From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from dpdk.org (dpdk.org [92.243.14.124]) by inbox.dpdk.org (Postfix) with ESMTP id 002CDA0487 for ; Thu, 4 Jul 2019 12:42:42 +0200 (CEST) Received: from [92.243.14.124] (localhost [127.0.0.1]) by dpdk.org (Postfix) with ESMTP id BA5521BDE2; Thu, 4 Jul 2019 12:42:41 +0200 (CEST) Received: from mga01.intel.com (mga01.intel.com [192.55.52.88]) by dpdk.org (Postfix) with ESMTP id 3B55E1BCB8 for ; Thu, 4 Jul 2019 12:42:40 +0200 (CEST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga003.fm.intel.com ([10.253.24.29]) by fmsmga101.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 04 Jul 2019 03:42:39 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.63,450,1557212400"; d="scan'208";a="172397932" Received: from silpixa00398673.ir.intel.com (HELO silpixa00398673.ger.corp.intel.com) ([10.237.223.136]) by FMSMGA003.fm.intel.com with ESMTP; 04 Jul 2019 03:42:38 -0700 From: Fan Zhang To: dev@dpdk.org Cc: akhil.goyal@nxp.com, konstantin.ananyev@intel.com, Fan Zhang Date: Thu, 4 Jul 2019 11:42:34 +0100 Message-Id: <20190704104236.65578-1-roy.fan.zhang@intel.com> X-Mailer: git-send-email 2.14.5 In-Reply-To: <20190701120124.70418-1-roy.fan.zhang@intel.com> References: <20190701120124.70418-1-roy.fan.zhang@intel.com> Subject: [dpdk-dev] [PATCH v7 0/2] ipsec: ECN and DSCP header reconstruction X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org Sender: "dev" This patchset adds the ECN and DSCP tunnel mode header reconstruction support for rte_ipsec library. The ipsec-secgw sample application is updated with the feature's enabling and a python3 script for testing the correctness of the implementation. v7: - rebased on top of latest dpdk-next-crypto. v6: - update_tun_tos function split for inbound/outbound. - get/set ipv6 tc change from macro back to inline functions. v5: - Fixed a checkpatch error. v4: - Fixed a bug. - Refrabricated the code a bit. v3: - Rebased on top of latest dpdk-next-crypto. - Updated the library with individual header reconstruction function. v2: - Fixed a few bugs. - Updated according to Konstantin's comments. - Added python script for testing. Fan Zhang (2): lib/ipsec: add support for header construction examples/ipsec-secgw: support header reconstruction doc/guides/rel_notes/release_19_08.rst | 6 + examples/ipsec-secgw/sa.c | 2 + examples/ipsec-secgw/test/run_test.sh | 3 +- .../test/tun_null_header_reconstruct.py | 479 +++++++++++++++++++++ lib/librte_ipsec/esp_inb.c | 13 +- lib/librte_ipsec/esp_outb.c | 4 +- lib/librte_ipsec/iph.h | 164 ++++++- lib/librte_ipsec/rte_ipsec_sa.h | 10 + lib/librte_ipsec/sa.c | 18 + lib/librte_ipsec/sa.h | 2 + lib/librte_net/rte_ip.h | 2 + lib/librte_security/rte_security.h | 9 + 12 files changed, 703 insertions(+), 9 deletions(-) create mode 100755 examples/ipsec-secgw/test/tun_null_header_reconstruct.py -- 2.14.5