Improve IPsec limits, ESN and replay window in mlx5
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest10 patches 1 replyIn review
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/10 | net/mlx5e: Factor out IPsec ASO update functiondrivers/ | +14 | 0 replies | |
| 2/10 | net/mlx5e: Prevent zero IPsec soft/hard limitsdrivers/ | +5 | 0 replies | |
| 3/10 | net/mlx5e: Add SW implementation to support IPsec 64 bit soft and hard limitsdrivers/ drivers/ drivers/ | +227 | 0 replies | |
| 4/10 | net/mlx5e: Overcome slow response for first IPsec ASO WQEdrivers/ | +7 | 0 replies | |
| 5/10 | xfrm: don't require advance ESN callback for packet offloadnet/ | +1 | 1 reply | |
| 6/10 | net/mlx5e: Remove ESN callbacks if it is not supporteddrivers/ drivers/ drivers/ | +38 | 0 replies | |
| 7/10 | net/mlx5e: Set IPsec replay sequence numbersdrivers/ drivers/ drivers/ | +60 | 0 replies | |
| 8/10 | net/mlx5e: Reduce contention in IPsec workqueuedrivers/ | +2 | 0 replies | |
| 9/10 | net/mlx5e: Generalize IPsec work structsdrivers/ drivers/ drivers/ | +66 | 0 replies | |
| 10/10 | net/mlx5e: Simulate missing IPsec TX limits hardware functionalitydrivers/ drivers/ drivers/ | +99 | 0 replies |
Reviews trailers per patch
8 of 10 patches have a Reviewed-by or Acked-by.
| Patch | Raed Salem | Steffen Klassert |
|---|---|---|
| 1/10 | R-b | |
| 2/10 | R-b | |
| 3/10 | R-b | |
| 4/10 | R-b | |
| 5/10 | R-b | A-b |
| 6/10 | R-b | |
| 7/10 | R-b | |
| 8/10 | ||
| 9/10 | R-b | |
| 10/10 |
Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.
Cover letter [PATCH net-next 00/10] Improve IPsec limits, ESN and replay window in mlx5
From: Leon Romanovsky <[email protected]>
Hi,
This series overcomes existing hardware limitations in Mellanox ConnectX devices around handling IPsec soft and hard limits.
In addition, the ESN logic is tied and added an interface to configure replay window sequence numbers through existing iproute2 interface.
ip xfrm state ... [ replay-seq SEQ ] [ replay-oseq SEQ ]
[ replay-seq-hi SEQ ] [ replay-oseq-hi SEQ ]
Thanks
Leon Romanovsky (10):
net/mlx5e: Factor out IPsec ASO update function
net/mlx5e: Prevent zero IPsec soft/hard limits
net/mlx5e: Add SW implementation to support IPsec 64 bit soft and hard
limits
net/mlx5e: Overcome slow response for first IPsec ASO WQE
xfrm: don't require advance ESN callback for packet offload net/mlx5e: Remove ESN callbacks if it is not supported net/mlx5e: Set IPsec replay sequence numbers
net/mlx5e: Reduce contention in IPsec workqueue
net/mlx5e: Generalize IPsec work structs
net/mlx5e: Simulate missing IPsec TX limits hardware functionality
.../mellanox/mlx5/core/en_accel/ipsec.c | 329 +++++++++++++++--- .../mellanox/mlx5/core/en_accel/ipsec.h | 47 ++- .../mellanox/mlx5/core/en_accel/ipsec_fs.c | 31 +- .../mlx5/core/en_accel/ipsec_offload.c | 198 ++++++++--- net/xfrm/xfrm_device.c | 2 +- 5 files changed, 496 insertions(+), 111 deletions(-)
Signature · 1 line
2.39.2