Re: [dpdk-dev] [RFC 0/5] ipsec: add inbound SAD

> -Original Message- > From: Medvedkin, Vladimir > Sent: Tuesday, August 13, 2019 4:13 PM > To: dev@dpdk.org > Cc: Ananyev, Konstantin ; Iremonger, Bernard > > Subject: [RFC 0/5] ipsec: add inbound SAD > > According to RFC 4301 IPSec implementation needs an inbound SA database (SAD). >

[dpdk-dev] [RFC 0/5] ipsec: add inbound SAD

According to RFC 4301 IPSec implementation needs an inbound SA database (SAD). For each incoming inbound IPSec-protected packet (ESP or AH) it has to perform a lookup within it’s SAD. Lookup should be performed by: Security Parameters Index (SPI) + destination IP (DIP) + source IP (SIP) or SPI +