aboutsummaryrefslogtreecommitdiffstats
path: root/src/vnet/ipsec
AgeCommit message (Expand)AuthorFilesLines
2020-01-07ipsec: Add FEATURE/yamlNeale Ranns1-0/+11
2020-01-04ipsec: AH copy destination and source address from templateNeale Ranns1-1/+1
2020-01-04ipsec: Targeted unit testingNeale Ranns6-97/+114
2019-12-23ipsec: Test and fix IPSec worker hand-offNeale Ranns3-6/+6
2019-12-18ipsec: Fix decap of IPSEC/GRE in transport modeNeale Ranns1-6/+44
2019-12-17ipsec: bind an SA to a workerNeale Ranns10-43/+642
2019-12-10ipsec: Init salt value in SA creation CLI (so it's not random)Neale Ranns1-0/+1
2019-12-10api: multiple connections per processDave Barach1-1/+1
2019-12-09ipsec: make sure pad_bytes does not exceed pad data sizeBenoît Ganne1-1/+5
2019-12-03ipip: Tunnel flags controlling copying data to/from payload/encapNeale Ranns2-3/+4
2019-12-03ipsec: Changes to make ipsec encoder/decoders reusable by the pluginsPrashant Maheshwari6-255/+365
2019-11-22ipsec: fix trailing data overflowFilip Tehlar1-23/+21
2019-11-20ipsec: Honour the renumber argument when selecting show instnaceNeale Ranns1-1/+1
2019-11-18ipsec: Coverity warningsNeale Ranns2-8/+12
2019-11-08ipsec: remove dedicated IPSec tunnelsNeale Ranns15-1654/+494
2019-11-05ipsec: ipsec-input: check for too-short packetsBenoît Ganne1-12/+25
2019-10-31ipsec: fix esp trace seq number overflowBenoît Ganne2-4/+12
2019-10-22ikev2: fix GCM cipherFilip Tehlar1-9/+17
2019-10-18ipsec: fix tunnel protection removalFilip Tehlar1-1/+1
2019-09-30ipsec: fix use-after-freeBenoît Ganne1-3/+7
2019-09-30ipsec: add insecure option for format of SAChristian E. Hopps3-3/+9
2019-09-27ipsec: support 4o6 and 6o4 for tunnel protectNeale Ranns2-25/+31
2019-09-25ip: respect buffer boundary when searching for ipv6 headersKlement Sekera1-1/+2
2019-09-02ipsec ip tcp l2: multiarch nodes cannot be declared as staticDamjan Marion1-4/+4
2019-08-27ipsec: Add 'detail' option to 'sh ipsec sa'Neale Ranns1-4/+8
2019-08-27ipsec: Fix NULL encryption algorithmNeale Ranns2-1/+9
2019-08-16ipsec: fix missed IPSEC_INTEG_ALG_MD5_96Dmitry Vakhrushev1-0/+5
2019-08-01ipsec: Redo the anit-replay check post decryptNeale Ranns2-0/+36
2019-07-31ipsec: Typo in flag nameNeale Ranns1-1/+1
2019-07-24ipsec: GCM, Anti-replay and ESN fixessNeale Ranns4-42/+129
2019-07-19fib: FIB Entry trackingNeale Ranns1-10/+6
2019-07-19ipsec: register for port 4500 at INITNeale Ranns1-13/+5
2019-07-16ipsec: handle UDP keepalivesNeale Ranns8-38/+227
2019-07-16ipsec: coverity found c-n-p errorNeale Ranns1-1/+1
2019-07-15ipsec: rewind missing from dual loopNeale Ranns1-4/+9
2019-07-12ipsec: drop outbound ESP when no crypto alg setMatthew Smith4-5/+162
2019-07-12ipsec: Reference count the SAsNeale Ranns9-166/+155
2019-07-12ip ipsec: Remove IPSec SPI-0 punt reasonNeale Ranns3-24/+9
2019-07-11ipsec: Revert "IPSEC: remove byte swap operations in DP during SPD classify"Neale Ranns5-27/+26
2019-07-11ipsec: Revert "IPSEC: remove double byte swap of IP addresses"Neale Ranns1-10/+18
2019-06-25ipsec: print spi in hexadecimalGuillaume Solignac6-15/+16
2019-06-25ipsec: return error if the engine backend has no handler for theNeale Ranns1-1/+23
2019-06-19ipsec: fix l2 header handling in ah encryptKlement Sekera1-6/+6
2019-06-18ipsec: ipsec-tun protectNeale Ranns16-131/+1481
2019-06-17ipsec: One DPO per SANeale Ranns5-24/+16
2019-06-17ipsec: return original SA create error for tunnel createNeale Ranns1-2/+2
2019-06-14ipsec: Display user specified SPI ID not VPP's indexNeale Ranns1-1/+3
2019-06-14ipsec: Correctly rewind the buffer to the IP header when punting UDP encapped...Neale Ranns1-3/+5
2019-06-13ipsec: remove spurious warningsNeale Ranns3-7/+0
2019-06-05ipsec: ah_decrypt reworkFilip Tehlar1-167/+283