net/cnxk: support decrement TTL for inline IPsec

Added support for decrementing TTL(IPv4)/hoplimit(IPv6)
while doing inline IPsec processing if the security session
SA options is enabled with dec_ttl.

Signed-off-by: Akhil Goyal <gakhil@marvell.com>
Acked-by: Jerin Jacob <jerinj@marvell.com>

diff --git a/drivers/net/cnxk/cn10k_ethdev.h b/drivers/net/cnxk/cn10k_ethdev.h
index 9642d6a1a3cef3c5ea34107e800fee7cd7266d54..c8666cec8772013be658ff55bbe85b73302baef6 100644 (file)
--- a/drivers/net/cnxk/cn10k_ethdev.h
+++ b/drivers/net/cnxk/cn10k_ethdev.h
@@ -73,7 +73,8 @@ struct cn10k_sec_sess_priv {
                        uint8_t roundup_len;
                        uint16_t partial_len : 10;
                        uint16_t chksum : 2;
-                       uint16_t rsvd : 4;
+                       uint16_t dec_ttl : 1;
+                       uint16_t rsvd : 3;
                };
 
                uint64_t u64;

diff --git a/drivers/net/cnxk/cn10k_ethdev_sec.c b/drivers/net/cnxk/cn10k_ethdev_sec.c
index edef62c746fe84340d7d331e1270b684dc86685d..8cba63136e1cf2468e18912d3760ed0d261ebee3 100644 (file)
--- a/drivers/net/cnxk/cn10k_ethdev_sec.c
+++ b/drivers/net/cnxk/cn10k_ethdev_sec.c
@@ -577,6 +577,7 @@ cn10k_eth_sec_session_create(void *device,
                /* Propagate inner checksum enable from SA to fast path */
                sess_priv.chksum = (!ipsec->options.ip_csum_enable << 1 |
                                    !ipsec->options.l4_csum_enable);
+               sess_priv.dec_ttl = ipsec->options.dec_ttl;
 
                /* Pointer from eth_sec -> outb_sa */
                eth_sec->sa = outb_sa;

diff --git a/drivers/net/cnxk/cn10k_tx.h b/drivers/net/cnxk/cn10k_tx.h
index ae0573f39119965f7f53c276df443fb571674fe3..ec8b027215de9c300e167ec6afebb9450c7c4599 100644 (file)
--- a/drivers/net/cnxk/cn10k_tx.h
+++ b/drivers/net/cnxk/cn10k_tx.h
@@ -315,7 +315,8 @@ cn10k_nix_prep_sec_vec(struct rte_mbuf *m, uint64x2_t *cmd0, uint64x2_t *cmd1,
        sa = (uintptr_t)roc_nix_inl_ot_ipsec_outb_sa(sa_base, sess_priv.sa_idx);
        ucode_cmd[3] = (ROC_CPT_DFLT_ENG_GRP_SE_IE << 61 | 1UL << 60 | sa);
        ucode_cmd[0] = (ROC_IE_OT_MAJOR_OP_PROCESS_OUTBOUND_IPSEC << 48 |
-                       ((uint64_t)sess_priv.chksum) << 32 | pkt_len);
+                       ((uint64_t)sess_priv.chksum) << 32 |
+                       ((uint64_t)sess_priv.dec_ttl) << 34 | pkt_len);
 
        /* CPT Word 0 and Word 1 */
        cmd01 = vdupq_n_u64((nixtx + 16) | (cn10k_nix_tx_ext_subs(flags) + 1));
@@ -442,7 +443,8 @@ cn10k_nix_prep_sec(struct rte_mbuf *m, uint64_t *cmd, uintptr_t *nixtx_addr,
        sa = (uintptr_t)roc_nix_inl_ot_ipsec_outb_sa(sa_base, sess_priv.sa_idx);
        ucode_cmd[3] = (ROC_CPT_DFLT_ENG_GRP_SE_IE << 61 | 1UL << 60 | sa);
        ucode_cmd[0] = (ROC_IE_OT_MAJOR_OP_PROCESS_OUTBOUND_IPSEC << 48 |
-                       ((uint64_t)sess_priv.chksum) << 32 | pkt_len);
+                       ((uint64_t)sess_priv.chksum) << 32 |
+                       ((uint64_t)sess_priv.dec_ttl) << 34 | pkt_len);
 
        /* CPT Word 0 and Word 1. Assume no multi-seg support */
        cmd01 = vdupq_n_u64((nixtx + 16) | (cn10k_nix_tx_ext_subs(flags) + 1));