1 /** 2 * This file has no copyright assigned and is placed in the Public Domain. 3 * This file is part of the mingw-w64 runtime package. 4 * No warranty is given; refer to the file DISCLAIMER.PD within this package. 5 */ 6 #ifndef _INC_IPSECTYPES 7 #define _INC_IPSECTYPES 8 #include <iketypes.h> 9 10 #ifdef __cplusplus 11 extern "C" { 12 #endif 13 14 #if (_WIN32_WINNT >= 0x0600) 15 16 typedef UINT8 IPSEC_AUTH_CONFIG; 17 typedef UINT8 IPSEC_CIPHER_CONFIG; 18 typedef UINT32 IPSEC_SA_SPI; 19 typedef UINT64 IPSEC_TOKEN_HANDLE; 20 typedef GUID IPSEC_CRYPTO_MODULE_ID; 21 22 #ifndef __IPSEC_SA_TRANSFORM0_FWD_DECLARED 23 #define __IPSEC_SA_TRANSFORM0_FWD_DECLARED 24 typedef struct IPSEC_SA_TRANSFORM0_ IPSEC_SA_TRANSFORM0; 25 #endif /* __IPSEC_SA_TRANSFORM0_FWD_DECLARED */ 26 27 #ifndef __FWPM_FILTER0_FWD_DECLARED 28 #define __FWPM_FILTER0_FWD_DECLARED 29 typedef struct FWPM_FILTER0_ FWPM_FILTER0; 30 #endif /* __FWPM_FILTER0_FWD_DECLARED */ 31 32 typedef enum IPSEC_FAILURE_POINT_ { 33 IPSEC_FAILURE_NONE, 34 IPSEC_FAILURE_ME, 35 IPSEC_FAILURE_PEER, 36 IPSEC_FAILURE_POINT_MAX 37 } IPSEC_FAILURE_POINT; 38 39 typedef enum IPSEC_TRAFFIC_TYPE_ { 40 IPSEC_TRAFFIC_TYPE_TRANSPORT, 41 IPSEC_TRAFFIC_TYPE_TUNNEL, 42 IPSEC_TRAFFIC_TYPE_MAX 43 } IPSEC_TRAFFIC_TYPE; 44 45 typedef enum IPSEC_PFS_GROUP_ { 46 IPSEC_PFS_NONE, 47 IPSEC_PFS_1, 48 IPSEC_PFS_2, 49 IPSEC_PFS_2048, 50 IPSEC_PFS_ECP_256, 51 IPSEC_PFS_ECP_384, 52 IPSEC_PFS_MM, 53 IPSEC_PFS_MAX 54 } IPSEC_PFS_GROUP; 55 56 typedef enum IPSEC_TRANSFORM_TYPE_ { 57 IPSEC_TRANSFORM_AH = 1, 58 IPSEC_TRANSFORM_ESP_AUTH, 59 IPSEC_TRANSFORM_ESP_CIPHER, 60 IPSEC_TRANSFORM_ESP_AUTH_AND_CIPHER, 61 IPSEC_TRANSFORM_ESP_AUTH_FW, 62 IPSEC_TRANSFORM_TYPE_MAX 63 } IPSEC_TRANSFORM_TYPE; 64 65 typedef enum IPSEC_AUTH_TYPE_ { 66 IPSEC_AUTH_MD5, 67 IPSEC_AUTH_SHA_1, 68 IPSEC_AUTH_SHA_256, 69 IPSEC_AUTH_AES_128, 70 IPSEC_AUTH_AES_192, 71 IPSEC_AUTH_AES_256, 72 IPSEC_AUTH_MAX 73 } IPSEC_AUTH_TYPE; 74 75 typedef enum IPSEC_CIPHER_TYPE_ { 76 IPSEC_CIPHER_TYPE_DES = 1, 77 IPSEC_CIPHER_TYPE_3DES, 78 IPSEC_CIPHER_TYPE_AES_128, 79 IPSEC_CIPHER_TYPE_AES_192, 80 IPSEC_CIPHER_TYPE_AES_256, 81 IPSEC_CIPHER_TYPE_MAX 82 } IPSEC_CIPHER_TYPE; 83 84 typedef enum IPSEC_TOKEN_MODE_ { 85 IPSEC_TOKEN_MODE_MAIN, 86 IPSEC_TOKEN_MODE_EXTENDED, 87 IPSEC_TOKEN_MODE_MAX 88 } IPSEC_TOKEN_MODE; 89 90 typedef enum IPSEC_TOKEN_PRINCIPAL_ { 91 IPSEC_TOKEN_PRINCIPAL_LOCAL, 92 IPSEC_TOKEN_PRINCIPAL_PEER, 93 IPSEC_TOKEN_PRINCIPAL_MAX 94 } IPSEC_TOKEN_PRINCIPAL; 95 96 typedef enum IPSEC_TOKEN_TYPE_ { 97 IPSEC_TOKEN_TYPE_MACHINE, 98 IPSEC_TOKEN_TYPE_IMPERSONATION, 