• Steffen Klassert's avatar
    net: Add a xfrm validate function to validate_xmit_skb · f6e27114
    Steffen Klassert authored
    When we do IPsec offloading, we need a fallback for
    packets that were targeted to be IPsec offloaded but
    rerouted to a device that does not support IPsec offload.
    For that we add a function that checks the offloading
    features of the sending device and and flags the
    requirement of a fallback before it calls the IPsec
    output function. The IPsec output function adds the IPsec
    trailer and does encryption if needed.
    Signed-off-by: default avatarSteffen Klassert <steffen.klassert@secunet.com>
    f6e27114
dev.c 210 KB