2 * Copyright (c) 2016 Cisco Systems, Inc. and others. All rights reserved.
4 * This program and the accompanying materials are made available under the
5 * terms of the Eclipse Public License v1.0 which accompanies this distribution,
6 * and is available at http://www.eclipse.org/legal/epl-v10.html
9 package org.opendaylight.groupbasedpolicy.renderer.vpp.policy;
11 import java.util.ArrayList;
12 import java.util.HashMap;
13 import java.util.List;
16 import java.util.concurrent.ExecutionException;
17 import java.util.concurrent.TimeUnit;
18 import java.util.concurrent.TimeoutException;
20 import javax.annotation.Nonnull;
21 import javax.annotation.Nullable;
23 import org.opendaylight.controller.md.sal.binding.api.DataBroker;
24 import org.opendaylight.controller.md.sal.binding.api.ReadOnlyTransaction;
25 import org.opendaylight.controller.md.sal.common.api.data.LogicalDatastoreType;
26 import org.opendaylight.groupbasedpolicy.renderer.vpp.api.BridgeDomainManager;
27 import org.opendaylight.groupbasedpolicy.renderer.vpp.commands.RoutingCommand;
28 import org.opendaylight.groupbasedpolicy.renderer.vpp.config.ConfigUtil;
29 import org.opendaylight.groupbasedpolicy.renderer.vpp.dhcp.DhcpRelayHandler;
30 import org.opendaylight.groupbasedpolicy.renderer.vpp.iface.InterfaceManager;
31 import org.opendaylight.groupbasedpolicy.renderer.vpp.lisp.LispStateManager;
32 import org.opendaylight.groupbasedpolicy.renderer.vpp.lisp.loopback.LoopbackManager;
33 import org.opendaylight.groupbasedpolicy.renderer.vpp.lisp.flat.overlay.FlatOverlayManager;
34 import org.opendaylight.groupbasedpolicy.renderer.vpp.lisp.mappers.NeutronTenantToVniMapper;
35 import org.opendaylight.groupbasedpolicy.renderer.vpp.nat.NatManager;
36 import org.opendaylight.groupbasedpolicy.renderer.vpp.nat.NatUtil;
37 import org.opendaylight.groupbasedpolicy.renderer.vpp.policy.acl.AclManager;
38 import org.opendaylight.groupbasedpolicy.renderer.vpp.routing.RoutingManager;
39 import org.opendaylight.groupbasedpolicy.renderer.vpp.util.General;
40 import org.opendaylight.groupbasedpolicy.renderer.vpp.util.KeyFactory;
41 import org.opendaylight.groupbasedpolicy.util.DataStoreHelper;
42 import org.opendaylight.yang.gen.v1.urn.ietf.params.xml.ns.yang.ietf.inet.types.rev130715.IpPrefix;
43 import org.opendaylight.yang.gen.v1.urn.ietf.params.xml.ns.yang.ietf.nat.rev150908.nat.config.nat.instances.nat.instance.mapping.table.MappingEntryBuilder;
44 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.base_endpoint.rev160427.common.endpoint.fields.NetworkContainment;
45 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.base_endpoint.rev160427.common.endpoint.fields.network.containment.Containment;
46 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.base_endpoint.rev160427.common.endpoint.fields.network.containment.containment.ForwardingContextContainment;
47 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.base_endpoint.rev160427.common.endpoint.fields.network.containment.containment.NetworkDomainContainment;
48 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.base_endpoint.rev160427.has.absolute.location.absolute.location.LocationType;
49 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.base_endpoint.rev160427.has.absolute.location.absolute.location.location.type.ExternalLocationCase;
50 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.base_endpoint.rev160427.parent.child.endpoints.ParentEndpointChoice;
51 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.base_endpoint.rev160427.parent.child.endpoints.parent.endpoint.choice.ParentEndpointCase;