99 IPSEC_TOKEN_TYPE_MAX 100 } IPSEC_TOKEN_TYPE; 101 102 typedef struct IPSEC_SA_LIFETIME0_ { 103 UINT32 lifetimeSeconds; 104 UINT32 lifetimeKilobytes; 105 UINT32 lifetimePackets; 106 } IPSEC_SA_LIFETIME0; 107 108 typedef struct IPSEC_KEYING_POLICY0_ { 109 UINT32 numKeyMods; 110 GUID *keyModKeys; 111 } IPSEC_KEYING_POLICY0; 112 113 typedef struct IPSEC_SA_IDLE_TIMEOUT0_ { 114 UINT32 idleTimeoutSeconds; 115 UINT32 idleTimeoutSecondsFailOver; 116 } IPSEC_SA_IDLE_TIMEOUT0; 117 118 typedef struct IPSEC_PROPOSAL0_ { 119 IPSEC_SA_LIFETIME0 lifetime; 120 UINT32 numSaTransforms; 121 IPSEC_SA_TRANSFORM0 *saTransforms; 122 IPSEC_PFS_GROUP pfsGroup; 123 } IPSEC_PROPOSAL0; 124 125 typedef struct IPSEC_TRANSPORT_POLICY0_ { 126 UINT32 numIpsecProposals; 127 IPSEC_PROPOSAL0 *ipsecProposals; 128 UINT32 flags; 129 UINT32 ndAllowClearTimeoutSeconds; 130 IPSEC_SA_IDLE_TIMEOUT0 saIdleTimeout; 131 IKEEXT_EM_POLICY0 *emPolicy; 132 } IPSEC_TRANSPORT_POLICY0; 133 134 typedef struct IPSEC_AUTH_TRANSFORM_ID0_ { 135 IPSEC_AUTH_TYPE authType; 136 IPSEC_AUTH_CONFIG authConfig; 137 } IPSEC_AUTH_TRANSFORM_ID0; 138 139 typedef struct IPSEC_AUTH_TRANSFORM0_ { 140 IPSEC_AUTH_TRANSFORM_ID0 authTransformId; 141 IPSEC_CRYPTO_MODULE_ID *cryptoModuleId; 142 } IPSEC_AUTH_TRANSFORM0; 143 144 typedef struct IPSEC_CIPHER_TRANSFORM_ID0_ { 145 IPSEC_CIPHER_TYPE cipherType; 146 IPSEC_CIPHER_CONFIG cipherConfig; 147 } IPSEC_CIPHER_TRANSFORM_ID0; 148 149 typedef struct IPSEC_CIPHER_TRANSFORM0_ { 150 IPSEC_CIPHER_TRANSFORM_ID0 cipherTransformId; 151 IPSEC_CRYPTO_MODULE_ID *cryptoModuleId; 152 } IPSEC_CIPHER_TRANSFORM0; 153 154 typedef struct IPSEC_AUTH_AND_CIPHER_TRANSFORM0_ { 155 IPSEC_AUTH_TRANSFORM0 authTransform; 156 IPSEC_CIPHER_TRANSFORM0 cipherTransform; 157 } IPSEC_AUTH_AND_CIPHER_TRANSFORM0; 158 159 typedef struct IPSEC_SA_TRANSFORM0_ { 160 IPSEC_TRANSFORM_TYPE ipsecTransformType; 161 __C89_NAMELESS union { 162 IPSEC_AUTH_TRANSFORM0 *ahTransform; 163 IPSEC_AUTH_TRANSFORM0 *espAuthTransform; 164 IPSEC_CIPHER_TRANSFORM0 *espCipherTransform; 165 IPSEC_AUTH_AND_CIPHER_TRANSFORM0 *espAuthAndCipherTransform; 166 IPSEC_AUTH_TRANSFORM0 *espAuthFwTransform; 167 }; 168 } IPSEC_SA_TRANSFORM0; 169 170 typedef struct IPSEC_TUNNEL_ENDPOINTS0_ { 171 FWP_IP_VERSION ipVersion; 172 __C89_NAMELESS union { 173 UINT32 localV4Address; 174 UINT8 localV6Address[16]; 175 }; 176 __C89_NAMELESS union { 177 UINT32 remoteV4Address; 178 UINT8 remoteV6Address[16]; 179 }; 180 } IPSEC_TUNNEL_ENDPOINTS0; 181 182 typedef struct IPSEC_TUNNEL_POLICY0_ { 183 UINT32 flags; 184 UINT32 numIpsecProposals; 