From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from dpdk.org (dpdk.org [92.243.14.124]) by inbox.dpdk.org (Postfix) with ESMTP id 90A65A10DA for ; Fri, 2 Aug 2019 07:35:07 +0200 (CEST) Received: from [92.243.14.124] (localhost [127.0.0.1]) by dpdk.org (Postfix) with ESMTP id 47F89F04; Fri, 2 Aug 2019 07:35:07 +0200 (CEST) Received: from mx0b-0016f401.pphosted.com (mx0a-0016f401.pphosted.com [67.231.148.174]) by dpdk.org (Postfix) with ESMTP id 0ED79F04 for ; Fri, 2 Aug 2019 07:35:05 +0200 (CEST) Received: from pps.filterd (m0045849.ppops.net [127.0.0.1]) by mx0a-0016f401.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id x725UEoC022202; Thu, 1 Aug 2019 22:35:04 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=marvell.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=pfpt0818; bh=yM2n9/R/gZ61BzRsPkJ1yUSQGSHcadfSVKs8P3eGWio=; b=umFU/rWUDba5eOkk4UZ6k2+x+rB6Z+qBKopwHvZpcrCJTz9i5kLRz4Q/7iozLRFGxyWY H/0xc9WyGRSylk8saytCUO6fIeqbVTEs1RR34CRP+RkdsauEUY3rup+Ck4KzM9jnQ0Xv QZo75IPq/4kQEALIby4LC0EZv3WtF9Y4bVnzTUwmvvIHrzFLDEqU17BmEP7U+v3a/BBI Jvuo/TKcGGR2KHwCK7BG7WmwYRWPanvdaz+Nf17x2cab5TgdNfzgSJagIAiERAj8nb2x uhVQ3uUrz9LDkDDJS/r7jrMPAUYbW1N3CCWcC5iT2uDIcdh/+b8NiA/n6g/tZcSIcrCc /A== Received: from sc-exch04.marvell.com ([199.233.58.184]) by mx0a-0016f401.pphosted.com with ESMTP id 2u3jujprgq-2 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Thu, 01 Aug 2019 22:35:04 -0700 Received: from SC-EXCH02.marvell.com (10.93.176.82) by SC-EXCH04.marvell.com (10.93.176.84) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Thu, 1 Aug 2019 22:35:02 -0700 Received: from NAM05-CO1-obe.outbound.protection.outlook.com (104.47.48.59) by SC-EXCH02.marvell.com (10.93.176.82) with Microsoft SMTP Server (TLS) id 15.0.1367.3 via Frontend Transport; Thu, 1 Aug 2019 22:35:02 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=PFtHMokf24BhFmpOhFhPkdG+Muh3wBkBjKKJieV5iDIavmg2aId+QgwQAmVxcsZLUQDr0tpcat4kLAQNSuLuhoDsXIlihlrm59c8SdD1RhBZzjbrMNP7M9NHU2wbw5S/Ps2XPvVWGEOVmwVeNR4YrvN6nOaGDeCCEylU42IJgfIQc2PRwq1slprh3RvdfQ5MnsZ4wY+SKoFIfPH1sn9d33jvDbXoaoa9ajNDTjEImMYAANl3gly6YidLVYLLXh1Zho95EGcvHU7fkd5iv/akcXRNeS9VFGzPv4O99aRc4ws25cGwzHBSrjBSHmu+jLlINIF+PhBDMje5GRhiiSNenQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=yM2n9/R/gZ61BzRsPkJ1yUSQGSHcadfSVKs8P3eGWio=; b=SKu4/GSSHk9ThWi/lw8zVoDLCRp57nVThcJrrzNestAEVrBPy+jcOXqFgvypnTc+EHhT9wU9SpNXk6qXm8iIfp0rAjfdcr2TQzrV0+bwdOmylqvLJnYQGIXexvd42E5Y6dBqLtfWwv0fSk36MiMDlzsH7U48aRf1XX9RrfX90Dv7DutYo9rBXRCGNGIcFeaJHLO/WWzvQdQyUNTpSTTHdHR5gjripc/oC4RpcGkbmw+nCoJE08DiUFYlkp/2yNccUBz1C3diTw9yYhdUl00fIv0ahpnZKwrmwi1PcxG17iR+yvF3Gmfe3r7QkAPioEt/NvPRXmSwkQa4jmzmn2kWsg== ARC-Authentication-Results: i=1; mx.microsoft.com 1;spf=pass smtp.mailfrom=marvell.com;dmarc=pass action=none header.from=marvell.com;dkim=pass header.d=marvell.com;arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=marvell.onmicrosoft.com; s=selector2-marvell-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=yM2n9/R/gZ61BzRsPkJ1yUSQGSHcadfSVKs8P3eGWio=; b=h90yc6ePRaEaIMFdhMYbWA68piQk9l96fM7VbCVnm7yMBwoBNx1fUzWZsXiaqo1Fh0mhywiOiBU8lboutckxb6XHhNkB3G/QXk/UQPYWT+QQHChn0E43uLoyHNveny1j4ptv7jk8R4sAlFq5u1MMCH771acyiiCZt+J9rLvu52k= Received: from BN8PR18MB2868.namprd18.prod.outlook.com (20.179.75.15) by BN8PR18MB2484.namprd18.prod.outlook.com (20.179.64.217) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2136.15; Fri, 2 Aug 2019 05:35:01 +0000 Received: from BN8PR18MB2868.namprd18.prod.outlook.com ([fe80::d845:c6aa:fb94:26cc]) by BN8PR18MB2868.namprd18.prod.outlook.com ([fe80::d845:c6aa:fb94:26cc%5]) with mapi id 15.20.2136.010; Fri, 2 Aug 2019 05:35:01 +0000 From: Anoob Joseph To: Anoob Joseph , Akhil Goyal , Adrien Mazarguil , Declan Doherty , Pablo de Lara , Thomas Monjalon CC: Jerin Jacob Kollanukkaran , "Narayana Prasad Raju Athreya" , Ankur Dwivedi , "Shahaf Shuler" , Hemant Agrawal , "Matan Azrad" , Yongseok Koh , Wenzhuo Lu , Konstantin Ananyev , Radu Nicolau , "dev@dpdk.org" Thread-Topic: [RFC] ethdev: allow multiple security sessions to use one rte flow Thread-Index: AQHVQiqb+Q3LzHQ2jE6n11KGx7fifKbnYxIA Date: Fri, 2 Aug 2019 05:35:00 +0000 Message-ID: References: <1563977848-30101-1-git-send-email-anoobj@marvell.com> In-Reply-To: <1563977848-30101-1-git-send-email-anoobj@marvell.com> Accept-Language: en-IN, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [115.113.156.2] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: d82cbba2-a843-4cd6-f717-08d7170b2a15 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(7168020)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(2017052603328)(7193020); SRVR:BN8PR18MB2484; x-ms-traffictypediagnostic: BN8PR18MB2484: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-forefront-prvs: 011787B9DD x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(396003)(39840400004)(346002)(376002)(136003)(366004)(13464003)(199004)(189003)(8936002)(316002)(14444005)(561944003)(74316002)(3846002)(33656002)(7416002)(305945005)(11346002)(2906002)(6116002)(256004)(81166006)(8676002)(66066001)(81156014)(86362001)(53546011)(64756008)(186003)(446003)(7736002)(66476007)(486006)(66946007)(229853002)(76116006)(68736007)(66446008)(6506007)(55236004)(102836004)(66556008)(55016002)(25786009)(9686003)(14454004)(76176011)(4326008)(476003)(99286004)(478600001)(15650500001)(110136005)(54906003)(53936002)(5660300002)(7696005)(6436002)(52536014)(6246003)(71190400001)(71200400001)(26005); DIR:OUT; SFP:1101; SCL:1; SRVR:BN8PR18MB2484; H:BN8PR18MB2868.namprd18.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: marvell.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: H1KRSmEWkwPBcYzsa7QTD9MhplRzWXi7pYJa1kohbxjW7ROMWSywdAedo+71bBcec+w5PNsHeMWr6A49m7Pwu2832jdbI74UQBNwEJ5y/qqL7WGot4gJBlXfTGKcHBITAgzhkt5nGeR6eDWpGaSQBnhm3/ilxmgGQREvmUno8lxx+h5kTrNXT6ZBy9fy0DNLaVajDyd39sc/lN7jVQ3b7FI7BxVQbbIs1JOIDCd2yB8VIu6h0SDOplo11vKIi3RHhpwyVuf30vNfdy8larJolry+dREE9dyE9cSsFPBigqeWIkLum2SYh6Xdq1fiff9Cvu2ALRGAUdVPond/YnVSOfVpAY9MjElWzeDoYRC6EwLSZ6xsTH16yhvkpLR6Bp8ieXsz0KD+z023GQrVrViggw/TZd5FywJWk7Mm62DXKzM= Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: d82cbba2-a843-4cd6-f717-08d7170b2a15 X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Aug 2019 05:35:01.3156 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 70e1fb47-1155-421d-87fc-2e58f638b6e0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: anoobj@marvell.com X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN8PR18MB2484 X-OriginatorOrg: marvell.com X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:5.22.84,1.0.8 definitions=2019-08-02_03:2019-07-31,2019-08-02 signatures=0 Subject: Re: [dpdk-dev] [RFC] ethdev: allow multiple security sessions to use one rte flow X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org Sender: "dev" Hi Akhil, Adrien, Declan, Pablo, Can you review this proposal and share your feedback? Thanks, Anoob > -----Original Message----- > From: Anoob Joseph > Sent: Wednesday, July 24, 2019 7:47 PM > To: Akhil Goyal ; Adrien Mazarguil > ; Declan Doherty > ; Pablo de Lara > ; Thomas Monjalon > > Cc: Anoob Joseph ; Jerin Jacob Kollanukkaran > ; Narayana Prasad Raju Athreya > ; Ankur Dwivedi ; Shahaf > Shuler ; Hemant Agrawal > ; Matan Azrad ; > Yongseok Koh ; Wenzhuo Lu > ; Konstantin Ananyev > ; Radu Nicolau ; > dev@dpdk.org > Subject: [RFC] ethdev: allow multiple security sessions to use one rte fl= ow >=20 > The rte_security API which enables inline protocol/crypto feature mandate= s > that for every security session an rte_flow is created. This would intern= ally > translate to a rule in the hardware which would do packet classification. >=20 > In rte_securty, one SA would be one security session. And if an rte_flow > need to be created for every session, the number of SAs supported by an > inline implementation would be limited by the number of rte_flows the PMD > would be able to support. >=20 > If the fields SPI & IP addresses are allowed to be a range, then this lim= itation > can be overcome. Multiple flows will be able to use one rule for SECURITY > processing. In this case, the security session provided as conf would be = NULL. >=20 > Application should do an rte_flow_validate() to make sure the flow is > supported on the PMD. >=20 > Signed-off-by: Anoob Joseph > --- > lib/librte_ethdev/rte_flow.h | 6 ++++++ > 1 file changed, 6 insertions(+) >=20 > diff --git a/lib/librte_ethdev/rte_flow.h b/lib/librte_ethdev/rte_flow.h = index > f3a8fb1..4977d3c 100644 > --- a/lib/librte_ethdev/rte_flow.h > +++ b/lib/librte_ethdev/rte_flow.h > @@ -1879,6 +1879,12 @@ struct rte_flow_action_meter { > * direction. > * > * Multiple flows can be configured to use the same security session. > + * > + * The NULL value is allowed for security session. If security session > + is NULL, > + * then SPI field in ESP flow item and IP addresses in flow items > + 'IPv4' and > + * 'IPv6' will be allowed to be a range. The rule thus created can > + enable > + * SECURITY processing on multiple flows. > + * > */ > struct rte_flow_action_security { > void *security_session; /**< Pointer to security session structure. */ > -- > 2.7.4