52 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.base_endpoint.rev160427.parent.child.endpoints.parent.endpoint.choice.parent.endpoint._case.ParentEndpoint;
53 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.common.rev140421.ContextId;
54 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.common.rev140421.NetworkDomainId;
55 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.common.rev140421.TenantId;
56 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.forwarding.l2_l3.rev170511.IpPrefixType;
57 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.forwarding.l2_l3.rev170511.L2FloodDomain;
58 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.forwarding.l2_l3.rev170511.MacAddressType;
59 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.forwarding.l2_l3.rev170511.SubnetAugmentRenderer;
60 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.forwarding.rev160427.NetworkDomain;
61 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.forwarding.rev160427.forwarding.fields.Parent;
62 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.renderer.rev151103.NatAddressRenderer;
63 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.renderer.rev151103.renderers.renderer.renderer.policy.Configuration;
64 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.renderer.rev151103.renderers.renderer.renderer.policy.configuration.Endpoints;
65 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.renderer.rev151103.renderers.renderer.renderer.policy.configuration.RendererForwarding;
66 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.renderer.rev151103.renderers.renderer.renderer.policy.configuration.endpoints.AddressEndpointWithLocation;
67 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.renderer.rev151103.renderers.renderer.renderer.policy.configuration.renderer.endpoints.RendererEndpointKey;
68 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.renderer.rev151103.renderers.renderer.renderer.policy.configuration.renderer.forwarding.RendererForwardingByTenant;
69 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.renderer.rev151103.renderers.renderer.renderer.policy.configuration.renderer.forwarding.renderer.forwarding.by.tenant.RendererForwardingContext;
70 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.renderer.rev151103.renderers.renderer.renderer.policy.configuration.renderer.forwarding.renderer.forwarding.by.tenant.RendererForwardingContextKey;
71 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.renderer.rev151103.renderers.renderer.renderer.policy.configuration.renderer.forwarding.renderer.forwarding.by.tenant.RendererNetworkDomain;
72 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.renderer.rev151103.renderers.renderer.renderer.policy.configuration.renderer.forwarding.renderer.forwarding.by.tenant.RendererNetworkDomainKey;
73 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.vpp_renderer.rev160425.Config;
74 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.vpp_renderer.rev160425.VlanNetwork;
75 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.vpp_renderer.rev160425._interface.attributes.InterfaceTypeChoice;
76 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.vpp_renderer.rev160425._interface.attributes._interface.type.choice.LoopbackCase;
77 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.vpp_renderer.rev160425.config.GbpBridgeDomain;
78 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.vpp_renderer.rev160425.config.GbpBridgeDomainKey;