185 IPSEC_PROPOSAL0 *ipsecProposals; 186 IPSEC_TUNNEL_ENDPOINTS0 tunnelEndpoints; 187 IPSEC_SA_IDLE_TIMEOUT0 saIdleTimeout; 188 IKEEXT_EM_POLICY0 *emPolicy; 189 } IPSEC_TUNNEL_POLICY0; 190 191 typedef struct IPSEC_V4_UDP_ENCAPSULATION0_ { 192 UINT16 localUdpEncapPort; 193 UINT16 remoteUdpEncapPort; 194 } IPSEC_V4_UDP_ENCAPSULATION0; 195 196 typedef struct IPSEC_AGGREGATE_SA_STATISTICS0_ { 197 UINT32 activeSas; 198 UINT32 pendingSaNegotiations; 199 UINT32 totalSasAdded; 200 UINT32 totalSasDeleted; 201 UINT32 successfulRekeys; 202 UINT32 activeTunnels; 203 UINT32 offloadedSas; 204 } IPSEC_AGGREGATE_SA_STATISTICS0; 205 206 typedef struct IPSEC_ESP_DROP_PACKET_STATISTICS0_ { 207 UINT32 invalidSpisOnInbound; 208 UINT32 decryptionFailuresOnInbound; 209 UINT32 authenticationFailuresOnInbound; 210 UINT32 replayCheckFailuresOnInbound; 211 UINT32 saNotInitializedOnInbound; 212 } IPSEC_ESP_DROP_PACKET_STATISTICS0; 213 214 typedef struct IPSEC_AH_DROP_PACKET_STATISTICS0_ { 215 UINT32 invalidSpisOnInbound; 216 UINT32 authenticationFailuresOnInbound; 217 UINT32 replayCheckFailuresOnInbound; 218 UINT32 saNotInitializedOnInbound; 219 } IPSEC_AH_DROP_PACKET_STATISTICS0; 220 221 typedef struct IPSEC_AGGREGATE_DROP_PACKET_STATISTICS0_ { 222 UINT32 invalidSpisOnInbound; 223 UINT32 decryptionFailuresOnInbound; 224 UINT32 authenticationFailuresOnInbound; 225 UINT32 udpEspValidationFailuresOnInbound; 226 UINT32 replayCheckFailuresOnInbound; 227 UINT32 invalidClearTextInbound; 228 UINT32 saNotInitializedOnInbound; 229 UINT32 receiveOverIncorrectSaInbound; 230 UINT32 secureReceivesNotMatchingFilters; 231 } IPSEC_AGGREGATE_DROP_PACKET_STATISTICS0; 232 233 typedef struct IPSEC_TRAFFIC_STATISTICS0_ { 234 UINT64 encryptedByteCount; 235 UINT64 authenticatedAHByteCount; 236 UINT64 authenticatedESPByteCount; 237 UINT64 transportByteCount; 238 UINT64 tunnelByteCount; 239 UINT64 offloadByteCount; 240 } IPSEC_TRAFFIC_STATISTICS0; 241 242 typedef struct IPSEC_STATISTICS0_ { 243 IPSEC_AGGREGATE_SA_STATISTICS0 aggregateSaStatistics; 244 IPSEC_ESP_DROP_PACKET_STATISTICS0 espDropPacketStatistics; 245 IPSEC_AH_DROP_PACKET_STATISTICS0 ahDropPacketStatistics; 246 IPSEC_AGGREGATE_DROP_PACKET_STATISTICS0 aggregateDropPacketStatistics; 247 IPSEC_TRAFFIC_STATISTICS0 inboundTrafficStatistics; 248 IPSEC_TRAFFIC_STATISTICS0 outboundTrafficStatistics; 249 } IPSEC_STATISTICS0; 250 251 typedef struct IPSEC_TOKEN0_ { 252 IPSEC_TOKEN_TYPE type; 253 IPSEC_TOKEN_PRINCIPAL principal; 254 IPSEC_TOKEN_MODE mode; 255 IPSEC_TOKEN_HANDLE token; 256 } IPSEC_TOKEN0; 257 258 typedef