From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from NAM02-SN1-obe.outbound.protection.outlook.com (mail-sn1nam02on0062.outbound.protection.outlook.com [104.47.36.62]) by dpdk.org (Postfix) with ESMTP id 0D4511B6F8 for ; Mon, 29 Jan 2018 19:01:38 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=CAVIUMNETWORKS.onmicrosoft.com; s=selector1-cavium-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=I6CFTMOaIS6EQesX/1j+jLHS81S6VIfExZ1Sh6PLYb8=; b=hyiK5DuYHiovQPQaSMSWMekBtnrkpSgaspaIxVrmFqqVflfr49lp/sBsn2DsNIZxNPEkXX7nPxY2IMuP0gUqb4bBcpt+YrOwVGR4kp7fPhnlfjCnxKBXFmMTlXH+WL3xnrvllhmh9EJ4n6AkqbikxbVM45CBO8E3w2jlPVblDt8= Received: from hyd1ajoseph-dt.caveonetworks.com (115.113.156.2) by SN2PR0701MB1069.namprd07.prod.outlook.com (2a01:111:e400:3420::28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.444.14; Mon, 29 Jan 2018 18:01:33 +0000 Cc: anoob.joseph@caviumnetworks.com, "Doherty, Declan" , "Gonzalez Monroy, Sergio" , Jerin Jacob , Narayana Prasad , Nelio Laranjeiro , "dev@dpdk.org" To: "Nicolau, Radu" , Akhil Goyal References: <1516626668-9031-1-git-send-email-anoob.joseph@caviumnetworks.com> <4ab55855-0649-4d68-7b63-b75a6029dbb2@caviumnetworks.com> <763A2F19A5EFF34F8B7F1657C992EE297B31E1D5@IRSMSX104.ger.corp.intel.com> <763A2F19A5EFF34F8B7F1657C992EE297B3202FA@IRSMSX104.ger.corp.intel.com> <8c1b457a-d6ea-1a56-cd73-385108f8c538@nxp.com> <763A2F19A5EFF34F8B7F1657C992EE297B320AA5@IRSMSX104.ger.corp.intel.com> From: Anoob Joseph Message-ID: Date: Mon, 29 Jan 2018 23:31:28 +0530 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.5.2 MIME-Version: 1.0 In-Reply-To: <763A2F19A5EFF34F8B7F1657C992EE297B320AA5@IRSMSX104.ger.corp.intel.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US X-Originating-IP: [115.113.156.2] X-ClientProxiedBy: SN4PR0401CA0021.namprd04.prod.outlook.com (2603:10b6:803:21::31) To SN2PR0701MB1069.namprd07.prod.outlook.com (2a01:111:e400:3420::28) X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 5545896b-a6a4-4d48-777a-08d567425670 X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(7168020)(4627221)(201703031133081)(201702281549075)(5600026)(4604075)(2017052603307)(7153060)(7193020); SRVR:SN2PR0701MB1069; X-Microsoft-Exchange-Diagnostics: 1; SN2PR0701MB1069; 3:G8+tRDFthaO4kOnmnPmfpqS9vjaG1+g8cxKf0uUzDK4dTQTs4/ZLxt/GdCMwiZ3K14bc5TdcAT8LhT7Imycuh6/RbQVpTgOBzYbDzcuPIdYlzF/34zj/4M3AJ7o1LAu4XbqBv6YV1w5pqdET2Tpve8sVtHUfk0lBl2IrDCcWS/1clBI+EXlAmmkO+3QUh0e/jwcvne+2Ng1qbhVjRjET6Kzcih8p5CWcV7PJ71FdUDbso+UoE7BpPrC6Mg0A+YLU; 