FD.io VPP  v21.01.1
Vector Packet Processing
ipsec.h File Reference
+ Include dependency graph for ipsec.h:
+ This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Data Structures

struct  ipsec_ah_backend_t
 
struct  ipsec_esp_backend_t
 
struct  ipsec_main_crypto_alg_t
 
struct  ipsec_main_integ_alg_t
 
struct  ipsec_per_thread_data_t
 
struct  ipsec_main_t
 

Typedefs

typedef clib_error_t *(* add_del_sa_sess_cb_t) (u32 sa_index, u8 is_add)
 
typedef clib_error_t *(* check_support_cb_t) (ipsec_sa_t *sa)
 
typedef clib_error_t *(* enable_disable_cb_t) (int is_enable)
 
typedef enum ipsec_format_flags_t_ ipsec_format_flags_t
 

Enumerations

enum  ipsec_format_flags_t_ { IPSEC_FORMAT_BRIEF = 0, IPSEC_FORMAT_DETAIL = (1 << 0), IPSEC_FORMAT_INSECURE = (1 << 1) }
 

Functions

clib_error_tipsec_add_del_sa_sess_cb (ipsec_main_t *im, u32 sa_index, u8 is_add)
 
clib_error_tipsec_check_support_cb (ipsec_main_t *im, ipsec_sa_t *sa)
 
u8format_ipsec_replay_window (u8 *s, va_list *args)
 
static_always_inline u32 get_next_output_feature_node_index (vlib_buffer_t *b, vlib_node_runtime_t *nr)
 
u32 ipsec_register_ah_backend (vlib_main_t *vm, ipsec_main_t *im, const char *name, const char *ah4_encrypt_node_name, const char *ah4_decrypt_node_name, const char *ah6_encrypt_node_name, const char *ah6_decrypt_node_name, check_support_cb_t ah_check_support_cb, add_del_sa_sess_cb_t ah_add_del_sa_sess_cb)
 
u32 ipsec_register_esp_backend (vlib_main_t *vm, ipsec_main_t *im, const char *name, const char *esp4_encrypt_node_name, const char *esp4_encrypt_tun_node_name, const char *esp4_decrypt_node_name, const char *esp4_decrypt_tun_node_name, const char *esp6_encrypt_node_name, const char *esp6_encrypt_tun_node_name, const char *esp6_decrypt_node_name, const char *esp6_decrypt_tun_node_name, check_support_cb_t esp_check_support_cb, add_del_sa_sess_cb_t esp_add_del_sa_sess_cb, enable_disable_cb_t enable_disable_cb)
 
int ipsec_select_ah_backend (ipsec_main_t *im, u32 ah_backend_idx)
 
int ipsec_select_esp_backend (ipsec_main_t *im, u32 esp_backend_idx)
 
clib_error_tipsec_rsc_in_use (ipsec_main_t *im)
 
void ipsec_set_async_mode (u32 is_enabled)
 
static ipsec_sa_tipsec_sa_get (u32 sa_index)
 
void ipsec_add_feature (const char *arc_name, const char *node_name, u32 *out_feature_index)
 
void ipsec_register_udp_port (u16 udp_port)
 
void ipsec_unregister_udp_port (u16 udp_port)
 

Variables

ipsec_main_t ipsec_main
 
vlib_node_registration_t ah4_encrypt_node
 (constructor) VLIB_REGISTER_NODE (ah4_encrypt_node) More...
 
vlib_node_registration_t ah4_decrypt_node
 (constructor) VLIB_REGISTER_NODE (ah4_decrypt_node) More...
 
vlib_node_registration_t ah6_encrypt_node
 (constructor) VLIB_REGISTER_NODE (ah6_encrypt_node) More...
 
vlib_node_registration_t ah6_decrypt_node
 (constructor) VLIB_REGISTER_NODE (ah6_decrypt_node) More...
 
vlib_node_registration_t esp4_encrypt_node
 (constructor) VLIB_REGISTER_NODE (esp4_encrypt_node) More...
 
vlib_node_registration_t esp4_decrypt_node
 (constructor) VLIB_REGISTER_NODE (esp4_decrypt_node) More...
 
vlib_node_registration_t esp6_encrypt_node
 (constructor) VLIB_REGISTER_NODE (esp6_encrypt_node) More...
 
vlib_node_registration_t esp6_decrypt_node
 (constructor) VLIB_REGISTER_NODE (esp6_decrypt_node) More...
 
vlib_node_registration_t esp4_encrypt_tun_node
 (constructor) VLIB_REGISTER_NODE (esp4_encrypt_tun_node) More...
 
