_DIRECTION;
flow_direction++) {
/* When the size of the template packet reaches
* MAX_MESSAGE_LEN(1024), send it out.
* And then reinitialize the msg to construct a new
* packet for the following templates.
*/
if (dp_packet_size(&msg) >= MAX_MESSAGE_LEN) {
/* Send template message. */
error_pkts =
ipfix_send_template_msg(exporter->collectors,
&msg, set_hdr_offset);
tx_errors += error_pkts;
tx_packets +=
collectors_count(exporter->collectors)
- error_pkts;
/* Reinitialize the template msg. */
ipfix_init_template_msg(export_time_sec,
exporter->seq_number,
obs_domain_id,
IPFIX_SET_ID_TEMPLATE,
&msg, &set_hdr_offset);
}
ipfix_add_template_record(l2, l3, l4, tunnel,
flow_direction,
exporter->virtual_obs_id != NULL, &msg);
}
}
}
}
}
/* Send template message. */
error_pkts = ipfix_send_template_msg(exporter->collectors, &msg,
set_hdr_offset);
tx_errors += error_pkts;
tx_packets += collectors_count(exporter->collectors) - error_pkts;
exporter->ofproto_stats.tx_pkts += tx_packets;
exporter->ofproto_stats.tx_errors += tx_errors;
/* XXX: Add Options Template Sets, at least to define a Flow Keys
* Option Template. */
/* At the moment only a single Options Template Set is used, which contains
* Exporting Process Statistics. It means that there is no specific
* Observation Domain ID relevant for the entire IPFIX message and it
* should be set to 0. */
ipfix_send_options_template_msgs(exporter, export_time_sec, 0U, &msg);
dp_packet_uninit(&msg);
}
static inline uint32_t
ipfix_hash_flow_key(const struct ipfix_flow_key *flow_key, uint32_t basis)
{
uint32_t hash;
hash = hash_int(flow_key->obs_domain_id, basis);
hash = hash_int(flow_key->template_id, hash);
hash = hash_bytes(flow_key->flow_key_msg_part,
flow_key->flow_key_msg_part_size, hash);
return hash;
}
static bool
ipfix_flow_key_equal(const struct ipfix_flow_key *a,
const struct ipfix_flow_key *b)
{
/* The template ID determines the flow key size, so not need to
* compare it. */
return (a->obs_domain_id == b->obs_domain_id
&& a->template_id == b->template_id
&& memcmp(a->flow_key_msg_part, b->flow_key_msg_part,
a->flow_key_msg_part_size) == 0);
}
static struct ipfix_flow_cache_entry*
ipfix_cache_find_entry(const struct dpif_ipfix_exporter *exporter,
const struct ipfix_flow_key *flow_key)
{
struct ipfix_flow_cache_entry *entry;
HMAP_FOR_EACH_WITH_HASH (entry, flow_key_map_node,
ipfix_hash_flow_key(flow_key, 0),
&exporter->cache_flow_key_map) {
if (ipfix_flow_key_equal(&entry->flow_key, flow_key)) {
return entry;
}
}
return NULL;
}
static bool
ipfix_cache_next_timeout_msec(const struct dpif_ipfix_exporter *exporter,
long long int *next_timeout_msec)
{
struct ipfix_flow_cache_entry *entry;
LIST_FOR_EACH (entry, cache_flow_start_timestamp_list_node,
&exporter->cache_flow_start_timestamp_list) {
*next_timeout_msec = entry->flow_start_timestamp_usec / 1000LL
+ 1000LL * exporter->cache_active_timeout;
return true;
}
return false;
}
static void
ipfix_cache_aggregate_entries(struct ipfix_flow_cache_entry *from_entry,
struct ipfix_flow_cache_entry *to_entry)
{
uint64_t *to_start, *to_end, *from_start, *from_end;
uint16_t *to_min_len, *to_max_len, *from_min_len, *from_max_len;
to_start = &to_entry->flow_start_timestamp_usec;
to_end = &to_entry->flow_end_timestamp_usec;
from_start = &from_entry->flow_start_timestamp_usec;
from_end = &from_entry->flow_end_timestamp_usec;
if (*to_start > *from_start) {
*to_start = *from_start;
}
if (*to_end < *from_end) {
*to_end = *from_end;
}
to_entry->dropped_packet_delta_count +=
from_entry->dropped_packet_delta_count;
to_entry->packet_delta_count += from_entry->packet_delta_count;
to_entry->layer2_octet_delta_count += from_entry->layer2_octet_delta_count;
to_entry->dropped_packet_total_count =
from_entry->dropped_packet_total_count;
to_entry->packet_total_count = from_entry->packet_total_count;
to_entry->in_ucast_packet_total_count =
from_entry->in_ucast_packet_total_count;
to_entry->in_mcast_packet_total_count =
from_entry->in_mcast_packet_total_count;
to_entry->in_bcast_packet_total_count =
from_entry->in_bcast_packet_total_count;
to_entry->out_ucast_packet_total_count =
from_entry->out_ucast_packet_total_count;
to_entry->out_bcast_packet_total_count =
from_entry->out_bcast_packet_total_count;
to_entry->layer2_octet_total_count = from_entry->layer2_octet_total_count;
to_entry->post_mcast_packet_delta_count +=
from_entry->post_mcast_packet_delta_count;
to_entry->post_mcast_octet_delta_count +=
from_entry->post_mcast_octet_delta_count;
to_entry->dropped_octet_delta_count +=
from_entry->dropped_octet_delta_count;
to_entry->octet_delta_count += from_entry->octet_delta_count;
to_entry->octet_delta_sum_of_squares +=
from_entry->octet_delta_sum_of_squares;
to_entry->dropped_octet_total_count =
from_entry->dropped_octet_total_count;
to_entry->octet_total_count = from_entry->octet_total_count;
to_entry->octet_total_sum_of_squares =
from_entry->octet_total_sum_of_squares;
to_entry->post_mcast_packet_total_count =
from_entry->post_mcast_packet_total_count;
to_entry->post_mcast_octet_total_count =
from_entry->post_mcast_octet_total_count;
to_min_len = &to_entry->minimum_ip_total_length;
to_max_len = &to_entry->maximum_ip_total_length;
from_min_len = &from_entry->minimum_ip_total_length;
from_max_len = &from_entry->maximum_ip_total_length;
if (!*to_min_len || (*from_min_len && *to_min_len > *from_min_len)) {
*to_min_len = *from_min_len;