struct IPSEC_ID0_ { 259 wchar_t *mmTargetName; 260 wchar_t *emTargetName; 261 UINT32 numTokens; 262 IPSEC_TOKEN0 *tokens; 263 UINT64 explicitCredentials; 264 UINT64 logonId; 265 } IPSEC_ID0; 266 267 typedef struct IPSEC_SA_AUTH_INFORMATION0_ { 268 IPSEC_AUTH_TRANSFORM0 authTransform; 269 FWP_BYTE_BLOB authKey; 270 } IPSEC_SA_AUTH_INFORMATION0; 271 272 typedef struct IPSEC_SA_CIPHER_INFORMATION0_ { 273 IPSEC_CIPHER_TRANSFORM0 cipherTransform; 274 FWP_BYTE_BLOB cipherKey; 275 } IPSEC_SA_CIPHER_INFORMATION0; 276 277 typedef struct IPSEC_SA_AUTH_AND_CIPHER_INFORMATION0_ { 278 IPSEC_SA_CIPHER_INFORMATION0 saCipherInformation; 279 IPSEC_SA_AUTH_INFORMATION0 saAuthInformation; 280 } IPSEC_SA_AUTH_AND_CIPHER_INFORMATION0; 281 282 typedef struct IPSEC_SA0_ { 283 IPSEC_SA_SPI spi; 284 IPSEC_TRANSFORM_TYPE saTransformType; 285 __C89_NAMELESS union { 286 IPSEC_SA_AUTH_INFORMATION0 *ahInformation; 287 IPSEC_SA_AUTH_INFORMATION0 *espAuthInformation; 288 IPSEC_SA_CIPHER_INFORMATION0 *espCipherInformation; 289 IPSEC_SA_AUTH_AND_CIPHER_INFORMATION0 *espAuthAndCipherInformation; 290 IPSEC_SA_AUTH_INFORMATION0 *espAuthFwInformation; 291 }; 292 } IPSEC_SA0; 293 294 typedef struct IPSEC_KEYMODULE_STATE0_ { 295 GUID keyModuleKey; 296 FWP_BYTE_BLOB stateBlob; 297 } IPSEC_KEYMODULE_STATE0; 298 299 typedef struct IPSEC_SA_BUNDLE0_ { 300 UINT32 flags; 301 IPSEC_SA_LIFETIME0 lifetime; 302 UINT32 idleTimeoutSeconds; 303 UINT32 ndAllowClearTimeoutSeconds; 304 IPSEC_ID0 *ipsecId; 305 UINT32 napContext; 306 UINT32 qmSaId; 307 UINT32 numSAs; 308 IPSEC_SA0 *saList; 309 IPSEC_KEYMODULE_STATE0 *keyModuleState; 310 FWP_IP_VERSION ipVersion; 311 __C89_NAMELESS union { 312 UINT32 peerV4PrivateAddress; 313 ; // case(FWP_IP_VERSION_V6) 314 }; 315 UINT64 mmSaId; 316 IPSEC_PFS_GROUP pfsGroup; 317 } IPSEC_SA_BUNDLE0; 318 319 typedef struct IPSEC_TRAFFIC0_ { 320 FWP_IP_VERSION ipVersion; 321 __C89_NAMELESS union { 322 UINT32 localV4Address; 323 UINT8 localV6Address[16]; 324 }; 325 __C89_NAMELESS union { 326 UINT32 remoteV4Address; 327 UINT8 remoteV6Address[16]; 328 }; 329 IPSEC_TRAFFIC_TYPE trafficType; 330 __C89_NAMELESS union { 331 UINT64 ipsecFilterId; 332 UINT64 tunnelPolicyId; 333 }; 334 UINT16 remotePort; 335 } IPSEC_TRAFFIC0; 336 337 typedef struct IPSEC_SA_DETAILS0_ { 338 FWP_IP_VERSION ipVersion; 339 FWP_DIRECTION saDirection; 340 IPSEC_TRAFFIC0 traffic; 341 IPSEC_SA_BUNDLE0 saBundle; 342 __C89_NAMELESS union { 343 IPSEC_V4_UDP_ENCAPSULATION0 *udpEncapsulation; 344 ; // case(FWP_IP_VERSION_V6) 345 }; 346 FWPM_FILTER0 *transportFilter; 347 } IPSEC_SA_DETAILS0; 348 