2 * Copyright (c) 2011, 2012, 2013, 2014, 2015 Nicira, Inc.
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at:
8 * http://www.apache.org/licenses/LICENSE-2.0
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
20 #include <sys/types.h>
21 #include <netinet/in.h>
22 #include <netinet/ip6.h>
25 #include "ofp-errors.h"
32 /* Open vSwitch fields
35 * A "field" is a property of a packet. Most familiarly, "data fields" are
36 * fields that can be extracted from a packet.
38 * Some data fields are always present as a consequence of the basic networking
39 * technology in use. Ethernet is the assumed base technology for current
40 * versions of OpenFlow and Open vSwitch, so Ethernet header fields are always
43 * Other data fields are not always present. A packet contains ARP fields, for
44 * example, only when its Ethernet header indicates the Ethertype for ARP,
45 * 0x0806. We say that a field is "applicable" when it is it present in a
46 * packet, and "inapplicable" when it is not, and refer to the conditions that
47 * determine whether a field is applicable as "prerequisites". Some
48 * VLAN-related fields are a special case: these fields are always applicable,
49 * but have a designated value or bit that indicates whether a VLAN header is
50 * present, with the remaining values or bits indicating the VLAN header's
51 * content (if it is present). See MFF_VLAN_TCI for an example.
53 * Conceptually, an inapplicable field does not have a value, not even a
54 * nominal ``value'' such as all-zero-bits. In many circumstances, OpenFlow
55 * and Open vSwitch allow references only to applicable fields. For example,
56 * one may match a given field only if the match includes the field's
57 * prerequisite, e.g. matching an ARP field is only allowed if one also matches
58 * on Ethertype 0x0806.
60 * (Practically, however, OVS represents a field's value as some fixed member
61 * in its "struct flow", so accessing that member will obtain some value. Some
62 * members are used for more than one purpose, e.g. the "tp_src" member
63 * represents the TCP, UDP, and SCTP source port, so the value read may not
64 * even make sense. For this reason, it is important to know whether a field's
65 * prerequisites are satisfied before attempting to read it.)
67 * Sometimes a packet may contain multiple instances of a header. For example,
68 * a packet may contain multiple VLAN or MPLS headers, and tunnels can cause
69 * any data field to recur. OpenFlow and Open vSwitch do not address these
70 * cases uniformly. For VLAN and MPLS headers, only the outermost header is
71 * accessible, so that inner headers may be accessed only by ``popping''
72 * (removing) the outer header. (Open vSwitch supports only a single VLAN
73 * header in any case.) For tunnels, e.g. GRE or VXLAN, the outer header and
74 * inner headers are treated as different data fields.
76 * OpenFlow and Open vSwitch support some fields other than data fields.
77 * "Metadata fields" relate to the origin or treatment of a packet, but they
78 * are not extracted from the packet data itself. One example is the physical
79 * port on which a packet arrived at the switch. "Register fields" act like
80 * variables: they give an OpenFlow switch space for temporary storage while
81 * processing a packet. Existing metadata and register fields have no
84 * A field's value consists of an integral number of bytes. Most data fields
85 * are copied directly from protocol headers, e.g. at layer 2, MFF_ETH_SRC is
86 * copied from the Ethernet source address and MFF_ETH_DST from the destination
87 * address. Other data fields are copied from a packet with padding, usually
88 * with zeros and in the most significant positions (see e.g. MFF_MPLS_LABEL)
89 * but not always (see e.g. MFF_IP_DSCP). A final category of data fields is
90 * transformed in other ways as they are copied from the packets, to make them
91 * more useful for matching, e.g. MFF_IP_FRAG describes whether a packet is a
92 * fragment but it is not copied directly from the IP header.
95 * Field specifications
96 * ====================
98 * Each of the enumeration values below represents a field. The comments
99 * preceding each enum must be in a stylized form that is parsed at compile
100 * time by the extract-ofp-fields program. The comment itself consists of a
101 * series of paragraphs separate by blank lines. The paragraphs consist of:
103 * - The first paragraph gives the user-visible name of the field as a
104 * quoted string. This is the name used for parsing and formatting the
107 * For historical reasons, some fields have an additional name that is
108 * accepted as an alternative in parsing. This name, when there is one,
109 * is given as a quoted string in parentheses along with "aka". For
112 * "tun_id" (aka "tunnel_id").
114 * New fields should have only one name.
116 * - Any number of paragraphs of free text that describe the field. This
117 * is meant for human readers, so extract-ofp-fields ignores it.
119 * - A final paragraph that consists of a series of key-value pairs, one
120 * per line, in the form "key: value." where the period at the end of the
121 * line is a mandatory part of the syntax.
123 * Every field must specify the following key-value pairs:
127 * The format and size of the field's value. Some possible values are
130 * u8: A one-byte field.
131 * be16: A two-byte field.
132 * be32: A four-byte field.
133 * be64: An eight-byte field.
135 * The remaining values imply more about the value's semantics, though OVS
136 * does not currently take advantage of this additional information:
138 * MAC: A six-byte field whose value is an Ethernet address.
139 * IPv6: A 16-byte field whose value is an IPv6 address.
143 * Either "bitwise", if OVS supports matching any subset of bits in the
144 * field, or "no", if OVS only supports matching or wildcarding the entire
149 * Explains how a field's value is formatted and parsed for human
150 * consumption. Some of the options are fairly generally useful:
152 * decimal: Formats the value as a decimal number. On parsing, accepts
153 * decimal (with no prefix), hexadecimal with 0x prefix, or octal
156 * hexadecimal: Same as decimal except nonzero values are formatted in
157 * hex with 0x prefix. The default for parsing is *not* hexadecimal:
158 * only with a 0x prefix is the input in hexadecimal.
160 * Ethernet: Formats and accepts the common format xx:xx:xx:xx:xx:xx.
161 * 6-byte fields only.
