Re: [dpdk-dev] [PATCH] examples/ipsec-secgw: fix SPD no-match is misinterpreted

2019-04-04 Thread Ananyev, Konstantin
Hi Akhil, > > > > acl_classify() returns zero value when no matching rule was found. > > > > Currently ipsec-secgw treats it as a valid SPI value, though it has > > > > to discard such packets. > > > > Error could be easily observed by sending outbound unmatched packets, > > > > user will see som

Re: [dpdk-dev] [PATCH] examples/ipsec-secgw: fix SPD no-match is misinterpreted

2019-03-30 Thread Ananyev, Konstantin
> Hi Akhil, > > > > > On 3/28/2019 6:17 PM, Konstantin Ananyev wrote: > > > acl_classify() returns zero value when no matching rule was found. > > > Currently ipsec-secgw treats it as a valid SPI value, though it has > > > to discard such packets. > > > Error could be easily observed by sending o

Re: [dpdk-dev] [PATCH] examples/ipsec-secgw: fix SPD no-match is misinterpreted

2019-03-29 Thread Ananyev, Konstantin
Hi Akhil, > > On 3/28/2019 6:17 PM, Konstantin Ananyev wrote: > > acl_classify() returns zero value when no matching rule was found. > > Currently ipsec-secgw treats it as a valid SPI value, though it has > > to discard such packets. > > Error could be easily observed by sending outbound unmatche

Re: [dpdk-dev] [PATCH] examples/ipsec-secgw: fix SPD no-match is misinterpreted

2019-03-29 Thread Akhil Goyal
Hi Konstantin, On 3/28/2019 6:17 PM, Konstantin Ananyev wrote: > acl_classify() returns zero value when no matching rule was found. > Currently ipsec-secgw treats it as a valid SPI value, though it has > to discard such packets. > Error could be easily observed by sending outbound unmatched packet

[dpdk-dev] [PATCH] examples/ipsec-secgw: fix SPD no-match is misinterpreted

2019-03-28 Thread Konstantin Ananyev
acl_classify() returns zero value when no matching rule was found. Currently ipsec-secgw treats it as a valid SPI value, though it has to discard such packets. Error could be easily observed by sending outbound unmatched packets, user will see something like that in the log: IPSEC: No cryptodev: co