diff options
| author | Viacheslav Hletenko <v.gletenko@vyos.io> | 2025-02-14 15:59:59 +0000 |
|---|---|---|
| committer | Viacheslav Hletenko <v.gletenko@vyos.io> | 2025-02-17 08:23:15 +0000 |
| commit | 7897f8d216295b32626dc4d5604349812c592921 (patch) | |
| tree | ceb843d64f19d378a0dde1df3de5889aa31b6044 /interface-definitions | |
| parent | 6dae0f206d67e0ef8678305c279505e3a5da6208 (diff) | |
| download | vyos-1x-7897f8d216295b32626dc4d5604349812c592921.tar.gz vyos-1x-7897f8d216295b32626dc4d5604349812c592921.zip | |
T7168: Add IPsec XFRM netlink plugin and CLI
Add linux-xfrm-nl plugin
Add configuration commands for VPP IPsec
```
set vpp settings ipsec interface-type 'ipsec'
set vpp settings ipsec netlink batch-delay-ms '250'
set vpp settings ipsec netlink batch-size '150'
set vpp settings ipsec netlink rx-buffer-size '1024'
```
Diffstat (limited to 'interface-definitions')
| -rw-r--r-- | interface-definitions/include/vpp/netlink.xml.i | 45 | ||||
| -rw-r--r-- | interface-definitions/vpp.xml.in | 72 |
2 files changed, 74 insertions, 43 deletions
diff --git a/interface-definitions/include/vpp/netlink.xml.i b/interface-definitions/include/vpp/netlink.xml.i new file mode 100644 index 000000000..903100d00 --- /dev/null +++ b/interface-definitions/include/vpp/netlink.xml.i @@ -0,0 +1,45 @@ +<!-- include start from vpp/netlink.xml.i --> +<node name="netlink"> + <properties> + <help>Netlink options</help> + </properties> + <children> + <leafNode name="rx-buffer-size"> + <properties> + <help>Receive buffer size</help> + <valueHelp> + <format>u32:0-4294967295</format> + <description>Receive buffer size</description> + </valueHelp> + <constraint> + <validator name="numeric" argument="--range 0-4294967295"/> + </constraint> + </properties> + </leafNode> + <leafNode name="batch-size"> + <properties> + <help>Batch size</help> + <valueHelp> + <format>u32:0-4294967295</format> + <description>Batch size</description> + </valueHelp> + <constraint> + <validator name="numeric" argument="--range 0-4294967295"/> + </constraint> + </properties> + </leafNode> + <leafNode name="batch-delay-ms"> + <properties> + <help>Batch delay</help> + <valueHelp> + <format>u32:0-4294967295</format> + <description>Batch delay (in ms)</description> + </valueHelp> + <constraint> + <validator name="numeric" argument="--range 0-4294967295"/> + </constraint> + </properties> + </leafNode> +</children> +</node> +<!-- include end --> diff --git a/interface-definitions/vpp.xml.in b/interface-definitions/vpp.xml.in index 77a461242..2160d0715 100644 --- a/interface-definitions/vpp.xml.in +++ b/interface-definitions/vpp.xml.in @@ -638,6 +638,34 @@ </leafNode> </children> </node> + <node name="ipsec"> + <properties> + <help>IPsec settings</help> + </properties> + <children> + <leafNode name="interface-type"> + <properties> + <help>IPsec interface type</help> + <completionHelp> + <list>ipsec ipip</list> + </completionHelp> + <valueHelp> + <format>ipsec</format> + <description>IPsec interface type</description> + </valueHelp> + <valueHelp> + <format>ipip</format> + <description>IPIP tunnel interface type</description> + </valueHelp> + <constraint> + <regex>(ipsec|ipip)</regex> + </constraint> + </properties> + <defaultValue>ipsec</defaultValue> + </leafNode> + #include <include/vpp/netlink.xml.i> + </children> + </node> <node name="l2learn"> <properties> <help>Level 2 MAC address learning settings</help> @@ -663,49 +691,7 @@ <help>Linux control plane setting</help> </properties> <children> - <node name="netlink"> - <properties> - <help>Netlink options</help> - </properties> - <children> - <leafNode name="rx-buffer-size"> - <properties> - <help>Receive buffer size</help> - <valueHelp> - <format>u32:0-4294967295</format> - <description>Receive buffer size</description> - </valueHelp> - <constraint> - <validator name="numeric" argument="--range 0-4294967295"/> - </constraint> - </properties> - </leafNode> - <leafNode name="batch-size"> - <properties> - <help>Batch size</help> - <valueHelp> - <format>u32:0-4294967295</format> - <description>Batch size</description> - </valueHelp> - <constraint> - <validator name="numeric" argument="--range 0-4294967295"/> - </constraint> - </properties> - </leafNode> - <leafNode name="batch-delay-ms"> - <properties> - <help>Batch delay</help> - <valueHelp> - <format>u32:0-4294967295</format> - <description>Batch delay (in ms)</description> - </valueHelp> - <constraint> - <validator name="numeric" argument="--range 0-4294967295"/> - </constraint> - </properties> - </leafNode> - </children> - </node> + #include <include/vpp/netlink.xml.i> <leafNode name="ignore-kernel-routes"> <properties> <help>Ignore kernel routes</help> |