rte_ipsec.h

Go to the documentation of this file.

/* SPDX-License-Identifier: BSD-3-Clause
 * Copyright(c) 2018-2020 Intel Corporation
 */

#ifndef _RTE_IPSEC_H_
#define _RTE_IPSEC_H_

#include <rte_ipsec_sa.h>
#include <rte_mbuf.h>

struct rte_ipsec_session;

struct rte_ipsec_state {
    uint64_t sqn;
};

struct rte_ipsec_sa_pkt_func {
    union {
        uint16_t (*async)(const struct rte_ipsec_session *ss,
                struct rte_mbuf *mb[],
                struct rte_crypto_op *cop[],
                uint16_t num);
        uint16_t (*sync)(const struct rte_ipsec_session *ss,
                struct rte_mbuf *mb[],
                uint16_t num);
    } prepare;
    union {
        uint16_t (*async)(const struct rte_ipsec_session *ss,
                struct rte_mbuf *mb[],
                struct rte_crypto_op *cop[],
                uint16_t num,
                struct rte_ipsec_state *state);
        uint16_t (*sync)(const struct rte_ipsec_session *ss,
                struct rte_mbuf *mb[],
                uint16_t num,
                struct rte_ipsec_state *state);
    } prepare_stateless;
    uint16_t (*process)(const struct rte_ipsec_session *ss,
                struct rte_mbuf *mb[],
                uint16_t num);
};

struct __rte_cache_aligned rte_ipsec_session {
    struct rte_ipsec_sa *sa;
    enum rte_security_session_action_type type;
    union {
        struct {
            struct rte_cryptodev_sym_session *ses;
            uint8_t dev_id;
        } crypto;
        struct {
            struct rte_security_session *ses;
            struct rte_security_ctx *ctx;
            uint32_t ol_flags;
        } security;
    };
    struct rte_ipsec_sa_pkt_func pkt_func;
};

int
rte_ipsec_session_prepare(struct rte_ipsec_session *ss);

static inline uint16_t
rte_ipsec_pkt_crypto_prepare(const struct rte_ipsec_session *ss,
    struct rte_mbuf *mb[], struct rte_crypto_op *cop[], uint16_t num)
{
    return ss->pkt_func.prepare.async(ss, mb, cop, num);
}

static inline uint16_t
rte_ipsec_pkt_cpu_prepare(const struct rte_ipsec_session *ss,
    struct rte_mbuf *mb[], uint16_t num)
{
    return ss->pkt_func.prepare.sync(ss, mb, num);
}

__rte_experimental
static inline uint16_t
rte_ipsec_pkt_crypto_prepare_stateless(const struct rte_ipsec_session *ss,
    struct rte_mbuf *mb[], struct rte_crypto_op *cop[], uint16_t num,
    struct rte_ipsec_state *state)
{
    return ss->pkt_func.prepare_stateless.async(ss, mb, cop, num, state);
}

__rte_experimental
static inline uint16_t
rte_ipsec_pkt_cpu_prepare_stateless(const struct rte_ipsec_session *ss,
    struct rte_mbuf *mb[], uint16_t num, struct rte_ipsec_state *state)
{
    return ss->pkt_func.prepare_stateless.sync(ss, mb, num, state);
}

static inline uint16_t
rte_ipsec_pkt_process(const struct rte_ipsec_session *ss, struct rte_mbuf *mb[],
    uint16_t num)
{
    return ss->pkt_func.process(ss, mb, num);
}


int
rte_ipsec_telemetry_sa_add(const struct rte_ipsec_sa *sa);

void
rte_ipsec_telemetry_sa_del(const struct rte_ipsec_sa *sa);

#include <rte_ipsec_group.h>

#ifdef __cplusplus
extern "C" {
#endif

#ifdef __cplusplus
}
#endif

#endif /* _RTE_IPSEC_H_ */