ipfilter/netinet/ip_nat6.c

133 #define	NINCLSIDE6(y,x)	ATOMIC_INCL(softn->ipf_nat_stats.ns_side6[y].x)
134 #define	NBUMPSIDE(y,x)	softn->ipf_nat_stats.ns_side[y].x++
135 #define	NBUMPSIDE6(y,x)	softn->ipf_nat_stats.ns_side6[y].x++
138 				softn->ipf_nat_stats.ns_side6[y].x++; \
143 				softn->ipf_nat_stats.ns_side6[y].x++; \
158 ipf_nat6_ruleaddrinit(softc, softn, n)
160 	ipf_nat_softc_t *softn;
201 		ipf_nat6_builddivertmp(softn, n);
216 ipf_nat6_addrdr(softn, n)
217 	ipf_nat_softc_t *softn;
230 		hv = NAT_HASH_FN6(&j, 0, softn->ipf_nat_rdrrules_sz);
236 		hv = NAT_HASH_FN6(&j, 0, softn->ipf_nat_rdrrules_sz);
242 	ipf_inet6_mask_add(k, mask, &softn->ipf_nat6_rdr_mask);
244 	np = softn->ipf_nat_rdr_rules + hv;
265 ipf_nat6_addmap(softn, n)
266 	ipf_nat_softc_t *softn;
279 		hv = NAT_HASH_FN6(&j, 0, softn->ipf_nat_maprules_sz);
285 	ipf_inet6_mask_add(k, mask, &softn->ipf_nat6_map_mask);
287 	np = softn->ipf_nat_map_rules + hv;
306 ipf_nat6_delrdr(softn, n)
307 	ipf_nat_softc_t *softn;
323 	ipf_inet6_mask_del(k, mask, &softn->ipf_nat6_rdr_mask);
340 ipf_nat6_delmap(softn, n)
341 	ipf_nat_softc_t *softn;
354 	ipf_inet6_mask_del(k, mask, &softn->ipf_nat6_map_mask);
378 ipf_nat6_hostmap(softn, np, src, dst, map, port)
379 	ipf_nat_softc_t *softn;
400 	for (hm = softn->ipf_hm_maptable[hv]; hm; hm = hm->hm_next)
405 			softn->ipf_nat_stats.ns_hm_addref++;
411 		softn->ipf_nat_stats.ns_hm_nullnp++;
417 		hm->hm_next = softn->ipf_hm_maplist;
418 		hm->hm_pnext = &softn->ipf_hm_maplist;
419 		if (softn->ipf_hm_maplist != NULL)
420 			softn->ipf_hm_maplist->hm_pnext = &hm->hm_next;
421 		softn->ipf_hm_maplist = hm;
422 		hm->hm_hnext = softn->ipf_hm_maptable[hv];
423 		hm->hm_phnext = softn->ipf_hm_maptable + hv;
424 		if (softn->ipf_hm_maptable[hv] != NULL)
425 			softn->ipf_hm_maptable[hv]->hm_phnext = &hm->hm_hnext;
426 		softn->ipf_hm_maptable[hv] = hm;
440 		softn->ipf_nat_stats.ns_hm_new++;
442 		softn->ipf_nat_stats.ns_hm_newfail++;
468 	ipf_nat_softc_t *softn = softc->ipf_nat_soft;
509 			hm = ipf_nat6_hostmap(softn, np, &fin->fin_src6,
711 		nat->nat_hm = ipf_nat6_hostmap(softn, np, &fin->fin_src6,
749 	ipf_nat_softc_t *softn = softc->ipf_nat_soft;
788 		hm = ipf_nat6_hostmap(softn, NULL, &fin->fin_src6,
808 			hm = ipf_nat6_hostmap(softn, NULL, &fin->fin_src6,
916 		nat->nat_hm = ipf_nat6_hostmap(softn, np, &fin->fin_src6,
966 	ipf_nat_softc_t *softn = softc->ipf_nat_soft;
977 	nsp = &softn->ipf_nat_stats;
979 	if ((nsp->ns_active * 100 / softn->ipf_nat_table_max) >
980 	    softn->ipf_nat_table_wm_high) {
981 		softn->ipf_nat_doflush = 1;
984 	if (nsp->ns_active >= softn->ipf_nat_table_max) {
1007 		if ((softn->ipf_nat_table_max > softn->ipf_nat_table_sz) &&
1009 			softn->ipf_nat_table_max = nsp->ns_active - 100;
1011 				softn->ipf_nat_table_max);
1119 			ipf_nat6_delrdr(softn, np);
1120 			ipf_nat6_addrdr(softn, np);
1122 			ipf_nat6_delmap(softn, np);
1123 			ipf_nat6_addmap(softn, np);
1129 	softn->ipf_nat_stats.ns_proto[nat->nat_pr[0]]++;
1164 	ipf_nat_softc_t *softn = softc->ipf_nat_soft;
1246 	if (ipf_nat6_insert(softc, softn, nat) == 0) {
1247 		if (softn->ipf_nat_logging)
1248 			ipf_nat_log(softc, softn, nat, NL_NEW);
1272 /*              softn(I) - pointer to NAT context structure                 */
