DPDK
24.07.0
|
#include <rte_security.h>
Data Fields | |
uint32_t | esn: 1 |
uint32_t | udp_encap: 1 |
uint32_t | copy_dscp: 1 |
uint32_t | copy_flabel: 1 |
uint32_t | copy_df: 1 |
uint32_t | dec_ttl: 1 |
uint32_t | ecn: 1 |
uint32_t | stats: 1 |
uint32_t | iv_gen_disable: 1 |
uint32_t | tunnel_hdr_verify: 2 |
uint32_t | udp_ports_verify: 1 |
uint32_t | ip_csum_enable: 1 |
uint32_t | l4_csum_enable: 1 |
uint32_t | ip_reassembly_en: 1 |
uint32_t | ingress_oop: 1 |
IPsec Security Association option flags
Definition at line 111 of file rte_security.h.
uint32_t esn |
Extended Sequence Numbers (ESN)
Definition at line 117 of file rte_security.h.
uint32_t udp_encap |
UDP encapsulation
Definition at line 125 of file rte_security.h.
uint32_t copy_dscp |
Copy DSCP bits
Definition at line 134 of file rte_security.h.
uint32_t copy_flabel |
Copy IPv6 Flow Label
Definition at line 142 of file rte_security.h.
uint32_t copy_df |
Copy IPv4 Don't Fragment bit
Definition at line 150 of file rte_security.h.
uint32_t dec_ttl |
Decrement inner packet Time To Live (TTL) field
Definition at line 159 of file rte_security.h.
uint32_t ecn |
Explicit Congestion Notification (ECN)
Definition at line 168 of file rte_security.h.
uint32_t stats |
Security statistics
Definition at line 176 of file rte_security.h.
uint32_t iv_gen_disable |
Disable IV generation in PMD
Note: For inline cases, IV generation would always need to be handled by the PMD.
Definition at line 190 of file rte_security.h.
uint32_t tunnel_hdr_verify |
Verify tunnel header in inbound
RTE_SECURITY_IPSEC_TUNNEL_VERIFY_DST_ADDR
: Verify destination IP address.RTE_SECURITY_IPSEC_TUNNEL_VERIFY_SRC_DST_ADDR
: Verify both source and destination IP addresses. Definition at line 199 of file rte_security.h.
uint32_t udp_ports_verify |
Verify UDP encapsulation ports in inbound
Definition at line 206 of file rte_security.h.
uint32_t ip_csum_enable |
Compute/verify inner packet IPv4 header checksum in tunnel mode
The checksum verification status would be set in mbuf using RTE_MBUF_F_RX_IP_CKSUM_xxx flags.
Inner IP checksum computation can also be enabled(per operation) by setting the flag RTE_MBUF_F_TX_IP_CKSUM in mbuf.
Definition at line 221 of file rte_security.h.
uint32_t l4_csum_enable |
Compute/verify inner packet L4 checksum in tunnel mode
The checksum verification status would be set in mbuf using RTE_MBUF_F_RX_L4_CKSUM_xxx flags.
Inner L4 checksum computation can also be enabled(per operation) by setting the flags RTE_MBUF_F_TX_TCP_CKSUM or RTE_MBUF_F_TX_SCTP_CKSUM or RTE_MBUF_F_TX_UDP_CKSUM or RTE_MBUF_F_TX_L4_MASK in mbuf.
Definition at line 237 of file rte_security.h.
uint32_t ip_reassembly_en |
Enable IP reassembly on inline inbound packets.
Definition at line 250 of file rte_security.h.
uint32_t ingress_oop |
Enable out of place processing on inline inbound packets.
Definition at line 261 of file rte_security.h.