denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

vici: Report per-CPU SA information

Browse Source
This commit is contained in:
Tobias Brunner
2025-05-28 16:35:27 +02:00
parent fbfae44dd1
commit c176d32a73
2 changed files with 12 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/vici/README.md
+2
View File
@@ -819,6 +819,8 @@ command.
mark-mask-out = <hex encoded outbound Netfilter mark mask> mark-mask-out = <hex encoded outbound Netfilter mark mask>
if-id-in = <hex encoded inbound XFRM interface ID> if-id-in = <hex encoded inbound XFRM interface ID>
if-id-out = <hex encoded outbound XFRM interface ID> if-id-out = <hex encoded outbound XFRM interface ID>
per-cpu-sas = <yes if per-CPU SAs enabled>
cpu = <CPU ID of per-CPU SA>
label = <hex encoded security label> label = <hex encoded security label>
encr-alg = <ESP encryption algorithm name, if any> encr-alg = <ESP encryption algorithm name, if any>
encr-keysize = <ESP encryption key size, if applicable> encr-keysize = <ESP encryption key size, if applicable>
src/libcharon/plugins/vici/vici_query.c
+10 -1
View File
@@ -200,7 +200,7 @@ static void list_child_ipsec(vici_builder_t *b, child_sa_t *child)
{ {
proposal_t *proposal; proposal_t *proposal;
uint16_t alg, ks; uint16_t alg, ks;
uint32_t if_id; uint32_t if_id, cpu;
b->add_kv(b, "protocol", "%N", protocol_id_names, b->add_kv(b, "protocol", "%N", protocol_id_names,
child->get_protocol(child)); child->get_protocol(child));
@@ -229,6 +229,15 @@ static void list_child_ipsec(vici_builder_t *b, child_sa_t *child)
{ {
b->add_kv(b, "if-id-out", "%.8x", if_id); b->add_kv(b, "if-id-out", "%.8x", if_id);
} }
if (child->use_per_cpu(child))
{
b->add_kv(b, "per-cpu-sas", "yes");
}
cpu = child->get_cpu(child);
if (cpu != CPU_ID_MAX)
{
b->add_kv(b, "cpu", "%u", cpu);
}
proposal = child->get_proposal(child); proposal = child->get_proposal(child);
if (proposal) if (proposal)