From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mails.dpdk.org (mails.dpdk.org [217.70.189.124]) by inbox.dpdk.org (Postfix) with ESMTP id C7DB1A0C56; Wed, 8 Sep 2021 09:42:18 +0200 (CEST) Received: from [217.70.189.124] (localhost [127.0.0.1]) by mails.dpdk.org (Postfix) with ESMTP id 4E6514003E; Wed, 8 Sep 2021 09:42:18 +0200 (CEST) Received: from EUR05-VI1-obe.outbound.protection.outlook.com (mail-vi1eur05on2061.outbound.protection.outlook.com [40.107.21.61]) by mails.dpdk.org (Postfix) with ESMTP id E52C14003C for ; Wed, 8 Sep 2021 09:42:17 +0200 (CEST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ff1wcQI1IyEDxFgXiz6YiHVbAw8GiPKt+UjH0kuHGj81Y3fFTB4lEJb4C7nmf9IeM9MYneBjuREqthIaDQyicC4Qzjm2YstXM945Z0F+Xa29CqTSbkDqVvZsQxLVRMgvajNWgqAP05hz4uLJkxqoW/MKbP6d5yPEGIKiJnvfSEUmJqYTSb6MeONsYXZHO0EGisffrNa9thbVKEJsz0OsP4ANZ0Tn7dYOw8rdUPrPWGutAGtmVojNrVo4hLMM09AWhO4QFzzJUAlakAPoCn6RxP4jX8+P5hwlsRHrVw65mA4xOen9VcFr0m4x50dMMKUBtmgeR4LXvbjRr/tMsoXfag== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=htmILiLpU36JyHii3yOk1R+MSHm0g/h1uf1xTUh9HYI=; b=Fgovs/MuG1p/wk8mwIrZGQMV9l3V7k7m/sKrVVQgazkugntIbr7r6BYi9HJEKagEk1lfE6mHCH3bNc4aEORoYr1emxRgYatZftqT8LTiqjBoE9TBBkuAs7ibDaV8pGr3o5z3DzjrhGaPWjOxgGTm4iYTmznTzh7P6vh8hfmSgd7sTwpMs987R2NaxhMHNIj3RNgiT7e73bjfrbCWLsYEn7+A4INful/fqPXtsp75hfS8U0vBDBOaCyjZ21Iy1sQNQbmrj9Ze6OwT7z/e4nCHLAKEJs4T+ruck9/xzDLQR1EDNd9FuM7654ilmdMFefvtySSmHesjToh1IRtA2JEbyg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=oss.nxp.com; dmarc=pass action=none header.from=oss.nxp.com; dkim=pass header.d=oss.nxp.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=NXP1.onmicrosoft.com; s=selector2-NXP1-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=htmILiLpU36JyHii3yOk1R+MSHm0g/h1uf1xTUh9HYI=; b=Rq+s+oSMzjT3dE4RA4dehTD1ouAdjH8PkeiTiqljqU45bzq+F0XtDDPC0PALENtm8v9STfbuR+D105+97Z/9Cg8RTZ1NeA9f9hCG+DoufziEJq8iBOAExYvulaIU2GDlGpmTpvluy3MzGI76CXekOIQhGJgXeuRKpqRN1mQxl9U= Authentication-Results: dpdk.org; dkim=none (message not signed) header.d=none;dpdk.org; dmarc=none action=none header.from=oss.nxp.com; Received: from DU2PR04MB8630.eurprd04.prod.outlook.com (2603:10a6:10:2dd::15) by DU2PR04MB8887.eurprd04.prod.outlook.com (2603:10a6:10:2e2::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4478.22; Wed, 8 Sep 2021 07:42:14 +0000 Received: from DU2PR04MB8630.eurprd04.prod.outlook.com ([fe80::945d:e362:712d:1b80]) by DU2PR04MB8630.eurprd04.prod.outlook.com ([fe80::945d:e362:712d:1b80%4]) with mapi id 15.20.4478.025; Wed, 8 Sep 2021 07:42:14 +0000 To: Tejasree Kondoj , Akhil Goyal , Radu Nicolau , Declan Doherty Cc: Anoob Joseph , Ankur Dwivedi , Jerin Jacob , Konstantin Ananyev , Ciara Power , Hemant Agrawal , Gagandeep Singh , Fan Zhang , Archana Muniganti , dev@dpdk.org References: <20210908082531.27477-1-ktejasree@marvell.com> <20210908082531.27477-2-ktejasree@marvell.com> From: Hemant Agrawal Message-ID: <6cca0fc1-2776-2d56-b26c-bdd7cbc264c0@oss.nxp.com> Date: Wed, 8 Sep 2021 13:12:04 +0530 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.13.0 In-Reply-To: <20210908082531.27477-2-ktejasree@marvell.