RTE_SECURITY_IPSEC_XFORM(3)

💖 rte_security_ipsec_xform 💖

okay bestie, so this is rte_security_ipsec_xform(3) — a lil manual page from the DPDK library functions crew, and it's literally about the struct you use to set up an IPsec security association. no cap, it's giving "glue code that makes the crypto go brrr". let's get into it 🫶

---

✨ NAME ✨

rte_security_ipsec_xform — the struct, bestie. that's the whole name. iconic 💅

---

🌸 SYNOPSIS 🌸

first things first, you gotta pull in the header:

#include <rte_security.h>

🎀 Data Fields 🎀

here's every single field, in order, no skipping, we love a complete list ✨

• uint32_t spi
• uint32_t salt
• struct rte_security_ipsec_sa_options options
• enum rte_security_ipsec_sa_direction direction
• enum rte_security_ipsec_sa_protocol proto
• enum rte_security_ipsec_sa_mode mode
• struct rte_security_ipsec_tunnel_param tunnel
• struct rte_security_ipsec_lifetime life
• uint32_t replay_win_sz
• union, and it's an empty-ish one:

union {
} esn

• struct rte_security_ipsec_udp_param udp

---

🦋 Detailed Description 🦋

so what is this thing? it's IPsec security association configuration data. 🎀

basically, this structure is holding all the data you need to create an IPsec SA security session. that's the vibe. that's the whole job. it's the main character of SA setup 💜

📍 Definition location: line 301 of file rte_security.h.

---

👑 Field Documentation 👑

okay now the fun part, field by field, with the receipts 💖

⭐ uint32_t spi

SA security parameter index. the number that says "this one, not that one".

Definition at line 302 of file rte_security.h.

⭐ uint32_t salt

SA salt. a lil extra seasoning on your keys 🧂✨

Definition at line 304 of file rte_security.h.

⭐ struct rte_security_ipsec_sa_options options

various SA options. the settings drawer, bestie.

Definition at line 306 of file rte_security.h.

⭐ enum rte_security_ipsec_sa_direction direction

IPSec SA Direction — Egress/Ingress. are we going out or coming in? 🚪

Definition at line 308 of file rte_security.h.

⭐ enum rte_security_ipsec_sa_protocol proto

IPsec SA Protocol — AH/ESP. pick your fighter 🥊

Definition at line 310 of file rte_security.h.

⭐ enum rte_security_ipsec_sa_mode mode

IPsec SA Mode — transport/tunnel. tunnel mode is lowkey the drama one 🚇

Definition at line 312 of file rte_security.h.

⭐ struct rte_security_ipsec_tunnel_param tunnel

Tunnel parameters — and heads up, this is NULL for transport mode. don't be out here setting tunnel stuff in transport mode, bestie 😭

Definition at line 314 of file rte_security.h.

⭐ struct rte_security_ipsec_lifetime life

IPsec SA lifetime. everything has an era and this SA's era has a number 🌈

Definition at line 316 of file rte_security.h.

⭐ uint32_t replay_win_sz

Anti replay window size, used to enable sequence replay attack handling. and listen — replay checking is disabled if the window size is 0. zero means no protection, periodt. set it if you care 💀

Definition at line 318 of file rte_security.h.

⭐ union { ... } esn

Extended Sequence Number. that's it, that's the description ✨

⭐ struct rte_security_ipsec_udp_param udp

UDP parameters — and these get ignored when the udp_encap option is not specified. not me warning you twice but yeah, ignored 🙈

Definition at line 330 of file rte_security.h.

---

💜 Author 💜

Generated automatically by Doxygen for DPDK from the source code. so technically Doxygen wrote this and i just gave it a glow-up 🎀

---

and that's the whole page, bestie!! 🌟 this was DPDK, Version 25.11.3, page rte_security_ipsec_xform(3) — go forth and configure your IPsec SAs responsibly, mwah 💅💖✨