net/mlx5: Don't hide fallback to software IPsec in FS code

Browse source

The XFRM code performs fallback to software IPsec if .xdo_dev_state_add()
returns -EOPNOTSUPP. This is what mlx5 did very deep in its stack trace,
despite have all the knowledge that IPsec is not going to work in very
early stage.

This is achieved by making sure that priv->ipsec pointer is valid for
fully working and supported hardware crypto IPsec engine.

In case, the hardware IPsec is not supported, the XFRM code will set NULL
to xso->dev and it will prevent from calls to various .xdo_dev_state_*()
callbacks.

Reviewed-by: Raed Salem <raeds@nvidia.com>
Signed-off-by: Leon Romanovsky <leonro@nvidia.com>
Signed-off-by: Saeed Mahameed <saeedm@nvidia.com>

...

This commit is contained in:

Leon Romanovsky 2022-03-01 11:55:25 +02:00 • committed by Saeed Mahameed

parent 9af1968ee1

commit 021a429bdb

2 changed files with 17 additions and 30 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

41

drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.c

View file

6

drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_fs.c

View file