- 4117b24 ipsec: new api for sa ips and ports updates by Arthur de Kerhor · 2 years, 4 months ago
- 520cde4 ipsec: use correct reply message by Vratko Polak · 2 years, 1 month ago
- 14bf6a8 ipsec: remove redundant policy array in fast path spd by Piotr Bronowski · 2 years, 3 months ago
- e479eae ipsec: improve ipsec policy adding performance by Xiaoming Jiang · 2 years, 3 months ago
- fe2d23f ipsec: Failure at the start of the batch should not invalidate the rest of the batch by Neale Ranns · 2 years, 1 month ago
- dd298e8 misc: fix issues reported by clang-15 by Damjan Marion · 2 years, 3 months ago
- 06abf23 ipsec: introduce fast path ipv6 inbound matching by Piotr Bronowski · 2 years, 3 months ago
- d7c030d ipsec: make chacha20-poly1305 available via API by Vladimir Ratnikov · 2 years, 4 months ago
- 993b6be ipsec: introduce fast path ipv4 inbound matching by Piotr Bronowski · 2 years, 4 months ago
- 1363331 ipsec: fix coverity 249212 by Andrew Yourtchenko · 2 years, 4 months ago
- 4b4aded ipsec: fix coverity 249204 by Andrew Yourtchenko · 2 years, 4 months ago
- 6f1eb48 ipsec: enable UDP encap for IPv6 ESP tun protect by Matthew Smith · 2 years, 5 months ago
- 93688d7 ipsec: Use .api declared error counters by Neale Ranns · 2 years, 5 months ago
- 8188060 ipsec: fix coverity warnings found in fast path implementation by Piotr Bronowski · 2 years, 6 months ago
- 86f8208 ipsec: fast path outbound policy matching implementation for ipv6 by Piotr Bronowski · 2 years, 6 months ago
- 93bc431 ipsec: show fast path flag in cli by Fan Zhang · 2 years, 7 months ago
- 4da8a63 ipsec: add fast path configuration parser by Piotr Bronowski · 2 years, 8 months ago
- e1dce37 ipsec: add spd fast path matching by Piotr Bronowski · 2 years, 8 months ago
- 829bff8 ipsec: make match function inline by Piotr Bronowski · 2 years, 8 months ago
- 0464310 ipsec: add/delete ipsec fast path policy by Piotr Bronowski · 2 years, 8 months ago
- d699a34 ipsec: introduce spd fast path types by Piotr Bronowski · 2 years, 8 months ago
- 815c6a4 ipsec: change wildcard value for any protocol of spd policy by Piotr Bronowski · 2 years, 7 months ago
- c50bcbd vlib: process startup config exec scripts line by line by Damjan Marion · 2 years, 8 months ago
- 98ca76a ipsec: support per next-header next-nodes by Benoît Ganne · 2 years, 9 months ago
- 7cd35f5 ipsec: perf improvement of ipsec4_input_node using flow cache by Zachary Leaf · 3 years, 6 months ago
- 8bea589 vppinfra: make _vec_len() read-only by Damjan Marion · 2 years, 9 months ago
- 562cfa4 ipsec: remove the redundant code by Mohsin Kazmi · 2 years, 10 months ago
- 26fec71 ipsec: input: drop by default for non-matching pkts by Zachary Leaf · 3 years, 2 months ago
- aacd3ed ipsec: fix vector after remove entry in spd by Gabriel Oginski · 2 years, 11 months ago
- 992a4d0 ipsec: Improve the handling of NAT-T keepalive messages by Neale Ranns · 3 years ago
- 49378f2 ipsec: IPSec interface correct drop w/ no protection by Neale Ranns · 3 years ago
- 9b7e8ac api: verify message size on receipt by Klement Sekera · 3 years, 1 month ago
- c14b8cf ipsec: fix async buffer leak by Matthew Smith · 3 years, 1 month ago
