Gitiles
Code Review
Sign In
gerrit.nordix.org
/
fdio
/
vpp
/
2b5ba9501c3dda3645bf01eb53b2821471f2a946
/
src
/
vnet
/
ipsec
2b5ba95
IPSEC: tunnel scaling - don't stack the inbould SA
by Neale Ranns
· 6 years ago
ea5bb77
IPSEC: remove pointless feature ordering
by Neale Ranns
· 6 years ago
e524d45
IPSEC-GRE: fixes and API update to common types.
by Neale Ranns
· 6 years ago
b4fff3a
ipsec: esp-decrypt rework
by Damjan Marion
· 6 years ago
d7603d9
IPSEC: tunnel fragmentation
by Neale Ranns
· 6 years ago
a03d182
crypto: add vnet_crypto_op_init (...)
by Damjan Marion
· 6 years ago
1e3aa5e
ipsec: USE_EXTENDED_SEQ_NUM -> USE_ESN
by Damjan Marion
· 6 years ago
1f4e1cb
ipsec: anti-replay code cleanup
by Damjan Marion
· 6 years ago
987aea8
IPSEC: 4o6 and 6o4 for tunnel interfaces
by Neale Ranns
· 6 years ago
45d8f85
IPSEC: fix build breakage from ships in the night merges
by Neale Ranns
· 6 years ago
25edf14
IPSEC: run encrpyt as a feautre on the tunnel
by Neale Ranns
· 6 years ago
d709cbc
ipsec: compress ipsec_sa_t so data used by dataplane code fits in cacheline
by Damjan Marion
· 6 years ago
af3f078
IPSEC: more expressive API errors
by Neale Ranns
· 6 years ago
c59b9a2
ipsec: esp-encrypt rework
by Damjan Marion
· 6 years ago
50d5069
IPSEC: improved policy delete
by Neale Ranns
· 6 years ago
3833ffd
IPSEC tests fnd fix or Extended Sequence Numbers
by Neale Ranns
· 6 years ago
af73eda
ipsec: fix esn handling
by Damjan Marion
· 6 years ago
00a4420
IPSEC: test for packet drop on sequence number wrap
by Neale Ranns
· 6 years ago
1ba5bc8
ipsec: add ipv6 support for ipsec tunnel interface
by Kingwel Xie
· 6 years ago
8863123
crypto: add hmac truncate option
by Damjan Marion
· 6 years ago
c80cc9a
IPSEC: Tunnel SA not deleted
by Neale Ranns
· 6 years ago
b966e8b
ipsec: keep crypto data inside SA
by Damjan Marion
· 6 years ago
c372dc2
ipsec: bug fix ipsec-init sequence
by Kingwel Xie
· 6 years ago
91f17dc
crypto: introduce crypto infra
by Damjan Marion
· 6 years ago
231c469
IPSEC: remove byte swap operations in DP during SPD classify
by Neale Ranns
· 6 years ago
9f231d4
IPSEC: tidy the policy types
by Neale Ranns
· 6 years ago
a5160d7
VPP-1576: fix a set of coverity warnings
by Dave Barach
· 6 years ago
5d704ae
updates now that flags are supported on the API
by Neale Ranns
· 6 years ago
d3d1205
ipsec: cli bug fixes
by Kingwel Xie
· 6 years ago
00bff19
ipsec: ipsec-if optimizations & bug fixes
by Kingwel Xie
· 6 years ago
c98275f
ipsec: esp-encrypt and esp-decrypt cleanup
by Damjan Marion
· 6 years ago
77eb28f
IPSEC: tunnel encap/decap dual loop speedups
by Neale Ranns
· 6 years ago
561d1ca
ipsec: cleanup, remove unnecessary code,
by Kingwel Xie
· 6 years ago
fd06084
IPSEC: script to bounce IPSEC traffic through a pipe to test encrypt and decrpyt
by Neale Ranns
· 6 years ago
fe480f6
IPSEC: tunnel-input; don't load the HW interface struct
by Neale Ranns
· 6 years ago
53f526b
TEST: IPSEC NAT-T with UDP header
by Neale Ranns
· 6 years ago
7c44d78
IKEv2 to plugin
by Neale Ranns
· 6 years ago
918c161
IPSEC: header exports
by Neale Ranns
· 6 years ago
8c2dd1b
IPSEC: API coverity error of unitialised stat_index value
by Neale Ranns
· 6 years ago
eba31ec
IPSEC: move SA counters into the stats segment
by Neale Ranns
· 6 years ago
364b1ca
ipsec: memory leak fixup
by Kingwel Xie
· 6 years ago
47727c0
Add -fno-common compile option
by Benoît Ganne
· 6 years ago
b4cfd55
IPSEC: restack SAs on backend change
by Neale Ranns
· 6 years ago
72b3bce
ipsec: cli bug fix
by Kingwel Xie
· 6 years ago
7ba8fe2
IPSEC-tun: The tunnel DB uses the network order SPI to save the byte swap in the DP
by Neale Ranns
· 6 years ago
c69ac31
ipsec: multi-arch, next-node-index cleanup
by Kingwel Xie
· 6 years ago
3c282c7
IPSEC: remove unused members of main struct
by Neale Ranns
· 6 years ago
8d7c502
IPSEC: no second lookup after tunnel encap
by Neale Ranns
· 6 years ago
a09c1ff
IPSEC: SPD counters in the stats sgement
by Neale Ranns
· 6 years ago
2baf942
ipsec: cli 'create ipsec tunnel' more options
by Kingwel Xie
· 6 years ago
999c8ee
IPSEC: minor refactor
by Neale Ranns
