Maniphest T7168

VPP add IPsec netlink XFRM settings
Closed, ResolvedPublicFEATURE REQUEST
Actions

Assigned To

Authored By

	Viacheslav
	Feb 14 2025, 2:21 PM

Tags

Referenced Files

None

Subscribers

Global Notifications

Description

Summary

VPP add IPsec netlink XFRM settings. Add configuration mode.

Use case

The purpose of introducing Linux XFRM netlink support in the linux_nl_plugin
is to mirror Linux XFRM configurations to the VPP IPsec subsystem. These
configurations can be manually set using ip commands or via keying daemons
like StrongSwan. In both cases, the netlink notifications generated from
Linux are read by this XFRM module and translated into VPP's IPsec configuration.

https://github.com/MarvellEmbeddedProcessors/vpp/blob/stable/2402/src/plugins/linux-cp/README

Details

Version: -
Is it a breaking change?: Unspecified (possibly destroys the router)
Issue type: Feature (new functionality)

Related Objects

Mentioned In: rVYOSONEX7897f8d21629: T7168: Add IPsec XFRM netlink plugin and CLI
rVYOSONEX752b400aaf55: Merge pull request #15 from sever-sever/T7168

Event Timeline

Viacheslav created this task.Feb 14 2025, 2:21 PM

Viacheslav changed the task status from Open to In progress.

Viacheslav claimed this task.

Viacheslav triaged this task as Normal priority.

PR https://github.com/vyos/vyos-vpp/pull/15

pasik subscribed.Feb 15 2025, 7:52 PM

Viacheslav closed this task as Resolved.Feb 18 2025, 5:03 PM

Viacheslav moved this task from Need Triage to Completed on the VyOS Rolling board.

Viacheslav mentioned this in rVYOSONEX7897f8d21629: T7168: Add IPsec XFRM netlink plugin and CLI.Aug 12 2025, 2:31 PM

Restricted Repository Identity mentioned this in rVYOSONEX752b400aaf55: Merge pull request #15 from sever-sever/T7168.Aug 12 2025, 2:31 PM