aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2025-02-07session: do not match listeners when looking for lcl portv25.02-rc2stable/2502Florin Coras3-5/+73
Also optimize lookup to avoid session rules table matching. Type: fix Change-Id: I5b62c870edd9f7486e7de1417816fffa30d03a3e Signed-off-by: Florin Coras <fcoras@cisco.com> (cherry picked from commit 09341c6bbef28c03c1b026ff78808b000bf7d79d)
2025-02-07hs-test: fix numa node core retrievalSemir Sionek1-10/+16
In CpuAllocator, the default assumption of two node core ranges seems to not be fully correct. Added handling of multiple ranges and singular cores. Type: fix Change-Id: Id50147c5360baa4035fcd87e3717b0d6c9ea7e5f Signed-off-by: Semir Sionek <ssionek@cisco.com> (cherry picked from commit 119ae0a10a990c0c4212c043f0a446b0af362652)
2025-02-06http: confirm postponed connection closeMatus Fabian1-1/+4
Type: fix Change-Id: I43a221ac2be9bbea885116c12d1991cf4477fae8 Signed-off-by: Matus Fabian <matfabia@cisco.com> (cherry picked from commit 94f6034af5894ecf23fa58d59fa90664056d1cf0)
2025-02-06dpdk: patch add to ice driver for flow action handlesKai Ji1-0/+64
This patch updates the DPDK ICE driver to ensure the correct hardware engine is selected for flow offload, addressing issues with improper engine assignment. Type: fix Change-Id: Ief7bfbe978d8a684b992ca85b07097112e497b80 Signed-off-by: Kai Ji <kai.ji@intel.com>
2025-02-05l2: fix segment faultfenglei1-1/+4
if feature_bitmap is zero, it will make feat_bitmap_get_next_node_index function generate segment fault Type: fix Change-Id: I6a9c0b29d927e600537e9e43ad696d09c091f9b1 Signed-off-by: fenglei <1579628578@qq.com> (cherry picked from commit 03c21e0700ba59ca4bb8e81bdb18779f35a1845a)
2025-02-05http: buf_fifo_get_segs minor fixMatus Fabian1-1/+1
validate segs vector to (_n_segs - 1) Type: fix Change-Id: I721cc438e4c9610760a1f40b6355834bbd389b20 Signed-off-by: Matus Fabian <matfabia@cisco.com> (cherry picked from commit 778de83dcbaccf3757afa9f4e03c496eaea70b2e)
2025-02-05hs-test: fixed incorrect exit statusAdrian Villin1-12/+27
Type: fix Change-Id: Icabe556448ad7109f4802ad48a701667911652de Signed-off-by: Adrian Villin <avillin@cisco.com> (cherry picked from commit d39fa81d599f53d67994e79c6816369688d8f4cd)
2025-01-31http: http_app_tx_callback check if conn closedMatus Fabian1-0/+7
Type: fix Change-Id: Ic7b9819226742b0f1153ec2794ae80556c49dad2 Signed-off-by: Matus Fabian <matfabia@cisco.com> (cherry picked from commit 30bd270eb48fb43c62913a93d5dd4878cf6920d1)
2025-01-31vpp_config: leave kernel.shmmax alone by defaultBenoît Ganne1-1/+3
Linux default settings are enough, and modifying them can break other applications. Type: improvement Change-Id: I773b730802bae78b0f33ca3ff31d9ee2ffa82f89 Signed-off-by: Benoît Ganne <bganne@cisco.com> (cherry picked from commit 5819e2aded521aec1c84a3b7d4c4810beac92903)
2025-01-30vpp_config: leave vm.max_map_count alone by defaultDave Barach1-2/+7
Do not set vm.max_map_count to 3096 by default. That value is an order of magnitude smaller than current distro defaults, and causes seemingly "random" severe application failures; known to occur when running Brave, Firefox, and VirtualBox to name but a few. Type: fix Change-Id: Ibe7518d92c3be9a4704972c9d504777776f924dc Signed-off-by: Dave Barach <dave@barachs.net> (cherry picked from commit 81996c1970b7db39f1ffe7a919bbb3a3ab9a0740)
2025-01-30sflow: replace VAPI with DLAPIPim van Pelt10-346/+76
