Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/patches/132279/?format=api
{ "id": 132279, "url": "http://patches.dpdk.org/api/patches/132279/?format=api", "web_url": "http://patches.dpdk.org/project/dpdk/patch/20231003104854.1381-5-anoobj@marvell.com/", "project": { "id": 1, "url": "http://patches.dpdk.org/api/projects/1/?format=api", "name": "DPDK", "link_name": "dpdk", "list_id": "dev.dpdk.org", "list_email": "dev@dpdk.org", "web_url": "http://core.dpdk.org", "scm_url": "git://dpdk.org/dpdk", "webscm_url": "http://git.dpdk.org/dpdk", "list_archive_url": "https://inbox.dpdk.org/dev", "list_archive_url_format": "https://inbox.dpdk.org/dev/{}", "commit_url_format": "" }, "msgid": "<20231003104854.1381-5-anoobj@marvell.com>", "list_archive_url": "https://inbox.dpdk.org/dev/20231003104854.1381-5-anoobj@marvell.com", "date": "2023-10-03T10:48:53", "name": "[v2,4/5] security: support TLS record lifetime notification", "commit_ref": null, "pull_url": null, "state": "accepted", "archived": true, "hash": "0dadc4aad644150d2a169432604eaf6b40a20ea1", "submitter": { "id": 1205, "url": "http://patches.dpdk.org/api/people/1205/?format=api", "name": "Anoob Joseph", "email": "anoobj@marvell.com" }, "delegate": { "id": 6690, "url": "http://patches.dpdk.org/api/users/6690/?format=api", "username": "akhil", "first_name": "akhil", "last_name": "goyal", "email": "gakhil@marvell.com" }, "mbox": "http://patches.dpdk.org/project/dpdk/patch/20231003104854.1381-5-anoobj@marvell.com/mbox/", "series": [ { "id": 29720, "url": "http://patches.dpdk.org/api/series/29720/?format=api", "web_url": "http://patches.dpdk.org/project/dpdk/list/?series=29720", "date": "2023-10-03T10:48:49", "name": "add TLS record processing security offload", "version": 2, "mbox": "http://patches.dpdk.org/series/29720/mbox/" } ], "comments": "http://patches.dpdk.org/api/patches/132279/comments/", "check": "success", "checks": "http://patches.dpdk.org/api/patches/132279/checks/", "tags": {}, "related": [], "headers": { "Return-Path": "<dev-bounces@dpdk.org>", "X-Original-To": "patchwork@inbox.dpdk.org", "Delivered-To": "patchwork@inbox.dpdk.org", "Received": [ "from mails.dpdk.org (mails.dpdk.org [217.70.189.124])\n\tby inbox.dpdk.org (Postfix) with ESMTP id 3A239426AE;\n\tTue, 3 Oct 2023 12:49:26 +0200 (CEST)", "from mails.dpdk.org (localhost [127.0.0.1])\n\tby mails.dpdk.org (Postfix) with ESMTP id C78AE4069D;\n\tTue, 3 Oct 2023 12:49:13 +0200 (CEST)", "from mx0b-0016f401.pphosted.com (mx0a-0016f401.pphosted.com\n [67.231.148.174])\n by mails.dpdk.org (Postfix) with ESMTP id 415DE406BA\n for <dev@dpdk.org>; Tue, 3 Oct 2023 12:49:12 +0200 (CEST)", "from pps.filterd (m0045849.ppops.net [127.0.0.1])\n by mx0a-0016f401.pphosted.com (8.17.1.19/8.17.1.19) with ESMTP id\n 3933ifTI022105; Tue, 3 Oct 2023 03:49:07 -0700", "from dc5-exch01.marvell.com ([199.233.59.181])\n by mx0a-0016f401.pphosted.com (PPS) with ESMTPS id 3tgbas98we-1\n (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT);\n Tue, 03 Oct 2023 03:49:07 -0700", "from DC5-EXCH01.marvell.com (10.69.176.38) by