Re: [PATCH v2 13/17] net/mlx5e: Implement PSP Tx data path

[Willem de Bruijn <willemdebruijn.kernel@gmail.com>]

Daniel Zahka wrote:
> From: Raed Salem <raeds@nvidia.com>
> 
> Setup PSP offload on Tx data path based on whether skb indicates that it is
> intended for PSP or not. Support driver side encapsulation of the UDP
> headers, PSP headers, and PSP trailer for the PSP traffic that will be
> encrypted by the NIC.
> 
> Signed-off-by: Raed Salem <raeds@nvidia.com>
> Signed-off-by: Rahul Rameshbabu <rrameshbabu@nvidia.com>
> Signed-off-by: Daniel Zahka <daniel.zahka@gmail.com>

> +static void psp_write_headers(struct net *net, struct sk_buff *skb,
> +			      __be32 spi, u8 ver, unsigned int udp_len,
> +			      __be16 sport)
> +{
> +	struct udphdr *uh = udp_hdr(skb);
> +	struct psphdr *psph = (struct psphdr *)(uh + 1);
> +
> +	uh->dest = htons(PSP_DEFAULT_UDP_PORT);
> +	uh->source = udp_flow_src_port(net, skb, 0, 0, false);
> +	uh->check = 0;
> +	uh->len = htons(udp_len);
> +
> +	psph->nexthdr = IPPROTO_TCP;
> +	psph->hdrlen = PSP_HDRLEN_NOOPT;
> +	psph->crypt_offset = 0;
> +	psph->verfl = FIELD_PREP(PSPHDR_VERFL_VERSION, ver) |
> +		      FIELD_PREP(PSPHDR_VERFL_ONE, 1);
> +	psph->spi = spi;
> +	memset(&psph->iv, 0, sizeof(psph->iv));
> +}
> +
> +/* Encapsulate a TCP packet with PSP by adding the UDP+PSP headers and filling
> + * them in.
> + */
> +static bool psp_encapsulate(struct net *net, struct sk_buff *skb,
> +			    __be32 spi, u8 ver, __be16 sport)
> +{
> +	u32 network_len = skb_network_header_len(skb);
> +	u32 ethr_len = skb_mac_header_len(skb);
> +	u32 bufflen = ethr_len + network_len;
> +	struct ipv6hdr *ip6;
> +
> +	if (skb_cow_head(skb, PSP_ENCAP_HLEN))
> +		return false;
> +
> +	skb_push(skb, PSP_ENCAP_HLEN);
> +	skb->mac_header		-= PSP_ENCAP_HLEN;
> +	skb->network_header	-= PSP_ENCAP_HLEN;
> +	skb->transport_header	-= PSP_ENCAP_HLEN;
> +	memmove(skb->data, skb->data + PSP_ENCAP_HLEN, bufflen);
> +
> +	ip6 = ipv6_hdr(skb);
> +	skb_set_inner_ipproto(skb, IPPROTO_TCP);
> +	ip6->nexthdr = IPPROTO_UDP;
> +	be16_add_cpu(&ip6->payload_len, PSP_ENCAP_HLEN);
> +
> +	skb_set_inner_transport_header(skb, skb_transport_offset(skb) + PSP_ENCAP_HLEN);
> +	skb->encapsulation = 1;
> +	psp_write_headers(net, skb, spi, ver,
> +			  skb->len - skb_transport_offset(skb), sport);
> +
> +	return true;
> +}

It makes sense to do this in the driver.

But it would be good to from the start have this in a driver
independent location, as library functions that drivers can call.

Same for psp_rcv in patch 16.

Else, every driver is going to reimplement this logic.