From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mails.dpdk.org (mails.dpdk.org [217.70.189.124]) by inbox.dpdk.org (Postfix) with ESMTP id 8AE6CA054F; Tue, 16 Mar 2021 17:28:34 +0100 (CET) Received: from [217.70.189.124] (localhost [127.0.0.1]) by mails.dpdk.org (Postfix) with ESMTP id 6F4F9242906; Tue, 16 Mar 2021 17:28:34 +0100 (CET) Received: from NAM02-DM3-obe.outbound.protection.outlook.com (mail-dm3nam07on2061.outbound.protection.outlook.com [40.107.95.61]) by mails.dpdk.org (Postfix) with ESMTP id 573E1242906 for ; Tue, 16 Mar 2021 17:28:33 +0100 (CET) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=QmkZKLvXlJxvtP/KfwCSLkQPjCORIl5V2KiAPZH4YVyUFyfsFSD7iwTYNGst8MMc7B2E+TxbIxqH2jEljGbLvdio6KeyBaj6LuzfaAHkWaC7PHz7LIZKAruca+n3flMGW4OgQm3jVZ23e8RpUml895eCACPmwKW2H5gJpGkqVrICBUz2iZ1CRQLhBFOZ2CA67G1sqkD3nhZKq+mg28QA7F3Cqcmdu9Ads1hF7ppVvomC4BwkV1mPy3HRi2g5U0f/ITn9gT78R80+64k/9OXRTJci422OlNxH9XMGwwhxEDULfElyH+5+dZmoM8n4l2S5sMfyTcZ2JoTpqAggYJLlxA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=FeXMzPU/nFgRPDb7pjDj7Olm4pDUWrVBuQdGJvVa8jw=; b=bKO/GsyIBu4QtBpYr1O4MUQ9ShlYqz0bgFh4qNJNnmNEu5Xtz/543BR8qdHQ4s7hk69+yfdrmJuchcZyW3K0+Snb2u5t7CLiqVaTY4hPeBYTMIzmjLCbc08reNi/Bsu71VLh4V9yxdgaVqC2Ld4uZFJTrD/Tu1xBTNc2LCBlLwRevsLqcopPMHCjWFtdKJskgls6Ks4kJQpGgSxfHTpPlXFzLUbfvkFDBRCn5LIBUH644eQRUhmYjg5KYuQwXETmpxyRMp4UX7xviEYngmQouDXJ3lx4SC9m2dD8+qYT/k/gun5lAP/fi3tiWe2JFX9hUpLlPy8TUZQkldONeeWAzQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nvidia.com; dmarc=pass action=none header.from=nvidia.com; dkim=pass header.d=nvidia.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Nvidia.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=FeXMzPU/nFgRPDb7pjDj7Olm4pDUWrVBuQdGJvVa8jw=; b=jWU57GONJVVmMBKselU+3xV6ulGlI6Zxixa+AvcgeES4R4QX9pje64kH4jUQLak4ge9OgRLJsJllh0sfxz+Sp5Ouq6wppekq5QbsiqeXNPGbd2x89XVBbmn3Nul0NOllFjZYi3KZyQT/ohcEX08riDPEIKC5G7vH6kG/09BstGgHPgwlj11y6ztBXKb0+AkXa9AO3l7qh/qakGW6Sykz0zojFeyWcqQMyQ27EJiqvct+Xl2bv/qfoFjvufn+4wwa3+qEortJb8yCK13UxiLZAmdidpw/CglRENXGU0CMfc0fJL6XcOfz0epg3cWxmObHoLZGvenWqEplvyzpAdHaeg== Received: from DM6PR12MB3753.namprd12.prod.outlook.com (2603:10b6:5:1c7::18) by DM6PR12MB2923.namprd12.prod.outlook.com (2603:10b6:5:180::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3933.32; Tue, 16 Mar 2021 16:28:32 +0000 Received: from DM6PR12MB3753.namprd12.prod.outlook.com ([fe80::20f7:11fc:9d46:9258]) by DM6PR12MB3753.namprd12.prod.outlook.com ([fe80::20f7:11fc:9d46:9258%6]) with mapi id 15.20.3933.032; Tue, 16 Mar 2021 16:28:32 +0000 From: Slava Ovsiienko To: "dev@dpdk.org" CC: Matan Azrad , Shahaf Shuler , Ori Kam , Asaf Penso , Thomas Monjalon Thread-Topic: [RFC] net/mlx5: add IPsec offload support Thread-Index: AdcagUHkSIzFhC4mQxauIfgtXc2ioQ== Date: Tue, 16 Mar 2021 16:28:31 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: dpdk.org; dkim=none (message not signed) header.d=none;dpdk.org; dmarc=none action=none header.from=nvidia.com; x-originating-ip: [95.164.10.10] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: ef087b5d-d8c3-4b89-db39-08d8e8988a0b x-ms-traffictypediagnostic: DM6PR12MB2923: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:4502; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM6PR12MB3753.namprd12.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(346002)(396003)(39860400002)(376002)(366004)(136003)(6916009)(66476007)(8676002)(7696005)(6506007)(316002)(478600001)(71200400001)(54906003)(4326008)(52536014)(76116006)(8936002)(5660300002)(66946007)(64756008)(66446008)(2906002)(86362001)(55016002)(9686003)(186003)(26005)(66556008)(33656002)(83380400001)(107886003); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: =?us-ascii?Q?a47m39rTK915+mjn6U1HCq332puev9uQPIxJvTav6Aji7tWvbCt3AoXtvGlR?