Gitiles
Code Review Sign In
gerrit.nordix.org / fdio / vpp / 8c77c1930abd36150edadcf523eceef7810e6487 / src / vnet / ipsec
  1. 6edc6bc ipsec: fix CLI for create ipsec itf by Gabriel Oginski · 9 months ago
  2. 0cbd623 ipsec: fix clang compile issue by Kai Ji · 9 months ago
  3. a4df00f ipsec: esp_decrypt code clean up by Fan Zhang · 10 months ago
  4. 2f4586d ip: add support for buffer offload metadata in ip midchain by Arthur de Kerhor · 3 years, 3 months ago
  5. b8cb223 ipsec: remove unused parameter for esp_add_footer_and_icv by Fan Zhang · 10 months ago
  6. c3148b1 misc: remove GNU Indent directives by Damjan Marion · 10 months ago
  7. ff71939 ipsec: check each packet for no algs in esp-encrypt by Matthew Smith · 11 months ago
  8. 8fce546 ipsec: allow receiving encrypted IP packets with TFC padding by Arthur de Kerhor · 1 year, 7 months ago
  9. d053508 ipsec: should use praddr_ instead of pladdr_ by Dengfeng Liu · 1 year, 6 months ago
  10. dac9e56 ipsec: keep esp encrypt pointer and index synced by Matthew Smith · 1 year, 2 months ago
  11. 115e31b ipsec: IPsec fix constant propagation by Maxime Peim · 1 year, 2 months ago
  12. 4504df7 ipsec: delete redundant code by Dengfeng Liu · 1 year, 6 months ago
  13. 2d7988d ipsec: separate UDP and UDP-encapsulated ESP packet processing by vinay tripathi · 1 year, 7 months ago
  14. 75069ce ipsec: move udp/esp packet processing in the inline function ipsec_esp_packet_process by vinay tripathi · 1 year, 7 months ago
  15. 0e2f188 ipsec: huge anti-replay window support by Maxime Peim · 2 years ago
  16. 7a72658 ipsec: improve fast path policy searching performance by Xiaoming Jiang · 1 year, 8 months ago
  17. a4157ae ipsec: clear L4-cksum flags when decap'ing packets by Frédéric Perrin · 1 year, 6 months ago
  18. 84e6658 ipsec: add support for RFC-4543 ENCR_NULL_AUTH_AES_GMAC by Benoît Ganne · 1 year, 10 months ago
  19. 83ca6e6 ipsec: fix IPv6 IPsec tunnel punting by Sylvain Cadilhac · 1 year, 5 months ago
  20. f902ba5 ipsec: fix sa bind cli by Maxime Peim · 1 year, 6 months ago
  21. 3a6bc6f ipsec: fix logic in ext_hdr_is_pre_esp by Piotr Bronowski · 1 year, 10 months ago
  22. 6330584 api: ipsec - Mark old message versions as deprecated by Ondrej Fabry · 1 year, 9 months ago
  23. 1271e3a ipsec: manually binding an SA to a worker by Maxime Peim · 1 year, 10 months ago
  24. f441b5d crypto: use fixed crypto frame pool by gaoginskx · 3 years, 7 months ago
  25. 9a9604b crypto: make crypto-dispatch node working in adaptive mode by Xiaoming Jiang · 1 year, 10 months ago
  26. 0c1454c ipsec: fix ipsec_set_next_index set with wrong sa index when async frame commit failed by Xiaoming Jiang · 1 year, 8 months ago
  27. 5527a78 ipsec: make pre-shared keys harder to misuse by Benoît Ganne · 3 years ago
  28. ad95b06 ipsec: add per-SA error counters by Arthur de Kerhor · 2 years, 1 month ago
  29. 645a588 ipsec: set fast path 5tuple ip addresses based on sa traffic selector values by Piotr Bronowski · 1 year, 11 months ago
  30. 02dfd29 ipsec: fix AES CBC IV generation (CVE-2022-46397) by Benoît Ganne · 3 years ago
  31. ab412cd ipsec: fix async crypto linked keys memory leak by Benoît Ganne · 2 years ago
  32. 1d9780a ipsec: fix transpose local ip range position with remote ip range in fast path implementation by Piotr Bronowski · 2 years, 2 months ago
