net/mlx5e: Simulate missing IPsec TX limits hardware functionality

Browse source

ConnectX-7 devices don't have ability to send TX hard/soft limits
events. As a possible workaround, let's rely on existing infrastructure
and use periodic check of cached flow counter. In these periodic checks,
we call to xfrm_state_check_expire() to check and mark state accordingly.

Once the state is marked as XFRM_STATE_EXPIRED, the SA flow rule is
changed to drop all the traffic.

Link: https://lore.kernel.org/r/94a5d82c0c399747117d8a558f9beebfbcf26154.1680162300.git.leonro@nvidia.com
Signed-off-by: Leon Romanovsky <leonro@nvidia.com>

...

This commit is contained in:

Leon Romanovsky 2023-03-30 11:02:31 +03:00 • committed by Leon Romanovsky

parent 4562116f8a

commit b2f7b01d36

3 changed files with 99 additions and 5 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

65

drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.c

View file

8

drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.h

View file

31

drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_fs.c

View file