From mboxrd@z Thu Jan 1 00:00:00 1970 From: Akhil Goyal Subject: [RFC PATCH v2 0/4] IPSec Inline and look aside crypto offload Date: Tue, 15 Aug 2017 12:05:01 +0530 Message-ID: <20170815063505.22032-1-akhil.goyal@nxp.com> References: <20170725112153.29699-1-akhil.goyal@nxp.com> Mime-Version: 1.0 Content-Type: text/plain Cc: , , Akhil Goyal To: , , , , , , , Return-path: Received: from NAM01-BN3-obe.outbound.protection.outlook.com (mail-bn3nam01on0049.outbound.protection.outlook.com [104.47.33.49]) by dpdk.org (Postfix) with ESMTP id E9EB87D77 for ; Tue, 15 Aug 2017 08:37:03 +0200 (CEST) In-Reply-To: <20170725112153.29699-1-akhil.goyal@nxp.com> List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org Sender: "dev" This patchet showcases the definition and usage of the rte_security APIs described in the RFC v1 sent earlier. The data path and configuration path is similar to what was proposed in version 1. However, rte_security_configure API is removed, as it looked redundant. Also the rte_security.x files are placed inside the lib/librte_cryptodev/ as the APIs are defined with the help of crypto APIs and it makes more sense to extend the cryptodev library instead of a separate library which perform similar actions. Some of the parameters of the APIs are also modified for better usability. The parameter ``dev_name`` is removed as the appropriate device(crypto/eth) can be obtained by using the action type. The patchset is still in work in progress state and there may be some changes and cleanup in the next version. This is just to enable others to work in parallel on the crypto offloading using ethernet devices. This patchset include the definition of rte_security APIs in patch 1, changes required in cryptodev in patch 2, sample driver implementation in patch 3 and ipsec-secgw application changes in patch 4. Akhil Goyal (4): RFC2: rte_security: API definitions cryptodev: entend cryptodev to support security APIs crypto/dpaa2_sec: add support for protocol offload ipsec example/ipsec-secgw: add support for offloading crypto op drivers/crypto/dpaa2_sec/dpaa2_sec_dpseci.c | 368 ++++++++++++++++++++++++- drivers/crypto/dpaa2_sec/dpaa2_sec_priv.h | 33 +++ examples/ipsec-secgw/ipsec.c | 125 ++++++--- examples/ipsec-secgw/ipsec.h | 13 +- examples/ipsec-secgw/sa.c | 142 +++++++--- lib/librte_cryptodev/Makefile | 3 +- lib/librte_cryptodev/rte_crypto_sym.h | 15 + lib/librte_cryptodev/rte_cryptodev.h | 20 +- lib/librte_cryptodev/rte_cryptodev_pmd.h | 35 +++ lib/librte_cryptodev/rte_security.c | 171 ++++++++++++ lib/librte_cryptodev/rte_security.h | 409 ++++++++++++++++++++++++++++ 11 files changed, 1243 insertions(+), 91 deletions(-) create mode 100644 lib/librte_cryptodev/rte_security.c create mode 100644 lib/librte_cryptodev/rte_security.h -- 2.9.3