1/**
2 * This file has no copyright assigned and is placed in the Public Domain.
3 * This file is part of the mingw-w64 runtime package.
4 * No warranty is given; refer to the file DISCLAIMER.PD within this package.
5 */
6#ifndef _INC_IPSECTYPES
7#define _INC_IPSECTYPES
8#include <iketypes.h>
9
10#ifdef __cplusplus
11extern "C" {
12#endif
13
14#if (_WIN32_WINNT >= 0x0600)
15
16typedef UINT8 IPSEC_AUTH_CONFIG;
17typedef UINT8 IPSEC_CIPHER_CONFIG;
18typedef UINT32 IPSEC_SA_SPI;
19typedef UINT64 IPSEC_TOKEN_HANDLE;
20typedef GUID IPSEC_CRYPTO_MODULE_ID;
21
22#ifndef __IPSEC_SA_TRANSFORM0_FWD_DECLARED
23#define __IPSEC_SA_TRANSFORM0_FWD_DECLARED
24typedef struct IPSEC_SA_TRANSFORM0_ IPSEC_SA_TRANSFORM0;
25#endif /* __IPSEC_SA_TRANSFORM0_FWD_DECLARED */
26
27#ifndef __FWPM_FILTER0_FWD_DECLARED
28#define __FWPM_FILTER0_FWD_DECLARED
29typedef struct FWPM_FILTER0_ FWPM_FILTER0;
30#endif /* __FWPM_FILTER0_FWD_DECLARED */
31
32typedef enum IPSEC_FAILURE_POINT_ {
33 IPSEC_FAILURE_NONE,
34 IPSEC_FAILURE_ME,
35 IPSEC_FAILURE_PEER,
36 IPSEC_FAILURE_POINT_MAX
37} IPSEC_FAILURE_POINT;
38
39typedef enum IPSEC_TRAFFIC_TYPE_ {
40 IPSEC_TRAFFIC_TYPE_TRANSPORT,
41 IPSEC_TRAFFIC_TYPE_TUNNEL,
42 IPSEC_TRAFFIC_TYPE_MAX
43} IPSEC_TRAFFIC_TYPE;
44
45typedef enum IPSEC_PFS_GROUP_ {
46 IPSEC_PFS_NONE,
47 IPSEC_PFS_1,
48 IPSEC_PFS_2,
49 IPSEC_PFS_2048,
50 IPSEC_PFS_ECP_256,
51 IPSEC_PFS_ECP_384,
52 IPSEC_PFS_MM,
53 IPSEC_PFS_MAX
54} IPSEC_PFS_GROUP;
55
56typedef enum IPSEC_TRANSFORM_TYPE_ {
57 IPSEC_TRANSFORM_AH = 1,
58 IPSEC_TRANSFORM_ESP_AUTH,
59 IPSEC_TRANSFORM_ESP_CIPHER,
60 IPSEC_TRANSFORM_ESP_AUTH_AND_CIPHER,
61 IPSEC_TRANSFORM_ESP_AUTH_FW,
62 IPSEC_TRANSFORM_TYPE_MAX
63} IPSEC_TRANSFORM_TYPE;
64
65typedef enum IPSEC_AUTH_TYPE_ {
66 IPSEC_AUTH_MD5,
67 IPSEC_AUTH_SHA_1,
68 IPSEC_AUTH_SHA_256,
69 IPSEC_AUTH_AES_128,
70 IPSEC_AUTH_AES_192,
71 IPSEC_AUTH_AES_256,
72 IPSEC_AUTH_MAX
73} IPSEC_AUTH_TYPE;
74
75typedef enum IPSEC_CIPHER_TYPE_ {
76 IPSEC_CIPHER_TYPE_DES = 1,
77 IPSEC_CIPHER_TYPE_3DES,
78 IPSEC_CIPHER_TYPE_AES_128,
79 IPSEC_CIPHER_TYPE_AES_192,
80 IPSEC_CIPHER_TYPE_AES_256,
81 IPSEC_CIPHER_TYPE_MAX
82} IPSEC_CIPHER_TYPE;
83
84typedef enum IPSEC_TOKEN_MODE_ {
85 IPSEC_TOKEN_MODE_MAIN,
86 IPSEC_TOKEN_MODE_EXTENDED,
87 IPSEC_TOKEN_MODE_MAX
88} IPSEC_TOKEN_MODE;
89
90typedef enum IPSEC_TOKEN_PRINCIPAL_ {
91 IPSEC_TOKEN_PRINCIPAL_LOCAL,
92 IPSEC_TOKEN_PRINCIPAL_PEER,
93 IPSEC_TOKEN_PRINCIPAL_MAX
94} IPSEC_TOKEN_PRINCIPAL;
95
96typedef enum IPSEC_TOKEN_TYPE_ {
97 IPSEC_TOKEN_TYPE_MACHINE,
98 IPSEC_TOKEN_TYPE_IMPERSONATION,
