History

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next

Steffen Klassert says: ==================== pull request (net-next): ipsec-next 2017-04-20 This adds the basic infrastructure for IPsec hardware offloading, it creates a configuration API and adjusts the packet path. 1) Add the needed netdev features to configure IPsec offloads. 2) Add the IPsec hardware offloading API. 3) Prepare the ESP packet path for hardware offloading. 4) Add gso handlers for esp4 and esp6, this implements the software fallback for GSO packets. 5) Add xfrm replay handler functions for offloading. 6) Change ESP to use a synchronous crypto algorithm on offloading, we don't have the option for asynchronous returns when we handle IPsec at layer2. 7) Add a xfrm validate function to validate_xmit_skb. This implements the software fallback for non GSO packets. 8) Set the inner_network and inner_transport members of the SKB, as well as encapsulation, to reflect the actual positions of these headers, and removes them only once encryption is done on the payload. From Ilan Tayari. 9) Prepare the ESP GRO codepath for hardware offloading. 10) Fix incorrect null pointer check in esp6. From Colin Ian King. 11) Fix for the GSO software fallback path to detect the fallback correctly. From Ilan Tayari. Please pull or let me know if there are problems. ====================

David S. Miller committed 9 years ago

Commit 6b633e82 parents 7799932 8f92e0326 files · +1717 −370Browse files

Showing the changes to include/uapi/linux (1 of 26 files). Show all

Unified · Split

include/uapi/linux/xfrm.h+8−0
@@ -303,6 +303,7 @@ enum xfrm_attr_type_t { · 302 unmodified lines
303 XFRMA_PROTO, /* __u8 */303 XFRMA_PROTO, /* __u8 */
304 XFRMA_ADDRESS_FILTER, /* struct xfrm_address_filter */304 XFRMA_ADDRESS_FILTER, /* struct xfrm_address_filter */
305 XFRMA_PAD,305 XFRMA_PAD,
306 XFRMA_OFFLOAD_DEV, /* struct xfrm_state_offload */
306 __XFRMA_MAX307 __XFRMA_MAX
307 308
308#define XFRMA_MAX (__XFRMA_MAX - 1)309#define XFRMA_MAX (__XFRMA_MAX - 1)
@@ -494,6 +495,13 @@ struct xfrm_address_filter { · 185 unmodified lines
494 __u8 dplen;495 __u8 dplen;
495};496};
496 497
498struct xfrm_user_offload {
499 int ifindex;
500 __u8 flags;
501};
502#define XFRM_OFFLOAD_IPV6 1
503#define XFRM_OFFLOAD_INBOUND 2
504
497#ifndef __KERNEL__505#ifndef __KERNEL__
498/* backwards compatibility for userspace */506/* backwards compatibility for userspace */
499#define XFRMGRP_ACQUIRE 1507#define XFRMGRP_ACQUIRE 1