[0/4] xfrm: Add support for RFC 9611 per cpu xfrm states

Message ID	20241007064453.2171933-1-steffen.klassert@secunet.com (mailing list archive)
Headers	show Received: from a.mx.secunet.com (a.mx.secunet.com [62.96.220.36]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 3B6A315B0E4 for <netdev@vger.kernel.org>; Mon, 7 Oct 2024 06:54:03 +0000 (UTC) From: Steffen Klassert <steffen.klassert@secunet.com> To: Tobias Brunner <tobias@strongswan.org>, Antony Antony <antony.antony@secunet.com>, Daniel Xu <dxu@dxuuu.xyz>, Paul Wouters <paul@nohats.ca>, Simon Horman <horms@kernel.org>, Sabrina Dubroca <sd@queasysnail.net>, <netdev@vger.kernel.org> CC: Steffen Klassert <steffen.klassert@secunet.com>, <devel@linux-ipsec.org> Subject: [PATCH 0/4] xfrm: Add support for RFC 9611 per cpu xfrm states Date: Mon, 7 Oct 2024 08:44:49 +0200 Message-ID: <20241007064453.2171933-1-steffen.klassert@secunet.com> Precedence: bulk MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain
Series	xfrm: Add support for RFC 9611 per cpu xfrm states \| expand [0/4] xfrm: Add support for RFC 9611 per cpu xfrm states [1/4] xfrm: Add support for per cpu xfrm state handling. [2/4] xfrm: Cache used outbound xfrm states at the policy. [3/4] xfrm: Add an inbound percpu state cache. [4/4] xfrm: Restrict percpu SA attribute to specific netlink message types

Message ID

20241007064453.2171933-1-steffen.klassert@secunet.com (mailing list archive)

Headers

From: Steffen Klassert <steffen.klassert@secunet.com>
To: Tobias Brunner <tobias@strongswan.org>, Antony Antony
	<antony.antony@secunet.com>, Daniel Xu <dxu@dxuuu.xyz>, Paul Wouters
	<paul@nohats.ca>, Simon Horman <horms@kernel.org>, Sabrina Dubroca
	<sd@queasysnail.net>, <netdev@vger.kernel.org>
CC: Steffen Klassert <steffen.klassert@secunet.com>, <devel@linux-ipsec.org>
Subject: [PATCH 0/4] xfrm: Add support for RFC 9611 per cpu xfrm states
Date: Mon, 7 Oct 2024 08:44:49 +0200
Message-ID: <20241007064453.2171933-1-steffen.klassert@secunet.com>
Precedence: bulk
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/plain

Series

xfrm: Add support for RFC 9611 per cpu xfrm states | expand

Message

Steffen Klassert Oct. 7, 2024, 6:44 a.m. UTC

This patchset implements the xfrm part of per cpu SAs as specified in
RFC 9611.

Patch 1 adds the cpu as a lookup key and config option to to generate
acquire messages for each cpu.

Patch 2 caches outbound states at the policy.

Patch 3 caches inbound states on a new percpu state cache.

Patch 4 restricts percpu SA attributes to specific netlink message types.

Please review and test.

---

Changes from v1:

- Add compat layer attributes

- Fix a 'use always slowpath' condition

- Document get_cpu() usage

- Fix forgotten update of xfrm_expire_msgsize()