kgess-mirror/freebsd-src
1
0
Fork 0
mirror of https://git.freebsd.org/src.git synced 2026-01-16 23:02:24 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

ipsec_offload: switch TF2_IPSEC_TSO on/off as appropriate on output

Browse source 
after the interface ipsec_accel method if_hwassist() is consulted.

Sponsored by:	NVIDIA networking
This commit is contained in:
Konstantin Belousov 2024-03-06 17:53:10 +02:00
parent 240b7bfe56
commit e6e2c0a5ef
1 changed files with 25 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

33
sys/netipsec/ipsec_offload.c
View file

@ -47,6 +47,7 @@
#include <netinet/ip6.h>
#include <netinet6/ip6_var.h>
#include <netinet/in_pcb.h>
#include <netinet/tcp_var.h>
#include <netipsec/key.h>
#include <netipsec/keydb.h>
@ -803,26 +804,31 @@ ipsec_accel_output(struct ifnet *ifp, struct mbuf *m, struct inpcb *inp,
{
struct ifp_handle_sav *i;
struct ip *ip;
struct tcpcb *tp;
u_long ip_len, skip;
bool res;
*hwassist = 0;
res = false;
if (ifp == NULL)
return (false);
return (res);
M_ASSERTPKTHDR(m);
NET_EPOCH_ASSERT();
if (sav == NULL)
return (ipsec_accel_output_tag(m, IPSEC_ACCEL_DRV_SPI_BYPASS));
if (sav == NULL) {
res = ipsec_accel_output_tag(m, IPSEC_ACCEL_DRV_SPI_BYPASS);
goto out;
}
i = ipsec_accel_is_accel_sav_ptr(sav, ifp);
if (i == NULL)
return (false);
goto out;
if ((m->m_pkthdr.csum_flags & CSUM_TSO) == 0) {
ip_len = m->m_pkthdr.len;
if (ip_len + i->hdr_ext_size > mtu)
return (false);
goto out;
switch (af) {
case AF_INET:
ip = mtod(m, struct ip *);
@ -835,11 +841,11 @@ ipsec_accel_output(struct ifnet *ifp, struct mbuf *m, struct inpcb *inp,
__unreachable();
}
if (!ipsec_accel_output_pad(m, sav, skip, mtu))
return (false);
goto out;
}
if (!ipsec_accel_output_tag(m, i->drv_spi))
return (false);
goto out;
ipsec_accel_sa_recordxfer(sav, m);
key_freesav(&sav);
@ -848,7 +854,18 @@ ipsec_accel_output(struct ifnet *ifp, struct mbuf *m, struct inpcb *inp,
*hwassist = ifp->if_ipsec_accel_m->if_hwassist(ifp, sav,
i->drv_spi, i->ifdata);
return (true);
res = true;
out:
if (inp != NULL && inp->inp_pcbinfo == &V_tcbinfo) {
INP_WLOCK_ASSERT(inp);
tp = (struct tcpcb *)inp;
if (res && (*hwassist & (CSUM_TSO | CSUM_IP6_TSO)) != 0) {
tp->t_flags2 |= TF2_IPSEC_TSO;
} else {
tp->t_flags2 &= ~TF2_IPSEC_TSO;
}
}
return (res);
}
struct ipsec_accel_in_tag *