1 /* 2 * CDDL HEADER START 3 * 4 * The contents of this file are subject to the terms of the 5 * Common Development and Distribution License (the "License"). 6 * You may not use this file except in compliance with the License. 7 * 8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 9 * or http://www.opensolaris.org/os/licensing. 10 * See the License for the specific language governing permissions 11 * and limitations under the License. 12 * 13 * When distributing Covered Code, include this CDDL HEADER in each 14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 15 * If applicable, add the following below this CDDL HEADER, with the 16 * fields enclosed by brackets "[]" replaced with your own identifying 17 * information: Portions Copyright [yyyy] [name of copyright owner] 18 * 19 * CDDL HEADER END 20 */ 21 /* 22 * Copyright 2009 Sun Microsystems, Inc. All rights reserved. 23 * Use is subject to license terms. 24 */ 25 26 #ifndef _INET_IPSECESP_H 27 #define _INET_IPSECESP_H 28 29 #include <inet/ip.h> 30 #include <inet/ipdrop.h> 31 32 #ifdef __cplusplus 33 extern "C" { 34 #endif 35 36 #ifdef _KERNEL 37 38 /* Named Dispatch Parameter Management Structure */ 39 typedef struct ipsecespparam_s { 40 uint_t ipsecesp_param_min; 41 uint_t ipsecesp_param_max; 42 uint_t ipsecesp_param_value; 43 char *ipsecesp_param_name; 44 } ipsecespparam_t; 45 46 /* 47 * IPSECESP stack instances 48 */ 49 struct ipsecesp_stack { 50 netstack_t *ipsecesp_netstack; /* Common netstack */ 51 52 caddr_t ipsecesp_g_nd; 53 struct ipsecespparam_s *ipsecesp_params; 54 kmutex_t ipsecesp_param_lock; /* Protects params */ 55 56 /* Packet dropper for ESP drops. */ 57 ipdropper_t esp_dropper; 58 59 kstat_t *esp_ksp; 60 struct esp_kstats_s *esp_kstats; 61 62 /* 63 * Keysock instance of ESP. There can be only one per stack instance. 64 * Use casptr() on this because I don't set it until KEYSOCK_HELLO 65 * comes down. 66 * Paired up with the esp_pfkey_q is the esp_event, which will age SAs. 67 */ 68 queue_t *esp_pfkey_q; 69 timeout_id_t esp_event; 70 71 sadbp_t esp_sadb; 72 }; 73 typedef struct ipsecesp_stack ipsecesp_stack_t; 74 75 /* Define *this* NDD variable here because we use it outside ESP proper. */ 76 #define ipsecesp_nat_keepalive_interval \ 77 ipsecesp_params[14].ipsecesp_param_value 78 79 #endif /* _KERNEL */ 80 81 /* 82 * For now, only provide "aligned" version of header. 83 * If aligned version is needed, we'll go with the naming conventions then. 84 */ 85 86 typedef struct esph { 87 uint32_t esph_spi; 88 uint32_t esph_replay; 89 } esph_t; 90 91 /* No need for "old" ESP, just point a uint32_t *. */ 92 93 #ifdef __cplusplus 94 } 95 #endif 96 97 #endif /* _INET_IPSECESP_H */ 98