ACK: [SRU][J:linux-bluefield][PULL] Support IPsec full offload

[Bartlomiej Zolnierkiewicz]

Acked-by: Bartlomiej Zolnierkiewicz <bartlomiej.zolnierkiewicz at canonical.com>

On Fri, Sep 8, 2023 at 10:03 AM Tony Duan <yifeid at nvidia.com> wrote:
>
> This pull request is for IPsec full offload in DPU. Most of the changes are already in upstream. In this change, it contains 32 commits include 4 reverts, 27 cherry-picks and 1 conflict resolve. Most of the commits are clean cherry-picks. The conflicts are mainly focus on driver part and netdev_***() related functions. I ignored driver change and keep dev_***() unchanged.
>
>
>
> BugLink: https://bugs.launchpad.net/bugs/2034578
>
>
>
> ----------------------------------------------------------------
>
>
>
> The following changes since commit e0359e9ebd0d9c01b12185b803eb30783c42937a:
>
>
>
>   UBUNTU: Ubuntu-bluefield-5.15.0-1023.25 (2023-08-22 18:15:20 +0200)
>
>
>
> are available in the git repository at:
>
>
>
>   https://git.launchpad.net/~yifeid/ubuntu/+source/linux-bluefield master-next-ipsec-full-offload
>
>
>
> for you to fetch changes up to a9272649ca09afb0178dcccbf901ebe011a64cb2:
>
>
>
>   UBUNTU: SAUCE: xfrm: fix conflict for netdev and tx stats (2023-09-06 09:38:07 -0500)
>
>
>
> ----------------------------------------------------------------
>
> Edward Cree (1):
>
>       netlink: add support for formatted extack messages
>
>
>
> Leon Romanovsky (21):
>
>       xfrm: delete not used number of external headers
>
>       xfrm: rename xfrm_state_offload struct to allow reuse
>
>       xfrm: store and rely on direction to construct offload flags
>
>       xfrm: drop not needed flags variable in XFRM offload struct
>
>       xfrm: Remove not-used total variable
>
>       xfrm: add new packet offload flag
>
>       xfrm: allow state packet offload mode
>
>       xfrm: add an interface to offload policy
>
>       xfrm: add TX datapath support for IPsec packet offload mode
>
>       xfrm: speed-up lookup of HW policies
>
>       xfrm: add support to HW update soft and hard limits
>
>       xfrm: document IPsec packet offload mode
>
>       xfrm: extend add policy callback to set failure reason
>
>       xfrm: extend add state callback to set failure reason
>
>       netlink: provide an ability to set default extack message
>
>       xfrm: don't require advance ESN callback for packet offload
>
>       xfrm: release all offloaded policy memory
>
>       xfrm: add missed call to delete offloaded policies
>
>       xfrm: Support UDP encapsulation in packet offload mode
>
>       xfrm: delete offloaded policy
>
>       xfrm: don't skip free of empty state in acquire policy
>
>
>
> Raed Salem (2):
>
>       xfrm: add new device offload acquire flag
>
>       xfrm: copy_to_user_state fetch offloaded SA packets/bytes statistics
>
>
>
> Sabrina Dubroca (3):
>
>       xfrm: add extack support to xfrm_dev_state_add
>
>       xfrm: add extack to verify_policy_type
>
>       xfrm: propagate extack to all netlink doit handlers
>
>
>
> Tony Duan (5):
>
>       Revert "UBUNTU: SAUCE: net/xfrm: Fix XFRM flags validity check"
>
>       Revert "UBUNTU: SAUCE: xfrm: Check if_id in xfrm full offload"
>
>       Revert "UBUNTU: SAUCE: net/xfrm: Add support for xfrm full offload"
>
>       Revert "UBUNTU: SAUCE: net/xfrm: IPsec full offload support for lifetime limit"
>
>       UBUNTU: SAUCE: xfrm: fix conflict for netdev and tx stats
>
>
>
> Documentation/networking/xfrm_device.rst                         |  64 ++++++++++++++++++++++----
>
> drivers/net/bonding/bond_main.c                                  |   8 ++--
>
> drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c                  |   5 +-
>
> drivers/net/ethernet/chelsio/inline_crypto/ch_ipsec/chcr_ipsec.c |  10 +++-
>
> drivers/net/ethernet/intel/ixgbe/ixgbe_ipsec.c                   |  11 ++++-
>
> drivers/net/ethernet/intel/ixgbevf/ipsec.c                       |   9 +++-
>
> drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.c         |   7 ++-
>
> drivers/net/netdevsim/ipsec.c                                    |   8 +++-
>
> include/linux/netdevice.h                                        |   6 ++-
>
> include/linux/netlink.h                                          |  39 +++++++++++++++-
>
> include/net/xfrm.h                                               |  99 +++++++++++++++++++++++++++++++++++----
>
> include/uapi/linux/xfrm.h                                        |   7 ++-
>
> net/bridge/br_switchdev.c                                        |  10 ++--
>
> net/xfrm/xfrm_device.c                                           | 146 +++++++++++++++++++++++++++++++++++++++++++++++++---------
>
> net/xfrm/xfrm_output.c                                           |  22 +++------
>
> net/xfrm/xfrm_policy.c                                           | 127 +++++++++++++++++++++++++++++++++-----------------
>
> net/xfrm/xfrm_state.c                                            | 215 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++------------------
>
> net/xfrm/xfrm_user.c                                             | 121 +++++++++++++++++++++++++++++++++---------------
>
> 18 files changed, 708 insertions(+), 206 deletions(-)