[v2,0/5] examples/ipsec-secgw: support packet
mbox series

Message ID 20190606115151.27805-1-konstantin.ananyev@intel.com
Headers show
Series
  • examples/ipsec-secgw: support packet
Related show

Message

Ananyev, Konstantin June 6, 2019, 11:51 a.m. UTC 
v1 -> v2
 - merge with latest mainline
 - update sample app guide

Add into ipsec-secgw ability to fragment packet bigger then mtu,
and reassemble fragmented packet.
To support these features ipsec-secgw relies on librte_ipsec ability
to handle multi-segment packets.
Also when reassemble/fragmentation support is enabled, attached
crypto devices have to support 'In Place SGL' offload capability.

To be able to work properly these changes require the following patches:
  [1] lib/librte_ip_frag: Remove PKT_TX_IP_CKSUM offload flags
      http://patches.dpdk.org/patch/53475/mbox/
  [2] ip_frag: fix IPv6 fragment size calculation
      http://patches.dpdk.org/patch/54489/mbox/
  [3] ipsec: support multi-segment packets
      http://patches.dpdk.org/patch/53948/mbox/
to be applied first.

Konstantin Ananyev (5):
  examples/ipsec-secgw: fix invalid packet length
  examples/ipsec-secgw: support packet fragmentation and reassembly
  examples/ipsec-secgw: add multi-segment test cases
  examples/ipsec-secgw: add bypass test case
  doc: update ipsec-secgw guide

 doc/guides/sample_app_ug/ipsec_secgw.rst |  22 +-
 examples/ipsec-secgw/ipsec-secgw.c       | 404 ++++++++++++++++++++---
 examples/ipsec-secgw/ipsec.h             |   1 +
 examples/ipsec-secgw/meson.build         |   2 +-
 examples/ipsec-secgw/test/bypass_defs.sh |  45 +++
 examples/ipsec-secgw/test/common_defs.sh |  18 +-
 examples/ipsec-secgw/test/data_rxtx.sh   |  18 +-
 examples/ipsec-secgw/test/linux_test4.sh |  17 +-
 examples/ipsec-secgw/test/linux_test6.sh |  17 +-
 examples/ipsec-secgw/test/run_test.sh    |   5 +-
 10 files changed, 487 insertions(+), 62 deletions(-)
 create mode 100644 examples/ipsec-secgw/test/bypass_defs.sh