  33. 4117b24 ipsec: new api for sa ips and ports updates by Arthur de Kerhor · 2 years, 4 months ago
  34. 520cde4 ipsec: use correct reply message by Vratko Polak · 2 years, 1 month ago
  35. 14bf6a8 ipsec: remove redundant policy array in fast path spd by Piotr Bronowski · 2 years, 3 months ago
  36. e479eae ipsec: improve ipsec policy adding performance by Xiaoming Jiang · 2 years, 3 months ago
  37. fe2d23f ipsec: Failure at the start of the batch should not invalidate the rest of the batch by Neale Ranns · 2 years, 1 month ago
  38. dd298e8 misc: fix issues reported by clang-15 by Damjan Marion · 2 years, 3 months ago
  39. 06abf23 ipsec: introduce fast path ipv6 inbound matching by Piotr Bronowski · 2 years, 3 months ago
  40. d7c030d ipsec: make chacha20-poly1305 available via API by Vladimir Ratnikov · 2 years, 4 months ago
  41. 993b6be ipsec: introduce fast path ipv4 inbound matching by Piotr Bronowski · 2 years, 4 months ago
  42. 1363331 ipsec: fix coverity 249212 by Andrew Yourtchenko · 2 years, 4 months ago
  43. 4b4aded ipsec: fix coverity 249204 by Andrew Yourtchenko · 2 years, 4 months ago
  44. 6f1eb48 ipsec: enable UDP encap for IPv6 ESP tun protect by Matthew Smith · 2 years, 5 months ago
  45. 93688d7 ipsec: Use .api declared error counters by Neale Ranns · 2 years, 5 months ago
  46. 8188060 ipsec: fix coverity warnings found in fast path implementation by Piotr Bronowski · 2 years, 6 months ago
  47. 86f8208 ipsec: fast path outbound policy matching implementation for ipv6 by Piotr Bronowski · 2 years, 6 months ago
  48. 93bc431 ipsec: show fast path flag in cli by Fan Zhang · 2 years, 7 months ago
  49. 4da8a63 ipsec: add fast path configuration parser by Piotr Bronowski · 2 years, 8 months ago
  50. e1dce37 ipsec: add spd fast path matching by Piotr Bronowski · 2 years, 8 months ago
  51. 829bff8 ipsec: make match function inline by Piotr Bronowski · 2 years, 8 months ago
  52. 0464310 ipsec: add/delete ipsec fast path policy by Piotr Bronowski · 2 years, 8 months ago
  53. d699a34 ipsec: introduce spd fast path types by Piotr Bronowski · 2 years, 8 months ago
  54. 815c6a4 ipsec: change wildcard value for any protocol of spd policy by Piotr Bronowski · 2 years, 7 months ago
  55. c50bcbd vlib: process startup config exec scripts line by line by Damjan Marion · 2 years, 8 months ago
  56. 98ca76a ipsec: support per next-header next-nodes by Benoît Ganne · 2 years, 9 months ago
  57. 7cd35f5 ipsec: perf improvement of ipsec4_input_node using flow cache by Zachary Leaf · 3 years, 6 months ago
  58. 8bea589 vppinfra: make _vec_len() read-only by Damjan Marion · 2 years, 9 months ago
  59. 562cfa4 ipsec: remove the redundant code by Mohsin Kazmi · 2 years, 10 months ago
  60. 26fec71 ipsec: input: drop by default for non-matching pkts by Zachary Leaf · 3 years, 2 months ago
  61. aacd3ed ipsec: fix vector after remove entry in spd by Gabriel Oginski · 2 years, 11 months ago
  62. 992a4d0 ipsec: Improve the handling of NAT-T keepalive messages by Neale Ranns · 3 years ago
  63. 49378f2 ipsec: IPSec interface correct drop w/ no protection by Neale Ranns · 3 years ago
  64. 9b7e8ac api: verify message size on receipt by Klement Sekera · 3 years, 1 month ago
  65. c14b8cf ipsec: fix async buffer leak by Matthew Smith · 3 years, 1 month ago
  66. 03092c1 ip: extension header parsing fails for fragment header by Ole Troan · 3 years, 1 month ago
