kernel/linux.git/include/net/xfrm.h, branch v4.11.8

esp: Add a software GRO codepath

2017-02-15T10:04:11+00:00

This patch adds GRO ifrastructure and callbacks for ESP on ipv4 and ipv6. In case the GRO layer detects an ESP packet, the esp{4,6}_gro_receive() function does a xfrm state lookup and calls the xfrm input layer if it finds a matching state. The packet will be decapsulated and reinjected it into layer 2. Signed-off-by: Steffen Klassert

xfrm: Extend the sec_path for IPsec offloading

2017-02-15T10:04:10+00:00

We need to keep per packet offloading informations across the layers. So we extend the sec_path to carry these for the input and output offload codepath. Signed-off-by: Steffen Klassert

xfrm: Export xfrm_parse_spi.

2017-02-15T08:39:49+00:00

We need it in the ESP offload handlers, so export it. Signed-off-by: Steffen Klassert

xfrm: Add a secpath_set helper.

2017-02-15T08:39:24+00:00

Add a new helper to set the secpath to the skb. This avoids code duplication, as this is used in multiple places. Signed-off-by: Steffen Klassert

xfrm: policy: remove family field

2017-02-09T09:22:18+00:00

Only needed it to register the policy backend at init time. Signed-off-by: Florian Westphal Signed-off-by: Steffen Klassert

xfrm: policy: remove garbage_collect callback

2017-02-09T09:22:18+00:00

Just call xfrm_garbage_collect_deferred() directly. This gets rid of a write to afinfo in register/unregister and allows to constify afinfo later on. Signed-off-by: Florian Westphal Signed-off-by: Steffen Klassert

xfrm: policy: xfrm_policy_unregister_afinfo can return void

2017-02-09T09:22:17+00:00

Nothing checks the return value. Also, the errors returned on unregister are impossible (we only support INET and INET6, so no way xfrm_policy_afinfo[afinfo->family] can be anything other than 'afinfo' itself). Signed-off-by: Florian Westphal Signed-off-by: Steffen Klassert

xfrm: input: constify xfrm_input_afinfo

2017-02-09T09:22:17+00:00

Nothing writes to these structures (the module owner was not used). While at it, size xfrm_input_afinfo[] by the highest existing xfrm family (INET6), not AF_MAX. Signed-off-by: Florian Westphal Signed-off-by: Steffen Klassert

esp4: Avoid skb_cow_data whenever possible

2017-01-17T09:22:57+00:00

This patch tries to avoid skb_cow_data on esp4. On the encrypt side we add the IPsec tailbits to the linear part of the buffer if there is space on it. If there is no space on the linear part, we add a page fragment with the tailbits to the buffer and use separate src and dst scatterlists. On the decrypt side, we leave the buffer as it is if it is not cloned. With this, we can avoid a linearization of the buffer in most of the cases. Joint work with: Sowmini Varadhan Ilan Tayari Signed-off-by: Sowmini Varadhan Signed-off-by: Ilan Tayari Signed-off-by: Steffen Klassert

xfrm: add and use xfrm_state_afinfo_get_rcu

2017-01-10T09:57:13+00:00

xfrm_init_tempstate is always called from within rcu read side section. We can thus use a simpler function that doesn't call rcu_read_lock again. While at it, also make xfrm_init_tempstate return value void, the return value was never tested. A followup patch will replace remaining callers of xfrm_state_get_afinfo with xfrm_state_afinfo_get_rcu variant and then remove the 'old' get_afinfo interface. Signed-off-by: Florian Westphal Signed-off-by: Steffen Klassert