1 /*
   2  * CDDL HEADER START
   3  *
   4  * The contents of this file are subject to the terms of the
   5  * Common Development and Distribution License (the "License").
   6  * You may not use this file except in compliance with the License.
   7  *
   8  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
   9  * or http://www.opensolaris.org/os/licensing.
  10  * See the License for the specific language governing permissions
  11  * and limitations under the License.
  12  *
  13  * When distributing Covered Code, include this CDDL HEADER in each
  14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
  15  * If applicable, add the following below this CDDL HEADER, with the
  16  * fields enclosed by brackets "[]" replaced with your own identifying
  17  * information: Portions Copyright [yyyy] [name of copyright owner]
  18  *
  19  * CDDL HEADER END
  20  */
  21 /*
  22  * Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
  23  * Use is subject to license terms.
  24  */
  25 
  26 #ifndef _INET_IPSECESP_H
  27 #define _INET_IPSECESP_H
  28 
  29 #include <inet/ip.h>
  30 #include <inet/ipdrop.h>
  31 
  32 #ifdef  __cplusplus
  33 extern "C" {
  34 #endif
  35 
  36 #ifdef _KERNEL
  37 
  38 /* Named Dispatch Parameter Management Structure */
  39 typedef struct ipsecespparam_s {
  40         uint_t  ipsecesp_param_min;
  41         uint_t  ipsecesp_param_max;
  42         uint_t  ipsecesp_param_value;
  43         char    *ipsecesp_param_name;
  44 } ipsecespparam_t;
  45 
  46 /*
  47  * IPSECESP stack instances
  48  */
  49 struct ipsecesp_stack {
  50         netstack_t              *ipsecesp_netstack;     /* Common netstack */
  51 
  52         caddr_t                 ipsecesp_g_nd;
  53         struct ipsecespparam_s  *ipsecesp_params;
  54         kmutex_t                ipsecesp_param_lock;    /* Protects params */
  55 
  56         /* Packet dropper for ESP drops. */
  57         ipdropper_t             esp_dropper;
  58 
  59         kstat_t                 *esp_ksp;
  60         struct esp_kstats_s     *esp_kstats;
  61 
  62         /*
  63          * Keysock instance of ESP.  There can be only one per stack instance.
  64          * Use casptr() on this because I don't set it until KEYSOCK_HELLO
  65          * comes down.
  66          * Paired up with the esp_pfkey_q is the esp_event, which will age SAs.
  67          */
  68         queue_t                 *esp_pfkey_q;
  69         timeout_id_t            esp_event;
  70 
  71         sadbp_t                 esp_sadb;
  72 };
  73 typedef struct ipsecesp_stack ipsecesp_stack_t;
  74 
  75 /* Define *this* NDD variable here because we use it outside ESP proper. */
  76 #define ipsecesp_nat_keepalive_interval \
  77         ipsecesp_params[14].ipsecesp_param_value
  78 
  79 #endif  /* _KERNEL */
  80 
  81 /*
  82  * For now, only provide "aligned" version of header.
  83  * If aligned version is needed, we'll go with the naming conventions then.
  84  */
  85 
  86 typedef struct esph {
  87         uint32_t esph_spi;
  88         uint32_t esph_replay;
  89 } esph_t;
  90 
  91 /* No need for "old" ESP, just point a uint32_t *. */
  92 
  93 #ifdef  __cplusplus
  94 }
  95 #endif
  96 
  97 #endif /* _INET_IPSECESP_H */