25:2Tn9nJh8Ib/PTudZ1H01dvAF5kjPsSZBT424UYcrb6b7vK98Q3OfHh2X814Mn8XmMUGcAHS6ij5JopxUHckoAWFI4tFk24bgLf54DPE6INz/A6cq5VQup82DhRdQGG85XfFf02CUj8t4uNMAQPQvtA6BRV/khONl55mz0cQ1SOxUGoX6kV2j89vuGDzgBGFtpjoVV4ngo9CsuhiT4DxXbPA9NJlpThXlJ3wgxgQKYIX5wOtYp2+/10x9fJ4kI+Ckuxcow+ScYCjrm38zzbbFP6A4T7ik9sRkrMohUS8M1tUhqbmcR1vqSEd1mEri9XJuFmJTkw56rT7eWSdbRgcDtg==; 31:0S8hzzrjiViWvR4lPL0+Bh79jON3rRtiWsrJKg7vYTrwWdzQZAiy7taOVNLvIryVdIlAwe0hgDtwLmW2NwynQHaBqRntcm+StmRsOUYs35dBGhH1gudQBaOz85OpUgLnCW1xTsnP+UNKjjka7cul+9c0V7WdaAJZvET9ZvD0KsD6HQyhC2wkDS/7IWfjDuGbpGjkxagdxO2RV7KjHdNfdxYekqQmS6xHhFDRmFyLoiw= X-MS-TrafficTypeDiagnostic: SN2PR0701MB1069: Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=Anoob.Joseph@cavium.com; X-Microsoft-Exchange-Diagnostics: 1; SN2PR0701MB1069; 20:Miq7dhAQ6AktxChHW+L5wzRnri3pxpFZi+qAHeL6kaNZQQ2wv2Cwf9mvqzc4YcId6S+8gH2Aba4slvWCwy1e//06aHL6dDyGFKTz0U9XwWhuvUPAPu3c6taDbIhr/lBBkaPLziOPCnpcX2ai/WKlIgF4mELBufxQf1CgzYlzj8ORvRX0gdiFyQYBkMmYTmJ49xUr3qIkz3GwTKA5kTQuHkPSkgjcOvlsLGjkkARt8gdqLSSsX9Ogk0myjD8CuhzZSPhaFcGLCGJsHtv2hViqKg/qxfQzcp89tU2XWr68/ntDTVb7PhkQXh/P0P3mzsqvZhJoemJC2K++IJ0SW6KLxutf5XUmk9zsTrVr5UKs1YfCzhys4bRlVLpYJwVdyE64BFmMYy22STYgVTS/zrvS0+TFhRuuAa5LvhhThfTbZEiEHO4p/6I9+bh1Z8I+xHqWo94wai2zq3zi5xGiU5sW+SrHu+c7MjY/eQUmD1QxpCrKZbP/5fO5fYcCTYzB1llgcpBsQ8T4mxqRaKgLgszN7r1+ectd7ORFiaAloFqW0nIlHJ+KbeoSxyItZsKSEsXsmoUbW64NAaTD06F8ZsUNAC1uiPG31P66hHVQaY+LpEE= X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:(192374486261705)(185117386973197)(228905959029699); X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040501)(2401047)(5005006)(8121501046)(10201501046)(3002001)(93006095)(3231101)(944501161)(6041288)(20161123562045)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123558120)(6072148)(201708071742011); SRVR:SN2PR0701MB1069; BCL:0; PCL:0; RULEID:; SRVR:SN2PR0701MB1069; X-Microsoft-Exchange-Diagnostics: 1; SN2PR0701MB1069; 4:8ncumjanHfT/P4xK2aIr6DBn6xcay0Hi+LQLeDo28B5wKMH2qLgVQyIuKtAFiIyB843hZVbHx7BuLB5YsQjfyjflUVRxN1TBy+ip1JDgfLltkuJCsQDp+VlPbDhX9vr1a1/T9/MZwqRZFwtArrQUGFqFY7qnmPInvnf9cItxh0trx7kahtYookPxJtRFhqoIP788SRVaw3Fd1qIg/cowxcSt3Nz1fHkMXwlZE8qIfTkJRoKa9mtTF0A7vFrI+Fbs1hBtDchy0BCQHNGqw8RDIfSTLVE8JFBffEdZTKv0HIKLmy94LHnqeFOgZajBUZ/uKt/pwMlVCrjVkstwLjXYRPct14iKPjOcUS7Rer8O1LBD1fFRRQ3q0fS3tSLpBqCj X-Forefront-PRVS: 0567A15835 