From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from dpdk.org (dpdk.org [92.243.14.124]) by inbox.dpdk.org (Postfix) with ESMTP id 2463BA2F63 for ; Thu, 3 Oct 2019 18:36:53 +0200 (CEST) Received: from [92.243.14.124] (localhost [127.0.0.1]) by dpdk.org (Postfix) with ESMTP id D7B941C126; Thu, 3 Oct 2019 18:36:52 +0200 (CEST) Received: from mga14.intel.com (mga14.intel.com [192.55.52.115]) by dpdk.org (Postfix) with ESMTP id C28C21C120 for ; Thu, 3 Oct 2019 18:36:51 +0200 (CEST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga002.fm.intel.com ([10.253.24.26]) by fmsmga103.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 03 Oct 2019 09:36:50 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.67,253,1566889200"; d="scan'208";a="221835122" Received: from irsmsx105.ger.corp.intel.com ([163.33.3.28]) by fmsmga002.fm.intel.com with ESMTP; 03 Oct 2019 09:36:50 -0700 Received: from irsmsx108.ger.corp.intel.com ([169.254.11.26]) by irsmsx105.ger.corp.intel.com ([169.254.7.164]) with mapi id 14.03.0439.000; Thu, 3 Oct 2019 17:36:49 +0100 From: "Iremonger, Bernard" To: "Smoczynski, MarcinX" , "anoobj@marvell.com" , "akhil.goyal@nxp.com" , "Ananyev, Konstantin" CC: "dev@dpdk.org" , "Smoczynski, MarcinX" Thread-Topic: [dpdk-dev] [PATCH v5 2/4] examples/ipsec-secgw: add fallback session feature Thread-Index: AQHVdUwhD8ozR9KP8UGWU1UHOQ3ocqdJJp2g Date: Thu, 3 Oct 2019 16:36:48 +0000 Message-ID: <8CEF83825BEC744B83065625E567D7C260E014D2@IRSMSX108.ger.corp.intel.com> References: <20190927091028.19316-1-marcinx.smoczynski@intel.com> <20190927155446.19136-1-marcinx.smoczynski@intel.com> <20190927155446.19136-3-marcinx.smoczynski@intel.com> In-Reply-To: <20190927155446.19136-3-marcinx.smoczynski@intel.com> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-titus-metadata-40: eyJDYXRlZ29yeUxhYmVscyI6IiIsIk1ldGFkYXRhIjp7Im5zIjoiaHR0cDpcL1wvd3d3LnRpdHVzLmNvbVwvbnNcL0ludGVsMyIsImlkIjoiMzZhNTU1ZGUtNGZjZS00Mjk4LTg1NTYtYWU2OGNhMWZiZDk4IiwicHJvcHMiOlt7Im4iOiJDVFBDbGFzc2lmaWNhdGlvbiIsInZhbHMiOlt7InZhbHVlIjoiQ1RQX05UIn1dfV19LCJTdWJqZWN0TGFiZWxzIjpbXSwiVE1DVmVyc2lvbiI6IjE3LjEwLjE4MDQuNDkiLCJUcnVzdGVkTGFiZWxIYXNoIjoiYW9iNWR5ZEcwQkpHYlZyamI2UTRia0ljelRyaUFyU2JiM3Qzb2lqWmtTWWpwdHMrdE9Yb2xYT1Z3RGhzdmxVcyJ9 x-ctpclassification: CTP_NT dlp-product: dlpe-windows dlp-version: 11.2.0.6 dlp-reaction: no-action x-originating-ip: [163.33.239.181] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [dpdk-dev] [PATCH v5 2/4] examples/ipsec-secgw: add fallback session feature X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org Sender: "dev" > -----Original Message----- > From: dev [mailto:dev-bounces@dpdk.org] On Behalf Of Marcin Smoczynski > Sent: Friday, September 27, 2019 4:55 PM > To: anoobj@marvell.com; akhil.goyal@nxp.com; Ananyev, Konstantin > > Cc: dev@dpdk.org; Smoczynski, MarcinX > Subject: [dpdk-dev] [PATCH v5 2/4] examples/ipsec-secgw: add fallback > session feature >=20 > Inline processing is limited to a specified subset of traffic. It is ofte= n unable to > handle more complicated situations, such as fragmented traffic. When usin= g > inline processing such traffic is dropped. >=20 > Introduce fallback session for inline processing allowing processing pack= ets > that normally would be dropped. A fallback session is configured by addin= g > 'fallback' keyword with 'lookaside-none' or 'lookaside-protocol' paramete= r to > an SA configuration. >=20 > Using IPsec anti-replay window or ESN feature with fallback session is no= t yet > supported when primary session is of type 'inline-protocol-offload' or > fallback session is 'lookaside-protocol' > because SA sequence number is not synchronized between software and > hardware sessions. Fallback sessions are also limited to ingress IPsec tr= affic. >=20 > Fallback session feature is not available in the legacy mode. >=20 > Acked-by: Konstantin Ananyev > Signed-off-by: Marcin Smoczynski Tested-by: Bernard Iremonger