[dpdk-dev,v5,1/3] examples/ipsec-secgw: fix missing ingress flow attribute
Checks
Commit Message
Generic flow API have both direction bits, ingress and egress for rules
which may work on both sides.
Fixes: ec17993a145a ("examples/ipsec-secgw: support security offload")
Cc: akhil.goyal@nxp.com
Signed-off-by: Nelio Laranjeiro <nelio.laranjeiro@6wind.com>
Acked-by: Radu Nicolau <radu.nicolau@intel.com>
Acked-by: Anoob Joseph <anoob.joseph@caviumnetworks.com>
---
examples/ipsec-secgw/ipsec.c | 2 ++
1 file changed, 2 insertions(+)
Comments
> -----Original Message-----
> From: dev [mailto:dev-bounces@dpdk.org] On Behalf Of Nelio Laranjeiro
> Sent: Monday, December 18, 2017 10:25 AM
> To: Gonzalez Monroy, Sergio <sergio.gonzalez.monroy@intel.com>;
> Nicolau, Radu <radu.nicolau@intel.com>; Anoob Joseph
> <anoob.joseph@caviumnetworks.com>
> Cc: dev@dpdk.org; akhil.goyal@nxp.com
> Subject: [dpdk-dev] [PATCH v5 1/3] examples/ipsec-secgw: fix missing
> ingress flow attribute
>
> Generic flow API have both direction bits, ingress and egress for rules which
> may work on both sides.
>
> Fixes: ec17993a145a ("examples/ipsec-secgw: support security offload")
> Cc: akhil.goyal@nxp.com
>
> Signed-off-by: Nelio Laranjeiro <nelio.laranjeiro@6wind.com>
> Acked-by: Radu Nicolau <radu.nicolau@intel.com>
> Acked-by: Anoob Joseph <anoob.joseph@caviumnetworks.com>
Series applied to dpdk-next-crypto.
Thanks,
Pablo
@@ -205,6 +205,8 @@ create_session(struct ipsec_ctx *ipsec_ctx, struct ipsec_sa *sa)
sa->attr.egress = (sa->direction ==
RTE_SECURITY_IPSEC_SA_DIR_EGRESS);
+ sa->attr.ingress = (sa->direction ==
+ RTE_SECURITY_IPSEC_SA_DIR_INGRESS);
sa->flow = rte_flow_create(sa->portid,
&sa->attr, sa->pattern, sa->action, &err);
if (sa->flow == NULL) {