aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
9 dayssession: do not match listeners when looking for lcl portFlorin Coras3-5/+73
Also optimize lookup to avoid session rules table matching. Type: fix Change-Id: I5b62c870edd9f7486e7de1417816fffa30d03a3e Signed-off-by: Florin Coras <fcoras@cisco.com>
9 daysdpdk: patch add to ice driver for flow action handlesKai Ji1-0/+64
This patch updates the DPDK ICE driver to ensure the correct hardware engine is selected for flow offload, addressing issues with improper engine assignment. Type: fix Change-Id: Ief7bfbe978d8a684b992ca85b07097112e497b80 Signed-off-by: Kai Ji <kai.ji@intel.com>
9 dayshs-test: fix numa node core retrievalSemir Sionek1-10/+16
In CpuAllocator, the default assumption of two node core ranges seems to not be fully correct. Added handling of multiple ranges and singular cores. Type: fix Change-Id: Id50147c5360baa4035fcd87e3717b0d6c9ea7e5f Signed-off-by: Semir Sionek <ssionek@cisco.com>
9 daysqos: fix qos record cliFilip Tehlar1-1/+1
Type: fix Change-Id: Ic3d4bbb4df8be6ef109f0af17744b35abc240ba2 Signed-off-by: Filip Tehlar <filip.tehlar@gmail.com>
10 dayshttp: confirm postponed connection closeMatus Fabian1-1/+4
Type: fix Change-Id: I43a221ac2be9bbea885116c12d1991cf4477fae8 Signed-off-by: Matus Fabian <matfabia@cisco.com>
10 dayshs-test: fix vppConnectUdpStressLoad panicMatus Fabian1-1/+1
Type: test Change-Id: Id5573d4e1a9216297046db33be887ebfa343fa28 Signed-off-by: Matus Fabian <matfabia@cisco.com>
10 daysl2: fix segment faultfenglei1-1/+4
if feature_bitmap is zero, it will make feat_bitmap_get_next_node_index function generate segment fault Type: fix Change-Id: I6a9c0b29d927e600537e9e43ad696d09c091f9b1 Signed-off-by: fenglei <1579628578@qq.com>
10 dayscnat: fix interface map type unformatBenoît Ganne1-2/+3
C enum is not guaranteed to be 8-bit (and in general it is not, it's 32-bits by default in GCC for example). Type: fix Change-Id: I6a10f85991ae1903fb9f4aeebfcfdf5315200903 Signed-off-by: Benoît Ganne <bganne@cisco.com>
11 daysbuild: check cmake3 command silentlyNicolas PLANEL5-5/+5
Avoid which shell command to output verbose errors like """ which: no cmake3 in (/usr/sbin:/sbin:/bin: ... """ Type: make Change-Id: Ib9a5fee72055b80b5e4e4c73280b19fea736c352 Signed-off-by: Nicolas PLANEL <nplanel@gmail.com>
12 dayshttp: buf_fifo_get_segs minor fixMatus Fabian1-1/+1
validate segs vector to (_n_segs - 1) Type: fix Change-Id: I721cc438e4c9610760a1f40b6355834bbd389b20 Signed-off-by: Matus Fabian <matfabia@cisco.com>
12 dayscrypto: remove barrier on key addSemir Sionek3-52/+49
Type: improvement Signed-off-by: Damjan Marion <damarion@cisco.com> Change-Id: I9eab8a3c2580711c8635f7ba8bca3b27316aa665
12 daysipsec: fix ipsec_sa_v5_detailsMaxime Peim2-17/+54
Re-add the anti-replay window size in the SA dump API and add tests. Type: fix Change-Id: Iacecdf5df796a0a6353491f8160c878751c6039b Signed-off-by: Maxime Peim <mpeim@cisco.com> Signed-off-by: Benoît Ganne <bganne@cisco.com>
13 daysipsec: export ipsec_funcs headerMaxime Peim1-0/+1
Type: fix Change-Id: I78904edd5f38e22821af779e15ab1c0da2294ce8 Signed-off-by: Maxime Peim <mpeim@cisco.com>
