From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-0.8 required=3.0 tests=HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS,URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 7FA2DC4CEC9 for ; Wed, 18 Sep 2019 08:46:16 +0000 (UTC) Received: from dpdk.org (dpdk.org [92.243.14.124]) by mail.kernel.org (Postfix) with ESMTP id 1830D21897 for ; Wed, 18 Sep 2019 08:46:16 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 1830D21897 Authentication-Results: mail.kernel.org; dmarc=fail (p=none dis=none) header.from=intel.com Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=dev-bounces@dpdk.org Received: from [92.243.14.124] (localhost [127.0.0.1]) by dpdk.org (Postfix) with ESMTP id F2CA01BFFE; Wed, 18 Sep 2019 10:46:14 +0200 (CEST) Received: from mga05.intel.com (mga05.intel.com [192.55.52.43]) by dpdk.org (Postfix) with ESMTP id 6DA121BF93 for ; Wed, 18 Sep 2019 10:46:12 +0200 (CEST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga006.jf.intel.com ([10.7.209.51]) by fmsmga105.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 18 Sep 2019 01:46:11 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.64,520,1559545200"; d="scan'208";a="191657203" Received: from irsmsx110.ger.corp.intel.com ([163.33.3.25]) by orsmga006.jf.intel.com with ESMTP; 18 Sep 2019 01:46:09 -0700 Received: from irsmsx156.ger.corp.intel.com (10.108.20.68) by irsmsx110.ger.corp.intel.com (163.33.3.25) with Microsoft SMTP Server (TLS) id 14.3.439.0; Wed, 18 Sep 2019 09:46:08 +0100 Received: from irsmsx105.ger.corp.intel.com ([169.254.7.164]) by IRSMSX156.ger.corp.intel.com ([169.254.3.246]) with mapi id 14.03.0439.000; Wed, 18 Sep 2019 09:46:08 +0100 From: "Ananyev, Konstantin" To: Anoob Joseph , "Smoczynski, MarcinX" , "akhil.goyal@nxp.com" CC: "dev@dpdk.org" , Narayana Prasad Raju Athreya , Jerin Jacob Kollanukkaran , Archana Muniganti Thread-Topic: [dpdk-dev] [PATCH v2 0/3] examples/ipsec-secgw: add fallback session Thread-Index: AQHVbey4eK1ocoT+m02CjRaKZhOAgacxHZ4A Date: Wed, 18 Sep 2019 08:46:07 +0000 Message-ID: <2601191342CEEE43887BDE71AB9772580191966C6D@irsmsx105.ger.corp.intel.com> References: <20190814204847.15600-1-marcinx.smoczynski@intel.com> <20190904141642.14820-1-marcinx.smoczynski@intel.com> In-Reply-To: Accept-Language: en-IE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-titus-metadata-40: eyJDYXRlZ29yeUxhYmVscyI6IiIsIk1ldGFkYXRhIjp7Im5zIjoiaHR0cDpcL1wvd3d3LnRpdHVzLmNvbVwvbnNcL0ludGVsMyIsImlkIjoiNDlkMjdmNDktODRmYS00ZjM1LWE4YWItZGQzNGY2ZThkODRjIiwicHJvcHMiOlt7Im4iOiJDVFBDbGFzc2lmaWNhdGlvbiIsInZhbHMiOlt7InZhbHVlIjoiQ1RQX05UIn1dfV19LCJTdWJqZWN0TGFiZWxzIjpbXSwiVE1DVmVyc2lvbiI6IjE3LjEwLjE4MDQuNDkiLCJUcnVzdGVkTGFiZWxIYXNoIjoicHZhZGVFRjZCYXpJS2ZtNzJSU3BUbFRQWDcwblVqTEtZMmFsSmJqZmF2bGFEY2RtRlFSWktwdkRpZWNXVXNcL1MifQ== x-ctpclassification: CTP_NT dlp-product: dlpe-windows dlp-version: 11.2.0.6 dlp-reaction: no-action x-originating-ip: [163.33.239.180] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [dpdk-dev] [PATCH v2 0/3] examples/ipsec-secgw: add fallback session X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org Sender: "dev" Hi Anoob, >=20 > Hi Marcin, >=20 > Sorry for the late response. But how do you plan to handle "inline protoc= ol" processed packets? Right now that feature is supported for "inline crypto" only. For the case when SA doesn't enable replay window and/or ESN current patch should also work for "inline proto" too, but this is just my understanding (not tested, etc.).=20 Konstantin >=20 > Thanks, > Anoob >=20 > > -----Original Message----- > > From: dev On Behalf Of Marcin Smoczynski > > Sent: Wednesday, September 4, 2019 7:47 PM > > To: konstantin.ananyev@intel.com; akhil.goyal@nxp.com > > Cc: dev@dpdk.org; Marcin Smoczynski > > Subject: [dpdk-dev] [PATCH v2 0/3] examples/ipsec-secgw: add fallback > > session > > > > Inline processing is limited to a specified subset of traffic. It is of= ten unable to > > handle more complicated situations, such as fragmented traffic. When us= ing > > inline processing such traffic is dropped. > > > > Introduce multiple sessions per SA allowing to configure a fallback loo= kaside > > session for packets that normally would be dropped. > > A fallback session type in the SA configuration by adding 'fallback' > > with 'lookaside-none' or 'lookaside-protocol' parameter to determine ty= pe of > > session. > > > > Fallback session feature is available only when using librte_ipsec. > > > > v1 to v2 changes: > > - disable fallback offload for outbound SAs > > - add test scripts > > > > Marcin Smoczynski (3): > > examples/ipsec-secgw: ipsec_sa structure cleanup > > examples/ipsec-secgw: add fallback session feature > > examples/ipsec-secgw: add offload fallback tests > > > > doc/guides/sample_app_ug/ipsec_secgw.rst | 17 +- > > examples/ipsec-secgw/esp.c | 35 ++-- > > examples/ipsec-secgw/ipsec-secgw.c | 16 +- > > examples/ipsec-secgw/ipsec.c | 99 ++++++----- > > examples/ipsec-secgw/ipsec.h | 61 +++++-- > > examples/ipsec-secgw/ipsec_process.c | 113 +++++++----- > > examples/ipsec-secgw/sa.c | 164 +++++++++++++----- > > .../test/trs_aesgcm_common_defs.sh | 4 +- > > .../trs_aesgcm_inline_crypto_fallback_defs.sh | 5 + > > .../test/tun_aesgcm_common_defs.sh | 6 +- > > .../tun_aesgcm_inline_crypto_fallback_defs.sh | 5 + > > 11 files changed, 358 insertions(+), 167 deletions(-) create mode 100= 644 > > examples/ipsec-secgw/test/trs_aesgcm_inline_crypto_fallback_defs.sh > > create mode 100644 examples/ipsec- > > secgw/test/tun_aesgcm_inline_crypto_fallback_defs.sh > > > > -- > > 2.21.0.windows.1