}
if (*to_max_len < *from_max_len) {
*to_max_len = *from_max_len;
}
to_entry->tcp_packet_delta_count += from_entry->tcp_packet_delta_count;
to_entry->tcp_ack_total_count = from_entry->tcp_ack_total_count;
to_entry->tcp_fin_total_count = from_entry->tcp_fin_total_count;
to_entry->tcp_psh_total_count = from_entry->tcp_psh_total_count;
to_entry->tcp_rst_total_count = from_entry->tcp_rst_total_count;
to_entry->tcp_syn_total_count = from_entry->tcp_syn_total_count;
to_entry->tcp_urg_total_count = from_entry->tcp_urg_total_count;
}
/* Get statistics */
static void
ipfix_get_stats__(const struct dpif_ipfix_exporter *exporter,
ofproto_ipfix_stats *stats)
{
memset(stats, 0xff, sizeof *stats);
if (!exporter) {
return;
}
*stats = exporter->ofproto_stats;
}
static void
ipfix_get_bridge_stats(const struct dpif_ipfix_bridge_exporter *exporter,
ofproto_ipfix_stats *stats)
{
ipfix_get_stats__(&exporter->exporter, stats);
}
static void
ipfix_get_flow_stats(const struct dpif_ipfix_flow_exporter *exporter,
ofproto_ipfix_stats *stats)
{
ipfix_get_stats__(&exporter->exporter, stats);
stats->collector_set_id = exporter->options->collector_set_id;
}
int
dpif_ipfix_get_stats(const struct dpif_ipfix *di,
bool bridge_ipfix,
struct ovs_list *replies)
OVS_EXCLUDED(mutex)
{
struct dpif_ipfix_flow_exporter_map_node *flow_exporter_node;
struct ofputil_ipfix_stats ois;
ovs_mutex_lock(&mutex);
if (bridge_ipfix) {
if (!di->bridge_exporter.options) {
ovs_mutex_unlock(&mutex);
return OFPERR_NXST_NOT_CONFIGURED;
}
ipfix_get_bridge_stats(&di->bridge_exporter, &ois);
ofputil_append_ipfix_stat(replies, &ois);
} else {
if (hmap_count(&di->flow_exporter_map) == 0) {
ovs_mutex_unlock(&mutex);
return OFPERR_NXST_NOT_CONFIGURED;
}
HMAP_FOR_EACH (flow_exporter_node, node,
&di->flow_exporter_map) {
ipfix_get_flow_stats(&flow_exporter_node->exporter, &ois);
ofputil_append_ipfix_stat(replies, &ois);
}
}
ovs_mutex_unlock(&mutex);
return 0;
}
/* Update partial ipfix stats */
static void
ipfix_update_stats(struct dpif_ipfix_exporter *exporter,
bool new_flow,
size_t current_flows,
enum ipfix_sampled_packet_type sampled_pkt_type)
{
if (new_flow) {
exporter->ofproto_stats.total_flows++;
exporter->ofproto_stats.current_flows = current_flows;
}
exporter->ofproto_stats.pkts++;
switch (sampled_pkt_type) {
case IPFIX_SAMPLED_PKT_IPV4_OK:
exporter->ofproto_stats.ipv4_pkts++;
break;
case IPFIX_SAMPLED_PKT_IPV6_OK:
exporter->ofproto_stats.ipv6_pkts++;
break;
case IPFIX_SAMPLED_PKT_IPV4_ERROR:
exporter->ofproto_stats.ipv4_error_pkts++;
exporter->ofproto_stats.error_pkts++;
break;
case IPFIX_SAMPLED_PKT_IPV6_ERROR:
exporter->ofproto_stats.ipv6_error_pkts++;
exporter->ofproto_stats.error_pkts++;
break;
case IPFIX_SAMPLED_PKT_UNKNOWN:
exporter->ofproto_stats.error_pkts++;
break;
case IPFIX_SAMPLED_PKT_OTHERS:
default:
break;
}
}
/* Returns the current time in the form used by IPFIX (microseconds since the
* epoch). */
static uint64_t
ipfix_now(void)
{
return time_wall_msec() * 1000ULL;
}
/* Add an entry into a flow cache. The entry is either aggregated into
* an existing entry with the same flow key and free()d, or it is
* inserted into the cache. And IPFIX stats will be updated */
static void
ipfix_cache_update(struct dpif_ipfix_exporter *exporter,
struct ipfix_flow_cache_entry *entry,
enum ipfix_sampled_packet_type sampled_pkt_type)
OVS_REQUIRES(mutex)
{
struct ipfix_flow_cache_entry *old_entry;
size_t current_flows = 0;
old_entry = ipfix_cache_find_entry(exporter, &entry->flow_key);
if (old_entry == NULL) {
hmap_insert(&exporter->cache_flow_key_map, &entry->flow_key_map_node,
ipfix_hash_flow_key(&entry->flow_key, 0));
/* As the latest entry added into the cache, it should
* logically have the highest flow_start_timestamp_usec, so
* append it at the tail. */
ovs_list_push_back(&exporter->cache_flow_start_timestamp_list,
&entry->cache_flow_start_timestamp_list_node);
/* Enforce exporter->cache_max_flows limit. */
current_flows = hmap_count(&exporter->cache_flow_key_map);
ipfix_update_stats(exporter, true, current_flows, sampled_pkt_type);
if (current_flows > exporter->cache_max_flows) {
dpif_ipfix_cache_expire_now(exporter, false);
}
} else {
ipfix_cache_aggregate_entries(entry, old_entry);
free(entry);
ipfix_update_stats(exporter, false, current_flows, sampled_pkt_type);
}
}
static void
ipfix_destroy_iface_data_record(struct ipfix_data_record_flow_key_iface *data)
{
free(data->if_descr);
free(data->if_name);
}
/* Fills '*data' structure based on port number 'port_no'. Caller must destroy
* 'data' with ipfix_destroy_iface_data_record(). */
static int
ipfix_get_iface_data_record(const struct dpif_ipfix *di, odp_port_t port_no,
struct ipfix_data_record_flow_key_iface *data)
OVS_REQUIRES(mutex)
{
struct dpif_ipfix_port *port;
struct smap netdev_status;
port = dpif_ipfix_find_port(di, port_no);
if (!port) {
return -1;
}
smap_init(&netdev_status);
if (!netdev_get_status(port->ofport->netdev, &netdev_status)) {
data->if_type = htonl(smap_get_ullong(&netdev_status, "if_type", 0));
data->if_descr = nullable_xstrdup(smap_get(&netdev_status,
"if_descr"));
} else {
data->if_type = 0;
data->if_descr = NULL;
}
smap_destroy(&netdev_status);
data->if_index = htonl(port->ifindex);
data->if_descr_len = data->if_descr ? strnlen(data->if_descr,
MAX_IF_DESCR_LEN) : 0;
data->if_name = nullable_xstrdup(netdev_get_name(port->ofport->netdev));
data->if_name_len = data->if_name ? strnlen(data->if_name,
