diff options
| author |   Neale Ranns <nranns@cisco.com> | 2019-07-29 14:49:52 +0000 |
|---|---|---|
| committer |   Ole Trøan <otroan@employees.org> | 2019-07-31 10:12:14 +0000 |
| commit | 1404698df397bc4d3007daea41f52ad75ed4486c (patch) | |
| tree | 4c396973b37193def1bdb4c4a9f9e91f2e1b7274 /src | |
| parent | 513582c96a6d58a3980b3e444446bc6e5c4e4764 (diff) | |
ip: Ensure reassembly runs before IPSec decrypt.
Type: fix
Change-Id: I01eeedf8d5015b07b9422c65afe78bfe8177c22c
Signed-off-by: Neale Ranns <nranns@cisco.com>
Diffstat (limited to 'src')
| -rw-r--r-- | src/vnet/ip/ip4_reassembly.c | 4 | ||||
| -rw-r--r-- | src/vnet/ip/ip6_reassembly.c | 4 |
2 files changed, 6 insertions, 2 deletions
diff --git a/src/vnet/ip/ip4_reassembly.c b/src/vnet/ip/ip4_reassembly.c index b894c3b83fe..493f06fd43b 100644 --- a/src/vnet/ip/ip4_reassembly.c +++ b/src/vnet/ip/ip4_reassembly.c @@ -1202,7 +1202,9 @@ VLIB_REGISTER_NODE (ip4_reass_node_feature) = { VNET_FEATURE_INIT (ip4_reassembly_feature, static) = { .arc_name = "ip4-unicast", .node_name = "ip4-reassembly-feature", - .runs_before = VNET_FEATURES ("ip4-lookup"), + .runs_before = VNET_FEATURES ("ip4-lookup", + "esp4-decrypt", + "ah4-decrypt"), .runs_after = 0, }; /* *INDENT-ON* */ diff --git a/src/vnet/ip/ip6_reassembly.c b/src/vnet/ip/ip6_reassembly.c index 7b0d84de289..8d455e90e38 100644 --- a/src/vnet/ip/ip6_reassembly.c +++ b/src/vnet/ip/ip6_reassembly.c @@ -1181,7 +1181,9 @@ VLIB_REGISTER_NODE (ip6_reass_node_feature) = { VNET_FEATURE_INIT (ip6_reassembly_feature, static) = { .arc_name = "ip6-unicast", .node_name = "ip6-reassembly-feature", - .runs_before = VNET_FEATURES ("ip6-lookup"), + .runs_before = VNET_FEATURES ("ip6-lookup", + "esp6-decrypt", + "ah6-decrypt"), .runs_after = 0, }; /* *INDENT-ON* */ |