From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mails.dpdk.org (mails.dpdk.org [217.70.189.124]) by inbox.dpdk.org (Postfix) with ESMTP id 379EBA0A02; Tue, 23 Mar 2021 15:29:26 +0100 (CET) Received: from [217.70.189.124] (localhost [127.0.0.1]) by mails.dpdk.org (Postfix) with ESMTP id CE4CF4069E; Tue, 23 Mar 2021 15:29:25 +0100 (CET) Received: from mga03.intel.com (mga03.intel.com [134.134.136.65]) by mails.dpdk.org (Postfix) with ESMTP id 9993540689 for ; Tue, 23 Mar 2021 15:29:23 +0100 (CET) IronPort-SDR: 5BhofqS3E0YWeotd3uEwLUlaOKzyM0OwW7tZbcmASY07CR61E+8SN34cbKSEvcDBpzt95cQKAR 0vqDDLuyTq3Q== X-IronPort-AV: E=McAfee;i="6000,8403,9931"; a="190517371" X-IronPort-AV: E=Sophos;i="5.81,271,1610438400"; d="scan'208";a="190517371" Received: from fmsmga007.fm.intel.com ([10.253.24.52]) by orsmga103.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 23 Mar 2021 07:29:22 -0700 IronPort-SDR: H3rOM+aDW1l7QrKPvfH5RdZk2RS/8Gj5txRBDnxjtQCGMHKMd/oX30KAWBvbvRu71J4DoZDzeU ECEoj113ttSQ== X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.81,271,1610438400"; d="scan'208";a="381374142" Received: from orsmsx606.amr.corp.intel.com ([10.22.229.19]) by fmsmga007.fm.intel.com with ESMTP; 23 Mar 2021 07:29:22 -0700 Received: from orsmsx605.amr.corp.intel.com (10.22.229.18) by ORSMSX606.amr.corp.intel.com (10.22.229.19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2106.2; Tue, 23 Mar 2021 07:29:21 -0700 Received: from orsedg603.ED.cps.intel.com (10.7.248.4) by orsmsx605.amr.corp.intel.com (10.22.229.18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2106.2 via Frontend Transport; Tue, 23 Mar 2021 07:29:21 -0700 Received: from NAM12-MW2-obe.outbound.protection.outlook.com (104.47.66.44) by edgegateway.intel.com (134.134.137.100) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.2106.2; Tue, 23 Mar 2021 07:29:21 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Pu27ol7A6R4hlgtPwG1c102awa1OwHU1G+8gRX5UHHQ+xhNB5JhsZser6gwFwAUw34yx/2LaeddRzDdlckLBHQBLOmCK8rEcvje8v1wCbHC61Fk0jyzh87XA+lA7CZ6hlwo+Mphq9G1xX5qMklE66a01xa66RZnakGVZ9lTpnHPsIwVHCk8/tQ4BlkyU/PiWJrJfjkr6oKPAd+BSmKGx1gW+zLwWlylIHfJWFJW1/MjHlroXkYz6Jw5CYERxbC+zaRCCbReuotW7TwAHrk52EWX6ZG4QANamE++PAR0SDEaPNI/yn/36lwgU8YUtf7b2CaRW+z52GqRg8SwUwFSXSw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=KAiE1xVGV6+Jtjwg2EfH+6QBCaBXo/7Nr3PU6CCNLk4=; b=SppJ4pXOHLN9N/djYY/IrT4z9TzoWqpA54H+Xe4Ezau3YfNXlewYDvS9q1obt8c3HahpO2IBzKwx5hyg1PbuhtVqV1saE8Y7B+lIX4kGnpmxwTJhC0dHRNBP4JITSbWfAy6hdWvvuAKDuw5NgjXA4dgrKjHSG63w3N6IC9U0X1s0IHjHFc8IXuVUd0csbTlGDqhF97Ga4oThmA2RLHkWDL8n9H7sBqody8Fl3B5AG5KrIiHRUcmhTPuSObvyfnreiO0mKnvBpf9Mq4Q+pOo+a6i84cxMuWuFqhb/zybLQz6pg5u2XlTu0++vMOOOa0nVzGaovVGRoc/XxSfq8LvQ3g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=intel.com; dmarc=pass action=none header.from=intel.com; dkim=pass header.d=intel.