165bb658 | 10-Oct-2023 |
Anoob Joseph <anoobj@marvell.com> |
security: add fallback security processing and Rx inject
Add alternate datapath API for security processing which would do Rx injection (similar to loopback) after successful security processing.
W
security: add fallback security processing and Rx inject
Add alternate datapath API for security processing which would do Rx injection (similar to loopback) after successful security processing.
With inline protocol offload, variable part of the session context (AR windows, lifetime etc in case of IPsec), is not accessible to the application. If packets are not getting processed in the inline path due to non security reasons (such as outer fragmentation or rte_flow packet steering limitations), then the packet cannot be security processed as the session context is private to the PMD and security library doesn't provide alternate APIs to make use of the same session.
Introduce new API and Rx injection as fallback mechanism to security processing failures due to non-security reasons. For example, when there is outer fragmentation and PMD doesn't support reassembly of outer fragments, application would receive fragments which it can then reassemble. Post successful reassembly, packet can be submitted for security processing and Rx inject. The packets can be then received in the application as normal inline protocol processed packets.
Same API can be leveraged in lookaside protocol offload mode to inject packet to Rx. This would help in using rte_flow based packet parsing after security processing. For example, with IPsec, this will help in flow splitting after IPsec processing is done.
In both inline protocol capable ethdevs and lookaside protocol capable cryptodevs, the packet would be received back in eth port & queue based on rte_flow rules and packet parsing after security processing. The API would behave like a loopback but with the additional security processing.
Signed-off-by: Anoob Joseph <anoobj@marvell.com> Signed-off-by: Vidya Sagar Velumuri <vvelumuri@marvell.com> Acked-by: Akhil Goyal <gakhil@marvell.com>
show more ...
|
4728d843 | 21-Aug-2023 |
Ciara Power <ciara.power@intel.com> |
common/qat: enable QAT 2.0c devices
This commit enables QAT 2.0c devices in the Intel QuickAssist Technology PMD. These are 4th Generation QAT, 402xx devices.
Signed-off-by: Ciara Power <ciara.powe
common/qat: enable QAT 2.0c devices
This commit enables QAT 2.0c devices in the Intel QuickAssist Technology PMD. These are 4th Generation QAT, 402xx devices.
Signed-off-by: Ciara Power <ciara.power@intel.com> Acked-by: Brian Dooley <brian.dooley@intel.com>
show more ...
|
4a39be2e | 16-May-2023 |
Samina Arshad <samina.arshad@intel.com> |
doc: update libcrypto dependencies for QAT
The documentation needs extra steps for customers to explicitly show how to install libcrypto, which is needed for QAT. It requires the commands to install
doc: update libcrypto dependencies for QAT
The documentation needs extra steps for customers to explicitly show how to install libcrypto, which is needed for QAT. It requires the commands to install libcrypto for Ubuntu and RHEL.
Signed-off-by: Samina Arshad <samina.arshad@intel.com> Acked-by: Ciara Power <ciara.power@intel.com>
show more ...
|
4990483a | 20-Jun-2023 |
Ruifeng Wang <ruifeng.wang@arm.com> |
doc: update IPsec Multi-buffer version for Arm
Updated SNOW3G and ZUC PMD documentation guides with information about the latest library version supported.
Signed-off-by: Ruifeng Wang <ruifeng.wang
doc: update IPsec Multi-buffer version for Arm
Updated SNOW3G and ZUC PMD documentation guides with information about the latest library version supported.
Signed-off-by: Ruifeng Wang <ruifeng.wang@arm.com>
show more ...
|