From: Neale Ranns <neale@graphiant.com>
Date: Tue, 19 Jan 2021 13:38:47 +0000 (+0000)
Subject: ipsec: Tunnelled packets are locally generated
X-Git-Tag: v21.10-rc0~691
X-Git-Url: https://gerrit.fd.io/r/gitweb?a=commitdiff_plain;h=45d6d83761cd8c09c0a6430d11f70c37c3df256e;hp=c15539af6f2f8e816475e8ed03d1992a773ccba3;p=vpp.git

ipsec: Tunnelled packets are locally generated

Type: fix

this means we 1) don't decrement TTL and (for v6) can fragment.

Signed-off-by: Neale Ranns <neale@graphiant.com>
Change-Id: I0f718da7dcaba834ad495ae9242a9a58c9e7c184
---

diff --git a/src/vnet/ipsec/esp_encrypt.c b/src/vnet/ipsec/esp_encrypt.c
index bd6e7641f4a..4f6976baaee 100644
--- a/src/vnet/ipsec/esp_encrypt.c
+++ b/src/vnet/ipsec/esp_encrypt.c
@@ -779,6 +779,7 @@ esp_encrypt_inline (vlib_main_t *vm, vlib_node_runtime_t *node,
 
 	      len = payload_len_total + hdr_len - len;
 	      ip6->payload_length = clib_net_to_host_u16 (len);
+	      b[0]->flags |= VNET_BUFFER_F_LOCALLY_ORIGINATED;
 	    }
 	  else
 	    {