MAX_IF_NAME_LEN) : 0;
return 0;
}
static void
ipfix_put_iface_data_record(const struct dpif_ipfix *di, odp_port_t port_no,
struct dp_packet *msg)
OVS_REQUIRES(mutex)
{
struct ipfix_data_record_flow_key_iface data;
int err;
memset(&data, 0, sizeof(struct ipfix_data_record_flow_key_iface));
err = ipfix_get_iface_data_record(di, port_no, &data);
if (err == 0) {
dp_packet_put(msg, &data.if_index, sizeof data.if_index);
dp_packet_put(msg, &data.if_type, sizeof data.if_type);
dp_packet_put(msg, &data.if_name_len, sizeof data.if_name_len);
if (data.if_name_len) {
dp_packet_put(msg, data.if_name, data.if_name_len);
}
dp_packet_put(msg, &data.if_descr_len, sizeof data.if_descr_len);
if (data.if_descr_len) {
dp_packet_put(msg, data.if_descr, data.if_descr_len);
}
ipfix_destroy_iface_data_record(&data);
} else {
dp_packet_put_zeros(msg, sizeof data.if_index);
dp_packet_put_zeros(msg, sizeof data.if_type);
dp_packet_put_zeros(msg, sizeof data.if_name_len);
dp_packet_put_zeros(msg, sizeof data.if_descr_len);
}
}
static enum ipfix_sampled_packet_type
ipfix_cache_entry_init(const struct dpif_ipfix *di,
struct ipfix_flow_cache_entry *entry,
const struct dp_packet *packet, const struct flow *flow,
uint64_t packet_delta_count, uint32_t obs_domain_id,
uint32_t obs_point_id, odp_port_t output_odp_port,
enum nx_action_sample_direction direction,
const struct dpif_ipfix_port *tunnel_port,
const struct flow_tnl *tunnel_key,
struct dpif_ipfix_global_stats *stats,
const struct dpif_ipfix_actions *ipfix_actions)
OVS_REQUIRES(mutex)
{
struct ipfix_flow_key *flow_key;
struct dp_packet msg;
enum ipfix_proto_l2 l2;
enum ipfix_proto_l3 l3;
enum ipfix_proto_l4 l4;
enum ipfix_proto_tunnel tunnel = IPFIX_PROTO_NOT_TUNNELED;
enum ipfix_sampled_packet_type sampled_pkt_type = IPFIX_SAMPLED_PKT_UNKNOWN;
uint8_t ethernet_header_length;
uint16_t ethernet_total_length;
bool is_multicast = false;
bool is_broadcast = false;
flow_key = &entry->flow_key;
dp_packet_use_stub(&msg, flow_key->flow_key_msg_part,
sizeof flow_key->flow_key_msg_part);
/* Choose the right template ID matching the protocols in the
* sampled packet. */
l2 = (flow->vlans[0].tci == 0) ? IPFIX_PROTO_L2_ETH : IPFIX_PROTO_L2_VLAN;
switch(ntohs(flow->dl_type)) {
case ETH_TYPE_IP:
l3 = IPFIX_PROTO_L3_IPV4;
sampled_pkt_type = IPFIX_SAMPLED_PKT_IPV4_OK;
switch(flow->nw_proto) {
case IPPROTO_TCP:
l4 = IPFIX_PROTO_L4_TCP;
break;
case IPPROTO_UDP:
l4 = IPFIX_PROTO_L4_UDP;
break;
case IPPROTO_SCTP:
l4 = IPFIX_PROTO_L4_SCTP;
break;
case IPPROTO_ICMP:
l4 = IPFIX_PROTO_L4_ICMP;
break;
default:
l4 = IPFIX_PROTO_L4_UNKNOWN;
sampled_pkt_type = IPFIX_SAMPLED_PKT_IPV4_ERROR;
}
break;
case ETH_TYPE_IPV6:
l3 = IPFIX_PROTO_L3_IPV6;
sampled_pkt_type = IPFIX_SAMPLED_PKT_IPV6_OK;
switch(flow->nw_proto) {
case IPPROTO_TCP:
l4 = IPFIX_PROTO_L4_TCP;
break;
case IPPROTO_UDP:
l4 = IPFIX_PROTO_L4_UDP;
break;
case IPPROTO_SCTP:
l4 = IPFIX_PROTO_L4_SCTP;
break;
case IPPROTO_ICMPV6:
l4 = IPFIX_PROTO_L4_ICMP;
break;
default:
l4 = IPFIX_PROTO_L4_UNKNOWN;
sampled_pkt_type = IPFIX_SAMPLED_PKT_IPV6_ERROR;
}
break;
default:
l3 = IPFIX_PROTO_L3_UNKNOWN;
l4 = IPFIX_PROTO_L4_UNKNOWN;
sampled_pkt_type = IPFIX_SAMPLED_PKT_OTHERS;
}
if (tunnel_port && tunnel_key) {
tunnel = IPFIX_PROTO_TUNNELED;
}
uint8_t flow_direction =
(direction == NX_ACTION_SAMPLE_INGRESS ? INGRESS_FLOW
: direction == NX_ACTION_SAMPLE_EGRESS ? EGRESS_FLOW
: output_odp_port == ODPP_NONE ? INGRESS_FLOW : EGRESS_FLOW);
flow_key->obs_domain_id = obs_domain_id;
flow_key->template_id = ipfix_get_template_id(l2, l3, l4, tunnel,
flow_direction);
/* The fields defined in the ipfix_data_record_* structs and sent
* below must match exactly the templates defined in
* ipfix_define_template_fields. */
ethernet_header_length = (l2 == IPFIX_PROTO_L2_VLAN)
? VLAN_ETH_HEADER_LEN : ETH_HEADER_LEN;
ethernet_total_length = dp_packet_size(packet);
/* Common Ethernet entities. */
{
struct ipfix_data_record_flow_key_common *data_common;
data_common = dp_packet_put_zeros(&msg, sizeof *data_common);
data_common->observation_point_id = htonl(obs_point_id);
data_common->flow_direction = flow_direction;
data_common->source_mac_address = flow->dl_src;
data_common->destination_mac_address = flow->dl_dst;
data_common->ethernet_type = flow->dl_type;
data_common->ethernet_header_length = ethernet_header_length;
}
/* Interface Information Elements */
ipfix_put_iface_data_record(di, flow->in_port.odp_port, &msg);
if (flow_direction == EGRESS_FLOW) {
ipfix_put_iface_data_record(di, output_odp_port, &msg);
}
if (l2 == IPFIX_PROTO_L2_VLAN) {
struct ipfix_data_record_flow_key_vlan *data_vlan;
uint16_t vlan_id = vlan_tci_to_vid(flow->vlans[0].tci);
uint8_t priority = vlan_tci_to_pcp(flow->vlans[0].tci);
data_vlan = dp_packet_put_zeros(&msg, sizeof *data_vlan);
data_vlan->vlan_id = htons(vlan_id);
data_vlan->dot1q_vlan_id = htons(vlan_id);
data_vlan->dot1q_priority = priority;
}
if (l3 != IPFIX_PROTO_L3_UNKNOWN) {
struct ipfix_data_record_flow_key_ip *data_ip;
data_ip = dp_packet_put_zeros(&msg, sizeof *data_ip);
data_ip->ip_version = (l3 == IPFIX_PROTO_L3_IPV4) ? 4 : 6;
data_ip->ip_ttl = flow->nw_ttl;
data_ip->protocol_identifier = flow->nw_proto;
data_ip->ip_diff_serv_code_point = flow->nw_tos >> 2;
data_ip->ip_precedence = flow->nw_tos >> 5;
data_ip->ip_class_of_service = flow->nw_tos;
if (l3 == IPFIX_PROTO_L3_IPV4) {
struct ipfix_data_record_flow_key_ipv4 *data_ipv4;
