struct flow_dissector_key_tcp *key, *mask;
 };
 
+struct flow_match_ipsec {
+       struct flow_dissector_key_ipsec *key, *mask;
+};
+
 struct flow_match_mpls {
        struct flow_dissector_key_mpls *key, *mask;
 };
                                 struct flow_match_ports_range *out);
 void flow_rule_match_tcp(const struct flow_rule *rule,
                         struct flow_match_tcp *out);
+void flow_rule_match_ipsec(const struct flow_rule *rule,
+                          struct flow_match_ipsec *out);
 void flow_rule_match_icmp(const struct flow_rule *rule,
                          struct flow_match_icmp *out);
 void flow_rule_match_mpls(const struct flow_rule *rule,
 
 }
 EXPORT_SYMBOL(flow_rule_match_tcp);
 
+void flow_rule_match_ipsec(const struct flow_rule *rule,
+                          struct flow_match_ipsec *out)
+{
+       FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_IPSEC, out);
+}
+EXPORT_SYMBOL(flow_rule_match_ipsec);
+
 void flow_rule_match_icmp(const struct flow_rule *rule,
                          struct flow_match_icmp *out)
 {