diff options
| author | Daniil Baturin <daniil@vyos.io> | 2025-02-18 15:52:36 +0000 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-02-18 15:52:36 +0000 |
| commit | 752b400aaf5520c29726dadfc94127a06e0ad5a9 (patch) | |
| tree | ce3d9e8320ccb20fc00731d60d543d7499a86dd6 /data | |
| parent | 774f775ea4875f986a9624f1b201ee76aea0da93 (diff) | |
| parent | 7897f8d216295b32626dc4d5604349812c592921 (diff) | |
| download | vyos-1x-752b400aaf5520c29726dadfc94127a06e0ad5a9.tar.gz vyos-1x-752b400aaf5520c29726dadfc94127a06e0ad5a9.zip | |
Merge pull request #15 from sever-sever/T7168
T7168: Add IPsec XFRM netlink plugin and CLI
Diffstat (limited to 'data')
| -rw-r--r-- | data/templates/vpp/startup.conf.j2 | 26 |
1 files changed, 25 insertions, 1 deletions
diff --git a/data/templates/vpp/startup.conf.j2 b/data/templates/vpp/startup.conf.j2 index 5cab34a97..cf10b6ce5 100644 --- a/data/templates/vpp/startup.conf.j2 +++ b/data/templates/vpp/startup.conf.j2 @@ -104,7 +104,15 @@ plugins { plugin geneve_plugin.so { enable } plugin gre_plugin.so { enable } plugin vxlan_plugin.so { enable } - plugin wireguard_plugin.so { enable } + # Secure + # plugin ikev2_plugin.so { enable } + # plugin dns_plugin.so { enable } # Probably required for FQDN peers +{% if ipsec is vyos_defined %} + plugin crypto_ipsecmb_plugin.so { enable } + plugin crypto_native_plugin.so { enable } + plugin crypto_openssl_plugin.so { enable } +{% endif %} + # plugin wireguard_plugin.so { enable } } linux-cp { @@ -179,3 +187,19 @@ dpdk { {% endfor %} uio-bind-force } + +{% if ipsec is vyos_defined %} +linux-xfrm-nl { + enable-route-mode-ipsec + interface {{ ipsec.interface_type }} +{% if ipsec.netlink.batch_delay_ms is vyos_defined %} + nl-batch-delay-ms {{ ipsec.netlink.batch_delay_ms }} +{% endif %} +{% if ipsec.netlink.batch_size is vyos_defined %} + nl-batch-size {{ ipsec.netlink.batch_size }} +{% endif %} +{% if ipsec.netlink.rx_buffer_size is vyos_defined %} + nl-rx-buffer-size {{ ipsec.netlink.rx_buffer_size }} +{% endif %} +} +{% endif %} |