349 typedef struct IPSEC_SA_CONTEXT0_ { 350 UINT64 saContextId; 351 IPSEC_SA_DETAILS0 *inboundSa; 352 IPSEC_SA_DETAILS0 *outboundSa; 353 } IPSEC_SA_CONTEXT0; 354 355 typedef struct IPSEC_GETSPI0_ { 356 IPSEC_TRAFFIC0 inboundIpsecTraffic; 357 FWP_IP_VERSION ipVersion; 358 __C89_NAMELESS union { 359 IPSEC_V4_UDP_ENCAPSULATION0 *inboundUdpEncapsulation; 360 ; // case(FWP_IP_VERSION_V6) 361 }; 362 IPSEC_CRYPTO_MODULE_ID *rngCryptoModuleID; 363 } IPSEC_GETSPI0; 364 365 typedef struct IPSEC_SA_ENUM_TEMPLATE0_ { 366 FWP_DIRECTION saDirection; 367 } IPSEC_SA_ENUM_TEMPLATE0; 368 369 typedef struct IPSEC_SA_CONTEXT_ENUM_TEMPLATE0_ { 370 FWP_CONDITION_VALUE0 localSubNet; 371 FWP_CONDITION_VALUE0 remoteSubNet; 372 } IPSEC_SA_CONTEXT_ENUM_TEMPLATE0; 373 374 #endif /*(_WIN32_WINNT >= 0x0600)*/ 375 #if (_WIN32_WINNT >= 0x0601) 376 377 typedef struct IPSEC_TUNNEL_ENDPOINTS1_ { 378 FWP_IP_VERSION ipVersion; 379 __C89_NAMELESS union { 380 UINT32 localV4Address; 381 UINT8 localV6Address[16]; 382 }; 383 __C89_NAMELESS union { 384 UINT32 remoteV4Address; 385 UINT8 remoteV6Address[16]; 386 }; 387 UINT64 localIfLuid; 388 } IPSEC_TUNNEL_ENDPOINTS1; 389 390 typedef struct IPSEC_TUNNEL_POLICY1_ { 391 UINT32 flags; 392 UINT32 numIpsecProposals; 393 IPSEC_PROPOSAL0 *ipsecProposals; 394 IPSEC_TUNNEL_ENDPOINTS1 tunnelEndpoints; 395 IPSEC_SA_IDLE_TIMEOUT0 saIdleTimeout; 396 IKEEXT_EM_POLICY1 *emPolicy; 397 } IPSEC_TUNNEL_POLICY1; 398 399 typedef struct IPSEC_TRANSPORT_POLICY1_ { 400 UINT32 numIpsecProposals; 401 IPSEC_PROPOSAL0 *ipsecProposals; 402 UINT32 flags; 403 UINT32 ndAllowClearTimeoutSeconds; 404 IPSEC_SA_IDLE_TIMEOUT0 saIdleTimeout; 405 IKEEXT_EM_POLICY1 *emPolicy; 406 } IPSEC_TRANSPORT_POLICY1; 407 408 typedef struct _IPSEC_DOSP_OPTIONS0 { 409 UINT32 stateIdleTimeoutSeconds; 410 UINT32 perIPRateLimitQueueIdleTimeoutSeconds; 411 UINT8 ipV6IPsecUnauthDscp; 412 UINT32 ipV6IPsecUnauthRateLimitBytesPerSec; 413 UINT32 ipV6IPsecUnauthPerIPRateLimitBytesPerSec; 414 UINT8 ipV6IPsecAuthDscp; 415 UINT32 ipV6IPsecAuthRateLimitBytesPerSec; 416 UINT8 icmpV6Dscp; 417 UINT32 icmpV6RateLimitBytesPerSec; 418 UINT8 ipV6FilterExemptDscp; 419 UINT32 ipV6FilterExemptRateLimitBytesPerSec; 420 UINT8 defBlockExemptDscp; 421 UINT32 defBlockExemptRateLimitBytesPerSec; 422 UINT32 maxStateEntries; 423 UINT32 maxPerIPRateLimitQueues; 424 UINT32 flags; 425 UINT32 numPublicIFLuids; 426 UINT64 *publicIFLuids; 427 UINT32 numInternalIFLuids; 428 UINT64 *internalIFLuids; 429 FWP_V6_ADDR_AND_MASK publicV6AddrMask; 430 FWP_V6_ADDR_AND_MASK internalV6AddrMask; 431 } IPSEC_DOSP_OPTIONS0; 