#include <rte_security.h>

Data Fields
uint32_t	esn: 1

uint32_t	udp_encap: 1

uint32_t	copy_dscp: 1

uint32_t	copy_flabel: 1

uint32_t	copy_df: 1

uint32_t	dec_ttl: 1

uint32_t	ecn: 1

uint32_t	stats: 1

Detailed Description

IPsec Security Association option flags

Definition at line 118 of file rte_security.h.

Field Documentation

◆ esn

uint32_t esn

Extended Sequence Numbers (ESN)

1: Use extended (64 bit) sequence numbers
0: Use normal sequence numbers

Examples:: examples/ipsec-secgw/ipsec.c, and examples/ipsec-secgw/sa.c.

Definition at line 124 of file rte_security.h.

◆ udp_encap

uint32_t udp_encap

UDP encapsulation

1: Do UDP encapsulation/decapsulation so that IPSEC packets can traverse through NAT boxes.
0: No UDP encapsulation

Examples:: examples/ipsec-secgw/ipsec.c.

Definition at line 132 of file rte_security.h.

◆ copy_dscp

uint32_t copy_dscp

Copy DSCP bits

1: Copy IPv4 or IPv6 DSCP bits from inner IP header to the outer IP header in encapsulation, and vice versa in decapsulation.
0: Do not change DSCP field.

Examples:: examples/ipsec-secgw/sa.c.

Definition at line 141 of file rte_security.h.

◆ copy_flabel

uint32_t copy_flabel

Copy IPv6 Flow Label

1: Copy IPv6 flow label from inner IPv6 header to the outer IPv6 header.
0: Outer header is not modified.

Definition at line 149 of file rte_security.h.

◆ copy_df

uint32_t copy_df

Copy IPv4 Don't Fragment bit

1: Copy the DF bit from the inner IPv4 header to the outer IPv4 header.
0: Outer header is not modified.

Definition at line 157 of file rte_security.h.

◆ dec_ttl

uint32_t dec_ttl

Decrement inner packet Time To Live (TTL) field

1: In tunnel mode, decrement inner packet IPv4 TTL or IPv6 Hop Limit after tunnel decapsulation, or before tunnel encapsulation.
0: Inner packet is not modified.

Definition at line 166 of file rte_security.h.

◆ ecn

uint32_t ecn

Explicit Congestion Notification (ECN)

1: In tunnel mode, enable outer header ECN Field copied from inner header in tunnel encapsulation, or inner header ECN field construction in decapsulation.
0: Inner/outer header are not modified.

Examples:: examples/ipsec-secgw/sa.c.

Definition at line 175 of file rte_security.h.

◆ stats

uint32_t stats

Security statistics

1: Enable per session security statistics collection for this SA, if supported by the driver.
0: Disable per session security statistics collection for this SA.

Definition at line 183 of file rte_security.h.

The documentation for this struct was generated from the following file:

lib/security/rte_security.h

Data Fields