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US X-ClientProxiedBy: SGBP274CA0005.SGPP274.PROD.OUTLOOK.COM (2603:1096:4:b0::17) To DU2PR04MB8630.eurprd04.prod.outlook.com (2603:10a6:10:2dd::15) MIME-Version: 1.0 X-MS-Exchange-MessageSentRepresentingType: 1 Received: from [192.168.1.5] (122.161.79.39) by SGBP274CA0005.SGPP274.PROD.OUTLOOK.COM (2603:1096:4:b0::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4478.20 via Frontend Transport; Wed, 8 Sep 2021 07:42:09 +0000 X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 2c3a7481-5881-4a12-5d5c-08d9729c2c83 X-MS-TrafficTypeDiagnostic: DU2PR04MB8887: X-MS-Exchange-SharedMailbox-RoutingAgent-Processed: True X-MS-Exchange-Transport-Forked: True X-Microsoft-Antispam-PRVS: X-MS-Oob-TLC-OOBClassifiers: OLM:4941; X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DU2PR04MB8630.eurprd04.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(366004)(508600001)(55236004)(5660300002)(53546011)(83380400001)(110136005)(38100700002)(186003)(6486002)(38350700002)(26005)(8676002)(31686004)(956004)(2616005)(8936002)(31696002)(66556008)(66946007)(6666004)(86362001)(4326008)(66476007)(52116002)(44832011)(2906002)(15650500001)(7416002)(316002)(16576012)(54906003)(45980500001)(43740500002); DIR:OUT; SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?a2pYbnhZWjhKeE1xd2xtRktaNHk3MHJIV3NiQ1l1QS9kdlpBRE5uMVcwZ0NV?= =?utf-8?B?NldubmRmTFBjWTFZVXkzU0c0bSt2TWFzSTIvZ1JoQWpIZjl0VTMzK3BOeHE5?= =?utf-8?B?Mk1HQzdENHNrcFNQblBxMEdVOG5OLzQwdVc5YmJURXF6cXM5MzVXeTVrQkFH?= =?utf-8?B?OFU1RkRremxoQmY3L1Y5K0tkamVJZ3RkTStEUk4yVXhSUFNEOVU0RUV5YTZ5?= =?utf-8?B?dll3dytiWmlPR21POGVtbEFhSFVtUlBUdksvRHo2Sm9oRmtIdVBGWHh5bzEr?= =?utf-8?B?cnJDaklzYmtNQkNUZEtTN3NsaXZRSFFCYjB5a21uY1RySi9KU3psY0lFS1h2?= =?utf-8?B?NkMzMnpVN1J4L1MzZ2JPWDllQ2Fla0ZPdUVvU3Z4OVF3alJnSFBjclZuZzJq?= =?utf-8?B?dGVkakhtVUwya2lSR0tzVnNZQnBqRnV6Z04yRG9UdWpOckJ3OHA4K0oxK2to?= =?utf-8?B?NzNrZElZVHNqL3JjSnIrTExFdHpGNjFzaGNNbEUwUXpTNEh5eE9Fd3RiOTVP?= =?utf-8?B?QXUvT3ZQVFRGUVJyMTEzQmY0SG9xQVg2OXlBMnZEVUluclBUVnFmcWtNUnhN?= =?utf-8?B?WUFyNEdXK3FZTjYyUnIzK3MrWk5scFEyTGQ0bWVOM2Y4UjBpc2cyTDdyR3o0?= =?utf-8?B?T0JKS0haUGhXQjJrZFQzalFsRWVNUnh2SDFEYjhtcFV5RWNJSUhQQjFIUFd0?= =?utf-8?B?KzZJUHJoWWhmdXppajNZNnFZM2NiSGRpdS9iMGduZDJqZndaN1pqQllJOFZh?= =?utf-8?B?Zy9OSmM2R3pDU0JNMnZ5bTBHSEJjY3A2d2U3bmxuZUNMcWdaa0RzakJJREE2?= =?utf-8?B?NmN3MXhXdE1OT2Nsd3Y5cC9GemtjTjNWVkRKbzc5UjNsRWFMUmZRS2FWWk5o?= =?utf-8?B?VjNQYVdCamJadm8yZ2lJQm5Zd3JVUmsveDZzangwVUtnZHo4REh4WXJINTFC?= =?utf-8?B?cEZ2RW1lUnFTZEhKajBhTVhlWklXT252WCtRNnNJd3IyblJ2Wlh3ZUhONDJt?= =?utf-8?B?T2ZVR1BGV0Y0UFlhMENvd3E5bmVzZDc5N0VWdHZON2NPZnhRZDM0cFRhVHhm?= =?utf-8?B?d2FTV2dEeXJWN3RsdEdKeHF0Mi9qZlU5Sk5xbkhPVkQzQ080OW5hUlNheE1Y?= =?utf-8?B?RG1BUWJzVTdjeWNLNENuaVV1ZDBHSWtaV2tlcFBtV2liVS9ENzBzQ1FtZTVI?= =?utf-8?B?TWo1VWR2djZUcHFERGRjZnh3dmNMeTFubFVyZE1kbzZqN3dlYUJYbHV0ckV5?