From: Ilan Tayari <il...@mellanox.com> Hi Steffen,
This patchset introduces several improvements to IPSec offload. We would like to see these merged in 4.14. Patches 1-4 add RX checksum offload support. This gives a big performance boost. These patches have been submitted before but were not merged. Note that patches 1-2 changed slightly with a call to skb_pull_rcsum. Patch 5 adds automatic loading of XFRM offload modules, but only if crypto-offload is explicitly requested by user. This avoid issues in the field where user forgets to load the module manually and so crypto-offload does not happen. Patch 6 fixes the leftover xfrm_offload in RX SKBs. This solves some issues with forwarding. Patch 7 allows IPSec GSO on local sockets, with or without crypto-offload. This also gives a large performance boost. Thanks, Ilan. Ilan Tayari (4): esp4: Support RX checksum with crypto offload esp6: Support RX checksum with crypto offload xfrm: Auto-load xfrm offload modules xfrm: Clear RX SKB secpath xfrm_offload Steffen Klassert (1): net: Allow IPsec GSO for local sockets Yossi Kuperman (2): xfrm6: Fix CHECKSUM_COMPLETE after IPv6 header push esp6: Fix RX checksum after header pull include/net/xfrm.h | 23 ++++++++++++++++++++++- net/core/sock.c | 2 +- net/ipv4/esp4.c | 14 +++++++++++--- net/ipv4/esp4_offload.c | 5 ++++- net/ipv6/esp6.c | 16 +++++++++++++--- net/ipv6/esp6_offload.c | 5 ++++- net/ipv6/xfrm6_input.c | 4 +++- net/xfrm/xfrm_device.c | 2 +- net/xfrm/xfrm_input.c | 2 ++ net/xfrm/xfrm_state.c | 16 ++++++++++++---- net/xfrm/xfrm_user.c | 2 +- 11 files changed, 74 insertions(+), 17 deletions(-) -- 2.11.0