163 * IPv4: Formats and accepts the common format w.x.y.z. 4-byte fields
166 * IPv6: Formats and accepts the common IPv6 formats. 16-byte fields
169 * OpenFlow 1.0 port: Accepts an OpenFlow well-known port name
170 * (e.g. "IN_PORT") in uppercase or lowercase, or a 16-bit port
171 * number in decimal. Formats ports using their well-known names in
172 * uppercase, or in decimal otherwise. 2-byte fields only.
174 * OpenFlow 1.1+ port: Same syntax as for OpenFlow 1.0 ports but for
175 * 4-byte OpenFlow 1.1+ port number fields.
177 * Others are very specific to particular fields:
179 * frag: One of the strings "no", "first", "later", "yes", "not_later"
180 * describing which IPv4/v6 fragments are matched.
182 * tunnel flags: Any number of the strings "df", "csum", "key", or
183 * "oam" separated by "|".
185 * TCP flags: See the description of tcp_flags in ovs-ofctl(8).
189 * The field's prerequisites. The values should be straightfoward.
193 * Either "read-only", for a field that cannot be changed via OpenFlow, or
194 * "read/write" for a modifiable field.
198 * If the field has an NXM field assignment, then this specifies the NXM
199 * name of the field (e.g. "NXM_OF_ETH_SRC"), followed by its nxm_type in
200 * parentheses, followed by "since v<x>.<y>" specifying the version of Open
201 * vSwitch that first supported this field in NXM (e.g. "since v1.1" if it
202 * was introduced in Open vSwitch 1.1).
204 * The NXM name must begin with NXM_OF_ or NXM_NX_. This allows OVS to
205 * determine the correct NXM class.
207 * If the field does not have an NXM field assignment, specify "none".
211 * If the field has an OXM field assignment, then this specifies the OXM
212 * name of the field (e.g. "OXM_OF_ETH_SRC"), followed by its nxm_type in
213 * parentheses, followed by "since OF<a>.<b> v<x>.<y>" specifying the
214 * versions of OpenFlow and Open vSwitch that first supported this field in
215 * OXM (e.g. "since OF1.3 and v1.10" if it was introduced in OpenFlow 1.3
216 * and first supported by Open vSwitch in version 1.10).
218 * Some fields have more than one OXM field assignment. For example,
219 * actset_output has an experimenter OXM assignment in OpenFlow 1.3 and a
220 * standard OXM assignment in OpenFlow 1.5. In such a case, specify both,
221 * separated by commas.
223 * OVS uses the start of the OXM field name to determine the correct OXM
224 * class. To support a new OXM class, edit the mapping table in
225 * build-aux/extract-ofp-fields.
227 * If the field does not have an OXM field assignment, specify "none".
229 * The following key-value pairs are optional. Open vSwitch already supports
230 * all the fields to which they apply, so new fields should probably not
231 * include these pairs:
235 * Specify this as "exact match" if OpenFlow 1.0 can match or wildcard the
236 * entire field, or as "CIDR mask" if OpenFlow 1.0 can match any CIDR
237 * prefix of the field. (OpenFlow 1.0 did not support bitwise matching.)
238 * Omit, if OpenFlow 1.0 did not support this field.
242 * Specify this as "exact match" if OpenFlow 1.1 can match or wildcard the
243 * entire field, or as "bitwise" if OpenFlow 1.1 can match any subset of
244 * bits in the field. Omit, if OpenFlow 1.1 did not support this field.
246 * The following key-value pair is optional:
248 * Prefix lookup member:
250 * If this field makes sense for use with classifier_set_prefix_fields(),
251 * specify the name of the "struct flow" member that corresponds to the
254 * Finally, a few "register" fields have very similar names and purposes,
255 * e.g. MFF_REG0 through MFF_REG7. For these, the comments may be merged
256 * together using <N> as a metasyntactic variable for the numeric suffix.
257 * Lines in the comment that are specific to one of the particular fields by
258 * writing, e.g. <1>, to consider that line only for e.g. MFF_REG1.
261 enum OVS_PACKED_ENUM mf_field_id {
268 * Flow hash computed in the datapath. Internal use only, not programmable
271 * The OXM code point for this is an attempt to test OXM experimenter
272 * support, which is otherwise difficult to test due to the dearth of use
273 * out in the wild. Because controllers can't add flows that match on
274 * dp_hash, this doesn't commit OVS to supporting this OXM experimenter
275 * code point in the future.
279 * Formatting: hexadecimal.
280 * Prerequisites: none.
282 * NXM: NXM_NX_DP_HASH(35) since v2.2.
283 * OXM: NXOXM_ET_DP_HASH(0) since OF1.5 and v2.4.
289 * ID for recirculation. The value 0 is reserved for initially received
290 * packets. Internal use only, not programmable from controller.
294 * Formatting: decimal.
295 * Prerequisites: none.
297 * NXM: NXM_NX_RECIRC_ID(36) since v2.2.
304 * ID for "conjunction" actions. Please refer to ovs-ofctl(8)
305 * documentation of "conjunction" for details.
309 * Formatting: decimal.
310 * Prerequisites: none.
312 * NXM: NXM_NX_CONJ_ID(37) since v2.4.
316 /* "tun_id" (aka "tunnel_id").
318 * The "key" or "tunnel ID" or "VNI" in a packet received via a keyed
319 * tunnel. For protocols in which the key is shorter than 64 bits, the key
320 * is stored in the low bits and the high bits are zeroed. For non-keyed
321 * tunnels and packets not received via a tunnel, the value is 0.
325 * Formatting: hexadecimal.
326 * Prerequisites: none.
327 * Access: read/write.
328 * NXM: NXM_NX_TUN_ID(16) since v1.1.
329 * OXM: OXM_OF_TUNNEL_ID(38) since OF1.3 and v1.10.
330 * Prefix lookup member: tunnel.tun_id.
336 * The IPv4 source address in the outer IP header of a tunneled packet.
338 * For non-tunneled packets, the value is 0.
343 * Prerequisites: none.
344 * Access: read/write.
345 * NXM: NXM_NX_TUN_IPV4_SRC(31) since v2.0.
347 * Prefix lookup member: tunnel.ip_src.