DC5-EXCH01.marvell.com\n (10.69.176.38) with Microsoft SMTP Server (TLS) id 15.0.1497.48;\n Tue, 3 Oct 2023 03:49:06 -0700", "from maili.marvell.com (10.69.176.80) by DC5-EXCH01.marvell.com\n (10.69.176.38) with Microsoft SMTP Server id 15.0.1497.48 via Frontend\n Transport; Tue, 3 Oct 2023 03:49:06 -0700", "from BG-LT92004.corp.innovium.com (unknown [10.28.163.189])\n by maili.marvell.com (Postfix) with ESMTP id 45AEB3F7089;\n Tue, 3 Oct 2023 03:49:01 -0700 (PDT)" ], "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed; d=marvell.com;\n h=from : to : cc :\n subject : date : message-id : in-reply-to : references : mime-version :\n content-transfer-encoding : content-type; s=pfpt0220;\n bh=eEuKQ/zjBWhv+s3EjmCO0ws4GpnR4otYTSOF7fPGLG0=;\n b=XJdF8b8QZz6iap8CrobApxEH9okXxe2Wjql94yiQL//mm+HiH/Q9Az3ag7iusED14dCZ\n cn0DcbCHGDzh71j5Zm7k0A5v4Jyje4OnT7TQ+RsmsfKCKN9ixjvpHmRoADVCfeXuMTk5\n vqsjyl7IDm43NvoIAmULXlrtLofYeRYXQYc9blwi0zzg4RlXd26c6IKNGSBXlQKLtleG\n bq4WCcb//UMTWHBaYKIVbqROcEnV01VsxfXIvZE9X1LgOrhWGDA3+Z8Gjr9g0+3azjPd\n r3DbzhzszwKAw3pQtBvxjUIm7Y+h1IUBcYPEwDRYhdqblaV3YZVtzWOmK4JbdFYFY7/V DQ==", "From": "Anoob Joseph <anoobj@marvell.com>", "To": "Thomas Monjalon <thomas@monjalon.net>, Akhil Goyal <gakhil@marvell.com>,\n Jerin Jacob <jerinj@marvell.com>, Harry van Haaren\n <harry.van.haaren@intel.com>", "CC": "Vidya Sagar Velumuri <vvelumuri@marvell.com>, Konstantin Ananyev\n <konstantin.v.ananyev@yandex.ru>,\n Hemant Agrawal <hemant.agrawal@nxp.com>, <dev@dpdk.org>,\n Olivier Matz <olivier.matz@6wind.com>", "Subject": "[PATCH v2 4/5] security: support TLS record lifetime notification", "Date": "Tue, 3 Oct 2023 16:18:53 +0530", "Message-ID": "<20231003104854.1381-5-anoobj@marvell.com>", "X-Mailer": "git-send-email 2.25.1", "In-Reply-To": "<20231003104854.1381-1-anoobj@marvell.com>", "References": "<20230811071712.240-1-anoobj@marvell.com>\n <20231003104854.1381-1-anoobj@marvell.com>", "MIME-Version": "1.0", "Content-Transfer-Encoding": "8bit", "Content-Type": "text/plain", "X-Proofpoint-ORIG-GUID": "-cmZ7A6sKwNnfYrWrvZFzcmet3EvSNRD", "X-Proofpoint-GUID": "-cmZ7A6sKwNnfYrWrvZFzcmet3EvSNRD", "X-Proofpoint-Virus-Version": "vendor=baseguard\n engine=ICAP:2.0.267,Aquarius:18.0.980,Hydra:6.0.619,FMLib:17.11.176.26\n definitions=2023-10-03_07,2023-10-02_01,2023-05-22_02", "X-BeenThere": "dev@dpdk.org", "X-Mailman-Version": "2.1.29", "Precedence": "list", "List-Id": "DPDK patches and discussions <dev.dpdk.org>", "List-Unsubscribe": "<https://mails.dpdk.org/options/dev>,\n <mailto:dev-request@dpdk.org?subject=unsubscribe>", "List-Archive": "<http://mails.dpdk.org/archives/dev/>", "List-Post": "<mailto:dev@dpdk.org>", "List-Help": "<mailto:dev-request@dpdk.org?subject=help>", "List-Subscribe": "<https://mails.dpdk.org/listinfo/dev>,\n <mailto:dev-request@dpdk.org?subject=subscribe>", "Errors-To": "dev-bounces@dpdk.org" }, "content": "From: Vidya Sagar Velumuri <vvelumuri@marvell.com>\n\nSupport TLS record lifetime notification. TLS record sessions may need\nto be renegotiated after a specific number of records are processed. For\ndevices that are capable of tracking lifetime, application may request\nto do so by configuring the lifetime parameters in session. Upon soft\nexpiry, PMD will set the notification in `rte_crypto_op.aux_flags` field.