From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id 986F2C433EF for ; Wed, 18 May 2022 05:30:49 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S230222AbiERFap (ORCPT ); Wed, 18 May 2022 01:30:45 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:55194 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S230183AbiERFam (ORCPT ); Wed, 18 May 2022 01:30:42 -0400 Received: from ams.source.kernel.org (ams.source.kernel.org [IPv6:2604:1380:4601:e00::1]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id A339C1ADAD for ; Tue, 17 May 2022 22:30:39 -0700 (PDT) Received: from smtp.kernel.org (relay.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ams.source.kernel.org (Postfix) with ESMTPS id 5CA5EB81E86 for ; Wed, 18 May 2022 05:30:38 +0000 (UTC) Received: by smtp.kernel.org (Postfix) with ESMTPSA id 64700C385A5; Wed, 18 May 2022 05:30:35 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1652851837; bh=+k8AEmuFwoUL9nIl2xjpuZ7nXn5UmRCGlrzSgKl6fwY=; h=From:To:Cc:Subject:Date:From; b=btDDKzpbmyxEEaEuSwh3L994uHtprPQfMITtY9pAGpuOn1L5zzAPVKJB+ynsM5SY1 Z71n1xss2AgL5ZRNdJPfcnXLVlMzbS60ldKJIBYmSDbjX33RdzBswYKoe/Z36v5wmx 96Hll+i1N+UdFs7/OPybeg2ILQxFpdXh5WFl4kTxk52b9V0Dl0T0vbbvgJ/E2Mn2zj dn3603xLlqry1OJiyvBVI1r76NBcNd14HiL1Cnp3NHn13W7IazRPMNspZ8HhTKR24A E5Kax5NjLBED0VfOF3pleJGL1wVPBH2tsuxGA4a6EdW8wsxthBL0Bzu+asUjBfbPIo NUPvVzdM84xzQ== From: Leon Romanovsky To: Steffen Klassert Cc: Leon Romanovsky , "David S . Miller" , Herbert Xu , netdev@vger.kernel.org, Raed Salem , ipsec-devel Subject: [PATCH ipsec-next v1 0/6] Extend XFRM core to allow full offload configuration Date: Wed, 18 May 2022 08:30:20 +0300 Message-Id: X-Mailer: git-send-email 2.36.1 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Precedence: bulk List-ID: X-Mailing-List: netdev@vger.kernel.org From: Leon Romanovsky Changelog: v1: Moved comment to be before if (...) in third patch. v0: https://lore.kernel.org/all/cover.1652176932.git.leonro@nvidia.com ----------------------------------------------------------------------- The following series extends XFRM core code to handle new type of IPsec offload - full offload. In this mode, the HW is going to be responsible for whole data path, so both policy and state should be offloaded. Thanks Leon Romanovsky (6): xfrm: add new full offload flag xfrm: allow state full offload mode xfrm: add an interface to offload policy xfrm: add TX datapath support for IPsec full offload mode xfrm: add RX datapath protection for IPsec full offload mode xfrm: enforce separation between priorities of HW/SW policies .../inline_crypto/ch_ipsec/chcr_ipsec.c | 4 + .../net/ethernet/intel/ixgbe/ixgbe_ipsec.c | 5 + drivers/net/ethernet/intel/ixgbevf/ipsec.c | 5 + .../mellanox/mlx5/core/en_accel/ipsec.c | 4 + drivers/net/netdevsim/ipsec.c | 5 + include/linux/netdevice.h | 3 + include/net/netns/xfrm.h | 8 +- include/net/xfrm.h | 102 ++++++++++++---- include/uapi/linux/xfrm.h | 6 + net/xfrm/xfrm_device.c | 84 ++++++++++++- net/xfrm/xfrm_output.c | 19 +++ net/xfrm/xfrm_policy.c | 115 ++++++++++++++++++ net/xfrm/xfrm_user.c | 11 ++ 13 files changed, 342 insertions(+), 29 deletions(-) -- 2.36.1