79 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.vpp_renderer.rev160425.config.VppEndpoint;
80 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.vpp_renderer.rev160425.config.VppEndpointKey;
81 import org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.vpp_renderer.rev160425.renderers.renderer.renderer.nodes.renderer.node.PhysicalInterface;
82 import org.opendaylight.yang.gen.v1.urn.opendaylight.l2.types.rev130827.VlanId;
83 import org.opendaylight.yang.gen.v1.urn.opendaylight.params.xml.ns.yang.v3po.rev170607.VxlanVni;
84 import org.opendaylight.yang.gen.v1.urn.tbd.params.xml.ns.yang.network.topology.rev131021.NodeId;
85 import org.opendaylight.yangtools.yang.binding.InstanceIdentifier;
86 import org.slf4j.Logger;
87 import org.slf4j.LoggerFactory;
89 import com.google.common.annotations.VisibleForTesting;
90 import com.google.common.base.Optional;
91 import com.google.common.base.Preconditions;
92 import com.google.common.base.Strings;
93 import com.google.common.collect.SetMultimap;
94 import com.google.common.collect.Table;
96 public final class ForwardingManager {
98 private static final Logger LOG = LoggerFactory.getLogger(ForwardingManager.class);
100 private byte WAIT_FOR_BD_PROCESSING = 60; // seconds
101 private long lastVxlanVni = 1L;
102 private final Map<String, VxlanVni> vxlanVniByBridgeDomain = new HashMap<>();
103 private final InterfaceManager ifaceManager;
104 private final AclManager aclManager;
105 private final BridgeDomainManager bdManager;
106 private final NatManager natManager;
107 private final RoutingManager routingManager;
108 private final LispStateManager lispStateManager;
109 private final LoopbackManager loopbackManager;
110 private final FlatOverlayManager flatOverlayManager;
111 private final DhcpRelayHandler dhcpRelayHandler;
112 private final DataBroker dataBroker;
114 public ForwardingManager(@Nonnull InterfaceManager ifaceManager, @Nonnull AclManager aclManager,
115 @Nonnull NatManager natManager, @Nonnull RoutingManager routingManager, @Nonnull BridgeDomainManager bdManager,
116 @Nonnull LispStateManager lispStateManager, @Nonnull LoopbackManager loopbackManager, @Nonnull FlatOverlayManager flatOverlayManager,
117 @Nonnull DhcpRelayHandler dhcpRelayHandler, @Nonnull DataBroker dataBroker) {
118 this.ifaceManager = Preconditions.checkNotNull(ifaceManager);
119 this.bdManager = Preconditions.checkNotNull(bdManager);
120 this.natManager = Preconditions.checkNotNull(natManager);
121 this.routingManager = Preconditions.checkNotNull(routingManager);
122 this.lispStateManager = Preconditions.checkNotNull(lispStateManager);
123 this.loopbackManager = Preconditions.checkNotNull(loopbackManager);
124 this.flatOverlayManager = Preconditions.checkNotNull(flatOverlayManager);
125 this.dataBroker = Preconditions.checkNotNull(dataBroker);
126 this.aclManager = Preconditions.checkNotNull(aclManager);
127 this.dhcpRelayHandler = Preconditions.checkNotNull(dhcpRelayHandler);
130 public Optional<GbpBridgeDomain> readGbpBridgeDomainConfig(String name) {
131 InstanceIdentifier<GbpBridgeDomain> bdIid = InstanceIdentifier.builder(Config.class)
132 .child(GbpBridgeDomain.class, new GbpBridgeDomainKey(name))
134 ReadOnlyTransaction rTx = dataBroker.newReadOnlyTransaction();
135 Optional<GbpBridgeDomain> optBd = DataStoreHelper.readFromDs(LogicalDatastoreType.CONFIGURATION, bdIid, rTx);
140 public void createBridgeDomainOnNodes(SetMultimap<String, NodeId> vppNodesByBridgeDomain) {
141 for (String bd : vppNodesByBridgeDomain.keySet()) {
142 Optional<GbpBridgeDomain> bdConfig = readGbpBridgeDomainConfig(bd);