99 IPSEC_TOKEN_TYPE_MAX
100} IPSEC_TOKEN_TYPE;
101
102typedef struct IPSEC_SA_LIFETIME0_ {
103 UINT32 lifetimeSeconds;
104 UINT32 lifetimeKilobytes;
105 UINT32 lifetimePackets;
106} IPSEC_SA_LIFETIME0;
107
108typedef struct IPSEC_KEYING_POLICY0_ {
109 UINT32 numKeyMods;
110 GUID *keyModKeys;
111} IPSEC_KEYING_POLICY0;
112
113typedef struct IPSEC_SA_IDLE_TIMEOUT0_ {
114 UINT32 idleTimeoutSeconds;
115 UINT32 idleTimeoutSecondsFailOver;
116} IPSEC_SA_IDLE_TIMEOUT0;
117
118typedef struct IPSEC_PROPOSAL0_ {
119 IPSEC_SA_LIFETIME0 lifetime;
120 UINT32 numSaTransforms;
121 IPSEC_SA_TRANSFORM0 *saTransforms;
122 IPSEC_PFS_GROUP pfsGroup;
123} IPSEC_PROPOSAL0;
124
125typedef struct IPSEC_TRANSPORT_POLICY0_ {
126 UINT32 numIpsecProposals;
127 IPSEC_PROPOSAL0 *ipsecProposals;
128 UINT32 flags;
129 UINT32 ndAllowClearTimeoutSeconds;
130 IPSEC_SA_IDLE_TIMEOUT0 saIdleTimeout;
131 IKEEXT_EM_POLICY0 *emPolicy;
132} IPSEC_TRANSPORT_POLICY0;
133
134typedef struct IPSEC_AUTH_TRANSFORM_ID0_ {
135 IPSEC_AUTH_TYPE authType;
136 IPSEC_AUTH_CONFIG authConfig;
137} IPSEC_AUTH_TRANSFORM_ID0;
138
139typedef struct IPSEC_AUTH_TRANSFORM0_ {
140 IPSEC_AUTH_TRANSFORM_ID0 authTransformId;
141 IPSEC_CRYPTO_MODULE_ID *cryptoModuleId;
142} IPSEC_AUTH_TRANSFORM0;
143
144typedef struct IPSEC_CIPHER_TRANSFORM_ID0_ {
145 IPSEC_CIPHER_TYPE cipherType;
146 IPSEC_CIPHER_CONFIG cipherConfig;
147} IPSEC_CIPHER_TRANSFORM_ID0;
148
149typedef struct IPSEC_CIPHER_TRANSFORM0_ {
150 IPSEC_CIPHER_TRANSFORM_ID0 cipherTransformId;
151 IPSEC_CRYPTO_MODULE_ID *cryptoModuleId;
152} IPSEC_CIPHER_TRANSFORM0;
153
154typedef struct IPSEC_AUTH_AND_CIPHER_TRANSFORM0_ {
155 IPSEC_AUTH_TRANSFORM0 authTransform;
156 IPSEC_CIPHER_TRANSFORM0 cipherTransform;
157} IPSEC_AUTH_AND_CIPHER_TRANSFORM0;
158
159typedef struct IPSEC_SA_TRANSFORM0_ {
160 IPSEC_TRANSFORM_TYPE ipsecTransformType;
161 __C89_NAMELESS union {
162 IPSEC_AUTH_TRANSFORM0 *ahTransform;
163 IPSEC_AUTH_TRANSFORM0 *espAuthTransform;
164 IPSEC_CIPHER_TRANSFORM0 *espCipherTransform;
165 IPSEC_AUTH_AND_CIPHER_TRANSFORM0 *espAuthAndCipherTransform;
166 IPSEC_AUTH_TRANSFORM0 *espAuthFwTransform;
167 };
168} IPSEC_SA_TRANSFORM0;
169
170typedef struct IPSEC_TUNNEL_ENDPOINTS0_ {
171 FWP_IP_VERSION ipVersion;
172 __C89_NAMELESS union {
173 UINT32 localV4Address;
174 UINT8 localV6Address[16];
175 };
176 __C89_NAMELESS union {
177 UINT32 remoteV4Address;
178 UINT8 remoteV6Address[16];
179 };
180} IPSEC_TUNNEL_ENDPOINTS0;
181
182typedef struct IPSEC_TUNNEL_POLICY0_ {
183 UINT32 flags;
184 UINT32 numIpsecProposals;
