MdeModulePkg/NetworkPkg: Locate IpSec on IP packet processing only if it's installed.

Modified the logic in Ip4Dxe and Ip6Dxe to not locate EFI_IPSEC2_PROTOCOL on each
message transmit/receive. Instead, register a callback in the drivers entry points
on the IpSec protocol installation, and process only if the protocol is installed.
This speeds up the network stacks when IpSec is not installed since there is a
penalty associated with searching the entire handle database on each packet processing.

Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Samer El-Haj-Mahmoud <samer.el-haj-mahmoud@hp.com>
Reviewed-by: Fu Siyuan <siyuan.fu@intel.com>

git-svn-id: https://svn.code.sf.net/p/edk2/code/trunk/edk2@18365 6f19259b-4bc3-4df7-8a09-765794883524

1 files changed, 6 insertions, 0 deletions

diff --git a/NetworkPkg/Ip6Dxe/Ip6Input.c b/NetworkPkg/Ip6Dxe/Ip6Input.c
index cf88884e38..e53e0874b9 100644
--- a/NetworkPkg/Ip6Dxe/Ip6Input.c
+++ b/NetworkPkg/Ip6Dxe/Ip6Input.c
@@ -2,6 +2,7 @@
   IP6 internal functions to process the incoming packets.

 

   Copyright (c) 2009 - 2014, Intel Corporation. All rights reserved.<BR>

+  (C) Copyright 2015 Hewlett-Packard Development Company, L.P.<BR>

 

   This program and the accompanying materials

   are licensed and made available under the terms and conditions of the BSD License

@@ -525,6 +526,11 @@ Ip6IpSecProcessPacket (
   EFI_IP6_HEADER            ZeroHead;

 

   Status        = EFI_SUCCESS;

+

+  if (!mIpSec2Installed) {

+    goto ON_EXIT;

+  }

+  

   Packet        = *Netbuf;

   RecycleEvent  = NULL;

   IpSecWrap     = NULL;