Gitiles
Code Review
Sign In
gerrit.nordix.org
/
fdio
/
vpp
/
72f2a3acb797797416a96dc10312ccd431126de7
/
src
/
vnet
/
ipsec
72f2a3a
ipsec: One DPO per SA
by Neale Ranns
· 5 years ago
2f05220
ipsec: return original SA create error for tunnel create
by Neale Ranns
· 6 years ago
d83c4a8
ipsec: Display user specified SPI ID not VPP's index
by Neale Ranns
· 6 years ago
a6bee0a
ipsec: Correctly rewind the buffer to the IP header when punting UDP encapped SPI-0 packets
by Neale Ranns
· 6 years ago
fb341b8
ipsec: remove spurious warnings
by Neale Ranns
· 6 years ago
6230eea
ipsec: ah_decrypt rework
by Filip Tehlar
· 6 years ago
f292242
ipsec: remove the set_key API
by Neale Ranns
· 6 years ago
98d6ee7
ipsec: fix combined counters in ah-encrypt node
by Filip Tehlar
· 6 years ago
21f265f
ipsec: fix sa counters in esp-encrypt
by Damjan Marion
· 6 years ago
867dfdd
ipsec: fix sa counters in esp-decrypt
by Damjan Marion
· 6 years ago
e6be702
IPSEC: some CLI fixes
by Neale Ranns
· 6 years ago
5f08ab6
Fix: bug prevented IPsec ipv4 SPDs to show correctly
by Guillaume Solignac
· 6 years ago
0647cf2
IPSec: memcpy of integ key bork
by Neale Ranns
· 6 years ago
2a2e593
IPsec: modify post-decrypt buf len calculation
by Matthew G Smith
· 6 years ago
30b8b4a
ipsec: fix perf issue in esp_aad_fill
by Damjan Marion
· 6 years ago
1197449
ipsec: ah_encrypt rework
by Filip Tehlar
· 6 years ago
50f0ac0
Punt: socket register for exception dispatched/punted packets based on reason
by Neale Ranns
· 6 years ago
d1a5b2d
IPSEC: rename default backend
by Neale Ranns
· 6 years ago
275a177
IPSEC: remove CLI check for unsupported IPv6-AH - it is supported
by Neale Ranns
· 6 years ago
0224514
IPSEC coverity fixes
by Neale Ranns
· 6 years ago
3fb65be
IPSEC: remove unecessary pass by reference of sequence number
by Neale Ranns
· 6 years ago
0dd9165
Add missing init fn dependency to ipsec_init
by Dave Barach
· 6 years ago
1cff643
esp_encrypt: remove unnecessary code
by Zhiyong Yang
· 6 years ago
e7a527f
ipsec: fix ipsec format overflow
by Benoît Ganne
· 6 years ago
be95444
crypto: enforce per-alg crypto key length
by Benoît Ganne
· 6 years ago
d97918e
crypto, ipsec: change GCM IV handling
by Damjan Marion
· 6 years ago
82d81d4
crypto: AES GCM IV length is always 12
by Damjan Marion
· 6 years ago
4cb8381
crypto_ipsecmb: use pre-expanded keys
by Damjan Marion
· 6 years ago
e8915fc
IPSEC; dpdk backend for tunnel interface encryption
by Neale Ranns
· 6 years ago
a829b13
ipsec: drop runts in esp-decrypt
by Damjan Marion
· 6 years ago
d1bed68
crypto: improve key handling
by Damjan Marion
· 6 years ago
ea6a34c
Rearrange prefetching in ipsec_output_inline
by Vratko Polak
· 6 years ago
e8e950a
Fix a ipsec command line typo
by Simon Zhang
· 6 years ago
f922116
ipsec4-output: add pkt header and data prefetching
by Zhiyong Yang
· 6 years ago
1b582b8
IPSEC: IPv6 ESP transport mode incorrect packet length and checksum (VPP-1654)
by Neale Ranns
· 6 years ago
d207fd7
IPSEC: ESP IPv6 transport mode payload length incorrect (VPP-1653)
by Neale Ranns
· 6 years ago
d6c9e82
IPSEC: tunnel rekey fix and test (VPP-1652)
by Neale Ranns
· 6 years ago
80f6fd5
IPSEC: Pass the algorithm salt (used in GCM) over the API
by Neale Ranns
· 6 years ago
b64cd2c
IPSEC: SA format; don't print keys when there's no algo
by Neale Ranns
· 6 years ago
47feb11
IPSEC: support GCM in ESP
by Neale Ranns
· 6 years ago
0a0c7ee
IPSEC: crypto overflow
by Neale Ranns
· 6 years ago
49e7ef6
IPSEC: ESP with ESN tests and fixes
by Neale Ranns
· 6 years ago
21ada3b
IPSEC-MB: Use random & non-repeating IV (VPP-1642)
by Neale Ranns
· 6 years ago
92e9384
crypto: Intel IPSEC-MB engine
by Neale Ranns
· 6 years ago
4f33c80
IPSEC: for each engine and algorithm tests
by Neale Ranns
· 6 years ago
9b208ce
IPSEC: remove double byte swap of IP addresses
by Neale Ranns
· 6 years ago
1091c4a
IPSEC TEST: various hash alogrithms
by Neale Ranns
· 6 years ago
060bfb9
crypto: add support for AEAD and AES-GCM
by Damjan Marion
· 6 years ago
b71fa75
IPSEC: punt reasons; SPI=0, no-tunnel
by Neale Ranns
· 6 years ago
7c22ff7
ipsec: trunc_size -> icv_size
by Damjan Marion
· 6 years ago
5ae793a
IPSEC: correctly size per-thread data
by Neale Ranns
· 6 years ago
b294f10
IPSEC: show CLI improvements
by Neale Ranns
· 6 years ago
2b5ba95
IPSEC: tunnel scaling - don't stack the inbould SA
by Neale Ranns
· 6 years ago
ea5bb77
IPSEC: remove pointless feature ordering
by Neale Ranns
· 6 years ago
e524d45
IPSEC-GRE: fixes and API update to common types.
