rte_ipsec_sad.h

Go to the documentation of this file.

/* SPDX-License-Identifier: BSD-3-Clause
 * Copyright(c) 2019 Intel Corporation
 */
 
#ifndef _RTE_IPSEC_SAD_H_
#define _RTE_IPSEC_SAD_H_
 
#include <stdint.h>
 
#include <rte_ip6.h>

 
#ifdef __cplusplus
extern "C" {
#endif
 
struct rte_ipsec_sad;

enum {
    RTE_IPSEC_SAD_SPI_ONLY = 0,
    RTE_IPSEC_SAD_SPI_DIP,
    RTE_IPSEC_SAD_SPI_DIP_SIP,
    RTE_IPSEC_SAD_KEY_TYPE_MASK,
};
 
struct rte_ipsec_sadv4_key {
    uint32_t spi;
    uint32_t dip;
    uint32_t sip;
};
 
struct rte_ipsec_sadv6_key {
    uint32_t spi;
    struct rte_ipv6_addr dip;
    struct rte_ipv6_addr sip;
};
 
union rte_ipsec_sad_key {
    struct rte_ipsec_sadv4_key  v4;
    struct rte_ipsec_sadv6_key  v6;
};

#define RTE_IPSEC_SAD_NAMESIZE      64
#define RTE_IPSEC_SAD_FLAG_IPV6         0x1
#define RTE_IPSEC_SAD_FLAG_RW_CONCURRENCY   0x2

struct rte_ipsec_sad_conf {
    int     socket_id;
    uint32_t    max_sa[RTE_IPSEC_SAD_KEY_TYPE_MASK];
    uint32_t    flags;
};

int
rte_ipsec_sad_add(struct rte_ipsec_sad *sad,
    const union rte_ipsec_sad_key *key,
    int key_type, void *sa);

int
rte_ipsec_sad_del(struct rte_ipsec_sad *sad,
    const union rte_ipsec_sad_key *key,
    int key_type);
/*
 * Create SAD
 *
 * @param name
 *  SAD name
 * @param conf
 *  Structure containing the configuration
 * @return
 *  Handle to SAD object on success
 *  NULL otherwise with rte_errno set to an appropriate values.
 */
struct rte_ipsec_sad *
rte_ipsec_sad_create(const char *name, const struct rte_ipsec_sad_conf *conf);

struct rte_ipsec_sad *
rte_ipsec_sad_find_existing(const char *name);

void
rte_ipsec_sad_destroy(struct rte_ipsec_sad *sad);

int
rte_ipsec_sad_lookup(const struct rte_ipsec_sad *sad,
    const union rte_ipsec_sad_key *keys[],
    void *sa[], uint32_t n);
 
#ifdef __cplusplus
}
#endif
 
#endif /* _RTE_IPSEC_SAD_H_ */