353 * The IPv4 destination address in the outer IP header of a tunneled
356 * For non-tunneled packets, the value is 0.
361 * Prerequisites: none.
362 * Access: read/write.
363 * NXM: NXM_NX_TUN_IPV4_DST(32) since v2.0.
365 * Prefix lookup member: tunnel.ip_dst.
371 * Combination of FLOW_TNL_F_* bitmapped flags that indicate properties of
372 * a tunneled packet. Internal use only, not programmable from controller.
374 * For non-tunneled packets, the value is 0.
378 * Formatting: tunnel flags.
379 * Prerequisites: none.
388 * The TTL in the outer IP header of a tunneled packet. Internal use only,
389 * not programmable from controller.
391 * For non-tunneled packets, the value is 0.
395 * Formatting: decimal.
396 * Prerequisites: none.
405 * The ToS value in the outer IP header of a tunneled packet. Internal use
406 * only, not programmable from controller.
410 * Formatting: decimal.
411 * Prerequisites: none.
420 * VXLAN Group Policy ID
424 * Formatting: decimal.
425 * Prerequisites: none.
426 * Access: read/write.
427 * NXM: NXM_NX_TUN_GBP_ID(38) since v2.4.
434 * VXLAN Group Policy flags
438 * Formatting: hexadecimal.
439 * Prerequisites: none.
440 * Access: read/write.
441 * NXM: NXM_NX_TUN_GBP_FLAGS(39) since v2.4.
448 * A scratch pad value standardized in OpenFlow 1.1+. Initially zero, at
449 * the beginning of the pipeline.
453 * Formatting: hexadecimal.
454 * Prerequisites: none.
455 * Access: read/write.
457 * OXM: OXM_OF_METADATA(2) since OF1.2 and v1.8.
458 * OF1.1: bitwise mask.
464 * 16-bit (OpenFlow 1.0) view of the physical or virtual port on which the
465 * packet was received.
469 * Formatting: OpenFlow 1.0 port.
470 * Prerequisites: none.
471 * Access: read/write.
472 * NXM: NXM_OF_IN_PORT(0) since v1.1.
474 * OF1.0: exact match.
475 * OF1.1: exact match.
481 * 32-bit (OpenFlow 1.1+) view of the physical or virtual port on which the
482 * packet was received.
486 * Formatting: OpenFlow 1.1+ port.
487 * Prerequisites: none.
488 * Access: read/write.
490 * OXM: OXM_OF_IN_PORT(0) since OF1.2 and v1.7.
491 * OF1.1: exact match.
499 * Formatting: OpenFlow 1.1+ port.
500 * Prerequisites: none.
503 * OXM: ONFOXM_ET_ACTSET_OUTPUT(43) since OF1.3 and v2.4,
504 * OXM_OF_ACTSET_OUTPUT(43) since OF1.5 and v2.4.
510 * Designates the queue to which output will be directed. The value in
511 * this field is not necessarily the OpenFlow queue number; with the Linux
512 * kernel switch, it instead has a pair of subfields designating the
513 * "major" and "minor" numbers of a Linux kernel qdisc handle.
515 * This field is "semi-internal" in that it can be set with the "set_queue"
516 * action but not matched or read or written other ways.
520 * Formatting: hexadecimal.
521 * Prerequisites: none.
530 * Packet metadata mark. The mark may be passed into other system
531 * components in order to facilitate interaction between subsystems. On
532 * Linux this corresponds to struct sk_buff's "skb_mark" member but the
533 * exact implementation is platform-dependent.
537 * Formatting: hexadecimal.
538 * Prerequisites: none.
539 * Access: read/write.
540 * NXM: NXM_NX_PKT_MARK(33) since v2.0.
548 * Nicira extension scratch pad register with initial value 0.
552 * Formatting: hexadecimal.
553 * Prerequisites: none.
554 * Access: read/write.
555 * NXM: NXM_NX_REG0(0) since v1.1. <0>
556 * NXM: NXM_NX_REG1(1) since v1.1. <1>
557 * NXM: NXM_NX_REG2(2) since v1.1. <2>
558 * NXM: NXM_NX_REG3(3) since v1.1. <3>
559 * NXM: NXM_NX_REG4(4) since v1.3. <4>
560 * NXM: NXM_NX_REG5(5) since v1.7. <5>
561 * NXM: NXM_NX_REG6(6) since v1.7. <6>
562 * NXM: NXM_NX_REG7(7) since v1.7. <7>
574 #error "Need to update MFF_REG* to match FLOW_N_REGS"
577 #if FLOW_N_XREGS == 4
580 * OpenFlow 1.5 ``extended register". Each extended register
581 * overlays two of the Nicira extension 32-bit registers: xreg0 overlays
582 * reg0 and reg1, with reg0 supplying the most-significant bits of xreg0
583 * and reg1 the least-significant. xreg1 similarly overlays reg2 and reg3,
586 * These registers were introduced in OpenFlow 1.5, but EXT-244 in the ONF
587 * JIRA also publishes them as a (draft) OpenFlow extension to OpenFlow
592 * Formatting: hexadecimal.
593 * Prerequisites: none.
594 * Access: read/write.
596 * OXM: OXM_OF_PKT_REG<N>(<N>) since OF1.3 and v2.4.
603 #error "Need to update MFF_REG* to match FLOW_N_XREGS"
610 /* "eth_src" (aka "dl_src").
612 * Source address in Ethernet header.
614 * This field was not maskable before Open vSwitch 1.8.
618 * Formatting: Ethernet.
619 * Prerequisites: none.
620 * Access: read/write.
621 * NXM: NXM_OF_ETH_SRC(2) since v1.1.
622 * OXM: OXM_OF_ETH_SRC(4) since OF1.2 and v1.7.
623 * OF1.0: exact match.
624 * OF1.1: bitwise mask.
628 /* "eth_dst" (aka "dl_dst").
630 * Destination address in Ethernet header.
632 * Before Open vSwitch 1.8, the allowed masks were restricted to
633 * 00:00:00:00:00:00, fe:ff:ff:ff:ff:ff, 01:00:00:00:00:00,
638 * Formatting: Ethernet.
