From 1404698df397bc4d3007daea41f52ad75ed4486c Mon Sep 17 00:00:00 2001 From: Neale Ranns Date: Mon, 29 Jul 2019 14:49:52 +0000 Subject: ip: Ensure reassembly runs before IPSec decrypt. Type: fix Change-Id: I01eeedf8d5015b07b9422c65afe78bfe8177c22c Signed-off-by: Neale Ranns --- src/vnet/ip/ip6_reassembly.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'src/vnet/ip/ip6_reassembly.c') diff --git a/src/vnet/ip/ip6_reassembly.c b/src/vnet/ip/ip6_reassembly.c index 7b0d84de289..8d455e90e38 100644 --- a/src/vnet/ip/ip6_reassembly.c +++ b/src/vnet/ip/ip6_reassembly.c @@ -1181,7 +1181,9 @@ VLIB_REGISTER_NODE (ip6_reass_node_feature) = { VNET_FEATURE_INIT (ip6_reassembly_feature, static) = { .arc_name = "ip6-unicast", .node_name = "ip6-reassembly-feature", - .runs_before = VNET_FEATURES ("ip6-lookup"), + .runs_before = VNET_FEATURES ("ip6-lookup", + "esp6-decrypt", + "ah6-decrypt"), .runs_after = 0, }; /* *INDENT-ON* */ -- cgit 1.2.3-korg