930 lines
24 KiB
C++
930 lines
24 KiB
C++
/* gprs_bssgp_pcu.cpp
|
|
*
|
|
* Copyright (C) 2012 Ivan Klyuchnikov
|
|
* Copyright (C) 2013 by Holger Hans Peter Freyther
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* as published by the Free Software Foundation; either version 2
|
|
* of the License, or (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
|
|
*/
|
|
|
|
#include <gprs_rlcmac.h>
|
|
#include <gprs_bssgp_pcu.h>
|
|
#include <pcu_l1_if.h>
|
|
#include <bts.h>
|
|
#include <tbf.h>
|
|
#include <decoding.h>
|
|
|
|
#define BSSGP_TIMER_T1 30 /* Guards the (un)blocking procedures */
|
|
#define BSSGP_TIMER_T2 30 /* Guards the reset procedure */
|
|
|
|
/* Tuning parameters for BSSGP flow control */
|
|
#define FC_DEFAULT_LIFE_TIME_SECS 10 /* experimental value, 10s */
|
|
#define FC_MS_BUCKET_SIZE_BY_BMAX(bmax) ((bmax) / 2 + 500) /* experimental */
|
|
#define FC_FALLBACK_BVC_BUCKET_SIZE 2000 /* e.g. on R = 0, value taken from PCAP files */
|
|
#define FC_MS_MAX_RX_SLOTS 4 /* limit MS default R to 4 TS per MS */
|
|
|
|
/* Constants for BSSGP flow control */
|
|
#define FC_MAX_BUCKET_LEAK_RATE (6553500 / 8) /* Byte/s */
|
|
#define FC_MAX_BUCKET_SIZE 6553500 /* Octets */
|
|
|
|
static struct gprs_bssgp_pcu the_pcu = { 0, };
|
|
|
|
extern void *tall_pcu_ctx;
|
|
extern uint16_t spoof_mcc, spoof_mnc;
|
|
|
|
static void bvc_timeout(void *_priv);
|
|
|
|
static int parse_imsi(struct tlv_parsed *tp, char *imsi)
|
|
{
|
|
uint8_t imsi_len;
|
|
uint8_t *bcd_imsi;
|
|
int i, j;
|
|
|
|
if (!TLVP_PRESENT(tp, BSSGP_IE_IMSI))
|
|
return -EINVAL;
|
|
|
|
imsi_len = TLVP_LEN(tp, BSSGP_IE_IMSI);
|
|
bcd_imsi = (uint8_t *) TLVP_VAL(tp, BSSGP_IE_IMSI);
|
|
|
|
if ((bcd_imsi[0] & 0x08))
|
|
imsi_len = imsi_len * 2 - 1;
|
|
else
|
|
imsi_len = (imsi_len - 1) * 2;
|
|
for (i = 0, j = 0; j < imsi_len && j < 15; j++)
|
|
{
|
|
if (!(j & 1)) {
|
|
imsi[j] = (bcd_imsi[i] >> 4) + '0';
|
|
i++;
|
|
} else
|
|
imsi[j] = (bcd_imsi[i] & 0xf) + '0';
|
|
}
|
|
imsi[j] = '\0';
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int parse_ra_cap(struct tlv_parsed *tp, MS_Radio_Access_capability_t *rac)
|
|
{
|
|
bitvec *block;
|
|
uint8_t cap_len;
|
|
uint8_t *cap;
|
|
|
|
memset(rac, 0, sizeof(*rac));
|
|
|
|
if (!TLVP_PRESENT(tp, BSSGP_IE_MS_RADIO_ACCESS_CAP))
|
|
return -EINVAL;
|
|
|
|
cap_len = TLVP_LEN(tp, BSSGP_IE_MS_RADIO_ACCESS_CAP);
|
|
cap = (uint8_t *) TLVP_VAL(tp, BSSGP_IE_MS_RADIO_ACCESS_CAP);
|
|
|
|
LOGP(DBSSGP, LOGL_DEBUG, "Got BSSGP RA Capability of size %d\n", cap_len);
|
|
|
|
block = bitvec_alloc(cap_len);
|
|
bitvec_unpack(block, cap);
|
|
|
|
/* TS 24.008, 10.5.5.12a */
|
|
decode_gsm_ra_cap(block, rac);
|
|
|
|
bitvec_free(block);
|
|
return 0;
|
|
}
|
|
|
|
static int gprs_bssgp_pcu_rx_dl_ud(struct msgb *msg, struct tlv_parsed *tp)
|
|
{
|
|
struct bssgp_ud_hdr *budh;
|
|
|
|
uint32_t tlli;
|
|
uint32_t tlli_old = 0;
|
|
uint8_t *data;
|
|
uint16_t len;
|
|
char imsi[16] = "000";
|
|
uint8_t ms_class = 0;
|
|
uint8_t egprs_ms_class = 0;
|
|
#if 0
|
|
MS_Radio_Access_capability_t rac;
|
|
#endif
|
|
|
|
budh = (struct bssgp_ud_hdr *)msgb_bssgph(msg);
|
|
tlli = ntohl(budh->tlli);
|
|
|
|
/* LLC_PDU is mandatory IE */
|
|
if (!TLVP_PRESENT(tp, BSSGP_IE_LLC_PDU))
|
|
{
|
|
LOGP(DBSSGP, LOGL_NOTICE, "BSSGP TLLI=0x%08x Rx UL-UD missing mandatory IE\n", tlli);
|
|
return bssgp_tx_status(BSSGP_CAUSE_MISSING_MAND_IE, NULL, msg);
|
|
}
|
|
|
|
