d/numam-dpdk
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

security: add IPsec option for IP reassembly

Browse Source 
A new option is added in IPsec to enable and attempt reassembly
of inbound IP packets.

Signed-off-by: Akhil Goyal <gakhil@marvell.com>
This commit is contained in:
Akhil Goyal 2022-02-09 03:50:27 +05:30 committed by Ferruh Yigit
parent 3c059b2c56
commit 8507a16902
2 changed files with 19 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
devtools/libabigail.abignore
View File

@ -11,3 +11,8 @@
; Ignore generated PMD information strings
[suppress_variable]
name_regexp = _pmd_info$
; Ignore fields inserted in place of reserved_opts of rte_security_ipsec_sa_options
[suppress_type]
name = rte_security_ipsec_sa_options
has_data_member_inserted_between = {offset_of(reserved_opts), end}

15
lib/security/rte_security.h
View File

@ -264,6 +264,19 @@ struct rte_security_ipsec_sa_options {
*/
uint32_t l4_csum_enable : 1;
/** Enable IP reassembly on inline inbound packets.
*
* * 1: Enable driver to try reassembly of encrypted IP packets for
* this SA, if supported by the driver. This feature will work
* only if user has successfully set IP reassembly config params
* using rte_eth_ip_reassembly_conf_set() for the inline Ethernet
* device. PMD need to register mbuf dynamic fields using
* rte_eth_ip_reassembly_dynfield_register() and security session
* creation would fail if dynfield is not registered successfully.
* * 0: Disable IP reassembly of packets (default).
*/
uint32_t ip_reassembly_en : 1;
/** Reserved bit fields for future extension
*
* User should ensure reserved_opts is cleared as it may change in
@ -271,7 +284,7 @@ struct rte_security_ipsec_sa_options {
*
* Note: Reduce number of bits in reserved_opts for every new option.
*/
uint32_t reserved_opts : 18;
uint32_t reserved_opts : 17;
};
/** IPSec security association direction */