· 6 years ago
17dcec0
IPSEC: API modernisation
by Neale Ranns
· 6 years ago
4fd5a9d
ipsec: fix check support functions
by Klement Sekera
· 6 years ago
31dd609
Add Ipsec IKE support to openssl 3.0.0 master branch
by Ping Yu
· 6 years ago
311124e
IPSEC: tests use opbject registry
by Neale Ranns
· 6 years ago
8e4a89b
IPSEC Tests: to per-test setup and tearDown
by Neale Ranns
· 6 years ago
71ad6a9
AH encrypt; don't double enqueue nor emit clib_warnings when seq-num max exceeded
by Neale Ranns
· 6 years ago
e67c1d8
fix data_length in IpSec API call (VPP-1548)
by Michal Cmarada
· 6 years ago
461caa5
ipsec: fix support check when using AES-GCM
by Matthew Smith
· 6 years ago
41b25cf
fix spurious error setting SA on ipsec intf
by Matthew Smith
· 6 years ago
057b356
Change ipsec feature node names
by Pierre Pfister
· 6 years ago
4c422f9
Add IPSec interface FIB index for TX packet
by Pierre Pfister
· 6 years ago
240f69a
Fix [csit-dev] CSIT IPv6 IPSec transport mode tests are failing
by jackiechen1985
· 6 years ago
9f6957d
Fix VPP-1515 IPSec receive packet error in transport mode with udp encap
by jackiechen1985
· 6 years ago
2e02ba0
ipsec: simplify bumping counters - cosmetic change
by Klement Sekera
· 6 years ago
b4a7a7d
Add UDP encap flag
by Filip Tehlar
· 6 years ago
de84727
IPSEC-AH: anti-replay testing
by Neale Ranns
· 6 years ago
bb46324
IPSEC-AH: fix packet drop
by Neale Ranns
· 6 years ago
4f10db3
ipsec: move ipsec defs to ipsec.h
by Klement Sekera
· 6 years ago
6221927
Fix IPSec CLI key parsing
by Pierre Pfister
· 6 years ago
3553aba
IPSEC: remove duplicate memcy
by Neale Ranns
· 6 years ago
b4d3053
ipsec: infra for selecting backends
by Klement Sekera
· 6 years ago
178cf49
Remove c-11 memcpy checks from perf-critical code
by Dave Barach
· 6 years ago
35a5ee1
ipsec: fix typo
by Klement Sekera
· 6 years ago
871bca9
VPP-1450: binary api call for dumping SPD to interface registration
by Filip Varga
· 6 years ago
b8f3544
migrate ipsec to new multiarch infra
by Klement Sekera
· 6 years ago
2fab01e
buffer trace is broken in ipsec-output. copy it from node->flags to frame->frame_flags
by Kingwel Xie
· 6 years ago
b7b9299
c11 safe string handling support
by Dave Barach
· 6 years ago
c3ac313
ipsec: fix wrong counter bump
by Klement Sekera
· 6 years ago
be5a5dd
ipsec: split ipsec nodes into ip4/ip6 nodes
by Klement Sekera
· 6 years ago
611864f
ipsec: add missing ipv6 ah code & ipv6 tests
by Klement Sekera
· 6 years ago
a9a0b2c
IPsec: add API for SPDs dump (VPP-1363)
by Matus Fabian
· 6 years ago
fc91a17
forget to assign spd_index to config
by Kingwel Xie
· 6 years ago
bdc0e6b
Trivial: Clean up some typos.
by Paul Vinciguerra
· 6 years ago
2ce8bd9
Add SHA2 support to IKEv2 implementation
by Berenger Foucher
· 6 years ago
717de09
ipsec: add udp-encap option to debug cli commands
by Radu Nicolau
· 6 years ago
7d98a12
Remove unused argument to vlib_feature_next
by Damjan Marion
· 6 years ago
a8d4764
VPP-1338: fix ipsec api coverity warnings
by Dave Barach
· 6 years ago
067cd62
avoid using thread local storage for thread index
by Damjan Marion
· 6 years ago
0e36bbf
Fix IPsec intf tx node setup at intf creation
by Matthew Smith
· 6 years ago
6452622
fix VPP-1312 Invalid UDP packet length in ipsec
by Klement Sekera
· 7 years ago
c2fc57e
ipsec: fix VPP-1333 - crash in ipsec policy cli
by Klement Sekera
· 6 years ago
31da2e3
Revert "Revert "ipsec: VPP-1316 calculate IP/TCP/UDP inner checksums""
by Klement Sekera
· 6 years ago
e0d2bd6
Revert "ipsec: VPP-1316 calculate IP/TCP/UDP inner checksums"
by Ole Troan
· 6 years ago
a98346f
ipsec: VPP-1316 calculate IP/TCP/UDP inner checksums
by Klement Sekera
· 7 years ago
ee52d87
ipsec: VPP-1308 fix sorting of SPD entries
by Klement Sekera
· 7 years ago
f706b8d
ipsec: fix IKEv2 crash when rsa cert is used for authentication
by Radu Nicolau
· 7 years ago
de412ce
CSIT-928 dpdk/ipsec: performance improvement
by Radu Nicolau
· 7 years ago
831fd64
Drop IPsec packets when interface is down
by Matthew Smith
· 7 years ago
ea84130
VPP-1275 Fix memory leaks in IPsec CLI
by Klement Sekera
· 7 years ago
Next »