query regarding IPsec inner IP header TTL

query regarding IPsec inner IP header TTL

[Gagandeep Singh]

[-- Attachment #1: Type: text/plain, Size: 335 bytes --]

Hi,

Is there any option available in IPsec mode to decrement the inner IP header TTL field by security engine?

I believe in case of forwarding, inner IP header TTL should be decrement but not in case of packet termination. So looking for an option that application can pass to driver to perform TTL decrement.

Thanks,
Gagan

[-- Attachment #2: Type: text/html, Size: 2115 bytes --]

RE: query regarding IPsec inner IP header TTL

[Anoob Joseph]

Hi Gagandeep,

There is an option(dec_ttl) in 'struct rte_security_ipsec_sa_options' to control this. Wouldn't that work?

http://code.dpdk.org/dpdk/latest/source/lib/security/rte_security.h#L166

Thanks,
Anoob

From: Gagandeep Singh <G.Singh@nxp.com> 
Sent: Thursday, November 18, 2021 9:41 AM
To: Akhil Goyal <gakhil@marvell.com>; dev@dpdk.org
Subject: [EXT] query regarding IPsec inner IP header TTL

External Email 
________________________________________
Hi,

Is there any option available in IPsec mode to decrement the inner IP header TTL field by security engine?

I believe in case of forwarding, inner IP header TTL should be decrement but not in case of packet termination. So looking for an option that application can pass to driver to perform TTL decrement.

Thanks,
Gagan

RE: query regarding IPsec inner IP header TTL

[Gagandeep Singh]

Thanks Anoob.

> -----Original Message-----
> From: Anoob Joseph <anoobj@marvell.com>
> Sent: Thursday, November 18, 2021 11:15 AM
> To: Gagandeep Singh <G.Singh@nxp.com>
> Cc: Akhil Goyal <gakhil@marvell.com>; dev@dpdk.org
> Subject: RE: query regarding IPsec inner IP header TTL
> 
> Hi Gagandeep,
> 
> There is an option(dec_ttl) in 'struct rte_security_ipsec_sa_options' to control
> this. Wouldn't that work?
> 
> https://eur01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fcode.dpdk
> .org%2Fdpdk%2Flatest%2Fsource%2Flib%2Fsecurity%2Frte_security.h%23L166&
> amp;data=04%7C01%7CG.Singh%40nxp.com%7C39b5b1a26d8345f89c8708d9a
> a56a19e%7C686ea1d3bc2b4c6fa92cd99c5c301635%7C0%7C0%7C63772811134
> 3148716%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2lu
> MzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=BTzCgx8lhfsa%2
> BePSRloF9%2FetBjVqgDPJwoF8vtAwYiM%3D&amp;reserved=0
> 
> Thanks,
> Anoob
> 
> From: Gagandeep Singh <G.Singh@nxp.com>
> Sent: Thursday, November 18, 2021 9:41 AM
> To: Akhil Goyal <gakhil@marvell.com>; dev@dpdk.org
> Subject: [EXT] query regarding IPsec inner IP header TTL
> 
> External Email
> ________________________________________
> Hi,
> 
> Is there any option available in IPsec mode to decrement the inner IP header TTL
> field by security engine?
> 
> I believe in case of forwarding, inner IP header TTL should be decrement but not
> in case of packet termination. So looking for an option that application can pass
> to driver to perform TTL decrement.
> 
> Thanks,
> Gagan