* Added bus-level parsing of the devargs syntax.
* Kept compatibility with the legacy syntax as parsing fallback.
+* **Added new RSS offload types for IPv4/L4 checksum in RSS flow.**
+
+ Added macros ETH_RSS_IPV4_CHKSUM and ETH_RSS_L4_CHKSUM, now IPv4 and
+ TCP/UDP/SCTP header checksum field can be used as input set for RSS.
+
+* **Updated Broadcom bnxt PMD.**
+
+ * Added flow offload support for Thor.
+ * Implement support for tunnel offload.
+ * Updated HWRM API to version 1.10.2.44
+
+* **Updated Intel iavf driver.**
+
+ * Added Intel iavf support on Windows.
+ * Added IPv4 and L4 (TCP/UDP/SCTP) checksum hash support in RSS flow.
+
+* **Updated Intel ice driver.**
+
+ * Added 1PPS out support by a devargs.
+ * Added IPv4 and L4 (TCP/UDP/SCTP) checksum hash support in RSS flow.
+ * Added DEV_RX_OFFLOAD_TIMESTAMP support.
+ * Added timesync API support under scalar path.
+
+* **Updated Intel ixgbe driver.**
+
+ * Added Intel ixgbe support on Windows.
+
* **Updated Marvell cnxk ethdev driver.**
* Added rte_flow support for dual VLAN insert and strip actions.
+ * Added rte_tm support.
* **Updated Marvell cnxk crypto PMD.**
* Added support for asymmetric crypto throughput performance measurement.
Only modex is supported for now.
+* **Added lookaside protocol (IPsec) tests in dpdk-test.**
+
+ * Added known vector tests (AES-GCM 128, 192, 256).
+ * Added tests to verify error reporting with ICV corruption.
+ * Added tests to verify IV generation.
+ * Added tests to verify UDP encapsulation.
+ * Added tests to validate packets soft expiry.
+ * Added tests to validate packets hard expiry.
+ * Added tests to verify tunnel header verification in IPsec inbound.
+
Removed Items
-------------
blacklist/whitelist are removed. Users must use the new
block/allow list arguments.
+* i40e: Removed i40evf driver.
+ iavf already became the default VF driver for i40e devices,
+ so there is no need to maintain i40evf.
+
API Changes
-----------
Also, make sure to start the actual text at the margin.
=======================================================
+* kvargs: The experimental function ``rte_kvargs_strcmp()`` has been
+ removed. Its usages have been replaced by a new function
+ ``rte_kvargs_get_with_value()``.
+
* cryptodev: The API rte_cryptodev_pmd_is_valid_dev is modified to
rte_cryptodev_is_valid_dev as it can be used by the application as
well as PMD to check whether the device is valid or not.
as it is for drivers only and should be private to DPDK, and not
installed for app use.
+* cryptodev: A ``reserved`` byte from structure ``rte_crypto_op`` was
+ renamed to ``aux_flags`` to indicate warnings and other information from
+ the crypto/security operation. This field will be used to communicate
+ events such as soft expiry with IPsec in lookaside mode.
+
ABI Changes
-----------
have much processing in PMD specific callbacks but just 64-bit set/get.
This avoids a per packet function pointer jump overhead for such PMDs.
+* security: A new option ``iv_gen_disable`` was added in structure
+ ``rte_security_ipsec_sa_options`` to disable IV generation inside PMD,
+ so that application can provide its own IV and test known test vectors.
+
+* security: A new option ``tunnel_hdr_verify`` was added in structure
+ ``rte_security_ipsec_sa_options`` to indicate whether outer header
+ verification need to be done as part of inbound IPsec processing.
+
+* security: A new structure ``rte_security_ipsec_lifetime`` was added to
+ replace ``esn_soft_limit`` in IPsec configuration structure
+ ``rte_security_ipsec_xform`` to allow applications to configure SA soft
+ and hard expiry limits. Limits can be either in number of packets or bytes.
+
Known Issues
------------