\n\nHard expiration of the session would mean any subsequent crypto\noperation would fail.\n\nExtend `rte_crypto_op.aux_flags` to support all sessions that may have a\nlifetime notification and include TLS record lifetime under the same.\n\nSigned-off-by: Anoob Joseph <anoobj@marvell.com>\nSigned-off-by: Vidya Sagar Velumuri <vvelumuri@marvell.com>\n---\n lib/cryptodev/rte_crypto.h | 11 ++++++++++-\n lib/security/rte_security.h | 18 ++++++++++++++++++\n 2 files changed, 28 insertions(+), 1 deletion(-)", "diff": "diff --git a/lib/cryptodev/rte_crypto.h b/lib/cryptodev/rte_crypto.h\nindex 7b8f2bdc6d..9fe3e3d529 100644\n--- a/lib/cryptodev/rte_crypto.h\n+++ b/lib/cryptodev/rte_crypto.h\n@@ -64,9 +64,18 @@ enum rte_crypto_op_sess_type {\n \tRTE_CRYPTO_OP_SECURITY_SESSION\t/**< Security session crypto operation */\n };\n \n+/* Auxiliary flags related to crypto operation */\n+#define RTE_CRYPTO_OP_AUX_FLAGS_SESS_SOFT_EXPIRY (1 << 0)\n+/**< Session soft expiry limit has been reached. Applicable for any session that has a soft lifetime\n+ * feature supported.\n+ *\n+ * @see rte_security_ipsec_lifetime\n+ * @see rte_security_tls_record_lifetime\n+ */\n+\n /* Auxiliary flags related to IPsec offload with RTE_SECURITY */\n \n-#define RTE_CRYPTO_OP_AUX_FLAGS_IPSEC_SOFT_EXPIRY (1 << 0)\n+#define RTE_CRYPTO_OP_AUX_FLAGS_IPSEC_SOFT_EXPIRY RTE_CRYPTO_OP_AUX_FLAGS_SESS_SOFT_EXPIRY\n /**< SA soft expiry limit has been reached */\n \n /**\ndiff --git a/lib/security/rte_security.h b/lib/security/rte_security.h\nindex 89e61e10ad..00d2a29a01 100644\n--- a/lib/security/rte_security.h\n+++ b/lib/security/rte_security.h\n@@ -654,6 +654,22 @@ struct rte_security_tls_record_sess_options {\n \tuint32_t extra_padding_enable : 1;\n };\n \n+/**\n+ * Configure soft and hard lifetime of a TLS record session\n+ *\n+ * Lifetime of a TLS record session would specify the maximum number of packets that can be\n+ * processed. TLS record processing operations would start failing once hard limit is reached.\n+ *\n+ * Soft limits can be specified to generate notification when the TLS record session is approaching\n+ * hard limits for lifetime. This would result in a warning returned in ``rte_crypto_op.aux_flags``.\n+ */\n+struct rte_security_tls_record_lifetime {\n+\t/** Soft expiry limit in number of packets */\n+\tuint64_t packets_soft_limit;\n+\t/** Hard expiry limit in number of packets */\n+\tuint64_t packets_hard_limit;\n+};\n+\n /**\n * TLS record protocol session configuration.\n *\n@@ -666,6 +682,8 @@ struct rte_security_tls_record_xform {\n \tenum rte_security_tls_sess_type type;\n \t/** TLS record session options. */\n \tstruct rte_security_tls_record_sess_options options;\n+\t/** TLS record session lifetime. */\n+\tstruct rte_security_tls_record_lifetime life;\n \tunion {\n \t\t/** TLS 1.2 parameters. */\n \t\tstruct {\n", "prefixes": [ "v2", "4/5" ] }