185 IPSEC_PROPOSAL0 *ipsecProposals;
186 IPSEC_TUNNEL_ENDPOINTS0 tunnelEndpoints;
187 IPSEC_SA_IDLE_TIMEOUT0 saIdleTimeout;
188 IKEEXT_EM_POLICY0 *emPolicy;
189} IPSEC_TUNNEL_POLICY0;
190
191typedef struct IPSEC_V4_UDP_ENCAPSULATION0_ {
192 UINT16 localUdpEncapPort;
193 UINT16 remoteUdpEncapPort;
194} IPSEC_V4_UDP_ENCAPSULATION0;
195
196typedef struct IPSEC_AGGREGATE_SA_STATISTICS0_ {
197 UINT32 activeSas;
198 UINT32 pendingSaNegotiations;
199 UINT32 totalSasAdded;
200 UINT32 totalSasDeleted;
201 UINT32 successfulRekeys;
202 UINT32 activeTunnels;
203 UINT32 offloadedSas;
204} IPSEC_AGGREGATE_SA_STATISTICS0;
205
206typedef struct IPSEC_ESP_DROP_PACKET_STATISTICS0_ {
207 UINT32 invalidSpisOnInbound;
208 UINT32 decryptionFailuresOnInbound;
209 UINT32 authenticationFailuresOnInbound;
210 UINT32 replayCheckFailuresOnInbound;
211 UINT32 saNotInitializedOnInbound;
212} IPSEC_ESP_DROP_PACKET_STATISTICS0;
213
214typedef struct IPSEC_AH_DROP_PACKET_STATISTICS0_ {
215 UINT32 invalidSpisOnInbound;
216 UINT32 authenticationFailuresOnInbound;
217 UINT32 replayCheckFailuresOnInbound;
218 UINT32 saNotInitializedOnInbound;
219} IPSEC_AH_DROP_PACKET_STATISTICS0;
220
221typedef struct IPSEC_AGGREGATE_DROP_PACKET_STATISTICS0_ {
222 UINT32 invalidSpisOnInbound;
223 UINT32 decryptionFailuresOnInbound;
224 UINT32 authenticationFailuresOnInbound;
225 UINT32 udpEspValidationFailuresOnInbound;
226 UINT32 replayCheckFailuresOnInbound;
227 UINT32 invalidClearTextInbound;
228 UINT32 saNotInitializedOnInbound;
229 UINT32 receiveOverIncorrectSaInbound;
230 UINT32 secureReceivesNotMatchingFilters;
231} IPSEC_AGGREGATE_DROP_PACKET_STATISTICS0;
232
233typedef struct IPSEC_TRAFFIC_STATISTICS0_ {
234 UINT64 encryptedByteCount;
235 UINT64 authenticatedAHByteCount;
236 UINT64 authenticatedESPByteCount;
237 UINT64 transportByteCount;
238 UINT64 tunnelByteCount;
239 UINT64 offloadByteCount;
240} IPSEC_TRAFFIC_STATISTICS0;
241
242typedef struct IPSEC_STATISTICS0_ {
243 IPSEC_AGGREGATE_SA_STATISTICS0 aggregateSaStatistics;
244 IPSEC_ESP_DROP_PACKET_STATISTICS0 espDropPacketStatistics;
245 IPSEC_AH_DROP_PACKET_STATISTICS0 ahDropPacketStatistics;
246 IPSEC_AGGREGATE_DROP_PACKET_STATISTICS0 aggregateDropPacketStatistics;
247 IPSEC_TRAFFIC_STATISTICS0 inboundTrafficStatistics;
248 IPSEC_TRAFFIC_STATISTICS0 outboundTrafficStatistics;
249} IPSEC_STATISTICS0;
250
251typedef struct IPSEC_TOKEN0_ {
252 IPSEC_TOKEN_TYPE type;
253 IPSEC_TOKEN_PRINCIPAL principal;
254 IPSEC_TOKEN_MODE mode;
255 IPSEC_TOKEN_HANDLE token;
256} IPSEC_TOKEN0;
257
258typedef struct IPSEC_ID0_ {
