---
name: "rte_security_capability"
section: "3"
platform: "linux"
package: "dpdk-doc"
version: "24.11.4-0+deb13u1"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/rte_security_capability"
---

# rte\_security\_capability(3)

## NAME

rte\_security\_capability

## SYNOPSIS

`#include <rte_security.h>`

### Data Fields

enum **rte\_security\_session\_action\_type** **action**\
 enum **rte\_security\_session\_protocol** **protocol**\
 const struct **rte\_cryptodev\_capabilities** \* **crypto\_capabilities**\
 uint32\_t **ol\_flags**\

## Detailed Description

Security capability definition

Definition at line **1247** of file **rte\_security.h**.

## Field Documentation

### enum rte\_security\_session\_action\_type action

Security action type

Definition at line **1248** of file **rte\_security.h**.

### enum rte\_security\_session\_protocol protocol

Security protocol

Definition at line **1250** of file **rte\_security.h**.

### enum rte\_security\_ipsec\_sa\_protocol proto

IPsec SA protocol

Definition at line **1254** of file **rte\_security.h**.

### enum rte\_security\_ipsec\_sa\_mode mode

IPsec SA mode

Definition at line **1256** of file **rte\_security.h**.

### enum rte\_security\_ipsec\_sa\_direction direction

IPsec SA direction

Definition at line **1258** of file **rte\_security.h**.

### struct rte\_security\_ipsec\_sa\_options options

IPsec SA supported options

Definition at line **1260** of file **rte\_security.h**.

### uint32\_t replay\_win\_sz\_max

IPsec Anti Replay Window Size. A '0' value indicates that Anti Replay is not supported.

Definition at line **1262** of file **rte\_security.h**.

### struct { ... } ipsec

IPsec capability

### uint16\_t mtu

MTU supported for inline TX

Definition at line **1270** of file **rte\_security.h**.

### enum rte\_security\_macsec\_alg alg

MACsec algorithm to be used

Definition at line **1272** of file **rte\_security.h**.

### uint16\_t max\_nb\_sc

Maximum number of secure channels supported

Definition at line **1274** of file **rte\_security.h**.

### uint16\_t max\_nb\_sa

Maximum number of SAs supported

Definition at line **1276** of file **rte\_security.h**.

### uint16\_t max\_nb\_sess

Maximum number of SAs supported

Definition at line **1278** of file **rte\_security.h**.

### uint32\_t replay\_win\_sz

MACsec anti replay window size

Definition at line **1280** of file **rte\_security.h**.

### uint16\_t relative\_sectag\_insert

Support Sectag insertion at relative offset

Definition at line **1282** of file **rte\_security.h**.

### uint16\_t fixed\_sectag\_insert

Support Sectag insertion at fixed offset

Definition at line **1284** of file **rte\_security.h**.

### uint16\_t icv\_include\_da\_sa

ICV includes source and destination MAC addresses

Definition at line **1286** of file **rte\_security.h**.

### uint16\_t ctrl\_port\_enable

Control port traffic is supported

Definition at line **1288** of file **rte\_security.h**.

### uint16\_t preserve\_sectag

Do not strip SecTAG after processing

Definition at line **1290** of file **rte\_security.h**.

### uint16\_t preserve\_icv

Do not strip ICV from the packet after processing

Definition at line **1292** of file **rte\_security.h**.

### uint16\_t validate\_frames

Support frame validation as per RTE\_SECURITY\_MACSEC\_VALIDATE\_\*

Definition at line **1294** of file **rte\_security.h**.

### uint16\_t re\_key

support re-keying on SA expiry

Definition at line **1296** of file **rte\_security.h**.

### uint16\_t anti\_replay

support anti replay

Definition at line **1298** of file **rte\_security.h**.

### uint16\_t reserved

Reserved bitfields for future capabilities

Definition at line **1300** of file **rte\_security.h**.

### struct { ... } macsec

MACsec capability

### enum rte\_security\_pdcp\_domain domain

PDCP mode of operation: Control or data

Definition at line **1304** of file **rte\_security.h**.

### uint32\_t capa\_flags

Capability flags, see RTE\_SECURITY\_PDCP\_\*

Definition at line **1306** of file **rte\_security.h**.

### struct { ... } pdcp

PDCP capability

### enum rte\_security\_docsis\_direction direction

DOCSIS direction

Definition at line **1311** of file **rte\_security.h**.

### struct { ... } docsis

DOCSIS capability

### enum rte\_security\_tls\_version ver

TLS record version.

Definition at line **1316** of file **rte\_security.h**.

### enum rte\_security\_tls\_sess\_type type

TLS record session type.

Definition at line **1318** of file **rte\_security.h**.

### uint32\_t ar\_win\_size

Maximum anti replay window size supported for DTLS 1.2 record read operation. Value of 0 means anti replay check is not supported.

Definition at line **1320** of file **rte\_security.h**.

### struct { ... } tls\_record

TLS record capability

### const struct rte\_cryptodev\_capabilities\* crypto\_capabilities

Corresponding crypto capabilities for security capability \

Definition at line **1328** of file **rte\_security.h**.

### uint32\_t ol\_flags

Device offload flags

Definition at line **1331** of file **rte\_security.h**.

## Author

Generated automatically by Doxygen for DPDK from the source code.