From 2b5ba9501c3dda3645bf01eb53b2821471f2a946 Mon Sep 17 00:00:00 2001 From: Neale Ranns Date: Tue, 2 Apr 2019 10:15:40 +0000 Subject: IPSEC: tunnel scaling - don't stack the inbould SA Change-Id: I0b47590400aebea09aa1b27de753be638e1ba870 Signed-off-by: Neale Ranns --- src/vnet/ipsec/ipsec_format.c | 15 ++++++++++----- 1 file changed, 10 insertions(+), 5 deletions(-) (limited to 'src/vnet/ipsec/ipsec_format.c') diff --git a/src/vnet/ipsec/ipsec_format.c b/src/vnet/ipsec/ipsec_format.c index a8616555629..c91a9ba632e 100644 --- a/src/vnet/ipsec/ipsec_format.c +++ b/src/vnet/ipsec/ipsec_format.c @@ -294,11 +294,16 @@ format_ipsec_sa (u8 * s, va_list * args) tx_table_id, format_ip46_address, &sa->tunnel_src_addr, IP46_TYPE_ANY, format_ip46_address, &sa->tunnel_dst_addr, IP46_TYPE_ANY); - s = format (s, "\n resovle via fib-entry: %d", sa->fib_entry_index); - s = format (s, "\n stacked on:"); - s = - format (s, "\n %U", format_dpo_id, &sa->dpo[IPSEC_PROTOCOL_ESP], - 6); + if (!ipsec_sa_is_set_IS_INBOUND (sa)) + { + s = + format (s, "\n resovle via fib-entry: %d", + sa->fib_entry_index); + s = format (s, "\n stacked on:"); + s = + format (s, "\n %U", format_dpo_id, + &sa->dpo[IPSEC_PROTOCOL_ESP], 6); + } } return (s); -- cgit 1.2.3-korg