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=intel.onmicrosoft.com; s=selector2-intel-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=KAiE1xVGV6+Jtjwg2EfH+6QBCaBXo/7Nr3PU6CCNLk4=; b=ChQDAJ96xcUfziX2NmruXo9LdOT4bDfWQxS42WNVH26O1iRISFatUlgXyyIv2MafJ5WNynIUvaeqJd8DJzGJYudi3ipvccG/7SQ8nFlpxk4x5HyJzLxoysle//UOF7zSxXGg6ub79A72wJcAvWqegidRUPtQb0RA0VAB3yM5x38= Received: from DM6PR11MB4491.namprd11.prod.outlook.com (2603:10b6:5:204::19) by DM6PR11MB3898.namprd11.prod.outlook.com (2603:10b6:5:19f::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3955.24; Tue, 23 Mar 2021 14:29:16 +0000 Received: from DM6PR11MB4491.namprd11.prod.outlook.com ([fe80::3182:6da2:8c64:f07a]) by DM6PR11MB4491.namprd11.prod.outlook.com ([fe80::3182:6da2:8c64:f07a%3]) with mapi id 15.20.3955.027; Tue, 23 Mar 2021 14:29:16 +0000 From: "Ananyev, Konstantin" To: Akhil Goyal , Tejasree Kondoj , "Nicolau, Radu" CC: Anoob Joseph , Ankur Dwivedi , Jerin Jacob Kollanukkaran , "dev@dpdk.org" Thread-Topic: [dpdk-dev] [PATCH 2/3] examples/ipsec-secgw: add UDP encapsulation support Thread-Index: AQHXGX88kpfR1IrPZ0aUAC3IvRtRz6qLijxggAW4eYCAAGgxgA== Date: Tue, 23 Mar 2021 14:29:16 +0000 Message-ID: References: <20210315103616.31364-1-ktejasree@marvell.com> <20210315103616.31364-3-ktejasree@marvell.com> In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-reaction: no-action dlp-version: 11.5.1.3 authentication-results: marvell.com; dkim=none (message not signed) header.d=none;marvell.com; dmarc=none action=none header.from=intel.com; x-originating-ip: [109.255.184.192] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 9a42ffc3-ea11-445b-dbd9-08d8ee0809fe x-ms-traffictypediagnostic: DM6PR11MB3898: x-ld-processed: 46c98d88-e344-4ed4-8496-4ed7712e255d,ExtAddr x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: p/Nj4R2zV38vb/Zg75gLrbGM0J3gx1q/mA5cKu6BaTtTqxtPEFd8ZmpvNpj0qCz6NbCyIeAsFMlH8YfwoHEigJOlY997geMyd0DPmPNyBFOoo7GlM4TlXIzvROMwIi8m49J/+w3mC15Yd1MReAIgil8q3sGG54z4M2uzQpkZciW8uuRPdVKQPOAuR/2/5CdiKt8IL4zircsyXparSGo1tpTIYMXg1jUVQ7nUTBItX0L2nX/EF7GhcbeRAmMUOl5Qj9QZQy/Yf4p+U4cyO3+U23ndB20o6Nqcks4h+cFxjW28AbuXm7Gg1Z0s3NNu8pyMWS3ZPiYPS8rMySjENgcFMl8xA69KXa5fKsPuuflRkdAsxwaBOGcbZ6//xXm2zXSqHx36Cbf2Z+LumdVi0s+4PNiuGiawcgEJ8xGijZEtQi3U8ltObUfRvil9V3McR+Lbge4TXAKfMek5TEtqvLbX7H2RWwbdzMLFmSM+2TTPNRXFsm8fQTMD0gNOdeNR8Er9z2idNYSTIVM+aY1nVWHegKLXWDBoBEjFf6chp4+sex/EVVnNazDl+75Dz3il2lDigqm8j6D1Js5VQ2yxRFEArlvGvnTiRTOvlNl1Z0enz71ZpwKXAYNBs46Tvxcz6NOQHYSMMJCY8gHc9YBC8zyiDyknfSdG4FbXcatlkTUi9SI= x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM6PR11MB4491.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(346002)(366004)(396003)(136003)(376002)(39860400002)(6506007)(33656002)(66446008)(54906003)(478600001)(76116006)(186003)(7696005)(5660300002)(66946007)(83380400001)(55016002)(66476007)(64756008)(6636002)(9686003)(66556008)(26005)(8936002)(55236004)(110136005)(4326008)(8676002)(38100700001)(2906002)(71200400001)(4744005)(316002)(86362001)(52536014); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: =?us-ascii?Q?LPy3pNTOtwxPLqyHS3FAGhZZsPv4S4jeindnN531y9yBk59heZxRqOI65tQA?= =?us-ascii?Q?ZJLAPZk+wjsq84KOlUC+JFG15Q+uFVm4KRd+yrM+qFTuVIBsQz/m20lD0X/l?= =?us-ascii?Q?TqJk9V1j5VYzd9o4zFa02WVOZhA41gfslXtgIhxtvxxvbhZSziGypK7MmZGE?= =?us-ascii?Q?zSo1xZlN3sJa68uB2gIHJObwb86aOIQRkRsJaSFBV9SKEXbddFWpavYyfcJj?