aboutsummaryrefslogtreecommitdiffstats
path: root/src/vnet/ipsec
AgeCommit message (Expand)AuthorFilesLines
2021-06-30ipsec: Derive the TUNNEL_V6 flag from the configured address typesNeale Ranns2-1/+8
2021-06-29ipsec: Fix setting the hi-sequence number for decryptNeale Ranns7-135/+229
2021-06-29ipsec: increment SPD policy counters for bypass and discard actions in ipsec4...Zachary Leaf1-0/+20
2021-06-28ipsec: Split the SA add_del API into an separate add and delNeale Ranns2-36/+98
2021-06-22ipsec: api cleanupFilip Tehlar2-81/+19
2021-06-15ipsec: fix length check when adding footer+icvBenoît Ganne1-1/+2
2021-06-14linux-cp: Add tests for tun devicesNeale Ranns3-0/+46
2021-06-08ipsec: fix async crypto frame leakMatthew Smith2-54/+50
2021-06-04ipsec: fix crypto ops in esp decryptBenoît Ganne1-2/+7
2021-05-21ipsec: Default the IPSec interface MTU to 9000Neale Ranns1-0/+1
2021-05-14vlib: pass node runtime to vlib_buffer_enqueue_to_thread()Damjan Marion1-1/+1
2021-05-06vlib: fix the offload flags sizeMohsin Kazmi1-1/+1
2021-05-05vlib: move offload flags to 1st cacheline in vlib_buffer_tMohsin Kazmi1-1/+1
2021-04-20ipsec: remove WITH_LIBSSL macrosDamjan Marion2-125/+3
2021-04-07crypto: fix ops flags in crypto sw schedulerBenoît Ganne1-0/+2
2021-03-25stats: python vpp_stats rewrite to access stat segment directlyOle Troan1-5/+4
2021-03-15ipsec: allow inbound non-tunnel SA through CLIMohammed Hawari1-6/+0
2021-03-14ip: extend punt CLI for exception packetsMohammed Hawari2-9/+11
2021-03-05ipsec: Support async mode per-SANeale Ranns10-204/+231
2021-03-05ipsec: Submit fuller async framesNeale Ranns3-125/+117
2021-02-26ipsec: move the IPSec SA pool out of ipsec_mainNeale Ranns13-84/+76
2021-02-25tests: Add tests for IPSec async mode using the crypto SW schedulerNeale Ranns1-1/+2
2021-02-25ipsec: ipsec.h tidy upNeale Ranns6-56/+86
2021-02-25ipsec: enable input features on tunnelsBrian Russell3-22/+75
2021-02-15vlib: refactor checksum offload supportMohsin Kazmi1-35/+40
2021-02-12ipsec: Store thread-index in buffer meta-data during SA handoffNeale Ranns6-32/+19
2021-02-10ipsec: Use the new tunnel API types to add flow label and TTL copyNeale Ranns13-259/+365
2021-02-09Revert "ipsec: Use the new tunnel API types to add flow label and TTL copy"Matthew Smith13-329/+230
2021-02-08ipsec: Use the new tunnel API types to add flow label and TTL copyNeale Ranns13-230/+329
2021-02-08ipsec: Checking wrong DB for initialistationNeale Ranns1-17/+17
2021-02-08tunnel: support copying TTL and flow label from inner to outerNeale Ranns1-5/+4
2021-02-06ipsec: CLI improvement for udp port encapMohammed Hawari1-0/+5
2021-02-05ipsec: add support for AES CTRBenoît Ganne6-139/+182
2021-02-04ipsec: one thread index per-SANeale Ranns8-57/+36
2021-01-21ipsec: Honour IPSec SA table-ID over APINeale Ranns2-11/+9
2021-01-21ipsec: Tunnelled packets are locally generatedNeale Ranns1-0/+1
2021-01-18ipsec: Support MPLS over IPSec[46] interfaceNeale Ranns7-101/+227
2021-01-07ipsec: Deprecated the old IPsec Tunnel interfaceNeale Ranns5-594/+4
2021-01-06ipsec: Mark the interface create reply deprecatedNeale Ranns1-0/+1
2021-01-05ipsec: ipsec cli nexthop erroryedg1-1/+1
2020-12-18ipsec: fixed esp_decrypt pkt len after icv movedPiotrX Kleski1-6/+11
2020-12-14misc: move to new pool_foreach macrosDamjan Marion6-35/+35
2020-12-01ipsec: change predictionFan Zhang2-2/+2
2020-11-26gre: Move to new API generated types/messagesNeale Ranns1-1/+1
2020-11-25ipsec: A P2MP ipsec interface is NBMANeale Ranns1-0/+1
2020-11-09ipsec: fix unformat typesBenoît Ganne1-2/+2
2020-11-06ipsec: add support for tx-table-id in cli + exampleBenoît Ganne2-3/+17
2020-11-02ipsec: Tunnel SA DSCP behaviourNeale Ranns9-41/+342
2020-10-28misc: Break the big IP header files to improve compile timeNeale Ranns1-0/+1
2020-10-24ipsec: remove pending nodeFan Zhang3-104/+127