Skip to contentSkip to conversation

doc: announce IPsec xform struct changes

PATCH Applied Anoob Joseph 5 participants 5 messages Aug 3, 2021 – Aug 7, 2021

lore
Share & tools
lore
#0 lore raw

PATCH 1/1 doc: announce IPsec xform struct changes

IPsec xform struct would be updated to include IPsec SA lifetime configuration. The existing member 'esn_soft_limit' would only track ESN. And as sequence number control is getting introduced, 'esn_soft_limit' may not indicate the number of packets processed. Replace that with a new structure to cover all lifetime cases with support for specifying both soft and hard lifetimes.

ESN control introduced by: http://patches.dpdk.org/project/dpdk/patch/[email protected]/

---
 doc/guides/rel_notes/deprecation.rst | 5 +++++
 1 file changed, 5 insertions(+)
doc/guides/rel_notes/deprecation.rst +5 -0
index 6a35c76..7dbc088 100644
@@ -151,3 +151,8 @@ Deprecation Notices
 * security: The functions ``rte_security_set_pkt_metadata`` and
   ``rte_security_get_userdata`` will be made inline functions and additional
   flags will be added in structure ``rte_security_ctx`` in DPDK 21.11.
+
+* security: The IPsec configuration structure
+  ``struct rte_security_ipsec_xform`` will be updated with new members to allow
+  SA lifetime configuration. A new structure would be introduced to replace the
+  current member, ``esn_soft_limit``.
Signature · 1 line
2.7.4
Acked-by on v1 1/1
#1 lore raw
Quoted 7 lines

IPsec xform struct would be updated to include IPsec SA lifetime configuration. The existing member 'esn_soft_limit' would only track ESN. And as sequence number control is getting introduced, 'esn_soft_limit' may not indicate the number of packets processed. Replace that with a new structure to cover all lifetime cases with support for specifying both soft and hard lifetimes.

Quoted 6 lines

ESN control introduced by:
http://patches.dpdk.org/project/dpdk/patch/20210713133542.3550525-4-
[email protected]/

---

@Konstantin Ananyev, @Hemant Agrawal: Could you please Ack.

#2 lore raw
Quoted 9 lines
Quoted 9 lines

IPsec xform struct would be updated to include IPsec SA lifetime configuration. The existing member 'esn_soft_limit' would only track ESN. And as sequence number control is getting introduced, 'esn_soft_limit' may not indicate the number of packets processed. Replace that with a new structure to cover all lifetime cases with support for specifying both soft and hard lifetimes.

Quoted 8 lines
Quoted 6 lines

ESN control introduced by:
http://patches.dpdk.org/project/dpdk/patch/20210713133542.3550525-4-
[email protected]/

---

Acked-by
#3 lore raw
Quoted 14 lines · Konstantin
Quoted 14 lines
Quoted 14 lines

IPsec xform struct would be updated to include IPsec SA lifetime configuration. The existing member 'esn_soft_limit' would only track ESN. And as sequence number control is getting introduced, 'esn_soft_limit' may not indicate the number of packets processed. Replace that with a new structure to cover all lifetime cases with support for specifying both soft and hard lifetimes.

ESN control introduced by:
http://patches.dpdk.org/project/dpdk/patch/20210713133542.3550525-4-
[email protected]/

Quoted 6 lines
Quoted 4 lines
Quoted 2 lines

---

#4 lore raw
Quoted 7 lines
Quoted 7 lines
Quoted 7 lines
Quoted 7 lines

IPsec xform struct would be updated to include IPsec SA lifetime configuration. The existing member 'esn_soft_limit' would only track ESN. And as sequence number control is getting introduced, 'esn_soft_limit' may not indicate the number of packets processed. Replace that with a new structure to cover all lifetime cases with support for specifying both soft and hard lifetimes.

Quoted 8 lines
Quoted 7 lines
Quoted 6 lines
Quoted 5 lines

ESN control introduced by:
http://patches.dpdk.org/project/dpdk/patch/20210713133542.3550525-4-
[email protected]/

That's a lot of acks from Marvell but looks OK.

Applied, thanks.