Merge branch 'mlx5-ipsec-packet-offload-support-in-eswitch-mode'
authorJakub Kicinski <kuba@kernel.org>
Thu, 3 Aug 2023 01:37:38 +0000 (18:37 -0700)
committerJakub Kicinski <kuba@kernel.org>
Thu, 3 Aug 2023 01:37:39 +0000 (18:37 -0700)
commitedd8b295f9e2fcad840ef1a8694332989649783d
treed14e9d5e9906fd6beb680f70c4507035b80897d6
parent30ff01ee99bc961e5f278f997e41ffb94785a88b
parentc8e350e62fc51f3fda28f166fc402f4fb539f528
Merge branch 'mlx5-ipsec-packet-offload-support-in-eswitch-mode'

Leon Romanovsky says:

====================
mlx5 IPsec packet offload support in eswitch mode

This series from Jianbo adds mlx5 IPsec packet offload support in eswitch
offloaded mode.

It works exactly like "regular" IPsec, nothing special, except
now users can switch to switchdev before adding IPsec rules.

 devlink dev eswitch set pci/0000:06:00.0 mode switchdev

Same configurations as here:

https://lore.kernel.org/netdev/cover.1670005543.git.leonro@nvidia.com/

Packet offload mode:
  ip xfrm state offload packet dev <if-name> dir <in|out>
  ip xfrm policy .... offload packet dev <if-name>
Crypto offload mode:
  ip xfrm state offload crypto dev <if-name> dir <in|out>
or (backward compatibility)
  ip xfrm state offload dev <if-name> dir <in|out>

v0: https://lore.kernel.org/all/cover.1689064922.git.leonro@nvidia.com
====================

Link: https://lore.kernel.org/r/cover.1690802064.git.leon@kernel.org
Signed-off-by: Jakub Kicinski <kuba@kernel.org>