143 Set<NodeId> vppNodes = vppNodesByBridgeDomain.get(bd);
144 if (bdConfig.isPresent()) {
145 if (bdConfig.get().getType().equals(VlanNetwork.class)) {
146 createVlanBridgeDomains(bd, bdConfig.get().getVlan(), vppNodes);
149 VxlanVni vxlanVni = vxlanVniByBridgeDomain.get(bd);
150 if (vxlanVni == null) {
151 vxlanVni = new VxlanVni(lastVxlanVni++);
152 vxlanVniByBridgeDomain.put(bd, vxlanVni);
154 createVxlanBridgeDomains(bd, vxlanVni, vppNodes);
159 private void createVxlanBridgeDomains(final String bd, final VxlanVni vni, final Set<NodeId> vppNodes) {
160 for (NodeId vppNode : vppNodes) {
162 LOG.debug("Creating VXLAN bridge-domain {} on node {} with VNI {}", bd, vppNode.getValue(),
164 bdManager.createVxlanBridgeDomainOnVppNode(bd, vni, vppNode).get(WAIT_FOR_BD_PROCESSING,
166 } catch (InterruptedException | ExecutionException e) {
167 LOG.warn("VXLAN Bridge domain {} was not created on node {}", bd, vppNode.getValue(), e);
168 } catch (TimeoutException e) {
169 LOG.warn("Probably, VXLAN Bridge domain {} was not created on node {} because BridgeDomainManager "
170 + "did not respond by {} seconds. Check VBD log for more details",
171 bd, vppNode.getValue(), WAIT_FOR_BD_PROCESSING, e);
176 private void createVlanBridgeDomains(final String bd, final VlanId vlanId, final Set<NodeId> vppNodes) {
177 for (NodeId vppNode : vppNodes) {
179 LOG.debug("Creating VLAN bridge-domain {} on node {} with VLAN ID {}", bd, vppNode.getValue(),
181 bdManager.createVlanBridgeDomainOnVppNode(bd, vlanId, vppNode).get(WAIT_FOR_BD_PROCESSING,
183 } catch (InterruptedException | ExecutionException e) {
184 LOG.warn("VLAN Bridge domain {} was not created on node {}", bd, vppNode.getValue(), e);
185 } catch (TimeoutException e) {
186 LOG.warn("Probably, VLAN Bridge domain {} was not created on node {} because BridgeDomainManager "
187 + "did not respond by {} seconds. Check VBD log for more details",
188 bd, vppNode.getValue(), WAIT_FOR_BD_PROCESSING, e);
193 public void removeBridgeDomainOnNodes(final SetMultimap<String, NodeId> vppNodesByBridgeDomain) {
194 for (String bd : vppNodesByBridgeDomain.keySet()) {
195 Set<NodeId> vppNodes = vppNodesByBridgeDomain.get(bd);
196 for (NodeId vppNode : vppNodes) {
198 bdManager.removeBridgeDomainFromVppNode(bd, vppNode).get(WAIT_FOR_BD_PROCESSING,
200 } catch (InterruptedException | ExecutionException e) {
201 LOG.warn("Bridge domain {} was not removed from node {}", bd, vppNode.getValue(), e);
202 } catch (TimeoutException e) {
203 LOG.warn("Probably, bridge domain {} was not removed from node {} because BridgeDomainManager "
204 + "did not respond by {} seconds. Check VBD log for more details",
205 bd, vppNode.getValue(), WAIT_FOR_BD_PROCESSING, e);
211 public void createForwardingForEndpoint(RendererEndpointKey rEpKey, PolicyContext policyCtx) {
212 AddressEndpointWithLocation rEp = policyCtx.getAddrEpByKey().get(KeyFactory.addressEndpointKey(rEpKey));
214 ExternalLocationCase rEpLoc = resolveAndValidateLocation(rEp);
215 if (Strings.isNullOrEmpty(rEpLoc.getExternalNodeConnector())) {
216 // TODO add it to the status for renderer manager
217 LOG.info("Renderer endpoint does not have external-node-connector therefore it is ignored {}", rEp);
220 if (ConfigUtil.getInstance().isLispOverlayEnabled()) {
221 lispStateManager.configureEndPoint(rEp);
222 if (ConfigUtil.getInstance().isL3FlatEnabled()) {
223 flatOverlayManager.configureEndpointForFlatOverlay(rEp);
224 loopbackManager.createSimpleLoopbackIfNeeded(rEp);
227 if (Strings.isNullOrEmpty(rEpLoc.getExternalNode())) {
