[dpdk-dev] [PATCH] doc: announce IPsec xform struct changes

[dpdk-dev] [PATCH] doc: announce IPsec xform struct changes

[Anoob Joseph]

IPsec xform struct would be updated to include IPsec SA lifetime
configuration. The existing member 'esn_soft_limit' would only track
ESN. And as sequence number control is getting introduced,
'esn_soft_limit' may not indicate the number of packets processed.
Replace that with a new structure to cover all lifetime cases with
support for specifying both soft and hard lifetimes.

ESN control introduced by: http://patches.dpdk.org/project/dpdk/patch/20210713133542.3550525-4-radu.nicolau@intel.com/

Signed-off-by: Anoob Joseph <anoobj@marvell.com>
---
 doc/guides/rel_notes/deprecation.rst | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/doc/guides/rel_notes/deprecation.rst b/doc/guides/rel_notes/deprecation.rst
index 6a35c76..7dbc088 100644
--- a/doc/guides/rel_notes/deprecation.rst
+++ b/doc/guides/rel_notes/deprecation.rst
@@ -151,3 +151,8 @@ Deprecation Notices
 * security: The functions ``rte_security_set_pkt_metadata`` and
   ``rte_security_get_userdata`` will be made inline functions and additional
   flags will be added in structure ``rte_security_ctx`` in DPDK 21.11.
+
+* security: The IPsec configuration structure
+  ``struct rte_security_ipsec_xform`` will be updated with new members to allow
+  SA lifetime configuration. A new structure would be introduced to replace the
+  current member, ``esn_soft_limit``.
-- 
2.7.4

Re: [dpdk-dev] [PATCH] doc: announce IPsec xform struct changes

[Akhil Goyal]

> IPsec xform struct would be updated to include IPsec SA lifetime
> configuration. The existing member 'esn_soft_limit' would only track
> ESN. And as sequence number control is getting introduced,
> 'esn_soft_limit' may not indicate the number of packets processed.
> Replace that with a new structure to cover all lifetime cases with
> support for specifying both soft and hard lifetimes.
> 
> ESN control introduced by:
> http://patches.dpdk.org/project/dpdk/patch/20210713133542.3550525-4-
> radu.nicolau@intel.com/
> 
> Signed-off-by: Anoob Joseph <anoobj@marvell.com>
> ---
Acked-by: Akhil Goyal <gakhil@marvell.com>

@Konstantin Ananyev, @Hemant Agrawal: Could you please Ack.

Re: [dpdk-dev] [PATCH] doc: announce IPsec xform struct changes

[Ananyev, Konstantin]

> > IPsec xform struct would be updated to include IPsec SA lifetime
> > configuration. The existing member 'esn_soft_limit' would only track
> > ESN. And as sequence number control is getting introduced,
> > 'esn_soft_limit' may not indicate the number of packets processed.
> > Replace that with a new structure to cover all lifetime cases with
> > support for specifying both soft and hard lifetimes.
> >
> > ESN control introduced by:
> > http://patches.dpdk.org/project/dpdk/patch/20210713133542.3550525-4-
> > radu.nicolau@intel.com/
> >
> > Signed-off-by: Anoob Joseph <anoobj@marvell.com>
> > ---
> Acked-by: Akhil Goyal <gakhil@marvell.com>
> 

Acked-by: Konstantin Ananyev <konstantin.ananyev@intel.com>

Re: [dpdk-dev] [PATCH] doc: announce IPsec xform struct changes

[Jerin Jacob]

On Wed, Aug 4, 2021 at 11:05 PM Ananyev, Konstantin
<konstantin.ananyev@intel.com> wrote:
>
>
>
> > > IPsec xform struct would be updated to include IPsec SA lifetime
> > > configuration. The existing member 'esn_soft_limit' would only track
> > > ESN. And as sequence number control is getting introduced,
> > > 'esn_soft_limit' may not indicate the number of packets processed.
> > > Replace that with a new structure to cover all lifetime cases with
> > > support for specifying both soft and hard lifetimes.
> > >
> > > ESN control introduced by:
> > > http://patches.dpdk.org/project/dpdk/patch/20210713133542.3550525-4-
> > > radu.nicolau@intel.com/
> > >
> > > Signed-off-by: Anoob Joseph <anoobj@marvell.com>
> > > ---
> > Acked-by: Akhil Goyal <gakhil@marvell.com>
> >
>
> Acked-by: Konstantin Ananyev <konstantin.ananyev@intel.com>

Acked-by: Jerin Jacob <jerinj@marvell.com>

Re: [dpdk-dev] [PATCH] doc: announce IPsec xform struct changes

[Thomas Monjalon]

> > > > IPsec xform struct would be updated to include IPsec SA lifetime
> > > > configuration. The existing member 'esn_soft_limit' would only track
> > > > ESN. And as sequence number control is getting introduced,
> > > > 'esn_soft_limit' may not indicate the number of packets processed.
> > > > Replace that with a new structure to cover all lifetime cases with
> > > > support for specifying both soft and hard lifetimes.
> > > >
> > > > ESN control introduced by:
> > > > http://patches.dpdk.org/project/dpdk/patch/20210713133542.3550525-4-
> > > > radu.nicolau@intel.com/
> > > >
> > > > Signed-off-by: Anoob Joseph <anoobj@marvell.com>
> > > Acked-by: Akhil Goyal <gakhil@marvell.com>
> > Acked-by: Konstantin Ananyev <konstantin.ananyev@intel.com>
> Acked-by: Jerin Jacob <jerinj@marvell.com>

That's a lot of acks from Marvell but looks OK.

Applied, thanks.