net/mlx5: Configure IPsec steering for egress RoCEv2 MPV traffic

Browse source

Add steering tables/rules in RDMA_TX master domain, to forward all traffic
to IPsec crypto table in NIC domain.
But in case the traffic is coming from the slave, have to first send the
traffic to an alias table in order to switch gvmi and from there we can
go to the appropriate gvmi crypto table in NIC domain.

Signed-off-by: Patrisious Haddad <phaddad@nvidia.com>
Reviewed-by: Mark Bloch <mbloch@nvidia.com>
Link: https://lore.kernel.org/r/7ca5cf1ac5c6979359b8726e97510574e2b3d44d.1695296682.git.leon@kernel.org
Signed-off-by: Leon Romanovsky <leon@kernel.org>

...

This commit is contained in:

Patrisious Haddad 2023-09-21 15:10:33 +03:00 • committed by Leon Romanovsky

parent 69c08efcbe

commit dfbd229abe

4 changed files with 225 additions and 7 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

2

drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_fs.c

View file

4

drivers/net/ethernet/mellanox/mlx5/core/fs_core.c

View file

223

drivers/net/ethernet/mellanox/mlx5/core/lib/ipsec_fs_roce.c

View file

3

drivers/net/ethernet/mellanox/mlx5/core/lib/ipsec_fs_roce.h

View file