228 java.util.Optional<String> optL2FloodDomain = resolveL2FloodDomain(rEp, policyCtx);
229 if (!optL2FloodDomain.isPresent()) {
230 // TODO add it to the status for renderer manager
231 LOG.info("Renderer endpoint does not have l2FloodDomain as network containment {}", rEp);
234 if (!ConfigUtil.getInstance().isL3FlatEnabled()) {
235 String l2FloodDomain = optL2FloodDomain.get();
237 ifaceManager.addBridgeDomainToInterface(l2FloodDomain, rEp, aclManager.resolveAclsOnInterface(
238 rEpKey, policyCtx), isBviForEndpoint(rEp)).get();
239 LOG.debug("Interface added to bridge-domain {} for endpoint {}", l2FloodDomain, rEp);
241 if (ConfigUtil.getInstance().isLispOverlayEnabled()) {
242 loopbackManager.createBviLoopbackIfNeeded(rEp, l2FloodDomain);
245 } catch (InterruptedException | ExecutionException e) {
246 // TODO add it to the status for renderer manager
247 LOG.warn("Interface was not added to bridge-domain {} for endpoint {}", l2FloodDomain, rEp, e);
250 aclManager.updateAclsForPeers(policyCtx, rEpKey);
252 LOG.debug("Forwarding is not created - Location of renderer endpoint contains "
253 + "external-node therefore VPP renderer assumes that interface for endpoint is "
254 + "already assigned in bridge-domain representing external-node. {}", rEp);
258 private boolean isBviForEndpoint(AddressEndpointWithLocation rEp) {
259 VppEndpointKey vppEndpointKey =
260 new VppEndpointKey(rEp.getAddress(), rEp.getAddressType(), rEp.getContextId(), rEp.getContextType());
261 ReadOnlyTransaction rTx = dataBroker.newReadOnlyTransaction();
262 Optional<VppEndpoint> vppEndpointOptional =
263 DataStoreHelper.readFromDs(LogicalDatastoreType.CONFIGURATION,
264 InstanceIdentifier.builder(Config.class).child(VppEndpoint.class, vppEndpointKey).build(), rTx);
265 if (vppEndpointOptional.isPresent()) {
266 InterfaceTypeChoice interfaceTypeChoice = vppEndpointOptional.get().getInterfaceTypeChoice();
267 if (interfaceTypeChoice instanceof LoopbackCase) {
268 LOG.trace("Vpp renderer endpoint {} IS a BVI interface.", rEp.getKey());
269 return ((LoopbackCase) interfaceTypeChoice).isBvi();
273 LOG.trace("Vpp renderer endpoint {} IS NOT a BVI interface.", rEp.getKey());
277 public void removeForwardingForEndpoint(RendererEndpointKey rEpKey, PolicyContext policyCtx) {
278 AddressEndpointWithLocation rEp = policyCtx.getAddrEpByKey().get(KeyFactory.addressEndpointKey(rEpKey));
279 ExternalLocationCase rEpLoc = resolveAndValidateLocation(rEp);
280 if (rEpLoc == null || Strings.isNullOrEmpty(rEpLoc.getExternalNodeConnector())) {
281 // nothing was created for endpoint therefore nothing is removed
284 if (!Strings.isNullOrEmpty(rEpLoc.getExternalNode())) {
286 if (ConfigUtil.getInstance().isLispOverlayEnabled()) {
287 lispStateManager.deleteLispConfigurationForEndpoint(rEp);
288 loopbackManager.handleEndpointDelete(rEp);
290 if (ConfigUtil.getInstance().isL3FlatEnabled()) {
291 flatOverlayManager.handleEndpointDeleteForFlatOverlay(rEp);
295 ifaceManager.deleteBridgeDomainFromInterface(rEp).get();
296 LOG.debug("bridge-domain was deleted from interface for endpoint {}", rEp);
297 } catch (InterruptedException | ExecutionException e) {
298 // TODO add it to the status for renderer manager
299 LOG.warn("bridge-domain was not deleted from interface for endpoint {}", rEp, e);
302 LOG.debug("Forwarding is not removed - Location of renderer endpoint does not contain "
303 + "external-node therefore VPP renderer assumes that interface for endpoint is not "
304 + "assigned to bridge-domain representing external-node. {}", rEp);