X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10009020)(39860400002)(396003)(366004)(346002)(39380400002)(376002)(13464003)(189003)(199004)(561944003)(64126003)(478600001)(6486002)(966005)(69596002)(53376002)(229853002)(25786009)(72206003)(6246003)(4326008)(8936002)(106356001)(50466002)(68736007)(53416004)(31686004)(81156014)(8676002)(81166006)(97736004)(16526019)(7736002)(105586002)(55236004)(5660300001)(53546011)(386003)(6506007)(76176011)(65826007)(59450400001)(6666003)(2950100002)(42882006)(66066001)(65806001)(47776003)(83506002)(23676004)(52116002)(2486003)(305945005)(52146003)(230700001)(36756003)(186003)(58126008)(6116002)(65956001)(110136005)(31696002)(316002)(93886005)(575784001)(67846002)(2906002)(3846002)(53936002)(6306002)(6512007)(8656006)(26005)(54906003); DIR:OUT; SFP:1101; SCL:1; SRVR:SN2PR0701MB1069; H:hyd1ajoseph-dt.caveonetworks.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; Received-SPF: None (protection.outlook.com: cavium.com does not designate permitted sender hosts) X-Microsoft-Exchange-Diagnostics: =?utf-8?B?MTtTTjJQUjA3MDFNQjEwNjk7MjM6dmloNlRMSjBCT1lBTWF1VTJkY1ZCTlI5?= =?utf-8?B?T2xXVjFKZTFDaU9PMEJJSk9OdjRMRHdvY2kybkdSZy9CK2Q5cStTdEtpOEhR?= =?utf-8?B?SVNDRHUrL2kyRDJrM2VKZWVlUUF2cGRtUlBSV2FDbHdrMXBUVG9pOW1YNEpq?= =?utf-8?B?MzJoaHlMZ2RNOHZhT0hmMjJleW1tQVNMWmxGa1NGV3dWSmNyeGVzbFNMSzZS?= =?utf-8?B?M1F0c1JZckJaVFhya3JpRm00Qk1kdnlWeTlBRTFiQ09Lbjk5bWovc3Z0Wjcw?= =?utf-8?B?NDIxSEZSR3diRzJqR053TXRWd0JBSTM2U2YzSitleVJVOThxaGxpK1pWaEc4?= =?utf-8?B?Q3dYUExwOGtGOG9ERjFvTStJTE9NZzArbHZ4Q25Ld0Q1ZGR6bzg4NFBPK2d4?= =?utf-8?B?eTVmalo3c2ZocG53M0FUdDUyb3BGTFNZbzM2dS9hV1B5dmQ2ci9FWER6UUNo?= =?utf-8?B?NktvNUxEcXhKY3ViKy9uYXFWT2hjcTRJck05TGlXYk9PQkFUanhBYWlrcDhY?= =?utf-8?B?RVRBcjhrdnBzRHUrWWhUMXduSWIxdGJjbkxQdFI0Vnl6dWZLVFRQUDhROTVm?= =?utf-8?B?b1ZydlY0U3BKMEdQdFUrM2w1cUlqYUJtZG5QVkFMVktJQ0JRWmpQUktkcmtT?= =?utf-8?B?VDU0OE9OUkZhNjJtRFkxVGd0cmMvbHpKZzV0TGRNeGkyeWphMDRielVpR2Yw?= =?utf-8?B?a0Vsc1NocEQwck14aUZLc0tlblU4MmtMMWwxanFSVC9vRVNDR2JYM0RGUXlh?= =?utf-8?B?V2dVK1JoS1o0dnlvUVJydFlHeEY2TXVLMnVVREt3bXkxeXBOTGRIRWFtSXVk?= =?utf-8?B?aTZvRW5rNmFtWmdhTDVvbmxNZzBzWlMzYWJaemkvOVZwUlUyS2NGVitMb2d5?= =?utf-8?B?MHRocHNFQU4wZlJtN0VTVnU5K01XVmJBWnpPS09FVUUrTmEvdkVaYUJIQ1RW?= =?utf-8?B?N0RRbW9qcWJxUUlZNlFveWVzQzhQZTlzN2ljTVFPY1BhLzlPQU13dkVxaHdh?= =?utf-8?B?OGJpN3VhOGhtRHNmNUluQnlybTVZNU1uekFFdDIyQ0dpcnJ1Q2xyRG50QXYy?= =?utf-8?B?bHZvekJlUWFwNXd4d2orLzZjSXZCNkJxbWh2SGZlUkJSZjF6T0VxYmJSYUls?= =?utf-8?B?cVY4K0ErRHFLeU5vMW1ybHNlbGNVQmJxMzRpTGRPbFlUdUtnYU9DVi9JRWtz?= =?utf-8?B?L3BscGl4Q0NPNk1ZYjJBNlIvZXFpenNjRVFvRTN3ZnN2RHNKaUxGRElxK3M2?= =?utf-8?B?MVBseFQ3eStQaWxFTG5KNG1ERFVaOFluZFBDYVZ6MFJWR3o2T3dqc2lQbXV4?