From patchwork Tue Jun 25 13:43:19 2019 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Fan Zhang X-Patchwork-Id: 55311 Return-Path: X-Original-To: patchwork@dpdk.org Delivered-To: patchwork@dpdk.org Received: from [92.243.14.124] (localhost [127.0.0.1]) by dpdk.org (Postfix) with ESMTP id 1D7631BA56; Tue, 25 Jun 2019 15:49:17 +0200 (CEST) Received: from mga04.intel.com (mga04.intel.com [192.55.52.120]) by dpdk.org (Postfix) with ESMTP id B93B81B9C0 for ; Tue, 25 Jun 2019 15:49:15 +0200 (CEST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga008.jf.intel.com ([10.7.209.65]) by fmsmga104.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 25 Jun 2019 06:49:14 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.63,416,1557212400"; d="scan'208";a="155514553" Received: from silpixa00398673.ir.intel.com (HELO silpixa00398673.ger.corp.intel.com) ([10.237.223.136]) by orsmga008.jf.intel.com with ESMTP; 25 Jun 2019 06:49:13 -0700 From: Fan Zhang To: dev@dpdk.org Cc: akhil.goyal@nxp.com, konstantin.ananyev@intel.com, Fan Zhang Date: Tue, 25 Jun 2019 14:43:19 +0100 Message-Id: <20190625134321.71595-1-roy.fan.zhang@intel.com> X-Mailer: git-send-email 2.14.5 In-Reply-To: <20190517160319.2468-1-marko.kovacevic@intel.com> References: <20190517160319.2468-1-marko.kovacevic@intel.com> Subject: [dpdk-dev] [PATCH v2 0/2] ipsec: ECN and DSCP header reconstruction. X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org Sender: "dev" This patchset adds the ECN and DSCP tunnel mode header reconstruction support for rte_ipsec library. The ipsec-secgw sample application is updated with the feature's enabling and a python3 script for testing the correctness of the implementation. This patchset depends on the following patchset "[v2,0/4] IPv6 with options support for IPsec transport" (http://patchwork.dpdk.org/cover/55238/) v2: - Fixed a few bugs. - Updated according to Konstantin's comments. - Added python script for testing. Fan Zhang (1): examples/ipsec-secgw: support header reconstruction Marko Kovacevic (1): lib/ipsec: add support for header construction doc/guides/rel_notes/release_19_08.rst | 6 + examples/ipsec-secgw/sa.c | 2 + examples/ipsec-secgw/test/run_test.sh | 3 +- .../test/tun_null_header_reconstruct.py | 477 +++++++++++++++++++++ lib/librte_ipsec/esp_inb.c | 14 +- lib/librte_ipsec/esp_outb.c | 4 +- lib/librte_ipsec/iph.h | 134 +++++- lib/librte_ipsec/rte_ipsec_sa.h | 25 ++ lib/librte_ipsec/sa.c | 17 + lib/librte_ipsec/sa.h | 2 + lib/librte_net/rte_ip.h | 11 + lib/librte_security/rte_security.h | 9 + 12 files changed, 692 insertions(+), 12 deletions(-) create mode 100755 examples/ipsec-secgw/test/tun_null_header_reconstruct.py