[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <ZpJGM8z6mKtDH/Su@gauss3.secunet.de>
Date: Sat, 13 Jul 2024 11:17:39 +0200
From: Steffen Klassert <steffen.klassert@...unet.com>
To: Mike Yu <yumike@...gle.com>
CC: <netdev@...r.kernel.org>, <stanleyjhu@...gle.com>, <martinwu@...gle.com>,
<chiachangwang@...gle.com>
Subject: Re: [PATCH ipsec-next v4 0/4] Support IPsec crypto offload for IPv6
ESP and IPv4 UDP-encapsulated ESP data paths
On Fri, Jul 12, 2024 at 10:51:21AM +0800, Mike Yu wrote:
> Currently, IPsec crypto offload is enabled for GRO code path. However, there
> are other code paths where the XFRM stack is involved; for example, IPv6 ESP
> packets handled by xfrm6_esp_rcv() in ESP layer, and IPv4 UDP-encapsulated
> ESP packets handled by udp_rcv() in UDP layer.
>
> This patchset extends the crypto offload support to cover these two cases.
> This is useful for devices with traffic accounting (e.g., Android), where GRO
> can lead to inaccurate accounting on the underlying network. For example, VPN
> traffic might not be counted on the wifi network interface wlan0 if the packets
> are handled in GRO code path before entering the network stack for accounting.
>
> Below is the RX data path scenario the crypto offload can be applied to.
>
> +-----------+ +-------+
> | HW Driver |-->| wlan0 |--------+
> +-----------+ +-------+ |
> v
> +---------------+ +------+
> +------>| Network Stack |-->| Apps |
> | +---------------+ +------+
> | |
> | v
> +--------+ +------------+
> | ipsec1 |<--| XFRM Stack |
> +--------+ +------------+
>
> v3 -> v4:
> - Change the target tree to ipsec-next.
> v2 -> v3:
> - Correct ESP seq in esp_xmit().
> v1 -> v2:
> - Fix comment style.
>
> Mike Yu (4):
> xfrm: Support crypto offload for inbound IPv6 ESP packets not in GRO
> path
> xfrm: Allow UDP encapsulation in crypto offload control path
> xfrm: Support crypto offload for inbound IPv4 UDP-encapsulated ESP
> packet
> xfrm: Support crypto offload for outbound IPv4 UDP-encapsulated ESP
> packet
Series applied, thanks a lot Mike!
Powered by blists - more mailing lists