From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from dpdk.org (dpdk.org [92.243.14.124]) by inbox.dpdk.org (Postfix) with ESMTP id BADD0A0613 for ; Mon, 23 Sep 2019 18:49:26 +0200 (CEST) Received: from [92.243.14.124] (localhost [127.0.0.1]) by dpdk.org (Postfix) with ESMTP id 0CF401BF25; Mon, 23 Sep 2019 18:49:26 +0200 (CEST) Received: from mga14.intel.com (mga14.intel.com [192.55.52.115]) by dpdk.org (Postfix) with ESMTP id B94CD1BF25 for ; Mon, 23 Sep 2019 18:49:24 +0200 (CEST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga008.jf.intel.com ([10.7.209.65]) by fmsmga103.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 23 Sep 2019 09:49:23 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.64,541,1559545200"; d="scan'208";a="182604245" Received: from irsmsx152.ger.corp.intel.com ([163.33.192.66]) by orsmga008.jf.intel.com with ESMTP; 23 Sep 2019 09:49:22 -0700 Received: from irsmsx105.ger.corp.intel.com ([169.254.7.164]) by IRSMSX152.ger.corp.intel.com ([169.254.6.150]) with mapi id 14.03.0439.000; Mon, 23 Sep 2019 17:49:21 +0100 From: "Ananyev, Konstantin" To: "Smoczynski, MarcinX" , "anoobj@marvell.com" , "akhil.goyal@nxp.com" CC: "dev@dpdk.org" Thread-Topic: [PATCH v3 2/3] examples/ipsec-secgw: add fallback session feature Thread-Index: AQHVcgRsb8C/TEEhkkGp+aLpnuicUac5eX0g Date: Mon, 23 Sep 2019 16:49:21 +0000 Message-ID: <2601191342CEEE43887BDE71AB977258019196929D@irsmsx105.ger.corp.intel.com> References: <20190904141642.14820-1-marcinx.smoczynski@intel.com> <20190923114415.17932-1-marcinx.smoczynski@intel.com> <20190923114415.17932-3-marcinx.smoczynski@intel.com> In-Reply-To: <20190923114415.17932-3-marcinx.smoczynski@intel.com> Accept-Language: en-IE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-titus-metadata-40: eyJDYXRlZ29yeUxhYmVscyI6IiIsIk1ldGFkYXRhIjp7Im5zIjoiaHR0cDpcL1wvd3d3LnRpdHVzLmNvbVwvbnNcL0ludGVsMyIsImlkIjoiOGJhYTZkMjItMjhlNS00NjAxLWI2MDEtMDlhMTBmMTNmNzM0IiwicHJvcHMiOlt7Im4iOiJDVFBDbGFzc2lmaWNhdGlvbiIsInZhbHMiOlt7InZhbHVlIjoiQ1RQX05UIn1dfV19LCJTdWJqZWN0TGFiZWxzIjpbXSwiVE1DVmVyc2lvbiI6IjE3LjEwLjE4MDQuNDkiLCJUcnVzdGVkTGFiZWxIYXNoIjoiOVhOQm9kbkNldGY3UUZZS3pEWnZHZG5DdWF1ODFxUjZFamNwQkZWRGR4TVdHcjBtazdEOUUwZG1oU21udDBOWiJ9 x-ctpclassification: CTP_NT dlp-product: dlpe-windows dlp-version: 11.2.0.6 dlp-reaction: no-action x-originating-ip: [163.33.239.182] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [dpdk-dev] [PATCH v3 2/3] examples/ipsec-secgw: add fallback session feature X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org Sender: "dev" >=20 > Inline processing is limited to a specified subset of traffic. It is > often unable to handle more complicated situations, such as fragmented > traffic. When using inline processing such traffic is dropped. >=20 > Introduce fallback session for inline processing allowing processing > packets that normally would be dropped. A fallback session is > configured by adding 'fallback' keyword with 'lookaside-none' or > 'lookaside-protocol' parameter to an SA configuration. >=20 > Using IPsec anti-replay window or ESN feature with fallback session is > not yet supported when primary session is of type > 'inline-protocol-offload' or fallback session is 'lookaside-protocol' > because SA sequence number is not synchronized between software and > hardware sessions. Fallback sessions are also limited to ingress IPsec > traffic. >=20 > Fallback session feature is not available in the legacy mode. >=20 > Signed-off-by: Marcin Smoczynski > --- Acked-by: Konstantin Ananyev > 2.17.1