ipsec: huge anti-replay window support 65/37865/23
authorMaxime Peim <mpeim@cisco.com>
Thu, 22 Dec 2022 11:26:57 +0000 (11:26 +0000)
committerBeno�t Ganne <bganne@cisco.com>
Mon, 30 Oct 2023 15:23:13 +0000 (15:23 +0000)
commit0e2f188f7c9872d7c946c14d785c6dc7c7c68847
tree1adc39db5e2e0e243811c8ce001d0bd056c0402e
parent21922cec7339f48989f230248de36a98816c4b1b
ipsec: huge anti-replay window support

Type: improvement

Since RFC4303 does not specify the anti-replay window size, VPP should
support multiple window size. It is done through a clib_bitmap.

Signed-off-by: Maxime Peim <mpeim@cisco.com>
Change-Id: I3dfe30efd20018e345418bef298ec7cec19b1cfc
17 files changed:
src/plugins/ikev2/ikev2.c
src/plugins/unittest/ipsec_test.c
src/vnet/ipsec/ah_decrypt.c
src/vnet/ipsec/esp_decrypt.c
src/vnet/ipsec/ipsec.api
src/vnet/ipsec/ipsec_api.c
src/vnet/ipsec/ipsec_cli.c
src/vnet/ipsec/ipsec_format.c
src/vnet/ipsec/ipsec_sa.c
src/vnet/ipsec/ipsec_sa.h
src/vnet/ipsec/ipsec_test.c
src/vnet/ipsec/ipsec_types.api
src/vppinfra/bitmap.h
test/template_ipsec.py
test/test_ipsec_api.py
test/test_ipsec_esp.py
test/vpp_ipsec.py