---
name: "rte_security_ipsec_lifetime"
section: "3"
platform: "linux"
package: "dpdk-doc"
version: "24.11.4-0+deb13u1"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/rte_security_ipsec_lifetime"
---

# rte\_security\_ipsec\_lifetime(3)

## NAME

rte\_security\_ipsec\_lifetime

## SYNOPSIS

`#include <rte_security.h>`

### Data Fields

uint64\_t **packets\_soft\_limit**\
 uint64\_t **bytes\_soft\_limit**\
 uint64\_t **packets\_hard\_limit**\
 uint64\_t **bytes\_hard\_limit**\

## Detailed Description

Configure soft and hard lifetime of an IPsec SA

Lifetime of an IPsec SA would specify the maximum number of packets or bytes that can be processed. IPsec operations would start failing once any hard limit is reached.

Soft limits can be specified to generate notification when the SA is approaching hard limits for lifetime. For inline operations, reaching soft expiry limit would result in raising an eth event for the same. For lookaside operations, this would result in a warning returned in **rte\_crypto\_op.aux\_flags.**

**Definition at line 285 of file rte\_security.h.**

## Field Documentation

### uint64\_t packets\_soft\_limit

**Soft expiry limit in number of packets**

**Definition at line 286 of file rte\_security.h.**

### uint64\_t bytes\_soft\_limit

**Soft expiry limit in bytes**

**Definition at line 288 of file rte\_security.h.**

### uint64\_t packets\_hard\_limit

**Hard expiry limit in number of packets**

**Definition at line 290 of file rte\_security.h.**

### uint64\_t bytes\_hard\_limit

**Hard expiry limit in bytes**

**Definition at line 292 of file rte\_security.h.**

## Author

**Generated automatically by Doxygen for DPDK from the source code.**