ipsec: introduce fast path ipv6 inbound matching 96/37196/4
authorPiotr Bronowski <piotrx.bronowski@intel.com>
Tue, 20 Sep 2022 14:44:36 +0000 (14:44 +0000)
committerFan Zhang <royzhang1980@hotmail.com>
Wed, 21 Sep 2022 15:11:54 +0000 (15:11 +0000)
commit06abf235269558fe75d72019a437337b24d7199e
treef1827b0781e2821e5ceed55117f21afa428180b2
parenta2a7a4031be4896529cce591c26e8cebe8ca22ec
ipsec: introduce fast path ipv6 inbound matching

This patch introduces fast path matching for inbound traffic ipv6.
Fast path uses bihash tables in order to find matching policy.
Adding and removing policies in fast path is much faster than in current
implementation. It is still new feature and further work needs
and can be done in order to improve the perfromance.

Type: feature

Change-Id: Iaef6638033666ad6eb028ffe0c8a4f4374451753
Signed-off-by: Piotr Bronowski <piotrx.bronowski@intel.com>
src/vnet/ipsec/ipsec_input.c
src/vnet/ipsec/ipsec_spd.c
src/vnet/ipsec/ipsec_spd_fp_lookup.h
src/vnet/ipsec/ipsec_spd_policy.c
test/test_ipsec_spd_fp_input.py