= =?utf-8?B?aWlhZ29CY3ZGdjRWWi9mQlIvdXNkSVdhOWRhU1pLNUVlOGFvc2ZNNnROTjU5?= =?utf-8?B?UGd6LzFzdEZhUW5XN2R4SjBjY1g4ckU3VFBJcG9qaVdhUlJQLzRDSWlwTUo5?= =?utf-8?B?dHYyNURLTVlhZ3dqZGd4enkxVTZLMTU3ZTg2anhkbzlDY0pPOVR4U0ZLcHRC?= =?utf-8?B?SUIvaEFxNWJoRVpiNXhDYkIwNTZTTTFxcHJvQVFPZHJyOEZFY0pmaHJuTEYw?= =?utf-8?B?aDF6cys3eHdvdE15NUJ6NS9hNnpZWCs4SlNWR3hLaGZIUzk1MjNMcm1SblU3?= =?utf-8?B?RUt4QzZ4Yyt6VG1DK0gxbTlIdENxVFhkUzJTS2JNdXpFZjRRVy84ZmpJQkY5?= =?utf-8?B?WnVnYXQ2Vmd3VnBaZkgvTUI5aVRlalRNdjdoNmZQTXpCL0E4Q0V2U0dPb01F?= =?utf-8?B?OGtYemo0UXhsNW83elA1cTl5SGg5a2dtd2ZPQ3YvQlk4dWZPU1FMcDhFMmRl?= =?utf-8?B?WC9HK2VqbVY0RlZ2WU84WjdmNjNSMGNscFRhSnZqUFB1R0FCSnp6MVI4U2cy?= =?utf-8?B?aURnTmVpRGlDbWxPSk9JcmVUMStOVDRzanFCdGlQSUFnckxRdXhTaFBnNHFp?= =?utf-8?B?amtDZUZUWlRXUFdIdUp3T08yVU9wNEU1R3Aza1R2K2pVQ2JnRGRPTDRJVnRt?= =?utf-8?B?MEljOUJ4citaWSt4amxmM3BlQ0lTd2swZ1MrTVJFUG5pWEV2bmhnTHZENXNz?= =?utf-8?B?QWo3NDFvZ2ZtMTdaQVdsdnhlanJIZXBwSE5RVTJIQUgwQkdKWmhwbGV4K05D?= =?utf-8?B?SkVqWTJ5bEhGNkV3UUhlSTh5VHJFSDNNUjJ1Z3lSWloxblJIa0NtWVlNL3NC?= =?utf-8?B?cThIMDFXbHROL3BjcUJob3JzZEw0MEF1bVNYNUd5VjViMkJCaktEbkEvMFdE?= =?utf-8?Q?4OVObfOezIviiburCee7?= X-Microsoft-Exchange-Diagnostics: 1; SN2PR0701MB1069; 6:Lo4lSPGIkigE4DyU8ZG+Wt+3rYYcN2Qb+0ROpbqQu4sslF7txO3PqiVHucS8YCcm1StsWSezREoUzLPXFuZEDPj2iGBzWU0V0ROcrRQtx1J6+yOPvpCrhalOeLolUjsi1fXoeEdRF2YbvOwT07vhV5WQHfnRsbOqNw1fAFffEi+XzqjbP4CbqL7XbGuLv0MOD5O+WFum0hQ+A5vmSgqovWEfLSiImgw+QSNa4KTWiCMoeDtkAH/0AB+ksJWbR96pkchn5iDquBQOYf2XhCwW5NdUebqhn7O6bHQH3YTSBbiauux0uIBJ92pPu2HZbY9IJoUoodX0qR4wuQBC+25jlmvA7G3rj6GaiVUgpetjfP4=; 5:rqLEMMFAe68rcnP73DEV8ZczJXx9uEmIgun5DekkJvso6/ynJ4E2+Lm67stQaxJVQmJ1RU5m1gG8IQ/ui6jb3ps5oZYyZHocyjfSY2KIbQxCR9uucWhiO6NVls8cQQgOS7j2hX7IRMSOhFjK153pdxlrq4gultXm5riGuzLdGuk=; 24:vRp+/gjn6ICgm+fU6veGi7CyVmMkNfsahQPEp1+WUKiCs42mvjVZugWgh4IyJnV6XF4EWRrkLbpauvCvrudnzrNnJKG+phPc1nPzIFmGX2k=; 7:p42dkf9ypZpjNZZYmlHeJZJc4qRpYBTkvnX0Aqw0m12Tc2irV5qfQX9/xENbCxvhyO/jocoxUCLFioTnSLahbPJuQtP79X4BvJHzowW3QgQ3sSaZSDrAcedXOxsZInXnOtIaUVp1w8Omj/RuzE2hFLoUb5kECintiTWwLOPl2zMjQXCuuy5zeF0B0lYOXqHqbq75+RWusrM4O+/6g93+f17lc5wc7U2wV7Dpf0bPrU0gtvl7wbfMDcgYdjdJW5Xn SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: caviumnetworks.