639 * Prerequisites: none.
640 * Access: read/write.
641 * NXM: NXM_OF_ETH_DST(1) since v1.1.
642 * OXM: OXM_OF_ETH_DST(3) since OF1.2 and v1.7.
643 * OF1.0: exact match.
644 * OF1.1: bitwise mask.
648 /* "eth_type" (aka "dl_type").
650 * Packet's Ethernet type.
652 * For an Ethernet II packet this is taken from the Ethernet header. For
653 * an 802.2 LLC+SNAP header with OUI 00-00-00 this is taken from the SNAP
654 * header. A packet that has neither format has value 0x05ff
655 * (OFP_DL_TYPE_NOT_ETH_TYPE).
657 * For a packet with an 802.1Q header, this is the type of the encapsulated
662 * Formatting: hexadecimal.
663 * Prerequisites: none.
665 * NXM: NXM_OF_ETH_TYPE(3) since v1.1.
666 * OXM: OXM_OF_ETH_TYPE(5) since OF1.2 and v1.7.
667 * OF1.0: exact match.
668 * OF1.1: exact match.
676 /* It looks odd for vlan_tci, vlan_vid, and vlan_pcp to say that they are
677 * supported in OF1.0 and OF1.1, since the detailed semantics of these fields
678 * only apply to NXM or OXM. They are marked as supported for exact matches in
679 * OF1.0 and OF1.1 because exact matches on those fields can be successfully
680 * translated into the OF1.0 and OF1.1 flow formats. */
686 * For a packet with an 802.1Q header, this is the Tag Control Information
687 * (TCI) field, with the CFI bit forced to 1. For a packet with no 802.1Q
688 * header, this has value 0.
690 * This field can be used in various ways:
692 * - If it is not constrained at all, the nx_match matches packets
693 * without an 802.1Q header or with an 802.1Q header that has any TCI
696 * - Testing for an exact match with 0 matches only packets without an
699 * - Testing for an exact match with a TCI value with CFI=1 matches
700 * packets that have an 802.1Q header with a specified VID and PCP.
702 * - Testing for an exact match with a nonzero TCI value with CFI=0 does
703 * not make sense. The switch may reject this combination.
705 * - Testing with a specific VID and CFI=1, with nxm_mask=0x1fff, matches
706 * packets that have an 802.1Q header with that VID (and any PCP).
708 * - Testing with a specific PCP and CFI=1, with nxm_mask=0xf000, matches
709 * packets that have an 802.1Q header with that PCP (and any VID).
711 * - Testing with nxm_value=0, nxm_mask=0x0fff matches packets with no
712 * 802.1Q header or with an 802.1Q header with a VID of 0.
714 * - Testing with nxm_value=0, nxm_mask=0xe000 matches packets with no
715 * 802.1Q header or with an 802.1Q header with a PCP of 0.
717 * - Testing with nxm_value=0, nxm_mask=0xefff matches packets with no
718 * 802.1Q header or with an 802.1Q header with both VID and PCP of 0.
722 * Formatting: hexadecimal.
723 * Prerequisites: none.
724 * Access: read/write.
725 * NXM: NXM_OF_VLAN_TCI(4) since v1.1.
727 * OF1.0: exact match.
728 * OF1.1: exact match.
732 /* "dl_vlan" (OpenFlow 1.0).
734 * VLAN ID field. Zero if no 802.1Q header is present.
736 * Type: be16 (low 12 bits).
738 * Formatting: decimal.
739 * Prerequisites: none.
740 * Access: read/write.
743 * OF1.0: exact match.
744 * OF1.1: exact match.
748 /* "vlan_vid" (OpenFlow 1.2+).
750 * If an 802.1Q header is present, this field's value is 0x1000
751 * bitwise-or'd with the VLAN ID. If no 802.1Q is present, this field's
754 * Type: be16 (low 12 bits).
756 * Formatting: decimal.
757 * Prerequisites: none.
758 * Access: read/write.
760 * OXM: OXM_OF_VLAN_VID(6) since OF1.2 and v1.7.
761 * OF1.0: exact match.
762 * OF1.1: exact match.
766 /* "dl_vlan_pcp" (OpenFlow 1.0).
768 * VLAN priority (PCP) field. Zero if no 802.1Q header is present.
770 * Type: u8 (low 3 bits).
772 * Formatting: decimal.
773 * Prerequisites: none.
774 * Access: read/write.
777 * OF1.0: exact match.
778 * OF1.1: exact match.
782 /* "vlan_pcp" (OpenFlow 1.2+).
784 * VLAN priority (PCP) field. Zero if no 802.1Q header is present.
786 * Type: u8 (low 3 bits).
788 * Formatting: decimal.
789 * Prerequisites: VLAN VID.
790 * Access: read/write.
792 * OXM: OXM_OF_VLAN_PCP(7) since OF1.2 and v1.7.
793 * OF1.0: exact match.
794 * OF1.1: exact match.
804 * The outermost MPLS label, or 0 if no MPLS labels are present.
806 * Type: be32 (low 20 bits).
808 * Formatting: decimal.
809 * Prerequisites: MPLS.
810 * Access: read/write.
812 * OXM: OXM_OF_MPLS_LABEL(34) since OF1.2 and v1.11.
813 * OF1.1: exact match.
819 * The outermost MPLS label's traffic control (TC) field, or 0 if no MPLS
820 * labels are present.
822 * Type: u8 (low 3 bits).
824 * Formatting: decimal.
825 * Prerequisites: MPLS.
826 * Access: read/write.
828 * OXM: OXM_OF_MPLS_TC(35) since OF1.2 and v1.11.
829 * OF1.1: exact match.
835 * The outermost MPLS label's bottom of stack (BoS) field, or 0 if no MPLS
836 * labels are present.
838 * Type: u8 (low 1 bits).
840 * Formatting: decimal.
841 * Prerequisites: MPLS.
844 * OXM: OXM_OF_MPLS_BOS(36) since OF1.3 and v1.11.
