[dpdk-dev] [PATCH v3 00/12] introduce security offload library

Ananyev, Konstantin konstantin.ananyev at intel.com
Mon Oct 9 15:49:15 CEST 2017



> -----Original Message-----
> From: Akhil Goyal [mailto:akhil.goyal at nxp.com]
> Sent: Friday, October 6, 2017 7:12 PM
> To: dev at dpdk.org
> Cc: Doherty, Declan <declan.doherty at intel.com>; De Lara Guarch, Pablo <pablo.de.lara.guarch at intel.com>; hemant.agrawal at nxp.com;
> Nicolau, Radu <radu.nicolau at intel.com>; borisp at mellanox.com; aviadye at mellanox.com; thomas at monjalon.net;
> sandeep.malik at nxp.com; jerin.jacob at caviumnetworks.com; Mcnamara, John <john.mcnamara at intel.com>; Ananyev, Konstantin
> <konstantin.ananyev at intel.com>; shahafs at mellanox.com; olivier.matz at 6wind.com
> Subject: [PATCH v3 00/12] introduce security offload library
> 
> This patchset introduce the rte_security library in DPDK.
> This also includes the sample implementation of drivers and
> changes in ipsec gateway application to demonstrate its usage.
> 
> 
> rte_security library is implemented on the idea proposed earlier [1],[2],[3]
> to support IPsec Inline and look aside crypto offload. Though
> the current focus is only on IPsec protocol, but the library is
> not limited to IPsec, it can be extended to other security
> protocols e.g. MACSEC, PDCP or DTLS.
> 
> In this library, crypto/ethernet devices can register itself to
> the security library to support security offload.
> 
> The library support 3 modes of operation
> 1. full protocol offload using crypto devices.
>    (RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL)
> 2. inline ipsec using ethernet devices to perform crypto operations
>    (RTE_SECURITY_ACTION_TYPE_INLINE_CRYPTO)
> 3. full protocol offload using ethernet devices.
>    (RTE_SECURITY_ACTION_TYPE_INLINE_PROTOCOL)
> 
> The details for each mode is documented in the patchset in
> doc/guides/prog_guide/rte_security.rst
> 
> The modification in the application ipsec-secgw is also doocumented in
> doc/guides/sample_app_ug/ipsec_secgw.rst
> 
> This patchset is also available at:
> git://dpdk.org/draft/dpdk-draft-ipsec
> branch: integration
> 
> changes in v3:
> 1. fixed compilation for FreeBSD
> 2. Incorporated comments from Pablo, John, Shahaf, Ananyev

As I can see, you didn't address any of my comments in v3.
So please don't include my name here.
Konstantin



More information about the dev mailing list