Hi Avi, You might review the slides and watch the presentations available at: https://www.netdevconf.org/2.2/session.html?klassert-ipsec-workshop
As far as the code you can review it directly in Jeff's tree at: https://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue.git/log/?h=dev-queue Thanks. - Alex On Wed, Jan 3, 2018 at 12:29 AM, Avi Cohen (A) <avi.co...@huawei.com> wrote: > Hi Nelson > > 1. Can you tell what is the status of ixgbe – ipsec offload patch’s? > > 2. Are there any ‘numbers’ of performance tests? Ipsec in SW v.s. > ipsec in HW ? > > 3. Where is the code for ipsec headers insertion/removal by SW ? is > this done in ip-stack ? hooks ? > > Thanks You (and Don and Todd) and Best Regards > Avi > > From: Fujinaka, Todd [mailto:todd.fujin...@intel.com] > Sent: Tuesday, 02 January, 2018 10:54 PM > To: Buchholz, Donald; Avi Cohen (A) > Subject: RE: [linux.n...@intel.com] x540 / 82599 IPsec offload - Linux ixgbe > driver > > We did not support IPsec offloads in Linux because the kernel maintainers > didn’t trust any crypto implementation that they couldn’t audit and told us > those patches wouldn’t be accepted. I don’t know if that’s changed. > > The implementation of IPsec offloads is being done by an Oracle engineer and > I would suggest contacting him directly with your questions. > > Todd Fujinaka > Software Application Engineer > Datacenter Engineering Group > Intel Corporation > todd.fujin...@intel.com<mailto:todd.fujin...@intel.com> > > From: Buchholz, Donald > Sent: Tuesday, January 2, 2018 11:15 AM > To: Avi Cohen <avi.co...@huawei.com<mailto:avi.co...@huawei.com>> > Subject: Re: [linux.n...@intel.com] x540 / 82599 IPsec offload - Linux ixgbe > driver > > > Hi Avi, > > We have not supported IPsec Offload in 'ixgbe' in the past > due to lack of demand. However, your timing in this matter > is perfect! Patches have been submitted to the intel-wired-lan > list and are currently under review in the ixgbe development > tree. We expect these to be in the linux-4.16 kernel. > > Patch series under review: > -- http://patchwork.ozlabs.org/project/intel-wired-lan/list/?series=19548 > > Patch series in intel-wired-lan email list: > -- > https://lists.osuosl.org/pipermail/intel-wired-lan/Week-of-Mon-20171218/thread.html > > I am copying this reply to an internal engineering list so the > development team is aware of your interest. > > Unfortunately this "linux.n...@intel.com"<mailto:linux.n...@intel.com> email > address isn't > well-monitored. Please use > "e1000-devel@lists.sourceforge.net"<mailto:e1000-devel@lists.sourceforge.net> > for any additional questions about the Linux drivers for any > Intel (wired) Ethernet device. > -- https://sourceforge.net/p/e1000/mailman/ > > Best Regards, > - Don Buchholz > - Network SW Engineer > - Intel Corporation > - DCG/CG/ND/SW Core/Open Source > > > > ________________________________ > > Date: Sun, 31 Dec 2017 14:54:54 +0000 > From: "Avi Cohen (A)" <avi.co...@huawei.com><mailto:avi.co...@huawei.com> > To: "linux.n...@intel.com"<mailto:linux.n...@intel.com> > <linux.n...@intel.com><mailto:linux.n...@intel.com> > Subject: x540 / 82599 IPsec offload - Linux ixgbe driver > > Hello all, > I see in the datasheet of devices x540/82599 that it supports HW IPsec > offload - but there is no support in ixgbe SW driver. > Questions: > 1. Why there is no support in ixgbe ? > 2. From the datasheet I understand that TX packets send to HW should contain > IPsec headers > I think this should be handled in Linux ip-stack - is there any work done > there ? > 3. Is there other helpful documentation to implement SW for HW IPsec, > available ? > > Thank you and bets regards > Avi > ------------------------------------------------------------------------------ > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > _______________________________________________ > E1000-devel mailing list > E1000-devel@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/e1000-devel > To learn more about Intel® Ethernet, visit > http://communities.intel.com/community/wired ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ E1000-devel mailing list E1000-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/e1000-devel To learn more about Intel® Ethernet, visit http://communities.intel.com/community/wired
