This patch adds support for virtual xfrm interfaces. Packets that are routed through such an interface are guaranteed to be IPsec transformed or dropped. It is a generic virtual interface that ensures IPsec transformation, no need to know what happens behind the interface. This means that we can tunnel IPv4 and IPv6 through the same interface and support all xfrm modes (tunnel, transport and beet) on it.
Showing the changes to include/uapi/linux (1 of 7 files). Show all
Unified · Split
| @@ -459,6 +459,16 @@ enum { · 458 unmodified lines | |||
| 459 | 459 | ||
| 460 | #define IFLA_MACSEC_MAX (__IFLA_MACSEC_MAX - 1) | 460 | #define IFLA_MACSEC_MAX (__IFLA_MACSEC_MAX - 1) |
| 461 | 461 | ||
| 462 | /* XFRM section */ | ||
| 463 | enum { | ||
| 464 | IFLA_XFRM_UNSPEC, | ||
| 465 | IFLA_XFRM_LINK, | ||
| 466 | IFLA_XFRM_IF_ID, | ||
| 467 | __IFLA_XFRM_MAX | ||
| 468 | }; | ||
| 469 | |||
| 470 | #define IFLA_XFRM_MAX (__IFLA_XFRM_MAX - 1) | ||
| 471 | |||
| 462 | enum macsec_validation_type { | 472 | enum macsec_validation_type { |
| 463 | MACSEC_VALIDATE_DISABLED = 0, | 473 | MACSEC_VALIDATE_DISABLED = 0, |
| 464 | MACSEC_VALIDATE_CHECK = 1, | 474 | MACSEC_VALIDATE_CHECK = 1, |