From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mga11.intel.com (mga11.intel.com [192.55.52.93]) by dpdk.org (Postfix) with ESMTP id 6663A1B671 for ; Thu, 9 Nov 2017 13:27:27 +0100 (CET) Received: from fmsmga002.fm.intel.com ([10.253.24.26]) by fmsmga102.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 09 Nov 2017 04:27:26 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.44,369,1505804400"; d="scan'208";a="1241984524" Received: from silpixa00383879.ir.intel.com (HELO silpixa00383879.ger.corp.intel.com) ([10.237.223.127]) by fmsmga002.fm.intel.com with ESMTP; 09 Nov 2017 04:27:24 -0800 From: Radu Nicolau To: dev@dpdk.org Cc: thomas@monjalon.net, ferruh.yigit@intel.com, wenzhuo.lu@intel.com, konstantin.ananyev@intel.com, pablo.de.lara.guarch@intel.com, Radu Nicolau Date: Thu, 9 Nov 2017 12:23:02 +0000 Message-Id: <1510230182-9550-1-git-send-email-radu.nicolau@intel.com> X-Mailer: git-send-email 2.7.5 In-Reply-To: <1510147619-8701-1-git-send-email-radu.nicolau@intel.com> References: <1510147619-8701-1-git-send-email-radu.nicolau@intel.com> Subject: [dpdk-dev] [PATCH v2] doc: added inline crypto feature X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Nov 2017 12:27:27 -0000 Signed-off-by: Radu Nicolau --- v2: removed useless anchor and updated ixgbe doc doc/guides/nics/features.rst | 15 +++++++++++++++ doc/guides/nics/features/default.ini | 1 + doc/guides/nics/features/ixgbe.ini | 2 ++ doc/guides/nics/features/ixgbe_vec.ini | 2 ++ doc/guides/nics/features/ixgbe_vf.ini | 2 ++ doc/guides/nics/features/ixgbe_vf_vec.ini | 2 ++ doc/guides/nics/ixgbe.rst | 15 +++++++++++++++ 7 files changed, 39 insertions(+) diff --git a/doc/guides/nics/features.rst b/doc/guides/nics/features.rst index bfeae80..c1c3907 100644 --- a/doc/guides/nics/features.rst +++ b/doc/guides/nics/features.rst @@ -900,6 +900,21 @@ Documentation describes performance values. See ``dpdk.org/doc/perf/*``. +Inline crypto +------------- + +Supports inline crypto processing (eg. inline IPsec). See Security library and PMD documentation for more details. + +* **[uses] rte_eth_rxconf,rte_eth_rxmode**: ``offloads:DEV_RX_OFFLOAD_SECURITY``, +* **[uses] rte_eth_txconf,rte_eth_txmode**: ``offloads:DEV_TX_OFFLOAD_SECURITY``. +* **[implements] rte_security_ops**: ``session_create``, ``session_update``, + ``session_stats_get``, ``session_destroy``, ``set_pkt_metadata``, ``capabilities_get``. +* **[provides] rte_eth_dev_info**: ``rx_offload_capa,rx_queue_offload_capa:DEV_RX_OFFLOAD_SECURITY``, + ``tx_offload_capa,tx_queue_offload_capa:DEV_TX_OFFLOAD_SECURITY``. +* **[provides] mbuf**: ``mbuf.ol_flags:PKT_RX_SEC_OFFLOAD``, + ``mbuf.ol_flags:PKT_TX_SEC_OFFLOAD``, ``mbuf.ol_flags:PKT_RX_SEC_OFFLOAD_FAILED``. + + .. _nic_features_other: diff --git a/doc/guides/nics/features/default.ini b/doc/guides/nics/features/default.ini index dc527dd..9ef6a2a 100644 --- a/doc/guides/nics/features/default.ini +++ b/doc/guides/nics/features/default.ini @@ -77,3 +77,4 @@ Usage doc = Design doc = Perf doc = Mbuf fast free = +Inline crypto = diff --git a/doc/guides/nics/features/ixgbe.ini b/doc/guides/nics/features/ixgbe.ini index 9ff5d8f..900840f 100644 --- a/doc/guides/nics/features/ixgbe.ini +++ b/doc/guides/nics/features/ixgbe.ini @@ -58,3 +58,5 @@ Linux VFIO = Y ARMv8 = Y x86-32 = Y x86-64 = Y +Inline crypto = Y + diff --git a/doc/guides/nics/features/ixgbe_vec.ini b/doc/guides/nics/features/ixgbe_vec.ini index 4d56df4..5e32c08 100644 --- a/doc/guides/nics/features/ixgbe_vec.ini +++ b/doc/guides/nics/features/ixgbe_vec.ini @@ -47,3 +47,5 @@ Linux VFIO = Y ARMv8 = Y x86-32 = Y x86-64 = Y +Inline crypto = Y + diff --git a/doc/guides/nics/features/ixgbe_vf.ini b/doc/guides/nics/features/ixgbe_vf.ini index b63e32c..f217b09 100644 --- a/doc/guides/nics/features/ixgbe_vf.ini +++ b/doc/guides/nics/features/ixgbe_vf.ini @@ -37,3 +37,5 @@ Linux VFIO = Y ARMv8 = Y x86-32 = Y x86-64 = Y +Inline crypto = Y + diff --git a/doc/guides/nics/features/ixgbe_vf_vec.ini b/doc/guides/nics/features/ixgbe_vf_vec.ini index c994857..9549aab 100644 --- a/doc/guides/nics/features/ixgbe_vf_vec.ini +++ b/doc/guides/nics/features/ixgbe_vf_vec.ini @@ -29,3 +29,5 @@ Linux VFIO = Y ARMv8 = Y x86-32 = Y x86-64 = Y +Inline crypto = Y + diff --git a/doc/guides/nics/ixgbe.rst b/doc/guides/nics/ixgbe.rst index c687c63..19716c2 100644 --- a/doc/guides/nics/ixgbe.rst +++ b/doc/guides/nics/ixgbe.rst @@ -239,6 +239,21 @@ There is no RTE API to add a VF's MAC address from the PF. On ixgbe, the as a workaround. +Inline crypto processing support +--------------------------- + +Inline IPsec processing is supported for ``RTE_SECURITY_ACTION_TYPE_INLINE_CRYPTO`` +mode for ESP packets only: + +- ESP authentication only: AES-128-GMAC (128-bit key) +- ESP encryption and authentication: AES-128-GCM (128-bit key) + +IPsec Security Gateway Sample Application supports inline IPsec processing for +ixgbe PMD. +For more details see the IPsec Security Gateway Sample Application and Security +library documentation. + + Supported Chipsets and NICs --------------------------- -- 2.7.5