2 * Copyright (c) 2015-2016 Yandex LLC
3 * Copyright (c) 2015-2016 Andrey V. Elsukov <ae@FreeBSD.org>
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
12 * 2. Redistributions in binary form must reproduce the above copyright
13 * notice, this list of conditions and the following disclaimer in the
14 * documentation and/or other materials provided with the distribution.
16 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
17 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
18 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
19 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
20 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
21 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
22 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
23 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
24 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
25 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
30 #ifndef _IP_FW_NAT64_H_
31 #define _IP_FW_NAT64_H_
33 #define DPRINTF(mask, fmt, ...) \
34 if (nat64_debug & (mask)) \
35 printf("NAT64: %s: " fmt "\n", __func__, ## __VA_ARGS__)
36 #define DP_GENERIC 0x0001
38 #define DP_JQUEUE 0x0004
39 #define DP_STATE 0x0008
40 #define DP_DROPS 0x0010
42 extern int nat64_debug;
45 #define NAT64NOINLINE __noinline
50 int nat64stl_init(struct ip_fw_chain *ch, int first);
51 void nat64stl_uninit(struct ip_fw_chain *ch, int last);
52 int nat64lsn_init(struct ip_fw_chain *ch, int first);
53 void nat64lsn_uninit(struct ip_fw_chain *ch, int last);
55 struct ip_fw_nat64_stats {
56 counter_u64_t opcnt64; /* 6to4 of packets translated */
57 counter_u64_t opcnt46; /* 4to6 of packets translated */
58 counter_u64_t ofrags; /* number of fragments generated */
59 counter_u64_t ifrags; /* number of fragments received */
60 counter_u64_t oerrors; /* number of output errors */
61 counter_u64_t noroute4;
62 counter_u64_t noroute6;
63 counter_u64_t nomatch4; /* No addr/port match */
64 counter_u64_t noproto; /* Protocol not supported */
65 counter_u64_t nomem; /* mbufs allocation failed */
66 counter_u64_t dropped; /* number of packets silently
67 * dropped due to some errors/
71 counter_u64_t jrequests; /* number of jobs requests queued */
72 counter_u64_t jcalls; /* number of jobs handler calls */
73 counter_u64_t jhostsreq; /* number of hosts requests */
74 counter_u64_t jportreq;
75 counter_u64_t jhostfails;
76 counter_u64_t jportfails;
77 counter_u64_t jmaxlen;
79 counter_u64_t jreinjected;
81 counter_u64_t screated;
82 counter_u64_t sdeleted;
83 counter_u64_t spgcreated;
84 counter_u64_t spgdeleted;
87 #define IPFW_NAT64_VERSION 1
88 #define NAT64STATS (sizeof(struct ip_fw_nat64_stats) / sizeof(uint64_t))
89 typedef struct _nat64_stats_block {
90 counter_u64_t stats[NAT64STATS];
92 #define NAT64STAT_ADD(s, f, v) \
93 counter_u64_add((s)->stats[ \
94 offsetof(struct ip_fw_nat64_stats, f) / sizeof(uint64_t)], (v))
95 #define NAT64STAT_INC(s, f) NAT64STAT_ADD(s, f, 1)
96 #define NAT64STAT_FETCH(s, f) \
97 counter_u64_fetch((s)->stats[ \
98 offsetof(struct ip_fw_nat64_stats, f) / sizeof(uint64_t)])
100 #define L3HDR(_ip, _t) ((_t)((u_int32_t *)(_ip) + (_ip)->ip_hl))
101 #define TCP(p) ((struct tcphdr *)(p))
102 #define UDP(p) ((struct udphdr *)(p))
103 #define ICMP(p) ((struct icmphdr *)(p))
104 #define ICMP6(p) ((struct icmp6_hdr *)(p))
107 #define NAT64RETURN 1
108 #define NAT64MFREE -1
110 /* Well-known prefix 64:ff9b::/96 */
111 #define IPV6_ADDR_INT32_WKPFX htonl(0x64ff9b)
112 #define IN6_IS_ADDR_WKPFX(a) \
113 ((a)->s6_addr32[0] == IPV6_ADDR_INT32_WKPFX && \
114 (a)->s6_addr32[1] == 0 && (a)->s6_addr32[2] == 0)