Commit 1c80e949 authored by Leon Romanovsky's avatar Leon Romanovsky Committed by Jakub Kicinski
Browse files

net/mlx5e: Check IPsec packet offload tunnel capabilities 



Validate tunnel mode support for IPsec packet offload.

Reviewed-by: default avatarSimon Horman <simon.horman@corigine.com>
Signed-off-by: default avatarLeon Romanovsky <leonro@nvidia.com>
Reviewed-by: default avatarSridhar Samudrala <sridhar.samudrala@intel.com>
Signed-off-by: default avatarJakub Kicinski <kuba@kernel.org>
parent 1210af3b

drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.h

+1 −0
Original line number Diff line number Diff line
@@ -107,6 +107,7 @@ enum mlx5_ipsec_cap { 
	MLX5_IPSEC_CAP_PACKET_OFFLOAD	= 1 << 2,

	MLX5_IPSEC_CAP_ROCE             = 1 << 3,

	MLX5_IPSEC_CAP_PRIO             = 1 << 4,

	MLX5_IPSEC_CAP_TUNNEL           = 1 << 5,

};



struct mlx5e_priv;

drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_offload.c

+6 −0
Original line number Diff line number Diff line
@@ -48,6 +48,12 @@ u32 mlx5_ipsec_device_caps(struct mlx5_core_dev *mdev) 
		if (MLX5_CAP_FLOWTABLE_NIC_TX(mdev, ignore_flow_level) &&

		    MLX5_CAP_FLOWTABLE_NIC_RX(mdev, ignore_flow_level))

			caps |= MLX5_IPSEC_CAP_PRIO;



		if (MLX5_CAP_FLOWTABLE_NIC_TX(mdev,

					      reformat_l2_to_l3_esp_tunnel) &&

		    MLX5_CAP_FLOWTABLE_NIC_RX(mdev,

					      reformat_l3_esp_tunnel_to_l2))

			caps |= MLX5_IPSEC_CAP_TUNNEL;

	}



	if (mlx5_get_roce_state(mdev) &&