[dpdk-dev] [RFC PATCH v2 0/4] IPSec Inline and look aside crypto offload

Akhil Goyal akhil.goyal at nxp.com
Tue Aug 15 08:35:01 CEST 2017


This patchet showcases the definition and usage of the rte_security
APIs described in the RFC v1 sent earlier.

The data path and configuration path is similar to what was proposed in
version 1. However, rte_security_configure API is removed, as it looked
redundant.

Also the rte_security.x files are placed inside the lib/librte_cryptodev/
as the APIs are defined with the help of crypto APIs and it makes more sense
to extend the cryptodev library instead of a separate library which perform
similar actions.

Some of the parameters of the APIs are also modified for better usability.
The parameter ``dev_name`` is removed as the appropriate device(crypto/eth)
can be obtained by using the action type.

The patchset is still in work in progress state and there may be some changes
and cleanup in the next version. This is just to enable others to work
in parallel on the crypto offloading using ethernet devices.

This patchset include the definition of rte_security APIs in patch 1,
changes required in cryptodev in patch 2, sample driver implementation
in patch 3 and ipsec-secgw application changes in patch 4.

Akhil Goyal (4):
  RFC2: rte_security: API definitions
  cryptodev: entend cryptodev to support security APIs
  crypto/dpaa2_sec: add support for protocol offload ipsec
  example/ipsec-secgw: add support for offloading crypto op

 drivers/crypto/dpaa2_sec/dpaa2_sec_dpseci.c | 368 ++++++++++++++++++++++++-
 drivers/crypto/dpaa2_sec/dpaa2_sec_priv.h   |  33 +++
 examples/ipsec-secgw/ipsec.c                | 125 ++++++---
 examples/ipsec-secgw/ipsec.h                |  13 +-
 examples/ipsec-secgw/sa.c                   | 142 +++++++---
 lib/librte_cryptodev/Makefile               |   3 +-
 lib/librte_cryptodev/rte_crypto_sym.h       |  15 +
 lib/librte_cryptodev/rte_cryptodev.h        |  20 +-
 lib/librte_cryptodev/rte_cryptodev_pmd.h    |  35 +++
 lib/librte_cryptodev/rte_security.c         | 171 ++++++++++++
 lib/librte_cryptodev/rte_security.h         | 409 ++++++++++++++++++++++++++++
 11 files changed, 1243 insertions(+), 91 deletions(-)
 create mode 100644 lib/librte_cryptodev/rte_security.c
 create mode 100644 lib/librte_cryptodev/rte_security.h

-- 
2.9.3



More information about the dev mailing list