Hi Konstantin,
On 10/9/2017 7:19 PM, Ananyev, Konstantin wrote:
-----Original Message-----
From: Akhil Goyal [mailto:akhil.go...@nxp.com]
Sent: Friday, October 6, 2017 7:12 PM
To: dev@dpdk.org
Cc: Doherty, Declan <declan.dohe...@intel.com>; De Lara Guarch, Pablo
<pablo.de.lara.gua...@intel.com>; hemant.agra...@nxp.com;
Nicolau, Radu <radu.nico...@intel.com>; bor...@mellanox.com;
avia...@mellanox.com; tho...@monjalon.net;
sandeep.ma...@nxp.com; jerin.ja...@caviumnetworks.com; Mcnamara, John
<john.mcnam...@intel.com>; Ananyev, Konstantin
<konstantin.anan...@intel.com>; shah...@mellanox.com; olivier.m...@6wind.com
Subject: [PATCH v3 00/12] introduce security offload library
This patchset introduce the rte_security library in DPDK.
This also includes the sample implementation of drivers and
changes in ipsec gateway application to demonstrate its usage.
rte_security library is implemented on the idea proposed earlier [1],[2],[3]
to support IPsec Inline and look aside crypto offload. Though
the current focus is only on IPsec protocol, but the library is
not limited to IPsec, it can be extended to other security
protocols e.g. MACSEC, PDCP or DTLS.
In this library, crypto/ethernet devices can register itself to
the security library to support security offload.
The library support 3 modes of operation
1. full protocol offload using crypto devices.
(RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL)
2. inline ipsec using ethernet devices to perform crypto operations
(RTE_SECURITY_ACTION_TYPE_INLINE_CRYPTO)
3. full protocol offload using ethernet devices.
(RTE_SECURITY_ACTION_TYPE_INLINE_PROTOCOL)
The details for each mode is documented in the patchset in
doc/guides/prog_guide/rte_security.rst
The modification in the application ipsec-secgw is also doocumented in
doc/guides/sample_app_ug/ipsec_secgw.rst
This patchset is also available at:
git://dpdk.org/draft/dpdk-draft-ipsec
branch: integration
changes in v3:
1. fixed compilation for FreeBSD
2. Incorporated comments from Pablo, John, Shahaf, Ananyev
As I can see, you didn't address any of my comments in v3.
So please don't include my name here.
Konstantin
This was a mistake on my part. I thought your comments on ethdev and
ixgbe changes were taken care of. I would not repeat this in future.
-Akhil
