On 12/12/2017 8:32 AM, Anoob Joseph wrote:
When security offload is enabled, the packet should be forwarded on the port configured in the SA. Security session will be configured on that port only, and sending the packet on other ports could result in unencrypted packets being sent out. This would have performance improvements too, as the per packet LPM lookup would be avoided for IPsec packets, in inline mode. Fixes: ec17993a145a ("examples/ipsec-secgw: support security offload") Signed-off-by: Anoob Joseph <anoob.jos...@caviumnetworks.com> Acked-by: Akhil Goyal <akhil.go...@nxp.com>
Acked-by: Radu Nicolau <radu.nico...@intel.com>