forked from sonic-net/sonic-pins
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
[SAIP4] Model tunnel termination (aka decap). (sonic-net#283)
* [p4_symbolic]:Initial inport of Ir Table entries and test Code. (sonic-net#287) Co-authored-by: bhagatgit <115375369+bhagatgit@users.noreply.github.com> * [SAIP4] Add ACL ingress security table to Middleblock and update match fields for ToR. Reserve 2 entries in the VRF bank. * Limit ToR ACL pre-ingress table to 127 entries. * [SAI P4] Model tunnel termination (aka decap). --------- Co-authored-by: VSuryaprasad-hcl <159443973+VSuryaprasad-HCL@users.noreply.github.com> Co-authored-by: bhagatgit <115375369+bhagatgit@users.noreply.github.com> Co-authored-by: jonathan-dilorenzo <dilo@google.com> Co-authored-by: smolkaj <smolkaj@google.com>
- Loading branch information
5 people
authored
Jul 8, 2024
1 parent
0907a44
commit abd606e
Showing
21 changed files
with
645 additions
and
20 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -35,6 +35,7 @@ filegroup( | |
| "parser.p4", | ||
| "roles.h", | ||
| "routing.p4", | ||
| "tunnel_termination.p4", | ||
| "vlan.p4", | ||
| ], | ||
| ) | ||
|
|
||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,102 @@ | ||
| // Tunnel termination aka decap, modeled after `saitunnel.h`, | ||
|
|
||
| // Copyright 2024 Google LLC | ||
| // | ||
| // Licensed under the Apache License, Version 2.0 (the "License"); | ||
| // you may not use this file except in compliance with the License. | ||
| // You may obtain a copy of the License at | ||
| // | ||
| // http://www.apache.org/licenses/LICENSE-2.0 | ||
| // | ||
| // Unless required by applicable law or agreed to in writing, software | ||
| // distributed under the License is distributed on an "AS IS" BASIS, | ||
| // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | ||
| // See the License for the specific language governing permissions and | ||
| // limitations under the License. | ||
|
|
||
| #ifndef SAI_TUNNEL_TERMINATION_P4_ | ||
| #define SAI_TUNNEL_TERMINATION_P4_ | ||
|
|
||
| // Should be applied at the beginning of the pre-ingress stage. | ||
| control tunnel_termination_lookup(in headers_t headers, | ||
| inout local_metadata_t local_metadata) { | ||
|
|
||
| // Sets SAI_TUNNEL_TERM_TABLE_ENTRY_ATTR_VR_ID. | ||
| @id(MARK_FOR_TUNNEL_DECAP_AND_SET_VRF_ACTION_ID) | ||
| action mark_for_tunnel_decap_and_set_vrf(vrf_id_t vrf_id) { | ||
| // Actual decap is delayed until the end of the pre-ingress stage. | ||
| local_metadata.apply_tunnel_decap_at_end_of_pre_ingress = true; | ||
| local_metadata.vrf_id = vrf_id; | ||
| } | ||
|
|
||
| // Models SAI_TUNNEL_TERM_TABLE. | ||
| // Currently, we only model IPv6 decap of IP-in-IP packets | ||
| // TODO: Remove `@unsupported` annotation once the table is | ||
| // supported by the switch stack. | ||
| @unsupported | ||
| @p4runtime_role(P4RUNTIME_ROLE_ROUTING) | ||
| @id(IPV6_TUNNEL_TERMINATION_TABLE_ID) | ||
| table ipv6_tunnel_termination_table { | ||
| key = { | ||
| // Sets `SAI_TUNNEL_TERM_TABLE_ENTRY_ATTR_DST_IP[_MASK]`. | ||
| headers.ipv6.dst_addr : ternary | ||
| @id(1) @name("dst_ipv6") @format(IPV6_ADDRESS); | ||
| } | ||
| actions = { | ||
| @proto_id(1) mark_for_tunnel_decap_and_set_vrf; | ||
| } | ||
| size = IPV6_TUNNEL_TERMINATION_TABLE_MINIMUM_GUARANTEED_SIZE; | ||
| } | ||
|
|
||
| apply { | ||
| // Currently, we only model decap of IP-in-IPv6 packets | ||
| // (SAI_TUNNEL_TYPE_IPINIP). | ||
| if (headers.ipv6.isValid()) { | ||
| // IP-in-IP encapsulation: 4in6 or 6in6. | ||
| if (headers.ipv6.next_header == IP_PROTOCOL_IPV4 || | ||
| headers.ipv6.next_header == IP_PROTOCOL_IPV6) { | ||
| ipv6_tunnel_termination_table.apply(); | ||
| } | ||
| } | ||
| } | ||
|
|
||
| } | ||
|
|
||
| // Should be applied at the end of the pre-ingress stage. | ||
| control tunnel_termination_decap(inout headers_t headers, | ||
| in local_metadata_t local_metadata) { | ||
| apply { | ||
| if (local_metadata.apply_tunnel_decap_at_end_of_pre_ingress) { | ||
| // Currently, this should only ever be set for IP-in-IPv6 packets. | ||
| // TODO: Remove guard once p4-symbolic suports assertions. | ||
| #ifndef PLATFORM_P4SYMBOLIC | ||
| assert(headers.ipv6.isValid()); | ||
| assert((headers.inner_ipv4.isValid() && !headers.inner_ipv6.isValid()) || | ||
| (!headers.inner_ipv4.isValid() && headers.inner_ipv6.isValid())); | ||
| #endif | ||
|
|
||
| // Decap: strip outer header and replace with inner header. | ||
| headers.ipv6.setInvalid(); | ||
| if (headers.inner_ipv4.isValid()) { | ||
| headers.ethernet.ether_type = ETHERTYPE_IPV4; | ||
| // TODO: Support header assignment in | ||
| // p4-symbolic and remove this guard. | ||
| #ifndef PLATFORM_P4SYMBOLIC | ||
| headers.ipv4 = headers.inner_ipv4; | ||
| #endif | ||
| headers.inner_ipv4.setInvalid(); | ||
| } | ||
| if (headers.inner_ipv6.isValid()) { | ||
| headers.ethernet.ether_type = ETHERTYPE_IPV6; | ||
| // TODO: Support header assignment in | ||
| // p4-symbolic and remove this guard. | ||
| #ifndef PLATFORM_P4SYMBOLIC | ||
| headers.ipv6 = headers.inner_ipv6; | ||
| #endif | ||
| headers.inner_ipv6.setInvalid(); | ||
| } | ||
| } | ||
| } | ||
| } | ||
|
|
||
| #endif // SAI_TUNNEL_TERMINATION_P4_ |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.