Dmitry Eremin-Solenikov(lumag) replied on github web page:

include/odp/api/spec/ipsec.h
line 4
@@ -1277,6 +1279,7 @@ int odp_ipsec_in(const odp_packet_t pkt_in[], int num_in,
  *
  * Each input packet must have a valid value for these metadata (other metadata
  * is ignored):
+ * - IPv4 or IPv6 flag: Set packet flag according to packet contents.


Comment:
@psavol @JannePeltonen @muvarov @NikhilA-Linaro
In most cases application will already have knowledge about payload protocol. 
So it is easier to provide such knowledge to IPsec machinery. So this is 
basically a question to @NikhilA-Linaro, If I got it right from SEC manual, 
your hardware also requires providing IP version, does it not?

> Dmitry Eremin-Solenikov(lumag) wrote:
> @psavol @JannePeltonen @muvarov @NikhilA-Linaro 
> In most cases such flag will be set by inbound packet parser (or known by the 
> application). Otherwise such packet will not be received by inbound API. 
> Well, unless an application submits all inbound packets to IPsec, which seems 
> quite strange to me.


https://github.com/Linaro/odp/pull/328#discussion_r156225026
updated_at 2017-12-11 22:54:16

Reply via email to