| Message ID | cover.1689757619.git.leon@kernel.org (mailing list archive) |
|---|---|
| Headers | show |
| Series | Support UDP encapsulation in packet offload mode | expand |
Hello: This series was applied to netdev/net-next.git (main) by Paolo Abeni <pabeni@redhat.com>: On Wed, 19 Jul 2023 12:26:52 +0300 you wrote: > From: Leon Romanovsky <leonro@nvidia.com> > > Hi, > > As was raised by Ilia in this thread [1], the ESP over UDP feature is > supported in packet offload mode. So comes this series, which adds > relevant bits to the mlx5 driver and opens XFRM core code to accept > such configuration. > > [...] Here is the summary with links: - [net-next,1/4] net/mlx5: Add relevant capabilities bits to support NAT-T https://git.kernel.org/netdev/net-next/c/57266281271a - [net-next,2/4] net/mlx5e: Check for IPsec NAT-T support https://git.kernel.org/netdev/net-next/c/4acea83a849a - [net-next,3/4] net/mlx5e: Support IPsec NAT-T functionality https://git.kernel.org/netdev/net-next/c/d65954934937 - [net-next,4/4] xfrm: Support UDP encapsulation in packet offload mode https://git.kernel.org/netdev/net-next/c/89edf40220be You are awesome, thank you!
From: Leon Romanovsky <leonro@nvidia.com> Hi, As was raised by Ilia in this thread [1], the ESP over UDP feature is supported in packet offload mode. So comes this series, which adds relevant bits to the mlx5 driver and opens XFRM core code to accept such configuration. NAT-T is part of IKEv2 and strongswan uses it automatically [2]. [1] https://lore.kernel.org/all/20230718092405.4124345-1-quic_ilial@quicinc.com [2] https://wiki.strongswan.org/projects/1/wiki/NatTraversal Leon Romanovsky (4): net/mlx5: Add relevant capabilities bits to support NAT-T net/mlx5e: Check for IPsec NAT-T support net/mlx5e: Support IPsec NAT-T functionality xfrm: Support UDP encapsulation in packet offload mode .../mellanox/mlx5/core/en_accel/ipsec.c | 27 +++++++- .../mellanox/mlx5/core/en_accel/ipsec.h | 12 +++- .../mellanox/mlx5/core/en_accel/ipsec_fs.c | 61 ++++++++++++++----- .../mlx5/core/en_accel/ipsec_offload.c | 6 ++ include/linux/mlx5/mlx5_ifc.h | 7 ++- net/xfrm/xfrm_device.c | 13 ++-- 6 files changed, 100 insertions(+), 26 deletions(-)