Go to the documentation of this file.
6 #ifndef _RTE_SECURITY_H_
7 #define _RTE_SECURITY_H_
20 #include <sys/types.h>
22 #include <netinet/in.h>
23 #include <netinet/ip.h>
24 #include <netinet/ip6.h>
26 #include <rte_compat.h>
385 struct rte_security_session {
386 void *sess_private_data;
388 uint64_t opaque_data;
403 struct rte_security_session *
422 struct rte_security_session *sess,
453 struct rte_security_session *sess);
511 struct rte_security_session *sess,
543 struct rte_security_session *sess)
551 get_sec_session_private_data(
const struct rte_security_session *sess)
553 return sess->sess_private_data;
557 set_sec_session_private_data(
struct rte_security_session *sess,
560 sess->sess_private_data = private_data;
574 struct rte_security_session *sess)
584 struct rte_security_macsec_stats {
588 struct rte_security_ipsec_stats {
599 struct rte_security_pdcp_stats {
603 struct rte_security_docsis_stats {
607 struct rte_security_stats {
613 struct rte_security_macsec_stats macsec;
614 struct rte_security_ipsec_stats ipsec;
615 struct rte_security_pdcp_stats pdcp;
616 struct rte_security_docsis_stats docsis;
636 struct rte_security_session *sess,
637 struct rte_security_stats *stats);
695 #define RTE_SECURITY_PDCP_ORDERING_CAP 0x00000001
701 #define RTE_SECURITY_PDCP_DUP_DETECT_CAP 0x00000002
703 #define RTE_SECURITY_TX_OLOAD_NEED_MDATA 0x00000001
707 #define RTE_SECURITY_TX_HW_TRAILER_OFFLOAD 0x00000002
713 #define RTE_SECURITY_RX_HW_TRAILER_OFFLOAD 0x00010000
rte_security_pdcp_direction
@ RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO
@ RTE_SECURITY_IPSEC_SA_DIR_INGRESS
@ RTE_CRYPTO_OP_SECURITY_SESSION
@ RTE_SECURITY_DOCSIS_DOWNLINK
rte_security_session_protocol
uint32_t replay_win_sz_max
const struct rte_security_capability * rte_security_capabilities_get(struct rte_security_ctx *instance)
@ RTE_SECURITY_PROTOCOL_PDCP
rte_security_session_action_type
@ RTE_SECURITY_IPSEC_SA_DIR_EGRESS
@ RTE_SECURITY_ACTION_TYPE_INLINE_PROTOCOL
int rte_security_set_pkt_metadata(struct rte_security_ctx *instance, struct rte_security_session *sess, struct rte_mbuf *mb, void *params)
@ RTE_SECURITY_PDCP_SN_SIZE_12
rte_security_ipsec_sa_direction
rte_security_pdcp_sn_size
struct rte_security_capability::@315::@317 ipsec
@ RTE_SECURITY_PDCP_MODE_CONTROL
struct rte_security_capability::@315::@320 docsis
@ RTE_SECURITY_IPSEC_SA_MODE_TUNNEL
__rte_experimental void * rte_security_get_userdata(struct rte_security_ctx *instance, uint64_t md)
int rte_security_session_destroy(struct rte_security_ctx *instance, struct rte_security_session *sess)
__rte_experimental int rte_security_session_update(struct rte_security_ctx *instance, struct rte_security_session *sess, struct rte_security_session_conf *conf)
struct rte_security_capability::@315::@319 pdcp
@ RTE_SECURITY_IPSEC_SA_PROTO_AH
static __rte_experimental rte_security_dynfield_t * rte_security_dynfield(struct rte_mbuf *mbuf)
struct rte_crypto_sym_xform * crypto_xform
@ RTE_SECURITY_ACTION_TYPE_INLINE_CRYPTO
rte_security_ipsec_sa_mode
int rte_security_dynfield_offset
@ RTE_SECURITY_DOCSIS_UPLINK
rte_security_ipsec_tunnel_type
@ RTE_SECURITY_IPSEC_TUNNEL_IPV4
struct rte_security_session * rte_security_session_create(struct rte_security_ctx *instance, struct rte_security_session_conf *conf, struct rte_mempool *mp, struct rte_mempool *priv_mp)
enum rte_security_session_action_type action_type
const struct rte_cryptodev_capabilities * crypto_capabilities
enum rte_security_session_action_type action
static int __rte_security_attach_session(struct rte_crypto_sym_op *sym_op, struct rte_security_session *sess)
struct rte_crypto_sym_op sym[0]
struct rte_security_ipsec_sa_options options
@ RTE_SECURITY_PDCP_UPLINK
@ RTE_SECURITY_PDCP_SN_SIZE_18
struct rte_security_session * sec_session
__rte_experimental int rte_security_session_stats_get(struct rte_security_ctx *instance, struct rte_security_session *sess, struct rte_security_stats *stats)
@ RTE_SECURITY_PDCP_DOWNLINK
struct rte_security_capability::@315::@318 macsec
@ RTE_SECURITY_PROTOCOL_MACSEC
@ RTE_SECURITY_PDCP_SN_SIZE_15
struct rte_security_ipsec_tunnel_param::@307::@310 ipv6
enum rte_security_session_protocol protocol
enum rte_security_ipsec_sa_mode mode
rte_security_docsis_direction
enum rte_security_ipsec_tunnel_type type
@ RTE_SECURITY_IPSEC_TUNNEL_IPV6
static __rte_experimental bool rte_security_dynfield_is_registered(void)
enum rte_security_pdcp_domain domain
@ RTE_CRYPTO_OP_TYPE_SYMMETRIC
@ RTE_SECURITY_PDCP_SN_SIZE_5
enum rte_security_session_protocol protocol
@ RTE_SECURITY_PROTOCOL_IPSEC
@ RTE_SECURITY_IPSEC_SA_PROTO_ESP
#define RTE_MBUF_DYNFIELD(m, offset, type)
@ RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL
@ RTE_SECURITY_PDCP_MODE_DATA
const struct rte_security_ops * ops
uint64_t rte_security_dynfield_t
struct rte_security_ipsec_tunnel_param::@307::@309 ipv4
@ RTE_SECURITY_PDCP_SN_SIZE_7
@ RTE_SECURITY_PROTOCOL_DOCSIS
enum rte_security_ipsec_sa_direction direction
enum rte_security_ipsec_sa_protocol proto
rte_security_ipsec_sa_protocol
const struct rte_security_capability * rte_security_capability_get(struct rte_security_ctx *instance, struct rte_security_capability_idx *idx)
unsigned int rte_security_session_get_size(struct rte_security_ctx *instance)
@ RTE_SECURITY_ACTION_TYPE_NONE
@ RTE_SECURITY_IPSEC_SA_MODE_TRANSPORT
static int rte_security_attach_session(struct rte_crypto_op *op, struct rte_security_session *sess)