ligang/vpp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ipsec: fix chained ESP

Browse Source 
This fixes a special case when buffer chain enters decrypt node
and becomes a single buffer after decryption.

Type: fix

Change-Id: I1d4da029b952baa97400adb7173aa63fd97d916b
Signed-off-by: Filip Tehlar <ftehlar@cisco.com>
This commit is contained in:
Filip Tehlar
2020-02-13 07:49:30 +00:00
committed by Neale Ranns
parent f7f7f84ae9
commit c2c1bfd9b7
3 changed files with 147 additions and 52 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
test/test_ipsec_esp.py
View File

@ -509,9 +509,10 @@ class RunTestIpsecEspAll(ConfigIpsecESP,
count=NUM_PKTS)
LARGE_PKT_SZ = [
1970, # results in 2 chained buffers entering decrypt node
# but leaving as simple buffer due to ICV removal (tra4)
4010, # ICV ends up splitted accross 2 buffers in esp_decrypt
# for transport4; transport6 takes normal path
4020, # same as above but tra4 and tra6 are switched
]
if self.engine in engines_supporting_chain_bufs: