ipsec: introduce fast path ipv4 inbound matching 52/37052/3
authorPiotr Bronowski <piotrx.bronowski@intel.com>
Wed, 31 Aug 2022 13:48:14 +0000 (13:48 +0000)
committerPiotr Bronowski <piotrx.bronowski@intel.com>
Mon, 12 Sep 2022 09:55:14 +0000 (11:55 +0200)
commit993b6bee63d4f455db0a6021c9659aad4545acf2
tree9c098bf4cadb56fbb3170264b0801c1565cac872
parenta27aa6b413512415a592ecd1f14714fd1634d29c
ipsec: introduce fast path ipv4 inbound matching

This patch introduces fast path matching for inbound traffic ipv4.
Fast path uses bihash tables in order to find matching policy. Adding
and removing policies in fast path is much faster than in current
implementation. It is still new feature and further work needs
and can be done in order to improve perfromance.

Type: feature

Signed-off-by: Piotr Bronowski <piotrx.bronowski@intel.com>
Change-Id: Ifbd5bfecc21b76ddf8363f5dc089d77595196675
src/vnet/ipsec/ipsec.c
src/vnet/ipsec/ipsec.h
src/vnet/ipsec/ipsec_input.c
src/vnet/ipsec/ipsec_output.h
src/vnet/ipsec/ipsec_spd.c
src/vnet/ipsec/ipsec_spd.h
src/vnet/ipsec/ipsec_spd_fp_lookup.h
src/vnet/ipsec/ipsec_spd_policy.c
src/vnet/ipsec/ipsec_spd_policy.h
test/test_ipsec_spd_fp_input.py [new file with mode: 0644]