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Jan 2018 18:01:33.1475 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 5545896b-a6a4-4d48-777a-08d567425670 X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 711e4ccf-2e9b-4bcf-a551-4094005b6194 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN2PR0701MB1069 Subject: Re: [dpdk-dev] [RFC 0/3] set protocol specific metadata using set_pkt_metadata API X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jan 2018 18:01:38 -0000 Hi Radu, On 01/29/2018 03:31 PM, Nicolau, Radu wrote: > >> -----Original Message----- >> From: Anoob Joseph [mailto:anoob.joseph@caviumnetworks.com] >> Sent: Monday, January 29, 2018 8:04 AM >> To: Akhil Goyal ; Nicolau, Radu >> >> Cc: anoob.joseph@caviumnetworks.com; Doherty, Declan >> ; Gonzalez Monroy, Sergio >> ; Jerin Jacob >> ; Narayana Prasad >> ; Nelio Laranjeiro >> ; dev@dpdk.org >> Subject: Re: [RFC 0/3] set protocol specific metadata using set_pkt_metadata >> API >> >> Hi Akhil, Radu, >> >> >> On 01/29/2018 01:02 PM, Akhil Goyal wrote: >>> On 1/26/2018 8:38 PM, Nicolau, Radu wrote: >>>> >>>>> -----Original Message----- >>>>> From: Anoob Joseph [mailto:anoob.joseph@caviumnetworks.com] >>>>> Sent: Friday, January 26, 2018 2:38 PM >>>>> To: Nicolau, Radu ; Akhil Goyal >>>>> >>>>> Cc: anoob.joseph@caviumnetworks.com; Doherty, Declan >>>>> ; Gonzalez Monroy, Sergio >>>>> ; Jerin Jacob >>>>> ; Narayana Prasad >>>>> ; Nelio Laranjeiro >>>>> ; dev@dpdk.org >>>>> Subject: Re: [RFC 0/3] set protocol specific metadata using >>>>> set_pkt_metadata API >>>>> >>>>> Hi Radu, >>>>> >>>>> On 01/26/2018 04:52 PM, Nicolau, Radu wrote: >>>>>>> -----Original Message----- >>>>>>> From: Anoob Joseph [mailto:anoob.joseph@caviumnetworks.com] >>>>>>> Sent: Thursday, January 25, 2018 5:13 PM >>>>>>> To: Akhil Goyal ; Nicolau, Radu >>>>>>> >>>>>>> Cc: Doherty, Declan ; Gonzalez Monroy, >>>>>>> Sergio ; >>>>>>> anoob.joseph@caviumnetworks.com; Jerin Jacob >>>>>>> ; Narayana Prasad >>>>>>> ; Nelio Laranjeiro >>>>>>> ; dev@dpdk.org >>>>>>> Subject: Re: [RFC 0/3] set protocol specific metadata using >>>>>>> set_pkt_metadata API >>>>>>> >>>>>>> Hi Akhil, Radu, >>>>>>> >>>>>>> Could you review the patch and share your thoughts on the proposed >>>>>>> change? >>>>>>> >>>>>> Hi, >>>>>> >>>>>> I've had a quick look. From what I can see you can do everything >>>>>> you do in >>>>> this patch with the current API. For example you can store an >>>>> internal struct pointer in the private section of the security >>>>> context and you can increment the ESP SN with every tx or set >>>>> metadata call. >>>>> With the current API, PMD could store the ESN with the security >>>>> session, but there is no means for the application to read this. >>>>> Application