Skip to content

avoid plaintext rdma offload if encryption is required

Stefan Metzmacher linux-cifs stable 2 versions In review

Get series with b4
b4 am [email protected]

Versions newest first · linked by author and title

  1. v2 Latest3 patches 1 replyIn review
  2. v13 patches 2 repliesSuperseded

Changes in v2 from the cover letter

- Added missing Cc: list on commit 2/3

Patches in v2 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/3cifs: introduce cifs_io_parms in smb2_async_writev()fs/cifs/smb2pdu.c+39 -140 replies
2/3cifs: split out smb3_use_rdma_offload() helperfs/cifs/smb2pdu.c+28 -60 replies
3/3cifs: don't try to use rdma offload on encrypted connectionsfs/cifs/smb2pdu.c+4 -00 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v2 yet.

Read the v2 thread

Cover letter [PATCH v2 0/3] avoid plaintext rdma offload if encryption is required

I think it is a security problem to send confidential data in plaintext over the wire, so we should avoid doing that even if rdma is in use.

We already have a similar check to prevent data integrity problems for rdma offload.

Modern Windows servers support signed and encrypted rdma offload, but we don't support this yet...

Changes v2:
- Added missing Cc: list on commit 2/3

Stefan Metzmacher (3):
cifs: introduce cifs_io_parms in smb2_async_writev()
cifs: split out smb3_use_rdma_offload() helper
cifs: don't try to use rdma offload on encrypted connections

 fs/cifs/smb2pdu.c | 89 +++++++++++++++++++++++++++++++++++++----------
 1 file changed, 70 insertions(+), 19 deletions(-)
Signature · 1 line
2.34.1