IPsec xform struct would be updated to include IPsec SA lifetime configuration. The existing member 'esn_soft_limit' would only track ESN. And as sequence number control is getting introduced, 'esn_soft_limit' may not indicate the number of packets processed. Replace that with a new structure to cover all lifetime cases with support for specifying both soft and hard lifetimes.
ESN control introduced by: http://patches.dpdk.org/project/dpdk/patch/20210713133542.3550525-4-radu.nico...@intel.com/ Signed-off-by: Anoob Joseph <ano...@marvell.com> --- doc/guides/rel_notes/deprecation.rst | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/doc/guides/rel_notes/deprecation.rst b/doc/guides/rel_notes/deprecation.rst index 6a35c76..7dbc088 100644 --- a/doc/guides/rel_notes/deprecation.rst +++ b/doc/guides/rel_notes/deprecation.rst @@ -151,3 +151,8 @@ Deprecation Notices * security: The functions ``rte_security_set_pkt_metadata`` and ``rte_security_get_userdata`` will be made inline functions and additional flags will be added in structure ``rte_security_ctx`` in DPDK 21.11. + +* security: The IPsec configuration structure + ``struct rte_security_ipsec_xform`` will be updated with new members to allow + SA lifetime configuration. A new structure would be introduced to replace the + current member, ``esn_soft_limit``. -- 2.7.4