= =?us-ascii?Q?5LUpUGSco6BwEo/rGkWu5nMWWL+jJc69oCm5CptsFaJ1cvqyMwRW+F9TKR1r?= =?us-ascii?Q?JDWBVVcNoTCaaLgtwzuracfZ7OhvAo6IBD2+MYOz/L5DpRGFxkT9Q7nb46SK?= =?us-ascii?Q?Mjn+RaWXGK9PZkXlcUWRg9RkbooM+dWreRNn0VJhcO40VL3XXVoUmDsPiXEC?= =?us-ascii?Q?+cdqbHCVZ8t8ghlAvlAi6Pt6L6SxLx527ZUZSZAriSapU1ORMtxvKd80w7XD?= =?us-ascii?Q?eEaDQ5VbWyzFqDlHLFIkK2gCvUW/LPmwJ/QIS4WIaxNbdboCHHkwZVZpiJkC?= =?us-ascii?Q?9JY67qp9QskKjIJX6OIh+jG53yZUorpxkSXRz6MzxOdQYF8K29ZfVO7baQEt?= =?us-ascii?Q?xDSjUQ7EQYyhsJmOq5dFftYVnQOEucBT+Stjfz7/Io2BWWv/yLSCvO7X2u+N?= =?us-ascii?Q?8//6scq3K6Bm4GIy1NUnhDdHPp9JEmWnKWrUXkAzN+rqlEBZmtG0sItTqfQH?= =?us-ascii?Q?X3GTN/i5jzPjcQL0XHrCTD0vCpi+0pX+dQVWrufnsYsczi1RwjelMtumx+6l?= =?us-ascii?Q?K+HHRzVWzieVR61nFs2IJ193Ie42nJ0ny3q6gJ5rVQCMh+ZzkMRFu1GneK7t?= =?us-ascii?Q?B8H8gWYx1Sn7VUnxS3DP8/nh+OTbZ9qkJJXOdXnP0JRJNFRw+Uqq6mwaKf4G?= =?us-ascii?Q?VO7uHBWFVxwYCR1v299uU0vh5RtxE+2EAKsrOlsehN/1FwgOQG90bm7N3WPI?= =?us-ascii?Q?LLDq8uAjRXWk3/MnKB88DrxARJ/bShcKwscix17vng9QwXThTOwM9iGfdj+8?= =?us-ascii?Q?6mXNp7iQEiqS4HM6CcebmnsTPGCeWuF52IE4TtiJffyi5MNcvW96C9P7TbZP?= =?us-ascii?Q?czfBIW4nkxHtSXA/+NJGDCwl7me+Hm5+AMN7a21m2Lfqp1KXYUWi5mporbML?= =?us-ascii?Q?oStQZjkQzbptWhS33AGuAmbnbDaWnq5JUK7dloBz7bMCdbu6gKsHJzhd/x7X?= =?us-ascii?Q?IfRx8lfOb/ZFpDQkB8fpT7yOsqf5NoAw90hAtSNA45pJCcyUwYzJvOpK5OQ9?= =?us-ascii?Q?GPX+UUOGM0UhWEKLvUNHofK8aON4BJ1OZB7U5MIX8wsK6h7+L/n5kpZxhvw0?= =?us-ascii?Q?SgN3tUZMYIf4cZUGCFQUd2lhAaRLtRl8RhkTVfQOCqlbVNPI45kKKcuS4U1s?= =?us-ascii?Q?g+FGOEA4YNAbgsFmfCCorfRLMrTAabrXBeZzLLRvT7FeF0O2eLf9wT4vWvNr?= =?us-ascii?Q?G5YO8nF9Zr3o5qK1nBbDcMPYpOKVxOfkqEXksGq7QZWjPleTyyYqV+ZKqqGi?= =?us-ascii?Q?500=3D?= Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: Nvidia.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM6PR12MB3753.namprd12.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: ef087b5d-d8c3-4b89-db39-08d8e8988a0b X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Mar 2021 16:28:31.9971 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 43083d15-7273-40c1-b7db-39efd9ccc17a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: wlBSubsMGHD5bL5aQozYfQ6Xh70ODTh/wv3TF9qzxAshiLy7Ou67tGpX59jINzjWu6ZweeeT2H2krn7+lukV7Q== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR12MB2923 Subject: [dpdk-dev] [RFC] net/mlx5: add IPsec offload support X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org Sender: "dev" The DPDK ethernet device might support the offload for security operations. Since ConnectX-6DX the hardware implements the cryptographic options required to provide the IPsec protocol offload and there is an intention to update mlx5 PMD to make this security offload capability available. The minimal required set of offload options to be supported: - crypto inline offload only (RTE_SECURITY_ACTION_TYPE_INLINE_CRYPTO)=20 - ESP protocol only (AH will be not supported) - AES-GCM 128/256 algorithms - support both Transport and Tunnel modes - operate on BlueField-2, ConnectX-6DX and above - support both IPv4 and IPv6 - VXLAN/GRE tunnel support The common updates in mlx5 PMD include the standard security context API support: - rte_security_capabilities_get() - rte_security_session_get_size() - rte_security_session_create() - rte_security_session_destroy() - rte_security_session_update() The mlx5 data path update includes: - RTE_SECURITY_DYNFIELD_NAME mbuf dynamic field support - rte_security_get_user_data() - rte_security_get_stats_get() - PKT_RX_SEC_OFFLOAD, PKT_RX_SEC_OFFLOAD_FAILED, PKT_TX_SEC_OFFLOAD mbuf flags support - report of DEV_RX_OFFLOAD_SECURITY and DEV_TX_OFFLOAD_SECURITY The mlx5 rte_flow API update includes: - RTE_FLOW_ACTION_TYPE_SECURITY action support - RTE_FLOW_ITEM_TYPE_ESP item support - support RSS over ESP option Signed-off-by: Viacheslav Ovsiienko