This patchset adds the ECN and DSCP tunnel mode header reconstruction support for rte_ipsec library. The ipsec-secgw sample application is updated with the feature's enabling and a python3 script for testing the correctness of the implementation.
This patchset depends on the following patchset "[v2,0/4] IPv6 with options support for IPsec transport" (http://patchwork.dpdk.org/cover/55238/) v2: - Fixed a few bugs. - Updated according to Konstantin's comments. - Added python script for testing. Fan Zhang (1): examples/ipsec-secgw: support header reconstruction Marko Kovacevic (1): lib/ipsec: add support for header construction doc/guides/rel_notes/release_19_08.rst | 6 + examples/ipsec-secgw/sa.c | 2 + examples/ipsec-secgw/test/run_test.sh | 3 +- .../test/tun_null_header_reconstruct.py | 477 +++++++++++++++++++++ lib/librte_ipsec/esp_inb.c | 14 +- lib/librte_ipsec/esp_outb.c | 4 +- lib/librte_ipsec/iph.h | 134 +++++- lib/librte_ipsec/rte_ipsec_sa.h | 25 ++ lib/librte_ipsec/sa.c | 17 + lib/librte_ipsec/sa.h | 2 + lib/librte_net/rte_ip.h | 11 + lib/librte_security/rte_security.h | 9 + 12 files changed, 692 insertions(+), 12 deletions(-) create mode 100755 examples/ipsec-secgw/test/tun_null_header_reconstruct.py -- 2.14.5