Remove the requirement to coordinate between linux-cp and sflow at build time via cmake. Also, remove 350 lines of awkward thread-forking VAPI code. Replace it with a dynamically retrieved function from the linux-cp plugin, called lcp_itf_pair_get_vif_index_by_phy(). Remove build inhibit based on Netlink headers, and only inhibit the build for FreeBSD. This plugin can now run regardless of Linux CP being built or loaded, and then return VPP ifIndex numbers instead. Also, fix a flaky test where non-ephemeral source ports throw off packet captures. Type: improvement Change-Id: I5486742fa0e343e382630a22672a05fe3dcf7836 Signed-off-by: neil.mckee@inmon.com Signed-off-by: pim@ipng.nl (cherry picked from commit f1467f6be578088586abad1cc2c96038d8247794)
2025-01-30hs-test: fix broken testMatus Fabian1-2/+2
AssertContains and AssertNotContains are now case insensitive to prevent issues like in HttpPersistentConnectionTest. Type: test Change-Id: Ic52e3fa5a7d1d5cb8486e86aa39a845cbd911d94 Signed-off-by: Matus Fabian <matfabia@cisco.com> (cherry picked from commit d38c132883ac6e9f726fed7f5a533288a5932058)
2025-01-28sflow: Update build rulesPim van Pelt6-4/+32
1) we rely on Netlink PSAMPLE and USERSOCK make sure we have headers 2) sflow plugin is not available on FreeBSD, due to Netlink features 3) preprocessor flag SFLOW_USE_VAPI controls whether the sflow plugin will attempt to contact the linux-cp plugin using the binary VAPI. It has to be a preprocessor flag so it can suppress the "#include" statements that define that linux-cp api, because those include files will be missing if linux-cp is excluded from the build. The "excluded_plugins" list can be used with: make VPP_EXCLUDED_PLUGINS=linux-cp build build-release Type: fix Fixes: e40f8a90bb0c39986c198fca8ad9b0b3c1658401 Change-Id: If44929d285d27db7862910ecb4ec11ddd4591fd2 Signed-off-by: pim@ipng.nl (cherry picked from commit d9b9a721fd1aa0198b5d0be54fe46ad0a3d773b7)
2025-01-22snort: validate sw_if_index in attach/detach api handlersDave Wallace2-10/+47
- fixes crash in vpp-debug-verify-master-ubuntu2204-x86_64 CI job in test_snort_06_detach_if testcase - fix similar logic in attach handler - verify snort direction in attach api message - add tests verifying attribute validation in attach testcase Type: fix Fixes: 102575492c9199259aa5e468f21b46936d7a1ac4 Change-Id: I96fbeb0a7b84f2f238df15b20476ed4086251471 Signed-off-by: Dave Wallace <dwallacelf@gmail.com> (cherry picked from commit 2b85ab67f9d2163d83d4a68eb32de051c09c9a78)
2025-01-22misc: Initial changes for stable/2502 branchv25.02-rc1Andrew Yourtchenko1-0/+1
Type: docs Change-Id: Icfb478427bcbca35162935537ab35ed4f6159dad Signed-off-by: Andrew Yourtchenko <ayourtch@gmail.com>
2025-01-21http: target parsing improvementMatus Fabian14-501/+666
Make it http version neutral, since h2 and h3 use 3 pseudo-headers. Added scheme, target_authority_offset and target_authority_len to http_msg_data_t, target_form removed. Http transport now validate if correct form of request target is received, so now we are also able to receive requests with absolute-form target in server apps like http_static. As bonus, unformat is not longer used to parse IP addresses. Type: improvement Change-Id: I369f77e2639c43cc1244d91f883c526eb88af63e Signed-off-by: Matus Fabian <matfabia@cisco.com>
2025-01-21dpdk: enable VLAN offload configuration for the iavf PMD driverKai Ji1-0/+1
