Add IPSec interface FIB index for TX packet 12/16412/6
authorPierre Pfister <ppfister@cisco.com>
Mon, 10 Dec 2018 10:19:08 +0000 (11:19 +0100)
committerNeale Ranns <nranns@cisco.com>
Tue, 11 Dec 2018 12:42:09 +0000 (12:42 +0000)
commit4c422f9a3c9d5a4ecae3f4ef6bee16bb8ce35bb2
tree4e144869c29d93d2df240058a4b871f60c96b654
parent240f69aed757720cfb78a140aaa84eb31db198f4
Add IPSec interface FIB index for TX packet

This patch adds a configuration parameter to IPSec tunnels, enabling
custom FIB selection for encapsulated packets.
Although this option could also be used for policy-based IPSec,
this change only enables it for virtual-tunnel-interface mode.

Note that this patch does change the API default behavior regarding
TX fib selection for encapsulated packets.
Previous behavior was to use the same FIB after and before encap.
The new default behavior consists in using the FIB 0 as default.

Change-Id: I5c212af909940a8cf6c7e3971bdc7623a2296452
Signed-off-by: Pierre Pfister <ppfister@cisco.com>
src/vnet/ipsec/esp_encrypt.c
src/vnet/ipsec/ipsec.api
src/vnet/ipsec/ipsec.h
src/vnet/ipsec/ipsec_api.c
src/vnet/ipsec/ipsec_cli.c
src/vnet/ipsec/ipsec_if.c