= =?utf-8?B?VUFWU0QwZnNremlkOUptUGp2NEFsZXI0Tm5SY2crNm9RN25ZQU9NUFFBKzhu?= =?utf-8?B?WEtQZC9IbjBiV3Q0V3piWlY2L2tjRkI1NmJIWHpDa0JHL0JmczZ5Z3FUa2tP?= =?utf-8?B?cFdRbTlrMzB5d3B4UCtXd2h1N0RoNU1BanU3aHZMei9Tdk4xRTY5a242S1Q5?= =?utf-8?B?ZktOekp3cC92a1NQVHRXNGhlWTUzczRmQ250UTNQNTN3KzVadmVFRHd3VmNK?= =?utf-8?B?YzFKZUJ4NG5ISTBJN0hHMW1xb2duSnI0aTlXRGxNRWl0cUlvUzNDM3h2dVpn?= =?utf-8?B?QW04YkFzYURDT0pvTUsrcC84Smw2WEZHNnYyb3c1YjVTUnVGcVU5L3JXSHVr?= =?utf-8?B?cmYwWWVQaFk5aWZNNXVsZWJNNUxINm9ZSlVOdE55d2tWcnFDWjhSV0RRb1NH?= =?utf-8?B?ckhiUFVCS1lYTCtkZUl2a2o5N1RGUStsQzBUUkxkN0dGU0l4VzI1UDdhK29P?= =?utf-8?B?NVhDTzltSGRWMloyNUQ2V1VNSXBvRkR0ekkzZWdBdWRyRzZBVkVQbm5xYXEw?= =?utf-8?B?VWhNckZHUWpUUjRrRlpSZz09?= X-OriginatorOrg: oss.nxp.com X-MS-Exchange-CrossTenant-Network-Message-Id: 2c3a7481-5881-4a12-5d5c-08d9729c2c83 X-MS-Exchange-CrossTenant-AuthSource: DU2PR04MB8630.eurprd04.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 08 Sep 2021 07:42:14.1915 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 686ea1d3-bc2b-4c6f-a92c-d99c5c301635 X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: afTAkMW4p2IjB8qZ/+HywkrLt2v/5NZ6l6BmVxiJCyBAsE1XjNFf+CgchtSgqvgukMzwjNLB79i92ZNiFsQKiA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU2PR04MB8887 Subject: Re: [dpdk-dev] [PATCH 1/3] security: add option to configure UDP ports verification X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: hemant.agrawal@nxp.com Errors-To: dev-bounces@dpdk.org Sender: "dev" On 9/8/2021 1:55 PM, Tejasree Kondoj wrote: > Add option to indicate whether UDP encapsulation ports > verification need to be done as part of inbound > IPsec processing. > > Signed-off-by: Tejasree Kondoj Acked-by: Hemant Agrawal > --- > doc/guides/rel_notes/release_21_11.rst | 5 +++++ > lib/security/rte_security.h | 7 +++++++ > 2 files changed, 12 insertions(+) > > diff --git a/doc/guides/rel_notes/release_21_11.rst b/doc/guides/rel_notes/release_21_11.rst > index b0606cb542..afeba0105b 100644 > --- a/doc/guides/rel_notes/release_21_11.rst > +++ b/doc/guides/rel_notes/release_21_11.rst > @@ -141,6 +141,11 @@ ABI Changes > * Added SA option to indicate whether outer header verification need to be > done as part of inbound IPsec processing. > > +* security: add IPsec SA option to configure UDP ports verification > + > + * Added SA option to indicate whether UDP ports verification need to be > + done as part of inbound IPsec processing. > + > > Known Issues > ------------ > diff --git a/lib/security/rte_security.h b/lib/security/rte_security.h > index 2a61cad885..18b0f02c44 100644 > --- a/lib/security/rte_security.h > +++ b/lib/security/rte_security.h > @@ -139,6 +139,13 @@ struct rte_security_ipsec_sa_options { > */ > uint32_t udp_encap : 1; > > + /** Verify UDP encapsulation ports in inbound > + * > + * * 1: Match UDP source and destination ports > + * * 0: Do not match UDP ports > + */ > + uint32_t udp_ports_verify : 1; > + > /** Copy DSCP bits > * > * * 1: Copy IPv4 or IPv6 DSCP bits from inner IP header to