2025-01-31http: http_app_tx_callback check if conn closedMatus Fabian1-0/+7
Type: fix Change-Id: Ic7b9819226742b0f1153ec2794ae80556c49dad2 Signed-off-by: Matus Fabian <matfabia@cisco.com>
2025-01-31ipsec: store outbound seq as u64Damjan Marion7-67/+35
Type: improvement Change-Id: Id7717de00558ab90dbd312a58becd58d008397ea Signed-off-by: Damjan Marion <damarion@cisco.com>
2025-01-31hs-test: fixed incorrect exit statusAdrian Villin1-12/+27
Type: fix Change-Id: Icabe556448ad7109f4802ad48a701667911652de Signed-off-by: Adrian Villin <avillin@cisco.com>
2025-01-30vpp_config: leave kernel.shmmax alone by defaultBenoît Ganne1-1/+3
Linux default settings are enough, and modifying them can break other applications. Type: improvement Change-Id: I773b730802bae78b0f33ca3ff31d9ee2ffa82f89 Signed-off-by: Benoît Ganne <bganne@cisco.com>
2025-01-30hsa: http connect proxy fixMatus Fabian1-1/+2
Type: fix Change-Id: I4fb493c98ed6d59d10fad0e5ef73b6f80f6b232e Signed-off-by: Matus Fabian <matfabia@cisco.com>
2025-01-30hs-test: fix broken testMatus Fabian1-2/+2
AssertContains and AssertNotContains are now case insensitive to prevent issues like in HttpPersistentConnectionTest. Type: test Change-Id: Ic52e3fa5a7d1d5cb8486e86aa39a845cbd911d94 Signed-off-by: Matus Fabian <matfabia@cisco.com>
2025-01-30ipsec: add SA inbound and outbound runtime dataDamjan Marion17-677/+916
Type: improvement Change-Id: I0f949b67fb5b65fa1a79ffb7777d654693f0de6a Signed-off-by: Damjan Marion <damarion@cisco.com>
2025-01-29http: conn state consistency with other transportsFlorin Coras1-6/+6
Maintain transport state formatting consistency, i.e., upper case states. If we revisit, we should revisit all transports. Type: refactor Signed-off-by: Florin Coras <fcoras@cisco.com> Change-Id: I143e13aa5e8525bb276db9b4ec0e0baa153d1b44
2025-01-29sflow: replace VAPI with DLAPIPim van Pelt10-346/+76
Remove the requirement to coordinate between linux-cp and sflow at build time via cmake. Also, remove 350 lines of awkward thread-forking VAPI code. Replace it with a dynamically retrieved function from the linux-cp plugin, called lcp_itf_pair_get_vif_index_by_phy(). Remove build inhibit based on Netlink headers, and only inhibit the build for FreeBSD. This plugin can now run regardless of Linux CP being built or loaded, and then return VPP ifIndex numbers instead. Also, fix a flaky test where non-ephemeral source ports throw off packet captures. Type: improvement Change-Id: I5486742fa0e343e382630a22672a05fe3dcf7836 Signed-off-by: neil.mckee@inmon.com Signed-off-by: pim@ipng.nl
2025-01-28vpp_config: leave vm.max_map_count alone by defaultDave Barach1-2/+7
Do not set vm.max_map_count to 3096 by default. That value is an order of magnitude smaller than current distro defaults, and causes seemingly "random" severe application failures; known to occur when running Brave, Firefox, and VirtualBox to name but a few. Type: fix Change-Id: Ibe7518d92c3be9a4704972c9d504777776f924dc Signed-off-by: Dave Barach <dave@barachs.net>
2025-01-27armada: fix DSA packet grouping issue on rxDamjan Marion1-0/+1
Type: fix Change-Id: I9a56267f6e016827971744c932aa5da36c92c8f0 Signed-off-by: Damjan Marion <damarion@cisco.com>