Sets the program_vlans = 1 flag, enabling the DPDK sub-interface function to configure VLAN offload settings on Intel iavf/i40e Ethernet devices from VPP. Type: improvement Change-Id: I030af0c93b13cf80772982b243861f9c303f7e09 Signed-off-by: Kai Ji <kai.ji@intel.com>
2025-01-21crypto: add async algo macros for ctr sha2Nithinsen Kaithakadan3-2/+41
Add async crypto algo macros for AES_CTR SHA256/384/512. Add support for these in dev octeon plugin. Type: feature Signed-off-by: Nithinsen Kaithakadan <nkaithakadan@marvell.com> Change-Id: I22e81c6ac5a549b2f12556b8c79257a20a5bd47d
2025-01-21octeon: add direct mode changes in crypto datapathNithinsen Kaithakadan2-48/+269
This patch introduces support for direct mode crypto submission on CPT. For multi-segmented buffers, scatter-gather submission mode will be utilized. Type: feature Signed-off-by: Nithinsen Kaithakadan <nkaithakadan@marvell.com> Change-Id: Idb99e6c9ea49028e11d3bf530c9559719c988252
2025-01-21octeon: rework octeon crypto frameworkNithinsen Kaithakadan2-61/+60
Added changes in the pending queue structure to incorporate each packet into a single inflight request entry. Type: improvement Change-Id: I18729e01b5f73b128ae245a1a8f77a4f97065026 Signed-off-by: Nithinsen Kaithakadan <nkaithakadan@marvell.com>
2025-01-21octeon: fix for async crypto session initNithinsen Kaithakadan2-10/+16
This patch resolves segmentation fault that occurs during the initialization of an asynchronous crypto session when processing the first packet in the data path. And resolves compilation failures. Type: fix Change-Id: I60e4060c65741a445fe02f01b3c94f627534ecef Signed-off-by: Nithinsen Kaithakadan <nkaithakadan@marvell.com>
2025-01-21dpdk: bump to DPDK 24.11.1Vladimir Smirnov7-17/+43
Bump DPDK version to 24.11.1. Reason behind going for 24.11.1 is that 24.11 was affected by CVE-2024-11614 which was fixed in the point release. Type: feature Change-Id: Ic49a35fe7ac782679df39145e3adfd06f047b031 Signed-off-by: Vladimir Smirnov <civil.over@gmail.com>
2025-01-21crypto-openssl: fixed tag and aad lengths for chacha-polyDamjan Marion1-1/+7
Type: improvement Change-Id: I6162b45875566cc705917a51b3f06e1490607c8b Signed-off-by: Damjan Marion <damarion@cisco.com>
2025-01-20tls: async event handling enhancementVarun Rapelly3-599/+345
This patch updates async processing logic by adding async event handlers separately for handshake, read and write events. Type: improvement Change-Id: I6366689fec7e29fa9850cb22e20ab3659bf5245a Signed-off-by: Varun Rapelly <vrapelly@marvell.com>
2025-01-20build: fix compiler orderingFlorin Coras1-0/+6
All CI builds default to GCC instead of Clang Type: fix Fixes: ec68cec6c84e5dc9acaf7828c0118bb71fffc561 Change-Id: I63fce7feda743d05f17d0710fcf25b09674fdbfb Signed-off-by: Florin Coras <fcoras@cisco.com>
2025-01-20vcl: segfault correction in vcl_session_connected_handlerAlexey Stratulat1-1/+1
Svace found a bug related to the fact that the vcl_segment_attach_session function is passed a pointer to a session, which is null, because of this, when using it, a segmentation error will occur inside the function. This issue was fixed. Type: fix Change-Id: Icc68ced80611bb709c9fa7868816f003373077d4 Signed-off-by: Alexey Stratulat <a.stratulat@ideco.ru>
2025-01-20sflow: initial checkinPim van Pelt19-0/+3782
This is an sFlow dataplane plugin that can sample 1-in-N packets from device-input, copying them to a FIFO queue and servicing that queue from a main process which formats them as Netlink PSAMPLEs, to be picked up by a popular sidecar agent called host-sflow. Type: feature Change-Id: Ic03456472e53309678f182dc8f74d3c81fb619e6 Signed-off-by: neil.mckee@inmon.com Signed-off-by: pim@ipng.nl
