summaryrefslogtreecommitdiffstats
path: root/src/vnet/ipsec
AgeCommit message (Expand)AuthorFilesLines
2023-10-31ipsec: separate UDP and UDP-encapsulated ESP packet processingvinay tripathi1-8/+33
2023-10-31ipsec: move udp/esp packet processing in the inline function ipsec_esp_packet...vinay tripathi1-174/+181
2023-10-30ipsec: huge anti-replay window supportMaxime Peim10-168/+680
2023-09-12ipsec: improve fast path policy searching performanceXiaoming Jiang2-35/+59
2023-09-07ipsec: clear L4-cksum flags when decap'ing packetsFrédéric Perrin2-1/+5
2023-08-08ipsec: add support for RFC-4543 ENCR_NULL_AUTH_AES_GMACBenoît Ganne6-3/+70
2023-07-31ipsec: fix IPv6 IPsec tunnel puntingSylvain Cadilhac1-0/+1
2023-07-27ipsec: fix sa bind cliMaxime Peim1-1/+1
2023-07-21ipsec: fix logic in ext_hdr_is_pre_espPiotr Bronowski1-3/+3
2023-07-06api: ipsec - Mark old message versions as deprecatedOndrej Fabry1-0/+12
2023-06-23ipsec: manually binding an SA to a workerMaxime Peim6-6/+272
2023-06-08crypto: use fixed crypto frame poolgaoginskx3-0/+31
2023-06-01crypto: make crypto-dispatch node working in adaptive modeXiaoming Jiang3-29/+3
2023-05-29ipsec: fix ipsec_set_next_index set with wrong sa index when async frame comm...Xiaoming Jiang3-27/+39
2023-03-23ipsec: make pre-shared keys harder to misuseBenoît Ganne8-137/+122
2023-03-23ipsec: add per-SA error countersArthur de Kerhor11-115/+337
2023-03-20ipsec: set fast path 5tuple ip addresses based on sa traffic selector valuesPiotr Bronowski1-4/+35
2023-02-08ipsec: fix AES CBC IV generation (CVE-2022-46397)Benoît Ganne2-27/+63
2023-02-06ipsec: fix async crypto linked keys memory leakBenoît Ganne1-1/+6
2023-01-16ipsec: fix transpose local ip range position with remote ip range in fast pat...Piotr Bronowski2-13/+13
2022-12-16ipsec: new api for sa ips and ports updatesArthur de Kerhor5-0/+186
2022-11-29ipsec: use correct reply messageVratko Polak2-1/+2
2022-11-28ipsec: remove redundant policy array in fast path spdPiotr Bronowski3-90/+178
2022-11-21ipsec: improve ipsec policy adding performanceXiaoming Jiang1-19/+15
2022-11-18ipsec: Failure at the start of the batch should not invalidate the rest of th...Neale Ranns1-1/+1
2022-10-12misc: fix issues reported by clang-15Damjan Marion2-6/+3
2022-09-21ipsec: introduce fast path ipv6 inbound matchingPiotr Bronowski4-55/+197
2022-09-14ipsec: make chacha20-poly1305 available via APIVladimir Ratnikov4-14/+27
2022-09-12ipsec: introduce fast path ipv4 inbound matchingPiotr Bronowski9-164/+628
2022-08-31ipsec: fix coverity 249212Andrew Yourtchenko1-2/+2
2022-08-24ipsec: fix coverity 249204Andrew Yourtchenko1-1/+1
2022-08-19ipsec: enable UDP encap for IPv6 ESP tun protectMatthew Smith7-49/+95
2022-08-11ipsec: Use .api declared error countersNeale Ranns6-179/+336
2022-08-02ipsec: fix coverity warnings found in fast path implementationPiotr Bronowski2-14/+15
2022-07-15ipsec: fast path outbound policy matching implementation for ipv6Piotr Bronowski8-171/+227
2022-06-29ipsec: show fast path flag in cliFan Zhang1-8/+27
2022-06-29ipsec: add fast path configuration parserPiotr Bronowski1-2/+19
2022-06-29ipsec: add spd fast path matchingPiotr Bronowski3-0/+584
2022-06-29ipsec: make match function inlinePiotr Bronowski2-145/+171
2022-06-29ipsec: add/delete ipsec fast path policyPiotr Bronowski6-59/+717
2022-06-28ipsec: introduce spd fast path typesPiotr Bronowski1-0/+63
2022-06-28ipsec: change wildcard value for any protocol of spd policyPiotr Bronowski8-58/+300
2022-05-13vlib: process startup config exec scripts line by lineDamjan Marion1-1/+1
2022-05-03ipsec: support per next-header next-nodesBenoît Ganne3-36/+100
2022-04-14ipsec: perf improvement of ipsec4_input_node using flow cacheZachary Leaf8-54/+311
2022-04-04vppinfra: make _vec_len() read-onlyDamjan Marion1-1/+1
2022-03-10ipsec: remove the redundant codeMohsin Kazmi1-1/+0
2022-03-08ipsec: input: drop by default for non-matching pktsZachary Leaf1-0/+14
2022-02-18ipsec: fix vector after remove entry in spdGabriel Oginski1-1/+1
2022-02-17ipsec: Improve the handling of NAT-T keepalive messagesNeale Ranns1-8/+21