aboutsummaryrefslogtreecommitdiffstats
path: root/src/vnet/ipsec
AgeCommit message (Expand)AuthorFilesLines
2022-08-31ipsec: fix coverity 249212Andrew Yourtchenko1-2/+2
2022-08-24ipsec: fix coverity 249204Andrew Yourtchenko1-1/+1
2022-08-19ipsec: enable UDP encap for IPv6 ESP tun protectMatthew Smith7-49/+95
2022-08-11ipsec: Use .api declared error countersNeale Ranns6-179/+336
2022-08-02ipsec: fix coverity warnings found in fast path implementationPiotr Bronowski2-14/+15
2022-07-15ipsec: fast path outbound policy matching implementation for ipv6Piotr Bronowski8-171/+227
2022-06-29ipsec: show fast path flag in cliFan Zhang1-8/+27
2022-06-29ipsec: add fast path configuration parserPiotr Bronowski1-2/+19
2022-06-29ipsec: add spd fast path matchingPiotr Bronowski3-0/+584
2022-06-29ipsec: make match function inlinePiotr Bronowski2-145/+171
2022-06-29ipsec: add/delete ipsec fast path policyPiotr Bronowski6-59/+717
2022-06-28ipsec: introduce spd fast path typesPiotr Bronowski1-0/+63
2022-06-28ipsec: change wildcard value for any protocol of spd policyPiotr Bronowski8-58/+300
2022-05-13vlib: process startup config exec scripts line by lineDamjan Marion1-1/+1
2022-05-03ipsec: support per next-header next-nodesBenoît Ganne3-36/+100
2022-04-14ipsec: perf improvement of ipsec4_input_node using flow cacheZachary Leaf8-54/+311
2022-04-04vppinfra: make _vec_len() read-onlyDamjan Marion1-1/+1
2022-03-10ipsec: remove the redundant codeMohsin Kazmi1-1/+0
2022-03-08ipsec: input: drop by default for non-matching pktsZachary Leaf1-0/+14
2022-02-18ipsec: fix vector after remove entry in spdGabriel Oginski1-1/+1
2022-02-17ipsec: Improve the handling of NAT-T keepalive messagesNeale Ranns1-8/+21
2022-01-17ipsec: IPSec interface correct drop w/ no protectionNeale Ranns3-8/+19
2021-12-14api: verify message size on receiptKlement Sekera1-0/+4
2021-12-04ipsec: fix async buffer leakMatthew Smith3-3/+2
2021-12-03ip: extension header parsing fails for fragment headerOle Troan1-3/+14
2021-11-19fib: Don't use [midchain] adjacencies to change an interface's feature arcNeale Ranns8-192/+123
2021-11-03ipsec: Support the single IPSec interface dumpNeale Ranns1-0/+5
2021-10-31ipsec: silence gcc-11 parentheses warningDamjan Marion1-1/+1
2021-10-22ipsec: add api test fileFilip Tehlar1-0/+597
2021-10-12ipsec: Performance improvement of ipsec4_output_node using flow cacheGovindarajan Mohandoss7-17/+264
2021-10-11docs: nitfixes in FEATURE.yamlNathan Skrzypczak1-1/+1
2021-10-07ipsec: fix protect update log if nexthop is NULLBenoît Ganne1-2/+3
2021-10-06docs: vnet comment nitfixesNathan Skrzypczak1-2/+2
2021-09-29ipsec: Record the number of packets lost from an SANeale Ranns6-22/+88
2021-07-29ipsec: move startup config to common fileZachary Leaf3-51/+55
2021-07-15misc: replace CLIB_PREFETCH with clib_prefetch_{load,store}Damjan Marion2-6/+6
2021-07-13misc: remove vnet_all_api_h and vnet_msg_enumFilip Tehlar1-4/+0
2021-07-02ipsec: ADD/update IPSec documentationNeale Ranns1-0/+199
2021-06-30ipsec: Derive the TUNNEL_V6 flag from the configured address typesNeale Ranns2-1/+8
2021-06-29ipsec: Fix setting the hi-sequence number for decryptNeale Ranns7-135/+229
2021-06-29ipsec: increment SPD policy counters for bypass and discard actions in ipsec4...Zachary Leaf1-0/+20
2021-06-28ipsec: Split the SA add_del API into an separate add and delNeale Ranns2-36/+98
2021-06-22ipsec: api cleanupFilip Tehlar2-81/+19
2021-06-15ipsec: fix length check when adding footer+icvBenoît Ganne1-1/+2
2021-06-14linux-cp: Add tests for tun devicesNeale Ranns3-0/+46
2021-06-08ipsec: fix async crypto frame leakMatthew Smith2-54/+50
2021-06-04ipsec: fix crypto ops in esp decryptBenoît Ganne1-2/+7
2021-05-21ipsec: Default the IPSec interface MTU to 9000Neale Ranns1-0/+1
2021-05-14vlib: pass node runtime to vlib_buffer_enqueue_to_thread()Damjan Marion1-1/+1
2021-05-06vlib: fix the offload flags sizeMohsin Kazmi1-1/+1