From patchwork Wed Sep 8 08:25:29 2021 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Tejasree Kondoj X-Patchwork-Id: 98275 X-Patchwork-Delegate: gakhil@marvell.com Return-Path: X-Original-To: patchwork@inbox.dpdk.org Delivered-To: patchwork@inbox.dpdk.org Received: from mails.dpdk.org (mails.dpdk.org [217.70.189.124]) by inbox.dpdk.org (Postfix) with ESMTP id 5FD3FA0C56; Wed, 8 Sep 2021 09:31:44 +0200 (CEST) Received: from [217.70.189.124] (localhost [127.0.0.1]) by mails.dpdk.org (Postfix) with ESMTP id 4C75E41139; Wed, 8 Sep 2021 09:31:44 +0200 (CEST) Received: from mx0b-0016f401.pphosted.com (mx0b-0016f401.pphosted.com [67.231.156.173]) by mails.dpdk.org (Postfix) with ESMTP id 31E8A41130 for ; Wed, 8 Sep 2021 09:31:43 +0200 (CEST) Received: from pps.filterd (m0045851.ppops.net [127.0.0.1]) by mx0b-0016f401.pphosted.com (8.16.1.2/8.16.1.2) with SMTP id 1882piif018485; Wed, 8 Sep 2021 00:31:42 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=marvell.com; h=from : to : cc : subject : date : message-id : in-reply-to : references : mime-version : content-transfer-encoding : content-type; s=pfpt0220; bh=1oHI3j8dlpZXP2wcxEDRgmV6EGHJEEZYWRf1ETSAZ1Q=; b=DtHkiZpwWXhpe9Vxf4GUx3BgXnFBr8jhID6wckYaw6zzhhuVXQ7ueC9yoGL1fNYspSb1 y+DMVLtdCb77yYAaxKWTcMsRcA6xa1OyuWdWC5ZE4Rtau72ctcAI1twxNkHzmO6tLokN Llk8O2bFu8Jzox8VSU714SKaC+k99Gj890NTgSjipM/cQNnJdUArZAKSyBCgKSfvV3NO GsTNPFswiK0PATMBQ1sIdLRp+I1Q1Q7uAMD31EbhrdDmxh3SZhpvqkD943SpnUZ4KVqt 1htsrgLeNQgbz6KxZaVAjdSN3ojl3A8RnmMq0tL1p2pUyNUiloBQCaxgEeAoKUDSXpMi og== Received: from dc5-exch02.marvell.com ([199.233.59.182]) by mx0b-0016f401.pphosted.com with ESMTP id 3axcmjaegu-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Wed, 08 Sep 2021 00:31:42 -0700 Received: from DC5-EXCH01.marvell.com (10.69.176.38) by DC5-EXCH02.marvell.com (10.69.176.39) with Microsoft SMTP Server (TLS) id 15.0.1497.18; Wed, 8 Sep 2021 00:31:40 -0700 Received: from maili.marvell.com (10.69.176.80) by DC5-EXCH01.marvell.com (10.69.176.38) with Microsoft SMTP Server id 15.0.1497.18 via Frontend Transport; Wed, 8 Sep 2021 00:31:40 -0700 Received: from hyd1554T5810.caveonetworks.com.com (unknown [10.29.57.11]) by maili.marvell.com (Postfix) with ESMTP id 5D9B63F705B; Wed, 8 Sep 2021 00:31:31 -0700 (PDT) From: Tejasree Kondoj To: Akhil Goyal , Radu Nicolau , Declan Doherty CC: Tejasree Kondoj , Anoob Joseph , Ankur Dwivedi , Jerin Jacob , Konstantin Ananyev , Ciara Power , Hemant Agrawal , Gagandeep Singh , Fan Zhang , Archana Muniganti , Date: Wed, 8 Sep 2021 13:55:29 +0530 Message-ID: <20210908082531.27477-2-ktejasree@marvell.com> X-Mailer: git-send-email 2.27.0 In-Reply-To: <20210908082531.27477-1-ktejasree@marvell.com> References: <20210908082531.27477-1-ktejasree@marvell.com> MIME-Version: 1.0 X-Proofpoint-GUID: -1Mn5oCN4lhaDoXs4Qi14OsaCt5-yo3M X-Proofpoint-ORIG-GUID: -1Mn5oCN4lhaDoXs4Qi14OsaCt5-yo3M X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.182.1,Aquarius:18.0.790,Hydra:6.0.391,FMLib:17.0.607.475 definitions=2021-09-08_02,2021-09-07_02,2020-04-07_01 Subject: [dpdk-dev] [PATCH 1/3] security: add option to configure UDP ports verification X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org Sender: "dev" Add option to indicate whether UDP encapsulation ports verification need to be done as part of inbound IPsec processing. Signed-off-by: Tejasree Kondoj Acked-by: Hemant Agrawal Acked-by: Akhil Goyal --- doc/guides/rel_notes/release_21_11.rst | 5 +++++ lib/security/rte_security.h | 7 +++++++ 2 files changed, 12 insertions(+) diff --git a/doc/guides/rel_notes/release_21_11.rst b/doc/guides/rel_notes/release_21_11.rst index b0606cb542..afeba0105b 100644 --- a/doc/guides/rel_notes/release_21_11.rst +++ b/doc/guides/rel_notes/release_21_11.rst @@ -141,6 +141,11 @@ ABI Changes * Added SA option to indicate whether outer header verification need to be done as part of inbound IPsec processing. +* security: add IPsec SA option to configure UDP ports verification + + * Added SA option to indicate whether UDP ports verification need to be + done as part of inbound IPsec processing. + Known Issues ------------ diff --git a/lib/security/rte_security.h b/lib/security/rte_security.h index 2a61cad885..18b0f02c44 100644 --- a/lib/security/rte_security.h +++ b/lib/security/rte_security.h @@ -139,6 +139,13 @@ struct rte_security_ipsec_sa_options { */ uint32_t udp_encap : 1; + /** Verify UDP encapsulation ports in inbound + * + * * 1: Match UDP source and destination ports + * * 0: Do not match UDP ports + */ + uint32_t udp_ports_verify : 1; + /** Copy DSCP bits * * * 1: Copy IPv4 or IPv6 DSCP bits from inner IP header to