[dpdk-dev] [PATCH v3 00/12] introduce security offload library

Akhil Goyal akhil.goyal at nxp.com
Tue Oct 10 14:22:27 CEST 2017


Hi Konstantin,
On 10/9/2017 7:19 PM, Ananyev, Konstantin wrote:
> 
> 
>> -----Original Message-----
>> From: Akhil Goyal [mailto:akhil.goyal at nxp.com]
>> Sent: Friday, October 6, 2017 7:12 PM
>> To: dev at dpdk.org
>> Cc: Doherty, Declan <declan.doherty at intel.com>; De Lara Guarch, Pablo <pablo.de.lara.guarch at intel.com>; hemant.agrawal at nxp.com;
>> Nicolau, Radu <radu.nicolau at intel.com>; borisp at mellanox.com; aviadye at mellanox.com; thomas at monjalon.net;
>> sandeep.malik at nxp.com; jerin.jacob at caviumnetworks.com; Mcnamara, John <john.mcnamara at intel.com>; Ananyev, Konstantin
>> <konstantin.ananyev at intel.com>; shahafs at mellanox.com; olivier.matz at 6wind.com
>> Subject: [PATCH v3 00/12] introduce security offload library
>>
>> This patchset introduce the rte_security library in DPDK.
>> This also includes the sample implementation of drivers and
>> changes in ipsec gateway application to demonstrate its usage.
>>
>>
>> rte_security library is implemented on the idea proposed earlier [1],[2],[3]
>> to support IPsec Inline and look aside crypto offload. Though
>> the current focus is only on IPsec protocol, but the library is
>> not limited to IPsec, it can be extended to other security
>> protocols e.g. MACSEC, PDCP or DTLS.
>>
>> In this library, crypto/ethernet devices can register itself to
>> the security library to support security offload.
>>
>> The library support 3 modes of operation
>> 1. full protocol offload using crypto devices.
>>     (RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL)
>> 2. inline ipsec using ethernet devices to perform crypto operations
>>     (RTE_SECURITY_ACTION_TYPE_INLINE_CRYPTO)
>> 3. full protocol offload using ethernet devices.
>>     (RTE_SECURITY_ACTION_TYPE_INLINE_PROTOCOL)
>>
>> The details for each mode is documented in the patchset in
>> doc/guides/prog_guide/rte_security.rst
>>
>> The modification in the application ipsec-secgw is also doocumented in
>> doc/guides/sample_app_ug/ipsec_secgw.rst
>>
>> This patchset is also available at:
>> git://dpdk.org/draft/dpdk-draft-ipsec
>> branch: integration
>>
>> changes in v3:
>> 1. fixed compilation for FreeBSD
>> 2. Incorporated comments from Pablo, John, Shahaf, Ananyev
> 
> As I can see, you didn't address any of my comments in v3.
> So please don't include my name here.
> Konstantin
> 
> 
This was a mistake on my part. I thought your comments on ethdev and 
ixgbe changes were taken care of. I would not repeat this in future.

-Akhil


More information about the dev mailing list