diff options
| author |   Piotr Bronowski <piotrx.bronowski@intel.com> | 2022-07-08 12:45:05 +0000 |
|---|---|---|
| committer |   Fan Zhang <roy.fan.zhang@intel.com> | 2022-07-15 12:45:19 +0000 |
| commit | 86f8208af43efaa71b8e1c0a5ff86fc233456d9d (patch) | |
| tree | 18feadc95586f549325f2a1872492caa9ad32df0 /src/vnet/ipsec/ipsec.h | |
| parent | 963e9b583b7fa7c26efc7acee2449069057b93d7 (diff) | |
ipsec: fast path outbound policy matching implementation for ipv6
With this patch fast path for ipv6 policy lookup is enabled.
This impelentation scales and outperforms original implementation when
the number of defined flows is higher thatn 100k.
Type: feature
Signed-off-by: Piotr Bronowski <piotrx.bronowski@intel.com>
Change-Id: I9364b5b8db4fc708790d48c538add272c7cea400
Diffstat (limited to 'src/vnet/ipsec/ipsec.h')
| -rw-r--r-- | src/vnet/ipsec/ipsec.h | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/vnet/ipsec/ipsec.h b/src/vnet/ipsec/ipsec.h index c4f5326c962..fc7b6cd2454 100644 --- a/src/vnet/ipsec/ipsec.h +++ b/src/vnet/ipsec/ipsec.h @@ -144,7 +144,9 @@ typedef struct /* pool of policies */ ipsec_policy_t *policies; - u32 fp_spd_is_enabled; + u32 ipv4_fp_spd_is_enabled; + u32 ipv6_fp_spd_is_enabled; + ipsec_fp_mask_type_entry_t *fp_mask_types; u32 fp_lookup_hash_buckets; /* number of buckets should be power of two */ |