- 03092c1 ip: extension header parsing fails for fragment header by Ole Troan · 3 years, 1 month ago
- 6fdcc3d fib: Don't use [midchain] adjacencies to change an interface's feature arc by Neale Ranns · 3 years, 3 months ago
- bed9b72 ipsec: Support the single IPSec interface dump by Neale Ranns · 3 years, 2 months ago
- d0b2660 ipsec: silence gcc-11 parentheses warning by Damjan Marion · 3 years, 2 months ago
- 0ad0608 ipsec: add api test file by Filip Tehlar · 3 years, 5 months ago
- 6d7dfcb ipsec: Performance improvement of ipsec4_output_node using flow cache by Govindarajan Mohandoss · 3 years, 10 months ago
- bd23b40 docs: nitfixes in FEATURE.yaml by Nathan Skrzypczak · 3 years, 3 months ago
- ac55a72 ipsec: fix protect update log if nexthop is NULL by Benoît Ganne · 3 years, 3 months ago
- 2c77ae4 docs: vnet comment nitfixes by Nathan Skrzypczak · 3 years, 3 months ago
- e11203e ipsec: Record the number of packets lost from an SA by Neale Ranns · 3 years, 3 months ago
- b2d3678 ipsec: move startup config to common file by Zachary Leaf · 3 years, 5 months ago
- af7fb04 misc: replace CLIB_PREFETCH with clib_prefetch_{load,store} by Damjan Marion · 3 years, 6 months ago
- b7e4d44 misc: remove vnet_all_api_h and vnet_msg_enum by Filip Tehlar · 3 years, 6 months ago
- 9de8028 ipsec: ADD/update IPSec documentation by Neale Ranns · 4 years, 1 month ago
- 53dd08c ipsec: Derive the TUNNEL_V6 flag from the configured address types by Neale Ranns · 3 years, 6 months ago
- 5b89110 ipsec: Fix setting the hi-sequence number for decrypt by Neale Ranns · 3 years, 6 months ago
- fbab65b ipsec: increment SPD policy counters for bypass and discard actions in ipsec4_input_node by Zachary Leaf · 3 years, 7 months ago
- ff2e413 ipsec: Split the SA add_del API into an separate add and del by Neale Ranns · 3 years, 6 months ago
- c73f329 ipsec: api cleanup by Filip Tehlar · 3 years, 6 months ago
- 217ba5a ipsec: fix length check when adding footer+icv by Benoît Ganne · 3 years, 7 months ago
- 89d939e linux-cp: Add tests for tun devices by Neale Ranns · 3 years, 7 months ago
- 51d56ba ipsec: fix async crypto frame leak by Matthew Smith · 3 years, 7 months ago
- e631ece ipsec: fix crypto ops in esp decrypt by Benoît Ganne · 3 years, 7 months ago
- 5606c82 ipsec: Default the IPSec interface MTU to 9000 by Neale Ranns · 3 years, 7 months ago
- 9e7a0b4 vlib: pass node runtime to vlib_buffer_enqueue_to_thread() by Damjan Marion · 3 years, 8 months ago
- 36f7a6a vlib: fix the offload flags size by Mohsin Kazmi · 3 years, 8 months ago
- a7e830e vlib: move offload flags to 1st cacheline in vlib_buffer_t by Mohsin Kazmi · 3 years, 8 months ago
- 9789898 ipsec: remove WITH_LIBSSL macros by Damjan Marion · 3 years, 9 months ago
- 48524a9 crypto: fix ops flags in crypto sw scheduler by Benoît Ganne · 4 years ago
- e66443c stats: python vpp_stats rewrite to access stat segment directly by Ole Troan · 3 years, 10 months ago
- 7db75dd ipsec: allow inbound non-tunnel SA through CLI by Mohammed Hawari · 3 years, 11 months ago
- 45723b8 ip: extend punt CLI for exception packets by Mohammed Hawari · 3 years, 11 months ago
