LIFE(3)

📦 version 26.03, in nixos 26.05, nixpkgs unstable

💅 rte_security_ipsec_xform(3) — Library Functions Manual 🎀

okay bestie, so this is the manual page for rte_security_ipsec_xform, and honestly? it's kind of the main character of IPsec session setup. it's a struct, not a function (the manpage name is lying a little, we don't gatekeep), and it lives in the Library Functions Manual. let's get into it ✨

🌸 NAME 🌸

rte_security_ipsec_xform — the struct that holds all the configuration data for an IPsec security association ✨ lowkey it's the blueprint, the vibe check, the whole personality of your SA.

🦋 SYNOPSIS 🦋

#include <rte_security.h>

🎀 Data Fields 🎀

here's the squad, in order, no cap:

uint32_t spi
uint32_t salt
struct rte_security_ipsec_sa_options options
enum rte_security_ipsec_sa_direction direction
enum rte_security_ipsec_sa_protocol proto
enum rte_security_ipsec_sa_mode mode
struct rte_security_ipsec_tunnel_param tunnel
struct rte_security_ipsec_lifetime life
uint32_t replay_win_sz
union {
} esn
struct rte_security_ipsec_udp_param udp

💖 Detailed Description 💖

okay so rte_security_ipsec_xform = IPsec security association configuration data. periodt.

it's the struct that carries everything you need to actually create an IPsec SA security session 🫶 like, no struct, no session, iykyk.

🧚 it's defined at line 301 of file rte_security.h. write that down bestie, it matters.

👑 Field Documentation 👑

every field gets its moment, as it should 💅

⭐ uint32_t spi ⭐

the SA security parameter index 🔥

defined at line 302 of file rte_security.h.

⭐ uint32_t salt ⭐

the SA salt 🧂 yes, actual salt, no we're not seasoning fries, it's a crypto thing.

defined at line 304 of file rte_security.h.

⭐ struct rte_security_ipsec_sa_options options ⭐

the various SA options, aka the little settings drawer 🌈

defined at line 306 of file rte_security.h.

⭐ enum rte_security_ipsec_sa_direction direction ⭐

IPSec SA Direction — Egress/Ingress 🦋 which way are the packets going, bestie? that's the whole question.

defined at line 308 of file rte_security.h.

⭐ enum rte_security_ipsec_sa_protocol proto ⭐

IPsec SA Protocol — AH/ESP 💜 pick your fighter.

defined at line 310 of file rte_security.h.

⭐ enum rte_security_ipsec_sa_mode mode ⭐

IPsec SA Mode — transport/tunnel 🎀 two modes, two vibes, choose wisely.

defined at line 312 of file rte_security.h.

⭐ struct rte_security_ipsec_tunnel_param tunnel ⭐

the tunnel parameters — and heads up, this is NULL for transport mode 😭 so don't come for it when it's NULL, it's supposed to be.

defined at line 314 of file rte_security.h.

⭐ struct rte_security_ipsec_lifetime life ⭐

the IPsec SA lifetime 🌸 live your truth, but like, for a defined amount of time.

defined at line 316 of file rte_security.h.

⭐ uint32_t replay_win_sz ⭐

the anti replay window size, which is what enables sequence replay attack handling 👑 ngl this one's kind of iconic.

💀 important: replay checking is disabled if the window size is 0. literally zero protection, so maybe don't do that unless you mean it.

defined at line 318 of file rte_security.h.

⭐ union { ... } esn ⭐

Extended Sequence Number ✨

(side note: this field doesn't get its own "Definition at line" tag in the original, so we're not making one up 🙈)

⭐ struct rte_security_ipsec_udp_param udp ⭐

the UDP parameters — but bestie, these are ignored when the udp_encap option isn't specified 🫶 so if you're wondering why nothing's happening, check that first. fr fr.

defined at line 330 of file rte_security.h.

✨ Author ✨

Generated automatically by Doxygen for DPDK from the source code 🤖 no human wrote this, it's a robot doing its little robot thing, and honestly? slay.

🌟 and that's the page! source + version + date, as promised: this bad boy comes from DPDK, Version 26.03.0, and it's the rte_security_ipsec_xform(3) page. bye bestie, go configure an SA responsibly 💖🎀🦋
📦 where this page comes from