308 public static ExternalLocationCase resolveAndValidateLocation(AddressEndpointWithLocation addrEpWithLoc) {
309 if (addrEpWithLoc.getAbsoluteLocation() != null
310 && addrEpWithLoc.getAbsoluteLocation().getLocationType() != null) {
311 LocationType locationType = addrEpWithLoc.getAbsoluteLocation().getLocationType();
312 if (!(locationType instanceof ExternalLocationCase)) {
313 throw new IllegalStateException("Endpoint does not have external location " + addrEpWithLoc);
315 ExternalLocationCase result = (ExternalLocationCase) locationType;
316 if (result.getExternalNodeMountPoint() == null) {
317 throw new IllegalStateException("Endpoint does not have external-node-mount-point " + addrEpWithLoc);
324 public static java.util.Optional<String> resolveL2FloodDomain(@Nonnull AddressEndpointWithLocation ep,
325 @Nonnull PolicyContext policyCtx) {
326 NetworkContainment netCont = ep.getNetworkContainment();
327 if (netCont == null) {
328 return java.util.Optional.empty();
330 Containment containment = netCont.getContainment();
331 if (containment instanceof ForwardingContextContainment) {
332 ForwardingContextContainment fwCtxCont = (ForwardingContextContainment) containment;
333 if (L2FloodDomain.class.equals(fwCtxCont.getContextType())) {
334 return fwCtxCont.getContextId() == null ? java.util.Optional.empty() : java.util.Optional
335 .of(fwCtxCont.getContextId().getValue());
338 if (containment instanceof NetworkDomainContainment) {
339 final NetworkDomainContainment netDomainCont = (NetworkDomainContainment) containment;
340 final TenantId tenantId = ep.getTenant();
341 final NetworkDomainId domainId = netDomainCont.getNetworkDomainId();
342 final Class<? extends NetworkDomain> domainKey = netDomainCont.getNetworkDomainType();
343 final RendererNetworkDomainKey rendererNetworkDomainKey = new RendererNetworkDomainKey(domainId, domainKey);
344 final RendererNetworkDomain rendererNetworkDomain =
345 policyCtx.getNetworkDomainTable().get(tenantId, rendererNetworkDomainKey);
346 if (rendererNetworkDomain == null) {
347 LOG.debug("Network domain not found. Containment: {}", containment);
348 return java.util.Optional.empty();
350 java.util.Optional<String> optL2Fd = getForwardingCtxForParent(ep.getTenant(),
351 rendererNetworkDomain.getParent(), policyCtx.getForwardingCtxTable())
352 .filter(fwdCtx -> L2FloodDomain.class.equals(fwdCtx.getContextType()))
353 .map(RendererForwardingContext::getContextId)
354 .map(ContextId::getValue);
355 if (!optL2Fd.isPresent()) {
356 LOG.debug("network-domain-containment in endpoint does not have L2-flood-domain as parent. "
357 + "This case is not supported in VPP renderer. {}", ep);
361 return java.util.Optional.empty();
364 private static @Nonnull java.util.Optional<RendererForwardingContext> getForwardingCtxForParent(
365 @Nullable TenantId tenant, @Nullable Parent parent,
366 Table<TenantId, RendererForwardingContextKey, RendererForwardingContext> forwardingCtxTable) {
367 if (tenant == null || parent == null) {
368 return java.util.Optional.empty();
370 if (parent.getContextId() != null && parent.getContextType() != null) {
371 return java.util.Optional.ofNullable(forwardingCtxTable.get(tenant,
372 new RendererForwardingContextKey(parent.getContextId(), parent.getContextType())));
374 return java.util.Optional.empty();
377 void syncNatEntries(PolicyContext policyCtx) {
378 Configuration cfg = policyCtx.getPolicy().getConfiguration();
380 final List<MappingEntryBuilder> sNatEntries = resolveStaticNatTableEntries(cfg.getEndpoints());