259 wchar_t *mmTargetName;
260 wchar_t *emTargetName;
261 UINT32 numTokens;
262 IPSEC_TOKEN0 *tokens;
263 UINT64 explicitCredentials;
264 UINT64 logonId;
265} IPSEC_ID0;
266
267typedef struct IPSEC_SA_AUTH_INFORMATION0_ {
268 IPSEC_AUTH_TRANSFORM0 authTransform;
269 FWP_BYTE_BLOB authKey;
270} IPSEC_SA_AUTH_INFORMATION0;
271
272typedef struct IPSEC_SA_CIPHER_INFORMATION0_ {
273 IPSEC_CIPHER_TRANSFORM0 cipherTransform;
274 FWP_BYTE_BLOB cipherKey;
275} IPSEC_SA_CIPHER_INFORMATION0;
276
277typedef struct IPSEC_SA_AUTH_AND_CIPHER_INFORMATION0_ {
278 IPSEC_SA_CIPHER_INFORMATION0 saCipherInformation;
279 IPSEC_SA_AUTH_INFORMATION0 saAuthInformation;
280} IPSEC_SA_AUTH_AND_CIPHER_INFORMATION0;
281
282typedef struct IPSEC_SA0_ {
283 IPSEC_SA_SPI spi;
284 IPSEC_TRANSFORM_TYPE saTransformType;
285 __C89_NAMELESS union {
286 IPSEC_SA_AUTH_INFORMATION0 *ahInformation;
287 IPSEC_SA_AUTH_INFORMATION0 *espAuthInformation;
288 IPSEC_SA_CIPHER_INFORMATION0 *espCipherInformation;
289 IPSEC_SA_AUTH_AND_CIPHER_INFORMATION0 *espAuthAndCipherInformation;
290 IPSEC_SA_AUTH_INFORMATION0 *espAuthFwInformation;
291 };
292} IPSEC_SA0;
293
294typedef struct IPSEC_KEYMODULE_STATE0_ {
295 GUID keyModuleKey;
296 FWP_BYTE_BLOB stateBlob;
297} IPSEC_KEYMODULE_STATE0;
298
299typedef struct IPSEC_SA_BUNDLE0_ {
300 UINT32 flags;
301 IPSEC_SA_LIFETIME0 lifetime;
302 UINT32 idleTimeoutSeconds;
303 UINT32 ndAllowClearTimeoutSeconds;
304 IPSEC_ID0 *ipsecId;
305 UINT32 napContext;
306 UINT32 qmSaId;
307 UINT32 numSAs;
308 IPSEC_SA0 *saList;
309 IPSEC_KEYMODULE_STATE0 *keyModuleState;
310 FWP_IP_VERSION ipVersion;
311 __C89_NAMELESS union {
312 UINT32 peerV4PrivateAddress;
313 ; // case(FWP_IP_VERSION_V6)
314 };
315 UINT64 mmSaId;
316 IPSEC_PFS_GROUP pfsGroup;
317} IPSEC_SA_BUNDLE0;
318
319typedef struct IPSEC_TRAFFIC0_ {
320 FWP_IP_VERSION ipVersion;
321 __C89_NAMELESS union {
322 UINT32 localV4Address;
323 UINT8 localV6Address[16];
324 };
325 __C89_NAMELESS union {
326 UINT32 remoteV4Address;
327 UINT8 remoteV6Address[16];
328 };
329 IPSEC_TRAFFIC_TYPE trafficType;
330 __C89_NAMELESS union {
331 UINT64 ipsecFilterId;
332 UINT64 tunnelPolicyId;
333 };
334 UINT16 remotePort;
335} IPSEC_TRAFFIC0;
336
337typedef struct IPSEC_SA_DETAILS0_ {
338 FWP_IP_VERSION ipVersion;
339 FWP_DIRECTION saDirection;
340 IPSEC_TRAFFIC0 traffic;
341 IPSEC_SA_BUNDLE0 saBundle;
342 __C89_NAMELESS union {
343 IPSEC_V4_UDP_ENCAPSULATION0 *udpEncapsulation;
344 ; // case(FWP_IP_VERSION_V6)
345 };
346 FWPM_FILTER0 *transportFilter;
347} IPSEC_SA_DETAILS0;
348
