summaryrefslogtreecommitdiff
path: root/data/templates/vpp
diff options
context:
space:
mode:
authorViacheslav <v.gletenko@vyos.io>2025-09-22 08:43:12 +0000
committerViacheslav <v.gletenko@vyos.io>2025-09-22 08:43:12 +0000
commitc0ab9e061edddd49f0db754d909173eaad5fcbb7 (patch)
tree41afb9b5f3882f667f121a10f896a4b356484441 /data/templates/vpp
parent1824f304c969be04c7dcb0d8868576839316c2dc (diff)
downloadvyos-1x-c0ab9e061edddd49f0db754d909173eaad5fcbb7.tar.gz
vyos-1x-c0ab9e061edddd49f0db754d909173eaad5fcbb7.zip
T7773: VPP move crypto engines to crypto-engines template section
VPP 25.06 introduces a new format for crypto engines configuration https://github.com/FDio/vpp/commit/f479eeb76 Update the template to account for this change.
Diffstat (limited to 'data/templates/vpp')
-rw-r--r--data/templates/vpp/startup.conf.j216
1 files changed, 11 insertions, 5 deletions
diff --git a/data/templates/vpp/startup.conf.j2 b/data/templates/vpp/startup.conf.j2
index 4c65e3cb4..f801e0f52 100644
--- a/data/templates/vpp/startup.conf.j2
+++ b/data/templates/vpp/startup.conf.j2
@@ -109,16 +109,22 @@ plugins {
# Secure
# plugin ikev2_plugin.so { enable }
# plugin dns_plugin.so { enable } # Probably required for FQDN peers
-{% if ipsec is vyos_defined %}
- plugin crypto_ipsecmb_plugin.so { enable }
- plugin crypto_native_plugin.so { enable }
- plugin crypto_openssl_plugin.so { enable }
-{% endif %}
# plugin wireguard_plugin.so { enable }
# ACL
plugin acl_plugin.so { enable }
}
+
+crypto-engines {
+ default { disable }
+{% if ipsec is vyos_defined %}
+ ipsecmb { enable }
+ native { enable }
+ openssl { enable }
+{% endif %}
+}
+
+
linux-cp {
lcp-sync
lcp-auto-subint