rte_ipsec.h

Go to the documentation of this file.

/* SPDX-License-Identifier: BSD-3-Clause
 * Copyright(c) 2018-2020 Intel Corporation
 */

#ifndef _RTE_IPSEC_H_
#define _RTE_IPSEC_H_

#include <rte_compat.h>
#include <rte_ipsec_sa.h>
#include <rte_mbuf.h>

#ifdef __cplusplus
extern "C" {
#endif

struct rte_ipsec_session;

struct rte_ipsec_sa_pkt_func {
    union {
        uint16_t (*async)(const struct rte_ipsec_session *ss,
                struct rte_mbuf *mb[],
                struct rte_crypto_op *cop[],
                uint16_t num);
        uint16_t (*sync)(const struct rte_ipsec_session *ss,
                struct rte_mbuf *mb[],
                uint16_t num);
    } prepare;
    uint16_t (*process)(const struct rte_ipsec_session *ss,
                struct rte_mbuf *mb[],
                uint16_t num);
};

struct rte_ipsec_session {
    struct rte_ipsec_sa *sa;
    enum rte_security_session_action_type type;
    union {
        struct {
            struct rte_cryptodev_sym_session *ses;
            uint8_t dev_id;
        } crypto;
        struct {
            struct rte_security_session *ses;
            struct rte_security_ctx *ctx;
            uint32_t ol_flags;
        } security;
    };
    struct rte_ipsec_sa_pkt_func pkt_func;
} __rte_cache_aligned;

int
rte_ipsec_session_prepare(struct rte_ipsec_session *ss);

static inline uint16_t
rte_ipsec_pkt_crypto_prepare(const struct rte_ipsec_session *ss,
    struct rte_mbuf *mb[], struct rte_crypto_op *cop[], uint16_t num)
{
    return ss->pkt_func.prepare.async(ss, mb, cop, num);
}

static inline uint16_t
rte_ipsec_pkt_cpu_prepare(const struct rte_ipsec_session *ss,
    struct rte_mbuf *mb[], uint16_t num)
{
    return ss->pkt_func.prepare.sync(ss, mb, num);
}

static inline uint16_t
rte_ipsec_pkt_process(const struct rte_ipsec_session *ss, struct rte_mbuf *mb[],
    uint16_t num)
{
    return ss->pkt_func.process(ss, mb, num);
}


__rte_experimental
int
rte_ipsec_telemetry_sa_add(const struct rte_ipsec_sa *sa);

__rte_experimental
void
rte_ipsec_telemetry_sa_del(const struct rte_ipsec_sa *sa);

#include <rte_ipsec_group.h>

#ifdef __cplusplus
}
#endif

#endif /* _RTE_IPSEC_H_ */