2 * Copyright (c) 2015 Cisco and/or its affiliates.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at:
7 * http://www.apache.org/licenses/LICENSE-2.0
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
15 #ifndef __IPSEC_IF_H__
16 #define __IPSEC_IF_H__
18 #include <vnet/ipsec/ipsec_sa.h>
22 IPSEC_IF_SET_KEY_TYPE_NONE,
23 IPSEC_IF_SET_KEY_TYPE_LOCAL_CRYPTO,
24 IPSEC_IF_SET_KEY_TYPE_REMOTE_CRYPTO,
25 IPSEC_IF_SET_KEY_TYPE_LOCAL_INTEG,
26 IPSEC_IF_SET_KEY_TYPE_REMOTE_INTEG,
27 } ipsec_if_set_key_type_t;
31 /* Required for pool_get_aligned */
32 CLIB_CACHE_LINE_ALIGN_MARK (cacheline0);
37 vnet_hw_interface_flags_t flags;
47 ip46_address_t local_ip, remote_ip;
50 ipsec_crypto_alg_t crypto_alg;
51 u8 local_crypto_key_len;
52 u8 local_crypto_key[128];
53 u8 remote_crypto_key_len;
54 u8 remote_crypto_key[128];
55 ipsec_integ_alg_t integ_alg;
56 u8 local_integ_key_len;
57 u8 local_integ_key[128];
58 u8 remote_integ_key_len;
59 u8 remote_integ_key[128];
65 } ipsec_add_del_tunnel_args_t;
71 * Key fields: remote ip and spi on incoming packet
72 * all fields in NET byte order
81 }) ipsec4_tunnel_key_t;
88 * Key fields: remote ip and spi on incoming packet
89 * all fields in NET byte order
91 ip6_address_t remote_ip;
93 }) ipsec6_tunnel_key_t;
103 } ipsec_gre_tunnel_add_del_args_t;
105 extern int ipsec_add_del_tunnel_if_internal (vnet_main_t * vnm,
106 ipsec_add_del_tunnel_args_t *
107 args, u32 * sw_if_index);
108 extern int ipsec_add_del_tunnel_if (ipsec_add_del_tunnel_args_t * args);
109 extern int ipsec_add_del_ipsec_gre_tunnel (vnet_main_t * vnm,
111 ipsec_gre_tunnel_add_del_args_t *
114 extern int ipsec_set_interface_key (vnet_main_t * vnm, u32 hw_if_index,
115 ipsec_if_set_key_type_t type,
117 extern int ipsec_set_interface_sa (vnet_main_t * vnm, u32 hw_if_index,
118 u32 sa_id, u8 is_outbound);
120 extern u8 *format_ipsec_tunnel (u8 * s, va_list * args);
122 #endif /* __IPSEC_IF_H__ */
125 * fd.io coding-style-patch-verification: ON
128 * eval: (c-set-style "gnu")