summaryrefslogtreecommitdiffstats
path: root/src/vnet/ipsec
AgeCommit message (Expand)AuthorFilesLines
2022-02-17ipsec: Improve the handling of NAT-T keepalive messagesNeale Ranns1-8/+21
2022-01-17ipsec: IPSec interface correct drop w/ no protectionNeale Ranns3-8/+19
2021-12-14api: verify message size on receiptKlement Sekera1-0/+4
2021-12-04ipsec: fix async buffer leakMatthew Smith3-3/+2
2021-12-03ip: extension header parsing fails for fragment headerOle Troan1-3/+14
2021-11-19fib: Don't use [midchain] adjacencies to change an interface's feature arcNeale Ranns8-192/+123
2021-11-03ipsec: Support the single IPSec interface dumpNeale Ranns1-0/+5
2021-10-31ipsec: silence gcc-11 parentheses warningDamjan Marion1-1/+1
2021-10-22ipsec: add api test fileFilip Tehlar1-0/+597
2021-10-12ipsec: Performance improvement of ipsec4_output_node using flow cacheGovindarajan Mohandoss7-17/+264
2021-10-11docs: nitfixes in FEATURE.yamlNathan Skrzypczak1-1/+1
2021-10-07ipsec: fix protect update log if nexthop is NULLBenoît Ganne1-2/+3
2021-10-06docs: vnet comment nitfixesNathan Skrzypczak1-2/+2
2021-09-29ipsec: Record the number of packets lost from an SANeale Ranns6-22/+88
2021-07-29ipsec: move startup config to common fileZachary Leaf3-51/+55
2021-07-15misc: replace CLIB_PREFETCH with clib_prefetch_{load,store}Damjan Marion2-6/+6
2021-07-13misc: remove vnet_all_api_h and vnet_msg_enumFilip Tehlar1-4/+0
2021-07-02ipsec: ADD/update IPSec documentationNeale Ranns1-0/+199
2021-06-30ipsec: Derive the TUNNEL_V6 flag from the configured address typesNeale Ranns2-1/+8
2021-06-29ipsec: Fix setting the hi-sequence number for decryptNeale Ranns7-135/+229
2021-06-29ipsec: increment SPD policy counters for bypass and discard actions in ipsec4...Zachary Leaf1-0/+20
2021-06-28ipsec: Split the SA add_del API into an separate add and delNeale Ranns2-36/+98
2021-06-22ipsec: api cleanupFilip Tehlar2-81/+19
2021-06-15ipsec: fix length check when adding footer+icvBenoît Ganne1-1/+2
2021-06-14linux-cp: Add tests for tun devicesNeale Ranns3-0/+46
2021-06-08ipsec: fix async crypto frame leakMatthew Smith2-54/+50
2021-06-04ipsec: fix crypto ops in esp decryptBenoît Ganne1-2/+7
2021-05-21ipsec: Default the IPSec interface MTU to 9000Neale Ranns1-0/+1
2021-05-14vlib: pass node runtime to vlib_buffer_enqueue_to_thread()Damjan Marion1-1/+1
2021-05-06vlib: fix the offload flags sizeMohsin Kazmi1-1/+1
2021-05-05vlib: move offload flags to 1st cacheline in vlib_buffer_tMohsin Kazmi1-1/+1
2021-04-20ipsec: remove WITH_LIBSSL macrosDamjan Marion2-125/+3
2021-04-07crypto: fix ops flags in crypto sw schedulerBenoît Ganne1-0/+2
2021-03-25stats: python vpp_stats rewrite to access stat segment directlyOle Troan1-5/+4
2021-03-15ipsec: allow inbound non-tunnel SA through CLIMohammed Hawari1-6/+0
2021-03-14ip: extend punt CLI for exception packetsMohammed Hawari2-9/+11
2021-03-05ipsec: Support async mode per-SANeale Ranns10-204/+231
2021-03-05ipsec: Submit fuller async framesNeale Ranns3-125/+117
2021-02-26ipsec: move the IPSec SA pool out of ipsec_mainNeale Ranns13-84/+76
2021-02-25tests: Add tests for IPSec async mode using the crypto SW schedulerNeale Ranns1-1/+2
2021-02-25ipsec: ipsec.h tidy upNeale Ranns6-56/+86
2021-02-25ipsec: enable input features on tunnelsBrian Russell3-22/+75
2021-02-15vlib: refactor checksum offload supportMohsin Kazmi1-35/+40
2021-02-12ipsec: Store thread-index in buffer meta-data during SA handoffNeale Ranns6-32/+19
2021-02-10ipsec: Use the new tunnel API types to add flow label and TTL copyNeale Ranns13-259/+365
2021-02-09Revert "ipsec: Use the new tunnel API types to add flow label and TTL copy"Matthew Smith13-329/+230
2021-02-08ipsec: Use the new tunnel API types to add flow label and TTL copyNeale Ranns13-230/+329
2021-02-08ipsec: Checking wrong DB for initialistationNeale Ranns1-17/+17
2021-02-08tunnel: support copying TTL and flow label from inner to outerNeale Ranns1-5/+4
2021-02-06ipsec: CLI improvement for udp port encapMohammed Hawari1-0/+5