/******************************************************************************* Copyright (C) Marvell International Ltd. and its affiliates This software file (the "File") is owned and distributed by Marvell International Ltd. and/or its affiliates ("Marvell") under the following alternative licensing terms. Once you have made an election to distribute the File under one of the following license alternatives, please (i) delete this introductory statement regarding license alternatives, (ii) delete the two license alternatives that you have not elected to use and (iii) preserve the Marvell copyright notice above. ******************************************************************************** Marvell Commercial License Option If you received this File from Marvell and you have entered into a commercial license agreement (a "Commercial License") with Marvell, the File is licensed to you under the terms of the applicable Commercial License. ******************************************************************************** Marvell GPL License Option If you received this File from Marvell, you may opt to use, redistribute and/or modify this File in accordance with the terms and conditions of the General Public License Version 2, June 1991 (the "GPL License"), a copy of which is available along with the File in the license.txt file or by writing to the Free Software Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 or on the worldwide web at http://www.gnu.org/licenses/gpl.txt. THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE ARE EXPRESSLY DISCLAIMED. The GPL License provides additional details about this warranty disclaimer. ******************************************************************************** Marvell BSD License Option If you received this File from Marvell, you may opt to use, redistribute and/or modify this File under the following licensing terms. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. * Neither the name of Marvell nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. *******************************************************************************/ /******************************************************************************* * mvNfpSec.h - Header File for Marvell NFP IPSec (Routing only) * * DESCRIPTION: * This header file contains macros, typedefs and function declarations * specific to the Marvell Network Fast Processing with IPSec(Routing only). * * DEPENDENCIES: * None. * *******************************************************************************/ #ifndef __mvNfpSec_h__ #define __mvNfpSec_h__ #ifdef CONFIG_MV_ETH_NFP_SEC #include "mvCommon.h" #include "cesa/mvCesa.h" /* IPSec defines */ #define MV_NFP_SEC_MAX_PACKET 1540 #define MV_NFP_SEC_ENC_BLOCK_SIZE 16 #define MV_NFP_SEC_ESP_OFFSET 34 /* IPSec Enumerators */ typedef enum { MV_NFP_SEC_TUNNEL = 0, MV_NFP_SEC_TRANSPORT, } MV_NFP_SEC_PROT; typedef enum { MV_NFP_SEC_ESP = 0, MV_NFP_SEC_AH, } MV_NFP_SEC_ENCAP; typedef enum { MV_NFP_SEC_RULE_DB_IN = 0, MV_NFP_SEC_RULE_DB_OUT, } MV_NFP_SEC_RULE_DB_DIR; typedef enum { MV_NFP_SEC_DROP = 0, MV_NFP_SEC_FWD, MV_NFP_SEC_SECURE } MV_NFP_SEC_ACTION; typedef enum { MV_NFP_SEC_ENCRYPT = 0, MV_NFP_SEC_DECRYPT, } MV_NFP_SEC_OP; /* IPSec Structures */ typedef struct _mv_nfp_sec_tunnel_hdr { MV_U32 sIp; // BE MV_U32 dIp; //BE /* dstMac should be 2 byte aligned */ MV_U8 dstMac[MV_MAC_ADDR_SIZE]; //BE MV_U8 srcMac[MV_MAC_ADDR_SIZE]; //BE MV_U8 outIfIndex; } MV_NFP_SEC_TUNNEL_HDR; typedef struct _mv_nfp_sec_sa_entry { MV_U32 spi; //BE MV_NFP_SEC_PROT tunProt; MV_NFP_SEC_ENCAP encap; MV_U16 sid; MV_U32 seqNum; //LE MV_NFP_SEC_TUNNEL_HDR tunnelHdr; MV_U32 lifeTime; MV_U8 ivSize; MV_U8 cipherBlockSize; MV_U8 digestSize; MV_NFP_SEC_OP secOp; } MV_NFP_SEC_SA_ENTRY; typedef struct _mv_nfp_sec_spd_rule { MV_U32 sIp; //BE MV_U32 dIp; //BE MV_U8 proto; MV_U16 dstPort; //BE MV_U16 srcPort; //BE MV_NFP_SEC_ACTION actionType; MV_NFP_SEC_SA_ENTRY* pSAEntry; } MV_NFP_SEC_SPD_RULE; typedef struct _mv_nfp_sec_cesa_priv { MV_NFP_SEC_SA_ENTRY *pSaEntry; MV_PKT_INFO *pPktInfo; MV_U8 orgDigest[MV_CESA_MAX_DIGEST_SIZE]; MV_CESA_COMMAND *pCesaCmd; } MV_NFP_SEC_CESA_PRIV; MV_NFP_SEC_SPD_RULE* mvNfpSecSPDRuleFind(MV_U32 dstIp, MV_U32 srcIp, MV_U8 proto, MV_U16 dport, MV_U16 sport, MV_NFP_SEC_RULE_DB_DIR inOut); MV_STATUS mvNfpSecOutCheck(MV_PKT_INFO *pPktInfo); MV_STATUS mvNfpSecOutgoing(MV_PKT_INFO *pPktInfo, MV_NFP_SEC_SA_ENTRY* pSAEntry); MV_STATUS mvNfpSecEspProcess(MV_PKT_INFO *pPktInfo, MV_NFP_SEC_SA_ENTRY* pSAEntry); MV_NFP_SEC_SA_ENTRY* mvNfpSecSARuleFind(MV_U32 spiPkt); MV_STATUS mvNfpSecIncoming(MV_PKT_INFO *pPktInfo, MV_NFP_SEC_SA_ENTRY* pSAEntry); MV_NFP_SEC_SPD_RULE* mvNfpSecSPDRuleSet(MV_NFP_SEC_SPD_RULE* pSpdRule, MV_NFP_SEC_RULE_DB_DIR inOut); MV_NFP_SEC_SA_ENTRY* mvNfpSecSAEntrySet(MV_NFP_SEC_SA_ENTRY* pSAEntry, MV_NFP_SEC_RULE_DB_DIR inOut); MV_STATUS mvNfpSecInit(MV_U32 dbSize); // global init MV_VOID mvNfpSecDbPrint(MV_VOID); #endif /* CONFIG_MV_ETH_NFP_SEC */ #endif /* __mvNfpSec_h__ */