2 * Copyright (c) 2015 Cisco and/or its affiliates.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at:
7 * http://www.apache.org/licenses/LICENSE-2.0
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
15 #ifndef __IPSEC_IF_H__
16 #define __IPSEC_IF_H__
18 #include <vnet/ipsec/ipsec_sa.h>
22 /* Required for pool_get_aligned */
23 CLIB_CACHE_LINE_ALIGN_MARK (cacheline0);
28 vnet_hw_interface_flags_t flags;
38 ip46_address_t local_ip, remote_ip;
41 ipsec_crypto_alg_t crypto_alg;
42 u8 local_crypto_key_len;
43 u8 local_crypto_key[128];
44 u8 remote_crypto_key_len;
45 u8 remote_crypto_key[128];
46 ipsec_integ_alg_t integ_alg;
47 u8 local_integ_key_len;
48 u8 local_integ_key[128];
49 u8 remote_integ_key_len;
50 u8 remote_integ_key[128];
56 } ipsec_add_del_tunnel_args_t;
62 * Key fields: remote ip and spi on incoming packet
63 * all fields in NET byte order
67 ip4_address_t remote_ip;
72 }) ipsec4_tunnel_key_t;
79 * Key fields: remote ip and spi on incoming packet
80 * all fields in NET byte order
82 ip6_address_t remote_ip;
84 }) ipsec6_tunnel_key_t;
87 extern u8 *format_ipsec4_tunnel_key (u8 * s, va_list * args);
88 extern u8 *format_ipsec6_tunnel_key (u8 * s, va_list * args);
90 extern int ipsec_add_del_tunnel_if_internal (vnet_main_t * vnm,
91 ipsec_add_del_tunnel_args_t *
92 args, u32 * sw_if_index);
93 extern int ipsec_add_del_tunnel_if (ipsec_add_del_tunnel_args_t * args);
95 extern int ipsec_set_interface_sa (vnet_main_t * vnm, u32 hw_if_index,
96 u32 sa_id, u8 is_outbound);
98 extern u8 *format_ipsec_tunnel (u8 * s, va_list * args);
100 #endif /* __IPSEC_IF_H__ */
103 * fd.io coding-style-patch-verification: ON
106 * eval: (c-set-style "gnu")