Extend packet offload to fully support libreswan
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest9 patches 5 repliesIn review
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/9 | net/mlx5: fs_chains: Refactor to detach chains from tc usagedrivers/ drivers/ drivers/ +1 more | +55 | 0 replies | |
| 2/9 | net/mlx5: fs_core: Allow ignore_flow_level on TX destdrivers/ | +2 | 0 replies | |
| 3/9 | net/mlx5e: Use chains for IPsec policy priority offloaddrivers/ drivers/ drivers/ +1 more | +315 | 0 replies | |
| 4/9 | xfrm: add new device offload acquire flaginclude/ net/ | +6 | 1 reply | |
| 5/9 | xfrm: copy_to_user_state fetch offloaded SA packets/bytes statisticsnet/ | +2 | 1 reply | |
| 6/9 | net/mlx5e: Allow policies with reqid 0, to support IKE policy holesdrivers/ drivers/ drivers/ | +59 | 0 replies | |
| 7/9 | net/mlx5e: Support IPsec acquire default SAdrivers/ | +21 | 0 replies | |
| 8/9 | net/mlx5e: Use one rule to count all IPsec Tx offloaded trafficdrivers/ drivers/ | +55 | 0 replies | |
| 9/9 | net/mlx5e: Update IPsec per SA packets/bytes countdrivers/ drivers/ drivers/ +1 more | +42 | 0 replies |
Reviews trailers per patch
5 of 9 patches have a Reviewed-by or Acked-by.
| Patch | Raed Salem | Saeed Mahameed | Steffen Klassert |
|---|---|---|---|
| 1/9 | R-b | ||
| 2/9 | R-b | R-b | |
| 3/9 | R-b | ||
| 4/9 | A-b | ||
| 5/9 | A-b | ||
| 6/9 | |||
| 7/9 | |||
| 8/9 | |||
| 9/9 |
Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 3 reviewers.
Cover letter [PATCH xfrm-next 0/9] Extend packet offload to fully support libreswan
From: Leon Romanovsky <[email protected]>
Hi Steffen,
The following patches are an outcome of Raed's work to add packet offload support to libreswan [1].
The series includes:
* Priority support to IPsec policies
* Statistics per-SA (visible through "ip -s xfrm state ..." command)
* Support to IKE policy holes
* Fine tuning to acquire logic.
--------------------------
Future submission roadmap, which can be seen here [2]:
* Support packet offload in IPsec tunnel mode
* Rework lifetime counters support to avoid HW bugs/limitations
* Some general cleanup.
So how do you want me to route the patches, as they have a dependency between them? xfrm-next/net-next/mlx5-next?
Thanks
[1] https://github.com/libreswan/libreswan/pull/986q
[2] https://git.kernel.org/pub/scm/linux/kernel/git/leon/linux-rdma.git/log/?h=xfrm-next
Paul Blakey (3):
net/mlx5: fs_chains: Refactor to detach chains from tc usage net/mlx5: fs_core: Allow ignore_flow_level on TX dest net/mlx5e: Use chains for IPsec policy priority offload
Raed Salem (6):
xfrm: add new device offload acquire flag
xfrm: copy_to_user_state fetch offloaded SA packets/bytes statistics net/mlx5e: Allow policies with reqid 0, to support IKE policy holes net/mlx5e: Support IPsec acquire default SA
net/mlx5e: Use one rule to count all IPsec Tx offloaded traffic net/mlx5e: Update IPsec per SA packets/bytes count
.../mellanox/mlx5/core/en_accel/ipsec.c | 71 ++- .../mellanox/mlx5/core/en_accel/ipsec.h | 13 +- .../mellanox/mlx5/core/en_accel/ipsec_fs.c | 528 ++++++++++++++---- .../mlx5/core/en_accel/ipsec_offload.c | 32 +- .../net/ethernet/mellanox/mlx5/core/en_tc.c | 20 +- .../mellanox/mlx5/core/eswitch_offloads.c | 6 +- .../net/ethernet/mellanox/mlx5/core/fs_core.c | 5 +- .../mellanox/mlx5/core/lib/fs_chains.c | 89 ++- .../mellanox/mlx5/core/lib/fs_chains.h | 9 +- include/net/xfrm.h | 5 + net/xfrm/xfrm_state.c | 1 + net/xfrm/xfrm_user.c | 2 + 12 files changed, 553 insertions(+), 228 deletions(-)
Signature · 1 line
2.39.2