Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/patches/85440/?format=api
https://patches.dpdk.org/api/patches/85440/?format=api", "web_url": "https://patches.dpdk.org/project/dpdk/patch/20201218093702.3651867-34-jiawenwu@trustnetic.com/", "project": { "id": 1, "url": "https://patches.dpdk.org/api/projects/1/?format=api", "name": "DPDK", "link_name": "dpdk", "list_id": "dev.dpdk.org", "list_email": "dev@dpdk.org", "web_url": "http://core.dpdk.org", "scm_url": "git://dpdk.org/dpdk", "webscm_url": "http://git.dpdk.org/dpdk", "list_archive_url": "https://inbox.dpdk.org/dev", "list_archive_url_format": "https://inbox.dpdk.org/dev/{}", "commit_url_format": "" }, "msgid": "<20201218093702.3651867-34-jiawenwu@trustnetic.com>", "list_archive_url": "https://inbox.dpdk.org/dev/20201218093702.3651867-34-jiawenwu@trustnetic.com", "date": "2020-12-18T09:37:02", "name": "[v3,33/33] net/txgbe: add security type in flow action", "commit_ref": null, "pull_url": null, "state": "accepted", "archived": true, "hash": "916b0300c93b1cf6d5b369f2c00cb37e0f38ea7b", "submitter": { "id": 1932, "url": "https://patches.dpdk.org/api/people/1932/?format=api", "name": "Jiawen Wu", "email": "jiawenwu@trustnetic.com" }, "delegate": { "id": 319, "url": "https://patches.dpdk.org/api/users/319/?format=api", "username": "fyigit", "first_name": "Ferruh", "last_name": "Yigit", "email": "ferruh.yigit@amd.com" }, "mbox": "https://patches.dpdk.org/project/dpdk/patch/20201218093702.3651867-34-jiawenwu@trustnetic.com/mbox/", "series": [ { "id": 14363, "url": "https://patches.dpdk.org/api/series/14363/?format=api", "web_url": "https://patches.dpdk.org/project/dpdk/list/?series=14363", "date": "2020-12-18T09:36:30", "name": "net: add txgbe PMD part 2", "version": 3, "mbox": "https://patches.dpdk.org/series/14363/mbox/" } ], "comments": "https://patches.dpdk.org/api/patches/85440/comments/", "check": "warning", "checks": "https://patches.dpdk.org/api/patches/85440/checks/", "tags": {}, "related": [], "headers": { "Return-Path": "<dev-bounces@dpdk.org>", "X-Original-To": "patchwork@inbox.dpdk.org", "Delivered-To": "patchwork@inbox.dpdk.org", "Received": [ "from dpdk.org (dpdk.org [92.243.14.124])\n\tby inbox.dpdk.org (Postfix) with ESMTP id 52023A09F6;\n\tFri, 18 Dec 2020 10:45:15 +0100 (CET)", "from [92.243.14.124] (localhost [127.0.0.1])\n\tby dpdk.org (Postfix) with ESMTP id 60F0DCD37;\n\tFri, 18 Dec 2020 10:35:31 +0100 (CET)", "from smtpbgau2.qq.com (smtpbgau2.qq.com [54.206.34.216])\n by dpdk.org (Postfix) with ESMTP id C1EDFCBEC\n for <dev@dpdk.org>; Fri, 18 Dec 2020 10:35:21 +0100 (CET)", "from localhost.localdomain.com (unknown [183.129.236.74])\n by esmtp10.qq.com (ESMTP) with\n id ; Fri, 18 Dec 2020 17:35:15 +0800 (CST)" ], "X-QQ-mid": "bizesmtp28t1608284115t2qa5qoa", "X-QQ-SSF": "01400000002000C0D000B00A0000000", "X-QQ-FEAT": "Ry58bBY793t30rtTM+/sOXKyTm4P+xpRKqzHARMn5pp2nYOV5wuAEFlZ0Lq8D\n iqR7NzLPzhpYgbJLxlNo91lhJZY2vesZ0zN7O8ppZtopfNOV1tN/Ps63v/Mv6kbRocoGwke\n nkMcwBSQB+z5Sa5R9zq465s0thclitDVIeAe4OtWaMBMrQp4yrBKuXUlh8xfyWs1Kh96EYV\n qjBdUMyCIYeKsZoDlkq+NSHgMJHZ5Jy8LVahjrp2gEHBh5nM1e3vYJQQNtrcI5L7zF8NOoE\n zcosIXpIXa+XewM9JjUpElmdCON6TwhoDG2P+gPWWa2u1RNvH215cTrh8YspAZXSLRRD9Bp\n +oQhBilvfq24akILJLQp3tseWrq+w==", "X-QQ-GoodBg": "2", "From": "Jiawen Wu <jiawenwu@trustnetic.com>", "To": "dev@dpdk.org", "Cc": "Jiawen Wu <jiawenwu@trustnetic.com>", "Date": "Fri, 18 Dec 2020 17:37:02 +0800", "Message-Id": "<20201218093702.3651867-34-jiawenwu@trustnetic.com>", "X-Mailer": "git-send-email 2.27.0", "In-Reply-To": "<20201218093702.3651867-1-jiawenwu@trustnetic.com>", "References": "<20201218093702.3651867-1-jiawenwu@trustnetic.com>", "MIME-Version": "1.0", "Content-Transfer-Encoding": "8bit", "X-QQ-SENDSIZE": "520", "Feedback-ID": "bizesmtp:trustnetic.com:qybgforeign:qybgforeign6", "X-QQ-Bgrelay": "1", "Subject": "[dpdk-dev] [PATCH v3 33/33] net/txgbe: add security type in flow\n\taction", "X-BeenThere": "dev@dpdk.org", "X-Mailman-Version": "2.1.15", "Precedence": "list", "List-Id": "DPDK patches and discussions <dev.dpdk.org>", "List-Unsubscribe": "<https://mails.dpdk.org/options/dev>,\n <mailto:dev-request@dpdk.org?subject=unsubscribe>", "List-Archive": "<http://mails.dpdk.org/archives/dev/>", "List-Post": "<mailto:dev@dpdk.org>", "List-Help": "<mailto:dev-request@dpdk.org?subject=help>", "List-Subscribe": "<https://mails.dpdk.org/listinfo/dev>,\n <mailto:dev-request@dpdk.org?subject=subscribe>", "Errors-To": "dev-bounces@dpdk.org", "Sender": "\"dev\" <dev-bounces@dpdk.org>" }, "content": "Add security type in flow action.\n\nSigned-off-by: Jiawen Wu <jiawenwu@trustnetic.com>\n---\n drivers/net/txgbe/txgbe_flow.c | 52 +++++++++++++++++++++++++++++++++\n drivers/net/txgbe/txgbe_ipsec.c | 30 +++++++++++++++++++\n drivers/net/txgbe/txgbe_ipsec.h | 3 ++\n 3 files changed, 85 insertions(+)", "diff": "diff --git a/drivers/net/txgbe/txgbe_flow.c b/drivers/net/txgbe/txgbe_flow.c\nindex 488949c84..57a4f2e17 100644\n--- a/drivers/net/txgbe/txgbe_flow.c\n+++ b/drivers/net/txgbe/txgbe_flow.c\n@@ -129,6 +129,9 @@ const struct rte_flow_action *next_no_void_action(\n * END\n * other members in mask and spec should set to 0x00.\n * item->last should be NULL.\n+ *\n+ * Special case for flow action type RTE_FLOW_ACTION_TYPE_SECURITY.\n+ *\n */\n static int\n cons_parse_ntuple_filter(const struct rte_flow_attr *attr,\n@@ -177,6 +180,43 @@ cons_parse_ntuple_filter(const struct rte_flow_attr *attr,\n \tmemset(ð_null, 0, sizeof(struct rte_flow_item_eth));\n \tmemset(&vlan_null, 0, sizeof(struct rte_flow_item_vlan));\n \n+#ifdef RTE_LIB_SECURITY\n+\t/**\n+\t * Special case for flow action type RTE_FLOW_ACTION_TYPE_SECURITY\n+\t */\n+\tact = next_no_void_action(actions, NULL);\n+\tif (act->type == RTE_FLOW_ACTION_TYPE_SECURITY) {\n+\t\tconst void *conf = act->conf;\n+\t\t/* check if the next not void item is END */\n+\t\tact = next_no_void_action(actions, act);\n+\t\tif (act->type != RTE_FLOW_ACTION_TYPE_END) {\n+\t\t\tmemset(filter, 0, sizeof(struct rte_eth_ntuple_filter));\n+\t\t\trte_flow_error_set(error, EINVAL,\n+\t\t\t\tRTE_FLOW_ERROR_TYPE_ACTION,\n+\t\t\t\tact, \"Not supported action.\");\n+\t\t\treturn -rte_errno;\n+\t\t}\n+\n+\t\t/* get the IP pattern*/\n+\t\titem = next_no_void_pattern(pattern, NULL);\n+\t\twhile (item->type != RTE_FLOW_ITEM_TYPE_IPV4 &&\n+\t\t\t\titem->type != RTE_FLOW_ITEM_TYPE_IPV6) {\n+\t\t\tif (item->last ||\n+\t\t\t\t\titem->type == RTE_FLOW_ITEM_TYPE_END) {\n+\t\t\t\trte_flow_error_set(error, EINVAL,\n+\t\t\t\t\tRTE_FLOW_ERROR_TYPE_ITEM,\n+\t\t\t\t\titem, \"IP pattern missing.