net/mlx5: Configure MACsec steering for ingress RoCEv2 traffic

Browse source

Add steering tables/rules to check if the decrypted traffic is RoCEv2,
if so copy reg_b_metadata to a temp reg and forward it to RDMA_RX domain.
The rules are added once the MACsec device is assigned an IP address
where we verify that the packet ip is for MACsec device and that the temp
reg has MACsec operation and a valid SCI inside.

Signed-off-by: Patrisious Haddad <phaddad@nvidia.com>
Signed-off-by: Leon Romanovsky <leonro@nvidia.com>

...

This commit is contained in:

Patrisious Haddad 2022-08-11 06:09:18 +03:00 • committed by Leon Romanovsky

parent 9b240d1094

commit 8c14a2c7c9

2 changed files with 352 additions and 9 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

2

drivers/net/ethernet/mellanox/mlx5/core/fs_core.c

View file

359

drivers/net/ethernet/mellanox/mlx5/core/lib/macsec_fs.c

View file