net/mlx5e: Listen to ARP events to update IPsec L2 headers in tunnel mode

Browse source

In IPsec packet offload mode all header manipulations are performed by
hardware, which is responsible to add/remove L2 header with source and
destinations MACs.

CX-7 devices don't support offload of in-kernel routing functionality,
as such HW needs external help to fill other side MAC as it isn't
available for HW.

As a solution, let's listen to neigh ARP updates and reconfigure IPsec
rules on the fly once new MAC data information arrives.

Signed-off-by: Leon Romanovsky <leonro@nvidia.com>
Reviewed-by: Simon Horman <simon.horman@corigine.com>
Reviewed-by: Sridhar Samudrala <sridhar.samudrala@intel.com>
Signed-off-by: Jakub Kicinski <kuba@kernel.org>

...

This commit is contained in:

Leon Romanovsky 2023-04-13 15:29:25 +03:00 • committed by Jakub Kicinski

parent efbd31c4d8

commit 4c24272b4e

2 changed files with 130 additions and 7 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

132

drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.c

View file

5

drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.h

View file