aboutsummaryrefslogtreecommitdiffstats
path: root/src/vnet/ipsec
AgeCommit message (Expand)AuthorFilesLines
2023-06-01crypto: make crypto-dispatch node working in adaptive modeXiaoming Jiang3-29/+3
2023-05-29ipsec: fix ipsec_set_next_index set with wrong sa index when async frame comm...Xiaoming Jiang3-27/+39
2023-03-23ipsec: make pre-shared keys harder to misuseBenoît Ganne8-137/+122
2023-03-23ipsec: add per-SA error countersArthur de Kerhor11-115/+337
2023-03-20ipsec: set fast path 5tuple ip addresses based on sa traffic selector valuesPiotr Bronowski1-4/+35
2023-02-08ipsec: fix AES CBC IV generation (CVE-2022-46397)Benoît Ganne2-27/+63
2023-02-06ipsec: fix async crypto linked keys memory leakBenoît Ganne1-1/+6
2023-01-16ipsec: fix transpose local ip range position with remote ip range in fast pat...Piotr Bronowski2-13/+13
2022-12-16ipsec: new api for sa ips and ports updatesArthur de Kerhor5-0/+186
2022-11-29ipsec: use correct reply messageVratko Polak2-1/+2
2022-11-28ipsec: remove redundant policy array in fast path spdPiotr Bronowski3-90/+178
2022-11-21ipsec: improve ipsec policy adding performanceXiaoming Jiang1-19/+15
2022-11-18ipsec: Failure at the start of the batch should not invalidate the rest of th...Neale Ranns1-1/+1
2022-10-12misc: fix issues reported by clang-15Damjan Marion2-6/+3
2022-09-21ipsec: introduce fast path ipv6 inbound matchingPiotr Bronowski4-55/+197
2022-09-14ipsec: make chacha20-poly1305 available via APIVladimir Ratnikov4-14/+27
2022-09-12ipsec: introduce fast path ipv4 inbound matchingPiotr Bronowski9-164/+628
2022-08-31ipsec: fix coverity 249212Andrew Yourtchenko1-2/+2
2022-08-24ipsec: fix coverity 249204Andrew Yourtchenko1-1/+1
2022-08-19ipsec: enable UDP encap for IPv6 ESP tun protectMatthew Smith7-49/+95
2022-08-11ipsec: Use .api declared error countersNeale Ranns6-179/+336
2022-08-02ipsec: fix coverity warnings found in fast path implementationPiotr Bronowski2-14/+15
2022-07-15ipsec: fast path outbound policy matching implementation for ipv6Piotr Bronowski8-171/+227
2022-06-29ipsec: show fast path flag in cliFan Zhang1-8/+27
2022-06-29ipsec: add fast path configuration parserPiotr Bronowski1-2/+19
2022-06-29ipsec: add spd fast path matchingPiotr Bronowski3-0/+584
2022-06-29ipsec: make match function inlinePiotr Bronowski2-145/+171
2022-06-29ipsec: add/delete ipsec fast path policyPiotr Bronowski6-59/+717
2022-06-28ipsec: introduce spd fast path typesPiotr Bronowski1-0/+63
2022-06-28ipsec: change wildcard value for any protocol of spd policyPiotr Bronowski8-58/+300
2022-05-13vlib: process startup config exec scripts line by lineDamjan Marion1-1/+1
2022-05-03ipsec: support per next-header next-nodesBenoît Ganne3-36/+100
2022-04-14ipsec: perf improvement of ipsec4_input_node using flow cacheZachary Leaf8-54/+311
2022-04-04vppinfra: make _vec_len() read-onlyDamjan Marion1-1/+1
2022-03-10ipsec: remove the redundant codeMohsin Kazmi1-1/+0
2022-03-08ipsec: input: drop by default for non-matching pktsZachary Leaf1-0/+14
2022-02-18ipsec: fix vector after remove entry in spdGabriel Oginski1-1/+1
2022-02-17ipsec: Improve the handling of NAT-T keepalive messagesNeale Ranns1-8/+21
2022-01-17ipsec: IPSec interface correct drop w/ no protectionNeale Ranns3-8/+19
2021-12-14api: verify message size on receiptKlement Sekera1-0/+4
2021-12-04ipsec: fix async buffer leakMatthew Smith3-3/+2
2021-12-03ip: extension header parsing fails for fragment headerOle Troan1-3/+14
2021-11-19fib: Don't use [midchain] adjacencies to change an interface's feature arcNeale Ranns8-192/+123
2021-11-03ipsec: Support the single IPSec interface dumpNeale Ranns1-0/+5
2021-10-31ipsec: silence gcc-11 parentheses warningDamjan Marion1-1/+1
2021-10-22ipsec: add api test fileFilip Tehlar1-0/+597
2021-10-12ipsec: Performance improvement of ipsec4_output_node using flow cacheGovindarajan Mohandoss7-17/+264
2021-10-11docs: nitfixes in FEATURE.yamlNathan Skrzypczak1-1/+1
2021-10-07ipsec: fix protect update log if nexthop is NULLBenoît Ganne1-2/+3
2021-10-06docs: vnet comment nitfixesNathan Skrzypczak1-2/+2