---
name: "mlx5dv_flow_action_esp"
section: "3"
platform: "linux"
package: "rdma-core"
version: "65.0-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/mlx5dv_flow_action_esp"
---

# mlx5dv\_flow\_action\_esp(3)

Flow action esp for mlx5 provider

## NAME

mlx5dv\_flow\_action\_esp - Flow action esp for mlx5 provider

## SYNOPSIS

-

  ```
  #include <infiniband/mlx5/mlx5dv.h>
  struct ibv_flow_action *
  mlx5dv_create_flow_action_esp(struct ibv_context *ctx,
                    struct ibv_flow_action_esp_attr *esp,
                    struct mlx5dv_flow_action_esp *mlx5_attr);
  ```

## DESCRIPTION

Create an IPSEC ESP flow steering action.

This verb is identical to *ibv\_create\_flow\_action\_esp* verb, but allows mlx5 specific flags.

## ARGUMENTS

Please see *ibv\_flow\_action\_esp(3)* man page for *ctx* and *esp*.

### *mlx5\_attr* argument

-

  ```
  struct mlx5dv_flow_action_esp {
      uint64_t comp_mask;  /* Use enum mlx5dv_flow_action_esp_mask */
      uint32_t action_flags; /* Use enum mlx5dv_flow_action_flags */
  };
  ```

- *comp\_mask*

  Bitmask specifying what fields in the structure are valid (*enum* *mlx5dv\_flow\_action\_esp\_mask*).

- *action\_flags*

  A bitwise OR of the various values described below.

  *MLX5DV\_FLOW\_ACTION\_FLAGS\_REQUIRE\_METADATA*:

  Each received and transmitted packet using offload is expected to carry metadata in the form of a L2 header

  with ethernet type 0x8CE4, followed by 6 bytes of data and the original packet ethertype.

## NOTE

The ESN is expected to be placed in the IV field for egress packets.

The 64 bit sequence number is written in big-endian over the 64 bit IV field.

There is no need to call modify to update the ESN window on egress when this DV is used.

## SEE ALSO

*ibv\_flow\_action\_esp(3)*, *RFC 4106*