REPLAY_PROTECT(3)

💖 NAME 💖

okay so bestie, welcome to rte_security_macsec_xform — well, technically the header line reads rte_securi...acsec_xform(3) because the terminal is a hater and truncated it 😭 — this is a data-fields page straight outta DPDK's library functions manual, and it's literally the MACsec security session configuration struct. slay.

---

🌸 SYNOPSIS 🌸

#include <rte_security.h>

🎀 Data Fields 🎀

so the summary up top lists these five, and honestly they're the main characters:

enum rte_security_macsec_direction dir
enum rte_security_macsec_alg alg
uint8_t cipher_off
uint64_t sci
uint16_t sc_id

(don't worry, the full roster is down below in Field Documentation — there are so many more icons than this, keep scrolling 🫶)

---

✨ Detailed Description ✨

MACsec security session configuration — that's the whole vibe. it's the config struct for a MACsec security session. nothing more, nothing less, no cap.

Definition at line 429 of file rte_security.h.

---

🦋 Field Documentation 🦋

enum rte_security_macsec_direction dir

Direction of flow/secure channel — like, which way is this thing even going bestie 🧭

Definition at line 431 of file rte_security.h.

enum rte_security_macsec_alg alg

MACsec algorithm to be used. pick ur fighter ✨

Definition at line 433 of file rte_security.h.

uint8_t cipher_off

Cipher offset from start of Ethernet header. yes, this is the field the truncated header was yelling about 😌

Definition at line 435 of file rte_security.h.

uint64_t sci

SCI to be used for RX flow identification, or to set SCI in packet for TX when send_sci is set. very demure, very dual-purpose 💅

Definition at line 440 of file rte_security.h.

uint16_t sc_id

Receive/transmit secure channel ID — created by rte_security_macsec_sc_create (that's the function that made it, not me, i don't make the rules 🌸)

Definition at line 442 of file rte_security.h.

uint16_t mtu

MTU for transmit frame — valid for inline processing only, so like, keep that in mind 🫶

Definition at line 446 of file rte_security.h.

uint8_t sectag_off

Offset to insert sectag from start of ethernet header, or from a matching VLAN tag. location location location 📍

Definition at line 451 of file rte_security.h.

uint16_t protect_frames

Enable MACsec protection of frames. protect her at all costs 🛡️

Definition at line 453 of file rte_security.h.

uint16_t sectag_insert_mode

Sectag insertion mode, and it's giving two modes:

• if 1, Sectag is inserted at fixed sectag_off set above.
• if 0, Sectag is inserted at relative sectag_off from a matching VLAN tag set.

pick one, king 👑

Definition at line 460 of file rte_security.h.

uint16_t icv_include_da_sa

ICV includes source and destination MAC addresses. they're coming with the ICV, obviously 💀

Definition at line 462 of file rte_security.h.

uint16_t ctrl_port_enable

Control port is enabled. it's on, bestie ✅

Definition at line 464 of file rte_security.h.

uint16_t sectag_version

Version of MACsec header. Should be 0 — like, fr fr, zero. don't be quirky with this one 🙈

Definition at line 466 of file rte_security.h.

uint16_t end_station

Enable end station. and heads up: SCI is not valid when this is on, so don't come for me about it 😭

Definition at line 468 of file rte_security.h.

uint16_t send_sci

Send SCI along with sectag. say it with your chest 📣

Definition at line 470 of file rte_security.h.

uint16_t scb

enable secure channel support EPON — single copy broadcast. niche? yes. iconic? also yes 👑

Definition at line 472 of file rte_security.h.

uint16_t encrypt

Enable packet encryption and set RTE_MACSEC_TCI_C and RTE_MACSEC_TCI_E in sectag. locked tf in 🔥

Definition at line 477 of file rte_security.h.

uint16_t reserved

Reserved bitfields for future. future-you's problem, not ours 🫶

Definition at line 479 of file rte_security.h.

uint32_t replay_win_sz

Replay Window size to be supported. how big is the window? you decide 🪟

Definition at line 483 of file rte_security.h.

uint16_t validate_frames

Set bits as per RTE_SECURITY_MACSEC_VALIDATE_* — the asterisk is doing the heavy lifting here, iykyk ⭐

Definition at line 485 of file rte_security.h.

uint16_t preserve_sectag

Do not strip SecTAG after processing. keep it, don't strip it 💅

Definition at line 491 of file rte_security.h.

uint16_t preserve_icv

Do not strip ICV from the packet after processing. same energy, ICV edition 🌈

Definition at line 493 of file rte_security.h.

uint16_t replay_protect

Enable anti-replay protection. no replays allowed, we don't do reruns here 🚫

Definition at line 495 of file rte_security.h.

---

👑 Author 👑

Generated automatically by Doxygen for DPDK from the source code. so like, a robot wrote this and i just gave it a personality 💖

---

k that's the whole page bestie, every field accounted for, nothing skipped, we ate and left no crumbs 🍓✨

kisses, this has been DPDK Version 26.03.0 of the rte_securi...acsec_xform(3) page — go forth and configure ur MACsec session responsibly 🎀💜