381 LOG.trace("Syncing static NAT entries {}", sNatEntries);
382 if (cfg.getRendererForwarding() != null) {
383 for (RendererForwardingByTenant fwd : cfg.getRendererForwarding().getRendererForwardingByTenant()) {
384 List<InstanceIdentifier<PhysicalInterface>> physIfacesIid =
385 resolvePhysicalInterfacesForNat(fwd.getRendererNetworkDomain());
386 natManager.submitNatChanges(physIfacesIid, sNatEntries, policyCtx, true);
392 public void deleteNatEntries(PolicyContext policyCtx) {
393 Configuration cfg = policyCtx.getPolicy().getConfiguration();
395 List<MappingEntryBuilder> natEntries = resolveStaticNatTableEntries(cfg.getEndpoints());
396 if (natEntries.isEmpty()) {
397 LOG.trace("NAT entries are empty,nothing to delete, skipping processing.");
400 LOG.trace("Deleting NAT entries {}", natEntries);
401 if (cfg.getRendererForwarding() != null) {
402 for (RendererForwardingByTenant fwd : cfg.getRendererForwarding().getRendererForwardingByTenant()) {
403 List<InstanceIdentifier<PhysicalInterface>> physIfacesIid =
404 resolvePhysicalInterfacesForNat(fwd.getRendererNetworkDomain());
405 natManager.submitNatChanges(physIfacesIid, natEntries, policyCtx, false);
411 public List<InstanceIdentifier<PhysicalInterface>> resolvePhysicalInterfacesForNat(
412 List<RendererNetworkDomain> rendNetDomains) {
413 List<InstanceIdentifier<PhysicalInterface>> physIfaces = new ArrayList<>();
414 for (RendererNetworkDomain rendDomain : rendNetDomains) {
415 Optional<IpPrefix> resolvedIpPrefix = resolveIpPrefix(rendDomain);
416 if (resolvedIpPrefix.isPresent()) {
417 Optional<InstanceIdentifier<PhysicalInterface>> resPhIface =
418 NatUtil.resolvePhysicalInterface(resolvedIpPrefix.get(), dataBroker.newReadOnlyTransaction());
419 if (resPhIface.isPresent()) {
420 physIfaces.add(resPhIface.get());
427 private Optional<IpPrefix> resolveIpPrefix(RendererNetworkDomain rendDomain) {
428 SubnetAugmentRenderer subnetAug = rendDomain.getAugmentation(SubnetAugmentRenderer.class);
429 if (subnetAug.getSubnet() != null) {
430 return Optional.of(subnetAug.getSubnet().getIpPrefix());
432 return Optional.absent();
435 private List<MappingEntryBuilder> resolveStaticNatTableEntries(Endpoints endpoints) {
436 List<MappingEntryBuilder> sNatEntries = new ArrayList<>();
437 for (AddressEndpointWithLocation addrEp : endpoints.getAddressEndpointWithLocation()) {
438 if (addrEp.getAugmentation(NatAddressRenderer.class) == null) {
441 String endpointIP = resolveEpIpAddressForSnat(addrEp);
443 if (endpointIP == null) {
444 LOG.warn("Endpoints {} IP cannot be null, skipping processing of SNAT", addrEp);
448 NatAddressRenderer natAddr = addrEp.getAugmentation(NatAddressRenderer.class);
449 if (natAddr.getNatAddress() == null && natAddr.getNatAddress().getIpv4Address() == null) {
450 LOG.warn("Only Ipv4 SNAT is currently supported. Cannot apply SNAT for [{},{}]", endpointIP,
451 natAddr.getNatAddress());
454 Optional<MappingEntryBuilder> entry = natManager.resolveSnatEntry(endpointIP, natAddr.getNatAddress()
456 if (entry.isPresent()) {
457 sNatEntries.add(entry.get());
463 private String resolveEpIpAddressForSnat(AddressEndpointWithLocation addrEp) {
464 if (addrEp.getAddressType().equals(MacAddressType.class)) {
465 ParentEndpointChoice parentEndpointChoice = addrEp.getParentEndpointChoice();
466 if (parentEndpointChoice instanceof ParentEndpointCase
467 && !((ParentEndpointCase) parentEndpointChoice).getParentEndpoint().isEmpty()) {
468 ParentEndpoint parentEndpoint = ((ParentEndpointCase) parentEndpointChoice).getParentEndpoint().get(0);
