2 * Copyright (c) 2015 Cisco and/or its affiliates.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at:
7 * http://www.apache.org/licenses/LICENSE-2.0
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
15 #ifndef __IPSEC_IF_H__
16 #define __IPSEC_IF_H__
18 #include <vnet/ipsec/ipsec_sa.h>
22 IPSEC_IF_SET_KEY_TYPE_NONE,
23 IPSEC_IF_SET_KEY_TYPE_LOCAL_CRYPTO,
24 IPSEC_IF_SET_KEY_TYPE_REMOTE_CRYPTO,
25 IPSEC_IF_SET_KEY_TYPE_LOCAL_INTEG,
26 IPSEC_IF_SET_KEY_TYPE_REMOTE_INTEG,
27 } ipsec_if_set_key_type_t;
31 /* Required for pool_get_aligned */
32 CLIB_CACHE_LINE_ALIGN_MARK (cacheline0);
37 vnet_hw_interface_flags_t flags;
47 ip46_address_t local_ip, remote_ip;
50 ipsec_crypto_alg_t crypto_alg;
51 u8 local_crypto_key_len;
52 u8 local_crypto_key[128];
53 u8 remote_crypto_key_len;
54 u8 remote_crypto_key[128];
55 ipsec_integ_alg_t integ_alg;
56 u8 local_integ_key_len;
57 u8 local_integ_key[128];
58 u8 remote_integ_key_len;
59 u8 remote_integ_key[128];
64 } ipsec_add_del_tunnel_args_t;
70 * Key fields: remote ip and spi on incoming packet
71 * all fields in NET byte order
80 }) ipsec4_tunnel_key_t;
87 * Key fields: remote ip and spi on incoming packet
88 * all fields in NET byte order
90 ip6_address_t remote_ip;
92 }) ipsec6_tunnel_key_t;
100 ip4_address_t local_ip;
101 ip4_address_t remote_ip;
102 } ipsec_add_del_ipsec_gre_tunnel_args_t;
104 extern int ipsec_add_del_tunnel_if_internal (vnet_main_t * vnm,
105 ipsec_add_del_tunnel_args_t *
106 args, u32 * sw_if_index);
107 extern int ipsec_add_del_tunnel_if (ipsec_add_del_tunnel_args_t * args);
108 extern int ipsec_add_del_ipsec_gre_tunnel (vnet_main_t * vnm,
109 ipsec_add_del_ipsec_gre_tunnel_args_t
112 extern int ipsec_set_interface_key (vnet_main_t * vnm, u32 hw_if_index,
113 ipsec_if_set_key_type_t type,
115 extern int ipsec_set_interface_sa (vnet_main_t * vnm, u32 hw_if_index,
116 u32 sa_id, u8 is_outbound);
118 #endif /* __IPSEC_IF_H__ */
121 * fd.io coding-style-patch-verification: ON
124 * eval: (c-set-style "gnu")