349typedef struct IPSEC_SA_CONTEXT0_ {
350 UINT64 saContextId;
351 IPSEC_SA_DETAILS0 *inboundSa;
352 IPSEC_SA_DETAILS0 *outboundSa;
353} IPSEC_SA_CONTEXT0;
354
355typedef struct IPSEC_GETSPI0_ {
356 IPSEC_TRAFFIC0 inboundIpsecTraffic;
357 FWP_IP_VERSION ipVersion;
358 __C89_NAMELESS union {
359 IPSEC_V4_UDP_ENCAPSULATION0 *inboundUdpEncapsulation;
360 ; // case(FWP_IP_VERSION_V6)
361 };
362 IPSEC_CRYPTO_MODULE_ID *rngCryptoModuleID;
363} IPSEC_GETSPI0;
364
365typedef struct IPSEC_SA_ENUM_TEMPLATE0_ {
366 FWP_DIRECTION saDirection;
367} IPSEC_SA_ENUM_TEMPLATE0;
368
369typedef struct IPSEC_SA_CONTEXT_ENUM_TEMPLATE0_ {
370 FWP_CONDITION_VALUE0 localSubNet;
371 FWP_CONDITION_VALUE0 remoteSubNet;
372} IPSEC_SA_CONTEXT_ENUM_TEMPLATE0;
373
374#endif /*(_WIN32_WINNT >= 0x0600)*/
375#if (_WIN32_WINNT >= 0x0601)
376
377typedef struct IPSEC_TUNNEL_ENDPOINTS1_ {
378 FWP_IP_VERSION ipVersion;
379 __C89_NAMELESS union {
380 UINT32 localV4Address;
381 UINT8 localV6Address[16];
382 };
383 __C89_NAMELESS union {
384 UINT32 remoteV4Address;
385 UINT8 remoteV6Address[16];
386 };
387 UINT64 localIfLuid;
388} IPSEC_TUNNEL_ENDPOINTS1;
389
390typedef struct IPSEC_TUNNEL_POLICY1_ {
391 UINT32 flags;
392 UINT32 numIpsecProposals;
393 IPSEC_PROPOSAL0 *ipsecProposals;
394 IPSEC_TUNNEL_ENDPOINTS1 tunnelEndpoints;
395 IPSEC_SA_IDLE_TIMEOUT0 saIdleTimeout;
396 IKEEXT_EM_POLICY1 *emPolicy;
397} IPSEC_TUNNEL_POLICY1;
398
399typedef struct IPSEC_TRANSPORT_POLICY1_ {
400 UINT32 numIpsecProposals;
401 IPSEC_PROPOSAL0 *ipsecProposals;
402 UINT32 flags;
403 UINT32 ndAllowClearTimeoutSeconds;
404 IPSEC_SA_IDLE_TIMEOUT0 saIdleTimeout;
405 IKEEXT_EM_POLICY1 *emPolicy;
406} IPSEC_TRANSPORT_POLICY1;
407
408typedef struct _IPSEC_DOSP_OPTIONS0 {
409 UINT32 stateIdleTimeoutSeconds;
410 UINT32 perIPRateLimitQueueIdleTimeoutSeconds;
411 UINT8 ipV6IPsecUnauthDscp;
412 UINT32 ipV6IPsecUnauthRateLimitBytesPerSec;
413 UINT32 ipV6IPsecUnauthPerIPRateLimitBytesPerSec;
414 UINT8 ipV6IPsecAuthDscp;
415 UINT32 ipV6IPsecAuthRateLimitBytesPerSec;
416 UINT8 icmpV6Dscp;
417 UINT32 icmpV6RateLimitBytesPerSec;
418 UINT8 ipV6FilterExemptDscp;
419 UINT32 ipV6FilterExemptRateLimitBytesPerSec;
420 UINT8 defBlockExemptDscp;
421 UINT32 defBlockExemptRateLimitBytesPerSec;
422 UINT32 maxStateEntries;
423 UINT32 maxPerIPRateLimitQueues;
424 UINT32 flags;
425 UINT32 numPublicIFLuids;
426 UINT64 *publicIFLuids;
427 UINT32 numInternalIFLuids;
428 UINT64 *internalIFLuids;
429 FWP_V6_ADDR_AND_MASK publicV6AddrMask;
430 FWP_V6_ADDR_AND_MASK internalV6AddrMask;
431} IPSEC_DOSP_OPTIONS0;
432