469 if (parentEndpoint.getAddressType().equals(IpPrefixType.class)) {
470 String[] ipWithPrefix = parentEndpoint.getAddress().split("/");
471 return ipWithPrefix[0];
473 LOG.warn("Endpoint {} Does not have a Parent Ep with IP for SNAT. skipping processing of SNAT",
479 LOG.warn("Endpoint {} Does not contain IP address for SNAT. skipping processing of SNAT", addrEp);
482 } else if (addrEp.getAddressType().equals(IpPrefixType.class)) {
483 return addrEp.getAddress();
489 void setTimer(byte time) {
490 WAIT_FOR_BD_PROCESSING = time;
493 public void syncRouting(PolicyContext policyCtx) {
494 Configuration cfg = policyCtx.getPolicy().getConfiguration();
495 if (cfg != null && cfg.getRendererForwarding() != null) {
496 for (RendererForwardingByTenant fwd : cfg.getRendererForwarding().getRendererForwardingByTenant()) {
501 List<InstanceIdentifier<PhysicalInterface>>
502 physIfacesIid = resolvePhysicalInterfacesForNat(fwd.getRendererNetworkDomain());
503 Map<InstanceIdentifier<?>, RoutingCommand> routingCommandMap =
504 routingManager.createRouting(fwd, physIfacesIid, General.Operations.PUT);
506 routingCommandMap.forEach((node, command) -> {
507 if (command != null && routingManager.submitRouting(command, node)) {
508 LOG.debug("Routing was successfully applied: {}.", command);
515 public void deleteRouting(PolicyContext policyCtx) {
516 Configuration cfg = policyCtx.getPolicy().getConfiguration();
517 if (cfg != null && cfg.getRendererForwarding() != null) {
518 for (RendererForwardingByTenant fwd : cfg.getRendererForwarding().getRendererForwardingByTenant()) {
523 List<InstanceIdentifier<PhysicalInterface>>
524 physIfacesIid = resolvePhysicalInterfacesForNat(fwd.getRendererNetworkDomain());
525 Map<InstanceIdentifier<?>, RoutingCommand> routingCommandMap =
526 routingManager.createRouting(fwd, physIfacesIid, General.Operations.DELETE);
527 routingCommandMap.forEach((node, command) -> {
528 if (command != null && routingManager.submitRouting(command, node)) {
529 LOG.debug("Routing was successfully removed: {}.", command);
536 public void createDhcpRelay(RendererForwarding rendererForwarding,
537 SetMultimap<String, NodeId> vppNodesByL2Fd) {
538 for (RendererForwardingByTenant forwardingByTenant : rendererForwarding.getRendererForwardingByTenant()) {
539 long vni_vrfid = NeutronTenantToVniMapper.getInstance().getVni(forwardingByTenant.getTenantId().getValue());
540 for (RendererNetworkDomain networkDomain : forwardingByTenant.getRendererNetworkDomain()) {
541 org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.forwarding.l2_l3.rev170511.has.subnet.Subnet
542 subnet = networkDomain.getAugmentation((SubnetAugmentRenderer.class)).getSubnet();
543 LOG.trace("Creating Dhcp Relay from subnet: {}, vrfid: {}, vppNodesByL2Fd: {}", subnet, vni_vrfid,
545 dhcpRelayHandler.createIpv4DhcpRelay(vni_vrfid, subnet, vppNodesByL2Fd);
550 public void deleteDhcpRelay(RendererForwarding rendererForwarding, SetMultimap<String, NodeId> vppNodesByL2Fd) {
551 for (RendererForwardingByTenant forwardingByTenant : rendererForwarding.getRendererForwardingByTenant()) {
552 long vni_vrfid = NeutronTenantToVniMapper.getInstance().getVni(forwardingByTenant.getTenantId().getValue());
553 for (RendererNetworkDomain networkDomain : forwardingByTenant.getRendererNetworkDomain()) {
554 org.opendaylight.yang.gen.v1.urn.opendaylight.groupbasedpolicy.forwarding.l2_l3.rev170511.has.subnet.Subnet
555 subnet = networkDomain.getAugmentation((SubnetAugmentRenderer.class)).getSubnet();
556 dhcpRelayHandler.deleteIpv4DhcpRelay(vni_vrfid, subnet, vppNodesByL2Fd);