From 86f8208af43efaa71b8e1c0a5ff86fc233456d9d Mon Sep 17 00:00:00 2001 From: Piotr Bronowski Date: Fri, 8 Jul 2022 12:45:05 +0000 Subject: ipsec: fast path outbound policy matching implementation for ipv6 With this patch fast path for ipv6 policy lookup is enabled. This impelentation scales and outperforms original implementation when the number of defined flows is higher thatn 100k. Type: feature Signed-off-by: Piotr Bronowski Change-Id: I9364b5b8db4fc708790d48c538add272c7cea400 --- src/vnet/ipsec/ipsec_spd_policy.h | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) (limited to 'src/vnet/ipsec/ipsec_spd_policy.h') diff --git a/src/vnet/ipsec/ipsec_spd_policy.h b/src/vnet/ipsec/ipsec_spd_policy.h index 24c0e4cefb1..57985116c94 100644 --- a/src/vnet/ipsec/ipsec_spd_policy.h +++ b/src/vnet/ipsec/ipsec_spd_policy.h @@ -128,8 +128,11 @@ typedef union ip4_address_t laddr; ip4_address_t raddr; }; - ip6_address_t ip6_laddr; - ip6_address_t ip6_raddr; + struct + { + ip6_address_t ip6_laddr; + ip6_address_t ip6_raddr; + }; }; u16 lport; -- cgit 1.2.3-korg