ipsec: go straight to lookup after esp encrypt 14/4214/2
authorSergio Gonzalez Monroy <sergio.gonzalez.monroy@intel.com>
Mon, 12 Dec 2016 10:37:49 +0000 (10:37 +0000)
committerDamjan Marion <dmarion.lists@gmail.com>
Mon, 12 Dec 2016 13:03:27 +0000 (13:03 +0000)
commit1b6f90204682fdd43d899ab454349536de785b86
treee868069447bf42ff24badf5602701abf6a0e5499
parent64bc612d4ce682fdd4a6e1c8a47b7538f200b24f
ipsec: go straight to lookup after esp encrypt

Currently, IPsec tunnel traffic goes to ip4-input/ip6-input after esp-encrypt.
It is not necessary to check that the new IP header is valid (if it is not
valid then we have otehr issues).

Instead, just send packets straight to ip4-lookup/ip6-lookup after esp-encrypt.

Change-Id: I5e35d500cb0f33f418f8554ed1f4390f02b6647d
Signed-off-by: Sergio Gonzalez Monroy <sergio.gonzalez.monroy@intel.com>
vnet/vnet/devices/dpdk/ipsec/esp_encrypt.c
vnet/vnet/ipsec/esp_encrypt.c