data = (uint8_t *) TLVP_VAL(tp, BSSGP_IE_LLC_PDU);
|
|
len = TLVP_LEN(tp, BSSGP_IE_LLC_PDU);
|
|
if (len > sizeof(gprs_llc::frame))
|
|
{
|
|
LOGP(DBSSGP, LOGL_NOTICE, "BSSGP TLLI=0x%08x Rx UL-UD IE_LLC_PDU too large\n", tlli);
|
|
return bssgp_tx_status(BSSGP_CAUSE_COND_IE_ERR, NULL, msg);
|
|
}
|
|
|
|
/* read IMSI. if no IMSI exists, use first paging block (any paging),
|
|
* because during attachment the IMSI might not be known, so the MS
|
|
* will listen to all paging blocks. */
|
|
parse_imsi(tp, imsi);
|
|
|
|
#if 0 /* Do not rely on this IE. TODO: make this configurable */
|
|
/* parse ms radio access capability */
|
|
if (parse_ra_cap(tp, &rac) >= 0) {
|
|
/* Get the EGPRS class from the RA capability */
|
|
ms_class = Decoding::get_ms_class_by_capability(&rac);
|
|
egprs_ms_class =
|
|
Decoding::get_egprs_ms_class_by_capability(&rac);
|
|
LOGP(DBSSGP, LOGL_DEBUG, "Got downlink MS class %d/%d\n",
|
|
ms_class, egprs_ms_class);
|
|
}
|
|
#endif
|
|
|
|
/* get lifetime */
|
|
uint16_t delay_csec = 0xffff;
|
|
if (TLVP_PRESENT(tp, BSSGP_IE_PDU_LIFETIME))
|
|
{
|
|
uint8_t lt_len = TLVP_LEN(tp, BSSGP_IE_PDU_LIFETIME);
|
|
uint16_t *lt = (uint16_t *) TLVP_VAL(tp, BSSGP_IE_PDU_LIFETIME);
|
|
if (lt_len == 2)
|
|
delay_csec = ntohs(*lt);
|
|
else
|
|
LOGP(DBSSGP, LOGL_NOTICE, "BSSGP invalid length of "
|
|
"PDU_LIFETIME IE\n");
|
|
} else
|
|
LOGP(DBSSGP, LOGL_NOTICE, "BSSGP missing mandatory "
|
|
"PDU_LIFETIME IE\n");
|
|
|
|
/* get optional TLLI old */
|
|
if (TLVP_PRESENT(tp, BSSGP_IE_TLLI))
|
|
{
|
|
uint8_t tlli_len = TLVP_LEN(tp, BSSGP_IE_PDU_LIFETIME);
|
|
uint16_t *e_tlli_old = (uint16_t *) TLVP_VAL(tp, BSSGP_IE_TLLI);
|
|
if (tlli_len == 2)
|
|
tlli_old = ntohs(*e_tlli_old);
|
|
else
|
|
LOGP(DBSSGP, LOGL_NOTICE, "BSSGP invalid length of "
|
|
"TLLI (old) IE\n");
|
|
}
|
|
|
|
LOGP(DBSSGP, LOGL_INFO, "LLC [SGSN -> PCU] = TLLI: 0x%08x IMSI: %s len: %d\n", tlli, imsi, len);
|
|
|
|
return gprs_rlcmac_dl_tbf::handle(the_pcu.bts, tlli, tlli_old, imsi,
|
|
ms_class, egprs_ms_class, delay_csec, data, len);
|
|
}
|
|
|
|
int gprs_bssgp_pcu_rx_paging_ps(struct msgb *msg, struct tlv_parsed *tp)
|
|
{
|
|
char imsi[16];
|
|
uint8_t *ptmsi = (uint8_t *) TLVP_VAL(tp, BSSGP_IE_TMSI);
|
|
uint16_t ptmsi_len = TLVP_LEN(tp, BSSGP_IE_TMSI);
|
|
|
|
LOGP(DBSSGP, LOGL_NOTICE, " P-TMSI = ");
|
|
for (int i = 0; i < ptmsi_len; i++)
|
|
{
|
|
LOGPC(DBSSGP, LOGL_NOTICE, "%02x", ptmsi[i]);
|
|
}
|
|
LOGPC(DBSSGP, LOGL_NOTICE, "\n");
|
|
|
|
if (parse_imsi(tp, imsi))
|
|
{
|
|
LOGP(DBSSGP, LOGL_ERROR, "No IMSI\n");
|
|
return -EINVAL;
|
|
}
|
|
|
|
return gprs_rlcmac_paging_request(ptmsi, ptmsi_len, imsi);
|
|
}
|
|
|
|
/* Receive a BSSGP PDU from a BSS on a PTP BVCI */
|
|
static int gprs_bssgp_pcu_rx_ptp(struct msgb *msg, struct tlv_parsed *tp, struct bssgp_bvc_ctx *bctx)
|
|
{
|
|
struct bssgp_normal_hdr *bgph = (struct bssgp_normal_hdr *) msgb_bssgph(msg);
|
|
uint8_t pdu_type = bgph->pdu_type;
|
|
unsigned rc = 0;
|
|
|
|
if (!bctx)
|
|
return -EINVAL;
|
|
|
|
/* If traffic is received on a BVC that is marked as blocked, the
|
|
* received PDU shall not be accepted and a STATUS PDU (Cause value:
|
|
* BVC Blocked) shall be sent to the peer entity on the signalling BVC */
|
|
if (bctx->state & BVC_S_BLOCKED && pdu_type != BSSGP_PDUT_STATUS)
|
|
{
|
|
uint16_t bvci = msgb_bvci(msg);
|
|
LOGP(DBSSGP, LOGL_NOTICE, "rx BVC_S_BLOCKED\n");
|
|
return bssgp_tx_status(BSSGP_CAUSE_BVCI_BLOCKED, &bvci, msg);
