ipsec: Record the number of packets lost from an SA 71/33771/3
authorNeale Ranns <neale@graphiant.com>
Tue, 21 Sep 2021 12:34:19 +0000 (12:34 +0000)
committerBeno�t Ganne <bganne@cisco.com>
Wed, 29 Sep 2021 14:27:48 +0000 (14:27 +0000)
commite11203e5b8fd61986573e0cba9e47cefcf50e60d
treeb5b34bf9742962290ebed720963b72ce5045c6da
parent979545e79579bdc6fe3cb2d3cfd0036c588acb32
ipsec: Record the number of packets lost from an SA

Type: feature

Gaps in the sequence numbers received on an SA indicate packets that were lost.
Gaps are identified using the anti-replay window that records the sequences seen.

Publish the number of lost packets in the stats segment at /net/ipsec/sa/lost

Signed-off-by: Neale Ranns <neale@graphiant.com>
Change-Id: I8af1c09b7b25a705e18bf82e1623b3ce19e5a74d
src/vlib/counter.h
src/vnet/ipsec/ah_decrypt.c
src/vnet/ipsec/esp_decrypt.c
src/vnet/ipsec/ipsec_cli.c
src/vnet/ipsec/ipsec_format.c
src/vnet/ipsec/ipsec_sa.c
src/vnet/ipsec/ipsec_sa.h
test/template_ipsec.py
test/test_ipsec_esp.py
test/vpp_ipsec.py