by Neale Ranns
· 6 years ago
b4fff3a
ipsec: esp-decrypt rework
by Damjan Marion
· 6 years ago
d7603d9
IPSEC: tunnel fragmentation
by Neale Ranns
· 6 years ago
a03d182
crypto: add vnet_crypto_op_init (...)
by Damjan Marion
· 6 years ago
1e3aa5e
ipsec: USE_EXTENDED_SEQ_NUM -> USE_ESN
by Damjan Marion
· 6 years ago
1f4e1cb
ipsec: anti-replay code cleanup
by Damjan Marion
· 6 years ago
987aea8
IPSEC: 4o6 and 6o4 for tunnel interfaces
by Neale Ranns
· 6 years ago
45d8f85
IPSEC: fix build breakage from ships in the night merges
by Neale Ranns
· 6 years ago
25edf14
IPSEC: run encrpyt as a feautre on the tunnel
by Neale Ranns
· 6 years ago
d709cbc
ipsec: compress ipsec_sa_t so data used by dataplane code fits in cacheline
by Damjan Marion
· 6 years ago
af3f078
IPSEC: more expressive API errors
by Neale Ranns
· 6 years ago
c59b9a2
ipsec: esp-encrypt rework
by Damjan Marion
· 6 years ago
50d5069
IPSEC: improved policy delete
by Neale Ranns
· 6 years ago
3833ffd
IPSEC tests fnd fix or Extended Sequence Numbers
by Neale Ranns
· 6 years ago
af73eda
ipsec: fix esn handling
by Damjan Marion
· 6 years ago
00a4420
IPSEC: test for packet drop on sequence number wrap
by Neale Ranns
· 6 years ago
1ba5bc8
ipsec: add ipv6 support for ipsec tunnel interface
by Kingwel Xie
· 6 years ago
8863123
crypto: add hmac truncate option
by Damjan Marion
· 6 years ago
c80cc9a
IPSEC: Tunnel SA not deleted
by Neale Ranns
· 6 years ago
b966e8b
ipsec: keep crypto data inside SA
by Damjan Marion
· 6 years ago
c372dc2
ipsec: bug fix ipsec-init sequence
by Kingwel Xie
· 6 years ago
91f17dc
crypto: introduce crypto infra
by Damjan Marion
· 6 years ago
231c469
IPSEC: remove byte swap operations in DP during SPD classify
by Neale Ranns
· 6 years ago
9f231d4
IPSEC: tidy the policy types
by Neale Ranns
· 6 years ago
a5160d7
VPP-1576: fix a set of coverity warnings
by Dave Barach
· 6 years ago
5d704ae
updates now that flags are supported on the API
by Neale Ranns
· 6 years ago
d3d1205
ipsec: cli bug fixes
by Kingwel Xie
· 6 years ago
00bff19
ipsec: ipsec-if optimizations & bug fixes
by Kingwel Xie
· 6 years ago
c98275f
ipsec: esp-encrypt and esp-decrypt cleanup
by Damjan Marion
· 6 years ago
77eb28f
IPSEC: tunnel encap/decap dual loop speedups
by Neale Ranns
· 6 years ago
561d1ca
ipsec: cleanup, remove unnecessary code,
by Kingwel Xie
· 6 years ago
fd06084
IPSEC: script to bounce IPSEC traffic through a pipe to test encrypt and decrpyt
by Neale Ranns
· 6 years ago
fe480f6
IPSEC: tunnel-input; don't load the HW interface struct
by Neale Ranns
· 6 years ago
53f526b
TEST: IPSEC NAT-T with UDP header
by Neale Ranns
· 6 years ago
7c44d78
IKEv2 to plugin
by Neale Ranns
· 6 years ago
918c161
IPSEC: header exports
by Neale Ranns
· 6 years ago
8c2dd1b
IPSEC: API coverity error of unitialised stat_index value
by Neale Ranns
· 6 years ago
eba31ec
IPSEC: move SA counters into the stats segment
by Neale Ranns
· 6 years ago
364b1ca
ipsec: memory leak fixup
by Kingwel Xie
· 6 years ago
47727c0
Add -fno-common compile option
by Benoît Ganne
· 6 years ago
b4cfd55
IPSEC: restack SAs on backend change
by Neale Ranns
· 6 years ago
72b3bce
ipsec: cli bug fix
by Kingwel Xie
· 6 years ago
7ba8fe2
IPSEC-tun: The tunnel DB uses the network order SPI to save the byte swap in the DP
by Neale Ranns
· 6 years ago
c69ac31
ipsec: multi-arch, next-node-index cleanup
by Kingwel Xie
· 6 years ago
3c282c7
IPSEC: remove unused members of main struct
by Neale Ranns
· 6 years ago
8d7c502
IPSEC: no second lookup after tunnel encap
by Neale Ranns
· 6 years ago
Next »