- f16e9a5 ipsec: Support async mode per-SA by Neale Ranns · 3 years, 10 months ago
- fc81134 ipsec: Submit fuller async frames by Neale Ranns · 3 years, 10 months ago
- c5fe57d ipsec: move the IPSec SA pool out of ipsec_main by Neale Ranns · 3 years, 10 months ago
- 8c609af tests: Add tests for IPSec async mode using the crypto SW scheduler by Neale Ranns · 3 years, 10 months ago
- 2d49830 ipsec: ipsec.h tidy up by Neale Ranns · 3 years, 10 months ago
- 7a29a2d ipsec: enable input features on tunnels by Brian Russell · 3 years, 10 months ago
- 6809538 vlib: refactor checksum offload support by Mohsin Kazmi · 3 years, 11 months ago
- aa7d766 ipsec: Store thread-index in buffer meta-data during SA handoff by Neale Ranns · 3 years, 11 months ago
- 9ec846c ipsec: Use the new tunnel API types to add flow label and TTL copy support by Neale Ranns · 3 years, 11 months ago
- 751bb13 Revert "ipsec: Use the new tunnel API types to add flow label and TTL copy" by Matthew Smith · 3 years, 11 months ago
- c7eaa71 ipsec: Use the new tunnel API types to add flow label and TTL copy support by Neale Ranns · 4 years ago
- 0ebbbfc ipsec: Checking wrong DB for initialistation by Neale Ranns · 3 years, 11 months ago
- a91cb45 tunnel: support copying TTL and flow label from inner to outer by Neale Ranns · 4 years ago
- 048189e ipsec: CLI improvement for udp port encap by Mohammed Hawari · 3 years, 11 months ago
- 490b927 ipsec: add support for AES CTR by Benoît Ganne · 4 years ago
- 1a52d37 ipsec: one thread index per-SA by Neale Ranns · 4 years ago
- 03fabbd ipsec: Honour IPSec SA table-ID over API by Neale Ranns · 4 years ago
- 45d6d83 ipsec: Tunnelled packets are locally generated by Neale Ranns · 4 years ago
- 4a58e49 ipsec: Support MPLS over IPSec[46] interface by Neale Ranns · 4 years ago
- a9e2774 ipsec: Deprecated the old IPsec Tunnel interface by Neale Ranns · 4 years ago
- 95f59f3 ipsec: Mark the interface create reply deprecated by Neale Ranns · 4 years ago
- 4dd4308 ipsec: ipsec cli nexthop error by yedg · 4 years, 4 months ago
- a9585fd ipsec: fixed esp_decrypt pkt len after icv moved by PiotrX Kleski · 4 years, 1 month ago
- b2c31b6 misc: move to new pool_foreach macros by Damjan Marion · 4 years, 1 month ago
- 153e41a ipsec: change prediction by Fan Zhang · 4 years, 1 month ago
- 119c0d7 gre: Move to new API generated types/messages by Neale Ranns · 4 years, 1 month ago
- cfe949d ipsec: A P2MP ipsec interface is NBMA by Neale Ranns · 4 years, 1 month ago
- f6422ff ipsec: fix unformat types by Benoît Ganne · 4 years, 2 months ago
- 40aa27e ipsec: add support for tx-table-id in cli + example by Benoît Ganne · 4 years, 2 months ago
- 041add7 ipsec: Tunnel SA DSCP behaviour by Neale Ranns · 5 years ago
- e403113 misc: Break the big IP header files to improve compile time by Neale Ranns · 4 years, 2 months ago
- 18f0e31 ipsec: remove pending node by Fan Zhang · 4 years, 2 months ago
- 6ba4e41 ipsec: support for multipoint on ipsec interfaces by Neale Ranns · 4 years, 2 months ago
- 302b25a ipsec: Add to the SA info directly in the bihash by Neale Ranns · 4 years, 2 months ago
- b040f98 misc: minimize dependencies on udp.h by Florin Coras · 4 years, 2 months ago