aboutsummaryrefslogtreecommitdiffstats
path: root/Documentation/networking/xfrm_device.txt
diff options
context:
space:
mode:
authorYossef Efraim <yossefe@mellanox.com>2018-01-14 11:39:10 +0200
committerSteffen Klassert <steffen.klassert@secunet.com>2018-01-18 10:42:59 +0100
commit50bd870a9e5cca9fcf5fb4c130c373643d7d9906 (patch)
treee8195f25d0eab9eb269d97e360c573430c5af829 /Documentation/networking/xfrm_device.txt
parentMerge tag 'linux-can-next-for-4.16-20180116' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can-next (diff)
downloadlinux-dev-50bd870a9e5cca9fcf5fb4c130c373643d7d9906.tar.xz
linux-dev-50bd870a9e5cca9fcf5fb4c130c373643d7d9906.zip
xfrm: Add ESN support for IPSec HW offload
This patch adds ESN support to IPsec device offload. Adding new xfrm device operation to synchronize device ESN. Signed-off-by: Yossef Efraim <yossefe@mellanox.com> Signed-off-by: Shannon Nelson <shannon.nelson@oracle.com> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Diffstat (limited to 'Documentation/networking/xfrm_device.txt')
-rw-r--r--Documentation/networking/xfrm_device.txt3
1 files changed, 3 insertions, 0 deletions
diff --git a/Documentation/networking/xfrm_device.txt b/Documentation/networking/xfrm_device.txt
index 2d9d588cd34b..50c34ca65efe 100644
--- a/Documentation/networking/xfrm_device.txt
+++ b/Documentation/networking/xfrm_device.txt
@@ -41,6 +41,7 @@ struct xfrmdev_ops {
void (*xdo_dev_state_free) (struct xfrm_state *x);
bool (*xdo_dev_offload_ok) (struct sk_buff *skb,
struct xfrm_state *x);
+ void (*xdo_dev_state_advance_esn) (struct xfrm_state *x);
};
The NIC driver offering ipsec offload will need to implement these
@@ -117,6 +118,8 @@ the stack in xfrm_input().
hand the packet to napi_gro_receive() as usual
+In ESN mode, xdo_dev_state_advance_esn() is called from xfrm_replay_advance_esn().
+Driver will check packet seq number and update HW ESN state machine if needed.
When the SA is removed by the user, the driver's xdo_dev_state_delete()
is asked to disable the offload. Later, xdo_dev_state_free() is called