852 /* Update mf_is_l3_or_higher() if MFF_IPV4_SRC is no longer the first element
853 * for a field of layer 3 or higher */
855 /* "ip_src" (aka "nw_src").
857 * The source address in the IPv4 header.
859 * Before Open vSwitch 1.8, only CIDR masks were supported.
864 * Prerequisites: IPv4.
865 * Access: read/write.
866 * NXM: NXM_OF_IP_SRC(7) since v1.1.
867 * OXM: OXM_OF_IPV4_SRC(11) since OF1.2 and v1.7.
869 * OF1.1: bitwise mask.
870 * Prefix lookup member: nw_src.
874 /* "ip_dst" (aka "nw_dst").
876 * The destination address in the IPv4 header.
878 * Before Open vSwitch 1.8, only CIDR masks were supported.
883 * Prerequisites: IPv4.
884 * Access: read/write.
885 * NXM: NXM_OF_IP_DST(8) since v1.1.
886 * OXM: OXM_OF_IPV4_DST(12) since OF1.2 and v1.7.
888 * OF1.1: bitwise mask.
889 * Prefix lookup member: nw_dst.
899 * The source address in the IPv6 header.
904 * Prerequisites: IPv6.
905 * Access: read/write.
906 * NXM: NXM_NX_IPV6_SRC(19) since v1.1.
907 * OXM: OXM_OF_IPV6_SRC(26) since OF1.2 and v1.1.
908 * Prefix lookup member: ipv6_src.
914 * The destination address in the IPv6 header.
919 * Prerequisites: IPv6.
920 * Access: read/write.
921 * NXM: NXM_NX_IPV6_DST(20) since v1.1.
922 * OXM: OXM_OF_IPV6_DST(27) since OF1.2 and v1.1.
923 * Prefix lookup member: ipv6_dst.
929 * The flow label in the IPv6 header.
931 * Type: be32 (low 20 bits).
933 * Formatting: hexadecimal.
934 * Prerequisites: IPv6.
935 * Access: read/write.
936 * NXM: NXM_NX_IPV6_LABEL(27) since v1.4.
937 * OXM: OXM_OF_IPV6_FLABEL(28) since OF1.2 and v1.7.
941 /* ## ----------------------- ## */
942 /* ## IPv4/IPv6 common fields ## */
943 /* ## ----------------------- ## */
945 /* "nw_proto" (aka "ip_proto").
947 * The "protocol" byte in the IPv4 or IPv6 header.
951 * Formatting: decimal.
952 * Prerequisites: IPv4/IPv6.
954 * NXM: NXM_OF_IP_PROTO(6) since v1.1.
955 * OXM: OXM_OF_IP_PROTO(10) since OF1.2 and v1.7.
956 * OF1.0: exact match.
957 * OF1.1: exact match.
961 /* Both views of the DSCP below are marked as supported in all of the versions
962 * of OpenFlow because a match on either view can be successfully translated
963 * into every OpenFlow flow format. */
965 /* "nw_tos" (OpenFlow 1.0/1.1).
967 * The DSCP byte in the IPv4 header or the traffic class byte from the IPv6
968 * header, with the ECN bits forced to 0. (That is, bits 2-7 contain the
969 * type of service and bits 0-1 are zero.)
973 * Formatting: decimal.
974 * Prerequisites: IPv4/IPv6.
975 * Access: read/write.
976 * NXM: NXM_OF_IP_TOS(5) since v1.1.
978 * OF1.0: exact match.
979 * OF1.1: exact match.
983 /* "ip_dscp" (OpenFlow 1.2+).
985 * The DSCP byte in the IPv4 header or the traffic class byte from the IPv6
986 * header, shifted right 2 bits. (That is, bits 0-5 contain the type of
987 * service and bits 6-7 are zero.)
989 * Type: u8 (low 6 bits).
991 * Formatting: decimal.
992 * Prerequisites: IPv4/IPv6.
993 * Access: read/write.
995 * OXM: OXM_OF_IP_DSCP(8) since OF1.2 and v1.7.
996 * OF1.0: exact match.
997 * OF1.1: exact match.
1001 /* "nw_ecn" (aka "ip_ecn").
1003 * The ECN bits in the IPv4 or IPv6 header.
1005 * Type: u8 (low 2 bits).
1007 * Formatting: decimal.
1008 * Prerequisites: IPv4/IPv6.
1009 * Access: read/write.
1010 * NXM: NXM_NX_IP_ECN(28) since v1.4.
1011 * OXM: OXM_OF_IP_ECN(9) since OF1.2 and v1.7.
1017 * The time-to-live (TTL) in the IPv4 header or hop limit in the IPv6
1022 * Formatting: decimal.
1023 * Prerequisites: IPv4/IPv6.
1024 * Access: read/write.
1025 * NXM: NXM_NX_IP_TTL(29) since v1.4.
1032 * IP fragment information.
1034 * This field has three possible values:
1036 * - A packet that is not an IP fragment has value 0.
1038 * - A packet that is an IP fragment with offset 0 (the first fragment)
1039 * has bit 0 set and thus value 1.
1041 * - A packet that is an IP fragment with nonzero offset has bits 0 and 1
1042 * set and thus value 3.
1044 * NX_IP_FRAG_ANY and NX_IP_FRAG_LATER are declared to symbolically
1045 * represent the meanings of bits 0 and 1.
1047 * The switch may reject matches against values that can never appear.
1049 * It is important to understand how this field interacts with the OpenFlow
1050 * IP fragment handling mode:
1052 * - In OFPC_FRAG_DROP mode, the OpenFlow switch drops all IP fragments
1053 * before they reach the flow table, so every packet that is available
1054 * for matching will have value 0 in this field.
1056 * - Open vSwitch does not implement OFPC_FRAG_REASM mode, but if it did
1057 * then IP fragments would be reassembled before they reached the flow
1058 * table and again every packet available for matching would always
1061 * - In OFPC_FRAG_NORMAL mode, all three values are possible, but
1062 * OpenFlow 1.0 says that fragments' transport ports are always 0, even
1063 * for the first fragment, so this does not provide much extra
1066 * - In OFPC_FRAG_NX_MATCH mode, all three values are possible. For
1067 * fragments with offset 0, Open vSwitch makes L4 header information
1070 * Type: u8 (low 2 bits).