data_ipv4 = dp_packet_put_zeros(&msg, sizeof *data_ipv4);
data_ipv4->source_ipv4_address = flow->nw_src;
data_ipv4->destination_ipv4_address = flow->nw_dst;
} else { /* l3 == IPFIX_PROTO_L3_IPV6 */
struct ipfix_data_record_flow_key_ipv6 *data_ipv6;
data_ipv6 = dp_packet_put_zeros(&msg, sizeof *data_ipv6);
memcpy(data_ipv6->source_ipv6_address, &flow->ipv6_src,
sizeof flow->ipv6_src);
memcpy(data_ipv6->destination_ipv6_address, &flow->ipv6_dst,
sizeof flow->ipv6_dst);
data_ipv6->flow_label_ipv6 = flow->ipv6_label;
}
}
if (l4 == IPFIX_PROTO_L4_TCP
|| l4 == IPFIX_PROTO_L4_UDP
|| l4 == IPFIX_PROTO_L4_SCTP) {
struct ipfix_data_record_flow_key_transport *data_transport;
data_transport = dp_packet_put_zeros(&msg, sizeof *data_transport);
data_transport->source_transport_port = flow->tp_src;
data_transport->destination_transport_port = flow->tp_dst;
} else if (l4 == IPFIX_PROTO_L4_ICMP) {
struct ipfix_data_record_flow_key_icmp *data_icmp;
data_icmp = dp_packet_put_zeros(&msg, sizeof *data_icmp);
data_icmp->icmp_type = ntohs(flow->tp_src) & 0xff;
data_icmp->icmp_code = ntohs(flow->tp_dst) & 0xff;
}
if (tunnel == IPFIX_PROTO_TUNNELED) {
struct ipfix_data_record_flow_key_tunnel *data_tunnel;
const uint8_t *tun_id;
data_tunnel = dp_packet_put_zeros(&msg, sizeof *data_tunnel +
tunnel_port->tunnel_key_length);
data_tunnel->tunnel_source_ipv4_address = tunnel_key->ip_src;
data_tunnel->tunnel_destination_ipv4_address = tunnel_key->ip_dst;
/* The tunnel_protocol_identifier is from tunnel_proto array, which
* contains protocol_identifiers of each tunnel type.
*/
data_tunnel->tunnel_protocol_identifier =
tunnel_protocol[tunnel_port->tunnel_type];
data_tunnel->tunnel_source_transport_port = tunnel_key->tp_src;
data_tunnel->tunnel_destination_transport_port = tunnel_key->tp_dst;
data_tunnel->tunnel_type = tunnel_port->tunnel_type;
data_tunnel->tunnel_key_length = tunnel_port->tunnel_key_length;
/* tun_id is in network order, and tunnel key is in low bits. */
tun_id = (const uint8_t *) &tunnel_key->tun_id;
memcpy(data_tunnel->tunnel_key,
&tun_id[8 - tunnel_port->tunnel_key_length],
tunnel_port->tunnel_key_length);
}
flow_key->flow_key_msg_part_size = dp_packet_size(&msg);
if (eth_addr_is_broadcast(flow->dl_dst)) {
is_broadcast = true;
} else if (eth_addr_is_multicast(flow->dl_dst)) {
is_multicast = true;
}
{
uint64_t layer2_octet_delta_count;
/* Calculate the total matched octet count by considering as
* an approximation that all matched packets have the same
* length. */
layer2_octet_delta_count = packet_delta_count * ethernet_total_length;
entry->flow_end_timestamp_usec = ipfix_now();
entry->flow_start_timestamp_usec = entry->flow_end_timestamp_usec;
if (ipfix_actions && ipfix_actions->output_action) {
entry->dropped_packet_delta_count = 0;
} else {
entry->dropped_packet_delta_count = packet_delta_count;
}
entry->packet_delta_count = packet_delta_count;
entry->layer2_octet_delta_count = layer2_octet_delta_count;
stats->dropped_packet_total_count += entry->dropped_packet_delta_count;
stats->packet_total_count += packet_delta_count;
stats->layer2_octet_total_count += layer2_octet_delta_count;
entry->post_mcast_packet_delta_count = 0;
if (is_broadcast) {
if (flow_direction == INGRESS_FLOW) {
stats->in_bcast_packet_total_count += packet_delta_count;
} else if (flow_direction == EGRESS_FLOW) {
stats->out_bcast_packet_total_count += packet_delta_count;
}
} else if (is_multicast) {
if (flow_direction == INGRESS_FLOW) {
stats->in_mcast_packet_total_count += packet_delta_count;
} else if (flow_direction == EGRESS_FLOW) {
entry->post_mcast_packet_delta_count = packet_delta_count;
stats->post_mcast_packet_total_count += packet_delta_count;
}
} else {
if (flow_direction == INGRESS_FLOW) {
stats->in_ucast_packet_total_count += packet_delta_count;
} else if (flow_direction == EGRESS_FLOW) {
stats->out_ucast_packet_total_count += packet_delta_count;
}
}
entry->dropped_packet_total_count = stats->dropped_packet_total_count;
entry->packet_total_count = stats->packet_total_count;
entry->in_ucast_packet_total_count =
stats->in_ucast_packet_total_count;
entry->in_mcast_packet_total_count =
stats->in_mcast_packet_total_count;
entry->in_bcast_packet_total_count =
stats->in_bcast_packet_total_count;
entry->out_ucast_packet_total_count =
stats->out_ucast_packet_total_count;
entry->out_bcast_packet_total_count =
stats->out_bcast_packet_total_count;
entry->post_mcast_packet_total_count =
stats->post_mcast_packet_total_count;
entry->layer2_octet_total_count = stats->layer2_octet_total_count;
}
if (l3 != IPFIX_PROTO_L3_UNKNOWN) {
uint16_t ip_total_length =
ethernet_total_length - ethernet_header_length;
uint64_t octet_delta_count;
/* Calculate the total matched octet count by considering as
* an approximation that all matched packets have the same
* length. */
octet_delta_count = packet_delta_count * ip_total_length;
if (ipfix_actions && ipfix_actions->output_action) {
entry->dropped_octet_delta_count = 0;
} else {
entry->dropped_octet_delta_count = octet_delta_count;
}
entry->octet_delta_count = octet_delta_count;
entry->octet_delta_sum_of_squares = octet_delta_count * ip_total_length;
entry->minimum_ip_total_length = ip_total_length;
entry->maximum_ip_total_length = ip_total_length;
stats->dropped_octet_total_count += entry->dropped_octet_delta_count;
stats->octet_total_count += octet_delta_count;
