rte_security_capability(3)

💅 NAME

rte_security_capability — bestie, this is the security capability struct, and it's kinda the whole personality of a device's security offloads ✨ (manual: Library Functions Manual, third section, iykyk 🎀)

---

🌸 SYNOPSIS

#include <rte_security.h>

📦 Data Fields

• action — enum rte_security_session_action_type
• protocol — enum rte_security_session_protocol
• crypto_capabilities — const struct rte_cryptodev_capabilities *
• ol_flags — uint32_t

---

🦋 Detailed Description

Okay so this is the security capability definition — the vibe check that says what a device can actually do 💖

Definition at line 1247 of file rte_security.h.

---

👑 Field Documentation

💜 action

enum rte_security_session_action_type — the security action type, aka what kind of move this is 🔥

Definition at line 1248 of file rte_security.h.

💜 protocol

enum rte_security_session_protocol — the security protocol in question 🫶

Definition at line 1250 of file rte_security.h.

💜 proto

enum rte_security_ipsec_sa_protocol — IPsec SA protocol, slay 🌈

Definition at line 1254 of file rte_security.h.

💜 mode

enum rte_security_ipsec_sa_mode — IPsec SA mode ⭐

Definition at line 1256 of file rte_security.h.

💜 direction

enum rte_security_ipsec_sa_direction — IPsec SA direction, which way the traffic's going 👀

Definition at line 1258 of file rte_security.h.

💜 options

struct rte_security_ipsec_sa_options — the IPsec SA supported options 💅

Definition at line 1260 of file rte_security.h.

💜 replay_win_sz_max

uint32_t — IPsec Anti Replay Window Size. A '0' value indicates that Anti Replay is not supported 🚫

Definition at line 1262 of file rte_security.h.

💜 ipsec

struct { ... } — the IPsec capability bundle 🎀

💜 mtu

uint16_t — MTU supported for inline TX 📨

Definition at line 1270 of file rte_security.h.

💜 alg

enum rte_security_macsec_alg — which MACsec algorithm to be used 🧚

Definition at line 1272 of file rte_security.h.

💜 max_nb_sc

uint16_t — maximum number of secure channels supported 🔐

Definition at line 1274 of file rte_security.h.

💜 max_nb_sa

uint16_t — maximum number of SAs supported 💖

Definition at line 1276 of file rte_security.h.

💜 max_nb_sess

uint16_t — maximum number of SAs supported (yes, same description as the one above, no cap, I'm just the messenger 😭)

Definition at line 1278 of file rte_security.h.

💜 replay_win_sz

uint32_t — MACsec anti replay window size 🪟

Definition at line 1280 of file rte_security.h.

💜 relative_sectag_insert

uint16_t — support Sectag insertion at relative offset 👑

Definition at line 1282 of file rte_security.h.

💜 fixed_sectag_insert

uint16_t — support Sectag insertion at fixed offset 📌

Definition at line 1284 of file rte_security.h.

💜 icv_include_da_sa

uint16_t — ICV includes source and destination MAC addresses 🫶

Definition at line 1286 of file rte_security.h.

💜 ctrl_port_enable

uint16_t — control port traffic is supported ✅

Definition at line 1288 of file rte_security.h.

💜 preserve_sectag

uint16_t — do not strip SecTAG after processing 🙈

Definition at line 1290 of file rte_security.h.

💜 preserve_icv

uint16_t — do not strip ICV from the packet after processing 🙈

Definition at line 1292 of file rte_security.h.

💜 validate_frames

uint16_t — support frame validation as per RTE_SECURITY_MACSEC_VALIDATE_* 🔍

Definition at line 1294 of file rte_security.h.

💜 re_key

uint16_t — support re-keying on SA expiry 🔁

Definition at line 1296 of file rte_security.h.

💜 anti_replay

uint16_t — support anti replay 🛡️

Definition at line 1298 of file rte_security.h.

💜 reserved

uint16_t — reserved bitfields for future capabilities, main character energy for later ✨

Definition at line 1300 of file rte_security.h.

💜 macsec

struct { ... } — the MACsec capability bundle 🎀

💜 domain

enum rte_security_pdcp_domain — PDCP mode of operation: Control or data 🎛️

Definition at line 1304 of file rte_security.h.

💜 capa_flags

uint32_t — capability flags, see RTE_SECURITY_PDCP_* 🚩

Definition at line 1306 of file rte_security.h.

💜 pdcp

struct { ... } — the PDCP capability bundle 🎀

💜 direction

enum rte_security_docsis_direction — DOCSIS direction 🧭

Definition at line 1311 of file rte_security.h.

💜 docsis

struct { ... } — the DOCSIS capability bundle 🎀

💜 ver

enum rte_security_tls_version — TLS record version. 🌐

Definition at line 1316 of file rte_security.h.

💜 type

enum rte_security_tls_sess_type — TLS record session type. 🌐

Definition at line 1318 of file rte_security.h.

💜 ar_win_size

uint32_t — maximum anti replay window size supported for DTLS 1.2 record read operation. Value of 0 means anti replay check is not supported 🚫

Definition at line 1320 of file rte_security.h.

💜 tls_record

struct { ... } — the TLS record capability bundle 🎀

💜 crypto_capabilities

const struct rte_cryptodev_capabilities* — corresponding crypto capabilities for security capability 🔥

Definition at line 1328 of file rte_security.h.

💜 ol_flags

uint32_t — device offload flags 🚀

Definition at line 1331 of file rte_security.h.

---

🌈 Author

Generated automatically by Doxygen for DPDK from the source code. (not a human, not a girlie, just Doxygen doing its thing 💀)

---

okay that's the whole page bestie, go off 👑

signing off with love — DPDK, Version 26.03.0 🦋💖 this was rte_security_capability(3), mwah 🎀