[dpdk-dev] [PATCH v2 1/2] examples/ipsec-secgw: fix SAD selection logic

Akhil Goyal akhil.goyal at nxp.com
Tue Oct 15 15:53:37 CEST 2019


> 
> Ok, so to confirm:
> Your only issue here is that patch is that we have to split ipsec-secgw SADB into
> two?
> 
> No objections to other part:
> - search for given SPI value across both SPDs (IPv4 and IPv6)
>  - for each positive result create a new SA.
> So if we have same SPI in both IPv4 and IPv6 SPDs instead of one SA that
> would be referred by both SPD tables (current situation),
> we will create 2 independent SAs - one for IPv4, second for IPv6.
> For each one a separate rte_security/crypto session will be created and
> programmed.
> ?
> 
> Because, I think that part will still be needed even when will have new SAD in
> place.
Agreed.

> Konstantin
> 



More information about the dev mailing list