mbox series

[ipsec,v1,0/2] Update offload configuration with SA

Message ID 20250122120941.2634198-1-chiachangwang@google.com (mailing list archive)
Headers show
Series Update offload configuration with SA | expand

Message

Chiachang Wang Jan. 22, 2025, 12:09 p.m. UTC 
The current Security Association (SA) offload setting
cannot be modified without removing and re-adding the
SA with the new configuration. Although existing netlink
messages allow SA update and migration, the offload
setting remains unchanged even if it is modified in
the updated SA.

This patchset enhances SA update and migration to
include updating the offload setting. This is beneficial
for devices that support IPsec session management,
enabling them to update offload configurations without
disrupting existing sessions.

Chiachang Wang (2):
  xfrm: Update offload configuration during SA updates
  xfrm: Migrate offload configuaration

 include/net/xfrm.h     |  8 ++++++--
 net/xfrm/xfrm_policy.c |  4 ++--
 net/xfrm/xfrm_state.c  | 38 ++++++++++++++++++++++++++++++++++----
 net/xfrm/xfrm_user.c   | 15 +++++++++++++--
 4 files changed, 55 insertions(+), 10 deletions(-)

--
2.48.1.262.g85cc9f2d1e-goog