432 433 typedef struct _IPSEC_DOSP_STATISTICS0 { 434 UINT64 totalStateEntriesCreated; 435 UINT64 currentStateEntries; 436 UINT64 totalInboundAllowedIPv6IPsecUnauthPkts; 437 UINT64 totalInboundRatelimitDiscardedIPv6IPsecUnauthPkts; 438 UINT64 totalInboundPerIPRatelimitDiscardedIPv6IPsecUnauthPkts; 439 UINT64 totalInboundOtherDiscardedIPv6IPsecUnauthPkts; 440 UINT64 totalInboundAllowedIPv6IPsecAuthPkts; 441 UINT64 totalInboundRatelimitDiscardedIPv6IPsecAuthPkts; 442 UINT64 totalInboundOtherDiscardedIPv6IPsecAuthPkts; 443 UINT64 totalInboundAllowedICMPv6Pkts; 444 UINT64 totalInboundRatelimitDiscardedICMPv6Pkts; 445 UINT64 totalInboundAllowedIPv6FilterExemptPkts; 446 UINT64 totalInboundRatelimitDiscardedIPv6FilterExemptPkts; 447 UINT64 totalInboundDiscardedIPv6FilterBlockPkts; 448 UINT64 totalInboundAllowedDefBlockExemptPkts; 449 UINT64 totalInboundRatelimitDiscardedDefBlockExemptPkts; 450 UINT64 totalInboundDiscardedDefBlockPkts; 451 UINT64 currentInboundIPv6IPsecUnauthPerIPRateLimitQueues; 452 } IPSEC_DOSP_STATISTICS0; 453 454 typedef struct _IPSEC_DOSP_STATE_ENUM_TEMPLATE0 { 455 FWP_V6_ADDR_AND_MASK publicV6AddrMask; 456 FWP_V6_ADDR_AND_MASK internalV6AddrMask; 457 } IPSEC_DOSP_STATE_ENUM_TEMPLATE0; 458 459 typedef struct _IPSEC_DOSP_STATE0 { 460 UINT8 publicHostV6Addr[16]; 461 UINT8 internalHostV6Addr[16]; 462 UINT64 totalInboundIPv6IPsecAuthPackets; 463 UINT64 totalOutboundIPv6IPsecAuthPackets; 464 UINT32 durationSecs; 465 } IPSEC_DOSP_STATE0; 466 467 typedef struct IPSEC_TRAFFIC_STATISTICS1_ { 468 UINT64 encryptedByteCount; 469 UINT64 authenticatedAHByteCount; 470 UINT64 authenticatedESPByteCount; 471 UINT64 transportByteCount; 472 UINT64 tunnelByteCount; 473 UINT64 offloadByteCount; 474 UINT64 totalSuccessfulPackets; 475 } IPSEC_TRAFFIC_STATISTICS1; 476 477 typedef struct IPSEC_AGGREGATE_DROP_PACKET_STATISTICS1_ { 478 UINT32 invalidSpisOnInbound; 479 UINT32 decryptionFailuresOnInbound; 480 UINT32 authenticationFailuresOnInbound; 481 UINT32 udpEspValidationFailuresOnInbound; 482 UINT32 replayCheckFailuresOnInbound; 483 UINT32 invalidClearTextInbound; 484 UINT32 saNotInitializedOnInbound; 485 UINT32 receiveOverIncorrectSaInbound; 486 UINT32 secureReceivesNotMatchingFilters; 487 UINT32 totalDropPacketsInbound; 488 } IPSEC_AGGREGATE_DROP_PACKET_STATISTICS1; 489 490 typedef struct IPSEC_STATISTICS1_ { 491 IPSEC_AGGREGATE_SA_STATISTICS0 aggregateSaStatistics; 492 IPSEC_ESP_DROP_PACKET_STATISTICS0 espDropPacketStatistics; 493 IPSEC_AH_DROP_PACKET_STATISTICS0 ahDropPacketStatistics; 494 IPSEC_AGGREGATE_DROP_PACKET_STATISTICS1 