Hi Radu, > Add support for: > TSO, NAT-T/UDP encapsulation, ESN > AES_CCM, CHACHA20_POLY1305 and AES_GMAC > SA telemetry > mbuf offload flags > Initial SQN value
After applying your patches I am seeing functional ipsec tests (examples/ipsec-secgw/test) failing - both lookaside and inline mode. Could you please have a look. Thanks Konstantin > > Signed-off-by: Declan Doherty <declan.dohe...@intel.com> > Signed-off-by: Radu Nicolau <radu.nico...@intel.com> > Signed-off-by: Abhijit Sinha <abhijit.si...@intel.com> > Signed-off-by: Daniel Martin Buckley <daniel.m.buck...@intel.com> > > Radu Nicolau (10): > security: add support for TSO on IPsec session > security: add UDP params for IPsec NAT-T > security: add ESN field to ipsec_xform > mbuf: add IPsec ESP tunnel type > ipsec: add support for AEAD algorithms > ipsec: add transmit segmentation offload support > ipsec: add support for NAT-T > ipsec: add support for SA telemetry > ipsec: add support for initial SQN value > ipsec: add ol_flags support > > lib/ipsec/crypto.h | 137 ++++++++++++ > lib/ipsec/esp_inb.c | 88 +++++++- > lib/ipsec/esp_outb.c | 262 +++++++++++++++++++---- > lib/ipsec/iph.h | 27 ++- > lib/ipsec/meson.build | 2 +- > lib/ipsec/rte_ipsec.h | 23 ++ > lib/ipsec/rte_ipsec_sa.h | 11 +- > lib/ipsec/sa.c | 406 ++++++++++++++++++++++++++++++++++-- > lib/ipsec/sa.h | 43 ++++ > lib/ipsec/version.map | 9 + > lib/mbuf/rte_mbuf_core.h | 1 + > lib/security/rte_security.h | 31 +++ > 12 files changed, 967 insertions(+), 73 deletions(-) > > -- > v2: fixed lib/ipsec/version.map updates to show correct version > v3: fixed build error and corrected misspelled email address > v4: add doxygen comments for the IPsec telemetry APIs > update inline comments refering to the wrong RFC > v5: update commit messages after feedback > update the UDP encapsulation patch to actually use the configured ports > > 2.25.1