1071 * Maskable: bitwise.
1073 * Prerequisites: IPv4/IPv6.
1074 * Access: read-only.
1075 * NXM: NXM_NX_IP_FRAG(26) since v1.3.
1088 * For an Ethernet+IP ARP packet, the opcode in the ARP header. Always 0
1089 * otherwise. Only ARP opcodes between 1 and 255 should be specified for
1094 * Formatting: decimal.
1095 * Prerequisites: ARP.
1096 * Access: read/write.
1097 * NXM: NXM_OF_ARP_OP(15) since v1.1.
1098 * OXM: OXM_OF_ARP_OP(21) since OF1.2 and v1.7.
1099 * OF1.0: exact match.
1100 * OF1.1: exact match.
1106 * For an Ethernet+IP ARP packet, the source protocol (IPv4) address in the
1107 * ARP header. Always 0 otherwise.
1109 * Before Open vSwitch 1.8, only CIDR masks were supported.
1112 * Maskable: bitwise.
1114 * Prerequisites: ARP.
1115 * Access: read/write.
1116 * NXM: NXM_OF_ARP_SPA(16) since v1.1.
1117 * OXM: OXM_OF_ARP_SPA(22) since OF1.2 and v1.7.
1119 * OF1.1: bitwise mask.
1125 * For an Ethernet+IP ARP packet, the target protocol (IPv4) address in the
1126 * ARP header. Always 0 otherwise.
1128 * Before Open vSwitch 1.8, only CIDR masks were supported.
1131 * Maskable: bitwise.
1133 * Prerequisites: ARP.
1134 * Access: read/write.
1135 * NXM: NXM_OF_ARP_TPA(17) since v1.1.
1136 * OXM: OXM_OF_ARP_TPA(23) since OF1.2 and v1.7.
1138 * OF1.1: bitwise mask.
1144 * For an Ethernet+IP ARP packet, the source hardware (Ethernet) address in
1145 * the ARP header. Always 0 otherwise.
1148 * Maskable: bitwise.
1149 * Formatting: Ethernet.
1150 * Prerequisites: ARP.
1151 * Access: read/write.
1152 * NXM: NXM_NX_ARP_SHA(17) since v1.1.
1153 * OXM: OXM_OF_ARP_SHA(24) since OF1.2 and v1.7.
1159 * For an Ethernet+IP ARP packet, the target hardware (Ethernet) address in
1160 * the ARP header. Always 0 otherwise.
1163 * Maskable: bitwise.
1164 * Formatting: Ethernet.
1165 * Prerequisites: ARP.
1166 * Access: read/write.
1167 * NXM: NXM_NX_ARP_THA(18) since v1.1.
1168 * OXM: OXM_OF_ARP_THA(25) since OF1.2 and v1.7.
1176 /* "tcp_src" (aka "tp_src").
1181 * Maskable: bitwise.
1182 * Formatting: decimal.
1183 * Prerequisites: TCP.
1184 * Access: read/write.
1185 * NXM: NXM_OF_TCP_SRC(9) since v1.1.
1186 * OXM: OXM_OF_TCP_SRC(13) since OF1.2 and v1.7.
1187 * OF1.0: exact match.
1188 * OF1.1: exact match.
1192 /* "tcp_dst" (aka "tp_dst").
1194 * TCP destination port.
1197 * Maskable: bitwise.
1198 * Formatting: decimal.
1199 * Prerequisites: TCP.
1200 * Access: read/write.
1201 * NXM: NXM_OF_TCP_DST(10) since v1.1.
1202 * OXM: OXM_OF_TCP_DST(14) since OF1.2 and v1.7.
1203 * OF1.0: exact match.
1204 * OF1.1: exact match.
1210 * Flags in the TCP header.
1212 * TCP currently defines 9 flag bits, and additional 3 bits are reserved
1213 * (must be transmitted as zero). See RFCs 793, 3168, and 3540.
1215 * Type: be16 (low 12 bits).
1216 * Maskable: bitwise.
1217 * Formatting: TCP flags.
1218 * Prerequisites: TCP.
1219 * Access: read-only.
1220 * NXM: NXM_NX_TCP_FLAGS(34) since v2.1.
1221 * OXM: ONFOXM_ET_TCP_FLAGS(42) since OF1.3 and v2.4,
1222 * OXM_OF_TCP_FLAGS(42) since OF1.5 and v2.3.
1235 * Maskable: bitwise.
1236 * Formatting: decimal.
1237 * Prerequisites: UDP.
1238 * Access: read/write.
1239 * NXM: NXM_OF_UDP_SRC(11) since v1.1.
1240 * OXM: OXM_OF_UDP_SRC(15) since OF1.2 and v1.7.
1241 * OF1.0: exact match.
1242 * OF1.1: exact match.
1248 * UDP destination port
1251 * Maskable: bitwise.
1252 * Formatting: decimal.
1253 * Prerequisites: UDP.
1254 * Access: read/write.
1255 * NXM: NXM_OF_UDP_DST(12) since v1.1.
1256 * OXM: OXM_OF_UDP_DST(16) since OF1.2 and v1.7.
1257 * OF1.0: exact match.
1258 * OF1.1: exact match.
1271 * Maskable: bitwise.
1272 * Formatting: decimal.
1273 * Prerequisites: SCTP.
1274 * Access: read/write.
1276 * OXM: OXM_OF_SCTP_SRC(17) since OF1.2 and v2.0.
1277 * OF1.1: exact match.
1283 * SCTP destination port.
1286 * Maskable: bitwise.
1287 * Formatting: decimal.
1288 * Prerequisites: SCTP.
1289 * Access: read/write.
1291 * OXM: OXM_OF_SCTP_DST(18) since OF1.2 and v2.0.