vlib_node_registration_t esp6_encrypt_tun_node
 (constructor) VLIB_REGISTER_NODE (esp6_encrypt_tun_node) More...
 
vlib_node_registration_t esp4_decrypt_tun_node
 (constructor) VLIB_REGISTER_NODE (esp4_decrypt_tun_node) More...
 
vlib_node_registration_t esp6_decrypt_tun_node
 (constructor) VLIB_REGISTER_NODE (esp6_decrypt_tun_node) More...
 
vlib_node_registration_t ipsec4_tun_input_node
 (constructor) VLIB_REGISTER_NODE (ipsec4_tun_input_node) More...
 
vlib_node_registration_t ipsec6_tun_input_node
 (constructor) VLIB_REGISTER_NODE (ipsec6_tun_input_node) More...
 

Typedef Documentation

◆ add_del_sa_sess_cb_t

typedef clib_error_t*(* add_del_sa_sess_cb_t) (u32 sa_index, u8 is_add)

Definition at line 33 of file ipsec.h.

◆ check_support_cb_t

typedef clib_error_t*(* check_support_cb_t) (ipsec_sa_t *sa)

Definition at line 34 of file ipsec.h.

◆ enable_disable_cb_t

typedef clib_error_t*(* enable_disable_cb_t) (int is_enable)

Definition at line 35 of file ipsec.h.

◆ ipsec_format_flags_t

Enumeration Type Documentation

◆ ipsec_format_flags_t_

Enumerator
IPSEC_FORMAT_BRIEF 
IPSEC_FORMAT_DETAIL 
IPSEC_FORMAT_INSECURE 

Definition at line 210 of file ipsec.h.

Function Documentation

◆ format_ipsec_replay_window()

u8* format_ipsec_replay_window ( u8 s,
va_list *  args 
)

Definition at line 143 of file ipsec_format.c.

+ Here is the caller graph for this function:

◆ get_next_output_feature_node_index()

static_always_inline u32 get_next_output_feature_node_index ( vlib_buffer_t b,
vlib_node_runtime_t nr 
)

Definition at line 249 of file ipsec.h.

+ Here is the call graph for this function:

◆ ipsec_add_del_sa_sess_cb()

clib_error_t* ipsec_add_del_sa_sess_cb ( ipsec_main_t im,
u32  sa_index,
u8  is_add 
)

Definition at line 69 of file ipsec.c.

◆ ipsec_add_feature()

void ipsec_add_feature ( const char *  arc_name,
const char *  node_name,
u32 out_feature_index 
)

Definition at line 128 of file ipsec.c.

+ Here is the call graph for this function:
+ Here is the caller graph for this function:

◆ ipsec_check_support_cb()

clib_error_t* ipsec_check_support_cb ( ipsec_main_t im,
ipsec_sa_t sa 
)

Definition at line 91 of file ipsec.c.

+ Here is the caller graph for this function:

◆ ipsec_register_ah_backend()

u32 ipsec_register_ah_backend ( vlib_main_t vm,
ipsec_main_t im,
const char *  name,
const char *  ah4_encrypt_node_name,
const char *  ah4_decrypt_node_name,
const char *  ah6_encrypt_node_name,
const char *  ah6_decrypt_node_name,
check_support_cb_t  ah_check_support_cb,
add_del_sa_sess_cb_t  ah_add_del_sa_sess_cb 
)

Definition at line 183 of file ipsec.c.

+ Here is the call graph for this function:
+ Here is the caller graph for this function:

◆ ipsec_register_esp_backend()

u32 ipsec_register_esp_backend ( vlib_main_t vm,
ipsec_main_t im,
const char *  name,
const char *  esp4_encrypt_node_name,
const char *  esp4_encrypt_tun_node_name,
const char *  esp4_decrypt_node_name,
const char *  esp4_decrypt_tun_node_name,
const char *  esp6_encrypt_node_name,
const char *  esp6_encrypt_tun_node_name,
const char *  esp6_decrypt_node_name,
const char *  esp6_decrypt_tun_node_name,
check_support_cb_t  esp_check_support_cb,
add_del_sa_sess_cb_t  esp_add_del_sa_sess_cb,
enable_disable_cb_t  enable_disable_cb 
)

Definition at line 211 of file ipsec.c.

+ Here is the call graph for this function:
+ Here is the caller graph for this function:

◆ ipsec_register_udp_port()

void ipsec_register_udp_port ( u16  udp_port)

Definition at line 164 of file ipsec.c.

+ Here is the call graph for this function:
+ Here is the caller graph for this function:

◆ ipsec_rsc_in_use()

clib_error_t* ipsec_rsc_in_use ( ipsec_main_t im)

Definition at line 258 of file ipsec.c.