2025-01-24session: make local port allocator fib awareFlorin Coras4-30/+36
Allocate ports per fib. Type: improvement Change-Id: I9e1f113602485bfb09f71092eee58b9a433daa6a Signed-off-by: Florin Coras <fcoras@cisco.com>
2025-01-23vcl: fix sigchld handler recursionFlorin Coras1-9/+18
Observed with hst redis test and ubuntu 24.04 Type: fix Change-Id: I22b28af5ca26498250c31edeb3db224a2e12e19d Signed-off-by: Florin Coras <fcoras@cisco.com>
2025-01-23session: validate new app worker on update reqestFlorin Coras1-0/+2
Type: fix Change-Id: Id9cec0c802024c1df0ac06a0f8833379a782e9de Signed-off-by: Florin Coras <fcoras@cisco.com>
2025-01-23http_static: introduce max-body-size parameterSemir Sionek6-10/+208
Introduce the max-body-size parameter to put a limit on how big of a POST request can the static server take (and how big of a memory allocation that causes). Type: improvement Change-Id: I93cdeaf38dabe2850665e92bedbaa0545c375214 Signed-off-by: Semir Sionek <ssionek@cisco.com>
2025-01-23http: move header serialization to http transportMatus Fabian12-272/+289
Apps called http_serialize_headers, which creates plain text buffer, this is now hidden in http transport layer and apps pass headers in generic form, so they can be encoded based on http version. Type: improvement Change-Id: Ie4fa0516cd3406d60f956751c8ee7ab40e633fa4 Signed-off-by: Matus Fabian <matfabia@cisco.com>
2025-01-23build: add golang checkstyle for hs-test to ci checkstyle-test targetDave Wallace2-7/+10
- Ensure extras/hs-test code is verified for style compliance in the vpp-checkstyle-verify-*-*-* ci jobs Type: make Change-Id: If3900cbc028f0bd38b14fb9dd08841e21fec15da Signed-off-by: Dave Wallace <dwallacelf@gmail.com>
2025-01-23sflow: Update build rulesPim van Pelt6-4/+32
1) we rely on Netlink PSAMPLE and USERSOCK make sure we have headers 2) sflow plugin is not available on FreeBSD, due to Netlink features 3) preprocessor flag SFLOW_USE_VAPI controls whether the sflow plugin will attempt to contact the linux-cp plugin using the binary VAPI. It has to be a preprocessor flag so it can suppress the "#include" statements that define that linux-cp api, because those include files will be missing if linux-cp is excluded from the build. The "excluded_plugins" list can be used with: make VPP_EXCLUDED_PLUGINS=linux-cp build build-release Type: fix Fixes: e40f8a90bb0c39986c198fca8ad9b0b3c1658401 Change-Id: If44929d285d27db7862910ecb4ec11ddd4591fd2 Signed-off-by: pim@ipng.nl
2025-01-23tests: fix docs compile syntax warningfenglei3-7/+7
- make docs will generate syntax warning /opt/vpp/docs/_scripts/siphon/generate.py:31: SyntaxWarning: invalid escape sequence '\s' siphon_block_start = re.compile("^\s*/\*\?\s*(.*)$") /opt/vpp/docs/_scripts/siphon/generate.py:34: SyntaxWarning: invalid escape sequence '\s' siphon_block_stop = re.compile("^(.*)\s*\?\*/\s*$") /opt/vpp/docs/_scripts/siphon/generate.py:42: SyntaxWarning: invalid escape sequence '\s' "(%s)\s*([a-zA-Z0-9_:]+)\s+(.*)\s*(%s)" /opt/vpp/docs/_scripts/siphon/generate.py:47: SyntaxWarning: invalid escape sequence '\s' siphon_initializer = re.compile("\s*=") /opt/vpp/docs/_scripts/siphon/generate_clicmd.py:23: SyntaxWarning: invalid escape sequence '\s' "(?P<m>VLIB_CLI_COMMAND)\s*" "[(](?P<name>[a-zA-Z0-9_]+)(,[^)]*)?