aggregateDropPacketStatistics; 495 IPSEC_TRAFFIC_STATISTICS1 inboundTrafficStatistics; 496 IPSEC_TRAFFIC_STATISTICS1 outboundTrafficStatistics; 497 } IPSEC_STATISTICS1; 498 499 typedef struct IPSEC_SA_BUNDLE1_ { 500 UINT32 flags; 501 IPSEC_SA_LIFETIME0 lifetime; 502 UINT32 idleTimeoutSeconds; 503 UINT32 ndAllowClearTimeoutSeconds; 504 IPSEC_ID0 *ipsecId; 505 UINT32 napContext; 506 UINT32 qmSaId; 507 UINT32 numSAs; 508 IPSEC_SA0 *saList; 509 IPSEC_KEYMODULE_STATE0 *keyModuleState; 510 FWP_IP_VERSION ipVersion; 511 __C89_NAMELESS union { 512 UINT32 peerV4PrivateAddress; 513 ; // case(FWP_IP_VERSION_V6) 514 }; 515 UINT64 mmSaId; 516 IPSEC_PFS_GROUP pfsGroup; 517 GUID saLookupContext; 518 UINT64 qmFilterId; 519 } IPSEC_SA_BUNDLE1; 520 521 typedef struct _IPSEC_VIRTUAL_IF_TUNNEL_INFO0 { 522 UINT64 virtualIfTunnelId; 523 UINT64 trafficSelectorId; 524 } IPSEC_VIRTUAL_IF_TUNNEL_INFO0; 525 526 typedef struct IPSEC_TRAFFIC1_ { 527 FWP_IP_VERSION ipVersion; 528 __C89_NAMELESS union { 529 UINT32 localV4Address; 530 UINT8 localV6Address[16]; 531 }; 532 __C89_NAMELESS union { 533 UINT32 remoteV4Address; 534 UINT8 remoteV6Address[16]; 535 }; 536 IPSEC_TRAFFIC_TYPE trafficType; 537 __C89_NAMELESS union { 538 UINT64 ipsecFilterId; 539 UINT64 tunnelPolicyId; 540 }; 541 UINT16 remotePort; 542 UINT16 localPort; 543 UINT8 ipProtocol; 544 UINT64 localIfLuid; 545 UINT32 realIfProfileId; 546 } IPSEC_TRAFFIC1; 547 548 typedef struct IPSEC_SA_DETAILS1_ { 549 FWP_IP_VERSION ipVersion; 550 FWP_DIRECTION saDirection; 551 IPSEC_TRAFFIC1 traffic; 552 IPSEC_SA_BUNDLE1 saBundle; 553 __C89_NAMELESS union { 554 IPSEC_V4_UDP_ENCAPSULATION0 *udpEncapsulation; 555 ; // case(FWP_IP_VERSION_V6) 556 }; 557 FWPM_FILTER0 *transportFilter; 558 IPSEC_VIRTUAL_IF_TUNNEL_INFO0 *virtualIfTunnelInfo; 559 } IPSEC_SA_DETAILS1; 560 561 typedef struct IPSEC_SA_CONTEXT1_ { 562 UINT64 saContextId; 563 IPSEC_SA_DETAILS1 *inboundSa; 564 IPSEC_SA_DETAILS1 *outboundSa; 565 } IPSEC_SA_CONTEXT1; 566 567 typedef struct IPSEC_GETSPI1_ { 568 IPSEC_TRAFFIC1 inboundIpsecTraffic; 569 FWP_IP_VERSION ipVersion; 570 __C89_NAMELESS union { 571 IPSEC_V4_UDP_ENCAPSULATION0 *inboundUdpEncapsulation; 572 ; // case(FWP_IP_VERSION_V6) 573 }; 574 IPSEC_CRYPTO_MODULE_ID *rngCryptoModuleID; 575 } IPSEC_GETSPI1; 576 577 typedef struct _IPSEC_ADDRESS_INFO0 { 578 UINT32 numV4Addresses; 579 UINT32 *v4Addresses; 580 UINT32 numV6Addresses; 581 FWP_BYTE_ARRAY16 *v6Addresses; 582 } IPSEC_ADDRESS_INFO0; 583 584 #endif /*(_WIN32_WINNT >= 0x0601)*/ 585 #ifdef __cplusplus 586 } 587 #endif 588 589 #endif /*_INC_IPSECTYPES*/ 590
