SA lifetime configuration. A new structure would be introduced to replace the
current member, ``esn_soft_limit``.
+* security: The structure ``rte_security_ipsec_xform`` will be extended with
+ multiple fields: source and destination port of UDP encapsulation,
+ IPsec payload MSS (Maximum Segment Size), and ESN (Extended Sequence Number).
+
* security: The IPsec SA config options ``struct rte_security_ipsec_sa_options``
will be updated with new fields to support new features like IPsec inner
checksum, tunnel header verification, TSO in case of protocol offload.