diff mbox series

[10/10] net/nfp: destroy security session

Message ID 20230925060644.1458598-11-chaoyong.he@corigine.com (mailing list archive)
State Superseded, archived
Delegated to: Ferruh Yigit
Headers
Series add the support of ipsec offload |

Checks

Context Check Description
ci/checkpatch success coding style OK
ci/loongarch-compilation success Compilation OK
ci/loongarch-unit-testing success Unit Testing PASS
ci/Intel-compilation success Compilation OK
ci/intel-Testing success Testing PASS
ci/intel-Functional success Functional PASS
ci/iol-intel-Functional success Functional Testing PASS
ci/iol-mellanox-Performance success Performance Testing PASS
ci/iol-intel-Performance success Performance Testing PASS
ci/iol-broadcom-Performance success Performance Testing PASS
ci/iol-broadcom-Functional success Functional Testing PASS
ci/iol-unit-arm64-testing success Testing PASS
ci/iol-compile-arm64-testing success Testing PASS
ci/iol-compile-amd64-testing fail Testing issues
ci/iol-unit-amd64-testing success Testing PASS
ci/iol-sample-apps-testing success Testing PASS

Commit Message

Chaoyong He Sept. 25, 2023, 6:06 a.m. UTC 
  From: Shihong Wang <shihong.wang@corigine.com>

Delete SA from NIC and destroy security session.

Signed-off-by: Shihong Wang <shihong.wang@corigine.com>
Reviewed-by: Chaoyong He <chaoyong.he@corigine.com>
---
 drivers/net/nfp/nfp_ipsec.c | 53 +++++++++++++++++++++++++++++++++++++
 1 file changed, 53 insertions(+)
diff mbox series

Patch

diff --git a/drivers/net/nfp/nfp_ipsec.c b/drivers/net/nfp/nfp_ipsec.c
index b11b1c9df3..a5b5a4fe42 100644
--- a/drivers/net/nfp/nfp_ipsec.c
+++ b/drivers/net/nfp/nfp_ipsec.c
@@ -1291,11 +1291,64 @@  nfp_security_session_get_size(void *device __rte_unused)
 	return sizeof(struct nfp_ipsec_session);
 }
 
+static int
+nfp_crypto_remove_sa(struct rte_eth_dev *eth_dev,
+		struct nfp_ipsec_session *priv_session)
+{
+	int ret;
+	uint32_t sa_index;
+	struct nfp_net_hw *hw;
+	struct nfp_ipsec_msg cfg;
+
+	sa_index = priv_session->sa_index;
+	hw = NFP_NET_DEV_PRIVATE_TO_HW(eth_dev->data->dev_private);
+
+	cfg.cmd = NFP_IPSEC_CFG_MSG_INV_SA;
+	cfg.sa_idx = sa_index;
+	ret = nfp_ipsec_cfg_cmd_issue(hw, &cfg);
+	if (ret < 0) {
+		PMD_DRV_LOG(ERR, "Failed to remove SA!");
+		return -EINVAL;
+	}
+
+	hw->ipsec_data->sa_free_cnt++;
+	hw->ipsec_data->sa_entries[sa_index] = NULL;
+
+	return 0;
+}
+
+static int
+nfp_crypto_remove_session(void *device,
+		struct rte_security_session *session)
+{
+	int ret;
+	struct rte_eth_dev *eth_dev;
+	struct nfp_ipsec_session *priv_session;
+
+	eth_dev = device;
+	priv_session = SECURITY_GET_SESS_PRIV(session);
+	if (eth_dev != priv_session->dev) {
+		PMD_DRV_LOG(ERR, "Session not bound to this device");
+		return -ENODEV;
+	}
+
+	ret = nfp_crypto_remove_sa(eth_dev, priv_session);
+	if (ret < 0) {
+		PMD_DRV_LOG(ERR, "Failed to remove session");
+		return -EFAULT;
+	}
+
+	memset(priv_session, 0, sizeof(struct nfp_ipsec_session));
+
+	return 0;
+}
+
 static const struct rte_security_ops nfp_security_ops = {
 	.session_create = nfp_crypto_create_session,
 	.session_update = nfp_crypto_update_session,
 	.session_get_size = nfp_security_session_get_size,
 	.session_stats_get = nfp_security_session_get_stats,
+	.session_destroy = nfp_crypto_remove_session,
 	.set_pkt_metadata = nfp_security_set_pkt_metadata,
 	.capabilities_get = nfp_crypto_capabilities_get,
 };