net/mlx5e: Add IPsec and ASO syndromes check in HW

Browse source

After IPsec decryption it isn't enough to only check the IPsec syndrome
but need to also check the ASO syndrome in order to verify that the
operation was actually successful.

Verify that both syndromes are actually zero and in case not drop the
packet and increment the appropriate flow counter for the drop reason.

Fixes: 6b5c45e16e ("net/mlx5e: Configure IPsec packet offload flow steering")
Signed-off-by: Patrisious Haddad <phaddad@nvidia.com>
Signed-off-by: Leon Romanovsky <leonro@nvidia.com>

...

This commit is contained in:

Patrisious Haddad 2023-09-24 11:50:31 +03:00 • committed by Saeed Mahameed

parent 5ad00dee43

commit dddb49b63d

2 changed files with 223 additions and 20 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

8

drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.h

View file

235

drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_fs.c

View file