\");\n+\t\t\t\treturn -rte_errno;\n+\t\t\t}\n+\t\t\titem = next_no_void_pattern(pattern, item);\n+\t\t}\n+\n+\t\tfilter->proto = IPPROTO_ESP;\n+\t\treturn txgbe_crypto_add_ingress_sa_from_flow(conf, item->spec,\n+\t\t\t\t\titem->type == RTE_FLOW_ITEM_TYPE_IPV6);\n+\t}\n+#endif\n+\n \t/* the first not void item can be MAC or IPv4 */\n \titem = next_no_void_pattern(pattern, NULL);\n \n@@ -547,6 +587,12 @@ txgbe_parse_ntuple_filter(struct rte_eth_dev *dev,\n \tif (ret)\n \t\treturn ret;\n \n+#ifdef RTE_LIB_SECURITY\n+\t/* ESP flow not really a flow */\n+\tif (filter->proto == IPPROTO_ESP)\n+\t\treturn 0;\n+#endif\n+\n \t/* txgbe doesn't support tcp flags */\n \tif (filter->flags & RTE_NTUPLE_FLAGS_TCP_FLAG) {\n \t\tmemset(filter, 0, sizeof(struct rte_eth_ntuple_filter));\n@@ -2672,6 +2718,12 @@ txgbe_flow_create(struct rte_eth_dev *dev,\n \tret = txgbe_parse_ntuple_filter(dev, attr, pattern,\n \t\t\tactions, &ntuple_filter, error);\n \n+#ifdef RTE_LIB_SECURITY\n+\t/* ESP flow not really a flow*/\n+\tif (ntuple_filter.proto == IPPROTO_ESP)\n+\t\treturn flow;\n+#endif\n+\n \tif (!ret) {\n \t\tret = txgbe_add_del_ntuple_filter(dev, &ntuple_filter, TRUE);\n \t\tif (!ret) {\ndiff --git a/drivers/net/txgbe/txgbe_ipsec.c b/drivers/net/txgbe/txgbe_ipsec.c\nindex 6e6006f00..daa523b20 100644\n--- a/drivers/net/txgbe/txgbe_ipsec.c\n+++ b/drivers/net/txgbe/txgbe_ipsec.c\n@@ -655,6 +655,36 @@ txgbe_crypto_enable_ipsec(struct rte_eth_dev *dev)\n \treturn 0;\n }\n \n+int\n+txgbe_crypto_add_ingress_sa_from_flow(const void *sess,\n+\t\t\t\t const void *ip_spec,\n+\t\t\t\t uint8_t is_ipv6)\n+{\n+\tstruct txgbe_crypto_session *ic_session =\n+\t\t\tget_sec_session_private_data(sess);\n+\n+\tif (ic_session->op == TXGBE_OP_AUTHENTICATED_DECRYPTION) {\n+\t\tif (is_ipv6) {\n+\t\t\tconst struct rte_flow_item_ipv6 *ipv6 = ip_spec;\n+\t\t\tic_session->src_ip.type = IPv6;\n+\t\t\tic_session->dst_ip.type = IPv6;\n+\t\t\trte_memcpy(ic_session->src_ip.ipv6,\n+\t\t\t\t ipv6->hdr.src_addr, 16);\n+\t\t\trte_memcpy(ic_session->dst_ip.ipv6,\n+\t\t\t\t ipv6->hdr.dst_addr, 16);\n+\t\t} else {\n+\t\t\tconst struct rte_flow_item_ipv4 *ipv4 = ip_spec;\n+\t\t\tic_session->src_ip.type = IPv4;\n+\t\t\tic_session->dst_ip.type = IPv4;\n+\t\t\tic_session->src_ip.ipv4 = ipv4->hdr.src_addr;\n+\t\t\tic_session->dst_ip.ipv4 = ipv4->hdr.dst_addr;\n+\t\t}\n+\t\treturn txgbe_crypto_add_sa(ic_session);\n+\t}\n+\n+\treturn 0;\n+}\n+\n static struct rte_security_ops txgbe_security_ops = {\n \t.session_create = txgbe_crypto_create_session,\n \t.session_get_size = txgbe_crypto_session_get_size,\ndiff --git a/drivers/net/txgbe/txgbe_ipsec.h b/drivers/net/txgbe/txgbe_ipsec.h\nindex 58e18552d..5edd6b507 100644\n--- a/drivers/net/txgbe/txgbe_ipsec.h\n+++ b/drivers/net/txgbe/txgbe_ipsec.h\n@@ -90,5 +90,8 @@ struct txgbe_ipsec {\n };\n \n int txgbe_crypto_enable_ipsec(struct rte_eth_dev *dev);\n+int txgbe_crypto_add_ingress_sa_from_flow(const void *sess,\n+\t\t\t\t\t const void *ip_spec,\n+\t\t\t\t\t uint8_t is_ipv6);\n \n #endif /*TXGBE_IPSEC_H_*/\n", "prefixes": [ "v3", "33/33" ] }{ "id": 85440, "url": "