Add support for:
TSO, NAT-T/UDP encapsulation, ESN
AES_CCM, CHACHA20_POLY1305 and AES_GMAC
SA telemetry
mbuf offload flags
Initial SQN value
Signed-off-by: Declan Doherty <declan.dohe...@intel.com>
Signed-off-by: Radu Nicolau <radu.nico...@intel.com>
Signed-off-by: Abhijit Sinha <abhijit.si...@intel.com>
Signed-off-by: Daniel Martin Buckley <daniel.m.buck...@intel.com>
Radu Nicolau (10):
security: add ESN field to ipsec_xform
ipsec: add support for AEAD algorithms
security: add UDP params for IPsec NAT-T
ipsec: add support for NAT-T
mbuf: add IPsec ESP tunnel type
ipsec: add transmit segmentation offload support
ipsec: add support for SA telemetry
ipsec: add support for initial SQN value
doc: remove unneeded ipsec new field deprecation
doc: remove unneeded security deprecation
doc/guides/prog_guide/ipsec_lib.rst | 14 +-
doc/guides/rel_notes/deprecation.rst | 9 +-
doc/guides/rel_notes/release_21_11.rst | 17 ++
lib/ipsec/crypto.h | 137 ++++++++++++++
lib/ipsec/esp_inb.c | 84 ++++++++-
lib/ipsec/esp_outb.c | 210 +++++++++++++++++++---
lib/ipsec/ipsec_telemetry.c | 237 +++++++++++++++++++++++++
lib/ipsec/meson.build | 6 +-
lib/ipsec/rte_ipsec.h | 23 +++
lib/ipsec/rte_ipsec_sa.h | 9 +-
lib/ipsec/sa.c | 117 ++++++++++--
lib/ipsec/sa.h | 15 ++
lib/ipsec/version.map | 9 +
lib/mbuf/rte_mbuf_core.h | 1 +
lib/security/rte_security.h | 15 ++
15 files changed, 842 insertions(+), 61 deletions(-)
create mode 100644 lib/ipsec/ipsec_telemetry.c
--
v2: fixed lib/ipsec/version.map updates to show correct version
v3: fixed build error and corrected misspelled email address
v4: add doxygen comments for the IPsec telemetry APIs
update inline comments refering to the wrong RFC
v5: update commit messages after feedback
update the UDP encapsulation patch to actually use the configured ports
v6: fix initial SQN value
v7: reworked the patches after feedback
v8: updated library doc, release notes and removed deprecation notices
2.25.1
