From 3a8e7ca967bdb63f2497ff5654fbf94de4c465a2 Mon Sep 17 00:00:00 2001 From: Yulong Pei Date: Tue, 28 Mar 2023 04:35:47 +0000 Subject: Enable IPsec policy fast path inbound This will greatly improve the performance of IPsec policy cases Signed-off-by: xinfeng zhao Signed-off-by: Yulong Pei Change-Id: Ib42b5650791be7fcc8649873eaf12616aeba5aec --- resources/libraries/python/VppConfigGenerator.py | 18 ++++++++++++++++++ resources/libraries/robot/crypto/ipsec.robot | 9 ++++++--- 2 files changed, 24 insertions(+), 3 deletions(-) (limited to 'resources/libraries') diff --git a/resources/libraries/python/VppConfigGenerator.py b/resources/libraries/python/VppConfigGenerator.py index 926b5c767a..f155bcf2a7 100644 --- a/resources/libraries/python/VppConfigGenerator.py +++ b/resources/libraries/python/VppConfigGenerator.py @@ -433,6 +433,15 @@ class VppConfigGenerator: path = [u"ip6", u"heap-size"] self.add_config_item(self._nodeconfig, value, path) + def add_ipsec_spd_flow_cache_ipv4_inbound(self, value): + """Add IPsec spd flow cache for IP4 inbound. + + :param value: "on" to enable spd flow cache. + :type value: str + """ + path = [u"ipsec", u"ipv4-inbound-spd-flow-cache"] + self.add_config_item(self._nodeconfig, value, path) + def add_ipsec_spd_flow_cache_ipv4_outbound(self, value): """Add IPsec spd flow cache for IP4 outbound. @@ -442,6 +451,15 @@ class VppConfigGenerator: path = [u"ipsec", u"ipv4-outbound-spd-flow-cache"] self.add_config_item(self._nodeconfig, value, path) + def add_ipsec_spd_fast_path_ipv4_inbound(self, value): + """Add IPsec spd fast path for IP4 inbound. + + :param value: "on" to enable spd fast path. + :type value: str + """ + path = [u"ipsec", u"ipv4-inbound-spd-fast-path"] + self.add_config_item(self._nodeconfig, value, path) + def add_ipsec_spd_fast_path_ipv4_outbound(self, value): """Add IPsec spd fast path for IP4 outbound. diff --git a/resources/libraries/robot/crypto/ipsec.robot b/resources/libraries/robot/crypto/ipsec.robot index d03f662994..ee506e1d40 100644 --- a/resources/libraries/robot/crypto/ipsec.robot +++ b/resources/libraries/robot/crypto/ipsec.robot @@ -252,9 +252,10 @@ | | | Run Keyword | ${dut}.Add IPsec SPD Flow cache IPv4 Outbound | on | | END -| Enable IPsec SPD Fast Path IPv4 Outbound +| Enable IPsec SPD Fast Path IPv4 Inbound and Outbound | | [Documentation] -| | ... | Enable IPsec SPD fast path IPv4 outbound in VPP configuration file. +| | ... | Enable IPsec SPD fast path IPv4 Inbound and outbound in VPP +| | ... | configuration file. | | | | ... | *Arguments:* | | ... | - value - The number buckets for spd fast path. Type: int @@ -262,7 +263,9 @@ | | [Arguments] | ${value} | | | | FOR | ${dut} | IN | @{duts} -| | | Run Keyword | ${dut}.Add IPsec SPD Flow cache IPv4 Outbound | off +| | | Run Keyword | ${dut}.Add IPsec SPD Flow Cache IPv4 Outbound | off +| | | Run Keyword | ${dut}.Add IPsec SPD Flow Cache IPv4 Inbound | off | | | Run Keyword | ${dut}.Add IPsec SPD Fast Path IPv4 Outbound | on +| | | Run Keyword | ${dut}.Add IPsec SPD Fast Path IPv4 Inbound | on | | | Run Keyword | ${dut}.Add IPsec SPD Fast Path Num Buckets | ${value} | | END -- cgit 1.2.3-korg