diff options
author | Neale Ranns <nranns@cisco.com> | 2019-06-17 15:43:38 +0000 |
---|---|---|
committer | Damjan Marion <dmarion@me.com> | 2019-06-17 20:24:52 +0000 |
commit | 72f2a3acb797797416a96dc10312ccd431126de7 (patch) | |
tree | e712168ebaea12b09299ac74e53842663dfef5a2 /src/vnet/ipsec/ipsec_sa.h | |
parent | 2f0522008ca168e5fff5d754e2ca280ef9366d58 (diff) |
ipsec: One DPO per SA
An SA can be used only for ESP or AH nver both, so it needs only one
coresponding DPO.
Type: refactor
Change-Id: I689060f795ee352245a0eaed0890a6b234c63d71
Signed-off-by: Neale Ranns <nranns@cisco.com>
Diffstat (limited to 'src/vnet/ipsec/ipsec_sa.h')
-rw-r--r-- | src/vnet/ipsec/ipsec_sa.h | 5 |
1 files changed, 1 insertions, 4 deletions
diff --git a/src/vnet/ipsec/ipsec_sa.h b/src/vnet/ipsec/ipsec_sa.h index 969b5d142ee..53035aa2a20 100644 --- a/src/vnet/ipsec/ipsec_sa.h +++ b/src/vnet/ipsec/ipsec_sa.h @@ -71,8 +71,6 @@ typedef enum IPSEC_PROTOCOL_ESP = 1 } ipsec_protocol_t; -#define IPSEC_N_PROTOCOLS (IPSEC_PROTOCOL_ESP+1) - #define IPSEC_KEY_MAX_LEN 128 typedef struct ipsec_key_t_ { @@ -124,6 +122,7 @@ typedef struct u32 last_seq; u32 last_seq_hi; u64 replay_window; + dpo_id_t dpo; vnet_crypto_key_index_t crypto_key_index; vnet_crypto_key_index_t integ_key_index; @@ -131,8 +130,6 @@ typedef struct vnet_crypto_op_id_t crypto_dec_op_id:16; vnet_crypto_op_id_t integ_op_id:16; - dpo_id_t dpo[IPSEC_N_PROTOCOLS]; - /* data accessed by dataplane code should be above this comment */ CLIB_CACHE_LINE_ALIGN_MARK (cacheline1); |