|
|
}
|
|
|
|
switch (pdu_type) {
|
|
case BSSGP_PDUT_DL_UNITDATA:
|
|
LOGP(DBSSGP, LOGL_DEBUG, "RX: [SGSN->PCU] BSSGP_PDUT_DL_UNITDATA\n");
|
|
if (the_pcu.on_dl_unit_data)
|
|
the_pcu.on_dl_unit_data(&the_pcu, msg, tp);
|
|
gprs_bssgp_pcu_rx_dl_ud(msg, tp);
|
|
break;
|
|
case BSSGP_PDUT_PAGING_PS:
|
|
LOGP(DBSSGP, LOGL_DEBUG, "rx BSSGP_PDUT_PAGING_PS\n");
|
|
break;
|
|
case BSSGP_PDUT_PAGING_CS:
|
|
LOGP(DBSSGP, LOGL_DEBUG, "rx BSSGP_PDUT_PAGING_CS\n");
|
|
break;
|
|
case BSSGP_PDUT_RA_CAPA_UPDATE_ACK:
|
|
LOGP(DBSSGP, LOGL_DEBUG, "rx BSSGP_PDUT_RA_CAPA_UPDATE_ACK\n");
|
|
break;
|
|
case BSSGP_PDUT_FLOW_CONTROL_BVC_ACK:
|
|
LOGP(DBSSGP, LOGL_DEBUG, "rx BSSGP_PDUT_FLOW_CONTROL_BVC_ACK\n");
|
|
break;
|
|
case BSSGP_PDUT_FLOW_CONTROL_MS_ACK:
|
|
LOGP(DBSSGP, LOGL_DEBUG, "rx BSSGP_PDUT_FLOW_CONTROL_MS_ACK\n");
|
|
break;
|
|
default:
|
|
LOGP(DBSSGP, LOGL_NOTICE, "BSSGP BVCI=%u PDU type 0x%02x unknown\n", bctx->bvci, pdu_type);
|
|
rc = bssgp_tx_status(BSSGP_CAUSE_PROTO_ERR_UNSPEC, NULL, msg);
|
|
break;
|
|
}
|
|
return rc;
|
|
}
|
|
|
|
/* Receive a BSSGP PDU from a SGSN on a SIGNALLING BVCI */
|
|
static int gprs_bssgp_pcu_rx_sign(struct msgb *msg, struct tlv_parsed *tp, struct bssgp_bvc_ctx *bctx)
|
|
{
|
|
struct bssgp_normal_hdr *bgph = (struct bssgp_normal_hdr *) msgb_bssgph(msg);
|
|
int rc = 0;
|
|
int bvci = bctx ? bctx->bvci : -1;
|
|
switch (bgph->pdu_type) {
|
|
case BSSGP_PDUT_STATUS:
|
|
/* Some exception has occurred */
|
|
DEBUGP(DBSSGP, "BSSGP BVCI=%d Rx BVC STATUS\n", bvci);
|
|
/* FIXME: send NM_STATUS.ind to NM */
|
|
break;
|
|
case BSSGP_PDUT_SUSPEND_ACK:
|
|
LOGP(DBSSGP, LOGL_DEBUG, "rx BSSGP_PDUT_SUSPEND_ACK\n");
|
|
break;
|
|
case BSSGP_PDUT_SUSPEND_NACK:
|
|
LOGP(DBSSGP, LOGL_DEBUG, "rx BSSGP_PDUT_SUSPEND_NACK\n");
|
|
break;
|
|
case BSSGP_PDUT_BVC_RESET_ACK:
|
|
LOGP(DBSSGP, LOGL_DEBUG, "rx BSSGP_PDUT_BVC_RESET_ACK\n");
|
|
if (!the_pcu.bvc_sig_reset)
|
|
the_pcu.bvc_sig_reset = 1;
|
|
else
|
|
the_pcu.bvc_reset = 1;
|
|
bvc_timeout(NULL);
|
|
break;
|
|
case BSSGP_PDUT_PAGING_PS:
|
|
LOGP(DBSSGP, LOGL_NOTICE, "RX: [SGSN->PCU] BSSGP_PDUT_PAGING_PS\n");
|
|
gprs_bssgp_pcu_rx_paging_ps(msg, tp);
|
|
break;
|
|
case BSSGP_PDUT_PAGING_CS:
|
|
LOGP(DBSSGP, LOGL_DEBUG, "rx BSSGP_PDUT_PAGING_CS\n");
|
|
break;
|
|
case BSSGP_PDUT_RESUME_ACK:
|
|
LOGP(DBSSGP, LOGL_DEBUG, "rx BSSGP_PDUT_RESUME_ACK\n");
|
|
break;
|
|
case BSSGP_PDUT_RESUME_NACK:
|
|
LOGP(DBSSGP, LOGL_DEBUG, "rx BSSGP_PDUT_RESUME_NACK\n");
|
|
break;
|
|
case BSSGP_PDUT_FLUSH_LL:
|
|
LOGP(DBSSGP, LOGL_DEBUG, "rx BSSGP_PDUT_FLUSH_LL\n");
|
|
break;
|
|
case BSSGP_PDUT_BVC_BLOCK_ACK:
|
|
LOGP(DBSSGP, LOGL_DEBUG, "rx BSSGP_PDUT_SUSPEND_ACK\n");
|
|
break;
|
|
case BSSGP_PDUT_BVC_UNBLOCK_ACK:
|
|
LOGP(DBSSGP, LOGL_DEBUG, "rx BSSGP_PDUT_BVC_UNBLOCK_ACK\n");
|
|
the_pcu.bvc_unblocked = 1;
|
|
if (the_pcu.on_unblock_ack)
|
|
the_pcu.on_unblock_ack(&the_pcu);
|
|
bvc_timeout(NULL);
|
|
break;
|
|
case BSSGP_PDUT_SGSN_INVOKE_TRACE:
|
|
LOGP(DBSSGP, LOGL_DEBUG, "rx BSSGP_PDUT_SGSN_INVOKE_TRACE\n");
|
|
break;
|
|
default:
|
|
LOGP(DBSSGP, LOGL_NOTICE, "BSSGP BVCI=%d Rx PDU type 0x%02x unknown\n",
|
|
bvci, bgph->pdu_type);
|
|
rc = bssgp_tx_status(BSSGP_CAUSE_PROTO_ERR_UNSPEC, NULL, msg);
|
|
break;
|
|
}
|
|
return rc;
|
|
}
|
|
|
|
static int gprs_bssgp_pcu_rcvmsg(struct msgb *msg)
|
|
{
|
|
struct bssgp_normal_hdr *bgph = (struct bssgp_normal_hdr *) msgb_bssgph(msg);
|
|
