commit 1404698df397bc4d3007daea41f52ad75ed4486c
author Neale Ranns <nranns@cisco.com> Mon Jul 29 14:49:52 2019 +0000
committer Ole Trøan <otroan@employees.org> Wed Jul 31 10:12:14 2019 +0000
tree 4c396973b37193def1bdb4c4a9f9e91f2e1b7274
parent 513582c96a6d58a3980b3e444446bc6e5c4e4764

ip: Ensure reassembly runs before IPSec decrypt.

Type: fix

Change-Id: I01eeedf8d5015b07b9422c65afe78bfe8177c22c
Signed-off-by: Neale Ranns <nranns@cisco.com>

src/vnet/ip/ip6_reassembly.c

diff --git a/src/vnet/ip/ip6_reassembly.c b/src/vnet/ip/ip6_reassembly.c
index 7b0d84d..8d455e9 100644
--- a/src/vnet/ip/ip6_reassembly.c
+++ b/src/vnet/ip/ip6_reassembly.c
@@ -1181,7 +1181,9 @@
 VNET_FEATURE_INIT (ip6_reassembly_feature, static) = {
     .arc_name = "ip6-unicast",
     .node_name = "ip6-reassembly-feature",
-    .runs_before = VNET_FEATURES ("ip6-lookup"),
+    .runs_before = VNET_FEATURES ("ip6-lookup",
+                                  "esp6-decrypt",
+                                  "ah6-decrypt"),
     .runs_after = 0,
 };
 /* *INDENT-ON* */