diff options
| author |   Neale Ranns <nranns@cisco.com> | 2020-03-31 09:21:29 -0400 |
|---|---|---|
| committer |   Damjan Marion <dmarion@me.com> | 2020-05-04 17:09:34 +0000 |
| commit | 4ec36c5535849a4e456ed99b57968d54d5e03b62 (patch) | |
| tree | 47c807c525858db02f7d1e0e4df32b14441ed5c8 /test/test_ipsec_tun_if_esp.py | |
| parent | b723ccf95ffd8581be15e0752eac2c5f7233b340 (diff) | |
fib: midchain adjacency optimisations
Type: improvement
- inline some common encap fixup functions into the midchain
rewrite node so we don't incur the cost of the virtual function call
- change the copy 'guess' from ethernet_header (which will never happen) to an ip4 header
- add adj-midchain-tx to multiarch sources
- don't run adj-midchain-tx as a feature, instead put this node as the
adj's next and at the end of the feature arc.
- cache the feature arc config index (to save the cache miss going to fetch it)
- don't check if features are enabled when taking the arc (since we know they are)
the last two changes will also benefit normal adjacencies taking the arc (i.e. for NAT, ACLs, etc)
for IPSec:
- don't run esp_encrypt as a feature, instead when required insert this
node into the adj's next and into the end of the feature arc. this
implies that encrypt is always 'the last feature' run, which is
symmetric with decrypt always being the first.
- esp_encrpyt for tunnels has adj-midchain-tx as next node
Change-Id: Ida0af56a704302cf2d7797ded5f118a781e8acb7
Signed-off-by: Neale Ranns <nranns@cisco.com>
Diffstat (limited to 'test/test_ipsec_tun_if_esp.py')
| -rw-r--r-- | test/test_ipsec_tun_if_esp.py | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/test/test_ipsec_tun_if_esp.py b/test/test_ipsec_tun_if_esp.py index 3cd2521e04d..d8527a3d6c1 100644 --- a/test/test_ipsec_tun_if_esp.py +++ b/test/test_ipsec_tun_if_esp.py @@ -599,7 +599,7 @@ class TestIpsec4TunIfEspAll(TemplateIpsec, IpsecTun4): class TestIpsec4TunIfEspNoAlgo(TemplateIpsec, IpsecTun4): - """ IPsec IPv4 Tunnel interface all Algos """ + """ IPsec IPv4 Tunnel interface no Algos """ encryption_type = ESP tun4_encrypt_node_name = "esp4-encrypt-tun" @@ -650,6 +650,7 @@ class TestIpsec4TunIfEspNoAlgo(TemplateIpsec, IpsecTun4): super(TestIpsec4TunIfEspNoAlgo, self).tearDown() def test_tun_44(self): + """ IPSec SA with NULL algos """ p = self.ipv4_params self.config_network(p) @@ -1445,7 +1446,7 @@ class TestIpsecMGreIfEspTra4(TemplateIpsec, IpsecTun4): # setup some SAs for several next-hops on the interface self.multi_params = [] - for ii in range(N_NHS): + for ii in range(1): p = copy.copy(self.ipv4_params) p.remote_tun_if_host = "1.1.1.%d" % (ii + 1) |