[)]" /opt/vpp/docs/_scripts/siphon/generate_syscfg.py:23: SyntaxWarning: invalid escape sequence '\s' "(?P<m>VLIB_CONFIG_FUNCTION)\s*" /opt/vpp/docs/_scripts/siphon/generate_syscfg.py:24: SyntaxWarning: invalid escape sequence '\s' '[(](?P<fn>[a-zA-Z0-9_]+)\s*,\s*"(?P<name>[^"]*)"[)]' Type: improvement Change-Id: I6f7555cb0368a671a8bb164d51466d526895e925 Signed-off-by: fenglei <1579628578@qq.com>
2025-01-23build: support anolis8 operation for vppfenglei1-1/+20
Type: improvement support anolis8 operation for vpp executing make install-deps command Change-Id: I854d0d1b4768c0df5898ab61a4f22d9d02ed2397 Signed-off-by: fenglei <1579628578@qq.com>
2025-01-23build: add support for debian trixieVladimir Smirnov1-0/+16
Debian testing is currently codenamed trixie and planned to be released in 2025. As it is still 'testing', it doesn't define VERSION_ID in /etc/os-release file, therefore it should be matched by VERSION_CODENAME instead That patch adds support for forcing VERSION_ID based on codename in case VERSION_ID is absent and defines correct dependencies for debian/trixie. Type: make Change-Id: Idb68630a7ec53d99223e4f6496db4b3a5b61363e Signed-off-by: Vladimir Smirnov <civil.over@gmail.com>
2025-01-22svm: improve ooo try collectFlorin Coras1-12/+5
Use modular arithmetic just like the other ooo functions. Type: improvement Signed-off-by: Florin Coras <fcoras@cisco.com> Change-Id: Ie39bb928634fe0956339feafb41667ec9cafeee2
2025-01-22session: cleanup io event functionsFlorin Coras11-35/+38
Program session events using session handles instead of fifos. Type: improvement Change-Id: I69063190598c2b4dc1104f2938f27c6cd057341a Signed-off-by: Florin Coras <fcoras@cisco.com>
2025-01-22session svm: track session indices in private structFlorin Coras17-46/+77
Type: improvement Signed-off-by: Florin Coras <fcoras@cisco.com> Change-Id: I898baf3e2a7586124f4678eaeaa4516db7186f8f
2025-01-22http: case-insensitive header table searchMatus Fabian5-45/+315
header names are case-insensitive, see RFC9110 section 5.1 Type: improvement Change-Id: Ic5ef5615397537ba48fc56b18c882fa838c54751 Signed-off-by: Matus Fabian <matfabia@cisco.com>
2025-01-22crypto-native: add fixed tag and aad size opsDamjan Marion2-11/+55
Type: improvement Change-Id: I6bbb48c999859899e2f82c65cbfd015dc1ad584c Signed-off-by: Damjan Marion <damarion@cisco.com>
2025-01-22snort: validate sw_if_index in attach/detach api handlersDave Wallace2-10/+47
- fixes crash in vpp-debug-verify-master-ubuntu2204-x86_64 CI job in test_snort_06_detach_if testcase - fix similar logic in attach handler - verify snort direction in attach api message - add tests verifying attribute validation in attach testcase Type: fix Fixes: 102575492c9199259aa5e468f21b46936d7a1ac4 Change-Id: I96fbeb0a7b84f2f238df15b20476ed4086251471 Signed-off-by: Dave Wallace <dwallacelf@gmail.com>
2025-01-22misc: Initial 25.06-rc0 commitv25.06-rc0Andrew Yourtchenko2-1/+1
Type: docs Change-Id: I1a9ff6191b4142547b98383459bbedb824db6e55 Signed-off-by: Andrew Yourtchenko <ayourtch@gmail.com>
2025-01-21http: target parsing improvementMatus Fabian14-501/+666
