diff options
| author | David S. Miller <davem@davemloft.net> | 2018-01-26 10:22:53 -0500 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2018-01-26 10:22:53 -0500 |
| commit | a81e4affe1789a3d1010f219ad53382a760aa2ea (patch) | |
| tree | 73ea99e882beec7435f49b370ef5d8527ac361ef /Documentation | |
| parent | 5b09179e7fa2849a0c95d14bb69416693e0ed0c3 (diff) | |
| parent | 50bd870a9e5cca9fcf5fb4c130c373643d7d9906 (diff) | |
Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next
Steffen Klassert says:
====================
pull request (net-next): ipsec-next 2018-01-26
One last patch for this development cycle:
1) Add ESN support for IPSec HW offload.
From Yossef Efraim.
Please pull or let me know if there are problems.
====================
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'Documentation')
| -rw-r--r-- | Documentation/networking/xfrm_device.txt | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/Documentation/networking/xfrm_device.txt b/Documentation/networking/xfrm_device.txt index 2d9d588cd34b..50c34ca65efe 100644 --- a/Documentation/networking/xfrm_device.txt +++ b/Documentation/networking/xfrm_device.txt @@ -41,6 +41,7 @@ struct xfrmdev_ops { void (*xdo_dev_state_free) (struct xfrm_state *x); bool (*xdo_dev_offload_ok) (struct sk_buff *skb, struct xfrm_state *x); + void (*xdo_dev_state_advance_esn) (struct xfrm_state *x); }; The NIC driver offering ipsec offload will need to implement these @@ -117,6 +118,8 @@ the stack in xfrm_input(). hand the packet to napi_gro_receive() as usual +In ESN mode, xdo_dev_state_advance_esn() is called from xfrm_replay_advance_esn(). +Driver will check packet seq number and update HW ESN state machine if needed. When the SA is removed by the user, the driver's xdo_dev_state_delete() is asked to disable the offload. Later, xdo_dev_state_free() is called |