From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mails.dpdk.org (mails.dpdk.org [217.70.189.124]) by inbox.dpdk.org (Postfix) with ESMTP id 5A0B4A0C41; Tue, 28 Sep 2021 18:00:33 +0200 (CEST) Received: from [217.70.189.124] (localhost [127.0.0.1]) by mails.dpdk.org (Postfix) with ESMTP id 1A682410DB; Tue, 28 Sep 2021 18:00:33 +0200 (CEST) Received: from mx0b-0016f401.pphosted.com (mx0a-0016f401.pphosted.com [67.231.148.174]) by mails.dpdk.org (Postfix) with ESMTP id 2E03A410D7 for ; Tue, 28 Sep 2021 18:00:31 +0200 (CEST) Received: from pps.filterd (m0045849.ppops.net [127.0.0.1]) by mx0a-0016f401.pphosted.com (8.16.1.2/8.16.1.2) with SMTP id 18SAIiHm021315; Tue, 28 Sep 2021 09:00:30 -0700 Received: from nam12-bn8-obe.outbound.protection.outlook.com (mail-bn8nam12lp2174.outbound.protection.outlook.com [104.47.55.174]) by mx0a-0016f401.pphosted.com with ESMTP id 3bc1621fcx-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 28 Sep 2021 09:00:29 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=UPaQrSVQTWrMIvuMKds3vdFAbfIfQ/zbC9hGRSrxTgnInyDQDK5RbFQ8/p/ewA6mhsYU8O1gZwx6ZDy1YFCl6LgI1UzL61xJ6xmp2trRBr36OTxuh/Apyp7PSEIS1Gbp2yHxpuY6DvbO71gjvWUVemwPnW8c/okaoEcZV2nHjCVukPRmUOJM5UdT8zZhV2JT+fLe+G1wUzwLaJywUb24keY1Dq5yRkMom7p7woD2EkKrSJuwLkAnI8HDa+IUIlB692zrQFk1irNek0wEN6wjERflYUHNHD1wCJS2/9D301vq55xYNp//+JoZFhyuxf+qYPB2jEGknAYfh7JmOAEe1w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=07Os2zhVnKE8GfHV1k3ARbN4mLobU6MFJUZhVPLnE/8=; b=Sy0WTSGwhoYS0ZkJwuVU2TZ/kvxjV+hNlVNUyMDffFYhHoGz1fk5BlStg+Y19ry/HcLKMhZVXh0oFj3x8KocJs3UeB4sEtdhmRL3cAA3S0X+OTdqPceCbyopbUHnl8bbHMDXPOsTaF8zwi6qTilIKdKtjwLw7dZrcSwHezGJe6DghN+58BZHv7Byfvz6pCi5t1EfW+DSFEfWIGyOq+lNVnK0nCaGBlLwalZRwFe3yRApyrVVKZk6WqU2smOjHOZ7axil6S2lj+7H+j2+ZEpcwk/c1afKW7JO1bZOqttdu1ENFU/1BsWspY2kA/fvX9Fnf1s9LibRFxyddAD1S7cAjA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=marvell.com; dmarc=pass action=none header.from=marvell.com; dkim=pass header.d=marvell.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=marvell.onmicrosoft.com; s=selector1-marvell-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=07Os2zhVnKE8GfHV1k3ARbN4mLobU6MFJUZhVPLnE/8=; b=NtJHqpaL8YbMvLnWkNALCrKs7CftXv3NrfkG09ZXd/YQDXRhKBy2uWLBIc2tngr7FKjI7ARLapoRUODGWlfHWB8RW92EnCm4e8A7LTLVyIKh0t0IGSwa7ErVGVd4A7H7kbhyHLf3GhMKYp8e+SlJgbodely5X264InoS2e28tw8= Received: from CO6PR18MB4484.namprd18.prod.outlook.com (2603:10b6:5:359::9) by CO1PR18MB4715.namprd18.prod.outlook.com (2603:10b6:303:ea::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4544.14; Tue, 28 Sep 2021 16:00:27 +0000 Received: from CO6PR18MB4484.namprd18.prod.outlook.com ([fe80::6c43:3807:160:5a94]) by CO6PR18MB4484.namprd18.prod.outlook.com ([fe80::6c43:3807:160:5a94%3]) with mapi id 15.20.4544.022; Tue, 28 Sep 2021 16:00:27 +0000 From: Akhil Goyal To: Tejasree Kondoj , Radu Nicolau , Declan Doherty CC: Tejasree Kondoj , Anoob Joseph , Ankur Dwivedi , Jerin Jacob Kollanukkaran , Konstantin Ananyev , Ciara Power , Hemant Agrawal , Gagandeep Singh , Fan Zhang , Archana Muniganti , "dev@dpdk.org" Thread-Topic: [PATCH v2 1/3] security: add option to configure tunnel header verification Thread-Index: AQHXtFn219Wfi7LRqEaV9+GoRGlhvKu5msJQ Date: Tue, 28 Sep 2021 16:00:27 +0000 Message-ID: References: <20210928120741.16674-1-ktejasree@marvell.com> <20210928120741.16674-2-ktejasree@marvell.com> In-Reply-To: <20210928120741.16674-2-ktejasree@marvell.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 37455d2e-ff35-42c7-c71e-08d982991703 x-ms-traffictypediagnostic: CO1PR18MB4715: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7691; x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:CO6PR18MB4484.namprd18.