struct bssgp_ud_hdr *budh = (struct bssgp_ud_hdr *) msgb_bssgph(msg);
|
|
struct tlv_parsed tp;
|
|
uint8_t pdu_type = bgph->pdu_type;
|
|
uint16_t ns_bvci = msgb_bvci(msg);
|
|
int data_len;
|
|
int rc = 0;
|
|
struct bssgp_bvc_ctx *bctx;
|
|
|
|
if (pdu_type == BSSGP_PDUT_STATUS)
|
|
/* Pass the message to the generic BSSGP parser, which handles
|
|
* STATUS message in either direction. */
|
|
return bssgp_rcvmsg(msg);
|
|
|
|
/* Identifiers from DOWN: NSEI, BVCI (both in msg->cb) */
|
|
|
|
/* UNITDATA BSSGP headers have TLLI in front */
|
|
if (pdu_type != BSSGP_PDUT_UL_UNITDATA && pdu_type != BSSGP_PDUT_DL_UNITDATA)
|
|
{
|
|
data_len = msgb_bssgp_len(msg) - sizeof(*bgph);
|
|
rc = bssgp_tlv_parse(&tp, bgph->data, data_len);
|
|
}
|
|
else
|
|
{
|
|
data_len = msgb_bssgp_len(msg) - sizeof(*budh);
|
|
rc = bssgp_tlv_parse(&tp, budh->data, data_len);
|
|
}
|
|
|
|
/* look-up or create the BTS context for this BVC */
|
|
bctx = btsctx_by_bvci_nsei(ns_bvci, msgb_nsei(msg));
|
|
|
|
if (!bctx
|
|
&& pdu_type != BSSGP_PDUT_BVC_RESET_ACK
|
|
&& pdu_type != BSSGP_PDUT_BVC_UNBLOCK_ACK
|
|
&& pdu_type != BSSGP_PDUT_PAGING_PS)
|
|
{
|
|
LOGP(DBSSGP, LOGL_NOTICE, "NSEI=%u/BVCI=%u Rejecting PDU "
|
|
"type %u for unknown BVCI\n", msgb_nsei(msg), ns_bvci,
|
|
pdu_type);
|
|
return bssgp_tx_status(BSSGP_CAUSE_UNKNOWN_BVCI, NULL, msg);
|
|
}
|
|
|
|
if (bctx)
|
|
{
|
|
log_set_context(BSC_CTX_BVC, bctx);
|
|
rate_ctr_inc(&bctx->ctrg->ctr[BSSGP_CTR_PKTS_IN]);
|
|
rate_ctr_add(&bctx->ctrg->ctr[BSSGP_CTR_BYTES_IN], msgb_bssgp_len(msg));
|
|
}
|
|
|
|
if (ns_bvci == BVCI_SIGNALLING)
|
|
{
|
|
LOGP(DBSSGP, LOGL_DEBUG, "rx BVCI_SIGNALLING gprs_bssgp_rx_sign\n");
|
|
rc = gprs_bssgp_pcu_rx_sign(msg, &tp, bctx);
|
|
}
|
|
else if (ns_bvci == BVCI_PTM)
|
|
{
|
|
LOGP(DBSSGP, LOGL_DEBUG, "rx BVCI_PTM bssgp_tx_status\n");
|
|
rc = bssgp_tx_status(BSSGP_CAUSE_PDU_INCOMP_FEAT, NULL, msg);
|
|
}
|
|
else
|
|
{
|
|
LOGP(DBSSGP, LOGL_DEBUG, "rx BVCI_PTP gprs_bssgp_rx_ptp\n");
|
|
rc = gprs_bssgp_pcu_rx_ptp(msg, &tp, bctx);
|
|
}
|
|
return rc;
|
|
}
|
|
|
|
static void handle_nm_status(struct osmo_bssgp_prim *bp)
|
|
{
|
|
enum gprs_bssgp_cause cause;
|
|
|
|
LOGP(DPCU, LOGL_DEBUG,
|
|
"Got NM-STATUS.ind, BVCI=%d, NSEI=%d\n",
|
|
bp->bvci, bp->nsei);
|
|
|
|
if (!TLVP_PRESENT(bp->tp, BSSGP_IE_CAUSE))
|
|
return;
|
|
|
|
cause = (enum gprs_bssgp_cause)*TLVP_VAL(bp->tp, BSSGP_IE_CAUSE);
|
|
|
|
if (cause != BSSGP_CAUSE_BVCI_BLOCKED &&
|
|
cause != BSSGP_CAUSE_UNKNOWN_BVCI)
|
|
return;
|
|
|
|
if (!TLVP_PRESENT(bp->tp, BSSGP_IE_BVCI))
|
|
return;
|
|
|
|
if (gprs_bssgp_pcu_current_bctx()->bvci != bp->bvci) {
|
|
LOGP(DPCU, LOGL_NOTICE,
|
|
"Received BSSGP STATUS message for an unknown BVCI (%d), "
|
|
"ignored\n",
|
|
bp->bvci);
|
|
return;
|
|
}
|
|
|
|
switch (cause) {
|
|
case BSSGP_CAUSE_BVCI_BLOCKED:
|
|
if (the_pcu.bvc_unblocked) {
|
|
the_pcu.bvc_unblocked = 0;
|
|
bvc_timeout(NULL);
|
|
}
|
|
break;
|
|
|
|
case BSSGP_CAUSE_UNKNOWN_BVCI:
|
|
if (the_pcu.bvc_reset) {
|
|
the_pcu.bvc_reset = 0;
|
|
bvc_timeout(NULL);
|
|
}
|
|
break;
|
|
default:
|
|
break;
|
|
}
|
|
}
|
|
|
|
int bssgp_prim_cb(struct osmo_prim_hdr *oph, void *ctx)
|
|
{
|
|
struct osmo_bssgp_prim *bp;
|
|
bp = container_of(oph, struct osmo_bssgp_prim, oph);
|
|
|
|
switch (oph->sap) {
|
|
case SAP_BSSGP_NM:
|
|
if (oph->primitive == PRIM_NM_STATUS)
|
|
handle_nm_status(bp);
|
|
break;
|
|
default:
|
|
break;
