Commit 4acea83a authored by Leon Romanovsky's avatar Leon Romanovsky Committed by Paolo Abeni
Browse files

net/mlx5e: Check for IPsec NAT-T support 



Set relevant IPsec capability to indicate if flow steering supports UDP
encapsulation and decapsulation of IPsec ESP packets.

Signed-off-by: default avatarLeon Romanovsky <leonro@nvidia.com>
Signed-off-by: default avatarPaolo Abeni <pabeni@redhat.com>
parent 57266281

drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.h

+1 −0
Original line number Diff line number Diff line
@@ -110,6 +110,7 @@ enum mlx5_ipsec_cap { 
	MLX5_IPSEC_CAP_ROCE             = 1 << 3,

	MLX5_IPSEC_CAP_PRIO             = 1 << 4,

	MLX5_IPSEC_CAP_TUNNEL           = 1 << 5,

	MLX5_IPSEC_CAP_ESPINUDP         = 1 << 6,

};



struct mlx5e_priv;

drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_offload.c

+6 −0
Original line number Diff line number Diff line
@@ -54,6 +54,12 @@ u32 mlx5_ipsec_device_caps(struct mlx5_core_dev *mdev) 
		    MLX5_CAP_FLOWTABLE_NIC_RX(mdev,

					      reformat_l3_esp_tunnel_to_l2))

			caps |= MLX5_IPSEC_CAP_TUNNEL;



		if (MLX5_CAP_FLOWTABLE_NIC_TX(mdev,

					      reformat_add_esp_transport_over_udp) &&

		    MLX5_CAP_FLOWTABLE_NIC_RX(mdev,

					      reformat_del_esp_transport_over_udp))

			caps |= MLX5_IPSEC_CAP_ESPINUDP;

	}



	if (mlx5_get_roce_state(mdev) &&