Learning VPP: Syncing IPsec SA Counters to Linux XFRM via NEWAE

When VPP handles IPsec dataplane traffic, it maintains its own per-SA byte and packet counters internally. The Linux kernel s XFRM subsystem, however, never sees those packets and has no way to update its own accounting. The result: ip -s xfrm Continue reading