Currently when CONFIG_TLS_DEVICE is set each time kTLS
connection is opened and the offload is not successful
(either because the underlying device doesn't support
it or e.g. it's tables are full) a rate limited error
will be printed to the logs.

There is nothing wrong with failing TLS offload.  SW
path will process the packets just fine, avoid the
noisy messages by demoting them from error to debug
level.

Signed-off-by: Jakub Kicinski <jakub.kicin...@netronome.com>
Reviewed-by: Reviewed-by: Simon Horman <simon.hor...@netronome.com>
---
 net/tls/tls_device.c | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/net/tls/tls_device.c b/net/tls/tls_device.c
index 9f3bdbc1e593..9d67989ab7a7 100644
--- a/net/tls/tls_device.c
+++ b/net/tls/tls_device.c
@@ -865,8 +865,8 @@ int tls_set_device_offload_rx(struct sock *sk, struct 
tls_context *ctx)
        }
 
        if (!(netdev->features & NETIF_F_HW_TLS_RX)) {
-               pr_err_ratelimited("%s: netdev %s with no TLS offload\n",
-                                  __func__, netdev->name);
+               pr_debug_ratelimited("%s: netdev %s with no TLS offload\n",
+                                    __func__, netdev->name);
                rc = -ENOTSUPP;
                goto release_netdev;
        }
@@ -895,8 +895,8 @@ int tls_set_device_offload_rx(struct sock *sk, struct 
tls_context *ctx)
                                             &ctx->crypto_recv.info,
                                             tcp_sk(sk)->copied_seq);
        if (rc) {
-               pr_err_ratelimited("%s: The netdev has refused to offload this 
socket\n",
-                                  __func__);
+               pr_debug_ratelimited("%s: The netdev has refused to offload 
this socket\n",
+                                    __func__);
                goto free_sw_resources;
        }
 
-- 
2.21.0

Reply via email to