commit 86f8208af43efaa71b8e1c0a5ff86fc233456d9d
author Piotr Bronowski <piotrx.bronowski@intel.com> Fri Jul 08 12:45:05 2022 +0000
committer Fan Zhang <roy.fan.zhang@intel.com> Fri Jul 15 12:45:19 2022 +0000
tree 18feadc95586f549325f2a1872492caa9ad32df0
parent 963e9b583b7fa7c26efc7acee2449069057b93d7

ipsec: fast path outbound policy matching implementation for ipv6

With this patch fast path for ipv6 policy lookup is enabled.
This impelentation scales and outperforms original implementation when
the number of defined flows is higher thatn 100k.

Type: feature
Signed-off-by: Piotr Bronowski <piotrx.bronowski@intel.com>
Change-Id: I9364b5b8db4fc708790d48c538add272c7cea400

src/vnet/ipsec/ipsec.h

diff --git a/src/vnet/ipsec/ipsec.h b/src/vnet/ipsec/ipsec.h
index c4f5326..fc7b6cd 100644
--- a/src/vnet/ipsec/ipsec.h
+++ b/src/vnet/ipsec/ipsec.h
@@ -144,7 +144,9 @@
   /* pool of policies */
   ipsec_policy_t *policies;
 
-  u32 fp_spd_is_enabled;
+  u32 ipv4_fp_spd_is_enabled;
+  u32 ipv6_fp_spd_is_enabled;
+
   ipsec_fp_mask_type_entry_t *fp_mask_types;
   u32 fp_lookup_hash_buckets; /* number of buckets should be power of two */