examples/ipsec-secgw: fix inline test scripts
authorBernard Iremonger <bernard.iremonger@intel.com>
Wed, 10 Jul 2019 11:23:10 +0000 (12:23 +0100)
committerAkhil Goyal <akhil.goyal@nxp.com>
Fri, 19 Jul 2019 12:32:58 +0000 (14:32 +0200)
Remove workaround in tun_aesgcm_defs.sh and trs_aesgcm_defs.sh
to get around the bug where the first inbound packet is dropped
for inline crypto.

Fixes: 929784452094 ("examples/ipsec-secgw: add scripts for functional test")
Cc: stable@dpdk.org
Signed-off-by: Bernard Iremonger <bernard.iremonger@intel.com>
Acked-by: Konstantin Ananyev <konstantin.ananyev@intel.com>
examples/ipsec-secgw/test/trs_aesgcm_defs.sh
examples/ipsec-secgw/test/tun_aesgcm_defs.sh

index a4d902b..8382d3d 100644 (file)
@@ -33,11 +33,6 @@ aead "rfc4106\(gcm\(aes\)\)" \
 
        ssh ${REMOTE_HOST} ip xfrm policy list
        ssh ${REMOTE_HOST} ip xfrm state list
-
-       # to overcome problem with ipsec-secgw for inline mode,
-       # when first packet(s) will be always dropped.
-       # note that ping will fail here
-       ssh ${REMOTE_HOST} ping -c 1 ${LOCAL_IPV4}
 }
 
 config6_remote_xfrm()
@@ -68,9 +63,4 @@ aead "rfc4106\(gcm\(aes\)\)" \
 
        ssh ${REMOTE_HOST} ip xfrm policy list
        ssh ${REMOTE_HOST} ip xfrm state list
-
-       # to overcome problem with ipsec-secgw for inline mode,
-       # when first packet(s) will be always dropped.
-       # note that ping will fail here
-       ssh ${REMOTE_HOST} ping -c 1 ${LOCAL_IPV6}
 }
index 1764ef6..8ae6532 100644 (file)
@@ -35,11 +35,6 @@ aead "rfc4106\(gcm\(aes\)\)" \
 
        ssh ${REMOTE_HOST} ip xfrm policy list
        ssh ${REMOTE_HOST} ip xfrm state list
-
-       # to overcome problem with ipsec-secgw for inline mode,
-       # when first packet(s) will be always dropped.
-       # note that ping will fail here
-       ssh ${REMOTE_HOST} ping -c 1 ${LOCAL_IPV4}
 }
 
 config6_remote_xfrm()
@@ -72,9 +67,4 @@ aead "rfc4106\(gcm\(aes\)\)" \
 
        ssh ${REMOTE_HOST} ip xfrm policy list
        ssh ${REMOTE_HOST} ip xfrm state list
-
-       # to overcome problem with ipsec-secgw for inline mode,
-       # when first packet(s) will be always dropped.
-       # note that ping will fail here
-       ssh ${REMOTE_HOST} ping6 -c 1 ${LOCAL_IPV6}
 }