Skip to content

Extend XFRM core to allow full offload configuration

Leon Romanovsky netdev 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest6 patches 11 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/6xfrm: add new full offload flaginclude/net/xfrm.h include/uapi/linux/xfrm.h net/xfrm/xfrm_device.c +1 more+18 -00 replies
2/6xfrm: allow state full offload modedrivers/net/ethernet/chelsio/inline_crypto/ch_ipsec/chcr_ipsec.c drivers/net/ethernet/intel/ixgbe/ixgbe_ipsec.c drivers/net/ethernet/intel/ixgbevf/ipsec.c +3 more+42 -50 replies
3/6xfrm: add an interface to offload policyinclude/linux/netdevice.h include/net/xfrm.h net/xfrm/xfrm_device.c +2 more+111 -02 replies
4/6xfrm: add TX datapath support for IPsec full offload modenet/xfrm/xfrm_output.c+19 -04 replies
5/6xfrm: add RX datapath protection for IPsec full offload modeinclude/net/xfrm.h+32 -233 replies
6/6xfrm: enforce separation between priorities of HW/SW policiesinclude/net/netns/xfrm.h net/xfrm/xfrm_policy.c+120 -12 replies

Reviews trailers per patch

2 of 6 patches have a Reviewed-by or Acked-by.

PatchRaed Salem
1/6R-b
2/6
3/6R-b
4/6
5/6
6/6

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.

Read the v1 thread

Cover letter [PATCH ipsec-next 0/6] Extend XFRM core to allow full offload configuration

From: Leon Romanovsky <[email protected]>

The following series extends XFRM core code to handle new type of IPsec offload - full offload.

In this mode, the HW is going to be responsible for whole data path, so both policy and state should be offloaded.

The mlx5 part is coming.

Thanks

Leon Romanovsky (6):
xfrm: add new full offload flag
xfrm: allow state full offload mode
xfrm: add an interface to offload policy
xfrm: add TX datapath support for IPsec full offload mode
xfrm: add RX datapath protection for IPsec full offload mode
xfrm: enforce separation between priorities of HW/SW policies

 .../inline_crypto/ch_ipsec/chcr_ipsec.c       |   4 +
 .../net/ethernet/intel/ixgbe/ixgbe_ipsec.c    |   5 +
 drivers/net/ethernet/intel/ixgbevf/ipsec.c    |   5 +
 .../mellanox/mlx5/core/en_accel/ipsec.c       |   4 +
 drivers/net/netdevsim/ipsec.c                 |   5 +
 include/linux/netdevice.h                     |   3 +
 include/net/netns/xfrm.h                      |   8 +-
 include/net/xfrm.h                            | 102 ++++++++++++----
 include/uapi/linux/xfrm.h                     |   6 +
 net/xfrm/xfrm_device.c                        |  84 ++++++++++++-
 net/xfrm/xfrm_output.c                        |  19 +++
 net/xfrm/xfrm_policy.c                        | 115 ++++++++++++++++++
 net/xfrm/xfrm_user.c                          |  11 ++
 13 files changed, 342 insertions(+), 29 deletions(-)
Signature · 1 line
2.35.1