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
static int sgsn_ns_cb(enum gprs_ns_evt event, struct gprs_nsvc *nsvc, struct msgb *msg, uint16_t bvci)
|
|
{
|
|
int rc = 0;
|
|
switch (event) {
|
|
case GPRS_NS_EVT_UNIT_DATA:
|
|
/* hand the message into the BSSGP implementation */
|
|
rc = gprs_bssgp_pcu_rcvmsg(msg);
|
|
break;
|
|
default:
|
|
LOGP(DPCU, LOGL_NOTICE, "RLCMAC: Unknown event %u from NS\n", event);
|
|
rc = -EIO;
|
|
break;
|
|
}
|
|
return rc;
|
|
}
|
|
|
|
|
|
static int nsvc_signal_cb(unsigned int subsys, unsigned int signal,
|
|
void *handler_data, void *signal_data)
|
|
{
|
|
struct ns_signal_data *nssd;
|
|
|
|
if (subsys != SS_L_NS)
|
|
return -EINVAL;
|
|
|
|
nssd = (struct ns_signal_data *)signal_data;
|
|
if (nssd->nsvc != the_pcu.nsvc) {
|
|
LOGP(DPCU, LOGL_ERROR, "Signal received of unknown NSVC\n");
|
|
return -EINVAL;
|
|
}
|
|
|
|
switch (signal) {
|
|
case S_NS_UNBLOCK:
|
|
if (!the_pcu.nsvc_unblocked) {
|
|
the_pcu.nsvc_unblocked = 1;
|
|
LOGP(DPCU, LOGL_NOTICE, "NS-VC %d is unblocked.\n",
|
|
the_pcu.nsvc->nsvci);
|
|
the_pcu.bvc_sig_reset = 0;
|
|
the_pcu.bvc_reset = 0;
|
|
the_pcu.bvc_unblocked = 0;
|
|
bvc_timeout(NULL);
|
|
}
|
|
break;
|
|
case S_NS_BLOCK:
|
|
if (the_pcu.nsvc_unblocked) {
|
|
the_pcu.nsvc_unblocked = 0;
|
|
osmo_timer_del(&the_pcu.bvc_timer);
|
|
the_pcu.bvc_sig_reset = 0;
|
|
the_pcu.bvc_reset = 0;
|
|
the_pcu.bvc_unblocked = 0;
|
|
LOGP(DPCU, LOGL_NOTICE, "NS-VC is blocked.\n");
|
|
}
|
|
break;
|
|
case S_NS_ALIVE_EXP:
|
|
LOGP(DPCU, LOGL_NOTICE, "Tns alive expired too often, "
|
|
"re-starting RESET procedure\n");
|
|
gprs_ns_reconnect(nssd->nsvc);
|
|
break;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static unsigned count_pdch(const struct gprs_rlcmac_bts *bts)
|
|
{
|
|
size_t trx_no, ts_no;
|
|
unsigned num_pdch = 0;
|
|
|
|
for (trx_no = 0; trx_no < ARRAY_SIZE(bts->trx); ++trx_no) {
|
|
const struct gprs_rlcmac_trx *trx = &bts->trx[trx_no];
|
|
|
|
for (ts_no = 0; ts_no < ARRAY_SIZE(trx->pdch); ++ts_no) {
|
|
const struct gprs_rlcmac_pdch *pdch = &trx->pdch[ts_no];
|
|
|
|
if (pdch->is_enabled())
|
|
num_pdch += 1;
|
|
}
|
|
}
|
|
|
|
return num_pdch;
|
|
}
|
|
|
|
static uint32_t gprs_bssgp_max_leak_rate(unsigned cs, int num_pdch)
|
|
{
|
|
static const uint32_t max_lr_per_ts[4] = {
|
|
20 * (1000 / 20), /* CS-1: 20 byte payload per 20ms */
|
|
30 * (1000 / 20), /* CS-2: 30 byte payload per 20ms */
|
|
36 * (1000 / 20), /* CS-3: 36 byte payload per 20ms */
|
|
50 * (1000 / 20), /* CS-4: 50 byte payload per 20ms */
|
|
};
|
|
|
|
if (cs > ARRAY_SIZE(max_lr_per_ts))
|
|
cs = 1;
|
|
|
|
return max_lr_per_ts[cs-1] * num_pdch;
|
|
}
|
|
|
|
static uint32_t compute_bucket_size(struct gprs_rlcmac_bts *bts,
|
|
uint32_t leak_rate, uint32_t fallback)
|
|
{
|
|
uint32_t bucket_size = 0;
|
|
uint16_t bucket_time = bts->fc_bucket_time;
|
|
|
|
if (bucket_time == 0)
|
|
bucket_time = bts->force_llc_lifetime;
|
|
|
|
if (bucket_time == 0xffff)
|
|
bucket_size = FC_MAX_BUCKET_SIZE;
|
|
|
|
if (bucket_size == 0 && bucket_time && leak_rate)
|
|
bucket_size = (uint64_t)leak_rate * bucket_time / 100;
|
|
|
|
if (bucket_size == 0 && leak_rate)
|
|
bucket_size = leak_rate * FC_DEFAULT_LIFE_TIME_SECS;
|
|
|
|
if (bucket_size == 0)
|
|
bucket_size = fallback;
|
|
|
|
if (bucket_size > FC_MAX_BUCKET_SIZE)
|
|
bucket_size = FC_MAX_BUCKET_SIZE;
|
|
|
|
return bucket_size;
|
|
}
|
|
|
|
static uint32_t get_and_reset_avg_queue_delay(void)
