From 9cf884a8051969deba50963d768bf57222811015 Mon Sep 17 00:00:00 2001 From: Nithin Dabilpuram Date: Wed, 6 Oct 2021 12:50:16 +0530 Subject: [PATCH] examples/ipsec-secgw: accept inline packet in single SA In inline protocol inbound SA's, plain IPv4 and IPv6 packets are delivered to application unlike inline crypto or lookaside. Hence fix the application to not drop them when working in single SA mode. Signed-off-by: Nithin Dabilpuram Acked-by: Akhil Goyal --- examples/ipsec-secgw/ipsec-secgw.c | 10 ---------- 1 file changed, 10 deletions(-) diff --git a/examples/ipsec-secgw/ipsec-secgw.c b/examples/ipsec-secgw/ipsec-secgw.c index 393e30d780..744bb612d6 100644 --- a/examples/ipsec-secgw/ipsec-secgw.c +++ b/examples/ipsec-secgw/ipsec-secgw.c @@ -847,16 +847,6 @@ process_pkts_inbound_nosp(struct ipsec_ctx *ipsec_ctx, struct rte_mbuf *m; uint32_t nb_pkts_in, i, idx; - /* Drop any IPv4 traffic from unprotected ports */ - free_pkts(traffic->ip4.pkts, traffic->ip4.num); - - traffic->ip4.num = 0; - - /* Drop any IPv6 traffic from unprotected ports */ - free_pkts(traffic->ip6.pkts, traffic->ip6.num); - - traffic->ip6.num = 0; - if (app_sa_prm.enable == 0) { nb_pkts_in = ipsec_inbound(ipsec_ctx, traffic->ipsec.pkts, -- 2.20.1