From: Akhil Goyal Date: Tue, 8 Feb 2022 22:20:27 +0000 (+0530) Subject: security: add IPsec option for IP reassembly X-Git-Url: http://git.droids-corp.org/?a=commitdiff_plain;h=8507a16902d90fc17be59f15ed4b2903e5a3d4b8;p=dpdk.git security: add IPsec option for IP reassembly A new option is added in IPsec to enable and attempt reassembly of inbound IP packets. Signed-off-by: Akhil Goyal --- diff --git a/devtools/libabigail.abignore b/devtools/libabigail.abignore index 4b676f317d..5be41b8805 100644 --- a/devtools/libabigail.abignore +++ b/devtools/libabigail.abignore @@ -11,3 +11,8 @@ ; Ignore generated PMD information strings [suppress_variable] name_regexp = _pmd_info$ + +; Ignore fields inserted in place of reserved_opts of rte_security_ipsec_sa_options +[suppress_type] + name = rte_security_ipsec_sa_options + has_data_member_inserted_between = {offset_of(reserved_opts), end} diff --git a/lib/security/rte_security.h b/lib/security/rte_security.h index 1228b6c8b1..b080d10c2c 100644 --- a/lib/security/rte_security.h +++ b/lib/security/rte_security.h @@ -264,6 +264,19 @@ struct rte_security_ipsec_sa_options { */ uint32_t l4_csum_enable : 1; + /** Enable IP reassembly on inline inbound packets. + * + * * 1: Enable driver to try reassembly of encrypted IP packets for + * this SA, if supported by the driver. This feature will work + * only if user has successfully set IP reassembly config params + * using rte_eth_ip_reassembly_conf_set() for the inline Ethernet + * device. PMD need to register mbuf dynamic fields using + * rte_eth_ip_reassembly_dynfield_register() and security session + * creation would fail if dynfield is not registered successfully. + * * 0: Disable IP reassembly of packets (default). + */ + uint32_t ip_reassembly_en : 1; + /** Reserved bit fields for future extension * * User should ensure reserved_opts is cleared as it may change in @@ -271,7 +284,7 @@ struct rte_security_ipsec_sa_options { * * Note: Reduce number of bits in reserved_opts for every new option. */ - uint32_t reserved_opts : 18; + uint32_t reserved_opts : 17; }; /** IPSec security association direction */