stats->octet_total_sum_of_squares += entry->octet_delta_sum_of_squares;
if (is_multicast && flow_direction == EGRESS_FLOW) {
entry->post_mcast_octet_delta_count = octet_delta_count;
stats->post_mcast_octet_total_count += octet_delta_count;
} else {
entry->post_mcast_octet_delta_count = 0;
}
} else {
entry->octet_delta_sum_of_squares = 0;
entry->minimum_ip_total_length = 0;
entry->maximum_ip_total_length = 0;
}
entry->dropped_octet_total_count = stats->dropped_octet_total_count;
entry->octet_total_sum_of_squares = stats->octet_total_sum_of_squares;
entry->octet_total_count = stats->octet_total_count;
entry->post_mcast_octet_total_count =
stats->post_mcast_octet_total_count;
if (l4 == IPFIX_PROTO_L4_TCP) {
uint16_t tcp_flags = ntohs(flow->tcp_flags);
entry->tcp_packet_delta_count = packet_delta_count;
if (tcp_flags & TCP_ACK) {
stats->tcp_ack_total_count += packet_delta_count;
}
if (tcp_flags & TCP_FIN) {
stats->tcp_fin_total_count += packet_delta_count;
}
if (tcp_flags & TCP_PSH) {
stats->tcp_psh_total_count += packet_delta_count;
}
if (tcp_flags & TCP_RST) {
stats->tcp_rst_total_count += packet_delta_count;
}
if (tcp_flags & TCP_SYN) {
stats->tcp_syn_total_count += packet_delta_count;
}
if (tcp_flags & TCP_URG) {
stats->tcp_urg_total_count += packet_delta_count;
}
} else {
entry->tcp_packet_delta_count = 0;
}
entry->tcp_ack_total_count = stats->tcp_ack_total_count;
entry->tcp_fin_total_count = stats->tcp_fin_total_count;
entry->tcp_psh_total_count = stats->tcp_psh_total_count;
entry->tcp_rst_total_count = stats->tcp_rst_total_count;
entry->tcp_syn_total_count = stats->tcp_syn_total_count;
entry->tcp_urg_total_count = stats->tcp_urg_total_count;
return sampled_pkt_type;
}
/* Send each single data record in its own data set, to simplify the
* implementation by avoiding having to group record by template ID
* before sending. */
static void
ipfix_put_data_set(uint32_t export_time_sec,
struct ipfix_flow_cache_entry *entry,
enum ipfix_flow_end_reason flow_end_reason,
const char *virtual_obs_id,
uint8_t virtual_obs_len,
struct dp_packet *msg)
{
size_t set_hdr_offset;
struct ipfix_set_header *set_hdr;
set_hdr_offset = dp_packet_size(msg);
/* Put a Data Set. */
set_hdr = dp_packet_put_zeros(msg, sizeof *set_hdr);
set_hdr->set_id = htons(entry->flow_key.template_id);
/* Copy the flow key part of the data record. */
dp_packet_put(msg, entry->flow_key.flow_key_msg_part,
entry->flow_key.flow_key_msg_part_size);
/* Export virtual observation ID. */
if (virtual_obs_id) {
dp_packet_put(msg, &virtual_obs_len, sizeof(virtual_obs_len));
dp_packet_put(msg, virtual_obs_id, virtual_obs_len);
}
/* Put the non-key part of the data record. */
{
struct ipfix_data_record_aggregated_common *data_aggregated_common;
uint64_t export_time_usec, flow_start_delta_usec, flow_end_delta_usec;
/* Calculate the negative deltas relative to the export time
* in seconds sent in the header, not the exact export
* time. */
export_time_usec = 1000000LL * export_time_sec;
flow_start_delta_usec = export_time_usec
- entry->flow_start_timestamp_usec;
flow_end_delta_usec = export_time_usec
- entry->flow_end_timestamp_usec;
data_aggregated_common = dp_packet_put_zeros(
msg, sizeof *data_aggregated_common);
data_aggregated_common->flow_start_delta_microseconds = htonl(
flow_start_delta_usec);
data_aggregated_common->flow_end_delta_microseconds = htonl(
flow_end_delta_usec);
data_aggregated_common->dropped_packet_delta_count = htonll(
entry->dropped_packet_delta_count);
data_aggregated_common->dropped_packet_total_count = htonll(
entry->dropped_packet_total_count);
data_aggregated_common->packet_delta_count = htonll(
entry->packet_delta_count);
data_aggregated_common->packet_total_count = htonll(
entry->packet_total_count);
data_aggregated_common->in_ucast_packet_total_count = htonll(
entry->in_ucast_packet_total_count);
data_aggregated_common->in_mcast_packet_total_count = htonll(
entry->in_mcast_packet_total_count);
data_aggregated_common->in_bcast_packet_total_count = htonll(
entry->in_bcast_packet_total_count);
data_aggregated_common->out_ucast_packet_total_count = htonll(
entry->out_ucast_packet_total_count);
data_aggregated_common->out_bcast_packet_total_count = htonll(
entry->out_bcast_packet_total_count);
data_aggregated_common->layer2_octet_delta_count = htonll(
entry->layer2_octet_delta_count);
data_aggregated_common->layer2_octet_total_count = htonll(
entry->layer2_octet_total_count);
data_aggregated_common->flow_end_reason = flow_end_reason;
data_aggregated_common->post_mcast_packet_delta_count = htonll(
entry->post_mcast_packet_delta_count);
data_aggregated_common->post_mcast_packet_total_count = htonll(
entry->post_mcast_packet_total_count);
}
if (entry->octet_delta_sum_of_squares) { /* IP packet. */
struct ipfix_data_record_aggregated_ip *data_aggregated_ip;
data_aggregated_ip = dp_packet_put_zeros(
msg, sizeof *data_aggregated_ip);
data_aggregated_ip->dropped_octet_delta_count = htonll(
entry->dropped_octet_delta_count);
data_aggregated_ip->dropped_octet_total_count = htonll(
entry->dropped_octet_total_count);
data_aggregated_ip->octet_delta_count = htonll(
entry->octet_delta_count);
data_aggregated_ip->octet_total_count = htonll(
entry->octet_total_count);
data_aggregated_ip->octet_delta_sum_of_squares = htonll(
entry->octet_delta_sum_of_squares);
data_aggregated_ip->octet_total_sum_of_squares = htonll(
entry->octet_total_sum_of_squares);
