mbox

[v7,0/2] ipsec: ECN and DSCP header reconstruction

Message ID 20190704104236.65578-1-roy.fan.zhang@intel.com (mailing list archive)
Headers

Message

Fan Zhang July 4, 2019, 10:42 a.m. UTC 
  This patchset adds the ECN and DSCP tunnel mode header reconstruction
support for rte_ipsec library. The ipsec-secgw sample application is
updated with the feature's enabling and a python3 script for testing
the correctness of the implementation.

v7:
- rebased on top of latest dpdk-next-crypto.

v6:
- update_tun_tos function split for inbound/outbound.
- get/set ipv6 tc change from macro back to inline functions.

v5:
- Fixed a checkpatch error.

v4:
- Fixed a bug.
- Refrabricated the code a bit.

v3:
- Rebased on top of latest dpdk-next-crypto.
- Updated the library with individual header reconstruction function.

v2:
- Fixed a few bugs.
- Updated according to Konstantin's comments.
- Added python script for testing.

Fan Zhang (2):
  lib/ipsec: add support for header construction
  examples/ipsec-secgw: support header reconstruction

 doc/guides/rel_notes/release_19_08.rst             |   6 +
 examples/ipsec-secgw/sa.c                          |   2 +
 examples/ipsec-secgw/test/run_test.sh              |   3 +-
 .../test/tun_null_header_reconstruct.py            | 479 +++++++++++++++++++++
 lib/librte_ipsec/esp_inb.c                         |  13 +-
 lib/librte_ipsec/esp_outb.c                        |   4 +-
 lib/librte_ipsec/iph.h                             | 164 ++++++-
 lib/librte_ipsec/rte_ipsec_sa.h                    |  10 +
 lib/librte_ipsec/sa.c                              |  18 +
 lib/librte_ipsec/sa.h                              |   2 +
 lib/librte_net/rte_ip.h                            |   2 +
 lib/librte_security/rte_security.h                 |   9 +
 12 files changed, 703 insertions(+), 9 deletions(-)
 create mode 100755 examples/ipsec-secgw/test/tun_null_header_reconstruct.py