NAME

       rte_security_capability

SYNOPSIS

       #include <rte_security.h>

   Data Fields
       enum rte_security_session_action_type action
       enum rte_security_session_protocol protocol
       const struct rte_cryptodev_capabilities * crypto_capabilities
       uint32_t ol_flags

Detailed Description

       Security capability definition

       Definition at line 1247 of file rte_security.h.

Field Documentation

   enum rte_security_session_action_type action
       Security action type

       Definition at line 1248 of file rte_security.h.

   enum rte_security_session_protocol protocol
       Security protocol

       Definition at line 1250 of file rte_security.h.

   enum rte_security_ipsec_sa_protocol proto
       IPsec SA protocol

       Definition at line 1254 of file rte_security.h.

   enum rte_security_ipsec_sa_mode mode
       IPsec SA mode

       Definition at line 1256 of file rte_security.h.

   enum rte_security_ipsec_sa_direction direction
       IPsec SA direction

       Definition at line 1258 of file rte_security.h.

   struct rte_security_ipsec_sa_options options
       IPsec SA supported options

       Definition at line 1260 of file rte_security.h.

   uint32_t replay_win_sz_max
       IPsec Anti Replay Window Size. A '0' value indicates that Anti Replay is not supported.

       Definition at line 1262 of file rte_security.h.

   struct  { ... }  ipsec
       IPsec capability

   uint16_t mtu
       MTU supported for inline TX

       Definition at line 1270 of file rte_security.h.

   enum rte_security_macsec_alg alg
       MACsec algorithm to be used

       Definition at line 1272 of file rte_security.h.

   uint16_t max_nb_sc
       Maximum number of secure channels supported

       Definition at line 1274 of file rte_security.h.

   uint16_t max_nb_sa
       Maximum number of SAs supported

       Definition at line 1276 of file rte_security.h.

   uint16_t max_nb_sess
       Maximum number of SAs supported

       Definition at line 1278 of file rte_security.h.

   uint32_t replay_win_sz
       MACsec anti replay window size

       Definition at line 1280 of file rte_security.h.

   uint16_t relative_sectag_insert
       Support Sectag insertion at relative offset

       Definition at line 1282 of file rte_security.h.

   uint16_t fixed_sectag_insert
       Support Sectag insertion at fixed offset

       Definition at line 1284 of file rte_security.h.

   uint16_t icv_include_da_sa
       ICV includes source and destination MAC addresses

       Definition at line 1286 of file rte_security.h.

   uint16_t ctrl_port_enable
       Control port traffic is supported

       Definition at line 1288 of file rte_security.h.

   uint16_t preserve_sectag
       Do not strip SecTAG after processing

       Definition at line 1290 of file rte_security.h.

   uint16_t preserve_icv
       Do not strip ICV from the packet after processing

       Definition at line 1292 of file rte_security.h.

   uint16_t validate_frames
       Support frame validation as per RTE_SECURITY_MACSEC_VALIDATE_*

       Definition at line 1294 of file rte_security.h.

   uint16_t re_key
       support re-keying on SA expiry

       Definition at line 1296 of file rte_security.h.

   uint16_t anti_replay
       support anti replay

       Definition at line 1298 of file rte_security.h.

   uint16_t reserved
       Reserved bitfields for future capabilities

       Definition at line 1300 of file rte_security.h.

   struct  { ... }  macsec
       MACsec capability

   enum rte_security_pdcp_domain domain
       PDCP mode of operation: Control or data

       Definition at line 1304 of file rte_security.h.

   uint32_t capa_flags
       Capability flags, see RTE_SECURITY_PDCP_*

       Definition at line 1306 of file rte_security.h.

   struct  { ... }  pdcp
       PDCP capability

   enum rte_security_docsis_direction direction
       DOCSIS direction

       Definition at line 1311 of file rte_security.h.

   struct  { ... }  docsis
       DOCSIS capability

   enum rte_security_tls_version ver
       TLS record version.

       Definition at line 1316 of file rte_security.h.

   enum rte_security_tls_sess_type type
       TLS record session type.

       Definition at line 1318 of file rte_security.h.

   uint32_t ar_win_size
       Maximum anti replay window size supported for DTLS 1.2 record read operation. Value of 0 means anti
       replay check is not supported.

       Definition at line 1320 of file rte_security.h.

   struct  { ... }  tls_record
       TLS record capability

   const struct rte_cryptodev_capabilities* crypto_capabilities
       Corresponding crypto capabilities for security capability

       Definition at line 1328 of file rte_security.h.

   uint32_t ol_flags
       Device offload flags

       Definition at line 1331 of file rte_security.h.

Author

       Generated automatically by Doxygen for DPDK from the source code.

DPDK                                             Version 24.11.2                      rte_security_capability(3)