[dpdk-users] pfsense ipsec traffic decryption

[avatli at itu.edu.tr]

Hello

Briefly, a host connects to a pfsense gateway and the traffic from
the host is encrypted with IPSec Tunnel mode, so I just need to know
how to decrypt the ESP traffic using DPDK. Is it possible?

If it makes any sense, I copied the pfsense configuration below

<phase1>
     <ikeid>1</ikeid>
     <iketype>ikev1</iketype>
     <mode>main</mode>
     <interface>wan</interface>
     <remote-gateway>172.10.10.30</remote-gateway>
     <protocol>inet</protocol>
     <myid_type>myaddress</myid_type>
     <myid_data></myid_data>
     <peerid_type>peeraddress</peerid_type>
     <peerid_data></peerid_data>
     <encryption-algorithm>
          <name>aes</name>
          <keylen>256</keylen>
     </encryption-algorithm>
     <hash-algorithm>sha1</hash-algorithm>
     <dhgroup>2</dhgroup>
     <lifetime>28800</lifetime>
     <pre-shared-key>test123</pre-shared-key>
     <private-key></private-key>
     <certref></certref>
     <caref></caref>
     <authentication_method>pre_shared_key</authentication_method>
     <descr></descr>
     <nat_traversal>on</nat_traversal>
     <mobike>off</mobike>
     <rekey_enable></rekey_enable>
     <dpd_delay>10</dpd_delay>
     <dpd_maxfail>5</dpd_maxfail>
</phase1>
<phase2>
     <ikeid>1</ikeid>
     <uniqid>5cc05cd15ce0c</uniqid>
     <mode>tunnel</mode>
     <reqid>1</reqid>
     <localid>
          <type>network</type>
          <address>0.0.0.0</address>
          <netbits>0</netbits>
     </localid>
     <remoteid>
          <type>network</type>
          <address>10.30.30.0</address>
          <netbits>24</netbits>
     </remoteid>
     <protocol>esp</protocol>
     <encryption-algorithm-option>
          <name>aes</name>
          <keylen>auto</keylen>
     </encryption-algorithm-option>
     <hash-algorithm-option>hmac_sha1</hash-algorithm-option>
     <pfsgroup>0</pfsgroup>
     <lifetime>3600</lifetime>
     <pinghost></pinghost>
     <descr></descr>
</phase2>


Thanks in advance

- Volkan