1292 * OF1.1: exact match.
1306 * Formatting: decimal.
1307 * Prerequisites: ICMPv4.
1308 * Access: read-only.
1309 * NXM: NXM_OF_ICMP_TYPE(13) since v1.1.
1310 * OXM: OXM_OF_ICMPV4_TYPE(19) since OF1.2 and v1.7.
1311 * OF1.0: exact match.
1312 * OF1.1: exact match.
1322 * Formatting: decimal.
1323 * Prerequisites: ICMPv4.
1324 * Access: read-only.
1325 * NXM: NXM_OF_ICMP_CODE(14) since v1.1.
1326 * OXM: OXM_OF_ICMPV4_CODE(20) since OF1.2 and v1.7.
1327 * OF1.0: exact match.
1328 * OF1.1: exact match.
1338 * Formatting: decimal.
1339 * Prerequisites: ICMPv6.
1340 * Access: read-only.
1341 * NXM: NXM_NX_ICMPV6_TYPE(21) since v1.1.
1342 * OXM: OXM_OF_ICMPV6_TYPE(29) since OF1.2 and v1.7.
1352 * Formatting: decimal.
1353 * Prerequisites: ICMPv6.
1354 * Access: read-only.
1355 * NXM: NXM_NX_ICMPV6_CODE(22) since v1.1.
1356 * OXM: OXM_OF_ICMPV6_CODE(30) since OF1.2 and v1.7.
1360 /* ## ------------------------- ## */
1361 /* ## ICMPv6 Neighbor Discovery ## */
1362 /* ## ------------------------- ## */
1366 * The target address in an IPv6 Neighbor Discovery message.
1368 * Before Open vSwitch 1.8, only CIDR masks were supported.
1371 * Maskable: bitwise.
1373 * Prerequisites: ND.
1374 * Access: read/write.
1375 * NXM: NXM_NX_ND_TARGET(23) since v1.1.
1376 * OXM: OXM_OF_IPV6_ND_TARGET(31) since OF1.2 and v1.7.
1382 * The source link layer address in an IPv6 Neighbor Discovery message.
1385 * Maskable: bitwise.
1386 * Formatting: Ethernet.
1387 * Prerequisites: ND solicit.
1388 * Access: read/write.
1389 * NXM: NXM_NX_ND_SLL(24) since v1.1.
1390 * OXM: OXM_OF_IPV6_ND_SLL(32) since OF1.2 and v1.7.
1396 * The target link layer address in an IPv6 Neighbor Discovery message.
1399 * Maskable: bitwise.
1400 * Formatting: Ethernet.
1401 * Prerequisites: ND advert.
1402 * Access: read/write.
1403 * NXM: NXM_NX_ND_TLL(25) since v1.1.
1404 * OXM: OXM_OF_IPV6_ND_TLL(33) since OF1.2 and v1.7.
1411 /* A set of mf_field_ids. */
1413 unsigned long bm[BITMAP_N_LONGS(MFF_N_IDS)];
1415 #define MF_BITMAP_INITIALIZER { { [0] = 0 } }
1417 /* Use this macro as CASE_MFF_REGS: in a switch statement to choose all of the
1418 * MFF_REGn cases. */
1419 #if FLOW_N_REGS == 8
1420 #define CASE_MFF_REGS \
1421 case MFF_REG0: case MFF_REG1: case MFF_REG2: case MFF_REG3: \
1422 case MFF_REG4: case MFF_REG5: case MFF_REG6: case MFF_REG7
1424 #error "Need to update CASE_MFF_REGS to match FLOW_N_REGS"
1427 /* Use this macro as CASE_MFF_XREGS: in a switch statement to choose all of the
1428 * MFF_REGn cases. */
1429 #if FLOW_N_XREGS == 4
1430 #define CASE_MFF_XREGS \
1431 case MFF_XREG0: case MFF_XREG1: case MFF_XREG2: case MFF_XREG3
1433 #error "Need to update CASE_MFF_XREGS to match FLOW_N_XREGS"
1436 /* Prerequisites for matching a field.
1438 * A field may only be matched if the correct lower-level protocols are also
1439 * matched. For example, the TCP port may be matched only if the Ethernet type
1440 * matches ETH_TYPE_IP and the IP protocol matches IPPROTO_TCP. */
1441 enum OVS_PACKED_ENUM mf_prereqs {
1444 /* L2 requirements. */
1451 /* L2.5 requirements. */
1454 /* L2+L3 requirements. */
1455 MFP_TCP, /* On IPv4 or IPv6. */
1456 MFP_UDP, /* On IPv4 or IPv6. */
1457 MFP_SCTP, /* On IPv4 or IPv6. */
1461 /* L2+L3+L4 requirements. */
1467 /* Forms of partial-field masking allowed for a field.
1469 * Every field may be masked as a whole. */
1470 enum OVS_PACKED_ENUM mf_maskable {
1471 MFM_NONE, /* No sub-field masking. */
1472 MFM_FULLY, /* Every bit is individually maskable. */
1475 /* How to format or parse a field's value. */
1476 enum OVS_PACKED_ENUM mf_string {
1479 * The particular MFS_* constant sets the output format. On input, either
1480 * decimal or hexadecimal (prefixed with 0x) is accepted. */
1484 /* Other formats. */
1488 MFS_OFP_PORT, /* 16-bit OpenFlow 1.0 port number or name. */
1489 MFS_OFP_PORT_OXM, /* 32-bit OpenFlow 1.1+ port number or name. */
1490 MFS_FRAG, /* no, yes, first, later, not_later */
1491 MFS_TNL_FLAGS, /* FLOW_TNL_F_* flags */
1492 MFS_TCP_FLAGS, /* TCP_* flags */
1496 /* Identification. */
1497 enum mf_field_id id; /* MFF_*. */
1498 const char *name; /* Name of this field, e.g. "eth_type". */
1499 const char *extra_name; /* Alternate name, e.g. "dl_type", or NULL. */
1503 * Most fields have n_bytes * 8 == n_bits. There are a few exceptions:
1505 * - "dl_vlan" is 2 bytes but only 12 bits.
