From 45d6d83761cd8c09c0a6430d11f70c37c3df256e Mon Sep 17 00:00:00 2001 From: Neale Ranns Date: Tue, 19 Jan 2021 13:38:47 +0000 Subject: ipsec: Tunnelled packets are locally generated Type: fix this means we 1) don't decrement TTL and (for v6) can fragment. Signed-off-by: Neale Ranns Change-Id: I0f718da7dcaba834ad495ae9242a9a58c9e7c184 --- src/vnet/ipsec/esp_encrypt.c | 1 + 1 file changed, 1 insertion(+) (limited to 'src/vnet/ipsec/esp_encrypt.c') diff --git a/src/vnet/ipsec/esp_encrypt.c b/src/vnet/ipsec/esp_encrypt.c index bd6e7641f4a..4f6976baaee 100644 --- a/src/vnet/ipsec/esp_encrypt.c +++ b/src/vnet/ipsec/esp_encrypt.c @@ -779,6 +779,7 @@ esp_encrypt_inline (vlib_main_t *vm, vlib_node_runtime_t *node, len = payload_len_total + hdr_len - len; ip6->payload_length = clib_net_to_host_u16 (len); + b[0]->flags |= VNET_BUFFER_F_LOCALLY_ORIGINATED; } else { -- cgit 1.2.3-korg