X-Git-Url: https://gerrit.fd.io/r/gitweb?a=blobdiff_plain;f=src%2Fvnet%2Fipsec%2Fipsec_spd.c;h=22dddfd3fa8f150cd37f235f95fd80f491f1605b;hb=86f8208af43efaa71b8e1c0a5ff86fc233456d9d;hp=aecb50dd34670294a5b74ad2c94007247c0b4325;hpb=963e9b583b7fa7c26efc7acee2449069057b93d7;p=vpp.git diff --git a/src/vnet/ipsec/ipsec_spd.c b/src/vnet/ipsec/ipsec_spd.c index aecb50dd346..22dddfd3fa8 100644 --- a/src/vnet/ipsec/ipsec_spd.c +++ b/src/vnet/ipsec/ipsec_spd.c @@ -46,22 +46,30 @@ ipsec_add_del_spd (vlib_main_t * vm, u32 spd_id, int is_add) #define _(s,v) vec_free(spd->policies[IPSEC_SPD_POLICY_##s]); foreach_ipsec_spd_policy_type #undef _ - if (im->fp_spd_is_enabled) + if (im->ipv4_fp_spd_is_enabled) { ipsec_spd_fp_t *fp_spd = &spd->fp_spd; clib_bihash_free_16_8 (&fp_spd->fp_ip4_lookup_hash); } + + if (im->ipv6_fp_spd_is_enabled) + { + ipsec_spd_fp_t *fp_spd = &spd->fp_spd; + + clib_bihash_free_40_8 (&fp_spd->fp_ip6_lookup_hash); + } + pool_put (im->spds, spd); } - else /* create new SPD */ + else /* create new SPD */ { pool_get (im->spds, spd); clib_memset (spd, 0, sizeof (*spd)); spd_index = spd - im->spds; spd->id = spd_id; hash_set (im->spd_index_by_spd_id, spd_id, spd_index); - if (im->fp_spd_is_enabled) + if (im->ipv4_fp_spd_is_enabled) { ipsec_spd_fp_t *fp_spd = &spd->fp_spd; @@ -70,6 +78,16 @@ ipsec_add_del_spd (vlib_main_t * vm, u32 spd_id, int is_add) im->fp_lookup_hash_buckets, im->fp_lookup_hash_buckets * IPSEC_FP_IP4_HASH_MEM_PER_BUCKET); } + if (im->ipv6_fp_spd_is_enabled) + { + ipsec_spd_fp_t *fp_spd = &spd->fp_spd; + + clib_bihash_init_40_8 ( + &fp_spd->fp_ip6_lookup_hash, "SPD_FP ip6 rules lookup bihash", + im->fp_lookup_hash_buckets, + im->fp_lookup_hash_buckets * IPSEC_FP_IP6_HASH_MEM_PER_BUCKET); + fp_spd->fp_ip6_lookup_hash_initialized = 1; + } } return 0; }