d/numam-dpdk
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

doc: add inline crypto feature

Browse Source 
Signed-off-by: Radu Nicolau <radu.nicolau@intel.com>
This commit is contained in:
Radu Nicolau 2017-11-09 12:29:42 +00:00 committed by Thomas Monjalon
parent 651982e5ef
commit 13e855a3b9
7 changed files with 38 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
doc/guides/nics/features.rst
View File

@ -506,6 +506,23 @@ Supports adding traffic mirroring rules.
* **[related] API**: ``rte_eth_mirror_rule_set()``, ``rte_eth_mirror_rule_reset()``.
.. _nic_features_inline_crypto_doc:
Inline crypto
-------------
Supports inline crypto processing (eg. inline IPsec). See Security library and PMD documentation for more details.
* **[uses] rte_eth_rxconf,rte_eth_rxmode**: ``offloads:DEV_RX_OFFLOAD_SECURITY``,
* **[uses] rte_eth_txconf,rte_eth_txmode**: ``offloads:DEV_TX_OFFLOAD_SECURITY``.
* **[implements] rte_security_ops**: ``session_create``, ``session_update``,
``session_stats_get``, ``session_destroy``, ``set_pkt_metadata``, ``capabilities_get``.
* **[provides] rte_eth_dev_info**: ``rx_offload_capa,rx_queue_offload_capa:DEV_RX_OFFLOAD_SECURITY``,
``tx_offload_capa,tx_queue_offload_capa:DEV_TX_OFFLOAD_SECURITY``.
* **[provides] mbuf**: ``mbuf.ol_flags:PKT_RX_SEC_OFFLOAD``,
``mbuf.ol_flags:PKT_TX_SEC_OFFLOAD``, ``mbuf.ol_flags:PKT_RX_SEC_OFFLOAD_FAILED``.
.. _nic_features_crc_offload:
CRC offload

1
doc/guides/nics/features/default.ini
View File

@ -44,6 +44,7 @@ Flow control =
Flow API =
Rate limitation =
Traffic mirroring =
Inline crypto =
CRC offload =
VLAN offload =
QinQ offload =

1
doc/guides/nics/features/ixgbe.ini
View File

@ -33,6 +33,7 @@ Flow control = Y
Flow API = Y
Rate limitation = Y
Traffic mirroring = Y
Inline crypto = Y
CRC offload = Y
VLAN offload = Y
QinQ offload = Y

1
doc/guides/nics/features/ixgbe_vec.ini
View File

@ -32,6 +32,7 @@ Flow director = Y
Flow control = Y
Rate limitation = Y
Traffic mirroring = Y
Inline crypto = Y
Timesync = Y
Rx descriptor status = Y
Tx descriptor status = Y

1
doc/guides/nics/features/ixgbe_vf.ini
View File

@ -17,6 +17,7 @@ RSS hash = Y
RSS key update = Y
RSS reta update = Y
VLAN filter = Y
Inline crypto = Y
CRC offload = Y
VLAN offload = Y
QinQ offload = Y

1
doc/guides/nics/features/ixgbe_vf_vec.ini
View File

@ -17,6 +17,7 @@ RSS hash = Y
RSS key update = Y
RSS reta update = Y
VLAN filter = Y
Inline crypto = Y
Rx descriptor status = Y
Tx descriptor status = Y
Basic stats = Y

16
doc/guides/nics/ixgbe.rst
View File

@ -239,6 +239,22 @@ There is no RTE API to add a VF's MAC address from the PF. On ixgbe, the
as a workaround.
Inline crypto processing support
--------------------------------
Inline IPsec processing is supported for ``RTE_SECURITY_ACTION_TYPE_INLINE_CRYPTO``
mode for ESP packets only:
- ESP authentication only: AES-128-GMAC (128-bit key)
- ESP encryption and authentication: AES-128-GCM (128-bit key)
IPsec Security Gateway Sample Application supports inline IPsec processing for
ixgbe PMD.
For more details see the IPsec Security Gateway Sample Application and Security
library documentation.
Supported Chipsets and NICs
---------------------------