should be aware of the sequence number used per packet. >>>>> This is required to monitor sequence number overflow.In the >>>>> proposal, the sequence number field is IN-OUT. So application could >>>>> either dictate the sequence number, or read the value from the PMD. >>>>> >>>>> Thanks, >>>>> Anoob >>>> My concern is that we are adding too much and too specific to the >>>> security API. >>>> Overflow situation can be monitored with a tx callback event or a >>>> crypto callback event, depending on the device type. >>>> >>> Agreed with Radu, this looks too specific information. >>> Instead, we can do overflow checking in the driver and add a macro in >>> rte_crypto_op_status for overflow. >> We could do the callback when sequence number over flow happens, and >> IPsec processing fails subsequently. But ideally, application should be able to >> detect that the sequence number is about to over flow and renegotiate the >> SA while the original SA is still valid. I agree that we would be better off by >> handling this in the driver. But application would need some sort of event >> which would say, "sequence number is about to overflow, renegotiate SA", >> before the current SA becomes invalid. >> >> Do we have any mechanism to register a callback (acting on mbuf), when a >> particular event occurs (without dropping the mbuf)? If yes, we could move >> to that approach. >> >> rte_crypto_op_status could be leveraged for lookaside_protocol, but can we >> do something similar for inline protocol? Thoughts? > You can look at rx/tx callbacks (http://dpdk.org/doc/api/examples_2rxtx_callbacks_2main_8c-example.html#a26) but probably events are more suitable: http://dpdk.org/doc/api/rte__ethdev_8h.html#ac0bef2920a6ade4041cab5103f4700d9 There is already a "RTE_ETH_EVENT_MACSEC MACsec offload related event" so you can add a security related event. Rx/tx callbacks would be either for all packets or for packets which encountered error. Neither is our case. So rx/tx callbacks might not fit in our model. I need to attempt the implementation with events to see if that will solve the issue. The implementation could be a bit complex as "eth_event" is mostly to control the state of ports, rather than acting on packets. In that case, PMD could return a security session in the callback argument, and the application would be required to find out the SA from the security session. I'll give this a shot and see if this can solve the problem. Thanks, Anoob