Code Review / vpp.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: 863d1c8) | patch
ipsec: new api for sa ips and ports updates 59/37059/11
authorArthur de Kerhor <arthurdekerhor@gmail.com>
Wed, 31 Aug 2022 17:13:03 +0000 (19:13 +0200)
committerBeno�t Ganne <bganne@cisco.com>
Fri, 16 Dec 2022 10:13:24 +0000 (10:13 +0000)
commit4117b24acb4241d7f2ef38248bc254f6a4a7b422
tree982eb58cbe8cfd0d43e2a09e129d129c1a8a5511tree | snapshot
parent863d1c8711018ded9bd4db5f27851a0b8ac45836commit | diff
ipsec: new api for sa ips and ports updates

Useful to update the tunnel paramaters and udp ports (NAT-T) of an SA
without having to rekey. Could be done by deleting and re-adding the
SA but it would not preserve the anti-replay window if there is one.
Use case: a nat update/reboot between the 2 endpoints of the tunnel.

Type: feature
Change-Id: Icf5c0aac218603e8aa9a008ed6f614e4a6db59a0
Signed-off-by: Arthur de Kerhor <arthurdekerhor@gmail.com>
src/vnet/ipsec/ipsec.api diff | blob | history
src/vnet/ipsec/ipsec_api.c diff | blob | history
src/vnet/ipsec/ipsec_sa.c diff | blob | history
src/vnet/ipsec/ipsec_sa.h diff | blob | history
src/vnet/ipsec/ipsec_test.c diff | blob | history
test/template_ipsec.py diff | blob | history
test/test_ipsec_tun_if_esp.py diff | blob | history
test/vpp_ipsec.py diff | blob | history
Vector Packet Processing