Commit 62f6eca5 authored Dec 02, 2022 by Leon Romanovsky Committed by Steffen Klassert Dec 05, 2022

xfrm: allow state packet offload mode



Allow users to configure xfrm states with packet offload mode.
The packet mode must be requested both for policy and state, and
such requires us to do not implement fallback.

We explicitly return an error if requested packet mode can't
be configured.

Reviewed-by: Raed Salem <raeds@nvidia.com>
Signed-off-by: Leon Romanovsky <leonro@nvidia.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>

parent d14f28b8

drivers/net/ethernet/chelsio/inline_crypto/ch_ipsec/chcr_ipsec.c

+4 −0

Original line number	Diff line number	Diff line
		@@ -283,6 +283,10 @@ static int ch_ipsec_xfrm_add_state(struct xfrm_state *x)
		pr_debug("Cannot offload xfrm states with geniv other than seqiv\n");
		return -EINVAL;
		}
		if (x->xso.type != XFRM_DEV_OFFLOAD_CRYPTO) {
		pr_debug("Unsupported xfrm offload\n");
		return -EINVAL;
		}

		sa_entry = kzalloc(sizeof(*sa_entry), GFP_KERNEL);
		if (!sa_entry) {

drivers/net/ethernet/intel/ixgbe/ixgbe_ipsec.c

+5 −0

Original line number	Diff line number	Diff line
		@@ -585,6 +585,11 @@ static int ixgbe_ipsec_add_sa(struct xfrm_state *xs)
		return -EINVAL;
		}

		if (xs->xso.type != XFRM_DEV_OFFLOAD_CRYPTO) {
		netdev_err(dev, "Unsupported ipsec offload type\n");
		return -EINVAL;
		}

		if (xs->xso.dir == XFRM_DEV_OFFLOAD_IN) {
		struct rx_sa rsa;

drivers/net/ethernet/intel/ixgbevf/ipsec.c

+5 −0

Original line number	Diff line number	Diff line
		@@ -280,6 +280,11 @@ static int ixgbevf_ipsec_add_sa(struct xfrm_state *xs)
		return -EINVAL;
		}

		if (xs->xso.type != XFRM_DEV_OFFLOAD_CRYPTO) {
		netdev_err(dev, "Unsupported ipsec offload type\n");
		return -EINVAL;
		}

		if (xs->xso.dir == XFRM_DEV_OFFLOAD_IN) {
		struct rx_sa rsa;

drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.c

+4 −0

Original line number	Diff line number	Diff line
		@@ -253,6 +253,10 @@ static inline int mlx5e_xfrm_validate_state(struct xfrm_state *x)
		netdev_info(netdev, "Cannot offload xfrm states with geniv other than seqiv\n");
		return -EINVAL;
		}
		if (x->xso.type != XFRM_DEV_OFFLOAD_CRYPTO) {
		netdev_info(netdev, "Unsupported xfrm offload type\n");
		return -EINVAL;
		}
		return 0;
		}

drivers/net/ethernet/netronome/nfp/crypto/ipsec.c

+5 −0

Original line number	Diff line number	Diff line
		@@ -302,6 +302,11 @@ static int nfp_net_xfrm_add_state(struct xfrm_state *x)
		return -EINVAL;
		}

		if (x->xso.type != XFRM_DEV_OFFLOAD_CRYPTO) {
		nn_err(nn, "Unsupported xfrm offload tyoe\n");
		return -EINVAL;
		}

		cfg->spi = ntohl(x->id.spi);

		/* Hash/Authentication */