2025-01-20vlib: fail in runtime if workers > neltsVladimir Smirnov1-0/+5
Type: fix With a release build, if you configure more than 55 workers, vpp will start, but will corrupt memory as a lot of internal datastrctures are allocated with assumption that there will be not more than FRAME_QUEUE_MAX_NELTS threads. Add a warning if amount of configured workers more than MAX_NELTS. Anticipate that next commit would add a compile-time configurable variable and name it VPP_MAX_THREADS. Change-Id: I015f4f9aa5e8b828c7d90c90142d7a7c1ce68f97 Signed-off-by: Vladimir Smirnov <civil.over@gmail.com>
2025-01-20af_packet: worker thread call vlib_log coredumpfenglei1-3/+14
Type: fix -When deleting a veth pair interface in linux, vpp's call to af_packet_fd_error will cause it to hang because it's a worker thread. Change-Id: I3dc9018e7e492ccbdf0f59381f9bbbfd5c1c88a5 Signed-off-by: fenglei <1579628578@qq.com>
2025-01-17af_xdp: revert "af_xdp: fix af_xdp compile waring for clang compiler"Benoît Ganne3-55/+26
This reverts commit 38097970c038de6c3c67cb8e1c7209f1df1f24d0. Type: fix Change-Id: I2401eff6d1558f0f95b8b0c88b6b5d174acbb0ef Signed-off-by: Benoît Ganne <bganne@cisco.com>
2025-01-17snort: support multiple instances per interfaceAgathiyan Bragadeesh6-168/+554
Implements load balancing between snort instances via flow hash. New CLI commands have been made to support these changes: snort attach instance <name1> [instance <name2> ... ] interface <ifname> [input|output|inout] snort attach all-instances interface <ifname> [input|output|inout] snort detach instance <name1> interface <ifname> snort detach all-instances interface <ifname> The output of "show snort interfaces" has an extra column to show the direction of each attachment: interface instances direction Ethernet0: snort1 inout snort2 inout snort3 inout Ethernet1: snort1 input snort3 output To maintain backwards compatibility for the snort api, the snort_interface_get api endpoint only returns one of the attached instances and the snort_interface_detach endpoint detaches all attached instances. Type: improvement Signed-off-by: Agathiyan Bragadeesh <agathiyan.bragadeesh2@arm.com> Change-Id: I6b7c26c203496d6a1dba244620907f28c04bb478
2025-01-17crypto-ipsecmb: fixed tag and aad lengths for chacha-polyDamjan Marion1-18/+73
Type: improvement Change-Id: I8c7e6c2734258bb6b4e8e404e2c9b119ee141dd1 Signed-off-by: Damjan Marion <damarion@cisco.com>
2025-01-17hs-test: temporarily skip VppEchoQuicTestAdrian Villin1-0/+1
Type: test Change-Id: I06937c491303dfe2f0b2e847d05a4220c14e83e0 Signed-off-by: Adrian Villin <avillin@cisco.com>
2025-01-17linux-cp: add the drain backArtem Glazychev1-0/+10
Type: fix Change-Id: I60338a8c901cf5baf4974ce572f17e70116877df Signed-off-by: Artem Glazychev <glazychev@mts.ru>
2025-01-17af_xdp: fix af_xdp compile waring for clang compilerfenglei3-26/+55
Type: fix - add check variable undefine init flags for gcc and clang compiler - disable compile xdp-dump Change-Id: Icd2b81ec5cd5dc66db395a69f8af889635f664e0 Signed-off-by: fenglei <1579628578@qq.com>
2025-01-17dpdk: update rdma-core to 55.0Vladimir Smirnov2-3/+3
Newer version of RDMA contains some bugfixes. Type: feature Change-Id: I4cd6bc7608bbadd99cdddc7b97646df1583b6ce6 Signed-off-by: Vladimir Smirnov <civil.over@gmail.com>