  67. 6fdcc3d fib: Don't use [midchain] adjacencies to change an interface's feature arc by Neale Ranns · 3 years, 3 months ago
  68. bed9b72 ipsec: Support the single IPSec interface dump by Neale Ranns · 3 years, 2 months ago
  69. d0b2660 ipsec: silence gcc-11 parentheses warning by Damjan Marion · 3 years, 2 months ago
  70. 0ad0608 ipsec: add api test file by Filip Tehlar · 3 years, 5 months ago
  71. 6d7dfcb ipsec: Performance improvement of ipsec4_output_node using flow cache by Govindarajan Mohandoss · 3 years, 10 months ago
  72. bd23b40 docs: nitfixes in FEATURE.yaml by Nathan Skrzypczak · 3 years, 3 months ago
  73. ac55a72 ipsec: fix protect update log if nexthop is NULL by Benoît Ganne · 3 years, 3 months ago
  74. 2c77ae4 docs: vnet comment nitfixes by Nathan Skrzypczak · 3 years, 3 months ago
  75. e11203e ipsec: Record the number of packets lost from an SA by Neale Ranns · 3 years, 3 months ago
  76. b2d3678 ipsec: move startup config to common file by Zachary Leaf · 3 years, 5 months ago
  77. af7fb04 misc: replace CLIB_PREFETCH with clib_prefetch_{load,store} by Damjan Marion · 3 years, 6 months ago
  78. b7e4d44 misc: remove vnet_all_api_h and vnet_msg_enum by Filip Tehlar · 3 years, 6 months ago
  79. 9de8028 ipsec: ADD/update IPSec documentation by Neale Ranns · 4 years, 1 month ago
  80. 53dd08c ipsec: Derive the TUNNEL_V6 flag from the configured address types by Neale Ranns · 3 years, 6 months ago
  81. 5b89110 ipsec: Fix setting the hi-sequence number for decrypt by Neale Ranns · 3 years, 6 months ago
  82. fbab65b ipsec: increment SPD policy counters for bypass and discard actions in ipsec4_input_node by Zachary Leaf · 3 years, 7 months ago
  83. ff2e413 ipsec: Split the SA add_del API into an separate add and del by Neale Ranns · 3 years, 6 months ago
  84. c73f329 ipsec: api cleanup by Filip Tehlar · 3 years, 6 months ago
  85. 217ba5a ipsec: fix length check when adding footer+icv by Benoît Ganne · 3 years, 7 months ago
  86. 89d939e linux-cp: Add tests for tun devices by Neale Ranns · 3 years, 7 months ago
  87. 51d56ba ipsec: fix async crypto frame leak by Matthew Smith · 3 years, 7 months ago
  88. e631ece ipsec: fix crypto ops in esp decrypt by Benoît Ganne · 3 years, 7 months ago
  89. 5606c82 ipsec: Default the IPSec interface MTU to 9000 by Neale Ranns · 3 years, 8 months ago
  90. 9e7a0b4 vlib: pass node runtime to vlib_buffer_enqueue_to_thread() by Damjan Marion · 3 years, 8 months ago
  91. 36f7a6a vlib: fix the offload flags size by Mohsin Kazmi · 3 years, 8 months ago
  92. a7e830e vlib: move offload flags to 1st cacheline in vlib_buffer_t by Mohsin Kazmi · 3 years, 8 months ago
  93. 9789898 ipsec: remove WITH_LIBSSL macros by Damjan Marion · 3 years, 9 months ago
  94. 48524a9 crypto: fix ops flags in crypto sw scheduler by Benoît Ganne · 4 years ago
  95. e66443c stats: python vpp_stats rewrite to access stat segment directly by Ole Troan · 3 years, 10 months ago
  96. 7db75dd ipsec: allow inbound non-tunnel SA through CLI by Mohammed Hawari · 3 years, 11 months ago
  97. 45723b8 ip: extend punt CLI for exception packets by Mohammed Hawari · 3 years, 11 months ago
  98. f16e9a5 ipsec: Support async mode per-SA by Neale Ranns · 3 years, 10 months ago
  99. fc81134 ipsec: Submit fuller async frames by Neale Ranns · 3 years, 10 months ago
  100. c5fe57d ipsec: move the IPSec SA pool out of ipsec_main by Neale Ranns · 3 years, 10 months ago