From: Alexander Chernavin <achernavin@netgate.com>
Date: Fri, 20 Mar 2020 14:36:43 +0000 (-0400)
Subject: ipsec: increment no-tunnel counter in ipsec-tun-input
X-Git-Tag: v20.09-rc0~359
X-Git-Url: https://gerrit.fd.io/r/gitweb?p=vpp.git;a=commitdiff_plain;h=f7f7f84ae9d949c5c872f9e31bb54cff7ca9c017

ipsec: increment no-tunnel counter in ipsec-tun-input

If "no-tunnel" error erises, you will not see it in the "show errors"
output because the packet will be punted. That fact complicates
troubleshooting.

Type: improvement

Change-Id: Ic08347f81131a4a73a05b66acbfb02797373f5ab
Signed-off-by: Alexander Chernavin <achernavin@netgate.com>
---

diff --git a/src/vnet/ipsec/ipsec_tun_in.c b/src/vnet/ipsec/ipsec_tun_in.c
index 501ab027634..fd0c3b08f19 100644
--- a/src/vnet/ipsec/ipsec_tun_in.c
+++ b/src/vnet/ipsec/ipsec_tun_in.c
@@ -347,6 +347,9 @@ ipsec_tun_protect_input_inline (vlib_main_t * vm, vlib_node_runtime_t * node,
 			       IPSEC_TUN_PROTECT_INPUT_ERROR_RX,
 			       from_frame->n_vectors - (n_disabled +
 							n_no_tunnel));
+  vlib_node_increment_counter (vm, node->node_index,
+			       IPSEC_TUN_PROTECT_INPUT_ERROR_NO_TUNNEL,
+			       n_no_tunnel);
 
   vlib_buffer_enqueue_to_next (vm, node, from, nexts, from_frame->n_vectors);