From d4c3666b9aef1050796677320460dee2df44a830 Mon Sep 17 00:00:00 2001 From: Chenmin Sun Date: Mon, 22 Jun 2020 18:21:31 +0800 Subject: flow: add IPSec ESP/AH flow This patch adds the IPSec ESP/AH type flow support Have tested on E810 with Intel iAVF driver Type: feature Signed-off-by: Chenmin Sun Change-Id: I6ab8e69f67c423cc4e33f3c363881a97cdb98c30 --- src/vnet/flow/flow.h | 14 ++++++++++++++ 1 file changed, 14 insertions(+) (limited to 'src/vnet/flow/flow.h') diff --git a/src/vnet/flow/flow.h b/src/vnet/flow/flow.h index a880b8a69be..b5ec7ccd142 100644 --- a/src/vnet/flow/flow.h +++ b/src/vnet/flow/flow.h @@ -33,6 +33,8 @@ _(IP6_N_TUPLE_TAGGED, ip6_n_tuple_tagged, "ipv6-n-tuple-tagged") \ /* IP tunnel flow */ \ _(IP4_L2TPV3OIP, ip4_l2tpv3oip, "ipv4-l2tpv3oip") \ + _(IP4_IPSEC_ESP, ip4_ipsec_esp, "ipv4-ipsec-esp") \ + _(IP4_IPSEC_AH, ip4_ipsec_ah, "ipv4-ipsec-ah") \ /* L4 tunnel flow*/ \ _(IP4_VXLAN, ip4_vxlan, "ipv4-vxlan") \ _(IP6_VXLAN, ip6_vxlan, "ipv6-vxlan") \ @@ -82,6 +84,18 @@ _fe(ip_protocol_t, protocol) \ _fe(u32, session_id) +#define foreach_flow_entry_ip4_ipsec_esp \ + _fe(ip4_address_and_mask_t, src_addr) \ + _fe(ip4_address_and_mask_t, dst_addr) \ + _fe(ip_protocol_t, protocol) \ + _fe(u32, spi) + +#define foreach_flow_entry_ip4_ipsec_ah \ + _fe(ip4_address_and_mask_t, src_addr) \ + _fe(ip4_address_and_mask_t, dst_addr) \ + _fe(ip_protocol_t, protocol) \ + _fe(u32, spi) + #define foreach_flow_entry_ip4_vxlan \ _fe(ip4_address_t, src_addr) \ _fe(ip4_address_t, dst_addr) \ -- cgit 1.2.3-korg