> -----Original Message----- > From: dev [mailto:dev-boun...@dpdk.org] On Behalf Of Marcin Smoczynski > Sent: Friday, September 27, 2019 4:55 PM > To: ano...@marvell.com; akhil.go...@nxp.com; Ananyev, Konstantin > <konstantin.anan...@intel.com> > Cc: dev@dpdk.org; Smoczynski, MarcinX <marcinx.smoczyn...@intel.com> > Subject: [dpdk-dev] [PATCH v5 2/4] examples/ipsec-secgw: add fallback > session feature > > Inline processing is limited to a specified subset of traffic. It is often > unable to > handle more complicated situations, such as fragmented traffic. When using > inline processing such traffic is dropped. > > Introduce fallback session for inline processing allowing processing packets > that normally would be dropped. A fallback session is configured by adding > 'fallback' keyword with 'lookaside-none' or 'lookaside-protocol' parameter to > an SA configuration. > > Using IPsec anti-replay window or ESN feature with fallback session is not yet > supported when primary session is of type 'inline-protocol-offload' or > fallback session is 'lookaside-protocol' > because SA sequence number is not synchronized between software and > hardware sessions. Fallback sessions are also limited to ingress IPsec > traffic. > > Fallback session feature is not available in the legacy mode. > > Acked-by: Konstantin Ananyev <konstantin.anan...@intel.com> > Signed-off-by: Marcin Smoczynski <marcinx.smoczyn...@intel.com>
Tested-by: Bernard Iremonger <bernard.iremon...@intel.com>