433typedef struct _IPSEC_DOSP_STATISTICS0 {
434 UINT64 totalStateEntriesCreated;
435 UINT64 currentStateEntries;
436 UINT64 totalInboundAllowedIPv6IPsecUnauthPkts;
437 UINT64 totalInboundRatelimitDiscardedIPv6IPsecUnauthPkts;
438 UINT64 totalInboundPerIPRatelimitDiscardedIPv6IPsecUnauthPkts;
439 UINT64 totalInboundOtherDiscardedIPv6IPsecUnauthPkts;
440 UINT64 totalInboundAllowedIPv6IPsecAuthPkts;
441 UINT64 totalInboundRatelimitDiscardedIPv6IPsecAuthPkts;
442 UINT64 totalInboundOtherDiscardedIPv6IPsecAuthPkts;
443 UINT64 totalInboundAllowedICMPv6Pkts;
444 UINT64 totalInboundRatelimitDiscardedICMPv6Pkts;
445 UINT64 totalInboundAllowedIPv6FilterExemptPkts;
446 UINT64 totalInboundRatelimitDiscardedIPv6FilterExemptPkts;
447 UINT64 totalInboundDiscardedIPv6FilterBlockPkts;
448 UINT64 totalInboundAllowedDefBlockExemptPkts;
449 UINT64 totalInboundRatelimitDiscardedDefBlockExemptPkts;
450 UINT64 totalInboundDiscardedDefBlockPkts;
451 UINT64 currentInboundIPv6IPsecUnauthPerIPRateLimitQueues;
452} IPSEC_DOSP_STATISTICS0;
453
454typedef struct _IPSEC_DOSP_STATE_ENUM_TEMPLATE0 {
455 FWP_V6_ADDR_AND_MASK publicV6AddrMask;
456 FWP_V6_ADDR_AND_MASK internalV6AddrMask;
457} IPSEC_DOSP_STATE_ENUM_TEMPLATE0;
458
459typedef struct _IPSEC_DOSP_STATE0 {
460 UINT8 publicHostV6Addr[16];
461 UINT8 internalHostV6Addr[16];
462 UINT64 totalInboundIPv6IPsecAuthPackets;
463 UINT64 totalOutboundIPv6IPsecAuthPackets;
464 UINT32 durationSecs;
465} IPSEC_DOSP_STATE0;
466
467typedef struct IPSEC_TRAFFIC_STATISTICS1_ {
468 UINT64 encryptedByteCount;
469 UINT64 authenticatedAHByteCount;
470 UINT64 authenticatedESPByteCount;
471 UINT64 transportByteCount;
472 UINT64 tunnelByteCount;
473 UINT64 offloadByteCount;
474 UINT64 totalSuccessfulPackets;
475} IPSEC_TRAFFIC_STATISTICS1;
476
477typedef struct IPSEC_AGGREGATE_DROP_PACKET_STATISTICS1_ {
478 UINT32 invalidSpisOnInbound;
479 UINT32 decryptionFailuresOnInbound;
480 UINT32 authenticationFailuresOnInbound;
481 UINT32 udpEspValidationFailuresOnInbound;
482 UINT32 replayCheckFailuresOnInbound;
483 UINT32 invalidClearTextInbound;
484 UINT32 saNotInitializedOnInbound;
485 UINT32 receiveOverIncorrectSaInbound;
486 UINT32 secureReceivesNotMatchingFilters;
487 UINT32 totalDropPacketsInbound;
488} IPSEC_AGGREGATE_DROP_PACKET_STATISTICS1;
489
490typedef struct IPSEC_STATISTICS1_ {
491 IPSEC_AGGREGATE_SA_STATISTICS0 aggregateSaStatistics;
492 IPSEC_ESP_DROP_PACKET_STATISTICS0 espDropPacketStatistics;
493 IPSEC_AH_DROP_PACKET_STATISTICS0 ahDropPacketStatistics;
494 IPSEC_AGGREGATE_DROP_PACKET_STATISTICS1 aggregateDropPacketStatistics;
