• David S. Miller's avatar
    Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next · 6b633e82
    David S. Miller authored
    Steffen Klassert says:
    
    ====================
    pull request (net-next): ipsec-next 2017-04-20
    
    This adds the basic infrastructure for IPsec hardware
    offloading, it creates a configuration API and adjusts
    the packet path.
    
    1) Add the needed netdev features to configure IPsec offloads.
    
    2) Add the IPsec hardware offloading API.
    
    3) Prepare the ESP packet path for hardware offloading.
    
    4) Add gso handlers for esp4 and esp6, this implements
       the software fallback for GSO packets.
    
    5) Add xfrm replay handler functions for offloading.
    
    6) Change ESP to use a synchronous crypto algorithm on
       offloading, we don't have the option for asynchronous
       returns when we handle IPsec at layer2.
    
    7) Add a xfrm validate function to validate_xmit_skb. This
       implements the software fallback for non GSO packets.
    
    8) Set the inner_network and inner_transport members of
       the SKB, as well as encapsulation, to reflect the actual
       positions of these headers, and removes them only once
       encryption is done on the payload.
       From Ilan Tayari.
    
    9) Prepare the ESP GRO codepath for hardware offloading.
    
    10) Fix incorrect null pointer check in esp6.
        From Colin Ian King.
    
    11) Fix for the GSO software fallback path to detect the
        fallback correctly.
        From Ilan Tayari.
    
    Please pull or let me know if there are problems.
    ====================
    Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
    6b633e82
dev.c 210 KB