<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv="Content-Type" content="text/html; charset=us-ascii"> <meta name="Generator" content="Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word"> <div class="WordSection1"> This pull request is for IPsec full offload in DPU. Most of the changes are already in upstream. In this change, it contains 32 commits include 4 reverts, 27 cherry-picks and 1 conflict resolve. Most of the commits are clean cherry-picks. The conflicts are mainly focus on driver part and netdev_***() related functions. I ignored driver change and keep dev_***() unchanged.<o:p></o:p> <o:p> </o:p> BugLink: <a href="https://bugs.launchpad.net/bugs/2034578">https://bugs.launchpad.net/bugs/2034578</a><o:p></o:p> <o:p> </o:p> ----------------------------------------------------------------<o:p></o:p> <o:p> </o:p> The following changes since commit e0359e9ebd0d9c01b12185b803eb30783c42937a:<o:p></o:p> <o:p> </o:p> UBUNTU: Ubuntu-bluefield-5.15.0-1023.25 (2023-08-22 18:15:20 +0200)<o:p></o:p> <o:p> </o:p> are available in the git repository at:<o:p></o:p> <o:p> </o:p> <a href="https://git.launchpad.net/~yifeid/ubuntu/+source/linux-bluefield"> https://git.launchpad.net/~yifeid/ubuntu/+source/linux-bluefield</a> master-next-ipsec-full-offload<o:p></o:p> <o:p> </o:p> for you to fetch changes up to a9272649ca09afb0178dcccbf901ebe011a64cb2:<o:p></o:p> <o:p> </o:p> UBUNTU: SAUCE: xfrm: fix conflict for netdev and tx stats (2023-09-06 09:38:07 -0500)<o:p></o:p> <o:p> </o:p> ----------------------------------------------------------------<o:p></o:p> Edward Cree (1):<o:p></o:p> netlink: add support for formatted extack messages<o:p></o:p> <o:p> </o:p> Leon Romanovsky (21):<o:p></o:p> xfrm: delete not used number of external headers<o:p></o:p> xfrm: rename xfrm_state_offload struct to allow reuse<o:p></o:p> xfrm: store and rely on direction to construct offload flags<o:p></o:p> xfrm: drop not needed flags variable in XFRM offload struct<o:p></o:p> xfrm: Remove not-used total variable<o:p></o:p> xfrm: add new packet offload flag<o:p></o:p> xfrm: allow state packet offload mode<o:p></o:p> xfrm: add an interface to offload policy<o:p></o:p> xfrm: add TX datapath support for IPsec packet offload mode<o:p></o:p> xfrm: speed-up lookup of HW policies<o:p></o:p> xfrm: add support to HW update soft and hard limits<o:p></o:p> xfrm: document IPsec packet offload mode<o:p></o:p> xfrm: extend add policy callback to set failure reason<o:p></o:p> xfrm: extend add state callback to set failure reason<o:p></o:p> netlink: provide an ability to set default extack message<o:p></o:p> xfrm: don't require advance ESN callback for packet offload<o:p></o:p> xfrm: release all offloaded policy memory<o:p></o:p> xfrm: add missed call to delete offloaded policies<o:p></o:p> xfrm: Support UDP encapsulation in packet offload mode<o:p></o:p> xfrm: delete offloaded policy<o:p></o:p> xfrm: don't skip free of empty state in acquire policy<o:p></o:p> <o:p> </o:p> Raed Salem (2):<o:p></o:p> xfrm: add new device offload acquire flag<o:p></o:p> xfrm: copy_to_user_state fetch offloaded SA packets/bytes statistics<o:p></o:p> <o:p> </o:p> Sabrina Dubroca (3):<o:p></o:p> xfrm: add extack support to xfrm_dev_state_add<o:p></o:p> xfrm: add extack to verify_policy_type<o:p></o:p> xfrm: propagate extack to all netlink doit handlers<o:p></o:p> <o:p> </o:p> Tony Duan (5):<o:p></o:p> Revert "UBUNTU: SAUCE: net/xfrm: Fix XFRM flags validity check"<o:p></o:p> Revert "UBUNTU: SAUCE: xfrm: Check if_id in xfrm full offload"<o:p></o:p> Revert "UBUNTU: SAUCE: net/xfrm: Add support for xfrm full offload"<o:p></o:p> Revert "UBUNTU: SAUCE: net/xfrm: IPsec full offload support for lifetime limit"<o:p></o:p> UBUNTU: SAUCE: xfrm: fix conflict for netdev and tx stats<o:p></o:p> <o:p> </o:p> Documentation/networking/xfrm_device.rst | 64 ++++++++++++++++++++++----<o:p></o:p> drivers/net/bonding/bond_main.c | 8 ++--<o:p></o:p> drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c | 5 +-<o:p></o:p> drivers/net/ethernet/chelsio/inline_crypto/ch_ipsec/chcr_ipsec.c | 10 +++-<o:p></o:p> drivers/net/ethernet/intel/ixgbe/ixgbe_ipsec.c | 11 ++++-<o:p></o:p> drivers/net/ethernet/intel/ixgbevf/ipsec.c | 9 +++-<o:p></o:p> drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.c | 7 ++-<o:p></o:p> drivers/net/netdevsim/ipsec.c | 8 +++-<o:p></o:p> include/linux/netdevice.h | 6 ++-<o:p></o:p> include/linux/netlink.h | 39 +++++++++++++++-<o:p></o:p> include/net/xfrm.h | 99 +++++++++++++++++++++++++++++++++++----<o:p></o:p> include/uapi/linux/xfrm.h | 7 ++-<o:p></o:p> net/bridge/br_switchdev.c | 10 ++--<o:p></o:p> net/xfrm/xfrm_device.c | 146 +++++++++++++++++++++++++++++++++++++++++++++++++---------<o:p></o:p> net/xfrm/xfrm_output.c | 22 +++------<o:p></o:p> net/xfrm/xfrm_policy.c | 127 +++++++++++++++++++++++++++++++++-----------------<o:p></o:p> net/xfrm/xfrm_state.c | 215 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++------------------<o:p></o:p> net/xfrm/xfrm_user.c | 121 +++++++++++++++++++++++++++++++++---------------<o:p></o:p> 18 files changed, 708 insertions(+), 206 deletions(-)<o:p></o:p> </div> </body> </html>