+ Here is the call graph for this function:
+ Here is the caller graph for this function:

◆ ipsec_sa_get()

static ipsec_sa_t* ipsec_sa_get ( u32  sa_index)
inlinestatic

Definition at line 290 of file ipsec.h.

+ Here is the call graph for this function:
+ Here is the caller graph for this function:

◆ ipsec_select_ah_backend()

int ipsec_select_ah_backend ( ipsec_main_t im,
u32  ah_backend_idx 
)

Definition at line 270 of file ipsec.c.

+ Here is the call graph for this function:
+ Here is the caller graph for this function:

◆ ipsec_select_esp_backend()

int ipsec_select_esp_backend ( ipsec_main_t im,
u32  esp_backend_idx 
)

Definition at line 293 of file ipsec.c.

+ Here is the call graph for this function:
+ Here is the caller graph for this function:

◆ ipsec_set_async_mode()

void ipsec_set_async_mode ( u32  is_enabled)

Definition at line 339 of file ipsec.c.

+ Here is the call graph for this function:
+ Here is the caller graph for this function:

◆ ipsec_unregister_udp_port()

void ipsec_unregister_udp_port ( u16  udp_port)

Definition at line 139 of file ipsec.c.

+ Here is the call graph for this function:
+ Here is the caller graph for this function:

Variable Documentation

◆ ah4_decrypt_node

vlib_node_registration_t ah4_decrypt_node

(constructor) VLIB_REGISTER_NODE (ah4_decrypt_node)

Definition at line 429 of file ah_decrypt.c.

◆ ah4_encrypt_node

vlib_node_registration_t ah4_encrypt_node

(constructor) VLIB_REGISTER_NODE (ah4_encrypt_node)

Definition at line 452 of file ah_encrypt.c.

◆ ah6_decrypt_node

vlib_node_registration_t ah6_decrypt_node

(constructor) VLIB_REGISTER_NODE (ah6_decrypt_node)

Definition at line 456 of file ah_decrypt.c.

◆ ah6_encrypt_node

vlib_node_registration_t ah6_encrypt_node

(constructor) VLIB_REGISTER_NODE (ah6_encrypt_node)

Definition at line 478 of file ah_encrypt.c.

◆ esp4_decrypt_node

vlib_node_registration_t esp4_decrypt_node

(constructor) VLIB_REGISTER_NODE (esp4_decrypt_node)

Definition at line 1441 of file esp_decrypt.c.

◆ esp4_decrypt_tun_node

vlib_node_registration_t esp4_decrypt_tun_node

(constructor) VLIB_REGISTER_NODE (esp4_decrypt_tun_node)

Definition at line 1503 of file esp_decrypt.c.

◆ esp4_encrypt_node

vlib_node_registration_t esp4_encrypt_node

(constructor) VLIB_REGISTER_NODE (esp4_encrypt_node)

Definition at line 1104 of file esp_encrypt.c.

◆ esp4_encrypt_tun_node

vlib_node_registration_t esp4_encrypt_tun_node

(constructor) VLIB_REGISTER_NODE (esp4_encrypt_tun_node)

Definition at line 1194 of file esp_encrypt.c.

◆ esp6_decrypt_node

vlib_node_registration_t esp6_decrypt_node

(constructor) VLIB_REGISTER_NODE (esp6_decrypt_node)

Definition at line 1472 of file esp_decrypt.c.

◆ esp6_decrypt_tun_node

vlib_node_registration_t esp6_decrypt_tun_node

(constructor) VLIB_REGISTER_NODE (esp6_decrypt_tun_node)

Definition at line 1532 of file esp_decrypt.c.

◆ esp6_encrypt_node

vlib_node_registration_t esp6_encrypt_node

(constructor) VLIB_REGISTER_NODE (esp6_encrypt_node)

Definition at line 1153 of file esp_encrypt.c.

◆ esp6_encrypt_tun_node

vlib_node_registration_t esp6_encrypt_tun_node

(constructor) VLIB_REGISTER_NODE (esp6_encrypt_tun_node)

Definition at line 1242 of file esp_encrypt.c.

◆ ipsec4_tun_input_node

vlib_node_registration_t ipsec4_tun_input_node

(constructor) VLIB_REGISTER_NODE (ipsec4_tun_input_node)

Definition at line 373 of file ipsec_tun_in.c.

◆ ipsec6_tun_input_node

vlib_node_registration_t ipsec6_tun_input_node

(constructor) VLIB_REGISTER_NODE (ipsec6_tun_input_node)

Definition at line 396 of file ipsec_tun_in.c.

◆ ipsec_main

ipsec_main_t ipsec_main

Definition at line 28 of file ipsec.c.