= =?us-ascii?Q?4kVT5KcSB9kkMHWKndOes9K9ZPLUYCxCGtgiQR6UNb48/gnebyyzUdDPr0t2?= =?us-ascii?Q?LsQD6YSuLMkNvt9McQoLe7UbRc3/PMlQJ2K+/8w9Ps9YUWadkPTI6hP66g5+?= =?us-ascii?Q?Lb66yo+mtZZqcpo0OkAdr2SlLkKWQvv9vdJ5y8GmzJDWM0EusGrnycNjhXHX?= =?us-ascii?Q?4ihthdnehEoGFbUKfX1xA5ZXmY3SyLMpeJw5RvtJqJbbvGUAid3EFw/zefS+?= =?us-ascii?Q?KYcWQ2tG2nEtN9PPFIEe9/t1F5tw/Ff5gO9SoqnXgbq2dAyK8o4Bn+TSuFJg?= =?us-ascii?Q?vDgEKoPLvl2PvNZGj8zQloPp5Poqrq03Sm64YAZ3J+ahB+7PtjqMSgDltUJ/?= =?us-ascii?Q?PPtzAGfvwVA6EjKNz14QMw7cjyzeo/l8CR1gEYeukL1dteuNQwc9gYtgoq8S?= =?us-ascii?Q?B7iAK4mYHh2gD9G9SF62fhU05jL2Lvtm3TYzK+5MrvNm/N7XHP/BOHPmVv6c?= =?us-ascii?Q?r/8A/tgwwWnZwEnv8A1gjb8mgNd4xoTUC5PydPW5+Isd2sTs6fk3UH7ehYI/?= =?us-ascii?Q?dRTBFzsAzs/MeqDLEsMjwyBMDPq9nDQOiCIoFTuDaJU7MlO+43Txk0bH5a+6?= =?us-ascii?Q?3Lo1zth912xWNcNdxFE89I9l3UsIa7WZGS9ioMX2ptqjNkTsKbPlsMWNnei+?= =?us-ascii?Q?BByc4Ry+ZZwzeLBBjND9vh/A/OlEA8FiFoinDHOmskU0HRNQMJahCSg2YyF2?= =?us-ascii?Q?kGBsluhevpEKwoexTSjAPstVmO5/7do7okCFRtS9okkscmNcPaBme/suZMOu?= =?us-ascii?Q?OCwFndbhuFoWYAbnZld7oD6Yv4qScE8C9sJoA5EXiQTULCfSG+IEA/sYHMr9?= =?us-ascii?Q?whuOOJwiMDD8NciHttP6zH28atefP865gdEvUUQ/8dGm1+C+Ud+3Lxx3oijK?= =?us-ascii?Q?KEqUw0fC2P9bWZ5oqZlL9x9qEkFnt1JOL0oHQvBTrq7cXbmn14E1IsV9u09o?= =?us-ascii?Q?WpHJOCV1mhrI3JvH8WhmlxbJt4JcVctsYs5iSOWdP2qgYUnG7mLWpEEWb5Kf?= =?us-ascii?Q?J6tTgp2YTu91BvGLr1iWt2aJypjaMoa7dekCEaE0M1fBP5sHuMfd2YatFq9x?= =?us-ascii?Q?Ah+3pr22oHL8Gdsnu9riul21?= Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM6PR11MB4491.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 9a42ffc3-ea11-445b-dbd9-08d8ee0809fe X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Mar 2021 14:29:16.7171 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 46c98d88-e344-4ed4-8496-4ed7712e255d X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Uux2REtnz0IuqwxlXIyZPRPqAupCiOaxL24GUeiWm8dgSltDYVSKq9/2KrNmNlGtnGd3BkmFbBdN5HXvegwB636IAi3MYELGP4AleVcUors= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR11MB3898 X-OriginatorOrg: intel.com Subject: Re: [dpdk-dev] [PATCH 2/3] examples/ipsec-secgw: add UDP encapsulation support X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org Sender: "dev" Hi Akhil, =20 > Hi Konstantin, > > Hi, > > > Adding lookaside IPsec UDP encapsulation support > > > for NAT traversal. > > > Added --udp-encap option for application to specify > > > if UDP encapsulation need to be enabled. > > > Example secgw command with UDP encapsultation enabled: > > > -c 0x1 -- -P -p 0x1 --config "(0,0,0)" -f ep0.cfg --udp-encap > > > > Can we have it not as global, but a per SA option? > > Add new keyword for SA/SP into ipsec-secgw config file, etc. > > Konstantin > > >=20 > Any specific reason to make udp_encap as per SA? > UDP encapsulation is a feature which I believe should be application vide= . > If it supports the feature it should be enabled for all SAs when the UDP = port > is 4500 which is reserved for it. Not sure why it has to be application wide? Why it is not possible have let say SA1 in ipv4/ipv6 tunnel mode over port = 0, and SA2 with udp encap over port 1? Note that in DPDK librte_security it is per SA option. Konstantin