From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-wm0-f66.google.com (mail-wm0-f66.google.com [74.125.82.66]) by dpdk.org (Postfix) with ESMTP id 358251B81C for ; Wed, 25 Oct 2017 14:36:02 +0200 (CEST) Received: by mail-wm0-f66.google.com with SMTP id u138so1627327wmu.4 for ; Wed, 25 Oct 2017 05:36:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=dev-mellanox-co-il.20150623.gappssmtp.com; s=20150623; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-transfer-encoding:content-language; bh=evVnNK4/R0anTTVqhi/m14bvCCzGHqfWhu7AlVsbsJc=; b=OkyotbZDMI+QTePZnxGfHQyUsciEs4RVHOGT3eXJH4c0SI9+cLFvm+dCG9BGCHwR/f SY/98OXzqz3BdCvrpW62H0iKwuu1Y8wCPAugv6oIQmmaXWp7HM8zs1iNVlRb33K1J+2k sPJUH01mI+iFPl86XPsG81tPRY2wpXoqV3OP3choENYZuZkd2i2jnSkLnrDWLbX0TbXm bukDmhoYqWEAGIG426LGDWqor3sIuEejADx6OdTk3Zz4cjOHZLLm7bJcSXMjmRFwBvFj b3PPW4jhcIKrN7JN2Cgo+AMTgcZTz+wuhGz9HU3ExK3a+qtrmYHr19+T+NCDKinsuU6i 3Yyw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding :content-language; bh=evVnNK4/R0anTTVqhi/m14bvCCzGHqfWhu7AlVsbsJc=; b=XjG9FaJHaLgiSnvo7aHkfr4RukqcTg1qvose9I2U0RHRIwobMI1UGLzsMwduMnvV0R rR6gtGtANV34NYq/Zxc6rAXz3A6ryHfZnzwiOLWu750Lz2G/oRt5nATO3hLuikMGZLsd M9YVKYAEvp511VMjH6mXifSbgsSa2XfvAhcqJiUh0v8vcgLLs5PkY2kss+d8zjFRutn8 cMmhPhbIX107ijihzQCl7wSeWCb7dNJkR9e/8/IZWsGA+Eiunsp8EteB0ZHNJu+zUKOm kiYwqf2OSCWO4JaEmK/o5sct+0kr/ghDYCjI9OfbaP22eodcYbOSnzj13Y7ganyYb7zD o57A== X-Gm-Message-State: AMCzsaVbmKaJm7NQhMyZmgu9/blBcNNbWk8JD4l6fBuyPfgI22a4FRfb B2bizkIVnH+8UZ33zbuPhKGQqA== X-Google-Smtp-Source: ABhQp+REog5YbkWXeGUDCWTxE/qjLl2ZGljt+J9hM3VNowLv1nvXzPVkH7r0KUW9nkQsQ2xaOd4W4w== X-Received: by 10.28.178.81 with SMTP id b78mr1679470wmf.157.1508934961709; Wed, 25 Oct 2017 05:36:01 -0700 (PDT) Received: from [10.8.19.129] ([193.47.165.251]) by smtp.gmail.com with ESMTPSA id e134sm2346737wma.31.2017.10.25.05.35.59 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 25 Oct 2017 05:36:00 -0700 (PDT) To: Shahaf Shuler , Akhil Goyal , "dev@dpdk.org" Cc: "declan.doherty@intel.com" , "pablo.de.lara.guarch@intel.com" , "hemant.agrawal@nxp.com" , "radu.nicolau@intel.com" , Boris Pismenny , Aviad Yehezkel , Thomas Monjalon , "sandeep.malik@nxp.com" , "jerin.jacob@caviumnetworks.com" , "john.mcnamara@intel.com" , "konstantin.ananyev@intel.com" , "olivier.matz@6wind.com" References: <20171014221734.15511-1-akhil.goyal@nxp.com> <20171024141545.30837-1-akhil.goyal@nxp.com> <20171024141545.30837-7-akhil.goyal@nxp.com> From: Aviad Yehezkel Message-ID: Date: Wed, 25 Oct 2017 15:35:57 +0300 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US Subject: Re: [dpdk-dev] [PATCH v5 06/11] ethdev: support security APIs X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Oct 2017 12:36:02 -0000 On 10/25/2017 10:01 AM, Shahaf Shuler wrote: > Hi, > > I know we are in a rush to put this patches in before RC2. however I still see critical issue (below). > > Tuesday, October 24, 2017 5:16 PM, Akhil Goyal: >> From: Declan Doherty >> >> rte_flow_action type and ethdev updated to support rte_security sessions >> for crypto offload to ethernet device. >> >> Signed-off-by: Boris Pismenny >> Signed-off-by: Aviad Yehezkel >> Signed-off-by: Radu Nicolau >> Signed-off-by: Declan Doherty >> --- >> lib/librte_ether/rte_ethdev.c | 7 +++++++ >> lib/librte_ether/rte_ethdev.h | 8 ++++++++ >> lib/librte_ether/rte_ethdev_version.map | 1 + >> 3 files changed, 16 insertions(+) >> >> diff --git a/lib/librte_ether/rte_ethdev.c b/lib/librte_ether/rte_ethdev.c >> index 0b1e928..a3b0e4e 100644 >> --- a/lib/librte_ether/rte_ethdev.c >> +++ b/lib/librte_ether/rte_ethdev.c >> @@ -301,6 +301,13 @@ rte_eth_dev_socket_id(uint16_t port_id) >> return rte_eth_devices[port_id].data->numa_node; >> } >> >> +void * >> +rte_eth_dev_get_sec_ctx(uint8_t port_id) { >> + RTE_ETH_VALID_PORTID_OR_ERR_RET(port_id, NULL); >> + return rte_eth_devices[port_id].security_ctx; >> +} >> + >> uint16_t >> rte_eth_dev_count(void) >> { >> diff --git a/lib/librte_ether/rte_ethdev.h b/lib/librte_ether/rte_ethdev.h >> index b773589..119f7fc 100644 >> --- a/lib/librte_ether/rte_ethdev.h >> +++ b/lib/librte_ether/rte_ethdev.h >> @@ -180,6 +180,8 @@ extern "C" { >> #include >> #include >> #include >> +#include >> + >> #include "rte_ether.h" >> #include "rte_eth_ctrl.h" >> #include "rte_dev_info.h" >> @@ -963,6 +965,7 @@ struct rte_eth_conf { >> #define DEV_RX_OFFLOAD_CRC_STRIP 0x00001000 >> #define DEV_RX_OFFLOAD_SCATTER 0x00002000 >> #define DEV_RX_OFFLOAD_TIMESTAMP 0x00004000 >> +#define DEV_RX_OFFLOAD_SECURITY 0x00008000 > How application will control this offload on 17.11 ? > The PMDs are not yet moved to the new API, so crypto offload is going to be enabled by default with no way to disable? will be fixed in v6 > >> #define DEV_RX_OFFLOAD_CHECKSUM (DEV_RX_OFFLOAD_IPV4_CKSUM | >> \ >> DEV_RX_OFFLOAD_UDP_CKSUM | \ >> DEV_RX_OFFLOAD_TCP_CKSUM) >> @@ -998,6 +1001,7 @@ struct rte_eth_conf { >> * When set application must guarantee that per-queue all mbufs comes >> from >> * the same mempool and has refcnt = 1. >> */ >> +#define DEV_TX_OFFLOAD_SECURITY 0x00020000 > Same point here. > >> struct rte_pci_device; >> >> @@ -1741,8 +1745,12 @@ struct rte_eth_dev { >> */ >> struct rte_eth_rxtx_callback >> *pre_tx_burst_cbs[RTE_MAX_QUEUES_PER_PORT]; >> enum rte_eth_dev_state state; /**< Flag indicating the port state */ >> + void *security_ctx; /**< Context for security ops */ >> } __rte_cache_aligned; >> >> +void * >> +rte_eth_dev_get_sec_ctx(uint8_t port_id); >> + >> struct rte_eth_dev_sriov { >> uint8_t active; /**< SRIOV is active with 16, 32 or 64 pools */ >> uint8_t nb_q_per_pool; /**< rx queue number per pool */ >> diff --git a/lib/librte_ether/rte_ethdev_version.map >> b/lib/librte_ether/rte_ethdev_version.map >> index 57d9b54..e9681ac 100644 >> --- a/lib/librte_ether/rte_ethdev_version.map >> +++ b/lib/librte_ether/rte_ethdev_version.map >> @@ -191,6 +191,7 @@ DPDK_17.08 { >> DPDK_17.11 { >> global: >> >> + rte_eth_dev_get_sec_ctx; >> rte_eth_dev_pool_ops_supported; >> rte_eth_dev_reset; >> rte_flow_error_set; >> -- >> 2.9.3