| Message ID | cover.1690802064.git.leon@kernel.org (mailing list archive) |
|---|---|
| Headers | show |
| Series | mlx5 IPsec packet offload support in eswitch mode | expand |
Hello: This series was applied to netdev/net-next.git (main) by Jakub Kicinski <kuba@kernel.org>: On Mon, 31 Jul 2023 14:28:11 +0300 you wrote: > From: Leon Romanovsky <leonro@nvidia.com> > > Changelog: > v1: > * Fixed ipv6 flow steering table destination in IPsec initialization routine. > * Removed Fixes line from "net/mlx5: Compare with..." patch as this fix > is required for this series only. > * Added patch to enforce same order for HW and SW IPsec flows when TC > is involved, which is "host <-> IPsec <-> TC <-> "wire"/switch". > v0: https://lore.kernel.org/all/cover.1689064922.git.leonro@nvidia.com > > [...] Here is the summary with links: - [net-next,v1,01/13] net/mlx5e: Add function to get IPsec offload namespace https://git.kernel.org/netdev/net-next/c/fbd517549c32 - [net-next,v1,02/13] net/mlx5e: Change the parameter of IPsec RX skb handle function https://git.kernel.org/netdev/net-next/c/33b18a0f75cd - [net-next,v1,03/13] net/mlx5e: Prepare IPsec packet offload for switchdev mode https://git.kernel.org/netdev/net-next/c/f5c5abc4c041 - [net-next,v1,04/13] net/mlx5e: Refactor IPsec RX tables creation and destruction https://git.kernel.org/netdev/net-next/c/6e125265d52d - [net-next,v1,05/13] net/mlx5e: Support IPsec packet offload for RX in switchdev mode https://git.kernel.org/netdev/net-next/c/1762f132d542 - [net-next,v1,06/13] net/mlx5e: Handle IPsec offload for RX datapath in switchdev mode https://git.kernel.org/netdev/net-next/c/91bafc638ed4 - [net-next,v1,07/13] net/mlx5e: Refactor IPsec TX tables creation https://git.kernel.org/netdev/net-next/c/f46e92d664fb - [net-next,v1,08/13] net/mlx5e: Support IPsec packet offload for TX in switchdev mode https://git.kernel.org/netdev/net-next/c/c6c2bf5db4ea - [net-next,v1,09/13] net/mlx5: Compare with old_dest param to modify rule destination https://git.kernel.org/netdev/net-next/c/1632649d2dbd - [net-next,v1,10/13] net/mlx5e: Make IPsec offload work together with eswitch and TC https://git.kernel.org/netdev/net-next/c/366e46242b8e - [net-next,v1,11/13] net/mlx5e: Modify and restore TC rules for IPSec TX rules https://git.kernel.org/netdev/net-next/c/d1569537a837 - [net-next,v1,12/13] net/mlx5e: Add get IPsec offload stats for uplink representor https://git.kernel.org/netdev/net-next/c/6e56ab1c9059 - [net-next,v1,13/13] net/mlx5e: Make TC and IPsec offloads mutually exclusive on a netdev https://git.kernel.org/netdev/net-next/c/c8e350e62fc5 You are awesome, thank you!
From: Leon Romanovsky <leonro@nvidia.com> Changelog: v1: * Fixed ipv6 flow steering table destination in IPsec initialization routine. * Removed Fixes line from "net/mlx5: Compare with..." patch as this fix is required for this series only. * Added patch to enforce same order for HW and SW IPsec flows when TC is involved, which is "host <-> IPsec <-> TC <-> "wire"/switch". v0: https://lore.kernel.org/all/cover.1689064922.git.leonro@nvidia.com ------------------------------------------------------------------------- Hi, This series from Jianbo adds mlx5 IPsec packet offload support in eswitch offloaded mode. It works exactly like "regular" IPsec, nothing special, except now users can switch to switchdev before adding IPsec rules. devlink dev eswitch set pci/0000:06:00.0 mode switchdev Same configurations as here: https://lore.kernel.org/netdev/cover.1670005543.git.leonro@nvidia.com/ Packet offload mode: ip xfrm state offload packet dev <if-name> dir <in|out> ip xfrm policy .... offload packet dev <if-name> Crypto offload mode: ip xfrm state offload crypto dev <if-name> dir <in|out> or (backward compatibility) ip xfrm state offload dev <if-name> dir <in|out> Thanks Jianbo Liu (13): net/mlx5e: Add function to get IPsec offload namespace net/mlx5e: Change the parameter of IPsec RX skb handle function net/mlx5e: Prepare IPsec packet offload for switchdev mode net/mlx5e: Refactor IPsec RX tables creation and destruction net/mlx5e: Support IPsec packet offload for RX in switchdev mode net/mlx5e: Handle IPsec offload for RX datapath in switchdev mode net/mlx5e: Refactor IPsec TX tables creation net/mlx5e: Support IPsec packet offload for TX in switchdev mode net/mlx5: Compare with old_dest param to modify rule destination net/mlx5e: Make IPsec offload work together with eswitch and TC net/mlx5e: Modify and restore TC rules for IPSec TX rules net/mlx5e: Add get IPsec offload stats for uplink representor net/mlx5e: Make TC and IPsec offloads mutually exclusive on a netdev .../net/ethernet/mellanox/mlx5/core/Makefile | 4 + .../ethernet/mellanox/mlx5/core/en/rep/tc.c | 17 +- .../mellanox/mlx5/core/en_accel/ipsec.c | 2 + .../mellanox/mlx5/core/en_accel/ipsec.h | 65 +- .../mellanox/mlx5/core/en_accel/ipsec_fs.c | 708 +++++++++++++----- .../mlx5/core/en_accel/ipsec_offload.c | 5 +- .../mellanox/mlx5/core/en_accel/ipsec_rxtx.c | 25 +- .../mellanox/mlx5/core/en_accel/ipsec_rxtx.h | 6 +- .../net/ethernet/mellanox/mlx5/core/en_rep.c | 1 + .../net/ethernet/mellanox/mlx5/core/en_rx.c | 3 +- .../net/ethernet/mellanox/mlx5/core/en_tc.c | 47 ++ .../mellanox/mlx5/core/esw/ipsec_fs.c | 325 ++++++++ .../mellanox/mlx5/core/esw/ipsec_fs.h | 67 ++ .../net/ethernet/mellanox/mlx5/core/eswitch.h | 17 + .../mellanox/mlx5/core/eswitch_offloads.c | 174 ++++- .../net/ethernet/mellanox/mlx5/core/fs_core.c | 14 +- include/linux/mlx5/driver.h | 2 + include/linux/mlx5/eswitch.h | 3 + include/linux/mlx5/fs.h | 2 + 19 files changed, 1270 insertions(+), 217 deletions(-) create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/esw/ipsec_fs.c create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/esw/ipsec_fs.h