Skip to content

Commit

Permalink
crypto : Always flush flow cache after committing ruleset
Browse files Browse the repository at this point in the history
Invalidating the flow cache after ruleset changes are committed
ensures that stale entries do not result in incorrect behaviour.

VRVDR-53445

(cherry picked from commit e674d1c)
  • Loading branch information
Srinivas Narayan authored and srinivasknarayan committed Feb 23, 2021
1 parent 8d842df commit 6588258
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions src/crypto/crypto_policy.c
Original file line number Diff line number Diff line change
Expand Up @@ -1424,6 +1424,9 @@ static void crypto_npf_cfg_commit_flush(void)
vrf_ctx->crypto_total_ipv6_policies;
}
crypto_npf_cfg_commit_count = 0;
flow_cache_invalidate(flow_cache, flow_cache_disabled,
false);

}

static void crypto_npf_cfg_commit_all_timer_handler(
Expand Down

0 comments on commit 6588258

Please sign in to comment.