data_aggregated_ip->minimum_ip_total_length = htonll(
entry->minimum_ip_total_length);
data_aggregated_ip->maximum_ip_total_length = htonll(
entry->maximum_ip_total_length);
data_aggregated_ip->post_mcast_octet_delta_count = htonll(
entry->post_mcast_octet_delta_count);
data_aggregated_ip->post_mcast_octet_total_count = htonll(
entry->post_mcast_octet_total_count);
}
if (entry->tcp_packet_delta_count) {
struct ipfix_data_record_aggregated_tcp *data_aggregated_tcp;
data_aggregated_tcp = dp_packet_put_zeros(
msg, sizeof *data_aggregated_tcp);
data_aggregated_tcp->tcp_ack_total_count = htonll(
entry->tcp_ack_total_count);
data_aggregated_tcp->tcp_fin_total_count = htonll(
entry->tcp_fin_total_count);
data_aggregated_tcp->tcp_psh_total_count = htonll(
entry->tcp_psh_total_count);
data_aggregated_tcp->tcp_rst_total_count = htonll(
entry->tcp_rst_total_count);
data_aggregated_tcp->tcp_syn_total_count = htonll(
entry->tcp_syn_total_count);
data_aggregated_tcp->tcp_urg_total_count = htonll(
entry->tcp_urg_total_count);
}
set_hdr = (struct ipfix_set_header*)((uint8_t*)dp_packet_data(msg) + set_hdr_offset);
set_hdr->length = htons(dp_packet_size(msg) - set_hdr_offset);
}
static void
ipfix_put_exporter_data_set(uint32_t exporting_process_id,
const ofproto_ipfix_stats *ofproto_stats,
struct dp_packet *msg)
{
size_t set_hdr_offset;
struct ipfix_set_header *set_hdr;
set_hdr_offset = dp_packet_size(msg);
/* Put a Data Set. */
set_hdr = dp_packet_put_zeros(msg, sizeof *set_hdr);
set_hdr->set_id = htons(
ipfix_get_options_template_id(IPFIX_OPTIONS_TEMPLATE_EXPORTER_STATS));
{
struct ipfix_data_record_exporter_stats *data_exporter_stats;
data_exporter_stats = dp_packet_put_zeros(
msg, sizeof *data_exporter_stats);
data_exporter_stats->exporting_process_id =
htonl(exporting_process_id);
data_exporter_stats->not_sent_packet_total_count = htonll(
ofproto_stats->tx_errors);
}
set_hdr = (struct ipfix_set_header *)
((uint8_t *)dp_packet_data(msg) + set_hdr_offset);
set_hdr->length = htons(dp_packet_size(msg) - set_hdr_offset);
}
/* Send an IPFIX message with a single data set containing Exporting Process
* Reliability Statistics. */
static void
ipfix_send_exporter_data_msg(struct dpif_ipfix_exporter *exporter,
uint32_t export_time_sec)
{
uint64_t msg_stub[DIV_ROUND_UP(MAX_MESSAGE_LEN, 8)];
struct dp_packet msg;
size_t tx_errors;
dp_packet_use_stub(&msg, msg_stub, sizeof msg_stub);
/* In case of Exporting Process Statistics, Observation Domain ID should
* be set to 0. */
ipfix_init_header(export_time_sec, exporter->seq_number++, 0U, &msg);
ipfix_put_exporter_data_set(exporter->exporter_id,
&exporter->ofproto_stats, &msg);
tx_errors = ipfix_send_msg(exporter->collectors, &msg);
dp_packet_uninit(&msg);
exporter->ofproto_stats.tx_pkts +=
collectors_count(exporter->collectors) - tx_errors;
exporter->ofproto_stats.tx_errors += tx_errors;
}
/* Send an IPFIX message with a single data record. */
static void
ipfix_send_data_msg(struct dpif_ipfix_exporter *exporter,
uint32_t export_time_sec,
struct ipfix_flow_cache_entry *entry,
enum ipfix_flow_end_reason flow_end_reason)
{
uint64_t msg_stub[DIV_ROUND_UP(MAX_MESSAGE_LEN, 8)];
struct dp_packet msg;
size_t tx_errors;
dp_packet_use_stub(&msg, msg_stub, sizeof msg_stub);
ipfix_init_header(export_time_sec, exporter->seq_number++,
entry->flow_key.obs_domain_id, &msg);
ipfix_put_data_set(export_time_sec, entry, flow_end_reason,
exporter->virtual_obs_id, exporter->virtual_obs_len,
&msg);
tx_errors = ipfix_send_msg(exporter->collectors, &msg);
dp_packet_uninit(&msg);
exporter->ofproto_stats.current_flows--;
exporter->ofproto_stats.tx_pkts +=
collectors_count(exporter->collectors) - tx_errors;
exporter->ofproto_stats.tx_errors += tx_errors;
}
static void
dpif_ipfix_sample(const struct dpif_ipfix *di,
struct dpif_ipfix_exporter *exporter,
const struct dp_packet *packet, const struct flow *flow,
uint64_t packet_delta_count, uint32_t obs_domain_id,
uint32_t obs_point_id, odp_port_t output_odp_port,
enum nx_action_sample_direction direction,
const struct dpif_ipfix_port *tunnel_port,
const struct flow_tnl *tunnel_key,
const struct dpif_ipfix_actions *ipfix_actions)
OVS_REQUIRES(mutex)
{
struct ipfix_flow_cache_entry *entry;
enum ipfix_sampled_packet_type sampled_packet_type;
/* Create a flow cache entry from the sample. */
entry = xmalloc(sizeof *entry);
sampled_packet_type =
ipfix_cache_entry_init(di, entry, packet,
flow, packet_delta_count,
obs_domain_id, obs_point_id,
output_odp_port, direction,
tunnel_port, tunnel_key,
&exporter->ipfix_global_stats,
ipfix_actions);
ipfix_cache_update(exporter, entry, sampled_packet_type);
}
static bool
bridge_exporter_enabled(struct dpif_ipfix *di)
{
return di->bridge_exporter.probability > 0;
}
void
dpif_ipfix_bridge_sample(struct dpif_ipfix *di, const struct dp_packet *packet,
const struct flow *flow,
odp_port_t input_odp_port, odp_port_t output_odp_port,
const struct flow_tnl *output_tunnel_key,
const struct dpif_ipfix_actions *ipfix_actions)
OVS_EXCLUDED(mutex)
{
uint64_t packet_delta_count;
const struct flow_tnl *tunnel_key = NULL;
struct dpif_ipfix_port * tunnel_port = NULL;
ovs_mutex_lock(&mutex);
if (!bridge_exporter_enabled(di)) {
ovs_mutex_unlock(&mutex);
return;
}
/* Skip BFD packets:
* Bidirectional Forwarding Detection(BFD) packets are for monitoring
* the tunnel link status and consumed by ovs itself. No need to
* smaple them.
