Skip to content

mlx5 IPsec packet offload support (Part I)

Leon Romanovsky netdev 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest16 patches 1 replyIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/16net/mlx5: Return ready to use ASO WQEdrivers/net/ethernet/mellanox/mlx5/core/en/tc/meter.c drivers/net/ethernet/mellanox/mlx5/core/lib/aso.c drivers/net/ethernet/mellanox/mlx5/core/lib/aso.h+6 -40 replies
2/16net/mlx5: Add HW definitions for IPsec packet offloaddrivers/net/ethernet/mellanox/mlx5/core/lib/aso.h include/linux/mlx5/mlx5_ifc.h+51 -30 replies
3/16net/mlx5e: Advertise IPsec packet offload supportdrivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.h drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_offload.c+7 -00 replies
4/16net/mlx5e: Store replay window in XFRM attributesdrivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.c drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.h+13 -00 replies
5/16net/mlx5e: Remove extra layers of definesdrivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.c drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.h drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_fs.c +1 more+23 -430 replies
6/16net/mlx5e: Create symmetric IPsec RX and TX flow steering structsdrivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.h drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_fs.c+130 -1540 replies
7/16net/mlx5e: Use mlx5 print routines for low level IPsec codedrivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_fs.c+14 -120 replies
8/16net/mlx5e: Remove accesses to priv for low level IPsec FS codedrivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.c drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.h drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_fs.c+56 -590 replies
9/16net/mlx5e: Create Advanced Steering Operation object for IPsecdrivers/net/ethernet/mellanox/mlx5/core/en.h drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.c drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.h +1 more+80 -00 replies
10/16net/mlx5e: Create hardware IPsec packet offload objectsdrivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.c drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.h drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_offload.c+39 -20 replies
11/16net/mlx5e: Move IPsec flow table creation to separate functiondrivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_fs.c+23 -220 replies
12/16net/mlx5e: Refactor FTE setup code to be more cleardrivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_fs.c+85 -540 replies
13/16net/mlx5e: Flatten the IPsec RX add rule pathdrivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.h drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_fs.c+53 -370 replies
14/16net/mlx5e: Make clear what IPsec rx_err doesdrivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_fs.c+16 -220 replies
15/16net/mlx5e: Group IPsec miss handles into separate structdrivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_fs.c+11 -70 replies
16/16net/mlx5e: Generalize creation of default IPsec miss group and ruledrivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_fs.c+23 -240 replies

Reviews trailers per patch

All 16 patches have a Reviewed-by or Acked-by.

PatchRaed SalemSaeed Mahameed
1/16R-b
2/16R-b R-b
3/16R-b R-b
4/16R-b R-b
5/16R-b R-b
6/16R-b R-b
7/16R-b
8/16R-b R-b
9/16R-b
10/16R-b R-b
11/16R-b R-b
12/16R-b R-b
13/16R-b R-b
14/16R-b
15/16R-b R-b
16/16R-b R-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.

Read the v1 thread

Cover letter [PATCH xfrm-next 00/16] mlx5 IPsec packet offload support (Part I)

From: Leon Romanovsky <[email protected]>

Hi,

This series follows previously sent "Extend XFRM core to allow packet offload configuration" series [1].

It is first part with refactoring to mlx5 allow us natively extend mlx5 IPsec logic to support both crypto and packet offloads.

Thanks

[1] https://lore.kernel.org/all/[email protected]

Leon Romanovsky (16):
net/mlx5: Return ready to use ASO WQE
net/mlx5: Add HW definitions for IPsec packet offload net/mlx5e: Advertise IPsec packet offload support net/mlx5e: Store replay window in XFRM attributes net/mlx5e: Remove extra layers of defines
net/mlx5e: Create symmetric IPsec RX and TX flow steering structs net/mlx5e: Use mlx5 print routines for low level IPsec code net/mlx5e: Remove accesses to priv for low level IPsec FS code net/mlx5e: Create Advanced Steering Operation object for IPsec net/mlx5e: Create hardware IPsec packet offload objects net/mlx5e: Move IPsec flow table creation to separate function net/mlx5e: Refactor FTE setup code to be more clear net/mlx5e: Flatten the IPsec RX add rule path
net/mlx5e: Make clear what IPsec rx_err does
net/mlx5e: Group IPsec miss handles into separate struct net/mlx5e: Generalize creation of default IPsec miss group and rule

 drivers/net/ethernet/mellanox/mlx5/core/en.h  |   1 +
 .../ethernet/mellanox/mlx5/core/en/tc/meter.c |   1 -
 .../mellanox/mlx5/core/en_accel/ipsec.c       |  50 +-
 .../mellanox/mlx5/core/en_accel/ipsec.h       |  48 +-
 .../mellanox/mlx5/core/en_accel/ipsec_fs.c    | 629 +++++++++---------
 .../mlx5/core/en_accel/ipsec_offload.c        | 107 ++-
 .../net/ethernet/mellanox/mlx5/core/lib/aso.c |   7 +-
 .../net/ethernet/mellanox/mlx5/core/lib/aso.h |   3 +-
 include/linux/mlx5/mlx5_ifc.h                 |  53 +-
 9 files changed, 543 insertions(+), 356 deletions(-)
Signature · 1 line
2.38.1