|
|
{
|
|
struct timeval *delay_sum = &the_pcu.queue_delay_sum;
|
|
uint32_t delay_sum_ms = delay_sum->tv_sec * 1000 +
|
|
delay_sum->tv_usec / 1000000;
|
|
uint32_t avg_delay_ms = 0;
|
|
|
|
if (the_pcu.queue_delay_count > 0)
|
|
avg_delay_ms = delay_sum_ms / the_pcu.queue_delay_count;
|
|
|
|
/* Reset accumulator */
|
|
delay_sum->tv_sec = delay_sum->tv_usec = 0;
|
|
the_pcu.queue_delay_count = 0;
|
|
|
|
return avg_delay_ms;
|
|
}
|
|
|
|
static int get_and_reset_measured_leak_rate(int *usage_by_1000, unsigned num_pdch)
|
|
{
|
|
int rate; /* byte per second */
|
|
|
|
if (the_pcu.queue_frames_sent == 0)
|
|
return -1;
|
|
|
|
if (the_pcu.queue_frames_recv == 0)
|
|
return -1;
|
|
|
|
*usage_by_1000 = the_pcu.queue_frames_recv * 1000 /
|
|
the_pcu.queue_frames_sent;
|
|
|
|
/* 20ms/num_pdch is the average RLC block duration, so the rate is
|
|
* calculated as:
|
|
* rate = bytes_recv / (block_dur * block_count) */
|
|
rate = the_pcu.queue_bytes_recv * 1000 * num_pdch /
|
|
(20 * the_pcu.queue_frames_recv);
|
|
|
|
the_pcu.queue_frames_sent = 0;
|
|
the_pcu.queue_bytes_recv = 0;
|
|
the_pcu.queue_frames_recv = 0;
|
|
|
|
return rate;
|
|
}
|
|
|
|
int gprs_bssgp_tx_fc_bvc(void)
|
|
{
|
|
struct gprs_rlcmac_bts *bts;
|
|
uint32_t bucket_size; /* oct */
|
|
uint32_t ms_bucket_size; /* oct */
|
|
uint32_t leak_rate; /* oct/s */
|
|
uint32_t ms_leak_rate; /* oct/s */
|
|
uint32_t avg_delay_ms;
|
|
int num_pdch = -1;
|
|
int max_cs_dl;
|
|
|
|
if (!the_pcu.bctx) {
|
|
LOGP(DBSSGP, LOGL_ERROR, "No bctx\n");
|
|
return -EIO;
|
|
}
|
|
bts = bts_main_data();
|
|
|
|
if (bts->cs_adj_enabled) {
|
|
max_cs_dl = bts->max_cs_dl;
|
|
if (!max_cs_dl) {
|
|
if (bts->cs4)
|
|
max_cs_dl = 4;
|
|
else if (bts->cs3)
|
|
max_cs_dl = 3;
|
|
else if (bts->cs2)
|
|
max_cs_dl = 2;
|
|
else
|
|
max_cs_dl = 1;
|
|
}
|
|
} else {
|
|
max_cs_dl = bts->initial_cs_dl;
|
|
}
|
|
|
|
bucket_size = bts->fc_bvc_bucket_size;
|
|
leak_rate = bts->fc_bvc_leak_rate;
|
|
ms_bucket_size = bts->fc_ms_bucket_size;
|
|
ms_leak_rate = bts->fc_ms_leak_rate;
|
|
|
|
if (leak_rate == 0) {
|
|
int meas_rate;
|
|
int usage; /* in 0..1000 */
|
|
|
|
if (num_pdch < 0)
|
|
num_pdch = count_pdch(bts);
|
|
|
|
meas_rate = get_and_reset_measured_leak_rate(&usage, num_pdch);
|
|
if (meas_rate > 0) {
|
|
leak_rate = gprs_bssgp_max_leak_rate(max_cs_dl, num_pdch);
|
|
leak_rate =
|
|
(meas_rate * usage + leak_rate * (1000 - usage)) /
|
|
1000;
|
|
LOGP(DBSSGP, LOGL_DEBUG,
|
|
"Estimated BVC leak rate = %d "
|
|
"(measured %d, usage %d%%)\n",
|
|
leak_rate, meas_rate, usage/10);
|
|
}
|
|
}
|
|
|
|
if (leak_rate == 0) {
|
|
if (num_pdch < 0)
|
|
num_pdch = count_pdch(bts);
|
|
|
|
leak_rate = gprs_bssgp_max_leak_rate(max_cs_dl, num_pdch);
|
|
|
|
LOGP(DBSSGP, LOGL_DEBUG,
|
|
"Computed BVC leak rate = %d, num_pdch = %d, cs = %d\n",
|
|
leak_rate, num_pdch, max_cs_dl);
|
|
};
|
|
|
|
if (ms_leak_rate == 0) {
|
|
int ms_num_pdch;
|
|
int max_pdch = gprs_alloc_max_dl_slots_per_ms(bts);
|
|
|
|
if (num_pdch < 0)
|
|
num_pdch = count_pdch(bts);
|
|
|
|
ms_num_pdch = num_pdch;
|
|
if (max_pdch > FC_MS_MAX_RX_SLOTS)
|
|
max_pdch = FC_MS_MAX_RX_SLOTS;
|
|
if (ms_num_pdch > max_pdch)
|
|
ms_num_pdch = max_pdch;
|
|
|
|
ms_leak_rate = gprs_bssgp_max_leak_rate(max_cs_dl, ms_num_pdch);
|
|
|
|
/* TODO: To properly support multiple TRX, the per MS leak rate
|
|
* should be derived from the max number of PDCH TS per TRX.