* CF IETF RFC 5881, BFD control packet is the UDP packet with
* destination port 3784, and BFD echo packet is the UDP packet with
* destination port 3785.
*/
if (is_ip_any(flow) &&
flow->nw_proto == IPPROTO_UDP &&
(flow->tp_dst == htons(BFD_CONTROL_DEST_PORT) ||
flow->tp_dst == htons(BFD_ECHO_DEST_PORT))) {
ovs_mutex_unlock(&mutex);
return;
}
/* Use the sampling probability as an approximation of the number
* of matched packets. */
packet_delta_count = UINT32_MAX / di->bridge_exporter.probability;
if (di->bridge_exporter.options->enable_tunnel_sampling) {
if (output_odp_port == ODPP_NONE && flow->tunnel.ip_dst) {
/* Input tunnel. */
tunnel_key = &flow->tunnel;
tunnel_port = dpif_ipfix_find_tunnel_port(di, input_odp_port);
}
if (output_odp_port != ODPP_NONE && output_tunnel_key) {
/* Output tunnel, output_tunnel_key must be valid. */
tunnel_key = output_tunnel_key;
tunnel_port = dpif_ipfix_find_tunnel_port(di, output_odp_port);
}
}
dpif_ipfix_sample(di, &di->bridge_exporter.exporter, packet, flow,
packet_delta_count,
di->bridge_exporter.options->obs_domain_id,
di->bridge_exporter.options->obs_point_id,
output_odp_port, NX_ACTION_SAMPLE_DEFAULT,
tunnel_port, tunnel_key, ipfix_actions);
ovs_mutex_unlock(&mutex);
}
void
dpif_ipfix_flow_sample(struct dpif_ipfix *di, const struct dp_packet *packet,
const struct flow *flow,
const struct user_action_cookie *cookie,
odp_port_t input_odp_port,
const struct flow_tnl *output_tunnel_key,
const struct dpif_ipfix_actions *ipfix_actions)
OVS_EXCLUDED(mutex)
{
struct dpif_ipfix_flow_exporter_map_node *node;
const struct flow_tnl *tunnel_key = NULL;
struct dpif_ipfix_port * tunnel_port = NULL;
odp_port_t output_odp_port = cookie->flow_sample.output_odp_port;
uint32_t collector_set_id = cookie->flow_sample.collector_set_id;
uint16_t probability = cookie->flow_sample.probability;
/* Use the sampling probability as an approximation of the number
* of matched packets. */
uint64_t packet_delta_count = USHRT_MAX / probability;
ovs_mutex_lock(&mutex);
node = dpif_ipfix_find_flow_exporter_map_node(di, collector_set_id);
if (node) {
if (node->exporter.options->enable_tunnel_sampling) {
if (output_odp_port == ODPP_NONE && flow->tunnel.ip_dst) {
/* Input tunnel. */
tunnel_key = &flow->tunnel;
tunnel_port = dpif_ipfix_find_tunnel_port(di, input_odp_port);
}
if (output_odp_port != ODPP_NONE && output_tunnel_key) {
/* Output tunnel, output_tunnel_key must be valid. */
tunnel_key = output_tunnel_key;
tunnel_port = dpif_ipfix_find_tunnel_port(di, output_odp_port);
}
}
dpif_ipfix_sample(di, &node->exporter.exporter, packet, flow,
packet_delta_count,
cookie->flow_sample.obs_domain_id,
cookie->flow_sample.obs_point_id,
output_odp_port, cookie->flow_sample.direction,
tunnel_port, tunnel_key, ipfix_actions);
}
ovs_mutex_unlock(&mutex);
}
static bool
dpif_ipfix_should_send_template(struct dpif_ipfix_exporter *exporter,
const uint32_t observation_domain_id,
const uint32_t export_time_sec)
OVS_REQUIRES(mutex)
{
struct dpif_ipfix_domain *domain;
domain = dpif_ipfix_exporter_find_domain(exporter,
observation_domain_id);
if (!domain) {
/* First time we see this obs_domain_id. */
domain = dpif_ipfix_exporter_insert_domain(exporter,
observation_domain_id);
}
if ((domain->last_template_set_time + exporter->template_interval)
<= export_time_sec) {
domain->last_template_set_time = export_time_sec;
return true;
}
return false;
}
static void
dpif_ipfix_cache_expire(struct dpif_ipfix_exporter *exporter,
bool forced_end, const uint64_t export_time_usec,
const uint32_t export_time_sec) OVS_REQUIRES(mutex)
{
struct ipfix_flow_cache_entry *entry;
uint64_t max_flow_start_timestamp_usec;
enum ipfix_flow_end_reason flow_end_reason;
if (ovs_list_is_empty(&exporter->cache_flow_start_timestamp_list)) {
return;
}
max_flow_start_timestamp_usec = export_time_usec -
1000000LL * exporter->cache_active_timeout;
LIST_FOR_EACH_SAFE (entry, cache_flow_start_timestamp_list_node,
&exporter->cache_flow_start_timestamp_list) {
if (forced_end) {
flow_end_reason = FORCED_END;
} else if (entry->flow_start_timestamp_usec
<= max_flow_start_timestamp_usec) {
flow_end_reason = ACTIVE_TIMEOUT;
} else if (hmap_count(&exporter->cache_flow_key_map)
> exporter->cache_max_flows) {
/* Enforce exporter->cache_max_flows. */
flow_end_reason = LACK_OF_RESOURCES;
} else {
/* Remaining flows haven't expired yet. */
break;
}
if ((exporter->last_stats_sent_time + exporter->stats_interval)
<= export_time_sec) {
exporter->last_stats_sent_time = export_time_sec;
ipfix_send_exporter_data_msg(exporter, export_time_sec);
}
if (dpif_ipfix_should_send_template(exporter,
entry->flow_key.obs_domain_id,
export_time_sec)) {
VLOG_DBG("Sending templates for ObservationDomainID %"PRIu32,
entry->flow_key.obs_domain_id);
ipfix_send_template_msgs(exporter, export_time_sec,
entry->flow_key.obs_domain_id);
}
