From 11959b50936026a43106f9079b1df0d9b67e674a Mon Sep 17 00:00:00 2001 From: Szymon Sliwa Date: Wed, 23 Aug 2017 17:42:22 +0200 Subject: plugins: odp: Add ODP-IPsec node Based heavily on the src/vnet/ipsec. Reuses the pure software VPP IPsec implementation CLI command. To use enable-odp-crypto needs to be present in the odp section of startup configuration, like this: odp { enable-odp-crypto } Currenlty only IPv4 is supported, and only in transport mode. Authentication headers are not supported, this limitation is inherited from VPP. Supported crypto algorithms are aes-cbc-128 for encryption, and sha-512-256, sha-256-128, sha1-96 for authentication Change-Id: I08c66f96a73d8cb4ef1095f181ddf47506abc39a Signed-off-by: Szymon Sliwa --- src/vpp/conf/startup.conf | 3 +++ 1 file changed, 3 insertions(+) (limited to 'src/vpp') diff --git a/src/vpp/conf/startup.conf b/src/vpp/conf/startup.conf index 15c9086d..6947d378 100644 --- a/src/vpp/conf/startup.conf +++ b/src/vpp/conf/startup.conf @@ -129,6 +129,9 @@ cpu { # num-rx-queues 2 # hw-addr 3c:fd:fe:a4:37:99 # } + + ## Make use of ODP crypto API to accelerate IPsec + # enable-odp-crypto # } # Adjusting the plugin path depending on where the VPP plugins are: -- cgit