Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help
rte_security_capability(3)	     DPDK	    rte_security_capability(3)

NAME
       rte_security_capability

SYNOPSIS
       #include	<rte_security.h>

   Data	Fields
       enum rte_security_session_action_type action
       enum rte_security_session_protocol protocol
       const struct rte_cryptodev_capabilities * crypto_capabilities
       uint32_t	ol_flags
       enum rte_security_ipsec_sa_protocol proto
       enum rte_security_ipsec_sa_mode mode
       enum rte_security_ipsec_sa_direction direction
       struct rte_security_ipsec_sa_options options
       uint32_t	replay_win_sz_max
       struct {
	  enum rte_security_ipsec_sa_protocol proto
	  enum rte_security_ipsec_sa_mode mode
	  enum rte_security_ipsec_sa_direction direction
	  struct rte_security_ipsec_sa_options options
	  uint32_t replay_win_sz_max
       } ipsec
       uint16_t	mtu
       enum rte_security_macsec_alg alg
       uint16_t	max_nb_sc
       uint16_t	max_nb_sa
       uint16_t	max_nb_sess
       uint32_t	replay_win_sz
       uint16_t	relative_sectag_insert:	1
       uint16_t	fixed_sectag_insert: 1
       uint16_t	icv_include_da_sa: 1
       uint16_t	ctrl_port_enable: 1
       uint16_t	preserve_sectag: 1
       uint16_t	preserve_icv: 1
       uint16_t	validate_frames: 1
       uint16_t	re_key:	1
       uint16_t	anti_replay: 1
       uint16_t	reserved: 7
       struct {
	  uint16_t mtu
	  enum rte_security_macsec_alg alg
	  uint16_t max_nb_sc
	  uint16_t max_nb_sa
	  uint16_t max_nb_sess
	  uint32_t replay_win_sz
	  uint16_t relative_sectag_insert: 1
	  uint16_t fixed_sectag_insert:	1
	  uint16_t icv_include_da_sa: 1
	  uint16_t ctrl_port_enable: 1
	  uint16_t preserve_sectag: 1
	  uint16_t preserve_icv: 1
	  uint16_t validate_frames: 1
	  uint16_t re_key: 1
	  uint16_t anti_replay:	1
	  uint16_t reserved: 7
       } macsec
       enum rte_security_pdcp_domain domain
       uint32_t	capa_flags
       struct {
	  enum rte_security_pdcp_domain	domain
	  uint32_t capa_flags
       } pdcp
       enum rte_security_docsis_direction direction
       struct {
	  enum rte_security_docsis_direction direction
       } docsis
       enum rte_security_tls_version ver
       enum rte_security_tls_sess_type type
       uint32_t	ar_win_size
       struct {
	  enum rte_security_tls_version	ver
	  enum rte_security_tls_sess_type type
	  uint32_t ar_win_size
       } tls_record

Detailed Description
       Security	capability definition

       Definition at line 1247 of file rte_security.h.

Field Documentation
   enum	rte_security_session_action_type action
       Security	action type

       Definition at line 1248 of file rte_security.h.

   enum	rte_security_session_protocol protocol
       Security	protocol

       Definition at line 1250 of file rte_security.h.

   enum	rte_security_ipsec_sa_protocol proto
       IPsec SA	protocol

       Definition at line 1254 of file rte_security.h.

   enum	rte_security_ipsec_sa_mode mode
       IPsec SA	mode

       Definition at line 1256 of file rte_security.h.

   enum	rte_security_ipsec_sa_direction	direction
       IPsec SA	direction

       Definition at line 1258 of file rte_security.h.

   struct rte_security_ipsec_sa_options	options
       IPsec SA	supported options

       Definition at line 1260 of file rte_security.h.

   uint32_t replay_win_sz_max
       IPsec Anti Replay Window	Size. A	'0' value indicates that Anti Replay
       is not supported.

       Definition at line 1262 of file rte_security.h.

   struct  { ... }  ipsec
       IPsec capability

   uint16_t mtu
       MTU supported for inline	TX

       Definition at line 1270 of file rte_security.h.

   enum	rte_security_macsec_alg	alg
       MACsec algorithm	to be used

       Definition at line 1272 of file rte_security.h.

   uint16_t max_nb_sc
       Maximum number of secure	channels supported

       Definition at line 1274 of file rte_security.h.

   uint16_t max_nb_sa
       Maximum number of SAs supported

       Definition at line 1276 of file rte_security.h.

   uint16_t max_nb_sess
       Maximum number of SAs supported

       Definition at line 1278 of file rte_security.h.

   uint32_t replay_win_sz
       MACsec anti replay window size

       Definition at line 1280 of file rte_security.h.

   uint16_t relative_sectag_insert
       Support Sectag insertion	at relative offset

       Definition at line 1282 of file rte_security.h.

   uint16_t fixed_sectag_insert
       Support Sectag insertion	at fixed offset

       Definition at line 1284 of file rte_security.h.

   uint16_t icv_include_da_sa
       ICV includes source and destination MAC addresses

       Definition at line 1286 of file rte_security.h.

   uint16_t ctrl_port_enable
       Control port traffic is supported

       Definition at line 1288 of file rte_security.h.

   uint16_t preserve_sectag
       Do not strip SecTAG after processing

       Definition at line 1290 of file rte_security.h.

   uint16_t preserve_icv
       Do not strip ICV	from the packet	after processing

       Definition at line 1292 of file rte_security.h.

   uint16_t validate_frames
       Support frame validation	as per RTE_SECURITY_MACSEC_VALIDATE_*

       Definition at line 1294 of file rte_security.h.

   uint16_t re_key
       support re-keying on SA expiry

       Definition at line 1296 of file rte_security.h.

   uint16_t anti_replay
       support anti replay

       Definition at line 1298 of file rte_security.h.

   uint16_t reserved
       Reserved	bitfields for future capabilities

       Definition at line 1300 of file rte_security.h.

   struct  { ... }  macsec
       MACsec capability

   enum	rte_security_pdcp_domain domain
       PDCP mode of operation: Control or data

       Definition at line 1304 of file rte_security.h.

   uint32_t capa_flags
       Capability flags, see RTE_SECURITY_PDCP_*

       Definition at line 1306 of file rte_security.h.

   struct  { ... }  pdcp
       PDCP capability

   enum	rte_security_docsis_direction direction
       DOCSIS direction

       Definition at line 1311 of file rte_security.h.

   struct  { ... }  docsis
       DOCSIS capability

   enum	rte_security_tls_version ver
       TLS record version.

       Definition at line 1316 of file rte_security.h.

   enum	rte_security_tls_sess_type type
       TLS record session type.

       Definition at line 1318 of file rte_security.h.

   uint32_t ar_win_size
       Maximum anti replay window size supported for DTLS 1.2 record read
       operation. Value	of 0 means anti	replay check is	not supported.

       Definition at line 1320 of file rte_security.h.

   struct  { ... }  tls_record
       TLS record capability

   const struct	rte_cryptodev_capabilities* crypto_capabilities
       Corresponding crypto capabilities for security capability

       Definition at line 1328 of file rte_security.h.

   uint32_t ol_flags
       Device offload flags

       Definition at line 1331 of file rte_security.h.

Author
       Generated automatically by Doxygen for DPDK from	the source code.

Version	25.11.0			Thu Jun	11 2026	    rte_security_capability(3)

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=max_nb_sa&sektion=3&manpath=FreeBSD+Ports+15.1.quarterly>

home | help