2025-01-17crypto-openssl: add fixed tag and aad size opsDamjan Marion1-43/+69
Type: improvement Change-Id: Iea7202cd0a79d3bed85313b2b4a6e6469a701568 Signed-off-by: Damjan Marion <damarion@cisco.com>
2025-01-17crypto-ipsecmb: add fixed tag and aad size opsDamjan Marion1-148/+138
Type: improvement Change-Id: Id62308775eeeada0277c2303cf8c728db4dbfcdc Signed-off-by: Damjan Marion <damarion@cisco.com>
2025-01-16http: fix sending error responses to rejected requests by server appsSemir Sionek1-7/+18
Plugins such as http_static sometimes reject requests without reading all of the body. http_static in that case sends an error response and closes the connection. But the error response cannot go out due to the connection state being HTTP_REQ_STATE_TRANSPORT_IO_MORE_DATA. With this change, we make http_app_tx_callback give a response like that special treatment, allowing it to go out. Type: fix Change-Id: I72ae74b869183f5d5921837f6ac9c52f0efc7598 Signed-off-by: Semir Sionek <ssionek@cisco.com>
2025-01-16linux-cp: fix segfault while receiving nl messagesArtem Glazychev1-11/+2
- check nl socket before receiving messages - we don't need extra callback after adding an lcp pair because we start draining messages (due to epoll) right after opening socket Type: fix Change-Id: I0ecb03b758f066662015fd6c6b9d3c48cb520c0d Signed-off-by: Artem Glazychev <glazychev@mts.ru>
2025-01-16crypto: combine sync and async algos and opsDamjan Marion16-810/+440
Type: improvement Change-Id: I4d507b105e5b5ba7dd68d373c7f1ab156a9fc9f1 Signed-off-by: Damjan Marion <damarion@cisco.com>
2025-01-16ipsec: make algo data constantDamjan Marion4-162/+193
Type: improvement Change-Id: I554418fca0cbe1a2b42eddc24eccf25ede5f678a Signed-off-by: Damjan Marion <damarion@cisco.com>
2025-01-16arp: fix command resolve and config filed exist differfenglei1-1/+2
Type: fix Change-Id: I2b2b65a6c12d50146f08b64b9a1603888652b462 Signed-off-by: fenglei <1579628578@qq.com>
2025-01-16ipsec: don't add crypto key if cipher is NONEDamjan Marion1-6/+10
Type: fix Change-Id: I0c418fe71b579febc4ca02e8ad0aeba24df1945d Signed-off-by: Damjan Marion <damarion@cisco.com>
2025-01-15tcp: export sdl header file for out-of-tree pluginsFlorin Coras1-0/+1
Type: fix Change-Id: I27e29690dba1ea52e874cb1db81d24fcc4366bb6 Signed-off-by: Florin Coras <fcoras@cisco.com>
2025-01-15tests: remove decorator tag_fixme_ubuntu2404Ivan Ivanets1-27/+0
Type: test There is no need to use the tag_fixme_ubuntu2404 decorator. All tests that previously used it are now stable. Change-Id: I2f00bcdacf9690c4d3896eace5d817f7bd19058b Signed-off-by: Ivan Ivanets <iivanets@cisco.com>
2025-01-15pg: fix tr to tracefenglei12-13/+13
Type: fix Change-Id: Icd1ea24ba104123673f864d9bfd0f4da83982b7d Signed-off-by: fenglei <1579628578@qq.com>
2025-01-15octeon: add compatibility checkMonendra Singh Kushwaha1-0/+9
This patch adds compatibility check for OCTEON model in plugin. Type: refactor Change-Id: Id583a2f42b8f66f7e045f6cf9176125680e9a16f Signed-off-by: Monendra Singh Kushwaha <kmonendra@marvell.com>
2025-01-15octeon: update octeon roc versionMonendra Singh Kushwaha2-6/+7
Type: feature Change-Id: I9f3044aec29a611d4735001ff1943772b7035711 Signed-off-by: Monendra Singh Kushwaha <kmonendra@marvell.com>
2025-01-14http_static: read body only for POST requestsSemir Sionek1-2/+2
Type: improvement Change-Id: Id863f59d04d8e6f22c886e079367d06908b8b24b Signed-off-by: Semir Sionek <ssionek@cisco.com>