495 IPSEC_TRAFFIC_STATISTICS1 inboundTrafficStatistics;
496 IPSEC_TRAFFIC_STATISTICS1 outboundTrafficStatistics;
497} IPSEC_STATISTICS1;
498
499typedef struct IPSEC_SA_BUNDLE1_ {
500 UINT32 flags;
501 IPSEC_SA_LIFETIME0 lifetime;
502 UINT32 idleTimeoutSeconds;
503 UINT32 ndAllowClearTimeoutSeconds;
504 IPSEC_ID0 *ipsecId;
505 UINT32 napContext;
506 UINT32 qmSaId;
507 UINT32 numSAs;
508 IPSEC_SA0 *saList;
509 IPSEC_KEYMODULE_STATE0 *keyModuleState;
510 FWP_IP_VERSION ipVersion;
511 __C89_NAMELESS union {
512 UINT32 peerV4PrivateAddress;
513 ; // case(FWP_IP_VERSION_V6)
514 };
515 UINT64 mmSaId;
516 IPSEC_PFS_GROUP pfsGroup;
517 GUID saLookupContext;
518 UINT64 qmFilterId;
519} IPSEC_SA_BUNDLE1;
520
521typedef struct _IPSEC_VIRTUAL_IF_TUNNEL_INFO0 {
522 UINT64 virtualIfTunnelId;
523 UINT64 trafficSelectorId;
524} IPSEC_VIRTUAL_IF_TUNNEL_INFO0;
525
526typedef struct IPSEC_TRAFFIC1_ {
527 FWP_IP_VERSION ipVersion;
528 __C89_NAMELESS union {
529 UINT32 localV4Address;
530 UINT8 localV6Address[16];
531 };
532 __C89_NAMELESS union {
533 UINT32 remoteV4Address;
534 UINT8 remoteV6Address[16];
535 };
536 IPSEC_TRAFFIC_TYPE trafficType;
537 __C89_NAMELESS union {
538 UINT64 ipsecFilterId;
539 UINT64 tunnelPolicyId;
540 };
541 UINT16 remotePort;
542 UINT16 localPort;
543 UINT8 ipProtocol;
544 UINT64 localIfLuid;
545 UINT32 realIfProfileId;
546} IPSEC_TRAFFIC1;
547
548typedef struct IPSEC_SA_DETAILS1_ {
549 FWP_IP_VERSION ipVersion;
550 FWP_DIRECTION saDirection;
551 IPSEC_TRAFFIC1 traffic;
552 IPSEC_SA_BUNDLE1 saBundle;
553 __C89_NAMELESS union {
554 IPSEC_V4_UDP_ENCAPSULATION0 *udpEncapsulation;
555 ; // case(FWP_IP_VERSION_V6)
556 };
557 FWPM_FILTER0 *transportFilter;
558 IPSEC_VIRTUAL_IF_TUNNEL_INFO0 *virtualIfTunnelInfo;
559} IPSEC_SA_DETAILS1;
560
561typedef struct IPSEC_SA_CONTEXT1_ {
562 UINT64 saContextId;
563 IPSEC_SA_DETAILS1 *inboundSa;
564 IPSEC_SA_DETAILS1 *outboundSa;
565} IPSEC_SA_CONTEXT1;
566
567typedef struct IPSEC_GETSPI1_ {
568 IPSEC_TRAFFIC1 inboundIpsecTraffic;
569 FWP_IP_VERSION ipVersion;
570 __C89_NAMELESS union {
571 IPSEC_V4_UDP_ENCAPSULATION0 *inboundUdpEncapsulation;
572 ; // case(FWP_IP_VERSION_V6)
573 };
574 IPSEC_CRYPTO_MODULE_ID *rngCryptoModuleID;
575} IPSEC_GETSPI1;
576
577typedef struct _IPSEC_ADDRESS_INFO0 {
578 UINT32 numV4Addresses;
579 UINT32 *v4Addresses;
580 UINT32 numV6Addresses;
581 FWP_BYTE_ARRAY16 *v6Addresses;
582} IPSEC_ADDRESS_INFO0;
583
584#endif /*(_WIN32_WINNT >= 0x0601)*/
585#ifdef __cplusplus
586}
587#endif
588
589#endif /*_INC_IPSECTYPES*/