uapi/linux/ipsec.h

0001 /* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
0002 #ifndef _LINUX_IPSEC_H
0003 #define _LINUX_IPSEC_H
0004
0005 /* The definitions, required to talk to KAME racoon IKE. */
0006
0007 #include <linux/pfkeyv2.h>
0008
0009 #define IPSEC_PORT_ANY      0
0010 #define IPSEC_ULPROTO_ANY   255
0011 #define IPSEC_PROTO_ANY     255
0012
0013 enum {
0014     IPSEC_MODE_ANY      = 0,    /* We do not support this for SA */
0015     IPSEC_MODE_TRANSPORT    = 1,
0016     IPSEC_MODE_TUNNEL   = 2,
0017     IPSEC_MODE_BEET         = 3
0018 };
0019
0020 enum {
0021     IPSEC_DIR_ANY       = 0,
0022     IPSEC_DIR_INBOUND   = 1,
0023     IPSEC_DIR_OUTBOUND  = 2,
0024     IPSEC_DIR_FWD       = 3,    /* It is our own */
0025     IPSEC_DIR_MAX       = 4,
0026     IPSEC_DIR_INVALID   = 5
0027 };
0028
0029 enum {
0030     IPSEC_POLICY_DISCARD    = 0,
0031     IPSEC_POLICY_NONE   = 1,
0032     IPSEC_POLICY_IPSEC  = 2,
0033     IPSEC_POLICY_ENTRUST    = 3,
0034     IPSEC_POLICY_BYPASS = 4
0035 };
0036
0037 enum {
0038     IPSEC_LEVEL_DEFAULT = 0,
0039     IPSEC_LEVEL_USE     = 1,
0040     IPSEC_LEVEL_REQUIRE = 2,
0041     IPSEC_LEVEL_UNIQUE  = 3
0042 };
0043
0044 #define IPSEC_MANUAL_REQID_MAX  0x3fff
0045
0046 #define IPSEC_REPLAYWSIZE  32
0047
0048 #endif  /* _LINUX_IPSEC_H */