Make it http version neutral, since h2 and h3 use 3 pseudo-headers. Added scheme, target_authority_offset and target_authority_len to http_msg_data_t, target_form removed. Http transport now validate if correct form of request target is received, so now we are also able to receive requests with absolute-form target in server apps like http_static. As bonus, unformat is not longer used to parse IP addresses. Type: improvement Change-Id: I369f77e2639c43cc1244d91f883c526eb88af63e Signed-off-by: Matus Fabian <matfabia@cisco.com>
2025-01-21dpdk: enable VLAN offload configuration for the iavf PMD driverKai Ji1-0/+1
Sets the program_vlans = 1 flag, enabling the DPDK sub-interface function to configure VLAN offload settings on Intel iavf/i40e Ethernet devices from VPP. Type: improvement Change-Id: I030af0c93b13cf80772982b243861f9c303f7e09 Signed-off-by: Kai Ji <kai.ji@intel.com>
2025-01-21crypto: add async algo macros for ctr sha2Nithinsen Kaithakadan3-2/+41
Add async crypto algo macros for AES_CTR SHA256/384/512. Add support for these in dev octeon plugin. Type: feature Signed-off-by: Nithinsen Kaithakadan <nkaithakadan@marvell.com> Change-Id: I22e81c6ac5a549b2f12556b8c79257a20a5bd47d
2025-01-21octeon: add direct mode changes in crypto datapathNithinsen Kaithakadan2-48/+269
This patch introduces support for direct mode crypto submission on CPT. For multi-segmented buffers, scatter-gather submission mode will be utilized. Type: feature Signed-off-by: Nithinsen Kaithakadan <nkaithakadan@marvell.com> Change-Id: Idb99e6c9ea49028e11d3bf530c9559719c988252
2025-01-21octeon: rework octeon crypto frameworkNithinsen Kaithakadan2-61/+60
Added changes in the pending queue structure to incorporate each packet into a single inflight request entry. Type: improvement Change-Id: I18729e01b5f73b128ae245a1a8f77a4f97065026 Signed-off-by: Nithinsen Kaithakadan <nkaithakadan@marvell.com>
2025-01-21octeon: fix for async crypto session initNithinsen Kaithakadan2-10/+16
This patch resolves segmentation fault that occurs during the initialization of an asynchronous crypto session when processing the first packet in the data path. And resolves compilation failures. Type: fix Change-Id: I60e4060c65741a445fe02f01b3c94f627534ecef Signed-off-by: Nithinsen Kaithakadan <nkaithakadan@marvell.com>
2025-01-21dpdk: bump to DPDK 24.11.1Vladimir Smirnov7-17/+43
Bump DPDK version to 24.11.1. Reason behind going for 24.11.1 is that 24.11 was affected by CVE-2024-11614 which was fixed in the point release. Type: feature Change-Id: Ic49a35fe7ac782679df39145e3adfd06f047b031 Signed-off-by: Vladimir Smirnov <civil.over@gmail.com>
2025-01-21crypto-openssl: fixed tag and aad lengths for chacha-polyDamjan Marion1-1/+7
Type: improvement Change-Id: I6162b45875566cc705917a51b3f06e1490607c8b Signed-off-by: Damjan Marion <damarion@cisco.com>
2025-01-20tls: async event handling enhancementVarun Rapelly3-599/+345
This patch updates async processing logic by adding async event handlers separately for handshake, read and write events. Type: improvement Change-Id: I6366689fec7e29fa9850cb22e20ab3659bf5245a Signed-off-by: Varun Rapelly <vrapelly@marvell.com>