1280 ipf_nat6_insert(softc, softn, nat)
1282 	ipf_nat_softc_t *softn;
1306 				   softn->ipf_nat_table_sz);
1325 				   softn->ipf_nat_table_sz);
1333 				   softn->ipf_nat_table_sz);
1338 				   softn->ipf_nat_table_sz);
1376 	return ipf_nat_hashtab_add(softc, softn, nat);
1396 	ipf_nat_softc_t *softn = softc->ipf_nat_soft;
1409 	nside = &softn->ipf_nat_stats.ns_side6[fin->fin_out];
1595 	ipf_nat_softc_t *softn = softc->ipf_nat_soft;
1915 	ipf_nat_softc_t *softn = softc->ipf_nat_soft;
1955 	hv = NAT_HASH_FN6(src, hv + sport, softn->ipf_nat_table_sz);
1956 	nat = softn->ipf_nat_table[1][hv];
2036 	if (softn->ipf_nat_stats.ns_wilds == 0 || (fin->fin_flx & FI_NOWILD)) {
2044 	hv = NAT_HASH_FN6(src, hv, softn->ipf_nat_table_sz);
2047 	nat = softn->ipf_nat_table[1][hv];
2089 				MUTEX_ENTER(&softn->ipf_nat_new);
2090 				softn->ipf_nat_stats.ns_wilds--;
2091 				MUTEX_EXIT(&softn->ipf_nat_new);
2118 			ipf_nat6_tabmove(softn, nat);
2143 ipf_nat6_tabmove(softn, nat)
2144 	ipf_nat_softc_t *softn;
2159 	softn->ipf_nat_stats.ns_side[0].ns_bucketlen[nat->nat_hv[0]]--;
2164 	softn->ipf_nat_stats.ns_side[1].ns_bucketlen[nat->nat_hv[1]]--;
2171 			   softn->ipf_nat_table_sz);
2174 			   softn->ipf_nat_table_sz);
2188 	natp = &softn->ipf_nat_table[0][hv0];
2194 	softn->ipf_nat_stats.ns_side[0].ns_bucketlen[hv0]++;
2197 	natp = &softn->ipf_nat_table[1][hv1];
2203 	softn->ipf_nat_stats.ns_side[1].ns_bucketlen[hv1]++;
2237 	ipf_nat_softc_t *softn = softc->ipf_nat_soft;
2271 	hv = NAT_HASH_FN6(dst, hv + dport, softn->ipf_nat_table_sz);
2272 	nat = softn->ipf_nat_table[0][hv];
2353 	if (softn->ipf_nat_stats.ns_wilds == 0 || (fin->fin_flx & FI_NOWILD)) {
2361 	hv = NAT_HASH_FN6(dst, hv, softn->ipf_nat_table_sz);
2365 	nat = softn->ipf_nat_table[0][hv];
2405 				MUTEX_ENTER(&softn->ipf_nat_new);
2406 				softn->ipf_nat_stats.ns_wilds--;
2407 				MUTEX_EXIT(&softn->ipf_nat_new);
2434 			ipf_nat6_tabmove(softn, nat);
2617 	ipf_nat_softc_t *softn = softc->ipf_nat_soft;
2629 	if (softn->ipf_nat_stats.ns_rules == 0 || softn->ipf_nat_lock != 0)
2701 		msk = &softn->ipf_nat6_map_active_masks[nmsk];
2703 		hv = NAT_HASH_FN6(&iph, 0, softn->ipf_nat_maprules_sz);
2704 		for (np = softn->ipf_nat_map_rules[hv]; np; np = np->in_mnext) {
2749 			MUTEX_ENTER(&softn->ipf_nat_new);
2751 			MUTEX_EXIT(&softn->ipf_nat_new);
2758 		if ((np == NULL) && (nmsk < softn->ipf_nat6_map_max)) {
2819 	ipf_nat_softc_t *softn = softc->ipf_nat_soft;
3019 	ipf_nat_softc_t *softn = softc->ipf_nat_soft;
3030 	if (softn->ipf_nat_stats.ns_rules == 0 || softn->ipf_nat_lock != 0)
3101 		msk = &softn->ipf_nat6_rdr_active_masks[rmsk];
3103 		hv = NAT_HASH_FN6(&iph, 0, softn->ipf_nat_rdrrules_sz);
3104 		for (np = softn->ipf_nat_rdr_rules[hv]; np; np = np->in_rnext) {
3149 			MUTEX_ENTER(&softn->ipf_nat_new);
3151 			MUTEX_EXIT(&softn->ipf_nat_new);
3159 		if ((np == NULL) && (rmsk < softn->ipf_nat6_rdr_max)) {
3220 	ipf_nat_softc_t *softn = softc->ipf_nat_soft;
3653 	ipf_nat_softc_t *softn = softc->ipf_nat_soft;
3724 ipf_nat6_builddivertmp(softn, np)
3725 	ipf_nat_softc_t *softn;
3739 		ATOMIC_INCL(softn->ipf_nat_stats.ns_divert_build);
3792 	ipf_nat_softc_t *softn = softc->ipf_nat_soft;
3876 	ipf_nat_softc_t *softn = softc->ipf_nat_soft;