|
|
*/
|
|
LOGP(DBSSGP, LOGL_DEBUG,
|
|
"Computed MS default leak rate = %d, ms_num_pdch = %d, cs = %d\n",
|
|
ms_leak_rate, ms_num_pdch, max_cs_dl);
|
|
};
|
|
|
|
/* TODO: Force leak_rate to 0 on buffer bloat */
|
|
|
|
if (bucket_size == 0)
|
|
bucket_size = compute_bucket_size(bts, leak_rate,
|
|
FC_FALLBACK_BVC_BUCKET_SIZE);
|
|
|
|
if (ms_bucket_size == 0)
|
|
ms_bucket_size = compute_bucket_size(bts, ms_leak_rate,
|
|
FC_MS_BUCKET_SIZE_BY_BMAX(bucket_size));
|
|
|
|
if (leak_rate > FC_MAX_BUCKET_LEAK_RATE)
|
|
leak_rate = FC_MAX_BUCKET_LEAK_RATE;
|
|
|
|
if (ms_leak_rate > FC_MAX_BUCKET_LEAK_RATE)
|
|
ms_leak_rate = FC_MAX_BUCKET_LEAK_RATE;
|
|
|
|
/* Avg queue delay monitoring */
|
|
avg_delay_ms = get_and_reset_avg_queue_delay();
|
|
|
|
/* Update tag */
|
|
the_pcu.fc_tag += 1;
|
|
|
|
LOGP(DBSSGP, LOGL_DEBUG,
|
|
"Sending FLOW CONTROL BVC, Bmax = %d, R = %d, Bmax_MS = %d, "
|
|
"R_MS = %d, avg_dly = %d\n",
|
|
bucket_size, leak_rate, ms_bucket_size, ms_leak_rate,
|
|
avg_delay_ms);
|
|
|
|
return bssgp_tx_fc_bvc(the_pcu.bctx, the_pcu.fc_tag,
|
|
bucket_size, leak_rate,
|
|
ms_bucket_size, ms_leak_rate,
|
|
NULL, &avg_delay_ms);
|
|
}
|
|
|
|
static void bvc_timeout(void *_priv)
|
|
{
|
|
if (!the_pcu.bvc_sig_reset) {
|
|
LOGP(DBSSGP, LOGL_INFO, "Sending reset on BVCI 0\n");
|
|
bssgp_tx_bvc_reset(the_pcu.bctx, 0, BSSGP_CAUSE_OML_INTERV);
|
|
osmo_timer_schedule(&the_pcu.bvc_timer, BSSGP_TIMER_T2, 0);
|
|
return;
|
|
}
|
|
|
|
if (!the_pcu.bvc_reset) {
|
|
LOGP(DBSSGP, LOGL_INFO, "Sending reset on BVCI %d\n",
|
|
the_pcu.bctx->bvci);
|
|
bssgp_tx_bvc_reset(the_pcu.bctx, the_pcu.bctx->bvci, BSSGP_CAUSE_OML_INTERV);
|
|
osmo_timer_schedule(&the_pcu.bvc_timer, BSSGP_TIMER_T2, 0);
|
|
return;
|
|
}
|
|
|
|
if (!the_pcu.bvc_unblocked) {
|
|
LOGP(DBSSGP, LOGL_INFO, "Sending unblock on BVCI %d\n",
|
|
the_pcu.bctx->bvci);
|
|
bssgp_tx_bvc_unblock(the_pcu.bctx);
|
|
osmo_timer_schedule(&the_pcu.bvc_timer, BSSGP_TIMER_T1, 0);
|
|
return;
|
|
}
|
|
|
|
LOGP(DBSSGP, LOGL_DEBUG, "Sending flow control info on BVCI %d\n",
|
|
the_pcu.bctx->bvci);
|
|
gprs_bssgp_tx_fc_bvc();
|
|
osmo_timer_schedule(&the_pcu.bvc_timer, the_pcu.bts->fc_interval, 0);
|
|
}
|
|
|
|
int gprs_ns_reconnect(struct gprs_nsvc *nsvc)
|
|
{
|
|
struct gprs_nsvc *nsvc2;
|
|
|
|
if (!bssgp_nsi) {
|
|
LOGP(DBSSGP, LOGL_ERROR, "NS instance does not exist\n");
|
|
return -EINVAL;
|
|
}
|
|
|
|
if (nsvc != the_pcu.nsvc) {
|
|
LOGP(DBSSGP, LOGL_ERROR, "NSVC is invalid\n");
|
|
return -EBADF;
|
|
}
|
|
|
|
nsvc2 = gprs_ns_nsip_connect(bssgp_nsi, &nsvc->ip.bts_addr,
|
|
nsvc->nsei, nsvc->nsvci);
|
|
|
|
if (!nsvc2) {
|
|
LOGP(DBSSGP, LOGL_ERROR, "Failed to reconnect NSVC\n");
|
|
return -EIO;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
/* create BSSGP/NS layer instances */
|
|
struct gprs_bssgp_pcu *gprs_bssgp_create_and_connect(struct gprs_rlcmac_bts *bts,
|
|
uint16_t local_port, uint32_t sgsn_ip,
|
|
uint16_t sgsn_port, uint16_t nsei, uint16_t nsvci, uint16_t bvci,
|
|
uint16_t mcc, uint16_t mnc, uint16_t lac, uint16_t rac,
|
|
uint16_t cell_id)
|
|
{
|
|
struct sockaddr_in dest;
|
|
int rc;
|
|
|
|
