netdev - Re: [PATCH net-next V4 2/8] devlink: Expose port function commands to control IPsec packet offloads

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri, 25 Aug 2023 09:16:00 +0200
From: Jiri Pirko <jiri@...nulli.us>
To: Saeed Mahameed <saeed@...nel.org>
Cc: "David S. Miller" <davem@...emloft.net>,
	Jakub Kicinski <kuba@...nel.org>, Paolo Abeni <pabeni@...hat.com>,
	Eric Dumazet <edumazet@...gle.com>,
	Saeed Mahameed <saeedm@...dia.com>, netdev@...r.kernel.org,
	Tariq Toukan <tariqt@...dia.com>, Jiri Pirko <jiri@...dia.com>,
	Leon Romanovsky <leonro@...dia.com>,
	Dima Chumak <dchumak@...dia.com>
Subject: Re: [PATCH net-next V4 2/8] devlink: Expose port function commands
 to control IPsec packet offloads

Fri, Aug 25, 2023 at 08:28:30AM CEST, saeed@...nel.org wrote:
>From: Dima Chumak <dchumak@...dia.com>
>
>Expose port function commands to enable / disable IPsec packet offloads,
>this is used to control the port IPsec capabilities.
>
>When IPsec packet is disabled for a function of the port (default),
>function cannot offload IPsec packet operations (encapsulation and XFRM
>policy offload). When enabled, IPsec packet operations can be offloaded
>by the function of the port, which includes crypto operation
>(Encrypt/Decrypt), IPsec encapsulation and XFRM state and policy
>offload.
>
>Example of a PCI VF port which supports IPsec packet offloads:
>
>$ devlink port show pci/0000:06:00.0/1
>    pci/0000:06:00.0/1: type eth netdev enp6s0pf0vf0 flavour pcivf pfnum 0 vfnum 0
>        function:
>        hw_addr 00:00:00:00:00:00 roce enable ipsec_packet disable
>
>$ devlink port function set pci/0000:06:00.0/1 ipsec_packet enable
>
>$ devlink port show pci/0000:06:00.0/1
>    pci/0000:06:00.0/1: type eth netdev enp6s0pf0vf0 flavour pcivf pfnum 0 vfnum 0
>        function:
>        hw_addr 00:00:00:00:00:00 roce enable ipsec_packet enable
>
>Signed-off-by: Dima Chumak <dchumak@...dia.com>
>Signed-off-by: Leon Romanovsky <leonro@...dia.com>
>Signed-off-by: Saeed Mahameed <saeedm@...dia.com>

Reviewed-by: Jiri Pirko <jiri@...dia.com>