rte_security_ipsec_sa_options Struct Reference

#include <rte_security.h>

Data Fields
uint32_t	esn: 1
uint32_t	udp_encap: 1
uint32_t	copy_dscp: 1
uint32_t	copy_flabel: 1
uint32_t	copy_df: 1
uint32_t	dec_ttl: 1
uint32_t	ecn: 1
uint32_t	stats: 1

Detailed Description

IPsec Security Association option flags

Definition at line 118 of file rte_security.h.

Field Documentation

uint32_t esn

Extended Sequence Numbers (ESN)

• 1: Use extended (64 bit) sequence numbers
• 0: Use normal sequence numbers

Examples:

examples/ipsec-secgw/ipsec.c, and examples/ipsec-secgw/sa.c.

Definition at line 124 of file rte_security.h.

uint32_t udp_encap

UDP encapsulation

• 1: Do UDP encapsulation/decapsulation so that IPSEC packets can traverse through NAT boxes.
• 0: No UDP encapsulation

Definition at line 132 of file rte_security.h.

uint32_t copy_dscp

Copy DSCP bits

• 1: Copy IPv4 or IPv6 DSCP bits from inner IP header to the outer IP header in encapsulation, and vice versa in decapsulation.
• 0: Do not change DSCP field.

Examples:

examples/ipsec-secgw/sa.c.

Definition at line 141 of file rte_security.h.

uint32_t copy_flabel

Copy IPv6 Flow Label

• 1: Copy IPv6 flow label from inner IPv6 header to the outer IPv6 header.
• 0: Outer header is not modified.

Definition at line 149 of file rte_security.h.

uint32_t copy_df

Copy IPv4 Don't Fragment bit

• 1: Copy the DF bit from the inner IPv4 header to the outer IPv4 header.
• 0: Outer header is not modified.

Definition at line 157 of file rte_security.h.

uint32_t dec_ttl

Decrement inner packet Time To Live (TTL) field

• 1: In tunnel mode, decrement inner packet IPv4 TTL or IPv6 Hop Limit after tunnel decapsulation, or before tunnel encapsulation.
• 0: Inner packet is not modified.

Definition at line 166 of file rte_security.h.

uint32_t ecn

Explicit Congestion Notification (ECN)

• 1: In tunnel mode, enable outer header ECN Field copied from inner header in tunnel encapsulation, or inner header ECN field construction in decapsulation.
• 0: Inner/outer header are not modified.

Examples:

examples/ipsec-secgw/sa.c.

Definition at line 175 of file rte_security.h.

uint32_t stats

Security statistics

• 1: Enable per session security statistics collection for this SA, if supported by the driver.
• 0: Disable per session security statistics collection for this SA.

Definition at line 183 of file rte_security.h.

---

The documentation for this struct was generated from the following file:

• lib/librte_security/rte_security.h