mcc = ((mcc & 0xf00) >> 8) * 100 + ((mcc & 0x0f0) >> 4) * 10 + (mcc & 0x00f);
|
|
mnc = ((mnc & 0xf00) >> 8) * 100 + ((mnc & 0x0f0) >> 4) * 10 + (mnc & 0x00f);
|
|
cell_id = ntohs(cell_id);
|
|
|
|
/* if already created... return the current address */
|
|
if (the_pcu.bctx)
|
|
return &the_pcu;
|
|
|
|
the_pcu.bts = bts;
|
|
|
|
bssgp_nsi = gprs_ns_instantiate(&sgsn_ns_cb, tall_pcu_ctx);
|
|
if (!bssgp_nsi) {
|
|
LOGP(DBSSGP, LOGL_ERROR, "Failed to create NS instance\n");
|
|
return NULL;
|
|
}
|
|
gprs_ns_vty_init(bssgp_nsi);
|
|
bssgp_nsi->nsip.local_port = local_port;
|
|
rc = gprs_ns_nsip_listen(bssgp_nsi);
|
|
if (rc < 0) {
|
|
LOGP(DBSSGP, LOGL_ERROR, "Failed to create socket\n");
|
|
gprs_ns_destroy(bssgp_nsi);
|
|
bssgp_nsi = NULL;
|
|
return NULL;
|
|
}
|
|
|
|
dest.sin_family = AF_INET;
|
|
dest.sin_port = htons(sgsn_port);
|
|
dest.sin_addr.s_addr = htonl(sgsn_ip);
|
|
|
|
the_pcu.nsvc = gprs_ns_nsip_connect(bssgp_nsi, &dest, nsei, nsvci);
|
|
if (!the_pcu.nsvc) {
|
|
LOGP(DBSSGP, LOGL_ERROR, "Failed to create NSVCt\n");
|
|
gprs_ns_destroy(bssgp_nsi);
|
|
bssgp_nsi = NULL;
|
|
return NULL;
|
|
}
|
|
|
|
the_pcu.bctx = btsctx_alloc(bvci, nsei);
|
|
if (!the_pcu.bctx) {
|
|
LOGP(DBSSGP, LOGL_ERROR, "Failed to create BSSGP context\n");
|
|
the_pcu.nsvc = NULL;
|
|
gprs_ns_destroy(bssgp_nsi);
|
|
bssgp_nsi = NULL;
|
|
return NULL;
|
|
}
|
|
the_pcu.bctx->ra_id.mcc = spoof_mcc ? : mcc;
|
|
the_pcu.bctx->ra_id.mnc = spoof_mnc ? : mnc;
|
|
the_pcu.bctx->ra_id.lac = lac;
|
|
the_pcu.bctx->ra_id.rac = rac;
|
|
the_pcu.bctx->cell_id = cell_id;
|
|
|
|
osmo_signal_register_handler(SS_L_NS, nsvc_signal_cb, NULL);
|
|
|
|
the_pcu.bvc_timer.cb = bvc_timeout;
|
|
|
|
|
|
return &the_pcu;
|
|
}
|
|
|
|
void gprs_bssgp_destroy(void)
|
|
{
|
|
struct gprs_ns_inst *nsi = bssgp_nsi;
|
|
if (!nsi)
|
|
return;
|
|
|
|
bssgp_nsi = NULL;
|
|
|
|
osmo_timer_del(&the_pcu.bvc_timer);
|
|
|
|
osmo_signal_unregister_handler(SS_L_NS, nsvc_signal_cb, NULL);
|
|
|
|
the_pcu.nsvc = NULL;
|
|
|
|
/* FIXME: blocking... */
|
|
the_pcu.nsvc_unblocked = 0;
|
|
the_pcu.bvc_sig_reset = 0;
|
|
the_pcu.bvc_reset = 0;
|
|
the_pcu.bvc_unblocked = 0;
|
|
|
|
gprs_ns_destroy(nsi);
|
|
|
|
/* FIXME: move this to libgb: btsctx_free() */
|
|
llist_del(&the_pcu.bctx->list);
|
|
#warning "This causes ASAN to complain. It is not critical for normal operation but should be fixed nevertheless"
|
|
#if 0
|
|
talloc_free(the_pcu.bctx);
|
|
#endif
|
|
the_pcu.bctx = NULL;
|
|
}
|
|
|
|
struct bssgp_bvc_ctx *gprs_bssgp_pcu_current_bctx(void)
|
|
{
|
|
return the_pcu.bctx;
|
|
}
|
|
|
|
void gprs_bssgp_update_frames_sent()
|
|
{
|
|
the_pcu.queue_frames_sent += 1;
|
|
}
|
|
|
|
void gprs_bssgp_update_bytes_received(unsigned bytes_recv, unsigned frames_recv)
|
|
{
|
|
the_pcu.queue_bytes_recv += bytes_recv;
|
|
the_pcu.queue_frames_recv += frames_recv;
|
|
}
|
|
|
|
void gprs_bssgp_update_queue_delay(const struct timeval *tv_recv,
|
|
const struct timeval *tv_now)
|
|
{
|
|
struct timeval *delay_sum = &the_pcu.queue_delay_sum;
|
|
struct timeval tv_delay;
|
|
|
|
timersub(tv_now, tv_recv, &tv_delay);
|
|
timeradd(delay_sum, &tv_delay, delay_sum);
|
|
|
|
the_pcu.queue_delay_count += 1;
|
|
}
|