diff options
| author |   Huy Nguyen <huyn@nvidia.com> | 2021-06-14 17:33:48 +0300 |
|---|---|---|
| committer |   Saeed Mahameed <saeedm@nvidia.com> | 2021-06-22 15:24:32 -0700 |
| commit | fa4535238fb5f306f95de89371a993057b32b2a4 (patch) | |
| tree | 0f73787c8b0b8519900cbe39684fd14d054fcf61 /include/net/xfrm.h | |
| parent | net/mlx5: Optimize mlx5e_feature_checks for non IPsec packet (diff) | |
| download | wireguard-linux-fa4535238fb5f306f95de89371a993057b32b2a4.tar.xz wireguard-linux-fa4535238fb5f306f95de89371a993057b32b2a4.zip | |
net/xfrm: Add inner_ipproto into sec_path
The inner_ipproto saves the inner IP protocol of the plain
text packet. This allows vendor's IPsec feature making offload
decision at skb's features_check and configuring hardware at
ndo_start_xmit.
For example, ConnectX6-DX IPsec device needs the plaintext's
IP protocol to support partial checksum offload on
VXLAN/GENEVE packet over IPsec transport mode tunnel.
Signed-off-by: Raed Salem <raeds@nvidia.com>
Signed-off-by: Huy Nguyen <huyn@nvidia.com>
Cc: Steffen Klassert <steffen.klassert@secunet.com>
Acked-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: Saeed Mahameed <saeedm@nvidia.com>
Diffstat (limited to 'include/net/xfrm.h')
| -rw-r--r-- | include/net/xfrm.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/include/net/xfrm.h b/include/net/xfrm.h index c58a6d4eb610..1d803e890c76 100644 --- a/include/net/xfrm.h +++ b/include/net/xfrm.h @@ -1024,6 +1024,7 @@ struct xfrm_offload { #define CRYPTO_INVALID_PROTOCOL 128 __u8 proto; + __u8 inner_ipproto; }; struct sec_path { |