ovs_list_remove(&entry->cache_flow_start_timestamp_list_node);
hmap_remove(&exporter->cache_flow_key_map,
&entry->flow_key_map_node);
/* XXX: Group multiple data records for the same obs domain id
* into the same message. */
ipfix_send_data_msg(exporter, export_time_sec, entry, flow_end_reason);
free(entry);
}
}
static void
get_export_time_now(uint64_t *export_time_usec, uint32_t *export_time_sec)
{
*export_time_usec = ipfix_now();
/* The IPFIX start and end deltas are negative deltas relative to
* the export time, so set the export time 1 second off to
* calculate those deltas. */
*export_time_sec = DIV_ROUND_UP(*export_time_usec, 1000000);
}
static void
dpif_ipfix_cache_expire_now(struct dpif_ipfix_exporter *exporter,
bool forced_end) OVS_REQUIRES(mutex)
{
uint64_t export_time_usec;
uint32_t export_time_sec;
get_export_time_now(&export_time_usec, &export_time_sec);
dpif_ipfix_cache_expire(exporter, forced_end, export_time_usec,
export_time_sec);
}
void
dpif_ipfix_run(struct dpif_ipfix *di) OVS_EXCLUDED(mutex)
{
uint64_t export_time_usec;
uint32_t export_time_sec;
struct dpif_ipfix_flow_exporter_map_node *flow_exporter_node;
ovs_mutex_lock(&mutex);
get_export_time_now(&export_time_usec, &export_time_sec);
if (bridge_exporter_enabled(di)) {
dpif_ipfix_cache_expire(
&di->bridge_exporter.exporter, false, export_time_usec,
export_time_sec);
}
HMAP_FOR_EACH (flow_exporter_node, node, &di->flow_exporter_map) {
dpif_ipfix_cache_expire(
&flow_exporter_node->exporter.exporter, false, export_time_usec,
export_time_sec);
}
ovs_mutex_unlock(&mutex);
}
void
dpif_ipfix_wait(struct dpif_ipfix *di) OVS_EXCLUDED(mutex)
{
long long int next_timeout_msec = LLONG_MAX;
struct dpif_ipfix_flow_exporter_map_node *flow_exporter_node;
ovs_mutex_lock(&mutex);
if (bridge_exporter_enabled(di)) {
if (ipfix_cache_next_timeout_msec(
&di->bridge_exporter.exporter, &next_timeout_msec)) {
poll_timer_wait_until(next_timeout_msec);
}
}
HMAP_FOR_EACH (flow_exporter_node, node, &di->flow_exporter_map) {
if (ipfix_cache_next_timeout_msec(
&flow_exporter_node->exporter.exporter, &next_timeout_msec)) {
poll_timer_wait_until(next_timeout_msec);
}
}
ovs_mutex_unlock(&mutex);
}
static void
dpif_ipfix_read_sample_actions(const struct flow *flow,
const struct nlattr *actions,
size_t actions_len,
struct dpif_ipfix_actions *ipfix_actions)
{
const struct nlattr *a;
unsigned int left;
uint32_t probability = 0;
struct dpif_ipfix_actions sample_actions = {0};
if (actions_len == 0) {
return;
}
NL_ATTR_FOR_EACH (a, left, actions, actions_len) {
enum ovs_sample_attr type = nl_attr_type(a);
switch (type) {
case OVS_SAMPLE_ATTR_PROBABILITY:
probability = nl_attr_get_u32(a);
break;
case OVS_SAMPLE_ATTR_ACTIONS:
dpif_ipfix_read_actions(flow, nl_attr_get(a), nl_attr_get_size(a),
&sample_actions);
break;
case OVS_SAMPLE_ATTR_UNSPEC:
case __OVS_SAMPLE_ATTR_MAX:
default:
OVS_NOT_REACHED();
}
}
/* An output action inside sample action is truly an output if the sampling
* probability is set to 100% */
if (probability == UINT32_MAX && sample_actions.output_action == true) {
ipfix_actions->output_action = true;
}
}
void
dpif_ipfix_read_actions(const struct flow *flow,
const struct nlattr *actions,
size_t actions_len,
struct dpif_ipfix_actions *ipfix_actions)
{
const struct nlattr *a;
unsigned int left;
if (actions_len == 0) {
return;
}
NL_ATTR_FOR_EACH (a, left, actions, actions_len) {
enum ovs_action_attr type = nl_attr_type(a);
switch (type) {
case OVS_ACTION_ATTR_OUTPUT:
case OVS_ACTION_ATTR_LB_OUTPUT:
ipfix_actions->output_action = true;
break;
case OVS_ACTION_ATTR_SAMPLE:
dpif_ipfix_read_sample_actions(flow, nl_attr_get(a),
nl_attr_get_size(a), ipfix_actions);
break;
case OVS_ACTION_ATTR_CLONE:
dpif_ipfix_read_actions(flow, nl_attr_get(a), nl_attr_get_size(a),
ipfix_actions);
break;
/* OVS_ACTION_ATTR_USERSPACE and OVS_ACTION_ATTR_RECIRC actions can
* yield absolutely any kind of behavior. Let's assume that flow drops
* the packet if there isn't another clear OVS_ACTION_ATTR_OUTPUT
* action associated with packet */
case OVS_ACTION_ATTR_USERSPACE:
case OVS_ACTION_ATTR_RECIRC:
case OVS_ACTION_ATTR_TUNNEL_POP:
case OVS_ACTION_ATTR_TUNNEL_PUSH:
case OVS_ACTION_ATTR_TRUNC:
case OVS_ACTION_ATTR_HASH:
case OVS_ACTION_ATTR_CT:
case OVS_ACTION_ATTR_CT_CLEAR:
case OVS_ACTION_ATTR_METER:
case OVS_ACTION_ATTR_SET_MASKED:
case OVS_ACTION_ATTR_SET:
case OVS_ACTION_ATTR_PUSH_VLAN:
case OVS_ACTION_ATTR_POP_VLAN:
case OVS_ACTION_ATTR_PUSH_MPLS:
case OVS_ACTION_ATTR_POP_MPLS:
case OVS_ACTION_ATTR_PUSH_ETH:
case OVS_ACTION_ATTR_POP_ETH:
case OVS_ACTION_ATTR_PUSH_NSH:
case OVS_ACTION_ATTR_POP_NSH:
case OVS_ACTION_ATTR_CHECK_PKT_LEN:
case OVS_ACTION_ATTR_UNSPEC:
case OVS_ACTION_ATTR_DROP:
case OVS_ACTION_ATTR_ADD_MPLS:
case OVS_ACTION_ATTR_DEC_TTL:
case OVS_ACTION_ATTR_PSAMPLE:
case __OVS_ACTION_ATTR_MAX:
default:
break;
}
}
}
Reference in New Issue View Git Blame Copy Permalink