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(366004)(4744005)(110136005)(54906003)(66946007)(76116006)(4326008)(8676002)(52536014)(66556008)(66476007)(64756008)(66446008)(316002)(38100700002)(5660300002)(8936002)(2906002)(6506007)(55016002)(508600001)(26005)(7696005)(186003)(55236004)(71200400001)(15650500001)(86362001)(122000001)(38070700005)(33656002)(83380400001)(9686003); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?4DDucRo9JSl+Y0MLELwJiDq+x56ow/Hna3c2tZ6wNyZCTagmkh7/BYjTwCRX?= =?us-ascii?Q?iJlZmQ3ZVJRCnKoT8T0/7MyEkndG2l9r4pz55cl7Db6yc1SXUiK2u53pxrL6?= =?us-ascii?Q?Tn+Wt2aaCFnjnf36e58XCpvTWwAFHpoXW1G4GDD/A4w9eRj6OTabO6z704A5?= =?us-ascii?Q?9qC57K4SIL507daEAVv0UcIix5Vn2NlbBkQLpv+ialN83GUB7dmRf3wJxEgK?= =?us-ascii?Q?iDBziOPfLW13fApJME3p2cb6mnM2X/PzW0I6W2ItglaAAB7Iu3k30vM9uOGD?= =?us-ascii?Q?zOIemMOPCX1Ad6rvHCr2HowBHxZMk9clKCyW0Korm7uSqOCkxT2kLM7ml6+u?= =?us-ascii?Q?TgTB9axowYJQ9KyBdbm3262h0Rxbtuwc2C23pqB/PPrHBTOgBWCaWR4YV629?= =?us-ascii?Q?VHQDMh8Ti5XPwXkewSHU8j5tw4cUCcuicsqviHjCkuyApc9H2kAQVBtZYpLM?= =?us-ascii?Q?OKvFPLWqN8FP4CXf7Ww0shWur0PZT2EUhvHahtT824TZe/uThA1yR2viteG/?= =?us-ascii?Q?nUQEdbUeOKPTg/KsXr2MRs6EpnnYinG0sYnar398cuI5O++Fq0oheKnvOw7T?= =?us-ascii?Q?3Npk3pmxoDuGE8iZ6uGxxtXikPEYiDuvcqmnUP2qvKY7rgIPw3rPck5lg7Hi?= =?us-ascii?Q?2maNYzacA3P+mINTRAhXN7vTBK2NTF+1zVJjy9EM40KSm/WSJ37MIyrqssxu?= =?us-ascii?Q?TVjWhafdKMyfJt8v628W+1mVNjXU7uFj0WoeBFriEVOlCXgVsLf8P8AEPM8a?= =?us-ascii?Q?w+njpW92kbJ0J2F1idCD3zvFcTuSq3Z/zhS+yFOCz6ywE81/zCddiaSX3cPD?= =?us-ascii?Q?RUvi3c6y9D6IRgWYlApvwmCKRB5n5DMkctX5z+59tboeY354s0GiAQbm5Ody?= =?us-ascii?Q?c0R/E/kG/Oj5cCS70rJNxD33EqA0OJIQD6qao3Vze9E7DgTi5zo11GoQ/1MP?= =?us-ascii?Q?WKs54nSQOwwZouFc/DdeYWdiJvLugMUPL43xNOy5zAh0pXZAFU6Vq36lkxE2?= =?us-ascii?Q?pEkxn/nv/sDHhJq8Tics8/rW6uZSHmahtuu+o4zx446WcynKVza+FpT5z7XN?= =?us-ascii?Q?+ewQjeBhsBbv2iouIoGpshERGToNM5s0XO3l+cb9p7b/tI6uyRx0ELbPCdCL?= =?us-ascii?Q?NXCJICOZNsD7qUuQet0XddIYgrwK76BoHryZj00oArXMHgR3TKfSkRKmqfaK?= =?us-ascii?Q?83aWt98Fh/ig7BwXk5bUbNX8LU+bR3QgBplLwqJdCdsaKPvAX8SItOeSULi8?= =?us-ascii?Q?PPjr6rA4e7k86VLIAmXJiUfM7MShBkiMUbP1kgrNcH/XLLmUAyjlNVbUBBkl?= =?us-ascii?Q?nPWODVNR9NV6fhEK7mxzHcsc?= Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: marvell.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: CO6PR18MB4484.namprd18.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 37455d2e-ff35-42c7-c71e-08d982991703 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Sep 2021 16:00:27.3871 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 70e1fb47-1155-421d-87fc-2e58f638b6e0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: RWUhboF29p9LEg4MDb3WOgpantcssJ5SuaSa9+LxmntTZ8ZJ/RCDUSTtEEtVsOMNvgq0fCEZkKUi5KO5ZVP+lA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO1PR18MB4715 X-Proofpoint-ORIG-GUID: PS86yGmqsLahenWBHbLVVb_tunJYUxW2 X-Proofpoint-GUID: PS86yGmqsLahenWBHbLVVb_tunJYUxW2 X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.182.1,Aquarius:18.0.790,Hydra:6.0.391,FMLib:17.0.607.475 definitions=2021-09-28_05,2021-09-28_01,2020-04-07_01 Subject: Re: [dpdk-dev] [PATCH v2 1/3] security: add option to configure tunnel header verification X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org Sender: "dev" =20 > Add option to indicate whether outer header verification > need to be done as part of inbound IPsec processing. >=20 > With inline IPsec processing, SA lookup would be happening > in the Rx path of rte_ethdev. When rte_flow is configured to > support more than one SA, SPI would be used to lookup SA. > In such cases, additional verification would be required to > ensure duplicate SPIs are not getting processed in the inline path. >=20 > For lookaside cases, the same option can be used by application > to offload tunnel verification to the PMD. >=20 > These verifications would help in averting possible DoS attacks. >=20 > Signed-off-by: Tejasree Kondoj > Acked-by: Akhil Goyal > --- Added Hemant's Ack from v1. Applied to dpdk-next-crypto Release notes reworked.