On Tue, Aug 01, 2017 at 12:49:03PM +0300, il...@mellanox.com wrote: > From: Ilan Tayari <il...@mellanox.com> > > Hi Steffen, > > This patchset introduces several improvements to IPSec offload. > We would like to see these merged in 4.14. > > Patches 1-4 add RX checksum offload support. > This gives a big performance boost. > These patches have been submitted before but were not merged. > Note that patches 1-2 changed slightly with a call to skb_pull_rcsum. > > Patch 5 adds automatic loading of XFRM offload modules, but only > if crypto-offload is explicitly requested by user. > This avoid issues in the field where user forgets to load the > module manually and so crypto-offload does not happen. > > Patch 6 fixes the leftover xfrm_offload in RX SKBs. > This solves some issues with forwarding. > > Patch 7 allows IPSec GSO on local sockets, with or without > crypto-offload. > This also gives a large performance boost. > > Thanks, > Ilan. > > Ilan Tayari (4): > esp4: Support RX checksum with crypto offload > esp6: Support RX checksum with crypto offload > xfrm: Auto-load xfrm offload modules > xfrm: Clear RX SKB secpath xfrm_offload > > Steffen Klassert (1): > net: Allow IPsec GSO for local sockets > > Yossi Kuperman (2): > xfrm6: Fix CHECKSUM_COMPLETE after IPv6 header push > esp6: Fix RX checksum after header pull
All applied to ipsec-next, thanks a lot!