summaryrefslogtreecommitdiffstats
path: root/src/vnet/ipsec
AgeCommit message (Expand)AuthorFilesLines
2021-03-15ipsec: allow inbound non-tunnel SA through CLIMohammed Hawari1-6/+0
2021-03-14ip: extend punt CLI for exception packetsMohammed Hawari2-9/+11
2021-03-05ipsec: Support async mode per-SANeale Ranns10-204/+231
2021-03-05ipsec: Submit fuller async framesNeale Ranns3-125/+117
2021-02-26ipsec: move the IPSec SA pool out of ipsec_mainNeale Ranns13-84/+76
2021-02-25tests: Add tests for IPSec async mode using the crypto SW schedulerNeale Ranns1-1/+2
2021-02-25ipsec: ipsec.h tidy upNeale Ranns6-56/+86
2021-02-25ipsec: enable input features on tunnelsBrian Russell3-22/+75
2021-02-15vlib: refactor checksum offload supportMohsin Kazmi1-35/+40
2021-02-12ipsec: Store thread-index in buffer meta-data during SA handoffNeale Ranns6-32/+19
2021-02-10ipsec: Use the new tunnel API types to add flow label and TTL copyNeale Ranns13-259/+365
2021-02-09Revert "ipsec: Use the new tunnel API types to add flow label and TTL copy"Matthew Smith13-329/+230
2021-02-08ipsec: Use the new tunnel API types to add flow label and TTL copyNeale Ranns13-230/+329
2021-02-08ipsec: Checking wrong DB for initialistationNeale Ranns1-17/+17
2021-02-08tunnel: support copying TTL and flow label from inner to outerNeale Ranns1-5/+4
2021-02-06ipsec: CLI improvement for udp port encapMohammed Hawari1-0/+5
2021-02-05ipsec: add support for AES CTRBenoît Ganne6-139/+182
2021-02-04ipsec: one thread index per-SANeale Ranns8-57/+36
2021-01-21ipsec: Honour IPSec SA table-ID over APINeale Ranns2-11/+9
2021-01-21ipsec: Tunnelled packets are locally generatedNeale Ranns1-0/+1
2021-01-18ipsec: Support MPLS over IPSec[46] interfaceNeale Ranns7-101/+227
2021-01-07ipsec: Deprecated the old IPsec Tunnel interfaceNeale Ranns5-594/+4
2021-01-06ipsec: Mark the interface create reply deprecatedNeale Ranns1-0/+1
2021-01-05ipsec: ipsec cli nexthop erroryedg1-1/+1
2020-12-18ipsec: fixed esp_decrypt pkt len after icv movedPiotrX Kleski1-6/+11
2020-12-14misc: move to new pool_foreach macrosDamjan Marion6-35/+35
2020-12-01ipsec: change predictionFan Zhang2-2/+2
2020-11-26gre: Move to new API generated types/messagesNeale Ranns1-1/+1
2020-11-25ipsec: A P2MP ipsec interface is NBMANeale Ranns1-0/+1
2020-11-09ipsec: fix unformat typesBenoît Ganne1-2/+2
2020-11-06ipsec: add support for tx-table-id in cli + exampleBenoît Ganne2-3/+17
2020-11-02ipsec: Tunnel SA DSCP behaviourNeale Ranns9-41/+342
2020-10-28misc: Break the big IP header files to improve compile timeNeale Ranns1-0/+1
2020-10-24ipsec: remove pending nodeFan Zhang3-104/+127
2020-10-21ipsec: support for multipoint on ipsec interfacesNeale Ranns4-6/+63
2020-10-21ipsec: Add to the SA info directly in the bihashNeale Ranns5-81/+83
2020-10-21misc: minimize dependencies on udp.hFlorin Coras4-4/+3
2020-10-20ipsec: Stack the adj from the destination in the SA's TX tableNeale Ranns1-1/+1
2020-10-19ipsec: Layout and prefetching of SA structNeale Ranns3-26/+44
2020-10-16ipsec: fix instance, and cli del for new ipsec interfaceEric Kinzie2-4/+4
2020-10-08ipsec: Allow SAs with NULL auth &crypto on IPSec interfaceNeale Ranns1-2/+3
2020-10-05ipsec: Use bihash for tunnel lookupNeale Ranns6-123/+269
2020-09-17teib: Use ip_address_t not ip46_address_tNeale Ranns1-23/+5
2020-09-17teib: Add adj-fibs for peers/adjacencies on p2mp interfaceNeale Ranns1-1/+3
2020-09-16api: clean up use of deprecated flagOle Troan1-2/+2
2020-09-07ipsec: fix padding/alignment for native IPsec encryptionChristian Hopps5-19/+19
2020-09-04ipsec: fix trace of GRE_teb packetsChristian Hopps1-2/+5
2020-09-04ipsec: cli: add missing flags for SA addChristian Hopps1-0/+12
2020-09-02ipsec: add ipsec set async mode apiYulong Pei2-1/+26
2020-08-27ipsec: Deprecate old interface APINeale Ranns1-1/+3