From 02950406c49a743f631395ed52073921744e1afd Mon Sep 17 00:00:00 2001 From: Neale Ranns Date: Fri, 20 Dec 2019 00:54:57 +0000 Subject: ipsec: Targeted unit testing Type: fix 1 - big packets; chained buffers and those without enoguh space to add ESP header 2 - IPv6 extension headers in packets that are encrypted/decrypted 3 - Interface protection with SAs that have null algorithms Signed-off-by: Neale Ranns Change-Id: Ie330861fb06a9b248d9dcd5c730e21326ac8e973 --- src/vnet/ipsec/ipsec.h | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) (limited to 'src/vnet/ipsec/ipsec.h') diff --git a/src/vnet/ipsec/ipsec.h b/src/vnet/ipsec/ipsec.h index af758418322..65b888e51a2 100644 --- a/src/vnet/ipsec/ipsec.h +++ b/src/vnet/ipsec/ipsec.h @@ -61,8 +61,10 @@ typedef struct u32 esp6_decrypt_node_index; u32 esp6_encrypt_next_index; u32 esp6_decrypt_next_index; - u32 esp4_encrypt_tun_feature_index; - u32 esp6_encrypt_tun_feature_index; + u32 esp44_encrypt_tun_feature_index; + u32 esp46_encrypt_tun_feature_index; + u32 esp66_encrypt_tun_feature_index; + u32 esp64_encrypt_tun_feature_index; } ipsec_esp_backend_t; typedef struct @@ -135,8 +137,10 @@ typedef struct u32 ah6_decrypt_next_index; /* tun encrypt arcs and feature nodes */ - u32 esp4_encrypt_tun_feature_index; - u32 esp6_encrypt_tun_feature_index; + u32 esp44_encrypt_tun_feature_index; + u32 esp64_encrypt_tun_feature_index; + u32 esp46_encrypt_tun_feature_index; + u32 esp66_encrypt_tun_feature_index; /* tun nodes to drop packets when no crypto alg set on outbound SA */ u32 esp4_no_crypto_tun_feature_index; -- cgit 1.2.3-korg