Code Review / vpp.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: 8e88bf5) | patch
ipsec: Improve tunnel mode detection in ESP decrypt post-crypto 43/43643/2
authorDenys Haryachyy <[email protected]>
Thu, 28 Aug 2025 09:56:42 +0000 (12:56 +0300)
committerFan Zhang <[email protected]>
Fri, 19 Sep 2025 11:27:24 +0000 (11:27 +0000)
commitbb56096e98e1d42af028160fb7e844e57a127ea2
treee767544536ace6432e79aebdf34ccf3d856cfc50tree | snapshot
parent8e88bf52ab53db84d958f52ece4f29a76ca7e19acommit | diff
ipsec: Improve tunnel mode detection in ESP decrypt post-crypto

Type: fix

 - Use irt->is_tunnel flag to properly detect IPSec tunnel mode SAs
 - Skip IP address verification for IPSec tunnel mode (outer IP already validated)

Change-Id: Icd57b699b745f764e7e87bbbb4cf891e82320f37
Signed-off-by: Denys Haryachyy <[email protected]>
src/vnet/ipsec/esp_decrypt.c diff | blob | history
Vector Packet Processing