diff options
| author |   Neale Ranns <nranns@cisco.com> | 2019-07-29 14:49:52 +0000 |
|---|---|---|
| committer |   Ole Trøan <otroan@employees.org> | 2019-07-31 10:12:14 +0000 |
| commit | 1404698df397bc4d3007daea41f52ad75ed4486c (patch) | |
| tree | 4c396973b37193def1bdb4c4a9f9e91f2e1b7274 /src/vnet/ip/ip6_reassembly.c | |
| parent | 513582c96a6d58a3980b3e444446bc6e5c4e4764 (diff) | |
ip: Ensure reassembly runs before IPSec decrypt.
Type: fix
Change-Id: I01eeedf8d5015b07b9422c65afe78bfe8177c22c
Signed-off-by: Neale Ranns <nranns@cisco.com>
Diffstat (limited to 'src/vnet/ip/ip6_reassembly.c')
| -rw-r--r-- | src/vnet/ip/ip6_reassembly.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/vnet/ip/ip6_reassembly.c b/src/vnet/ip/ip6_reassembly.c index 7b0d84de289..8d455e90e38 100644 --- a/src/vnet/ip/ip6_reassembly.c +++ b/src/vnet/ip/ip6_reassembly.c @@ -1181,7 +1181,9 @@ VLIB_REGISTER_NODE (ip6_reass_node_feature) = { VNET_FEATURE_INIT (ip6_reassembly_feature, static) = { .arc_name = "ip6-unicast", .node_name = "ip6-reassembly-feature", - .runs_before = VNET_FEATURES ("ip6-lookup"), + .runs_before = VNET_FEATURES ("ip6-lookup", + "esp6-decrypt", + "ah6-decrypt"), .runs_after = 0, }; /* *INDENT-ON* */ |