diff options
| author |   Neale Ranns <neale@graphiant.com> | 2021-02-25 19:09:24 +0000 |
|---|---|---|
| committer |   Damjan Marion <dmarion@me.com> | 2021-03-05 10:34:55 +0000 |
| commit | f16e9a5507c33642ac04d4b1a8712f8fac238828 (patch) | |
| tree | 4e38ba12c88fde939317d091f45026471f0f506b /src/vnet/ipsec/ipsec_types_api.c | |
| parent | fc81134a26458a8358483b0d2908a6b83afb7f11 (diff) | |
ipsec: Support async mode per-SA
Type: feature
This feautre only applies to ESP not AH SAs.
As well as the gobal switch for ayncs mode, allow individual SAs to be
async.
If global async is on, all SAs are async. If global async mode is off,
then if then an SA can be individually set to async. This preserves the
global switch behaviour.
the stratergy in the esp encrypt.decrypt nodes is to separate the frame
into, 1) sync buffers, 2) async buffers and 3) no-op buffers.
Sync buffer will undergo a cyrpto/ath operation, no-op will not, they
are dropped or handed-off.
Signed-off-by: Neale Ranns <neale@graphiant.com>
Change-Id: Ifc15b10b870b19413ad030ce7f92ed56275d6791
Diffstat (limited to 'src/vnet/ipsec/ipsec_types_api.c')
| -rw-r--r-- | src/vnet/ipsec/ipsec_types_api.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/vnet/ipsec/ipsec_types_api.c b/src/vnet/ipsec/ipsec_types_api.c index 44b129b3b66..7044f1eb046 100644 --- a/src/vnet/ipsec/ipsec_types_api.c +++ b/src/vnet/ipsec/ipsec_types_api.c @@ -147,6 +147,8 @@ ipsec_sa_flags_decode (vl_api_ipsec_sad_flags_t in) flags |= IPSEC_SA_FLAG_UDP_ENCAP; if (in & IPSEC_API_SAD_FLAG_IS_INBOUND) flags |= IPSEC_SA_FLAG_IS_INBOUND; + if (in & IPSEC_API_SAD_FLAG_ASYNC) + flags |= IPSEC_SA_FLAG_IS_ASYNC; return (flags); } @@ -168,6 +170,8 @@ ipsec_sad_flags_encode (const ipsec_sa_t * sa) flags |= IPSEC_API_SAD_FLAG_UDP_ENCAP; if (ipsec_sa_is_set_IS_INBOUND (sa)) flags |= IPSEC_API_SAD_FLAG_IS_INBOUND; + if (ipsec_sa_is_set_IS_ASYNC (sa)) + flags |= IPSEC_API_SAD_FLAG_ASYNC; return clib_host_to_net_u32 (flags); } |