Age | Commit message (Expand) | Author | Files | Lines |
2023-11-06 | ipsec: delete redundant code |  Dengfeng Liu | 1 | -4/+0 |
2023-10-31 | ipsec: separate UDP and UDP-encapsulated ESP packet processing |  vinay tripathi | 1 | -8/+33 |
2023-10-31 | ipsec: move udp/esp packet processing in the inline function ipsec_esp_packet... |  vinay tripathi | 1 | -174/+181 |
2023-10-30 | ipsec: huge anti-replay window support |  Maxime Peim | 10 | -168/+680 |
2023-09-12 | ipsec: improve fast path policy searching performance |  Xiaoming Jiang | 2 | -35/+59 |
2023-09-07 | ipsec: clear L4-cksum flags when decap'ing packets |  Frédéric Perrin | 2 | -1/+5 |
2023-08-08 | ipsec: add support for RFC-4543 ENCR_NULL_AUTH_AES_GMAC |  Benoît Ganne | 6 | -3/+70 |
2023-07-31 | ipsec: fix IPv6 IPsec tunnel punting |  Sylvain Cadilhac | 1 | -0/+1 |
2023-07-27 | ipsec: fix sa bind cli |  Maxime Peim | 1 | -1/+1 |
2023-07-21 | ipsec: fix logic in ext_hdr_is_pre_esp |  Piotr Bronowski | 1 | -3/+3 |
2023-07-06 | api: ipsec - Mark old message versions as deprecated |  Ondrej Fabry | 1 | -0/+12 |
2023-06-23 | ipsec: manually binding an SA to a worker |  Maxime Peim | 6 | -6/+272 |
2023-06-08 | crypto: use fixed crypto frame pool |  gaoginskx | 3 | -0/+31 |
2023-06-01 | crypto: make crypto-dispatch node working in adaptive mode |  Xiaoming Jiang | 3 | -29/+3 |
2023-05-29 | ipsec: fix ipsec_set_next_index set with wrong sa index when async frame comm... |  Xiaoming Jiang | 3 | -27/+39 |
2023-03-23 | ipsec: make pre-shared keys harder to misuse |  Benoît Ganne | 8 | -137/+122 |
2023-03-23 | ipsec: add per-SA error counters |  Arthur de Kerhor | 11 | -115/+337 |
2023-03-20 | ipsec: set fast path 5tuple ip addresses based on sa traffic selector values |  Piotr Bronowski | 1 | -4/+35 |
2023-02-08 | ipsec: fix AES CBC IV generation (CVE-2022-46397) |  Benoît Ganne | 2 | -27/+63 |
2023-02-06 | ipsec: fix async crypto linked keys memory leak |  Benoît Ganne | 1 | -1/+6 |
2023-01-16 | ipsec: fix transpose local ip range position with remote ip range in fast pat... |  Piotr Bronowski | 2 | -13/+13 |
2022-12-16 | ipsec: new api for sa ips and ports updates |  Arthur de Kerhor | 5 | -0/+186 |
2022-11-29 | ipsec: use correct reply message |  Vratko Polak | 2 | -1/+2 |
2022-11-28 | ipsec: remove redundant policy array in fast path spd |  Piotr Bronowski | 3 | -90/+178 |
2022-11-21 | ipsec: improve ipsec policy adding performance |  Xiaoming Jiang | 1 | -19/+15 |
2022-11-18 | ipsec: Failure at the start of the batch should not invalidate the rest of th... |  Neale Ranns | 1 | -1/+1 |
2022-10-12 | misc: fix issues reported by clang-15 |  Damjan Marion | 2 | -6/+3 |
2022-09-21 | ipsec: introduce fast path ipv6 inbound matching |  Piotr Bronowski | 4 | -55/+197 |
2022-09-14 | ipsec: make chacha20-poly1305 available via API |  Vladimir Ratnikov | 4 | -14/+27 |
2022-09-12 | ipsec: introduce fast path ipv4 inbound matching |  Piotr Bronowski | 9 | -164/+628 |
2022-08-31 | ipsec: fix coverity 249212 |  Andrew Yourtchenko | 1 | -2/+2 |
2022-08-24 | ipsec: fix coverity 249204 |  Andrew Yourtchenko | 1 | -1/+1 |
2022-08-19 | ipsec: enable UDP encap for IPv6 ESP tun protect |  Matthew Smith | 7 | -49/+95 |
2022-08-11 | ipsec: Use .api declared error counters |  Neale Ranns | 6 | -179/+336 |
2022-08-02 | ipsec: fix coverity warnings found in fast path implementation |  Piotr Bronowski | 2 | -14/+15 |
2022-07-15 | ipsec: fast path outbound policy matching implementation for ipv6 |  Piotr Bronowski | 8 | -171/+227 |
2022-06-29 | ipsec: show fast path flag in cli |  Fan Zhang | 1 | -8/+27 |
2022-06-29 | ipsec: add fast path configuration parser |  Piotr Bronowski | 1 | -2/+19 |
2022-06-29 | ipsec: add spd fast path matching |  Piotr Bronowski | 3 | -0/+584 |
2022-06-29 | ipsec: make match function inline |  Piotr Bronowski | 2 | -145/+171 |
2022-06-29 | ipsec: add/delete ipsec fast path policy |  Piotr Bronowski | 6 | -59/+717 |
2022-06-28 | ipsec: introduce spd fast path types |  Piotr Bronowski | 1 | -0/+63 |
2022-06-28 | ipsec: change wildcard value for any protocol of spd policy |  Piotr Bronowski | 8 | -58/+300 |
2022-05-13 | vlib: process startup config exec scripts line by line |  Damjan Marion | 1 | -1/+1 |
2022-05-03 | ipsec: support per next-header next-nodes |  Benoît Ganne | 3 | -36/+100 |
2022-04-14 | ipsec: perf improvement of ipsec4_input_node using flow cache |  Zachary Leaf | 8 | -54/+311 |
2022-04-04 | vppinfra: make _vec_len() read-only |  Damjan Marion | 1 | -1/+1 |
2022-03-10 | ipsec: remove the redundant code |  Mohsin Kazmi | 1 | -1/+0 |
2022-03-08 | ipsec: input: drop by default for non-matching pkts |  Zachary Leaf | 1 | -0/+14 |
2022-02-18 | ipsec: fix vector after remove entry in spd |  Gabriel Oginski | 1 | -1/+1 |