1506 * - "dl_vlan_pcp" is 1 byte but only 3 bits.
1507 * - "is_frag" is 1 byte but only 2 bits.
1508 * - "ipv6_label" is 4 bytes but only 20 bits.
1509 * - "mpls_label" is 4 bytes but only 20 bits.
1510 * - "mpls_tc" is 1 byte but only 3 bits.
1511 * - "mpls_bos" is 1 byte but only 1 bit.
1513 unsigned int n_bytes; /* Width of the field in bytes. */
1514 unsigned int n_bits; /* Number of significant bits in field. */
1517 enum mf_maskable maskable;
1518 enum mf_string string;
1519 enum mf_prereqs prereqs;
1520 bool writable; /* May be written by actions? */
1522 /* Usable protocols.
1524 * NXM and OXM are extensible, allowing later extensions to be sent in
1525 * earlier protocol versions, so this does not necessarily correspond to
1526 * the OpenFlow protocol version the field was introduced in.
1527 * Also, some field types are tranparently mapped to each other via the
1528 * struct flow (like vlan and dscp/tos fields), so each variant supports
1531 * These are combinations of OFPUTIL_P_*. (They are not declared as type
1532 * enum ofputil_protocol because that would give meta-flow.h and ofp-util.h
1533 * a circular dependency.) */
1534 uint32_t usable_protocols_exact; /* Matching or setting whole field. */
1535 uint32_t usable_protocols_cidr; /* Matching a CIDR mask in field. */
1536 uint32_t usable_protocols_bitwise; /* Matching arbitrary bits in field. */
1538 int flow_be32ofs; /* Field's be32 offset in "struct flow", if prefix tree
1539 * lookup is supported for the field, or -1. */
1542 /* The representation of a field's value. */
1544 struct in6_addr ipv6;
1545 uint8_t mac[ETH_ADDR_LEN];
1551 BUILD_ASSERT_DECL(sizeof(union mf_value) == 16);
1553 /* An all-1-bits mf_value. Needs to be updated if struct mf_value grows.*/
1554 #define MF_EXACT_MASK_INITIALIZER { IN6ADDR_EXACT_INIT }
1555 BUILD_ASSERT_DECL(sizeof(union mf_value) == sizeof(struct in6_addr));
1557 /* Part of a field. */
1558 struct mf_subfield {
1559 const struct mf_field *field;
1560 unsigned int ofs; /* Bit offset. */
1561 unsigned int n_bits; /* Number of bits. */
1564 /* Data for some part of an mf_field.
1566 * The data is stored "right-justified". For example, if "union mf_subvalue
1567 * value" contains NXM_OF_VLAN_TCI[0..11], then one could access the
1568 * corresponding data in value.be16[7] as the bits in the mask htons(0xfff). */
1575 BUILD_ASSERT_DECL(sizeof(union mf_value) == sizeof (union mf_subvalue));
1577 /* Finding mf_fields. */
1578 const struct mf_field *mf_from_name(const char *name);
1580 static inline const struct mf_field *
1581 mf_from_id(enum mf_field_id id)
1583 extern const struct mf_field mf_fields[MFF_N_IDS];
1584 ovs_assert((unsigned int) id < MFF_N_IDS);
1585 return &mf_fields[id];
1588 /* Inspecting wildcarded bits. */
1589 bool mf_is_all_wild(const struct mf_field *, const struct flow_wildcards *);
1591 bool mf_is_mask_valid(const struct mf_field *, const union mf_value *mask);
1592 void mf_get_mask(const struct mf_field *, const struct flow_wildcards *,
1593 union mf_value *mask);
1595 /* Prerequisites. */
1596 bool mf_are_prereqs_ok(const struct mf_field *, const struct flow *);
1597 void mf_mask_field_and_prereqs(const struct mf_field *, struct flow *mask);
1600 mf_is_l3_or_higher(const struct mf_field *mf)
1602 return mf->id >= MFF_IPV4_SRC;
1606 bool mf_is_value_valid(const struct mf_field *, const union mf_value *value);
1608 void mf_get_value(const struct mf_field *, const struct flow *,
1609 union mf_value *value);
1610 void mf_set_value(const struct mf_field *, const union mf_value *value,
1612 void mf_set_flow_value(const struct mf_field *, const union mf_value *value,
1614 void mf_set_flow_value_masked(const struct mf_field *,
1615 const union mf_value *value,
1616 const union mf_value *mask,
1618 bool mf_is_zero(const struct mf_field *, const struct flow *);
1619 void mf_mask_field(const struct mf_field *, struct flow *);
1621 void mf_get(const struct mf_field *, const struct match *,
1622 union mf_value *value, union mf_value *mask);
1624 /* Returns the set of usable protocols. */
1625 enum ofputil_protocol mf_set(const struct mf_field *,
1626 const union mf_value *value,
1627 const union mf_value *mask,
1630 void mf_set_wild(const struct mf_field *, struct match *);
1633 void mf_write_subfield_flow(const struct mf_subfield *,
1634 const union mf_subvalue *, struct flow *);
1635 void mf_write_subfield(const struct mf_subfield *, const union mf_subvalue *,
1638 void mf_read_subfield(const struct mf_subfield *, const struct flow *,
1639 union mf_subvalue *);
1640 uint64_t mf_get_subfield(const struct mf_subfield *, const struct flow *);
1643 enum ofperr mf_check_src(const struct mf_subfield *, const struct flow *);
1644 enum ofperr mf_check_dst(const struct mf_subfield *, const struct flow *);
1646 /* Parsing and formatting. */
1647 char *mf_parse(const struct mf_field *, const char *,
1648 union mf_value *value, union mf_value *mask);
1649 char *mf_parse_value(const struct mf_field *, const char *, union mf_value *);
1650 void mf_format(const struct mf_field *,
1651 const union mf_value *value, const union mf_value *mask,
1653 void mf_format_subvalue(const union mf_subvalue *subvalue, struct ds *s);
1655 #endif /* meta-flow.h */