opnsense-src/sys/dev/mlx5/mlx5_accel
Ariel Ehrenberg 205263ac25 mlx5en: support ipsec offload on vlan if
Add vlan tag match to RX FS SA and policy rules
and report SA lifetime counter on vlan interface
in case SA was installed on vlan interface

Existing code didn't have the net tag id as part of
the FS matching rules. This can cause applying
ipsec offload to the wrong interface.
This commit add tag id as part of FS matchers
and treat tag value 0 as no tag

Sponsored by:   NVidia networking
2024-08-20 15:42:13 +03:00
..
ipsec.h mlx5en: support ipsec offload on vlan if 2024-08-20 15:42:13 +03:00
mlx5_ipsec.c mlx5en: support ipsec offload on vlan if 2024-08-20 15:42:13 +03:00
mlx5_ipsec_fs.c mlx5en: support ipsec offload on vlan if 2024-08-20 15:42:13 +03:00
mlx5_ipsec_offload.c mlx5en: add IPSEC_OFFLOAD support 2024-07-30 18:00:04 +03:00
mlx5_ipsec_rxtx.c mlx5en: do now waste ipsec_accel_in_tag on non-ipsec packets rx 2024-08-20 15:42:12 +03:00