diff options
| author | Jianbo Liu <jianbol@nvidia.com> | 2023-07-31 14:28:16 +0300 |
|---|---|---|
| committer | Jakub Kicinski <kuba@kernel.org> | 2023-08-02 18:37:29 -0700 |
| commit | 1762f132d54200ffa008e86f9f6c96ab4ee3fb71 (patch) | |
| tree | 4268cec31360a47ca08556a55952a96c5eef9d9f /include/linux/mlx5 | |
| parent | 6e125265d52d491781e6301b80f885f2453d2e65 (diff) | |
| download | linux-stable-1762f132d54200ffa008e86f9f6c96ab4ee3fb71.tar.gz linux-stable-1762f132d54200ffa008e86f9f6c96ab4ee3fb71.tar.bz2 linux-stable-1762f132d54200ffa008e86f9f6c96ab4ee3fb71.zip | |
net/mlx5e: Support IPsec packet offload for RX in switchdev mode
As decryption must be done first, add new prio for IPsec offload in
FDB, and put it just lower than BYPASS prio and higher than TC prio.
Three levels are added for RX. The first one is for ip xfrm policy. SA
table is created in the second level for ip xfrm state. The status
table is created in the last to check the decryption result. If
success, packets continue with the next process, or dropped otherwise.
For now, the set of reg c1 is removed for swtichdev mode, and the
datapath process will be added in the next patch.
Signed-off-by: Jianbo Liu <jianbol@nvidia.com>
Signed-off-by: Leon Romanovsky <leonro@nvidia.com>
Link: https://lore.kernel.org/r/c91063554cf643fb50b99cf093e8a9bf11729de5.1690802064.git.leon@kernel.org
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'include/linux/mlx5')
| -rw-r--r-- | include/linux/mlx5/fs.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/include/linux/mlx5/fs.h b/include/linux/mlx5/fs.h index 2cb404c7ea13..6b1fa94f69c8 100644 --- a/include/linux/mlx5/fs.h +++ b/include/linux/mlx5/fs.h @@ -109,6 +109,7 @@ enum mlx5_flow_namespace_type { enum { FDB_BYPASS_PATH, + FDB_CRYPTO_INGRESS, FDB_TC_OFFLOAD, FDB_FT_OFFLOAD, FDB_TC_MISS, |