rte_ipsec_sad.h

Go to the documentation of this file.

/* SPDX-License-Identifier: BSD-3-Clause
 * Copyright(c) 2019 Intel Corporation
 */

#ifndef _RTE_IPSEC_SAD_H_
#define _RTE_IPSEC_SAD_H_

#include <stdint.h>

#include <rte_compat.h>

#ifdef __cplusplus
extern "C" {
#endif

struct rte_ipsec_sad;

enum {
    RTE_IPSEC_SAD_SPI_ONLY = 0,
    RTE_IPSEC_SAD_SPI_DIP,
    RTE_IPSEC_SAD_SPI_DIP_SIP,
    RTE_IPSEC_SAD_KEY_TYPE_MASK,
};

struct rte_ipsec_sadv4_key {
    uint32_t spi;
    uint32_t dip;
    uint32_t sip;
};

struct rte_ipsec_sadv6_key {
    uint32_t spi;
    uint8_t dip[16];
    uint8_t sip[16];
};

union rte_ipsec_sad_key {
    struct rte_ipsec_sadv4_key  v4;
    struct rte_ipsec_sadv6_key  v6;
};

#define RTE_IPSEC_SAD_FLAG_IPV6         0x1

#define RTE_IPSEC_SAD_FLAG_RW_CONCURRENCY   0x2

struct rte_ipsec_sad_conf {
    int     socket_id;
    uint32_t    max_sa[RTE_IPSEC_SAD_KEY_TYPE_MASK];
    uint32_t    flags;
};

__rte_experimental
int
rte_ipsec_sad_add(struct rte_ipsec_sad *sad,
    const union rte_ipsec_sad_key *key,
    int key_type, void *sa);

__rte_experimental
int
rte_ipsec_sad_del(struct rte_ipsec_sad *sad,
    const union rte_ipsec_sad_key *key,
    int key_type);
/*
 * Create SAD
 *
 * @param name
 *  SAD name
 * @param conf
 *  Structure containing the configuration
 * @return
 *  Handle to SAD object on success
 *  NULL otherwise with rte_errno set to an appropriate values.
 */
__rte_experimental
struct rte_ipsec_sad *
rte_ipsec_sad_create(const char *name, const struct rte_ipsec_sad_conf *conf);

__rte_experimental
struct rte_ipsec_sad *
rte_ipsec_sad_find_existing(const char *name);

__rte_experimental
void
rte_ipsec_sad_destroy(struct rte_ipsec_sad *sad);

__rte_experimental
int
rte_ipsec_sad_lookup(const struct rte_ipsec_sad *sad,
    const union rte_ipsec_sad_key *keys[],
    void *sa[], uint32_t n);

#ifdef __cplusplus
}
#endif

#endif /* _RTE_IPSEC_SAD_H_ */